12.2.4.1 6th Vector Format
When the AUTH_MODE field is cleared in the Secure Boot Configuration Packet, the sixth entry of the Arm exception vector table stores the size of the boot file in bytes, including the 16 bytes of its AES-CMAC signature.
When the AUTH_MODE field is set to 1 in the Boot Configuration word, the sixth entry of the Arm exception vector table stores both the size of the boot file including its RSA signature and the size of the X.509 certificate chain. The size of the RSA signature is also encoded.
Bit | 31 | 30 | 29 | 28 | 27 | 26 | 25 | 24 | |
CERTIFICATE_SIZE | |||||||||
Bit | 23 | 22 | 21 | 20 | 19 | 18 | 17 | 16 | |
CERTIFICATE_SIZE | SIG_CODE | BT_SIZE | |||||||
Bit | 15 | 14 | 13 | 12 | 11 | 10 | 9 | 8 | |
BT_SIZE | |||||||||
Bit | 7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 | |
BT_SIZE | |||||||||
BT_SIZE: Boot file size, in bytes
SIG_CODE: Code for the RSA signature length
00: 2048 bits
01: 3072 bits
10: 4096 bits
11: RFU
CERTIFICATE_SIZE: Size of the of X.509 certificate chain, in bytes