mirror of
https://github.com/Telecominfraproject/OpenCellular.git
synced 2025-12-31 02:51:26 +00:00
4ec4975d90
This patch moves the code which can be shared with other data verification schemes (e.g. RWSIG) under common/vboot. It also adds unit tests for it. BUG=b:38462249 BRANCH=none TEST=make run-vboot. Verify verification succeeds on Fizz. Change-Id: Icab4d96dd2c154a12b01c41ebe9b46286b4b590e Signed-off-by: Daisuke Nojiri <dnojiri@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/563463 Reviewed-by: Randall Spangler <rspangler@chromium.org>
61 lines
1.3 KiB
C
61 lines
1.3 KiB
C
/* Copyright 2017 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*/
|
|
|
|
#include "common.h"
|
|
#include "console.h"
|
|
#include "rsa.h"
|
|
#include "sha256.h"
|
|
#include "shared_mem.h"
|
|
#include "vboot.h"
|
|
|
|
#define CPRINTS(format, args...) cprints(CC_VBOOT, format, ## args)
|
|
#define CPRINTF(format, args...) cprintf(CC_VBOOT, format, ## args)
|
|
|
|
int vboot_is_padding_valid(const uint8_t *data, uint32_t start, uint32_t end)
|
|
{
|
|
const uint32_t *data32 = (const uint32_t *)data;
|
|
int i;
|
|
|
|
if (start > end)
|
|
return EC_ERROR_INVAL;
|
|
|
|
if (start % 4 || end % 4)
|
|
return EC_ERROR_INVAL;
|
|
|
|
for (i = start / 4; i < end / 4; i++) {
|
|
if (data32[i] != 0xffffffff)
|
|
return EC_ERROR_INVAL;
|
|
}
|
|
|
|
return EC_SUCCESS;
|
|
}
|
|
|
|
int vboot_verify(const uint8_t *data, int len,
|
|
const struct rsa_public_key *key, const uint8_t *sig)
|
|
{
|
|
struct sha256_ctx ctx;
|
|
uint8_t *hash;
|
|
uint32_t *workbuf;
|
|
int err = EC_SUCCESS;
|
|
|
|
if (shared_mem_acquire(3 * RSANUMBYTES, (char **)&workbuf)) {
|
|
CPRINTS("Failed to allocate memory");
|
|
return EC_ERROR_UNKNOWN;
|
|
}
|
|
|
|
/* Compute hash of the RW firmware */
|
|
SHA256_init(&ctx);
|
|
SHA256_update(&ctx, data, len);
|
|
hash = SHA256_final(&ctx);
|
|
|
|
/* Verify the data */
|
|
if (rsa_verify(key, sig, hash, workbuf) != 1)
|
|
err = EC_ERROR_INVAL;
|
|
|
|
shared_mem_release(workbuf);
|
|
|
|
return err;
|
|
}
|