fix(juno): restrict measured boot to a single algo

Juno is already quite space constrained. This makes enabling all
algorithms provided by Mbed-TLS by default a no-go. Similar to TC,
constrain the b

fix(juno): restrict measured boot to a single algo

Juno is already quite space constrained. This makes enabling all
algorithms provided by Mbed-TLS by default a no-go. Similar to TC,
constrain the board to a single algorithm when measured boot is enabled.

Change-Id: I848241b75a6c791c2bdfa42434de446c9e8c75de
Signed-off-by: Harrison Mutai <harrison.mutai@arm.com>

show more ...

refactor(juno): use crypto-agile measured boot

Update the Juno measured boot flow to use the crypto-agile API. Replace
the previous single-algorithm hash configuration with dynamic algorithm
selecti

refactor(juno): use crypto-agile measured boot

Update the Juno measured boot flow to use the crypto-agile API. Replace
the previous single-algorithm hash configuration with dynamic algorithm
selection. Align image measurement and event log header generation with
the new hashing model and update platform glue code accordingly.

Change-Id: I9bca6c9f2a6f3507cea5ced7c2ab83ee5a4c1a91
Signed-off-by: Harrison Mutai <harrison.mutai@arm.com>

show more ...

build(measured-boot)!: move to ext event log lib

Removes in-tree Event Log library implementation and updates all
references to use the external submodule. Updates include paths,
Makefile macros, an

build(measured-boot)!: move to ext event log lib

Removes in-tree Event Log library implementation and updates all
references to use the external submodule. Updates include paths,
Makefile macros, and platform integration logic to link with lib as a
static library.

If you cloned TF-A without the `--recurse-submodules` flag, you can
ensure that this submodule is present by running:

git submodule update --init --recursive

BREAKING-CHANGE: LibEventLog is now included in TF-A as a submodule.
Please run `git submodule update --init --recursive` if you encounter
issues after migrating to the latest version of TF-A.

Change-Id: I723f493033c178759a45ea04118e7cc295dc2438
Signed-off-by: Harrison Mutai <harrison.mutai@arm.com>

show more ...

feat(juno): increase MAX_XLAT_TABLES for SPMC_AT_EL3

Because of lack of XLAT_TABLE region, juno with SPMC_AT_EL3
got failure while mapping Rx/Tx buffer with ffa_driver.

To fix this, reduce PLAT_SP_

feat(juno): increase MAX_XLAT_TABLES for SPMC_AT_EL3

Because of lack of XLAT_TABLE region, juno with SPMC_AT_EL3
got failure while mapping Rx/Tx buffer with ffa_driver.

To fix this, reduce PLAT_SP_IMAGE_MAX_XLAT_TABLES and
increase MAX_XLAT_TABLES.

Change-Id: I2d9e1f8a7a0661ff9a28781fd14a1376c2a155eb
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>

show more ...

feat(juno): support image measured boot

Support measured boot with image & configuration hash in juno board with
SPMC_AT_EL3.

Change-Id: I89514c2fee64a7a7aadef28366875df4d4d9243a
Signed-off-by: Yeo

feat(juno): support image measured boot

Support measured boot with image & configuration hash in juno board with
SPMC_AT_EL3.

Change-Id: I89514c2fee64a7a7aadef28366875df4d4d9243a
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>

show more ...

feat(juno): change preprocessor condition for plat_get_mbedtls_heap()

The implementation of plat_get_mbedtls_heap() is mandatory
not only when TRUSTED_BOARD_BOOT is enabled,
but also when MEASURED_B

feat(juno): change preprocessor condition for plat_get_mbedtls_heap()

The implementation of plat_get_mbedtls_heap() is mandatory
not only when TRUSTED_BOARD_BOOT is enabled,
but also when MEASURED_BOOT is enabled. But to use either
TRUSTED_BOARD_BOOT or MEASURED_BOOT, it should be
built with CRYPTO_SUPPORT.

Therefore, change the preprocessor condition for
plat_get_mbedtls_heap() with CRYPTO_SUPPORT and
move this function to juno_common.c

Change-Id: I8ec9eaa87f58b760b47c5245b3bca234a9a77075
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>

show more ...

feat(juno): change the FW_NS_HANDOFF_BASE

Before supporting StandaloneMm in Juno, the PLAT_SP_IMAGE_NS_BUF_BASE
doesn't use so it's find to use as FW_NS_HANDOFF_BASE.;
But as juno support Standalone

feat(juno): change the FW_NS_HANDOFF_BASE

Before supporting StandaloneMm in Juno, the PLAT_SP_IMAGE_NS_BUF_BASE
doesn't use so it's find to use as FW_NS_HANDOFF_BASE.;
But as juno support StandaloneMm, PLAT_SP_IMAGE_NS_BUF_BASE is used for
non shared buffer between normal world and secure world,
it couldn't be used as FW_NS_HANDOFF_BASE.

