Hi all,

 

May I ask you to take a look at the following patch set to decouple NS specific code from TF-M NS interface?

https://review.trustedfirmware.org/q/topic:%22decouple-ns-interface%22+(status:open%20OR%20status:merged)

 

The decoupled NS code is moved from trusted-firmware-m repo to tf-m-tests repo, as an example of NS implementation.

https://review.trustedfirmware.org/q/topic:%22add-ns-code%22+(status:open%20OR%20status:merged)

 

The purpose of this change is to make it more flexible and simple to integrate NS OS with TF-M NS interface.

Currently TF-M provides some reference implementations of NS interface for NS OS integration. However, it may have limitations during NS OS integration as various NS OSes/application usages prefer different implementations.

 

Therefore, those NS OS specific code  is removed from TF-M interface for NS clients in this patch set. The removed NS code includes NS interface lock ops, os wrappers and NS test specific implementation.

Those NS code can be taken as an example in tf-m-tests. NS developers can follow or replace them during integration with TF-M, according to NS OS implementation and actual scenarios, without hacking trusted-firmware-m repo.

 

This patch set doesn’t change the current integration scheme. Instead, it exports the “tfm_ns_interface_dispatch()” API and enables NS OS to implement it according to NS OS and application specific requirement, such as NS interface lock operations.

 

Any comment is welcome!

 

Best regards,

Hu Ziji