1config CHAIN_OF_TRUST 2 depends on !FIT_SIGNATURE && SECURE_BOOT 3 imply CMD_BLOB 4 imply CMD_HASH if ARM 5 select FSL_CAAM 6 select SPL_BOARD_INIT if (ARM && SPL) 7 select SHA_HW_ACCEL 8 select SHA_PROG_HW_ACCEL 9 select ENV_IS_NOWHERE 10 bool 11 default y 12 13config CMD_ESBC_VALIDATE 14 bool "Enable the 'esbc_validate' and 'esbc_halt' commands" 15 default y if CHAIN_OF_TRUST 16 help 17 This option enables two commands used for secure booting: 18 19 esbc_validate - validate signature using RSA verification 20 esbc_halt - put the core in spin loop (Secure Boot Only) 21