xref: /optee_os/lib/libutee/include/tee_internal_api.h (revision f22e1655f23819a7b080fe0963e51ae8a7ce529f)
1 /* SPDX-License-Identifier: BSD-2-Clause */
2 /*
3  * Copyright (c) 2014, STMicroelectronics International N.V.
4  */
5 
6 /* Based on GP TEE Internal API Specification Version 0.27 */
7 #ifndef TEE_INTERNAL_API_H
8 #define TEE_INTERNAL_API_H
9 
10 #ifdef __TEE_API_COMPAT_H
11 #error "<tee_api_compat.h> must not be included before <tee_internal_api.h>"
12 #endif
13 
14 #include <compiler.h>
15 #include <stddef.h>
16 #include <tee_api_defines.h>
17 #include <tee_api_types.h>
18 #include <trace.h>
19 
20 /* Property access functions */
21 
22 TEE_Result TEE_GetPropertyAsString(TEE_PropSetHandle propsetOrEnumerator,
23 				   const char *name, char *valueBuffer,
24 				   size_t *valueBufferLen);
25 TEE_Result __GP11_TEE_GetPropertyAsString(TEE_PropSetHandle propsetOrEnumerator,
26 					  const char *name, char *valueBuffer,
27 					  uint32_t *valueBufferLen);
28 
29 TEE_Result TEE_GetPropertyAsBool(TEE_PropSetHandle propsetOrEnumerator,
30 				 const char *name, bool *value);
31 
32 TEE_Result TEE_GetPropertyAsU32(TEE_PropSetHandle propsetOrEnumerator,
33 				const char *name, uint32_t *value);
34 
35 TEE_Result TEE_GetPropertyAsU64(TEE_PropSetHandle propsetOrEnumerator,
36 				const char *name, uint64_t *value);
37 
38 TEE_Result TEE_GetPropertyAsBinaryBlock(TEE_PropSetHandle propsetOrEnumerator,
39 					const char *name, void *valueBuffer,
40 					size_t *valueBufferLen);
41 TEE_Result
42 __GP11_TEE_GetPropertyAsBinaryBlock(TEE_PropSetHandle propsetOrEnumerator,
43 				    const char *name, void *valueBuffer,
44 				    uint32_t *valueBufferLen);
45 
46 TEE_Result TEE_GetPropertyAsUUID(TEE_PropSetHandle propsetOrEnumerator,
47 				 const char *name, TEE_UUID *value);
48 
49 TEE_Result TEE_GetPropertyAsIdentity(TEE_PropSetHandle propsetOrEnumerator,
50 				     const char *name, TEE_Identity *value);
51 
52 TEE_Result TEE_AllocatePropertyEnumerator(TEE_PropSetHandle *enumerator);
53 
54 void TEE_FreePropertyEnumerator(TEE_PropSetHandle enumerator);
55 
56 void TEE_StartPropertyEnumerator(TEE_PropSetHandle enumerator,
57 				 TEE_PropSetHandle propSet);
58 
59 void TEE_ResetPropertyEnumerator(TEE_PropSetHandle enumerator);
60 
61 TEE_Result TEE_GetPropertyName(TEE_PropSetHandle enumerator,
62 			       void *nameBuffer, size_t *nameBufferLen);
63 TEE_Result __GP11_TEE_GetPropertyName(TEE_PropSetHandle enumerator,
64 				      void *nameBuffer,
65 				      uint32_t *nameBufferLen);
66 
67 TEE_Result TEE_GetNextProperty(TEE_PropSetHandle enumerator);
68 
69 /* System API - Misc */
70 
71 void TEE_Panic(TEE_Result panicCode);
72 
73 /* System API - Internal Client API */
74 
75 TEE_Result TEE_OpenTASession(const TEE_UUID *destination,
76 			     uint32_t cancellationRequestTimeout,
77 			     uint32_t paramTypes,
78 			     TEE_Param params[TEE_NUM_PARAMS],
79 			     TEE_TASessionHandle *session,
80 			     uint32_t *returnOrigin);
81 TEE_Result __GP11_TEE_OpenTASession(const TEE_UUID *destination,
82 				    uint32_t cancellationRequestTimeout,
83 				    uint32_t paramTypes,
84 				    __GP11_TEE_Param params[TEE_NUM_PARAMS],
85 				    TEE_TASessionHandle *session,
86 				    uint32_t *returnOrigin);
87 
88 void TEE_CloseTASession(TEE_TASessionHandle session);
89 
90 TEE_Result TEE_InvokeTACommand(TEE_TASessionHandle session,
91 			       uint32_t cancellationRequestTimeout,
92 			       uint32_t commandID, uint32_t paramTypes,
93 			       TEE_Param params[TEE_NUM_PARAMS],
94 			       uint32_t *returnOrigin);
95 TEE_Result __GP11_TEE_InvokeTACommand(TEE_TASessionHandle session,
