TFM Trusted Firmware-M (TF-M) reference implementation of Arm's Platform Security Architecture (PSA) ARM http://www.keil.com/pack/ Based on https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git repository tag: TF-Mv1.2.0 Renamed Secure Service: Protected Storage instead of Secure Storage Restructured Non-Secure Components: Core, APIs Removed Test components (moved to TFM-Test pack) Based on https://git.trustedfirmware.org/trusted-firmware-m.git repository tag: TF-Mv1.0 Added support for persistent keys: https://review.trustedfirmware.org/c/trusted-firmware-m/+/3252 https://review.trustedfirmware.org/c/trusted-firmware-m/+/3253 Removed fixed NS region numbers: https://review.trustedfirmware.org/c/trusted-firmware-m/+/3484 https://review.trustedfirmware.org/c/trusted-firmware-m/+/3485 Reworked and enhanced components (including dependency) Added Bootloader (MCUBoot) Added Secure Service: Initial Attestation, Internal Trusted Storage, Platform Added Test Service: Core, IPC, Secure Client, SST, IRQ Added Test Suite: Framework, SST, ITS, Audit, Crypto, Attestation, Platform, Core, IPC, Secure Client, QCBOR, T-COSE Added Library: QCBOR, T-COSE Added Platform API and templates Update Musca-B1 examples to support Musca-B1 BSP 1.1.0 Update TFM to the latest version, hash of this snapshot is 89f232285877e40027723e4f3e23bf37013b78cd of the https://git.trustedfirmware.org/trusted-firmware-m.git repository. This version adds Crypto service and demo example and regression test for Musca B1 Board. Out-of-the box examples for ARM V2M-MPS2 BSP for CoreLink SSE-200 added. Fix vendor URL. First version of TFM released in Keil pack. This pack includes TFM Core, Audit Log and Secure Storage Service as secure services and Non-Secure API. Out-of-the box examples based on TFM configurations are also attached. This version is a snapshot of https://git.trustedfirmware.org/trusted-firmware-m.git repository of the following hash: 5c1756fbab6097f5688583d11dea5d1271d2d774 ARM Security PSA TFM TF-M TrustZone Trusted Firmware Trusted Firmware-M (TF-M) Trusted Firmware-M (TF-M) Platform TF-M Platform SPM HAL TF-M Platform Boot Seed TF-M Platform Crypto Keys TF-M Platform Device ID TF-M Platform NV Counters TF-M Platform Attest HAL TF-M Platform System TF-M Platform Test TF-M Platform Boot HAL Armv8-M architecture based device Armv8-M Baseline based device Armv8-M Mainline based device Armv8-M architecture based device with TrustZone TF-M Secure TF-M Non-secure TF-M Bootloader TF-M Secure Core TF-M Protected Storage Service (Non-encrypted) TF-M Protected Storage Service (Encrypted) TF-M Protected Storage Service (Production) TF-M Internal Trusted Storage Service TF-M Audit Logging Service TF-M Crypto Service TF-M Platform Service TF-M Initial Attestation Service TF-M Initial Attestation Service (Asymmetric) TF-M Initial Attestation Service (Symmetric) TF-M Non-Secure Core TF-M API TF-M API (SFN) TF-M API (IPC) T_COSE: Test T_COSE T_COSE Library T_COSE Library T_COSE: Test T_COSE T_COSE: Test Attestation TF-M Platform TF-M Platform NV Counters TF-M PSA Crypto TF-M PSA Internal Trusted Storage TF-M PSA Protected Storage TF-M PSA Initial Attestation TF-M Bootloader (MCUboot) #define RTE_TFM_BOOTLOADER /* TF-M Bootloader */ #define MBEDTLS_CONFIG_FILE "mcuboot-mbedtls-cfg.h" TF-M Secure Core (Secure Functions) #define RTE_TFM_CORE_SFN /* TF-M Core SFN */ #define RTE_TFM_DOMAIN_S /* TF-M Secure Domain */ TF-M Secure Core (Inter-Process Communication) #define RTE_TFM_CORE_IPC /* TF-M Core IPC */ #define RTE_TFM_DOMAIN_S /* TF-M Secure Domain */ TF-M Protected Storage Service (Non-encrypted) #define RTE_TFM_SS_PS /* TF-M Protected Storage Service */ TF-M Protected Storage Service (Encrypted) #define RTE_TFM_SS_PS /* TF-M Protected Storage Service */ #define RTE_TFM_SS_PS_ENCRYPTED /* TF-M Protected Storage Service (Encrypted) */ TF-M Internal Trusted Storage Service #define RTE_TFM_SS_ITS /* TF-M Internal Trusted Storage Service */ TF-M Audit Logging Service #define RTE_TFM_SS_AUDIT_LOGGING /* TF-M Audit Logging Service */ TF-M Crypto Secure Service #define RTE_TFM_SS_CRYPTO /* TF-M Crypto Secure Service */ #define MBEDTLS_CONFIG_FILE "tfm_mbedcrypto_config.h" TF-M Platform Service #define RTE_TFM_SS_PLATFORM /* TF-M Platform Service */ TF-M Initial Attestation Service (Asymmetric) #define RTE_TFM_SS_INITIAL_ATTESTATION /* TF-M Initial Attestation Service */ TF-M Initial Attestation Service (Symmetric) #define RTE_TFM_SS_INITIAL_ATTESTATION /* TF-M Initial Attestation Service */ #define RTE_TFM_SS_SYMMETRIC_INITIAL_ATTESTATION TF-M Non-secure Core (Secure Functions) #define RTE_TFM_CORE_SFN /* TF-M Core SFN */ #define RTE_TFM_DOMAIN_NS /* TF-M Non-Secure Domain */ TF-M Non-secure Core (Inter-Process Communication) #define RTE_TFM_CORE_IPC /* TF-M Core IPC */ #define RTE_TFM_DOMAIN_NS /* TF-M Non-Secure Domain */ TF-M Protected Storage API #define RTE_TFM_API_PS /* TF-M Protected Storage API */ TF-M Internal Trusted Storage API #define RTE_TFM_API_ITS /* TF-M Internal Trusted Storage API */ TF-M Audit Logging API #define RTE_TFM_API_AUDIT_LOGGING /* TF-M Audit Logging API */ TF-M Crypto API #define RTE_TFM_API_CRYPTO /* TF-M Crypto API */ TF-M Platform API #define RTE_TFM_API_PLATFORM /* TF-M Platform API */ TF-M Initial Attestation API #define RTE_TFM_API_INITIAL_ATTESTATION /* TF-M Initial Attestation API */ CBOR encoder/decoder #define RTE_TFM_LIBRARY_QCBOR /* TF-M QCBOR Library */ T_COSE Library (Asymmetric) #define RTE_TFM_LIBRARY_T_COSE /* TF-M T_COSE Library */ T_COSE Library (Symmetric) #define RTE_TFM_LIBRARY_T_COSE /* TF-M T_COSE Library */ #define RTE_TFM_LIBRARY_T_COSE_SYMMETRIC T_COSE Library #define RTE_TFM_LIBRARY_T_COSE /* TF-M T_COSE Library */ T_COSE Library #define RTE_TFM_LIBRARY_T_COSE /* TF-M T_COSE Library */ #define RTE_TFM_LIBRARY_T_COSE_SYMMETRIC TF-M Platform Dummy Boot Seed - only for testing! #define RTE_TFM_PLATFORM_BOOT_SEED /* TF-M Platform Boot Seed */ TF-M Platform Dummy Crypto Keys - only for testing! #define RTE_TFM_PLATFORM_CRYPTO_KEYS /* TF-M Platform Crypto Keys */ TF-M Platform Dummy Device ID - only for testing! #define RTE_TFM_PLATFORM_DEVICE_ID /* TF-M Platform Device ID */ TF-M Platform Dummy NV Counters - only for testing! #define RTE_TFM_PLATFORM_NV_COUNTERS /* TF-M Platform NV Counters */ TF-M Platform Attest HAL Template #define RTE_TFM_PLATFORM_ATTEST_HAL /* TF-M Platform Attest HAL */ TF-M PSA Crypto #define RTE_PSA_API_CRYPTO TF-M PSA Internal Trusted Storage #define RTE_PSA_API_ITS TF-M PSA Protected Storage #define RTE_PSA_API_PS TF-M PSA Initial Attestation #define RTE_PSA_API_INITIAL_ATTESTATION_TFM