mirror of
https://github.com/espressif/esp-idf.git
synced 2026-04-27 19:13:21 +00:00
Laukik Hase
440a5d1906
- Using PMA, the TEE IRAM is marked as R/X while TEE DRAM is marked as R/W. Moving the internal memory secure service call table from DRAM to IRAM makes it immutable.
17 lines
460 B
Plaintext
17 lines
460 B
Plaintext
# Reducing TEE IRAM size
|
|
# 30KB
|
|
CONFIG_SECURE_TEE_IRAM_SIZE=0x7800
|
|
|
|
# TEE Secure Storage: Release mode
|
|
CONFIG_SECURE_TEE_SEC_STG_MODE_RELEASE=y
|
|
CONFIG_SECURE_TEE_SEC_STG_EFUSE_HMAC_KEY_ID=5
|
|
|
|
# Disabling flash protection over SPI1
|
|
CONFIG_SECURE_TEE_EXT_FLASH_MEMPROT_SPI1=n
|
|
|
|
# Secure Boot
|
|
CONFIG_PARTITION_TABLE_OFFSET=0xf000
|
|
CONFIG_SECURE_BOOT=y
|
|
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=y
|
|
CONFIG_SECURE_BOOT_SIGNING_KEY="test_keys/secure_boot_signing_key.pem"
|