Registered User mNo edit summary |
Registered User mNo edit summary Tag: 2017 source edit |
||
(32 intermediate revisions by 6 users not shown) | |||
Line 1: | Line 1: | ||
{{ApplicableFor | |||
|MPUs list=STM32MP13x, STM32MP15x | |MPUs list=STM32MP13x, STM32MP15x, STM32MP21x, STM32MP23x, STM32MP25x | ||
|MPUs checklist=STM32MP13x,STM32MP15x | |MPUs checklist=STM32MP13x, STM32MP15x, STM32MP21x, STM32MP23x, STM32MP25x | ||
}} | }} | ||
==Article purpose== | |||
The purpose of this article is to: | |||
* Briefly introduce the RNG peripheral and its main features. | |||
* List the software frameworks and drivers managing the peripheral. | |||
* Explain how to configure the peripheral. | |||
==Peripheral overview== | |||
The '''RNG''' peripheral is used to provide 32-bit random numbers. | |||
Refer to the [[STM32 MPU resources#Reference manuals|STM32 MPU reference manuals]] for the complete list of features, and to the software frameworks and drivers, introduced below, to see which features are implemented. | |||
{| | ==Peripheral usage== | ||
This chapter is applicable in the scope of the '''OpenSTLinux BSP''' running on the Arm<sup>®</sup> Cortex<sup>®</sup>-A processor, and the '''STM32CubeMPU Package''' running on the Arm<sup>®</sup> Cortex<sup>®</sup>-M processor. | |||
Refer to the wiki article [[Hardware random overview]] to learn more on the possible usages of this peripheral. | |||
===Boot time assignment=== | |||
====On {{MicroprocessorDevice | device=13}}==== | |||
{{#lst:STM32MP1_internal_peripherals_assignment_table_template|stm32mp1_boottime}} | |||
<section begin=stm32mp13_boottime /> | |||
| rowspan="1" | Security | |||
| rowspan="1" | [[RNG internal peripheral|RNG]] | |||
| RNG | |||
| <span title="system peripheral" style="font-size:21px">✓</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☑</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| Required for DPA peripheral protection | |||
|- | |- | ||
<section end=stm32mp13_boottime /> | |||
|} | |||
====On {{MicroprocessorDevice | device=15}}==== | |||
{{#lst:STM32MP1_internal_peripherals_assignment_table_template|stm32mp1_boottime}} | |||
<section begin=stm32mp15_boottime /> | |||
| rowspan="1" | Security | |||
| rowspan="1" | [[RNG internal peripheral|RNG]] | |||
| RNG1 | |||
| | |||
| <span title="assignable peripheral" style="font-size:21px">☑</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| | |||
|- | |||
<section end=stm32mp15_boottime /> | |||
|} | |||
====On {{MicroprocessorDevice | device=21}}==== | |||
{{#lst:STM32MP2_internal_peripherals_assignment_table_template|stm32mp2_a35_boottime}} | |||
<section begin=stm32mp21_a35_boottime /> | |||
| rowspan="2" | Security | |||
| rowspan="2" | [[RNG internal peripheral | RNG]] | |||
| RNG1 | |||
| <span title="system peripheral" style="font-size:21px">✓</span> | |||
| <span title="assigned peripheral" style="font-size:21px">☑</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
|- | |- | ||
| | | RNG2 | ||
| <span title="system peripheral" style="font-size:21px">✓</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
|- | |- | ||
<section end=stm32mp21_a35_boottime /> | |||
|} | |} | ||
====On {{MicroprocessorDevice | device=23}}==== | |||
{{#lst:STM32MP2_internal_peripherals_assignment_table_template|stm32mp2_a35_boottime}} | |||
<section begin=stm32mp23_a35_boottime /> | |||
| rowspan="1" | Security | |||
| rowspan="1" | [[RNG internal peripheral | RNG]] | |||
| RNG | |||
| <span title="system peripheral" style="font-size:21px">✓</span> | |||
| <span title="assigned peripheral" style="font-size:21px">☑</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
|- | |||
<section end=stm32mp23_a35_boottime /> | |||
|} | |||
====On {{MicroprocessorDevice | device=25}}==== | |||
{{#lst:STM32MP2_internal_peripherals_assignment_table_template|stm32mp2_a35_boottime}} | |||
<section begin=stm32mp25_a35_boottime /> | |||
| rowspan="1" | Security | |||
| rowspan="1" | [[RNG internal peripheral | RNG]] | |||
| RNG | |||
| <span title="system peripheral" style="font-size:21px">✓</span> | |||
