i.MX6ULL HAB signature failure booting on eMMC

[sl8vz]

Hi,

Using uboot 2022.01

I'm experiencing issues to verify u-boot when booting from eMMC on i.MX6ULL

I think the signature and fused SRK hash are good as I've been able to get
no HAB events using Serial Download.
However it's now failing again in signature verification when the image
is flashed to eMMC.

I double checked that the CSF was correctly included in the sdcard.img
and I could verify that the same data is present in memory in both cases.

Reading other posts I also disabled L1/L2 cache by fuse

csf.txt

[Header]
Version = 4.2
Hash Algorithm = sha256
Engine = SW
Engine Configuration = 0
Certificate Format = X509
Signature Format = CMS

[Install SRK]
# Index of the key location in the SRK table to be installed
File = "../crts/SRK_1_2_3_4_table.bin"
Source index = 0

[Install CSFK]
# Key used to authenticate the CSF data
File = "../crts/CSF1_1_sha256_4096_65537_v3_usr_crt.pem"

[Authenticate CSF]

[Install Key]
# Key slot index used to authenticate the key to be installed
Verification index = 0
# Target key slot in HAB key store where key will be installed
Target Index = 2
# Key to install
File= "../crts/IMG1_1_sha256_4096_65537_v3_usr_crt.pem"

[Authenticate Data]
# Key slot index used to authenticate the image data
Verification index = 2
# Authenticate Start Address, Offset, Length and file
Blocks = 0x877ff400 0x00000000 0x00063c00 "u-boot-dtb.imx", \
0x00910000 0x0000002c 0x00000220 "u-boot-dtb.imx"

Uboot addresses

Image Type: Freescale IMX Boot Image
Image Ver: 2 (i.MX53/6/7 compatible)
Mode: DCD
Data Size: 417888 Bytes = 408.09 KiB = 0.40 MiB
Load Address: 877ff420
Entry Point: 87800000
HAB Blocks: 0x877ff400 0x00000000 0x00063c00
DCD Blocks: 0x00910000 0x0000002c 0x00000220

1) Boot using Serial Download

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66
No HAB Events Found!

Uboot start

=> md.w 0x877ff400 100
877ff400: 00d1 4020 0000 8780 0000 0000 f42c 877f .. @........,...
877ff410: f420 877f f400 877f 3000 8786 0000 0000 ........0......
877ff420: f000 877f 6060 0006 0000 0000 02d2 4020 ....``........ @
877ff430: 02cc 041c 0c02 6840 ffff ffff 0c02 6c40 ......@h......@l
877ff440: ffff ffff 0c02 7040 ffff ffff 0c02 7440 ......@p......@t
877ff450: ffff ffff 0c02 7840 ffff ffff 0c02 7c40 ......@x......@|
877ff460: ffff ffff 0c02 8040 ffff ffff 0e02 b404 ......@.........
877ff470: 0c00 0000 0e02 ac04 0000 0000 0e02 7c02 ...............|
877ff480: 0000 3000 0e02 5002 0000 3000 0e02 4c02 ...0...P...0...L
877ff490: 0000 3000 0e02 9004 0000 3000 0e02 8802 ...0.......0....
877ff4a0: 0c00 3000 0e02 7002 0000 0000 0e02 6002 ...0...p.......`
877ff4b0: 0000 3000 0e02 6402 0000 3000 0e02 a004 ...0...d...0....
877ff4c0: 0000 3000 0e02 9404 0200 0000 0e02 8002 ...0............
877ff4d0: 0000 3000 0e02 8402 0000 3000 0e02 b004 ...0.......0....
877ff4e0: 0200 0000 0e02 9804 0000 3000 0e02 a404 ...........0....
877ff4f0: 0000 3000 0e02 4402 0000 3000 0e02 4802 ...0...D...0...H
877ff500: 0000 3000 1b02 1c00 0000 0080 1b02 0008 ...0............
877ff510: 39a1 0300 1b02 0c08 0000 0100 1b02 1008 .9..............
877ff520: 0900 0900 1b02 3c08 5c01 5c01 1b02 4008 .......<.\.\...@
877ff530: 0000 0000 1b02 4808 4040 3430 1b02 5008 .......H@@04...P
877ff540: 4040 2e30 1b02 1c08 3333 3333 1b02 2008 @@0.....3333...
877ff550: 3333 3333 1b02 2c08 33f3 3333 1b02 3008 3333...,.333...0
877ff560: 33f3 3333 1b02 c008 9400 0940 1b02 b808 .333......@.....
877ff570: 0000 0008 1b02 0400 0200 2d00 1b02 0800 ...........-....
877ff580: 331b 3030 1b02 0c00 6b67 f352 1b02 1000 .300....gkR.....
877ff590: 6db6 630b 1b02 1400 ff01 db00 1b02 1800 .m.c............
877ff5a0: 2100 4017 1b02 1c00 0000 0080 1b02 2c00 .!.@...........,
877ff5b0: 0000 d226 1b02 3000 6b00 2310 1b02 4000 ..&....0.k.#...@
877ff5c0: 0000 4f00 1b02 0000 18c4 0000 1b02 9008 ...O............
877ff5d0: 4000 0000 1b02 1c00 0004 3280 1b02 1c00 .@.........2....
877ff5e0: 0000 3380 1b02 1c00 0400 3180 1b02 1c00 ...3.......1....
877ff5f0: 2015 3080 1b02 1c00 0004 4080 1b02 1c00 . .0.......@....

CSF start

=> md.w 0x87863000 100
87863000: 00d4 4250 00be 000c 1703 0000 0000 5000 ..PB...........P
87863010: 00be 020c 0009 0100 0000 6402 00ca 000c ...........d....
87863020: c501 00ff 0000 b807 00be 000c 0009 0200 ................
87863030: 0000 bc0a 00ca 001c c502 00ff 0000 1010 ................
87863040: 7f87 00f4 0600 003c 9100 0000 0000 2002 ......<........
87863050: 02d7 4013 02e1 210f 0000 8000 0002 0300 ...@...!........
87863060: 3dbd c709 5ad9 eb07 d0a6 7415 4922 b821 .=...Z.....t"I!.
87863070: 4f9c 6748 036d b65a 14c3 156f 64eb 946a .OHgm.Z...o..dj.
87863080: e9de 7325 3c1d fa1e 3f37 b030 2ca9 d009 ..%s.<..7?0..,..
87863090: 89f5 a656 076c 2506 ef24 97bb acc1 fbeb ..V.l..%$.......
878630a0: 5318 833f f80a 5944 2206 1bf6 9a6a f023 .S?...DY."..j.#.
878630b0: 0022 3dcd 69a4 f83f 3780 9b8b 4c7a af33 "..=.i?..7..zL3.
878630c0: 1fb3 a090 c01c f320 a1ff ff3d 63e8 550b ...... ...=..c.U
878630d0: 48a1 ba27 147c 02a8 57a9 cba0 4afa a71e .H'.|....W...J..
878630e0: 3744 24bc fd92 81d6 31a9 4479 b562 cce7 D7.$.....1yDb...
878630f0: e9cf cd38 b6bb 262e 136e d544 5d67 1856 ..8....&n.D.g]V.
87863100: 9a86 c479 06d5 8d56 0ac5 465d 8b24 8b08 ..y...V...]F$...
87863110: 66c2 3d32 fffe a502 3f45 51bf 58aa 9a7e .f2=....E?.Q.X~.
87863120: 1a10 1c46 c47f e28e 1168 2cdf 5b80 e3c0 ..F.....h..,.[..
87863130: 6cf9 27de cd63 a2f3 b483 9fec 97db fd7d .l.'c.........}.
87863140: 3a0f db74 0c8b 5c88 df70 8f8a 853f ec30 .:t....\p...?.0.
87863150: b9d6 0251 a52f b46c d36b 3f33 bc05 9c38 ..Q./.l.k.3?..8.
87863160: b050 6da6 2884 119f be5e ebfb 0575 3296 P..m.(..^...u..2
87863170: efc5 bb8d 7d05 a53f 0bc9 e695 e808 ec81 .....}?.........
87863180: 6983 26c7 c0ab bc0c a001 2a7d 7d00 6979 .i.&......}*.}yi
87863190: e1f5 172e e84a 49d7 5803 1918 bf99 397f ....J..I.X.....9
878631a0: 76db fecd 3827 944a a955 0775 76eb e579 .v..'8J.U.u..vy.
878631b0: a9c1 3535 2712 9562 963a 13bd 97ea 4321 ..55.'b.:.....!C
878631c0: e6ab 7d5d 6622 a6a2 ee04 0d25 63d5 227e ..]}"f....%..c~"
878631d0: d6a3 0cfa d75f 677d 396f 54d9 3c95 e83a ...._.}go9.T.<:.
878631e0: c64b 86c8 5e8c 7f0c 0954 6a1a 6cc0 fc41 K....^..T..j.lA.
878631f0: 8317 4eae 31a1 69fb b008 8fcb 235b ae00 ...N.1.i....[#..

