mirror of
				https://github.com/smaeul/u-boot.git
				synced 2025-10-31 12:08:19 +00:00 
			
		
		
		
	Freescale's SEC block has built-in Blob Protocol which provides
a method for protecting user-defined data across system power
cycles. SEC block protects data in a data structure called a Blob,
which provides both confidentiality and integrity protection.
Encapsulating data as a blob
Each time that the Blob Protocol is used to protect data, a
different randomly generated key is used to encrypt the data.
This random key is itself encrypted using a key which is derived
from SoC's non volatile secret key and a 16 bit Key identifier.
The resulting encrypted key along with encrypted data is called a blob.
The non volatile secure key is available for use only during secure boot.
During decapsulation, the reverse process is performed to get back
the original data.
Commands added
--------------
    blob enc - encapsulating data as a cryptgraphic blob
    blob dec - decapsulating cryptgraphic blob to get the data
Commands Syntax
---------------
	blob enc src dst len km
	Encapsulate and create blob of data $len bytes long
	at address $src and store the result at address $dst.
	$km is the 16 byte key modifier is also required for
	generation/use as key for cryptographic operation. Key
	modifier should be 16 byte long.
	blob dec src dst len km
	Decapsulate the  blob of data at address $src and
	store result of $len byte at addr $dst.
	$km is the 16 byte key modifier is also required for
	generation/use as key for cryptographic operation. Key
	modifier should be 16 byte long.
Signed-off-by: Ruchika Gupta <ruchika.gupta@freescale.com>
Reviewed-by: York Sun <yorksun@freescale.com>
		
	
			
		
			
				
	
	
		
			182 lines
		
	
	
		
			4.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			182 lines
		
	
	
