u-boot.git/drivers/tee, branch master

tee: Rework Makefile logic

2025-10-14T07:42:27+00:00

The intention of how this Makefile was written was to allow for sandbox
to build and test drivers still while otherwise requiring OPTEE to be
enabled. This however didn't work quite right in practice as sandbox
could enable some drivers which would then fail to link. Rework things
such that sandbox will also traverse the optee directory when
SANDBOX_TEE is enabled, but only build one of the optee-specific files
when OPTEE is enabled.

Signed-off-by: Tom Rini 
Acked-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tee: sandbox: check for buffer size

2024-04-26T05:28:35+00:00

Add additional check for buffer size when reading out persistent
storage value and provide back actual value size.

Signed-off-by: Igor Opaniuk 
Reviewed-by: Oleksandr Suvorov 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Ilias Apalodimas

tee: remove common.h inclusion

2024-04-18T13:04:48+00:00

The usage of the common.h include file is deprecated [1], and has already
been removed from several files.
Get rid of all inclusions in the "drivers/tee" directory, and replace it
with required include files directly where needed.

[1] doc/develop/codingstyle.rst

Reviewed-by: Ilias Apalodimas 
Signed-off-by: Igor Opaniuk 
Reviewed-by: Sam Protsenko 
Signed-off-by: Ilias Apalodimas

tee: optee: fix description in Kconfig

2024-04-18T13:04:48+00:00

Fix OPTEE_TA_AVB symbol description in Kconfig:
s/"write"rb"/"write_rb"/g

Reviewed-by: Heinrich Schuchardt 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Igor Opaniuk 
Signed-off-by: Ilias Apalodimas

tee: sandbox: fix spelling errors

2024-03-27T08:29:00+00:00

Fix spelling errors in comments.

Reviewed-by: Heinrich Schuchardt 
Reviewed-by: Ilias Apalodimas 
Signed-off-by: Igor Opaniuk

tee: optee: don't enumerate services if there ain't any

2023-12-19T15:07:48+00:00

Change optee driver service enumeration to not enumerate (and
allocate a zero sized shared memory buffer) when OP-TEE
reports that there is no service to enumerate.

This change fixes an existing issue that occurs when the such zero
sized shared memory buffer allocated from malloc() has a physical
address of offset 0 of a physical 4kB page. In such case, OP-TEE
secure world refuses to register the zero-sized shared memory
area and makes U-Boot optee service enumeration to fail.

Fixes: 94ccfb78a4d6 ("drivers: tee: optee: discover OP-TEE services")
Signed-off-by: Etienne Carriere 
Reviewed-by: Patrice Chotard 
Reviewed-by: Jens Wiklander

tee: optee: don't fail on services enumeration failure

2023-12-19T15:07:48+00:00

Change optee probe function to only warn when service enumeration
sequence fails instead of reporting an optee driver probe failure.
Indeed U-Boot can still use OP-TEE even if some OP-TEE services are
not discovered.

Fixes: 94ccfb78a4d6 ("drivers: tee: optee: discover OP-TEE services")
Signed-off-by: Etienne Carriere 
Reviewed-by: Patrice Chotard 
Reviewed-by: Jens Wiklander

drivers: tee: sandbox: Fix SCP03 control emulator

2023-04-28T17:30:17+00:00

Fix and document the Secure Channel Protocol03 emulator.

Fixes: 5a8783c80c39 ("drivers: tee: sandbox: SCP03 control emulator")

Signed-off-by: Jorge Ramirez-Ortiz 
Reviewed-by: Simon Glass 
Reviewed-by: Ilias Apalodimas

tee: optee: fix uuid comparisons on service discovery

2023-01-20T08:04:56+00:00

When comparing UUIDs for discovered services we only compare up to the
ptr size instead of the entire UUID

Fixes: 94ccfb78a4d61 ("drivers: tee: optee: discover OP-TEE services")
Signed-off-by: Ilias Apalodimas 
Reviewed-by: Etienne Carriere 
Reviewed-by: Jens Wiklander

tee: optee: fix a print error on rng probing

2023-01-20T08:04:56+00:00

If we fail to probe the optee-rng device, we print a wrong message
referring to the firmware tpm.

Fixes: 476a3d58dfeb ("tee: optee: don't fail probe because of optee-rng")
Reviewed-by: Patrick Delaunay 
Reviewed-by: Etienne Carriere 
Reviewed-by: Jens Wiklander 
Signed-off-by: Ilias Apalodimas