1 menu "Library routines"
4 bool "Enable Software based BCH ECC"
6 Enables software based BCH ECC algorithm present in lib/bch.c
7 This is used by SoC platforms which do not have built-in ELM
8 hardware engine required for BCH ECC correction.
11 bool "Allow access to binman information in the device tree"
12 depends on BINMAN && OF_CONTROL
15 This enables U-Boot to access information about binman entries,
16 stored in the device tree in a binman node. Typical uses are to
17 locate entries in the firmware image. See binman.h for the available
20 config CC_OPTIMIZE_LIBS_FOR_SPEED
21 bool "Optimize libraries for speed"
23 Enabling this option will pass "-O2" to gcc when compiling
24 under "lib" directory.
28 config DYNAMIC_CRC_TABLE
29 bool "Enable Dynamic tables for CRC"
31 Enable this option to calculate entries for CRC tables at runtime.
32 This can be helpful when reducing the size of the build image
34 config HAVE_ARCH_IOMAP
37 Enable this option if architecture provides io{read,write}{8,16,32}
38 I/O accessor functions.
40 config HAVE_PRIVATE_LIBGCC
53 select SPL_STRTO if !SPL_USE_TINY_PRINTF
58 select TPL_STRTO if !TPL_USE_TINY_PRINTF
83 config IMAGE_SPARSE_FILLBUF_SIZE
84 hex "Android sparse image CHUNK_TYPE_FILL buffer size"
86 depends on IMAGE_SPARSE
88 Set the size of the fill buffer used when processing CHUNK_TYPE_FILL
91 config USE_PRIVATE_LIBGCC
92 bool "Use private libgcc"
93 depends on HAVE_PRIVATE_LIBGCC
94 default y if HAVE_PRIVATE_LIBGCC && ((ARM && !ARM64) || MIPS)
96 This option allows you to use the built-in libgcc implementation
97 of U-Boot instead of the one provided by the compiler.
104 The frequency of the timer returned by get_timer().
105 get_timer() must operate in milliseconds and this option must be
108 config SPL_USE_TINY_PRINTF
109 bool "Enable tiny printf() version in SPL"
113 This option enables a tiny, stripped down printf version.
114 This should only be used in space limited environments,
115 like SPL versions with hard memory limits. This version
116 reduces the code size by about 2.5KiB on armv7.
118 The supported format specifiers are %c, %s, %u/%d and %x.
120 config TPL_USE_TINY_PRINTF
121 bool "Enable tiny printf() version in TPL"
123 default y if SPL_USE_TINY_PRINTF
125 This option enables a tiny, stripped down printf version.
126 This should only be used in space limited environments,
127 like SPL versions with hard memory limits. This version
128 reduces the code size by about 2.5KiB on armv7.
130 The supported format specifiers are %c, %s, %u/%d and %x.
133 bool "Do not reset the system on fatal error"
135 Define this option to stop the system in case of a fatal error,
136 so that you have to reset it manually. This is probably NOT a good
137 idea for an embedded system where you want the system to reboot
138 automatically as fast as possible, but it may be useful during
139 development since you can try to debug the conditions that lead to
143 bool "Enable regular expression support"
146 If this variable is defined, U-Boot is linked against the
147 SLRE (Super Light Regular Expression) library, which adds
148 regex support to some commands, for example "env grep" and
152 prompt "Pseudo-random library support type"
153 depends on NET_RANDOM_ETHADDR || RANDOM_UUID || CMD_UUID || \
154 RNG_SANDBOX || UT_LIB && AES
157 Select the library to provide pseudo-random number generator
158 functions. LIB_HW_RAND supports certain hardware engines that
159 provide this functionality. If in doubt, select LIB_RAND.
162 bool "Pseudo-random library support"
165 bool "HW Engine for random library support"
169 config SPL_TINY_MEMSET
170 bool "Use a very small memset() in SPL"
172 The faster memset() is the arch-specific one (if available) enabled
173 by CONFIG_USE_ARCH_MEMSET. If that is not enabled, we can still get
174 better performance by writing a word at a time. But in very
175 size-constrained environments even this may be too big. Enable this
176 option to reduce code size slightly at the cost of some speed.
178 config TPL_TINY_MEMSET
179 bool "Use a very small memset() in TPL"
181 The faster memset() is the arch-specific one (if available) enabled
182 by CONFIG_USE_ARCH_MEMSET. If that is not enabled, we can still get
183 better performance by writing a word at a time. But in very
184 size-constrained environments even this may be too big. Enable this
185 option to reduce code size slightly at the cost of some speed.
