Attest: Add ARM_CCA attestation token profile
Specification:
https://developer.arm.com/documentation/den0137/latest
Signed-off-by: Tamas Ban <tamas.ban@arm.com>
Change-Id: I5baa8004e72a5c6e8202fbe67c2dc86a7a2a358a
diff --git a/platform/ext/common/provisioning.c b/platform/ext/common/provisioning.c
index d90a863..8b6c3e7 100644
--- a/platform/ext/common/provisioning.c
+++ b/platform/ext/common/provisioning.c
@@ -94,6 +94,8 @@
"PSA_IOT_PROFILE_1",
#elif defined(ATTEST_TOKEN_PROFILE_PSA_2_0_0)
"http://arm.com/psa/2.0.0",
+#elif defined(ATTEST_TOKEN_PROFILE_ARM_CCA)
+ "http://arm.com/CCA-SSD/1.0.0",
#else
#ifdef TFM_PARTITION_INITIAL_ATTESTATION
#error "Attestation token profile is incorrect"
diff --git a/platform/ext/target/arm/rss/config.cmake b/platform/ext/target/arm/rss/config.cmake
index 5a3744a..77ef180 100644
--- a/platform/ext/target/arm/rss/config.cmake
+++ b/platform/ext/target/arm/rss/config.cmake
@@ -34,6 +34,8 @@
set(MEASURED_BOOT_HASH_ALG PSA_ALG_SHA_256 CACHE STRING "Hash algorithm used by Measured boot services")
set(TFM_MBEDCRYPTO_PLATFORM_EXTRA_CONFIG_PATH ${CMAKE_CURRENT_LIST_DIR}/mbedtls_extra_config.h CACHE PATH "Config to append to standard Mbed Crypto config, used by platforms to cnfigure feature support")
+set(ATTEST_TOKEN_PROFILE "ARM_CCA" CACHE STRING "Set the initial attestation token profile")
+
set(CONFIG_TFM_USE_TRUSTZONE OFF CACHE BOOL "Enable use of TrustZone to transition between NSPE and SPE")
set(TFM_MULTI_CORE_TOPOLOGY ON CACHE BOOL "Whether to build for a dual-cpu architecture")
set(TFM_PLAT_SPECIFIC_MULTI_CORE_COMM ON CACHE BOOL "Whether to use a platform specific inter-core communication instead of mailbox in dual-cpu topology")