xref: /rk3399_ARM-atf/plat/rpi/rpi3/rpi3_bl1_mboot.c (revision 126f278f798b6bbdef3b5377b9240904219b1838)
1c4c9e2bcSAbhi Singh /*
2c4c9e2bcSAbhi Singh  * Copyright (c) 2025, Arm Limited. All rights reserved.
3c4c9e2bcSAbhi Singh  *
4c4c9e2bcSAbhi Singh  * SPDX-License-Identifier: BSD-3-Clause
5c4c9e2bcSAbhi Singh  */
6c4c9e2bcSAbhi Singh 
7c4c9e2bcSAbhi Singh #include <assert.h>
8c4c9e2bcSAbhi Singh #include <stdarg.h>
9c4c9e2bcSAbhi Singh #include <stdint.h>
10c4c9e2bcSAbhi Singh 
11c4c9e2bcSAbhi Singh #include <common/desc_image_load.h>
12c4c9e2bcSAbhi Singh #include <common/ep_info.h>
13c4c9e2bcSAbhi Singh #include <drivers/auth/crypto_mod.h>
144f9894dbSAbhi Singh #include <drivers/gpio_spi.h>
15c4c9e2bcSAbhi Singh #include <drivers/measured_boot/event_log/event_log.h>
16c4c9e2bcSAbhi Singh #include <drivers/measured_boot/metadata.h>
174f9894dbSAbhi Singh #include <drivers/tpm/tpm2.h>
184f9894dbSAbhi Singh #include <drivers/tpm/tpm2_chip.h>
194f9894dbSAbhi Singh #include <drivers/tpm/tpm2_slb9670/slb9670_gpio.h>
20c4c9e2bcSAbhi Singh #include <plat/arm/common/plat_arm.h>
21c4c9e2bcSAbhi Singh #include <plat/common/platform.h>
22c4c9e2bcSAbhi Singh #include <platform_def.h>
23c4c9e2bcSAbhi Singh 
244f9894dbSAbhi Singh #include <rpi_shared.h>
254f9894dbSAbhi Singh 
26c4c9e2bcSAbhi Singh /* Event Log data */
27c4c9e2bcSAbhi Singh uint8_t event_log[PLAT_ARM_EVENT_LOG_MAX_SIZE];
28c4c9e2bcSAbhi Singh 
29c4c9e2bcSAbhi Singh /* RPI3 table with platform specific image IDs, names and PCRs */
30c4c9e2bcSAbhi Singh const event_log_metadata_t rpi3_event_log_metadata[] = {
31c4c9e2bcSAbhi Singh 	{ FW_CONFIG_ID, MBOOT_FW_CONFIG_STRING, PCR_0 },
32c4c9e2bcSAbhi Singh 	{ TB_FW_CONFIG_ID, MBOOT_TB_FW_CONFIG_STRING, PCR_0 },
33c4c9e2bcSAbhi Singh 	{ BL2_IMAGE_ID, MBOOT_BL2_IMAGE_STRING, PCR_0 },
34c4c9e2bcSAbhi Singh 
35c4c9e2bcSAbhi Singh 	{ EVLOG_INVALID_ID, NULL, (unsigned int)(-1) }	/* Terminator */
36c4c9e2bcSAbhi Singh };
37c4c9e2bcSAbhi Singh 
384f9894dbSAbhi Singh #if DISCRETE_TPM
394f9894dbSAbhi Singh extern struct tpm_chip_data tpm_chip_data;
404f9894dbSAbhi Singh #if (TPM_INTERFACE == FIFO_SPI)
414f9894dbSAbhi Singh extern struct gpio_spi_data tpm_rpi3_gpio_data;
424f9894dbSAbhi Singh struct spi_plat *spidev;
434f9894dbSAbhi Singh #endif
444f9894dbSAbhi Singh 
454f9894dbSAbhi Singh static void rpi3_bl1_tpm_early_interface_setup(void)
464f9894dbSAbhi Singh {
474f9894dbSAbhi Singh #if (TPM_INTERFACE == FIFO_SPI)
484f9894dbSAbhi Singh 	tpm2_slb9670_gpio_init(&tpm_rpi3_gpio_data);
494f9894dbSAbhi Singh 
504f9894dbSAbhi Singh 	tpm2_slb9670_reset_chip(&tpm_rpi3_gpio_data);
514f9894dbSAbhi Singh 
524f9894dbSAbhi Singh 	spidev = gpio_spi_init(&tpm_rpi3_gpio_data);
534f9894dbSAbhi Singh #endif
544f9894dbSAbhi Singh }
554f9894dbSAbhi Singh #endif
564f9894dbSAbhi Singh 
57c4c9e2bcSAbhi Singh void bl1_plat_mboot_init(void)
58c4c9e2bcSAbhi Singh {
594f9894dbSAbhi Singh #if DISCRETE_TPM
604f9894dbSAbhi Singh 	int rc;
614f9894dbSAbhi Singh 
624f9894dbSAbhi Singh 	rpi3_bl1_tpm_early_interface_setup();
634f9894dbSAbhi Singh 	rc = tpm_interface_init(&tpm_chip_data, 0);
644f9894dbSAbhi Singh 	if (rc != 0) {
654f9894dbSAbhi Singh 		ERROR("BL1: TPM interface init failed\n");
664f9894dbSAbhi Singh 		panic();
674f9894dbSAbhi Singh 	}
