xref: /rk3399_rockchip-uboot/include/optee_include/OpteeClientInterface.h (revision 8d6469cd312d1a3fc9be75da54ec1070f7ba5089)
1 /*
2  * Copyright 2017, Rockchip Electronics Co., Ltd
3  * hisping lin, <hisping.lin@rock-chips.com>
4  *
5  * SPDX-License-Identifier:	GPL-2.0+
6  */
7 #ifndef _OPTEECLIENTTEST_H_
8 #define _OPTEECLIENTTEST_H_
9 
10 #include <optee_include/tee_client_api.h>
11 
12 enum RK_OEM_OTP_KEYID {
13 	RK_OEM_OTP_KEY0 = 0,
14 	RK_OEM_OTP_KEY1 = 1,
15 	RK_OEM_OTP_KEY2 = 2,
16 	RK_OEM_OTP_KEY3 = 3,
17 	RK_OEM_OTP_KEY_FW = 10,	//keyid of fw_encryption_key
18 	RK_OEM_OTP_KEYMAX
19 };
20 
21 enum RK_HDCP_KEYID {
22 	RK_HDCP_KEY0 = 0,
23 	RK_HDCP_KEY1 = 1,
24 	RK_HDCP_KEYMAX
25 };
26 
27 enum RK_ESCK_KEYID {
28 	RK_ESCK_KEY0 = 0,
29 	RK_ESCK_KEYMAX
30 };
31 
32 /* Crypto mode */
33 enum RK_CIPIHER_MODE {
34 	RK_CIPHER_MODE_ECB = 0,
35 	RK_CIPHER_MODE_CBC = 1,
36 	RK_CIPHER_MODE_CTS = 2,
37 	RK_CIPHER_MODE_CTR = 3,
38 	RK_CIPHER_MODE_CFB = 4,
39 	RK_CIPHER_MODE_OFB = 5,
40 	RK_CIPHER_MODE_XTS = 6,
41 	RK_CIPHER_MODE_CCM = 7,
42 	RK_CIPHER_MODE_GCM = 8,
43 	RK_CIPHER_MODE_CMAC = 9,
44 	RK_CIPHER_MODE_CBC_MAC = 10,
45 	RK_CIPHER_MODE_MAX
46 };
47 
48 /* Crypto algorithm */
49 enum RK_CRYPTO_ALGO {
50 	RK_ALGO_AES = 1,
51 	RK_ALGO_DES,
52 	RK_ALGO_TDES,
53 	RK_ALGO_SM4,
54 	RK_ALGO_ALGO_MAX
55 };
56 
57 typedef struct {
58 	uint32_t	algo;
59 	uint32_t	mode;
60 	uint32_t	operation;
61 	uint8_t		key[64];
62 	uint32_t	key_len;
63 	uint8_t		iv[16];
64 	void		*reserved;
65 } rk_cipher_config;
66 
67 /* Crypto operation */
68 #define RK_MODE_ENCRYPT			1
69 #define RK_MODE_DECRYPT			0
70 
71 #define AES_BLOCK_SIZE			16
72 #define SM4_BLOCK_SIZE			16
73 #define RK_CRYPTO_MAX_DATA_LEN		(1 * 1024 * 1024)
74 
75 #define ATAP_HEX_UUID_LEN 32
76 #define ATTEST_DH_SIZE     8
77 #define ATTEST_UUID_SIZE     (ATAP_HEX_UUID_LEN+1)
78 #define ATTEST_CA_OUT_SIZE     256
79 
80 void optee_client_init(void);
81 uint32_t trusty_read_rollback_index(uint32_t slot, uint64_t *value);
82 uint32_t trusty_write_rollback_index(uint32_t slot, uint64_t value);
83 uint32_t trusty_read_permanent_attributes(uint8_t *attributes, uint32_t size);
84 uint32_t trusty_write_permanent_attributes(uint8_t *attributes, uint32_t size);
85 uint32_t trusty_read_permanent_attributes_cer(uint8_t *attributes,
86 					      uint32_t size);
87 uint32_t trusty_write_permanent_attributes_cer(uint8_t *attributes,
88 					       uint32_t size);
89 uint32_t trusty_read_lock_state(uint8_t *lock_state);
90 uint32_t trusty_write_lock_state(uint8_t lock_state);
91 uint32_t trusty_read_flash_lock_state(uint8_t *flash_lock_state);
92 uint32_t trusty_write_flash_lock_state(uint8_t flash_lock_state);
93 
94 uint32_t trusty_read_attribute_hash(uint32_t *buf, uint32_t length);
95 uint32_t trusty_write_attribute_hash(uint32_t *buf, uint32_t length);
96 uint32_t trusty_notify_optee_uboot_end(void);
97 uint32_t trusty_read_vbootkey_hash(uint32_t *buf, uint32_t length);
98 uint32_t trusty_write_vbootkey_hash(uint32_t *buf, uint32_t length);
99 uint32_t trusty_read_vbootkey_enable_flag(uint8_t *flag);
100 uint32_t trusty_write_ta_encryption_key(uint32_t *buf, uint32_t length);
101 uint32_t trusty_ta_encryption_key_is_written(uint8_t *value);
102 uint32_t trusty_write_oem_encrypt_data(uint32_t *buf, uint32_t length);
103 uint32_t trusty_oem_encrypt_data_is_written(uint8_t *value);
104 uint32_t trusty_check_security_level_flag(uint8_t flag);
105 uint32_t trusty_write_oem_huk(uint32_t *buf, uint32_t length);
106 uint32_t trusty_read_permanent_attributes_flag(uint8_t *attributes);
107 uint32_t trusty_write_permanent_attributes_flag(uint8_t attributes);
108 uint32_t trusty_write_oem_ns_otp(uint32_t byte_off, uint8_t *byte_buf, uint32_t byte_len);
109 uint32_t trusty_read_oem_ns_otp(uint32_t byte_off, uint8_t *byte_buf, uint32_t byte_len);
110 uint32_t trusty_write_oem_otp_key(enum RK_OEM_OTP_KEYID key_id,
111 				  uint8_t *byte_buf, uint32_t byte_len);
112 uint32_t trusty_oem_otp_key_is_written(enum RK_OEM_OTP_KEYID key_id, uint8_t *value);
113 uint32_t trusty_set_oem_hr_otp_read_lock(enum RK_OEM_OTP_KEYID key_id);
114 uint32_t trusty_oem_otp_key_cipher(enum RK_OEM_OTP_KEYID key_id, rk_cipher_config *config,
115 				   uint32_t src_phys_addr, uint32_t dst_phys_addr,
116 				   uint32_t len);
117 uint32_t trusty_oem_user_ta_transfer(void);
118 uint32_t trusty_oem_user_ta_storage(void);
119 uint32_t trusty_write_oem_hdcp_key(enum RK_HDCP_KEYID key_id,
120 				  uint8_t *byte_buf, uint32_t byte_len);
121 uint32_t trusty_oem_hdcp_key_is_written(enum RK_HDCP_KEYID key_id, uint8_t *value);
122 uint32_t trusty_set_oem_hdcp_key_mask(enum RK_HDCP_KEYID key_id);
123 uint32_t trusty_attest_dh(uint8_t *dh, uint32_t *dh_size);
124 uint32_t trusty_attest_uuid(uint8_t *uuid, uint32_t *uuid_size);
125 uint32_t trusty_attest_get_ca
126 	(uint8_t *operation_start, uint32_t *operation_size,
127 	 uint8_t *out, uint32_t *out_len);
128 uint32_t trusty_attest_set_ca(uint8_t *ca_response, uint32_t *ca_response_size);
129 
130 #endif
131