mirror of
https://github.com/Telecominfraproject/OpenCellular.git
synced 2025-11-24 02:05:01 +00:00
f10e909928
This patch extends the vboot2 API by three callback functions that the platform firmware may implement to offer hardware crypto engine support. For now we only support this for hash algorithms, and we will only allow it for firmware body hashes (not the keyblock or preamble which are too small to matter execution-time-wise anyway). The API is similar to the vb2api_*_hash() functions used to start body hashing in the first place, but we still take this round trip through vboot to allow it to do key/signature management and retain full control of the verification process. We also add a new preamble flag to explicitly disable this feature, so that we can later return to a solely software-based verification path through a firmware update in case a hardware crypto engine turns out to be insecure. CQ-DEPEND=CL:236435 BRANCH=None BUG=chrome-os-partner:32987 TEST='make runtests VBOOT2=1'. Manually booted on Pinky with and without HW crypto support and with the preamble flag set to confirm expected behavior. lib21/ parts untested except for compiling and new unit tests. Change-Id: I17c7d02f392089875a5942a5aafcf6a657354863 Signed-off-by: Julius Werner <jwerner@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/236453 Reviewed-by: Randall Spangler <rspangler@chromium.org>
126 lines
2.9 KiB
C
126 lines
2.9 KiB
C
/* Copyright (c) 2014 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*
|
|
* Externally-callable APIs
|
|
* (Firmware portion)
|
|
*/
|
|
|
|
#include "2sysincludes.h"
|
|
#include "2api.h"
|
|
#include "2common.h"
|
|
#include "2misc.h"
|
|
#include "2nvstorage.h"
|
|
#include "2secdata.h"
|
|
#include "2sha.h"
|
|
#include "2rsa.h"
|
|
|
|
int vb2api_secdata_check(const struct vb2_context *ctx)
|
|
{
|
|
return vb2_secdata_check_crc(ctx);
|
|
}
|
|
|
|
int vb2api_secdata_create(struct vb2_context *ctx)
|
|
{
|
|
return vb2_secdata_create(ctx);
|
|
}
|
|
|
|
void vb2api_fail(struct vb2_context *ctx, uint8_t reason, uint8_t subcode)
|
|
{
|
|
/* Initialize the vboot context if it hasn't been yet */
|
|
vb2_init_context(ctx);
|
|
|
|
vb2_fail(ctx, reason, subcode);
|
|
}
|
|
|
|
int vb2api_fw_phase1(struct vb2_context *ctx)
|
|
{
|
|
int rv;
|
|
|
|
/* Initialize the vboot context if it hasn't been yet */
|
|
vb2_init_context(ctx);
|
|
|
|
/* Initialize NV context */
|
|
vb2_nv_init(ctx);
|
|
|
|
/* Initialize secure data */
|
|
rv = vb2_secdata_init(ctx);
|
|
if (rv)
|
|
vb2_fail(ctx, VB2_RECOVERY_SECDATA_INIT, rv);
|
|
|
|
/* Load and parse the GBB header */
|
|
rv = vb2_fw_parse_gbb(ctx);
|
|
if (rv)
|
|
vb2_fail(ctx, VB2_RECOVERY_GBB_HEADER, rv);
|
|
|
|
/* Check for dev switch */
|
|
rv = vb2_check_dev_switch(ctx);
|
|
if (rv)
|
|
vb2_fail(ctx, VB2_RECOVERY_DEV_SWITCH, rv);
|
|
|
|
/*
|
|
* Check for recovery. Note that this function returns void, since
|
|
* any errors result in requesting recovery.
|
|
*/
|
|
vb2_check_recovery(ctx);
|
|
|
|
/* Return error if recovery is needed */
|
|
if (ctx->flags & VB2_CONTEXT_RECOVERY_MODE) {
|
|
/* Always clear RAM when entering recovery mode */
|
|
ctx->flags |= VB2_CONTEXT_CLEAR_RAM;
|
|
|
|
return VB2_ERROR_API_PHASE1_RECOVERY;
|
|
}
|
|
|
|
return VB2_SUCCESS;
|
|
}
|
|
|
|
int vb2api_fw_phase2(struct vb2_context *ctx)
|
|
{
|
|
int rv;
|
|
|
|
/* Always clear RAM when entering developer mode */
|
|
if (ctx->flags & VB2_CONTEXT_DEVELOPER_MODE)
|
|
ctx->flags |= VB2_CONTEXT_CLEAR_RAM;
|
|
|
|
/* Check for explicit request to clear TPM */
|
|
rv = vb2_check_tpm_clear(ctx);
|
|
if (rv) {
|
|
vb2_fail(ctx, VB2_RECOVERY_TPM_CLEAR_OWNER, rv);
|
|
return rv;
|
|
}
|
|
|
|
/* Decide which firmware slot to try this boot */
|
|
rv = vb2_select_fw_slot(ctx);
|
|
if (rv) {
|
|
vb2_fail(ctx, VB2_RECOVERY_FW_SLOT, rv);
|
|
return rv;
|
|
}
|
|
|
|
return VB2_SUCCESS;
|
|
}
|
|
|
|
int vb2api_extend_hash(struct vb2_context *ctx,
|
|
const void *buf,
|
|
uint32_t size)
|
|
{
|
|
struct vb2_shared_data *sd = vb2_get_sd(ctx);
|
|
struct vb2_digest_context *dc = (struct vb2_digest_context *)
|
|
(ctx->workbuf + sd->workbuf_hash_offset);
|
|
|
|
/* Must have initialized hash digest work area */
|
|
if (!sd->workbuf_hash_size)
|
|
return VB2_ERROR_API_EXTEND_HASH_WORKBUF;
|
|
|
|
/* Don't extend past the data we expect to hash */
|
|
if (!size || size > sd->hash_remaining_size)
|
|
return VB2_ERROR_API_EXTEND_HASH_SIZE;
|
|
|
|
sd->hash_remaining_size -= size;
|
|
|
|
if (dc->using_hwcrypto)
|
|
return vb2ex_hwcrypto_digest_extend(buf, size);
|
|
else
|
|
return vb2_digest_extend(dc, buf, size);
|
|
}
|