mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-16 17:44:19 +00:00
47bf3ac31e
Right now, the measured boot driver is strongly coupled with the TCG event log driver. It would not be possible to push the measurements somewhere else, for instance to a physical TPM. To enable this latter use case, turn the driver's init and teardown functions into platform hooks. Call them bl2_plat_mboot_init()/finish(). This allows each platform to implement them appropriately, depending on the type of measured boot backend they use. For example, on a platform with a physical TPM, the plat_mboot_init() hook would startup the TPM and setup it underlying bus (e.g. SPI). Move the current implementation of the init and teardown function to the FVP platform layer. Finally move the conditional compilation logic (#if MEASURED_BOOT) out of bl2_main() to improve its readability. Provide a dummy implementation in the case measured boot is not included in the build. Change-Id: Ib6474cb5a9c1e3d4a30c7f228431b22d1a6e85e3 Signed-off-by: Sandrine Bailleux <sandrine.bailleux@arm.com> Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com>
64 lines
1.6 KiB
C
64 lines
1.6 KiB
C
/*
|
|
* Copyright (c) 2020-2021, Arm Limited. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
|
|
#include <stdint.h>
|
|
|
|
#include <drivers/measured_boot/event_log.h>
|
|
#include <plat/arm/common/plat_arm.h>
|
|
|
|
/* FVP table with platform specific image IDs, names and PCRs */
|
|
static const image_data_t fvp_images_data[] = {
|
|
{ BL2_IMAGE_ID, BL2_STRING, PCR_0 }, /* Reserved for BL2 */
|
|
{ BL31_IMAGE_ID, BL31_STRING, PCR_0 },
|
|
{ BL32_IMAGE_ID, BL32_STRING, PCR_0 },
|
|
{ BL32_EXTRA1_IMAGE_ID, BL32_EXTRA1_IMAGE_STRING, PCR_0 },
|
|
{ BL32_EXTRA2_IMAGE_ID, BL32_EXTRA2_IMAGE_STRING, PCR_0 },
|
|
{ BL33_IMAGE_ID, BL33_STRING, PCR_0 },
|
|
{ HW_CONFIG_ID, HW_CONFIG_STRING, PCR_0 },
|
|
{ NT_FW_CONFIG_ID, NT_FW_CONFIG_STRING, PCR_0 },
|
|
{ SCP_BL2_IMAGE_ID, SCP_BL2_IMAGE_STRING, PCR_0 },
|
|
{ SOC_FW_CONFIG_ID, SOC_FW_CONFIG_STRING, PCR_0 },
|
|
{ TOS_FW_CONFIG_ID, TOS_FW_CONFIG_STRING, PCR_0 },
|
|
{ INVALID_ID, NULL, (unsigned int)(-1) } /* Terminator */
|
|
};
|
|
|
|
static const measured_boot_data_t fvp_measured_boot_data = {
|
|
fvp_images_data,
|
|
arm_set_nt_fw_info,
|
|
arm_set_tos_fw_info
|
|
};
|
|
|
|
/*
|
|
* Function retuns pointer to FVP plat_measured_boot_data_t structure
|
|
*/
|
|
const measured_boot_data_t *plat_get_measured_boot_data(void)
|
|
{
|
|
return &fvp_measured_boot_data;
|
|
}
|
|
|
|
void bl2_plat_mboot_init(void)
|
|
{
|
|
event_log_init();
|
|
}
|
|
|
|
void bl2_plat_mboot_finish(void)
|
|
{
|
|
uint8_t *log_addr;
|
|
size_t log_size;
|
|
int rc;
|
|
|
|
rc = event_log_finalise(&log_addr, &log_size);
|
|
if (rc != 0) {
|
|
/*
|
|
* It is a fatal error because on FVP secure world software
|
|
* assumes that a valid event log exists and will use it to
|
|
* record the measurements into the fTPM
|
|
*/
|
|
panic();
|
|
}
|
|
|
|
dump_event_log(log_addr, log_size);
|
|
}
|