cc3xx: support persistent DRBG state - #14
Merged
Merged
Conversation
Collaborator
|
manually-triggered CI: https://ci.trustedfirmware.org/job/tf-m-static/3995/ |
amjoul01
self-requested a review
July 13, 2026 09:50
CriGhe01
force-pushed
the
crighe01_persistent_drbg_state
branch
2 times, most recently
from
July 13, 2026 10:18
9eef6b9 to
97e166f
Compare
Member
|
I think the direction is correct, but we will need a similar approach to provide persistent storage for the state of the SP800-90B health tests, so that we don't perform them as well when moving between boot stages. We can use this PR for this additional work |
adeaarm
self-requested a review
July 13, 2026 12:57
Contributor
Author
|
manually triggered CI - https://ci.trustedfirmware.org/job/tf-m-static/3999/ |
Contributor
Author
|
manually triggered CI with SP800-90B health tests persistent data solution https://ci.trustedfirmware.org/job/tf-m-static/4003/ july 14 16:22 https://ci.trustedfirmware.org/job/tf-m-static/4007/ |
adeaarm
reviewed
Jul 14, 2026
adeaarm
requested changes
Jul 14, 2026
adeaarm
reviewed
Jul 14, 2026
adeaarm
requested changes
Jul 14, 2026
CriGhe01
force-pushed
the
crighe01_persistent_drbg_state
branch
from
July 14, 2026 15:19
31d38fd to
e924548
Compare
adeaarm
self-requested a review
July 14, 2026 19:48
adeaarm
approved these changes
Jul 14, 2026
jackson-cooperd
approved these changes
Jul 15, 2026
Allow platforms to provide storage for DRBG state instead of always using driver-local static storage. This lets boot stages share the seeded DRBG state while keeping the fixed DRBG function pointers local to each image. Change-Id: I2970242c5ace767336aa1bba51b7e98f910e7ed7 Signed-off-by: Cristina Gheorghe <Cristina.Gheorghe@arm.com>
Allow platforms to provide storage for SP800-90B health-test state. This avoids repeating startup tests and preserves continuous-test progress when boot stages share an entropy source. Change-Id: Iedcd975ad4310118dbbd474c79fef4d4e995f221 Signed-off-by: Cristina Gheorghe <Cristina.Gheorghe@arm.com>
Keep the entropy and DRBG context types available in all builds. Only create local storage when the platform does not provide its own persistent storage. Rename the context pointers with the p_ prefix and keep the g_ prefix for global storage objects. Change-Id: I3d3e996af7bfa6795a0abb7bc828e14146701431 Signed-off-by: Cristina Gheorghe <Cristina.Gheorghe@arm.com>
adeaarm
force-pushed
the
crighe01_persistent_drbg_state
branch
from
July 15, 2026 09:26
e924548 to
8e705fa
Compare
amjoul01
approved these changes
Jul 15, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Allow platforms to provide storage for DRBG state instead of always using driver-local static storage. This lets boot stages share the seeded DRBG state while keeping the fixed DRBG function pointers local to each image.