AR# 69149

2016.4 Zynq UltraScale+ MPSoC: FSBL fails to decrypt bitstream if the image is place in QSPI at a multiple of 32K offset

Description

Using a ZCU102 rev1.0 (ES2) board I am booting the following AES + RSA image from a QSPI offset of 64K (or any other multiple of 32K).

//arch = zynqmp; split = false; format = BIN
the_ROM_image:
{
 [pskfile]psk.pem
 [sskfile]ssk.pem
 [auth_params]ppk_select = 0
 [aeskeyfile]mykey.nky
 [keysrc_encryption]efuse_red_key
 [fsbl_config]a53_x64, bh_auth_enable
 [encryption = aes, authentication = rsa, pmufw_image]pmufw.elf
 [bootloader, encryption = aes, authentication = rsa]fsbl.elf
 [encryption = aes, authentication = rsa, destination_device = pl]design_1_wrapper.bit
 [encryption = aes, authentication = rsa, destination_cpu = a53-0, exception_level = el-3, trustzone]bl31.elf
 [encryption = aes, authentication = rsa, destination_cpu = a53-0, exception_level = el-2]u-boot.elf
}

The image boots correctly but the FSBL fails to decrypt the Bitstream with the following errors.

XFSBL_ERROR_BITSTREAM_DECRYPTION_FAIL
Partition 1 Load Failed, 0x3A

Solution

This issue has been fixed in the 2017.1 FSBL.

AR# 69149
Date 07/26/2017
Status Active
Type General Article
Devices
Tools