doc/device-tree/ibm,cvc.rst

.. _device-tree/ibm,cvc:

ibm,cvc
=======

This describes the code (a.k.a container verification code) that skiboot uses
to verify signed firmware blobs. Each ibm,cvc child node describes CVC service,
which has a version and offset (reg).

Added in the device tree from ``ibm,secureboot-v2``.

Required properties
-------------------

.. code-block:: none

   compatible:      should be "ibm,container-verification-code"

   memory-region:   this points to the reserved memory where the
                    container-verification-code is stored.

Example
-------

.. code-block:: dts

	ibm,cvc {
		phandle = <0x10f>;
		#address-cells = <0x1>;
		#size-cells = <0x0>;
		compatible = "ibm,container-verification-code";
		memory-region = <0xaa>;

		ibm,cvc-service@40 {
			phandle = <0x110>;
			compatible = "ibm,cvc-sha512";
			reg = <0x40>;
			version = <0x1>;
		};

		ibm,cvc-service@50 {
			phandle = <0x111>;
			compatible = "ibm,cvc-verify";
			reg = <0x50>;
			version = <0x1>;
		};
	};