s3c6410 irom 源代码分析

抽空分析了一下IROM booting的细节。用注释的形式加在源代码里面了,大家将就着看。S3C6410的IROM支持从SD/MMC, NAND, OneNAND多种设备启动。同时支持secure boot模式。用来为设备提供更好的安全性。

 

几个心得:

 

1. how the efuse genrate random key

   when the irom verify BL1, it will read the random key from address 0x7e00d000.

   I guess the random key is genrated by A/D on XEFFVDD pin. 

 

2. how to enable/disable secure booting.

    secure booting mode base on the random key on address 0x7e00d000.

    Ground XEFFVDD will disable the random key genrator. the data read from 0x7e00d000 is zero.

    Keep the XEFFVD open, or give XEFFVDD a random votage will enable the secure booting mode.

 

3. sd boot

    the irom will copy 8K+512Bytes from sd card to 0x0c000000-0x0c002200.

    the extra 512bytes data contain the signature for secure booting. there are two keys in the signatur.

    key1 at 0x0c002104,

    key2 at 0x0c002188,

 


    the matching algorithm in irom is:

    key = foo(key1);

    if( key == key2)

    {

        jump_to_BL1;

    }

 

 

Suggestion:

1. Be careful to use secure booting mode, because Samsung didn't open the detials.

 

源代码在这里: <转载请注明出处>
//
//  s3c6410 IROM source code.
//  dumping from s3c6410.
//  disassemble and comment by: Yujiang Zheng <yujiangzheng@gmail.com>
//

 

  • 1
    点赞
  • 3
    收藏
    觉得还不错? 一键收藏
  • 3
    评论
评论 3
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值