[PATCH 0/5] binman: add nxp_imx93cst etype for i.MX93 flash.bin signing

Jérémie Dautheribes (Schneider Electric) via U-Bo ot <[email protected]>
Newsgroups org.u-boot-project.lists.u-boot
Message-ID <[email protected]>
Hello,

This series adds support for signing i.MX93 images by leveraging binman 
and CST, the NXP tool used for secure boot. This introduces a new binman 
entry type (etype) for this purpose.

The implementation is largely derived from the existing i.MX8M support, 
since the two share much of the same signing infrastructure.

This procedure has been tested on the imx93-evk board, using both ECDSA 
and RSA-PSS keys.

Patch 1: introduces the new etype
Patch 2: updates the imx93-u-boot.dtsi description to include the new 
signing nodes
Patches 3-4: documentation
Patch 5: adds test coverage

Signed-off-by: Jérémie Dautheribes (Schneider Electric) <[email protected]>
---
Jérémie Dautheribes (Schneider Electric) (5):
      tools: binman: add nxp_imx93cst etype for i.MX93 flash.bin signing
      imx93-u-boot: wrap SPL and U-Boot nodes in a CST node if AHAB_BOOT enabled
      doc: imx: ahab: add AHAB introduction
      doc: imx: ahab: add i.MX93 secure boot guide
      binman: test: add code coverage for nxp_imx93cst etype

 .gitignore                                         |   2 +
 arch/arm/dts/imx93-u-boot.dtsi                     |  54 ++-
 doc/imx/ahab/guides/mx93_secure_boot.txt           | 269 +++++++++++++
 doc/imx/ahab/introduction_ahab.txt                 | 445 +++++++++++++++++++++
 tools/binman/etype/nxp_imx93cst.py                 | 143 +++++++
 tools/binman/ftest.py                              |  78 ++++
 tools/binman/test/vendor/nxp_imx93_csf.dts         |  18 +
 .../binman/test/vendor/nxp_imx93_csf_imagename.dts |  24 ++
 8 files changed, 1014 insertions(+), 19 deletions(-)
---
base-commit: d3e8597e46b635ec556a057bc42f0b0859654bdf
change-id: 20260814-imx93-secureboot-b914e7b6cbbf

Best regards,
--  
Jérémie Dautheribes (Schneider Electric) <[email protected]>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.