i.MX6Q rev 1.6 HAB status reports warning event

[Abder]

Hi,

I encountered the issue below while implementing the HAB on an IMX6Q based board: 

mx6quad> hab_status
Secure boot enabled
HAB Configuration: 0xcc, HAB State: 0x99

--------- HAB Event 1 -----------------
event data:
        0xdb 0x00 0x24 0x42 0x69 0x30 0xe1 0x1d
        0x00 0x04 0x00 0x02 0x40 0x00 0x36 0x06
        0x55 0x55 0x00 0x03 0x00 0x00 0x00 0x00
        0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
        0x00 0x00 0x00 0x01

STS = HAB_WARNING (0x69)
RSN = HAB_ENG_FAIL (0x30)
CTX = HAB_CTX_ENTRY (0xE1)
ENG = HAB_ENG_CAAM (0x1D)

The issue is encountered in HAB open and closed modes

Characteristics:

- i.MX6Q rev1.6 Industrial temperature grade

- U-boot-imx 2020.04

I found the following thread on the community , but the mentioned patch does not apply for my u-boot.

I would like to know if there is an update for this patch for u-boot-imx2020.04 ?

Also, why for this SOC revision the HAB authentication works only when the HAB is enabled AND closed ??? If I enable the HAB but not close it I still get HAB_FEALURE events... I say this because that's NOT what is described in your documentation AN4581  (section 5.5.1 HAB 4.1.2 and newer) 

Best regards,

--
Abder

[AldoG]

Hello,

I'm checking for the availability of this patch, from the description of your issue it seems that it is indeed the RNG self-test issue.

Also, please help me to create a support ticket for me to be able to share the patch with you
www.nxp.com -->support --->support Ticket....

Best regards,
Aldo.

[Abder]

Hi Aldo,

I don't understand why do I need to pay for this. This is an NXP issue and you should provide the public with the correct information/solution for this "known" bug !

The RNG self-test should be included by default in your u-boot-imx (why having a special branch of u-boot if not to add support for your products and fix bugs !) and everyone who have this issue could be able to enable it just by a config option.

So, can you please, at least, share the patch here for everyone, and why not afterwards mainline it in u-boot-imx !

Best regards,

--
Abder

[AldoG]

Hi,

Please accept my apologize for the confusion, but please do note that it was reworked RNG self test patch and upstream it into our uboot 2021.04. You can find the self test code here
https://source.codeaurora.org/external/imx/uboot-imx/tree/drivers/crypto/fsl/rng_self_test.c?h=lf_v2...

If you need the patch to be back ported just like it is in your case, I would need you to help me creating a support ticket so I can share it.

Best regards,
Aldo.