rockchip: fit_misc: Add return value for board_fit_image_post_process()

Change-Id: I6fc70d46cd9ae1dd0faee73cbfe89d7a9fda66cc
Signed-off-by: Xuhui Lin <xuhui.lin@rock-chips.com>

rockchip: fit_misc: Add return value for rk_board_fit_image_post_process()

Change-Id: I9ce006c4858213df7f69cdf8d78a7ca7de87d26a
Signed-off-by: Xuhui Lin <xuhui.lin@rock-chips.com>

common: fit: Add cipher addr support

Change-Id: Ic78d979ea3c1d03880f244d87a633a092122daf4
Signed-off-by: Xuhui Lin <xuhui.lin@rock-chips.com>

rockchip: fit_misc: Add rk_board_fit_image_post_process support

Change-Id: I798db8e5f90f52f9dc0f50b08c4da1ad2b55eebc
Signed-off-by: Xuhui Lin <xuhui.lin@rock-chips.com>

image: fit: Add image cipher support

Only support aes-128-ctr mode.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I34363641a3481566d7b958d8181d2e0020864fe0

common: image: Print '/reserved-memory' regions after board fdt fixup

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I0512c8af34f0581f5e01f3dd8aa0fb1e3724fe1f

android: avb: Support verify resource.img for locked device

The resource.img is from android boot/recovery or
resource partition.

The fit boot/recovery.img was already supported with
fit verify mec

android: avb: Support verify resource.img for locked device

The resource.img is from android boot/recovery or
resource partition.

The fit boot/recovery.img was already supported with
fit verify mechanism.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I54243934b40325c08eefa4bacdee542ee8e81654

show more ...

rockchip: resource: Clean up and simplify

- merge resource_logo.c into resource_img.c
- remove android os init, it was moved to android_version_init()
- fit/uimage/android only pass resource blk to

rockchip: resource: Clean up and simplify

- merge resource_logo.c into resource_img.c
- remove android os init, it was moved to android_version_init()
- fit/uimage/android only pass resource blk to resource_img.c
- clean up resource_img.c

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I54d9b3142e8408e4cbe4e3cbe8dd8d41aa77039c

show more ...

common: android: Add BCB offset init

This operation is moved from resource_img.c

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: Ie357e6e6ecf92f5229c4ebd78761631a05f32437

android: avb: Add init_boot support

== init-boot:
This new init_boot partition contains the ramdisk the used to live in
the boot partition. The boot partition will no longer contain that
ramdisk.

i

android: avb: Add init_boot support

== init-boot:
This new init_boot partition contains the ramdisk the used to live in
the boot partition. The boot partition will no longer contain that
ramdisk.

init_boot use android v4 header and is mandory from Android-13.

== avb with unlock:
Don't process hash verify.
Go pre-loaded path: Loading vendor_boot and init_boot
directly to where they should be, while loading the
boot/recovery. The boot message tells like:
···
preloaded: distribute image from 'boot_a'
preloaded: distribute image from 'init_boot_a'
preloaded: distribute image from 'vendor_boot_a'
···

== avb with lock:
Process hash verify.
Go pre-loaded path: Loading full vendor_boot, init_boot and
boot/recovery one by one to verify, and distributing them to
where they should be by memcpy at last.

The three images share a large memory buffer that allocated
by sysmem_alloc(), it locate at high memory address that
just lower than SP bottom. The boot message tells like:
···
preloaded: full image from 'boot_a' at 0xe47f90c0 - 0xe7a4b0c0
preloaded: full image from 'init_boot_a' at 0xeaff90c0 - 0xeb2950c0
preloaded: full image from 'vendor_boot_a' at 0xe87f90c0 - 0xe9f6e0c0
···

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I9c8428eb9777eac81952971cfa97b783a7e71394

show more ...

common: image/gunzip: sync with new API param

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: Ie83e281a65af2a141cf67f4ed08d6107a733c27a

spl: fit: get kernel fdt from index 1 of "fdt" property

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I27df8b231f3323725b0e03c01fe8d53d766ee592

spl: fit: assume the max size of U-Boot/tee/atf is 2MB

RK3568 U-Boot is over 1MB size.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I743cf403ddfb63d9452a2d6781d99ebdd5313e9c

spl: fit: load kernel dtb if need

kernel FDT is for U-Boot if there is not valid one from images,
ie: resource.img, boot.img or recovery.img. It is put right
after U-Boot FDT.

