xref: /openbmc/u-boot/board/freescale/common/Kconfig (revision dca47409)
1config CHAIN_OF_TRUST
2	depends on !FIT_SIGNATURE && SECURE_BOOT
3	imply CMD_BLOB
4	imply CMD_HASH if ARM
5	select FSL_CAAM
6	select SPL_BOARD_INIT if (ARM && SPL)
7	select SHA_HW_ACCEL
8	select SHA_PROG_HW_ACCEL
9	select ENV_IS_NOWHERE
10	bool
11	default y
12
13config CMD_ESBC_VALIDATE
14	bool "Enable the 'esbc_validate' and 'esbc_halt' commands"
15	default y if CHAIN_OF_TRUST
16	help
17	  This option enables two commands used for secure booting:
18
19	    esbc_validate - validate signature using RSA verification
20	    esbc_halt - put the core in spin loop (Secure Boot Only)
21