topic Re: Verifying images in HAB in Linux or OPTEE in i.MX Processors

Verifying images in HAB in Linux or OPTEE

nicholash — Thu, 13 Feb 2020 23:38:25 GMT

Hi, I'm trying to work on an update procedure on an IMX6UL that checks to see if an image will pass the HAB check before updating the images. I'm having trouble accessing the boot ROM from OPTEE so I need to re-implement the authentication function in as a TA in OPTEE or failing that as a regular Linux application, similar to the uboot command hab_auth_img. Is there any code available for this? Is there a way to make the CST do this?

Re: Verifying images in HAB in Linux or OPTEE

nicholash — Tue, 18 Feb 2020 00:50:20 GMT

Hi, is there any solution this? This seems like a fairly common use case that will stop people bricking their devices.

Re: Verifying images in HAB in Linux or OPTEE

Yuri — Wed, 26 Feb 2020 06:33:32 GMT

Hello,

I've sent You directly some considerations.

Have a great day,

Yuri

-------------------------------------------------------------------------------

Note:

- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored

Please open a new thread and refer to the closed one, if you have a related question at a later point in time.

Re: Verifying images in HAB in Linux or OPTEE

gcornacchia — Wed, 17 Feb 2021 07:58:19 GMT

Hi Yuri,

I'm trying to use hab checking function for imxull in kernel userspace is there any implementation?

Can you share your considerations?

What I would like to achive is a signature checking

thank you

Re: Verifying images in HAB in Linux or OPTEE

Yuri — Thu, 18 Feb 2021 09:39:12 GMT

@gcornacchia
Hello,

There is no the hab checking in userspace.

Regards,
Yuri.

Re: Verifying images in HAB in Linux or OPTEE

lijiangning — Mon, 15 Sep 2025 09:46:53 GMT

We also have the requirement to perform kernel signature verification within OP-TEE. Could you provide the methodology and an implementation (code) for this?

thanks