96 				      uint32_t cancellationRequestTimeout,
97 				      uint32_t commandID, uint32_t paramTypes,
98 				      __GP11_TEE_Param params[TEE_NUM_PARAMS],
99 				      uint32_t *returnOrigin);
100 
101 /* System API - Cancellations */
102 
103 bool TEE_GetCancellationFlag(void);
104 
105 bool TEE_UnmaskCancellation(void);
106 
107 bool TEE_MaskCancellation(void);
108 
109 /* System API - Memory Management */
110 
111 TEE_Result TEE_CheckMemoryAccessRights(uint32_t accessFlags, void *buffer,
112 				       size_t size);
113 TEE_Result __GP11_TEE_CheckMemoryAccessRights(uint32_t accessFlags,
114 					      void *buffer, uint32_t size);
115 
116 void TEE_SetInstanceData(const void *instanceData);
117 
118 const void *TEE_GetInstanceData(void);
119 
120 void *TEE_Malloc(size_t size, uint32_t hint);
121 void *__GP11_TEE_Malloc(uint32_t size, uint32_t hint);
122 
123 void *TEE_Realloc(void *buffer, size_t newSize);
124 void *__GP11_TEE_Realloc(void *buffer, uint32_t newSize);
125 
126 void TEE_Free(void *buffer);
127 
128 void *TEE_MemMove(void *dest, const void *src, size_t size);
129 void *__GP11_TEE_MemMove(void *dest, const void *src, uint32_t size);
130 
131 /*
132  * Note: TEE_MemCompare() has a constant-time implementation (execution time
133  * does not depend on buffer content but only on buffer size). It is the main
134  * difference with memcmp().
135  */
136 int32_t TEE_MemCompare(const void *buffer1, const void *buffer2, size_t size);
137 int32_t __GP11_TEE_MemCompare(const void *buffer1, const void *buffer2,
138 			      uint32_t size);
139 
140 void TEE_MemFill(void *buff, uint32_t x, size_t size);
141 void __GP11_TEE_MemFill(void *buff, uint32_t x, uint32_t size);
142 
143 /* Data and Key Storage API  - Generic Object Functions */
144 
145 void TEE_GetObjectInfo(TEE_ObjectHandle object, TEE_ObjectInfo *objectInfo);
146 void __GP11_TEE_GetObjectInfo(TEE_ObjectHandle object,
147 			      __GP11_TEE_ObjectInfo *objectInfo);
148 
149 TEE_Result TEE_GetObjectInfo1(TEE_ObjectHandle object,
150 			      TEE_ObjectInfo *objectInfo);
151 TEE_Result __GP11_TEE_GetObjectInfo1(TEE_ObjectHandle object,
152 				     __GP11_TEE_ObjectInfo *objectInfo);
153 
154 void TEE_RestrictObjectUsage(TEE_ObjectHandle object, uint32_t objectUsage);
155 TEE_Result TEE_RestrictObjectUsage1(TEE_ObjectHandle object,
156 				    uint32_t objectUsage);
157 
158 TEE_Result TEE_GetObjectBufferAttribute(TEE_ObjectHandle object,
159 					uint32_t attributeID, void *buffer,
160 					size_t *size);
161 TEE_Result __GP11_TEE_GetObjectBufferAttribute(TEE_ObjectHandle object,
162 					       uint32_t attributeID,
163 					       void *buffer, uint32_t *size);
164 
165 TEE_Result TEE_GetObjectValueAttribute(TEE_ObjectHandle object,
166 				       uint32_t attributeID, uint32_t *a,
167 				       uint32_t *b);
168 
169 void TEE_CloseObject(TEE_ObjectHandle object);
170 
171 /* Data and Key Storage API  - Transient Object Functions */
172 
173 TEE_Result TEE_AllocateTransientObject(TEE_ObjectType objectType,
174 				       uint32_t maxObjectSize,
175 				       TEE_ObjectHandle *object);
176 TEE_Result __GP11_TEE_AllocateTransientObject(TEE_ObjectType objectType,
177 					      uint32_t maxKeySize,
178 					      TEE_ObjectHandle *object);
179 
180 void TEE_FreeTransientObject(TEE_ObjectHandle object);
181 
182 void TEE_ResetTransientObject(TEE_ObjectHandle object);
183 
184 TEE_Result TEE_PopulateTransientObject(TEE_ObjectHandle object,
185 				       const TEE_Attribute *attrs,
186 				       uint32_t attrCount);
187 TEE_Result __GP11_TEE_PopulateTransientObject(TEE_ObjectHandle object,
188 					      const __GP11_TEE_Attribute *attrs,
