Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 1 | /* |
Ulises Cardenas | 29067ab | 2015-07-02 21:26:30 -0500 | [diff] [blame] | 2 | * Copyright (C) 2010-2015 Freescale Semiconductor, Inc. |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 3 | * |
| 4 | * SPDX-License-Identifier: GPL-2.0+ |
| 5 | */ |
| 6 | |
| 7 | #include <common.h> |
Adrian Alonso | fba6f9e | 2015-10-12 13:48:14 -0500 | [diff] [blame] | 8 | #include <config.h> |
| 9 | #include <fuse.h> |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 10 | #include <asm/io.h> |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 11 | #include <asm/system.h> |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 12 | #include <asm/arch/clock.h> |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 13 | #include <asm/arch/sys_proto.h> |
Adrian Alonso | 7a7281a | 2015-10-12 13:48:08 -0500 | [diff] [blame] | 14 | #include <asm/imx-common/hab.h> |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 15 | |
| 16 | /* -------- start of HAB API updates ------------*/ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 17 | |
| 18 | #define hab_rvt_report_event_p \ |
| 19 | ( \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 20 | (is_mx6dq() && (soc_rev() >= CHIP_REV_1_5)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 21 | ((hab_rvt_report_event_t *)HAB_RVT_REPORT_EVENT_NEW) : \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 22 | (is_mx6sdl() && (soc_rev() >= CHIP_REV_1_2)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 23 | ((hab_rvt_report_event_t *)HAB_RVT_REPORT_EVENT_NEW) : \ |
| 24 | ((hab_rvt_report_event_t *)HAB_RVT_REPORT_EVENT) \ |
| 25 | ) |
| 26 | |
| 27 | #define hab_rvt_report_status_p \ |
| 28 | ( \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 29 | (is_mx6dq() && (soc_rev() >= CHIP_REV_1_5)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 30 | ((hab_rvt_report_status_t *)HAB_RVT_REPORT_STATUS_NEW) :\ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 31 | (is_mx6sdl() && (soc_rev() >= CHIP_REV_1_2)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 32 | ((hab_rvt_report_status_t *)HAB_RVT_REPORT_STATUS_NEW) :\ |
| 33 | ((hab_rvt_report_status_t *)HAB_RVT_REPORT_STATUS) \ |
| 34 | ) |
| 35 | |
| 36 | #define hab_rvt_authenticate_image_p \ |
| 37 | ( \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 38 | (is_mx6dq() && (soc_rev() >= CHIP_REV_1_5)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 39 | ((hab_rvt_authenticate_image_t *)HAB_RVT_AUTHENTICATE_IMAGE_NEW) : \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 40 | (is_mx6sdl() && (soc_rev() >= CHIP_REV_1_2)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 41 | ((hab_rvt_authenticate_image_t *)HAB_RVT_AUTHENTICATE_IMAGE_NEW) : \ |
