[people/ms/u-boot.git] / doc / README.fsl-trustzone-components

Freescale ARM64 SoCs like LS2080A have ARM TrustZone components like
TZPC-BP147 (TrustZone Protection Controller) and TZASC-400 (TrustZone
Address Space Controller).

While most of the configuration related programming of these peripherals
is left to a root-of-trust security software layer (running in EL3
privilege mode), but still some configurations of these peripherals
might be required while the bootloader is executing in EL3 privilege
mode. The following sections define how to turn on these features for
LS2080A like SoCs.

TZPC-BP147 (TrustZone Protection Controller)
============================================
- Depends on CONFIG_FSL_TZPC_BP147 configuration flag.
- Separates Secure World and Normal World on-chip RAM (OCRAM) spaces.
- Provides a programming model to set access control policy via the TZPC
  TZDECPROT Registers.

TZASC-400 (TrustZone Address Space Controller)
==============================================
- Depends on CONFIG_FSL_TZASC_400 configuration flag.
- Separates Secure World and Normal World external memory spaces for bus masters
  such as processors and DMA-equipped peripherals.
- Supports 8 fully programmable address regions, initially inactive at reset,
  and one base region, always active, that covers the remaining address space.
Commit	Line	Data
44937214	1	Freescale ARM64 SoCs like LS2080A have ARM TrustZone components like
9c66ce66 BS	2	TZPC-BP147 (TrustZone Protection Controller) and TZASC-400 (TrustZone
	3	Address Space Controller).
	4
	5	While most of the configuration related programming of these peripherals
	6	is left to a root-of-trust security software layer (running in EL3
	7	privilege mode), but still some configurations of these peripherals
	8	might be required while the bootloader is executing in EL3 privilege
	9	mode. The following sections define how to turn on these features for
44937214	10	LS2080A like SoCs.
9c66ce66 BS	11
	12	TZPC-BP147 (TrustZone Protection Controller)
	13	============================================
	14	- Depends on CONFIG_FSL_TZPC_BP147 configuration flag.
	15	- Separates Secure World and Normal World on-chip RAM (OCRAM) spaces.
	16	- Provides a programming model to set access control policy via the TZPC
	17	TZDECPROT Registers.
	18
	19	TZASC-400 (TrustZone Address Space Controller)
	20	==============================================
	21	- Depends on CONFIG_FSL_TZASC_400 configuration flag.
	22	- Separates Secure World and Normal World external memory spaces for bus masters
	23	such as processors and DMA-equipped peripherals.
	24	- Supports 8 fully programmable address regions, initially inactive at reset,
	25	and one base region, always active, that covers the remaining address space.