linux/meta-ti.git/meta-ti-bsp/recipes-security, branch 11.02.15

trusted-firmware-a/optee-os: Add LPM support on few platforms

2025-12-01T14:29:54+00:00

Adds the required TF-A and OP-TEE patches to enable LPM support on J7200, J784s4, J742s2. Signed-off-by: Manorit Chawdhry Signed-off-by: Ryan Eatmon

optee: Update to 4.7.0 tag

2025-09-16T12:28:15+00:00

Update optee_client, optee_examples, optee_os and optee_test to the newer 4.7.0 tag from the previous 4.6.0 one. Further: meta-arm applies 0003-optee-enable-clang-support patch to optee_os. However, in a recent upstream commit [0], the line to which the patch applies was removed. Therefore the patch is no longer required. As a result, tell optee_os.bbappend file to remove it. [0] https://github.com/OP-TEE/optee_os/commit/3d5c2dd8b59ae888434b3f86842828131f115d90 Signed-off-by: Suhaas Joshi Signed-off-by: Ryan Eatmon

meta-ti-bsp: recipes-security: optee: Update OP-TEE components to 4.6.0

2025-06-27T15:11:15+00:00

Updates optee_os, optee_test, optee_client, optee_examples to 4.6.0 Signed-off-by: Manorit Chawdhry Signed-off-by: Ryan Eatmon

meta-ti-bsp: optee: add build flags for am62xxsip-evm

2025-06-26T14:05:46+00:00

CFG_TZDRAM_START in OPTEE defines it's load address and is used to configure the page tables accordingly. Due to 512MiB DDR limitation of am62x SiP, the memory map has been modified with OP-TEE moved to bottom of DDR after atf to 0x80080000, this requires modifications to the OPTEE's CFG_TZDRAM_START. Signed-off-by: Anshul Dalal Signed-off-by: Ryan Eatmon

CLEANUP: :append needs a space

2025-05-28T15:18:07+00:00

Usually :append is used to add items to a space separated list. In those cases the first character of the appended string should be a space to make sure that the append is correct. In this case, the space was embedded in the string and not right after the ". Simple fix is to move the space to the front to be consistent. Signed-off-by: Ryan Eatmon

meta-ti-bsp : Add build support for am62dxx-evm

2025-05-14T22:28:47+00:00

The AM62D SoC is a high-performance Digital Signal Processing (DSP) device with a quad-core Cortex-A53 cluster, dual Cortex-R5F cores, and a Cx7 DSP core with Matrix Multiplication Accelerator (MMA). It features a range of peripherals, including multichannel audio serial ports, Ethernet, UARTs, SPI, I2C, USB, and more. This SoC is part of K3-AM62x family, which includes the AM62A and AM62P variants. While the AM62A and AM62D are largely similar, the AM62D is specifically targeted for general-purpose DSP applications, whereas the AM62A focuses on edge AI workloads. A key distinction is that the AM62D does not include multimedia components such as the video encoder/decoder, MJPEG encoder, Vision Processing Accelerator (VPAC) for image signal processing, or the display subsystem. Additionally, the AM62D has a different pin configuration compared to the AM62A, which impacts embedded software development. The EVM board is a low-cost, expandable platform designed for the AM62D2 SoC, having 4GB LPDDR4 RAM, Gigabit Ethernet expansion connectors, audio jacks, USB ports, and more. Signed-off-by: Paresh Bhagat Signed-off-by: Ryan Eatmon

optee-os: drop custom handling of embedded TAs

2025-03-17T18:52:31+00:00

The meta-arm layer, which is the provider of the base recipe for optee-os, added [1] a separate optee-os-ta package for the embedded TAs that are compiled as part of the OPTEE OS build process. However, the TI overrides for optee-os include the embedded TAs inside the base package, leaving the optee-os-ta package empty (and thus not installable). Align to the meta-arm behaviour and simply add a runtime dependency on optee-os-ta for optee-os. While keeping backward compatibility, this allows to install only the embedded TAs - reducing the required disk space - on platforms on which the OPTEE OS is loaded from an external boot image rather than being fetched from the root filesystem, like the K3 SoCs. [1] https://patchwork.yoctoproject.org/project/arm/patch/20230630112340.3314395-1-r.czerwinski@pengutronix.de/ Signed-off-by: Francesco Valla Signed-off-by: Ryan Eatmon

meta-ti-bsp: Add Support for AM62L

2025-02-05T14:49:53+00:00

- Add machine configuration for am62lxx-evm - Add TFA, OPTEE, firmware & u-boot overrides Signed-off-by: Chirag Shilwant Signed-off-by: Ryan Eatmon

recipes-security: optee: Update to v4.5.0+

2025-02-05T14:49:53+00:00

Bump up SRCREV of optee-os to ef1ebdc23034a804a72da2207f1a825ce96a1464 Signed-off-by: Chirag Shilwant Signed-off-by: Ryan Eatmon

recipes-security: optee: Remove software PRNG for am62pxx

2024-12-11T21:45:20+00:00

With the latest TIFS fix [1], AM62P is able to leverage the hardware-TRNG instead of having to fallback into the software-PRNG. Background: The default priv-id for A53 cores in SYSFW for AM62P was chosen to be 4 while the other K3 SOCs were configured at 1. Any firewall TISCI API call that used 1 would not be able to run on AM62P. The TIFS fix changes the AM62P value from 4 to 1. [1] - https://git.ti.com/cgit/processor-firmware/ti-linux-firmware/commit/?h=ti-linux-firmware&id=98de0a4290ec200cc224d4a5a6f42d2126230e2f Signed-off-by: Aashvij Shenai Acked-by: Chirag Shilwant