/linux-6.12.1/Documentation/tee/ |
D | op-tee.rst | 1 .. SPDX-License-Identifier: GPL-2.0 4 OP-TEE (Open Portable Trusted Execution Environment) 7 The OP-TEE driver handles OP-TEE [1] based TEEs. Currently it is only the ARM 8 TrustZone based OP-TEE solution that is supported. 10 Lowest level of communication with OP-TEE builds on ARM SMC Calling 11 Convention (SMCCC) [2], which is the foundation for OP-TEE's SMC interface 12 [3] used internally by the driver. Stacked on top of that is OP-TEE Message 15 OP-TEE SMC interface provides the basic functions required by SMCCC and some 16 additional functions specific for OP-TEE. The most interesting functions are: 18 - OPTEE_SMC_FUNCID_CALLS_UID (part of SMCCC) returns the version information [all …]
|
D | index.rst | 1 .. SPDX-License-Identifier: GPL-2.0 4 TEE Subsystem 10 tee 11 op-tee 12 amd-tee 13 ts-tee
|
/linux-6.12.1/drivers/tee/optee/ |
D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0-only 2 # OP-TEE Trusted Execution Environment Configuration 4 tristate "OP-TEE" 9 This implements the OP-TEE Trusted Execution Environment (TEE) 13 bool "Load OP-TEE image as firmware" 17 This loads the BL32 image for OP-TEE as firmware when the driver is 18 probed. This returns -EPROBE_DEFER until the firmware is loadable from 24 https://trustedfirmware-a.readthedocs.io/en/latest/threat_model/threat_model.html 27 Documentation/tee/op-tee.rst.
|
D | optee_private.h | 1 /* SPDX-License-Identifier: GPL-2.0-only */ 3 * Copyright (c) 2015-2021, 2023 Linaro Limited 9 #include <linux/arm-smccc.h> 32 /* API Return Codes are from the GP TEE Internal Core API Specification */ 51 * struct optee_call_waiter - TEE entry may need to wait for a free TEE thread 63 * struct optee_call_queue - OP-TEE call queue management 65 * @waiters List of threads waiting to enter OP-TEE 66 * @total_thread_count Overall number of thread context in OP-TEE or 0 67 * @free_thread_count Number of threads context free in OP-TEE 98 * struct optee_supp - supplicant synchronization struct [all …]
|
D | optee_ffa.h | 1 /* SPDX-License-Identifier: BSD-2-Clause */ 3 * Copyright (c) 2019-2021, 2023 Linaro Limited 7 * This file is exported by OP-TEE and is kept in sync between secure world 8 * and normal world drivers. We're using ARM FF-A 1.0 specification. 23 * defined in FF-A specification: 27 * w3-w7: Implementation defined, free to be used below 38 * Returns the API version implemented, currently follows the FF-A version. 41 * w4-w7: Not used (MBZ) 46 * w5-w7: Not used (MBZ) 51 * Returns the revision of OP-TEE. [all …]
|
D | smc_abi.c | 1 // SPDX-License-Identifier: GPL-2.0-only 3 * Copyright (c) 2015-2021, 2023 Linaro Limited 9 #include <linux/arm-smccc.h> 39 * OP-TEE OS via raw SMCs. 50 * A typical OP-TEE private shm allocation is 224 bytes (argument struct 59 /* SMC ABI considers at most a single TEE firmware */ 90 p->attr = TEE_IOCTL_PARAM_ATTR_TYPE_MEMREF_INPUT + in from_msg_param_tmp_mem() 91 attr - OPTEE_MSG_ATTR_TYPE_TMEM_INPUT; in from_msg_param_tmp_mem() 92 p->u.memref.size = mp->u.tmem.size; in from_msg_param_tmp_mem() 93 shm = (struct tee_shm *)(unsigned long)mp->u.tmem.shm_ref; in from_msg_param_tmp_mem() [all …]
|
