Hi Tamas

> Could you tell what was the values of these compile time switches in your test?

For the previous TFM, we have used INCLUDE_TEST_CODE_AND_KEY_ID. For the current TFM it was renamed to INCLUDE_TEST_CODE.

Other parameters are new, so I have tried different combinations of these parameters, but the PSA Test-Suite Attestation is still failed.

> Further do you implemented the boot data sharing between bootloader and runtime firmware?

It’s used the TFM template code without change from tfm\platform\ext\common\template

> Do you sign SPE and NPSE images together or they are signed separately?

We do not use the secondary bootloader so far, so image is not signed.

As the Attestation Regression tests are passed. It’s good to know what combination of parameters have to be used to generate the same token as it was generated by the older TFM and accepted by the PSA Test Suite (last commit on master branch). Or the PSA Test Suite is obsolete.

Thank you,

Andrej

From: TF-M <tf-m-bounces@lists.trustedfirmware.org> On Behalf Of Tamas Ban via TF-M
Sent: Wednesday, February 5, 2020 1:13 PM
To: tf-m@lists.trustedfirmware.org
Subject: Re: [TF-M] PSA Test Suite - Attestation test

Hi Andrej,

Could you tell what was the values of these compile time switches in your test? I assume you did the test on NXP board. Further do you implemented the boot data sharing between bootloader and runtime firmware? Do you sign SPE and NPSE images together or they are signed separately?

Tamas

From: TF-M <tf-m-bounces@lists.trustedfirmware.org> On Behalf Of Andrej Butok via TF-M
Sent: 04 February 2020 17:33
To: tf-m@lists.trustedfirmware.org
Subject: [TF-M] PSA Test Suite - Attestation test

Hello,

After upgrade to the latest version of TFM, the Attestation test from the PSA Test Suite is failed (but the TFM Attestation regression tests are passed).

What combination of configuration parameters must be used (INCLUDE_OPTIONAL_CLAIMS, INCLUDE_TEST_CODE, INCLUDE_COSE_KEY_ID, BOOT_DATA_AVAILABLE) to follow PSA Test Suite expectations?

What commit of the PSA Test-suite must be used for the latest TFM? We are still on the 2019-07-25 (c80681ed7c7f3e2cbf02ded1ef2464ba2ca7ccd5) commit, which was OK with 2-month old TFM.

Is the PSA Test Suite Attestation test valid for the latest TFM?

Thank you,

Andrej Butok

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.