User Guide - elftosb¶
This user’s guide describes how to use elftosb application.
elftosb¶
Tool for generating TrustZone, MasterBootImage and SecureBinary images.
elftosb [OPTIONS] [EXTERNAL]...
Options
-
-f,--chip-family<chip_family>¶ Select the chip family (default is lpc55s3x)
- Options
lpc55xx | lpc55s0x | lpc55s1x | lpc55s2x | lpc55s6x | lpc55s3x | rt5xx | rt6xx
-
-c,--command<command>¶ BD configuration file to produce secure binary v2.x
-
-J,--image-conf<image_conf>¶ Json image configuration file to produce master boot image
-
-j,--container-conf<container_conf>¶ json container configuration file to produce secure binary v3.x
-
-T,--tzm-conf<tzm_conf>¶ json trust zone configuration file to produce trust zone binary
-
-o,--output<output>¶ Output file path.
-
-k,--key<key>¶ Add a key file and enable encryption.
-
-s,--pkey<pkey>¶ Path to private key for signing.
-
-S,--cert<cert>¶ Path to certificate files for signing. The first certificate will be the self signed root key certificate.
-
-R,--root-key-cert<root_key_cert>¶ Path to root key certificate file(s) for verifying other certificates. Only 4 root key certificates are allowed, others are ignored. One of the certificates must match the first certificate passed with -S/–cert arg.
-
-h,--hash-of-hashes<hash_of_hashes>¶ Path to output hash of hashes of root keys. If argument is not provided, then by default the tool creates hash.bin in the working directory.
-
-v,--version¶ Show the version and exit.
-
--help¶ Show this message and exit.
Arguments
-
EXTERNAL¶ Optional argument(s)
SB generation using BD file¶
For a generation of Secure Binary, a BD configuration file could be used. Description of how to use BD file is in bellow chapter.