AM5728: How to sign U-Boot FIT Image ?

rohit yadav

Intellectual 390 points

Part Number: AM5728

I am using TI AM5728 EVM and PROCESSOR-SDK-LINUX-AM57X 06_03_00_106 SDK.

I am trying to do verified boot in which SPL shall verify u-boot.

How can I add signature to u-boot FIT Image ?

I have enabled following config parameters :

CONFIG_SPL_FIT_SIGNATURE=y

CONFIG_FIT_ENABLE_SHA256_SUPPORT=y
CONFIG_FIT_SIGNATURE=y

CONFIG_SPL_CRYPTO_SUPPORT=y
CONFIG_SPL_HASH_SUPPORT=y

I didn't find any "ITS" file. How to add sha hash, signature, key info to the image ?

Regards,

Rohit Yadav

over 5 years ago

0 Keerthy J over 5 years ago

TI__Guru**** 162740 points

Hi Rohit,

Are you using a HS (High Secure device) Or GP Device?

Regards,
Keerthy

0 rohit yadav over 5 years ago in reply to Keerthy J

Intellectual 390 points

Hi Keerthy

We are using GP Device.

0 Keerthy J over 5 years ago in reply to rohit yadav

TI__Guru**** 162740 points

Hi Rohit,

Additional tools are needed to sign the boot loader images and that is supported
only for HS devices and not for GP Devices.

There is a different config as well to build HS devices:
configs/am57xx_hs_evm_defconfig

On GP Not supported.

Best Regards,
Keerthy

Processors

Processors forum

AM5728: How to sign U-Boot FIT Image ?