commit c5541caa585d0c8ddab611cadb8dda83f71e2fb9
author Jackson Cooper-Driver <jackson.cooper-driver@arm.com> Thu Feb 13 13:42:35 2025 +0000
committer Jackson Cooper-Driver <jackson.cooper-driver@arm.com> Thu Feb 13 13:43:51 2025 +0000
tree f9aed7c4ea370e49d5d64e6febd25e1b8e50788a
parent daf8dd8664205b6eeee65316a37d203767f0185c

RSE: Add asymmetric provisioning config for TC4

Add a build configuration for TC4 which disables
RSE_SYMMETRIC_PROVISIONING. This verifies the flow which uses separate
keys for encryption and signing of blobs.

Change-Id: I7d1dc8daadd994e4b565861e17bd01bc09a6a530
Signed-off-by: Jackson Cooper-Driver <jackson.cooper-driver@arm.com>

build_helper/build_helper_config_maps.py

diff --git a/build_helper/build_helper_config_maps.py b/build_helper/build_helper_config_maps.py
index bfe550f..372f9da 100644
--- a/build_helper/build_helper_config_maps.py
+++ b/build_helper/build_helper_config_maps.py
@@ -144,7 +144,10 @@
     "ATTESTATION_SCHEME_DPE"    : ("-DEXTRA_S_TEST_SUITE_PATH=%(codebase_root_dir)s/../tf-m-extras/partitions/dice_protection_environment/test/secure "),
     "ATTESTATION_SCHEME_CCA"    : ("-DTFM_ATTESTATION_SCHEME=CCA "
                                    "-DEXTRA_S_TEST_SUITE_PATH=%(codebase_root_dir)s/../tf-m-extras/partitions/delegated_attestation/test/secure "
-                                   "-DEXTRA_NS_TEST_SUITE_PATH=%(codebase_root_dir)s/../tf-m-extras/partitions/measured_boot/test/non_secure ")
+                                   "-DEXTRA_NS_TEST_SUITE_PATH=%(codebase_root_dir)s/../tf-m-extras/partitions/measured_boot/test/non_secure "),
+
+    # Provisioning blob signing
+    "RSE_PROVISIONING_ASYMMETRIC" : ("-DRSE_SYMMETRIC_PROVISIONING=OFF")
 }
 
 mapTfmExtrasExamplePaths = {

build_helper/build_helper_configs.py

diff --git a/build_helper/build_helper_configs.py b/build_helper/build_helper_configs.py
index e5217a5..c6dfb54 100755
--- a/build_helper/build_helper_configs.py
+++ b/build_helper/build_helper_configs.py
@@ -396,6 +396,9 @@
                     # RSE_TC4_GCC_3_RegS_RegNS_Release_BL2
                     ("arm/rse/tc/tc4", "GCC_10_3", "3",
                      "RegS, RegNS", "OFF", "Release", True, "", ""),
+                    # RSE_TC4_GCC_3_RegS_RegNS_Release_BL2_RSE_PROVISIONING_ASYMMETRIC
+                    ("arm/rse/tc/tc4", "GCC_10_3", "3",
+                     "RegS, RegNS", "OFF", "Release", True, "", "RSE_PROVISIONING_ASYMMETRIC"),
                     # RSE_TC4_GCC_2_RegBL1_1_Debug_BL2
                     #("arm/rse/tc/tc4", "GCC_10_3", "2",
                     # "RegBL1_1", "OFF", "Debug", True, "", ""),
@@ -1005,7 +1008,7 @@
                 "cmake_build_type": ["Debug", "Release"],
                 "with_bl2":         [True],
                 "profile":          [""],
-                "extra_params":     ["ATTESTATION_SCHEME_DPE"]
+                "extra_params":     ["ATTESTATION_SCHEME_DPE", "RSE_PROVISIONING_ASYMMETRIC"]
                 },
                 "common_params": _common_tfm_builder_cfg,
                 "invalid": _common_tfm_invalid_configs + [