Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (c) 2015, ARM Limited and Contributors. All rights reserved. |
| 3 | * |
| 4 | * Redistribution and use in source and binary forms, with or without |
| 5 | * modification, are permitted provided that the following conditions are met: |
| 6 | * |
| 7 | * Redistributions of source code must retain the above copyright notice, this |
| 8 | * list of conditions and the following disclaimer. |
| 9 | * |
| 10 | * Redistributions in binary form must reproduce the above copyright notice, |
| 11 | * this list of conditions and the following disclaimer in the documentation |
| 12 | * and/or other materials provided with the distribution. |
| 13 | * |
| 14 | * Neither the name of ARM nor the names of its contributors may be used |
| 15 | * to endorse or promote products derived from this software without specific |
| 16 | * prior written permission. |
| 17 | * |
| 18 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" |
| 19 | * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| 20 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
| 21 | * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE |
| 22 | * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR |
| 23 | * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF |
| 24 | * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS |
| 25 | * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN |
| 26 | * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
| 27 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE |
| 28 | * POSSIBILITY OF SUCH DAMAGE. |
| 29 | */ |
| 30 | |
| 31 | #include <stdio.h> |
| 32 | #include <string.h> |
| 33 | #include <openssl/err.h> |
| 34 | #include <openssl/x509v3.h> |
| 35 | #include "ext.h" |
| 36 | #include "platform_oid.h" |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 37 | #include "tbbr/tbb_ext.h" |
| 38 | #include "tbbr/tbb_key.h" |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 39 | |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 40 | /* TODO: get these values from the command line */ |
| 41 | #define TRUSTED_WORLD_NVCTR_VALUE 0 |
| 42 | #define NORMAL_WORLD_NVCTR_VALUE 0 |
| 43 | |
| 44 | static ext_t tbb_ext[] = { |
| 45 | [TZ_FW_NVCOUNTER_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 46 | .oid = TZ_FW_NVCOUNTER_OID, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 47 | .sn = "TrustedWorldNVCounter", |
| 48 | .ln = "Trusted World Non-Volatile counter", |
| 49 | .asn1_type = V_ASN1_INTEGER, |
| 50 | .type = EXT_TYPE_NVCOUNTER, |
| 51 | .data.nvcounter = TRUSTED_WORLD_NVCTR_VALUE |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 52 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 53 | [NTZ_FW_NVCOUNTER_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 54 | .oid = NTZ_FW_NVCOUNTER_OID, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 55 | .sn = "NormalWorldNVCounter", |
| 56 | .ln = "Normal World Non-Volatile counter", |
| 57 | .asn1_type = V_ASN1_INTEGER, |
| 58 | .type = EXT_TYPE_NVCOUNTER, |
| 59 | .data.nvcounter = NORMAL_WORLD_NVCTR_VALUE |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 60 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 61 | [BL2_HASH_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 62 | .oid = BL2_HASH_OID, |
Juan Castillo | 1218dd5 | 2015-07-03 16:23:16 +0100 | [diff] [blame^] | 63 | .opt = "bl2", |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 64 | .sn = "TrustedBootFirmwareHash", |
| 65 | .ln = "Trusted Boot Firmware (BL2) hash (SHA256)", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 66 | .asn1_type = V_ASN1_OCTET_STRING, |
| 67 | .type = EXT_TYPE_HASH |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 68 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 69 | [TZ_WORLD_PK_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 70 | .oid = TZ_WORLD_PK_OID, |
| 71 | .sn = "TrustedWorldPublicKey", |
| 72 | .ln = "Trusted World Public Key", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 73 | .asn1_type = V_ASN1_OCTET_STRING, |
| 74 | .type = EXT_TYPE_PKEY, |
| 75 | .data.key = TRUSTED_WORLD_KEY |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 76 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 77 | [NTZ_WORLD_PK_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 78 | .oid = NTZ_WORLD_PK_OID, |
| 79 | .sn = "NonTrustedWorldPublicKey", |
| 80 | .ln = "Non-Trusted World Public Key", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 81 | .asn1_type = V_ASN1_OCTET_STRING, |
| 82 | .type = EXT_TYPE_PKEY, |
| 83 | .data.key = NON_TRUSTED_WORLD_KEY |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 84 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 85 | [BL30_CONTENT_CERT_PK_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 86 | .oid = BL30_CONTENT_CERT_PK_OID, |
| 87 | .sn = "SCPFirmwareContentCertPK", |
| 88 | .ln = "SCP Firmware content certificate public key", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 89 | .asn1_type = V_ASN1_OCTET_STRING, |
| 90 | .type = EXT_TYPE_PKEY, |
| 91 | .data.key = BL30_KEY |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 92 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 93 | [BL30_HASH_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 94 | .oid = BL30_HASH_OID, |
Juan Castillo | 1218dd5 | 2015-07-03 16:23:16 +0100 | [diff] [blame^] | 95 | .opt = "bl30", |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 96 | .sn = "SCPFirmwareHash", |
| 97 | .ln = "SCP Firmware (BL30) hash (SHA256)", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 98 | .asn1_type = V_ASN1_OCTET_STRING, |
| 99 | .type = EXT_TYPE_HASH |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 100 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 101 | [BL31_CONTENT_CERT_PK_EXT] = { |
| 102 | .oid = BL31_CONTENT_CERT_PK_OID, |
| 103 | .sn = "SoCFirmwareContentCertPK", |
| 104 | .ln = "SoC Firmware content certificate public key", |
| 105 | .asn1_type = V_ASN1_OCTET_STRING, |
| 106 | .type = EXT_TYPE_PKEY, |
| 107 | .data.key = BL31_KEY |
| 108 | }, |
| 109 | [BL31_HASH_EXT] = { |
| 110 | .oid = BL31_HASH_OID, |
Juan Castillo | 1218dd5 | 2015-07-03 16:23:16 +0100 | [diff] [blame^] | 111 | .opt = "bl31", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 112 | .sn = "SoCAPFirmwareHash", |
| 113 | .ln = "SoC AP Firmware (BL31) hash (SHA256)", |
| 114 | .asn1_type = V_ASN1_OCTET_STRING, |
| 115 | .type = EXT_TYPE_HASH |
| 116 | }, |
| 117 | [BL32_CONTENT_CERT_PK_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 118 | .oid = BL32_CONTENT_CERT_PK_OID, |
| 119 | .sn = "TrustedOSFirmwareContentCertPK", |
| 120 | .ln = "Trusted OS Firmware content certificate public key", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 121 | .asn1_type = V_ASN1_OCTET_STRING, |
| 122 | .type = EXT_TYPE_PKEY, |
| 123 | .data.key = BL32_KEY |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 124 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 125 | [BL32_HASH_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 126 | .oid = BL32_HASH_OID, |
Juan Castillo | 1218dd5 | 2015-07-03 16:23:16 +0100 | [diff] [blame^] | 127 | .opt = "bl32", |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 128 | .sn = "TrustedOSHash", |
| 129 | .ln = "Trusted OS (BL32) hash (SHA256)", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 130 | .asn1_type = V_ASN1_OCTET_STRING, |
| 131 | .type = EXT_TYPE_HASH |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 132 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 133 | [BL33_CONTENT_CERT_PK_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 134 | .oid = BL33_CONTENT_CERT_PK_OID, |
| 135 | .sn = "NonTrustedFirmwareContentCertPK", |
| 136 | .ln = "Non-Trusted Firmware content certificate public key", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 137 | .asn1_type = V_ASN1_OCTET_STRING, |
| 138 | .type = EXT_TYPE_PKEY, |
| 139 | .data.key = BL33_KEY |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 140 | }, |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 141 | [BL33_HASH_EXT] = { |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 142 | .oid = BL33_HASH_OID, |
Juan Castillo | 1218dd5 | 2015-07-03 16:23:16 +0100 | [diff] [blame^] | 143 | .opt = "bl33", |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 144 | .sn = "NonTrustedWorldBootloaderHash", |
| 145 | .ln = "Non-Trusted World (BL33) hash (SHA256)", |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 146 | .asn1_type = V_ASN1_OCTET_STRING, |
| 147 | .type = EXT_TYPE_HASH |
| 148 | } |
Juan Castillo | 11abdcd | 2014-10-21 11:30:42 +0100 | [diff] [blame] | 149 | }; |
Juan Castillo | e6d30e9 | 2015-06-12 11:27:59 +0100 | [diff] [blame] | 150 | |
| 151 | REGISTER_EXTENSIONS(tbb_ext); |