summaryrefslogtreecommitdiff
path: root/configs
diff options
context:
space:
mode:
authorBreno Lima <breno.lima@nxp.com>2019-04-03 23:51:51 -0300
committerYe Li <ye.li@nxp.com>2019-04-08 22:28:15 -0700
commit3eebc76f5571f7ce74d385235019e8eb4a6718f6 (patch)
treef19c37b4bafd3fb1f687176689f4c65aca07a9e2 /configs
parent0224af21ce9129722f9f2761c92f8f374f8a14a2 (diff)
MLK-21386 Revert "drivers/crypto/fsl: assign job-rings to non-TrustZone"
Commit 22191ac35344 ("drivers/crypto/fsl: assign job-rings to non-TrustZone") breaks HABv4 encrypted boot support in the following i.MX devices: - i.MX6UL - i.MX7S - i.MX7D - i.MX7ULP For preparing a HABv4 encrypted boot image it's necessary to encapsulated the generated DEK in a blob. The blob generation function takes into consideration the Job Ring TrustZone ownership configuration (JROWN_NS) and can be only decapsulated by the same configuration. The ROM code expects DEK blobs encapsulated by the Secure World environments which commonly have JROWN_NS = 0. As U-Boot is running in Secure World we must have JROWN_NS=0 so the blobs generated by dek_blob tool can be decapsulated by the ROM code. As NXP BSP does not requires all job-rings assigned to non-Secure world this commit can be safely reverted. This reverts commit 22191ac353445ad8fafc5a78aefcd94e78963041. Reviewed-by: Silvano Di Ninno <silvano.dininno@nxp.com> Signed-off-by: Breno Lima <breno.lima@nxp.com>
Diffstat (limited to 'configs')
0 files changed, 0 insertions, 0 deletions