“TF-A overview”的版本间的差异

来自百问网嵌入式Linux wiki
第1行： 第1行：
 
== Trusted Firmware-A ==
 
== Trusted Firmware-A ==
−
[[File: STM32MPU Embedded Software architecture overview.png|link=STM32MPU Embedded Software architecture overview|thumb|Zoom out to STM32MPU Embedded Software]]
+
[[File: STM32MPU Embedded Software architecture overview.png|link=STM32MPU Embedded Software architecture overview|thumb|缩小到STM32MPU嵌入式软件]]
 
Trusted Firmware-A是Arm提供的安全世界软件的参考实现。<sup>&reg;</sup>. 它最初是为Armv8-A平台设计的，并已由意法半导体（STMicroelectronics）改编为用于Armv7-A平台。 Arm正在转让Trusted Firmware项目，该项目将由Linaro作为开源项目进行管理。<ref>https://www.trustedfirmware.org/</ref>
 
Trusted Firmware-A是Arm提供的安全世界软件的参考实现。<sup>&reg;</sup>. 它最初是为Armv8-A平台设计的，并已由意法半导体（STMicroelectronics）改编为用于Armv7-A平台。 Arm正在转让Trusted Firmware项目，该项目将由Linaro作为开源项目进行管理。<ref>https://www.trustedfirmware.org/</ref>
  
第18行： 第18行：
 
== Architecture ==
 
== Architecture ==
  
−
The global architecture of TF-A is explained in the Trusted Firmware-A design <ref>{{CodeSource | TF-A | docs/firmware-design.rst}}</ref> document.
+
TF-A的全局体系结构在Trusted Firmware-A设计文档中进行了说明 <ref>{{CodeSource | TF-A | docs/firmware-design.rst}}</ref>。
  
−
TF-A is divided into several binaries, each with a dedicated main role. For 32-bit Arm processors (AArch32), it is divided into four steps (in order of execution):
+
TF-A分为几个二进制文件，每个都有专门的主要角色。 对于32位Arm处理器（AArch32），它分为四个步骤（按执行顺序）:
−
* Boot loader stage 1 (BL1) application processor trusted ROM
+
* 引导加载程序第1阶段（BL1）应用处理器受信任的ROM
−
* Boot loader stage 2 (BL2) trusted boot firmware
+
* 引导加载程序第2阶段（BL2）受信任的引导固件
−
* Boot loader stage 3-2 (BL32) runtime software
+
* 引导加载程序阶段3-2（BL32）运行时软件
−
* Boot loader stage 3-3 (BL33) non-trusted firmware
+
* 引导加载程序阶段3-3（BL33）不可信固件
  
−
BL1, BL2 and BL32 are parts of TF-A.
+
BL1，BL2和BL32是TF-A的一部分。
  
−
BL1 is now optional, and can be removed by enabling the compilation flag: BL2_AT_EL3. It is then removed for the STM32MP1, as all BL1 tasks are done by [[:Category:ROM code|ROM code]], or BL2.
+
BL1现在是可选的，并且可以通过启用编译标志BL2_AT_EL3来删除。 然后将其删除以用于STM32MP1，因为所有BL1任务均由 [[:Category:ROM code|ROM code]]或BL2完成。
 +
BL33在TF-A之外。 这是TF-A加载的第一个非安全代码。 在引导过程中，这是二级引导加载程序（SSBL）。 对于STM32 MPU平台，默认情况下，SSBL为[[U-Boot overview|U-Boot]]。
  
−
BL33 is outside of TF-A. This is the first non-secure code loaded by TF-A. During the boot sequence, this is the secondary stage boot loader (SSBL). For STM32 MPU platforms, the SSBL is [[U-Boot overview|U-Boot]] by default.
+
TF-A可以使用[[STM32MP15_device_tree#Device tree structure for Linux, U-Boot and TF-A|device tree]]管理其配置，因为STM32MP1就是这种情况。它是Linux内核的简化版本，仅在引导过程中使用设备。可以使用[[STM32CubeMX]]进行配置。
  
−
TF-A can manage its configuration with a [[STM32MP15_device_tree#Device tree structure for Linux, U-Boot and TF-A|device tree]], as this is the case on STM32MP1. It is a reduced version of the Linux kernel one, with only the devices used during boot. It can be configured with [[STM32CubeMX]].
+
在意法半导体（STMicroelectronics）的实现中，将2个二进制文件BL2和BL32以及设备树放到一个二进制文件中，然后通过ROM代码立即将其加载到SYSRAM中。
−
 
 
−
In STMicroelectronics' implementation, the 2 binaries, BL2 and BL32, and the device tree are put together in a single binary, to be loaded at once to the SYSRAM by the ROM code.
 
  
 
[[File:Boot_ATF.png|center|link=]]
 
[[File:Boot_ATF.png|center|link=]]

2020年11月2日 (一) 10:19的版本

Trusted Firmware-A

缩小到STM32MPU嵌入式软件

Trusted Firmware-A是Arm提供的安全世界软件的参考实现。®. 它最初是为Armv8-A平台设计的，并已由意法半导体（STMicroelectronics）改编为用于Armv7-A平台。 Arm正在转让Trusted Firmware项目，该项目将由Linaro作为开源项目进行管理。[1]

当使用STM32 MPU平台时，它用作STM32 MPU平台上的第一阶段引导加载程序（FSBL）。 trusted boot chain.

