diff options
| author | Ji Luo <ji.luo@nxp.com> | 2018-08-22 14:32:44 +0800 |
|---|---|---|
| committer | faqiang.zhu <faqiang.zhu@nxp.com> | 2018-11-12 09:18:37 +0800 |
| commit | d4a0dbd9a467984d7f4a4861213298e2b95a3327 (patch) | |
| tree | 8da78aedb168a2acf3991b09368204ec9bd018f5 /configs | |
| parent | 22ab111509407a17b12fa2c058f0934ca947619b (diff) | |
[iot] Support authenticated unlock
Add fastboot commands "fastboot oem at-get-vboot-unlock-challenge"
and "fastboot oem at-unlock-vboot" to support the authenticated
unlock feature for Android Things devices. Use software random
numbers generator to generate the 16 bytes random challenge, it
should be replaced with hardware encrypted random generator when
the TEE part is ready.
Test: Generate unlock challenge by:
./avbtool make_atx_unlock_credential
--output=atx_unlock_credential.bin
--intermediate_key_certificate=atx_pik_certificate.bin
--unlock_key_certificate=atx_puk_certificate.bin
--challenge=my_generated_challenge.bin
--unlock_key=testkey_atx_puk.pem
validated the unlock credential successfully on imx7d_pico
and AIY.
Change-Id: I4b8cee87c9e96924169479b65020a081136681f6
Signed-off-by: Ji Luo <ji.luo@nxp.com>
Diffstat (limited to 'configs')
| -rw-r--r-- | configs/imx8mq_phanbell_androidthings_defconfig | 3 | ||||
| -rw-r--r-- | configs/imx8mq_phanbell_androidthings_uuu_defconfig | 3 | ||||
| -rw-r--r-- | configs/pico-imx7d-trusty_defconfig | 1 | ||||
| -rw-r--r-- | configs/pico-imx7d_defconfig | 1 |
4 files changed, 8 insertions, 0 deletions
diff --git a/configs/imx8mq_phanbell_androidthings_defconfig b/configs/imx8mq_phanbell_androidthings_defconfig index 2b07c8da99..6ad2f40710 100644 --- a/configs/imx8mq_phanbell_androidthings_defconfig +++ b/configs/imx8mq_phanbell_androidthings_defconfig @@ -68,3 +68,6 @@ CONFIG_USB_XHCI_IMX8M=y CONFIG_USB_XHCI_DWC3=y CONFIG_USB_DWC3=y CONFIG_USB_DWC3_GADGET=y +CONFIG_CMD_UUID=y +CONFIG_LIB_RAND=y +CONFIG_AVB_SUPPORT=y diff --git a/configs/imx8mq_phanbell_androidthings_uuu_defconfig b/configs/imx8mq_phanbell_androidthings_uuu_defconfig index bd61981992..cb23f86e55 100644 --- a/configs/imx8mq_phanbell_androidthings_uuu_defconfig +++ b/configs/imx8mq_phanbell_androidthings_uuu_defconfig @@ -71,3 +71,6 @@ CONFIG_USB_XHCI_IMX8M=y CONFIG_USB_XHCI_DWC3=y CONFIG_USB_DWC3=y CONFIG_USB_DWC3_GADGET=y +CONFIG_CMD_UUID=y +CONFIG_LIB_RAND=y +CONFIG_AVB_SUPPORT=y diff --git a/configs/pico-imx7d-trusty_defconfig b/configs/pico-imx7d-trusty_defconfig index fa4c6e8684..31669a9ea2 100644 --- a/configs/pico-imx7d-trusty_defconfig +++ b/configs/pico-imx7d-trusty_defconfig @@ -38,3 +38,4 @@ CONFIG_OF_LIBFDT=y CONFIG_AVB_SUPPORT=y CONFIG_AVB_ATX=y CONFIG_USE_STDINT=y +CONFIG_LIB_RAND=y diff --git a/configs/pico-imx7d_defconfig b/configs/pico-imx7d_defconfig index 6d5a04c72b..490a8fcf73 100644 --- a/configs/pico-imx7d_defconfig +++ b/configs/pico-imx7d_defconfig @@ -36,3 +36,4 @@ CONFIG_USB_STORAGE=y CONFIG_OF_LIBFDT=y CONFIG_AVB_SUPPORT=y CONFIG_AVB_ATX=y +CONFIG_LIB_RAND=y |