| <span title="assigned peripheral" style="font-size:21px">☑</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
|- | |||
<section end=stm32mp25_a35_boottime /> | |||
|} | |||
===Runtime assignment=== | |||
If the Arm<sup>®</sup> Cortex<sup>®</sup>-A processor hardware RNG peripheral is assigned to OP-TEE, then the Linux kernel can request random numbers through the [[Hardware random overview|hardware random framework]], which is interfaced with the {{CodeSource | Linux kernel | drivers/char/hw_random/optee-rng.c | OP-TEE RNG Linux driver}}. | |||
If the Arm<sup>®</sup> Cortex<sup>®</sup>-A processor hardware RNG peripheral is assigned to the Linux kernel, then the Linux kernel can access it through the [[Hardware random overview|hardware random framework]], which is interfaced with the {{CodeSource | Linux kernel | drivers/char/hw_random/stm32-rng.c | Linux RNG driver}}. | |||
====On {{MicroprocessorDevice | device=13}}==== | |||
{{#lst:STM32MP1_internal_peripherals_assignment_table_template|stm32mp13_runtime}} | |||
<section begin=stm32mp13_runtime /> | |||
| rowspan="1" | Security | |||
| rowspan="1" | [[RNG internal peripheral|RNG]] | |||
| RNG | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| Assignment (single choice) | |||
|- | |||
<section end=stm32mp13_runtime /> | |||
|} | |||
====On {{MicroprocessorDevice | device=15}}==== | |||
{{#lst:STM32MP1_internal_peripherals_assignment_table_template|stm32mp15_runtime}} | |||
<section begin=stm32mp15_runtime /> | |||
| rowspan="2" | Security | |||
| rowspan="2" | [[RNG internal peripheral|RNG]] | |||
| RNG1 | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| | |||
| Assignment (single choice) | |||
|- | |||
| RNG2 | |||
| | |||
| | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| | |||
|- | |||
<section end=stm32mp15_runtime /> | |||
|} | |||
====On {{MicroprocessorDevice | device=21}}==== | |||
{{#lst:STM32MP2_internal_peripherals_assignment_table_template|stm32mp21_runtime}} | |||
<section begin=stm32mp21_a35_runtime /> | |||
| rowspan="2" | Security | |||
| rowspan="2" | [[RNG internal peripheral | RNG]] | |||
| RNG1 | |||
| <span title="assigned peripheral" style="font-size:21px">☑</span><sup>OP-TEE</sup> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
|- | |||
| RNG2 | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span><sup>OP-TEE</sup> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
|- | |||
<section end=stm32mp21_a35_runtime /> | |||
|} | |||
====On {{MicroprocessorDevice | device=23}}==== | |||
{{#lst:STM32MP2_internal_peripherals_assignment_table_template|stm32mp23_runtime}} | |||
<section begin=stm32mp23_a35_runtime /> | |||
| rowspan="1" | Security | |||
| rowspan="1" | [[RNG internal peripheral | RNG]] | |||
| RNG | |||
| <span title="assigned peripheral" style="font-size:21px">☑</span><sup>OP-TEE</sup> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
|- | |||
<section end=stm32mp23_a35_runtime /> | |||
|} | |||
====On {{MicroprocessorDevice | device=25}}==== | |||
{{#lst:STM32MP2_internal_peripherals_assignment_table_template|stm32mp25_runtime}} | |||
<section begin=stm32mp25_a35_runtime /> | |||
| rowspan="1" | Security | |||
| rowspan="1" | [[RNG internal peripheral | RNG]] | |||
| RNG | |||
| <span title="assigned peripheral" style="font-size:21px">☑</span><sup>OP-TEE</sup> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| <span title="assignable peripheral" style="font-size:21px">☐</span> | |||
| <span title="assignable peripheral but not supported" style="font-size:21px">⬚</span> | |||
| | |||
| | |||
|- | |||
<section end=stm32mp25_a35_runtime /> | |||
|} | |||
==Software frameworks and drivers== | |||
Below are listed the software frameworks and drivers managing the '''RNG''' peripheral for the embedded software components listed in the above tables. | |||
* '''Linux<sup>®</sup>''': [[Hardware random overview|hardware random framework]], {{CodeSource | Linux kernel | drivers/char/hw_random/stm32-rng.c | Linux RNG driver}}, and {{CodeSource | Linux kernel | drivers/char/hw_random/optee-rng.c | OP-TEE RNG Linux driver }} when random number generation is managed by OP-TEE (default behavior) | |||
* '''U-Boot''': {{CodeSource | U-Boot | drivers/rng/stm32_rng.c | U-Boot RNG driver }} and {{CodeSource | U-Boot | drivers/rng/optee_rng.c | OP-TEE RNG U-Boot driver }} | |||
* '''OP-TEE''': {{CodeSource | OP-TEE_OS | core/drivers/stm32_rng.c | OP-TEE RNG driver }} and {{CodeSource | OP-TEE_OS| core/pta/hwrng.c | RNG PTA }} | |||
* '''STM32Cube''': [[STM32CubeMP15 Package architecture|RNG HAL driver]] and {{CodeSource | STM32CubeMP1 | Drivers/STM32MP1xx_HAL_Driver/Inc/stm32mp1xx_hal_rng.h | header file of RNG HAL module}} | |||
==How to assign and configure the peripheral== | |||
The peripheral assignment can be done via the [[STM32CubeMX]] graphical tool (and manually completed if needed).<br /> | |||
This tool also helps to configure the peripheral: | |||
* Partial device trees (pin control and clock tree) generation for the OpenSTLinux software components. | |||
* HAL initialization code generation for the STM32CubeMPU Package. | |||
The configuration is applied by the firmware running in the context in which the peripheral is assigned. | |||
This configuration is done in [[STM32 MPU OP-TEE_overview|OP-TEE]] through the device tree. <br>For more information, refer to the wiki article [[RNG device tree configuration]]. | |||
==References== | |||
<references/> | |||
<noinclude> | <noinclude> | ||
{{ArticleBasedOnModel| | {{ArticleBasedOnModel| Internal peripheral article model}} | ||
[[Category:Security peripherals]] | [[Category:Security peripherals]] | ||
{{PublicationRequestId | | {{PublicationRequestId | 31421 | 2024-06-17 | previous PR: 24653 }} | ||
</noinclude> | </noinclude> |
Latest revision as of 12:09, 8 January 2025
1. Article purpose
The purpose of this article is to:
- Briefly introduce the RNG peripheral and its main features.
- List the software frameworks and drivers managing the peripheral.
- Explain how to configure the peripheral.
2. Peripheral overview
The RNG peripheral is used to provide 32-bit random numbers.
Refer to the STM32 MPU reference manuals for the complete list of features, and to the software frameworks and drivers, introduced below, to see which features are implemented.
3. Peripheral usage
This chapter is applicable in the scope of the OpenSTLinux BSP running on the Arm® Cortex®-A processor, and the STM32CubeMPU Package running on the Arm® Cortex®-M processor.
Refer to the wiki article Hardware random overview to learn more on the possible usages of this peripheral.
3.1. Boot time assignment
3.1.1. On STM32MP13x lines 
Click on to expand or collapse the legend...
Domain | Peripheral | Boot time allocation | Comment ![]() | |||
---|---|---|---|---|---|---|
Instance | Cortex-A7 secure (ROM code) |
Cortex-A7 secure (TF-A BL2) |
Cortex-A7 non-secure (U-Boot) | |||
Security | RNG | RNG | ✓ | ☑ | ☐ | Required for DPA peripheral protection |
3.1.2. On STM32MP15x lines 
Click on to expand or collapse the legend...
Domain | Peripheral | Boot time allocation | Comment ![]() | |||
---|---|---|---|---|---|---|
Instance | Cortex-A7 secure (ROM code) |
Cortex-A7 secure (TF-A BL2) |
Cortex-A7 non-secure (U-Boot) | |||
Security | RNG | RNG1 | ☑ | ☐ |
3.1.3. On STM32MP21 unknown microprocessor device
Click on to expand or collapse the legend...
Domain | Peripheral | Boot time allocation | Comment ![]() | |||
---|---|---|---|---|---|---|
Instance | Cortex-A35 secure (ROM code) |
Cortex-A35 secure (TF-A BL2) |
Cortex-A35 nonsecure (U-Boot) | |||
Security | RNG | RNG1 | ✓ | ☑ | ⬚ | |
RNG2 | ✓ | ☐ | ⬚ |
3.1.4. On STM32MP23 unknown microprocessor device
Click on to expand or collapse the legend...
Domain | Peripheral | Boot time allocation | Comment ![]() | |||
---|---|---|---|---|---|---|
Instance | Cortex-A35 secure (ROM code) |
Cortex-A35 secure (TF-A BL2) |
Cortex-A35 nonsecure (U-Boot) | |||
Security | RNG | RNG | ✓ | ☑ | ⬚ |
3.1.5. On STM32MP25 unknown microprocessor device
Click on to expand or collapse the legend...
