1*d0b742d1SJens Wiklander# OP-TEE - version 3.16.0 (2022-01-28) 2*d0b742d1SJens Wiklander 3*d0b742d1SJens Wiklander- Links to the release pages, commits and pull requests merged into this release for: 4*d0b742d1SJens Wiklander - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_16_0], [commits][OP_TEE_optee_os_commits_3_16_0] and [pull requests][OP_TEE_optee_os_pr_3_16_0] 5*d0b742d1SJens Wiklander - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_16_0], [commits][OP_TEE_optee_client_commits_3_16_0] and [pull requests][OP_TEE_optee_client_pr_3_16_0] 6*d0b742d1SJens Wiklander - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_16_0], [commits][OP_TEE_optee_test_commits_3_16_0] and [pull requests][OP_TEE_optee_test_pr_3_16_0] 7*d0b742d1SJens Wiklander - OP-TEE/build: [release page][OP_TEE_build_release_3_16_0], [commits][OP_TEE_build_commits_3_16_0] and [pull requests][OP_TEE_build_pr_3_16_0] 8*d0b742d1SJens Wiklander - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_16_0], [commits][linaro_swg_optee_examples_commits_3_16_0] and [pull requests][linaro_swg_optee_examples_pr_3_16_0] 9*d0b742d1SJens Wiklander 10*d0b742d1SJens Wiklander 11*d0b742d1SJens Wiklander[OP_TEE_optee_os_release_3_16_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.16.0 12*d0b742d1SJens Wiklander[OP_TEE_optee_os_commits_3_16_0]: https://github.com/OP-TEE/optee_os/compare/3.15.0...3.16.0 13*d0b742d1SJens Wiklander[OP_TEE_optee_os_pr_3_16_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-10-18..2022-01-28 14*d0b742d1SJens Wiklander 15*d0b742d1SJens Wiklander[OP_TEE_optee_client_release_3_16_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.16.0 16*d0b742d1SJens Wiklander[OP_TEE_optee_client_commits_3_16_0]: https://github.com/OP-TEE/optee_client/compare/3.15.0...3.16.0 17*d0b742d1SJens Wiklander[OP_TEE_optee_client_pr_3_16_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-10-18..2022-01-28 18*d0b742d1SJens Wiklander 19*d0b742d1SJens Wiklander[OP_TEE_optee_test_release_3_16_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.16.0 20*d0b742d1SJens Wiklander[OP_TEE_optee_test_commits_3_16_0]: https://github.com/OP-TEE/optee_test/compare/3.15.0...3.16.0 21*d0b742d1SJens Wiklander[OP_TEE_optee_test_pr_3_16_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-10-18..2022-01-28 22*d0b742d1SJens Wiklander 23*d0b742d1SJens Wiklander[OP_TEE_build_release_3_16_0]: https://github.com/OP-TEE/build/releases/tag/3.16.0 24*d0b742d1SJens Wiklander[OP_TEE_build_commits_3_16_0]: https://github.com/OP-TEE/build/compare/3.15.0...3.16.0 25*d0b742d1SJens Wiklander[OP_TEE_build_pr_3_16_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-10-18..2022-01-28 26*d0b742d1SJens Wiklander 27*d0b742d1SJens Wiklander[linaro_swg_optee_examples_release_3_16_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.16.0 28*d0b742d1SJens Wiklander[linaro_swg_optee_examples_commits_3_16_0]: https://github.com/linaro-swg/optee_examples/compare/3.15.0...3.16.0 29*d0b742d1SJens Wiklander[linaro_swg_optee_examples_pr_3_16_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-10-18..2022-01-28 30*d0b742d1SJens Wiklander 316be0dbcaSRuchika Gupta# OP-TEE - version 3.15.0 (2021-10-18) 326be0dbcaSRuchika Gupta 336be0dbcaSRuchika Gupta- Links to the release pages, commits and pull requests merged into this release for: 346be0dbcaSRuchika Gupta - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_15_0], [commits][OP_TEE_optee_os_commits_3_15_0] and [pull requests][OP_TEE_optee_os_pr_3_15_0] 356be0dbcaSRuchika Gupta - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_15_0], [commits][OP_TEE_optee_client_commits_3_15_0] and [pull requests][OP_TEE_optee_client_pr_3_15_0] 366be0dbcaSRuchika Gupta - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_15_0], [commits][OP_TEE_optee_test_commits_3_15_0] and [pull requests][OP_TEE_optee_test_pr_3_15_0] 376be0dbcaSRuchika Gupta - OP-TEE/build: [release page][OP_TEE_build_release_3_15_0], [commits][OP_TEE_build_commits_3_15_0] and [pull requests][OP_TEE_build_pr_3_15_0] 386be0dbcaSRuchika Gupta - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_15_0], [commits][linaro_swg_optee_examples_commits_3_15_0] and [pull requests][linaro_swg_optee_examples_pr_3_15_0] 396be0dbcaSRuchika Gupta 406be0dbcaSRuchika Gupta 416be0dbcaSRuchika Gupta[OP_TEE_optee_os_release_3_15_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.15.0 426be0dbcaSRuchika Gupta[OP_TEE_optee_os_commits_3_15_0]: https://github.com/OP-TEE/optee_os/compare/3.14.0...3.15.0 436be0dbcaSRuchika Gupta[OP_TEE_optee_os_pr_3_15_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 446be0dbcaSRuchika Gupta 456be0dbcaSRuchika Gupta[OP_TEE_optee_client_release_3_15_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.15.0 466be0dbcaSRuchika Gupta[OP_TEE_optee_client_commits_3_15_0]: https://github.com/OP-TEE/optee_client/compare/3.14.0...3.15.0 476be0dbcaSRuchika Gupta[OP_TEE_optee_client_pr_3_15_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 486be0dbcaSRuchika Gupta 496be0dbcaSRuchika Gupta[OP_TEE_optee_test_release_3_15_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.15.0 506be0dbcaSRuchika Gupta[OP_TEE_optee_test_commits_3_15_0]: https://github.com/OP-TEE/optee_test/compare/3.14.0...3.15.0 516be0dbcaSRuchika Gupta[OP_TEE_optee_test_pr_3_15_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 526be0dbcaSRuchika Gupta 536be0dbcaSRuchika Gupta[OP_TEE_build_release_3_15_0]: https://github.com/OP-TEE/build/releases/tag/3.15.0 546be0dbcaSRuchika Gupta[OP_TEE_build_commits_3_15_0]: https://github.com/OP-TEE/build/compare/3.14.0...3.15.0 556be0dbcaSRuchika Gupta[OP_TEE_build_pr_3_15_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 566be0dbcaSRuchika Gupta 576be0dbcaSRuchika Gupta[linaro_swg_optee_examples_release_3_15_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.15.0 586be0dbcaSRuchika Gupta[linaro_swg_optee_examples_commits_3_15_0]: https://github.com/linaro-swg/optee_examples/compare/3.14.0...3.15.0 596be0dbcaSRuchika Gupta[linaro_swg_optee_examples_pr_3_15_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-07-16..2021-10-18 606be0dbcaSRuchika Gupta 61d21befa5SJerome Forissier# OP-TEE - version 3.14.0 (target date: 2021-07-16) 62d21befa5SJerome Forissier 63d21befa5SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 64d21befa5SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_14_0], [commits][OP_TEE_optee_os_commits_3_14_0] and [pull requests][OP_TEE_optee_os_pr_3_14_0] 65d21befa5SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_14_0], [commits][OP_TEE_optee_client_commits_3_14_0] and [pull requests][OP_TEE_optee_client_pr_3_14_0] 66d21befa5SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_14_0], [commits][OP_TEE_optee_test_commits_3_14_0] and [pull requests][OP_TEE_optee_test_pr_3_14_0] 67d21befa5SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_14_0], [commits][OP_TEE_build_commits_3_14_0] and [pull requests][OP_TEE_build_pr_3_14_0] 68d21befa5SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_14_0], [commits][linaro_swg_optee_examples_commits_3_14_0] and [pull requests][linaro_swg_optee_examples_pr_3_14_0] 69d21befa5SJerome Forissier 70d21befa5SJerome Forissier 71d21befa5SJerome Forissier[OP_TEE_optee_os_release_3_14_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.14.0 72d21befa5SJerome Forissier[OP_TEE_optee_os_commits_3_14_0]: https://github.com/OP-TEE/optee_os/compare/3.13.0...3.14.0 73d21befa5SJerome Forissier[OP_TEE_optee_os_pr_3_14_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 74d21befa5SJerome Forissier 75d21befa5SJerome Forissier[OP_TEE_optee_client_release_3_14_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.14.0 76d21befa5SJerome Forissier[OP_TEE_optee_client_commits_3_14_0]: https://github.com/OP-TEE/optee_client/compare/3.13.0...3.14.0 77d21befa5SJerome Forissier[OP_TEE_optee_client_pr_3_14_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01-..2021-07-16 78d21befa5SJerome Forissier 79d21befa5SJerome Forissier[OP_TEE_optee_test_release_3_14_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.14.0 80d21befa5SJerome Forissier[OP_TEE_optee_test_commits_3_14_0]: https://github.com/OP-TEE/optee_test/compare/3.13.0...3.14.0 81d21befa5SJerome Forissier[OP_TEE_optee_test_pr_3_14_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 82d21befa5SJerome Forissier 83d21befa5SJerome Forissier[OP_TEE_build_release_3_14_0]: https://github.com/OP-TEE/build/releases/tag/3.14.0 84d21befa5SJerome Forissier[OP_TEE_build_commits_3_14_0]: https://github.com/OP-TEE/build/compare/3.13.0...3.14.0 85d21befa5SJerome Forissier[OP_TEE_build_pr_3_14_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 86d21befa5SJerome Forissier 87d21befa5SJerome Forissier[linaro_swg_optee_examples_release_3_14_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.14.0 88d21befa5SJerome Forissier[linaro_swg_optee_examples_commits_3_14_0]: https://github.com/linaro-swg/optee_examples/compare/3.13.0...3.14.0 89d21befa5SJerome Forissier[linaro_swg_optee_examples_pr_3_14_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-05-01..2021-07-16 90d21befa5SJerome Forissier 9130c13f9eSRuchika Gupta# OP-TEE - version 3.13.0 (2021-04-30) 9230c13f9eSRuchika Gupta 9330c13f9eSRuchika Gupta- Links to the release pages, commits and pull requests merged into this release for: 9430c13f9eSRuchika Gupta - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_13_0], [commits][OP_TEE_optee_os_commits_3_13_0] and [pull requests][OP_TEE_optee_os_pr_3_13_0] 9530c13f9eSRuchika Gupta - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_13_0], [commits][OP_TEE_optee_client_commits_3_13_0] and [pull requests][OP_TEE_optee_client_pr_3_13_0] 9630c13f9eSRuchika Gupta - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_13_0], [commits][OP_TEE_optee_test_commits_3_13_0] and [pull requests][OP_TEE_optee_test_pr_3_13_0] 9730c13f9eSRuchika Gupta - OP-TEE/build: [release page][OP_TEE_build_release_3_13_0], [commits][OP_TEE_build_commits_3_13_0] and [pull requests][OP_TEE_build_pr_3_13_0] 9830c13f9eSRuchika Gupta - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_13_0], [commits][linaro_swg_optee_examples_commits_3_13_0] and [pull requests][linaro_swg_optee_examples_pr_3_13_0] 9930c13f9eSRuchika Gupta 10030c13f9eSRuchika Gupta 10130c13f9eSRuchika Gupta[OP_TEE_optee_os_release_3_13_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.13.0 10230c13f9eSRuchika Gupta[OP_TEE_optee_os_commits_3_13_0]: https://github.com/OP-TEE/optee_os/compare/3.12.0...3.13.0 10330c13f9eSRuchika Gupta[OP_TEE_optee_os_pr_3_13_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 10430c13f9eSRuchika Gupta 10530c13f9eSRuchika Gupta[OP_TEE_optee_client_release_3_13_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.13.0 10630c13f9eSRuchika Gupta[OP_TEE_optee_client_commits_3_13_0]: https://github.com/OP-TEE/optee_client/compare/3.12.0...3.13.0 10730c13f9eSRuchika Gupta[OP_TEE_optee_client_pr_3_13_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 10830c13f9eSRuchika Gupta 10930c13f9eSRuchika Gupta[OP_TEE_optee_test_release_3_13_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.13.0 11030c13f9eSRuchika Gupta[OP_TEE_optee_test_commits_3_13_0]: https://github.com/OP-TEE/optee_test/compare/3.12.0...3.13.0 11130c13f9eSRuchika Gupta[OP_TEE_optee_test_pr_3_13_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 11230c13f9eSRuchika Gupta 11330c13f9eSRuchika Gupta[OP_TEE_build_release_3_13_0]: https://github.com/OP-TEE/build/releases/tag/3.13.0 11430c13f9eSRuchika Gupta[OP_TEE_build_commits_3_13_0]: https://github.com/OP-TEE/build/compare/3.12.0...3.13.0 11530c13f9eSRuchika Gupta[OP_TEE_build_pr_3_13_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 11630c13f9eSRuchika Gupta 11730c13f9eSRuchika Gupta[linaro_swg_optee_examples_release_3_13_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.13.0 11830c13f9eSRuchika Gupta[linaro_swg_optee_examples_commits_3_13_0]: https://github.com/linaro-swg/optee_examples/compare/3.12.0...3.13.0 11930c13f9eSRuchika Gupta[linaro_swg_optee_examples_pr_3_13_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2021-01-20..2021-04-30 12030c13f9eSRuchika Gupta 1213d47a131SJoakim Bech# OP-TEE - version 3.12.0 (2021-01-20) 1223d47a131SJoakim Bech 1233d47a131SJoakim Bech- Links to the release pages, commits and pull requests merged into this release for: 1243d47a131SJoakim Bech - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_12_0], [commits][OP_TEE_optee_os_commits_3_12_0] and [pull requests][OP_TEE_optee_os_pr_3_12_0] 1253d47a131SJoakim Bech - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_12_0], [commits][OP_TEE_optee_client_commits_3_12_0] and [pull requests][OP_TEE_optee_client_pr_3_12_0] 1263d47a131SJoakim Bech - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_12_0], [commits][OP_TEE_optee_test_commits_3_12_0] and [pull requests][OP_TEE_optee_test_pr_3_12_0] 1273d47a131SJoakim Bech - OP-TEE/build: [release page][OP_TEE_build_release_3_12_0], [commits][OP_TEE_build_commits_3_12_0] and [pull requests][OP_TEE_build_pr_3_12_0] 1283d47a131SJoakim Bech - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_12_0], [commits][linaro_swg_optee_examples_commits_3_12_0] and [pull requests][linaro_swg_optee_examples_pr_3_12_0] 1293d47a131SJoakim Bech 1303d47a131SJoakim Bech 1313d47a131SJoakim Bech[OP_TEE_optee_os_release_3_12_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.12.0 