From patchwork Mon Feb 2 19:51:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ryan Eatmon X-Patchwork-Id: 80277 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6210AE7FDCC for ; Mon, 2 Feb 2026 19:52:11 +0000 (UTC) Received: from PH8PR06CU001.outbound.protection.outlook.com (PH8PR06CU001.outbound.protection.outlook.com [40.107.209.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.62052.1770061922887179010 for ; Mon, 02 Feb 2026 11:52:03 -0800 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ti.com header.s=selector1 header.b=LLX/8Cc7; spf=permerror, err=parse error for token &{10 18 spf.protection.outlook.com}: limit exceeded (domain: ti.com, ip: 40.107.209.43, mailfrom: reatmon@ti.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=bnfOHl8F2FCfN6cEemXl+32XNmDb6eq8KMUCgjwj9f9ElmI8h/luJ0aznoimtVV7ktDfIuoIS8sDz6e1kyGnApT+xkoUvOLscRooqxu7GF7ze46pi1ErTzXYz/3oT71G27qvZUklMJacwIIWmW6HjYP+VSAemXjWLs12uclAuv/nSjmpZrkjhyx80OjkBXtf8kXerpy11YZDZTBjVMDifYR47DYCTgcTu3uZcQcywsWNGvL5icg/zuT2J/9WTdSonwS2FZk/H3XOxRX/BvRwMFIHKzboRpTp+37L1f6iNe6lBNATA7T1ZuhgQuNCbDONaFJDcDmk87tkol1z7pij8A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Jz1W8vpq4XCCfj6w2M7Fh90WTIvO86KPgOXadCrH0iw=; b=zEodGGWecGnlSTJgSpR57HrKWqmmiewDU8cSl+mg+XGfZ8xxD2Gxtf3B8M4y9tf2s1Pb54XN+TI/F7mbv/5dPnI/WSqySM9SixNDcFaz7FkulpHtl0wkHjrhJZXPBZb7gTHByxYnTEmhzu3PB/gKPDsuJO1jyEudh7ONNZrZF3aUtTYmnGkcMwIZqtelRCBNvzmoCEarHmRs63PVmWFOufisZ7Ux1oLMRkYfTV3ByngID0B7E+GlqZxHnp3Fv7RANE7S1ireT4gkT3Nz9zKqKIct4MKPx1dTHrDIrWjSZbgO+0Id4zyCIOKADmtMnelnx/vBgT+yorPti5Siqcpw+g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 198.47.23.195) smtp.rcpttodomain=lists.yoctoproject.org smtp.mailfrom=ti.com; dmarc=pass (p=quarantine sp=none pct=100) action=none header.from=ti.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ti.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Jz1W8vpq4XCCfj6w2M7Fh90WTIvO86KPgOXadCrH0iw=; b=LLX/8Cc7U8bbqK/BaZTv1F5HZ9bdqUU+WM5vlIgD1IkJN+qH1NchUd4a55DbwssMCqSnolbOx1N3cmPy8M7MMArwwU6R3mkiipQdYUrOkVV5mF2XHQyo0uHDTHgtCwZs5e/31fw7pWh9X4eKE91zImAz8Zt0iLTcmXne/fjNe70= Received: from CH0PR03CA0081.namprd03.prod.outlook.com (2603:10b6:610:cc::26) by CH0PR10MB4922.namprd10.prod.outlook.com (2603:10b6:610:c6::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9564.16; Mon, 2 Feb 2026 19:52:01 +0000 Received: from DS3PEPF000099DB.namprd04.prod.outlook.com (2603:10b6:610:cc:cafe::31) by CH0PR03CA0081.outlook.office365.com (2603:10b6:610:cc::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9564.16 via Frontend Transport; Mon, 2 Feb 2026 19:51:54 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 198.47.23.195) smtp.mailfrom=ti.