HAB event data on imx8mq

[tristanbss]

Hi,

We followed the Android Security User Guide of Android 9 to build u-boot with CONFIG_SECURE_BOOT=y and run it on our custom board.

SRK has been programmed.

And got hab events in hab_status as below.

Can someone kindly help us to fit it?

u-boot=> hab_status

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x14 0x44 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x40 0x1f 0xdd 0xc0
0x00 0x00 0x00 0x20

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)


--------- HAB Event 2 -----------------
event data:
0xdb 0x00 0x14 0x44 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x40 0x1f 0xcd 0xc0
0x00 0x00 0x00 0x04

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)


--------- HAB Event 3 -----------------
event data:
0xdb 0x00 0x3c 0x44 0x33 0x18 0xc0 0x00
0xca 0x00 0x34 0x00 0x02 0xc5 0x1d 0x00
0x00 0x00 0x0d 0x5c 0x40 0x1f 0xcd 0xc0
0x00 0x00 0x10 0x20 0x40 0x20 0x00 0x00
0x00 0x0a 0xd7 0xf0 0x40 0x2a 0xd7 0xf0
0x00 0x00 0x6f 0xd0 0x00 0x91 0x00 0x00
0x00 0x00 0x95 0xd0 0x56 0x00 0x00 0x00
0x00 0x07 0x5c 0x80

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_SIGNATURE (0x18)
CTX = HAB_CTX_COMMAND (0xC0)
ENG = HAB_ENG_ANY (0x00)

[Harvey021 · Accepted solution]

Hi,

An assertion event means that one of the following required areas is not signed as documented in the Operation section for authenticate_image() API:

Have a reference to the HAB4_API. The document is with CST tool.

Regards

Harvey