1 /* 2 * Copyright (c) 2015-2020, ARM Limited and Contributors. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #ifndef TBBR_OID_H 8 #define TBBR_OID_H 9 10 /* 11 * The following is a list of OID values defined and reserved by ARM, which 12 * are used to define the extension fields of the certificate structure, as 13 * defined in the Trusted Board Boot Requirements (TBBR) specification, 14 * ARM DEN0006C-1. 15 */ 16 17 18 /* TrustedFirmwareNVCounter - Non-volatile counter extension */ 19 #define TRUSTED_FW_NVCOUNTER_OID "1.3.6.1.4.1.4128.2100.1" 20 /* NonTrustedFirmwareNVCounter - Non-volatile counter extension */ 21 #define NON_TRUSTED_FW_NVCOUNTER_OID "1.3.6.1.4.1.4128.2100.2" 22 23 24 /* 25 * Non-Trusted Firmware Updater Certificate 26 */ 27 28 /* APFirmwareUpdaterConfigHash - BL2U */ 29 #define AP_FWU_CFG_HASH_OID "1.3.6.1.4.1.4128.2100.101" 30 /* SCPFirmwareUpdaterConfigHash - SCP_BL2U */ 31 #define SCP_FWU_CFG_HASH_OID "1.3.6.1.4.1.4128.2100.102" 32 /* FirmwareUpdaterHash - NS_BL2U */ 33 #define FWU_HASH_OID "1.3.6.1.4.1.4128.2100.103" 34 /* TrustedWatchdogRefreshTime */ 35 #define TRUSTED_WATCHDOG_TIME_OID "1.3.6.1.4.1.4128.2100.104" 36 37 38 /* 39 * Trusted Boot Firmware Certificate 40 */ 41 42 /* TrustedBootFirmwareHash - BL2 */ 43 #define TRUSTED_BOOT_FW_HASH_OID "1.3.6.1.4.1.4128.2100.201" 44 #define TRUSTED_BOOT_FW_CONFIG_HASH_OID "1.3.6.1.4.1.4128.2100.202" 45 #define HW_CONFIG_HASH_OID "1.3.6.1.4.1.4128.2100.203" 46 #define FW_CONFIG_HASH_OID "1.3.6.1.4.1.4128.2100.204" 47 48 /* 49 * Trusted Key Certificate 50 */ 51 52 /* PrimaryDebugCertificatePK */ 53 #define PRIMARY_DEBUG_PK_OID "1.3.6.1.4.1.4128.2100.301" 54 /* TrustedWorldPK */ 55 #define TRUSTED_WORLD_PK_OID "1.3.6.1.4.1.4128.2100.302" 56 /* NonTrustedWorldPK */ 57 #define NON_TRUSTED_WORLD_PK_OID "1.3.6.1.4.1.4128.2100.303" 58 59 60 /* 61 * Trusted Debug Certificate 62 */ 63 64 /* DebugScenario */ 65 #define TRUSTED_DEBUG_SCENARIO_OID "1.3.6.1.4.1.4128.2100.401" 66 /* SoC Specific */ 67 #define TRUSTED_DEBUG_SOC_SPEC_OID "1.3.6.1.4.1.4128.2100.402" 68 /* SecondaryDebugCertPK */ 69 #define SECONDARY_DEBUG_PK_OID "1.3.6.1.4.1.4128.2100.403" 70 71 72 /* 73 * SoC Firmware Key Certificate 74 */ 75 76 /* SoCFirmwareContentCertPK */ 77 #define SOC_FW_CONTENT_CERT_PK_OID "1.3.6.1.4.1.4128.2100.501" 78 79 /* 80 * SoC Firmware Content Certificate 81 */ 82 83 /* APRomPatchHash - BL1_PATCH */ 84 #define APROM_PATCH_HASH_OID "1.3.6.1.4.1.4128.2100.601" 85 /* SoCConfigHash */ 86 #define SOC_CONFIG_HASH_OID "1.3.6.1.4.1.4128.2100.602" 87 /* SoCAPFirmwareHash - BL31 */ 88 #define SOC_AP_FW_HASH_OID "1.3.6.1.4.1.4128.2100.603" 89 /* SoCFirmwareConfigHash = SOC_FW_CONFIG */ 90 #define SOC_FW_CONFIG_HASH_OID "1.3.6.1.4.1.4128.2100.604" 91 92 /* 93 * SCP Firmware Key Certificate 94 */ 95 96 /* SCPFirmwareContentCertPK */ 97 #define SCP_FW_CONTENT_CERT_PK_OID "1.3.6.1.4.1.4128.2100.701" 98 99 100 /* 101 * SCP Firmware Content Certificate 102 */ 103 104 /* SCPFirmwareHash - SCP_BL2 */ 105 #define SCP_FW_HASH_OID "1.3.6.1.4.1.4128.2100.801" 106 /* SCPRomPatchHash - SCP_BL1_PATCH */ 107 #define SCP_ROM_PATCH_HASH_OID "1.3.6.1.4.1.4128.2100.802" 108 109 110 /* 111 * Trusted OS Firmware Key Certificate 112 */ 113 114 /* TrustedOSFirmwareContentCertPK */ 115 #define TRUSTED_OS_FW_CONTENT_CERT_PK_OID "1.3.6.1.4.1.4128.2100.901" 116 117 118 /* 119 * Trusted OS Firmware Content Certificate 120 */ 121 122 /* TrustedOSFirmwareHash - BL32 */ 123 #define TRUSTED_OS_FW_HASH_OID "1.3.6.1.4.1.4128.2100.1001" 124 /* TrustedOSExtra1FirmwareHash - BL32 Extra1 */ 125 #define TRUSTED_OS_FW_EXTRA1_HASH_OID "1.3.6.1.4.1.4128.2100.1002" 126 /* TrustedOSExtra2FirmwareHash - BL32 Extra2 */ 127 #define TRUSTED_OS_FW_EXTRA2_HASH_OID "1.3.6.1.4.1.4128.2100.1003" 128 /* TrustedOSFirmwareConfigHash - TOS_FW_CONFIG */ 129 #define TRUSTED_OS_FW_CONFIG_HASH_OID "1.3.6.1.4.1.4128.2100.1004" 130 131 132 /* 133 * Non-Trusted Firmware Key Certificate 134 */ 135 136 /* NonTrustedFirmwareContentCertPK */ 137 #define NON_TRUSTED_FW_CONTENT_CERT_PK_OID "1.3.6.1.4.1.4128.2100.1101" 138 139 140 /* 141 * Non-Trusted Firmware Content Certificate 142 */ 143 144 /* NonTrustedWorldBootloaderHash - BL33 */ 145 #define NON_TRUSTED_WORLD_BOOTLOADER_HASH_OID "1.3.6.1.4.1.4128.2100.1201" 146 /* NonTrustedFirmwareConfigHash - NT_FW_CONFIG */ 147 #define NON_TRUSTED_FW_CONFIG_HASH_OID "1.3.6.1.4.1.4128.2100.1202" 148 149 /* 150 * Secure Partitions Content Certificate 151 */ 152 #define SP_PKG1_HASH_OID "1.3.6.1.4.1.4128.2100.1301" 153 #define SP_PKG2_HASH_OID "1.3.6.1.4.1.4128.2100.1302" 154 #define SP_PKG3_HASH_OID "1.3.6.1.4.1.4128.2100.1303" 155 #define SP_PKG4_HASH_OID "1.3.6.1.4.1.4128.2100.1304" 156 #define SP_PKG5_HASH_OID "1.3.6.1.4.1.4128.2100.1305" 157 #define SP_PKG6_HASH_OID "1.3.6.1.4.1.4128.2100.1306" 158 #define SP_PKG7_HASH_OID "1.3.6.1.4.1.4128.2100.1307" 159 #define SP_PKG8_HASH_OID "1.3.6.1.4.1.4128.2100.1308" 160 161 #endif /* TBBR_OID_H */ 162