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ti.com; Received-SPF: Pass (protection.outlook.com: domain of ti.com designates 198.47.23.195 as permitted sender) receiver=protection.outlook.com; client-ip=198.47.23.195; helo=lewvzet201.ext.ti.com; pr=C Received: from lewvzet201.ext.ti.com (198.47.23.195) by DS3PEPF000099DB.mail.protection.outlook.com (10.167.17.197) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.10 via Frontend Transport; Mon, 2 Feb 2026 19:52:00 +0000 Received: from DLEE214.ent.ti.com (157.170.170.117) by lewvzet201.ext.ti.com (10.4.14.104) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20; Mon, 2 Feb 2026 13:51:59 -0600 Received: from DLEE202.ent.ti.com (157.170.170.77) by DLEE214.ent.ti.com (157.170.170.117) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20; Mon, 2 Feb 2026 13:51:59 -0600 Received: from lelvem-mr05.itg.ti.com (10.180.75.9) by DLEE202.ent.ti.com (157.170.170.77) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20 via Frontend Transport; Mon, 2 Feb 2026 13:51:59 -0600 Received: from grumpy (grumpy.dhcp.ti.com [128.247.81.229]) by lelvem-mr05.itg.ti.com (8.18.1/8.18.1) with ESMTP id 612Jpxeq2711104; Mon, 2 Feb 2026 13:51:59 -0600 Received: from reatmon by grumpy with local (Exim 4.97) (envelope-from ) id 1vmzxn-000000081Yl-01nu; Mon, 02 Feb 2026 13:51:59 -0600 From: Ryan Eatmon To: Praneeth Bajjuri , Denys Dmytriyenko , Subject: [meta-ti][master][PATCH 1/2] u-boot: Add alternative key signing Date: Mon, 2 Feb 2026 13:51:57 -0600 Message-ID: <20260202195158.1912610-1-reatmon@ti.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 X-C2ProcessedOrg: 333ef613-75bf-4e12-a4b1-8e3623f5dcea X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DS3PEPF000099DB:EE_|CH0PR10MB4922:EE_ X-MS-Office365-Filtering-Correlation-Id: 69e52128-d113-42b1-0a2f-08de629487fc X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|376014|36860700013|1800799024; X-Microsoft-Antispam-Message-Info: 