1# 1GB and 512MB DDR targets do not locate secure DDR at the same place. 2flavor_dts_file-157A_DHCOR_AVENGER96 = stm32mp157a-dhcor-avenger96.dts 3flavor_dts_file-157A_DK1 = stm32mp157a-dk1.dts 4flavor_dts_file-157C_DHCOM_PDK2 = stm32mp157c-dhcom-pdk2.dts 5flavor_dts_file-157C_DK2 = stm32mp157c-dk2.dts 6flavor_dts_file-157C_ED1 = stm32mp157c-ed1.dts 7flavor_dts_file-157C_EV1 = stm32mp157c-ev1.dts 8 9flavor_dts_file-135F_DK = stm32mp135f-dk.dts 10 11flavorlist-cryp-512M = $(flavor_dts_file-157C_DK2) \ 12 $(flavor_dts_file-135F_DK) 13 14flavorlist-no_cryp-512M = $(flavor_dts_file-157A_DK1) 15 16flavorlist-cryp-1G = $(flavor_dts_file-157C_DHCOM_PDK2) \ 17 $(flavor_dts_file-157C_ED1) \ 18 $(flavor_dts_file-157C_EV1) 19 20flavorlist-no_cryp-1G = $(flavor_dts_file-157A_DHCOR_AVENGER96) 21 22flavorlist-no_cryp = $(flavorlist-no_cryp-512M) \ 23 $(flavorlist-no_cryp-1G) 24 25flavorlist-512M = $(flavorlist-cryp-512M) \ 26 $(flavorlist-no_cryp-512M) 27 28flavorlist-1G = $(flavorlist-cryp-1G) \ 29 $(flavorlist-no_cryp-1G) 30 31flavorlist-MP15-HUK-DT = $(flavor_dts_file-157A_DK1) \ 32 $(flavor_dts_file-157C_DK2) \ 33 $(flavor_dts_file-157C_ED1) \ 34 $(flavor_dts_file-157C_EV1) 35 36flavorlist-MP15 = $(flavor_dts_file-157A_DHCOR_AVENGER96) \ 37 $(flavor_dts_file-157A_DK1) \ 38 $(flavor_dts_file-157C_DHCOM_PDK2) \ 39 $(flavor_dts_file-157C_DK2) \ 40 $(flavor_dts_file-157C_ED1) \ 41 $(flavor_dts_file-157C_EV1) 42 43flavorlist-MP13 = $(flavor_dts_file-135F_DK) 44 45ifneq ($(PLATFORM_FLAVOR),) 46ifeq ($(flavor_dts_file-$(PLATFORM_FLAVOR)),) 47$(error Invalid platform flavor $(PLATFORM_FLAVOR)) 48endif 49CFG_EMBED_DTB_SOURCE_FILE ?= $(flavor_dts_file-$(PLATFORM_FLAVOR)) 50endif 51CFG_EMBED_DTB_SOURCE_FILE ?= stm32mp157c-dk2.dts 52 53ifneq ($(filter $(CFG_EMBED_DTB_SOURCE_FILE),$(flavorlist-no_cryp)),) 54$(call force,CFG_STM32_CRYP,n) 55$(call force,CFG_STM32_SAES,n) 56endif 57 58ifneq ($(filter $(CFG_EMBED_DTB_SOURCE_FILE),$(flavorlist-no_rng)),) 59$(call force,CFG_HWRNG_PTA,n) 60$(call force,CFG_WITH_SOFTWARE_PRNG,y) 61endif 62 63ifneq ($(filter $(CFG_EMBED_DTB_SOURCE_FILE),$(flavorlist-MP15-HUK-DT)),) 64CFG_STM32MP15_HUK ?= y 65CFG_STM32_HUK_FROM_DT ?= y 66endif 67 68ifneq ($(filter $(CFG_EMBED_DTB_SOURCE_FILE),$(flavorlist-MP13)),) 69$(call force,CFG_STM32MP13,y) 70endif 71 72ifneq ($(filter $(CFG_EMBED_DTB_SOURCE_FILE),$(flavorlist-MP15)),) 73$(call force,CFG_STM32MP15,y) 74endif 75 76# CFG_STM32MP1x switches are exclusive. 