blob: 37cf68b2545266722e2e5f6ee2d5557388d85f3b [file] [log] [blame]
Jianliang Shenf57c6a72023-02-20 14:04:38 +08001#-------------------------------------------------------------------------------
Raef Coles439265a2024-12-09 17:19:19 +00002# SPDX-FileCopyrightText: Copyright The TrustedFirmware-M Contributors
Jianliang Shenf57c6a72023-02-20 14:04:38 +08003#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6#-------------------------------------------------------------------------------
7
8menuconfig BL1
9 bool "BL1"
10 default n
11
12if BL1 && PLATFORM_DEFAULT_BL1
13
14config TFM_BL2_ENCRYPTION_KEY_PATH
15 string
16 default "$(TFM_SOURCE_DIR)/bl1/bl1_2/bl2_dummy_encryption_key.bin"
17 help
18 Path to binary key to use for encrypting BL2
19
20config TFM_GUK_PATH
21 string
22 default "$(TFM_SOURCE_DIR)/bl1/bl1_1/dummy_guk.bin"
23 help
24 Path to binary GUK key file to provision
25
26config TFM_BL2_IMAGE_FLASH_AREA_NUM
27 int "Which flash area BL2 is stored in"
28 default 0
29
Raef Coles439265a2024-12-09 17:19:19 +000030config TFM_BL2_CM_SIGNING_KEY_PATH
Jianliang Shenf57c6a72023-02-20 14:04:38 +080031 string
32 default "$(TFM_SOURCE_DIR)/bl1/bl1_2/bl1_dummy_rotpk"
33 help
34 Path to binary BL2 signing private key
35
Raef Coles439265a2024-12-09 17:19:19 +000036config TFM_BL2_SIGNING_ALG
37 string
38 default "LMS"
39 help
40 Path to binary BL2 signing private key
41
Jianliang Shenf57c6a72023-02-20 14:04:38 +080042config TFM_BL1_MEMORY_MAPPED_FLASH
43 bool "BL1 Access flash content"
44 default y
45
Jianliang Shenf57c6a72023-02-20 14:04:38 +080046config TFM_BL1_DEFAULT_OTP
47 bool
48 default y
49 help
50 Whether BL1_1 will use default OTP memory
51
52config TFM_BL1_DEFAULT_PROVISIONING
53 bool
54 default y
55 help
56 Whether BL1_1 will use default provisioning
57
58config TFM_BL1_SOFTWARE_CRYPTO
59 bool
60 default y
61 help
62 Whether BL1_1 will use software crypto
63
64config TFM_BL1_DUMMY_TRNG
65 bool
66 default y
67 help
68 Whether BL1_1 will use dummy TRNG
69
Raef Coles439265a2024-12-09 17:19:19 +000070config TFM_BL1_2_ENABLE_LMS
Jianliang Shenf57c6a72023-02-20 14:04:38 +080071 bool "Enable LMS PQ crypto for BL2 verification."
72 default n
73 help
Raef Coles439265a2024-12-09 17:19:19 +000074 Enable LMS PQ crypto for BL2 verification.
75
76config TFM_BL1_2_ENABLE_ECDSA
77 bool "Enable ECDSA crypto for BL2 verification."
78 default n
79 help
80 Enable ECSDA crypto for BL2 verification.
Jianliang Shenf57c6a72023-02-20 14:04:38 +080081
82config TFM_BL1_IMAGE_VERSION_BL2
83 string "Image version of BL2 image"
84 default "1.9.0+0"
85
86config TFM_BL1_IMAGE_SECURITY_COUNTER_BL2
87 int "Security counter value to include with BL2 image"
88 default 1
89
90config TFM_BL1_2_IN_OTP
91 bool "Whether BL1_2 is stored in OTP"
92 default y
93
Raef Colesf8426362024-01-15 12:38:10 +000094config TFM_BL1_2_IN_FLASH
95 bool "Whether BL1_2 is stored in FLASH"
96 default n
97
Raef Coles4874aa62023-04-05 10:40:12 +010098config BL1_2_BUILD_TYPE
99 string "BL1_2 build type"
100 default "$(CMAKE_BUILD_TYPE)"
101
Raef Coles4d4aa882024-05-16 10:22:55 +0100102config BL1_1_SHARED_SYMBOLS_PATH
Jianliang Shenc750f652023-08-09 11:16:17 +0800103 string "Path to list of symbols that BL1_1 that can be referenced from BL1_2"
104 default "${TFM_SOURCE_DIR}/bl1/bl1_1/bl1_1_shared_symbols.txt"
105
Jianliang Shenf57c6a72023-02-20 14:04:38 +0800106endif