189 					      uint32_t attrCount);
190 
191 void TEE_InitRefAttribute(TEE_Attribute *attr, uint32_t attributeID,
192 			  const void *buffer, size_t length);
193 void __GP11_TEE_InitRefAttribute(__GP11_TEE_Attribute *attr,
194 				 uint32_t attributeID,
195 				 const void *buffer, uint32_t length);
196 
197 void TEE_InitValueAttribute(TEE_Attribute *attr, uint32_t attributeID,
198 			    uint32_t a, uint32_t b);
199 void __GP11_TEE_InitValueAttribute(__GP11_TEE_Attribute *attr,
200 				   uint32_t attributeID,
201 				   uint32_t a, uint32_t b);
202 
203 void TEE_CopyObjectAttributes(TEE_ObjectHandle destObject,
204 			      TEE_ObjectHandle srcObject);
205 
206 TEE_Result TEE_CopyObjectAttributes1(TEE_ObjectHandle destObject,
207 				     TEE_ObjectHandle srcObject);
208 
209 TEE_Result TEE_GenerateKey(TEE_ObjectHandle object, uint32_t keySize,
210 			   const TEE_Attribute *params, uint32_t paramCount);
211 TEE_Result __GP11_TEE_GenerateKey(TEE_ObjectHandle object, uint32_t keySize,
212 				  const __GP11_TEE_Attribute *params,
213 				  uint32_t paramCount);
214 
215 /* Data and Key Storage API  - Persistent Object Functions */
216 
217 TEE_Result TEE_OpenPersistentObject(uint32_t storageID, const void *objectID,
218 				    size_t objectIDLen, uint32_t flags,
219 				    TEE_ObjectHandle *object);
220 TEE_Result __GP11_TEE_OpenPersistentObject(uint32_t storageID,
221 					   const void *objectID,
222 					   uint32_t objectIDLen, uint32_t flags,
223 					   TEE_ObjectHandle *object);
224 
225 TEE_Result TEE_CreatePersistentObject(uint32_t storageID, const void *objectID,
226 				      size_t objectIDLen, uint32_t flags,
227 				      TEE_ObjectHandle attributes,
228 				      const void *initialData,
229 				      size_t initialDataLen,
230 				      TEE_ObjectHandle *object);
231 TEE_Result __GP11_TEE_CreatePersistentObject(uint32_t storageID,
232 					     const void *objectID,
233 					     uint32_t objectIDLen,
234 					     uint32_t flags,
235 					     TEE_ObjectHandle attributes,
236 					     const void *initialData,
237 					     uint32_t initialDataLen,
238 					     TEE_ObjectHandle *object);
239 
240 void TEE_CloseAndDeletePersistentObject(TEE_ObjectHandle object);
241 
242 TEE_Result TEE_CloseAndDeletePersistentObject1(TEE_ObjectHandle object);
243 
244 TEE_Result TEE_RenamePersistentObject(TEE_ObjectHandle object,
245 				      const void *newObjectID,
246 				      uint32_t newObjectIDLen);
247 
248 TEE_Result TEE_AllocatePersistentObjectEnumerator(TEE_ObjectEnumHandle *
249 						  objectEnumerator);
250 
251 void TEE_FreePersistentObjectEnumerator(TEE_ObjectEnumHandle objectEnumerator);
252 
253 void TEE_ResetPersistentObjectEnumerator(TEE_ObjectEnumHandle objectEnumerator);
254 
255 TEE_Result TEE_StartPersistentObjectEnumerator(TEE_ObjectEnumHandle
256 					       objectEnumerator,
257 					       uint32_t storageID);
258 
259 TEE_Result TEE_GetNextPersistentObject(TEE_ObjectEnumHandle objectEnumerator,
260 				       TEE_ObjectInfo *objectInfo,
261 				       void *objectID, uint32_t *objectIDLen);
262 TEE_Result
263 __GP11_TEE_GetNextPersistentObject(TEE_ObjectEnumHandle objectEnumerator,
264 				   __GP11_TEE_ObjectInfo *objectInfo,
265 				   void *objectID, uint32_t *objectIDLen);
266 
267 /* Data and Key Storage API  - Data Stream Access Functions */
268 
269 TEE_Result TEE_ReadObjectData(TEE_ObjectHandle object, void *buffer,
270 			      uint32_t size, uint32_t *count);
271 
272 TEE_Result TEE_WriteObjectData(TEE_ObjectHandle object, const void *buffer,
273 			       uint32_t size);
274 
275 TEE_Result TEE_TruncateObjectData(TEE_ObjectHandle object, uint32_t size);
276 