97IMcq0YAK6BUt0IOt3wNG5YF9jeuzuLTWMA5onili1oP90XcmVLx+/R533WaYyNUfiPRD79dhUH/ubaJWKrxMpLEAJcPxhgWI/49fSk9CWPrgbrGec3L1/uPCgrAuBhkZJdnIlPD2OmoLt7Li4LDoh2dxik7LUasak5C5JdtMvTXF4sy0keYJ1hcbbgUFNRZAmajZ54Yal7O19CXqxcLdpDBnRhkPnGhjCqkvnfBsRQTzhoJ+SPoMufuNPeJjtj8vWEcKdJUNt3A3NlBmPTMGR6xiPh+cd1J1wri0SxViaet21lvTQyiNRYRjzNgU6+gJbYHAZyEK4nOAAefMM4AJVLWMlMqKAbAy/LDJmJdlr0nhn+cK3TrplJFvj75P5l/k6Mgbr9gCfa1YOv6l2i3uWnfklVtY2w0xQVmkG2uJb9AveGs4bx5j4GvXUxvejR5MpMNzvW1rPq5eUm8uka+0JS79OStSStS432Au1dUdYmavSoXuUI9Kf495UYew1VVFIMMlmoTVtMK0J5cZpMZJT8KqCkt+BVE0aRjjyTKxAWJCaISsTyUg+FqPTFZax2/5sGfjzXvVV2ahncliLu228K7LaquwQWJsrEo0Y9k8WuAPmuAdUJnGYHVEom25XytQedMQHPB7SoX8E5PKQDgxepa7FzuYKjkv7gY/e3LFMdu6pjCb9mCg2wHykpCw2BCpkGaQGI8UlVoCYTi2z/PL8fb+uBH8iORa9g3BYwm0PaLBxEJ8co0XWDKwjiEZWI+IciCaoVOZVg4HCWj2E5T90lOQZaFF7I9K3OIo1Edy++V3wgyXPRW+4o3cmuhN7Xqw4FngljhoQW8rA0pnjfcCNCWAl432InGZy+srsBcDS4blxzeBaeCS3vyuDoe9JWy8K4LF0MXBuv4bEnusEPEPoZ+pqthjA1Mjq8MIzbdPsRKeVB8GbC4hffvRr33TGPUmQE/GuLVWvjX8oEeMJBrlVi/k8+yZrGjqJ44Cr04lGYC0U4hh/ZFqishAbvzN7FxsDV4Xl/HSLRx6UhMtc9mMQJxkTRTF8XSJCpcoN9bKcVKbIJPIelQOsY1wJftqzSD2NltjsOTybp1UUePliq3xEuuaVFk51f2f78rSiDB3Df1rvI6tYah27xuuPZm00wV6CthszsoWsH8AABjzzBgnUC7TAkgu4heoPkTTZAKflDjpsmJiGI4e5YBqJEYCm18huxjQnsnk3BEVMGu0hFN+SzjqTODlVfKBjgXUddOE6/WYk6uMN8aAmv8yKtv2YIiyVIKfiP5PiwWOAQ6xoXFeWQ9nwirL8fcSVOc68M/0gbdNllOPMI7TW2Rdi1hwIye2NgeDmohMUMB1qlq72cHzeC5UG7O+kZhYrwYk1I4MF50A5Z1ObbzBOwdua9MmCmpignYeP6l3GTcNjnwGjULb4P5psJyFMK46pBY97UgtNA58sxfTgKYR/5Bm/m24vNDjdyJmXDXntZPp491qif3UzWOQdB9SWFauknOsQ2O3KeZfjP3fB5JHq2aZjHgbpGI0idYTJzNnlYkT/Mm5pD/Olj9rc2EmbTkZxoV46jxc8VftcsF++u+6AmgomgW7CjMxCjMu1gaIcYX/OAYv8yBTnl3ZwC1c/3c1NwQtH6V8NT5vJJYhTi+eQFy2apY5SfD5omwnZhamfd5mr/lA6A5w== X-Forefront-Antispam-Report: CIP:198.47.23.195;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:lewvzet201.ext.ti.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(82310400026)(376014)(36860700013)(1800799024);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: U028+4qQThufy9l6brMoxAbHUPa9NY/cD7c37AzkIzWYLjmewwuOdPi6Po0W1CZBsR21FgF0sMvArbGpM1jxFXgmfyJTNLaNOXwuCeoTUyEXHu24Kf12Dipy89Vp7vS+xLV/JnmxES1Ybn9Oz4pXEUm8EaLRjzuhe946Ew2iP1+h1OZP4/WLa30tJ6bv2r35NOAVJV0BflB2wUBLrZR/zT7yCvtB18ZeUGJUqSnDzdGCdZXogEehx3Z0FF6mlO6xYXFrZaKf8ibPyDDVirSUtck0dqEHvmFiEgdf2qhzdnUUAx2HZ1rxZR3Fh2KNUA+kfRbwDZ7kaqAEKZTTDfoa6RNihcgDWgcZD3LEgr2wX3lYb8z+yyf76zV8iTaz/JMWRr32AN6D8/cx3Rn4f5s3zD1fIW5/MCDbXeZ4xl4m2gvjRHyc5t5L2U1AuqudFuLW X-OriginatorOrg: ti.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Feb 2026 19:52:00.8327 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 69e52128-d113-42b1-0a2f-08de629487fc X-MS-Exchange-CrossTenant-Id: e5b49634-450b-4709-8abb-1e2b19b982b7 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e5b49634-450b-4709-8abb-1e2b19b982b7;Ip=[198.47.23.195];Helo=[lewvzet201.ext.ti.com] X-MS-Exchange-CrossTenant-AuthSource: DS3PEPF000099DB.