blob: b9b62c03f7452af1538c7b94cd40aa7aca7b6540 [file] [log] [blame]
Yann Gautierdbe63ac2022-03-16 19:03:20 +01001#
laurenw-armb3b6de72024-03-05 14:55:18 -06002# Copyright (c) 2023-2024, STMicroelectronics - All Rights Reserved
Yann Gautierdbe63ac2022-03-16 19:03:20 +01003#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6
7RESET_TO_BL2 := 1
8
9STM32MP_EARLY_CONSOLE ?= 0
10STM32MP_RECONFIGURE_CONSOLE ?= 0
11STM32MP_UART_BAUDRATE ?= 115200
12
13TRUSTED_BOARD_BOOT ?= 0
14STM32MP_USE_EXTERNAL_HEAP ?= 0
15
16# Use secure library from the ROM code for authentication
17STM32MP_CRYPTO_ROM_LIB ?= 0
18
19# Please don't increment this value without good understanding of
20# the monotonic counter
21STM32_TF_VERSION ?= 0
22
23# Enable dynamic memory mapping
24PLAT_XLAT_TABLES_DYNAMIC := 1
25
26# STM32 image header binary type for BL2
27STM32_HEADER_BL2_BINARY_TYPE := 0x10
28
29TF_CFLAGS += -Wsign-compare
30TF_CFLAGS += -Wformat-signedness
31
32# Boot devices
33STM32MP_EMMC ?= 0
34STM32MP_SDMMC ?= 0
35STM32MP_RAW_NAND ?= 0
36STM32MP_SPI_NAND ?= 0
37STM32MP_SPI_NOR ?= 0
38
39# Put both BL2 and FIP in eMMC boot partition
40STM32MP_EMMC_BOOT ?= 0
41
42# Serial boot devices
43STM32MP_UART_PROGRAMMER ?= 0
44STM32MP_USB_PROGRAMMER ?= 0
45
Chris Kay523e8642023-12-04 12:03:51 +000046$(eval DTC_V = $(shell $($(ARCH)-dtc) -v | awk '{print $$NF}'))
Yann Gautierdbe63ac2022-03-16 19:03:20 +010047$(eval DTC_VERSION = $(shell printf "%d" $(shell echo ${DTC_V} | cut -d- -f1 | sed "s/\./0/g" | grep -o "[0-9]*")))
48DTC_CPPFLAGS += ${INCLUDES}
49DTC_FLAGS += -Wno-unit_address_vs_reg
50ifeq ($(shell test $(DTC_VERSION) -ge 10601; echo $$?),0)
51DTC_FLAGS += -Wno-interrupt_provider
52endif
53
54# Macros and rules to build TF binary
55STM32_TF_ELF_LDFLAGS := --hash-style=gnu --as-needed
56STM32_TF_LINKERFILE := ${BUILD_PLAT}/${PLAT}.ld
57
58ASFLAGS += -DBL2_BIN_PATH=\"${BUILD_PLAT}/bl2.bin\"
59
60# Variables for use with stm32image
61STM32IMAGEPATH ?= tools/stm32image
62STM32IMAGE ?= ${STM32IMAGEPATH}/stm32image${BIN_EXT}
63STM32IMAGE_SRC := ${STM32IMAGEPATH}/stm32image.c
64STM32_DEPS += ${STM32IMAGE}
65
66FIP_DEPS += dtbs
67STM32MP_HW_CONFIG := ${BL33_CFG}
68
69# Add the HW_CONFIG to FIP and specify the same to certtool
70$(eval $(call TOOL_ADD_PAYLOAD,${STM32MP_HW_CONFIG},--hw-config))
71
72# Add the build options to pack Trusted OS Extra1 and Trusted OS Extra2 images
73# in the FIP if the platform requires.
