38 lines
968 B
Plaintext
38 lines
968 B
Plaintext
ARCH=sim
|
|
TARGET=sim
|
|
# note TPM requires ASN.1 encoding for RSA, so use RSA2048ENC, RSA3072ENC, RSA4096ENC
|
|
SIGN?=ECC256
|
|
HASH?=SHA256
|
|
SPI_FLASH=0
|
|
WOLFTPM=1
|
|
|
|
# enable offloading of asymmetric verify to TPM
|
|
WOLFBOOT_TPM_VERIFY?=1
|
|
|
|
# sizes should be multiple of system page size
|
|
WOLFBOOT_PARTITION_SIZE=0x180000
|
|
WOLFBOOT_SECTOR_SIZE=0x1000
|
|
WOLFBOOT_PARTITION_BOOT_ADDRESS=0x80000
|
|
# if on external flash, it should be multiple of system page size
|
|
WOLFBOOT_PARTITION_UPDATE_ADDRESS=0x280000
|
|
WOLFBOOT_PARTITION_SWAP_ADDRESS=0x400000
|
|
|
|
# Measured boot at test PCR index 16
|
|
MEASURED_BOOT?=1
|
|
MEASURED_PCR_A?=16
|
|
|
|
# Use NV for TPM based Root of Trust
|
|
WOLFBOOT_TPM_KEYSTORE?=1
|
|
WOLFBOOT_TPM_KEYSTORE_NV_BASE?=0x01400200
|
|
#WOLFBOOT_TPM_KEYSTORE_AUTH?=TestAuth
|
|
|
|
# Default image header size is larger to support room for policy
|
|
IMAGE_HEADER_SIZE?=512
|
|
|
|
# required for keytools
|
|
WOLFBOOT_FIXED_PARTITIONS=1
|
|
|
|
# TPM Logging
|
|
CFLAGS_EXTRA+=-DDEBUG_WOLFTPM
|
|
#CFLAGS_EXTRA+=-DWOLFTPM_DEBUG_VERBOSE
|