CSF end

=> md.w 87866f00 100
87866f00: d046 3c1d 12d1 d43d 3d12 0cd0 d83d 110b F..<..=..=..=...
87866f10: 00f0 0901 983d d726 2b1a 1ad2 a82b d143 ....=.&..+..+.C.
87866f20: 301a 1ad4 f030 0100 3d09 46b0 63b8 4db2 .0..0....=.F.c.M
87866f30: 4db0 12dd d01c 301d 46b0 1dd1 d13b 3c12 .M.....0.F..;..<
87866f40: 12d4 d03c 3c0c 0fd8 8c13 8879 d804 130f ..<..<....y.....
87866f50: 00f0 0901 dd3f 1c12 74b0 74b0 74b0 1dd0 ....?....t.t.t..
87866f60: d13d 3e12 12d4 d03e 3e0c 15d8 9419 885b =..>..>..>....[.
87866f70: d80a 190f 00f0 0903 d834 1713 2698 3d91 ........4....&.=
87866f80: 4488 4488 13e0 d017 2918 239d 6a98 2f99 .D.D.....).#.j./
87866f90: 2f9c 19d0 d029 2918 13d4 a82a d156 3313 ./..)..)..*.V..3
87866fa0: 4488 0fd8 d713 260f 0fd2 a026 a474 b079 .D.....&..&.t.y.
87866fb0: b424 d82a 2b27 7ba4 33b0 42b0 33b0 27d4 $.*.'+.{.3.B.3.'
87866fc0: b837 b834 d126 4027 03f1 1001 0142 00f4 7.4.&.'@....B...
87866fd0: 1001 0142 00f0 0901 0142 0000 0000 0000 ..B.....B.......
87866fe0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
87866ff0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
87867000: 0017 0000 0000 0000 c000 b662 a9ac b6e1 ..........b.....
87867010: 0005 0000 0015 0000 0ff0 0000 0f50 0000 ............P...
87867020: 0001 0000 1690 b6e1 001d 0000 fac0 b66a ..............j.
87867030: c3c8 b66b ccb8 b6eb 0003 0000 fff8 0000 ..k.............
87867040: 0001 0000 0000 0000 0000 0000 0005 0000 ................
87867050: 0080 0000 0001 0000 0001 0000 0000 0000 ................
87867060: 0000 0000 0000 0000 faf0 b66a fc80 b66a ..........j...j.
87867070: 5758 b66b a2c0 b66b a2c0 b66b a2f0 b66b XWk...k...k...k.
87867080: 0000 0000 0000 0000 0000 0000 0000 0000 ................
87867090: 0000 0000 0097 0174 0000 0000 0000 0000 ......t.........
878670a0: 0000 0374 0000 0000 0000 0000 0000 007c ..t...........|.
878670b0: 01a6 0000 01ab 0000 0000 0000 0000 01a6 ................
878670c0: 0000 01ab 0000 0000 0000 0000 0053 0000 ............S...
878670d0: 0001 0000 d038 b6e1 0096 0000 ffff ffff ....8...........
878670e0: 00e4 0000 0000 0000 6e69 3320 312e 2032 ........in 3.12
878670f0: 5f5f 6f63 746e 6961 736e 5f5f 7720 6c69 __contains__ wil

2) Boot using internal boot (eMMC)

