| Age | Commit message (Collapse) | Author |
|---|
|
Upgrade optee-test lf-6.6.3-1.0.0 to be aligned with NXP BSP
LF6.1.55_2.2.0.
Relevant changes:
- 95c49d9 ta: os_test: fix TA time wrap test
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Switch the optee-client to the branch lf-6.6.3-1.0.0 to be aligned
with NXP BSP LF6.6.3_1.0.0.
No changes in the code.
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Update optee-os to lf-6.6.3-1.0.0 to be aligned with NXP BSP LF6.6.3_1.0.0.
Relevant changes:
- e0a3e7773 MLK-22073 core: generic_entry_a32: change L1 invalidation at secondary boot
- d4858f159 drivers: caam: update return type of caam_sm_free()
- 9d6620bd2 LFOPTEE-295 drivers: ele: check CSAL status for ELE RNG
- 6e854f929 LFOPTEE-261 core: pta: imx ocotp ELE support added
- 4b37acf2d LFOPTEE-261 drivers: ele: add fuse support
- d2fa5bed8 drivers: crypto: caam: fix job ring interruption number
- 4841b44fb LFOPTEE-291 drivers: ele: disable ELE RNG at runtime
- f70f2cbcd drivers: crypto: caam: use job ring 3 on i.mx8dxlevk
- 4c2abeff0 drivers: imx_snvs: unlock SNVS access for non-secure
- 1838304f0 core: imx: add support fox i.MX8DX
- 65126481f LFOPTEE-289 core: pta: imx: Trusted ARM CE: fix serialization bug
- 698d42b12 LFOPTEE-289 core: pta: imx: Trusted ARM CE fix build issue
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade optee-test to 4.0 to be aligned with NXP BSP LF6.1.55_2.2.0.
Relevant changes:
- 38eface ta: os_test: fix TA time wrap test
- 4561148 LFOPTEE-290 regression_nxp: ocotp: fix expected test error code
- 949a4a0 LFOPTEE-290 regression_nxp: ocotp: abort fuse test suite upon test case failure
- 8c3957c LFOPTEE-289 regression_nxp: trusted arm ce fix error code
- 62a5d00 LFOPTEE-235 regression_nxp: add trusted arm ce tests
- 90638d7 ta: crypto_perf: update TEE_Param according to GP131
- 9df2ce0 LFOPTEE-129 Make MP test use embedded crypto instead of openssl
- ca4340e LFOPTEE-131 Fix ta_keygen compilation warnings
- 584e877 LFOPTEE-123 Reset the handle when freed
- d66a84d LFOPTEE-123 Handle benchmark logging for key generation measures
- fb43680 LFOPTEE-95 Add performance measure of key generation
- a0be085 LFOPTEE-93 Check MP is functional
- e8aab1b LFOPTEE-84 xtest: Add test of MP feature
- f8d144f LFOPTEE-84 ta: Add test of MP
- 0fc4409 MMIOT-789 xtest: crypto_perf: fix resource leak in read_random
- 76cf0b3 TEE-641 regression_nxp: add AES CTR in place tests
- 0ebe16e LFOPTEE-65 xtest: add DIGPROG tests
- b2ab1f3 LFOPTEE-65 xtest: add OCOTP tests
- b0889a5 YOCIMX-5658 regression_nxp: replace malloc() calls with calloc() calls
- f71bc8b LFOPTEE-55: crypto-perf: RSA: Fix for RSA Encryption/Decryption error
- 6ddc88d LFOPTEE-55: crypto-perf: add domain parameters for dsa
- 7e40310 LFOPTEE-55: crypto-perf: DH: Remove non-essential attributes passed during key generation
- 188e830 LFOPTEE-55: crypto-perf: ta: ECDSA, ECDH: Remove non-essential attributes passed during key generation
- 6f1b8ae LFOPTEE-55: crypto-perf: xtest: ECDH: RoundUp key size
- eb0d4b8 LFOPTEE-39 regression_nxp: Add test of DEK blob generation
- 0213905 MMIOT-723 regression_nxp: crypto: Fixing memory corruption in nxp_crypto_003
- 09af29f LFOPTEE-17: xtest: regression_nxp: add test case for I2C driver testing
- 76aa4f5 regression_nxp: enable CFG_REGRESSION_NXP flag
- d31191d LFOPTEE-16: fix warning where uint32_t is expected
- 2379730 LFOPTEE-16: fix trace compilation warnings
- 461f258 LFOPTEE-13 crypto-perf: fix command line algorithm search
- d0a6d89 LFOPTEE-13 crypto-perf: fix compilation warnings
- 80f3c49 TEE-127 CAAM Crypto Performance
- 064f3bc TEE-606 xtest: define a 'regression_nxp' test suite in xtest
- 480e231 TEE-606 xtest: add CFG_REGRESSION_NXP flag
- 4a3dee2 TEE-367 crypto: cipher memory leakage verification
- 522dab3 TEE-548 regression_nxp: Cipher operation with a big buffer
- f44991a TEE-577 regression_nxp: AES CTR streaming byte per byte
- 5102219 TEE-418 regression_nxp: add cipher streaming byte incremental
- 1c3d6be ta/crypt: update to mbedTLS 3.4.0 API
- b49d696 xtest: add command to get system time
- e1b6445 xtest: regression: add case 1040
- 1013c49 xtest: regression_1000: remove unneeded stat.h include
- f4dd113 Remove embedded OpenSSL
- cf11160 xtest: add -DOPENSSL_API_COMPAT=10100
- fa2fb9b ta: os_test: fix print_properties() indentation
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade the optee-client to 4.0 to be aligned with NXP BSP LF6.1.55_2.2.0.
