1[Header]
2  Version = 4.3
3  Hash Algorithm = sha256
4  Engine = CAAM
5  Engine Configuration = 0
6  Certificate Format = X509
7  Signature Format = CMS
8
9[Install SRK]
10  # SRK_TABLE is full path to SRK_1_2_3_4_table.bin
11  File = "$SRK_TABLE"
12  Source index = 0
13
14[Install CSFK]
15  # CSF_KEY is full path to CSF1_1_sha256_4096_65537_v3_usr_crt.pem
16  File = "$CSF_KEY"
17
18[Authenticate CSF]
19
20[Install Key]
21  Verification index = 0
22  Target Index = 2
23  # IMG_KEY is full path to IMG1_1_sha256_4096_65537_v3_usr_crt.pem
24  File = "$IMG_KEY"
25
26[Authenticate Data]
27  Verification index = 2
28  # FIXME:
29  # Line 1 -- fitImage
30  Blocks = CONFIG_SPL_LOAD_FIT_ADDRESS 0x57c00 0xffff "flash.bin"
31