diff options
author | Alexandre Courbot <acourbot@nvidia.com> | 2016-01-13 17:12:49 +0900 |
---|---|---|
committer | Alexandre Courbot <acourbot@nvidia.com> | 2016-01-18 18:19:13 +0900 |
commit | 32ac72a199cb1339f7f7a6f6a4ce78e378850b2a (patch) | |
tree | d8b222aae7937ff252af1f430c03518676841913 /drm/nouveau/nvkm/subdev/secboot/Kbuild | |
parent | 7984cff8a9972f5e4e647cb564ef1188c07c9677 (diff) | |
download | nouveau-32ac72a199cb1339f7f7a6f6a4ce78e378850b2a.tar.gz |
core: add support for secure boot
On GM20x and later GPUs, firmware for some essential falcons (notably
FECS) must be authenticated by a NVIDIA-produced signature and loaded
by a high-secure falcon in order to access certain registers, in a
process known as Secure Boot.
Secure Boot requires the building of a binary blob containing the
firmwares and signatures of the falcons to be loaded. This blob is then
given to a high-secure falcon running a signed loader firmware that
copies the blob into a write-protected region, checks that the
signatures are valid, and finally loads the verified firmware into the
managed falcons and switches them to a priviledged mode.
This patch adds infrastructure code to support this process on chips
that require it.
Signed-off-by: Alexandre Courbot <acourbot@nvidia.com>
Diffstat (limited to 'drm/nouveau/nvkm/subdev/secboot/Kbuild')
-rw-r--r-- | drm/nouveau/nvkm/subdev/secboot/Kbuild | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drm/nouveau/nvkm/subdev/secboot/Kbuild b/drm/nouveau/nvkm/subdev/secboot/Kbuild new file mode 100644 index 000000000..e757096b2 --- /dev/null +++ b/drm/nouveau/nvkm/subdev/secboot/Kbuild @@ -0,0 +1 @@ +nvkm-y += nvkm/subdev/secboot/base.o |