Relevant changes:
- acb0885 teec: use multiple of page size for page aligned buffers
- 6178477 cmake: pkgconfig file: install the file
- 46831ac pkgconfig file: remove extra comments
- 3ac968e Makefile, cmake: move teec related headers
- 2dd250b cmake: remove whitespace before parenthesis
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade optee-os to 4.0 to be aligned with NXP BSP LF6.1.55_2.2.0.
Also update the patch files.
Relevant changes:
- a303fc80f drivers: crypto: caam: fix job ring interruption number
- 2a3787bf4 LFOPTEE-291 drivers: ele: disable ELE RNG at runtime
- dca43aa1b drivers: crypto: caam: use job ring 3 on i.mx8dxlevk
- c0d2000c1 drivers: imx_snvs: unlock SNVS access for non-secure
- 50e946795 LFOPTEE-289 core: pta: imx: Trusted ARM CE: fix serialization bug
- 9134bcffa LFOPTEE-289 core: pta: imx: Trusted ARM CE fix build issue
- 8bf641926 LFOPTEE-235 core: plat-imx: Add Fast SMC support
- 0477a804b LFOPTEE-235 core: pta: imx: add TRUSTED ARM CE
- d943197bd LFOPTEE-235 drivers: ele: expose imx_ele_derive_key
- e7dadb871 LFOPTEE-235 drivers: ele: rng: Use ELE GetRandom cmd
- 9f3218062 LFOPTEE-286 drivers: ele: report error according to ELE response status
- c619a4cb2 LFOPTEE-279 drivers: ele: correct typo in imx_ele_generate_key()
- 2b0d839e5 LFOPTEE-279 drivers: ele: update imx_ele_delete_key() function
- d7e85fad1 LFOPTEE-259 drivers: ele: make special setup for Trust MU communication
- 4000b10be LFOPTEE-273 drivers: ele: move key management functions in key_mgmt.h
- 4188353a1 LFOPTEE-270 drivers: ele: remove global session and key store handle init from imx_ele_global_init().
- dd79868aa LFOPTEE-270 drivers: ele: key_mgmt: remove unnecessary cache invalidate operation
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade optee-test to be aligned with NXP BSP LF6.1.36_2.1.0.
Relevant changes:
- e0ebd51 regression_4000: add CMAC test with more than 1KB input buffer size
- 7559c09 xtest: fix compilation error with WITH_OPENSSL=n
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Change a branch of optee-client to be aligned with NXP BSP
LF6.1.36_2.1.0.
There are no real changes in the code and HEAD stays the same.
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade optee-os to be aligned with NXP BSP LF6.1.36_2.1.0.
Also add support of individual building flags for a new machine
imx8mq-lpddr4-wevk.
Relevant changes:
- 4e3228190 LFOPTEE-268 drivers: ele: update generate key command parameters
- c1cdc8a65 LFOPTEE-268 drivers: ele: update key store open command parameters
- 9dc96cbec LFOPTEE-268 drivers: ele: add SAB init command
- 72ae0b0d5 LFOPTEE-268 drivers: ele: update session open command parameters
- 1d7fd776b drivers: caam: fix size of CMAC update data
- 4ad137591 core: fix race in mobj_reg_shm_dec_map()
- 9efc52269 LFOPTEE-254 drivers: ele: return error when response status does not succeed
- 9c03dee67 LFOPTEE-252 drivers: ele: remove non secure MU mapping
- 6738e2faa LFOPTEE-241 drivers: ele: add ELE status code and debug traces
- 308c6ee32 LFOPTEE-244 drivers: ele: allocate data in heap for HUK derivation
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade optee-test to be aligned with NXP BSP LF6.1.22_2.0.0.
Relevant changes:
- c2c9f92 ta: crypto_perf: update TEE_Param according to GP131
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade optee-client to be aligned with NXP BSP LF6.1.22_2.0.0.
Backport changes from meta-arm/optee-client.inc.
Relevant changes:
- 8533e0e travis: remove the .travis.yml file
- 0fc6ef7 tee-supplicant: fix leak when load plugin failed
- dde6306 libteeacl: use realloc() instead of reallocarray()
- 462b954 Add -Wunsafe-loop-optimizations only for gcc
- 2096542 Makefile: use GNU standards for directory variables
- dd2d39b libteeacl: Move uuid-dev checking in libteec makefile
- 1056b40 cmake: define boolean switch CFG_WERROR with option()
- bbdf665 libteeacl: condition libteeacl with WITH_TEEACL
- fba9950 ci: add GitHub Actions script and Docker files
- fc67c27 Add pkgconfig file for libteec
- d448e8b Allow cross-compile pkg-config
- d26d885 libckteec: Add RSA AES key wrap serialization
- cb3842c tee-supplicant: Synchronize file operations for secure storage
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Upgrade optee-os to be aligned with NXP BSP LF6.1.22_2.0.0.
Reapply and refresh patch files.
Drop patches that provided correct sysroot. Instead, use CFLAGS{32,64}
to pass --sysroot, this option is available since optee-os 3.16.
