| #
abca35a6 |
| 31-Mar-2026 |
Jorge Ramirez-Ortiz <jorge.ramirez@oss.qualcomm.com> |
ta: pas: Add Qualcomm PAS TA
Certificate chain validation requires substantial parsing, which is not
suitable for the constrained S-EL1 environment. While signature
verification is supported by the
ta: pas: Add Qualcomm PAS TA
Certificate chain validation requires substantial parsing, which is not
suitable for the constrained S-EL1 environment. While signature
verification is supported by the crypto API, extending the TEE core/PTA
to handle full chain parsing would increase complexity and TCB size.
Move certificate validation to a user TA, keeping the PTA for platform
operations (PAS control, firmware loading, resets). This allows reuse of
existing parsing libraries and keeps the core minimal.
Signed-off-by: Jorge Ramirez-Ortiz <jorge.ramirez@oss.qualcomm.com>
Reviewed-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
show more ...
|
| #
f2eec4a0 |
| 31-Mar-2026 |
Jorge Ramirez-Ortiz <jorge.ramirez@oss.qualcomm.com> |
pta: qcom: pas: map PAS resources on demand
Stop registering PAS-related IO regions at platform initialization
time and instead map them on demand when the PAS PTA is initialized.
The WPSS, TURING,
pta: qcom: pas: map PAS resources on demand
Stop registering PAS-related IO regions at platform initialization
time and instead map them on demand when the PAS PTA is initialized.
The WPSS, TURING, LPASS and IRIS regions were previously mapped
statically via register_phys_mem(). These mappings are now removed
and the PAS controller region is mapped dynamically using
core_mmu_add_mapping() when the PTA performs the memory setup.
Since PAS resources are now mapped late, increase
CFG_RESERVED_VASPACE_SIZE to ensure sufficient virtual address
space is available.
This change reduces permanent IO mappings and keeps PAS resources
localized to the PTA implementation.
Signed-off-by: Jorge Ramirez-Ortiz <jorge.ramirez@oss.qualcomm.com>
Reviewed-by: Sumit Garg <sumit.garg@oss.qualcomm.com>
show more ...
|