docs/components/el3-spmc.rst

9 This document describes the design of the EL3 SPMC based on the FF-A specification.
10 EL3 SPMC provides reference FF-A compliant implementation without S-EL2 virtualization support,
11 to help adopt and migrate to FF-A early.
12 EL3 SPMC implementation in TF-A:
15 - Provides a standard protocol for communication and memory sharing between FF-A endpoints.
28 TF-A build options
31 This section explains the TF-A build options involved in building
32 an FF-A based SPM where the SPMD and SPMC are located at EL3:
34 - **SPD=spmd**: this option selects the SPMD component to relay the FF-A
47   BL32 option can be omitted if using TF-A Test Secure Payload as SP.
51 Sample TF-A build command line when the SPMC is located at EL3:
122   as per FF-A v1.1 specification.
131 The SPMD and SPMC are built into the BL31 image along with TF-A's runtime components.
228 SPMC asserts SP and SPMC are at same FF-A Version.
233 FF-A features supported by the SPMC may be discovered by secure partitions at
236 The SPMC calling FFA_FEATURES at secure physical FF-A instance always get
280 The FF-A ID space is split into a non-secure space and secure space:
282 - FF-A ID with bit 15 clear relates to VMs.
283 - FF-A ID with bit 15 set related to SPs or LSPs.
284 - FF-A IDs 0, 0xffff, 0x8000 are assigned respectively to the Hypervisor
288 an FF-A ABI invocation. In particular the SPM shall filter unauthorized
290 use a secure FF-A ID as origin world by spoofing:
292 - A VM-to-SP direct request/response shall set the origin world to be non-secure
293   (FF-A ID bit 15 clear) and destination world to be secure (FF-A ID bit 15
295 - Similarly, an SP-to-LSP direct request/response shall set the FF-A ID bit 15
333 Returns the FF-A ID allocated to an SPM component which can be one of SPMD
338 the FFA_SPM_ID_GET interface at the secure physical FF-A instance.
340 Secure partitions call this interface at the virtual FF-A instance, to which
349 Returns the FF-A ID of the calling endpoint.
359   and allocates FF-A memory handle.
400 A secondary EC is first resumed either upon invocation of PSCI_CPU_ON from
417 - A power management event is relayed through the SPD hook to the SPMC.
425 The FF-A specification `[1]`_ provides two ways to relinquinsh CPU time to
437 EL3 SPMC implements Partition runtime states are described in v1.1 FF-A specification `[1]`_
484 - TSP provides reference implementation of FF-A programming model.
497 - TSP Tests are exercised in the TF-A CI using prebuilt FF-A Linux Test driver in NWd.
560 [1] `Arm Firmware Framework for Arm A-profile <https://developer.arm.com/docs/den0077/latest>`__
564 [2] https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/tree/plat/arm/board/fvp/fvp_el3_spm…
573 [4] https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/tree/plat/arm/board/fvp/fvp_el3_spm…
577 [5] https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/tree/plat/arm/board/fvp/include/pla…
585 [7] https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/tree/plat/arm/board/fvp/fdts/fvp_ts…