1323d47a131SJoakim Bech[OP_TEE_optee_os_commits_3_12_0]: https://github.com/OP-TEE/optee_os/compare/3.11.0...3.12.0 1333d47a131SJoakim Bech[OP_TEE_optee_os_pr_3_12_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1343d47a131SJoakim Bech 1353d47a131SJoakim Bech[OP_TEE_optee_client_release_3_12_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.12.0 1363d47a131SJoakim Bech[OP_TEE_optee_client_commits_3_12_0]: https://github.com/OP-TEE/optee_client/compare/3.11.0...3.12.0 1373d47a131SJoakim Bech[OP_TEE_optee_client_pr_3_12_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1383d47a131SJoakim Bech 1393d47a131SJoakim Bech[OP_TEE_optee_test_release_3_12_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.12.0 1403d47a131SJoakim Bech[OP_TEE_optee_test_commits_3_12_0]: https://github.com/OP-TEE/optee_test/compare/3.11.0...3.12.0 1413d47a131SJoakim Bech[OP_TEE_optee_test_pr_3_12_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1423d47a131SJoakim Bech 1433d47a131SJoakim Bech[OP_TEE_build_release_3_12_0]: https://github.com/OP-TEE/build/releases/tag/3.12.0 1443d47a131SJoakim Bech[OP_TEE_build_commits_3_12_0]: https://github.com/OP-TEE/build/compare/3.11.0...3.12.0 1453d47a131SJoakim Bech[OP_TEE_build_pr_3_12_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1463d47a131SJoakim Bech 1473d47a131SJoakim Bech[linaro_swg_optee_examples_release_3_12_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.12.0 1483d47a131SJoakim Bech[linaro_swg_optee_examples_commits_3_12_0]: https://github.com/linaro-swg/optee_examples/compare/3.11.0...3.12.0 1493d47a131SJoakim Bech[linaro_swg_optee_examples_pr_3_12_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-10-16..2021-01-20 1503d47a131SJoakim Bech 151c4def2a8SJerome Forissier# OP-TEE - version 3.11.0 (2020-10-16) 152c4def2a8SJerome Forissier 153c4def2a8SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 154c4def2a8SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_11_0], [commits][OP_TEE_optee_os_commits_3_11_0] and [pull requests][OP_TEE_optee_os_pr_3_11_0] 155c4def2a8SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_11_0], [commits][OP_TEE_optee_client_commits_3_11_0] and [pull requests][OP_TEE_optee_client_pr_3_11_0] 156c4def2a8SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_11_0], [commits][OP_TEE_optee_test_commits_3_11_0] and [pull requests][OP_TEE_optee_test_pr_3_11_0] 157c4def2a8SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_11_0], [commits][OP_TEE_build_commits_3_11_0] and [pull requests][OP_TEE_build_pr_3_11_0] 158c4def2a8SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_11_0], [commits][linaro_swg_optee_examples_commits_3_11_0] and [pull requests][linaro_swg_optee_examples_pr_3_11_0] 159c4def2a8SJerome Forissier 160c4def2a8SJerome Forissier 161c4def2a8SJerome Forissier[OP_TEE_optee_os_release_3_11_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.11.0 162c4def2a8SJerome Forissier[OP_TEE_optee_os_commits_3_11_0]: https://github.com/OP-TEE/optee_os/compare/3.10.0...3.11.0 163c4def2a8SJerome Forissier[OP_TEE_optee_os_pr_3_11_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 164c4def2a8SJerome Forissier 165c4def2a8SJerome Forissier[OP_TEE_optee_client_release_3_11_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.11.0 166c4def2a8SJerome Forissier[OP_TEE_optee_client_commits_3_11_0]: https://github.com/OP-TEE/optee_client/compare/3.10.0...3.11.0 167c4def2a8SJerome Forissier[OP_TEE_optee_client_pr_3_11_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 168c4def2a8SJerome Forissier 169c4def2a8SJerome Forissier[OP_TEE_optee_test_release_3_11_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.11.0 170c4def2a8SJerome Forissier[OP_TEE_optee_test_commits_3_11_0]: https://github.com/OP-TEE/optee_test/compare/3.10.0...3.11.0 171c4def2a8SJerome Forissier[OP_TEE_optee_test_pr_3_11_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 172c4def2a8SJerome Forissier 173c4def2a8SJerome Forissier[OP_TEE_build_release_3_11_0]: https://github.com/OP-TEE/build/releases/tag/3.11.0 174c4def2a8SJerome Forissier[OP_TEE_build_commits_3_11_0]: https://github.com/OP-TEE/build/compare/3.10.0...3.11.0 175c4def2a8SJerome Forissier[OP_TEE_build_pr_3_11_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 176c4def2a8SJerome Forissier 177c4def2a8SJerome Forissier[linaro_swg_optee_examples_release_3_11_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.11.0 178c4def2a8SJerome Forissier[linaro_swg_optee_examples_commits_3_11_0]: https://github.com/linaro-swg/optee_examples/compare/3.10.0...3.11.0 179c4def2a8SJerome Forissier[linaro_swg_optee_examples_pr_3_11_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-08-21..2020-10-16 180c4def2a8SJerome Forissier 181d1c63543SJerome Forissier# OP-TEE - version 3.10.0 (2020-08-21) 182d1c63543SJerome Forissier 183d1c63543SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 184d1c63543SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_10_0], [commits][OP_TEE_optee_os_commits_3_10_0] and [pull requests][OP_TEE_optee_os_pr_3_10_0] 185d1c63543SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_10_0], [commits][OP_TEE_optee_client_commits_3_10_0] and [pull requests][OP_TEE_optee_client_pr_3_10_0] 186d1c63543SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_10_0], [commits][OP_TEE_optee_test_commits_3_10_0] and [pull requests][OP_TEE_optee_test_pr_3_10_0] 187d1c63543SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_10_0], [commits][OP_TEE_build_commits_3_10_0] and [pull requests][OP_TEE_build_pr_3_10_0] 188d1c63543SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_10_0], [commits][linaro_swg_optee_examples_commits_3_10_0] and [pull requests][linaro_swg_optee_examples_pr_3_10_0] 189d1c63543SJerome Forissier 190d1c63543SJerome Forissier 191d1c63543SJerome Forissier[OP_TEE_optee_os_release_3_10_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.10.0 192d1c63543SJerome Forissier[OP_TEE_optee_os_commits_3_10_0]: https://github.com/OP-TEE/optee_os/compare/3.9.0...3.10.0 193d1c63543SJerome Forissier[OP_TEE_optee_os_pr_3_10_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 194d1c63543SJerome Forissier 195d1c63543SJerome Forissier[OP_TEE_optee_client_release_3_10_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.10.0 196d1c63543SJerome Forissier[OP_TEE_optee_client_commits_3_10_0]: https://github.com/OP-TEE/optee_client/compare/3.9.0...3.10.0 197d1c63543SJerome Forissier[OP_TEE_optee_client_pr_3_10_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 198d1c63543SJerome Forissier 199d1c63543SJerome Forissier[OP_TEE_optee_test_release_3_10_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.10.0 200d1c63543SJerome Forissier[OP_TEE_optee_test_commits_3_10_0]: https://github.com/OP-TEE/optee_test/compare/3.9.0...3.10.0 201d1c63543SJerome Forissier[OP_TEE_optee_test_pr_3_10_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 202d1c63543SJerome Forissier 203d1c63543SJerome Forissier[OP_TEE_build_release_3_10_0]: https://github.com/OP-TEE/build/releases/tag/3.10.0 204d1c63543SJerome Forissier[OP_TEE_build_commits_3_10_0]: https://github.com/OP-TEE/build/compare/3.9.0...3.10.0 205d1c63543SJerome Forissier[OP_TEE_build_pr_3_10_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 206d1c63543SJerome Forissier 207d1c63543SJerome Forissier[linaro_swg_optee_examples_release_3_10_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.10.0 208d1c63543SJerome Forissier[linaro_swg_optee_examples_commits_3_10_0]: https://github.com/linaro-swg/optee_examples/compare/3.9.0...3.10.0 209d1c63543SJerome Forissier[linaro_swg_optee_examples_pr_3_10_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-04-22..2020-08-21 210d1c63543SJerome Forissier 211af141c61SJens Wiklander# OP-TEE - version 3.9.0 (2020-04-22) 212af141c61SJens Wiklander 213af141c61SJens Wiklander- Links to the release pages, commits and pull requests merged into this release for: 214af141c61SJens Wiklander - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_9_0], [commits][OP_TEE_optee_os_commits_3_9_0] and [pull requests][OP_TEE_optee_os_pr_3_9_0] 215af141c61SJens Wiklander - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_9_0], [commits][OP_TEE_optee_client_commits_3_9_0] and [pull requests][OP_TEE_optee_client_pr_3_9_0] 216af141c61SJens Wiklander - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_9_0], [commits][OP_TEE_optee_test_commits_3_9_0] and [pull requests][OP_TEE_optee_test_pr_3_9_0] 217af141c61SJens Wiklander - OP-TEE/build: [release page][OP_TEE_build_release_3_9_0], [commits][OP_TEE_build_commits_3_9_0] and [pull requests][OP_TEE_build_pr_3_9_0] 218af141c61SJens Wiklander - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_9_0], [commits][linaro_swg_optee_examples_commits_3_9_0] and [pull requests][linaro_swg_optee_examples_pr_3_9_0] 219af141c61SJens Wiklander 220af141c61SJens Wiklander 221af141c61SJens Wiklander[OP_TEE_optee_os_release_3_9_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.9.0 222af141c61SJens Wiklander[OP_TEE_optee_os_commits_3_9_0]: https://github.com/OP-TEE/optee_os/compare/3.8.0...3.9.0 223af141c61SJens Wiklander[OP_TEE_optee_os_pr_3_9_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 224af141c61SJens Wiklander 225af141c61SJens Wiklander[OP_TEE_optee_client_release_3_9_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.9.0 226af141c61SJens Wiklander[OP_TEE_optee_client_commits_3_9_0]: https://github.com/OP-TEE/optee_client/compare/3.8.0...3.9.0 227af141c61SJens Wiklander[OP_TEE_optee_client_pr_3_9_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 228af141c61SJens Wiklander 229af141c61SJens Wiklander[OP_TEE_optee_test_release_3_9_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.9.0 230af141c61SJens Wiklander[OP_TEE_optee_test_commits_3_9_0]: https://github.com/OP-TEE/optee_test/compare/3.8.0...3.9.0 231af141c61SJens Wiklander[OP_TEE_optee_test_pr_3_9_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 232af141c61SJens Wiklander 233af141c61SJens Wiklander[OP_TEE_build_release_3_9_0]: https://github.com/OP-TEE/build/releases/tag/3.9.0 234af141c61SJens Wiklander[OP_TEE_build_commits_3_9_0]: https://github.com/OP-TEE/build/compare/3.8.0...3.9.0 235af141c61SJens Wiklander[OP_TEE_build_pr_3_9_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 236af141c61SJens Wiklander 237af141c61SJens Wiklander[linaro_swg_optee_examples_release_3_9_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.9.0 238af141c61SJens Wiklander[linaro_swg_optee_examples_commits_3_9_0]: https://github.com/linaro-swg/optee_examples/compare/3.8.0...3.9.0 239af141c61SJens Wiklander[linaro_swg_optee_examples_pr_3_9_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-05-22 240af141c61SJens Wiklander 241023e3365SJerome Forissier# OP-TEE - version 3.8.0 (2020-01-24) 242023e3365SJerome Forissier 243023e3365SJerome Forissier- Links to the release pages, commits and pull requests merged into this release for: 244023e3365SJerome Forissier - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_8_0], [commits][OP_TEE_optee_os_commits_3_8_0] and [pull requests][OP_TEE_optee_os_pr_3_8_0] 245023e3365SJerome Forissier - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_8_0], [commits][OP_TEE_optee_client_commits_3_8_0] and [pull requests][OP_TEE_optee_client_pr_3_8_0] 246023e3365SJerome Forissier - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_8_0], [commits][OP_TEE_optee_test_commits_3_8_0] and [pull requests][OP_TEE_optee_test_pr_3_8_0] 247023e3365SJerome Forissier - OP-TEE/build: [release page][OP_TEE_build_release_3_8_0], [commits][OP_TEE_build_commits_3_8_0] and [pull requests][OP_TEE_build_pr_3_8_0] 248023e3365SJerome Forissier - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_8_0], [commits][linaro_swg_optee_examples_commits_3_8_0] and [pull requests][linaro_swg_optee_examples_pr_3_8_0] 249023e3365SJerome Forissier 250023e3365SJerome Forissier 251023e3365SJerome Forissier[OP_TEE_optee_os_release_3_8_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.8.0 252023e3365SJerome Forissier[OP_TEE_optee_os_commits_3_8_0]: https://github.com/OP-TEE/optee_os/compare/3.7.0...3.8.0 253023e3365SJerome Forissier[OP_TEE_optee_os_pr_3_8_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2020-01-24..2020-01-24 254023e3365SJerome Forissier 255023e3365SJerome Forissier[OP_TEE_optee_client_release_3_8_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.8.0 256023e3365SJerome Forissier[OP_TEE_optee_client_commits_3_8_0]: https://github.com/OP-TEE/optee_client/compare/3.7.0...3.8.0 257023e3365SJerome Forissier[OP_TEE_optee_client_pr_3_8_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 258023e3365SJerome Forissier 259023e3365SJerome Forissier[OP_TEE_optee_test_release_3_8_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.8.0 260023e3365SJerome Forissier[OP_TEE_optee_test_commits_3_8_0]: https://github.com/OP-TEE/optee_test/compare/3.7.0...3.8.0 261023e3365SJerome Forissier[OP_TEE_optee_test_pr_3_8_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 262023e3365SJerome Forissier 263023e3365SJerome Forissier[OP_TEE_build_release_3_8_0]: https://github.com/OP-TEE/build/releases/tag/3.8.0 264023e3365SJerome Forissier[OP_TEE_build_commits_3_8_0]: https://github.com/OP-TEE/build/compare/3.7.0...3.8.0 265023e3365SJerome Forissier[OP_TEE_build_pr_3_8_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 266023e3365SJerome Forissier 267023e3365SJerome