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH0PR10MB4922 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 02 Feb 2026 19:52:11 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/meta-ti/message/19455 Provide framework for how to sign the uboot files with different keys so that customers can see how it is done. We have provided an ECDSA key and follow on patches will show how to point to it. Signed-off-by: Ryan Eatmon --- meta-ti-bsp/recipes-bsp/u-boot/files/custMpk_ecdsa.key | 6 ++++++ meta-ti-bsp/recipes-bsp/u-boot/u-boot-ti.inc | 2 ++ 2 files changed, 8 insertions(+) create mode 100644 meta-ti-bsp/recipes-bsp/u-boot/files/custMpk_ecdsa.key diff --git a/meta-ti-bsp/recipes-bsp/u-boot/files/custMpk_ecdsa.key b/meta-ti-bsp/recipes-bsp/u-boot/files/custMpk_ecdsa.key new file mode 100644 index 00000000..83dffcda --- /dev/null +++ b/meta-ti-bsp/recipes-bsp/u-boot/files/custMpk_ecdsa.key @@ -0,0 +1,6 @@ +-----BEGIN EC PRIVATE KEY----- +MIGkAgEBBDBDO9fzBU2LoKaYgji4m3ZCHKUBF9CTVnU6ClfNPJsTo0SKZpCsmyr0 +TKUNkk16vwGgBwYFK4EEACKhZANiAATCv6ftwnJW91fP5wpLpLAxt3u732oNnKr8 +pLbZUzi/s8/e7QiISJ8QKYGaWMnjORW82cM3UJKlCw8GOrb3ZrEXYWRKxkPWql0+ +BOhDQA5b21GtL9HQPvuCPz471ZaxGYA= +-----END EC PRIVATE KEY----- diff --git a/meta-ti-bsp/recipes-bsp/u-boot/u-boot-ti.inc b/meta-ti-bsp/recipes-bsp/u-boot/u-boot-ti.inc index 773fa1e2..678f3bcf 100644 --- a/meta-ti-bsp/recipes-bsp/u-boot/u-boot-ti.inc +++ b/meta-ti-bsp/recipes-bsp/u-boot/u-boot-ti.inc @@ -416,3 +416,5 @@ PACKAGES:prepend:am62pxx-evm = "${FALCON_PKG} " PACKAGES:prepend:am62xx-lp-evm = "${FALCON_PKG} " TOOLCHAIN = "gcc" + +TI_SIGN_WITH_ECDSA_KEY ?= "KEY_PATH=${THISDIR}/files/custMpk_ecdsa.key" From patchwork Mon Feb 2 19:51:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ryan Eatmon X-Patchwork-Id: 80278 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5CBF6E7FDCB for ; Mon, 2 Feb 2026 19:52:11 +0000 (UTC) Received: from CY3PR05CU001.outbound.protection.outlook.com (CY3PR05CU001.outbound.protection.outlook.com [40.93.201.23]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.62055.1770061925692440802 for ; Mon, 02 Feb 2026 11:52:05 -0800 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ti.com header.s=selector1 header.b=uKlRaHrJ; spf=permerror, err=parse error for token &{10 18 spf.protection.outlook.com}: limit exceeded (domain: ti.com, ip: 40.93.201.23, mailfrom: reatmon@ti.