D | ffa_abi.c | 1 // SPDX-License-Identifier: GPL-2.0-only 22 * This file implement the FF-A ABI used when communicating with secure world 23 * OP-TEE OS via FF-A. 25 * 1. Maintain a hash table for lookup of a global FF-A memory handle 34 * 1. Maintain a hash table for lookup of a global FF-A memory handle 36 * FF-A assigns a global memory handle for each piece shared memory. 65 mutex_lock(&optee->ffa.mutex); in optee_shm_from_ffa_handle() 66 r = rhashtable_lookup_fast(&optee->ffa.global_ids, &global_id, in optee_shm_from_ffa_handle() 69 shm = r->shm; in optee_shm_from_ffa_handle() 70 mutex_unlock(&optee->ffa.mutex); in optee_shm_from_ffa_handle() [all …]
|
D | optee_smc.h | 1 /* SPDX-License-Identifier: (GPL-2.0 OR BSD-2-Clause) */ 3 * Copyright (c) 2015-2021, Linaro Limited 8 #include <linux/arm-smccc.h> 28 * Normal cached memory (write-back), shareable for SMP systems and not 36 * 32-bit registers. 44 * 384fb3e0-e7f8-11e3-af63-0002a5d5c51b. 75 * Used by non-secure world to figure out which Trusted OS is installed. 78 * Returns UUID in a0-4 in the same way as OPTEE_SMC_CALLS_UID 88 * Used by non-secure world to figure out which version of the Trusted OS 92 * Returns revision in a0-1 in the same way as OPTEE_SMC_CALLS_REVISION [all …]
|
D | optee_msg.h | 1 /* SPDX-License-Identifier: (GPL-2.0 OR BSD-2-Clause) */ 3 * Copyright (c) 2015-2021, Linaro Limited 12 * This file defines the OP-TEE message protocol (ABI) used to communicate 13 * with an instance of OP-TEE running in secure world. 21 * Part 1 - formatting of messages 49 * Pointer to a list of pages used to register user-defined SHM buffer. 52 * list of page addresses. OP-TEE core can reconstruct contiguous buffer from 64 * uint64_t pages_array[OPTEE_MSG_NONCONTIG_PAGE_SIZE/sizeof(uint64_t) - 1]; 88 * Same values as TEE_LOGIN_* from TEE Internal API 98 * Page size used in non-contiguous buffer entries [all …]
|
D | core.c | 1 // SPDX-License-Identifier: GPL-2.0-only 3 * Copyright (c) 2015-2021, Linaro Limited 41 if (!optee->rpmb_scan_bus_done) { in optee_bus_scan_rpmb() 43 optee->rpmb_scan_bus_done = !ret; in optee_bus_scan_rpmb() 44 if (ret && ret != -ENODEV) in optee_bus_scan_rpmb() 54 schedule_work(&optee->rpmb_scan_bus_work); in optee_rpmb_intf_rdev() 70 if (optee->in_kernel_rpmb_routing) in rpmb_routing_model_show() 88 tee_device_set_dev_groups(optee->teedev, optee_dev_groups); in optee_set_dev_group() 89 tee_device_set_dev_groups(optee->supp_teedev, optee_dev_groups); in optee_set_dev_group() 95 struct tee_device *teedev = ctx->teedev; in optee_open() [all …]
|
/linux-6.12.1/Documentation/ABI/testing/ |
D | sysfs-bus-optee-devices | 1 What: /sys/bus/tee/devices/optee-ta-<uuid>/ 4 Contact: op-tee@lists.trustedfirmware.org 6 OP-TEE bus provides reference to registered drivers under this directory. The <uuid> 8 are free to create needed API under optee-ta-<uuid> directory. 10 What: /sys/bus/tee/devices/optee-ta-<uuid>/need_supplicant 13 Contact: op-tee@lists.trustedfirmware.org 15 Allows to distinguish whether an OP-TEE based TA/device requires user-space 16 tee-supplicant to function properly or not. This attribute will be present for 17 devices which depend on tee-supplicant to be running.
|
D | sysfs-class-tee | 1 What: /sys/class/tee/tee{,priv}X/rpmb_routing_model 4 Contact: op-tee@lists.trustedfirmware.org 7 user-space daemon tee-supplicant or the RPMB subsystem 11 subsystem without assistance from tee-supplicant. It 15 tee-supplicant is needed in the early boot with initramfs.