Forissier[linaro_swg_optee_examples_release_3_8_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.8.0 268023e3365SJerome Forissier[linaro_swg_optee_examples_commits_3_8_0]: https://github.com/linaro-swg/optee_examples/compare/3.7.0...3.8.0 269023e3365SJerome Forissier[linaro_swg_optee_examples_pr_3_8_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2020-01-24 270023e3365SJerome Forissier 271a2fa5018SJoakim Bech# OP-TEE - version 3.7.0 (2019-10-18) 272a2fa5018SJoakim Bech 273a2fa5018SJoakim Bech- Links to the release pages, commits and pull requests merged into this release for: 274a2fa5018SJoakim Bech - OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_3_7_0], [commits][OP_TEE_optee_os_commits_3_7_0] and [pull requests][OP_TEE_optee_os_pr_3_7_0] 275a2fa5018SJoakim Bech - OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_3_7_0], [commits][OP_TEE_optee_client_commits_3_7_0] and [pull requests][OP_TEE_optee_client_pr_3_7_0] 276a2fa5018SJoakim Bech - OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_3_7_0], [commits][OP_TEE_optee_test_commits_3_7_0] and [pull requests][OP_TEE_optee_test_pr_3_7_0] 277a2fa5018SJoakim Bech - OP-TEE/build: [release page][OP_TEE_build_release_3_7_0], [commits][OP_TEE_build_commits_3_7_0] and [pull requests][OP_TEE_build_pr_3_7_0] 278a2fa5018SJoakim Bech - linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_3_7_0], [commits][linaro_swg_optee_examples_commits_3_7_0] and [pull requests][linaro_swg_optee_examples_pr_3_7_0] 279a2fa5018SJoakim Bech 280a2fa5018SJoakim Bech 281a2fa5018SJoakim Bech[OP_TEE_optee_os_release_3_7_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.7.0 282a2fa5018SJoakim Bech[OP_TEE_optee_os_commits_3_7_0]: https://github.com/OP-TEE/optee_os/compare/3.6.0...3.7.0 283a2fa5018SJoakim Bech[OP_TEE_optee_os_pr_3_7_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 284a2fa5018SJoakim Bech 285a2fa5018SJoakim Bech[OP_TEE_optee_client_release_3_7_0]: https://github.com/OP-TEE/optee_client/releases/tag/3.7.0 286a2fa5018SJoakim Bech[OP_TEE_optee_client_commits_3_7_0]: https://github.com/OP-TEE/optee_client/compare/3.6.0...3.7.0 287a2fa5018SJoakim Bech[OP_TEE_optee_client_pr_3_7_0]: https://github.com/OP-TEE/optee_client/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 288a2fa5018SJoakim Bech 289a2fa5018SJoakim Bech[OP_TEE_optee_test_release_3_7_0]: https://github.com/OP-TEE/optee_test/releases/tag/3.7.0 290a2fa5018SJoakim Bech[OP_TEE_optee_test_commits_3_7_0]: https://github.com/OP-TEE/optee_test/compare/3.6.0...3.7.0 291a2fa5018SJoakim Bech[OP_TEE_optee_test_pr_3_7_0]: https://github.com/OP-TEE/optee_test/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 292a2fa5018SJoakim Bech 293a2fa5018SJoakim Bech[OP_TEE_build_release_3_7_0]: https://github.com/OP-TEE/build/releases/tag/3.7.0 294a2fa5018SJoakim Bech[OP_TEE_build_commits_3_7_0]: https://github.com/OP-TEE/build/compare/3.6.0...3.7.0 295a2fa5018SJoakim Bech[OP_TEE_build_pr_3_7_0]: https://github.com/OP-TEE/build/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 296a2fa5018SJoakim Bech 297a2fa5018SJoakim Bech[linaro_swg_optee_examples_release_3_7_0]: https://github.com/linaro-swg/optee_examples/releases/tag/3.7.0 298a2fa5018SJoakim Bech[linaro_swg_optee_examples_commits_3_7_0]: https://github.com/linaro-swg/optee_examples/compare/3.6.0...3.7.0 299a2fa5018SJoakim Bech[linaro_swg_optee_examples_pr_3_7_0]: https://github.com/linaro-swg/optee_examples/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-07-05..2019-10-18 300a2fa5018SJoakim Bech 301f398d492SJerome Forissier# OP-TEE - version 3.6.0 (2019-07-05) 302f398d492SJerome Forissier 303f398d492SJerome Forissier- Link to the GitHub [release page][github_release_3_6_0]. 304f398d492SJerome Forissier- Links to the [commits][github_commits_3_6_0] and 305f398d492SJerome Forissier[pull requests][github_pr_3_6_0] merged into this release. 306f398d492SJerome Forissier 307f398d492SJerome Forissier[github_release_3_6_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.6.0 308f398d492SJerome Forissier[github_commits_3_6_0]: https://github.com/OP-TEE/optee_os/compare/3.5.0...3.6.0 309f398d492SJerome Forissier[github_pr_3_6_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-04-26..2019-07-05 310f398d492SJerome Forissier 3115df2a985SJoakim Bech# OP-TEE - version 3.5.0 (2019-04-26) 3125df2a985SJoakim Bech 3135df2a985SJoakim Bech- Link to the GitHub [release page][github_release_3_5_0]. 3145df2a985SJoakim Bech- Links to the [commits][github_commits_3_5_0] and 3155df2a985SJoakim Bech[pull requests][github_pr_3_5_0] merged into this release. 3165df2a985SJoakim Bech 3175df2a985SJoakim Bech[github_release_3_5_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.5.0 3185df2a985SJoakim Bech[github_commits_3_5_0]: https://github.com/OP-TEE/optee_os/compare/3.4.0...3.5.0 3195df2a985SJoakim Bech[github_pr_3_5_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2019-01-26..2019-04-26 3205df2a985SJoakim Bech 321406c609bSJerome Forissier# OP-TEE - version 3.4.0 (2019-01-25) 322406c609bSJerome Forissier 323406c609bSJerome Forissier- Link to the GitHub [release page][github_release_3_4_0]. 324406c609bSJerome Forissier- Links to the [commits][github_commits_3_4_0] and 325406c609bSJerome Forissier[pull requests][github_pr_3_4_0] merged into this release. 326406c609bSJerome Forissier 327406c609bSJerome Forissier[github_release_3_4_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.4.0 328406c609bSJerome Forissier[github_commits_3_4_0]: https://github.com/OP-TEE/optee_os/compare/3.3.0...3.4.0 329406c609bSJerome Forissier[github_pr_3_4_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-10-12..2019-01-25 330406c609bSJerome Forissier 331ee595e95SJerome Forissier# OP-TEE - version 3.3.0 (2018-10-12) 332ee595e95SJerome Forissier 333ee595e95SJerome Forissier- Link to the GitHub [release page][github_release_3_3_0]. 334ee595e95SJerome Forissier- Links to the [commits][github_commits_3_3_0] and 335ee595e95SJerome Forissier[pull requests][github_pr_3_3_0] merged into this release. 336ee595e95SJerome Forissier 337ee595e95SJerome Forissier[github_release_3_3_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.3.0 338ee595e95SJerome Forissier[github_commits_3_3_0]: https://github.com/OP-TEE/optee_os/compare/3.2.0...3.3.0 339ee595e95SJerome Forissier[github_pr_3_3_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-07-04..2018-10-12 340ee595e95SJerome Forissier 34153bf1c38SJerome Forissier# OP-TEE - version 3.2.0 (2018-07-04) 34253bf1c38SJerome Forissier 34353bf1c38SJerome Forissier- Link to the GitHub [release page][github_release_3_2_0]. 34453bf1c38SJerome Forissier- Links to the [commits][github_commits_3_2_0] and 34553bf1c38SJerome Forissier[pull requests][github_pr_3_2_0] merged into this release. 34653bf1c38SJerome Forissier 34753bf1c38SJerome Forissier## Known issues 34853bf1c38SJerome Forissier 34953bf1c38SJerome Forissier* HiKey960: assertion in bget create_free_block() \[memalign() self-test\] ([#2414]) 35053bf1c38SJerome Forissier* D02: assertion '!have_spinlock()' ([#2437]) 35153bf1c38SJerome Forissier 35253bf1c38SJerome Forissier[github_commits_3_2_0]: https://github.com/OP-TEE/optee_os/compare/3.1.0...3.2.0 35353bf1c38SJerome Forissier[github_pr_3_2_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-04-13..2018-07-04 35453bf1c38SJerome Forissier[github_release_3_2_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.2.0 35553bf1c38SJerome Forissier[#2414]: https://github.com/OP-TEE/optee_os/issues/2414 35653bf1c38SJerome Forissier[#2437]: https://github.com/OP-TEE/optee_os/issues/2437 35753bf1c38SJerome Forissier 3580ab9388cSJens Wiklander# OP-TEE - version 3.1.0 (2018-04-13) 3590ab9388cSJens Wiklander 3600ab9388cSJens Wiklander- Link to the GitHub [release page][github_release_3_1_0]. 3610ab9388cSJens Wiklander- Links to the [commits][github_commits_3_1_0] and 3620ab9388cSJens Wiklander[pull requests][github_pr_3_1_0] merged into this release. 3630ab9388cSJens Wiklander 3640ab9388cSJens Wiklander[github_commits_3_1_0]: https://github.com/OP-TEE/optee_os/compare/3.0.0...3.1.0 3650ab9388cSJens Wiklander[github_pr_3_1_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3A2018-01-26..2018-04-13 3660ab9388cSJens Wiklander[github_release_3_1_0]: https://github.com/OP-TEE/optee_os/releases/tag/3.1.0 3670ab9388cSJens Wiklander 3680ab9388cSJens Wiklander# OP-TEE - version 3.0.0 (2018-01-26) 36994ee4938SJerome Forissier 37094ee4938SJerome Forissier[Link][github_commits_3_0_0] to a list of all commits between this release and 37194ee4938SJerome Forissierthe previous one (2.6.0). 37294ee4938SJerome Forissier 37394ee4938SJerome ForissierAbout backwards compatibility: Trusted Applications built with OP-TEE 2.5.0 or 37494ee4938SJerome Forissierearlier will not run properly with a *debug* build of this release due 37594ee4938SJerome Forissierto commit [0e1c6e8e][commit_0e1c6e8e] ("Dump call stack on TA panic"). 37694ee4938SJerome ForissierNon-debug builds are not affected. 37794ee4938SJerome Forissier 37894ee4938SJerome Forissier## New features 37994ee4938SJerome Forissier 38094ee4938SJerome Forissier* New supported platforms: Armada 3700 ([#1946]), Poplar ([#1999]), 64-bit 38194ee4938SJerome Forissier support for FSL ls1012ardb ([#1941]), i.MX6SX Sabreauto ([#1974]). 38294ee4938SJerome Forissier* arm32: sm: init CNTVOFF ([#2052]) 38394ee4938SJerome Forissier* Debug/info/error traces: make output more compact ([#2011]) 38494ee4938SJerome Forissier* tzc380: implement new functions ([#1994]) 38594ee4938SJerome Forissier* Secure Data Path: add pseudo-TA to convert VA to PA (#1993]) 38694ee4938SJerome Forissier* Pager: use NEON AES GCM implementation ([#1959]) 38794ee4938SJerome Forissier* Crypto: add optimized AES GCM implementation using NEON ([#1949]) 38894ee4938SJerome Forissier* Add support for using secure storage for TA anti-rollback ([#1928]) 38994ee4938SJerome Forissier* Crypto: replace struct crypto_ops with function interface ([#1923], 39094ee4938SJerome Forissier [#1931]) 39194ee4938SJerome Forissier* aosp_optee.mk: define OPTEE_BIN ([#1922]) 39294ee4938SJerome Forissier* Add build option to allow concurrent execution of single-instance TAs 39394ee4938SJerome Forissier ([#1915]) 39494ee4938SJerome Forissier* Pager: support for address sanitizer ([#1856]) 39594ee4938SJerome Forissier* Pager: make memory between CFG_TEE_RAM_START and TEE load address usable by 39694ee4938SJerome Forissier pager ([#1826]) 39794ee4938SJerome Forissier 39894ee4938SJerome Forissier## Bug fixes 39994ee4938SJerome Forissier 40094ee4938SJerome Forissier* Fix crash in tee_mmu_final() on TA loading error ([#2092]) 40194ee4938SJerome Forissier* LibTomCrypt: fix issue causing invalid output when using AES CTR with 40294ee4938SJerome Forissierhardware acceleration (CFG_CRYPTO_WITH_CE) ([#2086]) 40394ee4938SJerome Forissier* pl310: fix cache sync ([#2035]) 40494ee4938SJerome Forissier* tzc380: do not write reserved bits ([#1994]) 40594ee4938SJerome Forissier* Fix potential double free in ta_open() ([#1970]) 40694ee4938SJerome Forissier* libfdt: fix undefined behaviour in fdt_offset_ptr() ([#1969]) 40794ee4938SJerome Forissier* imx_wdog: fix register access ([#1966]) 40894ee4938SJerome Forissier* Secure storage: fix potential memory leak after early return ([#1961]) 40994ee4938SJerome Forissier* LibTomCrypt: fix double free in dsa_import() ([#1963]) 41094ee4938SJerome Forissier* RPMB: fix TA independance issue in secure storage ([#1921]) 41194ee4938SJerome Forissier* RPMB: return TEE_ERROR_ACCESS_CONFLICT instead of panicking when a TA 41294ee4938SJerome Forissier attempts to create an existing persistent object without the overwrite flag 41394ee4938SJerome Forissier ([#1919]) 41494ee4938SJerome Forissier* PSCI: pass non-secure context to psci_system_suspend() ([#1916]) 41594ee4938SJerome Forissier* Fix "Argument list too long" during "make clean" ([#1897]) 41694ee4938SJerome Forissier 41794ee4938SJerome Forissier## Security fixes 41894ee4938SJerome Forissier 41994ee4938SJerome Forissier* Mitigations and hardening against the Spectre and Meltdown vulnerabilities 42094ee4938SJerome Forissier (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754). 42194ee4938SJerome Forissier 42294ee4938SJerome Forissier## Known issues 42394ee4938SJerome Forissier 42494ee4938SJerome Forissier* Secure storage (REE FS): storage size not updated after 42594ee4938SJerome ForissierTEE_TruncateObjectData() ([#2094]) 42694ee4938SJerome Forissier* Possible deadlock with CFG_WITH_PAGER=y when loading a TA and not enough 42794ee4938SJerome Forissierpage tables are available in pgt_cache ([#2080]) 42894ee4938SJerome Forissier 42994ee4938SJerome Forissier## Tested on 43094ee4938SJerome Forissier 43194ee4938SJerome ForissierThe release was tested successfully on the platforms listed below. 