1 /* 2 * Copyright (c) 2021-2022, Arm Limited. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #include <stdint.h> 8 9 #include <drivers/measured_boot/event_log/event_log.h> 10 #include <drivers/measured_boot/rss/rss_measured_boot.h> 11 #include <tools_share/tbbr_oid.h> 12 #include <fvp_critical_data.h> 13 14 #include <plat/arm/common/plat_arm.h> 15 #include <plat/common/common_def.h> 16 17 /* Event Log data */ 18 static uint64_t event_log_base; 19 20 /* FVP table with platform specific image IDs, names and PCRs */ 21 const event_log_metadata_t fvp_event_log_metadata[] = { 22 { BL31_IMAGE_ID, EVLOG_BL31_STRING, PCR_0 }, 23 { BL32_IMAGE_ID, EVLOG_BL32_STRING, PCR_0 }, 24 { BL32_EXTRA1_IMAGE_ID, EVLOG_BL32_EXTRA1_STRING, PCR_0 }, 25 { BL32_EXTRA2_IMAGE_ID, EVLOG_BL32_EXTRA2_STRING, PCR_0 }, 26 { BL33_IMAGE_ID, EVLOG_BL33_STRING, PCR_0 }, 27 { HW_CONFIG_ID, EVLOG_HW_CONFIG_STRING, PCR_0 }, 28 { NT_FW_CONFIG_ID, EVLOG_NT_FW_CONFIG_STRING, PCR_0 }, 29 { SCP_BL2_IMAGE_ID, EVLOG_SCP_BL2_STRING, PCR_0 }, 30 { SOC_FW_CONFIG_ID, EVLOG_SOC_FW_CONFIG_STRING, PCR_0 }, 31 { TOS_FW_CONFIG_ID, EVLOG_TOS_FW_CONFIG_STRING, PCR_0 }, 32 { RMM_IMAGE_ID, EVLOG_RMM_STRING, PCR_0}, 33 34 { CRITICAL_DATA_ID, EVLOG_CRITICAL_DATA_STRING, PCR_1 }, 35 36 { EVLOG_INVALID_ID, NULL, (unsigned int)(-1) } /* Terminator */ 37 }; 38 39 /* FVP table with platform specific image IDs and metadata. Intentionally not a 40 * const struct, some members might set by bootloaders during trusted boot. 41 */ 42 struct rss_mboot_metadata fvp_rss_mboot_metadata[] = { 43 { 44 .id = BL31_IMAGE_ID, 45 .slot = U(9), 46 .signer_id_size = SIGNER_ID_MIN_SIZE, 47 .sw_type = RSS_MBOOT_BL31_STRING, 48 .lock_measurement = true }, 49 { 50 .id = HW_CONFIG_ID, 51 .slot = U(10), 52 .signer_id_size = SIGNER_ID_MIN_SIZE, 53 .sw_type = RSS_MBOOT_HW_CONFIG_STRING, 54 .lock_measurement = true }, 55 { 56 .id = SOC_FW_CONFIG_ID, 57 .slot = U(11), 58 .signer_id_size = SIGNER_ID_MIN_SIZE, 59 .sw_type = RSS_MBOOT_SOC_FW_CONFIG_STRING, 60 .lock_measurement = true }, 61 { 62 .id = RMM_IMAGE_ID, 63 .slot = U(12), 64 .signer_id_size = SIGNER_ID_MIN_SIZE, 65 .sw_type = RSS_MBOOT_RMM_STRING, 66 .lock_measurement = true }, 67 { 68 .id = RSS_MBOOT_INVALID_ID } 69 }; 70 71 void bl2_plat_mboot_init(void) 72 { 73 uint8_t *event_log_start; 74 uint8_t *event_log_finish; 75 size_t bl1_event_log_size; 76 int rc; 77 78 rc = arm_get_tb_fw_info(&event_log_base, &bl1_event_log_size); 79 if (rc != 0) { 80 ERROR("%s(): Unable to get Event Log info from TB_FW_CONFIG\n", 81 __func__); 82 /* 83 * It is a fatal error because on FVP platform, BL2 software 84 * assumes that a valid Event Log buffer exist and it will use 85 * same Event Log buffer to append image measurements. 86 */ 87 panic(); 88 } 89 90 /* 91 * BL1 and BL2 share the same Event Log buffer and that BL2 will 92 * append its measurements after BL1's 93 */ 94 event_log_start = (uint8_t *)((uintptr_t)event_log_base + 95 bl1_event_log_size); 96 event_log_finish = (uint8_t *)((uintptr_t)event_log_base + 97 PLAT_ARM_EVENT_LOG_MAX_SIZE); 98 99 event_log_init((uint8_t *)event_log_start, event_log_finish); 100 101 rss_measured_boot_init(); 102 } 103 104 int plat_mboot_measure_critical_data(unsigned int critical_data_id, 