# Generic Trusted Execution Environment Configuration
config TEE
	bool "Trusted Execution Environment support"
	depends on (ARM && (ARM64 || CPU_V7A)) || SANDBOX
	select ARM_SMCCC if ARM
	help
	  This implements a generic interface towards a Trusted Execution
	  Environment (TEE). A TEE is a trusted OS running in some secure
	  environment, for example, TrustZone on ARM cpus, or a separate
	  secure co-processor etc. See also:
	  https://en.wikipedia.org/wiki/Trusted_execution_environment

if TEE

menu "TEE drivers"

config SANDBOX_TEE
	bool "Sandbox TEE emulator"
	depends on SANDBOX
	default y
	help
	  This emulates a generic TEE needed for testing including the AVB
	  TA. The emulation provides all callbacks of a regular TEE and
	  supports session and shared memory management. The AVB TA is
	  emulated with rollback indexes and device lock-state, the state
	  of the TA is only kept in RAM and will be reset on each boot.
	  The emulation only supports one open session at a time.
	  Interaction from the U-Boot command line in possible via the
	  "avb" commands.

source "drivers/tee/optee/Kconfig"

endmenu

endif