43294ee4938SJerome Forissier 43394ee4938SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 43494ee4938SJerome Forissier* d02 43594ee4938SJerome Forissier* hikey 43694ee4938SJerome Forissier* hikey-hikey960 43794ee4938SJerome Forissier* imx-mx6ulevk 43894ee4938SJerome Forissier* imx-mx7dsabresd 43994ee4938SJerome Forissier* marvell-armada7k8k 44094ee4938SJerome Forissier* marvell-armada3700 44194ee4938SJerome Forissier* mediatek-mt8173 44294ee4938SJerome Forissier* rcar-salvator_m3 44394ee4938SJerome Forissier* rockchip-rk322x 44494ee4938SJerome Forissier* rpi3 44594ee4938SJerome Forissier* sam 44694ee4938SJerome Forissier* ti 44794ee4938SJerome Forissier* vexpress-juno 44894ee4938SJerome Forissier* vexpress-qemu_armv8a 44994ee4938SJerome Forissier* vexpress-qemu_virt 45094ee4938SJerome Forissier 45194ee4938SJerome Forissier[commit_0e1c6e8e]: https://github.com/OP-TEE/optee_os/commit/0e1c6e8e 45294ee4938SJerome Forissier[github_commits_3_0_0]: https://github.com/OP-TEE/optee_os/compare/2.6.0...3.0.0 45394ee4938SJerome Forissier[#2092]: https://github.com/OP-TEE/optee_os/pull/2092 45494ee4938SJerome Forissier[#2086]: https://github.com/OP-TEE/optee_os/pull/2086 45594ee4938SJerome Forissier[#2094]: https://github.com/OP-TEE/optee_os/issues/2094 45694ee4938SJerome Forissier[#2080]: https://github.com/OP-TEE/optee_os/issues/2080 45794ee4938SJerome Forissier[#2052]: https://github.com/OP-TEE/optee_os/pull/2052 45894ee4938SJerome Forissier[#2035]: https://github.com/OP-TEE/optee_os/pull/2035 45994ee4938SJerome Forissier[#2011]: https://github.com/OP-TEE/optee_os/pull/2011 46094ee4938SJerome Forissier[#1999]: https://github.com/OP-TEE/optee_os/pull/1999 46194ee4938SJerome Forissier[#1994]: https://github.com/OP-TEE/optee_os/pull/1994 46294ee4938SJerome Forissier[#1993]: https://github.com/OP-TEE/optee_os/pull/1993 46394ee4938SJerome Forissier[#1974]: https://github.com/OP-TEE/optee_os/pull/1974 46494ee4938SJerome Forissier[#1970]: https://github.com/OP-TEE/optee_os/pull/1970 46594ee4938SJerome Forissier[#1969]: https://github.com/OP-TEE/optee_os/pull/1969 46694ee4938SJerome Forissier[#1966]: https://github.com/OP-TEE/optee_os/pull/1966 46794ee4938SJerome Forissier[#1963]: https://github.com/OP-TEE/optee_os/pull/1963 46894ee4938SJerome Forissier[#1961]: https://github.com/OP-TEE/optee_os/pull/1961 46994ee4938SJerome Forissier[#1959]: https://github.com/OP-TEE/optee_os/pull/1959 47094ee4938SJerome Forissier[#1949]: https://github.com/OP-TEE/optee_os/pull/1949 47194ee4938SJerome Forissier[#1946]: https://github.com/OP-TEE/optee_os/pull/1946 47294ee4938SJerome Forissier[#1941]: https://github.com/OP-TEE/optee_os/pull/1941 47394ee4938SJerome Forissier[#1931]: https://github.com/OP-TEE/optee_os/pull/1931 47494ee4938SJerome Forissier[#1928]: https://github.com/OP-TEE/optee_os/pull/1928 47594ee4938SJerome Forissier[#1923]: https://github.com/OP-TEE/optee_os/pull/1923 47694ee4938SJerome Forissier[#1922]: https://github.com/OP-TEE/optee_os/pull/1922 47794ee4938SJerome Forissier[#1921]: https://github.com/OP-TEE/optee_os/pull/1921 47894ee4938SJerome Forissier[#1919]: https://github.com/OP-TEE/optee_os/pull/1919 47994ee4938SJerome Forissier[#1916]: https://github.com/OP-TEE/optee_os/pull/1916 48094ee4938SJerome Forissier[#1915]: https://github.com/OP-TEE/optee_os/pull/1915 48194ee4938SJerome Forissier[#1897]: https://github.com/OP-TEE/optee_os/pull/1897 48294ee4938SJerome Forissier[#1856]: https://github.com/OP-TEE/optee_os/pull/1856 48394ee4938SJerome Forissier[#1826]: https://github.com/OP-TEE/optee_os/pull/1826 48494ee4938SJerome Forissier 4856d57389fSJerome Forissier# OP-TEE - version 2.6.0 4866d57389fSJerome Forissier 4876d57389fSJerome Forissier[Link][github_commits_2_6_0] to a list of all commits between this release and 4886d57389fSJerome Forissierthe previous one (2.5.0). 4896d57389fSJerome Forissier 4906d57389fSJerome Forissier## New features 4916d57389fSJerome Forissier 4926d57389fSJerome Forissier* New supported platforms: Atmel SAMA5 ([#1714]), HiSilicon HiKey960 ([#1684]), 4936d57389fSJerome Forissier Rockchip RK322X ([#1666]), NXP LS1043A-RDB/LS1046A-RDB ([#1787]), Marvell 4946d57389fSJerome Forissier Armada 70x0/80x0 ([#1807]). 4956d57389fSJerome Forissier* Dynamic shared memory (non-contiguous, non-secure memory can be mapped into 4966d57389fSJerome Forissier Trusted Applications VA space) ([#1631]) 4976d57389fSJerome Forissier* Dump TA call stack on panic ([#1858]) 4986d57389fSJerome Forissier* i.MX: PSCI reset ([#1849]) 4996d57389fSJerome Forissier* plat-ti: AM43xx: suspend/resume support ([#1822]) 5006d57389fSJerome Forissier* QEMU SMP support ([#1820]) 5016d57389fSJerome Forissier* plat-ti: AM43xx: disable TRNG ([#1816]) 5026d57389fSJerome Forissier* plat-ti: enable Secure Data Path by default ([#1815]) 5036d57389fSJerome Forissier* Improve symbolize.py ([#1778], [#1767], [#1766]) 5046d57389fSJerome Forissier* Early TAs (TAs linked in tee.bin) ([#1733]) 5056d57389fSJerome Forissier* Suspend/resume framework for arm32 and imx7d support ([#1729]) 5066d57389fSJerome Forissier* RK322X PSCI version, features and suspend support ([#1720]) 5076d57389fSJerome Forissier* arm32: handle aborts in system mode ([#1703]) 5086d57389fSJerome Forissier* i.MX: add SNVS SRTC support ([#1700]) 5096d57389fSJerome Forissier* GCC7 support ([#1693]) 5106d57389fSJerome Forissier* Improve detection of programming errors in locking code ([#1671], [#1670]) 5116d57389fSJerome Forissier* Support TEE RAM size larger than page directory size ([#1669]) 5126d57389fSJerome Forissier 5136d57389fSJerome Forissier## Removed features 5146d57389fSJerome Forissier 5156d57389fSJerome Forissier* Remove TUI code ([#1842]) 5166d57389fSJerome Forissier 5176d57389fSJerome Forissier## Bug fixes 5186d57389fSJerome Forissier 5196d57389fSJerome Forissier* Add missing synchronization barrier in core_mmu_map_pages() ([#1827]) 5206d57389fSJerome Forissier* Secure storage: REE FS: fix bug in error path ([#1801]) 5216d57389fSJerome Forissier* ASAN bug fixes ([#1799]) 5226d57389fSJerome Forissier* Fix race in core_mmu_user_mapping_is_active() ([#1785]) 5236d57389fSJerome Forissier* libutee: printf() and puts() fixes, add putchar() ([#1759], [#1754]) 5246d57389fSJerome Forissier* arm32: GICv3: fix FIQ masking in IRQ/ABT/SVC/UND handlers ([#1748]) 5256d57389fSJerome Forissier* arm32: preserve r12 in native_intr_handler() ([#1682]) 5266d57389fSJerome Forissier* arm64: fix print_kernel_stack() ([#1664]) 5276d57389fSJerome Forissier* benchmark: fix core data-abort ([#1658]) 5286d57389fSJerome Forissier 5296d57389fSJerome Forissier## Security fixes or enhancements 5306d57389fSJerome Forissier 5316d57389fSJerome Forissier* crypto: fix software PRNG weaknesses 5326d57389fSJerome Forissier ([OP-TEE-2017-0001][OP-TEE-2017-0001]) ([#1843]) 5336d57389fSJerome Forissier 5346d57389fSJerome Forissier## Tested on 5356d57389fSJerome Forissier 53694ee4938SJerome ForissierThe release was tested successfully on the platforms listed below. 5376d57389fSJerome ForissierIf a platform is not listed, it means the release was not tested on this 5386d57389fSJerome Forissierplatform. 5396d57389fSJerome Forissier 5406d57389fSJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 5416d57389fSJerome Forissier* d02 5426d57389fSJerome Forissier* hikey 5436d57389fSJerome Forissier* hikey-hikey960 5446d57389fSJerome Forissier* imx-mx6ulevk 5456d57389fSJerome Forissier* imx-mx7dsabresd 5466d57389fSJerome Forissier* ls-ls1021a??? (single core) 5476d57389fSJerome Forissier* ls-ls1043ardb 5486d57389fSJerome Forissier* ls-ls1046ardb 5496d57389fSJerome Forissier* mediatek-mt8173 5506d57389fSJerome Forissier* rcar 5516d57389fSJerome Forissier* rockchip-rk322x 5526d57389fSJerome Forissier* rpi3 5536d57389fSJerome Forissier* sam 5546d57389fSJerome Forissier* stm-b2260 5556d57389fSJerome Forissier* stm-cannes 5566d57389fSJerome Forissier* ti-??? 5576d57389fSJerome Forissier* vexpress-fvp 5586d57389fSJerome Forissier* vexpress-juno 5596d57389fSJerome Forissier* vexpress-qemu_armv8a 5606d57389fSJerome Forissier* vexpress-qemu_virt 5616d57389fSJerome Forissier 56294ee4938SJerome Forissier[github_commits_2_6_0]: https://github.com/OP-TEE/optee_os/compare/2.5.0...2.6.0 5636d57389fSJerome Forissier[#1858]: https://github.com/OP-TEE/optee_os/issues/1858 5646d57389fSJerome Forissier[#1849]: https://github.com/OP-TEE/optee_os/issues/1849 5656d57389fSJerome Forissier[#1843]: https://github.com/OP-TEE/optee_os/issues/1843 5666d57389fSJerome Forissier[#1842]: https://github.com/OP-TEE/optee_os/issues/1842 5676d57389fSJerome Forissier[#1827]: https://github.com/OP-TEE/optee_os/issues/1827 5686d57389fSJerome Forissier[#1822]: https://github.com/OP-TEE/optee_os/issues/1822 5696d57389fSJerome Forissier[#1820]: https://github.com/OP-TEE/optee_os/issues/1820 5706d57389fSJerome Forissier[#1816]: https://github.com/OP-TEE/optee_os/issues/1816 5716d57389fSJerome Forissier[#1815]: https://github.com/OP-TEE/optee_os/issues/1815 5726d57389fSJerome Forissier[#1807]: https://github.com/OP-TEE/optee_os/issues/1807 5736d57389fSJerome Forissier[#1801]: https://github.com/OP-TEE/optee_os/issues/1801 5746d57389fSJerome Forissier[#1799]: https://github.com/OP-TEE/optee_os/issues/1799 5756d57389fSJerome Forissier[#1787]: https://github.com/OP-TEE/optee_os/issues/1787 5766d57389fSJerome Forissier[#1785]: https://github.com/OP-TEE/optee_os/issues/1785 5776d57389fSJerome Forissier[#1778]: https://github.com/OP-TEE/optee_os/issues/1778 5786d57389fSJerome Forissier[#1767]: https://github.com/OP-TEE/optee_os/issues/1767 5796d57389fSJerome Forissier[#1766]: https://github.com/OP-TEE/optee_os/issues/1766 5806d57389fSJerome Forissier[#1759]: https://github.com/OP-TEE/optee_os/issues/1759 5816d57389fSJerome Forissier[#1754]: https://github.com/OP-TEE/optee_os/issues/1754 5826d57389fSJerome Forissier[#1748]: https://github.com/OP-TEE/optee_os/issues/1748 5836d57389fSJerome Forissier[#1733]: https://github.com/OP-TEE/optee_os/issues/1733 5846d57389fSJerome Forissier[#1729]: https://github.com/OP-TEE/optee_os/issues/1729 5856d57389fSJerome Forissier[#1720]: https://github.com/OP-TEE/optee_os/issues/1720 5866d57389fSJerome Forissier[#1714]: https://github.com/OP-TEE/optee_os/issues/1714 5876d57389fSJerome Forissier[#1703]: https://github.com/OP-TEE/optee_os/issues/1703 5886d57389fSJerome Forissier[#1700]: https://github.com/OP-TEE/optee_os/issues/1700 5896d57389fSJerome Forissier[#1693]: https://github.com/OP-TEE/optee_os/issues/1693 5906d57389fSJerome Forissier[#1684]: https://github.com/OP-TEE/optee_os/issues/1684 5916d57389fSJerome Forissier[#1682]: https://github.com/OP-TEE/optee_os/issues/1682 5926d57389fSJerome Forissier[#1671]: https://github.com/OP-TEE/optee_os/issues/1671 5936d57389fSJerome Forissier[#1670]: https://github.com/OP-TEE/optee_os/issues/1670 5946d57389fSJerome Forissier[#1669]: https://github.com/OP-TEE/optee_os/issues/1669 5956d57389fSJerome Forissier[#1666]: https://github.com/OP-TEE/optee_os/issues/1666 5966d57389fSJerome Forissier[#1664]: https://github.com/OP-TEE/optee_os/issues/1664 5976d57389fSJerome Forissier[#1658]: https://github.com/OP-TEE/optee_os/issues/1658 5986d57389fSJerome Forissier[#1631]: https://github.com/OP-TEE/optee_os/issues/1631 5996d57389fSJerome Forissier[OP-TEE-2017-0001]: https://www.op-tee.org/security-advisories/ 6006d57389fSJerome Forissier 6015d8aaa04SJerome Forissier# OP-TEE - version 2.5.0 6025d8aaa04SJerome Forissier 6035d8aaa04SJerome Forissier[Link][github_commits_2_5_0] to a list of all commits between this release and 6045d8aaa04SJerome Forissierthe previous one (2.4.0). 6055d8aaa04SJerome Forissier 6065d8aaa04SJerome Forissier## New features 6075d8aaa04SJerome Forissier 6085d8aaa04SJerome Forissier* New supported platform: i.MX7D ([#1639]) 6095d8aaa04SJerome Forissier* Secure storage: anti-rollback protection for REE FS using RPMB FS ([#1630]) 6105d8aaa04SJerome Forissier* Assign non-secure DDR configuration from DT if CFG_DT=y ([#1623]) 6115d8aaa04SJerome Forissier* Add new image format: split image into three separate binaries suitable for 6125d8aaa04SJerome Forissier upcoming ARM Trusted Firmware ([#1589]). 6135d8aaa04SJerome Forissier* Make alignment check configurable ([#1586]) 6145d8aaa04SJerome Forissier* drivers: add TZC380 driver ([#1578]) 6155d8aaa04SJerome Forissier* plat-imx: PSCI CPU off ([#1577]) 6165d8aaa04SJerome Forissier* 64-bit paging on QEMU v8 and HiKey ([#1575], [#1592]) 6175d8aaa04SJerome Forissier* Benchmark framework ([#1365]) 6185d8aaa04SJerome Forissier* Dump call stack of user TAs on abort ([#1552]) 6195d8aaa04SJerome Forissier* plat-hikey: enable Secure Data Path ([#1440]) 6205d8aaa04SJerome Forissier* Add interface to load and decrypt/authenticate user TAs ([#1513]) 6215d8aaa04SJerome Forissier* plat-ti: add secure paging support ([#1493]) 6225d8aaa04SJerome Forissier* plat-ti: add OTP hardware key support ([#1492]) 6235d8aaa04SJerome Forissier* Support ARM GICv3 ([#1465]) 6245d8aaa04SJerome Forissier 6255d8aaa04SJerome Forissier## Removed features 6265d8aaa04SJerome Forissier 6275d8aaa04SJerome Forissier* stm-orly2 is not supported anymore ([#1650]) 6285d8aaa04SJerome Forissier* Remove secure storage based on SQL FS (`CFG_SQL_FS=y`) ([#1490]) 6295d8aaa04SJerome Forissier* Remove support for mapping user TAs with 1 MiB or 2 MiB granularity 6305d8aaa04SJerome Forissier (`CFG_SMALL_PAGE_USER_TA=n`) ([#1559]). TAs are always mapped using small 6315d8aaa04SJerome Forissier pages. 