From: Stefan Kerkmann <s.kerkmann@pengutronix.de>
To: Sascha Hauer <s.hauer@pengutronix.de>,
BAREBOX <barebox@lists.infradead.org>
Cc: Marco Felsch <m.felsch@pengutronix.de>,
Stefan Kerkmann <s.kerkmann@pengutronix.de>
Subject: [PATCH v3 00/10] i.MX8M HAB and OCOTP additions and fixes
Date: Thu, 23 Jan 2025 15:56:05 +0100 [thread overview]
Message-ID: <20250123-v2024-05-0-topic-hab-v3-0-e90d0e43c2de@pengutronix.de> (raw)
Hi,
this fixes the HABv4 locking on i.MX8M devices and add additional
features like:
- key revocation
- field-return burning
- additional security related fuse defintions
- automatic locking of the gp5 eFuse on i.MX8MP SoCs
---
Changes in v3:
- added GP5_LOCK support for i.MX8MP devices
- renamed HABV4_CSF_UNLOCK_SRK_REVOKE to HABV4_CSF_SRK_REVOKE_UNLOCK
- adapted to HAB_CERTS_ENV
- Link to v2:
https://lore.barebox.org/20240703-v2024-05-0-topic-hab-v2-0-17419aa5d3a3@pengutronix.de
Changes in v2:
- Link to v1:
https://lore.barebox.org/barebox/Zmv2KyQq3ACxksc_@pengutronix.de/
- adapt patch-1 commit message
- make use of 'bool permanent' parameter instead of introducing new
IMX_SRK_* flags.
To: Sascha Hauer <s.hauer@pengutronix.de>
To: open list:BAREBOX <barebox@lists.infradead.org>
---
Marco Felsch (8):
nvmem: ocotp: add support to get/set srk_revoke sticky bit
nvmem: ocotp: add support to query the field-return sticky bit
hab: convert flags to use BIT() macro
i.MX: HAB: add imx_hab_revoke_key support
i.MX: HABv4: add more i.MX8M fuse defines
i.MX8M: HABv4: add an option to allow key revocation
i.MX8M: HABv4: add option to allow burning the field-return fuse
i.MX: HAB: add imx_hab_field_return support
Stefan Kerkmann (2):
i.mx8: ocotp: add GPx_LOCK defines
hab: lock GP5 on i.MX8MP socs
arch/arm/mach-imx/Kconfig | 34 +++++++++++++
drivers/hab/hab.c | 98 ++++++++++++++++++++++++++++++++++--
drivers/nvmem/ocotp.c | 79 +++++++++++++++++++++++++++++
include/hab.h | 9 ++--
include/mach/imx/habv4-imx8-gencsf.h | 13 +++++
include/mach/imx/ocotp-fusemap.h | 28 +++++++++++
include/mach/imx/ocotp.h | 3 ++
scripts/Makefile.lib | 1 +
8 files changed, 258 insertions(+), 7 deletions(-)
---
base-commit: fb590cfa8fea6906d3f78dd409856d350e24b582
change-id: 20240703-v2024-05-0-topic-hab-218bab0e829c
Best regards,
--
Stefan Kerkmann <s.kerkmann@pengutronix.de>
next reply other threads:[~2025-01-23 15:01 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-01-23 14:56 Stefan Kerkmann [this message]
2025-01-23 14:56 ` [PATCH v3 01/10] nvmem: ocotp: add support to get/set srk_revoke sticky bit Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 02/10] nvmem: ocotp: add support to query the field-return " Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 03/10] hab: convert flags to use BIT() macro Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 04/10] i.MX: HAB: add imx_hab_revoke_key support Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 05/10] i.MX: HABv4: add more i.MX8M fuse defines Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 06/10] i.MX8M: HABv4: add an option to allow key revocation Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 07/10] i.MX8M: HABv4: add option to allow burning the field-return fuse Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 08/10] i.MX: HAB: add imx_hab_field_return support Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 09/10] i.mx8: ocotp: add GPx_LOCK defines Stefan Kerkmann
2025-01-23 14:56 ` [PATCH v3 10/10] hab: lock GP5 on i.MX8MP socs Stefan Kerkmann
2025-01-28 10:00 ` [PATCH v3 00/10] i.MX8M HAB and OCOTP additions and fixes Sascha Hauer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250123-v2024-05-0-topic-hab-v3-0-e90d0e43c2de@pengutronix.de \
--to=s.kerkmann@pengutronix.de \
--cc=barebox@lists.infradead.org \
--cc=m.felsch@pengutronix.de \
--cc=s.hauer@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox