blob: 5ca5a0836c5906be5f517aee700bca0d204b0f64 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
# Generic Trusted Execution Environment Configuration
config TEE
bool "Trusted Execution Environment support"
depends on (ARM && (ARM64 || CPU_V7A)) || SANDBOX
select ARM_SMCCC if ARM
help
This implements a generic interface towards a Trusted Execution
Environment (TEE). A TEE is a trusted OS running in some secure
environment, for example, TrustZone on ARM cpus, or a separate
secure co-processor etc. See also:
https://en.wikipedia.org/wiki/Trusted_execution_environment
if TEE
menu "TEE drivers"
config SANDBOX_TEE
bool "Sandbox TEE emulator"
depends on SANDBOX
default y
help
This emulates a generic TEE needed for testing including the AVB
TA. The emulation provides all callbacks of a regular TEE and
supports session and shared memory management. The AVB TA is
emulated with rollback indexes and device lock-state, the state
of the TA is only kept in RAM and will be reset on each boot.
The emulation only supports one open session at a time.
Interaction from the U-Boot command line in possible via the
"avb" commands.
source "drivers/tee/optee/Kconfig"
source "drivers/tee/broadcom/Kconfig"
endmenu
endif
|