277 TEE_Result TEE_SeekObjectData(TEE_ObjectHandle object, int32_t offset,
278 			      TEE_Whence whence);
279 
280 /* Cryptographic Operations API - Generic Operation Functions */
281 
282 TEE_Result TEE_AllocateOperation(TEE_OperationHandle *operation,
283 				 uint32_t algorithm, uint32_t mode,
284 				 uint32_t maxKeySize);
285 
286 void TEE_FreeOperation(TEE_OperationHandle operation);
287 
288 void TEE_GetOperationInfo(TEE_OperationHandle operation,
289 			  TEE_OperationInfo *operationInfo);
290 
291 TEE_Result
292 TEE_GetOperationInfoMultiple(TEE_OperationHandle operation,
293 			     TEE_OperationInfoMultiple *operationInfoMultiple,
294 			     uint32_t *operationSize);
295 
296 void TEE_ResetOperation(TEE_OperationHandle operation);
297 
298 TEE_Result TEE_SetOperationKey(TEE_OperationHandle operation,
299 			       TEE_ObjectHandle key);
300 
301 TEE_Result TEE_SetOperationKey2(TEE_OperationHandle operation,
302 				TEE_ObjectHandle key1, TEE_ObjectHandle key2);
303 
304 void TEE_CopyOperation(TEE_OperationHandle dstOperation,
305 		       TEE_OperationHandle srcOperation);
306 
307 TEE_Result TEE_IsAlgorithmSupported(uint32_t algId, uint32_t element);
308 
309 /* Cryptographic Operations API - Message Digest Functions */
310 
311 void TEE_DigestUpdate(TEE_OperationHandle operation,
312 		      const void *chunk, uint32_t chunkSize);
313 
314 TEE_Result TEE_DigestDoFinal(TEE_OperationHandle operation, const void *chunk,
315 			     uint32_t chunkLen, void *hash, uint32_t *hashLen);
316 
317 /* Cryptographic Operations API - Symmetric Cipher Functions */
318 
319 void TEE_CipherInit(TEE_OperationHandle operation, const void *IV,
320 		    uint32_t IVLen);
321 
322 TEE_Result TEE_CipherUpdate(TEE_OperationHandle operation, const void *srcData,
323 			    uint32_t srcLen, void *destData, uint32_t *destLen);
324 
325 TEE_Result TEE_CipherDoFinal(TEE_OperationHandle operation,
326 			     const void *srcData, uint32_t srcLen,
327 			     void *destData, uint32_t *destLen);
328 
329 /* Cryptographic Operations API - MAC Functions */
330 
331 void TEE_MACInit(TEE_OperationHandle operation, const void *IV,
332 		 uint32_t IVLen);
333 
334 void TEE_MACUpdate(TEE_OperationHandle operation, const void *chunk,
335 		   uint32_t chunkSize);
336 
337 TEE_Result TEE_MACComputeFinal(TEE_OperationHandle operation,
338 			       const void *message, uint32_t messageLen,
339 			       void *mac, uint32_t *macLen);
340 
341 TEE_Result TEE_MACCompareFinal(TEE_OperationHandle operation,
342 			       const void *message, uint32_t messageLen,
343 			       const void *mac, uint32_t macLen);
344 
345 /* Cryptographic Operations API - Authenticated Encryption Functions */
346 
347 TEE_Result TEE_AEInit(TEE_OperationHandle operation, const void *nonce,
348 		      uint32_t nonceLen, uint32_t tagLen, uint32_t AADLen,
349 		      uint32_t payloadLen);
350 
351 void TEE_AEUpdateAAD(TEE_OperationHandle operation, const void *AADdata,
352 		     uint32_t AADdataLen);
353 
354 TEE_Result TEE_AEUpdate(TEE_OperationHandle operation, const void *srcData,
355 			uint32_t srcLen, void *destData, uint32_t *destLen);
356 
357 TEE_Result TEE_AEEncryptFinal(TEE_OperationHandle operation,
358 			      const void *srcData, uint32_t srcLen,
359 			      void *destData, uint32_t *destLen, void *tag,
360 			      uint32_t *tagLen);
361 
362 TEE_Result TEE_AEDecryptFinal(TEE_OperationHandle operation,
363 			      const void *srcData, uint32_t srcLen,
364 			      void *destData, uint32_t *destLen, void *tag,
365 			      uint32_t tagLen);
366 
367 /* Cryptographic Operations API - Asymmetric Functions */
368 
