From patchwork Mon Jan 25 04:58:45 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Joel Stanley X-Patchwork-Id: 1431102 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.ozlabs.org (lists.ozlabs.org [203.11.71.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 4DPHkm15Ppz9sB4 for ; Mon, 25 Jan 2021 16:01:04 +1100 (AEDT) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=RvpcUj2d; dkim-atps=neutral Received: from bilbo.ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) by lists.ozlabs.org (Postfix) with ESMTP id 4DPHkl6XZnzDqCM for ; Mon, 25 Jan 2021 16:01:03 +1100 (AEDT) X-Original-To: openbmc@lists.ozlabs.org Delivered-To: openbmc@lists.ozlabs.org Authentication-Results: lists.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=gmail.com (client-ip=2607:f8b0:4864:20::1030; helo=mail-pj1-x1030.google.com; envelope-from=joel.stan@gmail.com; receiver=) Authentication-Results: lists.ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=RvpcUj2d; dkim-atps=neutral Received: from mail-pj1-x1030.google.com (mail-pj1-x1030.google.com [IPv6:2607:f8b0:4864:20::1030]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4DPHhV3f5YzDqk8 for ; Mon, 25 Jan 2021 15:59:06 +1100 (AEDT) Received: by mail-pj1-x1030.google.com with SMTP id g15so7864138pjd.2 for ; Sun, 24 Jan 2021 20:59:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=6hAdmqqYoYF3i5KU3rzF00xA70QkJZQpVxhJgwalli4=; b=RvpcUj2dtpy+THpca77TWTbWDUmShi7XxQAilj1CceO3cmfh96lcwB9iZwTfsKudc+ McBGcYuCDZxJOEmvVFtZzalI4+UbZVklEx2ndmP3GsignC3BIXmkdyELoBzlxvGK7UJK DVxvoXkVL4xhfCQmXIg4KFgGLBVW+61ftfYscvSmsMJa/tLgxRWB7Ywf2m8Wnl1lXoj7 354hZiuU9J9xgapTm1OKknr25EXHCJBjeLmydm6gxOFWQznVyuNl0M8ECBQZmomYIlRA ZOGkZIK5KbEOPRjejcNNioPoiZEH1P7+n3xUo8JslEhWOhRLZd0LsR2OLorNng54sq9n YNMw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:subject:date:message-id :in-reply-to:references:mime-version:content-transfer-encoding; bh=6hAdmqqYoYF3i5KU3rzF00xA70QkJZQpVxhJgwalli4=; b=YbkQ0kSf0/5ef8n4KDy8Y9AVhTWsxvCBSIIKdsmhSaMgYRSxP/bQtvdFGwIgWMnSW+ 6u8SDRTt4ONrGQRHpRae1c3S9edK3JQ/ay23UxZqcwJXEHKcQD4GzLWKOJ59/d8G4UNZ oAh1YntbORSwdM5HCYmqokz2IA/2qkjNyDvmoBC33JvRZ4ukm+aF1xelVu8v/HPqzodV jnbTw+9GDsPj9IAzpaK4eKyFGW2DcsymbfORDDRQL+vk8SDcZ41zA4OFu4RaJv657/4t /+ufsggE4ehu4Uuue8YsSVBAiJ7miOU1xVY16oKjtMeMosUg8biAfVz7J6+L0S42IsVw 95tg== X-Gm-Message-State: AOAM533iaMZ6lscFodpO6kBAcdBfDVEYwO3a/lzrsFmldPojC9gq2dgr lHDkUL67rTBlnMzJ8qSa4DwTS5IY6i8= X-Google-Smtp-Source: ABdhPJyOS1x0DRnspOZ25YTZ1jmZkNAW3HOGSCu2nFMzfCxbOipbi6LF1YN3qLmOUHttC4ldfmzsow== X-Received: by 2002:a17:90a:f309:: with SMTP id ca9mr20011253pjb.11.1611550742527; Sun, 24 Jan 2021 20:59:02 -0800 (PST) Received: from localhost.localdomain ([45.124.203.14]) by smtp.gmail.com with ESMTPSA id gx21sm17525048pjb.31.2021.01.24.20.58.58 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 24 Jan 2021 20:59:01 -0800 (PST) From: Joel Stanley To: openbmc@lists.ozlabs.org, Andrew Jeffery , Ryan Chen Subject: [PATCH u-boot v2019.04-aspeed-openbmc 1/2] ast2600: Modify SPL SRAM layout Date: Mon, 25 Jan 2021 15:28:45 +1030 Message-Id: <20210125045846.448399-2-joel@jms.id.au> X-Mailer: git-send-email 2.29.2 In-Reply-To: <20210125045846.448399-1-joel@jms.id.au> References: <20210125045846.448399-1-joel@jms.id.au> MIME-Version: 1.0 X-BeenThere: openbmc@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development list for OpenBMC List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openbmc-bounces+incoming=patchwork.ozlabs.org@lists.ozlabs.org Sender: "openbmc" The SRAM is 89KB on the A1 and beyond: 0x1000_0000 to 0x1000_ffff: 64KB, with parity check 0x1001_0000 to 0x1001_5fff: 24KB, w/o parity check 0x1001_6000 to 0x1001_63ff: 1KB, w/o parity check, each byte write once Allow the image to fill the full 64KB payload size (max that secure boot supports) and plcae the stack at the top of the 24KB of SRAM. Signed-off-by: Joel Stanley --- include/configs/evb_ast2600a1_spl.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/include/configs/evb_ast2600a1_spl.h b/include/configs/evb_ast2600a1_spl.h index 69f3c32ce1d5..a39988820add 100644 --- a/include/configs/evb_ast2600a1_spl.h +++ b/include/configs/evb_ast2600a1_spl.h @@ -25,8 +25,8 @@ /* SPL */ #define CONFIG_SPL_TEXT_BASE 0x00000000 -#define CONFIG_SPL_MAX_SIZE 0x0000E800 -#define CONFIG_SPL_STACK 0x10010000 +#define CONFIG_SPL_MAX_SIZE 0x00010000 +#define CONFIG_SPL_STACK 0x10016000 #define CONFIG_SPL_BSS_START_ADDR 0x90000000 #define CONFIG_SPL_BSS_MAX_SIZE 0x00100000 From patchwork Mon Jan 25 04:58:46 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Joel Stanley X-Patchwork-Id: 1431103 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 4DPHmV3tj6z9sB4 for ; Mon, 25 Jan 2021 16:02:34 +1100 (AEDT) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=kY+cGcYD; dkim-atps=neutral Received: from bilbo.ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) by lists.ozlabs.org (Postfix) with ESMTP id 4DPHmV36jKzDqx9 for ; Mon, 25 Jan 2021 16:02:34 +1100 (AEDT) X-Original-To: openbmc@lists.ozlabs.org Delivered-To: openbmc@lists.ozlabs.org Authentication-Results: lists.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=gmail.com (client-ip=2607:f8b0:4864:20::62f; helo=mail-pl1-x62f.google.com; envelope-from=joel.stan@gmail.com; receiver=) Authentication-Results: lists.ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256 header.s=20161025 header.b=kY+cGcYD; dkim-atps=neutral Received: from mail-pl1-x62f.google.com (mail-pl1-x62f.google.com [IPv6:2607:f8b0:4864:20::62f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4DPHhZ2zLmzDqk8 for ; Mon, 25 Jan 2021 15:59:10 +1100 (AEDT) Received: by mail-pl1-x62f.google.com with SMTP id e9so6869768plh.3 for ; Sun, 24 Jan 2021 