191 bool "Bit reverse library from Linux"
194 bool "Support for tracing of function calls and timing"
197 Enables function tracing within U-Boot. This allows recording of call
198 traces including timing information. The command can write data to
199 memory for exporting for analysis (e.g. using bootchart).
200 See doc/README.trace for full details.
202 config TRACE_BUFFER_SIZE
203 hex "Size of trace buffer in U-Boot"
207 Sets the size of the trace buffer in U-Boot. This is allocated from
208 memory during relocation. If this buffer is too small, the trace
209 history will be truncated, with later records omitted.
211 If early trace is enabled (i.e. before relocation), this buffer must
212 be large enough to include all the data from the early trace buffer as
213 well, since this is copied over to the main buffer during relocation.
215 A trace record is emitted for each function call and each record is
216 12 bytes (see struct trace_call). A suggested minimum size is 1MB. If
217 the size is too small then 'trace stats' will show a message saying
218 how many records were dropped due to buffer overflow.
220 config TRACE_CALL_DEPTH_LIMIT
221 int "Trace call depth limit"
225 Sets the maximum call depth up to which function calls are recorded.
228 bool "Enable tracing before relocation"
231 Sometimes it is helpful to trace execution of U-Boot before
232 relocation. This is possible by using a arch-specific, fixed buffer
233 position in memory. Enable this option to start tracing as early as
234 possible after U-Boot starts.
236 config TRACE_EARLY_SIZE
237 hex "Size of early trace buffer in U-Boot"
238 depends on TRACE_EARLY
241 Sets the size of the early trace buffer in bytes. This is used to hold
242 tracing information before relocation.
244 config TRACE_EARLY_CALL_DEPTH_LIMIT
245 int "Early trace call depth limit"
246 depends on TRACE_EARLY
249 Sets the maximum call depth up to which function calls are recorded
250 during early tracing.
252 config TRACE_EARLY_ADDR
253 hex "Address of early trace buffer in U-Boot"
254 depends on TRACE_EARLY
257 Sets the address of the early trace buffer in U-Boot. This memory
258 must be accessible before relocation.
260 A trace record is emitted for each function call and each record is
261 12 bytes (see struct trace_call). A suggested minimum size is 1MB. If
262 the size is too small then the message which says the amount of early
263 data being coped will the the same as the
265 source lib/dhry/Kconfig
267 menu "Security support"
270 bool "Support the AES algorithm"
272 This provides a means to encrypt and decrypt data using the AES
273 (Advanced Encryption Standard). This algorithm uses a symetric key
274 and is widely used as a streaming cipher. Different key lengths are
275 supported by the algorithm but only a 128-bit key is supported at
278 source lib/rsa/Kconfig
279 source lib/crypto/Kconfig
282 bool "Trusted Platform Module (TPM) Support"
285 This enables support for TPMs which can be used to provide security
286 features for your board. The TPM can be connected via LPC or I2C
287 and a sandbox TPM is provided for testing purposes. Use the 'tpm'
288 command to interactive the TPM. Driver model support is provided
289 for the low-level TPM interface, but only one TPM is supported at
290 a time by the TPM library.
293 bool "Trusted Platform Module (TPM) Support in SPL"
296 This enables support for TPMs which can be used to provide security
297 features for your board. The TPM can be connected via LPC or I2C
298 and a sandbox TPM is provided for testing purposes. Use the 'tpm'
299 command to interactive the TPM. Driver model support is provided
300 for the low-level TPM interface, but only one TPM is supported at
301 a time by the TPM library.
304 bool "Trusted Platform Module (TPM) Support in TPL"
307 This enables support for TPMs which can be used to provide security
308 features for your board. The TPM can be connected via LPC or I2C
309 and a sandbox TPM is provided for testing purposes. Use the 'tpm'
310 command to interactive the TPM. Driver model support is provided
311 for the low-level TPM interface, but only one TPM is supported at
312 a time by the TPM library.
