* [PATCH 0/2] docs: AM62x: Remove SW_PRNG Flag for OPTEE
@ 2023-12-01 10:29 Dhruva Gole
2023-12-01 10:29 ` [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag " Dhruva Gole
` (2 more replies)
0 siblings, 3 replies; 9+ messages in thread
From: Dhruva Gole @ 2023-12-01 10:29 UTC (permalink / raw)
To: Tom Rini
Cc: u-boot, Vignesh Raghavendra, Dhruva Gole, nm, Kamlesh,
Vibhore Vardhan, Wadim Egorov
The CFG_WITH_SOFTWARE_PRNG option was needed once when there were some
issues with system crashes/ hangs after a suspend-resume cycle. However
this seems to no longer be the case with newer firmwares, and this
config is not needed for basic boot support of the SoC either, hence
remove it from the docs.
Cc: Kamlesh <kamlesh@ti.com>
Cc: Vibhore Vardhan <vibhore@ti.com>
Cc: Wadim Egorov <w.egorov@phytec.de>
Dhruva Gole (2):
doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
doc: board: ti: am62x_sk: Remove SW_PRNG Flag for OPTEE
doc/board/beagle/am62x_beagleplay.rst | 1 -
doc/board/ti/am62x_sk.rst | 1 -
2 files changed, 2 deletions(-)
--
2.34.1
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
2023-12-01 10:29 [PATCH 0/2] docs: AM62x: Remove SW_PRNG Flag for OPTEE Dhruva Gole
@ 2023-12-01 10:29 ` Dhruva Gole
2023-12-04 19:29 ` Nishanth Menon
2023-12-01 10:29 ` [PATCH 2/2] doc: board: ti: am62x_sk: Remove SW_PRNG Flag " Dhruva Gole
2023-12-04 19:30 ` [PATCH 0/2] docs: AM62x: " Nishanth Menon
2 siblings, 1 reply; 9+ messages in thread
From: Dhruva Gole @ 2023-12-01 10:29 UTC (permalink / raw)
To: Tom Rini; +Cc: u-boot, Vignesh Raghavendra, Dhruva Gole, nm
Delete the flag CFG_WITH_SOFTWARE_PRNG as it's not necessary/ boot
requirement for this SoC
Signed-off-by: Dhruva Gole <d-gole@ti.com>
---
doc/board/beagle/am62x_beagleplay.rst | 1 -
1 file changed, 1 deletion(-)
diff --git a/doc/board/beagle/am62x_beagleplay.rst b/doc/board/beagle/am62x_beagleplay.rst
index 7784e62b0b71..50d7d3c620d7 100644
--- a/doc/board/beagle/am62x_beagleplay.rst
+++ b/doc/board/beagle/am62x_beagleplay.rst
@@ -63,7 +63,6 @@ Set the variables corresponding to this platform:
# we dont use any extra TFA parameters
unset TFA_EXTRA_ARGS
export OPTEE_PLATFORM=k3-am62x
- export OPTEE_EXTRA_ARGS="CFG_WITH_SOFTWARE_PRNG=y"
.. include:: ../ti/am62x_sk.rst
:start-after: .. am62x_evm_rst_include_start_build_steps
--
2.34.1
^ permalink raw reply related [flat|nested] 9+ messages in thread* Re: [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
2023-12-01 10:29 ` [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag " Dhruva Gole
@ 2023-12-04 19:29 ` Nishanth Menon
2023-12-05 14:46 ` Andrew Davis
0 siblings, 1 reply; 9+ messages in thread
From: Nishanth Menon @ 2023-12-04 19:29 UTC (permalink / raw)
To: Dhruva Gole; +Cc: Tom Rini, u-boot, Vignesh Raghavendra
On 15:59-20231201, Dhruva Gole wrote:
> Delete the flag CFG_WITH_SOFTWARE_PRNG as it's not necessary/ boot
> requirement for this SoC
>
> Signed-off-by: Dhruva Gole <d-gole@ti.com>
> ---
> doc/board/beagle/am62x_beagleplay.rst | 1 -
> 1 file changed, 1 deletion(-)
>
> diff --git a/doc/board/beagle/am62x_beagleplay.rst b/doc/board/beagle/am62x_beagleplay.rst
> index 7784e62b0b71..50d7d3c620d7 100644
> --- a/doc/board/beagle/am62x_beagleplay.rst
> +++ b/doc/board/beagle/am62x_beagleplay.rst
> @@ -63,7 +63,6 @@ Set the variables corresponding to this platform:
> # we dont use any extra TFA parameters
> unset TFA_EXTRA_ARGS
> export OPTEE_PLATFORM=k3-am62x
> - export OPTEE_EXTRA_ARGS="CFG_WITH_SOFTWARE_PRNG=y"
>
> .. include:: ../ti/am62x_sk.rst
> :start-after: .. am62x_evm_rst_include_start_build_steps
> --
> 2.34.1
>
NAK. RNG is needed to seed standard distros.
