From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tom Rini Date: Sat, 3 Dec 2016 20:06:55 -0500 Subject: [U-Boot] [U-Boot,v3,4/7] arm: omap5: Add TEE loading support In-Reply-To: <20161129223326.3115-5-afd@ti.com> References: <20161129223326.3115-5-afd@ti.com> Message-ID: <20161204010655.GD4248@bill-the-cat> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On Tue, Nov 29, 2016 at 04:33:23PM -0600, Andrew F. Davis wrote: > From: Harinarayan Bhatta > > secure_tee_install is used to install and initialize a secure TEE OS such as > Linaro OP-TEE into the secure world. This function takes in the address > where the signed TEE image is loaded as an argument. The signed TEE image > consists of a header (struct tee_header), TEE code+data followed by the > signature generated using image signing tool from TI security development > package (SECDEV). Refer to README.ti-secure for more information. > > This function uses 2 new secure APIs. > > 1. PPA_SERV_HAL_TEE_LOAD_MASTER - Must be called on CPU Core 0. Protected > memory for TEE must be reserved before calling this function. This API > needs arguments filled into struct ppa_tee_load_info. The TEE image is > authenticated and if there are no errors, the control passes to the TEE > entry point. > > 2. PPA_SERV_HAL_TEE_LOAD_SLAVE - Called on other CPU cores only after > a TEE_LOAD_MASTER call. Takes no arguments. Checks if TEE was > successfully loaded (on core 0) and transfers control to the same TEE > entry point. > > The code at TEE entry point is expected perform OS initialization steps > and return back to non-secure world (U-Boot). > > Signed-off-by: Harinarayan Bhatta > Signed-off-by: Andrew F. Davis > Reviewed-by: Tom Rini Applied to u-boot/master, thanks! -- Tom -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: