Digi
/
meta-digi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

optee-os-stm32mp: use OTP HUK when TrustFence enabled 

When TrustFence is enabled, use the HUK programmed on the OTP
bits for the ccmp15 platform.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-9121
This commit is contained in:
Hector Palacios 2024-07-15 16:25:02 +02:00
parent 0c642ed7ec
commit 9ef54b7b8e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
meta-digi-arm/dynamic-layers/stm-st-stm32mp/recipes-security/optee/optee-os-stm32mp_%.bbappend
View File

@ -14,3 +14,6 @@ SRC_URI = " \
${OPTEE_GIT_URI};branch=${SRCBRANCH};name=os \ ${OPTEE_GIT_URI};branch=${SRCBRANCH};name=os \
file://fonts.tar.gz;subdir=git;name=fonts \ file://fonts.tar.gz;subdir=git;name=fonts \
" "
# If TF enabled, force use of HUK in OTP bits
EXTRA_OEMAKE += "${@oe.utils.conditional('TRUSTFENCE_ENABLED', '1', 'CFG_OTP_HUK=1', '', d)}"