1*30c13f9eSRuchika Gupta# OP-TEE - version 3.13.0 (2021-04-30) 2*30c13f9eSRuchika Gupta 3*30c13f9eSRuchika Gupta- Links to the release pages, commits and pull requests merged into this release for: 4*30c13f9eSRuchika Gupta - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_13_0], [commits][OP_TEE_optee_os_commits_3_13_0] and [pull requests][OP_TEE_optee_os_pr_3_13_0] 5*30c13f9eSRuchika Gupta - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_13_0], [commits][OP_TEE_optee_client_commits_3_13_0] and [pull requests][OP_TEE_optee_client_pr_3_13_0] 6*30c13f9eSRuchika Gupta - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_13_0], [commits][OP_TEE_optee_test_commits_3_13_0] and [pull requests][OP_TEE_optee_test_pr_3_13_0] 7*30c13f9eSRuchika Gupta - OP-TEE/build: [release page][OP_TEE_build_release_3_13_0], [commits][OP_TEE_build_commits_3_13_0] and [pull requests][OP_TEE_build_pr_3_13_0] 8*30c13f9eSRuchika Gupta - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_13_0], [commits][linaro_swg_optee_examples_commits_3_13_0] and [pull requests][linaro_swg_optee_examples_pr_3_13_0] 9*30c13f9eSRuchika Gupta 10*30c13f9eSRuchika Gupta 11*30c13f9eSRuchika Gupta[OP_TEE_optee_os_release_3_13_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.13.0 12*30c13f9eSRuchika Gupta[OP_TEE_optee_os_commits_3_13_0]: https://github.com/OP-TEE/optee_os/compare/3.12.0...3.13.0 13*30c13f9eSRuchika Gupta[OP_TEE_optee_os_pr_3_13_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 14*30c13f9eSRuchika Gupta 15*30c13f9eSRuchika Gupta[OP_TEE_optee_client_release_3_13_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.13.0 16*30c13f9eSRuchika Gupta[OP_TEE_optee_client_commits_3_13_0]: https://github.com/OP-TEE/optee_client/compare/3.12.0...3.13.0 17*30c13f9eSRuchika Gupta[OP_TEE_optee_client_pr_3_13_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 18*30c13f9eSRuchika Gupta 19*30c13f9eSRuchika Gupta[OP_TEE_optee_test_release_3_13_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.13.0 20*30c13f9eSRuchika Gupta[OP_TEE_optee_test_commits_3_13_0]: https://github.com/OP-TEE/optee_test/compare/3.12.0...3.13.0 21*30c13f9eSRuchika Gupta[OP_TEE_optee_test_pr_3_13_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 22*30c13f9eSRuchika Gupta 23*30c13f9eSRuchika Gupta[OP_TEE_build_release_3_13_0]: https://github.com/OP-TEE/build/releases/tag/3.13.0 24*30c13f9eSRuchika Gupta[OP_TEE_build_commits_3_13_0]: https://github.com/OP-TEE/build/compare/3.12.0...3.13.0 25*30c13f9eSRuchika Gupta[OP_TEE_build_pr_3_13_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 26*30c13f9eSRuchika Gupta 27*30c13f9eSRuchika Gupta[linaro_swg_optee_examples_release_3_13_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.13.0 28*30c13f9eSRuchika Gupta[linaro_swg_optee_examples_commits_3_13_0]: https://github.com/linaro-swg/optee_examples/compare/3.12.0...3.13.0 29*30c13f9eSRuchika Gupta[linaro_swg_optee_examples_pr_3_13_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 30*30c13f9eSRuchika Gupta 313d47a131SJoakim Bech# OP-TEE - version 3.12.0 (2021-01-20) 323d47a131SJoakim Bech 333d47a131SJoakim Bech- Links to the release pages, commits and pull requests merged into this release for: 343d47a131SJoakim Bech - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_12_0], [commits][OP_TEE_optee_os_commits_3_12_0] and [pull requests][OP_TEE_optee_os_pr_3_12_0] 353d47a131SJoakim Bech - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_12_0], [commits][OP_TEE_optee_client_commits_3_12_0] and [pull requests][OP_TEE_optee_client_pr_3_12_0] 363d47a131SJoakim Bech - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_12_0], [commits][OP_TEE_optee_test_commits_3_12_0] and [pull requests][OP_TEE_optee_test_pr_3_12_0] 373d47a131SJoakim Bech - OP-TEE/build: [release page][OP_TEE_build_release_3_12_0], [commits][OP_TEE_build_commits_3_12_0] and [pull requests][OP_TEE_build_pr_3_12_0] 383d47a131SJoakim Bech - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_12_0], [commits][linaro_swg_optee_examples_commits_3_12_0] and [pull requests][linaro_swg_optee_examples_pr_3_12_0] 393d47a131SJoakim Bech 403d47a131SJoakim Bech 413d47a131SJoakim Bech[OP_TEE_optee_os_release_3_12_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.12.0 423d47a131SJoakim Bech[OP_TEE_optee_os_commits_3_12_0]: https://github.com/OP-TEE/optee_os/compare/3.11.0...3.12.0 433d47a131SJoakim Bech[OP_TEE_optee_os_pr_3_12_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 443d47a131SJoakim Bech 453d47a131SJoakim Bech[OP_TEE_optee_client_release_3_12_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.12.0 463d47a131SJoakim Bech[OP_TEE_optee_client_commits_3_12_0]: https://github.com/OP-TEE/optee_client/compare/3.11.0...3.12.0 473d47a131SJoakim Bech[OP_TEE_optee_client_pr_3_12_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 483d47a131SJoakim Bech 493d47a131SJoakim Bech[OP_TEE_optee_test_release_3_12_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.12.0 503d47a131SJoakim Bech[OP_TEE_optee_test_commits_3_12_0]: https://github.com/OP-TEE/optee_test/compare/3.11.0...3.12.0 513d47a131SJoakim Bech[OP_TEE_optee_test_pr_3_12_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 523d47a131SJoakim Bech 533d47a131SJoakim Bech[OP_TEE_build_release_3_12_0]: https://github.com/OP-TEE/build/releases/tag/3.12.0 543d47a131SJoakim Bech[OP_TEE_build_commits_3_12_0]: https://github.com/OP-TEE/build/compare/3.11.0...3.12.0 553d47a131SJoakim Bech[OP_TEE_build_pr_3_12_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 563d47a131SJoakim Bech 573d47a131SJoakim Bech[linaro_swg_optee_examples_release_3_12_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.12.0 583d47a131SJoakim Bech[linaro_swg_optee_examples_commits_3_12_0]: https://github.com/linaro-swg/optee_examples/compare/3.11.0...3.12.0 593d47a131SJoakim Bech[linaro_swg_optee_examples_pr_3_12_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 603d47a131SJoakim Bech 61c4def2a8SJerome Forissier# OP-TEE - version 3.11.0 (2020-10-16) 62c4def2a8SJerome Forissier 63c4def2a8SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 64c4def2a8SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_11_0], [commits][OP_TEE_optee_os_commits_3_11_0] and [pull requests][OP_TEE_optee_os_pr_3_11_0] 65c4def2a8SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_11_0], [commits][OP_TEE_optee_client_commits_3_11_0] and [pull requests][OP_TEE_optee_client_pr_3_11_0] 66c4def2a8SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_11_0], [commits][OP_TEE_optee_test_commits_3_11_0] and [pull requests][OP_TEE_optee_test_pr_3_11_0] 67c4def2a8SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_11_0], [commits][OP_TEE_build_commits_3_11_0] and [pull requests][OP_TEE_build_pr_3_11_0] 68c4def2a8SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_11_0], [commits][linaro_swg_optee_examples_commits_3_11_0] and [pull requests][linaro_swg_optee_examples_pr_3_11_0] 69c4def2a8SJerome Forissier 70c4def2a8SJerome Forissier 71c4def2a8SJerome Forissier[OP_TEE_optee_os_release_3_11_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.11.0 72c4def2a8SJerome Forissier[OP_TEE_optee_os_commits_3_11_0]: https://github.com/OP-TEE/optee_os/compare/3.10.0...3.11.0 73c4def2a8SJerome Forissier[OP_TEE_optee_os_pr_3_11_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 74c4def2a8SJerome Forissier 75c4def2a8SJerome Forissier[OP_TEE_optee_client_release_3_11_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.11.0 76c4def2a8SJerome Forissier[OP_TEE_optee_client_commits_3_11_0]: https://github.com/OP-TEE/optee_client/compare/3.10.0...3.11.0 77c4def2a8SJerome Forissier[OP_TEE_optee_client_pr_3_11_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 78c4def2a8SJerome Forissier 79c4def2a8SJerome Forissier[OP_TEE_optee_test_release_3_11_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.11.0 80c4def2a8SJerome Forissier[OP_TEE_optee_test_commits_3_11_0]: https://github.com/OP-TEE/optee_test/compare/3.10.0...3.11.0 81c4def2a8SJerome Forissier[OP_TEE_optee_test_pr_3_11_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 82c4def2a8SJerome Forissier 83c4def2a8SJerome Forissier[OP_TEE_build_release_3_11_0]: https://github.com/OP-TEE/build/releases/tag/3.11.0 84c4def2a8SJerome Forissier[OP_TEE_build_commits_3_11_0]: https://github.com/OP-TEE/build/compare/3.10.0...3.11.0 85c4def2a8SJerome Forissier[OP_TEE_build_pr_3_11_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 86c4def2a8SJerome Forissier 87c4def2a8SJerome Forissier[linaro_swg_optee_examples_release_3_11_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.11.0 88c4def2a8SJerome Forissier[linaro_swg_optee_examples_commits_3_11_0]: https://github.com/linaro-swg/optee_examples/compare/3.10.0...3.11.0 89c4def2a8SJerome Forissier[linaro_swg_optee_examples_pr_3_11_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 90c4def2a8SJerome Forissier 91d1c63543SJerome Forissier# OP-TEE - version 3.10.0 (2020-08-21) 92d1c63543SJerome Forissier 93d1c63543SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 94d1c63543SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_10_0], [commits][OP_TEE_optee_os_commits_3_10_0] and [pull requests][OP_TEE_optee_os_pr_3_10_0] 95d1c63543SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_10_0], [commits][OP_TEE_optee_client_commits_3_10_0] and [pull requests][OP_TEE_optee_client_pr_3_10_0] 96d1c63543SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_10_0], [commits][OP_TEE_optee_test_commits_3_10_0] and [pull requests][OP_TEE_optee_test_pr_3_10_0] 97d1c63543SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_10_0], [commits][OP_TEE_build_commits_3_10_0] and [pull requests][OP_TEE_build_pr_3_10_0] 98d1c63543SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_10_0], [commits][linaro_swg_optee_examples_commits_3_10_0] and [pull requests][linaro_swg_optee_examples_pr_3_10_0] 99d1c63543SJerome Forissier 100d1c63543SJerome Forissier 101d1c63543SJerome Forissier[OP_TEE_optee_os_release_3_10_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.10.0 102d1c63543SJerome Forissier[OP_TEE_optee_os_commits_3_10_0]: https://github.com/OP-TEE/optee_os/compare/3.9.0...3.10.0 103d1c63543SJerome Forissier[OP_TEE_optee_os_pr_3_10_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 104d1c63543SJerome Forissier 105d1c63543SJerome Forissier[OP_TEE_optee_client_release_3_10_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.10.0 106d1c63543SJerome Forissier[OP_TEE_optee_client_commits_3_10_0]: https://github.com/OP-TEE/optee_client/compare/3.9.0...3.10.0 107d1c63543SJerome Forissier[OP_TEE_optee_client_pr_3_10_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 108d1c63543SJerome Forissier 109d1c63543SJerome Forissier[OP_TEE_optee_test_release_3_10_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.10.0 110d1c63543SJerome Forissier[OP_TEE_optee_test_commits_3_10_0]: https://github.com/OP-TEE/optee_test/compare/3.9.0...3.10.0 111d1c63543SJerome Forissier[OP_TEE_optee_test_pr_3_10_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 112d1c63543SJerome Forissier 113d1c63543SJerome Forissier[OP_TEE_build_release_3_10_0]: https://github.com/OP-TEE/build/releases/tag/3.10.0 114d1c63543SJerome Forissier[OP_TEE_build_commits_3_10_0]: https://github.com/OP-TEE/build/compare/3.9.0...3.10.0 115d1c63543SJerome Forissier[OP_TEE_build_pr_3_10_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 116d1c63543SJerome Forissier 117d1c63543SJerome Forissier[linaro_swg_optee_examples_release_3_10_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.10.0 118d1c63543SJerome Forissier[linaro_swg_optee_examples_commits_3_10_0]: https://github.com/linaro-swg/optee_examples/compare/3.9.0...3.10.0 119d1c63543SJerome Forissier[linaro_swg_optee_examples_pr_3_10_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 120d1c63543SJerome Forissier 121af141c61SJens Wiklander# OP-TEE - version 3.9.0 (2020-04-22) 122af141c61SJens Wiklander 123af141c61SJens Wiklander- Links to the release pages, commits and pull requests merged into this release for: 124af141c61SJens Wiklander - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_9_0], [commits][OP_TEE_optee_os_commits_3_9_0] and [pull requests][OP_TEE_optee_os_pr_3_9_0] 125af141c61SJens Wiklander - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_9_0], [commits][OP_TEE_optee_client_commits_3_9_0] and [pull requests][OP_TEE_optee_client_pr_3_9_0] 126af141c61SJens Wiklander - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_9_0], [commits][OP_TEE_optee_test_commits_3_9_0] and [pull requests][OP_TEE_optee_test_pr_3_9_0] 127af141c61SJens Wiklander - OP-TEE/build: [release page][OP_TEE_build_release_3_9_0], [commits][OP_TEE_build_commits_3_9_0] and [pull requests][OP_TEE_build_pr_3_9_0] 128af141c61SJens Wiklander - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_9_0], [commits][linaro_swg_optee_examples_commits_3_9_0] and [pull requests][linaro_swg_optee_examples_pr_3_9_0] 129af141c61SJens Wiklander 130af141c61SJens Wiklander 131af141c61SJens Wiklander[OP_TEE_optee_os_release_3_9_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.9.0 132af141c61SJens Wiklander[OP_TEE_optee_os_commits_3_9_0]: https://github.com/OP-TEE/optee_os/compare/3.8.0...3.9.0 133af141c61SJens Wiklander[OP_TEE_optee_os_pr_3_9_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 134af141c61SJens Wiklander 135af141c61SJens Wiklander[OP_TEE_optee_client_release_3_9_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.9.0 136af141c61SJens Wiklander[OP_TEE_optee_client_commits_3_9_0]: https://github.com/OP-TEE/optee_client/compare/3.8.0...3.9.0 137af141c61SJens Wiklander[OP_TEE_optee_client_pr_3_9_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 138af141c61SJens Wiklander 139af141c61SJens Wiklander[OP_TEE_optee_test_release_3_9_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.9.0 140af141c61SJens Wiklander[OP_TEE_optee_test_commits_3_9_0]: https://github.com/OP-TEE/optee_test/compare/3.8.0...3.9.0 141af141c61SJens Wiklander[OP_TEE_optee_test_pr_3_9_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 142af141c61SJens Wiklander 143af141c61SJens Wiklander[OP_TEE_build_release_3_9_0]: https://github.com/OP-TEE/build/releases/tag/3.9.0 144af141c61SJens Wiklander[OP_TEE_build_commits_3_9_0]: https://github.com/OP-TEE/build/compare/3.8.0...3.9.0 145af141c61SJens Wiklander[OP_TEE_build_pr_3_9_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 146af141c61SJens Wiklander 147af141c61SJens Wiklander[linaro_swg_optee_examples_release_3_9_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.9.0 148af141c61SJens Wiklander[linaro_swg_optee_examples_commits_3_9_0]: https://github.com/linaro-swg/optee_examples/compare/3.8.0...3.9.0 149af141c61SJens Wiklander[linaro_swg_optee_examples_pr_3_9_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 150af141c61SJens Wiklander 151023e3365SJerome Forissier# OP-TEE - version 3.8.0 (2020-01-24) 152023e3365SJerome Forissier 153023e3365SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 154023e3365SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_8_0], [commits][OP_TEE_optee_os_commits_3_8_0] and [pull requests][OP_TEE_optee_os_pr_3_8_0] 155023e3365SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_8_0], [commits][OP_TEE_optee_client_commits_3_8_0] and [pull requests][OP_TEE_optee_client_pr_3_8_0] 156023e3365SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_8_0], [commits][OP_TEE_optee_test_commits_3_8_0] and [pull requests][OP_TEE_optee_test_pr_3_8_0] 157023e3365SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_8_0], [commits][OP_TEE_build_commits_3_8_0] and [pull requests][OP_TEE_build_pr_3_8_0] 158023e3365SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_8_0], [commits][linaro_swg_optee_examples_commits_3_8_0] and [pull requests][linaro_swg_optee_examples_pr_3_8_0] 159023e3365SJerome Forissier 160023e3365SJerome Forissier 161023e3365SJerome Forissier[OP_TEE_optee_os_release_3_8_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.8.0 162023e3365SJerome Forissier[OP_TEE_optee_os_commits_3_8_0]: https://github.com/OP-TEE/optee_os/compare/3.7.0...3.8.0 163023e3365SJerome Forissier[OP_TEE_optee_os_pr_3_8_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-01-24 164023e3365SJerome Forissier 165023e3365SJerome Forissier[OP_TEE_optee_client_release_3_8_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.8.0 166023e3365SJerome Forissier[OP_TEE_optee_client_commits_3_8_0]: https://github.com/OP-TEE/optee_client/compare/3.7.0...3.8.0 167023e3365SJerome Forissier[OP_TEE_optee_client_pr_3_8_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 168023e3365SJerome Forissier 169023e3365SJerome Forissier[OP_TEE_optee_test_release_3_8_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.8.0 170023e3365SJerome Forissier[OP_TEE_optee_test_commits_3_8_0]: https://github.com/OP-TEE/optee_test/compare/3.7.0...3.8.0 171023e3365SJerome Forissier[OP_TEE_optee_test_pr_3_8_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 172023e3365SJerome Forissier 173023e3365SJerome Forissier[OP_TEE_build_release_3_8_0]: https://github.com/OP-TEE/build/releases/tag/3.8.0 174023e3365SJerome Forissier[OP_TEE_build_commits_3_8_0]: https://github.com/OP-TEE/build/compare/3.7.0...3.8.0 175023e3365SJerome Forissier[OP_TEE_build_pr_3_8_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 176023e3365SJerome Forissier 177023e3365SJerome Forissier[linaro_swg_optee_examples_release_3_8_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.8.0 178023e3365SJerome Forissier[linaro_swg_optee_examples_commits_3_8_0]: https://github.com/linaro-swg/optee_examples/compare/3.7.0...3.8.0 179023e3365SJerome Forissier[linaro_swg_optee_examples_pr_3_8_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 180023e3365SJerome Forissier 181a2fa5018SJoakim Bech# OP-TEE - version 3.7.0 (2019-10-18) 182a2fa5018SJoakim Bech 183a2fa5018SJoakim Bech- Links to the release pages, commits and pull requests merged into this release for: 184a2fa5018SJoakim Bech - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_7_0], [commits][OP_TEE_optee_os_commits_3_7_0] and [pull requests][OP_TEE_optee_os_pr_3_7_0] 185a2fa5018SJoakim Bech - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_7_0], [commits][OP_TEE_optee_client_commits_3_7_0] and [pull requests][OP_TEE_optee_client_pr_3_7_0] 186a2fa5018SJoakim Bech - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_7_0], [commits][OP_TEE_optee_test_commits_3_7_0] and [pull requests][OP_TEE_optee_test_pr_3_7_0] 187a2fa5018SJoakim Bech - OP-TEE/build: [release page][OP_TEE_build_release_3_7_0], [commits][OP_TEE_build_commits_3_7_0] and [pull requests][OP_TEE_build_pr_3_7_0] 188a2fa5018SJoakim Bech - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_7_0], [commits][linaro_swg_optee_examples_commits_3_7_0] and [pull requests][linaro_swg_optee_examples_pr_3_7_0] 189a2fa5018SJoakim Bech 190a2fa5018SJoakim Bech 191a2fa5018SJoakim Bech[OP_TEE_optee_os_release_3_7_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.7.0 192a2fa5018SJoakim Bech[OP_TEE_optee_os_commits_3_7_0]: https://github.com/OP-TEE/optee_os/compare/3.6.0...3.7.0 193a2fa5018SJoakim Bech[OP_TEE_optee_os_pr_3_7_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 194a2fa5018SJoakim Bech 195a2fa5018SJoakim Bech[OP_TEE_optee_client_release_3_7_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.7.0 196a2fa5018SJoakim Bech[OP_TEE_optee_client_commits_3_7_0]: https://github.com/OP-TEE/optee_client/compare/3.6.0...3.7.0 197a2fa5018SJoakim Bech[OP_TEE_optee_client_pr_3_7_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 198a2fa5018SJoakim Bech 199a2fa5018SJoakim Bech[OP_TEE_optee_test_release_3_7_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.7.0 200a2fa5018SJoakim Bech[OP_TEE_optee_test_commits_3_7_0]: https://github.com/OP-TEE/optee_test/compare/3.6.0...3.7.0 201a2fa5018SJoakim Bech[OP_TEE_optee_test_pr_3_7_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 202a2fa5018SJoakim Bech 203a2fa5018SJoakim Bech[OP_TEE_build_release_3_7_0]: https://github.com/OP-TEE/build/releases/tag/3.7.0 204a2fa5018SJoakim Bech[OP_TEE_build_commits_3_7_0]: https://github.com/OP-TEE/build/compare/3.6.0...3.7.0 205a2fa5018SJoakim Bech[OP_TEE_build_pr_3_7_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 206a2fa5018SJoakim Bech 207a2fa5018SJoakim Bech[linaro_swg_optee_examples_release_3_7_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.7.0 208a2fa5018SJoakim Bech[linaro_swg_optee_examples_commits_3_7_0]: https://github.com/linaro-swg/optee_examples/compare/3.6.0...3.7.0 209a2fa5018SJoakim Bech[linaro_swg_optee_examples_pr_3_7_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 210a2fa5018SJoakim Bech 211f398d492SJerome Forissier# OP-TEE - version 3.6.0 (2019-07-05) 212f398d492SJerome Forissier 213f398d492SJerome Forissier- Link to the GitHub [release page][github_release_3_6_0]. 214f398d492SJerome Forissier- Links to the [commits][github_commits_3_6_0] and 215f398d492SJerome Forissier[pull requests][github_pr_3_6_0] merged into this release. 216f398d492SJerome Forissier 217f398d492SJerome Forissier[github_release_3_6_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.6.0 218f398d492SJerome Forissier[github_commits_3_6_0]: https://github.com/OP-TEE/optee_os/compare/3.5.0...3.6.0 219f398d492SJerome Forissier[github_pr_3_6_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-04-26..2019-07-05 220f398d492SJerome Forissier 2215df2a985SJoakim Bech# OP-TEE - version 3.5.0 (2019-04-26) 2225df2a985SJoakim Bech 2235df2a985SJoakim Bech- Link to the GitHub [release page][github_release_3_5_0]. 2245df2a985SJoakim Bech- Links to the [commits][github_commits_3_5_0] and 2255df2a985SJoakim Bech[pull requests][github_pr_3_5_0] merged into this release. 2265df2a985SJoakim Bech 2275df2a985SJoakim Bech[github_release_3_5_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.5.0 2285df2a985SJoakim Bech[github_commits_3_5_0]: https://github.com/OP-TEE/optee_os/compare/3.4.0...3.5.0 2295df2a985SJoakim Bech[github_pr_3_5_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-01-26..2019-04-26 2305df2a985SJoakim Bech 231406c609bSJerome Forissier# OP-TEE - version 3.4.0 (2019-01-25) 232406c609bSJerome Forissier 233406c609bSJerome Forissier- Link to the GitHub [release page][github_release_3_4_0]. 234406c609bSJerome Forissier- Links to the [commits][github_commits_3_4_0] and 235406c609bSJerome Forissier[pull requests][github_pr_3_4_0] merged into this release. 236406c609bSJerome Forissier 237406c609bSJerome Forissier[github_release_3_4_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.4.0 238406c609bSJerome Forissier[github_commits_3_4_0]: https://github.com/OP-TEE/optee_os/compare/3.3.0...3.4.0 239406c609bSJerome Forissier[github_pr_3_4_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-10-12..2019-01-25 240406c609bSJerome Forissier 241ee595e95SJerome Forissier# OP-TEE - version 3.3.0 (2018-10-12) 242ee595e95SJerome Forissier 243ee595e95SJerome Forissier- Link to the GitHub [release page][github_release_3_3_0]. 244ee595e95SJerome Forissier- Links to the [commits][github_commits_3_3_0] and 245ee595e95SJerome Forissier[pull requests][github_pr_3_3_0] merged into this release. 246ee595e95SJerome Forissier 247ee595e95SJerome Forissier[github_release_3_3_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.3.0 248ee595e95SJerome Forissier[github_commits_3_3_0]: https://github.com/OP-TEE/optee_os/compare/3.2.0...3.3.0 249ee595e95SJerome Forissier[github_pr_3_3_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-07-04..2018-10-12 250ee595e95SJerome Forissier 25153bf1c38SJerome Forissier# OP-TEE - version 3.2.0 (2018-07-04) 25253bf1c38SJerome Forissier 25353bf1c38SJerome Forissier- Link to the GitHub [release page][github_release_3_2_0]. 25453bf1c38SJerome Forissier- Links to the [commits][github_commits_3_2_0] and 25553bf1c38SJerome Forissier[pull requests][github_pr_3_2_0] merged into this release. 