From bb31562e9e452b3a927579a5330f55cf36906bef Mon Sep 17 00:00:00 2001 From: Karthikeyan Ramasubramanian Date: Thu, 25 Aug 2022 15:53:27 -0600 Subject: [PATCH] soc/amd/common: Add a config to keep signed AMD/PSP FW separately Enabling this config will put signed amd firmwares into SIGNED_AMDFW_[AB] region which is outside FW_MAIN_[AB]. Vboot only verifies FW_MAIN_[AB] so these regions will not be verified by vboot, instead the PSP will verify them. As a result we have less to load and verify from SPI rom which means faster boot time. BUG=b:206909680 TEST=Build Skyrim with modified fmap and Kconfig. Change-Id: If4fd3cff11a38d82afb8c5ce379f1d1b5b9adfbf Signed-off-by: Kangheui Won Signed-off-by: Karthikeyan Ramasubramanian Reviewed-on: https://review.coreboot.org/c/coreboot/+/59867 Reviewed-by: Jon Murphy Tested-by: build bot (Jenkins) --- src/soc/amd/common/psp_verstage/Kconfig | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/soc/amd/common/psp_verstage/Kconfig b/src/soc/amd/common/psp_verstage/Kconfig index 13dd71659c..526a4ae722 100644 --- a/src/soc/amd/common/psp_verstage/Kconfig +++ b/src/soc/amd/common/psp_verstage/Kconfig @@ -29,3 +29,9 @@ config PSP_SUPPORTS_EFS2_RELATIVE_ADDR On SoCs where PSP uses A/B recovery layout, PSP support relative addressing from the start of the SPI ROM. Enable this config on SoCs where PSP supports relative addressing so that PSP verstage can pass the offset. + +config SEPARATE_SIGNED_PSPFW + def_bool n + help + Put signed AMD/PSP firmwares outside FW_MAIN_[AB] so vboot doesn't verify them, + and rely on PSP's verification.