Adds option to read ROTPK from registers for FVP
Enables usage of ARM_ROTPK_LOCATION=regs for FVP board.
Removes hard-coded developer keys. Instead, setting
ARM_ROTPK_LOCATION=devel_* takes keys from default directory.
In case of ROT_KEY specified - generates a new hash and replaces the
original.

Note: Juno board was tested by original feature author and was not tested
for this patch since we don't have access to the private key. Juno
implementation was moved to board-specific file without changing
functionality. It is not known whether byte-swapping is still needed
for this platform.

Change-Id: I0fdbaca0415cdcd78f3a388551c2e478c01ed986
Signed-off-by: Max Shvetsov <maksims.svecovs@arm.com>
1 parent 235c817 commit a6ffddec33be0f10382f0f66eacafb03492c8141
@Max Shvetsov Max Shvetsov authored on 6 Dec 2019
Showing 20 changed files
View
docs/design/trusted-board-boot-build.rst
View
docs/getting_started/build-options.rst
View
docs/plat/arm/arm-build-options.rst
View
include/plat/arm/common/arm_def.h
View
include/plat/arm/common/plat_arm.h
View
plat/arm/board/common/board_arm_trusted_boot.c
View
plat/arm/board/common/board_common.mk
View
plat/arm/board/common/rotpk/arm_dev_rotpk.S 0 → 100644
View
plat/arm/board/fvp/fvp_trusted_boot.c
View
plat/arm/board/fvp/platform.mk
View
plat/arm/board/juno/juno_trusted_boot.c 0 → 100644
View
plat/arm/board/juno/platform.mk
View
plat/arm/board/rde1edge/platform.mk
View
plat/arm/board/rde1edge/rde1edge_trusted_boot.c 0 → 100644
View
plat/arm/board/rdn1edge/platform.mk
View
plat/arm/board/rdn1edge/rdn1edge_trusted_boot.c 0 → 100644
View
plat/arm/board/sgi575/platform.mk
View
plat/arm/board/sgi575/sgi575_trusted_boot.c 0 → 100644
View
plat/arm/board/sgm775/platform.mk
View
plat/arm/board/sgm775/sgm775_trusted_boot.c 0 → 100644