369 TEE_Result TEE_AsymmetricEncrypt(TEE_OperationHandle operation,
370 				 const TEE_Attribute *params,
371 				 uint32_t paramCount, const void *srcData,
372 				 uint32_t srcLen, void *destData,
373 				 uint32_t *destLen);
374 TEE_Result __GP11_TEE_AsymmetricEncrypt(TEE_OperationHandle operation,
375 					const __GP11_TEE_Attribute *params,
376 					uint32_t paramCount,
377 					const void *srcData, uint32_t srcLen,
378 					void *destData, uint32_t *destLen);
379 
380 TEE_Result TEE_AsymmetricDecrypt(TEE_OperationHandle operation,
381 				 const TEE_Attribute *params,
382 				 uint32_t paramCount, const void *srcData,
383 				 uint32_t srcLen, void *destData,
384 				 uint32_t *destLen);
385 TEE_Result __GP11_TEE_AsymmetricDecrypt(TEE_OperationHandle operation,
386 					const __GP11_TEE_Attribute *params,
387 					uint32_t paramCount,
388 					const void *srcData, uint32_t srcLen,
389 					void *destData, uint32_t *destLen);
390 
391 TEE_Result TEE_AsymmetricSignDigest(TEE_OperationHandle operation,
392 				    const TEE_Attribute *params,
393 				    uint32_t paramCount, const void *digest,
394 				    uint32_t digestLen, void *signature,
395 				    uint32_t *signatureLen);
396 TEE_Result __GP11_TEE_AsymmetricSignDigest(TEE_OperationHandle operation,
397 					   const __GP11_TEE_Attribute *params,
398 					   uint32_t paramCount,
399 					   const void *digest,
400 					   uint32_t digestLen, void *signature,
401 					   uint32_t *signatureLen);
402 
403 TEE_Result TEE_AsymmetricVerifyDigest(TEE_OperationHandle operation,
404 				      const TEE_Attribute *params,
405 				      uint32_t paramCount, const void *digest,
406 				      uint32_t digestLen, const void *signature,
407 				      uint32_t signatureLen);
408 TEE_Result __GP11_TEE_AsymmetricVerifyDigest(TEE_OperationHandle operation,
409 					     const __GP11_TEE_Attribute *params,
410 					     uint32_t paramCount,
411 					     const void *digest,
412 					     uint32_t digestLen,
413 					     const void *signature,
414 					     uint32_t signatureLen);
415 
416 /* Cryptographic Operations API - Key Derivation Functions */
417 
418 void TEE_DeriveKey(TEE_OperationHandle operation,
419 		   const TEE_Attribute *params, uint32_t paramCount,
420 		   TEE_ObjectHandle derivedKey);
421 void __GP11_TEE_DeriveKey(TEE_OperationHandle operation,
422 			  const __GP11_TEE_Attribute *params,
423 			  uint32_t paramCount, TEE_ObjectHandle derivedKey);
424 
425 /* Cryptographic Operations API - Random Number Generation Functions */
426 
427 void TEE_GenerateRandom(void *randomBuffer, uint32_t randomBufferLen);
428 
429 /* Date & Time API */
430 
431 void TEE_GetSystemTime(TEE_Time *time);
432 
433 TEE_Result TEE_Wait(uint32_t timeout);
434 
435 TEE_Result TEE_GetTAPersistentTime(TEE_Time *time);
436 
437 TEE_Result TEE_SetTAPersistentTime(const TEE_Time *time);
438 
439 void TEE_GetREETime(TEE_Time *time);
440 
441 /* TEE Arithmetical API - Memory allocation and size of objects */
442 
443 uint32_t TEE_BigIntFMMSizeInU32(uint32_t modulusSizeInBits);
444 
445 uint32_t TEE_BigIntFMMContextSizeInU32(uint32_t modulusSizeInBits);
446 
447 /* TEE Arithmetical API - Initialization functions */
448 
449 void TEE_BigIntInit(TEE_BigInt *bigInt, uint32_t len);
450 
451 void TEE_BigIntInitFMMContext(TEE_BigIntFMMContext *context, uint32_t len,
452 			      const TEE_BigInt *modulus);
453 
454 void TEE_BigIntInitFMM(TEE_BigIntFMM *bigIntFMM, uint32_t len);
455 
456 /* TEE Arithmetical API - Converter functions */
457 
458 TEE_Result TEE_BigIntConvertFromOctetString(TEE_BigInt *dest,
459 					    const uint8_t *buffer,
460 					    uint32_t bufferLen,
461 					    int32_t sign);
462 
