mbox series

[0/4] arm: stm32mp: adapt the command stm32key for STM32MP13x

Message ID 20220915161141.301299-1-patrick.delaunay@foss.st.com
Headers show
Series arm: stm32mp: adapt the command stm32key for STM32MP13x | expand

Message

Patrick DELAUNAY Sept. 15, 2022, 4:11 p.m. UTC
And support the 2 keys for STM32MP13x
- PKHTH : Hash of the 8 ECC Public Keys Hashes Table
          (ECDSA is the authentication algorithm)
- EDMK : Encryption/Decryption Master Key

Only one key is supported for STM32MP15x
- PKH : Hash of the ECC Public Key
        (ECDSA is the authentication algorithm)

This STM32KEY command is used in STM32MP SoCs to provision the
keys in the correct OTP needed to activate secure boot features:
authentication and encryption.

See [1] for details

[1] STM32 MPU wiki
https://wiki.st.com/stm32mpu/wiki/How_to_use_U-Boot_stm32key_command



Patrick Delaunay (4):
  arm: stm32mp: add defines for BSEC_LOCK status in stm32key command
  arm: stm32mp: introduced read_close_status function in stm32key
    command
  arm: stm32mp: support several key in command stm32key
  arm: stm32mp: adapt the command stm32key for STM32MP13x

 arch/arm/mach-stm32mp/cmd_stm32key.c | 331 ++++++++++++++++++++-------
 1 file changed, 249 insertions(+), 82 deletions(-)

Comments

Patrice CHOTARD Sept. 23, 2022, 12:32 p.m. UTC | #1
Hi Patrick


On 9/15/22 18:11, Patrick Delaunay wrote:
> 
> And support the 2 keys for STM32MP13x
> - PKHTH : Hash of the 8 ECC Public Keys Hashes Table
>           (ECDSA is the authentication algorithm)
> - EDMK : Encryption/Decryption Master Key
> 
> Only one key is supported for STM32MP15x
> - PKH : Hash of the ECC Public Key
>         (ECDSA is the authentication algorithm)
> 
> This STM32KEY command is used in STM32MP SoCs to provision the
> keys in the correct OTP needed to activate secure boot features:
> authentication and encryption.
> 
> See [1] for details
> 
> [1] STM32 MPU wiki
> https://wiki.st.com/stm32mpu/wiki/How_to_use_U-Boot_stm32key_command
> 
> 
> 
> Patrick Delaunay (4):
>   arm: stm32mp: add defines for BSEC_LOCK status in stm32key command
>   arm: stm32mp: introduced read_close_status function in stm32key
>     command
>   arm: stm32mp: support several key in command stm32key
>   arm: stm32mp: adapt the command stm32key for STM32MP13x
> 
>  arch/arm/mach-stm32mp/cmd_stm32key.c | 331 ++++++++++++++++++++-------
>  1 file changed, 249 insertions(+), 82 deletions(-)
> 
For the series:

Applied on u-boot-stm32/next

Thanks
Patrice