1 /* 2 * Copyright 2021 NXP 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 * 6 */ 7 8 #include <errno.h> 9 #include <stdbool.h> 10 #include <stdint.h> 11 #include <stdio.h> 12 #include <stdlib.h> 13 #include <string.h> 14 15 #include "caam.h" 16 #include <common/debug.h> 17 #include "jobdesc.h" 18 #include "sec_hw_specific.h" 19 20 21 /* Callback function after Instantiation descriptor is submitted to SEC 22 */ 23 static void blob_done(uint32_t *desc, uint32_t status, void *arg, 24 void *job_ring) 25 { 26 INFO("Blob Desc SUCCESS with status %x\n", status); 27 } 28 29 /* @brief Submit descriptor to create blob 30 * @retval 0 on success 31 * @retval -1 on error 32 */ 33 int get_hw_unq_key_blob_hw(uint8_t *hw_key, int size) 34 { 35 int ret = 0; 36 int i = 0; 37 38 uint32_t key_sz = KEY_IDNFR_SZ_BYTES; 39 uint8_t key_data[KEY_IDNFR_SZ_BYTES]; 40 uint8_t in_data[16]; 41 uint8_t out_data[16 + KEY_BLOB_SIZE + MAC_SIZE]; 42 struct job_descriptor desc __aligned(CACHE_WRITEBACK_GRANULE); 43 struct job_descriptor *jobdesc = &desc; 44 uint32_t in_sz = 16U; 45 46 /* Output blob will have 32 bytes key blob in beginning and 47 * 16 byte HMAC identifier at end of data blob 48 */ 49 uint32_t out_sz = in_sz + KEY_BLOB_SIZE + MAC_SIZE; 50 51 uint32_t operation = CMD_OPERATION | OP_TYPE_ENCAP_PROTOCOL | 52 OP_PCLID_BLOB | BLOB_PROTO_INFO; 53 54 memset(key_data, 0xff, KEY_IDNFR_SZ_BYTES); 55 memset(in_data, 0x00, in_sz); 56 memset(out_data, 0x00, in_sz); 57 58 jobdesc->arg = NULL; 59 jobdesc->callback = blob_done; 60 61 INFO("\nGenerating Master Key Verification Blob.\n"); 62 63 /* Create the hw_rng descriptor */ 64 ret = cnstr_hw_encap_blob_jobdesc(jobdesc->desc, key_data, key_sz, 65 CLASS_2, in_data, in_sz, out_data, 66 out_sz, operation); 67 68 /* Finally, generate the blob. */ 69 ret = run_descriptor_jr(jobdesc); 70 if (ret != 0) { 71 ERROR("Error in running hw unq key blob descriptor\n"); 72 return -1; 73 } 74 /* Copying alternate bytes of the Master Key Verification Blob. 75 */ 76 for (i = 0; i < size; i++) { 77 hw_key[i] = out_data[2 * i]; 78 } 79 80 return ret; 81 } 82