lib: optee_client v2: support RKFS version 2

1.use get_rkss_version function to get rkss version,
if security partition have data with rkss version 1, then
we choice rkss version 1, if security

lib: optee_client v2: support RKFS version 2

1.use get_rkss_version function to get rkss version,
if security partition have data with rkss version 1, then
we choice rkss version 1, if security partition is empty,
then we choice rkss version 2
2.rkss version 2 support dual backup mechanism,
security partition total use 1M
3.rkss version 2 R&W 256k data one time

Change-Id: I2f17b22d6a442df84be0d94a808b03465dc6fefe
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: optee_client v1: support RKFS version 2

1.use get_rkss_version function to get rkss version,
if security partition have data with rkss version 1, then
we choice rkss version 1, if security

lib: optee_client v1: support RKFS version 2

1.use get_rkss_version function to get rkss version,
if security partition have data with rkss version 1, then
we choice rkss version 1, if security partition is empty,
then we choice rkss version 2
2.rkss version 2 support dual backup mechanism,
security partition total use 1M
3.rkss version 2 R&W 256k data one time

Change-Id: I4103b6600666dffccf473ec4ed8854776a46da31
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: optee_client: communicate with optee os v2 32 bits

Change-Id: Ic352f86e73631b64110b9d0d1742dc6b98e97d59
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: free section in write and truncate func

Change-Id: Ifd7b53d4c2d1e08591192aa44f04af2b1ff07e5b
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: change the condition for eMMC devices

1.dev_desc->if_type == IF_TYPE_MMC for SD and eMMC device,
dev_desc->devnum == 1 is SD devices,
dev_desc->devnum == 0 is eMMC devices
2.S

lib: optee_client: change the condition for eMMC devices

1.dev_desc->if_type == IF_TYPE_MMC for SD and eMMC device,
dev_desc->devnum == 1 is SD devices,
dev_desc->devnum == 0 is eMMC devices
2.SD devices do not have rpmb
3.we prefer to use rpmb for eMMC devices, use security
partition for nand or SD devices

Change-Id: Ifc21bd4da7c3ee91e2ecc845c343182c78d52dc1
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: optee_client: vboot enable if read bootflag == 1 for rk3288

Change-Id: Ic59341a3bd386a5d05cc501a6841556a6375572a
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: init rpmb before find_mmc_device

Change-Id: I1f2c3d76c9015f1a59822314df5e92b6355c7827
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: v1 add security partition offset when backup data

Change-Id: I331b95c1df8c0124568aad5ee7351bc270946af6
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: v2 add security partition offset when backup data

Change-Id: I9abbef68e56c0b2870426e91138bb110240ed69c
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: add module name in print func

Change-Id: I6cdcb0870bf5a3915009421e5c8b09584ac2bb6c
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: change condition for file exist

file not exist if ret < 0, file exist if ret >=0

Change-Id: I1a70b0a41773f03d552c5f6cda82b745d6e81421
Signed-off-by: Hisping Lin <hisping.lin@rock

lib: optee_client: change condition for file exist

file not exist if ret < 0, file exist if ret >=0

Change-Id: I1a70b0a41773f03d552c5f6cda82b745d6e81421
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: optee_client: do not init RK FS if security not exist

Change-Id: I91e780448cee7884c7477cb0b5720f962b2df00d
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: add support for power-off protection

Change-Id: I4babcc1989563a3c707a1cac7e93069031f033dd
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: add judgment of return value

Change-Id: If616f89ffb2c3ea30afb7bced56a1ca28b1232b2
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: recover original partition after error

1.switch to RPMB partition when call init rpmb
2.switch to original partition when call finish rpmb
3.it will not switch to original partiti

lib: optee_client: recover original partition after error

1.switch to RPMB partition when call init rpmb
2.switch to original partition when call finish rpmb
3.it will not switch to original partition when error
occurred, we should recover original partition after error

Change-Id: I41927e82fb2db690058a809f008ca1f59d334011
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

cmd: add test case for secure storage

1.mmc testsecurestorage to test secure storage
2.test secure storage in rpmb and test secure storage in
security partition when use emmc
3.test secure storage

cmd: add test case for secure storage

1.mmc testsecurestorage to test secure storage
2.test secure storage in rpmb and test secure storage in
security partition when use emmc
3.test secure storage in security partition when use nand

Change-Id: Id6f72893c002c5040cb1790051c9685911878df7
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: optee_client: add read&wite permanent attributes certificate

Change-Id: I83321afcf9d89b0cde0bcc78f1f02c847f85a115
Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>

lib: optee_client: Extract keymaster CA module

Extract keymaster CA module from OpteeClientInterface
refactoring code for keymaster reads and writes form caller module

Change-Id: I1069fce0d29d9d981

lib: optee_client: Extract keymaster CA module

Extract keymaster CA module from OpteeClientInterface
refactoring code for keymaster reads and writes form caller module

Change-Id: I1069fce0d29d9d9815f71e7f3b4d231754382acd
Signed-off-by: Jian Qiu <qiujian@rock-chips.com>

show more ...

lib: optee_client: move keybox code to write_keybox.c

Change-Id: Ifcd9962a8b802ee2bcbdbd0e88effb4485e5963a
Signed-off-by: Tony Xu <tony.xu@rock-chips.com>

lib: optee_client: optimizing print information

Change-Id: I37e6dc56b8eb46bc6d0a2c12bbd4c329d35ca687
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_clientApi: write table when verify table fail

Change-Id: I38d055945da5bf183e34588a08d8964c2d810f5f
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: optee_client: remove widevine ta from uboot

Change-Id: I9e6e4d6743d0a8e9787c2b01e535d920d4f93008
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

Attestation key: write attestation key to secure storage

Split attestation key into AttestationKey.ec and AttestationKey.rsa,
then write to secure storage.

Change-Id: I8e00d602c4174a002e6ecad2e4cfa

Attestation key: write attestation key to secure storage

Split attestation key into AttestationKey.ec and AttestationKey.rsa,
then write to secure storage.

Change-Id: I8e00d602c4174a002e6ecad2e4cfa846f32a681f
Signed-off-by: Tony Xu <tony.xu@rock-chips.com>

show more ...