1*6be0dbcaSRuchika Gupta# OP-TEE - version 3.15.0 (2021-10-18) 2*6be0dbcaSRuchika Gupta 3*6be0dbcaSRuchika Gupta- Links to the release pages, commits and pull requests merged into this release for: 4*6be0dbcaSRuchika Gupta - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_15_0], [commits][OP_TEE_optee_os_commits_3_15_0] and [pull requests][OP_TEE_optee_os_pr_3_15_0] 5*6be0dbcaSRuchika Gupta - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_15_0], [commits][OP_TEE_optee_client_commits_3_15_0] and [pull requests][OP_TEE_optee_client_pr_3_15_0] 6*6be0dbcaSRuchika Gupta - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_15_0], [commits][OP_TEE_optee_test_commits_3_15_0] and [pull requests][OP_TEE_optee_test_pr_3_15_0] 7*6be0dbcaSRuchika Gupta - OP-TEE/build: [release page][OP_TEE_build_release_3_15_0], [commits][OP_TEE_build_commits_3_15_0] and [pull requests][OP_TEE_build_pr_3_15_0] 8*6be0dbcaSRuchika Gupta - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_15_0], [commits][linaro_swg_optee_examples_commits_3_15_0] and [pull requests][linaro_swg_optee_examples_pr_3_15_0] 9*6be0dbcaSRuchika Gupta 10*6be0dbcaSRuchika Gupta 11*6be0dbcaSRuchika Gupta[OP_TEE_optee_os_release_3_15_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.15.0 12*6be0dbcaSRuchika Gupta[OP_TEE_optee_os_commits_3_15_0]: https://github.com/OP-TEE/optee_os/compare/3.14.0...3.15.0 13*6be0dbcaSRuchika Gupta[OP_TEE_optee_os_pr_3_15_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 14*6be0dbcaSRuchika Gupta 15*6be0dbcaSRuchika Gupta[OP_TEE_optee_client_release_3_15_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.15.0 16*6be0dbcaSRuchika Gupta[OP_TEE_optee_client_commits_3_15_0]: https://github.com/OP-TEE/optee_client/compare/3.14.0...3.15.0 17*6be0dbcaSRuchika Gupta[OP_TEE_optee_client_pr_3_15_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 18*6be0dbcaSRuchika Gupta 19*6be0dbcaSRuchika Gupta[OP_TEE_optee_test_release_3_15_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.15.0 20*6be0dbcaSRuchika Gupta[OP_TEE_optee_test_commits_3_15_0]: https://github.com/OP-TEE/optee_test/compare/3.14.0...3.15.0 21*6be0dbcaSRuchika Gupta[OP_TEE_optee_test_pr_3_15_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 22*6be0dbcaSRuchika Gupta 23*6be0dbcaSRuchika Gupta[OP_TEE_build_release_3_15_0]: https://github.com/OP-TEE/build/releases/tag/3.15.0 24*6be0dbcaSRuchika Gupta[OP_TEE_build_commits_3_15_0]: https://github.com/OP-TEE/build/compare/3.14.0...3.15.0 25*6be0dbcaSRuchika Gupta[OP_TEE_build_pr_3_15_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 26*6be0dbcaSRuchika Gupta 27*6be0dbcaSRuchika Gupta[linaro_swg_optee_examples_release_3_15_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.15.0 28*6be0dbcaSRuchika Gupta[linaro_swg_optee_examples_commits_3_15_0]: https://github.com/linaro-swg/optee_examples/compare/3.14.0...3.15.0 29*6be0dbcaSRuchika Gupta[linaro_swg_optee_examples_pr_3_15_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 30*6be0dbcaSRuchika Gupta 31d21befa5SJerome Forissier# OP-TEE - version 3.14.0 (target date: 2021-07-16) 32d21befa5SJerome Forissier 33d21befa5SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 34d21befa5SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_14_0], [commits][OP_TEE_optee_os_commits_3_14_0] and [pull requests][OP_TEE_optee_os_pr_3_14_0] 35d21befa5SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_14_0], [commits][OP_TEE_optee_client_commits_3_14_0] and [pull requests][OP_TEE_optee_client_pr_3_14_0] 36d21befa5SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_14_0], [commits][OP_TEE_optee_test_commits_3_14_0] and [pull requests][OP_TEE_optee_test_pr_3_14_0] 37d21befa5SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_14_0], [commits][OP_TEE_build_commits_3_14_0] and [pull requests][OP_TEE_build_pr_3_14_0] 38d21befa5SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_14_0], [commits][linaro_swg_optee_examples_commits_3_14_0] and [pull requests][linaro_swg_optee_examples_pr_3_14_0] 39d21befa5SJerome Forissier 40d21befa5SJerome Forissier 41d21befa5SJerome Forissier[OP_TEE_optee_os_release_3_14_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.14.0 42d21befa5SJerome Forissier[OP_TEE_optee_os_commits_3_14_0]: https://github.com/OP-TEE/optee_os/compare/3.13.0...3.14.0 43d21befa5SJerome Forissier[OP_TEE_optee_os_pr_3_14_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 44d21befa5SJerome Forissier 45d21befa5SJerome Forissier[OP_TEE_optee_client_release_3_14_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.14.0 46d21befa5SJerome Forissier[OP_TEE_optee_client_commits_3_14_0]: https://github.com/OP-TEE/optee_client/compare/3.13.0...3.14.0 47d21befa5SJerome Forissier[OP_TEE_optee_client_pr_3_14_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01-..2021-07-16 48d21befa5SJerome Forissier 49d21befa5SJerome Forissier[OP_TEE_optee_test_release_3_14_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.14.0 50d21befa5SJerome Forissier[OP_TEE_optee_test_commits_3_14_0]: https://github.com/OP-TEE/optee_test/compare/3.13.0...3.14.0 51d21befa5SJerome Forissier[OP_TEE_optee_test_pr_3_14_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 52d21befa5SJerome Forissier 53d21befa5SJerome Forissier[OP_TEE_build_release_3_14_0]: https://github.com/OP-TEE/build/releases/tag/3.14.0 54d21befa5SJerome Forissier[OP_TEE_build_commits_3_14_0]: https://github.com/OP-TEE/build/compare/3.13.0...3.14.0 55d21befa5SJerome Forissier[OP_TEE_build_pr_3_14_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 56d21befa5SJerome Forissier 57d21befa5SJerome Forissier[linaro_swg_optee_examples_release_3_14_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.14.0 58d21befa5SJerome Forissier[linaro_swg_optee_examples_commits_3_14_0]: https://github.com/linaro-swg/optee_examples/compare/3.13.0...3.14.0 59d21befa5SJerome Forissier[linaro_swg_optee_examples_pr_3_14_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 60d21befa5SJerome Forissier 6130c13f9eSRuchika Gupta# OP-TEE - version 3.13.0 (2021-04-30) 6230c13f9eSRuchika Gupta 6330c13f9eSRuchika Gupta- Links to the release pages, commits and pull requests merged into this release for: 6430c13f9eSRuchika Gupta - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_13_0], [commits][OP_TEE_optee_os_commits_3_13_0] and [pull requests][OP_TEE_optee_os_pr_3_13_0] 6530c13f9eSRuchika Gupta - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_13_0], [commits][OP_TEE_optee_client_commits_3_13_0] and [pull requests][OP_TEE_optee_client_pr_3_13_0] 6630c13f9eSRuchika Gupta - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_13_0], [commits][OP_TEE_optee_test_commits_3_13_0] and [pull requests][OP_TEE_optee_test_pr_3_13_0] 6730c13f9eSRuchika Gupta - OP-TEE/build: [release page][OP_TEE_build_release_3_13_0], [commits][OP_TEE_build_commits_3_13_0] and [pull requests][OP_TEE_build_pr_3_13_0] 6830c13f9eSRuchika Gupta - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_13_0], [commits][linaro_swg_optee_examples_commits_3_13_0] and [pull requests][linaro_swg_optee_examples_pr_3_13_0] 6930c13f9eSRuchika Gupta 7030c13f9eSRuchika Gupta 7130c13f9eSRuchika Gupta[OP_TEE_optee_os_release_3_13_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.13.0 7230c13f9eSRuchika Gupta[OP_TEE_optee_os_commits_3_13_0]: https://github.com/OP-TEE/optee_os/compare/3.12.0...3.13.0 7330c13f9eSRuchika Gupta[OP_TEE_optee_os_pr_3_13_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 7430c13f9eSRuchika Gupta 7530c13f9eSRuchika Gupta[OP_TEE_optee_client_release_3_13_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.13.0 7630c13f9eSRuchika Gupta[OP_TEE_optee_client_commits_3_13_0]: https://github.com/OP-TEE/optee_client/compare/3.12.0...3.13.0 7730c13f9eSRuchika Gupta[OP_TEE_optee_client_pr_3_13_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 7830c13f9eSRuchika Gupta 7930c13f9eSRuchika Gupta[OP_TEE_optee_test_release_3_13_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.13.0 8030c13f9eSRuchika Gupta[OP_TEE_optee_test_commits_3_13_0]: https://github.com/OP-TEE/optee_test/compare/3.12.0...3.13.0 8130c13f9eSRuchika Gupta[OP_TEE_optee_test_pr_3_13_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 8230c13f9eSRuchika Gupta 8330c13f9eSRuchika Gupta[OP_TEE_build_release_3_13_0]: https://github.com/OP-TEE/build/releases/tag/3.13.0 8430c13f9eSRuchika Gupta[OP_TEE_build_commits_3_13_0]: https://github.com/OP-TEE/build/compare/3.12.0...3.13.0 8530c13f9eSRuchika Gupta[OP_TEE_build_pr_3_13_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 8630c13f9eSRuchika Gupta 8730c13f9eSRuchika Gupta[linaro_swg_optee_examples_release_3_13_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.13.0 8830c13f9eSRuchika Gupta[linaro_swg_optee_examples_commits_3_13_0]: https://github.com/linaro-swg/optee_examples/compare/3.12.0...3.13.0 8930c13f9eSRuchika Gupta[linaro_swg_optee_examples_pr_3_13_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 9030c13f9eSRuchika Gupta 913d47a131SJoakim Bech# OP-TEE - version 3.12.0 (2021-01-20) 923d47a131SJoakim Bech 933d47a131SJoakim Bech- Links to the release pages, commits and pull requests merged into this release for: 943d47a131SJoakim Bech - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_12_0], [commits][OP_TEE_optee_os_commits_3_12_0] and [pull requests][OP_TEE_optee_os_pr_3_12_0] 953d47a131SJoakim Bech - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_12_0], [commits][OP_TEE_optee_client_commits_3_12_0] and [pull requests][OP_TEE_optee_client_pr_3_12_0] 963d47a131SJoakim Bech - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_12_0], [commits][OP_TEE_optee_test_commits_3_12_0] and [pull requests][OP_TEE_optee_test_pr_3_12_0] 973d47a131SJoakim Bech - OP-TEE/build: [release page][OP_TEE_build_release_3_12_0], [commits][OP_TEE_build_commits_3_12_0] and [pull requests][OP_TEE_build_pr_3_12_0] 983d47a131SJoakim Bech - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_12_0], [commits][linaro_swg_optee_examples_commits_3_12_0] and [pull requests][linaro_swg_optee_examples_pr_3_12_0] 993d47a131SJoakim Bech 1003d47a131SJoakim Bech 1013d47a131SJoakim Bech[OP_TEE_optee_os_release_3_12_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.12.0 1023d47a131SJoakim Bech[OP_TEE_optee_os_commits_3_12_0]: https://github.com/OP-TEE/optee_os/compare/3.11.0...3.12.0 1033d47a131SJoakim Bech[OP_TEE_optee_os_pr_3_12_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1043d47a131SJoakim Bech 1053d47a131SJoakim Bech[OP_TEE_optee_client_release_3_12_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.12.0 1063d47a131SJoakim Bech[OP_TEE_optee_client_commits_3_12_0]: https://github.com/OP-TEE/optee_client/compare/3.11.0...3.12.0 1073d47a131SJoakim Bech[OP_TEE_optee_client_pr_3_12_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1083d47a131SJoakim Bech 1093d47a131SJoakim Bech[OP_TEE_optee_test_release_3_12_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.12.0 1103d47a131SJoakim Bech[OP_TEE_optee_test_commits_3_12_0]: https://github.com/OP-TEE/optee_test/compare/3.11.0...3.12.0 1113d47a131SJoakim Bech[OP_TEE_optee_test_pr_3_12_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1123d47a131SJoakim Bech 1133d47a131SJoakim Bech[OP_TEE_build_release_3_12_0]: https://github.com/OP-TEE/build/releases/tag/3.12.0 1143d47a131SJoakim Bech[OP_TEE_build_commits_3_12_0]: https://github.com/OP-TEE/build/compare/3.11.0...3.12.0 1153d47a131SJoakim Bech[OP_TEE_build_pr_3_12_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1163d47a131SJoakim Bech 1173d47a131SJoakim Bech[linaro_swg_optee_examples_release_3_12_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.12.0 1183d47a131SJoakim Bech[linaro_swg_optee_examples_commits_3_12_0]: https://github.com/linaro-swg/optee_examples/compare/3.11.0...3.12.0 1193d47a131SJoakim Bech[linaro_swg_optee_examples_pr_3_12_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1203d47a131SJoakim Bech 121c4def2a8SJerome Forissier# OP-TEE - version 3.11.0 (2020-10-16) 122c4def2a8SJerome Forissier 123c4def2a8SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 124c4def2a8SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_11_0], [commits][OP_TEE_optee_os_commits_3_11_0] and [pull requests][OP_TEE_optee_os_pr_3_11_0] 125c4def2a8SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_11_0], [commits][OP_TEE_optee_client_commits_3_11_0] and [pull requests][OP_TEE_optee_client_pr_3_11_0] 126c4def2a8SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_11_0], [commits][OP_TEE_optee_test_commits_3_11_0] and [pull requests][OP_TEE_optee_test_pr_3_11_0] 127c4def2a8SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_11_0], [commits][OP_TEE_build_commits_3_11_0] and [pull requests][OP_TEE_build_pr_3_11_0] 128c4def2a8SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_11_0], [commits][linaro_swg_optee_examples_commits_3_11_0] and [pull requests][linaro_swg_optee_examples_pr_3_11_0] 129c4def2a8SJerome Forissier 130c4def2a8SJerome Forissier 131c4def2a8SJerome Forissier[OP_TEE_optee_os_release_3_11_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.11.0 132c4def2a8SJerome Forissier[OP_TEE_optee_os_commits_3_11_0]: https://github.com/OP-TEE/optee_os/compare/3.10.0...3.11.0 133c4def2a8SJerome Forissier[OP_TEE_optee_os_pr_3_11_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 134c4def2a8SJerome Forissier 135c4def2a8SJerome Forissier[OP_TEE_optee_client_release_3_11_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.11.0 136c4def2a8SJerome Forissier[OP_TEE_optee_client_commits_3_11_0]: https://github.com/OP-TEE/optee_client/compare/3.10.0...3.11.0 137c4def2a8SJerome Forissier[OP_TEE_optee_client_pr_3_11_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 138c4def2a8SJerome Forissier 139c4def2a8SJerome Forissier[OP_TEE_optee_test_release_3_11_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.11.0 140c4def2a8SJerome Forissier[OP_TEE_optee_test_commits_3_11_0]: https://github.com/OP-TEE/optee_test/compare/3.10.0...3.11.0 141c4def2a8SJerome Forissier[OP_TEE_optee_test_pr_3_11_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 142c4def2a8SJerome Forissier 143c4def2a8SJerome Forissier[OP_TEE_build_release_3_11_0]: https://github.com/OP-TEE/build/releases/tag/3.11.0 144c4def2a8SJerome Forissier[OP_TEE_build_commits_3_11_0]: https://github.com/OP-TEE/build/compare/3.10.0...3.11.0 145c4def2a8SJerome Forissier[OP_TEE_build_pr_3_11_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 146c4def2a8SJerome Forissier 147c4def2a8SJerome Forissier[linaro_swg_optee_examples_release_3_11_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.11.0 148c4def2a8SJerome Forissier[linaro_swg_optee_examples_commits_3_11_0]: https://github.com/linaro-swg/optee_examples/compare/3.10.0...3.11.0 149c4def2a8SJerome Forissier[linaro_swg_optee_examples_pr_3_11_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 150c4def2a8SJerome Forissier 151d1c63543SJerome Forissier# OP-TEE - version 3.10.0 (2020-08-21) 152d1c63543SJerome Forissier 153d1c63543SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 154d1c63543SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_10_0], [commits][OP_TEE_optee_os_commits_3_10_0] and [pull requests][OP_TEE_optee_os_pr_3_10_0] 155d1c63543SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_10_0], [commits][OP_TEE_optee_client_commits_3_10_0] and [pull requests][OP_TEE_optee_client_pr_3_10_0] 156d1c63543SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_10_0], [commits][OP_TEE_optee_test_commits_3_10_0] and [pull requests][OP_TEE_optee_test_pr_3_10_0] 157d1c63543SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_10_0], [commits][OP_TEE_build_commits_3_10_0] and [pull requests][OP_TEE_build_pr_3_10_0] 158d1c63543SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_10_0], [commits][linaro_swg_optee_examples_commits_3_10_0] and [pull requests][linaro_swg_optee_examples_pr_3_10_0] 159d1c63543SJerome Forissier 160d1c63543SJerome Forissier 161d1c63543SJerome Forissier[OP_TEE_optee_os_release_3_10_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.10.0 162d1c63543SJerome Forissier[OP_TEE_optee_os_commits_3_10_0]: https://github.com/OP-TEE/optee_os/compare/3.9.0...3.10.0 163d1c63543SJerome Forissier[OP_TEE_optee_os_pr_3_10_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 164d1c63543SJerome Forissier 165d1c63543SJerome Forissier[OP_TEE_optee_client_release_3_10_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.10.0 166d1c63543SJerome Forissier[OP_TEE_optee_client_commits_3_10_0]: https://github.com/OP-TEE/optee_client/compare/3.9.0...3.10.0 167d1c63543SJerome Forissier[OP_TEE_optee_client_pr_3_10_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 168d1c63543SJerome Forissier 169d1c63543SJerome Forissier[OP_TEE_optee_test_release_3_10_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.10.0 170d1c63543SJerome Forissier[OP_TEE_optee_test_commits_3_10_0]: https://github.com/OP-TEE/optee_test/compare/3.9.0...3.10.0 171d1c63543SJerome Forissier[OP_TEE_optee_test_pr_3_10_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 172d1c63543SJerome Forissier 173d1c63543SJerome Forissier[OP_TEE_build_release_3_10_0]: https://github.com/OP-TEE/build/releases/tag/3.10.0 174d1c63543SJerome Forissier[OP_TEE_build_commits_3_10_0]: https://github.com/OP-TEE/build/compare/3.9.0...3.10.0 175d1c63543SJerome Forissier[OP_TEE_build_pr_3_10_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 176d1c63543SJerome Forissier 177d1c63543SJerome Forissier[linaro_swg_optee_examples_release_3_10_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.10.0 178d1c63543SJerome Forissier[linaro_swg_optee_examples_commits_3_10_0]: https://github.com/linaro-swg/optee_examples/compare/3.9.0...3.10.0 179d1c63543SJerome Forissier[linaro_swg_optee_examples_pr_3_10_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 180d1c63543SJerome Forissier 181af141c61SJens Wiklander# OP-TEE - version 3.9.0 (2020-04-22) 182af141c61SJens Wiklander 183af141c61SJens Wiklander- Links to the release pages, commits and pull requests merged into this release for: 184af141c61SJens Wiklander - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_9_0], [commits][OP_TEE_optee_os_commits_3_9_0] and [pull requests][OP_TEE_optee_os_pr_3_9_0] 185af141c61SJens Wiklander - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_9_0], [commits][OP_TEE_optee_client_commits_3_9_0] and [pull requests][OP_TEE_optee_client_pr_3_9_0] 186af141c61SJens Wiklander - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_9_0], [commits][OP_TEE_optee_test_commits_3_9_0] and [pull requests][OP_TEE_optee_test_pr_3_9_0] 187af141c61SJens Wiklander - OP-TEE/build: [release page][OP_TEE_build_release_3_9_0], [commits][OP_TEE_build_commits_3_9_0] and [pull requests][OP_TEE_build_pr_3_9_0] 188af141c61SJens Wiklander - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_9_0], [commits][linaro_swg_optee_examples_commits_3_9_0] and [pull requests][linaro_swg_optee_examples_pr_3_9_0] 189af141c61SJens Wiklander 190af141c61SJens Wiklander 191af141c61SJens Wiklander[OP_TEE_optee_os_release_3_9_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.9.0 192af141c61SJens Wiklander[OP_TEE_optee_os_commits_3_9_0]: https://github.com/OP-TEE/optee_os/compare/3.8.0...3.9.0 193af141c61SJens Wiklander[OP_TEE_optee_os_pr_3_9_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 194af141c61SJens Wiklander 195af141c61SJens Wiklander[OP_TEE_optee_client_release_3_9_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.9.0 196af141c61SJens Wiklander[OP_TEE_optee_client_commits_3_9_0]: https://github.com/OP-TEE/optee_client/compare/3.8.0...3.9.0 197af141c61SJens Wiklander[OP_TEE_optee_client_pr_3_9_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 198af141c61SJens Wiklander 199af141c61SJens Wiklander[OP_TEE_optee_test_release_3_9_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.9.0 200af141c61SJens Wiklander[OP_TEE_optee_test_commits_3_9_0]: https://github.com/OP-TEE/optee_test/compare/3.8.0...3.9.0 201af141c61SJens Wiklander[OP_TEE_optee_test_pr_3_9_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 202af141c61SJens Wiklander 203af141c61SJens Wiklander[OP_TEE_build_release_3_9_0]: https://github.com/OP-TEE/build/releases/tag/3.9.0 204af141c61SJens Wiklander[OP_TEE_build_commits_3_9_0]: https://github.com/OP-TEE/build/compare/3.8.0...3.9.0 205af141c61SJens Wiklander[OP_TEE_build_pr_3_9_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 206af141c61SJens Wiklander 207af141c61SJens Wiklander[linaro_swg_optee_examples_release_3_9_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.9.0 208af141c61SJens Wiklander[linaro_swg_optee_examples_commits_3_9_0]: https://github.com/linaro-swg/optee_examples/compare/3.8.0...3.9.0 209af141c61SJens Wiklander[linaro_swg_optee_examples_pr_3_9_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 210af141c61SJens Wiklander 211023e3365SJerome Forissier# OP-TEE - version 3.8.0 (2020-01-24) 212023e3365SJerome Forissier 213023e3365SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 214023e3365SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_8_0], [commits][OP_TEE_optee_os_commits_3_8_0] and [pull requests][OP_TEE_optee_os_pr_3_8_0] 215023e3365SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_8_0], [commits][OP_TEE_optee_client_commits_3_8_0] and [pull requests][OP_TEE_optee_client_pr_3_8_0] 216023e3365SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_8_0], [commits][OP_TEE_optee_test_commits_3_8_0] and [pull requests][OP_TEE_optee_test_pr_3_8_0] 217023e3365SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_8_0], [commits][OP_TEE_build_commits_3_8_0] and [pull requests][OP_TEE_build_pr_3_8_0] 218023e3365SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_8_0], [commits][linaro_swg_optee_examples_commits_3_8_0] and [pull requests][linaro_swg_optee_examples_pr_3_8_0] 219023e3365SJerome Forissier 220023e3365SJerome Forissier 221023e3365SJerome Forissier[OP_TEE_optee_os_release_3_8_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.8.0 222023e3365SJerome Forissier[OP_TEE_optee_os_commits_3_8_0]: https://github.com/OP-TEE/optee_os/compare/3.7.0...3.8.0 223023e3365SJerome Forissier[OP_TEE_optee_os_pr_3_8_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-01-24 224023e3365SJerome Forissier 225023e3365SJerome Forissier[OP_TEE_optee_client_release_3_8_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.8.0 226023e3365SJerome Forissier[OP_TEE_optee_client_commits_3_8_0]: https://github.com/OP-TEE/optee_client/compare/3.7.0...3.8.0 227023e3365SJerome Forissier[OP_TEE_optee_client_pr_3_8_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 228023e3365SJerome Forissier 229023e3365SJerome Forissier[OP_TEE_optee_test_release_3_8_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.8.0 230023e3365SJerome Forissier[OP_TEE_optee_test_commits_3_8_0]: https://github.com/OP-TEE/optee_test/compare/3.7.0...3.8.0 231023e3365SJerome Forissier[OP_TEE_optee_test_pr_3_8_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 232023e3365SJerome Forissier 233023e3365SJerome Forissier[OP_TEE_build_release_3_8_0]: https://github.com/OP-TEE/build/releases/tag/3.8.0 234023e3365SJerome Forissier[OP_TEE_build_commits_3_8_0]: https://github.com/OP-TEE/build/compare/3.7.0...3.8.0 235023e3365SJerome Forissier[OP_TEE_build_pr_3_8_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 236023e3365SJerome Forissier 237023e3365SJerome Forissier[linaro_swg_optee_examples_release_3_8_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.8.0 238023e3365SJerome Forissier[linaro_swg_optee_examples_commits_3_8_0]: https://github.com/linaro-swg/optee_examples/compare/3.7.0...3.8.0 239023e3365SJerome Forissier[linaro_swg_optee_examples_pr_3_8_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 240023e3365SJerome Forissier 241a2fa5018SJoakim Bech# OP-TEE - version 3.7.0 (2019-10-18) 242a2fa5018SJoakim Bech 243a2fa5018SJoakim Bech- Links to the release pages, commits and pull requests merged into this release for: 244a2fa5018SJoakim Bech - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_7_0], [commits][OP_TEE_optee_os_commits_3_7_0] and [pull requests][OP_TEE_optee_os_pr_3_7_0] 245a2fa5018SJoakim Bech - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_7_0], [commits][OP_TEE_optee_client_commits_3_7_0] and [pull requests][OP_TEE_optee_client_pr_3_7_0] 246a2fa5018SJoakim Bech - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_7_0], [commits][OP_TEE_optee_test_commits_3_7_0] and [pull requests][OP_TEE_optee_test_pr_3_7_0] 247a2fa5018SJoakim Bech - OP-TEE/build: [release page][OP_TEE_build_release_3_7_0], [commits][OP_TEE_build_commits_3_7_0] and [pull requests][OP_TEE_build_pr_3_7_0] 248a2fa5018SJoakim Bech - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_7_0], [commits][linaro_swg_optee_examples_commits_3_7_0] and [pull requests][linaro_swg_optee_examples_pr_3_7_0] 249a2fa5018SJoakim Bech 250a2fa5018SJoakim Bech 251a2fa5018SJoakim Bech[OP_TEE_optee_os_release_3_7_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.7.0 252a2fa5018SJoakim Bech[OP_TEE_optee_os_commits_3_7_0]: https://github.com/OP-TEE/optee_os/compare/3.6.0...3.7.0 253a2fa5018SJoakim Bech[OP_TEE_optee_os_pr_3_7_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 254a2fa5018SJoakim Bech 255a2fa5018SJoakim Bech[OP_TEE_optee_client_release_3_7_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.7.0 256a2fa5018SJoakim Bech[OP_TEE_optee_client_commits_3_7_0]: https://github.com/OP-TEE/optee_client/compare/3.6.0...3.7.0 257a2fa5018SJoakim Bech[OP_TEE_optee_client_pr_3_7_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 258a2fa5018SJoakim Bech 259a2fa5018SJoakim Bech[OP_TEE_optee_test_release_3_7_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.7.0 260a2fa5018SJoakim Bech[OP_TEE_optee_test_commits_3_7_0]: https://github.com/OP-TEE/optee_test/compare/3.6.0...3.7.0 261a2fa5018SJoakim Bech[OP_TEE_optee_test_pr_3_7_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 262a2fa5018SJoakim Bech 263a2fa5018SJoakim Bech[OP_TEE_build_release_3_7_0]: https://github.com/OP-TEE/build/releases/tag/3.7.0 264a2fa5018SJoakim Bech[OP_TEE_build_commits_3_7_0]: https://github.com/OP-TEE/build/compare/3.6.0...3.7.0 265a2fa5018SJoakim Bech[OP_TEE_build_pr_3_7_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 266a2fa5018SJoakim Bech 267a2fa5018SJoakim Bech[linaro_swg_optee_examples_release_3_7_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.7.0 268a2fa5018SJoakim Bech[linaro_swg_optee_examples_commits_3_7_0]: https://github.com/linaro-swg/optee_examples/compare/3.6.0...3.7.0 269a2fa5018SJoakim Bech[linaro_swg_optee_examples_pr_3_7_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 270a2fa5018SJoakim Bech 271f398d492SJerome Forissier# OP-TEE - version 3.6.0 (2019-07-05) 272f398d492SJerome Forissier 273f398d492SJerome Forissier- Link to the GitHub [release page][github_release_3_6_0]. 