Trusted Firmware-A and the related Trusted Firmware-A Tests v2.3 releases are now tagged!
The whole content of the two releases is described on the respective TF-A (1) and TF-A-Tests (2) change-logs, but here are some interesting highlights.
The TF-A release includes:
- Armv8.4 Secure EL2 extension:
- Initial support for an EL3 Secure Partition Manager Dispatcher (SPMD) aligned with the PSA FF-A (SPCI) specification Beta1
- Armv8.5 Memory Tagging Extensions (MTE):
- Now supported at EL3 for stack-tagging (tested against clang-llvm)
- The lower ELs enablement was already included in v2.2
- SMCCC v1.2 initial support:
- Updated register usage as defined by the new specification
- Please note:
- The SMCCC_ARCH_SOC_ID SMC support introduced is known to be affected by a problem which will be soon fixed on Master and will be part of the next v2.4 release
- SVE registers save/restore that will considered as part of future S-EL2/SPM developments
- GIC extensions:
- GIC-600 multichip configuration support
- GICv4 extension support
- AArch64/AArch32: Prevent speculative execution past ERET (using architected Armv8.5 Speculation Barrier if implemented by the specific core)
- Multiple CoT (Chain of Trust):
- Introduce a new dualroot CoT, extending the single monolithic CoT defined in TBBR.
- The current support allows to enable two different Root of Trust:
- ROTPK: owned by the Silicon Provider, used to sign BL1, BL2, BL31 and BL32
- PROTPK: owned by the Platform owner, used to sign BL33
- Support for multiple Secure Partitions signed by different ROT keys will be added later on
- Support for the Firmware Configuration Framework (FCONF) - Experimental
- Experimental new abstraction layer for platforms to consume dynamic configuration data in config files in a scalable way using the defined framework
- Support for the optional Firmware encryption feature (for BL31/BL32 images) - Experimental
- Experimental feature to allow TF-A loading encrypted FIP payloads (mainly for BL32 Trusted OS) as described in TBBR
- Support for Read-only xlat tables in BL31
- Add DebugFS functionality
- A new feature to expose firmware debug data to higher software layers such as a non-secure lower ELs
- To be used in debug builds only
- Mbed TLS updated to v2.18
New Arm cores and Arm/Partners platforms support:
- Arm Matterhorn and Klein CPU support
- Arm Hercules: workaround for Errata #1688305
- Arm RD-Daniel FVP platform support
- Broadcom Stingray platform
- NVIDIA Tegra T194
The TF-A-Test release includes:
- Internal CI upgraded to use GCC 9.2-2019.12 toolchain for tf-a-tests
- Support for extended register usage as per SMCCC v1.2 specification.
- Support for FVP platforms with SMT capabilities.
- Arm v8.3 Pointer Authentication enabled for all FWU tests in TFTF
- New tests added:
- AArch32 tests for checking if PMU counters leak in secure world
- Add new debug filesystem (debugfs) test
- Add a SPCI direct messaging test targeting bare-metal cactus (test) SP