Running OP TEE on QEMU ARMv8 - DevendraDevadiga/optee_qemu_armv8a_prebuilt_binaries GitHub Wiki
Prebuilt OP-TEE 3.15 Binaries for QEMUv8 and Run x-test
Download the binaries provided in this repository.
$ git clone https://github.com/DevendraDevadiga/optee_qemu_armv8a_prebuilt_binaries.git
$ cd optee_qemu_armv8a_prebuilt_binaries
$ ls
optee_qemu_armv8a README.md
$ cd cd optee_qemu_armv8a
$ chmod 777 *
$ sudo ./run_qemu.shTwo terminals will be opened ans pop-up. One for Secure world (OP-TEE) and another for Normal World (Linux) as below
Type "c" (Continue) on qemu console. OP-TEE prints will display on Secure world console.
Firmware loading log and Linux logs will display on Normal world console.
OP-TEE will display Memory map details and OP-TEE version details. You can obeserve OP-TEE verison as 3.15.0
I/TC: OP-TEE version: 3.15.0-dev (gcc version 10.2.1 20201103 (GNU Toolchain for the A-profile Architecture 10.2-2020.11 (arm-10.16))) #8 Thu Dec 23 15:55:20 UTC 2021 aarch64
Linux logs will display on Normal world console once OP-TEE loadded successfully and switched back to Normal world..
In Linux you can able to see Linux OP-TEE Driver probe message:
[ 2.019187] optee: probing for conduit method.
[ 2.021676] optee: revision 3.15 (6be0dbca)
[ 2.027383] optee: dynamic shared memory is enabled
[ 2.058506] optee: initialized driverBuildroot is used for rootfs. Login as "root".
If the OP-TEE Linux driver is loaded properly you can able to see below nodes under "/dev"
#ls -al /dev/tee*
crw-rw---- 1 root teeclnt 247, 0 Dec 24 07:33 /dev/tee0
crw-rw---- 1 root tee 247, 16 Dec 24 07:33 /dev/teepriv0
# OP-TEE Client (tee-supllicant) should run as background process. And during the boot itself it is already started and no need to run manually in this case.
#ps -A | grep tee
145 tee /usr/sbin/tee-supplicant -d /dev/teepriv0
146 root [optee_bus_scan]
180 root grep tee
# 
In th Secure Console we can't enter any commands. But if type any key its ASCII value will be displayed. Interrupt handler for capturing the UART keys is registered. (console_itr_cb)
https://github.com/OP-TEE/optee_os/blob/master/core/arch/arm/plat-vexpress/main.c#L117 https://github.com/OP-TEE/optee_os/blob/master/core/arch/arm/plat-vexpress/main.c#L109
For example if we type the "ENTER" in keyboard in Secure console ASCII value (in HEX) 0xD will display as below:
D/TC:0 console_itr_cb:167 cpu 0: got 0xdFor testing I typed capital "A" and small "a" and able to see those typed keys ASCII values in HEX as below:
D/TC:0 console_itr_cb:167 cpu 0: got 0x41
D/TC:0 console_itr_cb:167 cpu 0: got 0x61
For OP-TEE Example application details go through below link: https://optee.readthedocs.io/en/latest/building/gits/optee_examples/optee_examples.html
The Trusted Applications are generated in the "*.ta" format. In the file system these applications are stored in this path "/lib/optee_armtz/".
When host application is called TEEC_OpenSession() with UUID information, the tee-supplicant will load the corresponding Trusted application (TA) i.e /lib/optee_armtz/.ta
Check TA's are available or not. It will display all the TA which is required by "xtest" and optee example applications:
# ls /lib/optee_armtz/
12345678-5b69-11e4-9dbb-101f74f00099.ta
25497083-a58a-4fc5-8a72-1ad7b69b8562.ta
2a287631-de1b-4fdd-a55c-b9312e40769a.ta
380231ac-fb99-47ad-a689-9e017eb6e78a.ta
484d4143-2d53-4841-3120-4a6f636b6542.ta
528938ce-fc59-11e8-8eb2-f2801f1b9fd1.ta
5b9e0e40-2636-11e1-ad9e-0002a5d5c51b.ta
5ce0c432-0ab0-40e5-a056-782ca0e6aba2.ta
5dbac793-f574-4871-8ad3-04331ec17f24.ta
60276949-7ff3-4920-9bce-840c9dcf3098.ta
614789f2-39c0-4ebf-b235-92b32ac107ed.ta
731e279e-aafb-4575-a771-38caa6f0cca6.ta
873bcd08-c2c3-11e6-a937-d0bf9c45c61c.ta
8aaaf200-2450-11e4-abe2-0002a5d5c51b.ta
a4c04d50-f180-11e8-8eb2-f2801f1b9fd1.ta
a734eed9-d6a1-4244-aa50-7c99719e7b7b.ta
b3091a65-9751-4784-abf7-0298a7cc35ba.ta
b689f2a7-8adf-477a-9f99-32e90c0ad0a2.ta
b6c53aba-9669-4668-a7f2-205629d00f86.ta
c3f6e2c0-3548-11e1-b86c-0800200c9a66.ta
cb3e5ba0-adf1-11e0-998b-0002a5d5c51b.ta
d17f73a0-36ef-11e1-984a-0002a5d5c51b.ta
e13010e0-2ae1-11e5-896a-0002a5d5c51b.ta
e626662e-c0e2-485c-b8c8-09fbce6edf3d.ta
e6a33ed4-562b-463a-bb7e-ff5e15a493c8.ta
ee90d523-90ad-46a0-859d-8eea0b150086.ta
f157cda0-550c-11e5-a6fa-0002a5d5c51b.ta
f4e750bb-1437-4fbf-8785-8d3580c34994.ta
ffd2bded-ab7d-4988-95ee-e4962fff7154.ta
# The Host applications are in "/usr/bin" path in the file system.
# ls /usr/bin/optee*
/usr/bin/optee_example_acipher /usr/bin/optee_example_plugins
/usr/bin/optee_example_aes /usr/bin/optee_example_random
/usr/bin/optee_example_hello_world /usr/bin/optee_example_secure_storage
/usr/bin/optee_example_hotp
#
# ls /usr/bin/xtest
/usr/bin/xtest
# 
Now run the each test application and observe the results.
When Hello World CA is called with TEEC_OpenSession(), its corresponding TA will be loaded.
https://github.com/linaro-swg/optee_examples/blob/master/hello_world/host/main.c#L44 ==> https://github.com/linaro-swg/optee_examples/blob/master/hello_world/ta/include/hello_world_ta.h#L35
https://github.com/linaro-swg/optee_examples/blob/master/hello_world/host/main.c#L56
Below is the UUID of "optee_example_hello_world":
#define TA_HELLO_WORLD_UUID \
{ 0x8aaaf200, 0x2450, 0x11e4, \
{ 0xab, 0xe2, 0x00, 0x02, 0xa5, 0xd5, 0xc5, 0x1b} }So corresponding TA for this Host application is :
/lib/optee_armtz/8aaaf200-2450-11e4-abe2-0002a5d5c51b.taRun the CA (Client Application) or Host application:
In Secure console, you will get the messages related to TA as below:
D/TC:? 0 tee_ta_init_pseudo_ta_session:299 Lookup pseudo TA 8aaaf200-2450-11e4-abe2-0002a5d5c51b
D/TC:? 0 ldelf_load_ldelf:91 ldelf load address 0x40006000
D/LD: ldelf:134 Loading TS 8aaaf200-2450-11e4-abe2-0002a5d5c51b
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF 8aaaf200-2450-11e4-abe2-0002a5d5c51b (Secure Storage TA)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0xffff0008
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF 8aaaf200-2450-11e4-abe2-0002a5d5c51b (REE)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0
D/LD: ldelf:168 ELF (8aaaf200-2450-11e4-abe2-0002a5d5c51b) at 0x40087000
D/TA: TA_CreateEntryPoint:39 has been called
D/TA: TA_OpenSessionEntryPoint:68 has been called
I/TA: Hello World!
D/TA: inc_value:105 has been called
I/TA: Got value: 42 from NW
I/TA: Increase value to: 43
D/TC:? 0 tee_ta_close_session:512 csess 0xbded1c90 id 1
D/TC:? 0 tee_ta_close_session:531 Destroy session
I/TA: Goodbye!
D/TA: TA_DestroyEntryPoint:50 has been called
D/TC:? 0 destroy_context:308 Destroy TA ctx (0xbded1c30)
Normal World console:
# optee_example_acipher
optee_example_acipher: Unexpected number of arguments 0 (expected 2)
usage: optee_example_acipher <key_size> <string to encrypt>
#
# optee_example_acipher 256 "Testing"
Encrypted buffer: 84 68 a9 c5 1a 39 93 25 ab 1a 4a 98 c5 89 4f 7f 59 79 8b 8d e9 9e e1 4d 12 34 89 48 72 00 b4 40
# Secure World Console:
D/TC:? 0 tee_ta_init_pseudo_ta_session:299 Lookup pseudo TA a734eed9-d6a1-4244-aa50-7c99719e7b7b
D/TC:? 0 ldelf_load_ldelf:91 ldelf load address 0x40006000
D/LD: ldelf:134 Loading TS a734eed9-d6a1-4244-aa50-7c99719e7b7b
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF a734eed9-d6a1-4244-aa50-7c99719e7b7b (Secure Storage TA)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0xffff0008
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF a734eed9-d6a1-4244-aa50-7c99719e7b7b (REE)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0
D/LD: ldelf:168 ELF (a734eed9-d6a1-4244-aa50-7c99719e7b7b) at 0x40042000
E/TA: cmd_enc:100 TEE_AsymmetricEncrypt(7, 0): 0xffff0010
D/TC:? 0 tee_ta_close_session:512 csess 0xbded1c90 id 1
D/TC:? 0 tee_ta_close_session:531 Destroy session
D/TC:? 0 destroy_context:308 Destroy TA ctx (0xbded1c30)Normal World console:
# optee_example_aes
Prepare session with the TA
Prepare encode operation
Load key in TA
Reset ciphering operation in TA (provides the initial vector)
Encode buffer from TA
Prepare decode operation
Load key in TA
Reset ciphering operation in TA (provides the initial vector)
Decode buffer from TA
Clear text and decoded text match
#
#
# ls -al /data/tee/
total 40
drwxrwx--- 2 tee tee 0 Dec 24 09:14 .
drwxr-xr-x 3 root root 0 Dec 24 07:33 ..