274f398d492SJerome Forissier- Links to the [commits][github_commits_3_6_0] and 275f398d492SJerome Forissier[pull requests][github_pr_3_6_0] merged into this release. 276f398d492SJerome Forissier 277f398d492SJerome Forissier[github_release_3_6_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.6.0 278f398d492SJerome Forissier[github_commits_3_6_0]: https://github.com/OP-TEE/optee_os/compare/3.5.0...3.6.0 279f398d492SJerome Forissier[github_pr_3_6_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-04-26..2019-07-05 280f398d492SJerome Forissier 2815df2a985SJoakim Bech# OP-TEE - version 3.5.0 (2019-04-26) 2825df2a985SJoakim Bech 2835df2a985SJoakim Bech- Link to the GitHub [release page][github_release_3_5_0]. 2845df2a985SJoakim Bech- Links to the [commits][github_commits_3_5_0] and 2855df2a985SJoakim Bech[pull requests][github_pr_3_5_0] merged into this release. 2865df2a985SJoakim Bech 2875df2a985SJoakim Bech[github_release_3_5_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.5.0 2885df2a985SJoakim Bech[github_commits_3_5_0]: https://github.com/OP-TEE/optee_os/compare/3.4.0...3.5.0 2895df2a985SJoakim Bech[github_pr_3_5_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-01-26..2019-04-26 2905df2a985SJoakim Bech 291406c609bSJerome Forissier# OP-TEE - version 3.4.0 (2019-01-25) 292406c609bSJerome Forissier 293406c609bSJerome Forissier- Link to the GitHub [release page][github_release_3_4_0]. 294406c609bSJerome Forissier- Links to the [commits][github_commits_3_4_0] and 295406c609bSJerome Forissier[pull requests][github_pr_3_4_0] merged into this release. 296406c609bSJerome Forissier 297406c609bSJerome Forissier[github_release_3_4_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.4.0 298406c609bSJerome Forissier[github_commits_3_4_0]: https://github.com/OP-TEE/optee_os/compare/3.3.0...3.4.0 299406c609bSJerome Forissier[github_pr_3_4_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-10-12..2019-01-25 300406c609bSJerome Forissier 301ee595e95SJerome Forissier# OP-TEE - version 3.3.0 (2018-10-12) 302ee595e95SJerome Forissier 303ee595e95SJerome Forissier- Link to the GitHub [release page][github_release_3_3_0]. 304ee595e95SJerome Forissier- Links to the [commits][github_commits_3_3_0] and 305ee595e95SJerome Forissier[pull requests][github_pr_3_3_0] merged into this release. 306ee595e95SJerome Forissier 307ee595e95SJerome Forissier[github_release_3_3_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.3.0 308ee595e95SJerome Forissier[github_commits_3_3_0]: https://github.com/OP-TEE/optee_os/compare/3.2.0...3.3.0 309ee595e95SJerome Forissier[github_pr_3_3_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-07-04..2018-10-12 310ee595e95SJerome Forissier 31153bf1c38SJerome Forissier# OP-TEE - version 3.2.0 (2018-07-04) 31253bf1c38SJerome Forissier 31353bf1c38SJerome Forissier- Link to the GitHub [release page][github_release_3_2_0]. 31453bf1c38SJerome Forissier- Links to the [commits][github_commits_3_2_0] and 31553bf1c38SJerome Forissier[pull requests][github_pr_3_2_0] merged into this release. 31653bf1c38SJerome Forissier 31753bf1c38SJerome Forissier## Known issues 31853bf1c38SJerome Forissier 31953bf1c38SJerome Forissier* HiKey960: assertion in bget create_free_block() \[memalign() self-test\] ([#2414]) 32053bf1c38SJerome Forissier* D02: assertion '!have_spinlock()' ([#2437]) 32153bf1c38SJerome Forissier 32253bf1c38SJerome Forissier[github_commits_3_2_0]: https://github.com/OP-TEE/optee_os/compare/3.1.0...3.2.0 32353bf1c38SJerome Forissier[github_pr_3_2_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-04-13..2018-07-04 32453bf1c38SJerome Forissier[github_release_3_2_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.2.0 32553bf1c38SJerome Forissier[#2414]: https://github.com/OP-TEE/optee_os/issues/2414 32653bf1c38SJerome Forissier[#2437]: https://github.com/OP-TEE/optee_os/issues/2437 32753bf1c38SJerome Forissier 3280ab9388cSJens Wiklander# OP-TEE - version 3.1.0 (2018-04-13) 3290ab9388cSJens Wiklander 3300ab9388cSJens Wiklander- Link to the GitHub [release page][github_release_3_1_0]. 3310ab9388cSJens Wiklander- Links to the [commits][github_commits_3_1_0] and 3320ab9388cSJens Wiklander[pull requests][github_pr_3_1_0] merged into this release. 3330ab9388cSJens Wiklander 3340ab9388cSJens Wiklander[github_commits_3_1_0]: https://github.com/OP-TEE/optee_os/compare/3.0.0...3.1.0 3350ab9388cSJens Wiklander[github_pr_3_1_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-01-26..2018-04-13 3360ab9388cSJens Wiklander[github_release_3_1_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.1.0 3370ab9388cSJens Wiklander 3380ab9388cSJens Wiklander# OP-TEE - version 3.0.0 (2018-01-26) 33994ee4938SJerome Forissier 34094ee4938SJerome Forissier[Link][github_commits_3_0_0] to a list of all commits between this release and 34194ee4938SJerome Forissierthe previous one (2.6.0). 34294ee4938SJerome Forissier 34394ee4938SJerome ForissierAbout backwards compatibility: Trusted Applications built with OP-TEE 2.5.0 or 34494ee4938SJerome Forissierearlier will not run properly with a *debug* build of this release due 34594ee4938SJerome Forissierto commit [0e1c6e8e][commit_0e1c6e8e] ("Dump call stack on TA panic"). 34694ee4938SJerome ForissierNon-debug builds are not affected. 34794ee4938SJerome Forissier 34894ee4938SJerome Forissier## New features 34994ee4938SJerome Forissier 35094ee4938SJerome Forissier* New supported platforms: Armada 3700 ([#1946]), Poplar ([#1999]), 64-bit 35194ee4938SJerome Forissier support for FSL ls1012ardb ([#1941]), i.MX6SX Sabreauto ([#1974]). 35294ee4938SJerome Forissier* arm32: sm: init CNTVOFF ([#2052]) 35394ee4938SJerome Forissier* Debug/info/error traces: make output more compact ([#2011]) 35494ee4938SJerome Forissier* tzc380: implement new functions ([#1994]) 35594ee4938SJerome Forissier* Secure Data Path: add pseudo-TA to convert VA to PA (#1993]) 35694ee4938SJerome Forissier* Pager: use NEON AES GCM implementation ([#1959]) 35794ee4938SJerome Forissier* Crypto: add optimized AES GCM implementation using NEON ([#1949]) 35894ee4938SJerome Forissier* Add support for using secure storage for TA anti-rollback ([#1928]) 35994ee4938SJerome Forissier* Crypto: replace struct crypto_ops with function interface ([#1923], 36094ee4938SJerome Forissier [#1931]) 36194ee4938SJerome Forissier* aosp_optee.mk: define OPTEE_BIN ([#1922]) 36294ee4938SJerome Forissier* Add build option to allow concurrent execution of single-instance TAs 36394ee4938SJerome Forissier ([#1915]) 36494ee4938SJerome Forissier* Pager: support for address sanitizer ([#1856]) 36594ee4938SJerome Forissier* Pager: make memory between CFG_TEE_RAM_START and TEE load address usable by 36694ee4938SJerome Forissier pager ([#1826]) 36794ee4938SJerome Forissier 36894ee4938SJerome Forissier## Bug fixes 36994ee4938SJerome Forissier 37094ee4938SJerome Forissier* Fix crash in tee_mmu_final() on TA loading error ([#2092]) 37194ee4938SJerome Forissier* LibTomCrypt: fix issue causing invalid output when using AES CTR with 37294ee4938SJerome Forissierhardware acceleration (CFG_CRYPTO_WITH_CE) ([#2086]) 37394ee4938SJerome Forissier* pl310: fix cache sync ([#2035]) 37494ee4938SJerome Forissier* tzc380: do not write reserved bits ([#1994]) 37594ee4938SJerome Forissier* Fix potential double free in ta_open() ([#1970]) 37694ee4938SJerome Forissier* libfdt: fix undefined behaviour in fdt_offset_ptr() ([#1969]) 37794ee4938SJerome Forissier* imx_wdog: fix register access ([#1966]) 37894ee4938SJerome Forissier* Secure storage: fix potential memory leak after early return ([#1961]) 37994ee4938SJerome Forissier* LibTomCrypt: fix double free in dsa_import() ([#1963]) 38094ee4938SJerome Forissier* RPMB: fix TA independance issue in secure storage ([#1921]) 38194ee4938SJerome Forissier* RPMB: return TEE_ERROR_ACCESS_CONFLICT instead of panicking when a TA 38294ee4938SJerome Forissier attempts to create an existing persistent object without the overwrite flag 38394ee4938SJerome Forissier ([#1919]) 38494ee4938SJerome Forissier* PSCI: pass non-secure context to psci_system_suspend() ([#1916]) 38594ee4938SJerome Forissier* Fix "Argument list too long" during "make clean" ([#1897]) 38694ee4938SJerome Forissier 38794ee4938SJerome Forissier## Security fixes 38894ee4938SJerome Forissier 38994ee4938SJerome Forissier* Mitigations and hardening against the Spectre and Meltdown vulnerabilities 39094ee4938SJerome Forissier (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754). 39194ee4938SJerome Forissier 39294ee4938SJerome Forissier## Known issues 39394ee4938SJerome Forissier 39494ee4938SJerome Forissier* Secure storage (REE FS): storage size not updated after 39594ee4938SJerome ForissierTEE_TruncateObjectData() ([#2094]) 39694ee4938SJerome Forissier* Possible deadlock with CFG_WITH_PAGER=y when loading a TA and not enough 39794ee4938SJerome Forissierpage tables are available in pgt_cache ([#2080]) 39894ee4938SJerome Forissier 39994ee4938SJerome Forissier## Tested on 40094ee4938SJerome Forissier 40194ee4938SJerome ForissierThe release was tested successfully on the platforms listed below. 40294ee4938SJerome Forissier 40394ee4938SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 40494ee4938SJerome Forissier* d02 40594ee4938SJerome Forissier* hikey 40694ee4938SJerome Forissier* hikey-hikey960 40794ee4938SJerome Forissier* imx-mx6ulevk 40894ee4938SJerome Forissier* imx-mx7dsabresd 40994ee4938SJerome Forissier* marvell-armada7k8k 41094ee4938SJerome Forissier* marvell-armada3700 41194ee4938SJerome Forissier* mediatek-mt8173 41294ee4938SJerome Forissier* rcar-salvator_m3 41394ee4938SJerome Forissier* rockchip-rk322x 41494ee4938SJerome Forissier* rpi3 41594ee4938SJerome Forissier* sam 41694ee4938SJerome Forissier* ti 41794ee4938SJerome Forissier* vexpress-juno 41894ee4938SJerome Forissier* vexpress-qemu_armv8a 41994ee4938SJerome Forissier* vexpress-qemu_virt 42094ee4938SJerome Forissier 42194ee4938SJerome Forissier[commit_0e1c6e8e]: https://github.com/OP-TEE/optee_os/commit/0e1c6e8e 42294ee4938SJerome Forissier[github_commits_3_0_0]: https://github.com/OP-TEE/optee_os/compare/2.6.0...3.0.0 42394ee4938SJerome Forissier[#2092]: https://github.com/OP-TEE/optee_os/pull/2092 42494ee4938SJerome Forissier[#2086]: https://github.com/OP-TEE/optee_os/pull/2086 42594ee4938SJerome Forissier[#2094]: https://github.com/OP-TEE/optee_os/issues/2094 42694ee4938SJerome Forissier[#2080]: https://github.com/OP-TEE/optee_os/issues/2080 42794ee4938SJerome Forissier[#2052]: https://github.com/OP-TEE/optee_os/pull/2052 42894ee4938SJerome Forissier[#2035]: https://github.com/OP-TEE/optee_os/pull/2035 42994ee4938SJerome Forissier[#2011]: https://github.com/OP-TEE/optee_os/pull/2011 43094ee4938SJerome Forissier[#1999]: https://github.com/OP-TEE/optee_os/pull/1999 43194ee4938SJerome Forissier[#1994]: https://github.com/OP-TEE/optee_os/pull/1994 43294ee4938SJerome Forissier[#1993]: https://github.com/OP-TEE/optee_os/pull/1993 43394ee4938SJerome Forissier[#1974]: https://github.com/OP-TEE/optee_os/pull/1974 43494ee4938SJerome Forissier[#1970]: https://github.com/OP-TEE/optee_os/pull/1970 43594ee4938SJerome Forissier[#1969]: https://github.com/OP-TEE/optee_os/pull/1969 43694ee4938SJerome Forissier[#1966]: https://github.com/OP-TEE/optee_os/pull/1966 43794ee4938SJerome Forissier[#1963]: https://github.com/OP-TEE/optee_os/pull/1963 43894ee4938SJerome Forissier[#1961]: https://github.com/OP-TEE/optee_os/pull/1961 43994ee4938SJerome Forissier[#1959]: https://github.com/OP-TEE/optee_os/pull/1959 44094ee4938SJerome Forissier[#1949]: https://github.com/OP-TEE/optee_os/pull/1949 44194ee4938SJerome Forissier[#1946]: https://github.com/OP-TEE/optee_os/pull/1946 44294ee4938SJerome Forissier[#1941]: https://github.com/OP-TEE/optee_os/pull/1941 44394ee4938SJerome Forissier[#1931]: https://github.com/OP-TEE/optee_os/pull/1931 44494ee4938SJerome Forissier[#1928]: https://github.com/OP-TEE/optee_os/pull/1928 44594ee4938SJerome Forissier[#1923]: https://github.com/OP-TEE/optee_os/pull/1923 44694ee4938SJerome Forissier[#1922]: https://github.com/OP-TEE/optee_os/pull/1922 44794ee4938SJerome Forissier[#1921]: https://github.com/OP-TEE/optee_os/pull/1921 44894ee4938SJerome Forissier[#1919]: https://github.com/OP-TEE/optee_os/pull/1919 44994ee4938SJerome Forissier[#1916]: https://github.com/OP-TEE/optee_os/pull/1916 45094ee4938SJerome Forissier[#1915]: https://github.com/OP-TEE/optee_os/pull/1915 45194ee4938SJerome Forissier[#1897]: https://github.com/OP-TEE/optee_os/pull/1897 45294ee4938SJerome Forissier[#1856]: https://github.com/OP-TEE/optee_os/pull/1856 45394ee4938SJerome Forissier[#1826]: https://github.com/OP-TEE/optee_os/pull/1826 45494ee4938SJerome Forissier 4556d57389fSJerome Forissier# OP-TEE - version 2.6.0 4566d57389fSJerome Forissier 4576d57389fSJerome Forissier[Link][github_commits_2_6_0] to a list of all commits between this release and 4586d57389fSJerome Forissierthe previous one (2.5.0). 