| Patrick Georgi | c49d7a3 | 2020-05-08 22:50:46 +0200 | [diff] [blame] | 1 | ## SPDX-License-Identifier: GPL-2.0-only |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 2 | |
| 3 | menu "Verified Boot (verified_boot)" |
| 4 | |
| 5 | config VENDORCODE_ELTAN_VBOOT |
| 6 | bool "Enable Verified Boot" |
| 7 | depends on !VBOOT |
| 8 | default n |
| Wim Vervoorn | 8210047 | 2020-01-27 15:47:44 +0100 | [diff] [blame] | 9 | select VBOOT_LIB |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 10 | |
| Frans Hendriks | c248382 | 2020-11-19 08:54:28 +0100 | [diff] [blame] | 11 | if VENDORCODE_ELTAN_VBOOT |
| 12 | |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 13 | config VENDORCODE_ELTAN_VBOOT_SIGNED_MANIFEST |
| 14 | bool "Enable Signed Manifest" |
| 15 | depends on VENDORCODE_ELTAN_VBOOT |
| 16 | default n |
| 17 | |
| 18 | config VENDORCODE_ELTAN_VBOOT_USE_SHA512 |
| 19 | bool "SHA512 hashes" |
| 20 | depends on VENDORCODE_ELTAN_VBOOT |
| 21 | default n |
| 22 | help |
| 23 | Use SHA512 for the vboot operations, this applies to the digest in |
| 24 | the manifest and the manifest digest. |
| 25 | |
| 26 | config VENDORCODE_ELTAN_OEM_MANIFEST_LOC |
| 27 | hex "Manifest Location" |
| 28 | default 0xFFFFF840 |
| 29 | |
| 30 | config VENDORCODE_ELTAN_VBOOT_MANIFEST |
| 31 | string "Verified boot manifest file" |
| Patrick Georgi | b8fba86 | 2020-06-17 21:06:53 +0200 | [diff] [blame] | 32 | default "mainboard/\$(MAINBOARD_DIR)/manifest.h" |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 33 | |
| 34 | config VENDORCODE_ELTAN_OEM_MANIFEST_ITEMS |
| 35 | int "Manifest Items" |
| Frans Hendriks | 0648267 | 2023-04-25 11:43:29 +0200 | [diff] [blame^] | 36 | default 13 if INCLUDE_CONFIG_FILE |
| Wim Vervoorn | 3e9061e | 2019-10-31 10:28:28 +0100 | [diff] [blame] | 37 | default 12 |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 38 | |
| 39 | config VENDORCODE_ELTAN_OEM_MANIFEST_ITEM_SIZE |
| 40 | int |
| 41 | default 64 if VENDORCODE_ELTAN_VBOOT_USE_SHA512 |
| 42 | default 32 |
| 43 | |
| 44 | config VENDORCODE_ELTAN_VBOOT_KEY_LOCATION |
| 45 | hex "Verified boot Key Location" |
| 46 | depends on VENDORCODE_ELTAN_VBOOT_SIGNED_MANIFEST |
| 47 | default 0xFFFFF500 |
| 48 | |
| Wim Vervoorn | ac4896f | 2019-10-30 15:55:21 +0100 | [diff] [blame] | 49 | config VENDORCODE_ELTAN_VBOOT_KEY_FILE |
| 50 | string "Verified boot Key File" |
| 51 | depends on VENDORCODE_ELTAN_VBOOT_SIGNED_MANIFEST |
| Wim Vervoorn | 8210047 | 2020-01-27 15:47:44 +0100 | [diff] [blame] | 52 | default "3rdparty/eltan/verified_boot/Keys/key.vbpubk" |
| Wim Vervoorn | ac4896f | 2019-10-30 15:55:21 +0100 | [diff] [blame] | 53 | |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 54 | config VENDORCODE_ELTAN_VBOOT_KEY_SIZE |
| 55 | int |
| Wim Vervoorn | 8210047 | 2020-01-27 15:47:44 +0100 | [diff] [blame] | 56 | default 552 |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 57 | |
| Frans Hendriks | c248382 | 2020-11-19 08:54:28 +0100 | [diff] [blame] | 58 | endif # VENDORCODE_ELTAN_VBOOT |
| Frans Hendriks | 72b3c3c | 2019-07-26 07:59:05 +0200 | [diff] [blame] | 59 | endmenu # Verified Boot (verified_boot) |