TF-M minimal build features

[SirBuhi]

Hi there,

Is there somewhere an overview, which features that are included in the TF-M minimal build, which you are supporting?
Similar to the TF-M profiles, which give a short overview of the features.

Thanks for your answer in advance.

Kind regards,
Patrick

[dejans]

Hi,

Documentation states that minimal TF-M allows for generating random numbers and platform services. You can have a look at psa_generate_random() in migration chapter SPM to TFM and TF-M platform service.

Best regards,
Dejan

[SirBuhi]

Dear Dejan,

Can I summarize it like that?

The minimal built supports:

- System Reset

- Random number generation

- Secure memory read (via tfm_platform_hal_ioctl)

- Secure GPIO access (via tfm_platform_hal_ioctl)

- Non-volatile counters

Are there more features to this list?

If I need further features such as HMAC (Hash Message Authentication Codes). I can't extend the minimal built to feature this and therefore rather directly start with a TF-M profile?

Kind Regards,

Patrick

[dejans]

Hi,

Regarding services, you can find platform service integration guide and details for the platform folder in the documentation. You could also have a look at TF-M integration samples and the TF-M configuration which these samples include. Additionally, please have a look at tfm_platform.yaml.

It is not possible to modify minimal TF-M configuration. If you need to extend it, you would need to use default TF-M configuration.

Best regards,
Dejan