| #
a5b97052 |
| 05-Jul-2024 |
Manish V Badarkhe <manish.badarkhe@arm.com> |
Merge changes from topic "dpe_target_locality" into integration
* changes: feat(tc): provide target_locality info of AP FW components refactor(tc): rename DPE header
|
| #
3201faf3 |
| 14-Jun-2024 |
Tamas Ban <tamas.ban@arm.com> |
feat(tc): provide target_locality info of AP FW components
The target_locality attribute is meant to specify that a certain SW component is expected to run and thereby send DPE commands from a given
feat(tc): provide target_locality info of AP FW components
The target_locality attribute is meant to specify that a certain SW component is expected to run and thereby send DPE commands from a given security domain. The DPE service must be capable of determining the locality of a client on his own. RSE determines the client's locality based on the MHU channel used for communication.
If the expected locality (specified by the parent component) is not matching with the determined locality by DPE service then command fails.
The goal is to protect against spoofing when a context_handle is stolen and used by a component that should not have access.
Signed-off-by: Tamas Ban <tamas.ban@arm.com> Change-Id: I96d255de231611cfed10eef4335a47b91c2c94de
show more ...
|
| #
1c4f9b95 |
| 18-Jun-2024 |
Manish V Badarkhe <manish.badarkhe@arm.com> |
Merge "refactor(dice): save parent context handle" into integration
|
| #
8e0fd0bf |
| 03-Jun-2024 |
Tamas Ban <tamas.ban@arm.com> |
refactor(dice): save parent context handle
Improve the restart handling of DPE. In the case of a restart scenario where only that core is restarted which executes the DPE client, but the core execut
refactor(dice): save parent context handle
Improve the restart handling of DPE. In the case of a restart scenario where only that core is restarted which executes the DPE client, but the core executes the DPE service remains up and running. In this case, client needs to save a valid context handle to be able to send commands again to the DPE service during the new boot sequence.
BL1 saves a valid parent context handle to SDS before passing the execution to BL2. This handle can be used in case of a restart scenario when AP is restarted but RSE is not. Because in that case RSE does not save an initial context handle to SDS, which meant to be used by AP during the boot process.
By then the very first initial context handle is invalidated because it was already used in the previous boot cycle by BL1.
BL2 does not need to do this, because the cold boot starts with BL1.
Signed-off-by: Tamas Ban <tamas.ban@arm.com> Change-Id: Id14eefd2ec758f89f672af176e4f5386a397fa35
show more ...
|
| #
a1901c7d |
| 26-Apr-2024 |
Manish V Badarkhe <manish.badarkhe@arm.com> |
Merge changes from topic "rss_rse_rename" into integration
* changes: refactor(changelog): change all occurrences of RSS to RSE refactor(qemu): change all occurrences of RSS to RSE refactor(fv
Merge changes from topic "rss_rse_rename" into integration
* changes: refactor(changelog): change all occurrences of RSS to RSE refactor(qemu): change all occurrences of RSS to RSE refactor(fvp): change all occurrences of RSS to RSE refactor(fiptool): change all occurrences of RSS to RSE refactor(psa): change all occurrences of RSS to RSE refactor(fvp): remove leftovers from rss measured boot support refactor(tc): change all occurrences of RSS to RSE docs: change all occurrences of RSS to RSE refactor(measured-boot): change all occurrences of RSS to RSE refactor(rse): change all occurrences of RSS to RSE refactor(psa): rename all 'rss' files to 'rse' refactor(tc): rename all 'rss' files to 'rse' docs: rename all 'rss' files to 'rse' refactor(measured-boot): rename all 'rss' files to 'rse' refactor(rss): rename all 'rss' files to 'rse'
show more ...
|
| #
024c4948 |
| 21-Feb-2024 |
Tamas Ban <tamas.ban@arm.com> |
refactor(measured-boot): rename all 'rss' files to 'rse'
Signed-off-by: Tamas Ban <tamas.ban@arm.com> Change-Id: I3bd987456ad0f5c7a003960dd543efad2ce668a8
|