[U-Boot] [U-Boot,v3,4/7] arm: omap5: Add TEE loading support
Tom Rini
trini at konsulko.com
Sun Dec 4 02:06:55 CET 2016
On Tue, Nov 29, 2016 at 04:33:23PM -0600, Andrew F. Davis wrote:
> From: Harinarayan Bhatta <harinarayan at ti.com>
>
> secure_tee_install is used to install and initialize a secure TEE OS such as
> Linaro OP-TEE into the secure world. This function takes in the address
> where the signed TEE image is loaded as an argument. The signed TEE image
> consists of a header (struct tee_header), TEE code+data followed by the
> signature generated using image signing tool from TI security development
> package (SECDEV). Refer to README.ti-secure for more information.
>
> This function uses 2 new secure APIs.
>
> 1. PPA_SERV_HAL_TEE_LOAD_MASTER - Must be called on CPU Core 0. Protected
> memory for TEE must be reserved before calling this function. This API
> needs arguments filled into struct ppa_tee_load_info. The TEE image is
> authenticated and if there are no errors, the control passes to the TEE
> entry point.
>
> 2. PPA_SERV_HAL_TEE_LOAD_SLAVE - Called on other CPU cores only after
> a TEE_LOAD_MASTER call. Takes no arguments. Checks if TEE was
> successfully loaded (on core 0) and transfers control to the same TEE
> entry point.
>
> The code at TEE entry point is expected perform OS initialization steps
> and return back to non-secure world (U-Boot).
>
> Signed-off-by: Harinarayan Bhatta <harinarayan at ti.com>
> Signed-off-by: Andrew F. Davis <afd at ti.com>
> Reviewed-by: Tom Rini <trini at konsulko.com>
Applied to u-boot/master, thanks!
--
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20161203/75e81ece/attachment.sig>
More information about the U-Boot
mailing list