316 menu "Android Verified Boot"
319 bool "Android Verified Boot 2.0 support"
320 depends on ANDROID_BOOT_IMAGE
323 This enables support of Android Verified Boot 2.0 which can be used
324 to assure the end user of the integrity of the software running on a
325 device. Introduces such features as boot chain of trust, rollback
330 menu "Hashing Support"
333 bool "Enable SHA1 support"
335 This option enables support of hashing using SHA1 algorithm.
336 The hash is calculated in software.
337 The SHA1 algorithm produces a 160-bit (20-byte) hash value
341 bool "Enable SHA256 support"
343 This option enables support of hashing using SHA256 algorithm.
344 The hash is calculated in software.
345 The SHA256 algorithm produces a 256-bit (32-byte) hash value
349 bool "Enable SHA512 algorithm"
351 This option enables support of internal SHA512 algorithm.
354 bool "Enable SHA512 support"
355 depends on SHA512_ALGO
357 This option enables support of hashing using SHA512 algorithm.
358 The hash is calculated in software.
359 The SHA512 algorithm produces a 512-bit (64-byte) hash value
363 bool "Enable SHA384 support"
364 depends on SHA512_ALGO
366 This option enables support of hashing using SHA384 algorithm.
367 The hash is calculated in software.
368 The SHA384 algorithm produces a 384-bit (48-byte) hash value
372 bool "Enable hashing using hardware"
374 This option enables hardware acceleration
375 for SHA1/SHA256 hashing.
376 This affects the 'hash' command and also the
377 hash_lookup_algo() function.
379 config SHA_PROG_HW_ACCEL
380 bool "Enable Progressive hashing support using hardware"
381 depends on SHA_HW_ACCEL
383 This option enables hardware-acceleration for
384 SHA1/SHA256 progressive hashing.
385 Data can be streamed in a block at a time and the hashing
386 is performed in hardware.
389 bool "Support MD5 algorithm"
391 This option enables MD5 support. MD5 is an algorithm designed
392 in 1991 that produces a 16-byte digest (or checksum) from its input
393 data. It has a number of vulnerabilities which preclude its use in
394 security applications, but it can be useful for providing a quick
395 checksum of a block of data.
398 bool "Support MD5 algorithm in SPL"
400 This option enables MD5 support in SPL. MD5 is an algorithm designed
401 in 1991 that produces a 16-byte digest (or checksum) from its input
402 data. It has a number of vulnerabilities which preclude its use in
403 security applications, but it can be useful for providing a quick
404 checksum of a block of data.
414 menu "Compression Support"
417 bool "Enable LZ4 decompression support"
419 If this option is set, support for LZ4 compressed images
420 is included. The LZ4 algorithm can run in-place as long as the
421 compressed image is loaded to the end of the output buffer, and
422 trades lower compression ratios for much faster decompression.
424 NOTE: This implements the release version of the LZ4 frame
425 format as generated by default by the 'lz4' command line tool.
426 This is not the same as the outdated, less efficient legacy
427 frame format currently (2015) implemented in the Linux kernel
428 (generated by 'lz4 -l'). The two formats are incompatible.
431 bool "Enable LZMA decompression support"
433 This enables support for LZMA (Lempel-Ziv-Markov chain algorithm),
434 a dictionary compression algorithm that provides a high compression
435 ratio and fairly fast decompression speed. See also
436 CONFIG_CMD_LZMADEC which provides a decode command.
439 bool "Enable LZO decompression support"
441 This enables support for LZO compression algorithm.r
444 bool "Enable gzip decompression support"
448 This enables support for GZIP compression algorithm.
450 config GZIP_COMPRESSED
455 bool "Enable bzip2 decompression support"
457 This enables support for BZIP2 compression algorithm.
463 This enables ZLIB compression lib.
466 bool "Enable Zstandard decompression support"
469 This enables Zstandard decompression library.
472 bool "Enable LZ4 decompression support in SPL"
474 This enables support for the LZ4 decompression algorithm in SPL. LZ4
475 is a lossless data compression algorithm that is focused on
476 fast compression and decompression speed. It belongs to the LZ77
477 family of byte-oriented compression schemes.
480 bool "Enable LZMA decompression support for SPL build"
482 This enables support for LZMA compression algorithm for SPL boot.
485 bool "Enable LZO decompression support in SPL"
487 This enables support for LZO compression algorithm in the SPL.
490 bool "Enable gzip decompression support for SPL build"
493 This enables support for GZIP compression altorithm for SPL boot.
498 This enables compression lib for SPL boot.
501 bool "Enable Zstandard decompression support in SPL"
504 This enables Zstandard decompression library in the SPL.
509 bool "Enable function for getting errno-related string message"
511 The function errno_str(int errno), returns a pointer to the errno
512 corresponding text message:
513 - if errno is null or positive number - a pointer to "Success" message
514 - if errno is negative - a pointer to errno related message
517 bool "Enable hexdump"
519 This enables functions for printing dumps of binary data.
522 bool "Enable the FDT library"
523 default y if OF_CONTROL
525 This enables the FDT library (libfdt). It provides functions for
526 accessing binary device tree images in memory, such as adding and
527 removing nodes and properties, scanning through the tree and finding
528 particular compatible nodes. The library operates on a flattened
529 version of the device tree.
