Verify signed images from Linux user space

キャンセル
次の結果を表示 
表示  限定  | 次の代わりに検索 
もしかして: 

Verify signed images from Linux user space

ソリューションへジャンプ
1,241件の閲覧回数
michalhojsik
Contributor II

Hi.

I am using the authenticated boot feature of i.MX6ul and I would like to ask:

How can I verify a signed image (for example signed Kernel with device tree) from Linux user-space?

While doing a firmware upgrade, I would like to verify that the new firmware will successfully boot before flashing it to the memory the device boots from.

Regards,

Michal

ラベル(2)
1 解決策
1,018件の閲覧回数
Yuri
NXP Employee
NXP Employee

Hello,

 Generally,  HAB API library is included as a component of the boot ROM. It allows

image code, external to the ROM, to make calls back to the HAB for authenticating

additional boot stages.  But we do not have Linux user space implementation of the

HAB API. Customers can try to design own one. 

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

元の投稿で解決策を見る

0 件の賞賛
3 返答(返信)
1,018件の閲覧回数
jdepedro
Contributor IV

@Yuri However HAB API requires the image to be validated to be at a expecific absolute memory location (as described in the CST) correct? This is something that is not always possible when running Linux SO.

Is there a way to workaround that requirement?

0 件の賞賛
1,018件の閲覧回数
Yuri
NXP Employee
NXP Employee

Hello,

  Correct, using HAB API under Linux may have some restrictions. We do not have 

solutions for Linux user space. 

Regards,

Yuri.

1,019件の閲覧回数
Yuri
NXP Employee
NXP Employee

Hello,

 Generally,  HAB API library is included as a component of the boot ROM. It allows

image code, external to the ROM, to make calls back to the HAB for authenticating

additional boot stages.  But we do not have Linux user space implementation of the

HAB API. Customers can try to design own one. 

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

0 件の賞賛