Skip to content

Commit c835e5a

Browse files
balint-dobszay-armjenswi-linaro
authored andcommitted
tee: tstee: Add Trusted Services TEE driver
The Trusted Services project provides a framework for developing and deploying device Root of Trust services in FF-A Secure Partitions. The FF-A SPs are accessible through the FF-A driver, but this doesn't provide a user space interface. The goal of this TEE driver is to make Trusted Services SPs accessible for user space clients. All TS SPs have the same FF-A UUID, it identifies the RPC protocol used by TS. A TS SP can host one or more services, a service is identified by its service UUID. The same type of service cannot be present twice in the same SP. During SP boot each service in an SP is assigned an interface ID, this is just a short ID to simplify message addressing. There is 1:1 mapping between TS SPs and TEE devices, i.e. a separate TEE device is registered for each TS SP. This is required since contrary to the generic TEE design where memory is shared with the whole TEE implementation, in case of FF-A, memory is shared with a specific SP. A user space client has to be able to separately share memory with each SP based on its endpoint ID. Acked-by: Sumit Garg <sumit.garg@linaro.org> Signed-off-by: Balint Dobszay <balint.dobszay@arm.com> Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
1 parent cf44415 commit c835e5a

7 files changed

Lines changed: 589 additions & 0 deletions

File tree

drivers/tee/Kconfig

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,6 @@ if TEE
1515

1616
source "drivers/tee/optee/Kconfig"
1717
source "drivers/tee/amdtee/Kconfig"
18+
source "drivers/tee/tstee/Kconfig"
1819

1920
endif

drivers/tee/Makefile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,3 +5,4 @@ tee-objs += tee_shm.o
55
tee-objs += tee_shm_pool.o
66
obj-$(CONFIG_OPTEE) += optee/
77
obj-$(CONFIG_AMDTEE) += amdtee/
8+
obj-$(CONFIG_ARM_TSTEE) += tstee/

drivers/tee/tstee/Kconfig

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
# SPDX-License-Identifier: GPL-2.0-only
2+
config ARM_TSTEE
3+
tristate "Arm Trusted Services TEE driver"
4+
depends on ARM_FFA_TRANSPORT
5+
default n
6+
help
7+
The Trusted Services project provides a framework for developing and
8+
deploying device Root of Trust services in FF-A Secure Partitions.
9+
This driver provides an interface to make Trusted Services Secure
10+
Partitions accessible for user space clients, since the FF-A driver
11+
doesn't implement a user space interface directly.

drivers/tee/tstee/Makefile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
# SPDX-License-Identifier: GPL-2.0-only
2+
arm-tstee-objs := core.o
3+
obj-$(CONFIG_ARM_TSTEE) = arm-tstee.o

0 commit comments

Comments
 (0)