DRA829J: Boot Image Format

Dmitry Tuykov

Part Number: DRA829J

Tool/software:

Hi TI-Team,

I have couple of questions connected to the boot image and appreciate your help:

1. TRM (SPRUIL1C) chapter '4.5 Boot Image Format' states that X.509 certificate is optional for GP devices. How can this be done, how will the DMSC ROM code know the core and modes, load address and image size?

2. If the X.509 certificate is always mandatory, is there any way that the DMSC ROM code does not check the X.509 signature, for GP devices? We would like to avoid openSSL on the build process.

Regards,
Dmitry

1 month ago

0 Doredla Sudheer Kumar 1 month ago

TI__Mastermind 32240 points

Hi,

Dmitry Tuykov said:
1. TRM (SPRUIL1C) chapter '4.5 Boot Image Format' states that X.509 certificate is optional for GP devices.

This is mistake in TRM. Will inform to concern team to correct it.

It is mandatory for all devices. In case of GP the keys will be ignored but it will validate hash of image.

Dmitry Tuykov said:
. If the X.509 certificate is always mandatory, is there any way that the DMSC ROM code does not check the X.509 signature, for GP devices? We would like to avoid openSSL on the build process.

There is no way you can avoid X.509 certificate. It is mandatory for all devices.
So, you need to have openSSL on build process.

Best Regards,
Sudheer

0 Dmitry Tuykov 1 month ago in reply to Doredla Sudheer Kumar

Expert 1121 points

Hi Sudheer,

if keys are ignored, can we use another way/tool to calculate hash? Is it just SHA512?

Another question if we can shrink down the default certificate format by removing unnecessary for us fields, like "serialNumber","issuer" etc. or should we use only the original format without any structural changes within it?

Thanks,
Dmitry

0 Doredla Sudheer Kumar 1 month ago in reply to Dmitry Tuykov

TI__Mastermind 32240 points

Hi,

The format and structure should be same for GP and HS.
You can't make custom modifications to it. It is not supported.

Best Regards,
Sudheer

0 Dmitry Tuykov 1 month ago in reply to Doredla Sudheer Kumar

Expert 1121 points

Hi Sudheer,

thanks for the answer.

Could you please clarify hash type to calculate it, is it SHA512?

Thanks,
Dmitry

+1 Doredla Sudheer Kumar 29 days ago in reply to Dmitry Tuykov

TI__Mastermind 32240 points

Hi,

Dmitry Tuykov said:
Could you please clarify hash type to calculate it, is it SHA512?

Yes, Please refer to script file "x509CertificateGen.sh" form "PDK/packages/ti/build/makerules/x509CertificateGen.sh" for more details.

Best Regards,
Sudheer

Processors

Processors forum

DRA829J: Boot Image Format