|
/linux-6.12.1/drivers/firmware/arm_scmi/transports/ |
D | optee.c | 1 // SPDX-License-Identifier: GPL-2.0 3 * Copyright (C) 2019-2021 Linaro Ltd. 16 #include <uapi/linux/tee.h> 24 * PTA_SCMI_CMD_CAPABILITIES - Get channel capabilities 32 * PTA_SCMI_CMD_PROCESS_SMT_CHANNEL - Process SCMI message in SMT buffer 38 * and SCMI server (OP-TEE) parts. 39 * The memory uses SMT header to carry SCMI meta-data (protocol ID and 45 * PTA_SCMI_CMD_PROCESS_SMT_CHANNEL_MESSAGE - Process SMT/SCMI message 53 * The memory uses SMT header to carry SCMI meta-data (protocol ID and 59 * PTA_SCMI_CMD_GET_CHANNEL - Get channel handle [all …]
|
D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0-only 62 in atomic context too, at the price of using a number of busy-waiting 66 tristate "SCMI transport based on OP-TEE service" 73 This enables the OP-TEE service based transport for SCMI. 76 transport based on OP-TEE SCMI service, answer Y. 120 in atomic context too, at the price of using a number of busy-waiting
|
/linux-6.12.1/drivers/nvmem/ |
D | stm32-bsec-optee-ta.h | 1 /* SPDX-License-Identifier: GPL-2.0-or-later */ 3 * OP-TEE STM32MP BSEC PTA interface, used by STM32 ROMEM driver 5 * Copyright (C) 2022, STMicroelectronics - All Rights Reserved 10 * stm32_bsec_optee_ta_open() - initialize the STM32 BSEC TA 11 * @ctx: the OP-TEE context on success 14 * On success, 0. On failure, -errno. 19 * stm32_bsec_optee_ta_close() - release the STM32 BSEC TA 20 * @ctx: the OP-TEE context 22 * This function used to clean the OP-TEE resources initialized in 29 * stm32_bsec_optee_ta_read() - nvmem read access using TA client driver [all …]
|
D | stm32-bsec-optee-ta.c | 1 // SPDX-License-Identifier: GPL-2.0-or-later 3 * OP-TEE STM32MP BSEC PTA interface, used by STM32 ROMEM driver 5 * Copyright (C) 2022, STMicroelectronics - All Rights Reserved 10 #include "stm32-bsec-optee-ta.h" 21 * TEE_SUCCESS - Invoke command success 22 * TEE_ERROR_BAD_PARAMETERS - Incorrect input param 23 * TEE_ERROR_ACCESS_DENIED - OTP not accessible by caller 36 * TEE_SUCCESS - Invoke command success 37 * TEE_ERROR_BAD_PARAMETERS - Incorrect input param 38 * TEE_ERROR_ACCESS_DENIED - OTP not accessible by caller [all …]
|
/linux-6.12.1/arch/arm/mach-at91/ |
D | sam_secure.c | 1 // SPDX-License-Identifier: GPL-2.0-or-later 6 #include <linux/arm-smccc.h> 19 struct arm_smccc_res res = {.a0 = -1}; in sam_smccc_call() 41 * We only check that the OP-TEE node is present and available. The in sam_secure_init() 42 * OP-TEE kernel driver is not needed for the type of interaction made in sam_secure_init() 43 * with OP-TEE here so the driver's status is not checked. in sam_secure_init() 51 pr_info("Running under OP-TEE firmware\n"); in sam_secure_init()
|
/linux-6.12.1/drivers/firmware/broadcom/ |
D | tee_bnxt_fw.c | 1 // SPDX-License-Identifier: GPL-2.0 21 * TA_CMD_BNXT_FASTBOOT - boot bnxt device by copying f/w into sram 29 * TEE_SUCCESS - Invoke command success 30 * TEE_ERROR_ITEM_NOT_FOUND - Corrupt f/w image found on memory 35 * TA_CMD_BNXT_COPY_COREDUMP - copy the core dump into shm 37 * param[0] (inout memref) - Coredump buffer memory reference 38 * param[1] (in value) - value.a: offset, data to be copied from 44 * TEE_SUCCESS - Invoke command success 45 * TEE_ERROR_BAD_PARAMETERS - Incorrect input param 46 * TEE_ERROR_ITEM_NOT_FOUND - Corrupt core dump [all …]
|
/linux-6.12.1/drivers/tee/amdtee/ |
D | amdtee_if.h | 1 /* SPDX-License-Identifier: MIT */ 8 * This file has definitions related to Host and AMD-TEE Trusted OS interface. 9 * These definitions must match the definitions on the TEE side. 18 ** TEE Param 23 * struct memref - memory reference structure 52 /* Must be same as in GP TEE specification */ 67 ** TEE Commands 72 * non-contiguous. Below structures are meant to describe a shared memory region 77 * struct tee_sg_desc - sg descriptor for a physically contiguous buffer 89 * struct tee_sg_list - structure describing a scatter/gather list [all …]