463 TEE_Result TEE_BigIntConvertToOctetString(uint8_t *buffer, uint32_t *bufferLen,
464 					  const TEE_BigInt *bigInt);
465 
466 void TEE_BigIntConvertFromS32(TEE_BigInt *dest, int32_t shortVal);
467 
468 TEE_Result TEE_BigIntConvertToS32(int32_t *dest, const TEE_BigInt *src);
469 
470 /* TEE Arithmetical API - Logical operations */
471 
472 int32_t TEE_BigIntCmp(const TEE_BigInt *op1, const TEE_BigInt *op2);
473 
474 int32_t TEE_BigIntCmpS32(const TEE_BigInt *op, int32_t shortVal);
475 
476 void TEE_BigIntShiftRight(TEE_BigInt *dest, const TEE_BigInt *op,
477 			  size_t bits);
478 
479 bool TEE_BigIntGetBit(const TEE_BigInt *src, uint32_t bitIndex);
480 
481 uint32_t TEE_BigIntGetBitCount(const TEE_BigInt *src);
482 
483 void TEE_BigIntAdd(TEE_BigInt *dest, const TEE_BigInt *op1,
484 		   const TEE_BigInt *op2);
485 
486 void TEE_BigIntSub(TEE_BigInt *dest, const TEE_BigInt *op1,
487 		   const TEE_BigInt *op2);
488 
489 void TEE_BigIntNeg(TEE_BigInt *dest, const TEE_BigInt *op);
490 
491 void TEE_BigIntMul(TEE_BigInt *dest, const TEE_BigInt *op1,
492 		   const TEE_BigInt *op2);
493 
494 void TEE_BigIntSquare(TEE_BigInt *dest, const TEE_BigInt *op);
495 
496 void TEE_BigIntDiv(TEE_BigInt *dest_q, TEE_BigInt *dest_r,
497 		   const TEE_BigInt *op1, const TEE_BigInt *op2);
498 
499 /* TEE Arithmetical API - Modular arithmetic operations */
500 
501 void TEE_BigIntMod(TEE_BigInt *dest, const TEE_BigInt *op,
502 		   const TEE_BigInt *n);
503 
504 void TEE_BigIntAddMod(TEE_BigInt *dest, const TEE_BigInt *op1,
505 		      const TEE_BigInt *op2, const TEE_BigInt *n);
506 
507 void TEE_BigIntSubMod(TEE_BigInt *dest, const TEE_BigInt *op1,
508 		      const TEE_BigInt *op2, const TEE_BigInt *n);
509 
510 void TEE_BigIntMulMod(TEE_BigInt *dest, const  TEE_BigInt *op1,
511 		      const TEE_BigInt *op2, const TEE_BigInt *n);
512 
513 void TEE_BigIntSquareMod(TEE_BigInt *dest, const TEE_BigInt *op,
514 			 const TEE_BigInt *n);
515 
516 void TEE_BigIntInvMod(TEE_BigInt *dest, const TEE_BigInt *op,
517 		      const TEE_BigInt *n);
518 
519 /* TEE Arithmetical API - Other arithmetic operations */
520 
521 bool TEE_BigIntRelativePrime(const TEE_BigInt *op1, const TEE_BigInt *op2);
522 
523 void TEE_BigIntComputeExtendedGcd(TEE_BigInt *gcd, TEE_BigInt *u,
524 				  TEE_BigInt *v, const TEE_BigInt *op1,
525 				  const TEE_BigInt *op2);
526 
527 int32_t TEE_BigIntIsProbablePrime(const TEE_BigInt *op,
528 				  uint32_t confidenceLevel);
529 
530 /* TEE Arithmetical API - Fast modular multiplication operations */
531 
532 void TEE_BigIntConvertToFMM(TEE_BigIntFMM *dest, const TEE_BigInt *src,
533 			    const TEE_BigInt *n,
534 			    const TEE_BigIntFMMContext *context);
535 
536 void TEE_BigIntConvertFromFMM(TEE_BigInt *dest, const TEE_BigIntFMM *src,
537 			      const TEE_BigInt *n,
538 			      const TEE_BigIntFMMContext *context);
539 
540 void TEE_BigIntFMMConvertToBigInt(TEE_BigInt *dest, const TEE_BigIntFMM *src,
541 				  const TEE_BigInt *n,
542 				  const TEE_BigIntFMMContext *context);
543 
544 void TEE_BigIntComputeFMM(TEE_BigIntFMM *dest, const TEE_BigIntFMM *op1,
545 			  const TEE_BigIntFMM *op2, const TEE_BigInt *n,
546 			  const TEE_BigIntFMMContext *context);
547 
548 #define TA_EXPORT
549 
550 /*
551  * TA Interface
552  *
553  * Each Trusted Application must provide the Implementation with a number
554  * of functions, collectively called the “TA interface”. These functions
555  * are the entry points called by the Trusted Core Framework to create the
556  * instance, notify the instance that a new client is connecting, notify
557  * the instance when the client invokes a command, etc.
