aboutsummaryrefslogtreecommitdiff
path: root/drivers/tee/Kconfig
diff options
context:
space:
mode:
authorJens Wiklander <jens.wiklander@linaro.org>2018-09-25 16:40:18 +0200
committerTom Rini <trini@konsulko.com>2018-10-07 11:04:01 -0400
commiteadf26f1834666e6ad3ab8f17556d5939c88549e (patch)
treeb683e87996fcf202a5edcd74337b425ae1be36e8 /drivers/tee/Kconfig
parentfe39e8e0ee37595b979df7832bf91d8cacbe6244 (diff)
downloadu-boot-eadf26f1834666e6ad3ab8f17556d5939c88549e.zip
u-boot-eadf26f1834666e6ad3ab8f17556d5939c88549e.tar.gz
u-boot-eadf26f1834666e6ad3ab8f17556d5939c88549e.tar.bz2
tee: add sandbox driver
Adds a sandbox tee driver which emulates a generic TEE with the OP-TEE AVB TA. Reviewed-by: Simon Glass <sjg@chromium.org> Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org> Reviewed-by: Simon Glass <sjg@chromium.org> [trini: Fix printf warnings in ta_avb_invoke_func, slots is uint] Signed-off-by: Tom Rini <trini@konsulko.com>
Diffstat (limited to 'drivers/tee/Kconfig')
-rw-r--r--drivers/tee/Kconfig18
1 files changed, 16 insertions, 2 deletions
diff --git a/drivers/tee/Kconfig b/drivers/tee/Kconfig
index 835c256..5c0c890 100644
--- a/drivers/tee/Kconfig
+++ b/drivers/tee/Kconfig
@@ -1,8 +1,8 @@
# Generic Trusted Execution Environment Configuration
config TEE
bool "Trusted Execution Environment support"
- depends on ARM && (ARM64 || CPU_V7A)
- select ARM_SMCCC
+ depends on (ARM && (ARM64 || CPU_V7A)) || SANDBOX
+ select ARM_SMCCC if ARM
help
This implements a generic interface towards a Trusted Execution
Environment (TEE). A TEE is a trusted OS running in some secure
@@ -14,6 +14,20 @@ if TEE
menu "TEE drivers"
+config SANDBOX_TEE
+ bool "Sandbox TEE emulator"
+ depends on SANDBOX
+ default y
+ help
+ This emulates a generic TEE needed for testing including the AVB
+ TA. The emulation provides all callbacks of a regular TEE and
+ supports session and shared memory management. The AVB TA is
+ emulated with rollback indexes and device lock-state, the state
+ of the TA is only kept in RAM and will be reset on each boot.
+ The emulation only supports one open session at a time.
+ Interaction from the U-Boot command line in possible via the
+ "avb" commands.
+
source "drivers/tee/optee/Kconfig"
endmenu