summaryrefslogtreecommitdiffstats
path: root/doc/device-tree/ibm,cvc.rst
blob: c53df2405481389b1d26e3aeec2d3c83b9a86e45 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
.. _device-tree/ibm,cvc:

ibm,cvc
=======

This describes the code (a.k.a container verification code) that skiboot uses
to verify signed firmware blobs. Each ibm,cvc child node describes CVC service,
which has a version and offset (reg).

Added in the device tree from ``ibm,secureboot-v2``.

Required properties
-------------------

.. code-block:: none

   compatible:      should be "ibm,container-verification-code"

   memory-region:   this points to the reserved memory where the
                    container-verification-code is stored.

Example
-------

.. code-block:: dts

	ibm,cvc {
		phandle = <0x10f>;
		#address-cells = <0x1>;
		#size-cells = <0x0>;
		compatible = "ibm,container-verification-code";
		memory-region = <0xaa>;

		ibm,cvc-service@40 {
			phandle = <0x110>;
			compatible = "ibm,cvc-sha512";
			reg = <0x40>;
			version = <0x1>;
		};

		ibm,cvc-service@50 {
			phandle = <0x111>;
			compatible = "ibm,cvc-verify";
			reg = <0x50>;
			version = <0x1>;
		};
	};
OpenPOWER on IntegriCloud