77# - CFG_STM32MP15 is enabled for STM32MP15x-* targets (default) 78# - CFG_STM32MP13 is enabled for STM32MP13x-* targets 79ifeq ($(CFG_STM32MP13),y) 80$(call force,CFG_STM32MP15,n) 81else 82$(call force,CFG_STM32MP15,y) 83$(call force,CFG_STM32MP13,n) 84endif 85ifeq ($(call cfg-one-enabled,CFG_STM32MP15 CFG_STM32MP13),n) 86$(error One of CFG_STM32MP15 CFG_STM32MP13 must be enabled) 87endif 88ifeq ($(call cfg-all-enabled,CFG_STM32MP15 CFG_STM32MP13),y) 89$(error Only one of CFG_STM32MP15 CFG_STM32MP13 must be enabled) 90endif 91 92include core/arch/arm/cpu/cortex-a7.mk 93 94$(call force,CFG_DRIVERS_CLK,y) 95$(call force,CFG_DRIVERS_CLK_DT,y) 96$(call force,CFG_DRIVERS_GPIO,y) 97$(call force,CFG_DRIVERS_PINCTRL,y) 98$(call force,CFG_DRIVERS_REGULATOR,y) 99$(call force,CFG_GIC,y) 100$(call force,CFG_INIT_CNTVOFF,y) 101$(call force,CFG_PSCI_ARM32,y) 102$(call force,CFG_REGULATOR_FIXED,y) 103$(call force,CFG_SECURE_TIME_SOURCE_CNTPCT,y) 104$(call force,CFG_SM_PLATFORM_HANDLER,y) 105$(call force,CFG_STM32_SHARED_IO,y) 106 107ifeq ($(CFG_STM32MP13),y) 108$(call force,CFG_BOOT_SECONDARY_REQUEST,n) 109$(call force,CFG_CORE_ASYNC_NOTIF,y) 110$(call force,CFG_CORE_ASYNC_NOTIF_GIC_INTID,31) 111$(call force,CFG_CORE_RESERVED_SHM,n) 112$(call force,CFG_DRIVERS_CLK_FIXED,y) 113$(call force,CFG_SECONDARY_INIT_CNTFRQ,n) 114$(call force,CFG_STM32_GPIO,y) 115$(call force,CFG_STM32_VREFBUF,y) 116$(call force,CFG_STM32MP_CLK_CORE,y) 117$(call force,CFG_STM32MP1_SHARED_RESOURCES,n) 118$(call force,CFG_STM32MP13_CLK,y) 119$(call force,CFG_STM32MP13_REGULATOR_IOD,y) 120$(call force,CFG_TEE_CORE_NB_CORE,1) 121$(call force,CFG_WITH_NSEC_GPIOS,n) 122CFG_EXTERNAL_DT ?= n 123CFG_STM32MP_OPP_COUNT ?= 2 124CFG_WITH_PAGER ?= n 125endif # CFG_STM32MP13 126 127ifeq ($(CFG_STM32MP15),y) 128$(call force,CFG_BOOT_SECONDARY_REQUEST,y) 129$(call force,CFG_DRIVERS_CLK_FIXED,n) 130$(call force,CFG_HALT_CORES_ON_PANIC_SGI,15) 131$(call force,CFG_SECONDARY_INIT_CNTFRQ,y) 132$(call force,CFG_STM32MP1_SHARED_RESOURCES,y) 133$(call force,CFG_STM32_SAES,n) 134$(call force,CFG_STM32MP15_CLK,y) 135CFG_CORE_RESERVED_SHM ?= n 136CFG_HALT_CORES_ON_PANIC ?= y 137CFG_EXTERNAL_DT ?= y 138CFG_STM32_BSEC_SIP ?= y 139CFG_TEE_CORE_NB_CORE ?= 2 140CFG_WITH_PAGER ?= y 141CFG_WITH_SOFTWARE_PRNG ?= y 142endif # CFG_STM32MP15 143 144ifeq ($(CFG_WITH_PAGER),y) 145CFG_WITH_LPAE ?= n 146endif 147CFG_WITH_LPAE ?= y 148CFG_MMAP_REGIONS ?= 23 149CFG_DTB_MAX_SIZE ?= (256 * 1024) 150CFG_CORE_ASLR ?= n 151 152CFG_STM32MP_REMOTEPROC ?= n 153CFG_DRIVERS_REMOTEPROC ?= $(CFG_STM32MP_REMOTEPROC) 154CFG_REMOTEPROC_PTA ?= $(CFG_STM32MP_REMOTEPROC) 155ifeq ($(CFG_REMOTEPROC_PTA),y) 156# Remoteproc early TA for coprocessor firmware management in boot stages 157CFG_IN_TREE_EARLY_TAS += remoteproc/80a4c275-0a47-4905-8285-1486a9771a08 158# Embed public part of this key in OP-TEE OS 159RPROC_SIGN_KEY ?= keys/default.pem 160endif 161 162ifneq ($(CFG_WITH_LPAE),y) 163# Without LPAE, default TEE virtual address range is 1MB, we need at least 2MB. 164CFG_TEE_RAM_VA_SIZE ?