123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347 |
- // SPDX-License-Identifier: GPL-2.0+
- /*
- * Copyright 2018-2019 NXP
- */
- #include <common.h>
- #include <command.h>
- #include <errno.h>
- #include <asm/io.h>
- #include <asm/arch/sci/sci.h>
- #include <asm/mach-imx/sys_proto.h>
- #include <asm/arch-imx/cpu.h>
- #include <asm/arch/sys_proto.h>
- #include <asm/arch/image.h>
- #include <console.h>
- DECLARE_GLOBAL_DATA_PTR;
- #define SEC_SECURE_RAM_BASE (0x31800000UL)
- #define SEC_SECURE_RAM_END_BASE (SEC_SECURE_RAM_BASE + 0xFFFFUL)
- #define SECO_LOCAL_SEC_SEC_SECURE_RAM_BASE (0x60000000UL)
- #define SECO_PT 2U
- static inline bool check_in_dram(ulong addr)
- {
- int i;
- bd_t *bd = gd->bd;
- for (i = 0; i < CONFIG_NR_DRAM_BANKS; ++i) {
- if (bd->bi_dram[i].size) {
- if (addr >= bd->bi_dram[i].start &&
- addr < (bd->bi_dram[i].start + bd->bi_dram[i].size))
- return true;
- }
- }
- return false;
- }
- int authenticate_os_container(ulong addr)
- {
- struct container_hdr *phdr;
- int i, ret = 0;
- int err;
- sc_rm_mr_t mr;
- sc_faddr_t start, end;
- u16 length;
- struct boot_img_t *img;
- unsigned long s, e;
- if (addr % 4) {
- puts("Error: Image's address is not 4 byte aligned\n");
- return -EINVAL;
- }
- if (!check_in_dram(addr)) {
- puts("Error: Image's address is invalid\n");
- return -EINVAL;
- }
- phdr = (struct container_hdr *)addr;
- if (phdr->tag != 0x87 && phdr->version != 0x0) {
- printf("Error: Wrong container header\n");
- return -EFAULT;
- }
- if (!phdr->num_images) {
- printf("Error: Wrong container, no image found\n");
- return -EFAULT;
- }
- length = phdr->length_lsb + (phdr->length_msb << 8);
- debug("container length %u\n", length);
- memcpy((void *)SEC_SECURE_RAM_BASE, (const void *)addr,
- ALIGN(length, CONFIG_SYS_CACHELINE_SIZE));
- err = sc_seco_authenticate(-1, SC_SECO_AUTH_CONTAINER,
- SECO_LOCAL_SEC_SEC_SECURE_RAM_BASE);
- if (err) {
- printf("Authenticate container hdr failed, return %d\n",
- err);
- ret = -EIO;
- goto exit;
- }
- /* Copy images to dest address */
- for (i = 0; i < phdr->num_images; i++) {
- img = (struct boot_img_t *)(addr +
- sizeof(struct container_hdr) +
- i * sizeof(struct boot_img_t));
- debug("img %d, dst 0x%x, src 0x%x, size 0x%x\n",
- i, (uint32_t) img->dst, img->offset + addr, img->size);
- memcpy((void *)img->dst, (const void *)(img->offset + addr),
- img->size);
- s = img->dst & ~(CONFIG_SYS_CACHELINE_SIZE - 1);
- e = ALIGN(img->dst + img->size, CONFIG_SYS_CACHELINE_SIZE) - 1;
- flush_dcache_range(s, e);
- /* Find the memreg and set permission for seco pt */
- err = sc_rm_find_memreg(-1, &mr, s, e);
- if (err) {
- printf("Error: can't find memreg for image load address 0x%x, error %d\n", img->dst, err);
- ret = -ENOMEM;
- goto exit;
- }
- err = sc_rm_get_memreg_info(-1, mr, &start, &end);
- if (!err)
- debug("memreg %u 0x%llx -- 0x%llx\n", mr, start, end);
- err = sc_rm_set_memreg_permissions(-1, mr, SECO_PT,
- SC_RM_PERM_FULL);
- if (err) {
- printf("Set permission failed for img %d, error %d\n",
- i, err);
- ret = -EPERM;
- goto exit;
- }
- err = sc_seco_authenticate(-1, SC_SECO_VERIFY_IMAGE,
- (1 << i));
- if (err) {
- printf("Authenticate img %d failed, return %d\n",
- i, err);
- ret = -EIO;
- }
- err = sc_rm_set_memreg_permissions(-1, mr, SECO_PT,
- SC_RM_PERM_NONE);
- if (err) {
- printf("Remove permission failed for img %d, err %d\n",
- i, err);
- ret = -EPERM;
- }
- if (ret)
- goto exit;
- }
- exit:
- if (sc_seco_authenticate(-1, SC_SECO_REL_CONTAINER, 0) != SC_ERR_NONE)
- printf("Error: release container failed!\n");
- return ret;
- }
- static int do_authenticate(struct cmd_tbl *cmdtp, int flag, int argc,
- char *const argv[])
- {
- ulong addr;
- if (argc < 2)
- return CMD_RET_USAGE;
- addr = simple_strtoul(argv[1], NULL, 16);
- printf("Authenticate OS container at 0x%lx\n", addr);
- if (authenticate_os_container(addr))
- return CMD_RET_FAILURE;