Relevant changes:
- 1962aec95 LFOPTEE-238 drivers: ele: use the baseline API to retrieve the UID
- 7e7b93ac1 LFOPTEE-238 drivers: ele: add msb and lsb to imx_ele_buf object
- 086b65048 LF-8999 drivers: ele: disable ASLR for imx8ulp
- fa3174b61 LF-8995 drivers: ele: keystore: change global key store id
- 1ae8545a4 LF-8995 drivers: ele: disable imx_ele_global_init() if CFG_IMX_ELE_ECC_DRV is disabled
- c15e21b07 LFOPTEE-243 Rework ELE MU mapping
- fb5eaa07f drivers: ele: retain the return value in case imx_ele_generate_key(), imx_ele_signature_generate() and imx_ele_signature_verification() returns an error
- 6e706ee51 drivers: ele: change RNG command ID
- 9492fa474 LFOPTEE-242 drivers: ele: use the new derive key API for HUK generation
- 4d4bd4340 core: ls: enable CFG_PKCS11_TA
- cf2cc646a core: imx: enable CFG_PKCS11_TA
- 4c8281883 drivers: ele: fix ELE_COMMAND_SUCCEED
- 5363154ed core: imx: move tzc380.c to plat-imx
- ccf5dc690 core: imx: allow CFG_CRYPTO_DRIVER enablement for imx93evk
- 735c01acf LFOPTEE-178 drivers: ele: Change OP-TEE MU memory mapping from Secure to Non-Secure
- 093318267 LFOPTEE-178 drivers: ele: Add support for ECC operations
- fa58e94e1 LFOPTEE-178 drivers: ele: Add Generate/Delete Key APIs
- 09badc46e LFOPTEE-178 drivers: ele: Add Key Management APIs
- 0cd738b0d LFOPTEE-178 drivers: ele: Create a global key store handle for all subsequent calls
- c93839af6 LFOPTEE-178 drivers: ele: Create a global session handle for all subsequent calls
- c1b29579d LFOPTEE-178 drivers: ele: add memory management functions
- c61f273fd LFOPTEE-178 drivers: ele: getting common macros and functions in header file
- b5f423f49 LFOPTEE-178 drivers: ele: move ELE to a dedicated directory
- afa1dd7bc drivers: caam: disable CFG_CRYPTO_SM2_* when ECC CAAM driver is enabled
- c723025d5 core: imx: fix CFG_TZDRAM_START
- 80b25f59f LF-7525 drivers: dcp: do not modify DCP node status in the DTB
- 425ed1fbb LFU-368: core: imx93: enable trusted_keys as early TA
- 1924712ff LFOPTEE-85 core: plat-ls: Enabled DTB overlay feature for LS platforms
- e98f5c77d LFOPTEE-85 drivers: caam: add DTB_JR_PATH for LS platforms
- 4a98ea70c core: imx: enable attestation PTA
- a654afb61 drivers: caam: add device tree JR path for mx8ulp
- e155b164e core: imx: enable CFG_CORE_HUK_SUBKEY_COMPAT_USE_OTP_DIE_ID by default
- 3a3ddf85b core: imx: enable TZASC driver for all i.MX platforms
- 8a1984cb1 TEE-639 drivers: caam: skip JR init of CFG_JR_HAB_INDEX
- 992f6b93b LFOPTEE-17: core: plat-ls: add PTA for I2C RTC test
- 519bfab46 core: imx: disable CSU protection for the DCP
- 484138b3f core: ls: enabled CFG_ENABLE_EMBEDDED_TESTS by default
- 299d2d7ad core: imx: enabled CFG_ENABLE_EMBEDDED_TESTS by default
- e79c46c9d core: ls: enable CAAM driver by default.
- 18cca2b72 core: ls: disable CAAM for ls1088 and ls2088
- 9315f5d1e LFOPTEE-9 plat-ls: Increase heap size
- dc2ddcf86 TEE-598 core: imx: increase heap size to 128k
- 0cd1cf295 TEE-526 drivers: caam: add SDP Memory cacheability verification
- 54edf5b70 TEE-526 core: arm: retrieve SDP Memory cacheability
- d5d6e8c85 core: imx: enable CAAM driver by default
- b1b2f83cc core: imx: add resume capability to CSU driver
- 6130b501e core: imx: allow NS world to change SMP bit
- 40006fb93 core: imx: remove SC_IPC_BASE_SECURE definition
- cb115caf6 LFOPTEE-37: core_mmu_lpae: clear L2 tables and indexes
- 546ed42ac LFOPTEE-37: imx8qm: bget_malloc: reset malloc_poolset at runtime
- e8e4b9761 LFOPTEE-37: imx8qm: gic: avoid GICD re-configuration
- 5eebee811 LFOPTEE-37: plat-imx: add platforms mx8qm mek cockpit a53 and a72
- ad9310fbb pta: imx: add DEK blob encapsulation
- 9fe4ecdba drivers: caam: add secure memory and blob drivers
- 4d6df4796 core: imx: add SECMEM definitions for imx8m platforms
- c3b7c47f3 TEE-482 Add .clang-format
- c48eeb2c6 MLK-22073 core: generic_entry_a32: change L1 invalidation at secondary boot
- aa26586bf scripts: add build script for imx and ls
- f5e685f71 drivers: imx_snvs: unlock SNVS access for non-secure
- d328f3a08 drivers: caam: skip the JR device tree disablement for imx8 platforms
- 85feed23e core: imx: enable DT overlay for imx8 platforms
- ebfaab628 drivers: caam: disable job ring via DT overlay
- f4f575781 core: add device tree overlay subnode disable
- a3e52ba26 drivers: caam: rework the CAAM crypto makefile
- 3cb66cb83 core: ls: remove CFG_WITH_SOFTWARE_PRNG default definition for LS platforms
- 55af337cd core: imx: remove CFG_WITH_SOFTWARE_PRNG default definition for i.MX platforms
- f06709794 core: move CFG_WITH_SOFTWARE_PRNG default definition
- 54493021c drivers: caam: remove CFG_NXP_CAAM_ACIPHER compilation flag
- 5dec4ebbf core: crypto: give the platform configuration a higher priority
- 294f91f32 drivers: imx_scu: add resume capabilities
- 851e73b1d core: imx: add plat_cpu_wakeup_late() on arm32
- 93e8838ca TEE-272 Cortex-A9 add PL310 Linux/Optee Mutex
- 711fea086 drivers: imx_scu: move i.MX SCU driver
- b0ef56504 drivers: imx_csu: move i.MX CSU driver
- 0fc481338 drivers: imx_caam: move i.MX CAAM driver
- 3cabf823d core: imx: enable busfreq on imx6 and imx7 platforms
- 11d7fc300 core: pm: imx: export busfreq_change() function
- be238d4ac core: imx: enable the compilation of sm_platform_handler.c for busfreq