= 0x00200000 165endif 166 167ifneq ($(filter $(CFG_EMBED_DTB_SOURCE_FILE),$(flavorlist-512M)),) 168CFG_TZDRAM_START ?= 0xde000000 169CFG_DRAM_SIZE ?= 0x20000000 170endif 171 172CFG_DRAM_BASE ?= 0xc0000000 173CFG_DRAM_SIZE ?= 0x40000000 174 175# CFG_STM32MP1_SCMI_SHM_BASE and CFG_STM32MP1_SCMI_SHM_SIZE define the 176# device memory mapped SRAM used for SCMI message transfers. 177# When CFG_STM32MP1_SCMI_SHM_BASE is set to 0, the platform uses OP-TEE 178# native shared memory for SCMI communication instead of SRAM. 179# 180# When CFG_STM32MP1_SCMI_SHM_SYSRAM is enabled, OP-TEE uses the 181# last 4KB page of SYSRAM as SCMI shared memory. The switch is default 182# disabled. 183CFG_STM32MP1_SCMI_SHM_SYSRAM ?= n 184ifeq ($(CFG_STM32MP1_SCMI_SHM_SYSRAM),y) 185$(call force,CFG_STM32MP1_SCMI_SHM_BASE,0x2ffff000) 186else 187CFG_STM32MP1_SCMI_SHM_BASE ?= 0 188endif 189$(call force,CFG_STM32MP1_SCMI_SHM_SIZE,0x1000) 190 191ifeq ($(CFG_STM32MP15),y) 192CFG_TZDRAM_START ?= 0xfe000000 193ifeq ($(CFG_CORE_RESERVED_SHM),y) 194CFG_TZDRAM_SIZE ?= 0x01e00000 195else 196CFG_TZDRAM_SIZE ?= 0x02000000 197endif 198CFG_TZSRAM_START ?= 0x2ffc0000 199CFG_TZSRAM_SIZE ?= 0x0003f000 200ifeq ($(CFG_CORE_RESERVED_SHM),y) 201CFG_SHMEM_START ?= ($(CFG_TZDRAM_START) + $(CFG_TZDRAM_SIZE)) 202CFG_SHMEM_SIZE ?= ($(CFG_DRAM_BASE) + $(CFG_DRAM_SIZE) - $(CFG_SHMEM_START)) 203endif 204else 205CFG_TZDRAM_SIZE ?= 0x02000000 206CFG_TZDRAM_START ?= ($(CFG_DRAM_BASE) + $(CFG_DRAM_SIZE) - $(CFG_TZDRAM_SIZE)) 207endif #CFG_STM32MP15 208 209CFG_STM32_BSEC ?= y 210CFG_STM32_CRYP ?= y 211CFG_STM32_ETZPC ?= y 212CFG_STM32_GPIO ?= y 213CFG_STM32_I2C ?= y 214CFG_STM32_IWDG ?= y 215CFG_STM32_RNG ?= y 216CFG_STM32_RSTCTRL ?= y 217CFG_STM32_SAES ?= y 218CFG_STM32_TAMP ?= y 219CFG_STM32_UART ?= y 220CFG_STPMIC1 ?= y 221CFG_TZC400 ?= y 222 223CFG_DRIVERS_I2C ?= $(CFG_STM32_I2C) 224CFG_REGULATOR_GPIO ?= $(CFG_STM32_GPIO) 225 226CFG_WITH_SOFTWARE_PRNG ?= n 227ifneq ($(CFG_WITH_SOFTWARE_PRNG),y) 228$(call force,CFG_STM32_RNG,y,Required by HW RNG when CFG_WITH_SOFTWARE_PRNG=n) 229endif 230 231ifeq ($(CFG_STPMIC1),y) 232$(call force,CFG_STM32_I2C,y) 233$(call force,CFG_STM32_GPIO,y) 234endif 235 236# If any crypto driver is enabled, enable the crypto-framework layer 237ifeq ($(call cfg-one-enabled, CFG_STM32_CRYP CFG_STM32_SAES),y) 238$(call force,CFG_STM32_CRYPTO_DRIVER,y) 239endif 240 241CFG_DRIVERS_RSTCTRL ?= $(CFG_STM32_RSTCTRL) 242$(eval $(call cfg-depends-all,CFG_STM32_RSTCTRL,CFG_DRIVERS_RSTCTRL)) 243 244CFG_WDT ?= $(CFG_STM32_IWDG) 245CFG_WDT_SM_HANDLER ?= $(CFG_WDT) 246CFG_WDT_SM_HANDLER_ID ?= 0xbc000000 247 248# Platform specific configuration 249CFG_STM32MP_PANIC_ON_TZC_PERM_VIOLATION ?