On 11/4/24 1:39 PM, Peng Fan wrote:
Subject: Re: [PATCH 00/17] (no cover subject)

On 11/4/24 1:20 PM, Peng Fan wrote:
Subject: Re: [PATCH 00/17] (no cover subject)

On 10/16/24 9:17 AM, Alice Guo wrote:
This patch set adds the basic support of i.MX95 and has been
tested
on
i.MX95 19x19 EVK.
I have a somewhat more generic question -- can we start U-Boot SPL
and U-Boot first, and start the ELE/OpTee/... whatever firmwares
AFTER U-Boot has started, so they can be updated just like the
kernel
can be updated ?

ELE Firmware packed in flash.bin is used by ROM, out of control of
SPL/U-Boot.

Used by ROM how ? Details please ?

ELE Firmware is for secure enclave usage. 8ULP/93 also has it.
I could not share more details.

Is this some magic proprietary closed source goo ?

Why can this not be started from U-Boot just like OpTee-OS which implements TEE for Secure TEE trustlets (or whatever that is called) ?

OP-Tee is optional, but if it is there, it could only be loaded by SPL
and kicked by ATF
Why ? U-Boot running in EL3 can start OpTee OS, so what is the
problem ?

Ah. As we know there is a wrapper in ATF controlled with spd_optee.
Technically let uboot in EL3 to kick optee is feasible, but I am not
sure people would do this.
Because if there is a bug in OpTee, it can be safely updated just like the kernel can be safely updated -- just boot the other copy as a fallback. If the Optee is baked into your flash.bin , you have to update bootloader, which is dangerous.

Reply via email to