ahab.c 7.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351
  1. // SPDX-License-Identifier: GPL-2.0+
  2. /*
  3. * Copyright 2018-2019 NXP
  4. */
  5. #include <common.h>
  6. #include <command.h>
  7. #include <errno.h>
  8. #include <log.h>
  9. #include <asm/global_data.h>
  10. #include <asm/io.h>
  11. #include <asm/arch/sci/sci.h>
  12. #include <asm/mach-imx/sys_proto.h>
  13. #include <asm/arch-imx/cpu.h>
  14. #include <asm/arch/sys_proto.h>
  15. #include <asm/arch/image.h>
  16. #include <console.h>
  17. #include <cpu_func.h>
  18. DECLARE_GLOBAL_DATA_PTR;
  19. #define SEC_SECURE_RAM_BASE (0x31800000UL)
  20. #define SEC_SECURE_RAM_END_BASE (SEC_SECURE_RAM_BASE + 0xFFFFUL)
  21. #define SECO_LOCAL_SEC_SEC_SECURE_RAM_BASE (0x60000000UL)
  22. #define SECO_PT 2U
  23. static inline bool check_in_dram(ulong addr)
  24. {
  25. int i;
  26. struct bd_info *bd = gd->bd;
  27. for (i = 0; i < CONFIG_NR_DRAM_BANKS; ++i) {
  28. if (bd->bi_dram[i].size) {
  29. if (addr >= bd->bi_dram[i].start &&
  30. addr < (bd->bi_dram[i].start + bd->bi_dram[i].size))
  31. return true;
  32. }
  33. }
  34. return false;
  35. }
  36. int authenticate_os_container(ulong addr)
  37. {
  38. struct container_hdr *phdr;
  39. int i, ret = 0;
  40. int err;
  41. sc_rm_mr_t mr;
  42. sc_faddr_t start, end;
  43. u16 length;
  44. struct boot_img_t *img;
  45. unsigned long s, e;
  46. if (addr % 4) {
  47. puts("Error: Image's address is not 4 byte aligned\n");
  48. return -EINVAL;
  49. }
  50. if (!check_in_dram(addr)) {
  51. puts("Error: Image's address is invalid\n");
  52. return -EINVAL;
  53. }
  54. phdr = (struct container_hdr *)addr;
  55. if (phdr->tag != 0x87 && phdr->version != 0x0) {
  56. printf("Error: Wrong container header\n");
  57. return -EFAULT;
  58. }
  59. if (!phdr->num_images) {
  60. printf("Error: Wrong container, no image found\n");
  61. return -EFAULT;
  62. }
  63. length = phdr->length_lsb + (phdr->length_msb << 8);
  64. debug("container length %u\n", length);
  65. memcpy((void *)SEC_SECURE_RAM_BASE, (const void *)addr,
  66. ALIGN(length, CONFIG_SYS_CACHELINE_SIZE));
  67. err = sc_seco_authenticate(-1, SC_SECO_AUTH_CONTAINER,
  68. SECO_LOCAL_SEC_SEC_SECURE_RAM_BASE);
  69. if (err) {
  70. printf("Authenticate container hdr failed, return %d\n",
  71. err);
  72. ret = -EIO;
  73. goto exit;
  74. }
  75. /* Copy images to dest address */
  76. for (i = 0; i < phdr->num_images; i++) {
  77. img = (struct boot_img_t *)(addr +
  78. sizeof(struct container_hdr) +
  79. i * sizeof(struct boot_img_t));
  80. debug("img %d, dst 0x%x, src 0x%lux, size 0x%x\n",
  81. i, (uint32_t) img->dst, img->offset + addr, img->size);
  82. memcpy((void *)img->dst, (const void *)(img->offset + addr),
  83. img->size);
  84. s = img->dst & ~(CONFIG_SYS_CACHELINE_SIZE - 1);
  85. e = ALIGN(img->dst + img->size, CONFIG_SYS_CACHELINE_SIZE) - 1;
  86. flush_dcache_range(s, e);
  87. /* Find the memreg and set permission for seco pt */
  88. err = sc_rm_find_memreg(-1, &mr, s, e);
  89. if (err) {