- return CMD_RET_SUCCESS;
- }
- static void display_life_cycle(u16 lc)
- {
- printf("Lifecycle: 0x%04X, ", lc);
- switch (lc) {
- case 0x1:
- printf("Pristine\n\n");
- break;
- case 0x2:
- printf("Fab\n\n");
- break;
- case 0x8:
- printf("Open\n\n");
- break;
- case 0x20:
- printf("NXP closed\n\n");
- break;
- case 0x80:
- printf("OEM closed\n\n");
- break;
- case 0x100:
- printf("Partial field return\n\n");
- break;
- case 0x200:
- printf("Full field return\n\n");
- break;
- case 0x400:
- printf("No return\n\n");
- break;
- default:
- printf("Unknown\n\n");
- break;
- }
- }
- #define AHAB_AUTH_CONTAINER_REQ 0x87
- #define AHAB_VERIFY_IMAGE_REQ 0x88
- #define AHAB_NO_AUTHENTICATION_IND 0xee
- #define AHAB_BAD_KEY_HASH_IND 0xfa
- #define AHAB_INVALID_KEY_IND 0xf9
- #define AHAB_BAD_SIGNATURE_IND 0xf0
- #define AHAB_BAD_HASH_IND 0xf1
- static void display_ahab_auth_event(u32 event)
- {
- u8 cmd = (event >> 16) & 0xff;
- u8 resp_ind = (event >> 8) & 0xff;
- switch (cmd) {
- case AHAB_AUTH_CONTAINER_REQ:
- printf("\tCMD = AHAB_AUTH_CONTAINER_REQ (0x%02X)\n", cmd);
- printf("\tIND = ");
- break;
- case AHAB_VERIFY_IMAGE_REQ:
- printf("\tCMD = AHAB_VERIFY_IMAGE_REQ (0x%02X)\n", cmd);
- printf("\tIND = ");
- break;
- default:
- return;
- }
- switch (resp_ind) {
- case AHAB_NO_AUTHENTICATION_IND:
- printf("AHAB_NO_AUTHENTICATION_IND (0x%02X)\n\n", resp_ind);
- break;
- case AHAB_BAD_KEY_HASH_IND:
- printf("AHAB_BAD_KEY_HASH_IND (0x%02X)\n\n", resp_ind);
- break;
- case AHAB_INVALID_KEY_IND:
- printf("AHAB_INVALID_KEY_IND (0x%02X)\n\n", resp_ind);
- break;
- case AHAB_BAD_SIGNATURE_IND:
- printf("AHAB_BAD_SIGNATURE_IND (0x%02X)\n\n", resp_ind);
- break;
- case AHAB_BAD_HASH_IND:
- printf("AHAB_BAD_HASH_IND (0x%02X)\n\n", resp_ind);
- break;
- default:
- printf("Unknown Indicator (0x%02X)\n\n", resp_ind);
- break;
- }
- }
- static int do_ahab_status(struct cmd_tbl *cmdtp, int flag, int argc,
- char *const argv[])
- {
- int err;
- u8 idx = 0U;
- u32 event;
- u16 lc;
- err = sc_seco_chip_info(-1, &lc, NULL, NULL, NULL);
- if (err != SC_ERR_NONE) {
- printf("Error in get lifecycle\n");
- return -EIO;
- }
- display_life_cycle(lc);
- err = sc_seco_get_event(-1, idx, &event);
- while (err == SC_ERR_NONE) {
- printf("SECO Event[%u] = 0x%08X\n", idx, event);
- display_ahab_auth_event(event);
- idx++;
- err = sc_seco_get_event(-1, idx, &event);
- }
- if (idx == 0)
- printf("No SECO Events Found!\n\n");
- return 0;
- }
- static int confirm_close(void)
- {
- puts("Warning: Please ensure your sample is in NXP closed state, "
- "OEM SRK hash has been fused, \n"
- " and you are able to boot a signed image successfully "
- "without any SECO events reported.\n"
- " If not, your sample will be unrecoverable.\n"
- "\nReally perform this operation? <y/N>\n");
- if (confirm_yesno())
- return 1;
- puts("Ahab close aborted\n");
- return 0;
- }
- static int do_ahab_close(struct cmd_tbl *cmdtp, int flag, int argc,
- char *const argv[])
- {
- int err;
- u16 lc;
- if (!confirm_close())
- return -EACCES;
- err = sc_seco_chip_info(-1, &lc, NULL, NULL, NULL);
- if (err != SC_ERR_NONE) {
- printf("Error in get lifecycle\n");
- return -EIO;
- }
- if (lc != 0x20) {
- puts("Current lifecycle is NOT NXP closed, can't move to OEM closed\n");
- display_life_cycle(lc);
- return -EPERM;
- }
- err = sc_seco_forward_lifecycle(-1, 16);
- if (err != SC_ERR_NONE) {
- printf("Error in forward lifecycle to OEM closed\n");
- return -EIO;
- }
- printf("Change to OEM closed successfully\n");
- return 0;
- }
- U_BOOT_CMD(auth_cntr, CONFIG_SYS_MAXARGS, 1, do_authenticate,
- "autenticate OS container via AHAB",
- "addr\n"
- "addr - OS container hex address\n"
- );
- U_BOOT_CMD(ahab_status, CONFIG_SYS_MAXARGS, 1, do_ahab_status,
- "display AHAB lifecycle and events from seco",
- ""
- );
- U_BOOT_CMD(ahab_close, CONFIG_SYS_MAXARGS, 1, do_ahab_close,
- "Change AHAB lifecycle to OEM closed",
- ""
- );
|