From a16ad0fd2df24ad9ead922bad7fdb905012137fb Mon Sep 17 00:00:00 2001 From: Mike Engel Date: Thu, 26 Mar 2026 17:53:11 +0100 Subject: [PATCH] trustfence: generalize u-boot environment encryption configuration Signed-off-by: Mike Engel (cherry picked from commit cd9a79152866ed2fcc91a2316d6a4f9eb3e72266) (cherry picked from commit eb3d6e035542390f98bea5f22a704aeeea0197b7) --- meta-digi-dey/classes/trustfence.bbclass | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/meta-digi-dey/classes/trustfence.bbclass b/meta-digi-dey/classes/trustfence.bbclass index 37a33ce1e..f0ceb372d 100644 --- a/meta-digi-dey/classes/trustfence.bbclass +++ b/meta-digi-dey/classes/trustfence.bbclass @@ -266,10 +266,7 @@ python () { d.setVar("TRUSTFENCE_SIGN_ARTIFACTS", "0") if (d.getVar("TRUSTFENCE_ENCRYPT_ENVIRONMENT") == "1"): - if (d.getVar("DEY_SOC_VENDOR") == "NXP"): - d.appendVar("UBOOT_TF_CONF", "CONFIG_ENV_AES=y CONFIG_ENV_AES_CAAM_KEY=y CONFIG_ENV_ENCRYPT=y ") - elif (d.getVar("DEY_SOC_VENDOR") == "STM"): - d.appendVar("UBOOT_TF_CONF", "CONFIG_ENV_AES_CCMP1=y ") + d.appendVar("UBOOT_TF_CONF", "CONFIG_ENV_ENCRYPT=y ") # Provide sane default values for SWUPDATE class in case Trustfence is enabled if (d.getVar("TRUSTFENCE_SIGN") == "1"):