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=BbsWm2pQ3n/5bTnCnqebIeLTX0ALIMm9rKs1KzCY/Q+oYFXorQ5wrFmZWuJsDExotYpxhh5BJgZp4a2UAuAngxCtESZpn1RQGjx0QIvXaSbwH7whA3BrcLLnAF2AATGOybTocUllvZtY98Oi8ibqZCTk2+IZ9NFDYM+aBiD6Y6ZLZhuDMBE9mefGhhaeWm6dS6KXD7YHzMUm/88+OMeRFxFU4r2nsFWWvj+Q8iXyD5oQxGep5PVDErsv7MYdXAgBQPaSi0asnJ6ToR5kMhkwgB+a9Kj/R8uI+b5cZQyL2zQUmCrGsKXnwkF5zdKiwDrZqO9ZHRV+kkHJB+pTyzT91Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=jjXzZJnNWDD6YNOLOdvw+lG05eXmtIzBDyzWnR8xS68=; b=RWq2fwzCFFsJDASIdAxXdTcRpeV/XJy1efCSYDbP6KqCUSyEoyteWS7n/vexfQ9T4kgByly6XWN4NGUWZ4OrT7hJUNuWIEgboPKG4GifONgjtdm4f+57RCunQThdteEP/I3+L6XhtuK/FMQCf/GyA4Jk8p6geW32RUbhfBv0hsZVoFFOWgA81PYoLKXldcg/H3ME19QnS98YVO1biPyDYqIJZqSTLW+SmMLsJ904wr+NTUIPs6TEtpDYC/q+IhsOd5R8N2y9fT41iNB50NxAm7oic+RNlDfWI1YCNhUuXW0vU7/slruIXk5rdlsoskQ3qmOn1qmWLrc2YZPEN2td4g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 198.47.21.194) smtp.rcpttodomain=lists.yoctoproject.org smtp.mailfrom=ti.com; dmarc=pass (p=quarantine sp=none pct=100) action=none header.from=ti.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ti.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jjXzZJnNWDD6YNOLOdvw+lG05eXmtIzBDyzWnR8xS68=; b=uKlRaHrJVwKOARxXLjGGyUYZUzIDX8pKtWq2S5Rnb7GOVamTwYTCaWOVyxUM1OHssZJ8XPRTvqtasokZTpX8ueOFNdzRsvZNzF06LWZcsUpDs7CImSS9pZHOKyLkwT3Bbw2ScBkm/delQuOAjje9lIba+hz0d7Bhvte8lyEz9eY= Received: from SA1P222CA0118.NAMP222.PROD.OUTLOOK.COM (2603:10b6:806:3c5::6) by SJ0PR10MB4767.namprd10.prod.outlook.com (2603:10b6:a03:2d1::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9564.16; Mon, 2 Feb 2026 19:52:01 +0000 Received: from SN1PEPF0002636E.namprd02.prod.outlook.com (2603:10b6:806:3c5:cafe::86) by SA1P222CA0118.outlook.office365.com (2603:10b6:806:3c5::6) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9564.16 via Frontend Transport; Mon, 2 Feb 2026 19:52:02 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 198.47.21.194) smtp.mailfrom=ti.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ti.com; Received-SPF: Pass (protection.outlook.com: domain of ti.com designates 198.47.21.194 as permitted sender) receiver=protection.outlook.com; client-ip=198.47.21.194; helo=flwvzet200.ext.ti.com; pr=C Received: from flwvzet200.ext.ti.com (198.47.21.194) by SN1PEPF0002636E.mail.protection.outlook.com (10.167.241.