blob: 7ccbf9d77f724968284f74b182fd7c5013e12c22 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
|
/* IBM_PROLOG_BEGIN_TAG */
/* This is an automatically generated prolog. */
/* */
/* $Source: src/usr/secureboot/base/securerommgr.H $ */
/* */
/* OpenPOWER HostBoot Project */
/* */
/* Contributors Listed Below - COPYRIGHT 2013,2017 */
/* [+] International Business Machines Corp. */
/* */
/* */
/* Licensed under the Apache License, Version 2.0 (the "License"); */
/* you may not use this file except in compliance with the License. */
/* You may obtain a copy of the License at */
/* */
/* http://www.apache.org/licenses/LICENSE-2.0 */
/* */
/* Unless required by applicable law or agreed to in writing, software */
/* distributed under the License is distributed on an "AS IS" BASIS, */
/* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or */
/* implied. See the License for the specific language governing */
/* permissions and limitations under the License. */
/* */
/* IBM_PROLOG_END_TAG */
#ifndef __SECUREBOOT_SECUREROM_H
#define __SECUREBOOT_SECUREROM_H
#include <errl/errlentry.H>
#include <securerom/ROM.H>
/** @class SecureRomManager
* @brief Class for loading and interacting with SecureRomManager in memory
*/
class SecureRomManager
{
public:
/**
* @brief Initialize Secure Rom by loading it into memory and
* getting Hash Keys
*
* @return errlHndl_t NULL on success
*/
errlHndl_t initialize();
/**
* @brief Verify Container against system hash keys
*
* @param[in] i_container Void pointer to effective address
* of container
* @param[in] i_hwKeyHash Custom hw keys' hash to test against
* [default = nullptr, use current hw hash key
*
* @return errlHndl_t NULL on success
*/
errlHndl_t verifyContainer(void * i_container,
const sha2_hash_t* i_hwKeyHash = nullptr);
/**
* @brief Hash Blob
*
* @param[in] i_blob Void pointer to effective address
* of blob
* @param[in] i_size Size of blob in bytes
* @param[in/out] io_buf Resulting hash buffer
*
* @return errlHndl_t NULL on success
*/
errlHndl_t hashBlob(const void * i_blob, size_t i_size, SHA512_t io_buf) const;
/**
* @brief Retrieve the internal hardware keys' hash from secure ROM
* object.
*
* @param[out] o_hash Reference to the sha2_hash_t array to copy the
* hash to.
*/
void getHwKeyHash(sha2_hash_t o_hash);
/*
* @brief Hash the concatenation of N Blobs
*
* Asserts if any blob pointer is NULL
*
* @param[in] i_blobs Vector of pairs composed of a void
* pointer to effective address and size
* of the blob to concatenate
* @param[out] o_buf SHA512 hash
*
* @return errlHndl_t NULL on success
*/
errlHndl_t hashConcatBlobs (const blobPair_t &i_blobs,
SHA512_t o_buf) const;
protected:
/**
* @brief Constructor
*/
SecureRomManager();
/**
* @brief Destructor
*/
~SecureRomManager();
private:
/********************************************
* VARIABLES
********************************************/
/**
* Void pointer to effective address location of Secure ROM
* in memory
*/
void * iv_device_ptr;
/**
* HW key' hash retrieved from system
*/
sha2_hash_t iv_key_hash;
/********************************************
* Private Functions
********************************************/
/**
* @brief Retrieves HW keys' hash from the system
*
* @return errlHndl_t NULL on success
*/
errlHndl_t getHwKeyHash();
/**
* @brief Static instance function for testcase only
*/
static SecureRomManager& getInstance();
/**
* @brief Safely Frees Allocated Memory
*/
void _cleanup();
/********************************************
* Friend(s)
********************************************/
// let my testcase poke around
friend class SecureRomManagerTest;
}; // end of SecureRomManager class
#endif
|
