1config CHAIN_OF_TRUST 2 depends on !FIT_SIGNATURE && SECURE_BOOT 3 imply CMD_BLOB 4 select FSL_CAAM 5 select SPL_BOARD_INIT if (ARM && SPL) 6 select SHA_HW_ACCEL 7 select SHA_PROG_HW_ACCEL 8 bool 9 default y 10 11config CMD_ESBC_VALIDATE 12 bool "Enable the 'esbc_validate' and 'esbc_halt' commands" 13 default y if CHAIN_OF_TRUST 14 help 15 This option enables two commands used for secure booting: 16 17 esbc_validate - validate signature using RSA verification 18 esbc_halt - put the core in spin loop (Secure Boot Only) 19