--
Regards,
Nishanth Menon
Key (0xDDB5849D1736249D) / Fingerprint: F8A2 8693 54EB 8232 17A3 1A34 DDB5 849D 1736 249D
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
2023-12-04 19:29 ` Nishanth Menon
@ 2023-12-05 14:46 ` Andrew Davis
2023-12-05 15:22 ` Nishanth Menon
0 siblings, 1 reply; 9+ messages in thread
From: Andrew Davis @ 2023-12-05 14:46 UTC (permalink / raw)
To: Nishanth Menon, Dhruva Gole; +Cc: Tom Rini, u-boot, Vignesh Raghavendra
On 12/4/23 1:29 PM, Nishanth Menon wrote:
> On 15:59-20231201, Dhruva Gole wrote:
>> Delete the flag CFG_WITH_SOFTWARE_PRNG as it's not necessary/ boot
>> requirement for this SoC
>>
>> Signed-off-by: Dhruva Gole <d-gole@ti.com>
>> ---
>> doc/board/beagle/am62x_beagleplay.rst | 1 -
>> 1 file changed, 1 deletion(-)
>>
>> diff --git a/doc/board/beagle/am62x_beagleplay.rst b/doc/board/beagle/am62x_beagleplay.rst
>> index 7784e62b0b71..50d7d3c620d7 100644
>> --- a/doc/board/beagle/am62x_beagleplay.rst
>> +++ b/doc/board/beagle/am62x_beagleplay.rst
>> @@ -63,7 +63,6 @@ Set the variables corresponding to this platform:
>> # we dont use any extra TFA parameters
>> unset TFA_EXTRA_ARGS
>> export OPTEE_PLATFORM=k3-am62x
>> - export OPTEE_EXTRA_ARGS="CFG_WITH_SOFTWARE_PRNG=y"
>>
>> .. include:: ../ti/am62x_sk.rst
>> :start-after: .. am62x_evm_rst_include_start_build_steps
>> --
>> 2.34.1
>>
> NAK. RNG is needed to seed standard distros.
You have this backwards, setting WITH_SOFTWARE_PRNG=y forces the SW
RNG, disabling the HW RNG. Without this line the HW RNG is the default.