6325d8aaa04SJerome Forissier 6335d8aaa04SJerome Forissier## Bug fixes 6345d8aaa04SJerome Forissier 6355d8aaa04SJerome Forissier* Reduce size of non-pageable code ([#1621]) 6365d8aaa04SJerome Forissier* Ignore `TA_FLAG_MULTI_SESSION` and `TA_FLAG_INSTANCE_KEEP_ALIVE` when 6375d8aaa04SJerome Forissier `TA_FLAG_SINGLE_INSTANCE` is not set ([#1574]) 6385d8aaa04SJerome Forissier* libutee: remove buffering for AES GCM (PR#1573) and AES CTR ([#1580]) 6395d8aaa04SJerome Forissier* Fix ROUNDUP()/ROUNDDOWN() macros ([#1519]) 6405d8aaa04SJerome Forissier* Do not touch other bits in GICD_CTLR ([#1508]) 6415d8aaa04SJerome Forissier* Fix build issue with `DEBUG=y` and `CFG_TEE_CORE_LOG_LEVEL=0` ([#1502]) 6425d8aaa04SJerome Forissier* crypto: do not restrict hash size when algorithm is ECDSA ([#1497]) 6435d8aaa04SJerome Forissier 6445d8aaa04SJerome Forissier## Security fixes or enhancements 6455d8aaa04SJerome Forissier 6465d8aaa04SJerome Forissier- crypto: fix RSA key leakage after fault injection attack 6475d8aaa04SJerome Forissier ([OP-TEE-2016-0003][OP-TEE-2016-0003]) ([#1610]) 6485d8aaa04SJerome Forissier* crypto: fix RSA key leakage after side channel attack 6495d8aaa04SJerome Forissier ([OP-TEE-2016-0002][OP-TEE-2016-0002]) ([#1610]) 6505d8aaa04SJerome Forissier* Make pager aliased pages not always writable ([#1551]) 6515d8aaa04SJerome Forissier* Support for no-exec RO and RW data ([#1459], [#1550]) 6525d8aaa04SJerome Forissier 6535d8aaa04SJerome Forissier## New issues 6545d8aaa04SJerome Forissier 6555d8aaa04SJerome Forissier* armv7: some platform-specific code (`plat_cpu_reset_early()`) overwrites 6565d8aaa04SJerome ForissierSCTLR bits configured by generic code. This affects alignment checks (`SCTLR.A`) 6575d8aaa04SJerome Forissierand write-implies-no-exec (`SCTLR.WXN`, `SCTLR.UWXN`), which can therefore not 6585d8aaa04SJerome Forissierbe configured via the compile-time `CFG_` variables. 6595d8aaa04SJerome Forissier* armv7: plat-imx: Cortex-A9 cores should enable branch prediction (`SCLTR.Z`) 6605d8aaa04SJerome Forissierfor improved performance. 6615d8aaa04SJerome Forissier* [#1656] qemu_armv8a: init hangs when secure data path and pager are both 6625d8aaa04SJerome Forissier enabled. 6635d8aaa04SJerome Forissier 6645d8aaa04SJerome Forissier## Tested on 6655d8aaa04SJerome Forissier 6665d8aaa04SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 6675d8aaa04SJerome Forissierits default configuration, while _extended_ means it was run successfully 6685d8aaa04SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 6695d8aaa04SJerome Forissierv1.1.0.4. 6705d8aaa04SJerome Forissier 6715d8aaa04SJerome ForissierIf a platform is not listed, it means the release was not tested on this 6725d8aaa04SJerome Forissierplatform. 6735d8aaa04SJerome Forissier 6745d8aaa04SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 6755d8aaa04SJerome Forissier* d02: extended 6765d8aaa04SJerome Forissier* hikey: extended 6775d8aaa04SJerome Forissier* imx-mx6ulevk: standard 6785d8aaa04SJerome Forissier* imx-mx6ullevk: standard 6795d8aaa04SJerome Forissier* imx-mx7dsabresd: standard 6805d8aaa04SJerome Forissier* ls-ls1021atwr: standard 6815d8aaa04SJerome Forissier* mediatek-mt8173: standard 6825d8aaa04SJerome Forissier* rcar-h3: standard 6835d8aaa04SJerome Forissier* rpi3: standard 6845d8aaa04SJerome Forissier* stm-b2260: extended 6855d8aaa04SJerome Forissier* stm-cannes: extended 6865d8aaa04SJerome Forissier* ti-am43xx: standard 6875d8aaa04SJerome Forissier* ti-am57xx: standard 6885d8aaa04SJerome Forissier* ti-dra7xx: standard 6895d8aaa04SJerome Forissier* vexpress-fvp: standard 6905d8aaa04SJerome Forissier* vexpress-juno: standard 6915d8aaa04SJerome Forissier* vexpress-qemu_armv8a: standard 6925d8aaa04SJerome Forissier* vexpress-qemu_virt: standard 6935d8aaa04SJerome Forissier 6945d8aaa04SJerome Forissier[github_commits_2_5_0]: https://github.com/OP-TEE/optee_os/compare/2.4.0...2.5.0-rc1 6955d8aaa04SJerome Forissier[#1656]: https://github.com/OP-TEE/optee_os/issues/1656 6965d8aaa04SJerome Forissier[#1650]: https://github.com/OP-TEE/optee_os/pull/1650 6975d8aaa04SJerome Forissier[#1639]: https://github.com/OP-TEE/optee_os/pull/1639 6985d8aaa04SJerome Forissier[#1630]: https://github.com/OP-TEE/optee_os/pull/1630 6995d8aaa04SJerome Forissier[#1623]: https://github.com/OP-TEE/optee_os/pull/1623 7005d8aaa04SJerome Forissier[#1621]: https://github.com/OP-TEE/optee_os/pull/1621 7015d8aaa04SJerome Forissier[#1610]: https://github.com/OP-TEE/optee_os/pull/1610 7025d8aaa04SJerome Forissier[#1592]: https://github.com/OP-TEE/optee_os/pull/1592 7035d8aaa04SJerome Forissier[#1589]: https://github.com/OP-TEE/optee_os/pull/1589 7045d8aaa04SJerome Forissier[#1586]: https://github.com/OP-TEE/optee_os/pull/1586 7055d8aaa04SJerome Forissier[#1580]: https://github.com/OP-TEE/optee_os/pull/1580 7065d8aaa04SJerome Forissier[#1578]: https://github.com/OP-TEE/optee_os/pull/1578 7075d8aaa04SJerome Forissier[#1577]: https://github.com/OP-TEE/optee_os/pull/1577 7085d8aaa04SJerome Forissier[#1574]: https://github.com/OP-TEE/optee_os/pull/1574 7095d8aaa04SJerome Forissier[#1559]: https://github.com/OP-TEE/optee_os/pull/1559 7105d8aaa04SJerome Forissier[#1551]: https://github.com/OP-TEE/optee_os/pull/1551 7115d8aaa04SJerome Forissier[#1550]: https://github.com/OP-TEE/optee_os/pull/1550 7125d8aaa04SJerome Forissier[#1519]: https://github.com/OP-TEE/optee_os/pull/1519 7135d8aaa04SJerome Forissier[#1502]: https://github.com/OP-TEE/optee_os/pull/1502 7145d8aaa04SJerome Forissier[#1365]: https://github.com/OP-TEE/optee_os/pull/1365 7155d8aaa04SJerome Forissier[#1552]: https://github.com/OP-TEE/optee_os/pull/1552 7165d8aaa04SJerome Forissier[#1513]: https://github.com/OP-TEE/optee_os/pull/1513 7175d8aaa04SJerome Forissier[#1508]: https://github.com/OP-TEE/optee_os/pull/1508 7185d8aaa04SJerome Forissier[#1493]: https://github.com/OP-TEE/optee_os/pull/1493 7195d8aaa04SJerome Forissier[#1497]: https://github.com/OP-TEE/optee_os/pull/1497 7205d8aaa04SJerome Forissier[#1492]: https://github.com/OP-TEE/optee_os/pull/1492 7215d8aaa04SJerome Forissier[#1490]: https://github.com/OP-TEE/optee_os/pull/1490 7225d8aaa04SJerome Forissier[#1465]: https://github.com/OP-TEE/optee_os/pull/1465 7235d8aaa04SJerome Forissier[#1459]: https://github.com/OP-TEE/optee_os/pull/1459 7245d8aaa04SJerome Forissier[#1440]: https://github.com/OP-TEE/optee_os/pull/1440 7255d8aaa04SJerome Forissier[OP-TEE-2016-0003]: https://www.op-tee.org/security-advisories/ 7265d8aaa04SJerome Forissier[OP-TEE-2016-0002]: https://www.op-tee.org/security-advisories/ 7275d8aaa04SJerome Forissier 728702609a7SJerome Forissier# OP-TEE - version 2.4.0 729702609a7SJerome Forissier 730702609a7SJerome Forissier[Link][github_commits_2_4_0] to a list of all commits between this release and 731702609a7SJerome Forissierthe previous one (2.3.0). 732702609a7SJerome Forissier 733702609a7SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 734702609a7SJerome ForissierSecure Storage internal format for the REE and SQL FS is not compatible due to 735702609a7SJerome Forissiercommits [a238b74][commit_a238b74] ("core: REE FS: use the new hash tree 736702609a7SJerome Forissierinterface") and [44e900e][commit_44e900e] ("core: SQL FS: use the new hash tree 737702609a7SJerome Forissierinterface"). 738702609a7SJerome Forissier 739702609a7SJerome Forissier## New features 740702609a7SJerome Forissier 741702609a7SJerome Forissier* Add porting guidelines 742702609a7SJerome Forissier 743702609a7SJerome Forissier* Add support for Secure Data Path which allows Client and Trusted Applications 744702609a7SJerome Forissier to share references to secure memory 745702609a7SJerome Forissier 746702609a7SJerome Forissier* New supported platform: Texas Instruments AM57xx (`PLATFORM=ti-am57xx`) 747702609a7SJerome Forissier 748702609a7SJerome Forissier* ARMv7-A: add support for platform services in secure monitor and add these 749702609a7SJerome Forissier services for the DRA7xx platform 750702609a7SJerome Forissier 751702609a7SJerome Forissier* SPI framework and PL022 driver cleanup and improvements 752702609a7SJerome Forissier 753702609a7SJerome Forissier* Use CNTPCT (when available) to add entropy to the software PRNG 754702609a7SJerome Forissier 755702609a7SJerome Forissier* Add GlobalPlatform Socket API for UDP and TCP (IPv4 and IPv6) 756702609a7SJerome Forissier 757702609a7SJerome Forissier* DRA7: add TRNG driver, enable GICv2 driver 758702609a7SJerome Forissier 759702609a7SJerome Forissier* Support load address larger than 4G 760702609a7SJerome Forissier 761702609a7SJerome Forissier* libutee: preserve error code when calling TEE_Panic() for easier 762702609a7SJerome Forissier troubleshooting 763702609a7SJerome Forissier 764702609a7SJerome Forissier* Support TA profiling with gprof (-pg compiler switch) 765702609a7SJerome Forissier 766702609a7SJerome Forissier* Optimize the ELF loader for TAs when pager is enabled 767702609a7SJerome Forissier 768702609a7SJerome Forissier* Update documentation 769702609a7SJerome Forissier 770702609a7SJerome Forissier* Add paged secure shared memory that can be transferred between TAs as 771702609a7SJerome Forissier needed 772702609a7SJerome Forissier 773702609a7SJerome Forissier* Introduce MOBJ abstraction 774702609a7SJerome Forissier 775702609a7SJerome Forissier* i.MX6: add PSCI "on" function 776702609a7SJerome Forissier 777702609a7SJerome Forissier* arm32: introduce PSCI framework 778702609a7SJerome Forissier 779702609a7SJerome Forissier## Bug fixes 780702609a7SJerome Forissier 781702609a7SJerome Forissier* Secure storage: improve integrity checking of the REE and SQL filesystems by 782702609a7SJerome Forissier adding a hash tree on the internal data structures. Any external modification 783702609a7SJerome Forissier is detected, except full rollback. Fixes [#1188][issue1188]. 784702609a7SJerome Forissier 785702609a7SJerome Forissier* The linux driver will set the 'privileged' flag (TEE_GEN_CAP_PRIVILEGED) on 786702609a7SJerome Forissier the device intended for use by tee-supplicant. Fixes [#1199][issue1199]. 787702609a7SJerome Forissier 788702609a7SJerome Forissier* RPMB: don't try to program the RPMB key by default 789702609a7SJerome Forissier 790702609a7SJerome Forissier* Fix "make clean" error cases 791702609a7SJerome Forissier 792702609a7SJerome Forissier* Fix issue when resetting persistent storage enumerator [#1332][issue1332] 793702609a7SJerome Forissier 794702609a7SJerome Forissier* Fix TA panic when doing AES CTS with specific buffer sizes 795702609a7SJerome Forissier [#1203][issue1203]. 796702609a7SJerome Forissier 797702609a7SJerome Forissier## Known issues 798702609a7SJerome Forissier 799702609a7SJerome Forissier* On RPi3 xtest sometimes stall (rcu_sched self-detected stall on CPU) [#1353][issue1353] 800702609a7SJerome Forissier* For multi-core PSCI support is to be added for ls1021atwr in OP-TEE. 801702609a7SJerome Forissier* USB keyboard cannot be used to stop the u-boot timeout ([build issue131]). 802702609a7SJerome Forissier* Travis service (build.git) seems unstable from time to time. 803702609a7SJerome Forissier 804702609a7SJerome Forissier## Tested on 805702609a7SJerome Forissier 806702609a7SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 807702609a7SJerome Forissierits default configuration, while _extended_ means it was run successfully 808702609a7SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 809702609a7SJerome Forissierv1.1.0.4. 810702609a7SJerome Forissier 811702609a7SJerome ForissierIf a platform is not listed, it means the release was not tested on this 812702609a7SJerome Forissierplatform. 813702609a7SJerome Forissier 814702609a7SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 815702609a7SJerome Forissier* d02: extended 816702609a7SJerome Forissier* hikey: extended 817702609a7SJerome Forissier* imx-mx6ulevk: standard 818702609a7SJerome Forissier* ls-ls1021atwr: standard (single core) 819702609a7SJerome Forissier* mediatek-mt8173: standard 820702609a7SJerome Forissier* rcar-h3: standard 821702609a7SJerome Forissier* rpi3: standard 822702609a7SJerome Forissier* stm-b2260: extended 823702609a7SJerome Forissier* ti-dra7xx: standard 824702609a7SJerome Forissier* vexpress-fvp: standard 825702609a7SJerome Forissier* vexpress-juno: standard 826702609a7SJerome Forissier* vexpress-qemu_armv8a: standard 827702609a7SJerome Forissier* vexpress-qemu_virt: standard 828702609a7SJerome Forissier* zynqmp-zc1751_dc1: standard 829702609a7SJerome Forissier* zynqmp-zc1751_dc2: standard 830702609a7SJerome Forissier* zynqmp-zcu102: standard 831702609a7SJerome Forissier 832702609a7SJerome Forissier[github_commits_2_4_0]: https://github.com/OP-TEE/optee_os/compare/2.3.0...2.4.0 833702609a7SJerome Forissier[issue1332]: https://github.com/OP-TEE/optee_os/issues/1332 834702609a7SJerome Forissier[issue1353]: https://github.com/OP-TEE/optee_os/issues/1353 835702609a7SJerome Forissier[build issue131]: https://github.com/OP-TEE/build/issues/131 836702609a7SJerome Forissier[commit_a238b74]: https://github.com/OP-TEE/optee_os/commit/a238b744b1b3 837702609a7SJerome Forissier[commit_44e900e]: https://github.com/OP-TEE/optee_os/commit/44e900eabfc1 838702609a7SJerome Forissier 83928fcee17SJerome Forissier# OP-TEE - version 2.3.0 84028fcee17SJerome Forissier 84128fcee17SJerome Forissier[Link][github_commits_2_3_0] to a list of all commits between this release and 84228fcee17SJerome Forissierthe previous one (2.2.0). 84328fcee17SJerome Forissier 84428fcee17SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 84528fcee17SJerome ForissierSecure Storage internal format for the REE FS is not compatible due to commit 84628fcee17SJerome Forissier[361fb3e][commit_361fb3e] ("core: REE FS: use a single file per object"). 