1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
|
/* IBM_PROLOG_BEGIN_TAG */
/* This is an automatically generated prolog. */
/* */
/* $Source: src/include/usr/secureboot/containerheader.H $ */
/* */
/* OpenPOWER HostBoot Project */
/* */
/* Contributors Listed Below - COPYRIGHT 2016 */
/* [+] International Business Machines Corp. */
/* */
/* */
/* Licensed under the Apache License, Version 2.0 (the "License"); */
/* you may not use this file except in compliance with the License. */
/* You may obtain a copy of the License at */
/* */
/* http://www.apache.org/licenses/LICENSE-2.0 */
/* */
/* Unless required by applicable law or agreed to in writing, software */
/* distributed under the License is distributed on an "AS IS" BASIS, */
/* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or */
/* implied. See the License for the specific language governing */
/* permissions and limitations under the License. */
/* */
/* IBM_PROLOG_END_TAG */
#ifndef __SECUREBOOT_CONTAINER_HEADER_H
#define __SECUREBOOT_CONTAINER_HEADER_H
#include <errl/errlentry.H>
#include <secureboot/service.H>
#include <secureboot/rom.H>
// Forward Declaration
class SecureROMTest;
namespace SECUREBOOT
{
/** @class ContainerHeader
* @brief Class for parsing secureboot container headers.
*/
class ContainerHeader
{
public:
/**
* @brief ContainerHeader
*
* This constructor parses the input container header and sets values
* accordingly so they can be retrieved later.
*
* @param[in] i_header Secure container header to parse.
* NULL input will assert
*/
ContainerHeader(const void* i_header):
iv_isValid(false),iv_hdrBytesRead(0)
{
assert(i_header != NULL);
iv_pHdrStart = reinterpret_cast<const uint8_t*>(i_header);
memset(&iv_headerInfo, 0x00, sizeof(iv_headerInfo));
memset(iv_hwKeyHash, 0, sizeof(SHA512_t));
parse_header(i_header);
};
/**
* @brief Destructor
*/
~ContainerHeader(){};
/**
* @brief Retrieves total container size (includes header, payload text,
* and payload data sizes)
* @return size_t - Total container size in bytes
*/
size_t totalContainerSize() const;
/**
* @brief Retrieves pointer to first hw key
* @return ecc_key_t* - ptr to first hw key
*/
const ecc_key_t* hw_keys() const;
/**
* @brief Total size of all hw keys concatenated
*/
static const size_t totalHwKeysSize = HW_KEY_COUNT*sizeof(ecc_key_t);
/**
* @brief Retrieves payload text size
* @return size_t - size of payload text size
*/
size_t payloadTextSize() const;
/**
* @brief Retrieves payload text hash
* @return SHA512_t* - ptr to hash of payload text
*/
const SHA512_t* payloadTextHash() const;
/**
* @brief Retrieves total size of all sw keys concatenated
* @return size_t - size of concatenated sw keys
*/
size_t totalSwKeysSize() const;
/**
* @brief Retrieves sw public key hash
* @return SHA512_t* - ptr to hash of sw public keys
*/
const SHA512_t* swKeyHash() const;
/**
* @brief Retrieves pointer to first sw key
* @return ecc_key_t* - ptr to first sw key
*/
const ecc_key_t* sw_keys() const;
/**
* @brief Retrieves pointer to first sw signature
* @return ecc_key_t* - ptr to first sw signature
*/
const ecc_key_t* sw_sigs() const;
/**
* @brief Retrieves pointer to sb flag struct holding all hw and sw
* flags set when parsing the header.
* @return sb_flags_t - hw and sw flag struct
*/
const sb_flags_t* sb_flags() const;
/**
* @brief Retrieves hw public key hash
* @return SHA512_t* - ptr to hash of hw public keys
*/
const SHA512_t* hwKeyHash() const;
/**
* @brief Returns if the parsed header is a valid secureboot one. This
* is a temporary, non-secure way of pragmatically determining
* if secureboot signing was supported. Eventually it will always
* happen
* @return bool - whether or not the container is a valid secureboot
*/
bool isValid() const;
private:
/**
* @brief Default Constructor in private to prevent being instantiated
* by non friend/children derivatives.
*/
ContainerHeader(){};
/**
* @brief Complete container header structure based on ROM structures
*/
struct SecureHeaderInfo
{
ROM_container_raw hw_hdr;
ROM_prefix_header_raw hw_prefix_hdr;
ROM_prefix_data_raw hw_prefix_data;
ROM_sw_header_raw sw_hdr;
ROM_sw_sig_raw sw_sig;
};
// Entire cached container header content
SecureHeaderInfo iv_headerInfo;
// Indicates if container header is a valid, in a very loose sense,
// secureboot header.
bool iv_isValid;
// Pointer to the start of the container header
const uint8_t* iv_pHdrStart;
// Counter for bytes read while parsing the container header
size_t iv_hdrBytesRead;
// Total size of all software keys concatenated
size_t iv_totalSwKeysSize;
// Struct to hold all hw and sw flags set
sb_flags_t iv_sbFlags;
// HW keys' hash for current container.
SHA512_t iv_hwKeyHash;
/**
* @brief Determines what flags are set based on the hw and sw flag bit
* fields in the container header.
* Also sets iv_sbFlags private member
*/
void parseFlags();
/**
* @brief Generate and store hw key hash. Concatenate all hw public keys
* and then take sha512 hash.
* Also sets iv_hwKeyHash private member
*/
void genHwKeyHash();
/**
* @brief Weak check to determine if secureboot header looks right.
* Also sets iv_isValid private member
*/
void validate();
/**
* @brief Print out useful sections of the container header
*/
void print() const;
/**
* @brief parse_header Blob
*
* Parses a secure container header defined by ROM structures and set
* internal header structure.
*
* @param[in] i_containerHdr Secure container header to parse
* NULL input will assert
*/
void parse_header(const void* i_header);
/**
* @brief Checks bounds of parsing before mempy and increments pointer
*
* Ensures that we don't memcpy more bytes than the max size of a
* secure container header. Asserts on out of bounds memcpy.
*
* @param[in] i_dest Pointer to the memory location to copy to
* NULL input will assert
* @param[in] io_hdr Pointer to current location of container header
* NULL input will assert
* @param[in] i_size Number of bytes to copy
*/
void safeMemCpyAndInc(void* i_dest, const uint8_t* &io_hdr,
const size_t i_size);
friend class ::SecureROMTest;
};
}; //end of SECUREBOOT namespace
#endif
|
