1 /*
2  * Copyright 2015 Freescale Semiconductor, Inc.
3  * Copyright 2017 NXP
4  *
5  * SPDX-License-Identifier:	GPL-2.0+
6  */
7 
8 #ifndef __FSL_SECURE_BOOT_H
9 #define __FSL_SECURE_BOOT_H
10 
11 #ifdef CONFIG_CHAIN_OF_TRUST
12 #define CONFIG_FSL_SEC_MON
13 
14 #ifdef CONFIG_SPL_BUILD
15 /*
16  * Define the key hash for U-Boot here if public/private key pair used to
17  * sign U-boot are different from the SRK hash put in the fuse
18  * Example of defining KEY_HASH is
19  * #define CONFIG_SPL_UBOOT_KEY_HASH \
20  *      "41066b564c6ffcef40ccbc1e0a5d0d519604000c785d97bbefd25e4d288d1c8b"
21  * else leave it defined as NULL
22  */
23 
24 #define CONFIG_SPL_UBOOT_KEY_HASH	NULL
25 #endif /* ifdef CONFIG_SPL_BUILD */
26 
27 #define CONFIG_KEY_REVOCATION
28 
29 #ifndef CONFIG_SPL_BUILD
30 #ifndef CONFIG_SYS_RAMBOOT
31 /* The key used for verification of next level images
32  * is picked up from an Extension Table which has
33  * been verified by the ISBC (Internal Secure boot Code)
34  * in boot ROM of the SoC.
35  * The feature is only applicable in case of NOR boot and is
36  * not applicable in case of RAMBOOT (NAND, SD, SPI).
37  * For LS, this feature is available for all device if IE Table
38  * is copied to XIP memory
39  * Also, for LS, ISBC doesn't verify this table.
40  */
41 #define CONFIG_FSL_ISBC_KEY_EXT
42 
43 #endif
44 
45 #if defined(CONFIG_FSL_LAYERSCAPE)
46 /*
47  * For fsl layerscape based platforms, ESBC image Address in Header
48  * is 64 bit.
49  */
50 #define CONFIG_ESBC_ADDR_64BIT
51 #endif
52 
53 #ifdef CONFIG_ARCH_LS2080A
54 #define CONFIG_EXTRA_ENV \
55 	"setenv fdt_high 0xa0000000;"	\
56 	"setenv initrd_high 0xcfffffff;"	\
57 	"setenv hwconfig \'fsl_ddr:ctlr_intlv=null,bank_intlv=null\';"
58 #else
59 #define CONFIG_EXTRA_ENV \
60 	"setenv fdt_high 0xffffffff;"	\
61 	"setenv initrd_high 0xffffffff;"	\
62 	"setenv hwconfig \'fsl_ddr:ctlr_intlv=null,bank_intlv=null\';"
63 #endif
64 
65 /* Copying Bootscript and Header to DDR from NOR for LS2 and for rest, from
66  * Non-XIP Memory (Nand/SD)*/
67 #if defined(CONFIG_SYS_RAMBOOT) || defined(CONFIG_FSL_LSCH3) || \
68 	defined(CONFIG_SD_BOOT) || defined(CONFIG_NAND_BOOT)
69 #define CONFIG_BOOTSCRIPT_COPY_RAM
70 #endif
71 /* The address needs to be modified according to NOR, NAND, SD and
72  * DDR memory map
73  */
74 #ifdef CONFIG_FSL_LSCH3
75 #ifdef CONFIG_QSPI_BOOT
76 #define CONFIG_BS_ADDR_DEVICE		0x20600000
77 #define CONFIG_BS_HDR_ADDR_DEVICE	0x20640000
78 #else /* NOR BOOT */
79 #define CONFIG_BS_ADDR_DEVICE		0x580600000
80 #define CONFIG_BS_HDR_ADDR_DEVICE	0x580640000
81 #endif /*ifdef CONFIG_QSPI_BOOT */
82 #define CONFIG_BS_SIZE			0x00001000
83 #define CONFIG_BS_HDR_SIZE		0x00004000
84 #define CONFIG_BS_ADDR_RAM		0xa0600000
85 #define CONFIG_BS_HDR_ADDR_RAM		0xa0640000
86 #else
87 #ifdef CONFIG_SD_BOOT
88 /* For SD boot address and size are assigned in terms of sector
89  * offset and no. of sectors respectively.
90  */
91 #define CONFIG_BS_ADDR_DEVICE		0x00003000
92 #define CONFIG_BS_HDR_ADDR_DEVICE	0x00003200
93 #define CONFIG_BS_SIZE			0x00000008
94 #define CONFIG_BS_HDR_SIZE		0x00000010
95 #elif defined(CONFIG_NAND_BOOT)
96 #define CONFIG_BS_ADDR_DEVICE		0x00600000
97 #define CONFIG_BS_HDR_ADDR_DEVICE	0x00640000
98 #define CONFIG_BS_SIZE			0x00001000
99 #define CONFIG_BS_HDR_SIZE		0x00002000
100 #elif defined(CONFIG_QSPI_BOOT)
101 #define CONFIG_BS_ADDR_DEVICE		0x40600000
102 #define CONFIG_BS_HDR_ADDR_DEVICE	0x40640000
103 #define CONFIG_BS_SIZE			0x00001000
104 #define CONFIG_BS_HDR_SIZE		0x00002000
105 #else /* Default NOR Boot */
106 #define CONFIG_BS_ADDR_DEVICE		0x60600000
107 #define CONFIG_BS_HDR_ADDR_DEVICE	0x60640000
108 #define CONFIG_BS_SIZE			0x00001000
109 #define CONFIG_BS_HDR_SIZE		0x00002000
110 #endif
111 #define CONFIG_BS_ADDR_RAM		0x81000000
112 #define CONFIG_BS_HDR_ADDR_RAM		0x81020000
113 #endif
114 
115 #ifdef CONFIG_BOOTSCRIPT_COPY_RAM
116 #define CONFIG_BOOTSCRIPT_ADDR		CONFIG_BS_ADDR_RAM
117 #define CONFIG_BOOTSCRIPT_HDR_ADDR	CONFIG_BS_HDR_ADDR_RAM
118 #else
119 #define CONFIG_BOOTSCRIPT_HDR_ADDR	CONFIG_BS_HDR_ADDR_DEVICE
120 /* BOOTSCRIPT_ADDR is not required */
121 #endif
122 
123 #ifdef CONFIG_FSL_LS_PPA
124 /* Define the key hash here if SRK used for signing PPA image is
125  * different from SRK hash put in SFP used for U-Boot.
126  * Example
127  * #define PPA_KEY_HASH \
128  *	"41066b564c6ffcef40ccbc1e0a5d0d519604000c785d97bbefd25e4d288d1c8b"
129  */
130 #define PPA_KEY_HASH		NULL
131 #endif /* ifdef CONFIG_FSL_LS_PPA */
132 
133 #include <config_fsl_chain_trust.h>
134 #endif /* #ifndef CONFIG_SPL_BUILD */
135 #endif /* #ifdef CONFIG_CHAIN_OF_TRUST */
136 #endif
137