20:59:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:to:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=0OzqZ9Yu+eqWdRHtftw7X+Jv3RpCtnEi1KUqbsprzyY=; b=kY+cGcYDjuDpPHDHzHbeTjnXrWQcNj//oo2apWzzmLdyoQ8f5egmbCd3jWucQXYsSV UMdXAZSdNcVVmHs7S/fkPP6EsxyStq6LE3HnBT0/MI/dYC4wSGTGF4bxxhusUpgc/8Z5 STQs+sEDyRoiB/z2/VQlSbfwqzMUoYpCojZwc4S6vYaqki5MNyv0ZPe/DhXnSIibGM1d kl06WHFWsDdO7wlBWkSXAS19lLM9bmCh8s8+/CTgVTw4LuCmXThetNphBwS/vl3NCwjI TAE7lzMfcE4sbHPw9Ck3eJWlFs+aMkc4HqZDcftxTm+azIHvUBTeQVPdtAcPjB9u9WZ0 cENA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:subject:date:message-id :in-reply-to:references:mime-version:content-transfer-encoding; bh=0OzqZ9Yu+eqWdRHtftw7X+Jv3RpCtnEi1KUqbsprzyY=; b=aviYK8DlIrwRiy4VfsNLw2eSm2qDfpk9kEq3q+LWVGIIERUOF4OYHdnmAQ9A+VVG5c 8Sxa6gWt7pv+Kz48NvQPxqbugRv6rrgqyu967gx2/i8u0NW4iNBSyeWF3JptL2hfkePt ObuEwtHGTxJLSyCo9nuxOZKML90QjSvWltGkH5d1skgSGAtJiCDZGYGmCKK8ZYlW+dkz d7I3UFbbBRmP6oZeMqWahrj45dbidC86zId9j2RTUybrnNaP+6fn7h+e5zR3DoTaA5Ms jgmp3H9/+Eu8gcBZt95JEXsbIw1ZOF8Vht2lIZHq+kVeuGfSKWkpUWslH+EMhmULu/v2 AnUg== X-Gm-Message-State: AOAM533YMDPAirAMSEzbKIzn27FL3/k7MCf3yMwPIQngarbmg/csWQcZ RY0bBoaju4a0Rmrq9ddw/f/5d0pw8IA= X-Google-Smtp-Source: ABdhPJxakYUQo47FRDN7bo/UHATWGlEfbHON/fwSoxZrFns60LfixMc54bAoqXLAyHqtWm43RIJAdw== X-Received: by 2002:a17:90a:df84:: with SMTP id p4mr19597865pjv.81.1611550747434; Sun, 24 Jan 2021 20:59:07 -0800 (PST) Received: from localhost.localdomain ([45.124.203.14]) by smtp.gmail.com with ESMTPSA id gx21sm17525048pjb.31.2021.01.24.20.59.04 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 24 Jan 2021 20:59:06 -0800 (PST) From: Joel Stanley To: openbmc@lists.ozlabs.org, Andrew Jeffery , Ryan Chen Subject: [PATCH u-boot v2019.04-aspeed-openbmc 2/2] config: ast2600: Enable FIT signature verification Date: Mon, 25 Jan 2021 15:28:46 +1030 Message-Id: <20210125045846.448399-3-joel@jms.id.au> X-Mailer: git-send-email 2.29.2 In-Reply-To: <20210125045846.448399-1-joel@jms.id.au> References: <20210125045846.448399-1-joel@jms.id.au> MIME-Version: 1.0 X-BeenThere: openbmc@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development list for OpenBMC List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openbmc-bounces+incoming=patchwork.ozlabs.org@lists.ozlabs.org Sender: "openbmc" This turns on FIT signature verification for the OpenBMC SPL configuration, for both the SPL and u-boot. Signed-off-by: Joel Stanley --- configs/ast2600_openbmc_spl_emmc_defconfig | 3 +++ 1 file changed, 3 insertions(+) diff --git a/configs/ast2600_openbmc_spl_emmc_defconfig b/configs/ast2600_openbmc_spl_emmc_defconfig index 68d18652c980..20f2e7019cb3 100644 --- a/configs/ast2600_openbmc_spl_emmc_defconfig +++ b/configs/ast2600_openbmc_spl_emmc_defconfig @@ -35,6 +35,9 @@ CONFIG_ARMV7_BOOT_SEC_DEFAULT=y CONFIG_ARMV7_PSCI_NR_CPUS=2 CONFIG_NR_DRAM_BANKS=1 CONFIG_FIT=y +CONFIG_FIT_SIGNATURE=y +CONFIG_SPL_FIT_SIGNATURE=y +CONFIG_SPL_LOAD_FIT=y CONFIG_USE_BOOTARGS=y CONFIG_BOOTARGS="console=ttyS4,115200n8 root=/dev/ram rw" CONFIG_USE_BOOTCOMMAND=y