		
			4.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * Common internal memory map for some Freescale SoCs
 | |
|  *
 | |
|  * Copyright 2014 Freescale Semiconductor, Inc.
 | |
|  *
 | |
|  */
 | |
| 
 | |
| #ifndef __FSL_SEC_H
 | |
| #define __FSL_SEC_H
 | |
| 
 | |
| #include <common.h>
 | |
| #include <asm/io.h>
 | |
| 
 | |
| #ifdef CONFIG_SYS_FSL_SEC_LE
 | |
| #define sec_in32(a)       in_le32(a)
 | |
| #define sec_out32(a, v)   out_le32(a, v)
 | |
| #define sec_in16(a)       in_le16(a)
 | |
| #define sec_clrbits32     clrbits_le32
 | |
| #define sec_setbits32     setbits_le32
 | |
| #elif defined(CONFIG_SYS_FSL_SEC_BE)
 | |
| #define sec_in32(a)       in_be32(a)
 | |
| #define sec_out32(a, v)   out_be32(a, v)
 | |
| #define sec_in16(a)       in_be16(a)
 | |
| #define sec_clrbits32     clrbits_be32
 | |
| #define sec_setbits32     setbits_be32
 | |
| #else
 | |
| #error Neither CONFIG_SYS_FSL_SEC_LE nor CONFIG_SYS_FSL_SEC_BE is defined
 | |
| #endif
 | |
| 
 | |
| /* Security Engine Block (MS = Most Sig., LS = Least Sig.) */
 | |
| #if CONFIG_SYS_FSL_SEC_COMPAT >= 4
 | |
| /* RNG4 TRNG test registers */
 | |
| struct rng4tst {
 | |
| #define RTMCTL_PRGM 0x00010000	/* 1 -> program mode, 0 -> run mode */
 | |
| 	u32 rtmctl;		/* misc. control register */
 | |
| 	u32 rtscmisc;		/* statistical check misc. register */
 | |
| 	u32 rtpkrrng;		/* poker range register */
 | |
| #define RTSDCTL_ENT_DLY_MIN	1200
 | |
| #define RTSDCTL_ENT_DLY_MAX	12800
 | |
| 	union {
 | |
| 		u32 rtpkrmax;	/* PRGM=1: poker max. limit register */
 | |
| 		u32 rtpkrsq;	/* PRGM=0: poker square calc. result register */
 | |
| 	};
 | |
| #define RTSDCTL_ENT_DLY_SHIFT 16
 | |
| #define RTSDCTL_ENT_DLY_MASK (0xffff << RTSDCTL_ENT_DLY_SHIFT)
 | |
| 	u32 rtsdctl;		/* seed control register */
 | |
| 	union {
 | |
| 		u32 rtsblim;	/* PRGM=1: sparse bit limit register */
 | |
| 		u32 rttotsam;	/* PRGM=0: total samples register */
 | |
| 	};
 | |
| 	u32 rtfreqmin;		/* frequency count min. limit register */
 | |
| 	union {
 | |
| 		u32 rtfreqmax;	/* PRGM=1: freq. count max. limit register */
 | |
| 		u32 rtfreqcnt;	/* PRGM=0: freq. count register */
 | |
| 	};
 | |
| 	u32 rsvd1[40];
 | |
| #define RNG_STATE0_HANDLE_INSTANTIATED	0x00000001
 | |
| 	u32 rdsta;		/*RNG DRNG Status Register*/
 | |
| 	u32 rsvd2[15];
 | |
| };
 | |
| 
 | |
| typedef struct ccsr_sec {
 | |
| 	u32	res0;
 | |
| 	u32	mcfgr;		/* Master CFG Register */
 | |
| 	u8	res1[0x4];
 | |
| 	u32	scfgr;
 | |
| 	struct {
 | |
| 		u32	ms;	/* Job Ring LIODN Register, MS */
 | |
| 		u32	ls;	/* Job Ring LIODN Register, LS */
 | |
| 	} jrliodnr[4];
 | |
| 	u8	res2[0x2c];
 | |
| 	u32	jrstartr;	/* Job Ring Start Register */
 | |
| 	struct {
 | |
| 		u32	ms;	/* RTIC LIODN Register, MS */
 | |
| 		u32	ls;	/* RTIC LIODN Register, LS */
 | |
| 	} rticliodnr[4];
 | |
| 	u8	res3[0x1c];
 | |
| 	u32	decorr;		/* DECO Request Register */
 | |
| 	struct {
 | |
| 		u32	ms;	/* DECO LIODN Register, MS */
 | |
| 		u32	ls;	/* DECO LIODN Register, LS */
 | |
| 	} decoliodnr[8];
 | |
| 	u8	res4[0x40];
 | |
| 	u32	dar;		/* DECO Avail Register */
 | |
| 	u32	drr;		/* DECO Reset Register */
 | |