4596d57389fSJerome Forissier 4606d57389fSJerome Forissier## New features 4616d57389fSJerome Forissier 4626d57389fSJerome Forissier* New supported platforms: Atmel SAMA5 ([#1714]), HiSilicon HiKey960 ([#1684]), 4636d57389fSJerome Forissier Rockchip RK322X ([#1666]), NXP LS1043A-RDB/LS1046A-RDB ([#1787]), Marvell 4646d57389fSJerome Forissier Armada 70x0/80x0 ([#1807]). 4656d57389fSJerome Forissier* Dynamic shared memory (non-contiguous, non-secure memory can be mapped into 4666d57389fSJerome Forissier Trusted Applications VA space) ([#1631]) 4676d57389fSJerome Forissier* Dump TA call stack on panic ([#1858]) 4686d57389fSJerome Forissier* i.MX: PSCI reset ([#1849]) 4696d57389fSJerome Forissier* plat-ti: AM43xx: suspend/resume support ([#1822]) 4706d57389fSJerome Forissier* QEMU SMP support ([#1820]) 4716d57389fSJerome Forissier* plat-ti: AM43xx: disable TRNG ([#1816]) 4726d57389fSJerome Forissier* plat-ti: enable Secure Data Path by default ([#1815]) 4736d57389fSJerome Forissier* Improve symbolize.py ([#1778], [#1767], [#1766]) 4746d57389fSJerome Forissier* Early TAs (TAs linked in tee.bin) ([#1733]) 4756d57389fSJerome Forissier* Suspend/resume framework for arm32 and imx7d support ([#1729]) 4766d57389fSJerome Forissier* RK322X PSCI version, features and suspend support ([#1720]) 4776d57389fSJerome Forissier* arm32: handle aborts in system mode ([#1703]) 4786d57389fSJerome Forissier* i.MX: add SNVS SRTC support ([#1700]) 4796d57389fSJerome Forissier* GCC7 support ([#1693]) 4806d57389fSJerome Forissier* Improve detection of programming errors in locking code ([#1671], [#1670]) 4816d57389fSJerome Forissier* Support TEE RAM size larger than page directory size ([#1669]) 4826d57389fSJerome Forissier 4836d57389fSJerome Forissier## Removed features 4846d57389fSJerome Forissier 4856d57389fSJerome Forissier* Remove TUI code ([#1842]) 4866d57389fSJerome Forissier 4876d57389fSJerome Forissier## Bug fixes 4886d57389fSJerome Forissier 4896d57389fSJerome Forissier* Add missing synchronization barrier in core_mmu_map_pages() ([#1827]) 4906d57389fSJerome Forissier* Secure storage: REE FS: fix bug in error path ([#1801]) 4916d57389fSJerome Forissier* ASAN bug fixes ([#1799]) 4926d57389fSJerome Forissier* Fix race in core_mmu_user_mapping_is_active() ([#1785]) 4936d57389fSJerome Forissier* libutee: printf() and puts() fixes, add putchar() ([#1759], [#1754]) 4946d57389fSJerome Forissier* arm32: GICv3: fix FIQ masking in IRQ/ABT/SVC/UND handlers ([#1748]) 4956d57389fSJerome Forissier* arm32: preserve r12 in native_intr_handler() ([#1682]) 4966d57389fSJerome Forissier* arm64: fix print_kernel_stack() ([#1664]) 4976d57389fSJerome Forissier* benchmark: fix core data-abort ([#1658]) 4986d57389fSJerome Forissier 4996d57389fSJerome Forissier## Security fixes or enhancements 5006d57389fSJerome Forissier 5016d57389fSJerome Forissier* crypto: fix software PRNG weaknesses 5026d57389fSJerome Forissier ([OP-TEE-2017-0001][OP-TEE-2017-0001]) ([#1843]) 5036d57389fSJerome Forissier 5046d57389fSJerome Forissier## Tested on 5056d57389fSJerome Forissier 50694ee4938SJerome ForissierThe release was tested successfully on the platforms listed below. 5076d57389fSJerome ForissierIf a platform is not listed, it means the release was not tested on this 5086d57389fSJerome Forissierplatform. 5096d57389fSJerome Forissier 5106d57389fSJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 5116d57389fSJerome Forissier* d02 5126d57389fSJerome Forissier* hikey 5136d57389fSJerome Forissier* hikey-hikey960 5146d57389fSJerome Forissier* imx-mx6ulevk 5156d57389fSJerome Forissier* imx-mx7dsabresd 5166d57389fSJerome Forissier* ls-ls1021a??? (single core) 5176d57389fSJerome Forissier* ls-ls1043ardb 5186d57389fSJerome Forissier* ls-ls1046ardb 5196d57389fSJerome Forissier* mediatek-mt8173 5206d57389fSJerome Forissier* rcar 5216d57389fSJerome Forissier* rockchip-rk322x 5226d57389fSJerome Forissier* rpi3 5236d57389fSJerome Forissier* sam 5246d57389fSJerome Forissier* stm-b2260 5256d57389fSJerome Forissier* stm-cannes 5266d57389fSJerome Forissier* ti-??? 5276d57389fSJerome Forissier* vexpress-fvp 5286d57389fSJerome Forissier* vexpress-juno 5296d57389fSJerome Forissier* vexpress-qemu_armv8a 5306d57389fSJerome Forissier* vexpress-qemu_virt 5316d57389fSJerome Forissier 53294ee4938SJerome Forissier[github_commits_2_6_0]: https://github.com/OP-TEE/optee_os/compare/2.5.0...2.6.0 5336d57389fSJerome Forissier[#1858]: https://github.com/OP-TEE/optee_os/issues/1858 5346d57389fSJerome Forissier[#1849]: https://github.com/OP-TEE/optee_os/issues/1849 5356d57389fSJerome Forissier[#1843]: https://github.com/OP-TEE/optee_os/issues/1843 5366d57389fSJerome Forissier[#1842]: https://github.com/OP-TEE/optee_os/issues/1842 5376d57389fSJerome Forissier[#1827]: https://github.com/OP-TEE/optee_os/issues/1827 5386d57389fSJerome Forissier[#1822]: https://github.com/OP-TEE/optee_os/issues/1822 5396d57389fSJerome Forissier[#1820]: https://github.com/OP-TEE/optee_os/issues/1820 5406d57389fSJerome Forissier[#1816]: https://github.com/OP-TEE/optee_os/issues/1816 5416d57389fSJerome Forissier[#1815]: https://github.com/OP-TEE/optee_os/issues/1815 5426d57389fSJerome Forissier[#1807]: https://github.com/OP-TEE/optee_os/issues/1807 5436d57389fSJerome Forissier[#1801]: https://github.com/OP-TEE/optee_os/issues/1801 5446d57389fSJerome Forissier[#1799]: https://github.com/OP-TEE/optee_os/issues/1799 5456d57389fSJerome Forissier[#1787]: https://github.com/OP-TEE/optee_os/issues/1787 5466d57389fSJerome Forissier[#1785]: https://github.com/OP-TEE/optee_os/issues/1785 5476d57389fSJerome Forissier[#1778]: https://github.com/OP-TEE/optee_os/issues/1778 5486d57389fSJerome Forissier[#1767]: https://github.com/OP-TEE/optee_os/issues/1767 5496d57389fSJerome Forissier[#1766]: https://github.com/OP-TEE/optee_os/issues/1766 5506d57389fSJerome Forissier[#1759]: https://github.com/OP-TEE/optee_os/issues/1759 5516d57389fSJerome Forissier[#1754]: https://github.com/OP-TEE/optee_os/issues/1754 5526d57389fSJerome Forissier[#1748]: https://github.com/OP-TEE/optee_os/issues/1748 5536d57389fSJerome Forissier[#1733]: https://github.com/OP-TEE/optee_os/issues/1733 5546d57389fSJerome Forissier[#1729]: https://github.com/OP-TEE/optee_os/issues/1729 5556d57389fSJerome Forissier[#1720]: https://github.com/OP-TEE/optee_os/issues/1720 5566d57389fSJerome Forissier[#1714]: https://github.com/OP-TEE/optee_os/issues/1714 5576d57389fSJerome Forissier[#1703]: https://github.com/OP-TEE/optee_os/issues/1703 5586d57389fSJerome Forissier[#1700]: https://github.com/OP-TEE/optee_os/issues/1700 5596d57389fSJerome Forissier[#1693]: https://github.com/OP-TEE/optee_os/issues/1693 5606d57389fSJerome Forissier[#1684]: https://github.com/OP-TEE/optee_os/issues/1684 5616d57389fSJerome Forissier[#1682]: https://github.com/OP-TEE/optee_os/issues/1682 5626d57389fSJerome Forissier[#1671]: https://github.com/OP-TEE/optee_os/issues/1671 5636d57389fSJerome Forissier[#1670]: https://github.com/OP-TEE/optee_os/issues/1670 5646d57389fSJerome Forissier[#1669]: https://github.com/OP-TEE/optee_os/issues/1669 5656d57389fSJerome Forissier[#1666]: https://github.com/OP-TEE/optee_os/issues/1666 5666d57389fSJerome Forissier[#1664]: https://github.com/OP-TEE/optee_os/issues/1664 5676d57389fSJerome Forissier[#1658]: https://github.com/OP-TEE/optee_os/issues/1658 5686d57389fSJerome Forissier[#1631]: https://github.com/OP-TEE/optee_os/issues/1631 5696d57389fSJerome Forissier[OP-TEE-2017-0001]: https://www.op-tee.org/security-advisories/ 5706d57389fSJerome Forissier 5715d8aaa04SJerome Forissier# OP-TEE - version 2.5.0 5725d8aaa04SJerome Forissier 5735d8aaa04SJerome Forissier[Link][github_commits_2_5_0] to a list of all commits between this release and 5745d8aaa04SJerome Forissierthe previous one (2.4.0). 5755d8aaa04SJerome Forissier 5765d8aaa04SJerome Forissier## New features 5775d8aaa04SJerome Forissier 5785d8aaa04SJerome Forissier* New supported platform: i.MX7D ([#1639]) 5795d8aaa04SJerome Forissier* Secure storage: anti-rollback protection for REE FS using RPMB FS ([#1630]) 5805d8aaa04SJerome Forissier* Assign non-secure DDR configuration from DT if CFG_DT=y ([#1623]) 5815d8aaa04SJerome Forissier* Add new image format: split image into three separate binaries suitable for 5825d8aaa04SJerome Forissier upcoming ARM Trusted Firmware ([#1589]). 5835d8aaa04SJerome Forissier* Make alignment check configurable ([#1586]) 5845d8aaa04SJerome Forissier* drivers: add TZC380 driver ([#1578]) 5855d8aaa04SJerome Forissier* plat-imx: PSCI CPU off ([#1577]) 5865d8aaa04SJerome Forissier* 64-bit paging on QEMU v8 and HiKey ([#1575], [#1592]) 5875d8aaa04SJerome Forissier* Benchmark framework ([#1365]) 5885d8aaa04SJerome Forissier* Dump call stack of user TAs on abort ([#1552]) 5895d8aaa04SJerome Forissier* plat-hikey: enable Secure Data Path ([#1440]) 5905d8aaa04SJerome Forissier* Add interface to load and decrypt/authenticate user TAs ([#1513]) 5915d8aaa04SJerome Forissier* plat-ti: add secure paging support ([#1493]) 5925d8aaa04SJerome Forissier* plat-ti: add OTP hardware key support ([#1492]) 5935d8aaa04SJerome Forissier* Support ARM GICv3 ([#1465]) 5945d8aaa04SJerome Forissier 5955d8aaa04SJerome Forissier## Removed features 5965d8aaa04SJerome Forissier 5975d8aaa04SJerome Forissier* stm-orly2 is not supported anymore ([#1650]) 5985d8aaa04SJerome Forissier* Remove secure storage based on SQL FS (`CFG_SQL_FS=y`) ([#1490]) 5995d8aaa04SJerome Forissier* Remove support for mapping user TAs with 1 MiB or 2 MiB granularity 6005d8aaa04SJerome Forissier (`CFG_SMALL_PAGE_USER_TA=n`) ([#1559]). TAs are always mapped using small 6015d8aaa04SJerome Forissier pages. 6025d8aaa04SJerome Forissier 6035d8aaa04SJerome Forissier## Bug fixes 6045d8aaa04SJerome Forissier 6055d8aaa04SJerome Forissier* Reduce size of non-pageable code ([#1621]) 6065d8aaa04SJerome Forissier* Ignore `TA_FLAG_MULTI_SESSION` and `TA_FLAG_INSTANCE_KEEP_ALIVE` when 6075d8aaa04SJerome Forissier `TA_FLAG_SINGLE_INSTANCE` is not set ([#1574]) 6085d8aaa04SJerome Forissier* libutee: remove buffering for AES GCM (PR#1573) and AES CTR ([#1580]) 6095d8aaa04SJerome Forissier* Fix ROUNDUP()/ROUNDDOWN() macros ([#1519]) 6105d8aaa04SJerome Forissier* Do not touch other bits in GICD_CTLR ([#1508]) 6115d8aaa04SJerome Forissier* Fix build issue with `DEBUG=y` and `CFG_TEE_CORE_LOG_LEVEL=0` ([#1502]) 6125d8aaa04SJerome Forissier* crypto: do not restrict hash size when algorithm is ECDSA ([#1497]) 6135d8aaa04SJerome Forissier 6145d8aaa04SJerome Forissier## Security fixes or enhancements 6155d8aaa04SJerome Forissier 6165d8aaa04SJerome Forissier- crypto: fix RSA key leakage after fault injection attack 6175d8aaa04SJerome Forissier ([OP-TEE-2016-0003][OP-TEE-2016-0003]) ([#1610]) 6185d8aaa04SJerome Forissier* crypto: fix RSA key leakage after side channel attack 6195d8aaa04SJerome Forissier ([OP-TEE-2016-0002][OP-TEE-2016-0002]) ([#1610]) 6205d8aaa04SJerome Forissier* Make pager aliased pages not always writable ([#1551]) 6215d8aaa04SJerome Forissier* Support for no-exec RO and RW data ([#1459], [#1550]) 6225d8aaa04SJerome Forissier 6235d8aaa04SJerome Forissier## New issues 6245d8aaa04SJerome Forissier 6255d8aaa04SJerome Forissier* armv7: some platform-specific code (`plat_cpu_reset_early()`) overwrites 6265d8aaa04SJerome ForissierSCTLR bits configured by generic code. This affects alignment checks (`SCTLR.A`) 6275d8aaa04SJerome Forissierand write-implies-no-exec (`SCTLR.WXN`, `SCTLR.UWXN`), which can therefore not 6285d8aaa04SJerome Forissierbe configured via the compile-time `CFG_` variables. 6295d8aaa04SJerome Forissier* armv7: plat-imx: Cortex-A9 cores should enable branch prediction (`SCLTR.Z`) 6305d8aaa04SJerome Forissierfor improved performance. 6315d8aaa04SJerome Forissier* [#1656] qemu_armv8a: init hangs when secure data path and pager are both 6325d8aaa04SJerome Forissier enabled. 