topic Re: DEK blob generator command for u-boot-imx in i.MX Processors

DEK blob generator command for u-boot-imx

george — Wed, 04 Mar 2015 14:17:20 GMT

Dear all,

I found u-boot patch for generating DEK blob.

=> "[U-Boot] [PATCH v5] imx6: Added DEK blob generator command"

Should this be applied to u-boot of which verison?

If someone is known, please let me know.

Best Regards,

George

Re: DEK blob generator command for u-boot-imx

raulcardenas-b4 — Wed, 04 Mar 2015 14:51:14 GMT

Hi George,

This patch was made for u-boot 2015, and it is in upstream process to u-boot's master branch. They will be released in the next u-boot release.

There are multiple ways to get it working, you can apply the patch directly you would need the previous the previous patches, and I don't know which are the ones that it depends on.

Or you can clone our custodian branch "u-boot-imx". This is the easiest way, and it will have the latest changes for u-boot and the imx branch

git clone git://git.denx.de/u-boot-imx.git

Or you can try to backport it to previous versions, but that would require more work.

Regards,

Raul Cardenas

Re: DEK blob generator command for u-boot-imx

robyf — Wed, 04 Mar 2015 17:33:49 GMT

Hi Raul,

this is used to get an encrypted boot with u-boot, right? Where I can find the documentation for a step to step process?

I'm also interested to get the same for the zImage.

Thanks in advance,

Roberto Fichera.

Re: DEK blob generator command for u-boot-imx

Yuri — Thu, 05 Mar 2015 04:31:54 GMT

The documentation and tools (CST) for encrypted boot is not available yet.
Sorry.

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

Re: DEK blob generator command for u-boot-imx

robyf — Thu, 05 Mar 2015 07:59:46 GMT

Hi Yuri,

Ah! Ok! Do you know when both documentation and tools will be released?

Cheers,

Roberto Fichera.

Re: DEK blob generator command for u-boot-imx

Yuri — Thu, 05 Mar 2015 09:05:08 GMT

Alas, I do not have such information :-(

Regards,

Yuri.

Re: DEK blob generator command for u-boot-imx

george — Mon, 09 Mar 2015 02:22:09 GMT

Dear Raul,

Thank you for explanation carefully.

I cannot understand correctly yet about this function.

Therefore, please let me ask a question another time.

Best Regards,

George

Re: DEK blob generator command for u-boot-imx

george — Mon, 09 Mar 2015 02:33:22 GMT

Dear Yuri,

Is it Really?

I saw the description of Encrypt/Decrypt in the following documents.

=> cst-2.2/docs/HABCST_UG.pdf (HAB Code-Signing Tool User’s Guide Rev. 2.2 10/2014)

Though there is how to use the following functions into the document explanation, is this the function which cannot be used in CST?

=> 5.2.8 Install Secret Key

=> 5.2.9 Decrypt Data

Best Regards,

George

Re: DEK blob generator command for u-boot-imx

Yuri — Mon, 09 Mar 2015 04:43:07 GMT

You may try it.

Regards,

Yuri.