xref: /openbmc/u-boot/board/freescale/common/Kconfig (revision 2be296538e2e9d2893dc495b3fc8f9f6acb1454c)
188077715STom Riniconfig CHAIN_OF_TRUST
288077715STom Rini	depends on !FIT_SIGNATURE && SECURE_BOOT
3c04b9b34SSimon Glass	imply CMD_BLOB
4551c3934SSimon Glass	imply CMD_HASH if ARM
528522678STom Rini	select FSL_CAAM
60680f1b1SLey Foon Tan	select SPL_BOARD_INIT if (ARM && SPL)
7089df18bSTom Rini	select SHA_HW_ACCEL
8089df18bSTom Rini	select SHA_PROG_HW_ACCEL
9*2be29653SSimon Glass	select ENV_IS_NOWHERE
1088077715STom Rini	bool
1188077715STom Rini	default y
12ea7971f7SSimon Glass
13ea7971f7SSimon Glassconfig CMD_ESBC_VALIDATE
14ea7971f7SSimon Glass	bool "Enable the 'esbc_validate' and 'esbc_halt' commands"
15ea7971f7SSimon Glass	default y if CHAIN_OF_TRUST
16ea7971f7SSimon Glass	help
17ea7971f7SSimon Glass	  This option enables two commands used for secure booting:
18ea7971f7SSimon Glass
19ea7971f7SSimon Glass	    esbc_validate - validate signature using RSA verification
20ea7971f7SSimon Glass	    esbc_halt - put the core in spin loop (Secure Boot Only)
21