Alexei Fedorov | 61369a2 | 2020-07-13 14:59:02 +0100 | [diff] [blame] | 1 | /* |
Manish V Badarkhe | 550cb59 | 2023-02-18 20:04:43 +0000 | [diff] [blame] | 2 | * Copyright (c) 2021-2023, Arm Limited. All rights reserved. |
Alexei Fedorov | 61369a2 | 2020-07-13 14:59:02 +0100 | [diff] [blame] | 3 | * |
| 4 | * SPDX-License-Identifier: BSD-3-Clause |
| 5 | */ |
| 6 | |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 7 | #include <stdint.h> |
| 8 | |
Imre Kis | a48afe5 | 2022-04-11 16:33:13 +0200 | [diff] [blame] | 9 | #include <common/tbbr/tbbr_img_def.h> |
Sandrine Bailleux | 3c2db6f | 2021-07-07 14:47:08 +0200 | [diff] [blame] | 10 | #include <drivers/measured_boot/event_log/event_log.h> |
Tamas Ban | b0f8325 | 2022-02-11 09:49:36 +0100 | [diff] [blame] | 11 | #include <drivers/measured_boot/rss/rss_measured_boot.h> |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 12 | #include <tools_share/tbbr_oid.h> |
| 13 | #include <fvp_critical_data.h> |
| 14 | |
Alexei Fedorov | 61369a2 | 2020-07-13 14:59:02 +0100 | [diff] [blame] | 15 | #include <plat/arm/common/plat_arm.h> |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 16 | #include <plat/common/common_def.h> |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 17 | |
Manish V Badarkhe | 550cb59 | 2023-02-18 20:04:43 +0000 | [diff] [blame] | 18 | #if defined(SPD_tspd) || defined(SPD_opteed) || defined(SPD_spmd) |
| 19 | CASSERT(ARM_EVENT_LOG_DRAM1_SIZE >= PLAT_ARM_EVENT_LOG_MAX_SIZE, \ |
| 20 | assert_res_eventlog_mem_insufficient); |
| 21 | #endif /* defined(SPD_tspd) || defined(SPD_opteed) || defined(SPD_spmd) */ |
| 22 | |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 23 | /* Event Log data */ |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 24 | static uint64_t event_log_base; |
Alexei Fedorov | 61369a2 | 2020-07-13 14:59:02 +0100 | [diff] [blame] | 25 | |
| 26 | /* FVP table with platform specific image IDs, names and PCRs */ |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 27 | const event_log_metadata_t fvp_event_log_metadata[] = { |
Manish V Badarkhe | 72e0369 | 2021-09-08 20:04:24 +0100 | [diff] [blame] | 28 | { BL31_IMAGE_ID, EVLOG_BL31_STRING, PCR_0 }, |
| 29 | { BL32_IMAGE_ID, EVLOG_BL32_STRING, PCR_0 }, |
| 30 | { BL32_EXTRA1_IMAGE_ID, EVLOG_BL32_EXTRA1_STRING, PCR_0 }, |
| 31 | { BL32_EXTRA2_IMAGE_ID, EVLOG_BL32_EXTRA2_STRING, PCR_0 }, |
| 32 | { BL33_IMAGE_ID, EVLOG_BL33_STRING, PCR_0 }, |
| 33 | { HW_CONFIG_ID, EVLOG_HW_CONFIG_STRING, PCR_0 }, |
| 34 | { NT_FW_CONFIG_ID, EVLOG_NT_FW_CONFIG_STRING, PCR_0 }, |
| 35 | { SCP_BL2_IMAGE_ID, EVLOG_SCP_BL2_STRING, PCR_0 }, |
| 36 | { SOC_FW_CONFIG_ID, EVLOG_SOC_FW_CONFIG_STRING, PCR_0 }, |
| 37 | { TOS_FW_CONFIG_ID, EVLOG_TOS_FW_CONFIG_STRING, PCR_0 }, |
Tamas Ban | 6101c2a | 2022-01-10 15:13:00 +0100 | [diff] [blame] | 38 | { RMM_IMAGE_ID, EVLOG_RMM_STRING, PCR_0}, |
Manish V Badarkhe | 67009c3 | 2021-10-31 14:47:49 +0000 | [diff] [blame] | 39 | |
Imre Kis | a48afe5 | 2022-04-11 16:33:13 +0200 | [diff] [blame] | 40 | #if defined(SPD_spmd) |
| 41 | { SP_PKG1_ID, EVLOG_SP1_STRING, PCR_0 }, |
| 42 | { SP_PKG2_ID, EVLOG_SP2_STRING, PCR_0 }, |
| 43 | { SP_PKG3_ID, EVLOG_SP3_STRING, PCR_0 }, |
| 44 | { SP_PKG4_ID, EVLOG_SP4_STRING, PCR_0 }, |
| 45 | { SP_PKG5_ID, EVLOG_SP5_STRING, PCR_0 }, |
| 46 | { SP_PKG6_ID, EVLOG_SP6_STRING, PCR_0 }, |
| 47 | { SP_PKG7_ID, EVLOG_SP7_STRING, PCR_0 }, |