84728fcee17SJerome Forissier 84828fcee17SJerome Forissier[commit_361fb3e]: https://github.com/OP-TEE/optee_os/commit/361fb3e 84928fcee17SJerome Forissier 85028fcee17SJerome Forissier## New features 85128fcee17SJerome Forissier 85228fcee17SJerome Forissier* New supported platform: Xilinx Zynq 7000 ZC702 (`PLATFORM=zynq7k-zc702`) 85328fcee17SJerome Forissier 85428fcee17SJerome Forissier* Add debug assertions to spinlocks and mutexes 85528fcee17SJerome Forissier 85628fcee17SJerome Forissier* Add more CP15 register access macros for Cortex-A9 85728fcee17SJerome Forissier 85828fcee17SJerome Forissier* ARMv7-A: redesign secure monitor to make it easier to register services 85928fcee17SJerome Forissier 86028fcee17SJerome Forissier* ARMv7-A: cleanup boot arguments 86128fcee17SJerome Forissier 86228fcee17SJerome Forissier* libutee: extend `TEE_CheckMemoryAccessRights()` with 86328fcee17SJerome Forissier `TEE_MEMORY_ACCESS_SECURE` and `TEE_MEMORY_ACCESS_NONSECURE` 86428fcee17SJerome Forissier 86528fcee17SJerome Forissier* plat-hikey: enable SPI by default and add sample test code 86628fcee17SJerome Forissier 86728fcee17SJerome Forissier* Consider `CFLAGS_ta_arm64` and `CFLAGS_ta_arm32` when building TAs 86828fcee17SJerome Forissier 86928fcee17SJerome Forissier* Secure storage refactoring 87028fcee17SJerome Forissier - Simplify interface with tee-supplicant. Minimize round trips with normal 87128fcee17SJerome Forissier world, especially by adding a cache for FS RPC payload data. 87228fcee17SJerome Forissier - REE FS: use a single file per object, remove block cache. 87328fcee17SJerome Forissier 87428fcee17SJerome Forissier* Print call stack in panic() 87528fcee17SJerome Forissier 87628fcee17SJerome Forissier## Bug fixes 87728fcee17SJerome Forissier 87828fcee17SJerome Forissier* Fix UUID encoding when communicating with normal world (use big endian 87928fcee17SJerome Forissier mode instead of native endianness). Related to this, the string format 88028fcee17SJerome Forissier for UUIDs has changed in tee-supplicant, so that TA file names now follow 88128fcee17SJerome Forissier the format defined in RFC4122 (a missing hyphen was added). The old format 88228fcee17SJerome Forissier is still supported, but deprecated, and will likely be removed with the 88328fcee17SJerome Forissier next major release. 88428fcee17SJerome Forissier 88528fcee17SJerome Forissier* Drop write permission to non-writable ELF segments after TA loading is 88628fcee17SJerome Forissier complete. 88728fcee17SJerome Forissier 88828fcee17SJerome Forissier* mm: fix confusing memory mapping debug traces 88928fcee17SJerome Forissier 89028fcee17SJerome Forissier* plat-ti: fix issues with MMU mapping 89128fcee17SJerome Forissier 89228fcee17SJerome Forissier* crypto: fix clearing of big numbers 89328fcee17SJerome Forissier 89428fcee17SJerome Forissier* build: allow spaces and double quotes in CFG_ variables 89528fcee17SJerome Forissier 89628fcee17SJerome Forissier* mm: use paddr_t to support both 32- and 64-bit architectures properly. 89728fcee17SJerome Forissier Resolves 32-bit truncation error when pool is at top of 32 bit address 89828fcee17SJerome Forissier space on 64-bit architecture. 89928fcee17SJerome Forissier 90028fcee17SJerome Forissier* plat-stm: support pager. Fix pager on ARMv7-A SMP boards. 90128fcee17SJerome Forissier 90228fcee17SJerome Forissier* Fix debug output of Trusted Applications (remove "ERROR: TEE-CORE:" prefix) 90328fcee17SJerome Forissier 90428fcee17SJerome Forissier* Do not consider TA memref parameters as TA private memory 90528fcee17SJerome Forissier 90628fcee17SJerome Forissier* crypto: fix `cipher_final()` which would not call `cbc_done()` for CBC_MAC 90728fcee17SJerome Forissier algorithms 90828fcee17SJerome Forissier 90928fcee17SJerome Forissier* fix for 16-way PL310 91028fcee17SJerome Forissier 91128fcee17SJerome Forissier* arm32: fix call stack unwinding (`print_stack()`) 91228fcee17SJerome Forissier 91328fcee17SJerome Forissier* arm32: fix spinlock assembly code 91428fcee17SJerome Forissier 91528fcee17SJerome Forissier* plat-stm, plat-imx: fix SCR initalization 91628fcee17SJerome Forissier 91728fcee17SJerome Forissier* Fix user L1 MMU entries calculation (non-LPAE), allowing TTBCR.N values 91828fcee17SJerome Forissier other than 7. 91928fcee17SJerome Forissier 92028fcee17SJerome Forissier* mtk-mt8173: fix panic caused by incorrect size of SHMEM 92128fcee17SJerome Forissier 92228fcee17SJerome Forissier* plat-stm: fix RNG driver (non-flat mapping) 92328fcee17SJerome Forissier 92428fcee17SJerome Forissier## Known issues 92528fcee17SJerome Forissier 92628fcee17SJerome Forissier* New issues open on GitHub 92728fcee17SJerome Forissier * [#1203][issue1203] AES-CTS mode will fail when inlen=0x100, in_incr=0x80 92828fcee17SJerome Forissier * [#1199][issue1199] Both tee and teepriv reported GlobalPlatform compliant 92928fcee17SJerome Forissier * [#1188][issue1188] Secure storage (SQL FS and REE FS): blocks not tied to 93028fcee17SJerome Forissier current meta header 93128fcee17SJerome Forissier * [#1172][issue1172] paddr_t should be larger than 32 bits when 93228fcee17SJerome Forissier CFG_WITH_LPAE is enabled 93328fcee17SJerome Forissier 93428fcee17SJerome Forissier## Tested on 93528fcee17SJerome Forissier 93628fcee17SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 93728fcee17SJerome Forissierits default configuration, while _extended_ means it was run successfully 93828fcee17SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 93928fcee17SJerome Forissierv1.1.0.4. 94028fcee17SJerome Forissier 94128fcee17SJerome ForissierIf a platform is not listed, it means the release was not tested on this 94228fcee17SJerome Forissierplatform. 94328fcee17SJerome Forissier 94428fcee17SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 94528fcee17SJerome Forissier* d02: extended 94628fcee17SJerome Forissier* hikey: extended 94728fcee17SJerome Forissier* imx-mx6ulevk: standard 94828fcee17SJerome Forissier* ls-ls1021atwr: standard 94928fcee17SJerome Forissier* mediatek-mt8173: standard 95028fcee17SJerome Forissier* rcar-h3: standard 95128fcee17SJerome Forissier* rpi3: standard 95228fcee17SJerome Forissier* stm-b2260: extended 95328fcee17SJerome Forissier* stm-cannes: extended 95428fcee17SJerome Forissier* ti-dra7xx: standard 95528fcee17SJerome Forissier* vexpress-fvp: standard 95628fcee17SJerome Forissier* vexpress-juno: standard 95728fcee17SJerome Forissier* vexpress-qemu_armv8a: standard 95828fcee17SJerome Forissier* vexpress-qemu_virt: extended 95928fcee17SJerome Forissier* zynqmp-zcu102: standard 96028fcee17SJerome Forissier 96128fcee17SJerome Forissier[github_commits_2_3_0]: https://github.com/OP-TEE/optee_os/compare/2.2.0...2.3.0 96228fcee17SJerome Forissier[issue1172]: https://github.com/OP-TEE/optee_os/issues/1172 96328fcee17SJerome Forissier[issue1188]: https://github.com/OP-TEE/optee_os/issues/1188 96428fcee17SJerome Forissier[issue1199]: https://github.com/OP-TEE/optee_os/issues/1199 96528fcee17SJerome Forissier[issue1203]: https://github.com/OP-TEE/optee_os/issues/1203 96628fcee17SJerome Forissier 967c0c5d399SJerome Forissier# OP-TEE - version 2.2.0 968c0c5d399SJerome Forissier 969c0c5d399SJerome Forissier[Link][github_commits_2_2_0] to a list of all commits between this release and 970c0c5d399SJerome Forissierthe previous one (2.1.0). 971c0c5d399SJerome Forissier 972c0c5d399SJerome ForissierPlease note: this release is API-compatible with the previous one, but the 973c0c5d399SJerome ForissierSecure Storage internal format is not compatible due to commit 974c0c5d399SJerome Forissier[fde4a75][commit_fde4a75] ("storage: encrypt the FEK with a TA-specific key"). 975c0c5d399SJerome Forissier 976c0c5d399SJerome Forissier[commit_fde4a75]: https://github.com/OP-TEE/optee_os/commit/fde4a75 977c0c5d399SJerome Forissier 978c0c5d399SJerome Forissier## New features 979c0c5d399SJerome Forissier 980c0c5d399SJerome Forissier* New supported platforms: 981c0c5d399SJerome Forissier * Freescale i.MX6 Quad SABRE Lite & SD 982c0c5d399SJerome Forissier * HiSilicon D02 983c0c5d399SJerome Forissier * Raspberry Pi3 984c0c5d399SJerome Forissier * Renesas RCAR H3 985c0c5d399SJerome Forissier * STMicroelectronics b2260 - h410 986c0c5d399SJerome Forissier 987c0c5d399SJerome Forissier* Pager: Support paging of read/write pages by encrypting them with AES-GCM. 988c0c5d399SJerome Forissier Support paging of user TAs. Add global setting for TZSRAM size 989c0c5d399SJerome Forissier (CFG_CORE_TZSRAM_EMUL_SIZE), defaults to 300K. 990c0c5d399SJerome Forissier 991c0c5d399SJerome Forissier* Support for more than 8 CPU cores 992c0c5d399SJerome Forissier 993c0c5d399SJerome Forissier* Added SPI framework and PL022 driver 994c0c5d399SJerome Forissier 995c0c5d399SJerome Forissier* GPIO: framework supports multiple instances, PL061 driver now has get/set 996c0c5d399SJerome Forissier interrupt and mode control functions 997c0c5d399SJerome Forissier 998c0c5d399SJerome Forissier* Secure storage: Encrypt the File Encryption Key with a TA-specific key for 999c0c5d399SJerome Forissier better TA isolation. Add build-time and run-time support for multiple storage 1000c0c5d399SJerome Forissier backends. Add SQLite backend. 1001c0c5d399SJerome Forissier 1002c0c5d399SJerome Forissier* Trusted User Interface: some code is introduced to support the implementation 1003c0c5d399SJerome Forissier of TUI. This includes: a generic framebuffer driver, display and serial 1004c0c5d399SJerome Forissier abstractions, and drivers for PL111 (LCD) / PL050 (KMI) / TZC400 and PS2 1005c0c5d399SJerome Forissier mouse. 1006c0c5d399SJerome Forissier 1007c0c5d399SJerome Forissier* AES acceleration using ARMv8-A Cryptographic Extensions instructions is 1008c0c5d399SJerome Forissier now supported in AArch32 mode 1009c0c5d399SJerome Forissier 1010c0c5d399SJerome Forissier* Add support for GCC flags: -fsanitize=undefined and -fsanitize=kernel-address 1011c0c5d399SJerome Forissier 1012c0c5d399SJerome Forissier* Use a global setting for core heap size (CFG_CORE_HEAP_SIZE), 64K by default. 1013c0c5d399SJerome Forissier 1014c0c5d399SJerome Forissier* Add macros to unwind and print the call stack of TEE core 1015c0c5d399SJerome Forissier 1016c0c5d399SJerome Forissier* Libtomcrypt: sync with the latest `develop` branch. 1017c0c5d399SJerome Forissier 1018c0c5d399SJerome Forissier* The Trusted Application SDK (ta_dev_kit.mk) can produce libraries (.a) 1019c0c5d399SJerome Forissier 1020c0c5d399SJerome Forissier* Rework assertions and TEE core panics and properly honor NDEBUG 1021c0c5d399SJerome Forissier 1022c0c5d399SJerome Forissier## Bug fixes 1023c0c5d399SJerome Forissier 1024c0c5d399SJerome Forissier* Fix incorrect algorithm passed to cipher.final() 1025c0c5d399SJerome Forissier 1026c0c5d399SJerome Forissier* scripts: support Python 2.x and 3.x 1027c0c5d399SJerome Forissier 1028c0c5d399SJerome Forissier* Secure storage: Add proper locking to support concurrent access. Fix sign 1029c0c5d399SJerome Forissier extension bug with offset parameter of syscall storage_obj_seek which could 1030c0c5d399SJerome Forissier cause errors in Aarch32 mode. Fix reading beyond end of file. 1031c0c5d399SJerome Forissier 1032c0c5d399SJerome Forissier* Aarch64: mask all maskable exceptions before doing a normal return from call. 1033c0c5d399SJerome Forissier 1034c0c5d399SJerome Forissier* Device Tree: add no-map property to OP-TEE node in reserved-memory. 1035c0c5d399SJerome Forissier 1036c0c5d399SJerome Forissier* LibTomcrypt: fix CVE-2016-6129 1037c0c5d399SJerome Forissier 1038c0c5d399SJerome Forissier## Known issues 1039c0c5d399SJerome Forissier 1040c0c5d399SJerome Forissier* New issues open on GitHub 1041c0c5d399SJerome Forissier * [#1093][issue1093] rcar-h3: xtest 6010 hangs 1042c0c5d399SJerome Forissier * [#1092][issue1092] rcar-h3: xtest 4010 fails 1043c0c5d399SJerome Forissier * [#1081][issue1081] Bad mapping of TA secure memref parameters 1044c0c5d399SJerome Forissier * [#1071][issue1071] __data_end may not correctly represent text start position when using CFG_WITH_PAGER 1045c0c5d399SJerome Forissier * [#1069][issue1069] armv7/Aarch32: crash in stack unwind (DPRINT_STACK()) 1046c0c5d399SJerome Forissier 1047c0c5d399SJerome Forissier## Tested on 1048c0c5d399SJerome Forissier 1049c0c5d399SJerome ForissierIn the list below, _standard_ means that the `xtest` program passed with 1050c0c5d399SJerome Forissierits default configuration, while _extended_ means it was run successfully 1051c0c5d399SJerome Forissierwith the additional GlobalPlatform™ TEE Initial Configuration Test Suite 1052c0c5d399SJerome Forissierv1.1.0.4. 1053c0c5d399SJerome Forissier 1054c0c5d399SJerome ForissierIf a platform is not listed, it means the release was not tested on this 1055c0c5d399SJerome Forissierplatform. 1056c0c5d399SJerome Forissier 1057c0c5d399SJerome Forissier<!