-rw------- 1 tee tee 4228 Dec 24 09:14 0
-rw------- 1 tee tee 16384 Dec 24 09:14 1
-rw------- 1 tee tee 16384 Dec 24 09:14 dirf.db
# For information about /data/tee/0, /data/tee/1, /data/tee/dirf.db go through below link:
Secure World Console:
D/TC:? 0 tee_ta_init_pseudo_ta_session:299 Lookup pseudo TA 5dbac793-f574-4871-8ad3-04331ec17f24
D/TC:? 0 ldelf_load_ldelf:91 ldelf load address 0x40006000
D/LD: ldelf:134 Loading TS 5dbac793-f574-4871-8ad3-04331ec17f24
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF 5dbac793-f574-4871-8ad3-04331ec17f24 (Secure Storage TA)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0xffff0008
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF 5dbac793-f574-4871-8ad3-04331ec17f24 (REE)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0
D/LD: ldelf:168 ELF (5dbac793-f574-4871-8ad3-04331ec17f24) at 0x40020000
D/TA: TA_OpenSessionEntryPoint:394 Session 0x4003d4c0: newly allocated
D/TA: alloc_resources:124 Session 0x4003d4c0: get ciphering resources
D/TA: set_aes_key:240 Session 0x4003d4c0: load key material
D/TA: reset_aes_iv:308 Session 0x4003d4c0: reset initial vector
D/TA: cipher_buffer:340 Session 0x4003d4c0: cipher buffer
D/TA: alloc_resources:124 Session 0x4003d4c0: get ciphering resources
D/TA: set_aes_key:240 Session 0x4003d4c0: load key material
D/TA: reset_aes_iv:308 Session 0x4003d4c0: reset initial vector
D/TA: cipher_buffer:340 Session 0x4003d4c0: cipher buffer
D/TC:? 0 tee_ta_close_session:512 csess 0xbded1c90 id 1
D/TC:? 0 tee_ta_close_session:531 Destroy session
D/TA: TA_CloseSessionEntryPoint:404 Session 0x4003d4c0: release session
D/TC:? 0 destroy_context:308 Destroy TA ctx (0xbded1c30)Normal World console:
# optee_example_hotp
Register the shared key: 12345678901234567890��
HOTP: 755224
HOTP: 287082
HOTP: 359152
HOTP: 969429
HOTP: 338314
HOTP: 254676
HOTP: 287922
HOTP: 162583
HOTP: 399871
HOTP: 520489
# Secure World Console:
D/TC:? 0 tee_ta_init_pseudo_ta_session:299 Lookup pseudo TA 484d4143-2d53-4841-3120-4a6f636b6542
D/TC:? 0 ldelf_load_ldelf:91 ldelf load address 0x40006000
D/LD: ldelf:134 Loading TS 484d4143-2d53-4841-3120-4a6f636b6542
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF 484d4143-2d53-4841-3120-4a6f636b6542 (Secure Storage TA)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0xffff0008
D/TC:? 0 ldelf_syscall_open_bin:142 Lookup user TA ELF 484d4143-2d53-4841-3120-4a6f636b6542 (REE)
D/TC:? 0 ldelf_syscall_open_bin:146 res=0
D/LD: ldelf:168 ELF (484d4143-2d53-4841-3120-4a6f636b6542) at 0x4002e000
D/TA: register_shared_key:150 Got shared key 12345678901234567890 (20 bytes).
D/TA: get_hotp:182 HOTP is: 755224
D/TA: get_hotp:182 HOTP is: 287082
D/TA: get_hotp:182 HOTP is: 359152
D/TA: get_hotp:182 HOTP is: 969429
D/TA: get_hotp:182 HOTP is: 338314
D/TA: get_hotp:182 HOTP is: 254676
D/TA: get_hotp:182 HOTP is: 287922
D/TA: get_hotp:182 HOTP is: 162583
D/TA: get_hotp:182 HOTP is: 399871
D/TA: get_hotp:182 HOTP is: 520489
D/TC:? 0 tee_ta_close_session:512 csess 0xbded1c90 id 1
D/TC:? 0 tee_ta_close_session:531 Destroy session
D/TC:? 0 destroy_context:308 Destroy TA ctx (0xbded1c30)