| 42 | ((hab_rvt_authenticate_image_t *)HAB_RVT_AUTHENTICATE_IMAGE) \ |
| 43 | ) |
| 44 | |
| 45 | #define hab_rvt_entry_p \ |
| 46 | ( \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 47 | (is_mx6dq() && (soc_rev() >= CHIP_REV_1_5)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 48 | ((hab_rvt_entry_t *)HAB_RVT_ENTRY_NEW) : \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 49 | (is_mx6sdl() && (soc_rev() >= CHIP_REV_1_2)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 50 | ((hab_rvt_entry_t *)HAB_RVT_ENTRY_NEW) : \ |
| 51 | ((hab_rvt_entry_t *)HAB_RVT_ENTRY) \ |
| 52 | ) |
| 53 | |
| 54 | #define hab_rvt_exit_p \ |
| 55 | ( \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 56 | (is_mx6dq() && (soc_rev() >= CHIP_REV_1_5)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 57 | ((hab_rvt_exit_t *)HAB_RVT_EXIT_NEW) : \ |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 58 | (is_mx6sdl() && (soc_rev() >= CHIP_REV_1_2)) ? \ |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 59 | ((hab_rvt_exit_t *)HAB_RVT_EXIT_NEW) : \ |
| 60 | ((hab_rvt_exit_t *)HAB_RVT_EXIT) \ |
| 61 | ) |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 62 | |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 63 | #define IVT_SIZE 0x20 |
| 64 | #define ALIGN_SIZE 0x1000 |
| 65 | #define CSF_PAD_SIZE 0x2000 |
| 66 | #define MX6DQ_PU_IROM_MMU_EN_VAR 0x009024a8 |
| 67 | #define MX6DLS_PU_IROM_MMU_EN_VAR 0x00901dd0 |
| 68 | #define MX6SL_PU_IROM_MMU_EN_VAR 0x00900a18 |
Adrian Alonso | ee3899a | 2015-10-12 13:48:15 -0500 | [diff] [blame] | 69 | #define IS_HAB_ENABLED_BIT \ |
| 70 | (is_soc_type(MXC_SOC_MX7) ? 0x2000000 : 0x2) |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 71 | |
| 72 | /* |
| 73 | * +------------+ 0x0 (DDR_UIMAGE_START) - |
| 74 | * | Header | | |
| 75 | * +------------+ 0x40 | |
| 76 | * | | | |
| 77 | * | | | |
| 78 | * | | | |
| 79 | * | | | |
| 80 | * | Image Data | | |
| 81 | * . | | |
| 82 | * . | > Stuff to be authenticated ----+ |
| 83 | * . | | | |
| 84 | * | | | | |
| 85 | * | | | | |
| 86 | * +------------+ | | |
| 87 | * | | | | |
| 88 | * | Fill Data | | | |
| 89 | * | | | | |
| 90 | * +------------+ Align to ALIGN_SIZE | | |
| 91 | * | IVT | | | |
| 92 | * +------------+ + IVT_SIZE - | |
| 93 | * | | | |
| 94 | * | CSF DATA | <---------------------------------------------------------+ |
| 95 | * | | |
| 96 | * +------------+ |
| 97 | * | | |
| 98 | * | Fill Data | |
| 99 | * | | |
| 100 | * +------------+ + CSF_PAD_SIZE |
| 101 | */ |
| 102 | |
Ulises Cardenas | 29067ab | 2015-07-02 21:26:30 -0500 | [diff] [blame] | 103 | #define MAX_RECORD_BYTES (8*1024) /* 4 kbytes */ |
| 104 | |
| 105 | struct record { |
| 106 | uint8_t tag; /* Tag */ |
| 107 | uint8_t len[2]; /* Length */ |
