{"type":"doc","content":[{"type":"heading","attrs":{"level":1},"content":[{"text":"Secure boot i.MX8MP","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Disclaimer","type":"text"}]},{"type":"paragraph","content":[{"text":"The information contained within this document, including but not limited to any product specification, is subject to change without notice. congatec provides no warranty with regard to this document or an other information contained herein and hereby expressly disclaims any implied warranties of merchantability or fitness for any particular purpose with regard to any of the foregoing. congatec assumes no liability for any damages incurred directly or indirectly from any technical or typographical errors or omissions contained herein or for discrepancies between the product and this document. In no event shall congatec be liable for any incidental consequential, special, or exemplary damages, whether based on tort, contract or otherwise, arising out of or in connection with this document or any other information contained herein or the use thereof.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Code Signing Tools (CST) 3.3.2","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Account required on NXP website","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"https://www.nxp.com/webapp/Download?colCode=IMX_CST_TOOL_NEW","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.nxp.com/webapp/Download?colCode=IMX_CST_TOOL_NEW"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"U-Boot source code","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"https://git.congatec.com/arm-nxp/imx8-family/uboot-imx8-family/-/tree/cgtimx8mp__lf_v2022.04","type":"text","marks":[{"type":"link","attrs":{"href":"https://git.congatec.com/arm-nxp/imx8-family/uboot-imx8-family/-/tree/cgtimx8mp__lf_v2022.04"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"cgtbcbe","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://git.congatec.com/arm-nxp/imx8-family/misc/cgtbcbe/-/tree/imx8mp"}},{"text":" ","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"1. HABv4 secure boot process","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"This document describes a step-by-step procedure on how to sign and securely boot a bootloader image on i.MX8M family devices. It is assumed that the reader is familiar with basic HAB concepts and with the PKI tree generation.","type":"text"}]},{"type":"paragraph","content":[{"text":"Details about HAB can be found in the application note AN4581[1] and in the introduction_habv4.txt document.","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.1. Understanding the i.MX8M family flash.bin image layout","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"Due to the new the architecture, multiple firmwares and softwares are required to boot i.MX8M family devices. In order to store all the images in a single binary the FIT (Flattened Image Tree) image structure is used.","type":"text"}]},{"type":"paragraph","content":[{"text":"The final image is generated by the imx-mkimage project, the tool combines all the input images in a FIT structure, generating a flash.bin image with an appropriate IVT set.","type":"text"}]},{"type":"paragraph","content":[{"text":"For a secure boot process users should ensure all images included in flash.bin file are covered by a digital signature.","type":"text"}]},{"type":"paragraph","content":[{"text":"The diagram below illustrate a signed flash.bin image layout:","type":"text"}]},{"type":"codeBlock","content":[{"text":" +-----------------------------+\n | |\n | *Signed HDMI/DP FW |\n | |\n +-----------------------------+\n | Padding |\n ------- +-----------------------------+ --------\n ^ | IVT - SPL | ^\n Signed | +-----------------------------+ |\n Data | | u-boot-spl.bin | |\n | | + | | SPL\n v | DDR FW | | Image\n ------- +-----------------------------+ |\n | CSF - SPL + DDR FW | v\n +-----------------------------+ --------\n | Padding |\n ------- +-----------------------------+ --------\n Signed ^ | FDT - FIT | ^\n Data | +-----------------------------+ |\n v | IVT - FIT | |\n ------- +-----------------------------+ |\n | CSF - FIT | |\n ------- +-----------------------------+ | FIT\n ^ | u-boot-nodtb.bin | | Image\n | +-----------------------------+ |\n Signed | | OP-TEE (Optional) | |\n Data | +-----------------------------+ |\n | | bl31.bin (ATF) | |\n | +-----------------------------+ |\n v | u-boot.dtb | v\n ------- +-----------------------------+ --------","type":"text"}]},{"type":"paragraph","content":[{"text":"i.MX8M boot flow:","type":"text"}]},{"type":"codeBlock","content":[{"text":" Secure World Non-Secure World\n |\n |\n+------------+ +------------+ |\n| SPL | | i.MX 8M | |\n| + | ---> | ROM | |\n| DDR FW | | + HAB | |\n+------------+ +------------+ |\n | |\n v |\n +------------+ |\n | *Signed | |\n | HDMI/DP FW | |\n +------------+ |\n | |\n v |\n+------------+ +------------+ |\n| FIT Image: | | SPL | |\n| ATF + TEE | ---> | + | |\n| + U-Boot | | DDR FW | | +-----------+\n+------------+ +------------+ | | Linux |\n | | +-----------+\n v | ^\n +------------+ | | +-------+\n | ARM | | +-----------+ | Linux |\n | Trusted | ----+---> | U-Boot | <--- | + |\n | Firmware | | +-----------+ | DTB |\n +------------+ | +-------+\n | |\n v |\n +----------+ |\n | **OP-TEE | |\n +----------+ |","type":"text"}]},{"type":"paragraph","content":[{"text":"Particularly on the i.MX8M, the HDMI firmware or DisplayPort firmware are the first image to boot on the device. These firmwares are signed and distributed by NXP, and are always authenticated regardless of security configuration. In case not required by the application the HDMI or DisplayPort controllers can be disabled by eFuses and the firmwares are not required anymore.","type":"text"}]},{"type":"paragraph","content":[{"text":"The next images are not signed by NXP and users should follow the signing procedure as described in this document.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Second Program Loader (SPL) and DDR firmware are loaded and authenticated by the ROM code, these images are executed in the internal RAM and responsible for initializing essential features such as DDR, UART, PMIC and clock enablement.","type":"text"}]},{"type":"paragraph","content":[{"text":"Once the DDR is available, the SPL code loads all the images included in the FIT structure to their specific execution addresses, the HAB APIs are called to extend the root of trust, authenticating the U-Boot, ARM trusted firmware (ATF) and OP-TEE (If included).","type":"text"}]},{"type":"paragraph","content":[{"text":"The root of trust can be extended again at U-Boot level to authenticate Kernel and M4 images.","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.2 Enabling the secure boot support in U-Boot","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The first step is to generate an U-Boot image supporting the HAB features, similar to i.MX6 and i.MX7 series the U-Boot provides extra functions for HAB, such as the HAB status logs retrievement through the hab_status command and support to extend the root of trust.","type":"text"}]},{"type":"paragraph","content":[{"text":"The support is enabled by adding the CONFIG_IMX_HAB to the build configuration:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Defconfig:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"CONFIG_IMX_HAB=y","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Kconfig:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ARM architecture -> Support ","type":"text"},{"text":"i.MX","type":"text","marks":[{"type":"link","attrs":{"href":"http://i.MX"}}]},{"text":" HAB features","type":"text"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"The U-Boot image must then be recompiled after these changes are made.","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.3 Preparing the fit image","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The cgtbcbe project is used to combines all the images in a single flash.bin binary, the following files are required:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"u-boot-spl.bin","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"u-boot.dtb","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"imx8mp-cgtqx8p.dtb","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"u-boot-nodtb.bin","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"The procedure to build ATF and download the firmwares are out of the scope of this document.","type":"text"}]},{"type":"paragraph","content":[{"text":"Copy all files to iMX8M