25653bf1c38SJerome Forissier 25753bf1c38SJerome Forissier## Known issues 25853bf1c38SJerome Forissier 25953bf1c38SJerome Forissier* HiKey960: assertion in bget create_free_block() \[memalign() self-test\] ([#2414]) 26053bf1c38SJerome Forissier* D02: assertion '!have_spinlock()' ([#2437]) 26153bf1c38SJerome Forissier 26253bf1c38SJerome Forissier[github_commits_3_2_0]: https://github.com/OP-TEE/optee_os/compare/3.1.0...3.2.0 26353bf1c38SJerome Forissier[github_pr_3_2_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-04-13..2018-07-04 26453bf1c38SJerome Forissier[github_release_3_2_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.2.0 26553bf1c38SJerome Forissier[#2414]: https://github.com/OP-TEE/optee_os/issues/2414 26653bf1c38SJerome Forissier[#2437]: https://github.com/OP-TEE/optee_os/issues/2437 26753bf1c38SJerome Forissier 2680ab9388cSJens Wiklander# OP-TEE - version 3.1.0 (2018-04-13) 2690ab9388cSJens Wiklander 2700ab9388cSJens Wiklander- Link to the GitHub [release page][github_release_3_1_0]. 2710ab9388cSJens Wiklander- Links to the [commits][github_commits_3_1_0] and 2720ab9388cSJens Wiklander[pull requests][github_pr_3_1_0] merged into this release. 2730ab9388cSJens Wiklander 2740ab9388cSJens Wiklander[github_commits_3_1_0]: https://github.com/OP-TEE/optee_os/compare/3.0.0...3.1.0 2750ab9388cSJens Wiklander[github_pr_3_1_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-01-26..2018-04-13 2760ab9388cSJens Wiklander[github_release_3_1_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.1.0 2770ab9388cSJens Wiklander 2780ab9388cSJens Wiklander# OP-TEE - version 3.0.0 (2018-01-26) 27994ee4938SJerome Forissier 28094ee4938SJerome Forissier[Link][github_commits_3_0_0] to a list of all commits between this release and 28194ee4938SJerome Forissierthe previous one (2.6.0). 28294ee4938SJerome Forissier 28394ee4938SJerome ForissierAbout backwards compatibility: Trusted Applications built with OP-TEE 2.5.0 or 28494ee4938SJerome Forissierearlier will not run properly with a *debug* build of this release due 28594ee4938SJerome Forissierto commit [0e1c6e8e][commit_0e1c6e8e] ("Dump call stack on TA panic"). 28694ee4938SJerome ForissierNon-debug builds are not affected. 28794ee4938SJerome Forissier 28894ee4938SJerome Forissier## New features 28994ee4938SJerome Forissier 29094ee4938SJerome Forissier* New supported platforms: Armada 3700 ([#1946]), Poplar ([#1999]), 64-bit 29194ee4938SJerome Forissier support for FSL ls1012ardb ([#1941]), i.MX6SX Sabreauto ([#1974]). 29294ee4938SJerome Forissier* arm32: sm: init CNTVOFF ([#2052]) 29394ee4938SJerome Forissier* Debug/info/error traces: make output more compact ([#2011]) 29494ee4938SJerome Forissier* tzc380: implement new functions ([#1994]) 29594ee4938SJerome Forissier* Secure Data Path: add pseudo-TA to convert VA to PA (#1993]) 29694ee4938SJerome Forissier* Pager: use NEON AES GCM implementation ([#1959]) 29794ee4938SJerome Forissier* Crypto: add optimized AES GCM implementation using NEON ([#1949]) 29894ee4938SJerome Forissier* Add support for using secure storage for TA anti-rollback ([#1928]) 29994ee4938SJerome Forissier* Crypto: replace struct crypto_ops with function interface ([#1923], 30094ee4938SJerome Forissier [#1931]) 30194ee4938SJerome Forissier* aosp_optee.mk: define OPTEE_BIN ([#1922]) 30294ee4938SJerome Forissier* Add build option to allow concurrent execution of single-instance TAs 30394ee4938SJerome Forissier ([#1915]) 30494ee4938SJerome Forissier* Pager: support for address sanitizer ([#1856]) 30594ee4938SJerome Forissier* Pager: make memory between CFG_TEE_RAM_START and TEE load address usable by 30694ee4938SJerome Forissier pager ([#1826]) 30794ee4938SJerome Forissier 30894ee4938SJerome Forissier## Bug fixes 30994ee4938SJerome Forissier 31094ee4938SJerome Forissier* Fix crash in tee_mmu_final() on TA loading error ([#2092]) 31194ee4938SJerome Forissier* LibTomCrypt: fix issue causing invalid output when using AES CTR with 31294ee4938SJerome Forissierhardware acceleration (CFG_CRYPTO_WITH_CE) ([#2086]) 31394ee4938SJerome Forissier* pl310: fix cache sync ([#2035]) 31494ee4938SJerome Forissier* tzc380: do not write reserved bits ([#1994]) 31594ee4938SJerome Forissier* Fix potential double free in ta_open() ([#1970]) 31694ee4938SJerome Forissier* libfdt: fix undefined behaviour in fdt_offset_ptr() ([#1969]) 31794ee4938SJerome Forissier* imx_wdog: fix register access ([#1966]) 31894ee4938SJerome Forissier* Secure storage: fix potential memory leak after early return ([#1961]) 31994ee4938SJerome Forissier* LibTomCrypt: fix double free in dsa_import() ([#1963]) 32094ee4938SJerome Forissier* RPMB: fix TA independance issue in secure storage ([#1921]) 32194ee4938SJerome Forissier* RPMB: return TEE_ERROR_ACCESS_CONFLICT instead of panicking when a TA 32294ee4938SJerome Forissier attempts to create an existing persistent object without the overwrite flag 32394ee4938SJerome Forissier ([#1919]) 32494ee4938SJerome Forissier* PSCI: pass non-secure context to psci_system_suspend() ([#1916]) 32594ee4938SJerome Forissier* Fix "Argument list too long" during "make clean" ([#1897]) 32694ee4938SJerome Forissier 32794ee4938SJerome Forissier## Security fixes 32894ee4938SJerome Forissier 32994ee4938SJerome Forissier* Mitigations and hardening against the Spectre and Meltdown vulnerabilities 33094ee4938SJerome Forissier (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754). 33194ee4938SJerome Forissier 33294ee4938SJerome Forissier## Known issues 33394ee4938SJerome Forissier 33494ee4938SJerome Forissier* Secure storage (REE FS): storage size not updated after 33594ee4938SJerome ForissierTEE_TruncateObjectData() ([#2094]) 33694ee4938SJerome Forissier* Possible deadlock with CFG_WITH_PAGER=y when loading a TA and not enough 33794ee4938SJerome Forissierpage tables are available in pgt_cache ([#2080]) 33894ee4938SJerome Forissier 33994ee4938SJerome Forissier## Tested on 34094ee4938SJerome Forissier 34194ee4938SJerome ForissierThe release was tested successfully on the platforms listed below. 34294ee4938SJerome Forissier 34394ee4938SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 34494ee4938SJerome Forissier* d02 34594ee4938SJerome Forissier* hikey 34694ee4938SJerome Forissier* hikey-hikey960 34794ee4938SJerome Forissier* imx-mx6ulevk 34894ee4938SJerome Forissier* imx-mx7dsabresd 34994ee4938SJerome Forissier* marvell-armada7k8k 35094ee4938SJerome Forissier* marvell-armada3700 35194ee4938SJerome Forissier* mediatek-mt8173 35294ee4938SJerome Forissier* rcar-salvator_m3 35394ee4938SJerome Forissier* rockchip-rk322x 35494ee4938SJerome Forissier* rpi3 35594ee4938SJerome Forissier* sam 35694ee4938SJerome Forissier* ti 35794ee4938SJerome Forissier* vexpress-juno 35894ee4938SJerome Forissier* vexpress-qemu_armv8a 35994ee4938SJerome Forissier* vexpress-qemu_virt 36094ee4938SJerome Forissier 36194ee4938SJerome Forissier[commit_0e1c6e8e]: https://github.com/OP-TEE/optee_os/commit/0e1c6e8e 36294ee4938SJerome Forissier[github_commits_3_0_0]: https://github.com/OP-TEE/optee_os/compare/2.6.0...3.0.0 36394ee4938SJerome Forissier[#2092]: https://github.com/OP-TEE/optee_os/pull/2092 36494ee4938SJerome Forissier[#2086]: https://github.com/OP-TEE/optee_os/pull/2086 36594ee4938SJerome Forissier[#2094]: https://github.com/OP-TEE/optee_os/issues/2094 36694ee4938SJerome Forissier[#2080]: https://github.com/OP-TEE/optee_os/issues/2080 36794ee4938SJerome Forissier[#2052]: https://github.com/OP-TEE/optee_os/pull/2052 36894ee4938SJerome Forissier[#2035]: https://github.com/OP-TEE/optee_os/pull/2035 36994ee4938SJerome Forissier[#2011]: https://github.com/OP-TEE/optee_os/pull/2011 37094ee4938SJerome Forissier[#1999]: https://github.com/OP-TEE/optee_os/pull/1999 37194ee4938SJerome Forissier[#1994]: https://github.com/OP-TEE/optee_os/pull/1994 37294ee4938SJerome Forissier[#1993]: https://github.com/OP-TEE/optee_os/pull/1993 37394ee4938SJerome Forissier[#1974]: https://github.com/OP-TEE/optee_os/pull/1974 37494ee4938SJerome Forissier[#1970]: https://github.com/OP-TEE/optee_os/pull/1970 37594ee4938SJerome Forissier[#1969]: https://github.com/OP-TEE/optee_os/pull/1969 37694ee4938SJerome Forissier[#1966]: https://github.com/OP-TEE/optee_os/pull/1966 37794ee4938SJerome Forissier[#1963]: https://github.com/OP-TEE/optee_os/pull/1963 37894ee4938SJerome Forissier[#1961]: https://github.com/OP-TEE/optee_os/pull/1961 37994ee4938SJerome Forissier[#1959]: https://github.com/OP-TEE/optee_os/pull/1959 38094ee4938SJerome Forissier[#1949]: https://github.com/OP-TEE/optee_os/pull/1949 38194ee4938SJerome Forissier[#1946]: https://github.com/OP-TEE/optee_os/pull/1946 38294ee4938SJerome Forissier[#1941]: https://github.com/OP-TEE/optee_os/pull/1941 38394ee4938SJerome Forissier[#1931]: https://github.com/OP-TEE/optee_os/pull/1931 38494ee4938SJerome Forissier[#1928]: https://github.com/OP-TEE/optee_os/pull/1928 38594ee4938SJerome Forissier[#1923]: https://github.com/OP-TEE/optee_os/pull/1923 38694ee4938SJerome Forissier[#1922]: https://github.com/OP-TEE/optee_os/pull/1922 38794ee4938SJerome Forissier[#1921]: https://github.com/OP-TEE/optee_os/pull/1921 38894ee4938SJerome Forissier[#1919]: https://github.com/OP-TEE/optee_os/pull/1919 38994ee4938SJerome Forissier[#1916]: https://github.com/OP-TEE/optee_os/pull/1916 39094ee4938SJerome Forissier[#1915]: https://github.com/OP-TEE/optee_os/pull/1915 39194ee4938SJerome Forissier[#1897]: https://github.com/OP-TEE/optee_os/pull/1897 39294ee4938SJerome Forissier[#1856]: https://github.com/OP-TEE/optee_os/pull/1856 39394ee4938SJerome Forissier[#1826]: https://github.com/OP-TEE/optee_os/pull/1826 39494ee4938SJerome Forissier 3956d57389fSJerome Forissier# OP-TEE - version 2.6.0 3966d57389fSJerome Forissier 3976d57389fSJerome Forissier[Link][github_commits_2_6_0] to a list of all commits between this release and 3986d57389fSJerome Forissierthe previous one (2.5.0). 3996d57389fSJerome Forissier 4006d57389fSJerome Forissier## New features 4016d57389fSJerome Forissier 4026d57389fSJerome Forissier* New supported platforms: Atmel SAMA5 ([#1714]), HiSilicon HiKey960 ([#1684]), 4036d57389fSJerome Forissier Rockchip RK322X ([#1666]), NXP LS1043A-RDB/LS1046A-RDB ([#1787]), Marvell 4046d57389fSJerome Forissier Armada 70x0/80x0 ([#1807]). 4056d57389fSJerome Forissier* Dynamic shared memory (non-contiguous, non-secure memory can be mapped into 4066d57389fSJerome Forissier Trusted Applications VA space) ([#1631]) 4076d57389fSJerome Forissier* Dump TA call stack on panic ([#1858]) 4086d57389fSJerome Forissier* i.MX: PSCI reset ([#1849]) 4096d57389fSJerome Forissier* plat-ti: AM43xx: suspend/resume support ([#1822]) 4106d57389fSJerome Forissier* QEMU SMP support ([#1820]) 4116d57389fSJerome Forissier* plat-ti: AM43xx: disable TRNG ([#1816]) 4126d57389fSJerome Forissier* plat-ti: enable Secure Data Path by default ([#1815]) 4136d57389fSJerome Forissier* Improve symbolize.py ([#1778], [#1767], [#1766]) 4146d57389fSJerome Forissier* Early TAs (TAs linked in tee.bin) ([#1733]) 4156d57389fSJerome Forissier* Suspend/resume framework for arm32 and imx7d support ([#1729]) 4166d57389fSJerome Forissier* RK322X PSCI version, features and suspend support ([#1720]) 4176d57389fSJerome Forissier* arm32: handle aborts in system mode ([#1703]) 4186d57389fSJerome Forissier* i.MX: add SNVS SRTC support ([#1700]) 4196d57389fSJerome Forissier* GCC7 support ([#1693]) 4206d57389fSJerome Forissier* Improve detection of programming errors in locking code ([#1671], [#1670]) 4216d57389fSJerome Forissier* Support TEE RAM size larger than page directory size ([#1669]) 4226d57389fSJerome Forissier 4236d57389fSJerome Forissier## Removed features 4246d57389fSJerome Forissier 4256d57389fSJerome Forissier* Remove TUI code ([#1842]) 4266d57389fSJerome Forissier 4276d57389fSJerome Forissier## Bug fixes 4286d57389fSJerome Forissier 4296d57389fSJerome Forissier* Add missing synchronization barrier in core_mmu_map_pages() ([#1827]) 4306d57389fSJerome Forissier* Secure storage: REE FS: fix bug in error path ([#1801]) 4316d57389fSJerome Forissier* ASAN bug fixes ([#1799]) 4326d57389fSJerome Forissier* Fix race in core_mmu_user_mapping_is_active() ([#1785]) 4336d57389fSJerome Forissier* libutee: printf() and puts() fixes, add putchar() ([#1759], [#1754]) 4346d57389fSJerome Forissier* arm32: GICv3: fix FIQ masking in IRQ/ABT/SVC/UND handlers ([#1748]) 4356d57389fSJerome Forissier* arm32: preserve r12 in native_intr_handler() ([#1682]) 4366d57389fSJerome Forissier* arm64: fix print_kernel_stack() ([#1664]) 4376d57389fSJerome Forissier* benchmark: fix core data-abort ([#1658]) 4386d57389fSJerome Forissier 4396d57389fSJerome Forissier## Security fixes or enhancements 4406d57389fSJerome Forissier 4416d57389fSJerome Forissier* crypto: fix software PRNG weaknesses 4426d57389fSJerome Forissier ([OP-TEE-2017-0001][OP-TEE-2017-0001]) ([#1843]) 4436d57389fSJerome Forissier 4446d57389fSJerome Forissier## Tested on 4456d57389fSJerome Forissier 44694ee4938SJerome ForissierThe release was tested successfully on the platforms listed below. 