Secure boot disabled

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------
event data:
0xdb 0x00 0x24 0x42 0x33 0x18 0xc0 0x00
0xca 0x00 0x1c 0x00 0x02 0xc5 0xff 0x00
0x00 0x00 0x10 0x10 0x87 0x7f 0xf4 0x00
0x00 0x06 0x3c 0x00 0x00 0x91 0x00 0x00
0x00 0x00 0x02 0x20

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_SIGNATURE (0x18)
CTX = HAB_CTX_COMMAND (0xC0)
ENG = HAB_ENG_ANY (0x00)


--------- HAB Event 2 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x7f 0xf4 0x00
0x00 0x00 0x00 0x20

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)


--------- HAB Event 3 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x7f 0xf4 0x2c
0x00 0x00 0x02 0x20

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)


--------- HAB Event 4 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x7f 0xf4 0x20
0x00 0x00 0x00 0x01

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)


--------- HAB Event 5 -----------------
event data:
0xdb 0x00 0x14 0x42 0x33 0x0c 0xa0 0x00
0x00 0x00 0x00 0x00 0x87 0x80 0x00 0x00
0x00 0x00 0x00 0x04

STS = HAB_FAILURE (0x33)
RSN = HAB_INV_ASSERTION (0x0C)
CTX = HAB_CTX_ASSERT (0xA0)
ENG = HAB_ENG_ANY (0x00)

u-boot start

=> md.w 0x877ff400 100
877ff400: 00d1 4020 0000 8780 0000 0000 f42c 877f .. @........,...
877ff410: f420 877f f400 877f 3000 8786 0000 0000 ........0......
877ff420: f000 877f 6060 0006 0000 0000 02d2 4020 ....``........ @
877ff430: 02cc 041c 0c02 6840 ffff ffff 0c02 6c40 ......@h......@l
877ff440: ffff ffff 0c02 7040 ffff ffff 0c02 7440 ......@p......@t
877ff450: ffff ffff 0c02 7840 ffff ffff 0c02 7c40 ......@x......@|
877ff460: ffff ffff 0c02 8040 ffff ffff 0e02 b404 ......@.........
877ff470: 0c00 0000 0e02 ac04 0000 0000 0e02 7c02 ...............|
877ff480: 0000 3000 0e02 5002 0000 3000 0e02 4c02 ...0...P...0...L
877ff490: 0000 3000 0e02 9004 0000 3000 0e02 8802 ...0.......0....
877ff4a0: 0c00 3000 0e02 7002 0000 0000 0e02 6002 ...0...p.......`
877ff4b0: 0000 3000 0e02 6402 0000 3000 0e02 a004 ...0...d...0....
877ff4c0: 0000 3000 0e02 9404 0200 0000 0e02 8002 ...0............
877ff4d0: 0000 3000 0e02 8402 0000 3000 0e02 b004 ...0.......0....
877ff4e0: 0200 0000 0e02 9804 0000 3000 0e02 a404 ...........0....
877ff4f0: 0000 3000 0e02 4402 0000 3000 0e02 4802 ...0...D...0...H
877ff500: 0000 3000 1b02 1c00 0000 0080 1b02 0008 ...0............
877ff510: 39a1 0300 1b02 0c08 0000 0100 1b02 1008 .9..............
877ff520: 0900 0900 1b02 3c08 5c01 5c01 1b02 4008 .......<.\.\...@
877ff530: 0000 0000 1b02 4808 4040 3430 1b02 5008 .......H@@04...P
877ff540: 4040 2e30 1b02 1c08 3333 3333 1b02 2008 @@0.....3333...
877ff550: 3333 3333 1b02 2c08 33f3 3333 1b02 3008 3333...,.333...0
877ff560: 33f3 3333 1b02 c008 9400 0940 1b02 b808 .333......@.....
877ff570: 0000 0008 1b02 0400 0200 2d00 1b02 0800 ...........-....
877ff580: 331b 3030 1b02 0c00 6b67 f352 1b02 1000 .300....gkR.....
877ff590: 6db6 630b 1b02 1400 ff01 db00 1b02 1800 .m.c............
877ff5a0: 2100 4017 1b02 1c00 0000 0080 1b02 2c00 .!.@...........,
877ff5b0: 0000 d226 1b02 3000 6b00 2310 1b02 4000 ..&....0.k.#...@
877ff5c0: 0000 4f00 1b02 0000 18c4 0000 1b02 9008 ...O............
877ff5d0: 4000 0000 1b02 1c00 0004 3280 1b02 1c00 .@.........2....
877ff5e0: 0000 3380 1b02 1c00 0400 3180 1b02 1c00 ...3.......1....
877ff5f0: 2015 3080 1b02 1c00 0004 4080 1b02 1c00 . .0.......@....

