Message ID | 20210325093036.3270101-1-peng.fan@oss.nxp.com |
---|---|
Headers | show |
Series | imx: hab/caam new feature and update | expand |
On 3/25/2021 11:32 AM, Peng Fan (OSS) wrote: > From: Peng <peng.fan@nxp.com> > > This patchset is to upstream NXP downstream caam, hab features I don't think adding yet another caam driver (drivers/crypto/fsl_caam.c) is a good idea. Instead existing driver (drivers/crypto/fsl/*) should be extended / modified. > One more patch is to update maintainer for imx8mn_evk board. > > Aymen Sghaier (6): > crypto: caam: Add CAAM support to i.MX8M platforms > crypto: caam: Fix build warnings pointer casting > crypto: Add blob command support for i.MX8M platforms > crypto: caam: Fix pointer size to 32bit for i.MX8M > crypto: caam: Add secure memory vid 3 support > crypto: caam: RNG4 TRNG errata > > Breno Lima (13): > imx: imx7 Support for Manufacturing Protection > imx: Avoid hardcoded output ring size register offset (ORSR) > imx: Ensure CAAM clock is enabled prior getting out_jr_size > imx: Avoid hardcoded Job Ring Max size > imx: hab: Enable hab.c to authenticate additional images in open > configuration > imx: hab: Check if IVT header is HABv4 > mx7ulp: hab: Add hab_status command for HABv4 M4 boot > imx: hab: Fix build warnings in 32-bit targets > crypto: fsl: blob: Flush dcache range for destination address > mx6dq: hab: Fix chip version in hab.h code > cmd: blob: Add IMX_HAB and CAAM supported SoCs as dependency > cmd: blob: Instantiate RNG before running CMD_BLOB > fsl_mfgprot: Fix typo in sign_mppubk() > > Clement Faure (2): > imx8m: Add DEK blob encapsulation for imx8m > imx8: Add DEK blob encapsulation > > Clement Le Marquis (1): > imx: caam: new u-boot command to set PRIBLOB bitfield from CAAM SCFGR > register to 0x3 > > Franck LENORMAND (3): > crypto: caam: change JR running loop > caam: enable support for iMX7ULP > imx7ulp: Enable support for cmd blob > > Peng (1): > imx8mn: evk: update MAINTAINERS > > Peng Fan (2): > imx8m: add regs used by CAAM > imx: HAB: Update hab codes to support ARM64 and i.MX8M > > Utkarsh Gupta (2): > imx: HAB: Validate IVT before authenticating image > imx: hab: Display All HAB events via hab_status command > > Ye Li (7): > imx: hab: Add function to authenticate kernel image > hab: Change calling to ROM API failsafe > imx: HAB: Add support for iMX8MM > iMX8M: Add support to enable CONFIG_IMX_HAB > imx: cmd_dek: Enable DEK only for chips supporting CAAM > crypto: caam: Add fsl caam driver > crypto: fsl: refactor for 32 bit version CAAM support on ARM64 > There are several patches fixing newly added code. Internal development history is of little value, fixes should be squashed. Horia
From: Peng <peng.fan@nxp.com> This patchset is to upstream NXP downstream caam, hab features One more patch is to update maintainer for imx8mn_evk board. Aymen Sghaier (6): crypto: caam: Add CAAM support to i.MX8M platforms crypto: caam: Fix build warnings pointer casting crypto: Add blob command support for i.MX8M platforms crypto: caam: Fix pointer size to 32bit for i.MX8M crypto: caam: Add secure memory vid 3 support crypto: caam: RNG4 TRNG errata Breno Lima (13): imx: imx7 Support for Manufacturing Protection imx: Avoid hardcoded output ring size register offset (ORSR) imx: Ensure CAAM clock is enabled prior getting out_jr_size imx: Avoid hardcoded Job Ring Max size imx: hab: Enable hab.c to authenticate additional images in