xref: /rk3399_ARM-atf/plat/rpi/rpi3/rpi3_bl1_mboot.c (revision 4f9894db3572b6e375c7369bc2619cc690169604)
1c4c9e2bcSAbhi Singh /*
2c4c9e2bcSAbhi Singh  * Copyright (c) 2025, Arm Limited. All rights reserved.
3c4c9e2bcSAbhi Singh  *
4c4c9e2bcSAbhi Singh  * SPDX-License-Identifier: BSD-3-Clause
5c4c9e2bcSAbhi Singh  */
6c4c9e2bcSAbhi Singh 
7c4c9e2bcSAbhi Singh #include <assert.h>
8c4c9e2bcSAbhi Singh #include <stdarg.h>
9c4c9e2bcSAbhi Singh #include <stdint.h>
10c4c9e2bcSAbhi Singh 
11c4c9e2bcSAbhi Singh #include <common/desc_image_load.h>
12c4c9e2bcSAbhi Singh #include <common/ep_info.h>
13c4c9e2bcSAbhi Singh #include <drivers/auth/crypto_mod.h>
14*4f9894dbSAbhi Singh #include <drivers/gpio_spi.h>
15c4c9e2bcSAbhi Singh #include <drivers/measured_boot/event_log/event_log.h>
16c4c9e2bcSAbhi Singh #include <drivers/measured_boot/metadata.h>
17*4f9894dbSAbhi Singh #include <drivers/tpm/tpm2.h>
18*4f9894dbSAbhi Singh #include <drivers/tpm/tpm2_chip.h>
19*4f9894dbSAbhi Singh #include <drivers/tpm/tpm2_slb9670/slb9670_gpio.h>
20c4c9e2bcSAbhi Singh #include <plat/arm/common/plat_arm.h>
21c4c9e2bcSAbhi Singh #include <plat/common/platform.h>
22c4c9e2bcSAbhi Singh #include <platform_def.h>
23c4c9e2bcSAbhi Singh 
24*4f9894dbSAbhi Singh #include <rpi_shared.h>
25*4f9894dbSAbhi Singh 
26c4c9e2bcSAbhi Singh /* Event Log data */
27c4c9e2bcSAbhi Singh uint8_t event_log[PLAT_ARM_EVENT_LOG_MAX_SIZE];
28c4c9e2bcSAbhi Singh 
29c4c9e2bcSAbhi Singh /* RPI3 table with platform specific image IDs, names and PCRs */
30c4c9e2bcSAbhi Singh const event_log_metadata_t rpi3_event_log_metadata[] = {
31c4c9e2bcSAbhi Singh 	{ FW_CONFIG_ID, MBOOT_FW_CONFIG_STRING, PCR_0 },
32c4c9e2bcSAbhi Singh 	{ TB_FW_CONFIG_ID, MBOOT_TB_FW_CONFIG_STRING, PCR_0 },
33c4c9e2bcSAbhi Singh 	{ BL2_IMAGE_ID, MBOOT_BL2_IMAGE_STRING, PCR_0 },
34c4c9e2bcSAbhi Singh 
35c4c9e2bcSAbhi Singh 	{ EVLOG_INVALID_ID, NULL, (unsigned int)(-1) }	/* Terminator */
36c4c9e2bcSAbhi Singh };
37c4c9e2bcSAbhi Singh 
38*4f9894dbSAbhi Singh #if DISCRETE_TPM
39*4f9894dbSAbhi Singh extern struct tpm_chip_data tpm_chip_data;
40*4f9894dbSAbhi Singh #if (TPM_INTERFACE == FIFO_SPI)
41*4f9894dbSAbhi Singh extern struct gpio_spi_data tpm_rpi3_gpio_data;
42*4f9894dbSAbhi Singh struct spi_plat *spidev;
43*4f9894dbSAbhi Singh #endif
44*4f9894dbSAbhi Singh 
45*4f9894dbSAbhi Singh static void rpi3_bl1_tpm_early_interface_setup(void)
46*4f9894dbSAbhi Singh {
47*4f9894dbSAbhi Singh #if (TPM_INTERFACE == FIFO_SPI)
48*4f9894dbSAbhi Singh 	tpm2_slb9670_gpio_init(&tpm_rpi3_gpio_data);
49*4f9894dbSAbhi Singh 
50*4f9894dbSAbhi Singh 	tpm2_slb9670_reset_chip(&tpm_rpi3_gpio_data);
51*4f9894dbSAbhi Singh 
52*4f9894dbSAbhi Singh 	spidev = gpio_spi_init(&tpm_rpi3_gpio_data);
53*4f9894dbSAbhi Singh #endif
54*4f9894dbSAbhi Singh }
55*4f9894dbSAbhi Singh #endif
56*4f9894dbSAbhi Singh 
57c4c9e2bcSAbhi Singh void bl1_plat_mboot_init(void)
58c4c9e2bcSAbhi Singh {
59*4f9894dbSAbhi Singh #if DISCRETE_TPM
60*4f9894dbSAbhi Singh 	int rc;
61*4f9894dbSAbhi Singh 
62*4f9894dbSAbhi Singh 	rpi3_bl1_tpm_early_interface_setup();
63*4f9894dbSAbhi Singh 	rc = tpm_interface_init(&tpm_chip_data, 0);
64*4f9894dbSAbhi Singh 	if (rc != 0) {
65*4f9894dbSAbhi Singh 		ERROR("BL1: TPM interface init failed\n");
66*4f9894dbSAbhi Singh 		panic();
67*4f9894dbSAbhi Singh 	}