- c390bfbb5 core: imx: add busfreq SIP calls
- 9df964338 pm: imx: add power management drivers
- 70af7a82a pm: imx: add suspend source files
- 2a1a3cee8 pm: imx: add cpuidle source files
- c292e6239 pm: imx: add busfreq source files
- fc00b1f35 core: imx: enable CFG_PM_ARM32 and CFG_IMX_PM for power management
- fc0a35a03 core: imx: remove SRC and GPC functions from imx.h
- f0f51a260 core: imx: add imx7ulp registers
- a1cbd6256 core: imx: add imx7 DDRC and IOMUX registers
- ac51cdba4 core: imx: add imx6 MMDC and IOMUX registers
- d7844a1ad core: imx: add pl310_enabled()
- 3dcdade81 core: imx: remove imx_sip.h
- 1e79f969e core: imx: remove power management code for imx7 platforms
- c7b15f67e allow setting sysroot for libgcc lookup
- e8abbcfbd Update CHANGELOG for 3.21.0
- 50666c141 plat-zynqmp: fixes interrupt controller
- b031393cd core: tee_ta_instance_stats(): correct the allocation size of dump_ctx
- 32b94ed4b drivers: caam: fix MP abstraction layer functions
- 4a0740da2 drivers: caam: math: add CFG_NXP_CAAM_MATH_DRV compilation flag
- 44220a36a libtomcrypt: fix pkcs_1_v1_5_decode() when empty message
- 3fb72c226 drivers: crypto: add support for SM2_DSA_SM3
- 163a7c9e8 core: imx: remove duplicate driver_init() call
- 31b31015b build: ta: add RISC-V linker script
- de4176748 core: mm: Fix idx truncation bug
- 9eabc2b44 core: fix loading of encrypted TA
- 9901df47d core: dump_ta_memstats(): check TA initialization completion before accessing it
- 66370233e ci: se05x crypto driver: update plug-and-trust
- fb559031c drivers: se050: allow configuring the Secure Element applet
- 7723564b9 dts: stm32: add OTP index for HUK on stm32mp15 platform
- b0946e1d9 drivers: stm32mp15_huk: use DT HUK NVMEM layout API
- db8ca286e se050: ecc: SE050-F shared secret
- b300b5a37 ci: compile-test as many PTAs as possible on QEMU/QEMUv8
- eb238769a pta: attestation: fix compilation incompatible pointer warning
- 552d5e40d core: ffa: Allow multiple SPs with same UUID
- f60c6b9c1 drivers: imx_ele: add ELE driver
- 8cd1171e9 drivers: imx_mu: add MU base address and size for imx93
- 4f89aed3d drivers: imx_mu: add MU base address and size for imx8ulp
- 753e6fe4f drivers: imx_mu: increase maximum MU message size
- 088116c9c drivers: imx_mu: add support for imx93
- abbe1d51f core: spmc: move FIP SP deinit call
- 6d7c8c3d8 core: spmc: fix FIP SP loading
- 1478437e6 core: ltc: use SHA-3 crypto accelerated function
- c60ed582e core: arm64: SHAKE128 using ARMv8.2-A cryptographic extensions
- bfedef0ce core: arm64: SHA-3 using ARMv8.2-A cryptographic extensions
- 2be3770e8 core: arm64: SM4 CE optimization for ARMv8.2
- 8b5fb12e2 core: arm64: SM4-AESE optimization for ARMv8
- 2fb9e950b Revert "ci: disable QEMUv8_check_rust job"
- 557fea2de Remove checked in .checkpatch-camelcase.git.
- fdc4a8bef ldelf: syscall: support RISC-V ldelf sycall
- 28849defb libutee: increase MPI_MEMPOOL_SIZE to 14Kb
- 6e99433ed core: remove keep pager directive on core_init_mmu_regs()
- dd884cc27 plat-stm32mp1: conf: support 32bit MMU
- 1a3d47c53 clk: stm32mp15: embed clock names only in debug mode
- 41d9f6c2b libutee: add TEE_ALG_ECDSA_SHA* to TEE_ALG_GET_DIGEST_SIZE()
- 7bd215a7b core: mbedtls: ecc_get_keysize(): do not check algorithm against curve
- 9cf576a9f drivers: crypto: versal: do not use deprecated algorithm macros
- 53af8d704 drivers: crypto: se050: do not use deprecated algorithm macros
- fa40bed51 core: fix out-of-bounds access of dump_ctx
- 442c670a2 drivers: atmel_tcb: Use matrix_dt_get_id() to correctly retrieve the id
- 9a28dbc4f plat-sam: matrix: add matrix_dt_get_id() to parse matrix id from dt
- 0db298206 core: pta: imx: add manufacturing protection
- d538d2936 drivers: caam: add manufacturing protection feature
- f5c3d85a5 core: crypto: add support MD5 hashes in RSA sign/verify/cipher
- 2c9522664 core: drivers: zynqmp_csu_puf.c: increase regen time to 6ms
- 3d70a9743 core: crypto: change supported HMAC key size ranges
- 200eb7bd8 plat-totalcompute: remap console logs
- f4f85ac77 drivers: crypto: add SM2 ECC encrypt and decrypt
- 769cbbd70 drivers: crypto: add SM2 curve in crypto API
- 9655e48e7 ci: qemuv8: build with maximum log level
- 9894fdb48 ta: pkcs11: fix trace compilation warning
- a3cfa14ac drivers: caam: enable the CAAM clock when submitting a new job
- 316fd6e9c drivers: caam: add missing header file
- cd857358b core: imx: use register_ddr() to register dynamic shared memory
- 9740df775 drivers: clk: sam: remove hard coded USB clock setup
- 5ff81ad89 dts: sama5d2: add assigned-clocks properties for usb
- 90dee57ac drivers: clk: sam: export audiopll_fracck and usbck
- c0e9e857f drivers: clk: sam: add a macro for count of main clocks
- 8ac3cb374 core: drivers: crypto: caam: Check PKCS_V1_5 decryption buffer size
- 97eb91680 drivers: imx: tzc380: re-configure TZ380 upon PM resume
- 83857db53 drivers: imx: tzc380: do not dump TZASC state before lockdown
- 92f496916 drivers: imx: tzc380: add support for 8mscale platforms
- 809fa817a core: ffa: add TOS_FW_CONFIG handling
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Signed-off-by: Matteo Facchinetti <matteo.facchinetti@opensource.tttech-auto.com>
|
|
Imported from IMX 6.1.22-2.0.0 BSP.
