imx8qxp encryption ahab

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

imx8qxp encryption ahab

580 Views
BrainKub
Contributor II

I try to encrypt the image, but an error occurs with offsets

I take offsets from mkimage:

Spoiler
include misc.mak
include m4.mak
include android.mak
include test.mak
include autobuild.mak
include rev_a.mak
include alias.mak
./../mkimage_imx8 -soc QX -rev B0 -dev flexspi -append mx8qxc0-ahab-container.img -c -scfw scfw_tcm.bin -ap u-boot-atf.bin a35 0x80000000 -out flash.bin
SOC: QX
REVISION: B0
BOOT DEVICE: flexspi
New Container: 0
SCFW: scfw_tcm.bin
AP: u-boot-atf.bin core: a35 addr: 0x80000000
Output: flash.bin
CONTAINER FUSE VERSION: 0x00
CONTAINER SW VERSION: 0x0000
ivt_offset: 4096
rev: 2
Platform: i.MX8QXP B0
ivt_offset: 4096
container image offset (aligned):11800
flags: 0x10
Hash of the images = sha384
1+0 записей получено
1+0 записей отправлено
151552 байт (152 kB, 148 KiB) скопирован, 0,000250419 s, 605 MB/s
294+1 записей получено
294+1 записей отправлено
150720 байт (151 kB, 147 KiB) скопирован, 0,00472694 s, 31,9 MB/s
SCFW file_offset = 0x11800 size = 0x25000
Hash of the images = sha384
1+0 записей получено
1+0 записей отправлено
872448 байт (872 kB, 852 KiB) скопирован, 0,000952138 s, 916 MB/s
1702+1 записей получено
1702+1 записей отправлено
871767 байт (872 kB, 851 KiB) скопирован, 0,0103699 s, 84,1 MB/s
AP file_offset = 0x36800 size = 0xd5000
CST: CONTAINER 0 offset: 0x400
CST: CONTAINER 0: Signature Block: offset is at 0x590
DONE.
Note: Please copy image to offset: IVT_OFFSET + IMAGE_OFFSET
./../scripts/fspi_packer.sh ../scripts/fspi_header
0+1 записей получено
0+1 записей отправлено
512 байт скопировано, 0,000111019 s, 4,6 MB/s
1070+0 записей получено
1070+0 записей отправлено
1095680 байт (1,1 MB, 1,0 MiB) скопирован, 0,00224089 s, 489 MB/s
3+0 записей получено
3+0 записей отправлено
1536 байт (1,5 kB, 1,5 KiB) скопирован, 0,00011182 s, 13,7 MB/s
F(Q)SPI IMAGE PACKE

but I get the error:

[ERROR] CST: Offsets are not consistent with the input binary to be signed

0 Kudos
2 Replies

566 Views
igorpadykov
NXP Employee
NXP Employee

Hi Ilya

 

one can look at uboot documentation

https://source.codeaurora.org/external/imx/uboot-imx/tree/doc/imx/ahab/guides/mx8_mx8x_encrypted_boo...

 

Best regards
igor

0 Kudos

557 Views
BrainKub
Contributor II

The documentation says:


The mkimage log is used during the encrypted boot procedure to create the
Command Sequence File (CSF)


But mkimage gives incorrect offsets.

0 Kudos