74ifneq ($(BL32_EXTRA1),)
75$(eval $(call TOOL_ADD_IMG,BL32_EXTRA1,--tos-fw-extra1,,$(ENCRYPT_BL32)))
76endif
77ifneq ($(BL32_EXTRA2),)
78$(eval $(call TOOL_ADD_IMG,BL32_EXTRA2,--tos-fw-extra2,,$(ENCRYPT_BL32)))
79endif
80
81# Enable flags for C files
82$(eval $(call assert_booleans,\
83 $(sort \
84 PLAT_XLAT_TABLES_DYNAMIC \
85 STM32MP_EARLY_CONSOLE \
86 STM32MP_EMMC \
87 STM32MP_EMMC_BOOT \
88 STM32MP_RAW_NAND \
89 STM32MP_RECONFIGURE_CONSOLE \
90 STM32MP_SDMMC \
91 STM32MP_SPI_NAND \
92 STM32MP_SPI_NOR \
93 STM32MP_UART_PROGRAMMER \
94 STM32MP_USB_PROGRAMMER \
95)))
96
97$(eval $(call assert_numerics,\
98 $(sort \
99 STM32_TF_VERSION \
100 STM32MP_UART_BAUDRATE \
101)))
102
103$(eval $(call add_defines,\
104 $(sort \
105 PLAT_XLAT_TABLES_DYNAMIC \
106 STM32_TF_VERSION \
107 STM32MP_EARLY_CONSOLE \
108 STM32MP_EMMC \
109 STM32MP_EMMC_BOOT \
110 STM32MP_RAW_NAND \
111 STM32MP_RECONFIGURE_CONSOLE \
112 STM32MP_SDMMC \
113 STM32MP_SPI_NAND \
114 STM32MP_SPI_NOR \
115 STM32MP_UART_BAUDRATE \
116 STM32MP_UART_PROGRAMMER \
117 STM32MP_USB_PROGRAMMER \
118)))
119
120# Include paths and source files
121PLAT_INCLUDES += -Iplat/st/common/include/
122
123include lib/fconf/fconf.mk
124include lib/libfdt/libfdt.mk
125include lib/zlib/zlib.mk
126
127PLAT_BL_COMMON_SOURCES += common/uuid.c \
128 plat/st/common/stm32mp_common.c
129
130
131include lib/xlat_tables_v2/xlat_tables.mk
132PLAT_BL_COMMON_SOURCES += ${XLAT_TABLES_LIB_SRCS}
133
134PLAT_BL_COMMON_SOURCES += drivers/clk/clk.c \
135 drivers/delay_timer/delay_timer.c \
136 drivers/delay_timer/generic_delay_timer.c \
137 drivers/st/clk/stm32mp_clkfunc.c \
138 drivers/st/ddr/stm32mp_ddr.c \
139 drivers/st/gpio/stm32_gpio.c \
140 drivers/st/regulator/regulator_core.c \
141 drivers/st/regulator/regulator_fixed.c \
142 plat/st/common/stm32mp_dt.c
143
144BL2_SOURCES += ${FCONF_SOURCES} ${FCONF_DYN_SOURCES}
145BL2_SOURCES += $(ZLIB_SOURCES)
146
147BL2_SOURCES += drivers/io/io_fip.c \
148 plat/st/common/bl2_io_storage.c \
Yann Gautierea1a3c62023-06-14 14:38:15 +0200149 plat/st/common/plat_image_load.c \
Yann Gautierdbe63ac2022-03-16 19:03:20 +0100150 plat/st/common/stm32mp_fconf_io.c
151
152BL2_SOURCES += drivers/io/io_block.c \
153 drivers/io/io_mtd.c \
154 drivers/io/io_storage.c
155
156ifneq (${DECRYPTION_SUPPORT},none)
157BL2_SOURCES += drivers/io/io_encrypted.c
158endif
159
160ifeq (${TRUSTED_BOARD_BOOT},1)
161AUTH_SOURCES := drivers/auth/auth_mod.c \
162 drivers/auth/crypto_mod.c \
163 drivers/auth/img_parser_mod.c
164
165ifeq (${GENERATE_COT},1)
166TFW_NVCTR_VAL := 0
167NTFW_NVCTR_VAL := 0
Yann Gautierdbe63ac2022-03-16 19:03:20 +0100168KEY_ALG := ecdsa
169HASH_ALG := sha256
170
171ifeq (${SAVE_KEYS},1)
172TRUSTED_WORLD_KEY ?= ${BUILD_PLAT}/trusted.pem
