Hi All,

We are pleased to announce the formal release of Trusted Firmware-A version 2.11 bundle of project deliverables.

This includes Trusted Firmware-A, Trusted Firmware-A Tests, Hafnium, RMM and TF-A OpenCI Scripts/Jobs 2.11 releases involving the tagging of multiple repositories.

These went live on May, 23^rd 2024.

Please find references to tags and change logs at the end of this email.

Many thanks to the community for the active engagement in delivering this release!

Notable features of the release version 2.11 are as follows:

TF-A/EL3 Root World

SMCCCv1.5 : Implemented vendor specific EL3 monitor calls along with DebugFS and PMF migrated to this range.
Support for Undefined injection into lower ELs to prevent spurious EL3 traps.
Add support for FEAT_CSV2_3, remove usage of FEAT_MTE from TF-A and use FEAT_MTE2 instead.
EL3 SPMC: added S-EL0 partition support, and FFA_CONSOLE_LOG, FFA_MEM_PERM_GET/SET ABIs.
SPMD: bumped to FF-A v1.2 (added FFA_MSG_SEND_DIR_REQ2/RESP2 ABIs), SMCCCv1.3 SVE hint bit passed to SPMC, permit enabling SME in normal world, moved NS EL1 context save/restore to S-EL2 SPMC when present, support for RAS FFH scenarios.
Enhance Firmware handoff library and provide BL1->BL2->BL31 interface to use transfer list.
Add MHUv3 doorbell driver support.
Support for saving/restoring DSU PMU registers.
Refactoring and documentation on Context mgmt. library along with utility tool to report the memory usage.

TF-A Boot BL1/BL2

Migration to mbedTLS v3.6.0.
DPE implementation.
Update DRTM implementation as per latest v1.0 specification.
Migrate to FWU metadata version 2.
PSA FWU test enhancements.
CCA CoT device tree support.
GUID partition table enhancements.
Various threat model updates for PSA Firmware update, side-channel attacks and supply chain.

Hafnium/SPM/S-EL2

FF-A v1.2: direct messaging supports the extended set of registers and UUID use; memory sharing descriptors update; setup and discovery interfaces updated; multiple UUID per SP support.
FF-A memory lend/donate, in RME-enabled platforms, leverage dynamic changes to PAS to enforce the semantics of lend/donate.
SPMC to recover from a GPF when attempting to access a non-secure RX/TX buffer pair.
Initial support for FF-A memory lend of device memory.
SMMUv3 support: improved to enforce static DMA isolation.
SME/SVE context save and restore for the NS-EL1 state, on entry from and exit back to the NWd.
New platform port for RD Fremont.

TF-RMM/R-EL2

Enabled FEAT_DIT for RMM execution.
Added support for FEAT_LPA2 to S2TT component which enables creating Realms with LPA2 support.
Introduced the dynamic console framework for RMM and allows passing console info dynamically from EL3.
Introduced the ``arm`` platform layer which can be used by any compatible SoC and possibly enable a single binary across them.
Improvements to Exception handling in RMM by having separated exception stack , added crash dump and backtrace support.
Reduced the memory required for `struct granule` thus reducing memory footprint of RMM by 12MB for FVP.
Various bug fixes and performance optimizations.
MISRA C 2012 fixes and integration with Cppcheck tool.
Extended CBMC analysis to more RMI commands.
Added support for RD-Fremont platform.

Errata (CPU/GIC)

28 new CPU Errata implemented. (1xCortex-X2, 6xCortex-X3, 3xCortex-X4, 1xNeoverse V1, 3xNeoverse V2, 2xCortex-A78C, 1xCortex-A710, 7xCortex-A715, 2xCortex-A720, 2xCortex-A520).
Fixed 3 errata implementation defects (2xCortex-A715). The third was to fix applying an erratum wrongly to Cortex-A715 instead of Cortex-X3.
Updated version for an erratum on the latest SDEN update for Cortex-X3.
Implemented 1x GIC600 erratum.

TF-A Tests