1*0a6bf811Slaurenw-arm /* 2*0a6bf811Slaurenw-arm * Copyright (c) 2022, Arm Limited. All rights reserved. 3*0a6bf811Slaurenw-arm * 4*0a6bf811Slaurenw-arm * SPDX-License-Identifier: BSD-3-Clause 5*0a6bf811Slaurenw-arm */ 6*0a6bf811Slaurenw-arm 7*0a6bf811Slaurenw-arm #ifndef CCA_COT_H 8*0a6bf811Slaurenw-arm #define CCA_COT_H 9*0a6bf811Slaurenw-arm 10*0a6bf811Slaurenw-arm /* Certificates. */ 11*0a6bf811Slaurenw-arm enum { 12*0a6bf811Slaurenw-arm /* Certificates owned by the silicon provider. */ 13*0a6bf811Slaurenw-arm CCA_CONTENT_CERT, 14*0a6bf811Slaurenw-arm CORE_SWD_KEY_CERT, 15*0a6bf811Slaurenw-arm SPMC_CONTENT_CERT, 16*0a6bf811Slaurenw-arm SIP_SECURE_PARTITION_CONTENT_CERT, 17*0a6bf811Slaurenw-arm 18*0a6bf811Slaurenw-arm /* Certificates owned by the platform owner. */ 19*0a6bf811Slaurenw-arm PLAT_KEY_CERT, 20*0a6bf811Slaurenw-arm PLAT_SECURE_PARTITION_CONTENT_CERT, 21*0a6bf811Slaurenw-arm NON_TRUSTED_FW_CONTENT_CERT, 22*0a6bf811Slaurenw-arm }; 23*0a6bf811Slaurenw-arm 24*0a6bf811Slaurenw-arm /* Certificate extensions. */ 25*0a6bf811Slaurenw-arm enum { 26*0a6bf811Slaurenw-arm /* Extensions used in certificates owned by the silicon provider. */ 27*0a6bf811Slaurenw-arm TRUSTED_FW_NVCOUNTER_EXT, 28*0a6bf811Slaurenw-arm TRUSTED_BOOT_FW_HASH_EXT, 29*0a6bf811Slaurenw-arm TRUSTED_BOOT_FW_CONFIG_HASH_EXT, 30*0a6bf811Slaurenw-arm HW_CONFIG_HASH_EXT, 31*0a6bf811Slaurenw-arm FW_CONFIG_HASH_EXT, 32*0a6bf811Slaurenw-arm SWD_ROT_PK_EXT, 33*0a6bf811Slaurenw-arm CORE_SWD_PK_EXT, 34*0a6bf811Slaurenw-arm SOC_AP_FW_HASH_EXT, 35*0a6bf811Slaurenw-arm SOC_FW_CONFIG_HASH_EXT, 36*0a6bf811Slaurenw-arm RMM_HASH_EXT, 37*0a6bf811Slaurenw-arm TRUSTED_OS_FW_HASH_EXT, 38*0a6bf811Slaurenw-arm TRUSTED_OS_FW_CONFIG_HASH_EXT, 39*0a6bf811Slaurenw-arm SP_PKG1_HASH_EXT, 40*0a6bf811Slaurenw-arm SP_PKG2_HASH_EXT, 41*0a6bf811Slaurenw-arm SP_PKG3_HASH_EXT, 42*0a6bf811Slaurenw-arm SP_PKG4_HASH_EXT, 43*0a6bf811Slaurenw-arm 44*0a6bf811Slaurenw-arm /* Extensions used in certificates owned by the platform owner. */ 45*0a6bf811Slaurenw-arm PROT_PK_EXT, 46*0a6bf811Slaurenw-arm PLAT_PK_EXT, 47*0a6bf811Slaurenw-arm SP_PKG5_HASH_EXT, 48*0a6bf811Slaurenw-arm SP_PKG6_HASH_EXT, 49*0a6bf811Slaurenw-arm SP_PKG7_HASH_EXT, 50*0a6bf811Slaurenw-arm SP_PKG8_HASH_EXT, 51*0a6bf811Slaurenw-arm NON_TRUSTED_FW_NVCOUNTER_EXT, 52*0a6bf811Slaurenw-arm NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, 53*0a6bf811Slaurenw-arm NON_TRUSTED_FW_CONFIG_HASH_EXT, 54*0a6bf811Slaurenw-arm }; 55*0a6bf811Slaurenw-arm 56*0a6bf811Slaurenw-arm /* Keys. */ 57*0a6bf811Slaurenw-arm enum { 58*0a6bf811Slaurenw-arm /* Keys owned by the silicon provider. */ 59*0a6bf811Slaurenw-arm ROT_KEY, 60*0a6bf811Slaurenw-arm SWD_ROT_KEY, 61*0a6bf811Slaurenw-arm CORE_SWD_KEY, 62*0a6bf811Slaurenw-arm 63*0a6bf811Slaurenw-arm /* Keys owned by the platform owner. */ 64*0a6bf811Slaurenw-arm PROT_KEY, 65*0a6bf811Slaurenw-arm PLAT_KEY, 66*0a6bf811Slaurenw-arm }; 67*0a6bf811Slaurenw-arm 68*0a6bf811Slaurenw-arm #endif /* CCA_COT_H */ 69