173NON_TRUSTED_WORLD_KEY ?= ${BUILD_PLAT}/non-trusted.pem
174BL32_KEY ?= ${BUILD_PLAT}/trusted_os.pem
175BL33_KEY ?= ${BUILD_PLAT}/non-trusted_os.pem
176endif
177
178endif
179TF_MBEDTLS_KEY_ALG := ecdsa
laurenw-armb4ab90b2023-10-12 13:34:21 -0500180KEY_SIZE := 256
Yann Gautierdbe63ac2022-03-16 19:03:20 +0100181
182ifneq (${MBEDTLS_DIR},)
183MBEDTLS_MAJOR=$(shell grep -hP "define MBEDTLS_VERSION_MAJOR" \
184${MBEDTLS_DIR}/include/mbedtls/*.h | grep -oe '\([0-9.]*\)')
185
Yann Gautierdbe63ac2022-03-16 19:03:20 +0100186ifeq (${MBEDTLS_MAJOR}, 3)
Yann Gautierd8c1a3b2023-03-06 13:01:10 +0100187MBEDTLS_CONFIG_FILE ?= "<stm32mp_mbedtls_config-3.h>"
laurenw-armb3b6de72024-03-05 14:55:18 -0600188else
189$(error Error: TF-A only supports MbedTLS versions > 3.x)
Yann Gautierdbe63ac2022-03-16 19:03:20 +0100190endif
191endif
192
193include drivers/auth/mbedtls/mbedtls_x509.mk
194
195COT_DESC_IN_DTB := 1
196AUTH_SOURCES += lib/fconf/fconf_cot_getter.c \
197 lib/fconf/fconf_tbbr_getter.c \
198 plat/st/common/stm32mp_crypto_lib.c
199
200BL2_SOURCES += $(AUTH_SOURCES) \
201 plat/st/common/stm32mp_trusted_boot.c
202endif
203
204ifneq ($(filter 1,${STM32MP_EMMC} ${STM32MP_SDMMC}),)
205BL2_SOURCES += drivers/mmc/mmc.c \
206 drivers/partition/gpt.c \
207 drivers/partition/partition.c
208endif
209
210ifneq ($(filter 1,${STM32MP_SPI_NAND} ${STM32MP_SPI_NOR}),)
211BL2_SOURCES += drivers/mtd/spi-mem/spi_mem.c
212endif
213
214ifeq (${STM32MP_RAW_NAND},1)
215$(eval $(call add_define_val,NAND_ONFI_DETECT,1))
216BL2_SOURCES += drivers/mtd/nand/raw_nand.c
217endif
218
219ifeq (${STM32MP_SPI_NAND},1)
220BL2_SOURCES += drivers/mtd/nand/spi_nand.c
221endif
222
223ifeq (${STM32MP_SPI_NOR},1)
224ifneq (${STM32MP_FORCE_MTD_START_OFFSET},)
225$(eval $(call add_define_val,STM32MP_NOR_FIP_OFFSET,${STM32MP_FORCE_MTD_START_OFFSET}))
226endif
227BL2_SOURCES += drivers/mtd/nor/spi_nor.c
228endif
229
230ifneq ($(filter 1,${STM32MP_RAW_NAND} ${STM32MP_SPI_NAND}),)
231ifneq (${STM32MP_FORCE_MTD_START_OFFSET},)
232$(eval $(call add_define_val,STM32MP_NAND_FIP_OFFSET,${STM32MP_FORCE_MTD_START_OFFSET}))
233endif
234BL2_SOURCES += drivers/mtd/nand/core.c
235endif
236
237ifneq ($(filter 1,${STM32MP_UART_PROGRAMMER} ${STM32MP_USB_PROGRAMMER}),)
238BL2_SOURCES += drivers/io/io_memmap.c
239endif
240
241ifeq (${STM32MP_UART_PROGRAMMER},1)
242BL2_SOURCES += plat/st/common/stm32cubeprogrammer_uart.c
243endif
244
245ifeq (${STM32MP_USB_PROGRAMMER},1)
246BL2_SOURCES += drivers/usb/usb_device.c \
247 plat/st/common/stm32cubeprogrammer_usb.c \
248 plat/st/common/usb_dfu.c
249endif
250
251BL2_SOURCES += drivers/st/ddr/stm32mp_ddr_test.c \
252 drivers/st/ddr/stm32mp_ram.c
253
254BL2_SOURCES += common/desc_image_load.c
255
256BL2_SOURCES += lib/optee/optee_utils.c