1.. _device-tree/ibm,cvc:
2
3ibm,cvc
4=======
5
6This describes the code (a.k.a container verification code) that skiboot uses
7to verify signed firmware blobs. Each ibm,cvc child node describes CVC service,
8which has a version and offset (reg).
9
10Added in the device tree from ``ibm,secureboot-v2``.
11
12Required properties
13-------------------
14
15.. code-block:: none
16
17   compatible:      should be "ibm,container-verification-code"
18
19   memory-region:   this points to the reserved memory where the
20                    container-verification-code is stored.
21
22Example
23-------
24
25.. code-block:: dts
26
27	ibm,cvc {
28		phandle = <0x10f>;
29		#address-cells = <0x1>;
30		#size-cells = <0x0>;
31		compatible = "ibm,container-verification-code";
32		memory-region = <0xaa>;
33
34		ibm,cvc-service@40 {
35			phandle = <0x110>;
36			compatible = "ibm,cvc-sha512";
37			reg = <0x40>;
38			version = <0x1>;
39		};
40
41		ibm,cvc-service@50 {
42			phandle = <0x111>;
43			compatible = "ibm,cvc-verify";
44			reg = <0x50>;
45			version = <0x1>;
46		};
47	};
48