search

histb-mainline / l-loader

l-loader for hi3798-series SoCs(cv100 and mv100 are not supported)
GNU General Public License v2.0
0 stars 0 forks source link

Secure boot support? #3

Open 185264646 opened 1 year ago

185264646 commented 1 year ago

Secure Boot(CA) is enabled on some chips, there might be some methods to bypass it(eg. make l-loader as a payload for u-boot), should we support it in l-loader? Like make CA=1.

yangfl commented 1 year ago

Really? Can you confirm it with a POC?

185264646 commented 1 year ago

Really? Can you confirm it with a POC?

Sorry, Secure Boot is not enabled on mine, and i'm not going to enable it. I don't know much about CA.

185264646 commented 1 year ago

Really? Can you confirm it with a POC?

Sorry, Secure Boot is not enabled on mine, and i'm not going to enable it. I don't know much about CA.

yangfl commented 1 year ago

Though my device is hi3798mv100 which only supports armv7, AFAIK secure boot is signed against bl1 + fastboot(u-boot), so it would be useless to support CA-enabled devices.