Like FVP board, change FW_NS_HANDOFF_BASE as
(PLAT_ARM_NS_IMAGE_BASE - PLAT_ARM_FW_HANDOFF_SIZE) so that
it doesn't overlap with ns shared buffer.

Change-Id: I9fcf31a91fd12e931fb4c41341cdaa23057453cd
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>

show more ...

feat(juno): boot with TRANSFER_LIST

This patch supports booting with TRANSFER_LIST option in juno board.

Change-Id: I6d5a8c765291c301cf1e25e1ce12d0f7058979c7
Signed-off-by: Yeoreum Yun <yeoreum.yun

feat(juno): boot with TRANSFER_LIST

This patch supports booting with TRANSFER_LIST option in juno board.

Change-Id: I6d5a8c765291c301cf1e25e1ce12d0f7058979c7
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>

show more ...

feat(juno): organize juno_stmm_manifest.dts

To generalize manifest file for StandaloneMm for juno board,
organize this manifest file with stmm_*.dtsi.

Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.co

feat(juno): organize juno_stmm_manifest.dts

To generalize manifest file for StandaloneMm for juno board,
organize this manifest file with stmm_*.dtsi.

Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>
Change-Id: I138e01b8327fa0136ca255c213bf846de7229f23

show more ...

feat(juno): add pseudo CRB area

To support StnadlaoneMm with fTPM, add pseudo CRB area used by fTPM.

Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>
Change-Id: I8959faf0b222c326fefedf3f809cc96c276

feat(juno): add pseudo CRB area

To support StnadlaoneMm with fTPM, add pseudo CRB area used by fTPM.

Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>
Change-Id: I8959faf0b222c326fefedf3f809cc96c276a769b

show more ...

feat(juno): increase xtable for pseudo CRB

As normal pseudo CRB is allocated in DRAM1 area,
spmc running with SPMC_AT_EL3 need more subtable to map this area.
So, increase PLAT_SP_IMAGE_MAX_XLAT_TAB

feat(juno): increase xtable for pseudo CRB

As normal pseudo CRB is allocated in DRAM1 area,
spmc running with SPMC_AT_EL3 need more subtable to map this area.
So, increase PLAT_SP_IMAGE_MAX_XLAT_TABLES

Change-Id: I0a41b2f9ab127cc10c213fd1216a6fdd2e0ab850
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>

show more ...

feat(juno): change PLAT_SP_IMAGE_NS_BUF_BASE

As PLAT_SP_IMAGE_NS_BUF_BASE is moved to NS_DRAM1 area [0],
PLAT_ARM_SP_IMAGE_STACK_BASE should be changed to
(PLAT_SPM_BUF_BASE + PLAT_SPM_BUF_SIZE)

Li

feat(juno): change PLAT_SP_IMAGE_NS_BUF_BASE

As PLAT_SP_IMAGE_NS_BUF_BASE is moved to NS_DRAM1 area [0],
PLAT_ARM_SP_IMAGE_STACK_BASE should be changed to
(PLAT_SPM_BUF_BASE + PLAT_SPM_BUF_SIZE)

Link: https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/40336 [0]
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>
Change-Id: I638fd7346853894d3377d63fc7fb4daf48415602

show more ...

feat(juno): support StandaloneMm

Support StandaloneMm in Juno platform.
When Juno using StandaloneMm, last 2MB area of norflash0 is used by
StandaloneMm only and that area shouldn't be accessed by n

feat(juno): support StandaloneMm

Support StandaloneMm in Juno platform.
When Juno using StandaloneMm, last 2MB area of norflash0 is used by
StandaloneMm only and that area shouldn't be accessed by normal world.
For this, add last 2MB area of norflash0 in TZC setting.

Change-Id: Ice63f13c34f452f2b8cb93ee88dc666632b84248
Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>

show more ...

feat(build): put crttool in the build directory

Same as fiptool. Move all artefacts to the platform build directory and
convert to the standard build macro to make things more generic. Leave
a symli

feat(build): put crttool in the build directory

Same as fiptool. Move all artefacts to the platform build directory and
convert to the standard build macro to make things more generic. Leave
a symlink for the final binary in case someone depends on it.