4476d57389fSJerome ForissierIf a platform is not listed, it means the release was not tested on this 4486d57389fSJerome Forissierplatform. 4496d57389fSJerome Forissier 4506d57389fSJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 4516d57389fSJerome Forissier* d02 4526d57389fSJerome Forissier* hikey 4536d57389fSJerome Forissier* hikey-hikey960 4546d57389fSJerome Forissier* imx-mx6ulevk 4556d57389fSJerome Forissier* imx-mx7dsabresd 4566d57389fSJerome Forissier* ls-ls1021a??? (single core) 4576d57389fSJerome Forissier* ls-ls1043ardb 4586d57389fSJerome Forissier* ls-ls1046ardb 4596d57389fSJerome Forissier* mediatek-mt8173 4606d57389fSJerome Forissier* rcar 4616d57389fSJerome Forissier* rockchip-rk322x 4626d57389fSJerome Forissier* rpi3 4636d57389fSJerome Forissier* sam 4646d57389fSJerome Forissier* stm-b2260 4656d57389fSJerome Forissier* stm-cannes 4666d57389fSJerome Forissier* ti-??? 4676d57389fSJerome Forissier* vexpress-fvp 4686d57389fSJerome Forissier* vexpress-juno 4696d57389fSJerome Forissier* vexpress-qemu_armv8a 4706d57389fSJerome Forissier* vexpress-qemu_virt 4716d57389fSJerome Forissier 47294ee4938SJerome Forissier[github_commits_2_6_0]: https://github.com/OP-TEE/optee_os/compare/2.5.0...2.6.0 4736d57389fSJerome Forissier[#1858]: https://github.com/OP-TEE/optee_os/issues/1858 4746d57389fSJerome Forissier[#1849]: https://github.com/OP-TEE/optee_os/issues/1849 4756d57389fSJerome Forissier[#1843]: https://github.com/OP-TEE/optee_os/issues/1843 4766d57389fSJerome Forissier[#1842]: https://github.com/OP-TEE/optee_os/issues/1842 4776d57389fSJerome Forissier[#1827]: https://github.com/OP-TEE/optee_os/issues/1827 4786d57389fSJerome Forissier[#1822]: https://github.com/OP-TEE/optee_os/issues/1822 4796d57389fSJerome Forissier[#1820]: https://github.com/OP-TEE/optee_os/issues/1820 4806d57389fSJerome Forissier[#1816]: https://github.com/OP-TEE/optee_os/issues/1816 4816d57389fSJerome Forissier[#1815]: https://github.com/OP-TEE/optee_os/issues/1815 4826d57389fSJerome Forissier[#1807]: https://github.com/OP-TEE/optee_os/issues/1807 4836d57389fSJerome Forissier[#1801]: https://github.com/OP-TEE/optee_os/issues/1801 4846d57389fSJerome Forissier[#1799]: https://github.com/OP-TEE/optee_os/issues/1799 4856d57389fSJerome Forissier[#1787]: https://github.com/OP-TEE/optee_os/issues/1787 4866d57389fSJerome Forissier[#1785]: https://github.com/OP-TEE/optee_os/issues/1785 4876d57389fSJerome Forissier[#1778]: https://github.com/OP-TEE/optee_os/issues/1778 4886d57389fSJerome Forissier[#1767]: https://github.com/OP-TEE/optee_os/issues/1767 4896d57389fSJerome Forissier[#1766]: https://github.com/OP-TEE/optee_os/issues/1766 4906d57389fSJerome Forissier[#1759]: https://github.com/OP-TEE/optee_os/issues/1759 4916d57389fSJerome Forissier[#1754]: https://github.com/OP-TEE/optee_os/issues/1754 4926d57389fSJerome Forissier[#1748]: https://github.com/OP-TEE/optee_os/issues/1748 4936d57389fSJerome Forissier[#1733]: https://github.com/OP-TEE/optee_os/issues/1733 4946d57389fSJerome Forissier[#1729]: https://github.com/OP-TEE/optee_os/issues/1729 4956d57389fSJerome Forissier[#1720]: https://github.com/OP-TEE/optee_os/issues/1720 4966d57389fSJerome Forissier[#1714]: https://github.com/OP-TEE/optee_os/issues/1714 4976d57389fSJerome Forissier[#1703]: https://github.com/OP-TEE/optee_os/issues/1703 4986d57389fSJerome Forissier[#1700]: https://github.com/OP-TEE/optee_os/issues/1700 4996d57389fSJerome Forissier[#1693]: https://github.com/OP-TEE/optee_os/issues/1693 5006d57389fSJerome Forissier[#1684]: https://github.com/OP-TEE/optee_os/issues/1684 5016d57389fSJerome Forissier[#1682]: https://github.com/OP-TEE/optee_os/issues/1682 5026d57389fSJerome Forissier[#1671]: https://github.com/OP-TEE/optee_os/issues/1671 5036d57389fSJerome Forissier[#1670]: https://github.com/OP-TEE/optee_os/issues/1670 5046d57389fSJerome Forissier[#1669]: https://github.com/OP-TEE/optee_os/issues/1669 5056d57389fSJerome Forissier[#1666]: https://github.com/OP-TEE/optee_os/issues/1666 5066d57389fSJerome Forissier[#1664]: https://github.com/OP-TEE/optee_os/issues/1664 5076d57389fSJerome Forissier[#1658]: https://github.com/OP-TEE/optee_os/issues/1658 5086d57389fSJerome Forissier[#1631]: https://github.com/OP-TEE/optee_os/issues/1631 5096d57389fSJerome Forissier[OP-TEE-2017-0001]: https://www.op-tee.org/security-advisories/ 5106d57389fSJerome Forissier 5115d8aaa04SJerome Forissier# OP-TEE - version 2.5.0 5125d8aaa04SJerome Forissier 5135d8aaa04SJerome Forissier[Link][github_commits_2_5_0] to a list of all commits between this release and 5145d8aaa04SJerome Forissierthe previous one (2.4.0). 5155d8aaa04SJerome Forissier 5165d8aaa04SJerome Forissier## New features 5175d8aaa04SJerome Forissier 5185d8aaa04SJerome Forissier* New supported platform: i.MX7D ([#1639]) 5195d8aaa04SJerome Forissier* Secure storage: anti-rollback protection for REE FS using RPMB FS ([#1630]) 5205d8aaa04SJerome Forissier* Assign non-secure DDR configuration from DT if CFG_DT=y ([#1623]) 5215d8aaa04SJerome Forissier* Add new image format: split image into three separate binaries suitable for 5225d8aaa04SJerome Forissier upcoming ARM Trusted Firmware ([#1589]). 5235d8aaa04SJerome Forissier* Make alignment check configurable ([#1586]) 5245d8aaa04SJerome Forissier* drivers: add TZC380 driver ([#1578]) 5255d8aaa04SJerome Forissier* plat-imx: PSCI CPU off ([#1577]) 5265d8aaa04SJerome Forissier* 64-bit paging on QEMU v8 and HiKey ([#1575], [#1592]) 5275d8aaa04SJerome Forissier* Benchmark framework ([#1365]) 5285d8aaa04SJerome Forissier* Dump call stack of user TAs on abort ([#1552]) 5295d8aaa04SJerome Forissier* plat-hikey: enable Secure Data Path ([#1440]) 5305d8aaa04SJerome Forissier* Add interface to load and decrypt/authenticate user TAs ([#1513]) 5315d8aaa04SJerome Forissier* plat-ti: add secure paging support ([#1493]) 5325d8aaa04SJerome Forissier* plat-ti: add OTP hardware key support ([#1492]) 5335d8aaa04SJerome Forissier* Support ARM GICv3 ([#1465]) 5345d8aaa04SJerome Forissier 5355d8aaa04SJerome Forissier## Removed features 5365d8aaa04SJerome Forissier 5375d8aaa04SJerome Forissier* stm-orly2 is not supported anymore ([#1650]) 5385d8aaa04SJerome Forissier* Remove secure storage based on SQL FS (`CFG_SQL_FS=y`) ([#1490]) 5395d8aaa04SJerome Forissier* Remove support for mapping user TAs with 1 MiB or 2 MiB granularity 5405d8aaa04SJerome Forissier (`CFG_SMALL_PAGE_USER_TA=n`) ([#1559]). TAs are always mapped using small 5415d8aaa04SJerome Forissier pages. 5425d8aaa04SJerome Forissier 5435d8aaa04SJerome Forissier## Bug fixes 5445d8aaa04SJerome Forissier 5455d8aaa04SJerome Forissier* Reduce size of non-pageable code ([#1621]) 5465d8aaa04SJerome Forissier* Ignore `TA_FLAG_MULTI_SESSION` and `TA_FLAG_INSTANCE_KEEP_ALIVE` when 5475d8aaa04SJerome Forissier `TA_FLAG_SINGLE_INSTANCE` is not set ([#1574]) 5485d8aaa04SJerome Forissier* libutee: remove buffering for AES GCM (PR#1573) and AES CTR ([#1580]) 5495d8aaa04SJerome Forissier* Fix ROUNDUP()/ROUNDDOWN() macros ([#1519]) 5505d8aaa04SJerome Forissier* Do not touch other bits in GICD_CTLR ([#1508]) 5515d8aaa04SJerome Forissier* Fix build issue with `DEBUG=y` and `CFG_TEE_CORE_LOG_LEVEL=0` ([#1502]) 5525d8aaa04SJerome Forissier* crypto: do not restrict hash size when algorithm is ECDSA ([#1497]) 5535d8aaa04SJerome Forissier 5545d8aaa04SJerome Forissier## Security fixes or enhancements 5555d8aaa04SJerome Forissier 5565d8aaa04SJerome Forissier- crypto: fix RSA key leakage after fault injection attack 5575d8aaa04SJerome Forissier ([OP-TEE-2016-0003][OP-TEE-2016-0003]) ([#1610]) 5585d8aaa04SJerome Forissier* crypto: fix RSA key leakage after side channel attack 5595d8aaa04SJerome Forissier ([OP-TEE-2016-0002][OP-TEE-2016-0002]) ([#1610]) 5605d8aaa04SJerome Forissier* Make pager aliased pages not always writable ([#1551]) 5615d8aaa04SJerome Forissier* Support for no-exec RO and RW data ([#1459], [#1550]) 5625d8aaa04SJerome Forissier 5635d8aaa04SJerome Forissier## New issues 5645d8aaa04SJerome Forissier 5655d8aaa04SJerome Forissier* armv7: some platform-specific code (`plat_cpu_reset_early()`) overwrites 5665d8aaa04SJerome ForissierSCTLR bits configured by generic code. This affects alignment checks (`SCTLR.A`) 5675d8aaa04SJerome Forissierand write-implies-no-exec (`SCTLR.WXN`, `SCTLR.UWXN`), which can therefore not 5685d8aaa04SJerome Forissierbe configured via the compile-time `CFG_` variables. 5695d8aaa04SJerome Forissier* armv7: plat-imx: Cortex-A9 cores should enable branch prediction (`SCLTR.Z`) 5705d8aaa04SJerome Forissierfor improved performance. 5715d8aaa04SJerome Forissier* [#1656] qemu_armv8a: init hangs when secure data path and pager are both 5725d8aaa04SJerome Forissier enabled. 5735d8aaa04SJerome Forissier 5745d8aaa04SJerome Forissier## Tested on 5755d8aaa04SJerome Forissier 5765d8aaa04SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 5775d8aaa04SJerome Forissierits default configuration, while _extended_ means it was run successfully 5785d8aaa04SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 5795d8aaa04SJerome Forissierv1.1.0.4. 5805d8aaa04SJerome Forissier 5815d8aaa04SJerome ForissierIf a platform is not listed, it means the release was not tested on this 5825d8aaa04SJerome Forissierplatform. 5835d8aaa04SJerome Forissier 5845d8aaa04SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 5855d8aaa04SJerome Forissier* d02: extended 5865d8aaa04SJerome Forissier* hikey: extended 5875d8aaa04SJerome Forissier* imx-mx6ulevk: standard 5885d8aaa04SJerome Forissier* imx-mx6ullevk: standard 5895d8aaa04SJerome Forissier* imx-mx7dsabresd: standard 5905d8aaa04SJerome Forissier* ls-ls1021atwr: standard 5915d8aaa04SJerome Forissier* mediatek-mt8173: standard 5925d8aaa04SJerome Forissier* rcar-h3: standard 5935d8aaa04SJerome Forissier* rpi3: standard 5945d8aaa04SJerome Forissier* stm-b2260: extended 5955d8aaa04SJerome Forissier* stm-cannes: extended 5965d8aaa04SJerome Forissier* ti-am43xx: standard 5975d8aaa04SJerome Forissier* ti-am57xx: standard 5985d8aaa04SJerome Forissier* ti-dra7xx: standard 5995d8aaa04SJerome Forissier* vexpress-fvp: standard 6005d8aaa04SJerome Forissier* vexpress-juno: standard 6015d8aaa04SJerome Forissier* vexpress-qemu_armv8a: standard 6025d8aaa04SJerome Forissier* vexpress-qemu_virt: standard 6035d8aaa04SJerome Forissier 6045d8aaa04SJerome Forissier[github_commits_2_5_0]: https://github.com/OP-TEE/optee_os/compare/2.4.0...2.5.0-rc1 6055d8aaa04SJerome Forissier[#1656]: https://github.com/OP-TEE/optee_os/issues/1656 6065d8aaa04SJerome Forissier[#1650]: https://github.com/OP-TEE/optee_os/pull/1650 6075d8aaa04SJerome Forissier[#1639]: https://github.com/OP-TEE/optee_os/pull/1639 6085d8aaa04SJerome Forissier[#1630]: https://github.com/OP-TEE/optee_os/pull/1630 6095d8aaa04SJerome Forissier[#1623]: https://github.com/OP-TEE/optee_os/pull/1623 6105d8aaa04SJerome Forissier[#1621]: https://github.com/OP-TEE/optee_os/pull/1621 6115d8aaa04SJerome Forissier[#1610]: https://github.com/OP-TEE/optee_os/pull/1610 6125d8aaa04SJerome Forissier[#1592]: https://github.com/OP-TEE/optee_os/pull/1592 6135d8aaa04SJerome Forissier[#1589]: https://github.com/OP-TEE/optee_os/pull/1589 6145d8aaa04SJerome Forissier[#1586]: https://github.com/OP-TEE/optee_os/pull/1586 6155d8aaa04SJerome Forissier[#1580]: https://github.com/OP-TEE/optee_os/pull/1580 6165d8aaa04SJerome Forissier[#1578]: https://github.com/OP-TEE/optee_os/pull/1578 6175d8aaa04SJerome Forissier[#1577]: https://github.com/OP-TEE/optee_os/pull/1577 6185d8aaa04SJerome Forissier[#1574]: https://github.com/OP-TEE/optee_os/pull/1574 6195d8aaa04SJerome Forissier[#1559]: https://github.com/OP-TEE/optee_os/pull/1559 6205d8aaa04SJerome Forissier[#1551]: https://github.com/OP-TEE/optee_os/pull/1551 6215d8aaa04SJerome Forissier[#1550]: https://github.com/OP-TEE/optee_os/pull/1550 6225d8aaa04SJerome Forissier[#1519]: https://github.com/OP-TEE/optee_os/pull/1519 6235d8aaa04SJerome Forissier[#1502]: https://github.com/OP-TEE/optee_os/pull/1502 6245d8aaa04SJerome Forissier[#1365]: https://github.com/OP-TEE/optee_os/pull/1365 6255d8aaa04SJerome Forissier[#1552]: https://github.com/OP-TEE/optee_os/pull/1552 6265d8aaa04SJerome Forissier[#1513]: https://github.com/OP-TEE/optee_os/pull/1513 6275d8aaa04SJerome Forissier[#1508]: https://github.com/OP-TEE/optee_os/pull/1508 6285d8aaa04SJerome Forissier[#1493]: https://github.com/OP-TEE/optee_os/pull/1493 6295d8aaa04SJerome Forissier[#1497]: https://github.com/OP-TEE/optee_os/pull/1497 6305d8aaa04SJerome Forissier[#1492]: https://github.com/OP-TEE/optee_os/pull/1492 6315d8aaa04SJerome Forissier[#1490]: https://github.com/OP-TEE/optee_os/pull/1490 6325d8aaa04SJerome Forissier[#1465]: https://github.com/OP-TEE/optee_os/pull/1465 6335d8aaa04SJerome Forissier[#1459]: https://github.com/OP-TEE/optee_os/pull/1459 6345d8aaa04SJerome Forissier[#1440]: https://github.com/OP-TEE/optee_os/pull/1440 6355d8aaa04SJerome Forissier[OP-TEE-2016-0003]: https://www.op-tee.org/security-advisories/ 6365d8aaa04SJerome Forissier[OP-TEE-2016-0002]: https://www.op-tee.org/security-advisories/ 6375d8aaa04SJerome Forissier 638702609a7SJerome Forissier# OP-TEE - version 2.4.0 639702609a7SJerome Forissier 640702609a7SJerome Forissier[Link][github_commits_2_4_0] to a list of all commits between this release and 641702609a7SJerome Forissierthe previous one (2.3.0). 