6335d8aaa04SJerome Forissier 6345d8aaa04SJerome Forissier## Tested on 6355d8aaa04SJerome Forissier 6365d8aaa04SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 6375d8aaa04SJerome Forissierits default configuration, while _extended_ means it was run successfully 6385d8aaa04SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 6395d8aaa04SJerome Forissierv1.1.0.4. 6405d8aaa04SJerome Forissier 6415d8aaa04SJerome ForissierIf a platform is not listed, it means the release was not tested on this 6425d8aaa04SJerome Forissierplatform. 6435d8aaa04SJerome Forissier 6445d8aaa04SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 6455d8aaa04SJerome Forissier* d02: extended 6465d8aaa04SJerome Forissier* hikey: extended 6475d8aaa04SJerome Forissier* imx-mx6ulevk: standard 6485d8aaa04SJerome Forissier* imx-mx6ullevk: standard 6495d8aaa04SJerome Forissier* imx-mx7dsabresd: standard 6505d8aaa04SJerome Forissier* ls-ls1021atwr: standard 6515d8aaa04SJerome Forissier* mediatek-mt8173: standard 6525d8aaa04SJerome Forissier* rcar-h3: standard 6535d8aaa04SJerome Forissier* rpi3: standard 6545d8aaa04SJerome Forissier* stm-b2260: extended 6555d8aaa04SJerome Forissier* stm-cannes: extended 6565d8aaa04SJerome Forissier* ti-am43xx: standard 6575d8aaa04SJerome Forissier* ti-am57xx: standard 6585d8aaa04SJerome Forissier* ti-dra7xx: standard 6595d8aaa04SJerome Forissier* vexpress-fvp: standard 6605d8aaa04SJerome Forissier* vexpress-juno: standard 6615d8aaa04SJerome Forissier* vexpress-qemu_armv8a: standard 6625d8aaa04SJerome Forissier* vexpress-qemu_virt: standard 6635d8aaa04SJerome Forissier 6645d8aaa04SJerome Forissier[github_commits_2_5_0]: https://github.com/OP-TEE/optee_os/compare/2.4.0...2.5.0-rc1 6655d8aaa04SJerome Forissier[#1656]: https://github.com/OP-TEE/optee_os/issues/1656 6665d8aaa04SJerome Forissier[#1650]: https://github.com/OP-TEE/optee_os/pull/1650 6675d8aaa04SJerome Forissier[#1639]: https://github.com/OP-TEE/optee_os/pull/1639 6685d8aaa04SJerome Forissier[#1630]: https://github.com/OP-TEE/optee_os/pull/1630 6695d8aaa04SJerome Forissier[#1623]: https://github.com/OP-TEE/optee_os/pull/1623 6705d8aaa04SJerome Forissier[#1621]: https://github.com/OP-TEE/optee_os/pull/1621 6715d8aaa04SJerome Forissier[#1610]: https://github.com/OP-TEE/optee_os/pull/1610 6725d8aaa04SJerome Forissier[#1592]: https://github.com/OP-TEE/optee_os/pull/1592 6735d8aaa04SJerome Forissier[#1589]: https://github.com/OP-TEE/optee_os/pull/1589 6745d8aaa04SJerome Forissier[#1586]: https://github.com/OP-TEE/optee_os/pull/1586 6755d8aaa04SJerome Forissier[#1580]: https://github.com/OP-TEE/optee_os/pull/1580 6765d8aaa04SJerome Forissier[#1578]: https://github.com/OP-TEE/optee_os/pull/1578 6775d8aaa04SJerome Forissier[#1577]: https://github.com/OP-TEE/optee_os/pull/1577 6785d8aaa04SJerome Forissier[#1574]: https://github.com/OP-TEE/optee_os/pull/1574 6795d8aaa04SJerome Forissier[#1559]: https://github.com/OP-TEE/optee_os/pull/1559 6805d8aaa04SJerome Forissier[#1551]: https://github.com/OP-TEE/optee_os/pull/1551 6815d8aaa04SJerome Forissier[#1550]: https://github.com/OP-TEE/optee_os/pull/1550 6825d8aaa04SJerome Forissier[#1519]: https://github.com/OP-TEE/optee_os/pull/1519 6835d8aaa04SJerome Forissier[#1502]: https://github.com/OP-TEE/optee_os/pull/1502 6845d8aaa04SJerome Forissier[#1365]: https://github.com/OP-TEE/optee_os/pull/1365 6855d8aaa04SJerome Forissier[#1552]: https://github.com/OP-TEE/optee_os/pull/1552 6865d8aaa04SJerome Forissier[#1513]: https://github.com/OP-TEE/optee_os/pull/1513 6875d8aaa04SJerome Forissier[#1508]: https://github.com/OP-TEE/optee_os/pull/1508 6885d8aaa04SJerome Forissier[#1493]: https://github.com/OP-TEE/optee_os/pull/1493 6895d8aaa04SJerome Forissier[#1497]: https://github.com/OP-TEE/optee_os/pull/1497 6905d8aaa04SJerome Forissier[#1492]: https://github.com/OP-TEE/optee_os/pull/1492 6915d8aaa04SJerome Forissier[#1490]: https://github.com/OP-TEE/optee_os/pull/1490 6925d8aaa04SJerome Forissier[#1465]: https://github.com/OP-TEE/optee_os/pull/1465 6935d8aaa04SJerome Forissier[#1459]: https://github.com/OP-TEE/optee_os/pull/1459 6945d8aaa04SJerome Forissier[#1440]: https://github.com/OP-TEE/optee_os/pull/1440 6955d8aaa04SJerome Forissier[OP-TEE-2016-0003]: https://www.op-tee.org/security-advisories/ 6965d8aaa04SJerome Forissier[OP-TEE-2016-0002]: https://www.op-tee.org/security-advisories/ 6975d8aaa04SJerome Forissier 698702609a7SJerome Forissier# OP-TEE - version 2.4.0 699702609a7SJerome Forissier 700702609a7SJerome Forissier[Link][github_commits_2_4_0] to a list of all commits between this release and 701702609a7SJerome Forissierthe previous one (2.3.0). 702702609a7SJerome Forissier 703702609a7SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 704702609a7SJerome ForissierSecure Storage internal format for the REE and SQL FS is not compatible due to 705702609a7SJerome Forissiercommits [a238b74][commit_a238b74] ("core: REE FS: use the new hash tree 706702609a7SJerome Forissierinterface") and [44e900e][commit_44e900e] ("core: SQL FS: use the new hash tree 707702609a7SJerome Forissierinterface"). 708702609a7SJerome Forissier 709702609a7SJerome Forissier## New features 710702609a7SJerome Forissier 711702609a7SJerome Forissier* Add porting guidelines 712702609a7SJerome Forissier 713702609a7SJerome Forissier* Add support for Secure Data Path which allows Client and Trusted Applications 714702609a7SJerome Forissier to share references to secure memory 715702609a7SJerome Forissier 716702609a7SJerome Forissier* New supported platform: Texas Instruments AM57xx (`PLATFORM=ti-am57xx`) 717702609a7SJerome Forissier 718702609a7SJerome Forissier* ARMv7-A: add support for platform services in secure monitor and add these 719702609a7SJerome Forissier services for the DRA7xx platform 720702609a7SJerome Forissier 721702609a7SJerome Forissier* SPI framework and PL022 driver cleanup and improvements 722702609a7SJerome Forissier 723702609a7SJerome Forissier* Use CNTPCT (when available) to add entropy to the software PRNG 724702609a7SJerome Forissier 725702609a7SJerome Forissier* Add GlobalPlatform Socket API for UDP and TCP (IPv4 and IPv6) 726702609a7SJerome Forissier 727702609a7SJerome Forissier* DRA7: add TRNG driver, enable GICv2 driver 728702609a7SJerome Forissier 729702609a7SJerome Forissier* Support load address larger than 4G 730702609a7SJerome Forissier 731702609a7SJerome Forissier* libutee: preserve error code when calling TEE_Panic() for easier 732702609a7SJerome Forissier troubleshooting 733702609a7SJerome Forissier 734702609a7SJerome Forissier* Support TA profiling with gprof (-pg compiler switch) 735702609a7SJerome Forissier 736702609a7SJerome Forissier* Optimize the ELF loader for TAs when pager is enabled 737702609a7SJerome Forissier 738702609a7SJerome Forissier* Update documentation 739702609a7SJerome Forissier 740702609a7SJerome Forissier* Add paged secure shared memory that can be transferred between TAs as 741702609a7SJerome Forissier needed 742702609a7SJerome Forissier 743702609a7SJerome Forissier* Introduce MOBJ abstraction 744702609a7SJerome Forissier 745702609a7SJerome Forissier* i.MX6: add PSCI "on" function 746702609a7SJerome Forissier 747702609a7SJerome Forissier* arm32: introduce PSCI framework 748702609a7SJerome Forissier 749702609a7SJerome Forissier## Bug fixes 750702609a7SJerome Forissier 751702609a7SJerome Forissier* Secure storage: improve integrity checking of the REE and SQL filesystems by 752702609a7SJerome Forissier adding a hash tree on the internal data structures. Any external modification 753702609a7SJerome Forissier is detected, except full rollback. Fixes [#1188][issue1188]. 754702609a7SJerome Forissier 755702609a7SJerome Forissier* The linux driver will set the 'privileged' flag (TEE_GEN_CAP_PRIVILEGED) on 756702609a7SJerome Forissier the device intended for use by tee-supplicant. Fixes [#1199][issue1199]. 757702609a7SJerome Forissier 758702609a7SJerome Forissier* RPMB: don't try to program the RPMB key by default 759702609a7SJerome Forissier 760702609a7SJerome Forissier* Fix "make clean" error cases 761702609a7SJerome Forissier 762702609a7SJerome Forissier* Fix issue when resetting persistent storage enumerator [#1332][issue1332] 763702609a7SJerome Forissier 764702609a7SJerome Forissier* Fix TA panic when doing AES CTS with specific buffer sizes 765702609a7SJerome Forissier [#1203][issue1203]. 766702609a7SJerome Forissier 767702609a7SJerome Forissier## Known issues 768702609a7SJerome Forissier 769702609a7SJerome Forissier* On RPi3 xtest sometimes stall (rcu_sched self-detected stall on CPU) [#1353][issue1353] 770702609a7SJerome Forissier* For multi-core PSCI support is to be added for ls1021atwr in OP-TEE. 771702609a7SJerome Forissier* USB keyboard cannot be used to stop the u-boot timeout ([build issue131]). 772702609a7SJerome Forissier* Travis service (build.git) seems unstable from time to time. 773702609a7SJerome Forissier 774702609a7SJerome Forissier## Tested on 775702609a7SJerome Forissier 776702609a7SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 777702609a7SJerome Forissierits default configuration, while _extended_ means it was run successfully 778702609a7SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 779702609a7SJerome Forissierv1.1.0.4. 780702609a7SJerome Forissier 781702609a7SJerome ForissierIf a platform is not listed, it means the release was not tested on this 782702609a7SJerome Forissierplatform. 783702609a7SJerome Forissier 784702609a7SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 785702609a7SJerome Forissier* d02: extended 786702609a7SJerome Forissier* hikey: extended 787702609a7SJerome Forissier* imx-mx6ulevk: standard 788702609a7SJerome Forissier* ls-ls1021atwr: standard (single core) 789702609a7SJerome Forissier* mediatek-mt8173: standard 790702609a7SJerome Forissier* rcar-h3: standard 791702609a7SJerome Forissier* rpi3: standard 792702609a7SJerome Forissier* stm-b2260: extended 793702609a7SJerome Forissier* ti-dra7xx: standard 794702609a7SJerome Forissier* vexpress-fvp: standard 795702609a7SJerome Forissier* vexpress-juno: standard 796702609a7SJerome Forissier* vexpress-qemu_armv8a: standard 797702609a7SJerome Forissier* vexpress-qemu_virt: standard 798702609a7SJerome Forissier* zynqmp-zc1751_dc1: standard 799702609a7SJerome Forissier* zynqmp-zc1751_dc2: standard 800702609a7SJerome Forissier* zynqmp-zcu102: standard 801702609a7SJerome Forissier 802702609a7SJerome Forissier[github_commits_2_4_0]: https://github.com/OP-TEE/optee_os/compare/2.3.0...2.4.0 803702609a7SJerome Forissier[issue1332]: https://github.com/OP-TEE/optee_os/issues/1332 804702609a7SJerome Forissier[issue1353]: https://github.com/OP-TEE/optee_os/issues/1353 805702609a7SJerome Forissier[build issue131]: https://github.com/OP-TEE/build/issues/131 806702609a7SJerome Forissier[commit_a238b74]: https://github.com/OP-TEE/optee_os/commit/a238b744b1b3 807702609a7SJerome Forissier[commit_44e900e]: https://github.com/OP-TEE/optee_os/commit/44e900eabfc1 808702609a7SJerome Forissier 80928fcee17SJerome Forissier# OP-TEE - version 2.3.0 81028fcee17SJerome Forissier 81128fcee17SJerome Forissier[Link][github_commits_2_3_0] to a list of all commits between this release and 81228fcee17SJerome Forissierthe previous one (2.2.0). 81328fcee17SJerome Forissier 81428fcee17SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 81528fcee17SJerome ForissierSecure Storage internal format for the REE FS is not compatible due to commit 81628fcee17SJerome Forissier[361fb3e][commit_361fb3e] ("core: REE FS: use a single file per object"). 81728fcee17SJerome Forissier 81828fcee17SJerome Forissier[commit_361fb3e]: https://github.com/OP-TEE/optee_os/commit/361fb3e 81928fcee17SJerome Forissier 82028fcee17SJerome Forissier## New features 82128fcee17SJerome Forissier 82228fcee17SJerome Forissier* New supported platform: Xilinx Zynq 7000 ZC702 (`PLATFORM=zynq7k-zc702`) 82328fcee17SJerome Forissier 82428fcee17SJerome Forissier* Add debug assertions to spinlocks and mutexes 82528fcee17SJerome Forissier 82628fcee17SJerome Forissier* Add more CP15 register access macros for Cortex-A9 82728fcee17SJerome Forissier 82828fcee17SJerome Forissier* ARMv7-A: redesign secure monitor to make it easier to register services 82928fcee17SJerome Forissier 83028fcee17SJerome Forissier* ARMv7-A: cleanup boot arguments 83128fcee17SJerome Forissier 83228fcee17SJerome Forissier* libutee: extend `TEE_CheckMemoryAccessRights()` with 83328fcee17SJerome Forissier `TEE_MEMORY_ACCESS_SECURE` and `TEE_MEMORY_ACCESS_NONSECURE` 83428fcee17SJerome Forissier 83528fcee17SJerome Forissier* plat-hikey: enable SPI by default and add sample test code 83628fcee17SJerome Forissier 83728fcee17SJerome Forissier* Consider `CFLAGS_ta_arm64` and `CFLAGS_ta_arm32` when building TAs 83828fcee17SJerome Forissier 83928fcee17SJerome Forissier* Secure storage refactoring 84028fcee17SJerome Forissier - Simplify interface with tee-supplicant. Minimize round trips with normal 84128fcee17SJerome Forissier world, especially by adding a cache for FS RPC payload data. 84228fcee17SJerome Forissier - REE FS: use a single file per object, remove block cache. 