= y 250 251# Default enable scmi-msg server if SCP-firmware SCMI server is disabled 252ifneq ($(CFG_SCMI_SCPFW),y) 253CFG_SCMI_MSG_DRIVERS ?= y 254endif 255 256# SiP/OEM service for non-secure world 257CFG_STM32_BSEC_SIP ?= n 258CFG_STM32MP1_SCMI_SIP ?= n 259ifeq ($(CFG_STM32MP1_SCMI_SIP),y) 260$(call force,CFG_SCMI_MSG_DRIVERS,y,Mandated by CFG_STM32MP1_SCMI_SIP) 261$(call force,CFG_SCMI_MSG_SMT,y,Mandated by CFG_STM32MP1_SCMI_SIP) 262$(call force,CFG_SCMI_MSG_SMT_FASTCALL_ENTRY,y,Mandated by CFG_STM32MP1_SCMI_SIP) 263endif 264 265# Enable BSEC PTA for fuses access management 266CFG_STM32_BSEC_PTA ?= y 267ifeq ($(CFG_STM32_BSEC_PTA),y) 268$(call force,CFG_STM32_BSEC,y,Mandated by CFG_BSEC_PTA) 269endif 270 271# Default enable SCMI PTA support 272CFG_SCMI_PTA ?= y 273ifeq ($(CFG_SCMI_PTA),y) 274ifneq ($(CFG_SCMI_SCPFW),y) 275$(call force,CFG_SCMI_MSG_DRIVERS,y,Mandated by CFG_SCMI_PTA) 276CFG_SCMI_MSG_SMT_THREAD_ENTRY ?= y 277CFG_SCMI_MSG_SHM_MSG ?= y 278CFG_SCMI_MSG_SMT ?= y 279endif # !CFG_SCMI_SCPFW 280endif # CFG_SCMI_PTA 281 282CFG_SCMI_SCPFW ?= n 283ifeq ($(CFG_SCMI_SCPFW),y) 284$(call force,CFG_SCMI_SCPFW_PRODUCT,optee-stm32mp1) 285endif 286 287CFG_SCMI_MSG_DRIVERS ?= n 288ifeq ($(CFG_SCMI_MSG_DRIVERS),y) 289$(call force,CFG_SCMI_MSG_CLOCK,y) 290$(call force,CFG_SCMI_MSG_RESET_DOMAIN,y) 291CFG_SCMI_MSG_SHM_MSG ?= y 292CFG_SCMI_MSG_SMT ?= y 293CFG_SCMI_MSG_SMT_THREAD_ENTRY ?= y 294$(call force,CFG_SCMI_MSG_VOLTAGE_DOMAIN,y) 295endif 296 297ifneq ($(CFG_WITH_SOFTWARE_PRNG),y) 298CFG_HWRNG_PTA ?= y 299endif 300ifeq ($(CFG_HWRNG_PTA),y) 301$(call force,CFG_STM32_RNG,y,Mandated by CFG_HWRNG_PTA) 302$(call force,CFG_WITH_SOFTWARE_PRNG,n,Mandated by CFG_HWRNG_PTA) 303$(call force,CFG_HWRNG_QUALITY,1024) 304endif 305 306# Provision enough threads to pass xtest 307ifneq (,$(filter y,$(CFG_SCMI_PTA) $(CFG_STM32MP1_SCMI_SIP))) 308ifeq ($(CFG_WITH_PAGER),y) 309CFG_NUM_THREADS ?= 3 310else 311CFG_NUM_THREADS ?= 10 312endif 313endif 314 315# Default enable some test facitilites 316CFG_ENABLE_EMBEDDED_TESTS ?= y 317CFG_WITH_STATS ?= y 318 319# Enable OTP update with BSEC driver 320CFG_STM32_BSEC_WRITE ?= y 321 322# Default disable some support for pager memory size constraint 323ifeq ($(CFG_WITH_PAGER),y) 324CFG_TEE_CORE_DEBUG ?= n 325CFG_UNWIND ?= n 326CFG_LOCKDEP ?= n 327CFG_TA_BGET_TEST ?= n 328# Default disable early TA compression to support a smaller HEAP size 329CFG_EARLY_TA_COMPRESS ?= n 330CFG_CORE_HEAP_SIZE ?= 49152 331endif 332 333# Non-secure UART and GPIO/pinctrl for the output console 334CFG_WITH_NSEC_GPIOS ?= y 335CFG_WITH_NSEC_UARTS ?= y 336# UART instance used for early console (0 disables early console) 337CFG_STM32_EARLY_CONSOLE_UART ?= 4 338 339# CFG_STM32MP15_HUK enables use of a HUK read from BSEC fuses. 