1 # Generic Trusted Execution Environment Configuration
3 bool "Trusted Execution Environment support"
4 depends on (ARM && (ARM64 || CPU_V7A)) || SANDBOX
5 select ARM_SMCCC if ARM
7 This implements a generic interface towards a Trusted Execution
8 Environment (TEE). A TEE is a trusted OS running in some secure
9 environment, for example, TrustZone on ARM cpus, or a separate
10 secure co-processor etc. See also:
11 https://en.wikipedia.org/wiki/Trusted_execution_environment
18 bool "Sandbox TEE emulator"
22 This emulates a generic TEE needed for testing including the AVB
23 TA. The emulation provides all callbacks of a regular TEE and
24 supports session and shared memory management. The AVB TA is
25 emulated with rollback indexes and device lock-state, the state
26 of the TA is only kept in RAM and will be reset on each boot.
27 The emulation only supports one open session at a time.
28 Interaction from the U-Boot command line in possible via the
31 source "drivers/tee/optee/Kconfig"
32 source "drivers/tee/broadcom/Kconfig"