| 48 | { SP_PKG8_ID, EVLOG_SP8_STRING, PCR_0 }, |
| 49 | #endif |
| 50 | |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 51 | { CRITICAL_DATA_ID, EVLOG_CRITICAL_DATA_STRING, PCR_1 }, |
| 52 | |
Manish V Badarkhe | 67009c3 | 2021-10-31 14:47:49 +0000 | [diff] [blame] | 53 | { EVLOG_INVALID_ID, NULL, (unsigned int)(-1) } /* Terminator */ |
Alexei Fedorov | 61369a2 | 2020-07-13 14:59:02 +0100 | [diff] [blame] | 54 | }; |
| 55 | |
Tamas Ban | b0f8325 | 2022-02-11 09:49:36 +0100 | [diff] [blame] | 56 | /* FVP table with platform specific image IDs and metadata. Intentionally not a |
| 57 | * const struct, some members might set by bootloaders during trusted boot. |
| 58 | */ |
| 59 | struct rss_mboot_metadata fvp_rss_mboot_metadata[] = { |
| 60 | { |
| 61 | .id = BL31_IMAGE_ID, |
| 62 | .slot = U(9), |
| 63 | .signer_id_size = SIGNER_ID_MIN_SIZE, |
| 64 | .sw_type = RSS_MBOOT_BL31_STRING, |
| 65 | .lock_measurement = true }, |
| 66 | { |
| 67 | .id = HW_CONFIG_ID, |
| 68 | .slot = U(10), |
| 69 | .signer_id_size = SIGNER_ID_MIN_SIZE, |
| 70 | .sw_type = RSS_MBOOT_HW_CONFIG_STRING, |
| 71 | .lock_measurement = true }, |
| 72 | { |
| 73 | .id = SOC_FW_CONFIG_ID, |
| 74 | .slot = U(11), |
| 75 | .signer_id_size = SIGNER_ID_MIN_SIZE, |
| 76 | .sw_type = RSS_MBOOT_SOC_FW_CONFIG_STRING, |
| 77 | .lock_measurement = true }, |
| 78 | { |
| 79 | .id = RMM_IMAGE_ID, |
| 80 | .slot = U(12), |
| 81 | .signer_id_size = SIGNER_ID_MIN_SIZE, |
| 82 | .sw_type = RSS_MBOOT_RMM_STRING, |
| 83 | .lock_measurement = true }, |
| 84 | { |
| 85 | .id = RSS_MBOOT_INVALID_ID } |
| 86 | }; |
| 87 | |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 88 | void bl2_plat_mboot_init(void) |
| 89 | { |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 90 | uint8_t *event_log_start; |
| 91 | uint8_t *event_log_finish; |
| 92 | size_t bl1_event_log_size; |
Manish V Badarkhe | 6e6df44 | 2023-03-20 14:58:06 +0000 | [diff] [blame] | 93 | size_t event_log_max_size; |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 94 | int rc; |
| 95 | |
Manish V Badarkhe | 6e6df44 | 2023-03-20 14:58:06 +0000 | [diff] [blame] | 96 | rc = arm_get_tb_fw_info(&event_log_base, &bl1_event_log_size, |
| 97 | &event_log_max_size); |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 98 | if (rc != 0) { |
| 99 | ERROR("%s(): Unable to get Event Log info from TB_FW_CONFIG\n", |
| 100 | __func__); |
| 101 | /* |
| 102 | * It is a fatal error because on FVP platform, BL2 software |
| 103 | * assumes that a valid Event Log buffer exist and it will use |
| 104 | * same Event Log buffer to append image measurements. |
| 105 | */ |
| 106 | panic(); |
| 107 | } |
| 108 | |
| 109 | /* |
| 110 | * BL1 and BL2 share the same Event Log buffer and that BL2 will |
| 111 | * append its measurements after BL1's |
| 112 | */ |
| 113 | event_log_start = (uint8_t *)((uintptr_t)event_log_base + |
| 114 | bl1_event_log_size); |
| 115 | event_log_finish = (uint8_t *)((uintptr_t)event_log_base + |
Manish V Badarkhe | 6e6df44 | 2023-03-20 14:58:06 +0000 | [diff] [blame] | 116 | event_log_max_size); |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 117 | |
| 118 | event_log_init((uint8_t *)event_log_start, event_log_finish); |
Tamas Ban | b0f8325 | 2022-02-11 09:49:36 +0100 | [diff] [blame] | 119 | |
| 120 | rss_measured_boot_init(); |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 121 | } |
