Hi Now I am investigate the encrypted boot of Linux kernel for i.mx8mq evaluation board. (Because when I encrypted the Linux kernel image(27MByte) with cts tools,it has errors,) (now I only create a small size file to verify the encrypt and decrypt in u-boot.) I have already realized the secure boot in the file [mx8m_secure_boot.txt] included Linux kernel. And I have also already realized the encrypted boot in the file [mx8m_encrypted_boot.txt]. But in the file [mx8m_encrypted_boot.txt],it does not include the encrypted Linux kernel boot. Q1:Why does it not realize the encrypted Linux kernel boot? Normally the encrypted Linux kernel boot need not realize,is it right? Q2:I met some problem when I Authenticated the image in u-boot. But I can not find the more information about the even data below. Could you give some advice about the issue? --------- HAB Event 1 ----------------- event data: 0x10 0x02 0x11 0x22 0x40 0x00 0x08 0x16 0x55 0x55 0x00 0x0f 0x00 0x10 0x20 0x00 0x00 0x00 0x00 0x01 0x91 0x00 0x88 0x0e 0x00 0x00 0x00 0x05 As described below, I think the csf file is right. ======================================================= ivt_offset = 0x8000, ivt addr = 0x40488000 ivt entry = 0x40480000, dcd = 0x00000000, csf = 0x40488020 Dumping IVT 40488000: 412000d1 40480000 00000000 00000000 .. A..H@........ 40488010: 00000000 40488000 40488020 00000000 ......H@ .H@.... Dumping CSF Header 40488020: 437000d4 000c00be 00001703 70000000 ..pC...........p 40488030: 020c00be 01000009 84010000 000c00ca ................ 40488040: 001dc501 d8040000 000c00be 02000009 ................ 40488050: dc060000 001400ca 001dc502 300a0000 ...............0 Secure boot disabled HAB Configuration: 0xf0, HAB State: 0x66 Calling authenticate_image in ROM ivt_offset = 0x8000 start = 0x40480000 bytes = 0xa068 Secure boot disabled HAB Configuration: 0xf0, HAB State: 0x66 --------- HAB Event 1 ----------------- event data: 0xdb 0x00 0x24 0x43 0x33 0x30 0xc0 0x1d 0x10 0x02 0x11 0x22 0x40 0x00 0x08 0x16 0x55 0x55 0x00 0x0f 0x00 0x10 0x20 0x00 0x00 0x00 0x00 0x01 0x91 0x00 0x88 0x0e 0x00 0x00 0x00 0x05 STS = HAB_FAILURE (0x33) RSN = HAB_ENG_FAIL (0x30) CTX = HAB_CTX_COMMAND (0xC0) ENG = HAB_ENG_CAAM (0x1D) ======================================================= Thanks and Best Regards Chunli Liang
