mbox series

[0/5] arm/trusted-services: Update TS and enable fTPM SP.

Message ID 20260304082718.2126340-1-gyorgy.szing@arm.com
Headers show
Series arm/trusted-services: Update TS and enable fTPM SP. | expand

Message

Gyorgy Szing March 4, 2026, 8:27 a.m. UTC
This patch stack makes ths following changes:
  - Update TS and its dependencies.
  - Remove the -fzero-init-padding-bits=unions fix which was needed due to 
    MbedTLS.
  - Rebase and clean up Corstone1000 patch files.
  - Enable the fTPMC SP. (Experimental).
      - Enable testing with tpm2-tools.
  - Add a kas file to help building and running the TS fTPM SP on fvp-base.
  - Update documentation.

Gabor Toth (2):
  arm/trusted-services: Enable the fTPM SP
  arm/trusted-services: Enable tpm2-tool self tests

Gyorgy Szing (3):
  arm/trusted-services: Update to v1.3.0
  arm-bsp/corstone1000: Rebase TS patches.
  arm/trusted-services: update documentation

 ci/fvp-base-ts-ftpm.yml                       |  27 +
 documentation/trusted-services.md             |  84 +-
 .../0002-Add-TPM-CRB-FF-A-DT-support.patch    | 297 ++++++
 .../linux/files/fvp-base/tpm-crb.cfg          |   3 +
 .../linux/linux-arm-platforms.inc             |   9 +
 ...store-UEFI-variable-index-in-chunks.patch} |  14 +-
 ...e1000-Add-CORSTONE_1000_TYPE-variabl.patch |  66 --
 ..._HAS_ATTEST_PK-define-from-IAT-test.patch} |   6 +-
 ...e1000-Add-event-provider-proxy-for-b.patch | 304 -------
 ...ow-platform-override-of-FWU-mapping-.patch | 245 -----
 ...UCCESS_REBOOT-and-PSA_SUCCESS_RESTAR.patch |  74 --
 ...e1000-Add-MM-communication-buffer-co.patch |  35 -
 ...pport-for-ESRT-v1-in-PSA-FWU-M-agent.patch | 290 ------
 ...ting-warnings-as-errors-configurable.patch | 194 ----
 ...-config-Remove-Werror-compile-option.patch |  46 -
 ...009-fwu-proxy-refactor-image-mapping.patch | 856 ------------------
 ...crypto-fix-AEAD-block-cypher-support.patch |  73 --
 ...n-PSA-Crypto-structs-with-TF-Mv2.1.1.patch |  40 -
 .../trusted-services/ts-arm-platforms.inc     |  15 +-
 .../trusted-services/ts-sp-ftpm_%.bbappend    |   1 +
 meta-arm/conf/layer.conf                      |   5 +
 ...1-Remove-simulator-and-abrmd-startup.patch |  55 ++
 ...icysigned_sh-fix-error-clear-lockout.patch |  56 ++
 .../recipes-tpm/tpm2-tools/files/tpm2-test    |   8 +
 .../tpm2-tools/files/tpm2-test-all            | 123 +++
 .../tpm2-tools/tpm2-tools_5.7.bbappend        |  27 +
 .../oeqa/runtime/cases/trusted_services.py    |   9 +
 .../recipes-security/optee/optee-os-ts.inc    |   7 +
 .../files/0001-fTPM-add-go_idle-support.patch |  84 ++
 ...cpputest-fix-cmake-4.0-compatibility.patch |  81 --
 .../trusted-services/trusted-services-src.inc |  11 +-
 .../trusted-services/ts-ms-tpm20-ref_git.inc  |  16 +
 .../trusted-services/ts-sp-common.inc         |   4 -
 .../trusted-services/ts-sp-ftpm_git.bb        |   9 +
 .../trusted-services/ts-uuid.inc              |   1 +
 35 files changed, 830 insertions(+), 2345 deletions(-)
 create mode 100644 ci/fvp-base-ts-ftpm.yml
 create mode 100644 meta-arm-bsp/recipes-kernel/linux/files/fvp-base/0002-Add-TPM-CRB-FF-A-DT-support.patch
 create mode 100644 meta-arm-bsp/recipes-kernel/linux/files/fvp-base/tpm-crb.cfg
 rename meta-arm-bsp/recipes-security/trusted-services/corstone1000/{0010-Revert-Load-and-store-UEFI-variable-index-in-chunks.patch => 0001-Revert-Load-and-store-UEFI-variable-index-in-chunks.patch} (97%)
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0001-platform-corstone1000-Add-CORSTONE_1000_TYPE-variabl.patch
 rename meta-arm-bsp/recipes-security/trusted-services/corstone1000/{0011-Remove-PLATFORM_HAS_ATTEST_PK-define-from-IAT-test.patch => 0002-Remove-PLATFORM_HAS_ATTEST_PK-define-from-IAT-test.patch} (92%)
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0002-platform-corstone1000-Add-event-provider-proxy-for-b.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0003-fwu-se-proxy-Allow-platform-override-of-FWU-mapping-.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0004-fwu-Coerce-PSA_SUCCESS_REBOOT-and-PSA_SUCCESS_RESTAR.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0005-platform-corstone1000-Add-MM-communication-buffer-co.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0006-fwu-Add-support-for-ESRT-v1-in-PSA-FWU-M-agent.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0007-Make-treating-warnings-as-errors-configurable.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0008-smm-gateway-config-Remove-Werror-compile-option.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0009-fwu-proxy-refactor-image-mapping.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0012-psa-crypto-fix-AEAD-block-cypher-support.patch
 delete mode 100644 meta-arm-bsp/recipes-security/trusted-services/corstone1000/0013-Align-PSA-Crypto-structs-with-TF-Mv2.1.1.patch
 create mode 100644 meta-arm-bsp/recipes-security/trusted-services/ts-sp-ftpm_%.bbappend
 create mode 100644 meta-arm/dynamic-layers/meta-tpm2/recipes-tpm/tpm2-tools/files/0001-Remove-simulator-and-abrmd-startup.patch
 create mode 100644 meta-arm/dynamic-layers/meta-tpm2/recipes-tpm/tpm2-tools/files/0003-abrmd_policysigned_sh-fix-error-clear-lockout.patch
 create mode 100644 meta-arm/dynamic-layers/meta-tpm2/recipes-tpm/tpm2-tools/files/tpm2-test
 create mode 100644 meta-arm/dynamic-layers/meta-tpm2/recipes-tpm/tpm2-tools/files/tpm2-test-all
 create mode 100644 meta-arm/dynamic-layers/meta-tpm2/recipes-tpm/tpm2-tools/tpm2-tools_5.7.bbappend
 create mode 100644 meta-arm/recipes-security/trusted-services/files/0001-fTPM-add-go_idle-support.patch
 delete mode 100644 meta-arm/recipes-security/trusted-services/files/0005-cpputest-fix-cmake-4.0-compatibility.patch
 create mode 100644 meta-arm/recipes-security/trusted-services/ts-ms-tpm20-ref_git.inc
 create mode 100644 meta-arm/recipes-security/trusted-services/ts-sp-ftpm_git.bb