| 122 | |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 123 | int plat_mboot_measure_critical_data(unsigned int critical_data_id, |
| 124 | const void *base, size_t size) |
| 125 | { |
| 126 | /* |
| 127 | * It is very unlikely that the critical data size would be |
| 128 | * bigger than 2^32 bytes |
| 129 | */ |
| 130 | assert(size < UINT32_MAX); |
| 131 | assert(base != NULL); |
| 132 | |
| 133 | /* Calculate image hash and record data in Event Log */ |
| 134 | int err = event_log_measure_and_record((uintptr_t)base, (uint32_t)size, |
Manish V Badarkhe | dd1ee50 | 2022-11-18 20:27:21 +0000 | [diff] [blame] | 135 | critical_data_id, |
| 136 | fvp_event_log_metadata); |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 137 | if (err != 0) { |
| 138 | ERROR("%s%s critical data (%i)\n", |
| 139 | "Failed to ", "record", err); |
| 140 | return err; |
| 141 | } |
| 142 | |
| 143 | return 0; |
| 144 | } |
| 145 | |
Manish V Badarkhe | eba13bd | 2022-01-08 23:08:02 +0000 | [diff] [blame] | 146 | #if TRUSTED_BOARD_BOOT |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 147 | static int fvp_populate_critical_data(struct fvp_critical_data *critical_data) |
| 148 | { |
| 149 | char *nv_ctr_oids[MAX_NV_CTR_IDS] = { |
| 150 | [TRUSTED_NV_CTR_ID] = TRUSTED_FW_NVCOUNTER_OID, |
| 151 | [NON_TRUSTED_NV_CTR_ID] = NON_TRUSTED_FW_NVCOUNTER_OID, |
| 152 | }; |
| 153 | |
| 154 | for (int i = 0; i < MAX_NV_CTR_IDS; i++) { |
| 155 | int rc = plat_get_nv_ctr(nv_ctr_oids[i], |
| 156 | &critical_data->nv_ctr[i]); |
| 157 | if (rc != 0) { |
| 158 | return rc; |
| 159 | } |
| 160 | } |
| 161 | |
| 162 | return 0; |
| 163 | } |
Manish V Badarkhe | eba13bd | 2022-01-08 23:08:02 +0000 | [diff] [blame] | 164 | #endif /* TRUSTED_BOARD_BOOT */ |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 165 | |
| 166 | static int fvp_populate_and_measure_critical_data(void) |
| 167 | { |
Manish V Badarkhe | eba13bd | 2022-01-08 23:08:02 +0000 | [diff] [blame] | 168 | int rc = 0; |
| 169 | |
| 170 | /* |
| 171 | * FVP platform only measures 'platform NV-counter' and hence its |
| 172 | * measurement makes sense during Trusted-Boot flow only. |
| 173 | */ |
| 174 | #if TRUSTED_BOARD_BOOT |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 175 | struct fvp_critical_data populate_critical_data; |
| 176 | |
Manish V Badarkhe | eba13bd | 2022-01-08 23:08:02 +0000 | [diff] [blame] | 177 | rc = fvp_populate_critical_data(&populate_critical_data); |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 178 | if (rc == 0) { |
| 179 | rc = plat_mboot_measure_critical_data(CRITICAL_DATA_ID, |
| 180 | &populate_critical_data, |
| 181 | sizeof(populate_critical_data)); |
| 182 | } |
Manish V Badarkhe | eba13bd | 2022-01-08 23:08:02 +0000 | [diff] [blame] | 183 | #endif /* TRUSTED_BOARD_BOOT */ |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 184 | |
| 185 | return rc; |
| 186 | } |
| 187 | |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 188 | void bl2_plat_mboot_finish(void) |
| 189 | { |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 190 | int rc; |
| 191 | |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 192 | /* Event Log address in Non-Secure memory */ |
| 193 | uintptr_t ns_log_addr; |
| 194 | |
| 195 | /* Event Log filled size */ |
| 196 | size_t event_log_cur_size; |
| 197 | |