558  *
559  * Trusted Application Entry Points:
560  */
561 
562 /*
563  * The function TA_CreateEntryPoint is the Trusted Application's
564  * constructor, which the Framework calls when it creates a new instance of
565  * the Trusted Application. To register instance data, the implementation
566  * of this constructor can use either global variables or the function
567  * TEE_InstanceSetData.
568  *
569  * Return Value:
570  * - TEE_SUCCESS: if the instance is successfully created, the function
571  *   must return TEE_SUCCESS.
572  * - Any other value: if any other code is returned the instance is not
573  *   created, and no other entry points of this instance will be called.
574  *   The Framework MUST reclaim all resources and dereference all objects
575  *   related to the creation of the instance.
576  *
577  *   If this entry point was called as a result of a client opening a
578  *   session, the error code is returned to the client and the session is
579  *   not opened.
580  */
581 TEE_Result TA_EXPORT TA_CreateEntryPoint(void);
582 
583 /*
584  * The function TA_DestroyEntryPoint is the Trusted Application‟s
585  * destructor, which the Framework calls when the instance is being
586  * destroyed.
587  *
588  * When the function TA_DestroyEntryPoint is called, the Framework
589  * guarantees that no client session is currently open. Once the call to
590  * TA_DestroyEntryPoint has been completed, no other entry point of this
591  * instance will ever be called.
592  *
593  * Note that when this function is called, all resources opened by the
594  * instance are still available. It is only after the function returns that
595  * the Implementation MUST start automatically reclaiming resources left
596  * opened.
597  *
598  * Return Value:
599  * This function can return no success or error code. After this function
600  * returns the Implementation MUST consider the instance destroyed and
601  * reclaims all resources left open by the instance.
602  */
603 void TA_EXPORT TA_DestroyEntryPoint(void);
604 
605 /*
606  * The Framework calls the function TA_OpenSessionEntryPoint when a client
607  * requests to open a session with the Trusted Application. The open
608  * session request may result in a new Trusted Application instance being
609  * created as defined in section 4.5.
610  *
611  * The client can specify parameters in an open operation which are passed
612  * to the Trusted Application instance in the arguments paramTypes and
613  * params. These arguments can also be used by the Trusted Application
614  * instance to transfer response data back to the client. See section 4.3.6
615  * for a specification of how to handle the operation parameters.
616  *
617  * If this function returns TEE_SUCCESS, the client is connected to a
618  * Trusted Application instance and can invoke Trusted Application
619  * commands. When the client disconnects, the Framework will eventually
620  * call the TA_CloseSessionEntryPoint entry point.
621  *
622  * If the function returns any error, the Framework rejects the connection
623  * and returns the error code and the current content of the parameters the
624  * client. The return origin is then set to TEE_ORIGIN_TRUSTED_APP.
625  *
626  * The Trusted Application instance can register a session data pointer by
627  * setting *psessionContext. The value of this pointer is not interpreted
628  * by the Framework, and is simply passed back to other TA_ functions
629  * within this session. Note that *sessionContext may be set with a pointer
630  * to a memory allocated by the Trusted Application instance or with
631  * anything else, like an integer, a handle etc. The Framework will not
632  * automatically free *sessionContext when the session is closed; the
633  * Trusted Application instance is responsible for freeing memory if
634  * required.
635  *
636  * During the call to TA_OpenSessionEntryPoint the client may request to
637  * cancel the operation. See section 4.10 for more details on
638  * cancellations. If the call to TA_OpenSessionEntryPoint returns
639  * TEE_SUCCESS, the client must consider the session as successfully opened
640  * and explicitly close it if necessary.
