1 /*
2 * Copyright (c) 2019-2020, ARM Limited. All rights reserved.
3 *
4 * SPDX-License-Identifier: BSD-3-Clause
5 */
6
7 #include <assert.h>
8 #include <stdint.h>
9 #include <string.h>
10
11 #include <plat/arm/common/plat_arm.h>
12 #include <plat/common/common_def.h>
13 #include <plat/common/platform.h>
14
15 #if (ARM_ROTPK_LOCATION_ID == ARM_ROTPK_REGS_ID)
16
17 static unsigned char rotpk_hash_der[ARM_ROTPK_HEADER_LEN + ARM_ROTPK_HASH_LEN];
18
19 extern unsigned char arm_rotpk_header[];
20
21 /*
22 * Return the ROTPK hash stored in the registers of Juno board.
23 */
juno_get_rotpk_info_regs(void ** key_ptr,unsigned int * key_len,unsigned int * flags)24 static int juno_get_rotpk_info_regs(void **key_ptr, unsigned int *key_len,
25 unsigned int *flags)
26 {
27 uint8_t *dst;
28 uint32_t *src, tmp;
29 unsigned int words, i;
30
31 assert(key_ptr != NULL);
32 assert(key_len != NULL);
33 assert(flags != NULL);
34
35 /* Copy the DER header */
36 memcpy(rotpk_hash_der, arm_rotpk_header, ARM_ROTPK_HEADER_LEN);
37 dst = (uint8_t *)&rotpk_hash_der[ARM_ROTPK_HEADER_LEN];
38
39
40 /*
41 * Append the hash from Trusted Root-Key Storage registers. The hash has
42 * not been written linearly into the registers, so we have to do a bit
43 * of byte swapping:
44 *
45 * 0x00 0x04 0x08 0x0C 0x10 0x14 0x18 0x1C
46 * +---------------------------------------------------------------+
47 * | Reg0 | Reg1 | Reg2 | Reg3 | Reg4 | Reg5 | Reg6 | Reg7 |
48 * +---------------------------------------------------------------+
49 * | ... ... | | ... ... |
50 * | +--------------------+ | +-------+
51 * | | | |
52 * +----------------------------+ +----------------------------+
53 * | | | |
54 * +-------+ | +--------------------+ |
55 * | | | |
56 * v v v v
57 * +---------------------------------------------------------------+
58 * | | |
59 * +---------------------------------------------------------------+
60 * 0 15 16 31
61 *
62 * Additionally, we have to access the registers in 32-bit words
63 */
64 words = ARM_ROTPK_HASH_LEN >> 3;
65
66 /* Swap bytes 0-15 (first four registers) */
67 src = (uint32_t *)TZ_PUB_KEY_HASH_BASE;
68 for (i = 0 ; i < words ; i++) {
69 tmp = src[words - 1 - i];
70 /* Words are read in little endian */
71 *dst++ = (uint8_t)((tmp >> 24) & 0xFF);
72 *dst++ = (uint8_t)((tmp >> 16) & 0xFF);
73 *dst++ = (uint8_t)((tmp >> 8) & 0xFF);
74 *dst++ = (uint8_t)(tmp & 0xFF);
75 }
76
77 /* Swap bytes 16-31 (last four registers) */
78 src = (uint32_t *)(TZ_PUB_KEY_HASH_BASE + ARM_ROTPK_HASH_LEN / 2);
79 for (i = 0 ; i < words ; i++) {
80 tmp = src[words - 1 - i];
81 *dst++ = (uint8_t)((tmp >> 24) & 0xFF);
82 *dst++ = (uint8_t)((tmp >> 16) & 0xFF);
83 *dst++ = (uint8_t)((tmp >> 8) & 0xFF);
84 *dst++ = (uint8_t)(tmp & 0xFF);
85 }
86
87 *key_ptr = (void *)rotpk_hash_der;
88 *key_len = (unsigned int)sizeof(rotpk_hash_der);
89 *flags = ROTPK_IS_HASH;
90 return 0;
91 }
92
93 #endif
94
95 /*
96 * Return the ROTPK hash in the following ASN.1 structure in DER format:
97 *
98 * AlgorithmIdentifier ::= SEQUENCE {
99 * algorithm OBJECT IDENTIFIER,
100 * parameters ANY DEFINED BY algorithm OPTIONAL
101 * }
102 *
103 * DigestInfo ::= SEQUENCE {
104 * digestAlgorithm AlgorithmIdentifier,
105 * digest OCTET STRING
106 * }
107 */
plat_get_rotpk_info(void * cookie,void ** key_ptr,unsigned int * key_len,unsigned int * flags)108 int plat_get_rotpk_info(void *cookie, void **key_ptr, unsigned int *key_len,
109 unsigned int *flags)
110 {
111 #if (ARM_ROTPK_LOCATION_ID == ARM_ROTPK_DEVEL_RSA_ID) || \
112 (ARM_ROTPK_LOCATION_ID == ARM_ROTPK_DEVEL_ECDSA_ID)
113 return arm_get_rotpk_info_dev(key_ptr, key_len, flags);
114 #elif (ARM_ROTPK_LOCATION_ID == ARM_ROTPK_REGS_ID)
115 return juno_get_rotpk_info_regs(key_ptr, key_len, flags);
116 #else
117 return 1;
118 #endif
119 }
120