The recipes have been modified to be compatible
with the current meta-frescale recipes of OP-TEE.
Signed-off-by: Matteo Facchinetti <matteo.facchinetti@opensource.tttech-auto.com>
|
|
this recipe comes from meta-imx.
keyctl-caam is a tool useful to implement
use cases like encrypted storage using CAAM secure keys
as described in the NXP Application note AN12714.
Signed-off-by: Stefano Viola <stefano.viola@toradex.com>
|
|
Switch optee-os, optee-client and optee-test to the branch
lf-6.1.1_1.0.0 used in NXP BSP L6.1.1-1.0.0.
Relevant changes:
optee-os:
- ad4e8389b core: crypto: fix memory leak in Ed25519 support
- f9143cad9 SCR: add imx-optee-os
- c29c0bcb7 LF-8234 core: imx: pm: remove enable/disable of LDP 1P0D
- a0359fd6d LFOPTEE-211 core: update tee_entry_is_sdp_cached
- 69afc6774 LFOPTEE-188 core: imx: use register_ddr() to register dynamic shared memory
- e66300ff9 LF-7525 drivers: dcp: do not modify DCP node status in the DTB
- c02d09dea core: mm: fix error flushing unused pgt's
- 3c13f920e libutils: util.h: fix the ROUNDUP_OVERFLOW() macro
- ad85772e0 LFOPTEE-203 drivers: ele: align HUK output buffer
optee-client:
- 01231b7 SCR: add imx-optee-client
- 895a924 teeacl: fix include path
optee-test:
- 7c314e6 SCR: add imx-optee-test
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Add include files for optee-client.
The include files feature requirements that are specific to
optee/optee-client projects and i.MX platforms.
The recipe file with version number features the git branch and
commit hash.
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Add include files for optee-os and optee-test.
The include files feature requirements that are specific to
optee/optee-os/optee-test projects and i.MX platforms.
Recipe files with version number feature the git branch, commit hash
and optionally repo URL/patch set.
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
Bring in the needed patches from meta-arm
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
After updating op-tee to 3.19, it is able to be built with clang
toolchain.
This reverts commit 86680b12d44ffe2831244a2f7f7dcaaa1a1440c5.
|
|
NXP BSP lf-5.15.71_2.2.0 uses op-tee 3.19.0.imx.
Upgrade optee-os, optee-client, and optee-test accordingly.
Add missed support for imx93evk platform.
Relevant changes for optee-os:
- 00919403f LF-7525 drivers: dcp: do not modify DCP node status in the DTB
- 842961521 core: mm: fix error flushing unused pgt's
- 96d9b4c19 libutils: util.h: fix the ROUNDUP_OVERFLOW() macro
- 2885fd08e LFOPTEE-203 drivers: ele: align HUK output buffer
- 7e41f6603 drivers: imx_ele: add HUK support for imx93
- ab1525d14 core: imx: remove SC_IPC_BASE_SECURE definition
- 382a7ae57 LFOPTEE-181 drivers: imx_ele: re-work imx_ele_session_get_device_info()
- b27da7b0d LFOPTEE-181 drivers: imx_ele: remove RNG support for 8ulp A0
- 4a9f3e387 LFOPTEE-181 drivers: imx_ele: add MU infos for imx93
- 8c4caec41 LFOPTEE-181 core: imx: enable MU and ELE drivers for imx93
- f5bc45d6d LFOPTEE-181 core: imx: add MU_BASE and MU_SIZE for imx93
- b19786dfb LFOPTEE-181 drivers: imx_mu: add support for imx93
- 4c598c905 core: imx_ele: remove addition of word for CRC
- 9f9fb3899 LFU-368: core: imx93: enable trusted_keys as early TA
- 23889478f LFU-368: core: imx: enabled dynamic share memory for i.MX93
Relevant changes in optee-client:
- 644022f teeacl: fix include path
- 140bf46 libckteec: Add EDDSA attribute serialization
- 1fc38c6 libteeacl: Add function to resolve name to gid_t
- 1560582 libteeacl: function to encode a group login UUID
- e58b158 libteeacl: Add new ACL helper library
- 5364e61 tee-supplicant: read rpmb dev info from sysfs
- a46239c tee-supplicant: android: make RPMB_EMU a conditional assignment
