summaryrefslogtreecommitdiffstats
path: root/recipes-bsp/imx-seco
Commit message (Collapse)AuthorAgeFilesLines
* imx-seco: Upgrade 5.8.7.1 to 5.9backport-1363-to-kirkstoneOleksandr Suvorov2023-01-081-3/+3
| | | | | | | | | Update to the version used in lf-5.15.71_2.2.0. License was updated to NXP EULA v39 August 2022. Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io> (cherry picked from commit 4f209b9383c3b556d37e2370d483b9233cf6abc6)
* imx-seco-libs: Update lf-5.15.52-2.1.0 to lf-5.15.71-2.2.0Oleksandr Suvorov2023-01-081-2/+2
| | | | | | | | No commits. Change branch to imx_5.4.70_2.3.11 which is used in NXP BSP 5.15.71-2.2.0. Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io> (cherry picked from commit 25cdb79d853fd6c90bf0d3538bbcaea83919259f)
* imx-seco-libs: Fix installs with usrmerge distro featureKhem Raj2023-01-081-1/+1
| | | | | | | | | | | | | Fixes QA errors like ERROR: imx-seco-libs-git-r0 do_package: QA Issue: imx-seco-libs: Files/directories were installed but not shipped in any package: /usr/usr /usr/usr/lib /usr/usr/lib/hsm_lib.a /usr/usr/lib/she_lib.a /usr/usr/lib/seco_nvm_manager.a Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b24ea69e457571d1f924c8a801de456f9680b1ff)
* imx-seco-libs: Fix build with clangKhem Raj2023-01-082-1/+59
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9d0f293b68e5d7bbfa925ecace5068e41855a4ac)
* imx-seco-libs: upgrade from lf-5.15.5_1.0.0 to lf-5.15.52-2.1.0Max Krummenacher2022-11-281-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to the version used in lf5.15.52_2.1.0. License was updated to NXP EULA v35 May 2022. The branch naming is a bit erratic but the commit history is linear, b255047 is a descendant of 06a9062. Commit history: b255047 (tag: lf-5.15.52-2.1.0, origin/imx_5.4.70_2.3.9) update EULA to v35 bbae88a AHAB-756: support secure ram for HSM mac one go with MMCAU c24e99b SCR.txt: Update Release Location aff59d9 LF-6126: Add support for AES ECB dcf0824 LF-6124: Reword to highlight difference between B0 Vs other devices b97dde8 Add support for FIPS self-test command (only supported on DXL B0) 6c41488 AHAB-716: update doc 1976d2e AHAB-716: cosmetic 1a7ca0e Static code analysis fixes. 4e96c37 V2XA-776: hsm manage key - update v2x test with OTP Root KEK flag c047645 AHAB-716: update doc da01a3b AHAB-716: Add the support of HMAC and TLS & Update the list of unsupported curves e4faff7 AHAB-716: Add the OTP Root KEK flag to the manage Key on DXL B0 152d02d AHAB-716: license update 675061e Add python script to derive OEM KEK for SECO and V2X 2a7d604 Add short doc to describe how to run she_test 6a340ad Zero initialize parameter structures in hsm_test main to avoid crash 45910c1 AHAB-683: Add AES CCM examples for new IV handling cde1670 AHAB-715: Updates from static code analysis 2bd67a5 Update supported key list for QXP C0 sig verif, correct hashing reference 1018333 AHAB-683: Modify comment for clarity 3592d0f AHAB-683: Update requirements for CCM IV to match FIPS Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> (cherry picked from commit 43deb1c0ec0dfbc32126cc3134704b48b30111be)
* imx-seco: upgrade from 3.8.6 to 5.8.7.1Max Krummenacher2022-11-281-4/+4
| | | | | | | | | | | | | Update to the version used in lf5.15.52_2.1.0. License was updated to NXP EULA v35 May 2022. Note that the binary blobs are only updated for i.MX 8DXL SoC. Binary blobs for all other SoC have the same md5sum as in the 3.8.6 version. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> (cherry picked from commit 2ebc966fca24cbecdb90bb8a09ee34910f800f22)
* imx-seco: Upgrade 3.8.5 -> 3.8.6Tom Hochstein2022-08-182-6/+7
| | | | | | | | | Fixes: b0fca0e i.MX8 DXL B0 SECO FW 3.8.6 V2X FW 1.1.5 42e1d58 i.MX8 DXL B0 SECO FW 0.8.5 V2X FW 0.1.4 Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> (cherry picked from commit e89cd876bf942cdaa2e3ad5965e0f0f1fb909a83)
* imx-seco-libs: Update for NXP release 5.15.5-1.0.0Tom Hochstein2022-05-103-3/+66
| | | | | | | | | | | | | | | | Fixes: 06a9062 V2XA-767: add a delay for v2x signed msg f0d294b HSM-630: update doc e98a558 HSM-630: Update project name doxyfile c22f003 HSM-630: update version and hsm api doc e0886ae HSM-630: add fast mac flag to use cau for cmac Includes patches: - Fix for multilib - Add v2x_test Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> (cherry picked from commit 9d815c53eba15bf036cac35f5b2be6613bc53cea)
