10a6bf811Slaurenw-arm /* 2*60753a63Slaurenw-arm * Copyright (c) 2022-2023, Arm Limited. All rights reserved. 30a6bf811Slaurenw-arm * 40a6bf811Slaurenw-arm * SPDX-License-Identifier: BSD-3-Clause 50a6bf811Slaurenw-arm */ 60a6bf811Slaurenw-arm 70a6bf811Slaurenw-arm #ifndef CCA_COT_H 80a6bf811Slaurenw-arm #define CCA_COT_H 90a6bf811Slaurenw-arm 100a6bf811Slaurenw-arm /* Certificates. */ 110a6bf811Slaurenw-arm enum { 120a6bf811Slaurenw-arm /* Certificates owned by the silicon provider. */ 130a6bf811Slaurenw-arm CCA_CONTENT_CERT, 140a6bf811Slaurenw-arm CORE_SWD_KEY_CERT, 150a6bf811Slaurenw-arm SPMC_CONTENT_CERT, 160a6bf811Slaurenw-arm SIP_SECURE_PARTITION_CONTENT_CERT, 170a6bf811Slaurenw-arm 180a6bf811Slaurenw-arm /* Certificates owned by the platform owner. */ 190a6bf811Slaurenw-arm PLAT_KEY_CERT, 200a6bf811Slaurenw-arm PLAT_SECURE_PARTITION_CONTENT_CERT, 210a6bf811Slaurenw-arm NON_TRUSTED_FW_CONTENT_CERT, 220a6bf811Slaurenw-arm }; 230a6bf811Slaurenw-arm 240a6bf811Slaurenw-arm /* Certificate extensions. */ 250a6bf811Slaurenw-arm enum { 260a6bf811Slaurenw-arm /* Extensions used in certificates owned by the silicon provider. */ 27*60753a63Slaurenw-arm CCA_FW_NVCOUNTER_EXT, 280a6bf811Slaurenw-arm TRUSTED_FW_NVCOUNTER_EXT, 290a6bf811Slaurenw-arm TRUSTED_BOOT_FW_HASH_EXT, 300a6bf811Slaurenw-arm TRUSTED_BOOT_FW_CONFIG_HASH_EXT, 310a6bf811Slaurenw-arm HW_CONFIG_HASH_EXT, 320a6bf811Slaurenw-arm FW_CONFIG_HASH_EXT, 330a6bf811Slaurenw-arm SWD_ROT_PK_EXT, 340a6bf811Slaurenw-arm CORE_SWD_PK_EXT, 350a6bf811Slaurenw-arm SOC_AP_FW_HASH_EXT, 360a6bf811Slaurenw-arm SOC_FW_CONFIG_HASH_EXT, 370a6bf811Slaurenw-arm RMM_HASH_EXT, 380a6bf811Slaurenw-arm TRUSTED_OS_FW_HASH_EXT, 390a6bf811Slaurenw-arm TRUSTED_OS_FW_CONFIG_HASH_EXT, 400a6bf811Slaurenw-arm SP_PKG1_HASH_EXT, 410a6bf811Slaurenw-arm SP_PKG2_HASH_EXT, 420a6bf811Slaurenw-arm SP_PKG3_HASH_EXT, 430a6bf811Slaurenw-arm SP_PKG4_HASH_EXT, 440a6bf811Slaurenw-arm 450a6bf811Slaurenw-arm /* Extensions used in certificates owned by the platform owner. */ 460a6bf811Slaurenw-arm PROT_PK_EXT, 470a6bf811Slaurenw-arm PLAT_PK_EXT, 480a6bf811Slaurenw-arm SP_PKG5_HASH_EXT, 490a6bf811Slaurenw-arm SP_PKG6_HASH_EXT, 500a6bf811Slaurenw-arm SP_PKG7_HASH_EXT, 510a6bf811Slaurenw-arm SP_PKG8_HASH_EXT, 520a6bf811Slaurenw-arm NON_TRUSTED_FW_NVCOUNTER_EXT, 530a6bf811Slaurenw-arm NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, 540a6bf811Slaurenw-arm NON_TRUSTED_FW_CONFIG_HASH_EXT, 550a6bf811Slaurenw-arm }; 560a6bf811Slaurenw-arm 570a6bf811Slaurenw-arm /* Keys. */ 580a6bf811Slaurenw-arm enum { 590a6bf811Slaurenw-arm /* Keys owned by the silicon provider. */ 600a6bf811Slaurenw-arm ROT_KEY, 610a6bf811Slaurenw-arm SWD_ROT_KEY, 620a6bf811Slaurenw-arm CORE_SWD_KEY, 630a6bf811Slaurenw-arm 640a6bf811Slaurenw-arm /* Keys owned by the platform owner. */ 650a6bf811Slaurenw-arm PROT_KEY, 660a6bf811Slaurenw-arm PLAT_KEY, 670a6bf811Slaurenw-arm }; 680a6bf811Slaurenw-arm 690a6bf811Slaurenw-arm #endif /* CCA_COT_H */ 70