  90. printf("Error: can't find memreg for image load address 0x%llx, error %d\n", img->dst, err);
  91. ret = -ENOMEM;
  92. goto exit;
  93. }
  94. err = sc_rm_get_memreg_info(-1, mr, &start, &end);
  95. if (!err)
  96. debug("memreg %u 0x%llx -- 0x%llx\n", mr, start, end);
  97. err = sc_rm_set_memreg_permissions(-1, mr, SECO_PT,
  98. SC_RM_PERM_FULL);
  99. if (err) {
  100. printf("Set permission failed for img %d, error %d\n",
  101. i, err);
  102. ret = -EPERM;
  103. goto exit;
  104. }
  105. err = sc_seco_authenticate(-1, SC_SECO_VERIFY_IMAGE,
  106. (1 << i));
  107. if (err) {
  108. printf("Authenticate img %d failed, return %d\n",
  109. i, err);
  110. ret = -EIO;
  111. }
  112. err = sc_rm_set_memreg_permissions(-1, mr, SECO_PT,
  113. SC_RM_PERM_NONE);
  114. if (err) {
  115. printf("Remove permission failed for img %d, err %d\n",
  116. i, err);
  117. ret = -EPERM;
  118. }
  119. if (ret)
  120. goto exit;
  121. }
  122. exit:
  123. if (sc_seco_authenticate(-1, SC_SECO_REL_CONTAINER, 0) != SC_ERR_NONE)
  124. printf("Error: release container failed!\n");
  125. return ret;
  126. }
  127. static int do_authenticate(struct cmd_tbl *cmdtp, int flag, int argc,
  128. char *const argv[])
  129. {
  130. ulong addr;
  131. if (argc < 2)
  132. return CMD_RET_USAGE;
  133. addr = simple_strtoul(argv[1], NULL, 16);
  134. printf("Authenticate OS container at 0x%lx\n", addr);
  135. if (authenticate_os_container(addr))
  136. return CMD_RET_FAILURE;
  137. return CMD_RET_SUCCESS;
  138. }
  139. static void display_life_cycle(u16 lc)
  140. {
  141. printf("Lifecycle: 0x%04X, ", lc);
  142. switch (lc) {
  143. case 0x1:
  144. printf("Pristine\n\n");
  145. break;
  146. case 0x2:
  147. printf("Fab\n\n");
  148. break;
  149. case 0x8:
  150. printf("Open\n\n");
  151. break;
  152. case 0x20:
  153. printf("NXP closed\n\n");
  154. break;
  155. case 0x80:
  156. printf("OEM closed\n\n");
  157. break;
  158. case 0x100:
  159. printf("Partial field return\n\n");
  160. break;
  161. case 0x200:
  162. printf("Full field return\n\n");
  163. break;
  164. case 0x400:
  165. printf("No return\n\n");
  166. break;
  167. default:
  168. printf("Unknown\n\n");
  169. break;
  170. }
  171. }
  172. #define AHAB_AUTH_CONTAINER_REQ 0x87
  173. #define AHAB_VERIFY_IMAGE_REQ 0x88
  174. #define AHAB_NO_AUTHENTICATION_IND 0xee
  175. #define AHAB_BAD_KEY_HASH_IND 0xfa
  176. #define AHAB_INVALID_KEY_IND 0xf9
  177. #define AHAB_BAD_SIGNATURE_IND 0xf0
  178. #define AHAB_BAD_HASH_IND 0xf1
  179. static void display_ahab_auth_event(u32 event)
  180. {
  181. u8 cmd = (event >> 16) & 0xff;
  182. u8 resp_ind = (event >> 8) & 0xff;
  183. switch (cmd) {
  184. case AHAB_AUTH_CONTAINER_REQ:
  185. printf("\tCMD = AHAB_AUTH_CONTAINER_REQ (0x%02X)\n", cmd);
  186. printf("\tIND = ");
  187. break;
  188. case AHAB_VERIFY_IMAGE_REQ:
  189. printf("\tCMD = AHAB_VERIFY_IMAGE_REQ (0x%02X)\n", cmd);
  190. printf("\tIND = ");
  191. break;
  192. default:
  193. return;
  194. }
  195. switch (resp_ind) {
  196. case AHAB_NO_AUTHENTICATION_IND:
  197. printf("AHAB_NO_AUTHENTICATION_IND (0x%02X)\n\n", resp_ind);
