blob: 982fbec654db5375543591aa4ec62484dc027b71 [file] [log] [blame]
Overview of SPL verified boot on powerpc/mpc85xx & arm/layerscape platforms
===========================================================================
Introduction
------------
This document provides an overview of how SPL verified boot works on powerpc/
mpc85xx & arm/layerscape platforms.
Methodology
-----------
The SPL image is responsible for loading the next stage boot loader, which is
the main u-boot image. For secure boot process on these platforms ROM verifies
SPL image, so to continue chain of trust SPL image verifies U-Boot image using
spl_validate_uboot(). This function uses QorIQ Trust Architecture header
(appended to U-Boot image) to validate the U-Boot binary just before passing
control to it.