directory and run the following command according to the target device, on this example we are building a SPI target and also including the OP-TEE binary, set the configuration for the conga-QMX8-Plus:","type":"text"}]},{"type":"codeBlock","content":[{"text":"$ ./mkbcbe.sh -b BUILD_QX8P_FSPI -c mx8mp/config/cgtqx8p-A3-2GB4GB_BSP-5.15.32_2.0.0_rel_cgtqx8p_23-02-23-0.inc.sh","type":"text"}]},{"type":"paragraph","content":[{"text":"Some files are referred with symlinks, that would lead into issues calculating the offset of those files, therefore runing the following commands we fix that","type":"text"}]},{"type":"codeBlock","content":[{"text":"$ cp ../mx8mp/pk_rel/rel_imx_5.15.32_2.0.0/generic/print_fit_hab.a8bb8edb.sh print_fit_hab.sh\n$ rm tee.bin\n$ cp tee.mx8mpevk.98499642.bin tee.bin\n$ rm bl31.bin\n$ cp bl31-imx8mp.c6a19b1a.bin-optee bl31.bin\n$ cp u-boot.dtb evk.dtb","type":"text"}]},{"type":"paragraph","content":[{"text":"Build the flash.bin:","type":"text"}]},{"type":"codeBlock","content":[{"text":"$ make flash_evk_flexspi SOC=iMX8MP LPDDR_FW_VERSION=_202006.8r16 DTB_PREPROC=dtb_check.sh PAD_IMAGE=pad_image.sh QSPI_HEADER=fspi_header QSPI_PACKER=fspi_packer.sh MKIMG=mkimage_imx8 dtbs=imx8mp-cgtqx8p.dtb","type":"text"}]},{"type":"paragraph","content":[{"text":"Build log:","type":"text"}]},{"type":"codeBlock","content":[{"text":"========= OFFSET dump =========\nLoader IMAGE:\n header_image_off 0x1000\n dcd_off 0x1000\n image_off 0x1040\n csf_off 0x36000\n spl hab block: 0x91ffc0 0x1000 0x35000\n\nSecond Loader IMAGE:\n sld_header_off 0x60000\n sld_csf_off 0x61020\n sld hab block: 0x401fcdc0 0x60000 0x1020","type":"text"}]},{"type":"paragraph","content":[{"text":"Additional HAB information is provided by running the following command:","type":"text"}]},{"type":"codeBlock","content":[{"text":"$ make print_fit_hab_flexspi SOC=iMX8MP LPDDR_FW_VERSION=_202006.8r16 DTB_PREPROC=dtb_check.sh PAD_IMAGE=pad_image.sh QSPI_HEADER=fspi_header QSPI_PACKER=fspi_packer.sh MKIMG=mkimage_imx8 dtbs=imx8mp-cgtqx8p.dtb dtb=u-boot.dtb\n\n0x40200000 0x63000 0xF5D30\n0x402F5D30 0x158D30 0xC7A0\n0x970000 0x1654D0 0xB150\n0x56000000 0x170620 0x78EF0","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.4 Preparing the private keys and certificates","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The tool is not provided with any keys. Therefore, the keys required for signing have to be prepared according User guide (CST_UG.pdf), section 3.2 “Generating AHAB Keys and Certificates”.","type":"text"}]},{"type":"paragraph","content":[{"text":"Follow the procedure below to create keys and certificates suitable to sign code for AHAB.","type":"text"}]},{"type":"paragraph","content":[{"text":"The example defines “123456A4” as serial, “Congatec!” as password and elliptic curve cryptography with 256bit key size - specify these values according your requirements.","type":"text"}]},{"type":"codeBlock","content":[{"text":"$ echo 123456A4 > serial\n$ echo Congatec! > key_pass.txt\n$ echo Congatec! >> key_pass.txt\n\n$ ./keys/hab4_pki_tree.sh\n\n\tDo you want to use an existing CA key (y/n)?: n\n\tKey type options (confirm targeted device supports desired key type):\n\tSelect the key type (possible values: rsa, rsa-pss, ecc)?: rsa\n\tEnter key length in bits for PKI tree: 4096\n\tEnter PKI tree duration (years): 10\n\tHow many Super Root Keys should be generated? 4\n\tDo you want the SRK certificates to have the CA flag set? (y/n)?: y","type":"text"}]},{"type":"paragraph","content":[{"text":"If everything went correctly, a bunch of keys and certificates has been created. All key and certificate information required for signing an image for AHAB is now available.