open configuration imx: hab: Check if IVT header is HABv4 mx7ulp: hab: Add hab_status command for HABv4 M4 boot imx: hab: Fix build warnings in 32-bit targets crypto: fsl: blob: Flush dcache range for destination address mx6dq: hab: Fix chip version in hab.h code cmd: blob: Add IMX_HAB and CAAM supported SoCs as dependency cmd: blob: Instantiate RNG before running CMD_BLOB fsl_mfgprot: Fix typo in sign_mppubk() Clement Faure (2): imx8m: Add DEK blob encapsulation for imx8m imx8: Add DEK blob encapsulation Clement Le Marquis (1): imx: caam: new u-boot command to set PRIBLOB bitfield from CAAM SCFGR register to 0x3 Franck LENORMAND (3): crypto: caam: change JR running loop caam: enable support for iMX7ULP imx7ulp: Enable support for cmd blob Peng (1): imx8mn: evk: update MAINTAINERS Peng Fan (2): imx8m: add regs used by CAAM imx: HAB: Update hab codes to support ARM64 and i.MX8M Utkarsh Gupta (2): imx: HAB: Validate IVT before authenticating image imx: hab: Display All HAB events via hab_status command Ye Li (7): imx: hab: Add function to authenticate kernel image hab: Change calling to ROM API failsafe imx: HAB: Add support for iMX8MM iMX8M: Add support to enable CONFIG_IMX_HAB imx: cmd_dek: Enable DEK only for chips supporting CAAM crypto: caam: Add fsl caam driver crypto: fsl: refactor for 32 bit version CAAM support on ARM64 arch/arm/Kconfig | 6 + arch/arm/dts/imx8mm-evk-u-boot.dtsi | 7 + arch/arm/dts/imx8mn-ddr4-evk-u-boot.dtsi | 6 + arch/arm/dts/imx8mp-evk-u-boot.dtsi | 6 + arch/arm/include/asm/arch-imx/cpu.h | 1 + arch/arm/include/asm/arch-imx8/image.h | 11 + arch/arm/include/asm/arch-imx8m/clock.h | 1 + arch/arm/include/asm/arch-imx8m/imx-regs.h | 10 + arch/arm/include/asm/arch-mx7/crm_regs.h | 8 + arch/arm/include/asm/arch-mx7ulp/imx-regs.h | 12 + arch/arm/include/asm/mach-imx/hab.h | 37 +- arch/arm/mach-imx/Kconfig | 44 +- arch/arm/mach-imx/Makefile | 3 + arch/arm/mach-imx/cmd_dek.c | 262 ++++++- arch/arm/mach-imx/cmd_mfgprot.c | 150 ++++ arch/arm/mach-imx/hab.c | 417 +++++++++-- arch/arm/mach-imx/imx8/Kconfig | 1 + arch/arm/mach-imx/imx8m/Kconfig | 1 + arch/arm/mach-imx/imx8m/clock_imx8mm.c | 8 + arch/arm/mach-imx/imx8m/clock_imx8mq.c | 7 + arch/arm/mach-imx/mx7ulp/Kconfig | 1 + arch/arm/mach-imx/priblob.c | 33 + board/freescale/imx8mn_evk/MAINTAINERS | 3 +- cmd/Kconfig | 8 + cmd/Makefile | 1 + cmd/blob.c | 16 + cmd/cmd_fsl_caam.c | 88 +++ doc/imx/habv4/guides/mx6_mx7_secure_boot.txt | 25 + drivers/crypto/Makefile | 1 + drivers/crypto/fsl/Kconfig | 6 + drivers/crypto/fsl/Makefile | 4 +- drivers/crypto/fsl/desc.h | 49 +- drivers/crypto/fsl/desc_constr.h | 28 +- drivers/crypto/fsl/fsl_blob.c | 6 + drivers/crypto/fsl/fsl_hash.c | 6 +- drivers/crypto/fsl/fsl_mfgprot.c | 160 +++++ drivers/crypto/fsl/jobdesc.c | 16 +- drivers/crypto/fsl/jr.c | 53 +- drivers/crypto/fsl/jr.h | 11 +- drivers/crypto/fsl/type.h | 16 + drivers/crypto/fsl_caam.c | 720 +++++++++++++++++++ drivers/crypto/fsl_caam_internal.h | 230 ++++++ include/fsl_caam.h | 24 + include/fsl_sec.h | 54 +- 44 files changed, 2388 insertions(+), 169 deletions(-) create mode 100644 arch/arm/mach-imx/cmd_mfgprot.c create mode 100644 arch/arm/mach-imx/priblob.c create mode 100644 cmd/cmd_fsl_caam.c create mode 100644 drivers/crypto/fsl/fsl_mfgprot.c create mode 100644 drivers/crypto/fsl/type.h create mode 100644 drivers/crypto/fsl_caam.c create mode 100644 drivers/crypto/fsl_caam_internal.h create mode 100644 include/fsl_caam.h