CSF start

=> md.w 87863000 100 (0x877ff400 + 0x00063c00)
87863000: 00d4 4250 00be 000c 1703 0000 0000 5000 ..PB...........P
87863010: 00be 020c 0009 0100 0000 6402 00ca 000c ...........d....
87863020: c501 00ff 0000 b807 00be 000c 0009 0200 ................
87863030: 0000 bc0a 00ca 001c c502 00ff 0000 1010 ................
87863040: 7f87 00f4 0600 003c 9100 0000 0000 2002 ......<........
87863050: 02d7 4013 02e1 210f 0000 8000 0002 0300 ...@...!........
87863060: 3dbd c709 5ad9 eb07 d0a6 7415 4922 b821 .=...Z.....t"I!.
87863070: 4f9c 6748 036d b65a 14c3 156f 64eb 946a .OHgm.Z...o..dj.
87863080: e9de 7325 3c1d fa1e 3f37 b030 2ca9 d009 ..%s.<..7?0..,..
87863090: 89f5 a656 076c 2506 ef24 97bb acc1 fbeb ..V.l..%$.......
878630a0: 5318 833f f80a 5944 2206 1bf6 9a6a f023 .S?...DY."..j.#.
878630b0: 0022 3dcd 69a4 f83f 3780 9b8b 4c7a af33 "..=.i?..7..zL3.
878630c0: 1fb3 a090 c01c f320 a1ff ff3d 63e8 550b ...... ...=..c.U
878630d0: 48a1 ba27 147c 02a8 57a9 cba0 4afa a71e .H'.|....W...J..
878630e0: 3744 24bc fd92 81d6 31a9 4479 b562 cce7 D7.$.....1yDb...
878630f0: e9cf cd38 b6bb 262e 136e d544 5d67 1856 ..8....&n.D.g]V.
87863100: 9a86 c479 06d5 8d56 0ac5 465d 8b24 8b08 ..y...V...]F$...
87863110: 66c2 3d32 fffe a502 3f45 51bf 58aa 9a7e .f2=....E?.Q.X~.
87863120: 1a10 1c46 c47f e28e 1168 2cdf 5b80 e3c0 ..F.....h..,.[..
87863130: 6cf9 27de cd63 a2f3 b483 9fec 97db fd7d .l.'c.........}.
87863140: 3a0f db74 0c8b 5c88 df70 8f8a 853f ec30 .:t....\p...?.0.
87863150: b9d6 0251 a52f b46c d36b 3f33 bc05 9c38 ..Q./.l.k.3?..8.
87863160: b050 6da6 2884 119f be5e ebfb 0575 3296 P..m.(..^...u..2
87863170: efc5 bb8d 7d05 a53f 0bc9 e695 e808 ec81 .....}?.........
87863180: 6983 26c7 c0ab bc0c a001 2a7d 7d00 6979 .i.&......}*.}yi
87863190: e1f5 172e e84a 49d7 5803 1918 bf99 397f ....J..I.X.....9
878631a0: 76db fecd 3827 944a a955 0775 76eb e579 .v..'8J.U.u..vy.
878631b0: a9c1 3535 2712 9562 963a 13bd 97ea 4321 ..55.'b.:.....!C
878631c0: e6ab 7d5d 6622 a6a2 ee04 0d25 63d5 227e ..]}"f....%..c~"
878631d0: d6a3 0cfa d75f 677d 396f 54d9 3c95 e83a ...._.}go9.T.<:.
878631e0: c64b 86c8 5e8c 7f0c 0954 6a1a 6cc0 fc41 K....^..T..j.lA.
878631f0: 8317 4eae 31a1 69fb b008 8fcb 235b ae00 ...N.1.i....[#..