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"1.4.1 Creating SRK tables and efuse hashes","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"In the next step the AHAB SRK table and corresponding hash values for burning into the efuses on the SOC are created. The SRK table is a collection of the public keys created in the previous step that will be embedded in the image when it is signed. Once signed, the authenticity of the image can be assured using the signature, the embedded SRK table and the hash values programmed onto the SOC.","type":"text"}]},{"type":"paragraph","content":[{"text":"The SRK table (SRK_1_2_3_4_table.bin) and hashes (SRK_1_2_3_4_fuse.bin) are created with the srktool:","type":"text"}]},{"type":"codeBlock","content":[{"text":"$ cd vicrts/\n$ ../linux64/bin/srktool -h 4 -t SRK_1_2_3_4_table.bin -e SRK_1_2_3_4_fuse.bin -d sha256 -c ./SRK1_sha256_4096_65537_v3_ca_crt.pem,./SRK2_sha256_4096_65537_v3_ca_crt.pem,./SRK3_sha256_4096_65537_v3_ca_crt.pem,./SRK4_sha256_4096_65537_v3_ca_crt.pem -f 1","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.5 Creating the CSF description file","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The CSF contains all the commands that the ROM executes during the secure boot. These commands instruct the HAB code on which memory areas of the image to authenticate, which keys to install, use and etc. More information on constructing a CSF file can be found in the CST User Guide, located within the CST package's doc directory.","type":"text"}]},{"type":"paragraph","content":[{"text":"Key and Certificate generation done by the CST is out of the scope of this document. Please refer to introduction_habv4.txt for keys, certificates, SRK table, and SRK hash generation. The resulting file locations should be inserted into the CSF files like this:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Insertion into both csf_spl.txt and csf_fit.txt","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" [Install SRK]\n File = \"/crts/SRK_1_2_3_4_table.bin\"\n ...\n\n [Install CSFK]\n File = \"/crts/CSF1_1_sha256_4096_65537_v3_usr_crt.pem\"\n\n [Install Key]\n ...\n File = \"/crts/IMG1_1_sha256_4096_65537_v3_usr_crt.pem\"","type":"text"}]},{"type":"paragraph","content":[{"text":"CSF examples are available under doc/imx/hab/habv4/csf_examples/ directory.","type":"text"}]},{"type":"paragraph","content":[{"text":"As explained in sections above the SPL is first authenticated by the ROM code and the root of trust is extended to the FIT image, hence two CSF files are necessary to completely sign an flash.bin image.","type":"text"}]},{"type":"paragraph","content":[{"text":"The build log provided by imx-mkimage can be used to define the \"Authenticate Data\" parameter in CSF. The addresses supplied in the build log will be needed again for binary insertion.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SPL \"Authenticate Data\" addresses in flash.bin build log:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" spl hab block: 0x91ffc0 0x1000 0x35000","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"\"Authenticate Data\" command in csf_spl.txt file:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" [Authenticate Data]\n ...\n Blocks = 0x91ffc0 0x1000 0x35000 \"flash.bin\"","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"FIT image \"Authenticate Data\" addresses in flash.bin build log:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" sld hab block: 0x401fcdc0 0x60000 0x1020","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"FIT image \"Authenticate Data\" addresses in print_fit_hab build log:","type":"text"}]}]}]},{"type":"codeBlock","attrs":{"language":"0x40200000 0x63000 0xf5d30"},"content":[{"text":"\t0x402F5D30 0x158D30 0xC7A0\n\t0x970000 0x1654D0 0xB150\n\t0x56000000 0x170620 0x78EF0","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"\"Authenticate Data\" command in csf_fit.txt file:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" [Authenticate Data]\n ...\n Blocks = 0x401fcdc0 0x60000 0x1020 \"flash.bin\", \\\n 0x40200000 0x63000 0xF5D30 \"flash.bin\", \\\n 0x402F5D30 0x158D30 0xC7A0 \"flash.bin\", \\\n 0x970000 0x1654D0 0xB150 \"flash.bin\", \\\n 0x56000000 0x170620 0x78EF0 \"flash.bin\"","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"1.5.1 Avoiding Kernel crash in closed devices","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"For devices prior to HAB v4.4.0, the HAB code locks the Job Ring and DECO master ID registers in closed configuration. In case the user specific application requires any changes in CAAM MID registers it's necessary to add the \"Unlock CAAM MID\" command in CSF file.","type":"text"}]},{"type":"paragraph","content":[{"text":"The current NXP BSP implementation expects the CAAM registers to be unlocked when configuring CAAM to operate in non-secure TrustZone world.","type":"text"}]},{"type":"paragraph","content":[{"text":"The Unlock command is already included by default in the signed HDMI and DisplayPort firmwares. On i.MX8MM, i.MX8MN and i.MX8MP devices or in case the HDMI or DisplayPort controllers are disabled in i.MX8M, users must ensure this command is included in SPL CSF.