Manish V Badarkhe | 1ffa009 | 2021-10-20 22:06:40 +0100 | [diff] [blame] | 198 | rc = fvp_populate_and_measure_critical_data(); |
| 199 | if (rc != 0) { |
| 200 | panic(); |
| 201 | } |
| 202 | |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 203 | event_log_cur_size = event_log_get_cur_size((uint8_t *)event_log_base); |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 204 | |
Manish V Badarkhe | 550cb59 | 2023-02-18 20:04:43 +0000 | [diff] [blame] | 205 | #if defined(SPD_tspd) || defined(SPD_opteed) || defined(SPD_spmd) |
| 206 | /* Copy Event Log to TZC secured DRAM memory */ |
| 207 | (void)memcpy((void *)ARM_EVENT_LOG_DRAM1_BASE, |
| 208 | (const void *)event_log_base, |
| 209 | event_log_cur_size); |
| 210 | |
| 211 | /* Ensure that the Event Log is visible in TZC secured DRAM memory */ |
| 212 | flush_dcache_range(ARM_EVENT_LOG_DRAM1_BASE, event_log_cur_size); |
| 213 | #endif /* defined(SPD_tspd) || defined(SPD_opteed) || defined(SPD_spmd) */ |
| 214 | |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 215 | rc = arm_set_nt_fw_info( |
| 216 | #ifdef SPD_opteed |
Manish V Badarkhe | 550cb59 | 2023-02-18 20:04:43 +0000 | [diff] [blame] | 217 | (uintptr_t)ARM_EVENT_LOG_DRAM1_BASE, |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 218 | #endif |
| 219 | event_log_cur_size, &ns_log_addr); |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 220 | if (rc != 0) { |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 221 | ERROR("%s(): Unable to update %s_FW_CONFIG\n", |
| 222 | __func__, "NT"); |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 223 | /* |
| 224 | * It is a fatal error because on FVP secure world software |
| 225 | * assumes that a valid event log exists and will use it to |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 226 | * record the measurements into the fTPM. |
| 227 | * Note: In FVP platform, OP-TEE uses nt_fw_config to get the |
| 228 | * secure Event Log buffer address. |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 229 | */ |
| 230 | panic(); |
| 231 | } |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 232 | |
| 233 | /* Copy Event Log to Non-secure memory */ |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 234 | (void)memcpy((void *)ns_log_addr, (const void *)event_log_base, |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 235 | event_log_cur_size); |
| 236 | |
| 237 | /* Ensure that the Event Log is visible in Non-secure memory */ |
| 238 | flush_dcache_range(ns_log_addr, event_log_cur_size); |
| 239 | |
| 240 | #if defined(SPD_tspd) || defined(SPD_spmd) |
| 241 | /* Set Event Log data in TOS_FW_CONFIG */ |
Manish V Badarkhe | 550cb59 | 2023-02-18 20:04:43 +0000 | [diff] [blame] | 242 | rc = arm_set_tos_fw_info((uintptr_t)ARM_EVENT_LOG_DRAM1_BASE, |
Manish V Badarkhe | 7ca9d65 | 2021-09-14 22:41:46 +0100 | [diff] [blame] | 243 | event_log_cur_size); |
| 244 | if (rc != 0) { |
| 245 | ERROR("%s(): Unable to update %s_FW_CONFIG\n", |
| 246 | __func__, "TOS"); |
| 247 | panic(); |
| 248 | } |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 249 | #endif /* defined(SPD_tspd) || defined(SPD_spmd) */ |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 250 | |
Manish V Badarkhe | 4edf4bd | 2021-08-11 10:45:03 +0100 | [diff] [blame] | 251 | dump_event_log((uint8_t *)event_log_base, event_log_cur_size); |
Manish V Badarkhe | 5797b80 | 2021-08-06 09:26:20 +0100 | [diff] [blame] | 252 | } |