AM4376: Configuring u-boot build

Vrund Rana

Part Number: AM4376

The Processor_SDK_Secdev_Build_Install_Guide.pdf references having u-boot authentication –

it even has what looks like is supposed to be a link to instructions on how to configure u-boot to be signed/authenticated:

not able to find the link Configuring U-Boot build which is highlighted in Processor_SDK_Secdev_Build_Install_Guide.pdf.

Regards,

Vrund

over 3 years ago

0 Bin Liu over 3 years ago

TI__Guru**** 167581 points

Hi Vrund,

Is the following documentation what you are looking for?

https://software-dl.ti.com/processor-sdk-linux/esd/AM437X/07_03_00_005/exports/docs/linux/Foundational_Components/U-Boot/UG-General-Info.html

0 Vrund Rana over 3 years ago in reply to Bin Liu

Expert 1835 points

thanks.

There are couple of more doubts i have regarding secdev sdk.

1) how can we use ECDSA 256 key in the create-boot-image.sh and secure-binary-image.sh?

2) how can we use an external signing entity (PKI) to generate the signature using these scripts?

3) can u provide document for how installing pubkey to hs device?

4) U-boot code from latest sdk is having older version 2019. but the latest is u-boot 2022.01. Is it required to integrate with latest secdev SDK?as 2019 version does not support ecdsa.

regards,

Vrund

0 Bin Liu over 3 years ago in reply to Vrund Rana

TI__Guru**** 167581 points

Hi Vrund,

I am routing your queries to our security expert for comments.

0 Hong Guan64 over 3 years ago in reply to Bin Liu

TI__Guru 68290 points

Hi Vrund,
I sent invitation for you to sign in the special security e2e forum.
Please post any security related inquiry there for discussions.
Best,
-Hong

Processors

Processors forum

AM4376: Configuring u-boot build