AM625: SBL vs SPL boot: what difference need to be considered for security

Phil2010

Part Number: AM625

Tool/software:

Hi,

a customer wonders which boot flow they should implement: SBL or SPL. Can you advise on difference with respect to security / secure boot, please?

BR,
Phil

2 months ago

0 Hong Guan64 2 months ago

TI__Guru 69010 points

Hi Phil,
As you know, they're the first stage BL, and by default SBL is for MCU+SDK, and SPL is for u-boot in Linux SDK.
Secure boot is supported in both MCU+SDK and Linux SDK
- MCU+SDK
https://software-dl.ti.com/mcu-plus-sdk/esd/AM62X/11_01_00_16/exports/docs/api_guide_am62x/SECURE_BOOT.html
- Linux SDK
https://software-dl.ti.com/processor-sdk-linux/esd/AM62X/11_01_05_03/exports/docs/linux/Foundational_Components_Migration_Guide.html

It is customer's decision to choose either SBL or SPL as user's first stage BL.
Best,
-Hong

0 Phil2010 2 months ago in reply to Hong Guan64

TI__Expert 4735 points

Hi Hong,

correct. We understand that is possible to use either path to get the complete device up and running including Linux on A53 cores and customer software on MCU.

What should customer consider with respect to security, e.g. Secure Boot when selecting one flow over the other? Are there any differences on application level?

BR,
Phil

0 Hong Guan64 2 months ago in reply to Phil2010

TI__Guru 69010 points

Hi Phil,
There's no difference with respect to security in RoT extended secure boot flow, and customer is able to modify SPL/SBL as required.
Best,
-Hong

Processors

Processors forum

AM625: SBL vs SPL boot: what difference need to be considered for security