-- ${PLATFORM}-${PLATFORM_FLAVOR}, ordered alphabetically --> 1058c0c5d399SJerome Forissier* d02: extended 1059c0c5d399SJerome Forissier* hikey: extended 1060c0c5d399SJerome Forissier* imx-mx6qsabrelite: standard 1061c0c5d399SJerome Forissier* imx-mx6qsabresd: standard 1062c0c5d399SJerome Forissier* rcar-h3: standard, pass except issues [#1092][issue1092] and [#1093][issue1093] 1063c0c5d399SJerome Forissier* rpi3: standard 1064c0c5d399SJerome Forissier* stm-b2260: standard 1065c0c5d399SJerome Forissier* stm-cannes: standard 1066c0c5d399SJerome Forissier* ti-dra7xx: standard 1067c0c5d399SJerome Forissier* vexpress-fvp: standard 1068c0c5d399SJerome Forissier* vexpress-juno: standard 1069c0c5d399SJerome Forissier* vexpress-qemu_armv8a: standard 1070c0c5d399SJerome Forissier* vexpress-qemu_virt: extended 1071c0c5d399SJerome Forissier* zynqmp-zcu102: standard 1072c0c5d399SJerome Forissier 1073c0c5d399SJerome Forissier[github_commits_2_2_0]: https://github.com/OP-TEE/optee_os/compare/2.1.0...2.2.0 1074c0c5d399SJerome Forissier[issue1081]: https://github.com/OP-TEE/optee_os/issues/1081 1075c0c5d399SJerome Forissier[issue1071]: https://github.com/OP-TEE/optee_os/issues/1071 1076c0c5d399SJerome Forissier[issue1069]: https://github.com/OP-TEE/optee_os/issues/1069 1077c0c5d399SJerome Forissier[issue1092]: https://github.com/OP-TEE/optee_os/issues/1092 1078c0c5d399SJerome Forissier[issue1093]: https://github.com/OP-TEE/optee_os/issues/1093 1079c0c5d399SJerome Forissier 1080ac3cc110SPascal Brand# OP-TEE - version 2.1.0 1081a0cd5d60SPascal Brand 1082ac3cc110SPascal Brand## New features 1083ac3cc110SPascal Brand 1084ac3cc110SPascal Brand* New supported platforms: 1085ac3cc110SPascal Brand * Xilinx Zynq UltraScale+ MPSOC 1086ac3cc110SPascal Brand * Spreadtrum SC9860 1087ac3cc110SPascal Brand 1088ac3cc110SPascal Brand* GCC5 support 1089ac3cc110SPascal Brand 1090ac3cc110SPascal Brand* Non Linear Mapping support: In OP-TEE kernel mode, the physical to virtual 1091ac3cc110SPascal Brand addresses was linear until this release, meaning the virtual addresses 1092ac3cc110SPascal Brand were equal to the physical addresses. This is no more the case in this 1093ac3cc110SPascal Brand release. 1094ac3cc110SPascal Brand 1095ac3cc110SPascal Brand* Font rendering routines have been introduced in order to ease an 1096ac3cc110SPascal Brand implementation of Trusted UI. 1097ac3cc110SPascal Brand 1098ac3cc110SPascal Brand* File Storage: Possibility to use the normal world filesystem and the RPMB 1099ac3cc110SPascal Brand implementations simultaneously. 1100ac3cc110SPascal Brand 1101ac3cc110SPascal Brand* AOSP: There is a [local manifest][aosp_local_manifest] to build OP-TEE into an AOSP build, running on HiKey. 1102ac3cc110SPascal Brand Please refer to the README in that repo for instructions. 1103ac3cc110SPascal Brand 1104ac3cc110SPascal Brand* OpenEmbedded: In addition to the makefile-based build described in the optee_os README, there is an 1105ac3cc110SPascal Brand [OpenEmbedded-based build][oe_build] that supports Qemu (32-bit), FVP (64-bit), and HiKey (64-bit). 1106ac3cc110SPascal Brand Please refer to the README in that repo for instructions. 1107ac3cc110SPascal Brand 1108ac3cc110SPascal Brand* [Link][github_commits_2_1_0] to a list of all commits between this and 1109ac3cc110SPascal Brand previous release. 1110ac3cc110SPascal Brand 1111ac3cc110SPascal Brand 1112ac3cc110SPascal Brand## Tested on 1113ac3cc110SPascal BrandDefinitions: 1114ac3cc110SPascal Brand 1115ac3cc110SPascal Brand| Type | Meaning | 1116ac3cc110SPascal Brand| ---- | ------- | 1117ac3cc110SPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1118ac3cc110SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1119ac3cc110SPascal Brand 1120ac3cc110SPascal Brand* ARM Juno Board (vexpress-juno), standard. 1121ac3cc110SPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1122ac3cc110SPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 10.0.37) 1123ac3cc110SPascal Brand* FSL i.MX6 UltraLite EVK (imx), standard. 1124ac3cc110SPascal Brand* FSL ls1021a (ls-ls1021atwr), standard tests. 1125ac3cc110SPascal Brand* HiKey (hikey), standard + extended tests. 1126ac3cc110SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1127ac3cc110SPascal Brand* Xilinx Zynq UltraScale+ MPSOC, standard tests 1128ac3cc110SPascal Brand 1129ac3cc110SPascal BrandNote that the following platform has not been tested: 1130ac3cc110SPascal Brand* MTK8173-EVB (mediatek-mt8173) 1131ac3cc110SPascal Brand 1132ac3cc110SPascal Brand 1133ac3cc110SPascal Brand## Known issues 1134ac3cc110SPascal Brand* Issue(s) open on GitHub 1135ac3cc110SPascal Brand * [#868][pr868]: python-wand font generation sometimes times out 1136ac3cc110SPascal Brand * [#863][pr863]: "double free or corruption" error when building optee_os 1137ac3cc110SPascal Brand * [#858][pr858]: UUIDs in binary format have wrong endinanness 1138ac3cc110SPascal Brand * [#857][pr857]: Formatting of UUIDs is incorrect 1139ac3cc110SPascal Brand * [#847][pr847]: optee_os panic(TEE-CORE: Assertion) 1140ac3cc110SPascal Brand * [#838][pr838]: TUI font rendering is _very_ slow 1141ac3cc110SPascal Brand * [#814][pr814]: Persistent objects : save informations after close 1142ac3cc110SPascal Brand * [#665][pr665]: xtest 1013 stalled on HiKey when log levels are 4 and optee_os is on its own UART 1143ac3cc110SPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1144ac3cc110SPascal Brand 1145ac3cc110SPascal Brand[github_commits_2_1_0]: https://github.com/OP-TEE/optee_os/compare/2.0.0...2.1.0 1146ac3cc110SPascal Brand[pr868]: https://github.com/OP-TEE/optee_os/issues/868 1147ac3cc110SPascal Brand[pr863]: https://github.com/OP-TEE/optee_os/issues/863 1148ac3cc110SPascal Brand[pr858]: https://github.com/OP-TEE/optee_os/issues/858 1149ac3cc110SPascal Brand[pr857]: https://github.com/OP-TEE/optee_os/issues/857 1150ac3cc110SPascal Brand[pr847]: https://github.com/OP-TEE/optee_os/issues/847 1151ac3cc110SPascal Brand[pr838]: https://github.com/OP-TEE/optee_os/issues/838 1152ac3cc110SPascal Brand[pr814]: https://github.com/OP-TEE/optee_os/issues/814 1153ac3cc110SPascal Brand[pr665]: https://github.com/OP-TEE/optee_os/issues/665 1154ac3cc110SPascal Brand[aosp_local_manifest]: https://github.com/linaro-swg/optee_android_manifest 1155ac3cc110SPascal Brand[oe_build]: https://github.com/linaro-swg/oe-optee 1156ac3cc110SPascal Brand 1157ac3cc110SPascal Brand# OP-TEE - version 2.0.0 1158a0cd5d60SPascal Brand 1159a0cd5d60SPascal Brand## New features 1160a0cd5d60SPascal Brand 1161a0cd5d60SPascal Brand* Generic driver: A new generic TEE driver is in the process of being 1162a0cd5d60SPascal Brand [upstreamed][gendrv_v9]. 1163a0cd5d60SPascal Brand In this release, [OP-TEE/optee_linuxdriver][optee_linuxdriver] is no more used. 1164a0cd5d60SPascal Brand Instead, linux v4.5 is being patched using the proposed Generic TEE Driver, 1165a0cd5d60SPascal Brand as it can be found in [https://github.com/linaro-swg/linux/tree/optee][linux_optee] 1166a0cd5d60SPascal Brand 1167a0cd5d60SPascal Brand* RPMB support: Secure Storage can now use Replay Protected Memory Block (RPMB) partition 1168a0cd5d60SPascal Brand of an eMMC device. Check the [full documentation][rpmb_doc] 1169a0cd5d60SPascal Brand 1170a0cd5d60SPascal Brand* Hard-float ABI is now available. 1171a0cd5d60SPascal Brand 1172a0cd5d60SPascal Brand* [Link][github_commits_2_0_0] to a list of all commits between this and 1173a0cd5d60SPascal Brand previous release. 1174a0cd5d60SPascal Brand 1175a0cd5d60SPascal Brand 1176a0cd5d60SPascal Brand## Tested on 1177a0cd5d60SPascal BrandDefinitions: 1178a0cd5d60SPascal Brand 1179a0cd5d60SPascal Brand| Type | Meaning | 1180a0cd5d60SPascal Brand| ---- | ------- | 1181a0cd5d60SPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1182a0cd5d60SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1183a0cd5d60SPascal Brand 1184a0cd5d60SPascal Brand* ARM Juno Board (vexpress-juno), standard. 1185a0cd5d60SPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1186a0cd5d60SPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 9.5.40) 1187eb00c7b9SPascal Brand* FSL ls1021a (ls-ls1021atwr), standard. 1188a0cd5d60SPascal Brand* HiKey (hikey), standard. 1189a0cd5d60SPascal Brand* MTK8173-EVB (mediatek-mt8173), standard. 1190a0cd5d60SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1191a0cd5d60SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1192a0cd5d60SPascal Brand 1193a0cd5d60SPascal Brand## Known issues 1194a0cd5d60SPascal Brand* Issue(s) open on GitHub 1195a0cd5d60SPascal Brand * [#40][prld40] BUG_ON() when re-using RPC buffer to tee-supplicant 1196a0cd5d60SPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1197a0cd5d60SPascal Brand 1198a0cd5d60SPascal Brand[github_commits_2_0_0]: https://github.com/OP-TEE/optee_os/compare/1.1.0...2.0.0 1199a0cd5d60SPascal Brand[rpmb_doc]: https://github.com/OP-TEE/optee_os/blob/master/documentation/secure_storage_rpmb.md 1200a0cd5d60SPascal Brand[optee_linuxdriver]: https://github.com/OP-TEE/optee_linuxdriver 1201a0cd5d60SPascal Brand[gendrv_v9]: https://lkml.org/lkml/2016/4/1/205 1202a0cd5d60SPascal Brand[linux_optee]: https://github.com/linaro-swg/linux/tree/optee 1203a0cd5d60SPascal Brand 1204a0cd5d60SPascal Brand 1205c5bbfb4dSPascal Brand# OP-TEE - version 1.1.0 1206c5bbfb4dSPascal Brand 1207c5bbfb4dSPascal Brand 1208c5bbfb4dSPascal Brand## New features 1209c5bbfb4dSPascal Brand 1210c5bbfb4dSPascal Brand* Softfloat library: floating point support is now available in 32bits TA. 1211c5bbfb4dSPascal Brand 1212c5bbfb4dSPascal Brand* Support running 64-bits TA: on ARMv8-A platform, TA can be compiled in 1213c5bbfb4dSPascal Brand AArch32 and/or in AArch64 in case the core is compiled in AArch64. 1214c5bbfb4dSPascal Brand An example can be found in HiKey configuration file. Using the following 1215c5bbfb4dSPascal Brand excerpt code, the user TA libraries are compiled in both AArch32 and 1216c5bbfb4dSPascal Brand AArch64, and can be found in `out/arm-plat-hikey/export-ta_arm32` and 1217c5bbfb4dSPascal Brand `out/arm-plat-hikey/export-ta_arm64` 1218c5bbfb4dSPascal Brand 1219c5bbfb4dSPascal Brand``` 1220c5bbfb4dSPascal Brand ta-targets = ta_arm32 1221c5bbfb4dSPascal Brand ta-targets += ta_arm64 1222c5bbfb4dSPascal Brand``` 1223c5bbfb4dSPascal Brand 1224c5bbfb4dSPascal Brand* Concurrent TA support: multiple TA can run in parallel on 1225c5bbfb4dSPascal Brand several cores. 1226c5bbfb4dSPascal Brand 1227c5bbfb4dSPascal Brand* New tests added in xtest test suite: concurrent TA (xtest 1013), 1228c5bbfb4dSPascal Brand floating point tests (xtest 1006 and os_test TA) and corruption 1229c5bbfb4dSPascal Brand file storage (xtest 20000) 1230c5bbfb4dSPascal Brand 1231c5bbfb4dSPascal Brand* [Link][github_commits_1_1_0] to a list of all commits between this and 1232c5bbfb4dSPascal Brand previous release. 1233c5bbfb4dSPascal Brand 1234c5bbfb4dSPascal Brand 1235c5bbfb4dSPascal Brand## Tested on 1236c5bbfb4dSPascal BrandDefinitions: 1237c5bbfb4dSPascal Brand 1238c5bbfb4dSPascal Brand| Type | Meaning | 1239c5bbfb4dSPascal Brand| ---- | ------- | 1240c5bbfb4dSPascal Brand| Standard tests | The [optee_test][optee_test] project. | 1241c5bbfb4dSPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1242c5bbfb4dSPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1243c5bbfb4dSPascal Brand 1244c5bbfb4dSPascal Brand* Foundation Models (vexpress-fvp), standard tests + extended tests, 1245c5bbfb4dSPascal Brand using FVP ARM V8 Foundation Platformr0p0 (platform build 9.5.40) 1246c5bbfb4dSPascal Brand* HiKey (hikey), standard + extended tests. 1247c5bbfb4dSPascal Brand* MT8173 (mediatek), standard tests. 1248c5bbfb4dSPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1249c5bbfb4dSPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1250c5bbfb4dSPascal Brand 1251c5bbfb4dSPascal Brand## Known issues 1252c5bbfb4dSPascal Brand* Secure Storage is implemented, but note that anti-rollback protection 1253c5bbfb4dSPascal Brand is not implemented yet. 1254c5bbfb4dSPascal Brand 1255c5bbfb4dSPascal Brand* Issue(s) open on GitHub 1256c5bbfb4dSPascal Brand * [#40][prld40] BUG_ON() when re-using RPC buffer to tee-supplicant 1257c5bbfb4dSPascal Brand * [#296][pr296]: Connecting RPMB to the storage APIs. 1258c5bbfb4dSPascal Brand * [#493][pr493]: setup_juno_optee: unable to find pre-built binaries 1259c5bbfb4dSPascal Brand * [#506][pr506]: tee-supplicant panic & ta panic 1260c5bbfb4dSPascal Brand 1261c5bbfb4dSPascal Brand[prld40]: https://github.com/OP-TEE/optee_linuxdriver/issues/40 1262c5bbfb4dSPascal Brand[pr506]: https://github.com/OP-TEE/optee_os/issues/506 1263c5bbfb4dSPascal Brand[github_commits_1_1_0]: https://github.com/OP-TEE/optee_os/compare/1.0.1...1.1.0 1264c5bbfb4dSPascal Brand 1265c5bbfb4dSPascal Brand 1266c5bbfb4dSPascal Brand 12678a7ee79dSPascal Brand# OP-TEE - version 1.0.0 12688a7ee79dSPascal Brand 12698a7ee79dSPascal BrandOP-TEE is now maintained by Linaro. Contributors do not need to 12708a7ee79dSPascal Brandsign a CLA anymore, but must follow the rules of the [DCO][DCO] 12718a7ee79dSPascal Brand(Developer Certificate of Origin) instead. 12728a7ee79dSPascal Brand 12738a7ee79dSPascal Brand 12748a7ee79dSPascal Brand## New features 12758a7ee79dSPascal Brand 12768a7ee79dSPascal Brand* Add hardware support for Texas Instruments DRA7xx, ARMv7 (plat-ti) 12778a7ee79dSPascal Brand 12788a7ee79dSPascal Brand* GlobalPlatform™ TEE Internal Core API Specification v1.1, 12798a7ee79dSPascal Brand including ECC algorithms. 12808a7ee79dSPascal Brand 12818a7ee79dSPascal Brand* Secure Storage: Files stored by the REE are now encrypted. Operations 12828a7ee79dSPascal Brand are made atomic in order to prevent inconsistencies in case of errors 12838a7ee79dSPascal Brand during the storage operations. [Slides][LCStorage] describing the 12848a7ee79dSPascal Brand Secure Storage have been presented at the Linaro Connect SFO15. 12858a7ee79dSPascal Brand 12868a7ee79dSPascal Brand* Change of format of the Trusted Applications: they follow a 12878a7ee79dSPascal Brand [signed ELF format][elf] 12888a7ee79dSPascal Brand 12898a7ee79dSPascal Brand* Rework thread [synchronization][synchro] in optee_os. 12908a7ee79dSPascal Brand 12918a7ee79dSPascal Brand* Use of ARMv8 native cryptographic support. 