]> git.baikalelectronics.ru Git - arm-tf.git/commit
feat(stm32mp1): add the TRUSTED_BOARD_BOOT support
authorLionel Debieve <lionel.debieve@foss.st.com>
Wed, 5 Oct 2022 14:47:03 +0000 (16:47 +0200)
committerLionel Debieve <lionel.debieve@foss.st.com>
Mon, 14 Nov 2022 10:25:01 +0000 (11:25 +0100)
commitbeb625f90bfd1858b9d413cae67457e57c79a118
treec2c728d172c0e92e7d381c83a1feadac5186566b
parent89c07747d0396b92c83af8736ff49ef8c09bc176
feat(stm32mp1): add the TRUSTED_BOARD_BOOT support

Add the support of the TRUSTED_BOARD_BOOT to authenticate the loaded
FIP using platform CoT management.
It adds TBB platform definition, redefining the standard image ID in
order to decrease requested size in BL2 binary.
Authentication will use mbedTLS library for parsing certificate
configured with a platform configuration.

Change-Id: I9da66b915c5e9e9293fccfce92bef2434da1e430
Signed-off-by: Nicolas Toromanoff <nicolas.toromanoff@st.com>
Signed-off-by: Lionel Debieve <lionel.debieve@foss.st.com>
plat/st/common/stm32mp_fconf_io.c
plat/st/common/stm32mp_trusted_boot.c [new file with mode: 0644]
plat/st/stm32mp1/include/plat_def_fip_uuid.h [new file with mode: 0644]
plat/st/stm32mp1/include/plat_tbbr_img_def.h [new file with mode: 0644]
plat/st/stm32mp1/include/stm32mp1_mbedtls_config.h [new file with mode: 0644]
plat/st/stm32mp1/include/tbbr/stm32mp1_tbb_cert.h [new file with mode: 0644]
plat/st/stm32mp1/plat_def_uuid_config.c [new file with mode: 0644]
plat/st/stm32mp1/platform.mk
plat/st/stm32mp1/stm32mp1_def.h
plat/st/stm32mp1/stm32mp1_fip_def.h
plat/st/stm32mp1/stm32mp1_tbb_cert.c [new file with mode: 0644]