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.10 via Frontend Transport; Mon, 2 Feb 2026 19:52:00 +0000 Received: from DFLE212.ent.ti.com (10.64.6.70) by flwvzet200.ext.ti.com (10.248.192.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20; Mon, 2 Feb 2026 13:51:59 -0600 Received: from DFLE213.ent.ti.com (10.64.6.71) by DFLE212.ent.ti.com (10.64.6.70) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20; Mon, 2 Feb 2026 13:51:59 -0600 Received: from lelvem-mr05.itg.ti.com (10.180.75.9) by DFLE213.ent.ti.com (10.64.6.71) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20 via Frontend Transport; Mon, 2 Feb 2026 13:51:59 -0600 Received: from grumpy (grumpy.dhcp.ti.com [128.247.81.229]) by lelvem-mr05.itg.ti.com (8.18.1/8.18.1) with ESMTP id 612Jpx912711105; Mon, 2 Feb 2026 13:51:59 -0600 Received: from reatmon by grumpy with local (Exim 4.97) (envelope-from ) id 1vmzxn-000000081Yo-08Ix; Mon, 02 Feb 2026 13:51:59 -0600 From: Ryan Eatmon To: Praneeth Bajjuri , Denys Dmytriyenko , Subject: [meta-ti][master][PATCH 2/2] conf: am62p: Add ECDSA key signing Date: Mon, 2 Feb 2026 13:51:58 -0600 Message-ID: <20260202195158.1912610-2-reatmon@ti.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260202195158.1912610-1-reatmon@ti.com> References: <20260202195158.1912610-1-reatmon@ti.com> MIME-Version: 1.0 X-C2ProcessedOrg: 333ef613-75bf-4e12-a4b1-8e3623f5dcea X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SN1PEPF0002636E:EE_|SJ0PR10MB4767:EE_ X-MS-Office365-Filtering-Correlation-Id: 6a134248-953d-4347-08c2-08de62948799 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|36860700013|376014|82310400026|1800799024; X-Microsoft-Antispam-Message-Info: xT84J9fMTAYkI85JNSH4ObBXcGhYK6spzi+aQ7ndRyuKN/FGySJRURDYNj14QENtykP8113G0xMGWD1TVbY5M3c/YfoR1xFP+/ghW39xS+mniwDl/waBleMHeYMpNna089v0f9E2leXc69sChUdFoGE7hugO97javxYHqqrEl8AxKnqFumDKysYNcCLJ9ApnRoQhlOPEO7Lx7BmxddC/QCzs9qR0kZS3SyYYr1aHB5+0rg3wxvcM4tUWGKiFYj0d8QhqELy34vNs45K2UQ/LmuIwVaxuFNAkzO36F9ujV3HNyzc+rdixSbaAOZUTAnQwIjcHMbcdSQ9ieBn2qZC5PYBxyQAvQA/i+LZI4yQBZ+x4HesiRtBUiIy+Glr5p5g0x/1Kja8aNEYUstGIebgJsZPiAbtAmUIQKO1X/3sek6RtVlPgEnJAngP4eL8Djn5X7Ngithbym4dvINdtQEd7eWDi+LXtVyiAGRAPyQAM6sgF6sWeQPAq1yQv47lZdxtq3O0Cw1H+RFxtcPGNdTbeg8XUGDk0lXOgy6rmL6EIJ6biIqPIUSsf+NUild1eJHE2QHxRecSpBBH74WiNNsyBWx4ravPpqs0Jyvs6VB9eVNPsfC7+7lXV5JHD4LxWTDIHmjOtX03QJz/aBznWYfwL73CBQUIzkA7UVlog9xzsabtGShDDPKDjIbmBiiM3vbBWlodluEa+