nrfdemo

1 files changed, 90 insertions, 0 deletions

diff --git a/nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake b/nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake
new file mode 100644
index 0000000..6dc94dd
--- /dev/null
+++ b/nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake
@@ -0,0 +1,90 @@
+#-------------------------------------------------------------------------------
+# Copyright (c) 2023, Arm Limited. All rights reserved.
+#
+# SPDX-License-Identifier: BSD-3-Clause
+#
+#-------------------------------------------------------------------------------
+
+# This CMake script template contains the set of options settled on secure side
+# build but necessary for building the non-secure side too.
+
+# TF-M Profile
+set(TFM_PROFILE                                CACHE STRING "The TF-M profile")
+
+set(TFM_PARTITION_INTERNAL_TRUSTED_STORAGE OFF CACHE BOOL "Enable Internal Trusted Storage partition")
+set(TFM_PARTITION_CRYPTO                   ON                   CACHE BOOL "Enable Crypto partition")
+set(TFM_PARTITION_INITIAL_ATTESTATION      OFF      CACHE BOOL "Enable Initial Attestation partition")
+set(TFM_PARTITION_PROTECTED_STORAGE        OFF        CACHE BOOL "Enable Protected Storage partition")
+set(TFM_PARTITION_PLATFORM                 ON                 CACHE BOOL "Enable Platform partition")
+set(TFM_PARTITION_FIRMWARE_UPDATE          OFF          CACHE BOOL "Enable firmware update partition")
+set(TFM_PARTITION_NS_AGENT_MAILBOX         OFF         CACHE BOOL "Enable the Mailbox agents")
+
+# The options necessary for signing the final image
+set(BL2                                    FALSE)
+set(BL2_HEADER_SIZE                        0x000)
+set(BL2_TRAILER_SIZE                       0x000)
+set(MCUBOOT_IMAGE_NUMBER                   1)
+set(MCUBOOT_CONFIRM_IMAGE                  )
+set(MCUBOOT_ENC_IMAGES                     )
+set(MCUBOOT_ENC_KEY_LEN                    )
+set(MCUBOOT_KEY_ENC                        )
+set(MCUBOOT_MEASURED_BOOT                  ON)
+set(MCUBOOT_ALIGN_VAL                      )
+set(MCUBOOT_UPGRADE_STRATEGY               )
+set(MCUBOOT_S_IMAGE_MIN_VER                )
+
+set(MCUBOOT_MEASURED_BOOT                  ON)
+set(MCUBOOT_HW_KEY                         )
+
+set(MCUBOOT_SECURITY_COUNTER_S             )
+set(MCUBOOT_IMAGE_VERSION_S                )
+set(MCUBOOT_KEY_S                          )
+
+set(MCUBOOT_SECURITY_COUNTER_NS            )
+set(MCUBOOT_IMAGE_VERSION_NS               )
+set(MCUBOOT_KEY_NS                         )
+set(PLATFORM_DEFAULT_IMAGE_SIGNING         ON)
+
+# The common options describing a platform configuration
+
+set(TFM_PLATFORM                           ../../../../../../../nrf/modules/trusted-firmware-m/tfm_boards/nrf9120                   CACHE STRING "Platform to build TF-M for. Must be either a relative path from [TF-M]/platform/ext/target, or an absolute path.")
+set(CONFIG_TFM_USE_TRUSTZONE               ON       CACHE BOOL   "Use TrustZone")
+set(CONFIG_TFM_SPM_BACKEND                 SFN         CACHE STRING "The SPM backend")
+set(TFM_MULTI_CORE_TOPOLOGY                OFF        CACHE BOOL   "Platform has multi core")
+set(PSA_FRAMEWORK_HAS_MM_IOVEC             OFF     CACHE BOOL   "Enable the MM-IOVEC feature")
+set(TFM_ISOLATION_LEVEL                    1            CACHE STRING "The TFM isolation level")
+
+set(PLATFORM_DEFAULT_CRYPTO_KEYS           FALSE   CACHE BOOL   "Use the default crypto keys")
+set(PLATFORM_DEFAULT_UART_STDOUT           ON   CACHE BOOL   "Use default uart stdout implementation.")
+
+# Testing related options.
+
+set(TEST_PSA_API                                     CACHE STRING    "Which (if any) of the PSA API tests should be compiled")
+set(PSA_ARCH_TESTS_PATH                    /home/mike/Documents/ncs/v2.7.0/modules/tee/tf-m/trusted-firmware-m/../psa-arch-tests   CACHE PATH      "Path to PSA arch test repository if it was give to SPE build")
+set(INCLUDE_PANIC_TESTS                       CACHE BOOL      "Include panic tests")
+
+set(ATTEST_KEY_BITS                        256                        CACHE STRING "The size of the initial attestation key in bits")
+set(SYMMETRIC_INITIAL_ATTESTATION          OFF          CACHE BOOL   "Use symmetric crypto for inital attestation")
+set(ATTEST_INCLUDE_TEST_CODE               OFF               CACHE BOOL   "Include minimal development tests in the initial attestation regression test suite")
+set(TFM_MBEDCRYPTO_PSA_CRYPTO_CONFIG_PATH  /home/mike/Documents/ncs/v2.7.0/conexio-firmware-sdk/samples/conexio_stratus/mqtt_control/build/modules/nrf/subsys/nrf_security/src/include/generated/nrf-psa-crypto-want-config.h  CACHE STRING "Config to use psa crypto setting for Mbed Crypto")
+set(CC312_LEGACY_DRIVER_API_ENABLED                CACHE BOOL   "This variable controls whether the legacy driver interface is used for CC-312")
+
+set(TFM_FWU_BOOTLOADER_LIB                 mcuboot              CACHE STRING    "Bootloader configure file for Firmware Update partition")
+
+# Other common options
+
+# Coprocessor settings
+# It is difficult to sort out coprocessor settings and their dependencies.
+# Export all the essential settings and therefore NS users don't have to figure them out again or
+# include other config files.
+# Also export other coprocessor settings to enable NS integration to validate the whole settings
+# and toolchain compatibility via installed cp_config_check.cmake.
+set(CONFIG_TFM_ENABLE_FP                   OFF       CACHE BOOL   "Enable/disable FP usage")
+set(CONFIG_TFM_ENABLE_MVE                  OFF      CACHE BOOL   "Enable/disable integer MVE usage")
+set(CONFIG_TFM_ENABLE_MVE_FP               OFF   CACHE BOOL   "Enable/disable floating-point MVE usage")
+set(CONFIG_TFM_FLOAT_ABI                   soft)
+set(CONFIG_TFM_ENABLE_CP10CP11             OFF CACHE BOOL   "Make FPU and MVE operational when SPE and/or NSPE require FPU or MVE usage. This alone only enables the coprocessors CP10-CP11, whereas CONFIG_TFM_FLOAT_ABI=hard along with  CONFIG_TFM_ENABLE_FP, CONFIG_TFM_ENABLE_MVE or CONFIG_TFM_ENABLE_MVE_FP compiles the code with hardware FP or MVE instructions and ABI.")
+set(CONFIG_TFM_LAZY_STACKING               OFF   CACHE BOOL   "Enable/disable lazy stacking")
+
+set(TFM_VERSION                            2.0.0)
+set(TFM_NS_MANAGE_NSID                     OFF)