Rename 'tfm_run_instruction.rst' to
'run_tfm_examples_on_arm_platforms.rst' to reflect the content better.

Signed-off-by: Summer Qin <summer.qin@arm.com>
Change-Id: I0ae23907ab05fe08ba191bb123507d53a7af48e1

In particular, the error is:

    ld: platform/ext/target/arm/mps3/an547/target_cfg.c:223:
    undefined reference to `SPMLOG_ERRMSG'

And this happens because the macro SMPLOG_ERRMSG is not defined, so
it is assumed to be an externally linked function, and the linker is
unable to find it.

This patch fixes the problem.

Change-Id: Ie7115bc3e6f14e84bd21d9ec9f674cd043a0a4ba
Signed-off-by: Jimmy Brisson <jimmy.brisson@linaro.org>

Abstract the introduction of documentation generation into
a new file.

Signed-off-by: Summer Qin <summer.qin@arm.com>
Change-Id: I0a47e21b426dbb53e8165d08c81e9174958cf6d0

- The implementation details, necessary support in manifest
  tooling, and programming API change for stateless service.
- Application recommendation of developing stateless RoT
  services.

Change-Id: Ibc8e9e68353212d3704b960dda7a2752464cad1e
Signed-off-by: Mingyang Sun <mingyang.sun@arm.com>

In isolation level 1, all partitions run in privileged mode.
This patch fixes the tfm_spm_partition_get_privileged_mode() function.

Change-Id: I536174143bf51fdcdcbf77b2769f50eab4a8c86c
Signed-off-by: Kevin Peng <kevin.peng@arm.com>

This patch bumps up the test repo version for IRQ testing refactor.

Change-Id: I3b7229869721b3e42bfa6daec56e4aa58f9e4cbb
Signed-off-by: Kevin Peng <kevin.peng@arm.com>

This patch:
 - Replaces the tfm_irq_test_service_1 with the tfm_slih_test_service
 - Docs update:
   - Remove the out-of-date tfm_non-secure_interrupt_handling.rst
   - Remove IRQ test part in core_test_services_integration_guide.rst
     as core test does not participate in IRQ testing anymore.

Note:
  The new SLIH testing does not support Library Model.

Change-Id: I578d43ca7a363cdcb298226cc9ebad5f7b66fb48
Signed-off-by: Kevin Peng <kevin.peng@arm.com>

Sphinx uses "autosectionlable" extension for generating the section
labels automatically. The max depth is set to 2 for level 2 headers
only. That section which is under level 2 will not have the reference
label. This caused the broken links in the documentation.

This patch creates lables for the section which is under level 2 and
referenced by other places in the documentation.

Signed-off-by: David Wang <david.wang@arm.com>
Change-Id: I636922c624108e850635e683719f5ac035e0880b

Mark Horvath authored Mar 12, 2021 and Anton Komlev committed Jun 21, 2021

CC312 has a limitation that the maximum size of a data block to be
hashed is 0xFFFF. To overcome this limitation the hash of big input
buffers is calculated with more calls to CC312, passing only a smaller
part of the input at a time.

Signed-off-by: Mark Horvath <mark.horvath@arm.com>
Change-Id: Idb7a0c997bbe66b57d63f5d646cf6fdabd2ee179

Priority boost for Secure IRQ is enabled in TF-M - NS IRQ priorities
values are mapped to 0x80 - 0xFF (lower priority).
So the lowest priority value for SPE is 0x80.
It is not need to "-1" because exception preemption does not happen
between exceptions with same priority values.

The lowest priority exception is the PendSV in SPE.
This patch fixes its priority value by removing the "-1".

Change-Id: I1d340cda939f7785d684428bcbb54c7aea4445c4
Signed-off-by: Kevin Peng <kevin.peng@arm.com>

The ER_TFM_CODE should only pick the real TF-M code,
rather than anything that does not match any pattern.

Signed-off-by: Xinyu Zhang <xinyu.zhang@arm.com>
Change-Id: I13f8dba385c14fed06a4910d48859a25a0b5bd6f

Since this code was written, GCC now compiles for the M55. From what I
can tell (by diffing scatter files), the an524 and the an547 have very
similar code layout. So the linker scripts used are from the an524.
This also includes a note in the documentation about the required gcc
version.

