Hi all,

Thanks for the information!

Regards, Bohdan Hunko

Cypress Semiconductor Ukraine Engineer CSUKR CSS ICW SW FW Mobile: +38099 50 19 714 Bohdan.Hunko@infineon.commailto:Bohdan.Hunko@infineon.com

From: Devaraj Ranganna Devaraj.Ranganna@arm.com Sent: Monday, November 18, 2024 17:49 To: Shebu Varghese Kuriakose Shebu.VargheseKuriakose@arm.com; Hunko Bohdan (CSS ICW SW SCV BFS SFW) Bohdan.Hunko@infineon.com; tf-m@lists.trustedfirmware.org Cc: Sander Thomas (CSS ICW MCU PMK SW) Thomas.Sander@infineon.com; nd nd@arm.com Subject: Re: FreeRTOS OTA PAL PSA status

Caution: This e-mail originated outside Infineon Technologies. Please be cautious when sharing information or opening attachments especially from unknown senders. Refer to our intranet guidehttps://intranet-content.infineon.com/explore/aboutinfineon/rules/informationsecurity/ug/SocialEngineering/Pages/SocialEngineeringElements_en.aspx to help you identify Phishing email.

Hi Bohdan,

As Shebu mentioned, both FreeRTOS OTA PAL PSAhttps://github.com/Linaro/freertos-ota-pal-psa and FreeRTOS PKCS11 PSAhttps://github.com/Linaro/freertos-pkcs11-psa are used in the IoT Featured Reference Integration for Arm Corstone-3xx (FRI)https://github.com/FreeRTOS/iot-reference-arm-corstone3xx. However, the libraries are not actively maintained.

Both libraries are working with TF-M version https://git.trustedfirmware.org/plugins/gitiles/TF-M/trusted-firmware-m.git/... on main.

Thanks, Dev

From: Shebu Varghese Kuriakose <Shebu.VargheseKuriakose@arm.commailto:Shebu.VargheseKuriakose@arm.com> Date: Thursday, 14 November 2024 at 18:50 To: Bohdan.Hunko@infineon.commailto:Bohdan.Hunko@infineon.com <Bohdan.Hunko@infineon.commailto:Bohdan.Hunko@infineon.com>, tf-m@lists.trustedfirmware.orgmailto:tf-m@lists.trustedfirmware.org <tf-m@lists.trustedfirmware.orgmailto:tf-m@lists.trustedfirmware.org>, Devaraj Ranganna <Devaraj.Ranganna@arm.commailto:Devaraj.Ranganna@arm.com> Cc: Thomas.Sander@infineon.commailto:Thomas.Sander@infineon.com <Thomas.Sander@infineon.commailto:Thomas.Sander@infineon.com>, nd <nd@arm.commailto:nd@arm.com> Subject: RE: FreeRTOS OTA PAL PSA status Hi Bohdan,

The OTA-PAL-PSA work was done a few years back by Arm TF-M team in collaboration with the FreeRTOS project team.

The layer implements the OTA PAL layer in the FreeRTOS OTA agent using the PSA FWU APIs. Here is a blog about it - https://www.freertos.org/Community/Blogs/2021/secure-ota-updates-for-cortex-.... There was an example implementation done on MuscaB1e.

The layer was supported as a submodule in the deprecated Amazon freeRTOS repository - https://github.com/aws/amazon-freertos/tree/main/libraries/abstractions/ The aim is to allow other TF-M/PSA FWU API enabled platforms to reuse the OTA PAL implementation to integrate with the FreeRTOS OTA agent. An example integration is also available in the IoT Reference Integration for Arm Corstone-3xx (See Secure OTA Updates section - https://github.com/FreeRTOS/iot-reference-arm-corstone3xx) Copying Devaraj who maintains this integration. @Devaraj Rangannamailto:Devaraj.Ranganna@arm.com can comment on the maintenance of the layer.

Similarly, https://github.com/Linaro/freertos-pkcs11-psa is the shim layer that converts PKCS interfaces in FreeRTOS to PSA Crypto APIs

Regards, Shebu

From: Bohdan.Hunko--- via TF-M <tf-m@lists.trustedfirmware.orgmailto:tf-m@lists.trustedfirmware.org> Sent: Wednesday, November 13, 2024 9:32 AM To: tf-m@lists.trustedfirmware.orgmailto:tf-m@lists.trustedfirmware.org Cc: Thomas.Sander@infineon.commailto:Thomas.Sander@infineon.com Subject: [TF-M] FreeRTOS OTA PAL PSA status

Hi all,

I have found this interesting repo repo https://github.com/Linaro/freertos-ota-pal-psa

I was wondering whether this is official PSA FW UPDATE API support for FreeRTOS, and is it still supported/maintained?

Regards, Bohdan Hunko

Cypress Semiconductor Ukraine Engineer CSUKR CSS ICW SW FW Mobile: +38099 50 19 714 Bohdan.Hunko@infineon.commailto:Bohdan.Hunko@infineon.com