1// SPDX-License-Identifier: GPL-2.0+ 2/* 3 * Copyright 2018 NXP 4 */ 5 6/* 7 * Boot command to get and set the PRIBLOB bitfield form the SCFGR register 8 * of the CAAM IP. It is recommended to set this bitfield to 3 once your 9 * encrypted boot image is ready, to prevent the generation of blobs usable 10 * to decrypt an encrypted boot image. 11 */ 12 13#include <asm/io.h> 14#include <common.h> 15#include <command.h> 16#include <fsl_sec.h> 17 18int do_priblob_write(struct cmd_tbl *cmdtp, int flag, int argc, char * const argv[]) 19{ 20 ccsr_sec_t *sec_regs = (ccsr_sec_t *)CAAM_BASE_ADDR; 21 u32 scfgr = sec_in32(&sec_regs->scfgr); 22 23 scfgr |= 0x3; 24 sec_out32(&sec_regs->scfgr, scfgr); 25 printf("New priblob setting = 0x%x\n", sec_in32(&sec_regs->scfgr) & 0x3); 26 27 return 0; 28} 29 30U_BOOT_CMD( 31 set_priblob_bitfield, 1, 0, do_priblob_write, 32 "Set the PRIBLOB bitfield to 3", 33 "<value>\n" 34 " - Write 3 in PRIBLOB bitfield of SCFGR regiter of CAAM IP.\n" 35 " Prevent the generation of blobs usable to decrypt an\n" 36 " encrypted boot image." 37); 38