642702609a7SJerome Forissier 643702609a7SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 644702609a7SJerome ForissierSecure Storage internal format for the REE and SQL FS is not compatible due to 645702609a7SJerome Forissiercommits [a238b74][commit_a238b74] ("core: REE FS: use the new hash tree 646702609a7SJerome Forissierinterface") and [44e900e][commit_44e900e] ("core: SQL FS: use the new hash tree 647702609a7SJerome Forissierinterface"). 648702609a7SJerome Forissier 649702609a7SJerome Forissier## New features 650702609a7SJerome Forissier 651702609a7SJerome Forissier* Add porting guidelines 652702609a7SJerome Forissier 653702609a7SJerome Forissier* Add support for Secure Data Path which allows Client and Trusted Applications 654702609a7SJerome Forissier to share references to secure memory 655702609a7SJerome Forissier 656702609a7SJerome Forissier* New supported platform: Texas Instruments AM57xx (`PLATFORM=ti-am57xx`) 657702609a7SJerome Forissier 658702609a7SJerome Forissier* ARMv7-A: add support for platform services in secure monitor and add these 659702609a7SJerome Forissier services for the DRA7xx platform 660702609a7SJerome Forissier 661702609a7SJerome Forissier* SPI framework and PL022 driver cleanup and improvements 662702609a7SJerome Forissier 663702609a7SJerome Forissier* Use CNTPCT (when available) to add entropy to the software PRNG 664702609a7SJerome Forissier 665702609a7SJerome Forissier* Add GlobalPlatform Socket API for UDP and TCP (IPv4 and IPv6) 666702609a7SJerome Forissier 667702609a7SJerome Forissier* DRA7: add TRNG driver, enable GICv2 driver 668702609a7SJerome Forissier 669702609a7SJerome Forissier* Support load address larger than 4G 670702609a7SJerome Forissier 671702609a7SJerome Forissier* libutee: preserve error code when calling TEE_Panic() for easier 672702609a7SJerome Forissier troubleshooting 673702609a7SJerome Forissier 674702609a7SJerome Forissier* Support TA profiling with gprof (-pg compiler switch) 675702609a7SJerome Forissier 676702609a7SJerome Forissier* Optimize the ELF loader for TAs when pager is enabled 677702609a7SJerome Forissier 678702609a7SJerome Forissier* Update documentation 679702609a7SJerome Forissier 680702609a7SJerome Forissier* Add paged secure shared memory that can be transferred between TAs as 681702609a7SJerome Forissier needed 682702609a7SJerome Forissier 683702609a7SJerome Forissier* Introduce MOBJ abstraction 684702609a7SJerome Forissier 685702609a7SJerome Forissier* i.MX6: add PSCI "on" function 686702609a7SJerome Forissier 687702609a7SJerome Forissier* arm32: introduce PSCI framework 688702609a7SJerome Forissier 689702609a7SJerome Forissier## Bug fixes 690702609a7SJerome Forissier 691702609a7SJerome Forissier* Secure storage: improve integrity checking of the REE and SQL filesystems by 692702609a7SJerome Forissier adding a hash tree on the internal data structures. Any external modification 693702609a7SJerome Forissier is detected, except full rollback. Fixes [#1188][issue1188]. 694702609a7SJerome Forissier 695702609a7SJerome Forissier* The linux driver will set the 'privileged' flag (TEE_GEN_CAP_PRIVILEGED) on 696702609a7SJerome Forissier the device intended for use by tee-supplicant. Fixes [#1199][issue1199]. 697702609a7SJerome Forissier 698702609a7SJerome Forissier* RPMB: don't try to program the RPMB key by default 699702609a7SJerome Forissier 700702609a7SJerome Forissier* Fix "make clean" error cases 701702609a7SJerome Forissier 702702609a7SJerome Forissier* Fix issue when resetting persistent storage enumerator [#1332][issue1332] 703702609a7SJerome Forissier 704702609a7SJerome Forissier* Fix TA panic when doing AES CTS with specific buffer sizes 705702609a7SJerome Forissier [#1203][issue1203]. 706702609a7SJerome Forissier 707702609a7SJerome Forissier## Known issues 708702609a7SJerome Forissier 709702609a7SJerome Forissier* On RPi3 xtest sometimes stall (rcu_sched self-detected stall on CPU) [#1353][issue1353] 710702609a7SJerome Forissier* For multi-core PSCI support is to be added for ls1021atwr in OP-TEE. 711702609a7SJerome Forissier* USB keyboard cannot be used to stop the u-boot timeout ([build issue131]). 712702609a7SJerome Forissier* Travis service (build.git) seems unstable from time to time. 713702609a7SJerome Forissier 714702609a7SJerome Forissier## Tested on 715702609a7SJerome Forissier 716702609a7SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 717702609a7SJerome Forissierits default configuration, while _extended_ means it was run successfully 718702609a7SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 719702609a7SJerome Forissierv1.1.0.4. 720702609a7SJerome Forissier 721702609a7SJerome ForissierIf a platform is not listed, it means the release was not tested on this 722702609a7SJerome Forissierplatform. 723702609a7SJerome Forissier 724702609a7SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 725702609a7SJerome Forissier* d02: extended 726702609a7SJerome Forissier* hikey: extended 727702609a7SJerome Forissier* imx-mx6ulevk: standard 728702609a7SJerome Forissier* ls-ls1021atwr: standard (single core) 729702609a7SJerome Forissier* mediatek-mt8173: standard 730702609a7SJerome Forissier* rcar-h3: standard 731702609a7SJerome Forissier* rpi3: standard 732702609a7SJerome Forissier* stm-b2260: extended 733702609a7SJerome Forissier* ti-dra7xx: standard 734702609a7SJerome Forissier* vexpress-fvp: standard 735702609a7SJerome Forissier* vexpress-juno: standard 736702609a7SJerome Forissier* vexpress-qemu_armv8a: standard 737702609a7SJerome Forissier* vexpress-qemu_virt: standard 738702609a7SJerome Forissier* zynqmp-zc1751_dc1: standard 739702609a7SJerome Forissier* zynqmp-zc1751_dc2: standard 740702609a7SJerome Forissier* zynqmp-zcu102: standard 741702609a7SJerome Forissier 742702609a7SJerome Forissier[github_commits_2_4_0]: https://github.com/OP-TEE/optee_os/compare/2.3.0...2.4.0 743702609a7SJerome Forissier[issue1332]: https://github.com/OP-TEE/optee_os/issues/1332 744702609a7SJerome Forissier[issue1353]: https://github.com/OP-TEE/optee_os/issues/1353 745702609a7SJerome Forissier[build issue131]: https://github.com/OP-TEE/build/issues/131 746702609a7SJerome Forissier[commit_a238b74]: https://github.com/OP-TEE/optee_os/commit/a238b744b1b3 747702609a7SJerome Forissier[commit_44e900e]: https://github.com/OP-TEE/optee_os/commit/44e900eabfc1 748702609a7SJerome Forissier 74928fcee17SJerome Forissier# OP-TEE - version 2.3.0 75028fcee17SJerome Forissier 75128fcee17SJerome Forissier[Link][github_commits_2_3_0] to a list of all commits between this release and 75228fcee17SJerome Forissierthe previous one (2.2.0). 75328fcee17SJerome Forissier 75428fcee17SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 75528fcee17SJerome ForissierSecure Storage internal format for the REE FS is not compatible due to commit 75628fcee17SJerome Forissier[361fb3e][commit_361fb3e] ("core: REE FS: use a single file per object"). 75728fcee17SJerome Forissier 75828fcee17SJerome Forissier[commit_361fb3e]: https://github.com/OP-TEE/optee_os/commit/361fb3e 75928fcee17SJerome Forissier 76028fcee17SJerome Forissier## New features 76128fcee17SJerome Forissier 76228fcee17SJerome Forissier* New supported platform: Xilinx Zynq 7000 ZC702 (`PLATFORM=zynq7k-zc702`) 76328fcee17SJerome Forissier 76428fcee17SJerome Forissier* Add debug assertions to spinlocks and mutexes 76528fcee17SJerome Forissier 76628fcee17SJerome Forissier* Add more CP15 register access macros for Cortex-A9 76728fcee17SJerome Forissier 76828fcee17SJerome Forissier* ARMv7-A: redesign secure monitor to make it easier to register services 76928fcee17SJerome Forissier 77028fcee17SJerome Forissier* ARMv7-A: cleanup boot arguments 77128fcee17SJerome Forissier 77228fcee17SJerome Forissier* libutee: extend `TEE_CheckMemoryAccessRights()` with 77328fcee17SJerome Forissier `TEE_MEMORY_ACCESS_SECURE` and `TEE_MEMORY_ACCESS_NONSECURE` 77428fcee17SJerome Forissier 77528fcee17SJerome Forissier* plat-hikey: enable SPI by default and add sample test code 77628fcee17SJerome Forissier 77728fcee17SJerome Forissier* Consider `CFLAGS_ta_arm64` and `CFLAGS_ta_arm32` when building TAs 77828fcee17SJerome Forissier 77928fcee17SJerome Forissier* Secure storage refactoring 78028fcee17SJerome Forissier - Simplify interface with tee-supplicant. Minimize round trips with normal 78128fcee17SJerome Forissier world, especially by adding a cache for FS RPC payload data. 78228fcee17SJerome Forissier - REE FS: use a single file per object, remove block cache. 78328fcee17SJerome Forissier 78428fcee17SJerome Forissier* Print call stack in panic() 78528fcee17SJerome Forissier 78628fcee17SJerome Forissier## Bug fixes 78728fcee17SJerome Forissier 78828fcee17SJerome Forissier* Fix UUID encoding when communicating with normal world (use big endian 78928fcee17SJerome Forissier mode instead of native endianness). Related to this, the string format 79028fcee17SJerome Forissier for UUIDs has changed in tee-supplicant, so that TA file names now follow 79128fcee17SJerome Forissier the format defined in RFC4122 (a missing hyphen was added). The old format 79228fcee17SJerome Forissier is still supported, but deprecated, and will likely be removed with the 79328fcee17SJerome Forissier next major release. 79428fcee17SJerome Forissier 79528fcee17SJerome Forissier* Drop write permission to non-writable ELF segments after TA loading is 79628fcee17SJerome Forissier complete. 79728fcee17SJerome Forissier 79828fcee17SJerome Forissier* mm: fix confusing memory mapping debug traces 79928fcee17SJerome Forissier 80028fcee17SJerome Forissier* plat-ti: fix issues with MMU mapping 80128fcee17SJerome Forissier 80228fcee17SJerome Forissier* crypto: fix clearing of big numbers 80328fcee17SJerome Forissier 80428fcee17SJerome Forissier* build: allow spaces and double quotes in CFG_ variables 80528fcee17SJerome Forissier 80628fcee17SJerome Forissier* mm: use paddr_t to support both 32- and 64-bit architectures properly. 80728fcee17SJerome Forissier Resolves 32-bit truncation error when pool is at top of 32 bit address 80828fcee17SJerome Forissier space on 64-bit architecture. 80928fcee17SJerome Forissier 81028fcee17SJerome Forissier* plat-stm: support pager. Fix pager on ARMv7-A SMP boards. 