Laukik Hase
2d494c5df6
- Changed the default TEE code placement to use the flash text section instead of IRAM text, making it consistent with the default data placement.
22 lines
601 B
Plaintext
22 lines
601 B
Plaintext
# Reducing TEE I/DRAM sizes
|
|
# 28KB
|
|
CONFIG_SECURE_TEE_IRAM_SIZE=0x7000
|
|
# 16KB
|
|
CONFIG_SECURE_TEE_DRAM_SIZE=0x4000
|
|
|
|
# TEE Secure Storage: Release mode
|
|
CONFIG_SECURE_TEE_SEC_STG_MODE_RELEASE=y
|
|
CONFIG_SECURE_TEE_SEC_STG_EFUSE_HMAC_KEY_ID=5
|
|
|
|
# Disabling support for SECP192R1 signature
|
|
CONFIG_SECURE_TEE_SEC_STG_SUPPORT_SECP192R1_SIGN=n
|
|
|
|
# Disabling flash protection over SPI1
|
|
CONFIG_SECURE_TEE_EXT_FLASH_MEMPROT_SPI1=n
|
|
|
|
# Secure Boot
|
|
CONFIG_PARTITION_TABLE_OFFSET=0xf000
|
|
CONFIG_SECURE_BOOT=y
|
|
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=y
|
|
CONFIG_SECURE_BOOT_SIGNING_KEY="test_keys/secure_boot_signing_key.pem"
|