summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorKarthikeyan Ramasubramanian <kramasub@google.com>2022-08-25 15:53:27 -0600
committerMartin Roth <martin.roth@amd.corp-partner.google.com>2022-10-02 22:11:57 +0000
commitbb31562e9e452b3a927579a5330f55cf36906bef (patch)
treee7d33dd33b9a2520b49d0ba66da5da3b8fec8600 /src
parent3c164e13e7b3c1ba36686fb7a946f88971c1398d (diff)
soc/amd/common: Add a config to keep signed AMD/PSP FW separately
Enabling this config will put signed amd firmwares into SIGNED_AMDFW_[AB] region which is outside FW_MAIN_[AB]. Vboot only verifies FW_MAIN_[AB] so these regions will not be verified by vboot, instead the PSP will verify them. As a result we have less to load and verify from SPI rom which means faster boot time. BUG=b:206909680 TEST=Build Skyrim with modified fmap and Kconfig. Change-Id: If4fd3cff11a38d82afb8c5ce379f1d1b5b9adfbf Signed-off-by: Kangheui Won <khwon@chromium.org> Signed-off-by: Karthikeyan Ramasubramanian <kramasub@google.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/59867 Reviewed-by: Jon Murphy <jpmurphy@google.com> Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Diffstat (limited to 'src')
-rw-r--r--src/soc/amd/common/psp_verstage/Kconfig6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/soc/amd/common/psp_verstage/Kconfig b/src/soc/amd/common/psp_verstage/Kconfig
index 13dd71659c..526a4ae722 100644
--- a/src/soc/amd/common/psp_verstage/Kconfig
+++ b/src/soc/amd/common/psp_verstage/Kconfig
@@ -29,3 +29,9 @@ config PSP_SUPPORTS_EFS2_RELATIVE_ADDR
On SoCs where PSP uses A/B recovery layout, PSP support relative addressing
from the start of the SPI ROM. Enable this config on SoCs where PSP supports
relative addressing so that PSP verstage can pass the offset.
+
+config SEPARATE_SIGNED_PSPFW
+ def_bool n
+ help
+ Put signed AMD/PSP firmwares outside FW_MAIN_[AB] so vboot doesn't verify them,
+ and rely on PSP's verification.