<apritzel>
Hi, can I get some opinions on what people expect from "Secure boot" on Allwinner devices?
<apritzel>
Shall we aim at full support for this in the firmware and kernel?
<apritzel>
Or is this some toy project for some curious people, since it's borken anyway?
<gamiee>
apritzel: well, very good question. I actually would like to have Secure boot support in kernel, but since it's broken (and looks like really easy to bypass), I think it really doesn't makes sense to have it implemented
<apritzel>
(since the SID becomes inaccessible from Linux and U-Boot proper, we need to find replacements for nvmem to support THS/DVFS and the MAC generation, for instance)
<gamiee>
Like, if someone knows that SD card boot priority on AW SoCs is first, it's very huge chance that he will be able to use FEX to load custom bootloader (and bypass signing check) too, so basically, it's probably not worth of the time (by my opinion)
<gamiee>
Like, if someone knows that SD card boot priority on AW SoCs is first, it's very huge chance that he will be able to use FEL to load custom bootloader (and bypass signing check) too, so basically, it's probably not worth of the time (by my opinion)
<jernej>
apritzel: I would put big fat warning somewhere about downsides, so people know what to expect
<jernej>
I would not like that people would enable it just becase it says secure
<jernej>
and then people would start complaining about things that don't work
<jernej>
anyway, let's not make it default choice
<apritzel>
definitely not!
<apritzel>
it actually gets slightly more secure at runtime, because now the SPC works, and SRAM A2 is inaccessible from Linux, for instance
<jernej>
with SPC you mean SCP? ARISC?
<apritzel>
Secure Peripherals Controller
<jernej>
ah...
<apritzel>
the one that can switch devices to secure-only
<apritzel>
you can do this already, but it is not honoured by the system
<apritzel>
I have a half-way finished TF-A patch for the MAC problem, and some ideas for the nvmem SID issue, just wanted to know if it's worth working on that
<apritzel>
and there might be other issues lurking in the shadows
<jernej>
there is some interest from people to have secure boot, but from what I saw, they are not aware about level of security nor what that brings
<apritzel>
yeah, that's my worry, if that's the only reason to have it, it's not really worth it
<apritzel>
and apart from that (now quite oldish) Remix Mini I wouldn't be aware of any device shipped with the secure fuse burnt?
<jernej>
I'm not aware of any apart from Remix
<jernej>
not even Nintendo, right?
<apritzel>
the Nintendo seems indeed to be non-secure (there is a defconfig for it in U-Boot)