AnsweredAssumed Answered

secure boot in i.mx6ull

Question asked by changbao ma on Jul 17, 2019
Latest reply on Jul 22, 2019 by Yuri Muhin

Hi, NXP engineers

     i make secure boot in i.mx6ull refer to https://www.nxp.com/docs/en/application-note/AN4581.pdf . i miss understand the 3 params  "877ff400 0x000 0x48000"  in below section, which is in chapter “3.5. Create the CSF descriptionfile

 

[AuthenticateData]
# Key slot index used to authenticatethe image data
Verification index = 2
# Address Offset Length  DataFilePath

Blocks = 877fb000 0x000 0x48000 “/<path_to_u-boot_dir>/u-boot-dtb.imx"

 

## param 1: The first value is the address on the target where HAB expects the signed image data to begin.
## param 2: The second value is the offset into the file where CST will begin signing. (always offset 0 ???)
## param 3: The third value is length in bytes of the data to sign starting from the offset. (should it be the size of u-boot.imx ???)

 

While I compile the u-boot source, i get:

 ./tools/mkimage -n board/freescale/mx6ullevk/imximage.cfg.cfgtmp -T imximage -e 0x87800000 -d u-boot.bin u-boot.imx
Image Type:   Freescale IMX Boot Image
Image Ver:    2 (i.MX53/6/7 compatible)
Mode:         DCD
Data Size:    442368 Bytes = 432.00 kB = 0.42 MB
Load Address: 877ff420
Entry Point:  87800000
HAB Blocks:   877ff400 00000000 00067c00

What should i replace those 3 params "Blocks = 877fb000 0x000 0x48000" with in CSF according to my u-boot.imx?

Outcomes