File: ibm%2Ccvc.rst

package info (click to toggle)
skiboot 7.0%2Bdfsg-1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm, forky, sid, trixie
  • size: 35,624 kB
  • sloc: ansic: 221,198; sh: 11,580; cpp: 5,767; python: 3,421; makefile: 1,773; asm: 1,503; perl: 1,479; tcl: 1,188; pascal: 107
file content (47 lines) | stat: -rw-r--r-- 990 bytes parent folder | download | duplicates (12)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
.. _device-tree/ibm,cvc:

ibm,cvc
=======

This describes the code (a.k.a container verification code) that skiboot uses
to verify signed firmware blobs. Each ibm,cvc child node describes CVC service,
which has a version and offset (reg).

Added in the device tree from ``ibm,secureboot-v2``.

Required properties
-------------------

.. code-block:: none

   compatible:      should be "ibm,container-verification-code"

   memory-region:   this points to the reserved memory where the
                    container-verification-code is stored.

Example
-------

.. code-block:: dts

	ibm,cvc {
		phandle = <0x10f>;
		#address-cells = <0x1>;
		#size-cells = <0x0>;
		compatible = "ibm,container-verification-code";
		memory-region = <0xaa>;

		ibm,cvc-service@40 {
			phandle = <0x110>;
			compatible = "ibm,cvc-sha512";
			reg = <0x40>;
			version = <0x1>;
		};

		ibm,cvc-service@50 {
			phandle = <0x111>;
			compatible = "ibm,cvc-verify";
			reg = <0x50>;
			version = <0x1>;
		};
	};