Change-Id: I365ad3f934956a46756293694a44cca08ea25898
Signed-off-by: Jimmy Brisson <jimmy.brisson@linaro.org>

Moving the arm platforms under arm directory broke some include paths
for BL0.

Change-Id: Ief3cf71afe5700099da1351f6605ffc060b8edde
Signed-off-by: Mark Horvath <mark.horvath@arm.com>

Update tf-m-tests to align attestation test service changes.

Change-Id: I97e36c303674b8c83b5f729007ea6fa1803b8c25
Signed-off-by: David Hu <david.hu@arm.com>

We introduce a compile-time option to control whether to disable
the API for tfm_crypto_generate_random, independent of the key
derivation. In addition to that, the above API function is moved
into its own source file.

The change allows us to disable or enable the random number
generation API function independent of whether we disable or
enable the key derivation. This introduces some additional
flexibility to the user, who can now enable the random number
generation API while they can disable the key derivation API
family.

The change does not introduce behavioral changes.

Change-Id: I7306caa38476ff1a67c918ddb9e5780e25cebd27
Signed-off-by: Ioannis Glaropoulos <Ioannis.Glaropoulos@nordicsemi.no>

Optimise tfm_get_caller_client_id() secure API for Library model
in LEVEL 1. This reduces the number of SVC calls in a workload
like the Regression test.

Signed-off-by: Antonio de Angelis <antonio.deangelis@arm.com>
Change-Id: If0ce614de2a1e37b4da0369661ab2e4c4c179b7c

The ERROR_MSG() macro is still used through the code
although is not defined anymore. Use the SPMLOG_ERRMSG
macro instead to provide error message prints.

Signed-off-by: Antonio de Angelis <antonio.deangelis@arm.com>
Change-Id: If23455e6f008b0ecc471579591c5d1e2e95cdccb

Enable the Sphinx tabs extension and fix the 'sphinx-trd-theme' typo.

Signed-off-by: Summer Qin <summer.qin@arm.com>
Change-Id: I18568465804f93e6cd2b71e344a673580cec993b

Move build instruction document and user guide document from getting
started into technical references folder. Rename 'tfm_user_guide.rst'
to 'tfm_run_instruction.rst'. This will make the document structure
more clear for readers.

Signed-off-by: Summer Qin <summer.qin@arm.com>
Change-Id: I69d46151f2cb97c828c1b82775ffd1af9032ed45

This patch fixes some build warnings

Change-Id: I749f92f7014433afede634771849242a80fc00ff
Signed-off-by: Kevin Peng <kevin.peng@arm.com>

Change-Id: I50ea7e21cec5ab39c262827c0b3e15bc2603fce6
Signed-off-by: Shawn Shan <Shawn.Shan@arm.com>

Stateless services need to be able to be found by SID. This is
required in 'psa_connect()' and 'psa_version()' API.
Error check order in 'psa_connect()' is also updated: If a
stateless service SID is detected, block the connection directly.

Change-Id: If5182d72986173eb33ff1af99dff79cb3661f0fe
Signed-off-by: Mingyang Sun <mingyang.sun@arm.com>

As mentioned in FF-M, if "version" attribute is not specified,
default value is "1", if "version_policy" is not specified,
default value is "STRICT".

Change-Id: Iefc406d966a951e8e827c67abbecdf2522ba2cbb
Signed-off-by: Mingyang Sun <mingyang.sun@arm.com>

According to line 49, attest_hal.c is added twice in target platform_s.
Remove this line because this file should only be added
when PLATFORM_DUMMY_ATTEST_HAL is enabled.

Signed-off-by: Xinyu Zhang <xinyu.zhang@arm.com>
Change-Id: Ie4df4763b9473a724eb4267f26b67147022e7639

Move tools documents from getting started to technical references
folder.

Signed-off-by: Summer Qin <summer.qin@arm.com>
Change-Id: I8ed8e2fe5c3a9de4afa5ceeb04fbea38562b2f6c

Currently, the PS partition relies on the ITS partition to access the flash
file system. So build time error will happen if ITS partition is not enabled
while PS partition is enabled. This commit adds checking the status of the
two partitions at configure time.

