| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
Update to the version used in lf-5.15.71_2.2.0.
License was updated to NXP EULA v39 August 2022.
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
|
|
|
|
|
| |
No commits. Change branch to imx_5.4.70_2.3.11 which is used in
NXP BSP 5.15.71-2.2.0.
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes QA errors like
ERROR: imx-seco-libs-git-r0 do_package: QA Issue: imx-seco-libs: Files/directories were installed but not shipped in any package:
/usr/usr
/usr/usr/lib
/usr/usr/lib/hsm_lib.a
/usr/usr/lib/she_lib.a
/usr/usr/lib/seco_nvm_manager.a
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
| |
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update to the version used in lf5.15.52_2.1.0.
License was updated to NXP EULA v35 May 2022.
The branch naming is a bit erratic but the commit history is
linear, b255047 is a descendant of 06a9062.
Commit history:
b255047 (tag: lf-5.15.52-2.1.0, origin/imx_5.4.70_2.3.9) update EULA to v35
bbae88a AHAB-756: support secure ram for HSM mac one go with MMCAU
c24e99b SCR.txt: Update Release Location
aff59d9 LF-6126: Add support for AES ECB
dcf0824 LF-6124: Reword to highlight difference between B0 Vs other devices
b97dde8 Add support for FIPS self-test command (only supported on DXL B0)
6c41488 AHAB-716: update doc
1976d2e AHAB-716: cosmetic
1a7ca0e Static code analysis fixes.
4e96c37 V2XA-776: hsm manage key - update v2x test with OTP Root KEK flag
c047645 AHAB-716: update doc
da01a3b AHAB-716: Add the support of HMAC and TLS & Update the list of unsupported curves
e4faff7 AHAB-716: Add the OTP Root KEK flag to the manage Key on DXL B0
152d02d AHAB-716: license update
675061e Add python script to derive OEM KEK for SECO and V2X
2a7d604 Add short doc to describe how to run she_test
6a340ad Zero initialize parameter structures in hsm_test main to avoid crash
45910c1 AHAB-683: Add AES CCM examples for new IV handling
cde1670 AHAB-715: Updates from static code analysis
2bd67a5 Update supported key list for QXP C0 sig verif, correct hashing reference
1018333 AHAB-683: Modify comment for clarity
3592d0f AHAB-683: Update requirements for CCM IV to match FIPS
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update to the version used in lf5.15.52_2.1.0.
License was updated to NXP EULA v35 May 2022.
Note that the binary blobs are only updated for i.MX 8DXL SoC.
Binary blobs for all other SoC have the same md5sum as in the
3.8.6 version.
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
|
|
|
|
|
|
|
|
| |
Fixes:
b0fca0e i.MX8 DXL B0 SECO FW 3.8.6 V2X FW 1.1.5
42e1d58 i.MX8 DXL B0 SECO FW 0.8.5 V2X FW 0.1.4
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes:
06a9062 V2XA-767: add a delay for v2x signed msg
f0d294b HSM-630: update doc
e98a558 HSM-630: Update project name doxyfile
c22f003 HSM-630: update version and hsm api doc
e0886ae HSM-630: add fast mac flag to use cau for cmac
Includes patches:
- Fix for multilib
- Add v2x_test
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
|
| |
Fixes:
b2babf8 i.MX8 QXP B0/C0 & QM B0 SECO FW v3.8.5 & DXL A1 SECO FW v3.8.5 V2X FW v1.1.4
2e03f7f i.MX8 DXL B0 SECO FW 0.8.4 V2X FW 0.1.4 eng drop
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Essentially, we extend the overrides to a generic-bsp, nxp-bsp, and
mainline-bsp.
So, for example, the mx8mq override is split into:
- imx-generic-bsp: compatible with every i.MX SoC and both BSP variants
- imx-nxp-bsp: compatible with every i.MX SoC but specific to NXP BSP
- imx-mainline-bsp: compatible with every i.MX SoC but specific to Mainline BSP
- mx8-generic-bsp: compatible with every i.MX8 SoC and both BSP variants
- mx8-nxp-bsp: compatible with every i.MX8 SoC but specific to NXP BSP
- mx8-mainline-bsp: compatible with every i.MX8 SoC but specific to Mainline BSP
- mx8m-generic-bsp: compatible with every i.MX8M SoC and both BSP variants
- mx8m-nxp-bsp: compatible with every i.MX8M SoC but specific to NXP BSP
- mx8m-mainline-bsp: compatible with every i.MX8M SoC but specific to Mainline BSP
- mx8mq-generic-bsp: compatible with every i.MX8MQ SoC and both BSP variants
- mx8mq-nxp-bsp: compatible with every i.MX8MQ SoC8 but specific to NXP BSP
- mx8mq-mainline-bsp: compatible with every i.MX8MQ SoC but specific to Mainline BSP
The extender mechanism is responsible for extending the override list to
include the generic overrides. We can then use the three different
variants to handle the metadata correctly.
Generically speaking, the conversion mainly was automated (with a lot of
back and forth until getting it right).