| 108 | uint8_t par; /* Version */ |
| 109 | uint8_t contents[MAX_RECORD_BYTES];/* Record Data */ |
| 110 | bool any_rec_flag; |
| 111 | }; |
| 112 | |
| 113 | char *rsn_str[] = {"RSN = HAB_RSN_ANY (0x00)\n", |
| 114 | "RSN = HAB_ENG_FAIL (0x30)\n", |
| 115 | "RSN = HAB_INV_ADDRESS (0x22)\n", |
| 116 | "RSN = HAB_INV_ASSERTION (0x0C)\n", |
| 117 | "RSN = HAB_INV_CALL (0x28)\n", |
| 118 | "RSN = HAB_INV_CERTIFICATE (0x21)\n", |
| 119 | "RSN = HAB_INV_COMMAND (0x06)\n", |
| 120 | "RSN = HAB_INV_CSF (0x11)\n", |
| 121 | "RSN = HAB_INV_DCD (0x27)\n", |
| 122 | "RSN = HAB_INV_INDEX (0x0F)\n", |
| 123 | "RSN = HAB_INV_IVT (0x05)\n", |
| 124 | "RSN = HAB_INV_KEY (0x1D)\n", |
| 125 | "RSN = HAB_INV_RETURN (0x1E)\n", |
| 126 | "RSN = HAB_INV_SIGNATURE (0x18)\n", |
| 127 | "RSN = HAB_INV_SIZE (0x17)\n", |
| 128 | "RSN = HAB_MEM_FAIL (0x2E)\n", |
| 129 | "RSN = HAB_OVR_COUNT (0x2B)\n", |
| 130 | "RSN = HAB_OVR_STORAGE (0x2D)\n", |
| 131 | "RSN = HAB_UNS_ALGORITHM (0x12)\n", |
| 132 | "RSN = HAB_UNS_COMMAND (0x03)\n", |
| 133 | "RSN = HAB_UNS_ENGINE (0x0A)\n", |
| 134 | "RSN = HAB_UNS_ITEM (0x24)\n", |
| 135 | "RSN = HAB_UNS_KEY (0x1B)\n", |
| 136 | "RSN = HAB_UNS_PROTOCOL (0x14)\n", |
| 137 | "RSN = HAB_UNS_STATE (0x09)\n", |
| 138 | "RSN = INVALID\n", |
| 139 | NULL}; |
| 140 | |
| 141 | char *sts_str[] = {"STS = HAB_SUCCESS (0xF0)\n", |
| 142 | "STS = HAB_FAILURE (0x33)\n", |
| 143 | "STS = HAB_WARNING (0x69)\n", |
| 144 | "STS = INVALID\n", |
| 145 | NULL}; |
| 146 | |
| 147 | char *eng_str[] = {"ENG = HAB_ENG_ANY (0x00)\n", |
| 148 | "ENG = HAB_ENG_SCC (0x03)\n", |
| 149 | "ENG = HAB_ENG_RTIC (0x05)\n", |
| 150 | "ENG = HAB_ENG_SAHARA (0x06)\n", |
| 151 | "ENG = HAB_ENG_CSU (0x0A)\n", |
| 152 | "ENG = HAB_ENG_SRTC (0x0C)\n", |
| 153 | "ENG = HAB_ENG_DCP (0x1B)\n", |
| 154 | "ENG = HAB_ENG_CAAM (0x1D)\n", |
| 155 | "ENG = HAB_ENG_SNVS (0x1E)\n", |
| 156 | "ENG = HAB_ENG_OCOTP (0x21)\n", |
| 157 | "ENG = HAB_ENG_DTCP (0x22)\n", |
| 158 | "ENG = HAB_ENG_ROM (0x36)\n", |
| 159 | "ENG = HAB_ENG_HDCP (0x24)\n", |
| 160 | "ENG = HAB_ENG_RTL (0x77)\n", |
| 161 | "ENG = HAB_ENG_SW (0xFF)\n", |
| 162 | "ENG = INVALID\n", |
| 163 | NULL}; |
| 164 | |
| 165 | char *ctx_str[] = {"CTX = HAB_CTX_ANY(0x00)\n", |
| 166 | "CTX = HAB_CTX_FAB (0xFF)\n", |
| 167 | "CTX = HAB_CTX_ENTRY (0xE1)\n", |
| 168 | "CTX = HAB_CTX_TARGET (0x33)\n", |
| 169 | "CTX = HAB_CTX_AUTHENTICATE (0x0A)\n", |
| 170 | "CTX = HAB_CTX_DCD (0xDD)\n", |
| 171 | "CTX = HAB_CTX_CSF (0xCF)\n", |
| 172 | "CTX = HAB_CTX_COMMAND (0xC0)\n", |
| 173 | "CTX = HAB_CTX_AUT_DAT (0xDB)\n", |
| 174 | "CTX = HAB_CTX_ASSERT (0xA0)\n", |
| 175 | "CTX = HAB_CTX_EXIT (0xEE)\n", |
| 176 | "CTX = INVALID\n", |
| 177 | NULL}; |
| 178 | |
| 179 | uint8_t hab_statuses[5] = { |
