1c4c9e2bcSAbhi Singh /* 2c4c9e2bcSAbhi Singh * Copyright (c) 2025, Arm Limited. All rights reserved. 3c4c9e2bcSAbhi Singh * 4c4c9e2bcSAbhi Singh * SPDX-License-Identifier: BSD-3-Clause 5c4c9e2bcSAbhi Singh */ 6c4c9e2bcSAbhi Singh 7c4c9e2bcSAbhi Singh #include <assert.h> 8c4c9e2bcSAbhi Singh #include <stdarg.h> 9c4c9e2bcSAbhi Singh #include <stdint.h> 10c4c9e2bcSAbhi Singh 11c4c9e2bcSAbhi Singh #include <common/desc_image_load.h> 12c4c9e2bcSAbhi Singh #include <common/ep_info.h> 13c4c9e2bcSAbhi Singh #include <drivers/auth/crypto_mod.h> 144f9894dbSAbhi Singh #include <drivers/gpio_spi.h> 15c4c9e2bcSAbhi Singh #include <drivers/measured_boot/event_log/event_log.h> 16c4c9e2bcSAbhi Singh #include <drivers/measured_boot/metadata.h> 174f9894dbSAbhi Singh #include <drivers/tpm/tpm2.h> 184f9894dbSAbhi Singh #include <drivers/tpm/tpm2_chip.h> 194f9894dbSAbhi Singh #include <drivers/tpm/tpm2_slb9670/slb9670_gpio.h> 20c4c9e2bcSAbhi Singh #include <plat/arm/common/plat_arm.h> 21c4c9e2bcSAbhi Singh #include <plat/common/platform.h> 22c4c9e2bcSAbhi Singh #include <platform_def.h> 23c4c9e2bcSAbhi Singh 244f9894dbSAbhi Singh #include <rpi_shared.h> 254f9894dbSAbhi Singh 26c4c9e2bcSAbhi Singh /* Event Log data */ 27c4c9e2bcSAbhi Singh uint8_t event_log[PLAT_ARM_EVENT_LOG_MAX_SIZE]; 28c4c9e2bcSAbhi Singh 29c4c9e2bcSAbhi Singh /* RPI3 table with platform specific image IDs, names and PCRs */ 30c4c9e2bcSAbhi Singh const event_log_metadata_t rpi3_event_log_metadata[] = { 31c4c9e2bcSAbhi Singh { FW_CONFIG_ID, MBOOT_FW_CONFIG_STRING, PCR_0 }, 32c4c9e2bcSAbhi Singh { TB_FW_CONFIG_ID, MBOOT_TB_FW_CONFIG_STRING, PCR_0 }, 33c4c9e2bcSAbhi Singh { BL2_IMAGE_ID, MBOOT_BL2_IMAGE_STRING, PCR_0 }, 34c4c9e2bcSAbhi Singh 35c4c9e2bcSAbhi Singh { EVLOG_INVALID_ID, NULL, (unsigned int)(-1) } /* Terminator */ 36c4c9e2bcSAbhi Singh }; 37c4c9e2bcSAbhi Singh 384f9894dbSAbhi Singh #if DISCRETE_TPM 394f9894dbSAbhi Singh extern struct tpm_chip_data tpm_chip_data; 404f9894dbSAbhi Singh #if (TPM_INTERFACE == FIFO_SPI) 414f9894dbSAbhi Singh extern struct gpio_spi_data tpm_rpi3_gpio_data; 424f9894dbSAbhi Singh struct spi_plat *spidev; 434f9894dbSAbhi Singh #endif 444f9894dbSAbhi Singh 454f9894dbSAbhi Singh static void rpi3_bl1_tpm_early_interface_setup(void) 464f9894dbSAbhi Singh { 474f9894dbSAbhi Singh #if (TPM_INTERFACE == FIFO_SPI) 484f9894dbSAbhi Singh tpm2_slb9670_gpio_init(&tpm_rpi3_gpio_data); 494f9894dbSAbhi Singh 504f9894dbSAbhi Singh tpm2_slb9670_reset_chip(&tpm_rpi3_gpio_data); 514f9894dbSAbhi Singh 524f9894dbSAbhi Singh spidev = gpio_spi_init(&tpm_rpi3_gpio_data); 534f9894dbSAbhi Singh #endif 544f9894dbSAbhi Singh } 554f9894dbSAbhi Singh #endif 564f9894dbSAbhi Singh 57c4c9e2bcSAbhi Singh void bl1_plat_mboot_init(void) 58c4c9e2bcSAbhi Singh { 594f9894dbSAbhi Singh #if DISCRETE_TPM 604f9894dbSAbhi Singh int rc; 614f9894dbSAbhi Singh 624f9894dbSAbhi Singh rpi3_bl1_tpm_early_interface_setup(); 634f9894dbSAbhi Singh rc = tpm_interface_init(&tpm_chip_data, 0); 644f9894dbSAbhi Singh if (rc != 0) { 654f9894dbSAbhi Singh ERROR("BL1: TPM interface init failed\n"); 664f9894dbSAbhi Singh panic(); 674f9894dbSAbhi Singh } 684f9894dbSAbhi Singh rc = tpm_startup(&tpm_chip_data, TPM_SU_CLEAR); 694f9894dbSAbhi Singh if (rc != 0) { 704f9894dbSAbhi Singh ERROR("BL1: TPM Startup failed\n"); 714f9894dbSAbhi Singh panic(); 724f9894dbSAbhi Singh } 734f9894dbSAbhi Singh #endif 744f9894dbSAbhi Singh 75c4c9e2bcSAbhi Singh event_log_init(event_log, event_log + sizeof(event_log)); 76c4c9e2bcSAbhi Singh event_log_write_header(); 77c4c9e2bcSAbhi Singh } 78c4c9e2bcSAbhi Singh 79c4c9e2bcSAbhi Singh void bl1_plat_mboot_finish(void) 80c4c9e2bcSAbhi Singh { 81c4c9e2bcSAbhi Singh size_t event_log_cur_size; 82c4c9e2bcSAbhi Singh image_desc_t *image_desc; 83c4c9e2bcSAbhi Singh entry_point_info_t *ep_info; 84c4c9e2bcSAbhi Singh 85c4c9e2bcSAbhi Singh event_log_cur_size = event_log_get_cur_size(event_log); 86c4c9e2bcSAbhi Singh image_desc = bl1_plat_get_image_desc(BL2_IMAGE_ID); 87c4c9e2bcSAbhi Singh assert(image_desc != NULL); 88c4c9e2bcSAbhi Singh 89c4c9e2bcSAbhi Singh /* Get the entry point info */ 90c4c9e2bcSAbhi Singh ep_info = &image_desc->ep_info; 91c4c9e2bcSAbhi Singh ep_info->args.arg2 = (uint64_t) event_log; 92c4c9e2bcSAbhi Singh ep_info->args.arg3 = (uint32_t) event_log_cur_size; 934f9894dbSAbhi Singh 944f9894dbSAbhi Singh #if DISCRETE_TPM 954f9894dbSAbhi Singh int rc; 964f9894dbSAbhi Singh 974f9894dbSAbhi Singh /* relinquish control of TPM locality 0 and close interface */ 984f9894dbSAbhi Singh rc = tpm_interface_close(&tpm_chip_data, 0); 994f9894dbSAbhi Singh if (rc != 0) { 1004f9894dbSAbhi Singh ERROR("BL1: TPM interface close failed\n"); 1014f9894dbSAbhi Singh panic(); 1024f9894dbSAbhi Singh } 1034f9894dbSAbhi Singh #endif 104c4c9e2bcSAbhi Singh } 105c4c9e2bcSAbhi Singh 106c4c9e2bcSAbhi Singh int plat_mboot_measure_image(unsigned int image_id, image_info_t *image_data) 107c4c9e2bcSAbhi Singh { 108c4c9e2bcSAbhi Singh int rc = 0; 109c4c9e2bcSAbhi Singh unsigned char hash_data[CRYPTO_MD_MAX_SIZE]; 110c4c9e2bcSAbhi Singh const event_log_metadata_t *metadata_ptr = rpi3_event_log_metadata; 111c4c9e2bcSAbhi Singh 112c4c9e2bcSAbhi Singh rc = event_log_measure(image_data->image_base, image_data->image_size, hash_data); 113c4c9e2bcSAbhi Singh if (rc != 0) { 114c4c9e2bcSAbhi Singh return rc; 115c4c9e2bcSAbhi Singh } 116c4c9e2bcSAbhi Singh 1174f9894dbSAbhi Singh #if DISCRETE_TPM 1184f9894dbSAbhi Singh rc = tpm_pcr_extend(&tpm_chip_data, 0, TPM_ALG_ID, hash_data, TCG_DIGEST_SIZE); 1194f9894dbSAbhi Singh if (rc != 0) { 1204f9894dbSAbhi Singh ERROR("BL1: TPM PCR-0 extend failed\n"); 1214f9894dbSAbhi Singh panic(); 1224f9894dbSAbhi Singh } 1234f9894dbSAbhi Singh #endif 1244f9894dbSAbhi Singh 125c4c9e2bcSAbhi Singh while ((metadata_ptr->id != EVLOG_INVALID_ID) && 126c4c9e2bcSAbhi Singh (metadata_ptr->id != image_id)) { 127c4c9e2bcSAbhi Singh metadata_ptr++; 128c4c9e2bcSAbhi Singh } 129c4c9e2bcSAbhi Singh assert(metadata_ptr->id != EVLOG_INVALID_ID); 130c4c9e2bcSAbhi Singh 131c4c9e2bcSAbhi Singh event_log_record(hash_data, EV_POST_CODE, metadata_ptr); 132c4c9e2bcSAbhi Singh 133c4c9e2bcSAbhi Singh /* Dump Event Log for user view */ 134*126f278fSHarrison Mutai event_log_dump((uint8_t *)event_log, event_log_get_cur_size(event_log)); 135c4c9e2bcSAbhi Singh 136c4c9e2bcSAbhi Singh return rc; 137c4c9e2bcSAbhi Singh } 138