MTK Secure Boot V1.1原版完整文件.docxVIP

MT8163SecureBootFlowChart

GenerateRSApairs

GenerateRSA2048Pairs

rootkey2408.txt

Tips:

modulus=prime1*prime2

publicExponent*privateExponentmod(prime1-1)*(prime2-1)=1modulus+publicExponent(PublicKey)modulus+privateExponent(PrivateKey)

FormatRSA-NandRSA-D(2048)

RSA-N、RSA-D、RSA-Ewillbeformatedtodifferenttypesthatusedbythelk、preloadOEM_PUBKandDA，verfiedimageauthkey.

GenerateRSA1024pairs

imgkey1024.txt

FormatRSA-NandRSA-D(1024)

RSA1024willusedbyIMG_AUTH_KEY.ini

PreloaderKey

ReplacePreloaderoem_pubkWithRSA-N

Findthecust_sec_ctrl.handreplaceOem_pubkwithRSA-N(2048)

ReplaceLKOEM_KEY.h

ReplaceIMAGE_AUTH_KEY

RSA2048

vendor/mediatek/proprietary/custom/tb8163p3_bsp/security/image_auth/VERIFIED_BOOT_IMG_AUTH_KEY.ini

vendor/mediatek/proprietary/bootable/bootloader/preloader/custom/tb8163p3_bsp/security/image_auth/VERIFIED_BOOT_IMG_AUTH_KE

RSA1024

vendor/mediatek/proprietary/bootable/bootloader/preloader/custom/tb8163p3_bsp/security/image_auth/IMG_AUTH_KEY.inithisfileuseRSA1024

vendor/mediatek/proprietary/custom/tb8163p3_bsp/security/image_auth/IMG_AUTH_KEY.ini

PublicKeyforSBCkeyPairs

KeyforTEE.imgifenableTrustonicTEEfeature(nowweskipit)

KeyforDA

ChangeSignDA_SV5.ini

ChangeVERIFIED_BOOT_IMG_AUTH_KEY.ini

BuildDA

createsig2048.batandpackage2048.bat

RunSig2048.batandpackage2048.bat

TheDAbinwillbecreatedhere.

SecureBootEnableConfiguration

PreloaderConfiguration

LKConfiguration

KernelConfiguration:

BuildAndSignImage

makeprojector

SignImage

Signedimages:

Efuseconfiguration

MT8163.xml

BlowEfuse

SuccessInfo:

25USBportdetected:\\?\usb#vid_0e8dpid_2000#518d671f803#{a5dcbf10‐6530‐11d2‐901f‐00c04fb951ed}

BROMconnected

DownloadingConnectingtoDA...

connectDAendstage:2,enableDRAMin1stDA:0

COMportisopen.Tryingtosyncwiththetarget...

DownloadDAnow...

50%ofDAhasbeensent.

100%ofDAhasbeensent.

DAConnected

====================EfuseCommonSetting

=