[PATCH] nvmem: ocotp: add support to revoke keys

[Sascha Hauer]

Hi Denis,

On Fri, Mar 12, 2021 at 02:39:40PM +0000, Denis Osterland-Heim wrote:
> Hi,
> 
> It would be no problem to do it in a script.
> I did it as a fist prove of concept.
> My opinion is, that this hard coded implementation give stronger
> guarantee that this code is really executed.

You could also create a C function which you call from your board code.

> 
> I would love to implement the HAB to check FIT signatures,
> but with MMU enabled it will not work AFAIK and code requiring MMU disabled is not welcome.

Are you sure it doesn't work? What I know is that the jump table for the
HAB function is placed in the zero page which is set to faulting
normally when the MMU is enabled. If that's the only problem we could
solve that.

Sascha


-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |