€•§6      Œsphinx.addnodes”Œdocument”“”)”}”(Œ	rawsource”Œ ”Œchildren”]”(Œtranslations”ŒLanguagesNode”“”)”}”(hhh]”(h Œpending_xref”“”)”}”(hhh]”Œdocutils.nodes”ŒText”“”ŒChinese (Simplified)”…””}”Œparent”hsbaŒ
attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”Œ	refdomain”Œstd”Œreftype”Œdoc”Œ	reftarget”Œ/translations/zh_CN/tee/ts-tee”Œmodname”NŒ	classname”NŒrefexplicit”ˆuŒtagname”hhhubh)”}”(hhh]”hŒChinese (Traditional)”…””}”hh2sbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ/translations/zh_TW/tee/ts-tee”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒItalian”…””}”hhFsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ/translations/it_IT/tee/ts-tee”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒJapanese”…””}”hhZsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ/translations/ja_JP/tee/ts-tee”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒKorean”…””}”hhnsbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ/translations/ko_KR/tee/ts-tee”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubh)”}”(hhh]”hŒSpanish”…””}”hh‚sbah}”(h]”h ]”h"]”h$]”h&]”Œ	refdomain”h)Œreftype”h+Œ	reftarget”Œ/translations/sp_SP/tee/ts-tee”Œmodname”NŒ	classname”NŒrefexplicit”ˆuh1hhhubeh}”(h]”h ]”h"]”h$]”h&]”Œcurrent_language”ŒEnglish”uh1h
hhŒ	_document”hŒsource”NŒline”NubhŒcomment”“”)”}”(hŒ SPDX-License-Identifier: GPL-2.0”h]”hŒ SPDX-License-Identifier: GPL-2.0”…””}”hh£sbah}”(h]”h ]”h"]”h$]”h&]”Œ	xml:space”Œpreserve”uh1h¡hhhžhhŸŒ8/var/lib/git/docbuild/linux/Documentation/tee/ts-tee.rst”h KubhŒsection”“”)”}”(hhh]”(hŒtitle”“”)”}”(hŒ!TS-TEE (Trusted Services project)”h]”hŒ!TS-TEE (Trusted Services project)”…””}”(hh»hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1h¹hh¶hžhhŸh³h KubhŒ	paragraph”“”)”}”(hŒOThis driver provides access to secure services implemented by Trusted Services.”h]”hŒOThis driver provides access to secure services implemented by Trusted Services.”…””}”(hhËhžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khh¶hžhubhÊ)”}”(hX'  Trusted Services [1] is a TrustedFirmware.org project that provides a framework
for developing and deploying device Root of Trust services in FF-A [2] S-EL0
Secure Partitions. The project hosts the reference implementation of the Arm
Platform Security Architecture [3] for Arm A-profile devices.”h]”hX'  Trusted Services [1] is a TrustedFirmware.org project that provides a framework
for developing and deploying device Root of Trust services in FF-A [2] S-EL0
Secure Partitions. The project hosts the reference implementation of the Arm
Platform Security Architecture [3] for Arm A-profile devices.”…””}”(hhÙhžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K	hh¶hžhubhÊ)”}”(hX\  The FF-A Secure Partitions (SP) are accessible through the FF-A driver [4] which
provides the low level communication for this driver. On top of that the Trusted
Services RPC protocol is used [5]. To use the driver from user space a reference
implementation is provided at [6], which is part of the Trusted Services client
library called libts [7].”h]”hX\  The FF-A Secure Partitions (SP) are accessible through the FF-A driver [4] which
provides the low level communication for this driver. On top of that the Trusted
Services RPC protocol is used [5]. To use the driver from user space a reference
implementation is provided at [6], which is part of the Trusted Services client
library called libts [7].”…””}”(hhçhžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khh¶hžhubhÊ)”}”(hX‹  All Trusted Services (TS) SPs have the same FF-A UUID; it identifies the TS RPC
protocol. A TS SP can host one or more services (e.g. PSA Crypto, PSA ITS, etc).
A service is identified by its service UUID; the same type of service cannot be
present twice in the same SP. During SP boot each service in the SP is assigned
an "interface ID". This is just a short ID to simplify message addressing.”h]”hX  All Trusted Services (TS) SPs have the same FF-A UUID; it identifies the TS RPC
protocol. A TS SP can host one or more services (e.g. PSA Crypto, PSA ITS, etc).