- 30abe6c cmake: Use separate generator expression for lib targets
- f2755fe cmake: Don't set teec include_directory from libseteec
- 1dcb80a Use CMake project command to set version
- 492410d tee-supplicant: -d: return after TEE device is opened
- d59ed2d cmake: fix log level don't take effect
- e7cba71 tee-supplicant: fs: use errno instead of returning TEEC_ERROR_GENERIC
- f7ed8e3 tee-supplicant: support multiple TA load paths
- a5c30b1 Makefile: Makefile: only preserve links when installing output files
- dc58de2 tee-supplicant: close shm fd before freeing memory
- f2a7c94 tee-supplicant/src/tee_supplicant.c: fix build without plugins
Relevant changes in optee-test:
- 5c1dbb5 LFOPTEE-129 Make MP test use embedded crypto instead of openssl
- 661a7b3 LFOPTEE-131 Fix ta_keygen compilation warnings
- 6fcbcb1 LFOPTEE-123 Reset the handle when freed
- 980dbbb LFOPTEE-123 Handle benchmark logging for key generation measures
- ebf619a LFOPTEE-95 Add performance measure of key generation
- 28ba903 LFOPTEE-93 Check MP is functional
- d7f6c03 LFOPTEE-84 xtest: Add test of MP feature
- d928ce2 LFOPTEE-84 ta: Add test of MP
- b060fc4 MMIOT-789 xtest: crypto_perf: fix resource leak in read_random
- f9d2ab0 TEE-641 regression_nxp: add AES CTR in place tests
- dd158a7 LFOPTEE-65 xtest: add DIGPROG tests
- e1492fa LFOPTEE-65 xtest: add OCOTP tests
- c520c98 YOCIMX-5658 regression_nxp: replace malloc() calls with calloc() calls
- 09dbac1 LFOPTEE-55: crypto-perf: RSA: Fix for RSA Encryption/Decryption error
- 63dcd10 LFOPTEE-55: crypto-perf: add domain parameters for dsa
- c88fb78 LFOPTEE-55: crypto-perf: DH: Remove non-essential attributes passed during key generation
- b7b285a LFOPTEE-55: crypto-perf: ta: ECDSA, ECDH: Remove non-essential attributes passed during key generation
- 8350e03 LFOPTEE-55: crypto-perf: xtest: ECDH: RoundUp key size
- 7a9c375 LFOPTEE-39 regression_nxp: Add test of DEK blob generation
- 61e5ede MMIOT-723 regression_nxp: crypto: Fixing memory corruption in nxp_crypto_003
- 7d9ff08 LFOPTEE-17: xtest: regression_nxp: add test case for I2C driver testing
- 6ae8e95 xtest: enable PKCS11 tests
- 35173ba regression_nxp: enable CFG_REGRESSION_NXP flag
- cfb6e7b LFOPTEE-16: fix warning where uint32_t is expected
- a740498 LFOPTEE-16: fix trace compilation warnings
- 0fa4d73 LFOPTEE-13 crypto-perf: fix command line algorithm search
- 6a28f3c LFOPTEE-13 crypto-perf: fix compilation warnings
- e78f18d TEE-127 CAAM Crypto Performance
- 5ec9bce TEE-606 xtest: define a 'regression_nxp' test suite in xtest
- e562b26 TEE-606 xtest: add CFG_REGRESSION_NXP flag
- d9d73a8 TEE-367 crypto: cipher memory leakage verification
- f3e776b TEE-548 regression_nxp: Cipher operation with a big buffer
- 5312feb TEE-577 regression_nxp: AES CTR streaming byte per byte
- 6df2c3f TEE-418 regression_nxp: add cipher streaming byte incremental
- ab9863c Add ED25519 test cases
- eb3d01f xtest: Add FF-A memory test
- 252faa9 xtest: SPMC Add basic test
- 13cce36 xtest: remove ADBG_REQUIRE* macros
- d9d269e xtest: fix compilation issue
- 2055d75 xtest: fix compilation issue
- c7f733c xtest: fix compilation issue
- d09b43b host: supp_plugin: fix cross compilation
- da5282a sdp: Add dmabuf support
- 366179c regression 4007_x25519: do not fail if X25519 is not supported
- 00b3f2c Add x25519 test cases
Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
|
|
It does not compile with clang, all work to get it compiling with clang
has gone into 3.18+ ( see meta-arm ) until imx version revs up to 3.18
lets use gcc always to build it
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
Fetch QorIQ's source code from github.com/nxp-qoriq,
as original source.codeaurora.org/external/qoriq will
stop to access from April 2023.
