rk3588: bl32: update version to v1.20

Build from OPTEE commit in develop-next branch:
    1e844e4ca rk3588: otp: oem otp key2 not support 32 bytes
Update features:
    1e844e4ca rk3588: otp: oem otp key2 not support 32 bytes
    ec6f4ffed plat-rockchip: separate fw encrypt key and oem otp key
    8285a003e pta: crypto_service: add firmware key cipher function
    33112b291 pta: add func for check the caller is from uboot
    e75002648 UPSTREAM: ta: pkcs11: Improve PIN counter handling robustness
    fe8dffd27 BACKPORT: core: add fault mitigations in ree_fs_ta_open()
    061121adb UPSTREAM: core: add fault mitigations in buf_ta_open()
    8b443a5d1 BACKPORT: core: add fault mitigations to shdr_verify_signature*()
    674df162e BACKPORT: drivers: crypto: add stubbed fault mitigation in crypto_acipher_rsassa_verify()
    0573e7cdb BACKPORT: core: ltc: add fault mitigation in crypto_acipher_rsassa_verify()
    9d1fe00c9 UPSTREAM: core: libmbedtls: add fault mitigation in crypto_acipher_rsassa_verify()
    4d84ea7a3 BACKPORT: libmbedtls: add fault mitigation in mbedtls_rsa_rsassa_pkcs1_v15_verify()
    662c67bc3 UPSTREAM: libmbedtls: add fault mitigation in mbedtls_rsa_rsassa_pss_verify_ext()
    c2d4c4fcd UPSTREAM: core: add fault mitigation tests
    eca7673b7 UPSTREAM: Basic fault mitigation routines
    b3b4962c8 UPSTREAM: core: verify size of allocated shared memory
    adc2c2e97 UPSTREAM: core: pta/bcm/elog: add missing buffer size check
    aae29e6aa drivers: crypto: keytable: hmac: add algo valid check
    b0eaacb57 pta: crypto_service: fix compile error when CFG_RK_KEYLAD not defined
    f19dc939d pta: crypto_service: add OEM OTP KEY hmac support for user ta
    1b75e8b9e drivers: crypto: keytable: hmac: support MD5/SHA1/SHA256/SHA512/SM3
    7b56594b8 Fix typos in Rockchip copyright notices
    f0fdffa4f kernel: print version information earlier
    29b1dbc92 core: optimize memory info log to avoid misunderstand

Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>
Change-Id: I504f9350cd2b66769fc9bf13caa0d7710a4fc0f6

RKTRUST/RK3588TRUST.ini

@@ -9,7 +9,7 @@ PATH=bin/rk35/rk3588_bl31_v1.51.elf
 ADDR=0x00040000
 [BL32_OPTION]
 SEC=1
-PATH=bin/rk35/rk3588_bl32_v1.19.bin
+PATH=bin/rk35/rk3588_bl32_v1.20.bin
 ADDR=0x08400000
 [BL33_OPTION]
 SEC=0

doc/release/RK3588_CN.md

@@ -1,5 +1,24 @@
 # RK3588 Release Note
 
+## rk3588_bl32_v1.20.bin
+
+| 时间       | 文件                  | 编译 commit | 重要程度 |
+| ---------- | :-------------------- | ----------- | -------- |
+| 2025-05-09 | rk3588_bl32_v1.20.bin | 1e844e4ca   | 重要     |
+
+### New
+
+1. 支持从OEM OTP KEY派生HMAC密钥。
+
+### Fixed
+
+| Index | 重要程度 | 更新说明                    | 问题现象             | 问题来源 |
+| ----- | -------- | --------------------------- | -------------------- | -------- |
+| 1     | 重要     | 合入官方安全补丁            | 解决潜在的安全风险   | -        |
+| 2     | 重要     | 修正oem otp key2 支持的长度 | 烧写oem otp key2失败 | -        |
+
+------
+
 ## rk3588_ddr_lp4_1848MHz_lp5_2112MHz_v1.19.bin
 
 | 时间       | 文件                                         | 编译 commit | 重要程度 |

doc/release/RK3588_EN.md

@@ -1,5 +1,24 @@
 # RK3588 Release Note
 
+## rk3588_bl32_v1.20.bin
+
+| Date       | File                  | Build commit | Severity  |
+| ---------- | :-------------------- | ------------ | --------- |
+| 2025-05-09 | rk3588_bl32_v1.20.bin | 1e844e4ca    | important |
+
+### New
+
+1. Add OEM OTP KEY hmac support for user ta.
+
+### Fixed
+
+| Index | Severity  | Update                                   | Issue description                | Issue source |
+| ----- | --------- | ---------------------------------------- | -------------------------------- | ------------ |
+| 1     | important | Merge official security patches          | Address potential security risks | -            |
+| 2     | important | Fix the length supported by OEM otp key2 | Failed to burn OEM otp key2      | -            |
+
+------
+
 ## rk3588_ddr_lp4_1848MHz_lp5_2112MHz_v1.19.bin
 
 | Date       | File                                         | Build commit | Severity  |