Re: [PATCH 3/3] mach-imx: Kconfig: add option for image with dcd auth block

[Ahmad Fatoum <a.fatoum@pengutronix.de>]

On 9/1/25 9:35 AM, Sascha Hauer wrote:
> From: Matthias Zoechmann <matthias.zoechmann@ife-doors.com>
> 
> Add option CONFIG_HABV4_IMAGE_SIGNED_USB_DCD to select build of barebox
> image for i.mx6 devices with an additional authentication block in CSF
> ("0x0091000 offset size filename").
> Additional the barebox toolchain will build now a signed image e.g.
> barebox-image-name-dcdus.img for usb loading with SDP DCD_WRITE ROM
> command.
> 
> Signed-off-by: Matthias Zoechmann <matthias.zoechmann@ife-doors.com>
> ---
>  arch/arm/mach-imx/Kconfig |  9 +++++++++
>  images/Makefile.imx       | 11 +++++++----
>  2 files changed, 16 insertions(+), 4 deletions(-)
> 
> diff --git a/arch/arm/mach-imx/Kconfig b/arch/arm/mach-imx/Kconfig
> index 0d745ce2315834ec5d0c366d227b40f2adff5e83..ade4a4ce1783fc60f85aefab2da2df17a57bfe55 100644
> --- a/arch/arm/mach-imx/Kconfig
> +++ b/arch/arm/mach-imx/Kconfig
> @@ -945,6 +945,15 @@ config HABV4_IMAGE_SIGNED_USB
>  	  enable the creation of a usb signed image, if the habv4-imx6-gencsf.h
>  	  included in the flash-header and the NXP cst Tool is available
>  
> +config HABV4_IMAGE_SIGNED_USB_DCD
> +	bool "build signed USB images including DCD"
> +	depends on ARCH_IMX6
> +	depends on HABV4_IMAGE_SIGNED_USB
> +	help
> +	  enable the creation of a usb signed image loaded via SDP and DCD_WRITE
> +	  ROM command, if the habv4-imx6-gencsf.h included in the flash-header
> +	  and the NXP cst Tool is available

Can you add here the info that this makes the image loadable via uuu?
Can imx-usb-loader still load this image?

Cheers,
Ahmad

> +
>  config HABV4_IMAGE_SIGNED_ENCRYPTED
>  	bool "build signed encrypted images"
>  	help
> diff --git a/images/Makefile.imx b/images/Makefile.imx
> index 93264254e9e4cda3969bf7bf4812f2d1c5b59c09..8aa35a28e06ccffc9609054292eca026b17c0140 100644
> --- a/images/Makefile.imx
> +++ b/images/Makefile.imx
> @@ -9,13 +9,15 @@ $(eval
>  ifeq ($($(strip $(1))), y)
>  	pblb-y += $(strip $(2))
>  	CFG_$(strip $(2)).pblb.imximg = $(board)/$(strip $(3)).imxcfg
> -	FILE_barebox-$(strip $(4)).img    = $(strip $(2)).pblb.imximg
> -	FILE_barebox-$(strip $(4))-s.img  = $(strip $(2)).pblb.simximg
> -	FILE_barebox-$(strip $(4))-us.img = $(strip $(2)).pblb.usimximg
> -	FILE_barebox-$(strip $(4))-es.img = $(strip $(2)).pblb.esimximg
> +	FILE_barebox-$(strip $(4)).img       = $(strip $(2)).pblb.imximg
> +	FILE_barebox-$(strip $(4))-s.img     = $(strip $(2)).pblb.simximg
> +	FILE_barebox-$(strip $(4))-us.img    = $(strip $(2)).pblb.usimximg
> +	FILE_barebox-$(strip $(4))-dcdus.img = $(strip $(2)).pblb.dcdusimximg
> +	FILE_barebox-$(strip $(4))-es.img    = $(strip $(2)).pblb.esimximg
>  	image-y += barebox-$(strip $(4)).img
>  	image-$(CONFIG_HABV4_IMAGE_SIGNED) += barebox-$(strip $(4))-s.img
>  	image-$(CONFIG_HABV4_IMAGE_SIGNED_USB) += barebox-$(strip $(4))-us.img
> +	image-$(CONFIG_HABV4_IMAGE_SIGNED_USB_DCD) += barebox-$(strip $(4))-dcdus.img
>  	image-$(CONFIG_HABV4_IMAGE_SIGNED_ENCRYPTED) += barebox-$(strip $(4))-es.img
>  endif
>  )
> @@ -51,6 +53,7 @@ $(call imx_image_rule,pimximg, -p $$($$(patsubst $$(obj)/%.pblb,PBL_MEMORY_SIZE_
>  $(call imx_image_rule,psimximg, -p $$($$(patsubst $$(obj)/%.pblb,PBL_MEMORY_SIZE_%,$$<)) -s)
>  $(call imx_image_rule,simximg, -s)
>  $(call imx_image_rule,usimximg, -u -s)
> +$(call imx_image_rule,dcdusimximg, -u -s -a)
>  $(call imx_image_rule,esimximg, -e -s)
>  $(call imx_image_rule,esimximg.dek, -e -s)
>  
> 

-- 
Pengutronix e.K.                  |                             |
Steuerwalder Str. 21              | http://www.pengutronix.de/  |
31137 Hildesheim, Germany         | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686  | Fax:   +49-5121-206917-5555 |