Hi Bohdan,

As Shebu mentioned, both FreeRTOS OTA PAL PSA and FreeRTOS PKCS11 PSA are used in the IoT Featured Reference Integration for Arm Corstone-3xx (FRI). However, the libraries are not actively maintained.

Both libraries are working with TF-M version https://git.trustedfirmware.org/plugins/gitiles/TF-M/trusted-firmware-m.git/+/c9352b59f2a501b5af3f648b3fc91065993c002f on main.

Thanks,

Dev

From: Shebu Varghese Kuriakose <Shebu.VargheseKuriakose@arm.com>
Date: Thursday, 14 November 2024 at 18:50
To: Bohdan.Hunko@infineon.com <Bohdan.Hunko@infineon.com>, tf-m@lists.trustedfirmware.org <tf-m@lists.trustedfirmware.org>, Devaraj Ranganna <Devaraj.Ranganna@arm.com>
Cc: Thomas.Sander@infineon.com <Thomas.Sander@infineon.com>, nd <nd@arm.com>
Subject: RE: FreeRTOS OTA PAL PSA status

Hi Bohdan,

The OTA-PAL-PSA work was done a few years back by Arm TF-M team in collaboration with the FreeRTOS project team.

The layer implements the OTA PAL layer in the FreeRTOS OTA agent  using the PSA FWU APIs. Here is a blog about it - https://www.freertos.org/Community/Blogs/2021/secure-ota-updates-for-cortex-m-devices-with-freertos.

There was an example implementation done on MuscaB1e.

The layer was supported as a submodule in the deprecated Amazon freeRTOS repository - https://github.com/aws/amazon-freertos/tree/main/libraries/abstractions/

The aim is to allow other TF-M/PSA FWU API enabled platforms to reuse the OTA PAL implementation to integrate with the FreeRTOS OTA agent.

An example integration is also available in the IoT Reference Integration for Arm Corstone-3xx (See Secure OTA Updates section - https://github.com/FreeRTOS/iot-reference-arm-corstone3xx)

Copying Devaraj who maintains this integration. @Devaraj Ranganna can comment on the maintenance of the layer.

Similarly, https://github.com/Linaro/freertos-pkcs11-psa is the shim layer that converts PKCS interfaces in FreeRTOS to PSA Crypto APIs

Regards,

Shebu

From: Bohdan.Hunko--- via TF-M <tf-m@lists.trustedfirmware.org>
Sent: Wednesday, November 13, 2024 9:32 AM
To: tf-m@lists.trustedfirmware.org
Cc: Thomas.Sander@infineon.com
Subject: [TF-M] FreeRTOS OTA PAL PSA status

Hi all,

I have found this interesting repo repo https://github.com/Linaro/freertos-ota-pal-psa

I was wondering whether this is official PSA FW UPDATE API support for FreeRTOS, and is it still supported/maintained?

Regards,

Bohdan Hunko

Cypress Semiconductor Ukraine

Engineer

CSUKR CSS ICW SW FW

Mobile: +38099 50 19 714
Bohdan.Hunko@infineon.com