Change-Id: I82ef846a95474ba385377032fb185e548827bf5c
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...

refactor: convert arm platforms to use the generic GIC driver

This reduces the code the platforms have to carry and makes their build
rules a bit simpler.

The main benefit is that plat_my_core_pos(

refactor: convert arm platforms to use the generic GIC driver

This reduces the code the platforms have to carry and makes their build
rules a bit simpler.

The main benefit is that plat_my_core_pos() no longer needs to be called
within the driver, helping with performance a bit.

Change-Id: I0b0d1d36d20d67c41c8c9dc14ade11bda6d4a6af
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...

refactor: make arm_gicv2.c and arm_gicv3.c common

These files were meant to be platform specific, but they are generic
enough that a range of platforms find them useful. However, refactoring
them is

refactor: make arm_gicv2.c and arm_gicv3.c common

These files were meant to be platform specific, but they are generic
enough that a range of platforms find them useful. However, refactoring
them is difficult as their use is platform specific. So copy them to a
generic place and redirect platforms to them.

The new copies will remain for compatibility for platforms that don't
want to or can't take up upcoming refactors and the old copies can be
drastically refactored to make them more widely applicable.

Change-Id: I056c8710cdda4d8a81b324d392762c29e02cdae1
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...

fix(juno): resolve BL2 RAM overflow with RSA+ECDSA in GCC(14.2.1)

* Using "TF_MBEDTLS_RSA_AND_ECDSA" algorithm with toolchain 14.2.1
causes the BL2 image to exceed RAM limits, triggering a link er

fix(juno): resolve BL2 RAM overflow with RSA+ECDSA in GCC(14.2.1)

* Using "TF_MBEDTLS_RSA_AND_ECDSA" algorithm with toolchain 14.2.1
causes the BL2 image to exceed RAM limits, triggering a link error
("region `RAM' overflowed by 4096 bytes").

* Resolved by increasing PLAT_ARM_MAX_BL2_SIZE by 4KB to accommodate
the larger image.

Signed-off-by: Jayanth Dodderi Chidanand <jayanthdodderi.chidanand@arm.com>
Change-Id: Ie9d411c1207801436d8cffcf72fec2752371eb69

show more ...

refactor(arm): simplify early platform setup function in BL31

Refactor `arm_bl31_early_platform_setup` to accept generic u_register_t
values, enabling support for firmware handoff boot arguments in

refactor(arm): simplify early platform setup function in BL31

Refactor `arm_bl31_early_platform_setup` to accept generic u_register_t
values, enabling support for firmware handoff boot arguments in
common code. This simplifies the interface for early platform setup.

Signed-off-by: Jayanth Dodderi Chidanand <jayanthdodderi.chidanand@arm.com>
Change-Id: Iff20300d2372e1a9825827ddccbd1b3bc6751e40

show more ...

refactor(arm): rename ARM_ROTPK_HEADER_LEN

This variable had a misleading name, as it is the length
of the header only when the ROTPK is a hash.
Also rename arm_rotpk_header to match the new pattern

refactor(arm): rename ARM_ROTPK_HEADER_LEN

This variable had a misleading name, as it is the length
of the header only when the ROTPK is a hash.
Also rename arm_rotpk_header to match the new pattern.

Change-Id: I36c29998eebf50c356a6ca959ec9223c8837b540
Signed-off-by: Ryan Everett <ryan.everett@arm.com>

show more ...

fix(romlib): romlib build without MbedTLS

The ROMLIB build currently has a strong dependency on MbedTLS. This
patch has been introduced to remove this dependency, making it more
flexible.

Change-Id

fix(romlib): romlib build without MbedTLS

The ROMLIB build currently has a strong dependency on MbedTLS. This
patch has been introduced to remove this dependency, making it more
flexible.

Change-Id: If8c4cc7cf557687f40b235a4b8f931cfb70943fd
Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com>

show more ...

build: use full paths for generated libraries

This change modifies the build rules for static libraries so that
individual rules which use those libraries depend directly on the
archive files that a

build: use full paths for generated libraries

This change modifies the build rules for static libraries so that
individual rules which use those libraries depend directly on the
archive files that are generated, rather than their phony target aliases
and `-lX` link flags.

The goal of this is to clean up Make's view of the dependencies between
files, avoiding phony targets (which do not honour timestamps) making
their way into intermediate dependencies.

Change-Id: I96d655fcd94dc259ffa6e8970b2be7b8c7e11123
Signed-off-by: Chris Kay <chris.kay@arm.com>

show more ...