| 180 | HAB_STS_ANY, |
| 181 | HAB_FAILURE, |
| 182 | HAB_WARNING, |
| 183 | HAB_SUCCESS, |
| 184 | -1 |
| 185 | }; |
| 186 | |
| 187 | uint8_t hab_reasons[26] = { |
| 188 | HAB_RSN_ANY, |
| 189 | HAB_ENG_FAIL, |
| 190 | HAB_INV_ADDRESS, |
| 191 | HAB_INV_ASSERTION, |
| 192 | HAB_INV_CALL, |
| 193 | HAB_INV_CERTIFICATE, |
| 194 | HAB_INV_COMMAND, |
| 195 | HAB_INV_CSF, |
| 196 | HAB_INV_DCD, |
| 197 | HAB_INV_INDEX, |
| 198 | HAB_INV_IVT, |
| 199 | HAB_INV_KEY, |
| 200 | HAB_INV_RETURN, |
| 201 | HAB_INV_SIGNATURE, |
| 202 | HAB_INV_SIZE, |
| 203 | HAB_MEM_FAIL, |
| 204 | HAB_OVR_COUNT, |
| 205 | HAB_OVR_STORAGE, |
| 206 | HAB_UNS_ALGORITHM, |
| 207 | HAB_UNS_COMMAND, |
| 208 | HAB_UNS_ENGINE, |
| 209 | HAB_UNS_ITEM, |
| 210 | HAB_UNS_KEY, |
| 211 | HAB_UNS_PROTOCOL, |
| 212 | HAB_UNS_STATE, |
| 213 | -1 |
| 214 | }; |
| 215 | |
| 216 | uint8_t hab_contexts[12] = { |
| 217 | HAB_CTX_ANY, |
| 218 | HAB_CTX_FAB, |
| 219 | HAB_CTX_ENTRY, |
| 220 | HAB_CTX_TARGET, |
| 221 | HAB_CTX_AUTHENTICATE, |
| 222 | HAB_CTX_DCD, |
| 223 | HAB_CTX_CSF, |
| 224 | HAB_CTX_COMMAND, |
| 225 | HAB_CTX_AUT_DAT, |
| 226 | HAB_CTX_ASSERT, |
| 227 | HAB_CTX_EXIT, |
| 228 | -1 |
| 229 | }; |
| 230 | |
| 231 | uint8_t hab_engines[16] = { |
| 232 | HAB_ENG_ANY, |
| 233 | HAB_ENG_SCC, |
| 234 | HAB_ENG_RTIC, |
| 235 | HAB_ENG_SAHARA, |
| 236 | HAB_ENG_CSU, |
| 237 | HAB_ENG_SRTC, |
| 238 | HAB_ENG_DCP, |
| 239 | HAB_ENG_CAAM, |
| 240 | HAB_ENG_SNVS, |
| 241 | HAB_ENG_OCOTP, |
| 242 | HAB_ENG_DTCP, |
| 243 | HAB_ENG_ROM, |
| 244 | HAB_ENG_HDCP, |
| 245 | HAB_ENG_RTL, |
| 246 | HAB_ENG_SW, |
| 247 | -1 |
| 248 | }; |
| 249 | |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 250 | bool is_hab_enabled(void) |
| 251 | { |
Adrian Alonso | fba6f9e | 2015-10-12 13:48:14 -0500 | [diff] [blame] | 252 | struct imx_sec_config_fuse_t *fuse = |
| 253 | (struct imx_sec_config_fuse_t *)&imx_sec_config_fuse; |
| 254 | uint32_t reg; |
| 255 | int ret; |
| 256 | |
| 257 | ret = fuse_read(fuse->bank, fuse->word, ®); |
| 258 | if (ret) { |
| 259 | puts("\nSecure boot fuse read error\n"); |
| 260 | return ret; |
| 261 | } |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 262 | |
Adrian Alonso | ee3899a | 2015-10-12 13:48:15 -0500 | [diff] [blame] | 263 | return (reg & IS_HAB_ENABLED_BIT) == IS_HAB_ENABLED_BIT; |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 264 | } |
| 265 | |
Ulises Cardenas | 29067ab | 2015-07-02 21:26:30 -0500 | [diff] [blame] | 266 | static inline uint8_t get_idx(uint8_t *list, uint8_t tgt) |
| 267 | { |
| 268 | uint8_t idx = 0; |
| 269 | uint8_t element = list[idx]; |
| 270 | while (element != -1) { |
| 271 | if (element == tgt) |
| 272 | return idx; |
| 273 | element = list[++idx]; |
| 274 | } |
| 275 | return -1; |
| 276 | } |