* imx-seco: Upgrade 3.8.4 -> 3.8.5Tom Hochstein2022-05-101-3/+3
| | | | | | | | | Fixes: b2babf8 i.MX8 QXP B0/C0 & QM B0 SECO FW v3.8.5 & DXL A1 SECO FW v3.8.5 V2X FW v1.1.4 2e03f7f i.MX8 DXL B0 SECO FW 0.8.4 V2X FW 0.1.4 eng drop Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com> (cherry picked from commit 851b55ca1e19bd8f28aadd8f93d582c4999d0d0b)
* Generalize overrides subsystem for NXP and Mainline supportOtavio Salvador2022-02-212-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Essentially, we extend the overrides to a generic-bsp, nxp-bsp, and mainline-bsp. So, for example, the mx8mq override is split into: - imx-generic-bsp: compatible with every i.MX SoC and both BSP variants - imx-nxp-bsp: compatible with every i.MX SoC but specific to NXP BSP - imx-mainline-bsp: compatible with every i.MX SoC but specific to Mainline BSP - mx8-generic-bsp: compatible with every i.MX8 SoC and both BSP variants - mx8-nxp-bsp: compatible with every i.MX8 SoC but specific to NXP BSP - mx8-mainline-bsp: compatible with every i.MX8 SoC but specific to Mainline BSP - mx8m-generic-bsp: compatible with every i.MX8M SoC and both BSP variants - mx8m-nxp-bsp: compatible with every i.MX8M SoC but specific to NXP BSP - mx8m-mainline-bsp: compatible with every i.MX8M SoC but specific to Mainline BSP - mx8mq-generic-bsp: compatible with every i.MX8MQ SoC and both BSP variants - mx8mq-nxp-bsp: compatible with every i.MX8MQ SoC8 but specific to NXP BSP - mx8mq-mainline-bsp: compatible with every i.MX8MQ SoC but specific to Mainline BSP The extender mechanism is responsible for extending the override list to include the generic overrides. We can then use the three different variants to handle the metadata correctly. Generically speaking, the conversion mainly was automated (with a lot of back and forth until getting it right). To convert an existing layer, the following script can be used: ```sh git ls-files classes recipes-* \ | xargs sed -i \ -e 's,:\(mx[6-8]\w*\),:\1-nxp-bsp,g' \ -e 's,(\(mx[6-8]\w*\)),(\1-nxp-bsp),g' \ -e 's,\(mx[6-8]\w*\)|,\1-nxp-bsp|,g' \ -e 's,|\(mx[6-8]\w*\)),|\1-nxp-bsp),g' \ \ -e 's,:\(mx[5s]\w*\),:\1-generic-bsp,g' \ -e 's,(\(mx[5s]\w*\)),(\1-generic-bsp),g' \ -e 's,\(mx[5s]\w*\)|,\1-generic-bsp|,g' \ -e 's,|\(mx[5s]\w*\)),|\1-generic-bsp),g' \ \ -e 's,:\(vf\w*\),:\1-generic-bsp,g' \ -e 's,:\(vf[56]0\w*\),:\1-generic-bsp,g' \ -e 's,\(vf\w*\)|,\1-generic-bsp|,g' \ -e 's,|\(vf\w*\)),|\1-generic-bsp),g' \ -e 's,\(vf[56]0\w*\)|,\1-generic-bsp|,g' \ -e 's,|\(vf[56]0\w*\)),|\1-generic-bsp),g' \ \ -e 's,:\(imx\) ,:\1-nxp-bsp ,g' \ -e 's,(\(imx\)),(\1-nxp-bsp),g' \ -e 's,\(imx\)|,\1-nxp-bsp|,g' \ -e 's,|\(imx\)),|\1-nxp-bsp),g' for d in $(find -type d | egrep '/mx[6-8]w*'); do git mv $d $d-nxp-bsp done for d in $(find -type d | egrep '/imx$'); do git mv $d $d-nxp-bsp done for d in $(find -type d | egrep '/mx[5s]w*'); do git mv $d $d-generic-bsp done ``` Fixes: #791. Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
* imx-seco-libs: Update to 5.10.72-2.2.0Tom Hochstein2022-01-191-3/+3
| | | | | | | | | | | Fixes: 3e8ad6b license update 78d7375 V2XA-732, V2XA-733: update v2x test with SM4 CCM examples cf16424 V2XA-733: hsm lib: key generic crypto service 639a845 V2XA-732, V2XA-733: add SM4 CCM support and generic crypto service faa80e4 HSM-590: license update Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco: Upgrade to 3.8.4Tom Hochstein2022-01-191-3/+3
| | | | Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco: upgrade to 3.8.2Andrey Zhizhikin2021-10-221-3/+3
| | | | Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
* imx-seco-libs: Upgrade to NXP release 5.10.35-2.0.0Tom Hochstein2021-07-261-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 44caf51 HSM-590: license update 9da5d5a V2XA-687: add the support of BR256T1 to key exchange 0d5b232 HSM-558: hsm_prepare_signature specify max number of pre-calculated values 4bddb34 V2XA-687: remove BR256T1 support from some API 501203b V2XA-654: add tests for standalone butterfly key expansion a5620c0 V2XA-654: standalone butterfly key expansion 784f861 V2XA-654: standalone butterfly key expansion API ecf2715 V2XA-648: add SM2 support to butterfly key expansion and pubk reconstruction services 35bfeaa HSM-555: fix indentation 