Add independent updates for security and non-security in MCUBoot
Open, Needs TriagePublic

Description

Add independent updates for security part and non-security part in MCUBoot,as well as can verify and update S&NS together.
This feature is implemented by adding definition TFM_SEGREGATE similar to BL2 in file ConfigRegression.cmake

there are six part In part_map[] :slot0_s\slot0_ns\slot1_s\slot1_ns\scratch_s\scratch_ns.
MCUboot first check and update secure part,then do the same operation to unsecure part.

cuipingzhang created this object with edit policy "cuipingzhang (zhangcuiping)".
cuipingzhang updated the task description. (Show Details)Jun 5 2019, 7:49 AM

Hi,

Could you open a review on https://review.trustedfirmware.org and push the code there for review?

Tamas

[core]

repositoryformatversion = 0
filemode = false
bare = false
logallrefupdates = true
symlinks = false
ignorecase = true

[remote "origin"]

url = http://review.trustedfirmware.org
fetch = +refs/heads/*:refs/remotes/origin/*

[branch "master"]

remote = origin
merge = refs/heads/master

$ git push origin master
remote: Not Found
fatal: repository 'http://review.trustedfirmware.org/' not found

Hi,

multi-image boot support solution is going to be available in review during this week.

Tamas

Hi Tamasban,

Thanks for your information.

Do you mean that you have started the multi-image boot support from your team? I have not seen the reivew link on https://review.trustedfirmware.org/#/q/status:open+project:trusted-firmware-m
Do you think it is necessary for us to push our solution in review on multi-image boot support ?

Thanks,
Cuiping

Hi Tamasban,

I have another question, the platform we used to build tfm is windows, what is the whole command to push our patch to https://review.trustedfirmware.org ?

Thanks,

cuiping

Hi Tamasban,

I have pushed the code successfully,and if you have other ideas about the BL please let me know。

Thanks,

cuiping

Hi,

you can find the multi-image support here:
https://developer.trustedfirmware.org/T421

This solution has some benefit:

  • aligned with original MCUboot project, we are up streaming the same code to there as well
  • supports all platform in TF-M: MPS2, MPS3, Musca-A, Musca-B1
  • It use a common scratch area for both S and NS image

Please check this solution how does it fits to your needs!

Tamas

Hi,

Could you give some feedback about multi image support?

https://developer.trustedfirmware.org/T421

Tamas

Hi Tamasban,
I saw your previous discussion, more comprehensive than I considered, I look forward to the addition of this feature in MCUBoot。

Thanks,

cuiping