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add Unlock MID command in csf_spl.txt:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" [Unlock]\n Engine = CAAM\n Features = MID","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.6 Signing the flash.bin binary","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The CST tool is used for singing the flash.bin image and generating the CSF binary. Users should input the CSF description file created in the step above and receive a CSF binary, which contains the CSF commands, SRK table, signatures and certificates.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create SPL CSF binary file:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ linux64/bin/cst -i csf_spl.txt -o csf_spl.bin","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create FIT CSF binary file:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ linux64/bin/cst -i csf_fit.txt -o csf_fit.bin","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.7 Assembling the CSF in flash.bin binary","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The CSF binaries generated in the step above have to be inserted into the flash.bin image.","type":"text"}]},{"type":"paragraph","content":[{"text":"The CSF offsets can be obtained from the flash.bin build log:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SPL CSF offset:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"csf_off 0x36000","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"FIT CSF offset:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"sld_csf_off 0x61020","type":"text"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"The signed flash.bin image can be then assembled:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create a flash.bin copy:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ cp flash.bin signed_flash.bin","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Insert csf_spl.bin in signed_flash.bin at 0x36000 offset:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ dd if=csf_spl.bin of=signed_flash.bin seek=$((0x36000)) bs=1 conv=notrunc","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Insert csf_fit.bin in signed_flash.bin at 0x61020 offset:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ dd if=csf_fit.bin of=signed_flash.bin seek=$((0x61020)) bs=1 conv=notrunc","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Flash signed_flash.bin using the UUU tool","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.8 Programming SRK Hash","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"As explained in AN4581[1] and in introduction_habv4.txt document the SRK Hash fuse values are generated by the srktool and should be programmed in the SoC SRK_HASH[255:0] fuses.","type":"text"}]},{"type":"paragraph","content":[{"text":"Be careful when programming these values, as this data is the basis for the root of trust. An error in SRK Hash results in a part that does not boot. More information and full details regarding fuses can be found in the Security Reference Manual of the target board. Contact an NXP Representative for access.","type":"text"}]},{"type":"paragraph","content":[{"text":"The U-Boot fuse tool can be used for programming eFuses on ","type":"text"},{"text":"i.MX","type":"text","marks":[{"type":"link","attrs":{"href":"http://i.MX"}}]},{"text":" SoCs.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Dump SRK Hash fuses values in host machine:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ hexdump -e '/4 \"0x\"' -e '/4 \"%X\"\"\\n\"' SRK_1_2_3_4_fuse.bin\n\n0x7DE92210\n0xE5091F9C\n0x8CFE56FC\n0x4C0AE410\n0x17538F09\n0xB9D5CB8E\n0xD1BA7B96\n0x13E4199B","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Program SRK_HASH[255:0] fuses on i.MX8M family devices at U-boot level:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ fuse prog -y 6 0 0x7DE92210\n$ fuse prog -y 6 1 0xE5091F9C\n$ fuse prog -y 6 2 0x8CFE56FC\n$ fuse prog -y 6 3 0x4C0AE410\n$ fuse prog -y 7 0 0x17538F09\n$ fuse prog -y 7 1 0xB9D5CB8E\n$ fuse prog -y 7 2 0xD1BA7B96\n$ fuse prog -y 7 3 0x13E4199B","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.9 Verifying HAB events","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The next step is to verify that the signatures included in flash.bin image is successfully processed without errors. HAB generates events when processing the commands if it encounters issues.","type":"text"}]},{"type":"paragraph","content":[{"text":"The hab_status U-Boot command call the hab_report_event() and hab_status() HAB API functions to verify the processor security configuration and status. This command displays any events that were generated during the process.","type":"text"}]},{"type":"paragraph","content":[{"text":"Prior to closing the device users should ensure no HAB events were found, as","type":"text"},{"type":"hardBreak"},{"text":"the example below:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Verify HAB events:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ hab_status\n\n Secure boot disabled\n\n HAB Configuration: 0xf0, HAB State: 0x66","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"1.10 Closing the device","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"After the device successfully boots a signed image without generating any HAB events, it is safe to close the device. This is the last step in the HAB process, and is achieved by programming the SEC_CONFIG[1] fuse bit.","type":"text"}]},{"type":"paragraph","content":[{"text":"Once the fuse is programmed, the chip does not load an image that has not been signed using the correct PKI tree.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Program SEC_CONFIG[1] fuse on i.MX8M family devices:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ fuse prog 1 3 0x2000000","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2. Authenticating additional boot images","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The High Assurance Boot (HAB) code located in the on-chip ROM provides an Application Programming Interface (API) making it possible to call back into the HAB code for authenticating additional boot images.","type":"text"}]},{"type":"paragraph","content":[{"text":"The U-Boot is running in non-secure TrustZone world and to make use of this feature it's necessary to use a SIP call to the ATF, this is already implemented in hab.c code and it's transparent to the user.","type":"text"}]},{"type":"paragraph","content":[{"text":"The process of signing an additional image is similar as in i.MX6 and i.MX7 series devices, the steps below are using the Linux Kernel image as example. ","type":"text"}]},{"type":"paragraph","content":[{"text":"The diagram below illustrate the Image layout:","type":"text"}]},{"type":"codeBlock","content":[{"text":" ------- +-----------------------------+ <-- *load_address\n ^ | |\n | | |\n | | |\n | | |\n | | Image |\n Signed | | |\n Data | | |\n | | |\n | +-----------------------------+\n | | Padding to Image size |\n | | in header |\n | +-----------------------------+ <-- *ivt\n v | Image Vector Table |\n ------- +-----------------------------+ <-- *csf\n | |\n | Command Sequence File (CSF) |\n | |\n +-----------------------------+\n | Padding (optional) |\n +-----------------------------+","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"2.1 Padding the image","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The Image must be padded to the size specified in the Image header, this can be achieved by using the od command.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Read Image size:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" $ od -t x4 -j 0x10 -N 0x4 --endian=little Image | head -n1 | awk '{print $2}'\n\t0x01e10000","type":"text"}]},{"type":"paragraph","content":[{"text":"The tool objcopy can be used for padding the image.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Pad the Image:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" $ objcopy -I binary -O binary --pad-to=0x01e10000 --gap-fill=0x00 Image Image-pad.bin\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"2.2 Generating Image Vector Table","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The HAB code requires an Image Vector Table (IVT) for determining the image length and the CSF location. Since Image does not include an IVT this has to be manually created and appended to the end of the padded Image, the script genIVT.pl should be created with this content:","type":"text"}]},{"type":"codeBlock","content":[{"text":"#! /usr/bin/perl -w\nuse strict;\nopen(my $out, '>:raw', 'ivt.bin') or die \"Unable to open: $!