Signed-off-by: Jun Zhu <junzhu@nxp.com>
|
|
Changes:
```
41222c4 Makefile: fix ownership contamination when installing output files
ae3b1c6 xtest: create output dir before generating regression_8100 header files
```
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Changes:
```
9d8f190 Makefile: Makefile: only preserve links when installing output files
9a33704 public: Fix simple typo in tee_client_api.h
8aed3ed tee-supplicant: accept -r as a short option for --rpmb-cid
5a69d55 tee-supplicant: add --rpmb-cid command line option
88d374e tee-supplicant: rpmb: read CID in one go
ba0ed67 tee-supplicant: rpmb: introduce readn() wrapper to the read() syscall
945704e tee-supplicant: fix plugin loading logic
edf3072 tee-supplicant: refactor argument parsing in main()
876b1ae tee-supplicant: introduce struct tee_supplicant_params for global config
8b3f7fe libckteec: add support for ECDH derive
06db73b libteec: copy out partial shadow buffer
f6e05d3 GitHub actions: fix incorrect version
975fa78 GitHub actions: add a stales.yml file
df537dd tee-supplicant: read_with_timeout(): fix non-blocking peeking
6d54f84 tee-supplicant: recv_with_out_flags(): check EINTR
f4f54e5 libseteec: Secure Element control
e532a51 tee-supplicant: tee_socket_recv(): report truncated datagrams
2a99339 libckteec: check for ckteec_alloc_shm rval
b3e9cee tee-supplicant: handle ftell() errors
9876c9c teec_ta_load: replace printfs with DMSGs
ae19e95 .gitignore: add tags and TAGS
```
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Changes:
```
9e86c8b6b LFOPTEE-169 imx_ele: use get_info command to get the soc revision
74f662cf4 LFOPTEE-169 imx_ele: check ELE TRNG status before getting random numbers
f74752516 LFOPTEE-196 imx_ele: make the difference ELE_VERSION_BASELINE and ELE_VERSION_HSM
c3f658958 LFOPTEE-172 core: imx_ele: cache the die ID
96dc392d7 scripts: nxp_build: remove ls1012afrwy platform
31125f8be core: plat-ls: remove OP-TEE support for LS1012A-FRWY platform
bb2173330 core: plat-ls: correct expression CFG_NUM_THREADS ?= CFG_TEE_CORE_NB_CORE
2166caac3 core: plat-ls: set CFG_NUM_THREADS ?= 2 for LS1012ARDB
21059100b drivers: caam: increase the minimum entropy delay the imx6sx
a3d4b52b0 drivers: imx: dcp: disable the use of UNIQUE KEY after HUK generation
9162aecfd drivers: imx: dcp: clear OTP_KEY bit for unique key selection
d5144e4a9 drivers: imx: dcp: workaround DCP errata 051292
d61caabeb core: pta: return error code when failing to deserialize saved key
198e47860 core: pta: attestation: fix buffer size for generated key
c1e398428 drivers: pm: remove file with license issue
2a725689b LF-6067 drivers: caam: map the CAAM registers with the CAAM_SIZE value
639dfbc1f LF-6067 core: ls: add CAAM_SIZE values for LS platforms
42a864fd1 LF-6067 core: imx: add CAAM_SIZE values for i.MX platforms
6ebec0d2a LFOPTEE-159 drivers: imx_snvs: re-work security state for imx8m platforms
588403cd7 LFOPTEE-158 scripts: add imx93evk platform
18e11b984 LFOPTEE-158 core: imx: add support imx93evk platform
813af1a3c LFOPTEE-158 core: imx: add imx93 SoC ID
aea51ea0b LFOPTEE-158 core: imx: add imx93 registers
ede0b7183 LFOPTEE-158 core: imx: simplify the error macro message
742bee71c drivers: imx_snvs: fix the is_otpmk_valid() logic
6bb686a04 drivers: imx_snvs: fix SNVS register read operation
111482cfe LFOPTEE-146 drivers: imx_ele: add CRC computation and check for ELE calls
dd227c6c5 LFOPTEE-146 drivers: imx_ele: reformat code for consistency
907c2f86f LFOPTEE-146 drivers: imx_ele: ask the ELE for the unique device ID
b421225d9 LFOPTEE-146 drivers: remove imx_ele_mu_init() function
09e9d1b62 LFOPTEE-146 drivers: imx_mu: increase the message limit size
b6c4a695b core: plat-ls: correct CAAM JR interrupt numbers
13ce5deb6 LFOPTEE-147 core: imx: fix uninitialized return value
e5ea58a7b LFOPTEE-141 drivers: imx_mu: Disable foreign exception when sending message to MU
```
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
binutils 2.39 started to produce warning on RWX LOAD segments, which
breaks the linking process of optee-os.
Upstream optee-os package has patch ac425901 ("arm/optee-os: backport
RWX permission error patch") [1] integrated, which has been
backported in OP-TEE from PR #5475 [2] targeting master in upstream.
Port upstream optee-os commit into NXP fork of optee-os.
Link: [1]: https://github.com/jonmason/meta-arm/commit/ac4259011f4c8cec01191828014487ccc5de73ca
Link: [2]: https://github.com/OP-TEE/optee_os/pull/5474
Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
Cc: Tom Hochstein <tom.hochstein@nxp.com>
|
|
The PLATFORM_FLAVOR overrides for 6UL, 6ULL, and 6ULZ SOCs were
mistakenly added with a leading 'i'.
Fixes: b937d5b
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
|
|
For 32-bit ARM the OPTEE_ARCH assignment using the armv7a override is
redundant to the default assignment. Replace both with a single
assignment using the arm override.
