hw/arm: add authenticated A6 IMG3 boot lab

Model the A6 crypto, interrupt, USB, and platform blocks needed to boot SecureROM through iBSS into iBEC Recovery. Add local lab identity, IMG3, and APTicket tooling, patched macOS recovery utilities, UART and GDB access, and English end-user documentation.
2026-09-01 09:51:49 -07:00
parent 47977dd34a
commit 5d9a60a926
45 changed files with 6002 additions and 265 deletions
@@ -18,7 +18,11 @@ static uint64_t s5l8950x_chipid_read(void *opaque, hwaddr offset, unsigned size)
        /* n41ap: CPFM 0x03, SCEP 0x10, BDID 0x00, IBFL 0x00. */
        return 0x200D;
    case 0x04:
-        return 0x00;
+        /*
+         * SecureROM leaves the high handoff bit asserted before entering
+         * iBSS.  Early iBoot aborts immediately when this latch is clear.
+         */
+        return 0x80000000;
    case 0x08:
        return 0xDEADBEEF;
    case 0x0C: