12.2.4.1 6th Vector Format

When the AUTH_MODE field is cleared in the Secure Boot Configuration Packet, the sixth entry of the Arm exception vector table stores the size of the boot file in bytes, including the 16 bytes of its AES-CMAC signature.

When the AUTH_MODE field is set to 1 in the Boot Configuration word, the sixth entry of the Arm exception vector table stores both the size of the boot file including its RSA signature and the size of the X.509 certificate chain. The size of the RSA signature is also encoded.

Bit 31 30 29 28 27 26 25 24
CERTIFICATE_SIZE
Bit 23 22 21 20 19 18 17 16
CERTIFICATE_SIZE SIG_CODE BT_SIZE
Bit 15 14 13 12 11 10 9 8
BT_SIZE
Bit 7 6 5 4 3 2 1 0
BT_SIZE

BT_SIZE: Boot file size, in bytes

SIG_CODE: Code for the RSA signature length

00: 2048 bits

01: 3072 bits

10: 4096 bits

11: RFU

CERTIFICATE_SIZE: Size of the of X.509 certificate chain, in bytes