| 277 | |
| 278 | void process_event_record(uint8_t *event_data, size_t bytes) |
| 279 | { |
| 280 | struct record *rec = (struct record *)event_data; |
| 281 | |
| 282 | printf("\n\n%s", sts_str[get_idx(hab_statuses, rec->contents[0])]); |
| 283 | printf("%s", rsn_str[get_idx(hab_reasons, rec->contents[1])]); |
| 284 | printf("%s", ctx_str[get_idx(hab_contexts, rec->contents[2])]); |
| 285 | printf("%s", eng_str[get_idx(hab_engines, rec->contents[3])]); |
| 286 | } |
| 287 | |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 288 | void display_event(uint8_t *event_data, size_t bytes) |
| 289 | { |
| 290 | uint32_t i; |
| 291 | |
| 292 | if (!(event_data && bytes > 0)) |
| 293 | return; |
| 294 | |
| 295 | for (i = 0; i < bytes; i++) { |
| 296 | if (i == 0) |
| 297 | printf("\t0x%02x", event_data[i]); |
| 298 | else if ((i % 8) == 0) |
| 299 | printf("\n\t0x%02x", event_data[i]); |
| 300 | else |
| 301 | printf(" 0x%02x", event_data[i]); |
| 302 | } |
Ulises Cardenas | 29067ab | 2015-07-02 21:26:30 -0500 | [diff] [blame] | 303 | |
| 304 | process_event_record(event_data, bytes); |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 305 | } |
| 306 | |
| 307 | int get_hab_status(void) |
| 308 | { |
| 309 | uint32_t index = 0; /* Loop index */ |
| 310 | uint8_t event_data[128]; /* Event data buffer */ |
| 311 | size_t bytes = sizeof(event_data); /* Event size in bytes */ |
| 312 | enum hab_config config = 0; |
| 313 | enum hab_state state = 0; |
Stefano Babic | f2f07e8 | 2014-06-10 10:26:22 +0200 | [diff] [blame] | 314 | hab_rvt_report_event_t *hab_rvt_report_event; |
| 315 | hab_rvt_report_status_t *hab_rvt_report_status; |
| 316 | |
| 317 | hab_rvt_report_event = hab_rvt_report_event_p; |
| 318 | hab_rvt_report_status = hab_rvt_report_status_p; |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 319 | |
| 320 | if (is_hab_enabled()) |
| 321 | puts("\nSecure boot enabled\n"); |
| 322 | else |
| 323 | puts("\nSecure boot disabled\n"); |
| 324 | |
| 325 | /* Check HAB status */ |
| 326 | if (hab_rvt_report_status(&config, &state) != HAB_SUCCESS) { |
| 327 | printf("\nHAB Configuration: 0x%02x, HAB State: 0x%02x\n", |
| 328 | config, state); |
| 329 | |
| 330 | /* Display HAB Error events */ |
| 331 | while (hab_rvt_report_event(HAB_FAILURE, index, event_data, |
| 332 | &bytes) == HAB_SUCCESS) { |
| 333 | puts("\n"); |
| 334 | printf("--------- HAB Event %d -----------------\n", |
| 335 | index + 1); |
| 336 | puts("event data:\n"); |
| 337 | display_event(event_data, bytes); |
| 338 | puts("\n"); |
| 339 | bytes = sizeof(event_data); |
| 340 | index++; |
| 341 | } |
| 342 | } |
| 343 | /* Display message if no HAB events are found */ |
| 344 | else { |
| 345 | printf("\nHAB Configuration: 0x%02x, HAB State: 0x%02x\n", |
