Re: [Tee-dev] [PATCH 1/1] ArmPkg/OpteeLib: Add APIs to communicate with OP-TEE

[Sumit Garg <sumit.garg@linaro.org>]

On Fri, 24 Aug 2018 at 15:57, Jerome Forissier
<jerome.forissier@linaro.org> wrote:
>
>
>
> On 08/24/2018 11:21 AM, Sumit Garg wrote:
> > Add following APIs to communicate with OP-TEE static TA:
>
> "static TAs" are now preferably called "pseudo TAs" [1],

Sure will use "pseudo TAs" instead.

> but it seems this API could be used to invoke "early TAs" as well.

Agree this API could work with "early TAs" as well.

> Or any kind of
> Trusted Application as long as the non-secure infrastructure is
> available (OP-TEE kernel driver and tee-supplicant daemon).
>

Current patch for UEFI doesn't provide non-secure infrastructure like
support for RPC load TA command. I am not sure about usefulness of
such infrastructure during boot. Anyhow this driver could be extended
to provide non-secure infrastructure as well.

-Sumit

> [1]
> https://github.com/OP-TEE/optee_os/blob/3.2.0/documentation/optee_design.md#12-trusted-applications
>
> > 1. OpteeInit
> > 2. OpteeOpenSession
> > 3. OpteeCloseSession
> > 4. OpteeInvokeFunc
> >
> > Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
> > Cc: Leif Lindholm <leif.lindholm@linaro.org>
> > Contributed-under: TianoCore Contribution Agreement 1.1
> > Signed-off-by: Sumit Garg <sumit.garg@linaro.org>
> > ---
> >  ArmPkg/Include/Library/OpteeLib.h                  | 102 ++++++
> >  ArmPkg/Library/OpteeLib/Optee.c                    | 358 +++++++++++++++++++++
> >  ArmPkg/Library/OpteeLib/OpteeLib.inf               |   2 +
> >  ArmPkg/Library/OpteeLib/OpteeSmc.h                 |  43 +++
> >  .../Include/IndustryStandard/GlobalPlatform.h      |  60 ++--
> >  5 files changed, 531 insertions(+), 34 deletions(-)
> >  create mode 100644 ArmPkg/Library/OpteeLib/OpteeSmc.h
> >  copy ArmPkg/Include/Library/OpteeLib.h => MdePkg/Include/IndustryStandard/GlobalPlatform.h (53%)
> [...]
>