To convert an existing layer, the following script can be used:
```sh
git ls-files classes recipes-* \
| xargs sed -i \
-e 's,:\(mx[6-8]\w*\),:\1-nxp-bsp,g' \
-e 's,(\(mx[6-8]\w*\)),(\1-nxp-bsp),g' \
-e 's,\(mx[6-8]\w*\)|,\1-nxp-bsp|,g' \
-e 's,|\(mx[6-8]\w*\)),|\1-nxp-bsp),g' \
\
-e 's,:\(mx[5s]\w*\),:\1-generic-bsp,g' \
-e 's,(\(mx[5s]\w*\)),(\1-generic-bsp),g' \
-e 's,\(mx[5s]\w*\)|,\1-generic-bsp|,g' \
-e 's,|\(mx[5s]\w*\)),|\1-generic-bsp),g' \
\
-e 's,:\(vf\w*\),:\1-generic-bsp,g' \
-e 's,:\(vf[56]0\w*\),:\1-generic-bsp,g' \
-e 's,\(vf\w*\)|,\1-generic-bsp|,g' \
-e 's,|\(vf\w*\)),|\1-generic-bsp),g' \
-e 's,\(vf[56]0\w*\)|,\1-generic-bsp|,g' \
-e 's,|\(vf[56]0\w*\)),|\1-generic-bsp),g' \
\
-e 's,:\(imx\) ,:\1-nxp-bsp ,g' \
-e 's,(\(imx\)),(\1-nxp-bsp),g' \
-e 's,\(imx\)|,\1-nxp-bsp|,g' \
-e 's,|\(imx\)),|\1-nxp-bsp),g'
for d in $(find -type d | egrep '/mx[6-8]w*'); do
git mv $d $d-nxp-bsp
done
for d in $(find -type d | egrep '/imx$'); do
git mv $d $d-nxp-bsp
done
for d in $(find -type d | egrep '/mx[5s]w*'); do
git mv $d $d-generic-bsp
done
```
Fixes: #791.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes:
3e8ad6b license update
78d7375 V2XA-732, V2XA-733: update v2x test with SM4 CCM examples
cf16424 V2XA-733: hsm lib: key generic crypto service
639a845 V2XA-732, V2XA-733: add SM4 CCM support and generic crypto service
faa80e4 HSM-590: license update
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
| |
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
| |
Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
44caf51 HSM-590: license update
9da5d5a V2XA-687: add the support of BR256T1 to key exchange
0d5b232 HSM-558: hsm_prepare_signature specify max number of pre-calculated values
4bddb34 V2XA-687: remove BR256T1 support from some API
501203b V2XA-654: add tests for standalone butterfly key expansion
a5620c0 V2XA-654: standalone butterfly key expansion
784f861 V2XA-654: standalone butterfly key expansion API
ecf2715 V2XA-648: add SM2 support to butterfly key expansion and pubk reconstruction services
35bfeaa HSM-555: fix indentation
7f37241 HSM-555 reopen nvm session when read fail from mu
2bea9d9 HSM-557: fix segment fault when run not in root
00ab3f1 HSM-552: specify min_mac_len FIPS approved mode constraints
c565919 HSM-524: she_api_document 1.3 hsm_api_document 3.7
105951b V2XA-567: remove tests refering to previous implementation
b6e84aa Key exchange for KEK generation supported on QXP.
789544a V2XA-628: initialize missing fields in key_exchange API calls
01f19fb HSM-476: allow V2X abort respons (2 words)
713dd56 HSM-476: add FATAL error definition
56c0427 HSM-461: Clarify that auth_enc IV flags are only for encryption operations
4d06665 HSM-476: allow retries on NVM errors
eb50867 HSM-481: clarify hsm_tls_finish support
b927ff4 HSM-481: hsm_api_document 3.2 amendment
fc52d67 HSM-473: fix build
c4e40e4 V2XA-567: add tests for AES GCM IV enhancement
a51e6ad HSM-473: Add support for per-key min mac length
7069412 HSM-461: specify IV constraints for key injection
8f88b3b HSM-461: doc updates
5731389 HSM-461: Reformat revision history entry for version 3.3
831d398 HSM-461: Clarify API usage for auth_enc based on review comments
e4c87f4 HSM-461: Add enhancements to AES GSM IV generation
fe47c46 HSM-460: Specify that TLS_FINISH flags are not supported for DXL
a56da9c HSM-460: Add EMS option in key exchange for TLS KDF
55c8e04 HSM-454: Add hsm_tls_finish message, update hsm_key_exchange usage
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
| |
- SOC Support: QXP B0/C0, DXL A1
- Fix bug preventing set/get boot state commands handling when in error state
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
| |
The i.MX 8DXL Phantom MEK will never be released, so drop the overrides
that have crept into the meta-data.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
|
| |
i.MX 8DX is marked compatible since it has `mx8qxp` in its OVERRIDES.
Make it explicit for notational purposes and to be consistent with
other recipes.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
| |
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
| |
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
| |
Update imx-seco package to version 3.7.5, which is aligned with NXP
release imx_5.4.70_2.3.1.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
|
|
| |
Update imx-seco package to version 3.7.4, which is aligned with NXP
release imx_5.4.70_2.3.0.
This package uses EULA v17 October 2020.
Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
The current machine configuration support for 8QXP MEK is for rev B0 silicon.
Support for rev C0 is implemented using a machine override `mx8qxpc0`.
Update the default build to rev C0 silicon. Support for rev B0 is provided
with a new machine feature `soc-revb0`. The machine override is removed.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
|
|
|
|
|
|
| |
This version uses EULA v15 August 2020.
imx-seco-libs: Expand the compatibility list for better tracking.
Signed-off-by: Cristinel Panfir <cristinel.panfir@nxp.com>
|
|
|
|
|
|
|
|
|
|
| |
Upstream version has been bumped up, update the recipe to match it.
SECO FW name is picked up from the machine definition, as it is now
defined in a separate bbclass which allows FW names to be set based on
machine's SoC.
Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
|
|
|
|
|
|
| |
Fix QA Issue: imx-seco: SRC_URI uses PN not BPN [src-uri-bad]
Signed-off-by: Mihai Lindner <mihai.lindner@nxp.com>
|
|
Signed-off-by: Cristinel Panfir <cristinel.panfir@nxp.com>
|