1# Trusted boot image extension definitions
2
3kak_key_file = "tools/doimage/secure/kak_priv_pem.key";
4
5# CSK keys array - 16 entries total.
6# Only a key with csk_key_index will be used for signing the image
7# use "*" string instead of file name for specifying an empty key
8csk_key_file = ["tools/doimage/secure/csk_priv_pem0.key",
9                "tools/doimage/secure/csk_priv_pem1.key",
10                "tools/doimage/secure/csk_priv_pem2.key",
11                "tools/doimage/secure/csk_priv_pem3.key",
12                "*", "*", "*", "*", "*", "*", "*", "*", "*", "*", "*", "*"];
13
14# index of CSK key in the array. Valid range is 0 to 15
15csk_key_index = 3;
16
17# AES-256 symmetric key for image encryption
18aes_key_file = "tools/doimage/secure/aes_key.txt";
19
20efuse_disable = false;
21jtag = { enable = true; delay = 20; };
22
23box_id = 0xdeadbeef;
24flash_id = 0xbaddf00d;
25
26# SecureBootControl and EfuseBurnControl registers array
27# Two register addresses for each connected CP
28# A8K - two CP, four register values
29control = [0xF2441920, 0xF2441940, 0xF4441920, 0xF4441940];
30