81128fcee17SJerome Forissier 81228fcee17SJerome Forissier* Fix debug output of Trusted Applications (remove "ERROR: TEE-CORE:" prefix) 81328fcee17SJerome Forissier 81428fcee17SJerome Forissier* Do not consider TA memref parameters as TA private memory 81528fcee17SJerome Forissier 81628fcee17SJerome Forissier* crypto: fix `cipher_final()` which would not call `cbc_done()` for CBC_MAC 81728fcee17SJerome Forissier algorithms 81828fcee17SJerome Forissier 81928fcee17SJerome Forissier* fix for 16-way PL310 82028fcee17SJerome Forissier 82128fcee17SJerome Forissier* arm32: fix call stack unwinding (`print_stack()`) 82228fcee17SJerome Forissier 82328fcee17SJerome Forissier* arm32: fix spinlock assembly code 82428fcee17SJerome Forissier 82528fcee17SJerome Forissier* plat-stm, plat-imx: fix SCR initalization 82628fcee17SJerome Forissier 82728fcee17SJerome Forissier* Fix user L1 MMU entries calculation (non-LPAE), allowing TTBCR.N values 82828fcee17SJerome Forissier other than 7. 82928fcee17SJerome Forissier 83028fcee17SJerome Forissier* mtk-mt8173: fix panic caused by incorrect size of SHMEM 83128fcee17SJerome Forissier 83228fcee17SJerome Forissier* plat-stm: fix RNG driver (non-flat mapping) 83328fcee17SJerome Forissier 83428fcee17SJerome Forissier## Known issues 83528fcee17SJerome Forissier 83628fcee17SJerome Forissier* New issues open on GitHub 83728fcee17SJerome Forissier * [#1203][issue1203] AES-CTS mode will fail when inlen=0x100, in_incr=0x80 83828fcee17SJerome Forissier * [#1199][issue1199] Both tee and teepriv reported GlobalPlatform compliant 83928fcee17SJerome Forissier * [#1188][issue1188] Secure storage (SQL FS and REE FS): blocks not tied to 84028fcee17SJerome Forissier current meta header 84128fcee17SJerome Forissier * [#1172][issue1172] paddr_t should be larger than 32 bits when 84228fcee17SJerome Forissier CFG_WITH_LPAE is enabled 84328fcee17SJerome Forissier 84428fcee17SJerome Forissier## Tested on 84528fcee17SJerome Forissier 84628fcee17SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 84728fcee17SJerome Forissierits default configuration, while _extended_ means it was run successfully 84828fcee17SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 84928fcee17SJerome Forissierv1.1.0.4. 85028fcee17SJerome Forissier 85128fcee17SJerome ForissierIf a platform is not listed, it means the release was not tested on this 85228fcee17SJerome Forissierplatform. 85328fcee17SJerome Forissier 85428fcee17SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 85528fcee17SJerome Forissier* d02: extended 85628fcee17SJerome Forissier* hikey: extended 85728fcee17SJerome Forissier* imx-mx6ulevk: standard 85828fcee17SJerome Forissier* ls-ls1021atwr: standard 85928fcee17SJerome Forissier* mediatek-mt8173: standard 86028fcee17SJerome Forissier* rcar-h3: standard 86128fcee17SJerome Forissier* rpi3: standard 86228fcee17SJerome Forissier* stm-b2260: extended 86328fcee17SJerome Forissier* stm-cannes: extended 86428fcee17SJerome Forissier* ti-dra7xx: standard 86528fcee17SJerome Forissier* vexpress-fvp: standard 86628fcee17SJerome Forissier* vexpress-juno: standard 86728fcee17SJerome Forissier* vexpress-qemu_armv8a: standard 86828fcee17SJerome Forissier* vexpress-qemu_virt: extended 86928fcee17SJerome Forissier* zynqmp-zcu102: standard 87028fcee17SJerome Forissier 87128fcee17SJerome Forissier[github_commits_2_3_0]: https://github.com/OP-TEE/optee_os/compare/2.2.0...2.3.0 87228fcee17SJerome Forissier[issue1172]: https://github.com/OP-TEE/optee_os/issues/1172 87328fcee17SJerome Forissier[issue1188]: https://github.com/OP-TEE/optee_os/issues/1188 87428fcee17SJerome Forissier[issue1199]: https://github.com/OP-TEE/optee_os/issues/1199 87528fcee17SJerome Forissier[issue1203]: https://github.com/OP-TEE/optee_os/issues/1203 87628fcee17SJerome Forissier 877c0c5d399SJerome Forissier# OP-TEE - version 2.2.0 878c0c5d399SJerome Forissier 879c0c5d399SJerome Forissier[Link][github_commits_2_2_0] to a list of all commits between this release and 880c0c5d399SJerome Forissierthe previous one (2.1.0). 881c0c5d399SJerome Forissier 882c0c5d399SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 883c0c5d399SJerome ForissierSecure Storage internal format is not compatible due to commit 884c0c5d399SJerome Forissier[fde4a75][commit_fde4a75] ("storage: encrypt the FEK with a TA-specific key"). 885c0c5d399SJerome Forissier 886c0c5d399SJerome Forissier[commit_fde4a75]: https://github.com/OP-TEE/optee_os/commit/fde4a75 887c0c5d399SJerome Forissier 888c0c5d399SJerome Forissier## New features 889c0c5d399SJerome Forissier 890c0c5d399SJerome Forissier* New supported platforms: 891c0c5d399SJerome Forissier * Freescale i.MX6 Quad SABRE Lite & SD 892c0c5d399SJerome Forissier * HiSilicon D02 893c0c5d399SJerome Forissier * Raspberry Pi3 894c0c5d399SJerome Forissier * Renesas RCAR H3 895c0c5d399SJerome Forissier * STMicroelectronics b2260 - h410 896c0c5d399SJerome Forissier 897c0c5d399SJerome Forissier* Pager: Support paging of read/write pages by encrypting them with AES-GCM. 898c0c5d399SJerome Forissier Support paging of user TAs. Add global setting for TZSRAM size 899c0c5d399SJerome Forissier (CFG_CORE_TZSRAM_EMUL_SIZE), defaults to 300K. 900c0c5d399SJerome Forissier 901c0c5d399SJerome Forissier* Support for more than 8 CPU cores 902c0c5d399SJerome Forissier 903c0c5d399SJerome Forissier* Added SPI framework and PL022 driver 904c0c5d399SJerome Forissier 905c0c5d399SJerome Forissier* GPIO: framework supports multiple instances, PL061 driver now has get/set 906c0c5d399SJerome Forissier interrupt and mode control functions 907c0c5d399SJerome Forissier 908c0c5d399SJerome Forissier* Secure storage: Encrypt the File Encryption Key with a TA-specific key for 909c0c5d399SJerome Forissier better TA isolation. Add build-time and run-time support for multiple storage 910c0c5d399SJerome Forissier backends. Add SQLite backend. 911c0c5d399SJerome Forissier 912c0c5d399SJerome Forissier* Trusted User Interface: some code is introduced to support the implementation 913c0c5d399SJerome Forissier of TUI. This includes: a generic framebuffer driver, display and serial 914c0c5d399SJerome Forissier abstractions, and drivers for PL111 (LCD) / PL050 (KMI) / TZC400 and PS2 915c0c5d399SJerome Forissier mouse. 916c0c5d399SJerome Forissier 917c0c5d399SJerome Forissier* AES acceleration using ARMv8-A Cryptographic Extensions instructions is 918c0c5d399SJerome Forissier now supported in AArch32 mode 919c0c5d399SJerome Forissier 920c0c5d399SJerome Forissier* Add support for GCC flags: -fsanitize=undefined and -fsanitize=kernel-address 921c0c5d399SJerome Forissier 922c0c5d399SJerome Forissier* Use a global setting for core heap size (CFG_CORE_HEAP_SIZE), 64K by default. 923c0c5d399SJerome Forissier 924c0c5d399SJerome Forissier* Add macros to unwind and print the call stack of TEE core 925c0c5d399SJerome Forissier 926c0c5d399SJerome Forissier* Libtomcrypt: sync with the latest `develop` branch. 927c0c5d399SJerome Forissier 928c0c5d399SJerome Forissier* The Trusted Application SDK (ta_dev_kit.mk) can produce libraries (.a) 929c0c5d399SJerome Forissier 930c0c5d399SJerome Forissier* Rework assertions and TEE core panics and properly honor NDEBUG 931c0c5d399SJerome Forissier 932c0c5d399SJerome Forissier## Bug fixes 933c0c5d399SJerome Forissier 934c0c5d399SJerome Forissier* Fix incorrect algorithm passed to cipher.final() 935c0c5d399SJerome Forissier 936c0c5d399SJerome Forissier* scripts: support Python 2.x and 3.x 937c0c5d399SJerome Forissier 938c0c5d399SJerome Forissier* Secure storage: Add proper locking to support concurrent access. Fix sign 939c0c5d399SJerome Forissier extension bug with offset parameter of syscall storage_obj_seek which could 940c0c5d399SJerome Forissier cause errors in Aarch32 mode. Fix reading beyond end of file. 941c0c5d399SJerome Forissier 942c0c5d399SJerome Forissier* Aarch64: mask all maskable exceptions before doing a normal return from call. 943c0c5d399SJerome Forissier 944c0c5d399SJerome Forissier* Device Tree: add no-map property to OP-TEE node in reserved-memory. 945c0c5d399SJerome Forissier 946c0c5d399SJerome Forissier* LibTomcrypt: fix CVE-2016-6129 947c0c5d399SJerome Forissier 948c0c5d399SJerome Forissier## Known issues 949c0c5d399SJerome Forissier 950c0c5d399SJerome Forissier* New issues open on GitHub 951c0c5d399SJerome Forissier * [#1093][issue1093] rcar-h3: xtest 6010 hangs 952c0c5d399SJerome Forissier * [#1092][issue1092] rcar-h3: xtest 4010 fails 953c0c5d399SJerome Forissier * [#1081][issue1081] Bad mapping of TA secure memref parameters 954c0c5d399SJerome Forissier * [#1071][issue1071] __data_end may not correctly represent text start position when using CFG_WITH_PAGER 955c0c5d399SJerome Forissier * [#1069][issue1069] armv7/Aarch32: crash in stack unwind (DPRINT_STACK()) 956c0c5d399SJerome Forissier 957c0c5d399SJerome Forissier## Tested on 958c0c5d399SJerome Forissier 959c0c5d399SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 960c0c5d399SJerome Forissierits default configuration, while _extended_ means it was run successfully 961c0c5d399SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 962c0c5d399SJerome Forissierv1.1.0.4. 963c0c5d399SJerome Forissier 964c0c5d399SJerome ForissierIf a platform is not listed, it means the release was not tested on this 965c0c5d399SJerome Forissierplatform. 966c0c5d399SJerome Forissier 967c0c5d399SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 968c0c5d399SJerome Forissier* d02: extended 969c0c5d399SJerome Forissier* hikey: extended 970c0c5d399SJerome Forissier* imx-mx6qsabrelite: standard 971c0c5d399SJerome Forissier* imx-mx6qsabresd: standard 972c0c5d399SJerome Forissier* rcar-h3: standard, pass except issues [#1092][issue1092] and [#1093][issue1093] 973c0c5d399SJerome Forissier* rpi3: standard 974c0c5d399SJerome Forissier* stm-b2260: standard 975c0c5d399SJerome Forissier* stm-cannes: standard 976c0c5d399SJerome Forissier* ti-dra7xx: standard 977c0c5d399SJerome Forissier* vexpress-fvp: standard 978c0c5d399SJerome Forissier* vexpress-juno: standard 979c0c5d399SJerome Forissier* vexpress-qemu_armv8a: standard 980c0c5d399SJerome Forissier* vexpress-qemu_virt: extended 981c0c5d399SJerome Forissier* zynqmp-zcu102: standard 982c0c5d399SJerome Forissier 983c0c5d399SJerome Forissier[github_commits_2_2_0]: https://github.com/OP-TEE/optee_os/compare/2.1.0...2.2.0 984c0c5d399SJerome Forissier[issue1081]: https://github.com/OP-TEE/optee_os/issues/1081 985c0c5d399SJerome Forissier[issue1071]: https://github.com/OP-TEE/optee_os/issues/1071 986c0c5d399SJerome Forissier[issue1069]: https://github.com/OP-TEE/optee_os/issues/1069 987c0c5d399SJerome Forissier[issue1092]: https://github.com/OP-TEE/optee_os/issues/1092 988c0c5d399SJerome Forissier[issue1093]: https://github.com/OP-TEE/optee_os/issues/1093 989c0c5d399SJerome Forissier 990ac3cc110SPascal Brand# OP-TEE - version 2.1.0 991a0cd5d60SPascal Brand 992ac3cc110SPascal Brand## New features 993ac3cc110SPascal Brand 994ac3cc110SPascal Brand* New supported platforms: 995ac3cc110SPascal Brand * Xilinx Zynq UltraScale+ MPSOC 996ac3cc110SPascal Brand * Spreadtrum SC9860 997ac3cc110SPascal Brand 998ac3cc110SPascal Brand* GCC5 support 999ac3cc110SPascal Brand 1000ac3cc110SPascal Brand* Non Linear Mapping support: In OP-TEE kernel mode, the physical to virtual 1001ac3cc110SPascal Brand addresses was linear until this release, meaning the virtual addresses 1002ac3cc110SPascal Brand were equal to the physical addresses. This is no more the case in this 1003ac3cc110SPascal Brand release. 1004ac3cc110SPascal Brand 1005ac3cc110SPascal Brand* Font rendering routines have been introduced in order to ease an 1006ac3cc110SPascal Brand implementation of Trusted UI. 1007ac3cc110SPascal Brand 1008ac3cc110SPascal Brand* File Storage: Possibility to use the normal world filesystem and the RPMB 1009ac3cc110SPascal Brand implementations simultaneously. 1010ac3cc110SPascal Brand 1011ac3cc110SPascal Brand* AOSP: There is a [local manifest][aosp_local_manifest] to build OP-TEE into an AOSP build, running on HiKey. 1012ac3cc110SPascal Brand Please refer to the README in that repo for instructions. 1013ac3cc110SPascal Brand 1014ac3cc110SPascal Brand* OpenEmbedded: In addition to the makefile-based build described in the optee_os README, there is an 1015ac3cc110SPascal Brand [OpenEmbedded-based build][oe_build] that supports Qemu (32-bit), FVP (64-bit), and HiKey (64-bit). 