|
D | call.c | 1 // SPDX-License-Identifier: MIT 7 #include <linux/tee.h> 9 #include <linux/psp-tee.h> 15 static int tee_params_to_amd_params(struct tee_param *tee, u32 count, in tee_params_to_amd_params() argument 24 if (!tee || !amd || count > TEE_MAX_PARAMS) in tee_params_to_amd_params() 25 return -EINVAL; in tee_params_to_amd_params() 27 amd->param_types = 0; in tee_params_to_amd_params() 29 /* AMD TEE does not support meta parameter */ in tee_params_to_amd_params() 30 if (tee[i].attr > TEE_IOCTL_PARAM_ATTR_TYPE_MEMREF_INOUT) in tee_params_to_amd_params() 31 return -EINVAL; in tee_params_to_amd_params() [all …]
|
/linux-6.12.1/Documentation/devicetree/bindings/arm/firmware/ |
D | linaro,optee-tz.yaml | 1 # SPDX-License-Identifier: (GPL-2.0 OR BSD-2-Clause) 3 --- 4 $id: http://devicetree.org/schemas/arm/firmware/linaro,optee-tz.yaml# 5 $schema: http://devicetree.org/meta-schemas/core.yaml# 7 title: OP-TEE 10 - Jens Wiklander <jens.wiklander@linaro.org> 13 OP-TEE is a piece of software using hardware features to provide a Trusted 25 const: linaro,optee-tz 31 software is expected to be either a per-cpu interrupt or an 32 edge-triggered peripheral interrupt. [all …]
|
/linux-6.12.1/drivers/char/hw_random/ |
D | optee-rng.c | 1 // SPDX-License-Identifier: GPL-2.0 3 * Copyright (C) 2018-2019 Linaro Ltd. 15 #define DRIVER_NAME "optee-rng" 20 * TA_CMD_GET_ENTROPY - Get Entropy from RNG 22 * param[0] (inout memref) - Entropy buffer memory reference 28 * TEE_SUCCESS - Invoke command success 29 * TEE_ERROR_BAD_PARAMETERS - Incorrect input param 30 * TEE_ERROR_NOT_SUPPORTED - Requested entropy size greater than size of pool 31 * TEE_ERROR_HEALTH_TEST_FAIL - Continuous health testing failed 36 * TA_CMD_GET_RNG_INFO - Get RNG information [all …]
|
/linux-6.12.1/drivers/rtc/ |
D | rtc-optee.c | 1 // SPDX-License-Identifier: GPL-2.0 40 * struct optee_rtc - OP-TEE RTC private data 41 * @dev: OP-TEE based RTC device. 42 * @ctx: OP-TEE context handler. 64 inv_arg.session = priv->session_id; in optee_rtc_readtime() 69 param[0].u.memref.shm = priv->shm; in optee_rtc_readtime() 72 ret = tee_client_invoke_func(priv->ctx, &inv_arg, param); in optee_rtc_readtime() 74 return ret ? ret : -EPROTO; in optee_rtc_readtime() 76 optee_tm = tee_shm_get_va(priv->shm, 0); in optee_rtc_readtime() 81 return -EPROTO; in optee_rtc_readtime() [all …]
|
/linux-6.12.1/arch/arm/mach-omap2/ |
D | omap-secure.c | 1 // SPDX-License-Identifier: GPL-2.0-only 11 #include <linux/arm-smccc.h> 23 #include "omap-secure.h" 39 * We only check that the OP-TEE node is present and available. The in omap_optee_init_check() 40 * OP-TEE kernel driver is not needed for the type of interaction made in omap_optee_init_check() 41 * with OP-TEE here so the driver's status is not checked. in omap_optee_init_check() 50 * omap_secure_dispatcher - Routine to dispatch low power secure 57 * Return the non-zero error value on failure. 101 * If this platform has OP-TEE installed we use ARM SMC calls in omap_smc1() 150 * Return the non-zero error value on failure. [all …]
|
/linux-6.12.1/drivers/firmware/efi/stmm/ |
D | mm_communication.h | 1 /* SPDX-License-Identifier: GPL-2.0+ */ 4 * in OP-TEE. Most of the structs and defines resemble the EDK2 naming. 16 * Secure Partition running at Secure-EL0 22 * Defined in OP-TEE, this UUID is used to identify the pseudo-TA. 23 * OP-TEE is using big endian GUIDs while UEFI uses little endian ones 34 * struct efi_mm_communicate_header - Header used for SMM variable communication 56 #define ARM_SVC_SPM_RET_NOT_SUPPORTED -1 57 #define ARM_SVC_SPM_RET_INVALID_PARAMS -2 58 #define ARM_SVC_SPM_RET_DENIED -3 59 #define ARM_SVC_SPM_RET_NO_MEMORY -5 [all …]
|