7f37241 HSM-555 reopen nvm session when read fail from mu 2bea9d9 HSM-557: fix segment fault when run not in root 00ab3f1 HSM-552: specify min_mac_len FIPS approved mode constraints c565919 HSM-524: she_api_document 1.3 hsm_api_document 3.7 105951b V2XA-567: remove tests refering to previous implementation b6e84aa Key exchange for KEK generation supported on QXP. 789544a V2XA-628: initialize missing fields in key_exchange API calls 01f19fb HSM-476: allow V2X abort respons (2 words) 713dd56 HSM-476: add FATAL error definition 56c0427 HSM-461: Clarify that auth_enc IV flags are only for encryption operations 4d06665 HSM-476: allow retries on NVM errors eb50867 HSM-481: clarify hsm_tls_finish support b927ff4 HSM-481: hsm_api_document 3.2 amendment fc52d67 HSM-473: fix build c4e40e4 V2XA-567: add tests for AES GCM IV enhancement a51e6ad HSM-473: Add support for per-key min mac length 7069412 HSM-461: specify IV constraints for key injection 8f88b3b HSM-461: doc updates 5731389 HSM-461: Reformat revision history entry for version 3.3 831d398 HSM-461: Clarify API usage for auth_enc based on review comments e4c87f4 HSM-461: Add enhancements to AES GSM IV generation fe47c46 HSM-460: Specify that TLS_FINISH flags are not supported for DXL a56da9c HSM-460: Add EMS option in key exchange for TLS KDF 55c8e04 HSM-454: Add hsm_tls_finish message, update hsm_key_exchange usage Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco: Upgrade to 3.8.1Tom Hochstein2021-07-261-4/+4
| | | | | | | - SOC Support: QXP B0/C0, DXL A1 - Fix bug preventing set/get boot state commands handling when in error state Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* Drop overrides for i.MX 8DXL Phantom MEKTom Hochstein2021-05-212-2/+2
| | | | | | | The i.MX 8DXL Phantom MEK will never be released, so drop the overrides that have crept into the meta-data. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco*: Make 8DX compatibility explicitTom Hochstein2021-05-212-2/+2
| | | | | | | | i.MX 8DX is marked compatible since it has `mx8qxp` in its OVERRIDES. Make it explicit for notational purposes and to be consistent with other recipes. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco*: Improve description fieldTom Hochstein2021-05-212-2/+2
| | | | Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco-libs: Fix host-user-contaminated QA issueTom Hochstein2021-02-132-1/+36
| | | | Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco: Upgrade to 3.7.5Tom Hochstein2021-02-132-4/+4
| | | | | | | Update imx-seco package to version 3.7.5, which is aligned with NXP release imx_5.4.70_2.3.1. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco: update to 3.7.4 versionAndrey Zhizhikin2021-02-012-5/+5
| | | | | | | | | Update imx-seco package to version 3.7.4, which is aligned with NXP release imx_5.4.70_2.3.0. This package uses EULA v17 October 2020. Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
* imx8qxpmek: Update the i.MX 8QXP default build to rev C0Tom Hochstein2021-01-212-2/+2
| | | | | | | | | | The current machine configuration support for 8QXP MEK is for rev B0 silicon. Support for rev C0 is implemented using a machine override `mx8qxpc0`. Update the default build to rev C0 silicon. Support for rev B0 is provided with a new machine feature `soc-revb0`. The machine override is removed. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* imx-seco: Upgrade to 3.7.1Cristinel Panfir2020-10-272-7/+6
| | | | | | | | This version uses EULA v15 August 2020. imx-seco-libs: Expand the compatibility list for better tracking. Signed-off-by: Cristinel Panfir <cristinel.panfir@nxp.com>
* imx-seco: upgrade to version 3.6.3Andrey Zhizhikin2020-09-233-30/+50
| | | | | | | | | | Upstream version has been bumped up, update the recipe to match it. SECO FW name is picked up from the machine definition, as it is now defined in a separate bbclass which allows FW names to be set based on machine's SoC. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* imx-seco: Fix warning SRC_URI uses PN not BPNMihai Lindner2019-12-231-1/+1
| | | | | | Fix QA Issue: imx-seco: SRC_URI uses PN not BPN [src-uri-bad] Signed-off-by: Mihai Lindner <mihai.lindner@nxp.com>
* imx-seco: Add recipe for SECO firmwareCristinel Panfir2019-12-161-0/+30
Signed-off-by: Cristinel Panfir <cristinel.panfir@nxp.com>