1016ac3cc110SPascal Brand Please refer to the README in that repo for instructions. 1017ac3cc110SPascal Brand 1018ac3cc110SPascal Brand* [Link][github_commits_2_1_0] to a list of all commits between this and 1019ac3cc110SPascal Brand previous release. 1020ac3cc110SPascal Brand 1021ac3cc110SPascal Brand 1022ac3cc110SPascal Brand## Tested on 1023ac3cc110SPascal BrandDefinitions: 1024ac3cc110SPascal Brand 1025ac3cc110SPascal Brand| Type | Meaning | 1026ac3cc110SPascal Brand| ---- | ------- | 1027ac3cc110SPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1028ac3cc110SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1029ac3cc110SPascal Brand 1030ac3cc110SPascal Brand* ARM Juno Board (vexpress-juno), standard. 1031ac3cc110SPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1032ac3cc110SPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 10.0.37) 1033ac3cc110SPascal Brand* FSL i.MX6 UltraLite EVK (imx), standard. 1034ac3cc110SPascal Brand* FSL ls1021a (ls-ls1021atwr), standard tests. 1035ac3cc110SPascal Brand* HiKey (hikey), standard + extended tests. 1036ac3cc110SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1037ac3cc110SPascal Brand* Xilinx Zynq UltraScale+ MPSOC, standard tests 1038ac3cc110SPascal Brand 1039ac3cc110SPascal BrandNote that the following platform has not been tested: 1040ac3cc110SPascal Brand* MTK8173-EVB (mediatek-mt8173) 1041ac3cc110SPascal Brand 1042ac3cc110SPascal Brand 1043ac3cc110SPascal Brand## Known issues 1044ac3cc110SPascal Brand* Issue(s) open on GitHub 1045ac3cc110SPascal Brand * [#868][pr868]: python-wand font generation sometimes times out 1046ac3cc110SPascal Brand * [#863][pr863]: "double free or corruption" error when building optee_os 1047ac3cc110SPascal Brand * [#858][pr858]: UUIDs in binary format have wrong endinanness 1048ac3cc110SPascal Brand * [#857][pr857]: Formatting of UUIDs is incorrect 1049ac3cc110SPascal Brand * [#847][pr847]: optee_os panic(TEE-CORE: Assertion) 1050ac3cc110SPascal Brand * [#838][pr838]: TUI font rendering is _very_ slow 1051ac3cc110SPascal Brand * [#814][pr814]: Persistent objects : save informations after close 1052ac3cc110SPascal Brand * [#665][pr665]: xtest 1013 stalled on HiKey when log levels are 4 and optee_os is on its own UART 1053ac3cc110SPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1054ac3cc110SPascal Brand 1055ac3cc110SPascal Brand[github_commits_2_1_0]: https://github.com/OP-TEE/optee_os/compare/2.0.0...2.1.0 1056ac3cc110SPascal Brand[pr868]: https://github.com/OP-TEE/optee_os/issues/868 1057ac3cc110SPascal Brand[pr863]: https://github.com/OP-TEE/optee_os/issues/863 1058ac3cc110SPascal Brand[pr858]: https://github.com/OP-TEE/optee_os/issues/858 1059ac3cc110SPascal Brand[pr857]: https://github.com/OP-TEE/optee_os/issues/857 1060ac3cc110SPascal Brand[pr847]: https://github.com/OP-TEE/optee_os/issues/847 1061ac3cc110SPascal Brand[pr838]: https://github.com/OP-TEE/optee_os/issues/838 1062ac3cc110SPascal Brand[pr814]: https://github.com/OP-TEE/optee_os/issues/814 1063ac3cc110SPascal Brand[pr665]: https://github.com/OP-TEE/optee_os/issues/665 1064ac3cc110SPascal Brand[aosp_local_manifest]: https://github.com/linaro-swg/optee_android_manifest 1065ac3cc110SPascal Brand[oe_build]: https://github.com/linaro-swg/oe-optee 1066ac3cc110SPascal Brand 1067ac3cc110SPascal Brand# OP-TEE - version 2.0.0 1068a0cd5d60SPascal Brand 1069a0cd5d60SPascal Brand## New features 1070a0cd5d60SPascal Brand 1071a0cd5d60SPascal Brand* Generic driver: A new generic TEE driver is in the process of being 1072a0cd5d60SPascal Brand [upstreamed][gendrv_v9]. 1073a0cd5d60SPascal Brand In this release, [OP-TEE/optee_linuxdriver][optee_linuxdriver] is no more used. 1074a0cd5d60SPascal Brand Instead, linux v4.5 is being patched using the proposed Generic TEE Driver, 1075a0cd5d60SPascal Brand as it can be found in [https://github.com/linaro-swg/linux/tree/optee][linux_optee] 1076a0cd5d60SPascal Brand 1077a0cd5d60SPascal Brand* RPMB support: Secure Storage can now use Replay Protected Memory Block (RPMB) partition 1078a0cd5d60SPascal Brand of an eMMC device. Check the [full documentation][rpmb_doc] 1079a0cd5d60SPascal Brand 1080a0cd5d60SPascal Brand* Hard-float ABI is now available. 1081a0cd5d60SPascal Brand 1082a0cd5d60SPascal Brand* [Link][github_commits_2_0_0] to a list of all commits between this and 1083a0cd5d60SPascal Brand previous release. 1084a0cd5d60SPascal Brand 1085a0cd5d60SPascal Brand 1086a0cd5d60SPascal Brand## Tested on 1087a0cd5d60SPascal BrandDefinitions: 1088a0cd5d60SPascal Brand 1089a0cd5d60SPascal Brand| Type | Meaning | 1090a0cd5d60SPascal Brand| ---- | ------- | 1091a0cd5d60SPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1092a0cd5d60SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1093a0cd5d60SPascal Brand 1094a0cd5d60SPascal Brand* ARM Juno Board (vexpress-juno), standard. 1095a0cd5d60SPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1096a0cd5d60SPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 9.5.40) 1097eb00c7b9SPascal Brand* FSL ls1021a (ls-ls1021atwr), standard. 1098a0cd5d60SPascal Brand* HiKey (hikey), standard. 1099a0cd5d60SPascal Brand* MTK8173-EVB (mediatek-mt8173), standard. 1100a0cd5d60SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1101a0cd5d60SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1102a0cd5d60SPascal Brand 1103a0cd5d60SPascal Brand## Known issues 1104a0cd5d60SPascal Brand* Issue(s) open on GitHub 1105a0cd5d60SPascal Brand * [#40][prld40] BUG_ON() when re-using RPC buffer to tee-supplicant 1106a0cd5d60SPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1107a0cd5d60SPascal Brand 1108a0cd5d60SPascal Brand[github_commits_2_0_0]: https://github.com/OP-TEE/optee_os/compare/1.1.0...2.0.0 1109a0cd5d60SPascal Brand[rpmb_doc]: https://github.com/OP-TEE/optee_os/blob/master/documentation/secure_storage_rpmb.md 1110a0cd5d60SPascal Brand[optee_linuxdriver]: https://github.com/OP-TEE/optee_linuxdriver 1111a0cd5d60SPascal Brand[gendrv_v9]: https://lkml.org/lkml/2016/4/1/205 1112a0cd5d60SPascal Brand[linux_optee]: https://github.com/linaro-swg/linux/tree/optee 1113a0cd5d60SPascal Brand 1114a0cd5d60SPascal Brand 1115c5bbfb4dSPascal Brand# OP-TEE - version 1.1.0 1116c5bbfb4dSPascal Brand 1117c5bbfb4dSPascal Brand 1118c5bbfb4dSPascal Brand## New features 1119c5bbfb4dSPascal Brand 1120c5bbfb4dSPascal Brand* Softfloat library: floating point support is now available in 32bits TA. 1121c5bbfb4dSPascal Brand 1122c5bbfb4dSPascal Brand* Support running 64-bits TA: on ARMv8-A platform, TA can be compiled in 1123c5bbfb4dSPascal Brand AArch32 and/or in AArch64 in case the core is compiled in AArch64. 1124c5bbfb4dSPascal Brand An example can be found in HiKey configuration file. Using the following 1125c5bbfb4dSPascal Brand excerpt code, the user TA libraries are compiled in both AArch32 and 1126c5bbfb4dSPascal Brand AArch64, and can be found in `out/arm-plat-hikey/export-ta_arm32` and 1127c5bbfb4dSPascal Brand `out/arm-plat-hikey/export-ta_arm64` 1128c5bbfb4dSPascal Brand 1129c5bbfb4dSPascal Brand``` 1130c5bbfb4dSPascal Brand ta-targets = ta_arm32 1131c5bbfb4dSPascal Brand ta-targets += ta_arm64 1132c5bbfb4dSPascal Brand``` 1133c5bbfb4dSPascal Brand 1134c5bbfb4dSPascal Brand* Concurrent TA support: multiple TA can run in parallel on 1135c5bbfb4dSPascal Brand several cores. 1136c5bbfb4dSPascal Brand 1137c5bbfb4dSPascal Brand* New tests added in xtest test suite: concurrent TA (xtest 1013), 1138c5bbfb4dSPascal Brand floating point tests (xtest 1006 and os_test TA) and corruption 1139c5bbfb4dSPascal Brand file storage (xtest 20000) 1140c5bbfb4dSPascal Brand 1141c5bbfb4dSPascal Brand* [Link][github_commits_1_1_0] to a list of all commits between this and 1142c5bbfb4dSPascal Brand previous release. 1143c5bbfb4dSPascal Brand 1144c5bbfb4dSPascal Brand 1145c5bbfb4dSPascal Brand## Tested on 1146c5bbfb4dSPascal BrandDefinitions: 1147c5bbfb4dSPascal Brand 1148c5bbfb4dSPascal Brand| Type | Meaning | 1149c5bbfb4dSPascal Brand| ---- | ------- | 1150c5bbfb4dSPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1151c5bbfb4dSPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1152c5bbfb4dSPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1153c5bbfb4dSPascal Brand 1154c5bbfb4dSPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1155c5bbfb4dSPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 9.5.40) 1156c5bbfb4dSPascal Brand* HiKey (hikey), standard + extended tests. 1157c5bbfb4dSPascal Brand* MT8173 (mediatek), standard tests. 1158c5bbfb4dSPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1159c5bbfb4dSPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1160c5bbfb4dSPascal Brand 1161c5bbfb4dSPascal Brand## Known issues 1162c5bbfb4dSPascal Brand* Secure Storage is implemented, but note that anti-rollback protection 1163c5bbfb4dSPascal Brand is not implemented yet. 1164c5bbfb4dSPascal Brand 1165c5bbfb4dSPascal Brand* Issue(s) open on GitHub 1166c5bbfb4dSPascal Brand * [#40][prld40] BUG_ON() when re-using RPC buffer to tee-supplicant 1167c5bbfb4dSPascal Brand * [#296][pr296]: Connecting RPMB to the storage APIs. 1168c5bbfb4dSPascal Brand * [#493][pr493]: setup_juno_optee: unable to find pre-built binaries 1169c5bbfb4dSPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1170c5bbfb4dSPascal Brand 1171c5bbfb4dSPascal Brand[prld40]: https://github.com/OP-TEE/optee_linuxdriver/issues/40 1172c5bbfb4dSPascal Brand[pr506]: https://github.com/OP-TEE/optee_os/issues/506 1173c5bbfb4dSPascal Brand[github_commits_1_1_0]: https://github.com/OP-TEE/optee_os/compare/1.0.1...1.1.0 1174c5bbfb4dSPascal Brand 1175c5bbfb4dSPascal Brand 1176c5bbfb4dSPascal Brand 11778a7ee79dSPascal Brand# OP-TEE - version 1.0.0 11788a7ee79dSPascal Brand 11798a7ee79dSPascal BrandOP-TEE is now maintained by Linaro. Contributors do not need to 11808a7ee79dSPascal Brandsign a CLA anymore, but must follow the rules of the [DCO][DCO] 11818a7ee79dSPascal Brand(Developer Certificate of Origin) instead. 11828a7ee79dSPascal Brand 11838a7ee79dSPascal Brand 11848a7ee79dSPascal Brand## New features 11858a7ee79dSPascal Brand 11868a7ee79dSPascal Brand* Add hardware support for Texas Instruments DRA7xx, ARMv7 (plat-ti) 11878a7ee79dSPascal Brand 11888a7ee79dSPascal Brand* GlobalPlatform™ TEE Internal Core API Specification v1.1, 11898a7ee79dSPascal Brand including ECC algorithms. 11908a7ee79dSPascal Brand 11918a7ee79dSPascal Brand* Secure Storage: Files stored by the REE are now encrypted. Operations 11928a7ee79dSPascal Brand are made atomic in order to prevent inconsistencies in case of errors 11938a7ee79dSPascal Brand during the storage operations. [Slides][LCStorage] describing the 11948a7ee79dSPascal Brand Secure Storage have been presented at the Linaro Connect SFO15. 11958a7ee79dSPascal Brand 11968a7ee79dSPascal Brand* Change of format of the Trusted Applications: they follow a 11978a7ee79dSPascal Brand [signed ELF format][elf] 11988a7ee79dSPascal Brand 11998a7ee79dSPascal Brand* Rework thread [synchronization][synchro] in optee_os. 12008a7ee79dSPascal Brand 12018a7ee79dSPascal Brand* Use of ARMv8 native cryptographic support. 12028a7ee79dSPascal Brand 12038a7ee79dSPascal Brand* [OP-TEE/optee_test][optee_test] test suite is released. 12048a7ee79dSPascal Brand 12058a7ee79dSPascal Brand* Introduce [OP-TEE/manifest][manifest] and [OP-TEE/build][build] 12068a7ee79dSPascal Brand to setup and build QEMU, FVP, HiKey and Mediatek platforms. Setup scripts 12078a7ee79dSPascal Brand that used to be in optee_os have been removed, except for Juno board. 12088a7ee79dSPascal Brand 120995422146SPascal Brand* [Link][github_commits_1_0_0] to a list of all commits between this and 121095422146SPascal Brand previous release. 121195422146SPascal Brand 12128a7ee79dSPascal Brand 12138a7ee79dSPascal Brand## Tested on 12148a7ee79dSPascal BrandDefinitions: 12158a7ee79dSPascal Brand 12168a7ee79dSPascal Brand| Type | Meaning | 12178a7ee79dSPascal Brand| ---- | ------- | 12188a7ee79dSPascal Brand| Standard tests | The [optee_test][optee_test] project. | 12198a7ee79dSPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 12208a7ee79dSPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 12218a7ee79dSPascal Brand 12228a7ee79dSPascal Brand* ARM Juno Board (vexpress-juno), standard + extended tests. 