1*4882a593Smuzhiyunconfig CHAIN_OF_TRUST 2*4882a593Smuzhiyun depends on !FIT_SIGNATURE && SECURE_BOOT 3*4882a593Smuzhiyun imply CMD_BLOB 4*4882a593Smuzhiyun imply CMD_HASH if ARM 5*4882a593Smuzhiyun select FSL_CAAM 6*4882a593Smuzhiyun select SPL_BOARD_INIT if (ARM && SPL) 7*4882a593Smuzhiyun select SHA_HW_ACCEL 8*4882a593Smuzhiyun select SHA_PROG_HW_ACCEL 9*4882a593Smuzhiyun select ENV_IS_NOWHERE 10*4882a593Smuzhiyun bool 11*4882a593Smuzhiyun default y 12*4882a593Smuzhiyun 13*4882a593Smuzhiyunconfig CMD_ESBC_VALIDATE 14*4882a593Smuzhiyun bool "Enable the 'esbc_validate' and 'esbc_halt' commands" 15*4882a593Smuzhiyun default y if CHAIN_OF_TRUST 16*4882a593Smuzhiyun help 17*4882a593Smuzhiyun This option enables two commands used for secure booting: 18*4882a593Smuzhiyun 19*4882a593Smuzhiyun esbc_validate - validate signature using RSA verification 20*4882a593Smuzhiyun esbc_halt - put the core in spin loop (Secure Boot Only) 21