topic Re: How to use blob enc/blob dec U-Boot command. in i.MX Processors

How to use blob enc/blob dec U-Boot command.

jdepedro — Mon, 27 Jun 2016 11:03:38 GMT

Hi, I am trying to use the blob enc / blob dec command available in the U-Boot source code provided by NXP on my i.MX6Q module. However, I obtain the follownig output:

=> mw.b 14000000 0 16

=> md.b 14000000 16

14000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

14000010: 00 00 00 00 00 00 ......

=> blob enc $loadaddr 0x12001000 32 0x14000000

Encapsulating data to form blob

b080000a

4000010

14000000

f0400000

12000000

f8400000

12001000

870d0000

Error in Encapsulation -3

Could you explain why this error happens? Could you provide an example of this command usage which should work?

Thanks

Re: How to use blob enc/blob dec U-Boot command.

igorpadykov — Mon, 27 Jun 2016 11:57:23 GMT

Hi jdepedro

what uboot version is used in the case, nxp uboot-imx ?

For enabling uboot security functions one can look at configurations

descibed in

uboot-imx.git - Freescale i.MX u-boot Tree

Best regards

igor

-----------------------------------------------------------------------------------------------------------------------

Note: If this post answers your question, please click the Correct Answer button. Thank you!

-----------------------------------------------------------------------------------------------------------------------

Re: How to use blob enc/blob dec U-Boot command.

jdepedro — Mon, 27 Jun 2016 12:13:56 GMT

Hi igorpadykov,

thanks for your quick answer!

Yes, I am using the last NXP U-Boot release based on v2015.04 for i.MX6Q. I have enabled all the configuration options that you said:

CONFIG_SECURE_BOOT CONFIG_SYS_FSL_SEC_COMPAT 4 /* HAB version */ CONFIG_FSL_CAAM CONFIG_CMD_DEKBLOB

CONFIG_SYS_FSL_LE

and also

CONFIG_CMD_BLOB

which is needed in order to enable the blob command.

Could you confirm whether the usage example that I give is correct, and whether there is any error in the job descriptor which appears written? Thanks

Edit: by the way, just in case it helps to discard other problems, I have been successful using signed and signed + encrypted U-Boot images.

Re: How to use blob enc/blob dec U-Boot command.

igorpadykov — Mon, 27 Jun 2016 12:57:18 GMT

Hi jdepedro

please create service request for providing additional

documentation for this case.

Best regards

igor

Re: How to use blob enc/blob dec U-Boot command.

giuliodominutti — Wed, 27 Sep 2017 14:52:12 GMT

I have the same problem, have you found a solution?

Thanks

Re: How to use blob enc/blob dec U-Boot command.

BiyongSUN — Fri, 29 Sep 2017 03:09:40 GMT

Generate Blob Under Linux
https://community.nxp.com/docs/DOC-335353

Re: How to use blob enc/blob dec U-Boot command.

giuliodominutti — Tue, 21 Nov 2017 12:12:32 GMT

I used this guide with success with a linux kernel 3.15, now I upgraded to 4.1.15, and when it's enabled "Freescale CAAM-Multicore driver backend", the kernel has no errors, but at runtime it doesn't start, it freeze after a while. There are known issue on such a problem?

Re: How to use blob enc/blob dec U-Boot command.

BiyongSUN — Wed, 22 Nov 2017 03:17:58 GMT

Actually we verify on the 4.1.15. Please make sure you are using NXP official BSP.

If you are not using NXP reference, please check the system desgin including software and hardware. CMA size maybe need to be changed for your hardware.

BTW, NXP never release BSP with Linux kernel 3.15.

Re: How to use blob enc/blob dec U-Boot command.

jdepedro — Thu, 04 Jan 2018 21:51:48 GMT

I had a similar problem and it was some register access during caam probe. Moving some clock enabling solve it for me.