HABv4 encrypted boot for linux kernel on imx8mp board

[kei_odagiri]

Hi,

I am struggling to get work encrypted boot for Linux kernel on imx8mp custom board. Before the current work I checked the encrypted boot for the both of spl and fit contents (optee, atf, dtb and uboot), and also the secure boot for Linux kernel. They are worked. I read documents released on uboot-imx. Thanks for your documents.

Would you tell me about followings?

• Any documents for the encrypted boot for Linux kernel. I had not found a document described about the encrypted boot for Linux kernel.
• What does RSN code 0x3a mean? I had not found any description about the code.

About RSN code 0x3a, following log is the HAB log. My board written the encrypted Linux kernel always resets after the log.

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x14 0x45 0x33 0x3a 0xc0 0x00
0xbe 0x00 0x0c 0x01 0xbb 0x00 0x00 0x00
0x41 0x27 0x00 0x20

STS = HAB_FAILURE (0x33)

I don't have enough information. So I might have incorrect method. Just in case write them down.

• I am using the image based on secure boot image for linux kernel.
• Order of the contents are at first kernel Image as fit format (encrypted and signed), ivt (signed) , csf and dek_blob.
• The beginning of the kernel image is not encrypted to pass header check by uboot. Because uboot checks the header before authentication (HAB API) and terminate the boot sequence.

Best regards,

Kei Odagiri

[kei_odagiri]

Hi,

I'm thinking to develop a new decryption processing for Linux kernel image by using the secure boot and encrypted boot which are already confirmed if HAB can not support the encrypted boot for Linux kernel. So I need your information to judge it.

I' like to know at least whether the encrypted boot for linux kernel is supported or not and any hint about RSN code 0x3a. I'm grad that you provide any material for it but it isn't needed right away if there isn't any existing material.

Thank you

Kei Odagiri

[kei_odagiri]

Hi,

Had you have any progress? If there is lack of information, please let me know.

Thank you

Kei Odagiri