arm/optee: update to 4.11.0

Update the recipes and the git recipes to 4.11.0.  Since corstone1000
is still using 4.10.0, move that to meta-arm-bsp.

Highlights:
- optee-os: mbedTLS 3.6.6, RISC-V FP context switching and device tree
  based boot, RPMB on UFS and optional RPMB-backed TA version
  databases, new NVIDIA Tegra, Renesas R-Car Gen5, Raspberry Pi 4,
  i.MX952 and Qualcomm platforms, SM2 ciphertext now C1 || C3 || C2 by
  default, and hardening across ldelf, SPMC, secure storage and key
  import.
- optee-client: new libasteec (Application Secrets) library, HKDF
  support and serialization fixes in libckteec.
- optee-test: new regression tests (PBKDF2, ECDH with invalid points,
  discarded AE output, nil UUID TA, RISC-V FP) and SM2 test vector
  selection matching optee-os.
- optee-examples: file input and key/IV options for the aes and sha
  examples, and an HMAC fix.

Signed-off-by: Ricardo Salveti <ricardo.salveti@oss.qualcomm.com>
Signed-off-by: Jon Mason <jon.mason@arm.com>

meta-arm/recipes-security/optee/optee-client_4.11.0.bb

@@ -0,0 +1,4 @@
+require recipes-security/optee/optee-client.inc
+
+# v4.11.0
+SRCREV = "da81fb7b30781029bc9d4acfddc7c60b08deb1f3"

meta-arm/recipes-security/optee/optee-client_git.bb

@@ -1,7 +1,7 @@
 require recipes-security/optee/optee-client.inc
 
-# v4.10.0
-SRCREV = "9f5e90918093c1d1cd264d8149081b64ab7ba672"
+# v4.11.0
+SRCREV = "da81fb7b30781029bc9d4acfddc7c60b08deb1f3"
 PV .= "+git"
 UPSTREAM_CHECK_COMMITS = "1"
 

meta-arm/recipes-security/optee/optee-examples_4.11.0.bb

@@ -0,0 +1,4 @@
+require recipes-security/optee/optee-examples.inc
+
+# v4.11.0
+SRCREV = "71e8f3f320eef46a9369700bf30b91d67427d535"

meta-arm/recipes-security/optee/optee-examples_git.bb

@@ -1,7 +1,7 @@
 require recipes-security/optee/optee-examples.inc
 
-# v4.10.0
-SRCREV = "934c7edb74a26e90f68024cf441073528444177f"
+# v4.11.0
+SRCREV = "71e8f3f320eef46a9369700bf30b91d67427d535"
 PV .= "+git"
 UPSTREAM_CHECK_COMMITS = "1"
 

meta-arm/recipes-security/optee/optee-os-tadevkit_4.11.0.bb

@@ -0,0 +1,30 @@
+require recipes-security/optee/optee-os_${PV}.bb
+
+SUMMARY = "OP-TEE Trusted OS TA devkit"
+DESCRIPTION = "OP-TEE TA devkit for build TAs"
+HOMEPAGE = "https://www.op-tee.org/"
+
+DEPENDS += "python3-pycryptodome-native"
+DEPENDS:append:toolchain-clang = " lld-native"
+
+do_install() {
+    #install TA devkit
+    install -d ${D}${includedir}/optee/export-user_ta/
+    for f in ${B}/export-ta_${OPTEE_ARCH}/* ; do
+        cp -aR $f ${D}${includedir}/optee/export-user_ta/
+    done
+}
+
+do_deploy() {
+	echo "Do not inherit do_deploy from optee-os."
+}
+
+FILES:${PN} = "${includedir}/optee/"
+
+# Build paths are currently embedded
+INSANE_SKIP:${PN}-dev += "buildpaths"
+
+# Include extra headers needed by SPMC tests to TA DEVKIT.
+# Supported after op-tee v3.20
+EXTRA_OEMAKE:append = "${@bb.utils.contains('MACHINE_FEATURES', 'optee-spmc-test', \
+                                        ' CFG_SPMC_TESTS=y', '' , d)}"

meta-arm/recipes-security/optee/optee-os_4.11.0.bb

@@ -0,0 +1,6 @@
+require recipes-security/optee/optee-os.inc
+
+DEPENDS += "dtc-native"
+
+# v4.11.0
+SRCREV = "f54190f22611dd5ad5d22546fd4209aa100f56bd"

meta-arm/recipes-security/optee/optee-os_git.bb

@@ -2,8 +2,8 @@ require recipes-security/optee/optee-os.inc
 
 DEPENDS += "dtc-native"
 
-# v4.10.0
-SRCREV = "753afbbee1682f5d16fd30e87b31058a4fd4f4b8"
+# v4.11.0
+SRCREV = "f54190f22611dd5ad5d22546fd4209aa100f56bd"
 PV .= "+git"
 UPSTREAM_CHECK_COMMITS = "1"
 

meta-arm/recipes-security/optee/optee-test_4.11.0.bb

@@ -0,0 +1,17 @@
+require recipes-security/optee/optee-test.inc
+
+# v4.11.0
+SRCREV = "179740b43809069ee567d58ebd8e0f85ef8168e2"
+
+LIC_FILES_CHKSUM = "file://LICENSE.md;md5=a8fa504109e4cd7ea575bc49ea4be560 \
+                    file://LICENSE-BSD;md5=dca16d6efa93b55d0fd662ae5cd6feeb \
+                    file://LICENSE-GPL;md5=10e86b5d2a6cb0e2b9dcfdd26a9ac58d \
+                   "
+
+# Include ffa_spmc test group if the SPMC test is enabled.
+# Supported after op-tee v3.20
+EXTRA_OEMAKE:append = "${@bb.utils.contains('MACHINE_FEATURES', 'optee-spmc-test', \
+                                        ' CFG_SPMC_TESTS=y CFG_SECURE_PARTITION=y', '' , d)}"
+
+RDEPENDS:${PN} += "${@bb.utils.contains('MACHINE_FEATURES', 'optee-spmc-test', \
+                                              ' arm-ffa-user', '' , d)}"

meta-arm/recipes-security/optee/optee-test_git.bb

@@ -1,7 +1,7 @@
 require recipes-security/optee/optee-test.inc
 
-# v4.10.0
-SRCREV = "88c93e87a5c172363ee986ded036a25cafcc9d2c"
+# v4.11.0
+SRCREV = "179740b43809069ee567d58ebd8e0f85ef8168e2"
 PV .= "+git"
 UPSTREAM_CHECK_COMMITS = "1"