• State Resolved
  • Locked Locked
  • Replies 5 replies
  • Subscribers 97 subscribers
  • Views 1372 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

SecureBoot: Requirement on SPI Flash?

Anonymous
Anonymous
Other Parts Discussed in Thread: OMAP-L132

Hi,

I would like to ask a question on OMAP L138 SecureBoot.

There are two documents related to OMAP L138 booting:

1

SPRAB41D

Using the OMAP-L132/L138 Bootloader

2

SPRUGQ9

TMS320C674x/OMAP-L1x Processor Security User's Guide

I am considering using a SPI Flash to store the boot rom code, and I found within the two documents above, only the first contains requirements on SPI Flash:

 

 

No requirement on SPI Flash is contained in (2) at all. So may I understand this as that: As long as the requirements in (1) is satisfied, then (2)'s SecureBoot would always work for the SPI Flash selected?

 

Zheng

  • 0
    TI__Genius 17355 points

    Zheng Zhao said:
    No requirement on SPI Flash is contained in (2) at all. So may I understand this as that: As long as the requirements in (1) is satisfied, then (2)'s SecureBoot would always work for the SPI Flash selected?

    Zheng,

    With regards to boot, the Section 3 of Security user guide can be considered an addendum to the boot-loader appnote for the non-secure parts.  As it states in that section:

    "This section details differences between the supported boot modes of the non-secure version and the
    basic secure boot version of the same device. Unless otherwise noted in this section, the boot modes and
    features of the non-secure boot loader apply to the secure boot loader. It is assumed that the reader is
    familiar with the contents of the non-secure boot loader application note for the device in use."

    So the answer to your question is yes - anything stated in the (1) holds unless specifically listed as a difference in (2).  So SPI flash is supported on a basic secure part, when a secure boot image is in that flash.

    Regards, Daniel

  • Anonymous
    0 Anonymous in reply to Daniel Allred

    Daniel,

    I got it, thanks for this confirmation.

    Zheng

  • Anonymous
    0 Anonymous in reply to Daniel Allred

    Daniel,

    I would like to ask another question on SPI Flash SecureBoot.

     

     

    There are two SPI controllers on OMAP L138, and I have found in Table 11. Boot Mode Selection, Appendix A, SPRAB41D, Using the OMAP-L132/L138 Bootloader Application Report (Rev. D) that bootmode pin configuration seems to support both SPI0 and SPI1 for SPI Flash boot. However, the table didn't say whether SecureBoot is supported for each of the mode above.

    However, from you citation above:


    With regards to boot, the Section 3 of Security user guide can be considered an addendum to the boot-loader

    appnote for the non-secure parts.  As it states in that section:

    "This section details differences between the supported boot modes of the non-secure version and the
    basic secure boot version of the same device. Unless otherwise noted in this section, the boot modes and
    features of the non-secure boot loader apply to the secure boot loader. It is assumed that the reader is
    familiar with the contents of the non-secure boot loader application note for the device in use."

    Since there is no explicit statement on whether SPI0 or SPI1 should be used for SPI Flash SecureBoot, does it mean that the SecureBoot  can use either SPI0 or SPI1 Flash? Could you confirm this?

     

    Zheng

  • 0 in reply to Anonymous
    TI__Genius 17355 points

    Either SPI1 or SPI0 will work.

    Regards, Daniel

  • Anonymous
    0 Anonymous in reply to Daniel Allred

    Daniel,

    I got stuck in some other problems and sorry for the late reply. Thanks again for confirmation.

     

    Zheng