topic Partial Image Authentication in HAB in i.MX Processors

Partial Image Authentication in HAB

norratheprattan — Mon, 18 Jul 2016 23:21:35 GMT

I'm not sure if my previous question has been noticed since I put it in a comment. So I'll put it here instead.

Based on my understanding of HAB and HAB uImage Layout, uImage is authenticated as a whole by u-boot. and it seems to be the case for example API provided in a document.

Is there a code (and/or is it possible at all in HAB) for authenticating only a partial uImage since some parts of our image (at least at the end) should support a code update.

Thanks,

Re: Partial Image Authentication in HAB

Yuri — Tue, 19 Jul 2016 10:21:31 GMT

Hello,

Basically boot ROM HAB API is used just to check an area in memory,

so, if customer's uImage can be split into two parts - it is possible to sign

only one of them (based on uImage memory layout).

Have a great day,

Yuri

------------------------------------------------------------------------------

Note: If this post answers your question, please click the Correct

Answer button. Thank you!

------------------------------------------------------------------------------