Re: [Tee-dev] [PATCH 1/1] ArmPkg/OpteeLib: Add APIs to communicate with OP-TEE

[Sumit Garg <sumit.garg@linaro.org>]

On Fri, 24 Aug 2018 at 17:48, Jerome Forissier
<jerome.forissier@linaro.org> wrote:
>
>
>
> On 08/24/2018 02:09 PM, Sumit Garg wrote:
> > On Fri, 24 Aug 2018 at 15:57, Jerome Forissier
> > <jerome.forissier@linaro.org> wrote:
> >>
> >>
> >>
> >> On 08/24/2018 11:21 AM, Sumit Garg wrote:
> >>> Add following APIs to communicate with OP-TEE static TA:
> >>
> >> "static TAs" are now preferably called "pseudo TAs" [1],
> >
> > Sure will use "pseudo TAs" instead.
> >
> >> but it seems this API could be used to invoke "early TAs" as well.>
> > Agree this API could work with "early TAs" as well.
>
> SO the exact, precise description is "pseudo/early TAs" ;-)
>

Ok I will use this in v2.

> >
> >> Or any kind of
> >> Trusted Application as long as the non-secure infrastructure is
> >> available (OP-TEE kernel driver and tee-supplicant daemon).
> >>
> >
> > Current patch for UEFI doesn't provide non-secure infrastructure like
> > support for RPC load TA command. I am not sure about usefulness of
> > such infrastructure during boot.
>
> OK that's the info I was missing, if it's for boot time only then
> "regular" TAs are out-of-scope clearly.
>
> > Anyhow this driver could be extended
> > to provide non-secure infrastructure as well.
> >
> > -Sumit
> >
> >> [1]
> >> https://github.com/OP-TEE/optee_os/blob/3.2.0/documentation/optee_design.md#12-trusted-applications
> >>
> >>> 1. OpteeInit
> >>> 2. OpteeOpenSession
> >>> 3. OpteeCloseSession
> >>> 4. OpteeInvokeFunc
> >>>
> >>> Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
> >>> Cc: Leif Lindholm <leif.lindholm@linaro.org>
> >>> Contributed-under: TianoCore Contribution Agreement 1.1
> >>> Signed-off-by: Sumit Garg <sumit.garg@linaro.org>
> >>> ---
> >>>  ArmPkg/Include/Library/OpteeLib.h                  | 102 ++++++
> >>>  ArmPkg/Library/OpteeLib/Optee.c                    | 358 +++++++++++++++++++++
> >>>  ArmPkg/Library/OpteeLib/OpteeLib.inf               |   2 +
> >>>  ArmPkg/Library/OpteeLib/OpteeSmc.h                 |  43 +++
> >>>  .../Include/IndustryStandard/GlobalPlatform.h      |  60 ++--
> >>>  5 files changed, 531 insertions(+), 34 deletions(-)
> >>>  create mode 100644 ArmPkg/Library/OpteeLib/OpteeSmc.h
> >>>  copy ArmPkg/Include/Library/OpteeLib.h => MdePkg/Include/IndustryStandard/GlobalPlatform.h (53%)
> >> [...]
> >>