340# Disable the HUK by default as it requires a product specific configuration. 341# 342# Configuration must provide OTP indices where HUK is loaded. 343# When CFG_STM32_HUK_FROM_DT is enabled, HUK OTP location is found in the DT. 344# When CFG_STM32_HUK_FROM_DT is disabled, configuration sets each HUK location. 345# Either with CFG_STM32MP15_HUK_OTP_BASE, in which case the 4 words are used, 346# Or with CFG_STM32MP15_HUK_BSEC_KEY_0/1/2/3 each locating one BSEC word. 347# 348# Configuration must provide the HUK generation scheme. The following switches 349# are exclusive and at least one must be eable when CFG_STM32MP15_HUK is enable. 350# CFG_STM32MP15_HUK_BSEC_KEY makes platform HUK to be the raw fuses content. 351# CFG_STM32MP15_HUK_BSEC_DERIVE_UID makes platform HUK to be the HUK fuses 352# content derived with the device UID fuses content. See derivation scheme 353# in stm32mp15_huk.c implementation. 354CFG_STM32MP15_HUK ?= n 355CFG_STM32_HUK_FROM_DT ?= n 356 357ifeq ($(CFG_STM32MP15_HUK),y) 358ifneq ($(CFG_STM32_HUK_FROM_DT),y) 359ifneq (,$(CFG_STM32MP15_HUK_OTP_BASE)) 360$(call force,CFG_STM32MP15_HUK_BSEC_KEY_0,CFG_STM32MP15_HUK_OTP_BASE) 361$(call force,CFG_STM32MP15_HUK_BSEC_KEY_1,(CFG_STM32MP15_HUK_OTP_BASE + 1)) 362$(call force,CFG_STM32MP15_HUK_BSEC_KEY_2,(CFG_STM32MP15_HUK_OTP_BASE + 2)) 363$(call force,CFG_STM32MP15_HUK_BSEC_KEY_3,(CFG_STM32MP15_HUK_OTP_BASE + 3)) 364endif 365ifeq (,$(CFG_STM32MP15_HUK_BSEC_KEY_0)) 366$(error Missing configuration switch CFG_STM32MP15_HUK_BSEC_KEY_0) 367endif 368ifeq (,$(CFG_STM32MP15_HUK_BSEC_KEY_1)) 369$(error Missing configuration switch CFG_STM32MP15_HUK_BSEC_KEY_1) 370endif 371ifeq (,$(CFG_STM32MP15_HUK_BSEC_KEY_2)) 372$(error Missing configuration switch CFG_STM32MP15_HUK_BSEC_KEY_2) 373endif 374ifeq (,$(CFG_STM32MP15_HUK_BSEC_KEY_3)) 375$(error Missing configuration switch CFG_STM32MP15_HUK_BSEC_KEY_3) 376endif 377endif # CFG_STM32_HUK_FROM_DT 378 379CFG_STM32MP15_HUK_BSEC_KEY ?= y 380CFG_STM32MP15_HUK_BSEC_DERIVE_UID ?= n 381ifneq (y,$(call cfg-one-enabled,CFG_STM32MP15_HUK_BSEC_KEY CFG_STM32MP15_HUK_BSEC_DERIVE_UID)) 382$(error CFG_STM32MP15_HUK mandates one of CFG_STM32MP15_HUK_BSEC_KEY CFG_STM32MP15_HUK_BSEC_DERIVE_UID) 383else ifeq ($(CFG_STM32MP15_HUK_BSEC_KEY)-$(CFG_STM32MP15_HUK_BSEC_DERIVE_UID),y-y) 384$(error CFG_STM32MP15_HUK_BSEC_KEY and CFG_STM32MP15_HUK_BSEC_DERIVE_UID are exclusive) 385endif 386endif # CFG_STM32MP15_HUK 387 388CFG_TEE_CORE_DEBUG ?= y 389CFG_STM32_DEBUG_ACCESS ?= $(CFG_TEE_CORE_DEBUG) 390 391# Sanity on choice config switches 392ifeq ($(call cfg-all-enabled,CFG_STM32MP15 CFG_STM32MP13),y) 393$(error CFG_STM32MP13_CLK and CFG_STM32MP15_CLK are exclusive) 394endif 395