CSF end

=> md.w 87866f00 100
87866f00: d046 3c1d 12d1 d43d 3d12 0cd0 d83d 110b F..<..=..=..=...
87866f10: 00f0 0901 983d d726 2b1a 1ad2 a82b d143 ....=.&..+..+.C.
87866f20: 301a 1ad4 f030 0100 3d09 46b0 63b8 4db2 .0..0....=.F.c.M
87866f30: 4db0 12dd d01c 301d 46b0 1dd1 d13b 3c12 .M.....0.F..;..<
87866f40: 12d4 d03c 3c0c 0fd8 8c13 8879 d804 130f ..<..<....y.....
87866f50: 00f0 0901 dd3f 1c12 74b0 74b0 74b0 1dd0 ....?....t.t.t..
87866f60: d13d 3e12 12d4 d03e 3e0c 15d8 9419 885b =..>..>..>....[.
87866f70: d80a 190f 00f0 0903 d834 1713 2698 3d91 ........4....&.=
87866f80: 4488 4488 13e0 d017 2918 239d 6a98 2f99 .D.D.....).#.j./
87866f90: 2f9c 19d0 d029 2918 13d4 a82a d156 3313 ./..)..)..*.V..3
87866fa0: 4488 0fd8 d713 260f 0fd2 a026 a474 b079 .D.....&..&.t.y.
87866fb0: b424 d82a 2b27 7ba4 33b0 42b0 33b0 27d4 $.*.'+.{.3.B.3.'
87866fc0: b837 b834 d126 4027 03f1 1001 0142 00f4 7.4.&.'@....B...
87866fd0: 1001 0142 00f0 0901 0142 0000 0000 0000 ..B.....B.......
87866fe0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
87866ff0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
87867000: 0017 0000 0000 0000 c000 b662 a9ac b6e1 ..........b.....
87867010: 0005 0000 0015 0000 0ff0 0000 0f50 0000 ............P...
87867020: 0001 0000 1690 b6e1 001d 0000 fac0 b66a ..............j.
87867030: c3c8 b66b ccb8 b6eb 0003 0000 fff8 0000 ..k.............
87867040: 0001 0000 0000 0000 0000 0000 0005 0000 ................
87867050: 0080 0000 0001 0000 0001 0000 0000 0000 ................
87867060: 0000 0000 0000 0000 faf0 b66a fc80 b66a ..........j...j.
87867070: 5758 b66b a2c0 b66b a2c0 b66b a2f0 b66b XWk...k...k...k.
87867080: 0000 0000 0000 0000 0000 0000 0000 0000 ................
87867090: 0000 0000 0097 0174 0000 0000 0000 0000 ......t.........
878670a0: 0000 0374 0000 0000 0000 0000 0000 007c ..t...........|.
878670b0: 01a6 0000 01ab 0000 0000 0000 0000 01a6 ................
878670c0: 0000 01ab 0000 0000 0000 0000 0053 0000 ............S...
878670d0: 0001 0000 d038 b6e1 0096 0000 ffff ffff ....8...........
878670e0: 00e4 0000 0000 0000 6e69 3320 312e 2032 ........in 3.12
878670f0: 5f5f 6f63 746e 6961 736e 5f5f 7720 6c69 __contains__ wil

Thanks,

Sebastien

[sl8vz]

Thanks @kef2 I will try that.

However it's impossible to get a HAB success if you don't fuse the SRK hash. If there's another way to reach a signature verification success I'm interested to know how.

[kef2]

As I said, SRK as well doesn't have to be fused to get clean HAB events log.

[kef2 · Accepted solution]

Hi

You shouldn't fuse anything until you make HAB happy. Even key data may be fused later, once you are sure you don't need fast auth or stronger/weaker key.

Problem is uuu, usbimx and native boot require different csf files

[Authenticate Data]
# Key slot index used to authenticate the image data
Verification index = 2
# Authenticate Start Address, Offset, Length and file
Blocks = 0x877ff400 0x00000000 0x00063c00 "u-boot-dtb.imx", \
0x00910000 0x0000002c 0x00000220 "u-boot-dtb.imx"

here block @0x910000 is where uuu copies DCD to. For native boot you I think you need to comment out that block. At least it works for me.