tree c2146bffd17c030d2853f5f5c0249476561fe0cb
parent 1a7a6905c5ebc6cb4324d7426a6e1bb1c695912b
author David Vincze <david.vincze@arm.com> 1582033847 +0100
committer David Brown <davidb@davidb.org> 1582670592 +0100

bootutil: Introduce HW rollback protection

- Add image security counter verification (read security counter value
  from the image manifest and compare it against the stored/active
  security counter) as an optional part of the image validation process
  to prevent the restoration of older, potentially vulnerable images.
- This feature can be enabled with the MCUBOOT_HW_ROLLBACK_PROT option.
- Add security counter interface to MCUBoot. If HW rollback protection
  is enabled then the platform must provide a mechanism to store and
  read the security counter value in a robust and secure way.

Change-Id: Iee4961c1da5275a98ef17982a65b361370d2a178
Signed-off-by: David Vincze <david.vincze@arm.com>