Andrew
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
2023-12-05 14:46 ` Andrew Davis
@ 2023-12-05 15:22 ` Nishanth Menon
2023-12-05 16:38 ` Andrew Davis
0 siblings, 1 reply; 9+ messages in thread
From: Nishanth Menon @ 2023-12-05 15:22 UTC (permalink / raw)
To: Andrew Davis; +Cc: Dhruva Gole, Tom Rini, u-boot, Vignesh Raghavendra
On 08:46-20231205, Andrew Davis wrote:
> On 12/4/23 1:29 PM, Nishanth Menon wrote:
> > On 15:59-20231201, Dhruva Gole wrote:
> > > Delete the flag CFG_WITH_SOFTWARE_PRNG as it's not necessary/ boot
> > > requirement for this SoC
> > >
> > > Signed-off-by: Dhruva Gole <d-gole@ti.com>
> > > ---
> > > doc/board/beagle/am62x_beagleplay.rst | 1 -
> > > 1 file changed, 1 deletion(-)
> > >
> > > diff --git a/doc/board/beagle/am62x_beagleplay.rst b/doc/board/beagle/am62x_beagleplay.rst
> > > index 7784e62b0b71..50d7d3c620d7 100644
> > > --- a/doc/board/beagle/am62x_beagleplay.rst
> > > +++ b/doc/board/beagle/am62x_beagleplay.rst
> > > @@ -63,7 +63,6 @@ Set the variables corresponding to this platform:
> > > # we dont use any extra TFA parameters
> > > unset TFA_EXTRA_ARGS
> > > export OPTEE_PLATFORM=k3-am62x
> > > - export OPTEE_EXTRA_ARGS="CFG_WITH_SOFTWARE_PRNG=y"
> > > .. include:: ../ti/am62x_sk.rst
> > > :start-after: .. am62x_evm_rst_include_start_build_steps
> > > --
> > > 2.34.1
> > >
> > NAK. RNG is needed to seed standard distros.
>
> You have this backwards, setting WITH_SOFTWARE_PRNG=y forces the SW
> RNG, disabling the HW RNG. Without this line the HW RNG is the default.
That is not the rationale with which the series was posted. I would
prefer we use HW RNG by default. but as I understand there are a bunch
of f/w bugs preventing us from doing so. if they are resolved, then the
commit message argument should be that the bugs are fixed, so we can
easily use then with f/w version x.y.z onwards.
--
Regards,
Nishanth Menon
Key (0xDDB5849D1736249D) / Fingerprint: F8A2 8693 54EB 8232 17A3 1A34 DDB5 849D 1736 249D
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
2023-12-05 15:22 ` Nishanth Menon
@ 2023-12-05 16:38 ` Andrew Davis
0 siblings, 0 replies; 9+ messages in thread
From: Andrew Davis @ 2023-12-05 16:38 UTC (permalink / raw)
To: Nishanth Menon; +Cc: Dhruva Gole, Tom Rini, u-boot, Vignesh Raghavendra
On 12/5/23 9:22 AM, Nishanth Menon wrote:
> On 08:46-20231205, Andrew Davis wrote:
>> On 12/4/23 1:29 PM, Nishanth Menon wrote:
>>> On 15:59-20231201, Dhruva Gole wrote:
>>>> Delete the flag CFG_WITH_SOFTWARE_PRNG as it's not necessary/ boot
>>>> requirement for this SoC
>>>>
>>>> Signed-off-by: Dhruva Gole <d-gole@ti.com>
>>>> ---
>>>> doc/board/beagle/am62x_beagleplay.rst | 1 -
>>>> 1 file changed, 1 deletion(-)
>>>>
>>>> diff --git a/doc/board/beagle/am62x_beagleplay.rst b/doc/board/beagle/am62x_beagleplay.rst
>>>> index 7784e62b0b71..50d7d3c620d7 100644
>>>> --- a/doc/board/beagle/am62x_beagleplay.rst
>>>> +++ b/doc/board/beagle/am62x_beagleplay.rst
>>>> @@ -63,7 +63,6 @@ Set the variables corresponding to this platform:
>>>> # we dont use any extra TFA parameters
>>>> unset TFA_EXTRA_ARGS
>>>> export OPTEE_PLATFORM=k3-am62x
>>>> - export OPTEE_EXTRA_ARGS="CFG_WITH_SOFTWARE_PRNG=y"
>>>> .. include:: ../ti/am62x_sk.rst
>>>> :start-after: .. am62x_evm_rst_include_start_build_steps
>>>> --
>>>> 2.34.1
>>>>
>>> NAK. RNG is needed to seed standard distros.
