mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-24 22:05:40 +00:00
e7f1181f8a
The client platform relies on the DICE attestation scheme. RSS provides the DICE Protection Environment (DPE) service. TF-A measured boot framework supports multiple backends. A given platform always enables the corresponding backend which is required by the attestation scheme. Signed-off-by: Tamas Ban <tamas.ban@arm.com> Change-Id: Idc3360d0d7216e4859e99b5db3d377407e0aeee5
59 lines
1.4 KiB
C
59 lines
1.4 KiB
C
/*
|
|
* Copyright (c) 2024, Arm Limited. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
|
|
#include <stdint.h>
|
|
|
|
#include <drivers/arm/rss_comms.h>
|
|
#include <drivers/measured_boot/metadata.h>
|
|
#include <drivers/measured_boot/rss/dice_prot_env.h>
|
|
#include <plat/arm/common/plat_arm.h>
|
|
#include <plat/common/platform.h>
|
|
#include <platform_def.h>
|
|
#include <tools_share/zero_oid.h>
|
|
|
|
struct dpe_metadata tc_dpe_metadata[] = {
|
|
{
|
|
.id = FW_CONFIG_ID,
|
|
.signer_id_size = SIGNER_ID_MIN_SIZE,
|
|
.sw_type = MBOOT_FW_CONFIG_STRING,
|
|
.allow_new_context_to_derive = false,
|
|
.retain_parent_context = true,
|
|
.create_certificate = false,
|
|
.pk_oid = ZERO_OID },
|
|
{
|
|
.id = TB_FW_CONFIG_ID,
|
|
.signer_id_size = SIGNER_ID_MIN_SIZE,
|
|
.sw_type = MBOOT_TB_FW_CONFIG_STRING,
|
|
.allow_new_context_to_derive = false,
|
|
.retain_parent_context = true,
|
|
.create_certificate = false,
|
|
.pk_oid = ZERO_OID },
|
|
{
|
|
.id = BL2_IMAGE_ID,
|
|
.signer_id_size = SIGNER_ID_MIN_SIZE,
|
|
.sw_type = MBOOT_BL2_IMAGE_STRING,
|
|
.allow_new_context_to_derive = true,
|
|
.retain_parent_context = false,
|
|
.create_certificate = false,
|
|
.pk_oid = ZERO_OID },
|
|
{
|
|
.id = DPE_INVALID_ID }
|
|
};
|
|
|
|
|
|
void bl1_plat_mboot_init(void)
|
|
{
|
|
/* Initialize the communication channel between AP and RSS */
|
|
(void)rss_comms_init(PLAT_RSS_AP_SND_MHU_BASE,
|
|
PLAT_RSS_AP_RCV_MHU_BASE);
|
|
|
|
dpe_init(tc_dpe_metadata);
|
|
}
|
|
|
|
void bl1_plat_mboot_finish(void)
|
|
{
|
|
/* Nothing to do. */
|
|
}
|