1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * Copyright 2018 NXP
4 */
5
6/*
7 * Boot command to get and set the PRIBLOB bitfield form the SCFGR register
8 * of the CAAM IP. It is recommended to set this bitfield to 3 once your
9 * encrypted boot image is ready, to prevent the generation of blobs usable
10 * to decrypt an encrypted boot image.
11 */
12
13#include <asm/io.h>
14#include <common.h>
15#include <command.h>
16#include <fsl_sec.h>
17
18int do_priblob_write(struct cmd_tbl *cmdtp, int flag, int argc, char * const argv[])
19{
20	ccsr_sec_t *sec_regs = (ccsr_sec_t *)CAAM_BASE_ADDR;
21	u32 scfgr = sec_in32(&sec_regs->scfgr);
22
23	scfgr |= 0x3;
24	sec_out32(&sec_regs->scfgr, scfgr);
25	printf("New priblob setting = 0x%x\n", sec_in32(&sec_regs->scfgr) & 0x3);
26
27	return 0;
28}
29
30U_BOOT_CMD(
31	set_priblob_bitfield, 1, 0, do_priblob_write,
32	"Set the PRIBLOB bitfield to 3",
33	"<value>\n"
34	"    - Write 3 in PRIBLOB bitfield of SCFGR regiter of CAAM IP.\n"
35	"    Prevent the generation of blobs usable to decrypt an\n"
36	"    encrypted boot image."
37);
38