Re: [PATCH v2 0/7] Add optee family and friends

[Jan Kiszka <jan.kiszka@siemens.com>]

On 21.06.23 21:22, baocheng_su@163.com wrote:
> From: Baocheng Su <baocheng.su@siemens.com>
> 
> This brings below optee family members:
>   optee-ta-devkit, optee-client, optee-examples
> and a fTPM running in optee-os, plus some initramfs hooks for tee-supplicant and
> the optee-ftpm.
> 
> The optee-ta-devkit is used to provide a sdk for building trusted application of
> optee.
> 
> The optee-client provides the libteec1, the optee-client-dev, and the
> tee-supplicant daemon.
> 
> The optee-examples provides both the optee TAs and host applications for
> demostrating how to use optee-ta-devkit and optee-client-dev.
> 
> The initramfs hooks for tee-supplicant and optee-ftpm is used to support
> initramfs stage applications that needs the optee-ftpm or other TAs, such as the
> disk encryption based on TPM. An example is the LUKS2 implementation in
> isar-cip-core.
> 
> Also bump the stm32mp15x optee-os version to 3.21.0 to ease the integration.
> 
> Since these bits are the common foundation for applications based on ARM 
> trustzone, isar should be the best place to hold them.
> 
> The idea is partly inspired by the ARM trusted substrace.

substract :)

Looks generally good to me now. Maybe we could even move over [1] later
on by using the RPMB or RPMB emulation of the stm32mp15x board.

> 
> This integration use stm32mp15x as the demo platform. However, I might need some
> help to verify on the real hardware, since I don't have one :)

We will try to organize this here, maybe even later today.

Thanks,
Jan

[1]
https://gitlab.com/cip-project/cip-core/isar-cip-core/-/tree/master/recipes-bsp/edk2

-- 
Siemens AG, Technology
Competence Center Embedded Linux