Skip to contentSkip to conversation

boot/optee-os: add suppot to build with the ftpm application

PATCH New Charles Hardin 1 participant 1 message Oct 28

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 boot/optee-os: add suppot to build with the ftpm application

The ftpm is part of the trusted execution environment and so add in build steps and configuration to enable the additional image. This following the TPM 2.0 microsoft extensions and compatibility. So, patching this into the optee configuration since it needs the sdk and other tools to directly build the ftpm application.

---
 boot/optee-os/Config.in     | 29 ++++++++++++++++++
 boot/optee-os/optee-os.hash |  2 ++
 boot/optee-os/optee-os.mk   | 59 ++++++++++++++++++++++++++++++++++++-
 3 files changed, 89 insertions(+), 1 deletion(-)
boot/optee-os/Config.in +29 -0
index af08375b9a..566b56064d 100644
@@ -131,6 +131,35 @@ config BR2_TARGET_OPTEE_OS_SDK
 	  kit for building OP-TEE trusted application images. It is
 	  installed in the staging directory /lib/optee.
 
+config BR2_TARGET_OPTEE_OS_FTPM
+	bool "Build fTPM (Firmware TPM 2.0) TA"
+	select BR2_TARGET_OPTEE_OS_SDK
+	help
+	  Build the Microsoft TPM 2.0 Reference Implementation (fTPM)
+	  as an OP-TEE Trusted Application.
+
+	  UUID: bc50d971-d4c9-42c4-82cb-343fb7f37896
+
+if BR2_TARGET_OPTEE_OS_FTPM
+
+config BR2_TARGET_OPTEE_OS_FTPM_EARLY_TA
+	bool "Embed fTPM as Early TA in OP-TEE core"
+	default y
+	help
+	  Embeds the fTPM TA directly into the OP-TEE OS binary (tee.bin)
+	  as an early TA. Required for pre-userspace TPM operations such
+	  as U-Boot verified boot and Linux IMA before tee-supplicant runs.
+
+config BR2_TARGET_OPTEE_OS_FTPM_VERSION
+	string "optee_ftpm version"
+	default "4.10.0"
+
+config BR2_TARGET_OPTEE_OS_FTPM_MS_REF_VERSION
+	string "ms-tpm-20-ref commit"
+	default "98b60a44aba79b15fcce1c0d1e46cf5918400f6a"
+
+endif
+
 config BR2_TARGET_OPTEE_OS_SERVICES
 	bool "Build service TAs and libs"
 	default y
boot/optee-os/optee-os.hash +2 -0
index 3db5c85cf1..7788955380 100644
@@ -1,3 +1,5 @@
 # Locally computed
 sha256  9400e16c45bfa45f15585b2c933b86c449e7de05def0ecaaa62a4f38973a3a45  optee-os-4.9.0.tar.gz
+sha256  907fd49dc9db97fc16c8e4309e8e17109a044711d053135f21690dadaf50908c  optee_ftpm-4.10.0.tar.gz
+sha256  1c7136f2e6270b10da188163369f2ed9fae68e404c0c8169b317b5eba667287c  ms-tpm-20-ref-98b60a44aba79b15fcce1c0d1e46cf5918400f6a.tar.gz
 sha256  1247ee90858f4037b6cac63cbffddfed435d0d73c631b37d78c1e6e6ab3e5d1a  LICENSE
boot/optee-os/optee-os.mk +58 -1

73 lines not on this page · raw message

Signature · 6 lines
2.50.1 (Apple Git-155)

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot