Laukik Hase
06ba6bb4b4
Currently, REE SPI flash HAL operations are routed as service calls to TEE, but the TEE implementation incorrectly uses ROM APIs instead of HAL APIs. This leads to issues and is not the recommended approach.
20 lines
559 B
Plaintext
20 lines
559 B
Plaintext
# Reducing TEE I/DRAM sizes
|
|
# 28KB
|
|
CONFIG_SECURE_TEE_IRAM_SIZE=0x7000
|
|
|
|
# TEE Secure Storage: Release mode
|
|
CONFIG_SECURE_TEE_SEC_STG_MODE_RELEASE=y
|
|
CONFIG_SECURE_TEE_SEC_STG_EFUSE_HMAC_KEY_ID=5
|
|
|
|
# Disabling support for SECP192R1 signature
|
|
CONFIG_SECURE_TEE_SEC_STG_SUPPORT_SECP192R1_SIGN=n
|
|
|
|
# Disabling flash protection over SPI1
|
|
CONFIG_SECURE_TEE_EXT_FLASH_MEMPROT_SPI1=n
|
|
|
|
# Secure Boot
|
|
CONFIG_PARTITION_TABLE_OFFSET=0xf000
|
|
CONFIG_SECURE_BOOT=y
|
|
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=y
|
|
CONFIG_SECURE_BOOT_SIGNING_KEY="test_keys/secure_boot_signing_key.pem"
|