Skip to content

Add WOLFSSL_OPTEE for building wolfCrypt into an OP-TEE trusted application #11919

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
philljj merged 1 commit into from
Oct 29, 2026
+16 −1
Merged

Add WOLFSSL_OPTEE for building wolfCrypt into an OP-TEE trusted application #11919

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .wolfssl_known_macro_extras
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1145,6 +1145,7 @@ WOLFSSL_OLD_SET_CURVES_LIST
WOLFSSL_OLD_TIMINGPADVERIFY
WOLFSSL_OLD_UNSUPPORTED_EXTENSION
WOLFSSL_OPENSSL_NO_BUILD_DATE
WOLFSSL_OPTEE
WOLFSSL_OPTIONS_IGNORE_SYS
WOLFSSL_PASSTHRU_ERR
WOLFSSL_PB
Expand Down
2 changes: 1 addition & 1 deletion wolfcrypt/src/wc_port.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6144,7 +6144,7 @@ char* wolfSSL_strnstr(const char* s1, const char* s2, size_t n)

#if (defined(__unix__) || defined(__APPLE__)) && \
!defined(WOLFSSL_KERNEL_MODE) && !defined(WOLFSSL_ZEPHYR) && \
!defined(WOLFSSL_SGX)
!defined(WOLFSSL_SGX) && !defined(WOLFSSL_OPTEE)

#include <fcntl.h>
#include <errno.h>
Expand Down
14 changes: 14 additions & 0 deletions wolfssl/wolfcrypt/settings.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3515,6 +3515,20 @@
#define USE_CERT_BUFFERS_2048
#endif /* WOLFSSL_SGX */

/* OP-TEE trusted application. Runs against libutee rather than a C library,
* so there are no file descriptors, sockets, directories or wall clock, and
* a TA is single threaded. The TA toolchain is a Linux cross compiler and
* still predefines __unix__, so the environment has to be named explicitly. */
#ifdef WOLFSSL_OPTEE
#define NO_FILESYSTEM
#define NO_WOLFSSL_DIR
#define NO_WRITEV
#define NO_MAIN_DRIVER
#define SINGLE_THREADED
#define NO_ASN_TIME /* no wall clock in a TA */
#define USER_TICKS
#endif /* WOLFSSL_OPTEE */

/* FreeScale MMCAU hardware crypto has 4 byte alignment.
However, KSDK fsl_mmcau.h gives API with no alignment
requirements (4 byte alignment is managed internally by fsl_mmcau.c) */
Expand Down
Loading