lib: optee_clientApi: data alignment for get_rkss_version

Change-Id: I351704ef104742d50cb39997db2fda181cf866b6
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_clientApi: data alignment with cache line size

Change-Id: I96fbfe3aced28dc460a2a0c35a7367b086525425
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: add libxbc support

Pick from google U-Boot commit.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I5241db252789249cfc72b1017065c9e3ed3fc695

lib: optee_clientApi: compatible with optee version 3.13.0

optee version 3.13.0 need exact return value,
not fixed return success.

Change-Id: Ibde4f885464703f5919281a5956b4d0015b97b91
Signed-off-by

lib: optee_clientApi: compatible with optee version 3.13.0

optee version 3.13.0 need exact return value,
not fixed return success.

Change-Id: Ibde4f885464703f5919281a5956b4d0015b97b91
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

rsa: Kconfig: delete the rsa N & E & C default value

Since the rsa N & E & C size are different, it will make mistake
to use default value.

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Chang

rsa: Kconfig: delete the rsa N & E & C default value

Since the rsa N & E & C size are different, it will make mistake
to use default value.

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I9c8466baac84f041f1627720c7669f21a30ccce2

show more ...

common: image/gunzip: sync with new API param

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: Ie83e281a65af2a141cf67f4ed08d6107a733c27a

UPSTREAM: board: arm: Add support for Broadcom BCM7445

Add support for loading U-Boot on the Broadcom 7445 SoC. This port
assumes Broadcom's BOLT bootloader is acting as the second stage
bootloader

UPSTREAM: board: arm: Add support for Broadcom BCM7445

Add support for loading U-Boot on the Broadcom 7445 SoC. This port
assumes Broadcom's BOLT bootloader is acting as the second stage
bootloader, and U-Boot is acting as the third stage bootloader, loaded
as an ELF program by BOLT.

Change-Id: I79d19ced6ed7c76a862b94162a92ceaddf09b062
Signed-off-by: Thomas Fitzsimmons <fitzsim@fitzsim.org>
Cc: Stefan Roese <sr@denx.de>
Cc: Tom Rini <trini@konsulko.com>
Cc: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: Jon Lin <jon.lin@rock-chips.com>
(cherry picked from commit 894c3ad27fa940beb7fdc07d01dcfe81c03d0481)

show more ...

lib: rsa-verify: pass the public key to next stage

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I92f2906981ea14aaabda3b1b7b44574cc157e451

common: fdt: fix kern.dtb cleared by BSS zero operation

BSS section is right after u-boot-nodtb.bin, u-boot fdt should be
relocated before BSS zero operation.

This is necessary if CONFIG_SKIP_RELOC

common: fdt: fix kern.dtb cleared by BSS zero operation

BSS section is right after u-boot-nodtb.bin, u-boot fdt should be
relocated before BSS zero operation.

This is necessary if CONFIG_SKIP_RELOCATE_UBOOT=y.

- relocate the kern.dtb too.
- correct ALIGN() for u-boot fdt end address but not totalsize.
- set gd->fdt_blob_kern as NULL if invalid.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I8766e52f50652ed578430b75d4c3da1e4a69a8cf

show more ...

[BACKPORT]: lib: uuid: alignment error in gen_rand_uuid()

Packed structures like struct uuid are not aligned. GCC 9.1 therefore
throws an error when trying to compile gen_rand_uuid().

lib/uuid.c: I

[BACKPORT]: lib: uuid: alignment error in gen_rand_uuid()

Packed structures like struct uuid are not aligned. GCC 9.1 therefore
throws an error when trying to compile gen_rand_uuid().

lib/uuid.c: In function ‘gen_rand_uuid’:
lib/uuid.c:244:2: error: converting a packed ‘struct uuid’ pointer
(alignment 1) to a ‘unsigned int’ pointer (alignment 4) may result in
an unaligned pointer value [-Werror=address-of-packed-member]
244 | unsigned int *ptr = (unsigned int *)&uuid;
| ^~~~~~~~

Generate the uuid in a properly aligned buffer.

The byte order of a random number should not matter. Do not call
cpu_to_be32() to change the byte order.

Reported-by: Ramon Fried <rfried.dev@gmail.com>
Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Change-Id: I3c1b4e661f8e0da03e90ee137fed871c06e70627

show more ...

lib: optee_client: add interface for write ta encryption key

Change-Id: I7c2c1818a0e79639b1c58ade38527e8f08eea087
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_clientApi: remove duplicate code

optee client has a lot of the same duplicate code,
for the convenience of adding new functions in the future,
so remove duplicate code.

