How to sign the ssp polarity rom patch?

[weo]

For a secure boot from SD on a i.MX28 it is necessary to sign the ssp polarity rom patch that is put into the eeprom.

In principle, it is easy. But:

The patch is loaded to address 0xe400 and that is a reserved memory area. HAB gives an error with reason 0x22, "invalid address: access denied". The secure boot fails.

If I load the patch to a different address, for example 0x8000, I get random crashes, I guess because of uninitialized memory (because the patch is not position independent??)

I'd appreciate any help!

[b36401]

You need to rebuild HAB data with adding this patch.

You can refer to chapter 3.3 of Secure Boot with i.MX28 HAB Version 4 Application Note:

http://cache.freescale.com/files/32bit/doc/app_note/AN4555.pdf

Have a great day,

Victor

-----------------------------------------------------------------------------------------------------------------------

Note: If this post answers your question, please click the Correct Answer button. Thank you!

-----------------------------------------------------------------------------------------------------------------------

[weo]

Thank you for you repsonse!

I did sign the patch. I had to put the signature before the patch because the area at 0xe400 is only 4KB followed by the private data of the rom monitor.

I get these HAB events:

HAB Status: 0x000000f0, 0x000000f0 [0x33]

--------- HAB Event 1 -----------------

event data:

    0xdb 0x00 0x14 0x40 0x33 0x22 0x33 0x00

    0x00 0x00 0x00 0x0f 0x00 0x00 0xe3 0x98

    0x00 0x00 0x00 0x80

--------- HAB Event 2 -----------------

event data:

    0xdb 0x00 0x14 0x40 0x33 0x22 0x33 0x00

    0x00 0x00 0x00 0x0f 0x00 0x00 0xe4 0x18

    0x00 0x00 0x00 0x80

--------- HAB Event 3 -----------------

event data:

    0xdb 0x00 0x14 0x40 0x33 0x22 0x33 0x00

    0x00 0x00 0x00 0x0f 0x00 0x00 0xe4 0x98

    0x00 0x00 0x00 0x80

...

Best regards,

Wolfgang