digi: add dependencies to NXP-based SOM TrustFence options

These options and functions are not available for an
STM-based SOM and Yocto would complain of undefined values
or functions, otherwise.

Signed-off-by: Hector Palacios <[email protected]>

Author: hpalacio

Kconfig

@@ -74,7 +74,7 @@ config ENV_AES
 
 config ENV_AES_CAAM_KEY
 	bool "Use CAAM internal key"
-	depends on ENV_AES
+	depends on HAS_CAAM
 	help
 	  Use the internal CAAM secure key for environment encryption which
 	  uses AES-256-CCM.

common/Kconfig.boot

@@ -20,6 +20,7 @@ if SIGN_IMAGE
 
 config UNLOCK_SRK_REVOKE
 	bool "Unlock the SRK_REVOKE eFuse field"
+	depends on CC6UL
 	help
 	  In closed devices, HAB, by default, sets the SRK_REVOKE_LOCK sticky
 	  bit in the OCOTP controller to write protect the SRK_REVOKE eFuse
@@ -48,13 +49,15 @@ config KEY_INDEX
 	  Defines the key index for the signature process.
 
 config DEK_PATH
+	depends on HAS_CAAM
 	string "Data Encription Key path for encryption of the signed image of the signed image"
 	help
 	  Define to the DEK path to enable encryption of the signed U-boot
 	  image. Supported DEK sizes are 128, 192 and 256 bits.
 
 config SIGN_MODE
-	string "Sign mode"
+	string
+	depends on AHAB_BOOT || IMX_HAB
 	default "AHAB" if AHAB_BOOT
 	default "HAB" if IMX_HAB
 	help

common/image.c

@@ -41,7 +41,9 @@
 #include <u-boot/sha1.h>
 #include <linux/errno.h>
 #include <asm/io.h>
+#if defined(CONFIG_IMX_HAB) || defined(CONFIG_AHAB_BOOT)
 #include <asm/mach-imx/hab.h>
+#endif
 #ifdef CONFIG_AUTH_ARTIFACTS
 #include "../board/digi/common/auth.h"
 #endif
@@ -1365,11 +1367,13 @@ int boot_get_ramdisk(int argc, char *const argv[], bootm_headers_t *images,
 			*rd_start, *rd_end);
 
 #ifdef CONFIG_AUTH_ARTIFACTS
+#if defined(CONFIG_IMX_HAB) || defined(CONFIG_AHAB_BOOT)
 	if (rd_data && imx_hab_is_enabled() && !authenticated) {
 		printf("Ramdisk authentication is not supported\n");
 		return 1;
 	}
-#endif
+#endif /* CONFIG_IMX_HAB || CONFIG_AHAB_BOOT */
+#endif /* CONFIG_AUTH_ARTIFACTS */
 	return 0;
 }