Change-Id: Ia1005

lib: optee_clientApi: remove duplicate code

optee client has a lot of the same duplicate code,
for the convenience of adding new functions in the future,
so remove duplicate code.

Change-Id: Ia1005e48d43172adb07954d9ff6cf08387e1b3d9
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: avb: add function rk_avb_ab_have_bootable_slot()

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: Ib7e3dc383a1e7d407cdfb69f18f9f8df0cfed7ce

avb: otp: support avb hash download

Change-Id: Idd07a1473d4d1bbe91e309f8db73be08b5b59dd1
Signed-off-by: Wu Liangqing <wlq@rock-chips.com>

lib: avb: avb_atx_validate: fix crypto sha512 fail

The new crypto-v2 drivers requires total data length before sha init,
let's add it to avoid issue:

...
Vboot=0, AVB images, AVB verify
read_

lib: avb: avb_atx_validate: fix crypto sha512 fail

The new crypto-v2 drivers requires total data length before sha init,
let's add it to avoid issue:

...
Vboot=0, AVB images, AVB verify
read_is_device_unlocked() ops returned that device is LOCKED
total length(0x00000000) != init length(0xeb9f6290)!
avb_rsa.c:285: ERROR: Hash check failed.
avb_atx_validate.c:173: ERROR: Invalid certificate signature.
avb_atx_validate.c:199: ERROR: Invalid PIK certificate.
avb_slot_verify.c:865: ERROR: vbmeta: Public key used to sign data rejected.
AVB verify failed
...

Fixes: (5b0bc49177 lib: avb: support crypto sha256/512)

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I276041a8b5faadac8c95622f77888a5447ed3a71

show more ...

lib: avb: skip descriptor hash check if unlock

What ever there is descriptor hash or not, let's skip
descriptor hash match check if device is unlock.

We rely on ops->get_preloaded_partition() to lo

lib: avb: skip descriptor hash check if unlock

What ever there is descriptor hash or not, let's skip
descriptor hash match check if device is unlock.

We rely on ops->get_preloaded_partition() to load image
and verify hash, which is more efficient than full load.

By the way, correct the function return code.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: If48d7c676fec58b9c3905ba1bcf7ab43b833b323

show more ...

lib: lzma: add lzma_is_valid()

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I88271fc055bf196c9879aca5fd285f28325aa16d

lib: avb: use CONFIG_SUPPORT_EMMC_RPMB to shield the code

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I4d7009af0c0e3f7d26d9b283476ed623bb97dad2

lib: optee_client: use CONFIG_SUPPORT_EMMC_RPMB to shield optee compiled

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I46be3361af30d887c347d068f8cb92145ab5eb90

lib: optee client: add dependent for Kconfig option

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: I9e475b1a8658dfc8d0d70dac0a8dd166a9e8d483

lib: avb: reduce write rollback index operations

The optee is used to storage security data in U-Boot, and a file
which occupy 16KB is created when write a rollback index. But the
security space is

lib: avb: reduce write rollback index operations

The optee is used to storage security data in U-Boot, and a file
which occupy 16KB is created when write a rollback index. But the
security space is only 512KB, the sapce is not enough when write
too many items.

And here we write rollback index 32 times, but the avb only use
rollback_index_location 0 to verify the rollback index with vbmeta.
So just get the rollback_index_location 0 in this process.

Test:
fastboot getvar at-vboot-state

Error log:
TEEC: reference out of data: -1
TEEC: Not enough space available in secure storage!

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: Id69b852553a4ef9111dabe6f23e25038b0928bb3

show more ...

drivers: pci: separate SPL & U-Boot proper build

It fixes SPL compile issue after PCI enabled.

Signed-off-by: Joseph Chen <chenjh@rock-chips.com>
Change-Id: Ic3d4a464defd2074be083effd25f513ae19d2e01

lib: rsa-verify: calculate the hash depended on operator size

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I72822a2331afb45a1b291e473cd83f7ce3d627f6

lib: rsa-sign: support calculate deferent size of rsa's key

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: Ia473b5123c11ed57d1eed560964b6a7dc482b7df

lib: avb: return flash unlock status

Return flash unlock status when close CONFIG_OPTEE_CLIENT.

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I7a7a03b8305c864d83d3d2c14b0f9aa104b2e

lib: avb: return flash unlock status

Return flash unlock status when close CONFIG_OPTEE_CLIENT.

Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>
Change-Id: I7a7a03b8305c864d83d3d2c14b0f9aa104b2ef59

show more ...