feat(st): add the TRUSTED_BOARD_BOOT build config
Add the TRUSTED_BOARD_BOOT option for the STM32MP15 and
STM32MP13 boards.
It will includes the specific files to manage authentication
and decryption.
Add two specific STM32MP13 configurations to use ECDSA Brainpool
algorithms.
Signed-off-by: Lionel Debieve <lionel.debieve@foss.st.com>
Change-Id: I25e79b79e8cee067524fece148c4cb3a5c79d7f0
diff --git a/script/tf-coverity/tf-cov-make b/script/tf-coverity/tf-cov-make
index 6dde39f..fee1605 100755
--- a/script/tf-coverity/tf-cov-make
+++ b/script/tf-coverity/tf-cov-make
@@ -613,12 +613,26 @@
STM32MP_USE_STM32IMAGE=1 \
ARCH=aarch32 AARCH32_SP=sp_min ENABLE_STACK_PROTECTOR=strong bl2 bl32
+# STM32MP1 TBBR
+make PLAT=stm32mp1 CROSS_COMPILE=arm-none-eabi- \
+ $(common_flags) ARM_ARCH_MAJOR=7 STM32MP_SDMMC=1 \
+ BUILD_PLAT=build/stm32mp1-sdmmc/debug \
+ MBEDTLS_DIR=$(pwd)/mbedtls TRUSTED_BOARD_BOOT=1 \
+ ARCH=aarch32 AARCH32_SP=sp_min ENABLE_STACK_PROTECTOR=strong bl2 bl32
+
# STM32MP13 SDMMC boot
make PLAT=stm32mp1 CROSS_COMPILE=arm-none-eabi- \
$(common_flags) ARM_ARCH_MAJOR=7 STM32MP_SDMMC=1 \
BUILD_PLAT=build/stm32mp1-mp13-sdmmc/debug STM32MP13=1 \
ARCH=aarch32 AARCH32_SP=optee ENABLE_STACK_PROTECTOR=strong bl2
+# STM32MP13 TBBR
+make PLAT=stm32mp1 CROSS_COMPILE=arm-none-eabi- \
+ $(common_flags) ARM_ARCH_MAJOR=7 STM32MP_SDMMC=1 \
+ BUILD_PLAT=build/stm32mp1-mp13-sdmmc/debug STM32MP13=1 \
+ MBEDTLS_DIR=$(pwd)/mbedtls TRUSTED_BOARD_BOOT=1 \
+ ARCH=aarch32 AARCH32_SP=optee ENABLE_STACK_PROTECTOR=strong bl2
+
# Platforms from TI
make PLAT=k3 $(common_flags) all
make PLAT=k3 TARGET_BOARD=j784s4 $(common_flags) all