68*4f9894dbSAbhi Singh 	rc = tpm_startup(&tpm_chip_data, TPM_SU_CLEAR);
69*4f9894dbSAbhi Singh 	if (rc != 0) {
70*4f9894dbSAbhi Singh 		ERROR("BL1: TPM Startup failed\n");
71*4f9894dbSAbhi Singh 		panic();
72*4f9894dbSAbhi Singh 	}
73*4f9894dbSAbhi Singh #endif
74*4f9894dbSAbhi Singh 
75c4c9e2bcSAbhi Singh 	event_log_init(event_log, event_log + sizeof(event_log));
76c4c9e2bcSAbhi Singh 	event_log_write_header();
77c4c9e2bcSAbhi Singh }
78c4c9e2bcSAbhi Singh 
79c4c9e2bcSAbhi Singh void bl1_plat_mboot_finish(void)
80c4c9e2bcSAbhi Singh {
81c4c9e2bcSAbhi Singh 	size_t event_log_cur_size;
82c4c9e2bcSAbhi Singh 	image_desc_t *image_desc;
83c4c9e2bcSAbhi Singh 	entry_point_info_t *ep_info;
84c4c9e2bcSAbhi Singh 
85c4c9e2bcSAbhi Singh 	event_log_cur_size = event_log_get_cur_size(event_log);
86c4c9e2bcSAbhi Singh 	image_desc = bl1_plat_get_image_desc(BL2_IMAGE_ID);
87c4c9e2bcSAbhi Singh 	assert(image_desc != NULL);
88c4c9e2bcSAbhi Singh 
89c4c9e2bcSAbhi Singh 	/* Get the entry point info */
90c4c9e2bcSAbhi Singh 	ep_info = &image_desc->ep_info;
91c4c9e2bcSAbhi Singh 	ep_info->args.arg2 = (uint64_t) event_log;
92c4c9e2bcSAbhi Singh 	ep_info->args.arg3 = (uint32_t) event_log_cur_size;
93*4f9894dbSAbhi Singh 
94*4f9894dbSAbhi Singh #if DISCRETE_TPM
95*4f9894dbSAbhi Singh 	int rc;
96*4f9894dbSAbhi Singh 
97*4f9894dbSAbhi Singh 	/* relinquish control of TPM locality 0 and close interface */
98*4f9894dbSAbhi Singh 	rc = tpm_interface_close(&tpm_chip_data, 0);
99*4f9894dbSAbhi Singh 	if (rc != 0) {
100*4f9894dbSAbhi Singh 		ERROR("BL1: TPM interface close failed\n");
101*4f9894dbSAbhi Singh 		panic();
102*4f9894dbSAbhi Singh 	}
103*4f9894dbSAbhi Singh #endif
104c4c9e2bcSAbhi Singh }
105c4c9e2bcSAbhi Singh 
106c4c9e2bcSAbhi Singh int plat_mboot_measure_image(unsigned int image_id, image_info_t *image_data)
107c4c9e2bcSAbhi Singh {
108c4c9e2bcSAbhi Singh 	int rc = 0;
109c4c9e2bcSAbhi Singh 	unsigned char hash_data[CRYPTO_MD_MAX_SIZE];
110c4c9e2bcSAbhi Singh 	const event_log_metadata_t *metadata_ptr = rpi3_event_log_metadata;
111c4c9e2bcSAbhi Singh 
112c4c9e2bcSAbhi Singh 	rc = event_log_measure(image_data->image_base, image_data->image_size, hash_data);
113c4c9e2bcSAbhi Singh 	if (rc != 0) {
114c4c9e2bcSAbhi Singh 		return rc;
115c4c9e2bcSAbhi Singh 	}
116c4c9e2bcSAbhi Singh 
117*4f9894dbSAbhi Singh #if DISCRETE_TPM
118*4f9894dbSAbhi Singh 	rc = tpm_pcr_extend(&tpm_chip_data, 0, TPM_ALG_ID, hash_data, TCG_DIGEST_SIZE);
119*4f9894dbSAbhi Singh 	if (rc != 0) {
120*4f9894dbSAbhi Singh 		ERROR("BL1: TPM PCR-0 extend failed\n");
121*4f9894dbSAbhi Singh 		panic();
122*4f9894dbSAbhi Singh 	}
123*4f9894dbSAbhi Singh #endif
124*4f9894dbSAbhi Singh 
125c4c9e2bcSAbhi Singh 	while ((metadata_ptr->id != EVLOG_INVALID_ID) &&
126c4c9e2bcSAbhi Singh 		(metadata_ptr->id != image_id)) {
127c4c9e2bcSAbhi Singh 		metadata_ptr++;
128c4c9e2bcSAbhi Singh 	}
129c4c9e2bcSAbhi Singh 	assert(metadata_ptr->id != EVLOG_INVALID_ID);
130c4c9e2bcSAbhi Singh 
131c4c9e2bcSAbhi Singh 	event_log_record(hash_data, EV_POST_CODE, metadata_ptr);
132c4c9e2bcSAbhi Singh 
133c4c9e2bcSAbhi Singh 	/* Dump Event Log for user view */
134c4c9e2bcSAbhi Singh 	dump_event_log((uint8_t *)event_log, event_log_get_cur_size(event_log));
135c4c9e2bcSAbhi Singh 
136c4c9e2bcSAbhi Singh 	return rc;
137c4c9e2bcSAbhi Singh }
138