1*************
2Version 1.7.0
3*************
4
5New major features
6==================
7
8 - Unified API to PSA Service access implementing PSA FF-M [1]_ and FF-M v1.1 extension [2]_
9 - Improve and simplify TF-M :doc:`configurability </configuration/index>`
10
11  - Introduce the base configuration for TF-M essential
12  - Shift config options from CMake to C header files for PSA modules and platforms
13  - Employ Kconfig as a configuration tool and dependency tracker
14  - Configurable stack size for Secure Partitions
15
16 - Add :doc:`TF-M Medium-ARoT-less profile </configuration/profiles/tfm_profile_medium_arot-less>` [3]_
17 - MM-IOVEC deployed in PSA Secure Partitions
18 - PSA FWU API updated to v1.0
19 - Mbed TLS updated to v3.2.1
20 - Code size further optimised. Please check `Reference footprint`_ section for details
21 - The manifest tool is decoupled with the build system
22 - Improvements in the `Code size analysis tool <https://git.trustedfirmware.org/TF-M/tf-m-tools.git/tree/code-size-analyze-tool>`_
23 - Updated documentation
24
25New platforms supported
26=======================
27
28 - :doc:`/platform/arm/rss/readme`
29 - Platform `arm/mps3/Polaris` renamed to :doc:`Corstone-310 </platform/arm/mps3/corstone310/README>`
30
31Deprecated platforms and features
32=================================
33
34  - TF-M Library model. Replaced by fully featured SFN model
35
36Tested platforms
37================
38
39The following platforms are successfully tested in this release.
40
41 - AN519
42 - AN521
43 - AN547
44 - B-U585I-IOT02A
45 - Corstone-1000
46 - Corstone-310
47 - LPCXpresso55S69 [#lim]_
48 - Musca-B1
49 - Musca-S1
50 - nrf9160
51 - nrf5340
52 - NUCLEO-L552ZE-Q
53 - PSoC 64 [#lim]_
54 - RSS
55 - STM32L562E-DK
56
57.. [#lim] Please check the `Known issues`_ section for details.
58
59Reference footprint
60===================
61
62All measurements below are made for *an521* platform, built `TF-Mv1.7.0-RC3
63<https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tag/?h=TF-Mv1.7.0-RC3>`_
64on Windows 10 using Armclang v6.18 and build type MinSizeRel.
65Profile `Medium-ARoT-less` built with disabled Firmware Update service.
66
67+----------------------+-------------+-------------+-------------+-------------+-------------+
68| Module               |      Base   |     Small   |  ARoT-less  |   Medium    |   Large     |
69|                      +------+------+------+------+------+------+------+------+------+------+
70|                      | Flash|  RAM | Flash|  RAM | Flash|  RAM | Flash|  RAM | Flash| RAM  |
71+======================+======+======+======+======+======+======+======+======+======+======+
72|Generated (stack, stc)|   80 | 3184 |  128 | 3184 |  128 | 3184 |  176 | 3184 |  224 | 3184 |
73+----------------------+------+------+------+------+------+------+------+------+------+------+
74|Objects               |  896 | 1064 | 1180 | 5460 | 1269 | 6152 | 1391 | 1540 | 1463 | 1540 |
75+----------------------+------+------+------+------+------+------+------+------+------+------+
76|c_w.l                 |  190 |    0 |  568 |    0 |  808 |    0 | 808  |    0 |  808 |    0 |
77+----------------------+------+------+------+------+------+------+------+------+------+------+
78|platform (Secure)     | 5046 |  284 | 5490 |  284 | 5842 |  284 | 6212 |  288 | 6234 |  288 |
79+----------------------+------+------+------+------+------+------+------+------+------+------+
80|SPM                   | 3718 | 1333 | 4622 | 625  | 4094 | 1333 | 5672 | 1353 | 5832 | 1358 |
81+----------------------+------+------+------+------+------+------+------+------+------+------+