\";\nprint $out pack(\"V\", 0x412000D1); # IVT Header\t \nprint $out pack(\"V\", 0x40400000); # Jump Location \t<< Load address\nprint $out pack(\"V\", 0x0); # Reserved\nprint $out pack(\"V\", 0x0); # DCD pointer\nprint $out pack(\"V\", 0x0); # Boot Data\nprint $out pack(\"V\", 0x42210000); # Self Pointer\t<< IVT_address\nprint $out pack(\"V\", 0x42210020); # CSF Pointer\t\t<< CSF_address\nprint $out pack(\"V\", 0x0); # Reserved\nclose($out);","type":"text"}]},{"type":"paragraph","content":[{"text":"Getting the offsets:","type":"text"},{"type":"hardBreak"},{"text":"CSF_Offset (Image_size + 0x20)","type":"text"}]},{"type":"codeBlock","content":[{"text":"\t>> 0x1e10020","type":"text"}]},{"type":"paragraph","content":[{"text":"Load_address, under U-boot run:","type":"text"}]},{"type":"codeBlock","content":[{"text":"$ print loadaddr\n\t>> 0x40400000","type":"text"}]},{"type":"paragraph","content":[{"text":"IVT_address\t(Load_address + Image_size)\t0x40400000 + 0x01e10000","type":"text"}]},{"type":"codeBlock","content":[{"text":"\t>> 0x42210000","type":"text"}]},{"type":"paragraph","content":[{"text":"CSF_address\t(IVT_address + 0x20)","type":"text"}]},{"type":"codeBlock","content":[{"text":"\t>> 0x42210020","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Generate IVT:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ genIVT.pl","type":"text"}]},{"type":"paragraph","content":[{"text":"Note: The load Address may change depending on the device.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Append the ivt.bin at the end of the padded Image:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ cat Image_pad.bin ivt.bin > Image_pad_ivt.bin","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"2.3 Signing the image","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"A CSF file has to be created to sign the image. HAB does not allow to change the SRK once the first image is authenticated, so the same SRK key used in the initial image must be used when extending the root of trust.","type":"text"}]},{"type":"paragraph","content":[{"text":"CSF examples are available in ../csf_examples/additional_images/ directory.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"\"Authenticate Data\" command in csf_fit.txt file:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"[Authenticate Data]\n # Key slot index used to authenticate the image data\n Verification index = 2\n # Authenticate Start Address, Offset, Length and file\n Blocks = Load_address 0x0 0x1e10020 \"Image-pad-ivt.bin\"","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create CSF binary file:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"$ cst-3.3.2/linux64/bin/cst --i csf_additional_images.txt --o csf_Image.bin","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Attach the CSF binary to the end of the image:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" $ cat Image_pad_ivt.bin csf_Image.bin > Image_signed.bin","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"2.4 Verifying HAB events","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The U-Boot includes the hab_auth_img command which can be used for authenticating and troubleshooting the signed image, the Image must be loaded at the load address specified in the IVT.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Authenticate additional image:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":" => hab_auth_img ","type":"text"}]},{"type":"paragraph","content":[{"text":"If no HAB events were found the Image is successfully signed.","type":"text"}]},{"type":"paragraph","content":[{"text":"References","type":"text"}]},{"type":"paragraph","content":[{"text":"[0] U-boot: i.MX8M family Secure Boot guide using HABv4","type":"text"},{"type":"hardBreak"},{"text":"[1] AN4581: \"","type":"text"},{"text":"i.MX","type":"text","marks":[{"type":"link","attrs":{"href":"http://i.MX"}}]},{"text":" Secure Boot on HABv4 Supported Devices\"","type":"text"}]}],"version":1}