84328fcee17SJerome Forissier 84428fcee17SJerome Forissier* Print call stack in panic() 84528fcee17SJerome Forissier 84628fcee17SJerome Forissier## Bug fixes 84728fcee17SJerome Forissier 84828fcee17SJerome Forissier* Fix UUID encoding when communicating with normal world (use big endian 84928fcee17SJerome Forissier mode instead of native endianness). Related to this, the string format 85028fcee17SJerome Forissier for UUIDs has changed in tee-supplicant, so that TA file names now follow 85128fcee17SJerome Forissier the format defined in RFC4122 (a missing hyphen was added). The old format 85228fcee17SJerome Forissier is still supported, but deprecated, and will likely be removed with the 85328fcee17SJerome Forissier next major release. 85428fcee17SJerome Forissier 85528fcee17SJerome Forissier* Drop write permission to non-writable ELF segments after TA loading is 85628fcee17SJerome Forissier complete. 85728fcee17SJerome Forissier 85828fcee17SJerome Forissier* mm: fix confusing memory mapping debug traces 85928fcee17SJerome Forissier 86028fcee17SJerome Forissier* plat-ti: fix issues with MMU mapping 86128fcee17SJerome Forissier 86228fcee17SJerome Forissier* crypto: fix clearing of big numbers 86328fcee17SJerome Forissier 86428fcee17SJerome Forissier* build: allow spaces and double quotes in CFG_ variables 86528fcee17SJerome Forissier 86628fcee17SJerome Forissier* mm: use paddr_t to support both 32- and 64-bit architectures properly. 86728fcee17SJerome Forissier Resolves 32-bit truncation error when pool is at top of 32 bit address 86828fcee17SJerome Forissier space on 64-bit architecture. 86928fcee17SJerome Forissier 87028fcee17SJerome Forissier* plat-stm: support pager. Fix pager on ARMv7-A SMP boards. 87128fcee17SJerome Forissier 87228fcee17SJerome Forissier* Fix debug output of Trusted Applications (remove "ERROR: TEE-CORE:" prefix) 87328fcee17SJerome Forissier 87428fcee17SJerome Forissier* Do not consider TA memref parameters as TA private memory 87528fcee17SJerome Forissier 87628fcee17SJerome Forissier* crypto: fix `cipher_final()` which would not call `cbc_done()` for CBC_MAC 87728fcee17SJerome Forissier algorithms 87828fcee17SJerome Forissier 87928fcee17SJerome Forissier* fix for 16-way PL310 88028fcee17SJerome Forissier 88128fcee17SJerome Forissier* arm32: fix call stack unwinding (`print_stack()`) 88228fcee17SJerome Forissier 88328fcee17SJerome Forissier* arm32: fix spinlock assembly code 88428fcee17SJerome Forissier 88528fcee17SJerome Forissier* plat-stm, plat-imx: fix SCR initalization 88628fcee17SJerome Forissier 88728fcee17SJerome Forissier* Fix user L1 MMU entries calculation (non-LPAE), allowing TTBCR.N values 88828fcee17SJerome Forissier other than 7. 88928fcee17SJerome Forissier 89028fcee17SJerome Forissier* mtk-mt8173: fix panic caused by incorrect size of SHMEM 89128fcee17SJerome Forissier 89228fcee17SJerome Forissier* plat-stm: fix RNG driver (non-flat mapping) 89328fcee17SJerome Forissier 89428fcee17SJerome Forissier## Known issues 89528fcee17SJerome Forissier 89628fcee17SJerome Forissier* New issues open on GitHub 89728fcee17SJerome Forissier * [#1203][issue1203] AES-CTS mode will fail when inlen=0x100, in_incr=0x80 89828fcee17SJerome Forissier * [#1199][issue1199] Both tee and teepriv reported GlobalPlatform compliant 89928fcee17SJerome Forissier * [#1188][issue1188] Secure storage (SQL FS and REE FS): blocks not tied to 90028fcee17SJerome Forissier current meta header 90128fcee17SJerome Forissier * [#1172][issue1172] paddr_t should be larger than 32 bits when 90228fcee17SJerome Forissier CFG_WITH_LPAE is enabled 90328fcee17SJerome Forissier 90428fcee17SJerome Forissier## Tested on 90528fcee17SJerome Forissier 90628fcee17SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 90728fcee17SJerome Forissierits default configuration, while _extended_ means it was run successfully 90828fcee17SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 90928fcee17SJerome Forissierv1.1.0.4. 91028fcee17SJerome Forissier 91128fcee17SJerome ForissierIf a platform is not listed, it means the release was not tested on this 91228fcee17SJerome Forissierplatform. 91328fcee17SJerome Forissier 91428fcee17SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 91528fcee17SJerome Forissier* d02: extended 91628fcee17SJerome Forissier* hikey: extended 91728fcee17SJerome Forissier* imx-mx6ulevk: standard 91828fcee17SJerome Forissier* ls-ls1021atwr: standard 91928fcee17SJerome Forissier* mediatek-mt8173: standard 92028fcee17SJerome Forissier* rcar-h3: standard 92128fcee17SJerome Forissier* rpi3: standard 92228fcee17SJerome Forissier* stm-b2260: extended 92328fcee17SJerome Forissier* stm-cannes: extended 92428fcee17SJerome Forissier* ti-dra7xx: standard 92528fcee17SJerome Forissier* vexpress-fvp: standard 92628fcee17SJerome Forissier* vexpress-juno: standard 92728fcee17SJerome Forissier* vexpress-qemu_armv8a: standard 92828fcee17SJerome Forissier* vexpress-qemu_virt: extended 92928fcee17SJerome Forissier* zynqmp-zcu102: standard 93028fcee17SJerome Forissier 93128fcee17SJerome Forissier[github_commits_2_3_0]: https://github.com/OP-TEE/optee_os/compare/2.2.0...2.3.0 93228fcee17SJerome Forissier[issue1172]: https://github.com/OP-TEE/optee_os/issues/1172 93328fcee17SJerome Forissier[issue1188]: https://github.com/OP-TEE/optee_os/issues/1188 93428fcee17SJerome Forissier[issue1199]: https://github.com/OP-TEE/optee_os/issues/1199 93528fcee17SJerome Forissier[issue1203]: https://github.com/OP-TEE/optee_os/issues/1203 93628fcee17SJerome Forissier 937c0c5d399SJerome Forissier# OP-TEE - version 2.2.0 938c0c5d399SJerome Forissier 939c0c5d399SJerome Forissier[Link][github_commits_2_2_0] to a list of all commits between this release and 940c0c5d399SJerome Forissierthe previous one (2.1.0). 941c0c5d399SJerome Forissier 942c0c5d399SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 943c0c5d399SJerome ForissierSecure Storage internal format is not compatible due to commit 944c0c5d399SJerome Forissier[fde4a75][commit_fde4a75] ("storage: encrypt the FEK with a TA-specific key"). 945c0c5d399SJerome Forissier 946c0c5d399SJerome Forissier[commit_fde4a75]: https://github.com/OP-TEE/optee_os/commit/fde4a75 947c0c5d399SJerome Forissier 948c0c5d399SJerome Forissier## New features 949c0c5d399SJerome Forissier 950c0c5d399SJerome Forissier* New supported platforms: 951c0c5d399SJerome Forissier * Freescale i.MX6 Quad SABRE Lite & SD 952c0c5d399SJerome Forissier * HiSilicon D02 953c0c5d399SJerome Forissier * Raspberry Pi3 954c0c5d399SJerome Forissier * Renesas RCAR H3 955c0c5d399SJerome Forissier * STMicroelectronics b2260 - h410 956c0c5d399SJerome Forissier 957c0c5d399SJerome Forissier* Pager: Support paging of read/write pages by encrypting them with AES-GCM. 958c0c5d399SJerome Forissier Support paging of user TAs. Add global setting for TZSRAM size 959c0c5d399SJerome Forissier (CFG_CORE_TZSRAM_EMUL_SIZE), defaults to 300K. 960c0c5d399SJerome Forissier 961c0c5d399SJerome Forissier* Support for more than 8 CPU cores 962c0c5d399SJerome Forissier 963c0c5d399SJerome Forissier* Added SPI framework and PL022 driver 964c0c5d399SJerome Forissier 965c0c5d399SJerome Forissier* GPIO: framework supports multiple instances, PL061 driver now has get/set 966c0c5d399SJerome Forissier interrupt and mode control functions 967c0c5d399SJerome Forissier 968c0c5d399SJerome Forissier* Secure storage: Encrypt the File Encryption Key with a TA-specific key for 969c0c5d399SJerome Forissier better TA isolation. Add build-time and run-time support for multiple storage 970c0c5d399SJerome Forissier backends. Add SQLite backend. 971c0c5d399SJerome Forissier 972c0c5d399SJerome Forissier* Trusted User Interface: some code is introduced to support the implementation 973c0c5d399SJerome Forissier of TUI. This includes: a generic framebuffer driver, display and serial 974c0c5d399SJerome Forissier abstractions, and drivers for PL111 (LCD) / PL050 (KMI) / TZC400 and PS2 975c0c5d399SJerome Forissier mouse. 976c0c5d399SJerome Forissier 977c0c5d399SJerome Forissier* AES acceleration using ARMv8-A Cryptographic Extensions instructions is 978c0c5d399SJerome Forissier now supported in AArch32 mode 979c0c5d399SJerome Forissier 980c0c5d399SJerome Forissier* Add support for GCC flags: -fsanitize=undefined and -fsanitize=kernel-address 981c0c5d399SJerome Forissier 982c0c5d399SJerome Forissier* Use a global setting for core heap size (CFG_CORE_HEAP_SIZE), 64K by default. 983c0c5d399SJerome Forissier 984c0c5d399SJerome Forissier* Add macros to unwind and print the call stack of TEE core 985c0c5d399SJerome Forissier 986c0c5d399SJerome Forissier* Libtomcrypt: sync with the latest `develop` branch. 987c0c5d399SJerome Forissier 988c0c5d399SJerome Forissier* The Trusted Application SDK (ta_dev_kit.mk) can produce libraries (.a) 989c0c5d399SJerome Forissier 990c0c5d399SJerome Forissier* Rework assertions and TEE core panics and properly honor NDEBUG 991c0c5d399SJerome Forissier 992c0c5d399SJerome Forissier## Bug fixes 993c0c5d399SJerome Forissier 994c0c5d399SJerome Forissier* Fix incorrect algorithm passed to cipher.final() 995c0c5d399SJerome Forissier 996c0c5d399SJerome Forissier* scripts: support Python 2.x and 3.x 997c0c5d399SJerome Forissier 998c0c5d399SJerome Forissier* Secure storage: Add proper locking to support concurrent access. Fix sign 999c0c5d399SJerome Forissier extension bug with offset parameter of syscall storage_obj_seek which could 1000c0c5d399SJerome Forissier cause errors in Aarch32 mode. Fix reading beyond end of file. 1001c0c5d399SJerome Forissier 1002c0c5d399SJerome Forissier* Aarch64: mask all maskable exceptions before doing a normal return from call. 1003c0c5d399SJerome Forissier 1004c0c5d399SJerome Forissier* Device Tree: add no-map property to OP-TEE node in reserved-memory. 1005c0c5d399SJerome Forissier 1006c0c5d399SJerome Forissier* LibTomcrypt: fix CVE-2016-6129 1007c0c5d399SJerome Forissier 1008c0c5d399SJerome Forissier## Known issues 1009c0c5d399SJerome Forissier 1010c0c5d399SJerome Forissier* New issues open on GitHub 1011c0c5d399SJerome Forissier * [#1093][issue1093] rcar-h3: xtest 6010 hangs 1012c0c5d399SJerome Forissier * [#1092][issue1092] rcar-h3: xtest 4010 fails 1013c0c5d399SJerome Forissier * [#1081][issue1081] Bad mapping of TA secure memref parameters 1014c0c5d399SJerome Forissier * [#1071][issue1071] __data_end may not correctly represent text start position when using CFG_WITH_PAGER 1015c0c5d399SJerome Forissier * [#1069][issue1069] armv7/Aarch32: crash in stack unwind (DPRINT_STACK()) 1016c0c5d399SJerome Forissier 1017c0c5d399SJerome Forissier## Tested on 1018c0c5d399SJerome Forissier 1019c0c5d399SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 1020c0c5d399SJerome Forissierits default configuration, while _extended_ means it was run successfully 1021c0c5d399SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 1022c0c5d399SJerome Forissierv1.1.0.4. 1023c0c5d399SJerome Forissier 1024c0c5d399SJerome ForissierIf a platform is not listed, it means the release was not tested on this 1025c0c5d399SJerome Forissierplatform. 1026c0c5d399SJerome Forissier 1027c0c5d399SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 1028c0c5d399SJerome Forissier* d02: extended 1029c0c5d399SJerome Forissier* hikey: extended 1030c0c5d399SJerome Forissier* imx-mx6qsabrelite: standard 1031c0c5d399SJerome Forissier* imx-mx6qsabresd: standard 1032c0c5d399SJerome Forissier* rcar-h3: standard, pass except issues [#1092][issue1092] and [#1093][issue1093] 1033c0c5d399SJerome Forissier* rpi3: standard 1034c0c5d399SJerome Forissier* stm-b2260: standard 1035c0c5d399SJerome Forissier* stm-cannes: standard 1036c0c5d399SJerome Forissier* ti-dra7xx: standard 1037c0c5d399SJerome Forissier* vexpress-fvp: standard 1038c0c5d399SJerome Forissier* vexpress-juno: standard 1039c0c5d399SJerome Forissier* vexpress-qemu_armv8a: standard 1040c0c5d399SJerome Forissier* vexpress-qemu_virt: extended 1041c0c5d399SJerome Forissier* zynqmp-zcu102: standard 1042c0c5d399SJerome Forissier 1043c0c5d399SJerome Forissier[github_commits_2_2_0]: https://github.com/OP-TEE/optee_os/compare/2.1.0...2.2.0 1044c0c5d399SJerome Forissier[issue1081]: https://github.com/OP-TEE/optee_os/issues/1081 1045c0c5d399SJerome Forissier[issue1071]: https://github.com/OP-TEE/optee_os/issues/1071 1046c0c5d399SJerome Forissier[issue1069]: https://github.com/OP-TEE/optee_os/issues/1069 1047c0c5d399SJerome Forissier[issue1092]: https://github.com/OP-TEE/optee_os/issues/1092 1048c0c5d399SJerome Forissier[issue1093]: https://github.com/OP-TEE/optee_os/issues/1093 1049c0c5d399SJerome Forissier 1050ac3cc110SPascal Brand# OP-TEE - version 2.1.0 1051a0cd5d60SPascal Brand 1052ac3cc110SPascal Brand## New features 1053ac3cc110SPascal Brand 1054ac3cc110SPascal Brand* New supported platforms: 1055ac3cc110SPascal Brand * Xilinx Zynq UltraScale+ MPSOC 1056ac3cc110SPascal Brand * Spreadtrum SC9860 1057ac3cc110SPascal Brand 1058ac3cc110SPascal Brand* GCC5 support 1059ac3cc110SPascal Brand 1060ac3cc110SPascal Brand* Non Linear Mapping support: In OP-TEE kernel mode, the physical to virtual 1061ac3cc110SPascal Brand addresses was linear until this release, meaning the virtual addresses 1062ac3cc110SPascal Brand were equal to the physical addresses. This is no more the case in this 1063ac3cc110SPascal Brand release. 