1 /* 2 * Copyright (c) 2020, Arm Limited. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #ifndef DUALROOT_COT_H 8 #define DUALROOT_COT_H 9 10 /* Certificates. */ 11 enum { 12 /* Certificates owned by the silicon provider. */ 13 TRUSTED_BOOT_FW_CERT, 14 TRUSTED_KEY_CERT, 15 SCP_FW_KEY_CERT, 16 SCP_FW_CONTENT_CERT, 17 SOC_FW_KEY_CERT, 18 SOC_FW_CONTENT_CERT, 19 TRUSTED_OS_FW_KEY_CERT, 20 TRUSTED_OS_FW_CONTENT_CERT, 21 FWU_CERT, 22 23 /* Certificates owned by the platform owner. */ 24 NON_TRUSTED_FW_CONTENT_CERT, 25 }; 26 27 /* Certificate extensions. */ 28 enum { 29 /* Extensions used in certificates owned by the silicon provider. */ 30 TRUSTED_FW_NVCOUNTER_EXT, 31 TRUSTED_BOOT_FW_HASH_EXT, 32 TRUSTED_BOOT_FW_CONFIG_HASH_EXT, 33 HW_CONFIG_HASH_EXT, 34 TRUSTED_WORLD_PK_EXT, 35 SCP_FW_CONTENT_CERT_PK_EXT, 36 SCP_FW_HASH_EXT, 37 SOC_FW_CONTENT_CERT_PK_EXT, 38 SOC_AP_FW_HASH_EXT, 39 SOC_FW_CONFIG_HASH_EXT, 40 TRUSTED_OS_FW_CONTENT_CERT_PK_EXT, 41 TRUSTED_OS_FW_HASH_EXT, 42 TRUSTED_OS_FW_EXTRA1_HASH_EXT, 43 TRUSTED_OS_FW_EXTRA2_HASH_EXT, 44 TRUSTED_OS_FW_CONFIG_HASH_EXT, 45 SCP_FWU_CFG_HASH_EXT, 46 AP_FWU_CFG_HASH_EXT, 47 FWU_HASH_EXT, 48 49 /* Extensions used in certificates owned by the platform owner. */ 50 PROT_PK_EXT, 51 NON_TRUSTED_FW_NVCOUNTER_EXT, 52 NON_TRUSTED_FW_CONTENT_CERT_PK_EXT, 53 NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, 54 NON_TRUSTED_FW_CONFIG_HASH_EXT, 55 }; 56 57 /* Keys. */ 58 enum { 59 /* Keys owned by the silicon provider. */ 60 ROT_KEY, 61 TRUSTED_WORLD_KEY, 62 SCP_FW_CONTENT_CERT_KEY, 63 SOC_FW_CONTENT_CERT_KEY, 64 TRUSTED_OS_FW_CONTENT_CERT_KEY, 65 66 /* Keys owned by the platform owner. */ 67 PROT_KEY, 68 }; 69 70 #endif /* DUALROOT_COT_H */ 71