A service is identified by its service UUID; the same type of service cannot be
present twice in the same SP. During SP boot each service in the SP is assigned
an â€œinterface IDâ€. This is just a short ID to simplify message addressing.”…””}”(hhõhžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khh¶hžhubhÊ)”}”(hXz  The generic TEE design is to share memory at once with the Trusted OS, which can
then be reused to communicate with multiple applications running on the Trusted
OS. However, in case of FF-A, memory sharing works on an endpoint level, i.e.
memory is shared with a specific SP. User space has to be able to separately
share memory with each SP based on its endpoint ID; therefore a separate TEE
device is registered for each discovered TS SP. Opening the SP corresponds to
opening the TEE device and creating a TEE context. A TS SP hosts one or more
services. Opening a service corresponds to opening a session in the given
tee_context.”h]”hXz  The generic TEE design is to share memory at once with the Trusted OS, which can
then be reused to communicate with multiple applications running on the Trusted
OS. However, in case of FF-A, memory sharing works on an endpoint level, i.e.
memory is shared with a specific SP. User space has to be able to separately
share memory with each SP based on its endpoint ID; therefore a separate TEE
device is registered for each discovered TS SP. Opening the SP corresponds to
opening the TEE device and creating a TEE context. A TS SP hosts one or more
services. Opening a service corresponds to opening a session in the given
tee_context.”…””}”(hj  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h Khh¶hžhubhÊ)”}”(hŒ7Overview of a system with Trusted Services components::”h]”hŒ6Overview of a system with Trusted Services components:”…””}”(hj  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K$hh¶hžhubhŒliteral_block”“”)”}”(hXº  User space                  Kernel space                   Secure world
~~~~~~~~~~                  ~~~~~~~~~~~~                   ~~~~~~~~~~~~
+--------+                                               +-------------+
| Client |                                               | Trusted     |
+--------+                                               | Services SP |
   /\                                                    +-------------+
   ||                                                          /\
   ||                                                          ||
   ||                                                          ||
   \/                                                          \/
+-------+                +----------+--------+           +-------------+
| libts |                |  TEE     | TS-TEE |           |  FF-A SPMC  |
|       |                |  subsys  | driver |           |   + SPMD    |
+-------+----------------+----+-----+--------+-----------+-------------+
|      Generic TEE API        |     |  FF-A  |     TS RPC protocol     |
|      IOCTL (TEE_IOC_*)      |     | driver |        over FF-A        |
+-----------------------------+     +--------+-------------------------+”h]”hXº  User space                  Kernel space                   Secure world
~~~~~~~~~~                  ~~~~~~~~~~~~                   ~~~~~~~~~~~~
+--------+                                               +-------------+
| Client |                                               | Trusted     |
+--------+                                               | Services SP |
   /\                                                    +-------------+
   ||                                                          /\
   ||                                                          ||
   ||                                                          ||
   \/                                                          \/
+-------+                +----------+--------+           +-------------+
| libts |                |  TEE     | TS-TEE |           |  FF-A SPMC  |
|       |                |  subsys  | driver |           |   + SPMD    |
+-------+----------------+----+-----+--------+-----------+-------------+
|      Generic TEE API        |     |  FF-A  |     TS RPC protocol     |
|      IOCTL (TEE_IOC_*)      |     | driver |        over FF-A        |
+-----------------------------+     +--------+-------------------------+”…””}”hj!  sbah}”(h]”h ]”h"]”h$]”h&]”h±h²uh1j  hŸh³h K&hh¶hžhubhµ)”}”(hhh]”(hº)”}”(hŒ
References”h]”hŒ