>>
>> You have this backwards, setting WITH_SOFTWARE_PRNG=y forces the SW
>> RNG, disabling the HW RNG. Without this line the HW RNG is the default.
>
>
> That is not the rationale with which the series was posted. I would
> prefer we use HW RNG by default. but as I understand there are a bunch
> of f/w bugs preventing us from doing so. if they are resolved, then the
> commit message argument should be that the bugs are fixed, so we can
> easily use then with f/w version x.y.z onwards.
There was a single FW bug that caused suspend/resume to fail when OP-TEE
was using the HW RNG. The HW RNG always worked, disabling it was a hack
that allowed us to still demo suspend/resume, not sure how that ended up
in this documentation.
The fact we disabled a security feature to workaround a non-security bug
shows a lack of good judgement on our part IMHO. Product security is our
top priority.
Andrew
^ permalink raw reply [flat|nested] 9+ messages in thread
* [PATCH 2/2] doc: board: ti: am62x_sk: Remove SW_PRNG Flag for OPTEE
2023-12-01 10:29 [PATCH 0/2] docs: AM62x: Remove SW_PRNG Flag for OPTEE Dhruva Gole
2023-12-01 10:29 ` [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag " Dhruva Gole
@ 2023-12-01 10:29 ` Dhruva Gole
2023-12-04 19:30 ` [PATCH 0/2] docs: AM62x: " Nishanth Menon
2 siblings, 0 replies; 9+ messages in thread
From: Dhruva Gole @ 2023-12-01 10:29 UTC (permalink / raw)
To: Tom Rini; +Cc: u-boot, Vignesh Raghavendra, Dhruva Gole, nm
This SoC does not require the CFG_WITH_SOFTWARE_PRNG option to be set
for base boot support, hence remove it from the U-Boot documentation.
Signed-off-by: Dhruva Gole <d-gole@ti.com>
---
doc/board/ti/am62x_sk.rst | 1 -
1 file changed, 1 deletion(-)
diff --git a/doc/board/ti/am62x_sk.rst b/doc/board/ti/am62x_sk.rst
index b12dc85f06b5..35d759e806c0 100644
--- a/doc/board/ti/am62x_sk.rst
+++ b/doc/board/ti/am62x_sk.rst
@@ -84,7 +84,6 @@ Set the variables corresponding to this platform:
# we dont use any extra TFA parameters
unset TFA_EXTRA_ARGS
export OPTEE_PLATFORM=k3-am62x
- export OPTEE_EXTRA_ARGS="CFG_WITH_SOFTWARE_PRNG=y"
.. am62x_evm_rst_include_start_build_steps
--
2.34.1
^ permalink raw reply related [flat|nested] 9+ messages in thread
* Re: [PATCH 0/2] docs: AM62x: Remove SW_PRNG Flag for OPTEE
2023-12-01 10:29 [PATCH 0/2] docs: AM62x: Remove SW_PRNG Flag for OPTEE Dhruva Gole
2023-12-01 10:29 ` [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag " Dhruva Gole
2023-12-01 10:29 ` [PATCH 2/2] doc: board: ti: am62x_sk: Remove SW_PRNG Flag " Dhruva Gole
@ 2023-12-04 19:30 ` Nishanth Menon
2023-12-05 5:27 ` Dhruva Gole
2 siblings, 1 reply; 9+ messages in thread
From: Nishanth Menon @ 2023-12-04 19:30 UTC (permalink / raw)
To: Dhruva Gole
Cc: Tom Rini, u-boot, Vignesh Raghavendra, Kamlesh, Vibhore Vardhan,
Wadim Egorov
On 15:59-20231201, Dhruva Gole wrote:
> The CFG_WITH_SOFTWARE_PRNG option was needed once when there were some
> issues with system crashes/ hangs after a suspend-resume cycle. However
> this seems to no longer be the case with newer firmwares, and this
> config is not needed for basic boot support of the SoC either, hence
> remove it from the docs.
