MLK-19790 imx: caam: new u-boot command to set PRIBLOB bitfield from CAAM SCFGR regis...
authorClement Le Marquis <clement.lemarquis@nxp.com>
Thu, 20 Sep 2018 01:07:10 +0000 (03:07 +0200)
committerYe Li <ye.li@nxp.com>
Wed, 28 Apr 2021 20:49:33 +0000 (13:49 -0700)
commit35d16e3abbfda7df73dd4bd4859fa6b5c01c0844
tree9a08187ef8caa68b7741510151d61f9bea1b41fb
parent7c51463e2254ca638a232830a18a585306a67052
MLK-19790 imx: caam: new u-boot command to set PRIBLOB bitfield from CAAM SCFGR register to 0x3

It is highly recommended to set the PRIBLOB bitfield to 0x3 once your
encrypted boot image has booted up, this prevents the generation of new
blobs that can be used to decrypt an encrypted boot image. The PRIBLOB is
a sticky type bit and cannot be changed until the next power on reset.

Add the set_priblob_bitfield U-Boot command to prevent the generation of
new blobs.

Signed-off-by: Clement Le Marquis <clement.lemarquis@nxp.com>
Acked-by: Ye Li <Ye.Li@nxp.com>
(cherry picked from commit 69cca568b85f36a77ef6ef31538f69366d238845)
(cherry picked from commit e8f813a6b66961759916e65b8c18ec43fd36a7c3)
(cherry picked from commit 55552a26af9a3d94cd19d30c12efcdc1f373d88b)
arch/arm/mach-imx/Kconfig
arch/arm/mach-imx/Makefile
arch/arm/mach-imx/priblob.c [new file with mode: 0644]