References”…””}”(hj2  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1h¹hj/  hžhhŸh³h K9ubhÊ)”}”(hŒ>[1] https://www.trustedfirmware.org/projects/trusted-services/”h]”(hŒ[1] ”…””}”(hj@  hžhhŸNh NubhŒ	reference”“”)”}”(hŒ:https://www.trustedfirmware.org/projects/trusted-services/”h]”hŒ:https://www.trustedfirmware.org/projects/trusted-services/”…””}”(hjJ  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”jL  uh1jH  hj@  ubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K;hj/  hžhubhÊ)”}”(hŒ4[2] https://developer.arm.com/documentation/den0077/”h]”(hŒ[2] ”…””}”(hj_  hžhhŸNh NubjI  )”}”(hŒ0https://developer.arm.com/documentation/den0077/”h]”hŒ0https://developer.arm.com/documentation/den0077/”…””}”(hjg  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”ji  uh1jH  hj_  ubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K=hj/  hžhubhÊ)”}”(hŒH[3] https://www.arm.com/architecture/security-features/platform-security”h]”(hŒ[3] ”…””}”(hj|  hžhhŸNh NubjI  )”}”(hŒDhttps://www.arm.com/architecture/security-features/platform-security”h]”hŒDhttps://www.arm.com/architecture/security-features/platform-security”…””}”(hj„  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”j†  uh1jH  hj|  ubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h K?hj/  hžhubhÊ)”}”(hŒ[4] drivers/firmware/arm_ffa/”h]”hŒ[4] drivers/firmware/arm_ffa/”…””}”(hj™  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h KAhj/  hžhubhÊ)”}”(hŒa[5] https://trusted-services.readthedocs.io/en/v1.0.0/developer/service-access-protocols.html#abi”h]”(hŒ[5] ”…””}”(hj§  hžhhŸNh NubjI  )”}”(hŒ]https://trusted-services.readthedocs.io/en/v1.0.0/developer/service-access-protocols.html#abi”h]”hŒ]https://trusted-services.readthedocs.io/en/v1.0.0/developer/service-access-protocols.html#abi”…””}”(hj¯  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”j±  uh1jH  hj§  ubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h KChj/  hžhubhÊ)”}”(hŒ‚[6] https://git.trustedfirmware.org/TS/trusted-services.git/tree/components/rpc/ts_rpc/caller/linux/ts_rpc_caller_linux.c?h=v1.0.0”h]”(hŒ[6] ”…””}”(hjÄ  hžhhŸNh NubjI  )”}”(hŒ~https://git.trustedfirmware.org/TS/trusted-services.git/tree/components/rpc/ts_rpc/caller/linux/ts_rpc_caller_linux.c?h=v1.0.0”h]”hŒ~https://git.trustedfirmware.org/TS/trusted-services.git/tree/components/rpc/ts_rpc/caller/linux/ts_rpc_caller_linux.c?h=v1.0.0”…””}”(hjÌ  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”jÎ  uh1jH  hjÄ  ubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h KEhj/  hžhubhÊ)”}”(hŒt[7] https://git.trustedfirmware.org/TS/trusted-services.git/tree/deployments/libts/arm-linux/CMakeLists.txt?h=v1.0.0”h]”(hŒ[7] ”…””}”(hjá  hžhhŸNh NubjI  )”}”(hŒphttps://git.trustedfirmware.org/TS/trusted-services.git/tree/deployments/libts/arm-linux/CMakeLists.txt?h=v1.0.0”h]”hŒphttps://git.trustedfirmware.org/TS/trusted-services.git/tree/deployments/libts/arm-linux/CMakeLists.txt?h=v1.0.0”…””}”(hjé  hžhhŸNh Nubah}”(h]”h ]”h"]”h$]”h&]”Œrefuri”jë  uh1jH  hjá  ubeh}”(h]”h ]”h"]”h$]”h&]”uh1hÉhŸh³h KGhj/  hžhubeh}”(h]”Œ
references”ah ]”h"]”Œ
references”ah$]”h&]”uh1h´hh¶hžhhŸh³h K9ubeh}”(h]”Œts-tee-trusted-services-project”ah ]”h"]”Œ!ts-tee (trusted services project)”ah$]”h&]”uh1h´hhhžhhŸh³h Kubeh}”(h]”h ]”h"]”h$]”h&]”Œsource”h³uh1hŒcurrent_source”NŒcurrent_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)”}”(h¹NŒ	generator”NŒ	datestamp”NŒsource_link”NŒ
source_url”NŒtoc_backlinks”Œentry”Œfootnote_backlinks”KŒsectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒstrip_classes”NŒreport_level”KŒ
halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ	traceback”ˆŒinput_encoding”Œ	utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”j1  Œerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œlanguage_code”Œen”Œrecord_dependencies”NŒconfig”NŒ	id_prefix”hŒauto_id_prefix”Œid”Œdump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”h³Œ_destination”NŒ_config_files”]”Œ7/var/lib/git/docbuild/linux/Documentation/docutils.conf”aŒfile_insertion_enabled”ˆŒraw_enabled”KŒline_length_limit”M'Œpep_references”NŒpep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒrfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ	tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œsmart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œdocinfo_xform”KŒsectsubtitle_xform”‰Œimage_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”(j  j  j  j   uŒ	nametypes”}”(j  ‰j  ‰uh}”(j  h¶j   j/  uŒfootnote_refs”}”Œcitation_refs”}”Œautofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ	footnotes”]”Œ	citations”]”Œautofootnote_start”KŒsymbol_footnote_start”K Œ
id_counter”Œcollections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œtransformer”NŒinclude_log”]”Œ
decoration”Nhžhub.