| 	u8	res5[0x4d8];
 | |
| 	struct rng4tst rng;	/* RNG Registers */
 | |
| 	u8	res11[0x8a0];
 | |
| 	u32	crnr_ms;	/* CHA Revision Number Register, MS */
 | |
| 	u32	crnr_ls;	/* CHA Revision Number Register, LS */
 | |
| 	u32	ctpr_ms;	/* Compile Time Parameters Register, MS */
 | |
| 	u32	ctpr_ls;	/* Compile Time Parameters Register, LS */
 | |
| 	u8	res6[0x10];
 | |
| 	u32	far_ms;		/* Fault Address Register, MS */
 | |
| 	u32	far_ls;		/* Fault Address Register, LS */
 | |
| 	u32	falr;		/* Fault Address LIODN Register */
 | |
| 	u32	fadr;		/* Fault Address Detail Register */
 | |
| 	u8	res7[0x4];
 | |
| 	u32	csta;		/* CAAM Status Register */
 | |
| 	u8	res8[0x8];
 | |
| 	u32	rvid;		/* Run Time Integrity Checking Version ID Reg.*/
 | |
| 	u32	ccbvid;		/* CHA Cluster Block Version ID Register */
 | |
| 	u32	chavid_ms;	/* CHA Version ID Register, MS */
 | |
| 	u32	chavid_ls;	/* CHA Version ID Register, LS */
 | |
| 	u32	chanum_ms;	/* CHA Number Register, MS */
 | |
| 	u32	chanum_ls;	/* CHA Number Register, LS */
 | |
| 	u32	secvid_ms;	/* SEC Version ID Register, MS */
 | |
| 	u32	secvid_ls;	/* SEC Version ID Register, LS */
 | |
| 	u8	res9[0x6020];
 | |
| 	u32	qilcr_ms;	/* Queue Interface LIODN CFG Register, MS */
 | |
| 	u32	qilcr_ls;	/* Queue Interface LIODN CFG Register, LS */
 | |
| 	u8	res10[0x8fd8];
 | |
| } ccsr_sec_t;
 | |
| 
 | |
| #define SEC_CTPR_MS_AXI_LIODN		0x08000000
 | |
| #define SEC_CTPR_MS_QI			0x02000000
 | |
| #define SEC_CTPR_MS_VIRT_EN_INCL	0x00000001
 | |
| #define SEC_CTPR_MS_VIRT_EN_POR		0x00000002
 | |
| #define SEC_RVID_MA			0x0f000000
 | |
| #define SEC_CHANUM_MS_JRNUM_MASK	0xf0000000
 | |
| #define SEC_CHANUM_MS_JRNUM_SHIFT	28
 | |
| #define SEC_CHANUM_MS_DECONUM_MASK	0x0f000000
 | |
| #define SEC_CHANUM_MS_DECONUM_SHIFT	24
 | |
| #define SEC_SECVID_MS_IPID_MASK	0xffff0000
 | |
| #define SEC_SECVID_MS_IPID_SHIFT	16
 | |
| #define SEC_SECVID_MS_MAJ_REV_MASK	0x0000ff00
 | |
| #define SEC_SECVID_MS_MAJ_REV_SHIFT	8
 | |
| #define SEC_CCBVID_ERA_MASK		0xff000000
 | |
| #define SEC_CCBVID_ERA_SHIFT		24
 | |
| #define SEC_SCFGR_RDBENABLE		0x00000400
 | |
| #define SEC_SCFGR_VIRT_EN		0x00008000
 | |
| #define SEC_CHAVID_LS_RNG_SHIFT		16
 | |
| #define SEC_CHAVID_RNG_LS_MASK		0x000f0000
 | |
| 
 | |
| #define CONFIG_JRSTARTR_JR0		0x00000001
 | |
| 
 | |
| struct jr_regs {
 | |
| #ifdef CONFIG_SYS_FSL_SEC_LE
 | |
| 	u32 irba_l;
 | |
| 	u32 irba_h;
 | |
| #else
 | |
| 	u32 irba_h;
 | |
| 	u32 irba_l;
 | |
| #endif
 | |
| 	u32 rsvd1;
 | |
| 	u32 irs;
 | |
| 	u32 rsvd2;
 | |
| 	u32 irsa;
 | |
| 	u32 rsvd3;
 | |
| 	u32 irja;
 | |
| #ifdef CONFIG_SYS_FSL_SEC_LE
 | |
| 	u32 orba_l;
 | |
| 	u32 orba_h;
 | |
| #else
 | |
| 	u32 orba_h;
 | |
| 	u32 orba_l;
 | |
| #endif
 | |
| 	u32 rsvd4;
 | |
| 	u32 ors;
 | |
| 	u32 rsvd5;
 | |
| 	u32 orjr;
 | |
| 	u32 rsvd6;
 | |
| 	u32 orsf;
 | |
| 	u32 rsvd7;
 | |
| 	u32 jrsta;
 | |
| 	u32 rsvd8;
 | |
| 	u32 jrint;
 | |
| 	u32 jrcfg0;
 | |
| 	u32 jrcfg1;
 | |
| 	u32 rsvd9;
 | |
| 	u32 irri;
 | |
| 	u32 rsvd10;
 | |
| 	u32 orwi;
 | |
| 	u32 rsvd11;
 | |
| 	u32 jrcr;
 | |
| };
 | |
| 
 | |
| int sec_init(void);
 | |
| #endif
 | |
| 
 | |
| #endif /* __FSL_SEC_H */
 |