cmd_mfgprot.c 3.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150
  1. // SPDX-License-Identifier: GPL-2.0+
  2. /*
  3. * Copyright 2016 Freescale Semiconductor, Inc.
  4. * Copyright 2017 NXP
  5. *
  6. * These commands enable the use of the CAAM MPPubK-generation and MPSign
  7. * functions in supported i.MX devices.
  8. */
  9. #include <asm/byteorder.h>
  10. #include <asm/arch/clock.h>
  11. #include <linux/compiler.h>
  12. #include <command.h>
  13. #include <common.h>
  14. #include <environment.h>
  15. #include <fsl_sec.h>
  16. #include <mapmem.h>
  17. #include <memalign.h>
  18. DECLARE_GLOBAL_DATA_PTR;
  19. /**
  20. * do_mfgprot() - Handle the "mfgprot" command-line command
  21. * @cmdtp: Command data struct pointer
  22. * @flag: Command flag
  23. * @argc: Command-line argument count
  24. * @argv: Array of command-line arguments
  25. *
  26. * Returns zero on success, CMD_RET_USAGE in case of misuse and negative
  27. * on error.
  28. */
  29. static int do_mfgprot(cmd_tbl_t *cmdtp, int flag, int argc, char *const argv[])
  30. {
  31. u8 *m_ptr, *dgst_ptr, *c_ptr, *d_ptr, *dst_ptr;
  32. char *pubk, *sign, *sel;
  33. int m_size, i, ret;
  34. u32 m_addr;
  35. pubk = "pubk";
  36. sign = "sign";
  37. sel = argv[1];
  38. /* Enable HAB clock */
  39. hab_caam_clock_enable(1);
  40. u32 out_jr_size = sec_in32(CONFIG_SYS_FSL_JR0_ADDR +
  41. FSL_CAAM_ORSR_JRa_OFFSET);
  42. if (out_jr_size != FSL_CAAM_MAX_JR_SIZE)
  43. sec_init();
  44. if (strcmp(sel, pubk) == 0) {
  45. dst_ptr = malloc_cache_aligned(FSL_CAAM_MP_PUBK_BYTES);
  46. if (!dst_ptr)
  47. return -ENOMEM;
  48. ret = gen_mppubk(dst_ptr);
  49. if (ret) {
  50. free(dst_ptr);
  51. return ret;
  52. }
  53. /* Output results */
  54. puts("Public key:\n");
  55. for (i = 0; i < FSL_CAAM_MP_PUBK_BYTES; i++)
  56. printf("%02X", (dst_ptr)[i]);
  57. puts("\n");
  58. free(dst_ptr);
  59. } else if (strcmp(sel, sign) == 0) {
  60. if (argc != 4)
  61. return CMD_RET_USAGE;
  62. m_addr = hextoul(argv[2], NULL);
  63. m_size = dectoul(argv[3], NULL);
  64. m_ptr = map_physmem(m_addr, m_size, MAP_NOCACHE);
  65. if (!m_ptr)
  66. return -ENOMEM;
  67. dgst_ptr = malloc_cache_aligned(FSL_CAAM_MP_MES_DGST_BYTES);
  68. if (!dgst_ptr) {
  69. ret = -ENOMEM;
  70. goto free_m;
  71. }
  72. c_ptr = malloc_cache_aligned(FSL_CAAM_MP_PRVK_BYTES);
  73. if (!c_ptr) {
  74. ret = -ENOMEM;
  75. goto free_dgst;
  76. }
  77. d_ptr = malloc_cache_aligned(FSL_CAAM_MP_PRVK_BYTES);
  78. if (!d_ptr) {
  79. ret = -ENOMEM;
  80. goto free_c;
  81. }
  82. ret = sign_mppubk(m_ptr, m_size, dgst_ptr, c_ptr, d_ptr);
  83. if (ret)
  84. goto free_d;
  85. /* Output results */
  86. puts("Message: ");
  87. for (i = 0; i < m_size; i++)
  88. printf("%02X ", (m_ptr)[i]);
  89. puts("\n");
  90. puts("Message Representative Digest(SHA-256):\n");
  91. for (i = 0; i < FSL_CAAM_MP_MES_DGST_BYTES; i++)
  92. printf("%02X", (dgst_ptr)[i]);
  93. puts("\n");
  94. puts("Signature:\n");
  95. puts("C:\n");
  96. for (i = 0; i < FSL_CAAM_MP_PRVK_BYTES; i++)
  97. printf("%02X", (c_ptr)[i]);
  98. puts("\n");
  99. puts("d:\n");
  100. for (i = 0; i < FSL_CAAM_MP_PRVK_BYTES; i++)
  101. printf("%02X", (d_ptr)[i]);
  102. puts("\n");
  103. free_d:
  104. free(d_ptr);
  105. free_c:
  106. free(c_ptr);
  107. free_dgst:
  108. free(dgst_ptr);
  109. free_m:
  110. unmap_sysmem(m_ptr);
  111. } else {
  112. return CMD_RET_USAGE;
  113. }
  114. return ret;
  115. }
  116. /***************************************************/
  117. static char mfgprot_help_text[] =
  118. "Usage:\n"
  119. "Print the public key for Manufacturing Protection\n"
  120. "\tmfgprot pubk\n"
  121. "Generates a Manufacturing Protection signature\n"
  122. "\tmfgprot sign <data_addr> <size>";
  123. U_BOOT_CMD(
  124. mfgprot, 4, 1, do_mfgprot,
  125. "Manufacturing Protection\n",
  126. mfgprot_help_text
  127. );