684f9894dbSAbhi Singh 	rc = tpm_startup(&tpm_chip_data, TPM_SU_CLEAR);
694f9894dbSAbhi Singh 	if (rc != 0) {
704f9894dbSAbhi Singh 		ERROR("BL1: TPM Startup failed\n");
714f9894dbSAbhi Singh 		panic();
724f9894dbSAbhi Singh 	}
734f9894dbSAbhi Singh #endif
744f9894dbSAbhi Singh 
75c4c9e2bcSAbhi Singh 	event_log_init(event_log, event_log + sizeof(event_log));
76c4c9e2bcSAbhi Singh 	event_log_write_header();
77c4c9e2bcSAbhi Singh }
78c4c9e2bcSAbhi Singh 
79c4c9e2bcSAbhi Singh void bl1_plat_mboot_finish(void)
80c4c9e2bcSAbhi Singh {
81c4c9e2bcSAbhi Singh 	size_t event_log_cur_size;
82c4c9e2bcSAbhi Singh 	image_desc_t *image_desc;
83c4c9e2bcSAbhi Singh 	entry_point_info_t *ep_info;
84c4c9e2bcSAbhi Singh 
85c4c9e2bcSAbhi Singh 	event_log_cur_size = event_log_get_cur_size(event_log);
86c4c9e2bcSAbhi Singh 	image_desc = bl1_plat_get_image_desc(BL2_IMAGE_ID);
87c4c9e2bcSAbhi Singh 	assert(image_desc != NULL);
88c4c9e2bcSAbhi Singh 
89c4c9e2bcSAbhi Singh 	/* Get the entry point info */
90c4c9e2bcSAbhi Singh 	ep_info = &image_desc->ep_info;
91c4c9e2bcSAbhi Singh 	ep_info->args.arg2 = (uint64_t) event_log;
92c4c9e2bcSAbhi Singh 	ep_info->args.arg3 = (uint32_t) event_log_cur_size;
934f9894dbSAbhi Singh 
944f9894dbSAbhi Singh #if DISCRETE_TPM
954f9894dbSAbhi Singh 	int rc;
964f9894dbSAbhi Singh 
974f9894dbSAbhi Singh 	/* relinquish control of TPM locality 0 and close interface */
984f9894dbSAbhi Singh 	rc = tpm_interface_close(&tpm_chip_data, 0);
994f9894dbSAbhi Singh 	if (rc != 0) {
1004f9894dbSAbhi Singh 		ERROR("BL1: TPM interface close failed\n");
1014f9894dbSAbhi Singh 		panic();
1024f9894dbSAbhi Singh 	}
1034f9894dbSAbhi Singh #endif
104c4c9e2bcSAbhi Singh }
105c4c9e2bcSAbhi Singh 
106c4c9e2bcSAbhi Singh int plat_mboot_measure_image(unsigned int image_id, image_info_t *image_data)
107c4c9e2bcSAbhi Singh {
108c4c9e2bcSAbhi Singh 	int rc = 0;
109c4c9e2bcSAbhi Singh 	unsigned char hash_data[CRYPTO_MD_MAX_SIZE];
110c4c9e2bcSAbhi Singh 	const event_log_metadata_t *metadata_ptr = rpi3_event_log_metadata;
111c4c9e2bcSAbhi Singh 
112c4c9e2bcSAbhi Singh 	rc = event_log_measure(image_data->image_base, image_data->image_size, hash_data);
113c4c9e2bcSAbhi Singh 	if (rc != 0) {
114c4c9e2bcSAbhi Singh 		return rc;
115c4c9e2bcSAbhi Singh 	}
116c4c9e2bcSAbhi Singh 
1174f9894dbSAbhi Singh #if DISCRETE_TPM
1184f9894dbSAbhi Singh 	rc = tpm_pcr_extend(&tpm_chip_data, 0, TPM_ALG_ID, hash_data, TCG_DIGEST_SIZE);
1194f9894dbSAbhi Singh 	if (rc != 0) {
1204f9894dbSAbhi Singh 		ERROR("BL1: TPM PCR-0 extend failed\n");
1214f9894dbSAbhi Singh 		panic();
1224f9894dbSAbhi Singh 	}
1234f9894dbSAbhi Singh #endif
1244f9894dbSAbhi Singh 
125c4c9e2bcSAbhi Singh 	while ((metadata_ptr->id != EVLOG_INVALID_ID) &&
126c4c9e2bcSAbhi Singh 		(metadata_ptr->id != image_id)) {
127c4c9e2bcSAbhi Singh 		metadata_ptr++;
128c4c9e2bcSAbhi Singh 	}
129c4c9e2bcSAbhi Singh 	assert(metadata_ptr->id != EVLOG_INVALID_ID);
130c4c9e2bcSAbhi Singh 
131c4c9e2bcSAbhi Singh 	event_log_record(hash_data, EV_POST_CODE, metadata_ptr);
132c4c9e2bcSAbhi Singh 
133c4c9e2bcSAbhi Singh 	/* Dump Event Log for user view */
134*126f278fSHarrison Mutai 	event_log_dump((uint8_t *)event_log, event_log_get_cur_size(event_log));
135c4c9e2bcSAbhi Singh 
136c4c9e2bcSAbhi Singh 	return rc;
137c4c9e2bcSAbhi Singh }
138