  198. break;
  199. case AHAB_BAD_KEY_HASH_IND:
  200. printf("AHAB_BAD_KEY_HASH_IND (0x%02X)\n\n", resp_ind);
  201. break;
  202. case AHAB_INVALID_KEY_IND:
  203. printf("AHAB_INVALID_KEY_IND (0x%02X)\n\n", resp_ind);
  204. break;
  205. case AHAB_BAD_SIGNATURE_IND:
  206. printf("AHAB_BAD_SIGNATURE_IND (0x%02X)\n\n", resp_ind);
  207. break;
  208. case AHAB_BAD_HASH_IND:
  209. printf("AHAB_BAD_HASH_IND (0x%02X)\n\n", resp_ind);
  210. break;
  211. default:
  212. printf("Unknown Indicator (0x%02X)\n\n", resp_ind);
  213. break;
  214. }
  215. }
  216. static int do_ahab_status(struct cmd_tbl *cmdtp, int flag, int argc,
  217. char *const argv[])
  218. {
  219. int err;
  220. u8 idx = 0U;
  221. u32 event;
  222. u16 lc;
  223. err = sc_seco_chip_info(-1, &lc, NULL, NULL, NULL);
  224. if (err != SC_ERR_NONE) {
  225. printf("Error in get lifecycle\n");
  226. return -EIO;
  227. }
  228. display_life_cycle(lc);
  229. err = sc_seco_get_event(-1, idx, &event);
  230. while (err == SC_ERR_NONE) {
  231. printf("SECO Event[%u] = 0x%08X\n", idx, event);
  232. display_ahab_auth_event(event);
  233. idx++;
  234. err = sc_seco_get_event(-1, idx, &event);
  235. }
  236. if (idx == 0)
  237. printf("No SECO Events Found!\n\n");
  238. return 0;
  239. }
  240. static int confirm_close(void)
  241. {
  242. puts("Warning: Please ensure your sample is in NXP closed state, "
  243. "OEM SRK hash has been fused, \n"
  244. " and you are able to boot a signed image successfully "
  245. "without any SECO events reported.\n"
  246. " If not, your sample will be unrecoverable.\n"
  247. "\nReally perform this operation? <y/N>\n");
  248. if (confirm_yesno())
  249. return 1;
  250. puts("Ahab close aborted\n");
  251. return 0;
  252. }
  253. static int do_ahab_close(struct cmd_tbl *cmdtp, int flag, int argc,
  254. char *const argv[])
  255. {
  256. int confirmed = argc >= 2 && !strcmp(argv[1], "-y");
  257. int err;
  258. u16 lc;
  259. if (!confirmed && !confirm_close())
  260. return -EACCES;
  261. err = sc_seco_chip_info(-1, &lc, NULL, NULL, NULL);
  262. if (err != SC_ERR_NONE) {
  263. printf("Error in get lifecycle\n");
  264. return -EIO;
  265. }
  266. if (lc != 0x20) {
  267. puts("Current lifecycle is NOT NXP closed, can't move to OEM closed\n");
  268. display_life_cycle(lc);
  269. return -EPERM;
  270. }
  271. err = sc_seco_forward_lifecycle(-1, 16);
  272. if (err != SC_ERR_NONE) {
  273. printf("Error in forward lifecycle to OEM closed\n");
  274. return -EIO;
  275. }
  276. printf("Change to OEM closed successfully\n");
  277. return 0;
  278. }
  279. U_BOOT_CMD(auth_cntr, CONFIG_SYS_MAXARGS, 1, do_authenticate,
  280. "autenticate OS container via AHAB",
  281. "addr\n"
  282. "addr - OS container hex address\n"
  283. );
  284. U_BOOT_CMD(ahab_status, CONFIG_SYS_MAXARGS, 1, do_ahab_status,
  285. "display AHAB lifecycle and events from seco",
  286. ""
  287. );
  288. U_BOOT_CMD(ahab_close, CONFIG_SYS_MAXARGS, 1, do_ahab_close,
  289. "Change AHAB lifecycle to OEM closed",
  290. ""
  291. );