security.c 1.6 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455
  1. // SPDX-License-Identifier: GPL-2.0
  2. /*
  3. * K3: Security functions
  4. *
  5. * Copyright (C) 2018 Texas Instruments Incorporated - http://www.ti.com/
  6. * Andrew F. Davis <afd@ti.com>
  7. */
  8. #include <common.h>
  9. #include <dm.h>
  10. #include <hang.h>
  11. #include <linux/soc/ti/ti_sci_protocol.h>
  12. #include <mach/spl.h>
  13. #include <spl.h>
  14. #include <asm/arch/sys_proto.h>
  15. void board_fit_image_post_process(void **p_image, size_t *p_size)
  16. {
  17. struct ti_sci_handle *ti_sci = get_ti_sci_handle();
  18. struct ti_sci_proc_ops *proc_ops = &ti_sci->ops.proc_ops;
  19. u64 image_addr;
  20. u32 image_size;
  21. int ret;
  22. image_addr = (uintptr_t)*p_image;
  23. debug("Authenticating image at address 0x%016llx\n", image_addr);
  24. /* Authenticate image */
  25. ret = proc_ops->proc_auth_boot_image(ti_sci, &image_addr, &image_size);
  26. if (ret) {
  27. printf("Authentication failed!\n");
  28. hang();
  29. }
  30. /*
  31. * The image_size returned may be 0 when the authentication process has
  32. * moved the image. When this happens no further processing on the
  33. * image is needed or often even possible as it may have also been
  34. * placed behind a firewall when moved.
  35. */
  36. *p_size = image_size;
  37. /*
  38. * Output notification of successful authentication to re-assure the
  39. * user that the secure code is being processed as expected. However
  40. * suppress any such log output in case of building for SPL and booting
  41. * via YMODEM. This is done to avoid disturbing the YMODEM serial
  42. * protocol transactions.
  43. */
  44. if (!(IS_ENABLED(CONFIG_SPL_BUILD) &&
  45. IS_ENABLED(CONFIG_SPL_YMODEM_SUPPORT) &&
  46. spl_boot_device() == BOOT_DEVICE_UART))
  47. printf("Authentication passed\n");
  48. }