[PATCH 0/5] binman: add nxp_imx93cst etype for i.MX93 flash.bin signing
Jérémie Dautheribes (Schneider Electric) via U-Bo ot <[email protected]>
| Newsgroups | org.u-boot-project.lists.u-boot |
|---|---|
| Message-ID | <[email protected]> |
Hello, This series adds support for signing i.MX93 images by leveraging binman and CST, the NXP tool used for secure boot. This introduces a new binman entry type (etype) for this purpose. The implementation is largely derived from the existing i.MX8M support, since the two share much of the same signing infrastructure. This procedure has been tested on the imx93-evk board, using both ECDSA and RSA-PSS keys. Patch 1: introduces the new etype Patch 2: updates the imx93-u-boot.dtsi description to include the new signing nodes Patches 3-4: documentation Patch 5: adds test coverage Signed-off-by: Jérémie Dautheribes (Schneider Electric) <[email protected]> --- Jérémie Dautheribes (Schneider Electric) (5): tools: binman: add nxp_imx93cst etype for i.MX93 flash.bin signing imx93-u-boot: wrap SPL and U-Boot nodes in a CST node if AHAB_BOOT enabled doc: imx: ahab: add AHAB introduction doc: imx: ahab: add i.MX93 secure boot guide binman: test: add code coverage for nxp_imx93cst etype .gitignore | 2 + arch/arm/dts/imx93-u-boot.dtsi | 54 ++- doc/imx/ahab/guides/mx93_secure_boot.txt | 269 +++++++++++++ doc/imx/ahab/introduction_ahab.txt | 445 +++++++++++++++++++++ tools/binman/etype/nxp_imx93cst.py | 143 +++++++ tools/binman/ftest.py | 78 ++++ tools/binman/test/vendor/nxp_imx93_csf.dts | 18 + .../binman/test/vendor/nxp_imx93_csf_imagename.dts | 24 ++ 8 files changed, 1014 insertions(+), 19 deletions(-) --- base-commit: d3e8597e46b635ec556a057bc42f0b0859654bdf change-id: 20260814-imx93-secureboot-b914e7b6cbbf Best regards, -- Jérémie Dautheribes (Schneider Electric) <[email protected]>