Domain | Peripheral | Boot time allocation | Comment ![]() | |||
---|---|---|---|---|---|---|
Instance | Cortex-A35 secure (ROM code) |
Cortex-A35 secure (TF-A BL2) |
Cortex-A35 nonsecure (U-Boot) | |||
Security | RNG | RNG | ✓ | ☑ | ⬚ |
3.2. Runtime assignment
If the Arm® Cortex®-A processor hardware RNG peripheral is assigned to OP-TEE, then the Linux kernel can request random numbers through the hardware random framework, which is interfaced with the OP-TEE RNG Linux driver .
If the Arm® Cortex®-A processor hardware RNG peripheral is assigned to the Linux kernel, then the Linux kernel can access it through the hardware random framework, which is interfaced with the Linux RNG driver .
3.2.1. On STM32MP13x lines 
Click on to expand or collapse the legend...
Domain | Peripheral | Runtime allocation | Comment ![]() | ||
---|---|---|---|---|---|
Instance | Cortex-A7 secure (OP-TEE) |
Cortex-A7 non-secure (Linux) | |||
Security | RNG | RNG | ☐ | ☐ | Assignment (single choice) |
3.2.2. On STM32MP15x lines 
Click on to expand or collapse the legend...
Domain | Peripheral | Runtime allocation | Comment ![]() | |||
---|---|---|---|---|---|---|
Instance | Cortex-A7 secure (OP-TEE) |
Cortex-A7 non-secure (Linux) |
Cortex-M4 (STM32Cube) | |||
Security | RNG | RNG1 | ☐ | ☐ | Assignment (single choice) | |
RNG2 | ☐ |
3.2.3. On STM32MP21 unknown microprocessor device
Click on to expand or collapse the legend...
Domain | Peripheral | Runtime allocation | Comment ![]() | ||||
---|---|---|---|---|---|---|---|
Instance | Cortex-A35 secure (OP-TEE / TF-A BL31) |
Cortex-A35 nonsecure (Linux) |
Cortex-M33 secure (TF-M) |
Cortex-M33 nonsecure (STM32Cube) | |||
Security | RNG | RNG1 | ☑OP-TEE | ⬚ | ☐ | ⬚ | |
RNG2 | ☐OP-TEE | ⬚ | ☐ | ⬚ |
3.2.4. On STM32MP23 unknown microprocessor device
Click on to expand or collapse the legend...
Domain | Peripheral | Runtime allocation | Comment ![]() | ||||
---|---|---|---|---|---|---|---|
Instance | Cortex-A35 secure (OP-TEE / TF-A BL31) |
Cortex-A35 nonsecure (Linux) |
Cortex-M33 secure (TF-M) |
Cortex-M33 nonsecure (STM32Cube) | |||
Security | RNG | RNG | ☑OP-TEE | ⬚ | ☐ | ⬚ |
3.2.5. On STM32MP25 unknown microprocessor device
Click on to expand or collapse the legend...
Domain | Peripheral | Runtime allocation | Comment ![]() | |||||
---|---|---|---|---|---|---|---|---|
Instance | Cortex-A35 secure (OP-TEE / TF-A BL31) |
Cortex-A35 nonsecure (Linux) |
Cortex-M33 secure (TF-M) |
Cortex-M33 nonsecure (STM32Cube) |
Cortex-M0+ (STM32Cube) | |||
Security | RNG | RNG | ☑OP-TEE | ⬚ | ☐ | ⬚ |
4. Software frameworks and drivers
Below are listed the software frameworks and drivers managing the RNG peripheral for the embedded software components listed in the above tables.
- Linux®: hardware random framework, Linux RNG driver , and OP-TEE RNG Linux driver when random number generation is managed by OP-TEE (default behavior)
- U-Boot: U-Boot RNG driver and OP-TEE RNG U-Boot driver
- OP-TEE: OP-TEE RNG driver and RNG PTA
- STM32Cube: RNG HAL driver and header file of RNG HAL module
5. How to assign and configure the peripheral
The peripheral assignment can be done via the STM32CubeMX graphical tool (and manually completed if needed).
This tool also helps to configure the peripheral:
- Partial device trees (pin control and clock tree) generation for the OpenSTLinux software components.
- HAL initialization code generation for the STM32CubeMPU Package.
The configuration is applied by the firmware running in the context in which the peripheral is assigned.
This configuration is done in OP-TEE through the device tree.
For more information, refer to the wiki article RNG device tree configuration.
6. References