Change-Id: I3d7a30243209a1400524135a81bbc6037ec9d18f
Signed-off-by: Sherry Zhang <sherry.zhang2@arm.com>

Change-Id: I7b8946ab6aa1939b130be9ccee618a6d09e17684
Signed-off-by: Michel Jaouen <michel.jaouen@st.com>

It extends and makes the path optional, to keep compatibility with
user using default compiler name

Change-Id: I848b93940ca40eba0fb19471acc472b4d7b18309
Signed-off-by: Michel Jaouen <michel.jaouen@st.com>

The variable 'attest_res' and 'psa_curve' are not used in the function
attest_calc_instance_id, remove them.

Change-Id: I0e259c29f3fc2c88915ad99c22daf4d639505293
Signed-off-by: Shawn Shan <Shawn.Shan@arm.com>

The function tfm_spm_partition_get_flags is not used in IPC mode now,
remove it.

Change-Id: Ia36823367784c0ad827c1c0e228ba2a65d0268e5
Signed-off-by: Shawn Shan <Shawn.Shan@arm.com>

Change-Id: Ifa732eceb06a2248d562f4c68e84b0488e8089db
Signed-off-by: Sherry Zhang <sherry.zhang2@arm.com>

This patch:
 - Adds IRQ load data structure
 - Moves IRQ data into Partition load info
 - Moves Interrupt initialization from main() to load api
 - Updates get_irq_line_for_signal() accordingly
 - Moves tfm_irq_list.h to Library Model as it is not used by IPC

Change-Id: I4945e24bd977ef3d3e472bc58dfa618c3fb2d706
Signed-off-by: Kevin Peng <kevin.peng@arm.com>

Invert the logic for the tfm_spm_check_buffer_access() function
to conform to "0 means success" and align to other APIs. Refactor
the function itself to provide different return codes on error and
a default failure return instead of default success.

Signed-off-by: Antonio de Angelis <antonio.deangelis@arm.com>
Change-Id: I40ef814a472375cdb2c40ac75dd5f605a9eccbfe

Change the static data name to 'load_info' since they
are used for loading partition and services.

Change-Id: I061c55e570086930a852374207864d0a2fb9c06d
Signed-off-by: Mingyang Sun <mingyang.sun@arm.com>

In tfm_spm_hal_configure_default_isolation(), a partition index
is passed in to query the partition privilege. Change to pass
in privilege directly instead of the partition index.

Change-Id: Id046431cc8e224a94e83a71564ba2843fabf8ed7
Signed-off-by: Mingyang Sun <mingyang.sun@arm.com>

Optimize the memory footprint required by Crypto service in Profile
Small.

- Decrease the MAX number of concurrent multi-part operations to 4.
- Decrease the heap size used in backend crypto library since asymmetric
  cryptography is disabled.

Change-Id: If1b8d4b6cef098e132bd891a140be278993bf6c2
Signed-off-by: David Hu <david.hu@arm.com>

Crypto service does not require a client to call to psa_connect()
or psa_close(). Instead the service can use a stateless mechanism.
Related documents are also updated.

Note: Framework version of Crypto partition has been updated to 1.1,
but not all features of FF-M 1.1 are implemented now.

Change-Id: Iad628667e4b63e809c933fb263734403c6274bf9
Signed-off-by: Summer Qin <summer.qin@arm.com>

Ioannis Glaropoulos authored Jun 04, 2021 and Anton Komlev committed Jun 08, 2021

For builds without BL2, or when BL2 will be booting a single
combined S and NS image, we force placing the veneers section
at the end of the image (position 3), so as not to waste space
as a result of the nRF veneer section alignment requirements.
For regular builds with BL2 we keep the veneer placement as is
(positions 1 or 2 depending on whether PSA_API_TEST_NS is
defined).

Change-Id: I292f9ec996445b9d7acedd1db24117d9345f3346
Signed-off-by: Ioannis Glaropoulos <Ioannis.Glaropoulos@nordicsemi.no>

Initialize the memory area on both power-on and pin reset
Only initialize memory from the non-secure application to prevent
initializing twice
Clear reset register after reading

Signed-off-by: Andreas Vibeto <andreas.vibeto@nordicsemi.no>
Change-Id: If3aee8d5b31f0a48ec432e3d3f39c029cda3fd7a

Change-Id: If1d4ba1aaa706a1a6bbe3651454bfc717b369774
Signed-off-by: David Hu <david.hu@arm.com>