105 const void *base, size_t size) 106 { 107 /* 108 * It is very unlikely that the critical data size would be 109 * bigger than 2^32 bytes 110 */ 111 assert(size < UINT32_MAX); 112 assert(base != NULL); 113 114 /* Calculate image hash and record data in Event Log */ 115 int err = event_log_measure_and_record((uintptr_t)base, (uint32_t)size, 116 critical_data_id); 117 if (err != 0) { 118 ERROR("%s%s critical data (%i)\n", 119 "Failed to ", "record", err); 120 return err; 121 } 122 123 return 0; 124 } 125 126 #if TRUSTED_BOARD_BOOT 127 static int fvp_populate_critical_data(struct fvp_critical_data *critical_data) 128 { 129 char *nv_ctr_oids[MAX_NV_CTR_IDS] = { 130 [TRUSTED_NV_CTR_ID] = TRUSTED_FW_NVCOUNTER_OID, 131 [NON_TRUSTED_NV_CTR_ID] = NON_TRUSTED_FW_NVCOUNTER_OID, 132 }; 133 134 for (int i = 0; i < MAX_NV_CTR_IDS; i++) { 135 int rc = plat_get_nv_ctr(nv_ctr_oids[i], 136 &critical_data->nv_ctr[i]); 137 if (rc != 0) { 138 return rc; 139 } 140 } 141 142 return 0; 143 } 144 #endif /* TRUSTED_BOARD_BOOT */ 145 146 static int fvp_populate_and_measure_critical_data(void) 147 { 148 int rc = 0; 149 150 /* 151 * FVP platform only measures 'platform NV-counter' and hence its 152 * measurement makes sense during Trusted-Boot flow only. 153 */ 154 #if TRUSTED_BOARD_BOOT 155 struct fvp_critical_data populate_critical_data; 156 157 rc = fvp_populate_critical_data(&populate_critical_data); 158 if (rc == 0) { 159 rc = plat_mboot_measure_critical_data(CRITICAL_DATA_ID, 160 &populate_critical_data, 161 sizeof(populate_critical_data)); 162 } 163 #endif /* TRUSTED_BOARD_BOOT */ 164 165 return rc; 166 } 167 168 void bl2_plat_mboot_finish(void) 169 { 170 int rc; 171 172 /* Event Log address in Non-Secure memory */ 173 uintptr_t ns_log_addr; 174 175 /* Event Log filled size */ 176 size_t event_log_cur_size; 177 178 rc = fvp_populate_and_measure_critical_data(); 179 if (rc != 0) { 180 panic(); 181 } 182 183 event_log_cur_size = event_log_get_cur_size((uint8_t *)event_log_base); 184 185 rc = arm_set_nt_fw_info( 186 #ifdef SPD_opteed 187 (uintptr_t)event_log_base, 188 #endif 189 event_log_cur_size, &ns_log_addr); 190 if (rc != 0) { 191 ERROR("%s(): Unable to update %s_FW_CONFIG\n", 192 __func__, "NT"); 193 /* 194 * It is a fatal error because on FVP secure world software 195 * assumes that a valid event log exists and will use it to 196 * record the measurements into the fTPM. 197 * Note: In FVP platform, OP-TEE uses nt_fw_config to get the 198 * secure Event Log buffer address. 199 */ 200 panic(); 201 } 202 203 /* Copy Event Log to Non-secure memory */ 204 (void)memcpy((void *)ns_log_addr, (const void *)event_log_base, 205 event_log_cur_size); 206 207 /* Ensure that the Event Log is visible in Non-secure memory */ 208 flush_dcache_range(ns_log_addr, event_log_cur_size); 209 210 #if defined(SPD_tspd) || defined(SPD_spmd) 211 /* Set Event Log data in TOS_FW_CONFIG */ 212 rc = arm_set_tos_fw_info((uintptr_t)event_log_base, 213 event_log_cur_size); 214 if (rc != 0) { 215 ERROR("%s(): Unable to update %s_FW_CONFIG\n", 216 __func__, "TOS"); 217 panic(); 218 } 219 #endif /* defined(SPD_tspd) || defined(SPD_spmd) */ 220 221 dump_event_log((uint8_t *)event_log_base, event_log_cur_size); 222 } 223