Skip to content
  1. Jul 17, 2024
  2. Jul 16, 2024
  3. Jul 15, 2024
  4. Jul 11, 2024
  5. Jul 10, 2024
  6. Jul 09, 2024
    • David Hazi's avatar
      mcuboot: Using eval instead of regex for macro_parser · 83c022f4
      David Hazi authored and Antonio De Angelis's avatar Antonio De Angelis committed
      
      
      The old method has some limitations, for example
      when the macros using too many brackets.
      Python's built in eval function can handle most cases.
      
      Signed-off-by: David Hazi's avatarDávid Házi <david.hazi@arm.com>
      Change-Id: Id98967fae8d039f4b7b61d6e772dbb233ee7f450
      83c022f4
    • Raef Coles's avatar
      RSE: Add attack tracking counter · 722e8d69
      Raef Coles authored
      
      
      Add non-volatile counter which is used for tracking hardware events
      which could be indicative of a side-channel attack being performed
      against the device. Once this counter hits max value, prevent the RSE
      from booting in order to prevent further probing.
      
      Change-Id: Ia9281fd23ce3c20db67c7c185c8edaddd8efc96a
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      722e8d69
    • Raef Coles's avatar
      Platform: Add CC3XX tests to musca_s1 · 2775b9b5
      Raef Coles authored
      
      
      Add an option -DTEST_CC3XX=ON to enable running the CC3XX testsuite as
      part of the Musca-S1 Secure tests. Because the tests are config-aware, this
      will only test parts of the driver which are enabled by the platform.
      
      Change-Id: I27f9905c70738d47cc868b715b350d2ea1745835
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      2775b9b5
    • Raef Coles's avatar
      RSE: Integrate CC3XX testsuite into secure tests · f820c4a6
      Raef Coles authored
      
      
      Add an option -DTEST_CC3XX=ON to enable running the CC3XX testsuite as
      part of the RSE Secure tests. Because the tests are config-aware, this
      will only test parts of the driver which are enabled in the runtime.
      
      Change-Id: Ie6ca1d185d35330f74f1ee5fe920310ac9cc11fd
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      f820c4a6
    • Raef Coles's avatar
      RSE: Enable new CC3XX driver · 7e924897
      Raef Coles authored
      
      
      Use the newer CC3XX driver in the RSE runtime, instead of the older
      cc312-runtime driver. Reorganise the files in the RSE directory to make
      clear which files are used in which boot stage.
      
      Change-Id: I9c5a520ba428cdeeac83d7817162c5593eddde04
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      7e924897
    • Raef Coles's avatar
      RSE: Integrate CC3XX testsuite into BL1_1 tests · e396e929
      Raef Coles authored
      
      
      Add an option -DTEST_CC3XX=ON to enable running the CC3XX testsuite as
      part of the RSE BL1_1 tests. Because the tests are config-aware, this
      will only test parts of the driver which are enabled in BL1_1.
      
      Change-Id: I2f1c59a16b5f1025f8fb363e3bceb55dacad45e7
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      e396e929
    • Raef Coles's avatar
      CC3XX: Add driver testsuite · d3a9ab5e
      Raef Coles authored
      
      
      Add the development testsuite for the CC3XX driver into the driver
      directory, for use in further development and for validation of CC3XX
      hardware integration. Test cases are not complete, but cover a
      significant part of the driver functionality. Note that because this is
      an internal testsuite converted into a TF-M testsuite, the the grouping
      of the testcases is non-uniform, mostly because it's not possible to
      pass arguments into a tfm_test_t.
      
      Change-Id: I860edf66447b55715046e7bdcc0b21777e692666
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      d3a9ab5e
    • Raef Coles's avatar
      CC3XX: Rename driver dir from cc312-rom · 93d93bec
      Raef Coles authored
      
      
      Rename the driver to make it clear it is not a ROM-only driver and that
      it covers multiple CC3XX family devices. Move it into the generic
      arm/drivers directory to make it easier to eventually deprecated the
      platform/ext/accelerator directory. Simplify the cmake code for
      including the driver, and also split the driver into src and include
      directories.
      
      Change-Id: Ie089279f80d67a1ebe17658678ca19928c7bf12a
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      93d93bec
    • Raef Coles's avatar
      LCM: Don't erase ROTPK in RMA mode · 5c78f5c6
      Raef Coles authored
      
      
      As erasing the ROTPK prevents BL1_2 from booting, which prevents running
      RMA-LCS tests in the BL1_2 testsuite (or in the BL1_1 testsuite if they
      are both enabled and hence running in BL1_2). Not erasing the ROTPK is
      acceptable from a security standpoint as it is not secret information.
      
      Change-Id: I4be463a11cae20ae9bd7b5d364cd038518edfcfe
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      5c78f5c6
    • Raef Coles's avatar
      RSE: Fix RMA mode boot error · abbd03c0
      Raef Coles authored
      
      
      Because the hardware keys are write-only (read as zero) in RMA ICS, the
      OTP wiping code was failing with a write validation check failure. Alter
      the wiping code to use an unchecked write in order to prevent this.
      
      Change-Id: Ibbd8812a46e79948ead56791e7b12c73008d5d7d
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      abbd03c0
    • Raef Coles's avatar
      LCM: Change functions to void return · f888da5e
      Raef Coles authored
      
      
      Change functions which can never return an error to have a void return
      type, in order to prevent unneeded error handling code which cannot be
      optimized by the compiler without LTO.
      
      Change-Id: I8b7366436667e827e9ab7d42b6f02234b9dbf0d2
      Signed-off-by: default avatarRaef Coles <raef.coles@arm.com>
      f888da5e
Loading