Closed embetrix closed 1 year ago
It looks like someone @johndoe31415 is experimenting similar issues in https://github.com/OP-TEE/optee_os/issues/5915
with disabling debug and unwind options I get better performance:
CFG_TEE_CORE_DEBUG=n CFG_UNWIND=n
next step is to allocate M4 memory (which my application doesn't require) to OP-TEE:
@embetrix I was looking to enable the PKCS11 TA, could you tell me or guide me to an article for the steps to enable the PKCS11 TA?
Hello, I use Optee on a stm32mp157f-dk2 board, version is the 3.16.0-stm32mp and the corresponding BSP :
u-boot v2021.10-stm32mp
Linux v5.15-stm32mp
All my changes are commited and built using a yocto meta-layer : https://github.com/embetrix/meta-stm32mp15x
the Optee build config is described here : https://github.com/embetrix/meta-stm32mp15x/blob/kirkstone/recipes-security/optee/optee-os-stm32mp_3.16.0.bb#L33
I enabled the PKCS11 TA which is by the way not by default enabled and gave it a try:
EC Prime256 Keypair generation:
RSA 2048 Keypair generation:
It take way too long for any real world application :-( and strange by the way that ECC prime256 operation take longer than RSA 2048 !
For the sake of comparison I tried with the official Optee build using the https://github.com/OP-TEE/manifest/blob/master/stm32mp1.xml manifest
I got much better times !
EC Prime256 Keypair generation:
RSA 2048 Keypair generation:
I'm stuck with the ST BSP (u-boot, Kernel) at the moment and using new optee 3.20 with that I cannot even bootup the board.
ST latest Optee release is still the 3.16.0-stm32mp, so my question if they are ways to tweak optee and remove bottlenecks to obtain better PKCS11 performance ?