diff options
| author | Daisuke Nojiri <dnojiri@chromium.org> | 2019-10-21 10:07:48 -0700 |
|---|---|---|
| committer | Commit Bot <commit-bot@chromium.org> | 2020-02-09 08:31:43 +0000 |
| commit | 37151225f4d791204a75173eec64ebfdaf2cbdec (patch) | |
| tree | a9680e1fd0897c1ea6e0461055760c42944fdee7 /common/system.c | |
| parent | a4f7c8ef7c0b9b3206f67299414c2cbd2a5fe84a (diff) | |
| download | chrome-ec-37151225f4d791204a75173eec64ebfdaf2cbdec.tar.gz | |
EFS2: Implement Early Firmware Selection ver.2
EFS v1 allowed Chromeboxes to verify RW without AP. EFS v2 will bring
the benefts to Chromebooks, which are:
- Reduce RO dependency and presence. Allow more code to be updated
in the fields.
- Remove jumptag and workarounds needed for late sysjump.
Major imporvements over v1 are:
- No A/B slot required.
- No signature in RW or public key in RO.
- Rollback-attack protection.
- Verifies only RW being used instead of whole RW section.
For battery-equipped devices, additional benefts are:
- Immediate boot on drained battery.
- Support recovery mode regardless of battery condition.
- Faster charge in S5/G3.
EC-Cr50 communication is based on the shared UART (go/ec-cr50-comm).
EFS2 is documented in go/ec-efs2.
Signed-off-by: Daisuke Nojiri <dnojiri@chromium.org>
BUG=chromium:1045217,chromium:141143112
BRANCH=none
TEST=Boot Helios in NORMAL/NO_BOOT/NO_BOOT_RECOVERY/RECOVERY mode.
TEST=Wake up EC from hibernate.
TEST=Make EC assert PACKET_MODE to wake up Cr50 from deepsleep.
Change-Id: I98a4fe1ecc59d106810a75daec3c424f953ff880
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/2015357
Reviewed-by: Daisuke Nojiri <dnojiri@chromium.org>
Commit-Queue: Daisuke Nojiri <dnojiri@chromium.org>
Tested-by: Daisuke Nojiri <dnojiri@chromium.org>
Auto-Submit: Daisuke Nojiri <dnojiri@chromium.org>
Diffstat (limited to 'common/system.c')
| -rw-r--r-- | common/system.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/common/system.c b/common/system.c index 61ef4882fc..5d07bfcf90 100644 --- a/common/system.c +++ b/common/system.c @@ -612,7 +612,7 @@ enum system_image_copy_t system_get_active_copy(void) enum system_image_copy_t system_get_update_copy(void) { -#ifdef CONFIG_VBOOT_EFS +#ifdef CONFIG_VBOOT_EFS /* Not needed for EFS2, which is single-slot. */ return system_get_active_copy() == SYSTEM_IMAGE_RW_A ? SYSTEM_IMAGE_RW_B : SYSTEM_IMAGE_RW_A; #else |