TPtyL/xsH3IGCBYcenhtegfYn879NpXMY6u1vFtrthyiISAjbRQbmM21qKezCbrZZl0ZluyeA7n4D7LhkTfVWkaKe2IFYDshhjNA8phqNi6VnC75Tu/OpNcjxs2QnyEeV/TNnXZuWCc1yXgLnveGPIG0LyD8Hs65ZagM4w5VRHA6HP6znBU/VsaalWb8gb9ByHegpEEUblAe9OO0NKcKEhggu3eb7YloNbTeG1L/eEDdrXDkhtZbs7HbiuxiElYHqtIg6juFm7ZgeZQDLYtD4L+rN1KGczz2ThVn0SFJpy8giBnaq+xkpi++h5T4hF9rbSPY2OvG5UERdbN1oZgAaMdrKckP1eBM5f+3p4K5sDSJ4mYYcT9WrjorYs9ZMnVi93YkvaE3UbSPgRrzpA499waXfMGlg5aJUb8a6ptmZZL7/q6tc2KBlVcjRFw3i9y4mxMUsfaq3xMODlscXSFbvDsakhZAfaah2fdjVzlhxhf7qGzWHlARgvxfiDPCvDNdLxrnKrd/7mOGKFzIREZ7UIQLhQsmdoRQC3nhDKKbtH+2fesIXzmO56kR7Ws33lKYxLtC0sr53dE/wnzde/ak1R3+PbzytfmemagAR+1CvarF8jrnp5boEZ3jbmHTP5VRAoWGBrybxDXuoCG9MJ09UOrawXRH5PxRGttkr7MkEocYIbncp+B2+shc/A6R5+ESrqAJdb6UUC8rGUNvTilu5qaYU3Gia9Spv/yuDrw6KwotGw79xFD6pxXjHiOCjf440EJD0ront3LIpr6PxQMjYHQYOWPEXPU8W7yZ3fw7Dl8UjhgnoCMJXpWQTRv+TyzfCmzK7T+V+kMyZyHDxnzhGSJh/xlqCT74SQ6VikiQ2DpueNQXXnoUhldJwa1EZaRklc6k/WzBt2t1rK+95of8No49BPW/UEyPoVOVSrjj/zXl+8AmsuPLyDpA/rjftDtVIJxyhyS2dup9DA== X-Forefront-Antispam-Report: CIP:198.47.21.194;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:flwvzet200.ext.ti.com;PTR:ErrorRetry;CAT:NONE;SFS:(13230040)(36860700013)(376014)(82310400026)(1800799024);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: vk8fhFxP6Cw3TZHQvLgHggiqWiHCxPARyrXWUdw7KBIGjQ2opT0uTdoeWoo6SlLWnCAks3oO7LbqOH4xBwmckyR+TbXGxpF3jsaD9H+RlgOeglSGg0lp39qsgQQgnMzS1H2ciKpsLjfwIawKgs6qovzA2yyJRS1/PZQdJEob0WDdHqw4t0XVuzM/NVdyy6OnzaXYXUmpZEysWr3G0xjFtpeg8PSC5UdhRPvgBfWqZAXIYzHFjWAFdZYlIgS1mG/PPEvNJGTFXrTf11DRF+R9tTJDi97N8rfYGnYMRgfKOqZZvJkI+kiJ7WXUxsbUKvDgz6OEB9AJ7cXlZ4BTiOCO3j5LmoEnuP2CbYtpeFTLflF+wOMC2uS6LPo2JpjZ7mkzfZd0ymho3e5iAWRZfAlR/McFeD6bQrwsfpUNw4gYp7yxirY9IkP8gr5d7NVUNJYH X-OriginatorOrg: ti.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Feb 2026 19:52:00.2056 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 6a134248-953d-4347-08c2-08de62948799 X-MS-Exchange-CrossTenant-Id: e5b49634-450b-4709-8abb-1e2b19b982b7 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e5b49634-450b-4709-8abb-1e2b19b982b7;Ip=[198.47.21.194];Helo=[flwvzet200.ext.ti.com] X-MS-Exchange-CrossTenant-AuthSource: SN1PEPF0002636E.