1064ac3cc110SPascal Brand 1065ac3cc110SPascal Brand* Font rendering routines have been introduced in order to ease an 1066ac3cc110SPascal Brand implementation of Trusted UI. 1067ac3cc110SPascal Brand 1068ac3cc110SPascal Brand* File Storage: Possibility to use the normal world filesystem and the RPMB 1069ac3cc110SPascal Brand implementations simultaneously. 1070ac3cc110SPascal Brand 1071ac3cc110SPascal Brand* AOSP: There is a [local manifest][aosp_local_manifest] to build OP-TEE into an AOSP build, running on HiKey. 1072ac3cc110SPascal Brand Please refer to the README in that repo for instructions. 1073ac3cc110SPascal Brand 1074ac3cc110SPascal Brand* OpenEmbedded: In addition to the makefile-based build described in the optee_os README, there is an 1075ac3cc110SPascal Brand [OpenEmbedded-based build][oe_build] that supports Qemu (32-bit), FVP (64-bit), and HiKey (64-bit). 1076ac3cc110SPascal Brand Please refer to the README in that repo for instructions. 1077ac3cc110SPascal Brand 1078ac3cc110SPascal Brand* [Link][github_commits_2_1_0] to a list of all commits between this and 1079ac3cc110SPascal Brand previous release. 1080ac3cc110SPascal Brand 1081ac3cc110SPascal Brand 1082ac3cc110SPascal Brand## Tested on 1083ac3cc110SPascal BrandDefinitions: 1084ac3cc110SPascal Brand 1085ac3cc110SPascal Brand| Type | Meaning | 1086ac3cc110SPascal Brand| ---- | ------- | 1087ac3cc110SPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1088ac3cc110SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1089ac3cc110SPascal Brand 1090ac3cc110SPascal Brand* ARM Juno Board (vexpress-juno), standard. 1091ac3cc110SPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1092ac3cc110SPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 10.0.37) 1093ac3cc110SPascal Brand* FSL i.MX6 UltraLite EVK (imx), standard. 1094ac3cc110SPascal Brand* FSL ls1021a (ls-ls1021atwr), standard tests. 1095ac3cc110SPascal Brand* HiKey (hikey), standard + extended tests. 1096ac3cc110SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1097ac3cc110SPascal Brand* Xilinx Zynq UltraScale+ MPSOC, standard tests 1098ac3cc110SPascal Brand 1099ac3cc110SPascal BrandNote that the following platform has not been tested: 1100ac3cc110SPascal Brand* MTK8173-EVB (mediatek-mt8173) 1101ac3cc110SPascal Brand 1102ac3cc110SPascal Brand 1103ac3cc110SPascal Brand## Known issues 1104ac3cc110SPascal Brand* Issue(s) open on GitHub 1105ac3cc110SPascal Brand * [#868][pr868]: python-wand font generation sometimes times out 1106ac3cc110SPascal Brand * [#863][pr863]: "double free or corruption" error when building optee_os 1107ac3cc110SPascal Brand * [#858][pr858]: UUIDs in binary format have wrong endinanness 1108ac3cc110SPascal Brand * [#857][pr857]: Formatting of UUIDs is incorrect 1109ac3cc110SPascal Brand * [#847][pr847]: optee_os panic(TEE-CORE: Assertion) 1110ac3cc110SPascal Brand * [#838][pr838]: TUI font rendering is _very_ slow 1111ac3cc110SPascal Brand * [#814][pr814]: Persistent objects : save informations after close 1112ac3cc110SPascal Brand * [#665][pr665]: xtest 1013 stalled on HiKey when log levels are 4 and optee_os is on its own UART 1113ac3cc110SPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1114ac3cc110SPascal Brand 1115ac3cc110SPascal Brand[github_commits_2_1_0]: https://github.com/OP-TEE/optee_os/compare/2.0.0...2.1.0 1116ac3cc110SPascal Brand[pr868]: https://github.com/OP-TEE/optee_os/issues/868 1117ac3cc110SPascal Brand[pr863]: https://github.com/OP-TEE/optee_os/issues/863 1118ac3cc110SPascal Brand[pr858]: https://github.com/OP-TEE/optee_os/issues/858 1119ac3cc110SPascal Brand[pr857]: https://github.com/OP-TEE/optee_os/issues/857 1120ac3cc110SPascal Brand[pr847]: https://github.com/OP-TEE/optee_os/issues/847 1121ac3cc110SPascal Brand[pr838]: https://github.com/OP-TEE/optee_os/issues/838 1122ac3cc110SPascal Brand[pr814]: https://github.com/OP-TEE/optee_os/issues/814 1123ac3cc110SPascal Brand[pr665]: https://github.com/OP-TEE/optee_os/issues/665 1124ac3cc110SPascal Brand[aosp_local_manifest]: https://github.com/linaro-swg/optee_android_manifest 1125ac3cc110SPascal Brand[oe_build]: https://github.com/linaro-swg/oe-optee 1126ac3cc110SPascal Brand 1127ac3cc110SPascal Brand# OP-TEE - version 2.0.0 1128a0cd5d60SPascal Brand 1129a0cd5d60SPascal Brand## New features 1130a0cd5d60SPascal Brand 1131a0cd5d60SPascal Brand* Generic driver: A new generic TEE driver is in the process of being 1132a0cd5d60SPascal Brand [upstreamed][gendrv_v9]. 1133a0cd5d60SPascal Brand In this release, [OP-TEE/optee_linuxdriver][optee_linuxdriver] is no more used. 1134a0cd5d60SPascal Brand Instead, linux v4.5 is being patched using the proposed Generic TEE Driver, 1135a0cd5d60SPascal Brand as it can be found in [https://github.com/linaro-swg/linux/tree/optee][linux_optee] 1136a0cd5d60SPascal Brand 1137a0cd5d60SPascal Brand* RPMB support: Secure Storage can now use Replay Protected Memory Block (RPMB) partition 1138a0cd5d60SPascal Brand of an eMMC device. Check the [full documentation][rpmb_doc] 1139a0cd5d60SPascal Brand 1140a0cd5d60SPascal Brand* Hard-float ABI is now available. 1141a0cd5d60SPascal Brand 1142a0cd5d60SPascal Brand* [Link][github_commits_2_0_0] to a list of all commits between this and 1143a0cd5d60SPascal Brand previous release. 1144a0cd5d60SPascal Brand 1145a0cd5d60SPascal Brand 1146a0cd5d60SPascal Brand## Tested on 1147a0cd5d60SPascal BrandDefinitions: 1148a0cd5d60SPascal Brand 1149a0cd5d60SPascal Brand| Type | Meaning | 1150a0cd5d60SPascal Brand| ---- | ------- | 1151a0cd5d60SPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1152a0cd5d60SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1153a0cd5d60SPascal Brand 1154a0cd5d60SPascal Brand* ARM Juno Board (vexpress-juno), standard. 1155a0cd5d60SPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1156a0cd5d60SPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 9.5.40) 1157eb00c7b9SPascal Brand* FSL ls1021a (ls-ls1021atwr), standard. 1158a0cd5d60SPascal Brand* HiKey (hikey), standard. 1159a0cd5d60SPascal Brand* MTK8173-EVB (mediatek-mt8173), standard. 1160a0cd5d60SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1161a0cd5d60SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1162a0cd5d60SPascal Brand 1163a0cd5d60SPascal Brand## Known issues 1164a0cd5d60SPascal Brand* Issue(s) open on GitHub 1165a0cd5d60SPascal Brand * [#40][prld40] BUG_ON() when re-using RPC buffer to tee-supplicant 1166a0cd5d60SPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1167a0cd5d60SPascal Brand 1168a0cd5d60SPascal Brand[github_commits_2_0_0]: https://github.com/OP-TEE/optee_os/compare/1.1.0...2.0.0 1169a0cd5d60SPascal Brand[rpmb_doc]: https://github.com/OP-TEE/optee_os/blob/master/documentation/secure_storage_rpmb.md 1170a0cd5d60SPascal Brand[optee_linuxdriver]: https://github.com/OP-TEE/optee_linuxdriver 1171a0cd5d60SPascal Brand[gendrv_v9]: https://lkml.org/lkml/2016/4/1/205 1172a0cd5d60SPascal Brand[linux_optee]: https://github.com/linaro-swg/linux/tree/optee 1173a0cd5d60SPascal Brand 1174a0cd5d60SPascal Brand 1175c5bbfb4dSPascal Brand# OP-TEE - version 1.1.0 1176c5bbfb4dSPascal Brand 1177c5bbfb4dSPascal Brand 1178c5bbfb4dSPascal Brand## New features 1179c5bbfb4dSPascal Brand 1180c5bbfb4dSPascal Brand* Softfloat library: floating point support is now available in 32bits TA. 1181c5bbfb4dSPascal Brand 1182c5bbfb4dSPascal Brand* Support running 64-bits TA: on ARMv8-A platform, TA can be compiled in 1183c5bbfb4dSPascal Brand AArch32 and/or in AArch64 in case the core is compiled in AArch64. 1184c5bbfb4dSPascal Brand An example can be found in HiKey configuration file. Using the following 1185c5bbfb4dSPascal Brand excerpt code, the user TA libraries are compiled in both AArch32 and 1186c5bbfb4dSPascal Brand AArch64, and can be found in `out/arm-plat-hikey/export-ta_arm32` and 1187c5bbfb4dSPascal Brand `out/arm-plat-hikey/export-ta_arm64` 1188c5bbfb4dSPascal Brand 1189c5bbfb4dSPascal Brand``` 1190c5bbfb4dSPascal Brand ta-targets = ta_arm32 1191c5bbfb4dSPascal Brand ta-targets += ta_arm64 1192c5bbfb4dSPascal Brand``` 1193c5bbfb4dSPascal Brand 1194c5bbfb4dSPascal Brand* Concurrent TA support: multiple TA can run in parallel on 1195c5bbfb4dSPascal Brand several cores. 1196c5bbfb4dSPascal Brand 1197c5bbfb4dSPascal Brand* New tests added in xtest test suite: concurrent TA (xtest 1013), 1198c5bbfb4dSPascal Brand floating point tests (xtest 1006 and os_test TA) and corruption 1199c5bbfb4dSPascal Brand file storage (xtest 20000) 1200c5bbfb4dSPascal Brand 1201c5bbfb4dSPascal Brand* [Link][github_commits_1_1_0] to a list of all commits between this and 1202c5bbfb4dSPascal Brand previous release. 1203c5bbfb4dSPascal Brand 1204c5bbfb4dSPascal Brand 1205c5bbfb4dSPascal Brand## Tested on 1206c5bbfb4dSPascal BrandDefinitions: 1207c5bbfb4dSPascal Brand 1208c5bbfb4dSPascal Brand| Type | Meaning | 1209c5bbfb4dSPascal Brand| ---- | ------- | 1210c5bbfb4dSPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1211c5bbfb4dSPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1212c5bbfb4dSPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1213c5bbfb4dSPascal Brand 1214c5bbfb4dSPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1215c5bbfb4dSPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 9.5.40) 1216c5bbfb4dSPascal Brand* HiKey (hikey), standard + extended tests. 1217c5bbfb4dSPascal Brand* MT8173 (mediatek), standard tests. 1218c5bbfb4dSPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1219c5bbfb4dSPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1220c5bbfb4dSPascal Brand 1221c5bbfb4dSPascal Brand## Known issues 1222c5bbfb4dSPascal Brand* Secure Storage is implemented, but note that anti-rollback protection 1223c5bbfb4dSPascal Brand is not implemented yet. 1224c5bbfb4dSPascal Brand 1225c5bbfb4dSPascal Brand* Issue(s) open on GitHub 1226c5bbfb4dSPascal Brand * [#40][prld40] BUG_ON() when re-using RPC buffer to tee-supplicant 1227c5bbfb4dSPascal Brand * [#296][pr296]: Connecting RPMB to the storage APIs. 1228c5bbfb4dSPascal Brand * [#493][pr493]: setup_juno_optee: unable to find pre-built binaries 1229c5bbfb4dSPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1230c5bbfb4dSPascal Brand 1231c5bbfb4dSPascal Brand[prld40]: https://github.com/OP-TEE/optee_linuxdriver/issues/40 1232c5bbfb4dSPascal Brand[pr506]: https://github.com/OP-TEE/optee_os/issues/506 1233c5bbfb4dSPascal Brand[github_commits_1_1_0]: https://github.com/OP-TEE/optee_os/compare/1.0.1...1.1.0 1234c5bbfb4dSPascal Brand 1235c5bbfb4dSPascal Brand 1236c5bbfb4dSPascal Brand 12378a7ee79dSPascal Brand# OP-TEE - version 1.0.0 12388a7ee79dSPascal Brand 12398a7ee79dSPascal BrandOP-TEE is now maintained by Linaro. Contributors do not need to 12408a7ee79dSPascal Brandsign a CLA anymore, but must follow the rules of the [DCO][DCO] 12418a7ee79dSPascal Brand(Developer Certificate of Origin) instead. 12428a7ee79dSPascal Brand 12438a7ee79dSPascal Brand 12448a7ee79dSPascal Brand## New features 12458a7ee79dSPascal Brand 12468a7ee79dSPascal Brand* Add hardware support for Texas Instruments DRA7xx, ARMv7 (plat-ti) 12478a7ee79dSPascal Brand 12488a7ee79dSPascal Brand* GlobalPlatform™ TEE Internal Core API Specification v1.1, 12498a7ee79dSPascal Brand including ECC algorithms. 12508a7ee79dSPascal Brand 12518a7ee79dSPascal Brand* Secure Storage: Files stored by the REE are now encrypted. Operations 12528a7ee79dSPascal Brand are made atomic in order to prevent inconsistencies in case of errors 12538a7ee79dSPascal Brand during the storage operations. [Slides][LCStorage] describing the 12548a7ee79dSPascal Brand Secure Storage have been presented at the Linaro Connect SFO15. 12558a7ee79dSPascal Brand 12568a7ee79dSPascal Brand* Change of format of the Trusted Applications: they follow a 12578a7ee79dSPascal Brand [signed ELF format][elf] 12588a7ee79dSPascal Brand 12598a7ee79dSPascal Brand* Rework thread [synchronization][synchro] in optee_os. 12608a7ee79dSPascal Brand 12618a7ee79dSPascal Brand* Use of ARMv8 native cryptographic support. 12628a7ee79dSPascal Brand 12638a7ee79dSPascal Brand* [OP-TEE/optee_test][optee_test] test suite is released. 12648a7ee79dSPascal Brand 12658a7ee79dSPascal Brand* Introduce [OP-TEE/manifest][manifest] and [OP-TEE/build][build] 12668a7ee79dSPascal Brand to setup and build QEMU, FVP, HiKey and Mediatek platforms. Setup scripts 12678a7ee79dSPascal Brand that used to be in optee_os have been removed, except for Juno board. 