mirrors/pico-hsm
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-hsm.git synced 2026-01-17 01:18:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add support for lock chip on secure_boot.

Browse source 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
This commit is contained in:
Pol Henarejos 2024-10-28 00:19:55 +01:00
parent 9fa3758dad
commit 0ce89ae968
No known key found for this signature in database
GPG key ID: C0095B7870A4CCD3
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
tools/pico-hsm-tool.py
View file

@ -143,6 +143,7 @@ def parse_args():
parser_otp.add_argument('subcommand', choices=['read', 'write', 'secure_boot'], help='Read, write or enable Secure Boot', nargs='?') parser_otp.add_argument('subcommand', choices=['read', 'write', 'secure_boot'], help='Read, write or enable Secure Boot', nargs='?')
parser_otp.add_argument('--row', help='OTP row (in HEX)', required='write' in sys.argv or 'read' in sys.argv) parser_otp.add_argument('--row', help='OTP row (in HEX)', required='write' in sys.argv or 'read' in sys.argv)
parser_otp.add_argument('-d', '--data', help='Data to write (in HEX) [e.g. 0011223344556677889900AABBCCDDEEFF]', required='write' in sys.argv) parser_otp.add_argument('-d', '--data', help='Data to write (in HEX) [e.g. 0011223344556677889900AABBCCDDEEFF]', required='write' in sys.argv)
parser_otp.add_argument('--lock', help='Lock & protect (no other firmwares can be loaded)', action='store_true')
args = parser.parse_args() args = parser.parse_args()
return args return args
@ -498,7 +499,7 @@ def otp(picohsm, args):
elif (args.subcommand == 'secure_boot'): elif (args.subcommand == 'secure_boot'):
script_path = os.path.dirname(os.path.abspath(__file__)) script_path = os.path.dirname(os.path.abspath(__file__))
boot_json = json.load(open(f'{script_path}/../pico-keys-sdk/config/rp2350/secure_boot.json')) boot_json = json.load(open(f'{script_path}/../pico-keys-sdk/config/rp2350/secure_boot.json'))
picohsm.secure_boot(boot_json['bootkey0']) picohsm.secure_boot(boot_json['bootkey0'], lock=args.lock)
def main(args): def main(args):
sys.stderr.buffer.write(b'Pico HSM Tool v1.18\n') sys.stderr.buffer.write(b'Pico HSM Tool v1.18\n')