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR10MB4767 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 02 Feb 2026 19:52:11 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/meta-ti/message/19456 Use the new framework to add alternative key signing for the am62p platform as an example. Signed-off-by: Ryan Eatmon --- .../conf/machine/am62pxx-evm-k3r5.conf | 15 +++++++++++---- meta-ti-bsp/conf/machine/am62pxx-evm.conf | 19 ++++++++++++++++++- 2 files changed, 29 insertions(+), 5 deletions(-) diff --git a/meta-ti-bsp/conf/machine/am62pxx-evm-k3r5.conf b/meta-ti-bsp/conf/machine/am62pxx-evm-k3r5.conf index bf82849a..292b658b 100644 --- a/meta-ti-bsp/conf/machine/am62pxx-evm-k3r5.conf +++ b/meta-ti-bsp/conf/machine/am62pxx-evm-k3r5.conf @@ -4,15 +4,22 @@ require conf/machine/include/k3r5.inc -UBOOT_MACHINE = "am62px_evm_r5_defconfig" -UBOOT_MACHINE:tie-test-builds = "" +UBOOT_MACHINE = "" -UBOOT_CONFIG = "" -UBOOT_CONFIG:tie-test-builds = "usbdfu main" +UBOOT_ECDSA_SIGN_CONFIG ?= "ecdsa" +UBOOT_ECDSA_SIGN_CONFIG:bsp-ti-6_6 = "" +UBOOT_ECDSA_SIGN_CONFIG:bsp-next = "" +UBOOT_ECDSA_SIGN_CONFIG:bsp-mainline = "" + +UBOOT_CONFIG = "${UBOOT_ECDSA_SIGN_CONFIG} main" +UBOOT_CONFIG:prepend:tie-test-builds = "usbdfu " UBOOT_CONFIG[main] = "am62px_evm_r5_defconfig" +UBOOT_CONFIG[ecdsa] = "am62px_evm_r5_defconfig" UBOOT_CONFIG[usbdfu] = "am62px_evm_r5_defconfig" +UBOOT_CONFIG_MAKE_OPTS[ecdsa] = "${TI_SIGN_WITH_ECDSA_KEY}" + UBOOT_CONFIG_FRAGMENTS[usbdfu] = "am62x_r5_usbdfu.config" UBOOT_FRAGMENTS:ti-falcon = "k3_r5_falcon.config" diff --git a/meta-ti-bsp/conf/machine/am62pxx-evm.conf b/meta-ti-bsp/conf/machine/am62pxx-evm.conf index 4bebe510..bc056e6b 100644 --- a/meta-ti-bsp/conf/machine/am62pxx-evm.conf +++ b/meta-ti-bsp/conf/machine/am62pxx-evm.conf @@ -23,7 +23,24 @@ KERNEL_DEVICETREE = " \ FIT_CONF_DEFAULT_DTB = "k3-am62p5-sk.dtb" -UBOOT_MACHINE = "am62px_evm_a53_defconfig" +UBOOT_ECDSA_SIGN_CONFIG ?= "ecdsa" +UBOOT_ECDSA_SIGN_CONFIG:bsp-ti-6_6 = "" +UBOOT_ECDSA_SIGN_CONFIG:bsp-next = "" +UBOOT_ECDSA_SIGN_CONFIG:bsp-mainline = "" + +ECDSA_BOOT_FILES ?= "tiboot3.bin-ecdsa tiboot3-*-evm.bin-ecdsa tispl.bin-ecdsa u-boot.img-ecdsa" +ECDSA_BOOT_FILES:bsp-ti-6_6 = "" +ECDSA_BOOT_FILES:bsp-next = "" +ECDSA_BOOT_FILES:bsp-mainline = "" + +UBOOT_MACHINE = "" +UBOOT_CONFIG = "${UBOOT_ECDSA_SIGN_CONFIG} main" +UBOOT_CONFIG[main] = "am62px_evm_a53_defconfig" +UBOOT_CONFIG[ecdsa] = "am62px_evm_a53_defconfig" + +UBOOT_CONFIG_MAKE_OPTS[ecdsa] = "${TI_SIGN_WITH_ECDSA_KEY}" + +IMAGE_BOOT_FILES += "${ECDSA_BOOT_FILES}" # UBOOT_FRAGMENTS holds the list of u-boot config fragments which has to be build # along with the base defconfig mentioned in UBOOT_MACHINE. Refer u-boot-mergeconfig.inc