This is used for U-di

spl: fit: load kernel dtb if need

kernel FDT is for U-Boot if there is not valid one from images,
ie: resource.img, boot.img or recovery.img. It is put right
after U-Boot FDT.

This is used for U-disk bing up.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I348b6ea5736f46c091284c501e7e0f9c64cd2f78

show more ...

common: android: add boot_img_hdr_v3 and vendor boot support

Android Header v3 and vendor boot partition are introduced
from Android-11(R).

Header populate:
Header v3 is no longer compatible with

common: android: add boot_img_hdr_v3 and vendor boot support

Android Header v3 and vendor boot partition are introduced
from Android-11(R).

Header populate:
Header v3 is no longer compatible with v0/1/2 header, we
add populate_andr_img_hdr() to merge boot and vendor_boot
partition header into struct andr_img_hdr in order to
compatible with v0/1/2 header.

resource.img:
The second_addr and second_size fields are removed in v3,
so we require resource partition to restore resource.img.

A/B system:
If not A/B system, the boot.img header version is 3 and
recovery header is version 2.

AVB load image:
- If allow verification error: the image is loaded by
ops->get_preloaded_partition() which auto populates
boot_img_hdr_v3.
- If not allow verification error: the image is full loaded
by ops->read_from_partition() which doesn't populate
boot_img_hdr_v3, we need to fix it.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I2afce53c43d782fc57baa01acf9c05518b580840

show more ...

include: image: fix compile error

error message: include/image.h:1015:1: error: unknown type
name 'bool'; did you mean '_Bool'?

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I786c0

include: image: fix compile error

error message: include/image.h:1015:1: error: unknown type
name 'bool'; did you mean '_Bool'?

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I786c04be6f389ad42685b934eb13426ea9a9e5a4

show more ...

common: fit: add fit_image_is_preload()

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I3c3001a347ae59fcfd186156382c04b4b8a77546

common: fit: update board_fit_image_post_process() args

Add more args for the function to parse more fit information.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I9be6607e5f7eb9b9

common: fit: update board_fit_image_post_process() args

Add more args for the function to parse more fit information.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I9be6607e5f7eb9b9912eb570f765dc6f634f956e

show more ...

common: fit: add fit_image_get_comp_addr()

Add API to get compress address of image.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: Id33d96795d5bb5db8d55a537f7d1c7a425b5b3e8

UPSTREAM: rsa: add support of padding pss

We add the support of the padding pss for rsa signature.
This new padding is often recommended instead of pkcs-1.5.

Signed-off-by: Philippe Reynes <philipp

UPSTREAM: rsa: add support of padding pss

We add the support of the padding pss for rsa signature.
This new padding is often recommended instead of pkcs-1.5.

Signed-off-by: Philippe Reynes <philippe.reynes@softathome.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
(cherry picked from commit 061daa0b61f0fbeb214c566f3adb23da05545320)

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I28e5722504bfd0428cd119b2aaae60682a720648

show more ...

UPSTREAM: rsa: add a structure for the padding

The rsa signature use a padding algorithm. By default, we use the
padding pkcs-1.5. In order to add some new padding algorithm, we
add a padding framew

UPSTREAM: rsa: add a structure for the padding

The rsa signature use a padding algorithm. By default, we use the
padding pkcs-1.5. In order to add some new padding algorithm, we
add a padding framework to manage several padding algorithm.
The choice of the padding is done in the file .its.

Signed-off-by: Philippe Reynes <philippe.reynes@softathome.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
(cherry picked from commit 20031567e12bb312bff95b70767f6275e20f0346)

Conflicts:
common/image-fit.c
lib/rsa/rsa-sign.c
lib/rsa/rsa-verify.c

Change-Id: Ie522fec1ea69e6b86ebde0f7dad91a45670da66b
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

show more ...

tools: mkimage: support set FIT image version

Command: "./mkimage ... -v [version]".

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I84dd5c3d7380150f428cdd0c2055929343bf2138

common: image-fit: add API to get "/totalsize"

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: Icca5200040ab14ad76515888cdaa4cd16f554af0

common: image: add weak fit_read_otp_rollback_index()

Board should implement it.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I95023ce489c4335fdd9034d9577ce242eac0f1ea

common: fit: add more info for otp index

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I9360d3d4bc16c1c1f5e4a2310e79858d38413eb8