641  *
642  * Parameters:
643  * - paramTypes: the types of the four parameters.
644  * - params: a pointer to an array of four parameters.
645  * - sessionContext: A pointer to a variable that can be filled by the
646  *   Trusted Application instance with an opaque void* data pointer
647  *
648  * Return Value:
649  * - TEE_SUCCESS if the session is successfully opened.
650  * - Any other value if the session could not be open.
651  *   o The error code may be one of the pre-defined codes, or may be a new
652  *     error code defined by the Trusted Application implementation itself.
653  */
654 TEE_Result TA_EXPORT TA_OpenSessionEntryPoint(uint32_t paramTypes,
655 					      TEE_Param params[TEE_NUM_PARAMS],
656 					      void **sessionContext);
657 TEE_Result TA_EXPORT
658 __GP11_TA_OpenSessionEntryPoint(uint32_t paramTypes,
659 				__GP11_TEE_Param params[TEE_NUM_PARAMS],
660 				void **sessionContext);
661 
662 /*
663  * The Framework calls this function to close a client session. During the
664  * call to this function the implementation can use any session functions.
665  *
666  * The Trusted Application implementation is responsible for freeing any
667  * resources consumed by the session being closed. Note that the Trusted
668  * Application cannot refuse to close a session, but can hold the closing
669  * until it returns from TA_CloseSessionEntryPoint. This is why this
670  * function cannot return an error code.
671  *
672  * Parameters:
673  * - sessionContext: The value of the void* opaque data pointer set by the
674  *   Trusted Application in the function TA_OpenSessionEntryPoint for this
675  *   session.
676  */
677 void TA_EXPORT TA_CloseSessionEntryPoint(void *sessionContext);
678 
679 /*
680  * The Framework calls this function when the client invokes a command
681  * within the given session.
682  *
683  * The Trusted Application can access the parameters sent by the client
684  * through the paramTypes and params arguments. It can also use these
685  * arguments to transfer response data back to the client.
686  *
687  * During the call to TA_InvokeCommandEntryPoint the client may request to
688  * cancel the operation.
689  *
690  * A command is always invoked within the context of a client session.
691  * Thus, any session function  can be called by the command implementation.
692  *
693  * Parameter:
694  * - sessionContext: The value of the void* opaque data pointer set by the
695  *   Trusted Application in the function TA_OpenSessionEntryPoint.
696  * - commandID: A Trusted Application-specific code that identifies the
697  *   command to be invoked.
698  * - paramTypes: the types of the four parameters.
699  * - params: a pointer to an array of four parameters.
700  *
701  * Return Value:
702  * - TEE_SUCCESS: if the command is successfully executed, the function
703  *   must return this value.
704  * - Any other value: if the invocation of the command fails for any
705  *   reason.
706  *   o The error code may be one of the pre-defined codes, or may be a new
707  *     error code defined by the Trusted Application implementation itself.
708  */
709 
710 TEE_Result TA_EXPORT
711 TA_InvokeCommandEntryPoint(void *sessionContext, uint32_t commandID,
712 			   uint32_t paramTypes,
713 			   TEE_Param params[TEE_NUM_PARAMS]);
714 TEE_Result TA_EXPORT
715 __GP11_TA_InvokeCommandEntryPoint(void *sessionContext, uint32_t commandID,
716 				  uint32_t paramTypes,
717 				  __GP11_TEE_Param params[TEE_NUM_PARAMS]);
718 
719 /*
720  * Matching Client Functions <--> TA Functions
721  *
722  * TEE_OpenSession or TEE_OpenTASession:
723  * If a new Trusted Application instance is needed to handle the session,
724  * TA_CreateEntryPoint is called.
725  * Then, TA_OpenSessionEntryPoint is called.
726  *
727  * TEE_InvokeCommand or TEE_InvokeTACommand:
728  * TA_InvokeCommandEntryPoint is called.
729  *
730  * TEE_CloseSession or TEE_CloseTASession:
731  * TA_CloseSessionEntryPoint is called.
732  * For a multi-instance TA or for a single-instance, non keep-alive TA, if
733  * the session closed was the last session on the instance, then
734  * TA_DestroyEntryPoint is called. Otherwise, the instance is kept until
735  * the TEE shuts down.
736  */
737 
738 #include <tee_api_compat.h>
739 
740 #endif /*TEE_INTERNAL_API_H*/
741