1 /* 2 * Copyright (c) 2020, Arm Limited. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #ifndef DUALROOT_COT_H 8 #define DUALROOT_COT_H 9 10 /* Certificates. */ 11 enum { 12 /* Certificates owned by the silicon provider. */ 13 TRUSTED_BOOT_FW_CERT, 14 TRUSTED_KEY_CERT, 15 SCP_FW_KEY_CERT, 16 SCP_FW_CONTENT_CERT, 17 SOC_FW_KEY_CERT, 18 SOC_FW_CONTENT_CERT, 19 TRUSTED_OS_FW_KEY_CERT, 20 TRUSTED_OS_FW_CONTENT_CERT, 21 SIP_SECURE_PARTITION_CONTENT_CERT, 22 FWU_CERT, 23 24 /* Certificates owned by the platform owner. */ 25 NON_TRUSTED_FW_CONTENT_CERT, 26 }; 27 28 /* Certificate extensions. */ 29 enum { 30 /* Extensions used in certificates owned by the silicon provider. */ 31 TRUSTED_FW_NVCOUNTER_EXT, 32 TRUSTED_BOOT_FW_HASH_EXT, 33 TRUSTED_BOOT_FW_CONFIG_HASH_EXT, 34 HW_CONFIG_HASH_EXT, 35 TRUSTED_WORLD_PK_EXT, 36 SCP_FW_CONTENT_CERT_PK_EXT, 37 SCP_FW_HASH_EXT, 38 SOC_FW_CONTENT_CERT_PK_EXT, 39 SOC_AP_FW_HASH_EXT, 40 SOC_FW_CONFIG_HASH_EXT, 41 TRUSTED_OS_FW_CONTENT_CERT_PK_EXT, 42 TRUSTED_OS_FW_HASH_EXT, 43 TRUSTED_OS_FW_EXTRA1_HASH_EXT, 44 TRUSTED_OS_FW_EXTRA2_HASH_EXT, 45 TRUSTED_OS_FW_CONFIG_HASH_EXT, 46 SP_PKG1_HASH_EXT, 47 SP_PKG2_HASH_EXT, 48 SP_PKG3_HASH_EXT, 49 SP_PKG4_HASH_EXT, 50 SP_PKG5_HASH_EXT, 51 SP_PKG6_HASH_EXT, 52 SP_PKG7_HASH_EXT, 53 SP_PKG8_HASH_EXT, 54 SCP_FWU_CFG_HASH_EXT, 55 AP_FWU_CFG_HASH_EXT, 56 FWU_HASH_EXT, 57 58 /* Extensions used in certificates owned by the platform owner. */ 59 PROT_PK_EXT, 60 NON_TRUSTED_FW_NVCOUNTER_EXT, 61 NON_TRUSTED_FW_CONTENT_CERT_PK_EXT, 62 NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, 63 NON_TRUSTED_FW_CONFIG_HASH_EXT, 64 }; 65 66 /* Keys. */ 67 enum { 68 /* Keys owned by the silicon provider. */ 69 ROT_KEY, 70 TRUSTED_WORLD_KEY, 71 SCP_FW_CONTENT_CERT_KEY, 72 SOC_FW_CONTENT_CERT_KEY, 73 TRUSTED_OS_FW_CONTENT_CERT_KEY, 74 75 /* Keys owned by the platform owner. */ 76 PROT_KEY, 77 }; 78 79 #endif /* DUALROOT_COT_H */ 80