1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
|
/* IBM_PROLOG_BEGIN_TAG */
/* This is an automatically generated prolog. */
/* */
/* $Source: src/usr/secureboot/base/securerom.H $ */
/* */
/* OpenPOWER HostBoot Project */
/* */
/* COPYRIGHT International Business Machines Corp. 2013,2014 */
/* */
/* Licensed under the Apache License, Version 2.0 (the "License"); */
/* you may not use this file except in compliance with the License. */
/* You may obtain a copy of the License at */
/* */
/* http://www.apache.org/licenses/LICENSE-2.0 */
/* */
/* Unless required by applicable law or agreed to in writing, software */
/* distributed under the License is distributed on an "AS IS" BASIS, */
/* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or */
/* implied. See the License for the specific language governing */
/* permissions and limitations under the License. */
/* */
/* IBM_PROLOG_END_TAG */
#ifndef __SECUREBOOT_SECUREROM_H
#define __SECUREBOOT_SECUREROM_H
/** @file SecureRom.H
*
* @brief SecureROM class definition and miscellaneious defines
* needed to work with Secure ROM binary
*/
#include <errl/errlentry.H>
/******************************************************************/
/* Start of Chip Logic Secure ROM include section */
/******************************************************************/
// These defines come from the following directory:
// /afs/awd/projects/eclipz/c22/libs/tp/logic/p8m/head/trusted_boot_rom/src
// and are needed to run functions in the SecureROM code stored in memory
/* From hw_utils.h: */
#define ECID_SIZE 16
/* From ecverify.h */
#define EC_COORDBYTES 66 /* P-521 */
typedef uint8_t ecc_key_t[2*EC_COORDBYTES];
/* From sha512.h: */
#define SHA512_DIGEST_LENGTH 64
typedef uint8_t __attribute__((aligned(8))) sha2_hash_t[ \
SHA512_DIGEST_LENGTH / sizeof(uint8_t) ];
typedef uint8_t sha2_byte; /* Exactly 1 byte */
void SHA512_Hash(const sha2_byte *data, size_t len, sha2_hash_t *result);
/* From ROM.h */
typedef enum { ROM_DONE, ROM_FAILED, PHYP_PARTIAL } ROM_response;
typedef struct {
uint32_t magic_number; // (17082011)
uint16_t version; // (1: see versions above)
uint64_t container_size; // filled by caller
uint64_t target_hrmor; // filled by caller
uint64_t stack_pointer; // filled by caller
//bottom of stack -> 128k added by rom code to get real stack pointer
ecc_key_t hw_pkey_a;
ecc_key_t hw_pkey_b;
ecc_key_t hw_pkey_c;
uint64_t prefix; // prefix header place holder
// followed by sw header (if not special prefix)
// followed by optional unprotected payload data
}__attribute__((packed)) ROM_container_raw;
typedef struct {
sha2_hash_t hw_key_hash;
uint8_t my_ecid[ECID_SIZE];
uint64_t entry_point;
uint64_t log;
}__attribute__((packed)) ROM_hw_params;
// Need this for the following definition
#ifdef __cplusplus
extern "C"
{
#endif
// Interfaces for Assembly Functions to call into Secure ROM
// - 1st parameter is address of function offset into Secure ROM,
// followed by additional parameters as necssary
ROM_response call_rom_verify(void*, ROM_container_raw*, ROM_hw_params*);
void call_rom_SHA512(void*, const sha2_byte *, size_t, sha2_hash_t*);
#ifdef __cplusplus
}
#endif
/* Offsets needed to call functions in jump table at start of */
/* SecureROM code - see .../trusted_boot_rom/bootrom.dis */
#define SHA512_HASH_FUNCTION_OFFSET 0x20
#define ROM_VERIFY_FUNCTION_OFFSET 0x30
/******************************************************************/
/* End of Chip Logic Secure ROM include section */
/******************************************************************/
/** @class SecureROM
* @brief Class for loading and interacting with SecureROM in memory
*/
class SecureROM
{
public:
/**
* @brief Initialize Secure Rom by loading it into memory and
* getting Hash Keys
*
* @return errlHndl_t NULL on success
*/
errlHndl_t initialize();
/**
* @brief Verify Container against system hash keys
*
* @param[in] i_container Void pointer to effective address
* of container
* @param[in] i_size Size of container
*
* @return errlHndl_t NULL on success
*/
errlHndl_t verifyContainer(void * i_container, size_t i_size);
/**
* @brief Hash Blob
*
* @param[in] i_blob Void pointer to effective address
* of blob
* @param[in] i_size Size of blob in bytes
*
* @return errlHndl_t NULL on success
*/
errlHndl_t hashBlob(void * i_blob, size_t i_size);
protected:
/**
* @brief Constructor
*/
SecureROM();
/**
* @brief Destructor
*/
~SecureROM();
private:
/********************************************
* VARIABLES
********************************************/
/**
* Void pointer to effective address location of Secure ROM
* in memory
*/
void * iv_device_ptr;
/**
* Hash Key Retrieved From System
*/
sha2_hash_t iv_hash_key;
/********************************************
* Private Functions
********************************************/
/**
* @brief Retrieves HW Keys from the system
*
* @return errlHndl_t NULL on success
*/
errlHndl_t getHwHashKeys();
/**
* @brief Static instance function for testcase only
*/
static SecureROM& getInstance();
/**
* @brief Safely Frees Allocated Memory
*/
void _cleanup();
/********************************************
* Friend(s)
********************************************/
// let my testcase poke around
friend class SecureROMTest;
}; // end of SecureROM class
#endif
|
