From eb3d6e035542390f98bea5f22a704aeeea0197b7 Mon Sep 17 00:00:00 2001 From: Mike Engel Date: Thu, 26 Mar 2026 17:53:11 +0100 Subject: [PATCH] trustfence: generalize u-boot environment encryption configuration Signed-off-by: Mike Engel (cherry picked from commit cd9a79152866ed2fcc91a2316d6a4f9eb3e72266) --- meta-digi-dey/classes/trustfence.bbclass | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/meta-digi-dey/classes/trustfence.bbclass b/meta-digi-dey/classes/trustfence.bbclass index 69ec0c23c..2cdbbcc2b 100644 --- a/meta-digi-dey/classes/trustfence.bbclass +++ b/meta-digi-dey/classes/trustfence.bbclass @@ -279,10 +279,7 @@ python () { d.setVar("TRUSTFENCE_SIGN_ARTIFACTS", "0") if (d.getVar("TRUSTFENCE_ENCRYPT_ENVIRONMENT") == "1"): - if (d.getVar("DEY_SOC_VENDOR") == "NXP"): - d.appendVar("UBOOT_TF_CONF", "CONFIG_ENV_AES=y CONFIG_ENV_AES_CAAM_KEY=y CONFIG_ENV_ENCRYPT=y ") - elif (d.getVar("DEY_SOC_VENDOR") == "STM"): - d.appendVar("UBOOT_TF_CONF", "CONFIG_ENV_AES_CCMP1=y ") + d.appendVar("UBOOT_TF_CONF", "CONFIG_ENV_ENCRYPT=y ") # Provide sane default values for SWUPDATE class in case Trustfence is enabled if (d.getVar("TRUSTFENCE_SIGN") == "1"):