imx: caam: new u-boot command to set PRIBLOB bitfield from CAAM SCFGR register to 0x3
authorClement Le Marquis <clement.lemarquis@nxp.com>
Thu, 25 Mar 2021 09:30:32 +0000 (17:30 +0800)
committerStefano Babic <sbabic@denx.de>
Thu, 8 Apr 2021 18:29:52 +0000 (20:29 +0200)
commit613cf239ed490f900b8f822df4a2d5a1a27d7a47
treee643b76db3385f57dbf652532e9ffe81ab805ab8
parent45f39e9fb70dc8a9cb17135d2146de402494a59e
imx: caam: new u-boot command to set PRIBLOB bitfield from CAAM SCFGR register to 0x3

It is highly recommended to set the PRIBLOB bitfield to 0x3 once your
encrypted boot image has booted up, this prevents the generation of new
blobs that can be used to decrypt an encrypted boot image. The PRIBLOB is
a sticky type bit and cannot be changed until the next power on reset.

Add the set_priblob_bitfield U-Boot command to prevent the generation of
new blobs.

Signed-off-by: Clement Le Marquis <clement.lemarquis@nxp.com>
Acked-by: Ye Li <Ye.Li@nxp.com>
Signed-off-by: Peng Fan <peng.fan@nxp.com>
arch/arm/mach-imx/Kconfig
arch/arm/mach-imx/Makefile
arch/arm/mach-imx/priblob.c [new file with mode: 0644]