Also, rework the TA_DEV_KIT_DIR build variable using OPTEE_ARCH.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
For 32-bit ARM the OPTEE_ARCH assignment using the armv7a override is
redundant to the default assignment. Replace both with a single
assignment using the arm override.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
- Fix hard-coded /usr with exec_prefix variable
- Parallel make works, remove work around
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
SRCREV is the same for NXP 5.15.5-1.0.0.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
- Drop patch 0001-arm-imx-fix-RPMB-header-include.patch that is now upstream
- Update platform list
- Fix hard-coded /usr/include with includedir variable
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
The imx8dx-mek machine is similar to imx8qxp-mek and so the mx8qxp override
was included in the MACHINEOVERRIDES hierarchy. This is non-standard, and
the rework of the SOC overrides didn't handle it properly, leading to a
build break:
```
Log data follows:
| DEBUG: Executing shell function do_compile
| NOTE: 8QX boot binary build
| cp: failed to access '/home/aquino/src/ossystems/oel-platform/build/tmp/work/imx8dx_mek-oel-linux/imx-boot/1.0-r0/git/iMX8DX/scfw_tcm.bin': Not a directory
| WARNING: /home/aquino/src/ossystems/oel-platform/build/tmp/work/imx8dx_mek-oel-linux/imx-boot/1.0-r0/temp/run.do_compile.1809636:179 exit 1 from 'cp /home/aquino/src/ossystems/oel-platform/build/tmp/deploy/images/imx8dx-mek/imx-boot$
tools/scfw_tcm.bin /home/aquino/src/ossystems/oel-platform/build/tmp/work/imx8dx_mek-oel-linux/imx-boot/1.0-r0/git/iMX8DX/scfw_tcm.bin'
| WARNING: Backtrace (BB generated script):
| #1: compile_mx8x, /home/aquino/src/ossystems/oel-platform/build/tmp/work/imx8dx_mek-oel-linux/imx-boot/1.0-r0/temp/run.do_compile.1809636, line 179
| #2: do_compile, /home/aquino/src/ossystems/oel-platform/build/tmp/work/imx8dx_mek-oel-linux/imx-boot/1.0-r0/temp/run.do_compile.1809636, line 151
| #3: main, /home/aquino/src/ossystems/oel-platform/build/tmp/work/imx8dx_mek-oel-linux/imx-boot/1.0-r0/temp/run.do_compile.1809636, line 189
ERROR: Task (/home/aquino/src/ossystems/oel-platform/sources/meta-freescale/recipes-bsp/imx-mkimage/imx-boot_1.0.bb:do_compile) failed with exit code '1'
```
Fix the problem by removing mx8qxp from the mx8dx hierarchy and adapting
existing mx8qxp overrides appropriately.
Fixes: #1027
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
When CFG_RPMB_FS=y, OP-TEE os no longer compiles because imx_rpmb.c
tries to include a header that doesn't exist. This issue seems linked
to a rework that allows to compile i.MX Secure Non-Volatile Storage
driver without RPMB.
```
| CC optee-os/3.15.0.imx-r0/build/core/arch/arm/plat-imx/imx_rpmb.o
| core/arch/arm/plat-imx/imx_rpmb.c:5:10: fatal error: drivers/imx_snvs.h: No such file or directory
| 5 | #include <drivers/imx_snvs.h>
| | ^~~~~~~~~~~~~~~~~~~~
| compilation terminated.
| make: *** [mk/compile.mk:159: optee-os/3.15.0.imx-r0/build/core/arch/arm/plat-imx/imx_rpmb.o] Error 1
| make: *** Waiting for unfinished jobs....
| CC optee-os/3.15.0.imx-r0/build/core/crypto/crypto.o
| CC optee-os/3.15.0.imx-r0/build/core/arch/arm/plat-imx/imx_dt.o
| make: Leaving directory 'optee-os/3.15.0.imx-r0/git'
| ERROR: oe_runmake failed
| WARNING: exit code 1 from a shell command.
ERROR: Task (optee-imx/optee-os_3.15.0.imx.bb:do_compile) failed with exit code '1'
```
This is fixed in the upcoming release NXP 5.15.5-1.0.0. Backport the
patch.
Fixes: #997
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Since OE-Core commit 9379f80f48 ("license/insane: Show warning for
obsolete license usage"), LICENSE field not containing SPDX identifiers
are treated with WARNING.
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers has been done on
the entire layer.
Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
|
|
The TAs in optee-os are required.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
- The logic for the tee-supplicant package doesn't work and the package
ends up empty. In fact, tee-supplicant belongs in the main package anyway.
- The main package already contains ${libdir}, so drop the redundant
assignment.
- The headers belong in the -dev package, so drop them from the main.
- Drop the un-necessary INSANE_SKIP settings.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
The optee software should be enabled by the machine feature. If the
machine feature is not there, but optee is built anyway, then something
is wrong and the build should fail.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Building against openssl from Yocto results in a build break:
```
| /opt/work/upstream/fsl-xwayland/tmp/work/cortexa53-crypto-fsl-linux/optee-test/3.15.0.imx-r0/git/host/xtest/regression_8100.c:133:17: error: 'ERR_get_error_line' is deprecated: Since OpeSL 3.0 [-Werror=deprecated-declarations]
| 133 | e = ERR_get_error_line(&f, &l);
| | ^
| In file included from /opt/work/upstream/fsl-xwayland/tmp/work/cortexa53-crypto-fsl-linux/optee-test/3.15.0.imx-r0/git/host/xtest/regression_8100.c:18:
| /opt/work/upstream/fsl-xwayland/tmp/work/cortexa53-crypto-fsl-linux/optee-test/3.15.0.imx-r0/recipe-sysroot/usr/include/openssl/err.h:411:15: note: declared here
| 411 | unsigned long ERR_get_error_line(const char **file, int *line);
| | ^~~~~~~~~~~~~~~~~~
```
Configure optee-test to build with its own openssl.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
As the license file states, the client applications (optee_test/host/*)
are provided under the GPL-2.0 license.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
- Use variables properly for the install and FILES
- Simplify the FILES update with an append
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
optee-os has some embedded TAs like AVB or PKCS11 that must be installed
in the filesystem.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
|
During the optee-os compilation, the gen_tee_bin.py script generates
a tee-raw.bin that is more space efficient and could replace
the tee.bin binary manually generated in the optee-os recipe
by objcpy.
This patch greatly reduces the size of tee.bin. On 64 bits platforms, we
observe a size descrease of ~68%, and on 32 bits platforms, a size
decrease of ~45%.
Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
|
Oleksandr Suvorov
Matteo Facchinetti
Stefano Viola
Khem Raj
Jun Zhu
Tom Hochstein
Andrey Zhizhikin
Otavio Salvador