531 config OF_LIBFDT_ASSUME_MASK
532 hex "Mask of conditions to assume for libfdt"
533 depends on OF_LIBFDT || FIT
536 Use this to change the assumptions made by libfdt about the
537 device tree it is working with. A value of 0 means that no assumptions
538 are made, and libfdt is able to deal with malicious data. A value of
539 0xff means all assumptions are made and any invalid data may cause
540 unsafe execution. See FDT_ASSUME_PERFECT, etc. in libfdt_internal.h
542 config OF_LIBFDT_OVERLAY
543 bool "Enable the FDT library overlay support"
545 default y if ARCH_OMAP2PLUS || ARCH_KEYSTONE
547 This enables the FDT library (libfdt) overlay support.
550 bool "Enable the FDT library for SPL"
551 default y if SPL_OF_CONTROL
553 This enables the FDT library (libfdt). It provides functions for
554 accessing binary device tree images in memory, such as adding and
555 removing nodes and properties, scanning through the tree and finding
556 particular compatible nodes. The library operates on a flattened
557 version of the device tree.
559 config SPL_OF_LIBFDT_ASSUME_MASK
560 hex "Mask of conditions to assume for libfdt"
561 depends on SPL_OF_LIBFDT || FIT
564 Use this to change the assumptions made by libfdt in SPL about the
565 device tree it is working with. A value of 0 means that no assumptions
566 are made, and libfdt is able to deal with malicious data. A value of
567 0xff means all assumptions are made and any invalid data may cause
568 unsafe execution. See FDT_ASSUME_PERFECT, etc. in libfdt_internal.h
571 bool "Enable the FDT library for TPL"
572 default y if TPL_OF_CONTROL
574 This enables the FDT library (libfdt). It provides functions for
575 accessing binary device tree images in memory, such as adding and
576 removing nodes and properties, scanning through the tree and finding
577 particular compatible nodes. The library operates on a flattened
578 version of the device tree.
580 config TPL_OF_LIBFDT_ASSUME_MASK
581 hex "Mask of conditions to assume for libfdt"
582 depends on TPL_OF_LIBFDT || FIT
585 Use this to change the assumptions made by libfdt in TPL about the
586 device tree it is working with. A value of 0 means that no assumptions
587 are made, and libfdt is able to deal with malicious data. A value of
588 0xff means all assumptions are made and any invalid data may cause
589 unsafe execution. See FDT_ASSUME_PERFECT, etc. in libfdt_internal.h
591 config FDT_FIXUP_PARTITIONS
592 bool "overwrite MTD partitions in DTS through defined in 'mtdparts'"
594 depends on CMD_MTDPARTS
596 Allow overwriting defined partitions in the device tree blob
597 using partition info defined in the 'mtdparts' environment
601 depends on (!EFI && !SYS_COREBOOT) || (ARM && EFI_LOADER)
603 config GENERATE_SMBIOS_TABLE
604 bool "Generate an SMBIOS (System Management BIOS) table"
606 depends on X86 || EFI_LOADER
608 The System Management BIOS (SMBIOS) specification addresses how
609 motherboard and system vendors present management information about
610 their products in a standard format by extending the BIOS interface
611 on Intel architecture systems.
613 Check http://www.dmtf.org/standards/smbios for details.
615 config SMBIOS_MANUFACTURER
616 string "SMBIOS Manufacturer"
617 depends on GENERATE_SMBIOS_TABLE
620 The board manufacturer to store in SMBIOS structures.
621 Change this to override the default one (CONFIG_SYS_VENDOR).
623 config SMBIOS_PRODUCT_NAME
624 string "SMBIOS Product Name"
625 depends on GENERATE_SMBIOS_TABLE
628 The product name to store in SMBIOS structures.
629 Change this to override the default one (CONFIG_SYS_BOARD).
639 Enable asn1 decoder library.
644 Enable fast lookup object identifier registry.
646 source lib/efi/Kconfig
647 source lib/efi_loader/Kconfig
648 source lib/optee/Kconfig
651 bool "enable fdtdec test"
660 Supoort basic elf loading/validating functions.
661 This supports fir 32 bit and 64 bit versions.