| 346 | config, state); |
| 347 | puts("No HAB Events Found!\n\n"); |
| 348 | } |
| 349 | return 0; |
| 350 | } |
| 351 | |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 352 | uint32_t authenticate_image(uint32_t ddr_start, uint32_t image_size) |
| 353 | { |
| 354 | uint32_t load_addr = 0; |
| 355 | size_t bytes; |
| 356 | ptrdiff_t ivt_offset = 0; |
| 357 | int result = 0; |
| 358 | ulong start; |
| 359 | hab_rvt_authenticate_image_t *hab_rvt_authenticate_image; |
| 360 | hab_rvt_entry_t *hab_rvt_entry; |
| 361 | hab_rvt_exit_t *hab_rvt_exit; |
| 362 | |
| 363 | hab_rvt_authenticate_image = hab_rvt_authenticate_image_p; |
| 364 | hab_rvt_entry = hab_rvt_entry_p; |
| 365 | hab_rvt_exit = hab_rvt_exit_p; |
| 366 | |
| 367 | if (is_hab_enabled()) { |
| 368 | printf("\nAuthenticate image from DDR location 0x%x...\n", |
| 369 | ddr_start); |
| 370 | |
| 371 | hab_caam_clock_enable(1); |
| 372 | |
| 373 | if (hab_rvt_entry() == HAB_SUCCESS) { |
| 374 | /* If not already aligned, Align to ALIGN_SIZE */ |
| 375 | ivt_offset = (image_size + ALIGN_SIZE - 1) & |
| 376 | ~(ALIGN_SIZE - 1); |
| 377 | |
| 378 | start = ddr_start; |
| 379 | bytes = ivt_offset + IVT_SIZE + CSF_PAD_SIZE; |
| 380 | #ifdef DEBUG |
| 381 | printf("\nivt_offset = 0x%x, ivt addr = 0x%x\n", |
| 382 | ivt_offset, ddr_start + ivt_offset); |
| 383 | puts("Dumping IVT\n"); |
| 384 | print_buffer(ddr_start + ivt_offset, |
| 385 | (void *)(ddr_start + ivt_offset), |
| 386 | 4, 0x8, 0); |
| 387 | |
| 388 | puts("Dumping CSF Header\n"); |
| 389 | print_buffer(ddr_start + ivt_offset+IVT_SIZE, |
| 390 | (void *)(ddr_start + ivt_offset+IVT_SIZE), |
| 391 | 4, 0x10, 0); |
| 392 | |
| 393 | get_hab_status(); |
| 394 | |
| 395 | puts("\nCalling authenticate_image in ROM\n"); |
| 396 | printf("\tivt_offset = 0x%x\n", ivt_offset); |
| 397 | printf("\tstart = 0x%08lx\n", start); |
| 398 | printf("\tbytes = 0x%x\n", bytes); |
| 399 | #endif |
| 400 | /* |
| 401 | * If the MMU is enabled, we have to notify the ROM |
| 402 | * code, or it won't flush the caches when needed. |
| 403 | * This is done, by setting the "pu_irom_mmu_enabled" |
| 404 | * word to 1. You can find its address by looking in |
| 405 | * the ROM map. This is critical for |
| 406 | * authenticate_image(). If MMU is enabled, without |
| 407 | * setting this bit, authentication will fail and may |
| 408 | * crash. |
| 409 | */ |
| 410 | /* Check MMU enabled */ |
Adrian Alonso | ee3899a | 2015-10-12 13:48:15 -0500 | [diff] [blame] | 411 | if (is_soc_type(MXC_SOC_MX6) && get_cr() & CR_M) { |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 412 | if (is_mx6dq()) { |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 413 | /* |
| 414 | * This won't work on Rev 1.0.0 of |
