Bootloader: Difference between revisions

*Finally* added spiflash info.
Line 7: Line 7:


== Non-NAND FIRM boot ==
== Non-NAND FIRM boot ==
Boot9 can also boot from non-NAND. For this a different set of RSA pubks are used(separate pubks for retail/devunit like NAND). The spiflash FIRM image for this is also encrypted with AES-CTR using a normalkey stored in prot_boot9(separate for retail/devunit). This encryption is basically used instead of what is used for NAND-firm-partitions.
Boot9 can also boot from non-NAND. For this a different set of RSA pubks are used(separate pubks for retail/devunit like NAND). The spiflash FIRM image for this is also encrypted with AES-CTR using a normalkey stored in prot_boot9(separate for retail/devunit). This encryption is basically used instead of what is used for NAND-firm-partitions. The AES keyslot for this is only overwritten afterwards when booting from non-NAND fails.


   CTR_word[0] = firmimageoffset;
   CTR_word[0] = firmimageoffset;