12238a7ee79dSPascal Brand* Foundation Models (vexpress-fvp), standard tests. 12248a7ee79dSPascal Brand* HiKey (hikey), standard + extended tests. 12258a7ee79dSPascal Brand* MT8173 (mediatek), standard tests. 12268a7ee79dSPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 12278a7ee79dSPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 12288a7ee79dSPascal Brand 122995422146SPascal Brand## Known issues 123095422146SPascal Brand* Secure Storage is implemented, but note that anti-rollback protection 123195422146SPascal Brand is not implemented yet. 123295422146SPascal Brand 123395422146SPascal Brand* Issue(s) open on GitHub 123495422146SPascal Brand * [#210][pr210]: libteec.so 32-bit does not communicate well 123595422146SPascal Brand with 64-bit kernel module 123695422146SPascal Brand * [#296][pr296]: Connecting RPMB to the storage APIs. 123795422146SPascal Brand * [#493][pr493]: setup_juno_optee: unable to find pre-built binaries 123895422146SPascal Brand * [#494][pr494]: HiKey: xtest 7671 fails (1.0.0-rc2) 123995422146SPascal Brand 124095422146SPascal Brand[pr210]: https://github.com/OP-TEE/optee_os/issues/210 124195422146SPascal Brand[pr296]: https://github.com/OP-TEE/optee_os/issues/296 124295422146SPascal Brand[pr493]: https://github.com/OP-TEE/optee_os/issues/493 124395422146SPascal Brand[pr494]: https://github.com/OP-TEE/optee_os/issues/494 124495422146SPascal Brand[github_commits_1_0_0]: https://github.com/OP-TEE/optee_os/compare/0.3.0...1.0.0 12458a7ee79dSPascal Brand[DCO]: https://github.com/OP-TEE/optee_os/blob/master/Notice.md#contributions 12468a7ee79dSPascal Brand[LCStorage]: http://www.slideshare.net/linaroorg/sfo15503-secure-storage-in-optee 12478a7ee79dSPascal Brand[synchro]: https://github.com/OP-TEE/optee_os/blob/master/documentation/optee_design.md#4-thread-handling 12488a7ee79dSPascal Brand[elf]: https://github.com/OP-TEE/optee_os/blob/master/documentation/optee_design.md#format 12498a7ee79dSPascal Brand[optee_test]: https://github.com/OP-TEE/optee_test 12508a7ee79dSPascal Brand[manifest]: https://github.com/OP-TEE/manifest 12518a7ee79dSPascal Brand[build]: https://github.com/OP-TEE/build 12528a7ee79dSPascal Brand 125395422146SPascal Brand 125495422146SPascal Brand 125511d59085SPascal Brand# OP-TEE - version 0.3.0 125611d59085SPascal Brand 125711d59085SPascal Brand## New features 125811d59085SPascal Brand 125911d59085SPascal Brand* Add hardware support for 126011d59085SPascal Brand * Mediatek MT8173 Board, ARMv8-A (plat-mediatek) 126111d59085SPascal Brand * Hisilicon HiKey Board, ARMv8-A (plat-hikey) 126211d59085SPascal Brand* AArch64 build of optee_os is now possible through the configuration `CFG_ARM64_core=y` 126311d59085SPascal Brand* Secure Storage: Data can be encrypted prior to their storage in the non-secure. 126411d59085SPascal Brand Build is configured using `CFG_ENC_FS=y` 126511d59085SPascal Brand* A generic boot scheme can be used. Boot configuration is commonalized. This helps 126611d59085SPascal Brand new board support. It is applied on plat-hikey, plat-vexpress, plat-mediatek, plat-stm 126711d59085SPascal Brand and plat-vexpress. 126811d59085SPascal Brand 126911d59085SPascal Brand## Tested on 127011d59085SPascal BrandDefinitions: 127111d59085SPascal Brand 127211d59085SPascal Brand| Type | Meaning | 127311d59085SPascal Brand| ---- | ------- | 127411d59085SPascal Brand| Standard tests | The optee_test project. | 127511d59085SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 127611d59085SPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 127711d59085SPascal Brand 127811d59085SPascal Brand* ARM Juno Board (vexpress-juno), standard tests. 127911d59085SPascal Brand* Foundation Models (vexpress-fvp), standard tests. 128011d59085SPascal Brand* HiKey (hikey), standard tests. 128111d59085SPascal Brand* MT8173 (mediatek), standard tests. 128211d59085SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 128311d59085SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 128411d59085SPascal Brand 128511d59085SPascal Brand------------------------------------------- 128611d59085SPascal Brand 1287f5117af2SPascal Brand# OP-TEE - version 0.2.0 1288759cc499SJoakim Bech 1289f5117af2SPascal Brand## New features 1290f5117af2SPascal Brand 1291f5117af2SPascal Brand### Linux Driver Refactoring 1292f5117af2SPascal Brand 1293f5117af2SPascal BrandLinux Driver has been refactored. It is now split in two parts: 1294f5117af2SPascal Brand* optee.ko, the generic Linux driver. It contains all functionality 1295f5117af2SPascal Brand common to all backends. 1296f5117af2SPascal Brand* optee_armtz.ko, a specific backend dedicated to the TrustZone optee. 1297f5117af2SPascal Brand It depends on optee.ko. 1298f5117af2SPascal Brand 1299f5117af2SPascal BrandLoading the TrustZone optee linux driver module is now performed using 1300f5117af2SPascal Brand 1301f5117af2SPascal Brand modprobe optee_armtz 1302f5117af2SPascal Brand 1303f5117af2SPascal BrandThanks to the dependency between the generic and the backend modules, optee.ko is then automatically loaded. 1304f5117af2SPascal Brand 1305f5117af2SPascal Brand### Misc new features 1306f5117af2SPascal Brand* support PL310 lock down at TEE boot 1307f5117af2SPascal Brand* add 64bits support (division / print) 1308f5117af2SPascal Brand 1309f5117af2SPascal Brand## Tested on 1310f5117af2SPascal BrandDefinitions: 1311f5117af2SPascal Brand 1312f5117af2SPascal Brand| Type | Meaning | 1313f5117af2SPascal Brand| ---- | ------- | 1314f5117af2SPascal Brand| Standard tests | The optee_test project. | 1315f5117af2SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1316f5117af2SPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1317f5117af2SPascal Brand 1318f5117af2SPascal Brand* ARM Juno Board (vexpress-juno), standard tests + extended tests. 1319f5117af2SPascal Brand 1320f5117af2SPascal Brand* Foundation Models (vexpress-fvp), standard + extended tests. 1321f5117af2SPascal Brand 1322f5117af2SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1323f5117af2SPascal Brand 1324f5117af2SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1325f5117af2SPascal Brand 1326f5117af2SPascal Brand 132728fcee17SJerome Forissier## Issues resolved since last release 1328f5117af2SPascal Brand* Fix user TA trace issue, in order each TA is able to select its own trace level 1329f5117af2SPascal Brand 1330f5117af2SPascal Brand 1331f5117af2SPascal Brand------------------------------------------- 1332f5117af2SPascal Brand# OP-TEE - version 0.1.0 1333f5117af2SPascal Brand 1334f5117af2SPascal Brand## New features 1335759cc499SJoakim BechBelow is a summary of the most important features added, but at the end you will 1336759cc499SJoakim Bechfind a link that present you all commits between the current and previous 1337759cc499SJoakim Bechrelease tag. 1338759cc499SJoakim Bech 1339759cc499SJoakim Bech* GlobalPlatform Client API v1.0 support. 1340759cc499SJoakim Bech 1341759cc499SJoakim Bech* GlobalPlatform Internal API v1.0 support. 1342759cc499SJoakim Bech 1343759cc499SJoakim Bech* GlobalPlatform Secure Elements v1.0 support. 1344759cc499SJoakim Bech 1345759cc499SJoakim Bech* Add hardware support for 1346759cc499SJoakim Bech 1347759cc499SJoakim Bech * Allwinner A80, ARMv7-A. 1348759cc499SJoakim Bech 1349759cc499SJoakim Bech * ARM Juno Board, ARMv8-A. 1350759cc499SJoakim Bech 1351759cc499SJoakim Bech * Foundation Models, ARMv8-A. 1352759cc499SJoakim Bech 1353759cc499SJoakim Bech * Fast Models, ARMv8-A. 1354759cc499SJoakim Bech 1355759cc499SJoakim Bech * QEMU, ARMv7-A. 1356759cc499SJoakim Bech 1357759cc499SJoakim Bech * STM Cannes, ARMv7-A. 1358759cc499SJoakim Bech 1359759cc499SJoakim Bech * STM Orly2, ARMv7-A. 1360759cc499SJoakim Bech 1361759cc499SJoakim Bech* Add LibTomCrypt as the default software cryptographic library. 1362759cc499SJoakim Bech 1363759cc499SJoakim Bech* Add cryptographic abstraction layer in on secure side to ease the use of 1364759cc499SJoakim Bech other cryptographic software libraries or adding support for hardware 1365759cc499SJoakim Bech acceleration. 1366759cc499SJoakim Bech 1367759cc499SJoakim Bech* Extended cryptographic API with support for HKDF, Concat KDF and PBKDF2. 1368759cc499SJoakim Bech 1369759cc499SJoakim Bech* SHA-1 and SHA-256 ARMv8-A crypto extension implementation. 1370759cc499SJoakim Bech 1371759cc499SJoakim Bech* Enabled paging support in OP-TEE OS. 1372759cc499SJoakim Bech 1373759cc499SJoakim Bech* Add support for xtest (both standard and extended) in QEMU and FVP setup 1374759cc499SJoakim Bech scripts. 1375759cc499SJoakim Bech 1376759cc499SJoakim Bech* Add documentation for the OS design, cryptographic abstraction layer, secure 1377759cc499SJoakim Bech elements design, the build system, GitHub usage, key derivation extensions, 1378759cc499SJoakim Bech ARM-Trusted Firmware usage within OP-TEE and GlobalPlatform usage within 1379759cc499SJoakim Bech OP-TEE. 1380759cc499SJoakim Bech 1381759cc499SJoakim Bech* Integrate support for Travis CI. 1382759cc499SJoakim Bech 1383759cc499SJoakim Bech* [Link][github_commits_0_1_0] to a list of all commits between this and 1384759cc499SJoakim Bech previous release. 1385759cc499SJoakim Bech 1386759cc499SJoakim Bech 1387f5117af2SPascal Brand## Tested on 1388759cc499SJoakim BechDefinitions: 1389759cc499SJoakim Bech 1390759cc499SJoakim Bech| Type | Meaning | 1391759cc499SJoakim Bech| ---- | ------- | 1392759cc499SJoakim Bech| Standard tests | The optee_test project. | 1393759cc499SJoakim Bech| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.0.0. | 1394759cc499SJoakim Bech| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1395759cc499SJoakim Bech 1396759cc499SJoakim Bech* Allwinner A80 (plat-sunxi), hello world test. 1397759cc499SJoakim Bech 1398759cc499SJoakim Bech* ARM Juno Board (vexpress-juno), standard tests. 1399759cc499SJoakim Bech 1400759cc499SJoakim Bech* Foundation Models (plat-vexpress-fvp), standard + extended tests 1401759cc499SJoakim Bech 1402759cc499SJoakim Bech* QEMU (plat-vexpress-qemu), standard + extended tests (and Secure Elements 1403759cc499SJoakim Bech tested separately). 1404759cc499SJoakim Bech 1405759cc499SJoakim Bech* STM Cannes (plat-stm-cannes), standard + extended tests. 1406759cc499SJoakim Bech 1407759cc499SJoakim Bech 140828fcee17SJerome Forissier## Issues resolved since last release 1409759cc499SJoakim BechN/A since this is the first release tag on OP-TEE. 1410759cc499SJoakim Bech 1411759cc499SJoakim Bech 1412f5117af2SPascal Brand## Known issues 1413759cc499SJoakim Bech* Storage is implemented, but not "Secure storage", meaning that a client 1414759cc499SJoakim Bech needs to do encrypt files on their own before storing the files. 1415759cc499SJoakim Bech 1416759cc499SJoakim Bech* Issue(s) open on GitHub 1417759cc499SJoakim Bech * [#95][pr95]: An error about building the test code of libtomcrypt. 1418759cc499SJoakim Bech 1419759cc499SJoakim Bech * [#149][pr149]: when testing optee os with arm trusted firmware (I 1420759cc499SJoakim Bech utilized optee os tee.bin as bl32 image) on juno platform, I got an 1421759cc499SJoakim Bech error. 1422759cc499SJoakim Bech 1423759cc499SJoakim Bech * [#161][pr161]: tee_svc_cryp.c lacks accessibility checks on 1424759cc499SJoakim Bech user-supplied TEE_Attributes. 1425759cc499SJoakim Bech 1426759cc499SJoakim Bech[hello_world]: https://github.com/jenswi-linaro/lcu14_optee_hello_world 1427759cc499SJoakim Bech[github_commits_0_1_0]: https://github.com/OP-TEE/optee_os/compare/b01047730e77127c23a36591643eeb8bb0487d68...999e4a6c0f64d3177fd3d0db234107b6fb860884 1428759cc499SJoakim Bech[pr95]: https://github.com/OP-TEE/optee_os/issues/95 1429759cc499SJoakim Bech[pr149]: https://github.com/OP-TEE/optee_os/issues/149 1430759cc499SJoakim Bech[pr161]: https://github.com/OP-TEE/optee_os/issues/161 1431759cc499SJoakim Bech 14327583c59eSCedric Chaumont* Global Platform Device Internal Core API v1.1 14337583c59eSCedric Chaumont * [#230][pr230]: Persistent object corruption support (TEE_ERROR_CORRUPT_OBJECT/_2) 14347583c59eSCedric Chaumont * [#230][pr230]: Persistent object access support (TEE_ERROR_STORAGE_NOT_AVAILABLE/_2) 1435