| 415 | * i.MX6Q/D, since their ROM doesn't |
| 416 | * do cache flushes. don't think any |
| 417 | * exist, so we ignore them. |
| 418 | */ |
Ye.Li | ec0f953 | 2015-07-11 11:38:44 +0800 | [diff] [blame] | 419 | if (!is_mx6dqp()) |
| 420 | writel(1, MX6DQ_PU_IROM_MMU_EN_VAR); |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 421 | } else if (is_mx6sdl()) { |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 422 | writel(1, MX6DLS_PU_IROM_MMU_EN_VAR); |
Peng Fan | 27cd0da | 2016-05-23 18:35:56 +0800 | [diff] [blame^] | 423 | } else if (is_mx6sl()) { |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 424 | writel(1, MX6SL_PU_IROM_MMU_EN_VAR); |
| 425 | } |
| 426 | } |
| 427 | |
| 428 | load_addr = (uint32_t)hab_rvt_authenticate_image( |
| 429 | HAB_CID_UBOOT, |
| 430 | ivt_offset, (void **)&start, |
| 431 | (size_t *)&bytes, NULL); |
| 432 | if (hab_rvt_exit() != HAB_SUCCESS) { |
| 433 | puts("hab exit function fail\n"); |
| 434 | load_addr = 0; |
| 435 | } |
| 436 | } else { |
| 437 | puts("hab entry function fail\n"); |
| 438 | } |
| 439 | |
| 440 | hab_caam_clock_enable(0); |
| 441 | |
| 442 | get_hab_status(); |
| 443 | } else { |
| 444 | puts("hab fuse not enabled\n"); |
| 445 | } |
| 446 | |
| 447 | if ((!is_hab_enabled()) || (load_addr != 0)) |
| 448 | result = 1; |
| 449 | |
| 450 | return result; |
| 451 | } |
| 452 | |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 453 | int do_hab_status(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[]) |
| 454 | { |
| 455 | if ((argc != 1)) { |
| 456 | cmd_usage(cmdtp); |
| 457 | return 1; |
| 458 | } |
| 459 | |
| 460 | get_hab_status(); |
| 461 | |
| 462 | return 0; |
| 463 | } |
| 464 | |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 465 | static int do_authenticate_image(cmd_tbl_t *cmdtp, int flag, int argc, |
| 466 | char * const argv[]) |
| 467 | { |
| 468 | ulong addr, ivt_offset; |
| 469 | int rcode = 0; |
| 470 | |
| 471 | if (argc < 3) |
| 472 | return CMD_RET_USAGE; |
| 473 | |
| 474 | addr = simple_strtoul(argv[1], NULL, 16); |
| 475 | ivt_offset = simple_strtoul(argv[2], NULL, 16); |
| 476 | |
| 477 | rcode = authenticate_image(addr, ivt_offset); |
| 478 | |
| 479 | return rcode; |
| 480 | } |
| 481 | |
Stefano Babic | b83c709 | 2013-06-28 00:20:21 +0200 | [diff] [blame] | 482 | U_BOOT_CMD( |
| 483 | hab_status, CONFIG_SYS_MAXARGS, 1, do_hab_status, |
| 484 | "display HAB status", |
| 485 | "" |
| 486 | ); |
Nitin Garg | 36c1ca4 | 2014-09-16 13:33:25 -0500 | [diff] [blame] | 487 | |
| 488 | U_BOOT_CMD( |
| 489 | hab_auth_img, 3, 0, do_authenticate_image, |
| 490 | "authenticate image via HAB", |
| 491 | "addr ivt_offset\n" |
| 492 | "addr - image hex address\n" |
| 493 | "ivt_offset - hex offset of IVT in the image" |
| 494 | ); |