该代码在BSD-3-Clause许可下是开源的，可以在github上找到 [2], 包括有关Trusted Firmware-A安装的最新文档 [3].

Trusted Firmware-A还使用各种Arm接口标准实施安全的监视器:

  • 电源状态协调接口（PSCI） [4]
  • 可信板启动要求（TBBR）[5]
  • SMC呼叫约定 [6]
  • 系统控制和管理界面[7]

Trusted Firmware-A 通常缩写为 TF-A.

Architecture

TF-A的全局体系结构在Trusted Firmware-A设计文档中进行了说明 [8]。

TF-A分为几个二进制文件，每个都有专门的主要角色。 对于32位Arm处理器（AArch32），它分为四个步骤（按执行顺序）:

  • 引导加载程序第1阶段（BL1）应用处理器受信任的ROM
  • 引导加载程序第2阶段（BL2）受信任的引导固件
  • 引导加载程序阶段3-2（BL32）运行时软件
  • 引导加载程序阶段3-3（BL33）不可信固件

BL1，BL2和BL32是TF-A的一部分。

BL1现在是可选的，并且可以通过启用编译标志BL2_AT_EL3来删除。 然后将其删除以用于STM32MP1，因为所有BL1任务均由 ROM code或BL2完成。 BL33在TF-A之外。 这是TF-A加载的第一个非安全代码。 在引导过程中，这是二级引导加载程序（SSBL）。 对于STM32 MPU平台，默认情况下，SSBL为U-Boot。

TF-A可以使用device tree管理其配置，因为STM32MP1就是这种情况。它是Linux内核的简化版本，仅在引导过程中使用设备。可以使用STM32CubeMX进行配置。

在意法半导体（STMicroelectronics）的实现中，将2个二进制文件BL2和BL32以及设备树放到一个二进制文件中，然后通过ROM代码立即将其加载到SYSRAM中。

Boot ATF.png
文件:Boot ATF legend.png

TF-A loading steps:

  1. ROM code loads TF-A binary and calls BL2
  2. BL2 prepares BL32
  3. BL2 loads BL33
  4. BL2 calls BL32
  5. BL32 calls BL33

Boot loader stages

BL1

BL1 is the first stage executed, and is designed to act as ROM code; it is loaded and executed in internal RAM. It is not used for the STM32MP1. As the STM32MP1 has its own proprietary ROM code, this part can be removed and BL2 is then the first TF-A binary to be executed.

BL2

BL2 (trusted boot firmware) is in charge of loading the next-stage images (secure and non secure). To achieve this role, BL2 has to initialize all the required peripherals.

It has to initialize the security components.
For the STM32MP15, these security peripherals are:

BL2 is also in charge of initializing the DDR and clock tree.

The boot peripheral has to be initialized.
On the STM32MP15, it can be one of the following:

USB (OTG internal peripheral) or UART(USART internal peripheral) are used when Flashing, see STM32CubeProgrammer for more details.

BL2 also integrates image verification and authentication. Authentication is achieved by calling BootROM verification services.

At the end of its execution, after having loaded BL32 and the next boot stage (BL33), BL2 jumps to BL32.

BL32

BL32 provides runtime secure services. In TF-A, the BL32 default implementation is SP_min solution. It is described in the TF-A functionality list [3] as: "A minimal AArch32 Secure Payload (SP_MIN) to demonstrate PSCI [4] library integration with AArch32 EL3 Runtime Software."

This minimal implementation can be replaced with a trusted OS or trusted environment execution (TEE), such as OP-TEE. Both solutions (SP_min or OP-TEE) are supported by STMicroelectronics for STM32MP1.

BL32 acts as a secure monitor and thus provides secure services to non-secure OSs. These services are called by non-secure software with secure monitor calls [6].

This code is in charge of standard service calls, like PSCI [4].

It also provides STMicroelectronics dedicated services, to access secure peripherals. On the STM32MP1, these services are used to access RCC internal peripheral, PWR internal peripheral, RTC internal peripheral or BSEC internal peripheral.

References

  1. ↑ https://www.trustedfirmware.org/
  2. ↑ https://github.com/ARM-software/arm-trusted-firmware
  3. ↑ 3.03.1 readme.rst| |}} readme.rst
  4. ↑ 4.04.14.2 http://infocenter.arm.com/help/topic/com.arm.doc.den0022d/Power_State_Coordination_Interface_PDD_v1_1_DEN0022D.pdf
  5. ↑ Arm DEN0006C-1
  6. ↑ 6.06.1 http://infocenter.arm.com/help/topic/com.arm.doc.den0028b/ARM_DEN0028B_SMC_Calling_Convention.pdf
  7. ↑ http://infocenter.arm.com/help/topic/com.arm.doc.den0056a/DEN0056A_System_Control_and_Management_Interface.pdf
  8. ↑ docs/firmware-design.rst| |}} docs/firmware-design.rst

<securetransclude src="ProtectedTemplate:PublicationRequestId" params="9178 | 2018-10-24 | PhilipS"></securetransclude>

取自“http://wiki.100ask.org/index.php?title=TF-A_overview&oldid=7233”