Gitiles
Code Review Sign In
review.trustedfirmware.org / TF-M / trusted-firmware-m.git / 4036a8a7339ea6a7226a802fbbe7e52eb5576155
commit4036a8a7339ea6a7226a802fbbe7e52eb5576155[log] [tgz]
authorMate Toth-Pal <mate.toth-pal@arm.com>Tue Jan 23 17:34:32 2018 +0100
committerAshutosh Singh <ashutosh.singh@arm.com>Wed Feb 14 16:52:14 2018 +0000
tree7390fee0cedaab397df94bb951409079ffae6b4c
parentef4b26e34d551170846fe3bf73571a7dcc0d4ea6 [diff]
TFM Core: Add support for ARMv8-M baseline to TF-M Core

Supported assembly instructions and their variants differ on mainline and
baseline ARMv8-M architecture. This change adds compile time selectable
alternative implementation to support baseline.

Change-Id: Icf82e6381edec724f35947309d3d6fe99f7ce588
Signed-off-by: Mate Toth-Pal <mate.toth-pal@arm.com>
2 files changed
tree: 7390fee0cedaab397df94bb951409079ffae6b4c
  1. app/
  2. bl2/
  3. cmake/
  4. docs/
  5. interface/
  6. platform/
  7. secure_fw/
  8. test/
  9. .gitignore
  10. BuildMbedtls.cmake
  11. CMakeLists.txt
  12. CommonConfig.cmake
  13. ConfigCoreTest.cmake
  14. ConfigDefault.cmake
  15. ConfigRegression.cmake
  16. contributing.md
  17. dco.txt
  18. glossary.md
  19. license.md
  20. log.bat
  21. log.sh
  22. maintainers.md
  23. readme.md
readme.md

Trusted Firmware M - v0.1

Trusted Firmware M provides a reference implementation of secure world software for ARMv8-M.

Note: The software implementation contained in this project is designed to be a reference implementation of the Arm Platform Security Architecture (PSA). It currently does not implement all the features of that architecture, however we expect the code to evolve over 2018 along with the specifications.

Terms 'TFM' and 'TF-M' are commonly used in documents and code and both refer to Trusted Firmware M.

Glossary has the list of terms and abbreviations.

License

The software is provided under a BSD-3-Clause License. Contributions to this project are accepted under the same license with developer sign-off as described in the Contributing Guidelines.

This project contains code from other projects as listed below. The code from external projects is limited to app and platform folders. The original license text is included in those source files.

  • The platform folder currently contains drivers imported from external project and the files have Apache 2.0 license.
  • The app folder contains files imported from CMSIS_5 project and the files have Apache 2.0 license.
  • The bl2 folder contains files imported from MCUBoot project and the files have Apache 2.0 license.

Note Any code that has license other than BSD-3-Clause is kept in specific sub folders named ext so that it can isolated if required.

This Release

This release includes

  • A Secure FW with support for PSA Level 1 isolation on ARMv8M.
  • The Interfaces exposed by the Secure FW to NS side.
  • A blocking secure fw model with NS application example.
  • Example secure service (or secure function) running within this SPE.
    • Only secure storage service is supported in this release.
  • Testcases running baremetal and with RTX to test the functionality.
  • Basic support for higher level isolation but it is in progress with limited testing.
  • BL2 bootloader for image authentication based on SHA256 and RSA-2048 digital signature.
  • Build system based on cmake and armclang.

In progress

  • GCC support
  • Ongoing and incremental support for PSA features.
    • Level 3 PSA isolation
    • PSA Crypto API support
    • PSA IPC support
    • ...
  • OS support and use case examples.
    • mbed OS upstream support
    • mbed cloud client examples
    • ...
  • Additional platform support.
    • Musca test chip
    • Cortex M23 support
    • ...
  • Ongoing security hardening, optimization and quality improvements.

Platforms

Current release has been tested on

Getting Started

Prerequisite

Trusted Firmware M provides a reference implementation of PSA specifications. It is assumed that the reader is familiar with PSA concepts and terms. PSA specifications are currently not available in the public domain.

The current TF-M implementation specifically targets TrustZone for ARMv8-M so a good understanding of the v8-M architecture is also necessary. A good place to get started with ARMv8-M is develeper.arm.com.

Really getting started

Trusted Firmware M source code is available on github

To build & run TF-M

To port TF-M to a another system or OS, follow the OS Integration Guide

Please also see the glossary of terms used in the project.

Contributing Guidelines contains guidance on how to contribute to this project.

Further documents can be found in the docs folder.

Feedback and support

For this early access release, feedback is requested via email to support-trustedfirmware-m@arm.com .

Version history

VersionDateDescription
0.12017-12-15Early Access Release

Copyright (c) 2017, Arm Limited. All rights reserved.