Version 1.4.0

New major features

  • Documentation restructure and enhancements.

  • PSA Crypto migrates to Mbed TLS ‘v3.0.0’.

  • First-Level Interrupt Handling (FLIH) 1 proof of concept on AN521 and MUSCA-B1.

  • Firmware Update service enhancement to support image update with dependencies.

  • Partitions get loaded with Static Load mechanism.

  • Decouple NS RTOS specific implementation from NS interface.

  • PSA Crypto API interface updated to be based on Stateless Handle.

  • MCUboot updated to version ‘TF-Mv1.4-integ’ to support multiple images in RAM_LOAD and DIRECT_XIP upgrade strategies.

  • New platforms added. See New platforms supported for details.

New security advisories

‘abort’ function may not take effect in some TF-M Crypto multi-part operations

Refer to Advisory TFMV-3 for more details. The mitigation is included in this release.

New platforms supported

Deprecated platforms

The following platforms have been removed from TF-M code base.

  • nRF5340 PDK

  • Musca_A

See Platform deprecation and removal for other platforms under deprecation process.

Tested platforms

The following platforms are successfully tested in this release.

  • AN519

  • AN521

  • AN524

  • AN547

  • LPCXpresso55S69

  • Musca-B1

  • Musca-B1 Secure Enclave

  • Musca-S1

  • M2351

  • M2354

  • NUCLEO-L552ZE-Q

  • nrf5340dk

  • nrf9160dk

  • PSoC 64

  • STM32L562E-DK

Known issues

Some open issues are not fixed in this release.

Descriptions

Issue links
PSA Arch Crypto test suite have several known failures.

See this link for detailed analysis of the failures.
Protected Storage Regression test 4001 is stuck on SSE-300 in isolation
level 2 when PXN is enabled.

https://developer.trustedfirmware.org/T902
NS interrupt masking prevents from executing PSA calls.

https://developer.trustedfirmware.org/T950
Image size overflow on Musca-B1 PSA Arch test suite debug build.

https://developer.trustedfirmware.org/T952
Build errors in PSA api tests for initial attestation.

https://developer.trustedfirmware.org/T953
Non Secure Image size overflow on STM32L562E-DK PSA Arch Crypto.

https://developer.trustedfirmware.org/T954

Issues fixed since 1.3.0

Issues fixed by TF-M since v1.3.0 are listed below.

Descriptions

Issue links
IPC Regression test fail when non-secure regression test is enabled and
secure regression test is disabled.

https://developer.trustedfirmware.org/T903
Panic test in PSA Arch IPC test suite generates inconsistent results
between Armclang and GNUARM.

https://developer.trustedfirmware.org/T909

Reference

Copyright (c) 2021, Arm Limited. All rights reserved.