[PATCH v3 0/6] ATF and OP-TEE Firewalling for K3 devices.

[Manorit Chawdhry]

K3 devices have firewalls that are used to prevent illegal accesses to
memory regions that are deemed secure. The series prevents the illegal
accesses to ATF and OP-TEE regions that are present in different K3
devices. 

AM62X, AM62AX and AM64X are currently in hold due to some firewall
configurations that our System Controller (TIFS) needs to handle. 
The devices that are not configured with the firewalling nodes will not
be affected and can continue to work fine until the firewall nodes are
added so will be a non-blocking merge. 

Test Logs: https://gist.github.com/manorit2001/c929e6ccab03f55b3828896fbd04184b

Signed-off-by: Manorit Chawdhry <m-chawdhry at ti.com>
---
Changes in v3:

* Andrew
- Fix tabs and spaces

* Simon
- Remove parantheses wherever suggested
- Take the ideas for GetHexOctet and remove the patch
- Add Reviewed-by

- Align the commit messages for all the commits
- Fix comment styling
- Remove am62x also as it has some dhcp failure with firewalls likely
  due to TIFS configurations
- Rename 311_ti_secure_firewall.dts to 319_ti_secure_firewall.dts after
  rebase.
- Migrate to non-RFC version
- Link to v2: https://serenity.dal.design.ti.com/lore/linux-patch-review/20230926-binman-firewalling-v2-0-b1a084ec634d@ti.com

---
Manorit Chawdhry (6):
      binman: ti-secure: Add support for firewalling entities
      binman: ftest: Add test for ti-secure firewall node
      binman: k3: Add k3-security.h and include it in k3-binman.dtsi
      binman: j721e: Add firewall configurations
      binman: j721s2: Add firewall configurations
      binman: j7200: Add firewall configurations

 arch/arm/dts/k3-binman.dtsi                  |   2 +
 arch/arm/dts/k3-j7200-binman.dtsi            | 143 ++++++++++++++++++
 arch/arm/dts/k3-j721e-binman.dtsi            | 187 ++++++++++++++++++++++++
 arch/arm/dts/k3-j721s2-binman.dtsi           | 208 +++++++++++++++++++++++++++
 arch/arm/dts/k3-security.h                   |  58 ++++++++
 tools/binman/btool/openssl.py                |  16 ++-
 tools/binman/etype/ti_secure.py              |  85 +++++++++++
 tools/binman/etype/x509_cert.py              |   3 +-
 tools/binman/ftest.py                        |  12 ++
 tools/binman/test/319_ti_secure_firewall.dts |  28 ++++
 10 files changed, 739 insertions(+), 3 deletions(-)
---
base-commit: b05a184379631d13c4a49e423aa1324dc1ae6158
change-id: 20230724-binman-firewalling-65ecdb23ec0a

Best regards,
-- 
Manorit Chawdhry <m-chawdhry at ti.com>