rk3568: bl32: update version to v2.15

Build from OPTEE commit in develop-next branch:
    9f2aca7d1 pta: uboot_storedata_otp: reinit ssk when set security level2
Update features:
    9f2aca7d1 pta: uboot_storedata_otp: reinit ssk when set security level2
    d038af9d2 pta: uboot_storedata_otp: add check for rpmb key
    679d5bd8f core: tee: add func for check rpmb key is written
    144ae5ffd drivers: hal_crypto: added alignment judgment for input and output addresses
    9be174551 rockchip: uart: Add real uart hw init
    6b3714286 Revert "libcrypto: set RSA OAEP MGF1 MD function to SHA1"
    ce21cdd30 rk3568: add support for fw encrypt key
    0ccbe0828 plat-rockchip: otp: disable otp lock before otp boot
    6b9b39300 ta.mk: not copy lib/libcrypto/include to host_include
    0d91f9cbd drivers: rockchip: keylad: add keylad flow support
    4038bbe1d rk3568: correct GIC offset address
    0ca603d39 plat-rockchip: modify conditions for read secure boot flag
    fd6b94676 plat-rockchip: vendor_props: fix xtest regression_1006 fail

Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>
Change-Id: I4b1d83356e1c9c895c10f40c518e76e700bc21fd

RKTRUST/RK3566TRUST_ULTRA.ini

@@ -9,7 +9,7 @@ PATH=bin/rk35/rk3568_bl31_ultra_v2.17.elf
 ADDR=0x00040000
 [BL32_OPTION]
 SEC=1
-PATH=bin/rk35/rk3568_bl32_v2.14.bin
+PATH=bin/rk35/rk3568_bl32_v2.15.bin
 ADDR=0x08400000
 [BL33_OPTION]
 SEC=0

RKTRUST/RK3568TRUST.ini

@@ -9,7 +9,7 @@ PATH=bin/rk35/rk3568_bl31_v1.44.elf
 ADDR=0x00040000
 [BL32_OPTION]
 SEC=1
-PATH=bin/rk35/rk3568_bl32_v2.14.bin
+PATH=bin/rk35/rk3568_bl32_v2.15.bin
 ADDR=0x08400000
 [BL33_OPTION]
 SEC=0

RKTRUST/RK3568TRUST_CPU3.ini

@@ -9,7 +9,7 @@ PATH=bin/rk35/rk3568_bl31_cpu3_v1.01.elf
 ADDR=0x00040000
 [BL32_OPTION]
 SEC=1
-PATH=bin/rk35/rk3568_bl32_v2.14.bin
+PATH=bin/rk35/rk3568_bl32_v2.15.bin
 ADDR=0x08400000
 [BL33_OPTION]
 SEC=0

RKTRUST/RK3568TRUST_L3_PART_ECC.ini

@@ -9,7 +9,7 @@ PATH=bin/rk35/rk3568_bl31_l3_part_ecc_v1.00.elf
 ADDR=0x00040000
 [BL32_OPTION]
 SEC=1
-PATH=bin/rk35/rk3568_bl32_v2.14.bin
+PATH=bin/rk35/rk3568_bl32_v2.15.bin
 ADDR=0x08400000
 [BL33_OPTION]
 SEC=0

RKTRUST/RK3568TRUST_RT.ini

@@ -9,7 +9,7 @@ PATH=bin/rk35/rk3568_bl31_rt_v1.02.elf
 ADDR=0x00040000
 [BL32_OPTION]
 SEC=1
-PATH=bin/rk35/rk3568_bl32_v2.14.bin
+PATH=bin/rk35/rk3568_bl32_v2.15.bin
 ADDR=0x08400000
 [BL33_OPTION]
 SEC=0

doc/release/RK3568_CN.md

@@ -1,5 +1,24 @@
 # RK3568 Release Note
 
+## rk3568_bl32_v2.15.bin
+
+| 时间       | 文件                  | 编译 commit | 重要程度 |
+| ---------- | :-------------------- | ----------- | -------- |
+| 2024-10-31 | rk3568_bl32_v2.15.bin | 9f2aca7d1   | 重要     |
+
+### New
+
+1. 新增支持fw encrypt key的读写接口。
+
+### Fixed
+
+| Index | 重要程度 | 更新说明                        | 问题现象                                        | 问题来源 |
+| ----- | -------- | ------------------------------- | ----------------------------------------------- | -------- |
+| 1     | 重要     | 修正RSA OAEP MGF1算法           | TA在使用RSA算法OAEP MGF1填充方式会报错          | -        |
+| 2     | 重要     | 修正secure boot是否使能判断条件 | 在硬件不稳定情况下可能错误认为开启了secure boot | -        |
+
+------
+
 ## rk3568_ddr_{1560...1056}MHz_v1.23.bin
 
 | 时间       | 文件                                  | 编译 commit | 重要程度 |

doc/release/RK3568_EN.md

@@ -1,5 +1,24 @@
 # RK3568 Release Note
 
+## rk3568_bl32_v2.15.bin
+
+| Date       | File                  | Build commit | Severity  |
+| ---------- | :-------------------- | ------------ | --------- |
+| 2024-10-31 | rk3568_bl32_v2.15.bin | 9f2aca7d1    | important |
+
+### New
+
+1. Add support for fw encrypt key.
+
+### Fixed
+
+| Index | Severity  | Update                                            | Issue description                                            | Issue source |
+| ----- | --------- | ------------------------------------------------- | ------------------------------------------------------------ | ------------ |
+| 1     | important | fixed RSA OAEP MGF1 algorithm                     | TA will report an error when using RSA algorithm OAEP MGF1 padding method | -            |
+| 2     | important | fixed condition of whether secure boot is enabled | Under unstable hardware conditions, it may be mistakenly believed that secure boot is enabled | -            |
+
+------
+
 ## rk3568_ddr_{1560...1056}MHz_v1.23.bin
 
 | Date       | File                                  | Build commit | Severity  |