12688a7ee79dSPascal Brand 126995422146SPascal Brand* [Link][github_commits_1_0_0] to a list of all commits between this and 127095422146SPascal Brand previous release. 127195422146SPascal Brand 12728a7ee79dSPascal Brand 12738a7ee79dSPascal Brand## Tested on 12748a7ee79dSPascal BrandDefinitions: 12758a7ee79dSPascal Brand 12768a7ee79dSPascal Brand| Type | Meaning | 12778a7ee79dSPascal Brand| ---- | ------- | 12788a7ee79dSPascal Brand| Standard tests | The [optee_test][optee_test] project. | 12798a7ee79dSPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 12808a7ee79dSPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 12818a7ee79dSPascal Brand 12828a7ee79dSPascal Brand* ARM Juno Board (vexpress-juno), standard + extended tests. 12838a7ee79dSPascal Brand* Foundation Models (vexpress-fvp), standard tests. 12848a7ee79dSPascal Brand* HiKey (hikey), standard + extended tests. 12858a7ee79dSPascal Brand* MT8173 (mediatek), standard tests. 12868a7ee79dSPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 12878a7ee79dSPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 12888a7ee79dSPascal Brand 128995422146SPascal Brand## Known issues 129095422146SPascal Brand* Secure Storage is implemented, but note that anti-rollback protection 129195422146SPascal Brand is not implemented yet. 129295422146SPascal Brand 129395422146SPascal Brand* Issue(s) open on GitHub 129495422146SPascal Brand * [#210][pr210]: libteec.so 32-bit does not communicate well 129595422146SPascal Brand with 64-bit kernel module 129695422146SPascal Brand * [#296][pr296]: Connecting RPMB to the storage APIs. 129795422146SPascal Brand * [#493][pr493]: setup_juno_optee: unable to find pre-built binaries 129895422146SPascal Brand * [#494][pr494]: HiKey: xtest 7671 fails (1.0.0-rc2) 129995422146SPascal Brand 130095422146SPascal Brand[pr210]: https://github.com/OP-TEE/optee_os/issues/210 130195422146SPascal Brand[pr296]: https://github.com/OP-TEE/optee_os/issues/296 130295422146SPascal Brand[pr493]: https://github.com/OP-TEE/optee_os/issues/493 130395422146SPascal Brand[pr494]: https://github.com/OP-TEE/optee_os/issues/494 130495422146SPascal Brand[github_commits_1_0_0]: https://github.com/OP-TEE/optee_os/compare/0.3.0...1.0.0 13058a7ee79dSPascal Brand[DCO]: https://github.com/OP-TEE/optee_os/blob/master/Notice.md#contributions 13068a7ee79dSPascal Brand[LCStorage]: http://www.slideshare.net/linaroorg/sfo15503-secure-storage-in-optee 13078a7ee79dSPascal Brand[synchro]: https://github.com/OP-TEE/optee_os/blob/master/documentation/optee_design.md#4-thread-handling 13088a7ee79dSPascal Brand[elf]: https://github.com/OP-TEE/optee_os/blob/master/documentation/optee_design.md#format 13098a7ee79dSPascal Brand[optee_test]: https://github.com/OP-TEE/optee_test 13108a7ee79dSPascal Brand[manifest]: https://github.com/OP-TEE/manifest 13118a7ee79dSPascal Brand[build]: https://github.com/OP-TEE/build 13128a7ee79dSPascal Brand 131395422146SPascal Brand 131495422146SPascal Brand 131511d59085SPascal Brand# OP-TEE - version 0.3.0 131611d59085SPascal Brand 131711d59085SPascal Brand## New features 131811d59085SPascal Brand 131911d59085SPascal Brand* Add hardware support for 132011d59085SPascal Brand * Mediatek MT8173 Board, ARMv8-A (plat-mediatek) 132111d59085SPascal Brand * Hisilicon HiKey Board, ARMv8-A (plat-hikey) 132211d59085SPascal Brand* AArch64 build of optee_os is now possible through the configuration `CFG_ARM64_core=y` 132311d59085SPascal Brand* Secure Storage: Data can be encrypted prior to their storage in the non-secure. 132411d59085SPascal Brand Build is configured using `CFG_ENC_FS=y` 132511d59085SPascal Brand* A generic boot scheme can be used. Boot configuration is commonalized. This helps 132611d59085SPascal Brand new board support. It is applied on plat-hikey, plat-vexpress, plat-mediatek, plat-stm 132711d59085SPascal Brand and plat-vexpress. 132811d59085SPascal Brand 132911d59085SPascal Brand## Tested on 133011d59085SPascal BrandDefinitions: 133111d59085SPascal Brand 133211d59085SPascal Brand| Type | Meaning | 133311d59085SPascal Brand| ---- | ------- | 133411d59085SPascal Brand| Standard tests | The optee_test project. | 133511d59085SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 133611d59085SPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 133711d59085SPascal Brand 133811d59085SPascal Brand* ARM Juno Board (vexpress-juno), standard tests. 133911d59085SPascal Brand* Foundation Models (vexpress-fvp), standard tests. 134011d59085SPascal Brand* HiKey (hikey), standard tests. 134111d59085SPascal Brand* MT8173 (mediatek), standard tests. 134211d59085SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 134311d59085SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 134411d59085SPascal Brand 134511d59085SPascal Brand------------------------------------------- 134611d59085SPascal Brand 1347f5117af2SPascal Brand# OP-TEE - version 0.2.0 1348759cc499SJoakim Bech 1349f5117af2SPascal Brand## New features 1350f5117af2SPascal Brand 1351f5117af2SPascal Brand### Linux Driver Refactoring 1352f5117af2SPascal Brand 1353f5117af2SPascal BrandLinux Driver has been refactored. It is now split in two parts: 1354f5117af2SPascal Brand* optee.ko, the generic Linux driver. It contains all functionality 1355f5117af2SPascal Brand common to all backends. 1356f5117af2SPascal Brand* optee_armtz.ko, a specific backend dedicated to the TrustZone optee. 1357f5117af2SPascal Brand It depends on optee.ko. 1358f5117af2SPascal Brand 1359f5117af2SPascal BrandLoading the TrustZone optee linux driver module is now performed using 1360f5117af2SPascal Brand 1361f5117af2SPascal Brand modprobe optee_armtz 1362f5117af2SPascal Brand 1363f5117af2SPascal BrandThanks to the dependency between the generic and the backend modules, optee.ko is then automatically loaded. 1364f5117af2SPascal Brand 1365f5117af2SPascal Brand### Misc new features 1366f5117af2SPascal Brand* support PL310 lock down at TEE boot 1367f5117af2SPascal Brand* add 64bits support (division / print) 1368f5117af2SPascal Brand 1369f5117af2SPascal Brand## Tested on 1370f5117af2SPascal BrandDefinitions: 1371f5117af2SPascal Brand 1372f5117af2SPascal Brand| Type | Meaning | 1373f5117af2SPascal Brand| ---- | ------- | 1374f5117af2SPascal Brand| Standard tests | The optee_test project. | 1375f5117af2SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1376f5117af2SPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1377f5117af2SPascal Brand 1378f5117af2SPascal Brand* ARM Juno Board (vexpress-juno), standard tests + extended tests. 1379f5117af2SPascal Brand 1380f5117af2SPascal Brand* Foundation Models (vexpress-fvp), standard + extended tests. 1381f5117af2SPascal Brand 1382f5117af2SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1383f5117af2SPascal Brand 1384f5117af2SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1385f5117af2SPascal Brand 1386f5117af2SPascal Brand 138728fcee17SJerome Forissier## Issues resolved since last release 1388f5117af2SPascal Brand* Fix user TA trace issue, in order each TA is able to select its own trace level 1389f5117af2SPascal Brand 1390f5117af2SPascal Brand 1391f5117af2SPascal Brand------------------------------------------- 1392f5117af2SPascal Brand# OP-TEE - version 0.1.0 1393f5117af2SPascal Brand 1394f5117af2SPascal Brand## New features 1395759cc499SJoakim BechBelow is a summary of the most important features added, but at the end you will 1396759cc499SJoakim Bechfind a link that present you all commits between the current and previous 1397759cc499SJoakim Bechrelease tag. 1398759cc499SJoakim Bech 1399759cc499SJoakim Bech* GlobalPlatform Client API v1.0 support. 1400759cc499SJoakim Bech 1401759cc499SJoakim Bech* GlobalPlatform Internal API v1.0 support. 1402759cc499SJoakim Bech 1403759cc499SJoakim Bech* GlobalPlatform Secure Elements v1.0 support. 1404759cc499SJoakim Bech 1405759cc499SJoakim Bech* Add hardware support for 1406759cc499SJoakim Bech 1407759cc499SJoakim Bech * Allwinner A80, ARMv7-A. 1408759cc499SJoakim Bech 1409759cc499SJoakim Bech * ARM Juno Board, ARMv8-A. 1410759cc499SJoakim Bech 1411759cc499SJoakim Bech * Foundation Models, ARMv8-A. 1412759cc499SJoakim Bech 1413759cc499SJoakim Bech * Fast Models, ARMv8-A. 1414759cc499SJoakim Bech 1415759cc499SJoakim Bech * QEMU, ARMv7-A. 1416759cc499SJoakim Bech 1417759cc499SJoakim Bech * STM Cannes, ARMv7-A. 1418759cc499SJoakim Bech 1419759cc499SJoakim Bech * STM Orly2, ARMv7-A. 1420759cc499SJoakim Bech 1421759cc499SJoakim Bech* Add LibTomCrypt as the default software cryptographic library. 1422759cc499SJoakim Bech 1423759cc499SJoakim Bech* Add cryptographic abstraction layer in on secure side to ease the use of 1424759cc499SJoakim Bech other cryptographic software libraries or adding support for hardware 1425759cc499SJoakim Bech acceleration. 1426759cc499SJoakim Bech 1427759cc499SJoakim Bech* Extended cryptographic API with support for HKDF, Concat KDF and PBKDF2. 1428759cc499SJoakim Bech 1429759cc499SJoakim Bech* SHA-1 and SHA-256 ARMv8-A crypto extension implementation. 1430759cc499SJoakim Bech 1431759cc499SJoakim Bech* Enabled paging support in OP-TEE OS. 1432759cc499SJoakim Bech 1433759cc499SJoakim Bech* Add support for xtest (both standard and extended) in QEMU and FVP setup 1434759cc499SJoakim Bech scripts. 1435759cc499SJoakim Bech 1436759cc499SJoakim Bech* Add documentation for the OS design, cryptographic abstraction layer, secure 1437759cc499SJoakim Bech elements design, the build system, GitHub usage, key derivation extensions, 1438759cc499SJoakim Bech ARM-Trusted Firmware usage within OP-TEE and GlobalPlatform usage within 1439759cc499SJoakim Bech OP-TEE. 1440759cc499SJoakim Bech 1441759cc499SJoakim Bech* Integrate support for Travis CI. 1442759cc499SJoakim Bech 1443759cc499SJoakim Bech* [Link][github_commits_0_1_0] to a list of all commits between this and 1444759cc499SJoakim Bech previous release. 1445759cc499SJoakim Bech 1446759cc499SJoakim Bech 1447f5117af2SPascal Brand## Tested on 1448759cc499SJoakim BechDefinitions: 1449759cc499SJoakim Bech 1450759cc499SJoakim Bech| Type | Meaning | 1451759cc499SJoakim Bech| ---- | ------- | 1452759cc499SJoakim Bech| Standard tests | The optee_test project. | 1453759cc499SJoakim Bech| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.0.0. | 1454759cc499SJoakim Bech| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1455759cc499SJoakim Bech 1456759cc499SJoakim Bech* Allwinner A80 (plat-sunxi), hello world test. 1457759cc499SJoakim Bech 1458759cc499SJoakim Bech* ARM Juno Board (vexpress-juno), standard tests. 1459759cc499SJoakim Bech 1460759cc499SJoakim Bech* Foundation Models (plat-vexpress-fvp), standard + extended tests 1461759cc499SJoakim Bech 1462759cc499SJoakim Bech* QEMU (plat-vexpress-qemu), standard + extended tests (and Secure Elements 1463759cc499SJoakim Bech tested separately). 1464759cc499SJoakim Bech 1465759cc499SJoakim Bech* STM Cannes (plat-stm-cannes), standard + extended tests. 1466759cc499SJoakim Bech 1467759cc499SJoakim Bech 146828fcee17SJerome Forissier## Issues resolved since last release 1469759cc499SJoakim BechN/A since this is the first release tag on OP-TEE. 1470759cc499SJoakim Bech 1471759cc499SJoakim Bech 1472f5117af2SPascal Brand## Known issues 1473759cc499SJoakim Bech* Storage is implemented, but not "Secure storage", meaning that a client 1474759cc499SJoakim Bech needs to do encrypt files on their own before storing the files. 1475759cc499SJoakim Bech 1476759cc499SJoakim Bech* Issue(s) open on GitHub 1477759cc499SJoakim Bech * [#95][pr95]: An error about building the test code of libtomcrypt. 1478759cc499SJoakim Bech 1479759cc499SJoakim Bech * [#149][pr149]: when testing optee os with arm trusted firmware (I 1480759cc499SJoakim Bech utilized optee os tee.bin as bl32 image) on juno platform, I got an 1481759cc499SJoakim Bech error. 1482759cc499SJoakim Bech 1483759cc499SJoakim Bech * [#161][pr161]: tee_svc_cryp.c lacks accessibility checks on 1484759cc499SJoakim Bech user-supplied TEE_Attributes. 1485759cc499SJoakim Bech 1486759cc499SJoakim Bech[hello_world]: https://github.com/jenswi-linaro/lcu14_optee_hello_world 1487759cc499SJoakim Bech[github_commits_0_1_0]: https://github.com/OP-TEE/optee_os/compare/b01047730e77127c23a36591643eeb8bb0487d68...999e4a6c0f64d3177fd3d0db234107b6fb860884 1488759cc499SJoakim Bech[pr95]: https://github.com/OP-TEE/optee_os/issues/95 1489759cc499SJoakim Bech[pr149]: https://github.com/OP-TEE/optee_os/issues/149 1490759cc499SJoakim Bech[pr161]: https://github.com/OP-TEE/optee_os/issues/161 1491759cc499SJoakim Bech 14927583c59eSCedric Chaumont* Global Platform Device Internal Core API v1.1 14937583c59eSCedric Chaumont * [#230][pr230]: Persistent object corruption support (TEE_ERROR_CORRUPT_OBJECT/_2) 14947583c59eSCedric Chaumont * [#230][pr230]: Persistent object access support (TEE_ERROR_STORAGE_NOT_AVAILABLE/_2) 1495