82|sprt                  |  254 |    0 | 1432 |    0 | 1270 |    0 | 2004 | 4    | 2004 |    4 |
83+----------------------+------+------+------+------+------+------+------+------+------+------+
84|QCBOR                 |      |      |  858 |    0 |  858 |    0 |  858 |    0 |  858 |    0 |
85+----------------------+------+------+------+------+------+------+------+------+------+------+
86|MbedCrypto            |      |      | 24606| 2292 | 45140| 2296 | 45140| 2296 |80827 | 2408 |
87+----------------------+------+------+------+------+------+------+------+------+------+------+
88|PROT_attestation      |      |      | 2751 | 557  | 2981 | 1218 | 2981 | 3010 | 2981 | 3010 |
89+----------------------+------+------+------+------+------+------+------+------+------+------+
90|PROT_crypto           |      |      | 3294 | 2692 | 3864 | 16648| 3864 | 23560| 3978 | 25608|
91+----------------------+------+------+------+------+------+------+------+------+------+------+
92|PROT_ITS              |      |      | 4942 |   76 | 5042 |  108 | 5244 | 1984 | 5252 | 2464 |
93+----------------------+------+------+------+------+------+------+------+------+------+------+
94|PROT_platform         |      |      |      |      |  480 |    0 | 522  | 1280 |  522 | 1280 |
95+----------------------+------+------+------+------+------+------+------+------+------+------+
96|AROT_PS               |      |      |      |      |      |      | 3340 | 6444 | 3340 | 6444 |
97+----------------------+------+------+------+------+------+------+------+------+------+------+
98|platform_crypto_keys  |      |      |  348 |    0 |  356 |    0 |  356 |    0 |  356 |    0 |
99+----------------------+------+------+------+------+------+------+------+------+------+------+
100|Total incl. padding   | 10220|  5892| 50324| 15216| 72272| 31264| 78696| 44984|114852| 47608|
101+----------------------+------+------+------+------+------+------+------+------+------+------+
102
103Known issues
104============
105
106Some open issues are not fixed in this release.
107
108.. list-table::
109  :header-rows: 1
110
111  * - Descriptions
112    - Issue links
113  * - PSoC 64 platform builds and works well with ArmClang v6.13 and later.
114    - Not tracked
115  * - LPCXpresso55S690 platform works well in profile small only.
116    - Not tracked
117  * - Latest CMake (3.25) has an issue with PSA Arch test
118    - https://github.com/ARM-software/psa-arch-tests/issues/335
119  * - PSA Arch framework test suite skip 2 test cases
120    - PSA Arch framework test failures [4]_
121
122
123Issues closed since v1.6.0
124==========================
125
126.. list-table::
127  :header-rows: 1
128
129  * - Descriptions
130    - Issue links
131  * - Psa Arch FF Test has no failures anymore but some tests are still skipped
132    - PSA Arch FF Test Result [5]_
133
134Reference
135=========
136
137.. [1] `Firmware Framework for M (FF-M) <https://www.arm.com/architecture/security-features/platform-security>`_
138.. [2] `Arm Firmware Framework for M 1.1 Extensions <https://developer.arm.com/documentation/aes0039/latest>`_
139.. [3] `SESIP Profile for PSA Certified ARoT-less Level 2 <https://www.psacertified.org/app/uploads/2022/10/JSADEN019-PSA_Certified_Level_2_PP_SESIP_ARoT-less_REL-01.pdf>`_
140.. [4] `PSA Arch framework test results <https://developer.trustedfirmware.org/w/tf_m/release/psa_arch_crypto_test_failure_analysis_in_tf-m_v1.7_release>`_
141.. [5] `PSA Arch FF Test Result <https://developer.trustedfirmware.org/w/tf_m/release/psa_arch_ff_test_result_in_tf-m_v1.7_release>`_
142
143--------------
144
145*Copyright (c) 2022, Arm Limited. All rights reserved.*
146