12928a7ee79dSPascal Brand 12938a7ee79dSPascal Brand* [OP-TEE/optee_test][optee_test] test suite is released. 12948a7ee79dSPascal Brand 12958a7ee79dSPascal Brand* Introduce [OP-TEE/manifest][manifest] and [OP-TEE/build][build] 12968a7ee79dSPascal Brand to setup and build QEMU, FVP, HiKey and Mediatek platforms. Setup scripts 12978a7ee79dSPascal Brand that used to be in optee_os have been removed, except for Juno board. 12988a7ee79dSPascal Brand 129995422146SPascal Brand* [Link][github_commits_1_0_0] to a list of all commits between this and 130095422146SPascal Brand previous release. 130195422146SPascal Brand 13028a7ee79dSPascal Brand 13038a7ee79dSPascal Brand## Tested on 13048a7ee79dSPascal BrandDefinitions: 13058a7ee79dSPascal Brand 13068a7ee79dSPascal Brand| Type | Meaning | 13078a7ee79dSPascal Brand| ---- | ------- | 13088a7ee79dSPascal Brand| Standard tests | The [optee_test][optee_test] project. | 13098a7ee79dSPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 13108a7ee79dSPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 13118a7ee79dSPascal Brand 13128a7ee79dSPascal Brand* ARM Juno Board (vexpress-juno), standard + extended tests. 13138a7ee79dSPascal Brand* Foundation Models (vexpress-fvp), standard tests. 13148a7ee79dSPascal Brand* HiKey (hikey), standard + extended tests. 13158a7ee79dSPascal Brand* MT8173 (mediatek), standard tests. 13168a7ee79dSPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 13178a7ee79dSPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 13188a7ee79dSPascal Brand 131995422146SPascal Brand## Known issues 132095422146SPascal Brand* Secure Storage is implemented, but note that anti-rollback protection 132195422146SPascal Brand is not implemented yet. 132295422146SPascal Brand 132395422146SPascal Brand* Issue(s) open on GitHub 132495422146SPascal Brand * [#210][pr210]: libteec.so 32-bit does not communicate well 132595422146SPascal Brand with 64-bit kernel module 132695422146SPascal Brand * [#296][pr296]: Connecting RPMB to the storage APIs. 132795422146SPascal Brand * [#493][pr493]: setup_juno_optee: unable to find pre-built binaries 132895422146SPascal Brand * [#494][pr494]: HiKey: xtest 7671 fails (1.0.0-rc2) 132995422146SPascal Brand 133095422146SPascal Brand[pr210]: https://github.com/OP-TEE/optee_os/issues/210 133195422146SPascal Brand[pr296]: https://github.com/OP-TEE/optee_os/issues/296 133295422146SPascal Brand[pr493]: https://github.com/OP-TEE/optee_os/issues/493 133395422146SPascal Brand[pr494]: https://github.com/OP-TEE/optee_os/issues/494 133495422146SPascal Brand[github_commits_1_0_0]: https://github.com/OP-TEE/optee_os/compare/0.3.0...1.0.0 13358a7ee79dSPascal Brand[DCO]: https://github.com/OP-TEE/optee_os/blob/master/Notice.md#contributions 13368a7ee79dSPascal Brand[LCStorage]: http://www.slideshare.net/linaroorg/sfo15503-secure-storage-in-optee 13378a7ee79dSPascal Brand[synchro]: https://github.com/OP-TEE/optee_os/blob/master/documentation/optee_design.md#4-thread-handling 13388a7ee79dSPascal Brand[elf]: https://github.com/OP-TEE/optee_os/blob/master/documentation/optee_design.md#format 13398a7ee79dSPascal Brand[optee_test]: https://github.com/OP-TEE/optee_test 13408a7ee79dSPascal Brand[manifest]: https://github.com/OP-TEE/manifest 13418a7ee79dSPascal Brand[build]: https://github.com/OP-TEE/build 13428a7ee79dSPascal Brand 134395422146SPascal Brand 134495422146SPascal Brand 134511d59085SPascal Brand# OP-TEE - version 0.3.0 134611d59085SPascal Brand 134711d59085SPascal Brand## New features 134811d59085SPascal Brand 134911d59085SPascal Brand* Add hardware support for 135011d59085SPascal Brand * Mediatek MT8173 Board, ARMv8-A (plat-mediatek) 135111d59085SPascal Brand * Hisilicon HiKey Board, ARMv8-A (plat-hikey) 135211d59085SPascal Brand* AArch64 build of optee_os is now possible through the configuration `CFG_ARM64_core=y` 135311d59085SPascal Brand* Secure Storage: Data can be encrypted prior to their storage in the non-secure. 135411d59085SPascal Brand Build is configured using `CFG_ENC_FS=y` 135511d59085SPascal Brand* A generic boot scheme can be used. Boot configuration is commonalized. This helps 135611d59085SPascal Brand new board support. It is applied on plat-hikey, plat-vexpress, plat-mediatek, plat-stm 135711d59085SPascal Brand and plat-vexpress. 135811d59085SPascal Brand 135911d59085SPascal Brand## Tested on 136011d59085SPascal BrandDefinitions: 136111d59085SPascal Brand 136211d59085SPascal Brand| Type | Meaning | 136311d59085SPascal Brand| ---- | ------- | 136411d59085SPascal Brand| Standard tests | The optee_test project. | 136511d59085SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 136611d59085SPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 136711d59085SPascal Brand 136811d59085SPascal Brand* ARM Juno Board (vexpress-juno), standard tests. 136911d59085SPascal Brand* Foundation Models (vexpress-fvp), standard tests. 137011d59085SPascal Brand* HiKey (hikey), standard tests. 137111d59085SPascal Brand* MT8173 (mediatek), standard tests. 137211d59085SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 137311d59085SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 137411d59085SPascal Brand 137511d59085SPascal Brand------------------------------------------- 137611d59085SPascal Brand 1377f5117af2SPascal Brand# OP-TEE - version 0.2.0 1378759cc499SJoakim Bech 1379f5117af2SPascal Brand## New features 1380f5117af2SPascal Brand 1381f5117af2SPascal Brand### Linux Driver Refactoring 1382f5117af2SPascal Brand 1383f5117af2SPascal BrandLinux Driver has been refactored. It is now split in two parts: 1384f5117af2SPascal Brand* optee.ko, the generic Linux driver. It contains all functionality 1385f5117af2SPascal Brand common to all backends. 1386f5117af2SPascal Brand* optee_armtz.ko, a specific backend dedicated to the TrustZone optee. 1387f5117af2SPascal Brand It depends on optee.ko. 1388f5117af2SPascal Brand 1389f5117af2SPascal BrandLoading the TrustZone optee linux driver module is now performed using 1390f5117af2SPascal Brand 1391f5117af2SPascal Brand modprobe optee_armtz 1392f5117af2SPascal Brand 1393f5117af2SPascal BrandThanks to the dependency between the generic and the backend modules, optee.ko is then automatically loaded. 1394f5117af2SPascal Brand 1395f5117af2SPascal Brand### Misc new features 1396f5117af2SPascal Brand* support PL310 lock down at TEE boot 1397f5117af2SPascal Brand* add 64bits support (division / print) 1398f5117af2SPascal Brand 1399f5117af2SPascal Brand## Tested on 1400f5117af2SPascal BrandDefinitions: 1401f5117af2SPascal Brand 1402f5117af2SPascal Brand| Type | Meaning | 1403f5117af2SPascal Brand| ---- | ------- | 1404f5117af2SPascal Brand| Standard tests | The optee_test project. | 1405f5117af2SPascal Brand| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.1.0.4. | 1406f5117af2SPascal Brand| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1407f5117af2SPascal Brand 1408f5117af2SPascal Brand* ARM Juno Board (vexpress-juno), standard tests + extended tests. 1409f5117af2SPascal Brand 1410f5117af2SPascal Brand* Foundation Models (vexpress-fvp), standard + extended tests. 1411f5117af2SPascal Brand 1412f5117af2SPascal Brand* QEMU (vexpress-qemu), standard + extended tests. 1413f5117af2SPascal Brand 1414f5117af2SPascal Brand* STM Cannes (stm-cannes), standard + extended tests. 1415f5117af2SPascal Brand 1416f5117af2SPascal Brand 141728fcee17SJerome Forissier## Issues resolved since last release 1418f5117af2SPascal Brand* Fix user TA trace issue, in order each TA is able to select its own trace level 1419f5117af2SPascal Brand 1420f5117af2SPascal Brand 1421f5117af2SPascal Brand------------------------------------------- 1422f5117af2SPascal Brand# OP-TEE - version 0.1.0 1423f5117af2SPascal Brand 1424f5117af2SPascal Brand## New features 1425759cc499SJoakim BechBelow is a summary of the most important features added, but at the end you will 1426759cc499SJoakim Bechfind a link that present you all commits between the current and previous 1427759cc499SJoakim Bechrelease tag. 1428759cc499SJoakim Bech 1429759cc499SJoakim Bech* GlobalPlatform Client API v1.0 support. 1430759cc499SJoakim Bech 1431759cc499SJoakim Bech* GlobalPlatform Internal API v1.0 support. 1432759cc499SJoakim Bech 1433759cc499SJoakim Bech* GlobalPlatform Secure Elements v1.0 support. 1434759cc499SJoakim Bech 1435759cc499SJoakim Bech* Add hardware support for 1436759cc499SJoakim Bech 1437759cc499SJoakim Bech * Allwinner A80, ARMv7-A. 1438759cc499SJoakim Bech 1439759cc499SJoakim Bech * ARM Juno Board, ARMv8-A. 1440759cc499SJoakim Bech 1441759cc499SJoakim Bech * Foundation Models, ARMv8-A. 1442759cc499SJoakim Bech 1443759cc499SJoakim Bech * Fast Models, ARMv8-A. 1444759cc499SJoakim Bech 1445759cc499SJoakim Bech * QEMU, ARMv7-A. 1446759cc499SJoakim Bech 1447759cc499SJoakim Bech * STM Cannes, ARMv7-A. 1448759cc499SJoakim Bech 1449759cc499SJoakim Bech * STM Orly2, ARMv7-A. 1450759cc499SJoakim Bech 1451759cc499SJoakim Bech* Add LibTomCrypt as the default software cryptographic library. 1452759cc499SJoakim Bech 1453759cc499SJoakim Bech* Add cryptographic abstraction layer in on secure side to ease the use of 1454759cc499SJoakim Bech other cryptographic software libraries or adding support for hardware 1455759cc499SJoakim Bech acceleration. 1456759cc499SJoakim Bech 1457759cc499SJoakim Bech* Extended cryptographic API with support for HKDF, Concat KDF and PBKDF2. 1458759cc499SJoakim Bech 1459759cc499SJoakim Bech* SHA-1 and SHA-256 ARMv8-A crypto extension implementation. 1460759cc499SJoakim Bech 1461759cc499SJoakim Bech* Enabled paging support in OP-TEE OS. 1462759cc499SJoakim Bech 1463759cc499SJoakim Bech* Add support for xtest (both standard and extended) in QEMU and FVP setup 1464759cc499SJoakim Bech scripts. 1465759cc499SJoakim Bech 1466759cc499SJoakim Bech* Add documentation for the OS design, cryptographic abstraction layer, secure 1467759cc499SJoakim Bech elements design, the build system, GitHub usage, key derivation extensions, 1468759cc499SJoakim Bech ARM-Trusted Firmware usage within OP-TEE and GlobalPlatform usage within 1469759cc499SJoakim Bech OP-TEE. 1470759cc499SJoakim Bech 1471759cc499SJoakim Bech* Integrate support for Travis CI. 1472759cc499SJoakim Bech 1473759cc499SJoakim Bech* [Link][github_commits_0_1_0] to a list of all commits between this and 1474759cc499SJoakim Bech previous release. 1475759cc499SJoakim Bech 1476759cc499SJoakim Bech 1477f5117af2SPascal Brand## Tested on 1478759cc499SJoakim BechDefinitions: 1479759cc499SJoakim Bech 1480759cc499SJoakim Bech| Type | Meaning | 1481759cc499SJoakim Bech| ---- | ------- | 1482759cc499SJoakim Bech| Standard tests | The optee_test project. | 1483759cc499SJoakim Bech| Extended tests | optee_test with tests from the GlobalPlatform™ TEE Initial Configuration Test Suite v1.0.0. | 1484759cc499SJoakim Bech| Hello world test | Plain hello world Trusted Application such as [this][hello_world]. | 1485759cc499SJoakim Bech 1486759cc499SJoakim Bech* Allwinner A80 (plat-sunxi), hello world test. 1487759cc499SJoakim Bech 1488759cc499SJoakim Bech* ARM Juno Board (vexpress-juno), standard tests. 1489759cc499SJoakim Bech 1490759cc499SJoakim Bech* Foundation Models (plat-vexpress-fvp), standard + extended tests 1491759cc499SJoakim Bech 1492759cc499SJoakim Bech* QEMU (plat-vexpress-qemu), standard + extended tests (and Secure Elements 1493759cc499SJoakim Bech tested separately). 1494759cc499SJoakim Bech 1495759cc499SJoakim Bech* STM Cannes (plat-stm-cannes), standard + extended tests. 1496759cc499SJoakim Bech 1497759cc499SJoakim Bech 149828fcee17SJerome Forissier## Issues resolved since last release 1499759cc499SJoakim BechN/A since this is the first release tag on OP-TEE. 1500759cc499SJoakim Bech 1501759cc499SJoakim Bech 1502f5117af2SPascal Brand## Known issues 1503759cc499SJoakim Bech* Storage is implemented, but not "Secure storage", meaning that a client 1504759cc499SJoakim Bech needs to do encrypt files on their own before storing the files. 1505759cc499SJoakim Bech 1506759cc499SJoakim Bech* Issue(s) open on GitHub 1507759cc499SJoakim Bech * [#95][pr95]: An error about building the test code of libtomcrypt. 1508759cc499SJoakim Bech 1509759cc499SJoakim Bech * [#149][pr149]: when testing optee os with arm trusted firmware (I 1510759cc499SJoakim Bech utilized optee os tee.bin as bl32 image) on juno platform, I got an 1511759cc499SJoakim Bech error. 1512759cc499SJoakim Bech 1513759cc499SJoakim Bech * [#161][pr161]: tee_svc_cryp.c lacks accessibility checks on 1514759cc499SJoakim Bech user-supplied TEE_Attributes. 1515759cc499SJoakim Bech 1516759cc499SJoakim Bech[hello_world]: https://github.com/jenswi-linaro/lcu14_optee_hello_world 1517759cc499SJoakim Bech[github_commits_0_1_0]: https://github.com/OP-TEE/optee_os/compare/b01047730e77127c23a36591643eeb8bb0487d68...999e4a6c0f64d3177fd3d0db234107b6fb860884 1518759cc499SJoakim Bech[pr95]: https://github.com/OP-TEE/optee_os/issues/95 1519759cc499SJoakim Bech[pr149]: https://github.com/OP-TEE/optee_os/issues/149 1520759cc499SJoakim Bech[pr161]: https://github.com/OP-TEE/optee_os/issues/161 1521759cc499SJoakim Bech 15227583c59eSCedric Chaumont* Global Platform Device Internal Core API v1.1 15237583c59eSCedric Chaumont * [#230][pr230]: Persistent object corruption support (TEE_ERROR_CORRUPT_OBJECT/_2) 15247583c59eSCedric Chaumont * [#230][pr230]: Persistent object access support (TEE_ERROR_STORAGE_NOT_AVAILABLE/_2) 1525