>
> Cc: Kamlesh <kamlesh@ti.com>
> Cc: Vibhore Vardhan <vibhore@ti.com>
> Cc: Wadim Egorov <w.egorov@phytec.de>
>
> Dhruva Gole (2):
> doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
> doc: board: ti: am62x_sk: Remove SW_PRNG Flag for OPTEE
>
> doc/board/beagle/am62x_beagleplay.rst | 1 -
> doc/board/ti/am62x_sk.rst | 1 -
> 2 files changed, 2 deletions(-)
>
NAK to the series. RNG seed is needed for KASLR. either enable h/w RNG
or at least enable S/W RNG in OPTEE.
--
Regards,
Nishanth Menon
Key (0xDDB5849D1736249D) / Fingerprint: F8A2 8693 54EB 8232 17A3 1A34 DDB5 849D 1736 249D
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [PATCH 0/2] docs: AM62x: Remove SW_PRNG Flag for OPTEE
2023-12-04 19:30 ` [PATCH 0/2] docs: AM62x: " Nishanth Menon
@ 2023-12-05 5:27 ` Dhruva Gole
0 siblings, 0 replies; 9+ messages in thread
From: Dhruva Gole @ 2023-12-05 5:27 UTC (permalink / raw)
To: Nishanth Menon
Cc: Tom Rini, u-boot, Vignesh Raghavendra, Kamlesh, Vibhore Vardhan,
Wadim Egorov
Hi Nishanth,
On 05/12/23 01:00, Nishanth Menon wrote:
> On 15:59-20231201, Dhruva Gole wrote:
>> The CFG_WITH_SOFTWARE_PRNG option was needed once when there were some
>> issues with system crashes/ hangs after a suspend-resume cycle. However
>> this seems to no longer be the case with newer firmwares, and this
>> config is not needed for basic boot support of the SoC either, hence
>> remove it from the docs.
>>
>> Cc: Kamlesh <kamlesh@ti.com>
>> Cc: Vibhore Vardhan <vibhore@ti.com>
>> Cc: Wadim Egorov <w.egorov@phytec.de >>
>> Dhruva Gole (2):
>> doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag for OPTEE
>> doc: board: ti: am62x_sk: Remove SW_PRNG Flag for OPTEE
>>
>> doc/board/beagle/am62x_beagleplay.rst | 1 -
>> doc/board/ti/am62x_sk.rst | 1 -
>> 2 files changed, 2 deletions(-)
>>
>
> NAK to the series. RNG seed is needed for KASLR. either enable h/w RNG
@Wadim: Please take note and ignore my previous suggestion to you to
remove this line, keep this line as is.
> or at least enable S/W RNG in OPTEE.
>
Agreed, I will send a patch to use HWRNG later on then. For now let's
just keep the PRNG enabled in these docs.
--
Thanks and Regards,
Dhruva Gole
^ permalink raw reply [flat|nested] 9+ messages in thread
end of thread, other threads:[~2023-12-05 16:38 UTC | newest]
Thread overview: 9+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-12-01 10:29 [PATCH 0/2] docs: AM62x: Remove SW_PRNG Flag for OPTEE Dhruva Gole
2023-12-01 10:29 ` [PATCH 1/2] doc: board: beagle: am62x_beagleplay: Delete SW_PRNG flag " Dhruva Gole
2023-12-04 19:29 ` Nishanth Menon
2023-12-05 14:46 ` Andrew Davis
2023-12-05 15:22 ` Nishanth Menon
2023-12-05 16:38 ` Andrew Davis
2023-12-01 10:29 ` [PATCH 2/2] doc: board: ti: am62x_sk: Remove SW_PRNG Flag " Dhruva Gole
2023-12-04 19:30 ` [PATCH 0/2] docs: AM62x: " Nishanth Menon
2023-12-05 5:27 ` Dhruva Gole
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.