Page MenuHomePhabricator

Add independent updates for security and non-security in MCUBoot
Closed, ResolvedPublic

Description

Add independent updates for security part and non-security part in MCUBoot,as well as can verify and update S&NS together.
This feature is implemented by adding definition TFM_SEGREGATE similar to BL2 in file ConfigRegression.cmake

there are six part In part_map[] :slot0_s\slot0_ns\slot1_s\slot1_ns\scratch_s\scratch_ns.
MCUboot first check and update secure part,then do the same operation to unsecure part.

Event Timeline

cuipingzhang created this object with edit policy "cuipingzhang (zhangcuiping)".
cuipingzhang updated the task description. (Show Details)Jun 5 2019, 7:49 AM

Hi,

Could you open a review on https://review.trustedfirmware.org and push the code there for review?

Tamas

[core]

repositoryformatversion = 0
filemode = false
bare = false
logallrefupdates = true
symlinks = false
ignorecase = true

[remote "origin"]

url = http://review.trustedfirmware.org
fetch = +refs/heads/*:refs/remotes/origin/*

[branch "master"]

remote = origin
merge = refs/heads/master

$ git push origin master
remote: Not Found
fatal: repository 'http://review.trustedfirmware.org/' not found

Hi,

multi-image boot support solution is going to be available in review during this week.

Tamas

Hi Tamasban,

Thanks for your information.

Do you mean that you have started the multi-image boot support from your team? I have not seen the reivew link on https://review.trustedfirmware.org/#/q/status:open+project:trusted-firmware-m
Do you think it is necessary for us to push our solution in review on multi-image boot support ?

Thanks,
Cuiping

Hi Tamasban,

I have another question, the platform we used to build tfm is windows, what is the whole command to push our patch to https://review.trustedfirmware.org ?

Thanks,

cuiping

Hi Tamasban,

I have pushed the code successfully,and if you have other ideas about the BL please let me know。

Thanks,

cuiping

Hi,

you can find the multi-image support here:
https://developer.trustedfirmware.org/T421

This solution has some benefit:

  • aligned with original MCUboot project, we are up streaming the same code to there as well
  • supports all platform in TF-M: MPS2, MPS3, Musca-A, Musca-B1
  • It use a common scratch area for both S and NS image

Please check this solution how does it fits to your needs!

Tamas

Hi,

Could you give some feedback about multi image support?

https://developer.trustedfirmware.org/T421

Tamas

Hi Tamasban,
I saw your previous discussion, more comprehensive than I considered, I look forward to the addition of this feature in MCUBoot。

Thanks,

cuiping

wmnt added a comment.Apr 29 2020, 1:28 PM

Hi @cuipingzhang

In line with your latest comment and the closure of the corresponding issue T421 referred to by @tamasban , I am closing this thread.
I suggest to open a new issue and refer back to this thread if there are related comments on the present state of the project.

Kindest regards,
/Miklos @wmnt

wmnt closed this task as Resolved.Apr 29 2020, 1:28 PM