mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-05-02 17:00:53 +00:00
d679cdecb1
Retrieved the platform attestation token and delegated realm attestation key through the PSA delegated attestation layer. Even though FVP doesn't support RSS hardware today, it can still leverage the RSS implementation of these PSA interfaces in their mocking form (see PLAT_RSS_NOT_SUPPORTED). Therefore, platform APIs now call these PSA interfaces instead of directly providing these hardcoded values. Change-Id: I31d0ca58f6f1a444f513d954da4e3e67757321ad Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com>
216 lines
7.1 KiB
C
216 lines
7.1 KiB
C
/*
|
|
* Copyright (c) 2022-2023, Arm Limited. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*
|
|
*/
|
|
|
|
#include <string.h>
|
|
|
|
#include <delegated_attestation.h>
|
|
#include <psa/client.h>
|
|
#include <psa_manifest/sid.h>
|
|
|
|
#if !PLAT_RSS_NOT_SUPPORTED
|
|
psa_status_t
|
|
rss_delegated_attest_get_delegated_key(uint8_t ecc_curve,
|
|
uint32_t key_bits,
|
|
uint8_t *key_buf,
|
|
size_t key_buf_size,
|
|
size_t *key_size,
|
|
uint32_t hash_algo)
|
|
{
|
|
psa_status_t status;
|
|
psa_invec in_vec[] = {
|
|
{&ecc_curve, sizeof(ecc_curve)},
|
|
{&key_bits, sizeof(key_bits)},
|
|
{&hash_algo, sizeof(hash_algo)}
|
|
};
|
|
psa_outvec out_vec[] = {
|
|
{key_buf, key_buf_size}
|
|
};
|
|
|
|
if (key_size == NULL) {
|
|
return PSA_ERROR_INVALID_ARGUMENT;
|
|
}
|
|
|
|
status = psa_call(RSS_DELEGATED_SERVICE_HANDLE,
|
|
RSS_DELEGATED_ATTEST_GET_DELEGATED_KEY,
|
|
in_vec, IOVEC_LEN(in_vec),
|
|
out_vec, IOVEC_LEN(out_vec));
|
|
if (status == PSA_SUCCESS) {
|
|
*key_size = out_vec[0].len;
|
|
}
|
|
|
|
return status;
|
|
}
|
|
|
|
psa_status_t
|
|
rss_delegated_attest_get_token(const uint8_t *dak_pub_hash,
|
|
size_t dak_pub_hash_size,
|
|
uint8_t *token_buf,
|
|
size_t token_buf_size,
|
|
size_t *token_size)
|
|
{
|
|
psa_status_t status;
|
|
psa_invec in_vec[] = {
|
|
{dak_pub_hash, dak_pub_hash_size}
|
|
};
|
|
psa_outvec out_vec[] = {
|
|
{token_buf, token_buf_size}
|
|
};
|
|
|
|
if (token_size == NULL) {
|
|
return PSA_ERROR_INVALID_ARGUMENT;
|
|
}
|
|
|
|
status = psa_call(RSS_DELEGATED_SERVICE_HANDLE,
|
|
RSS_DELEGATED_ATTEST_GET_PLATFORM_TOKEN,
|
|
in_vec, IOVEC_LEN(in_vec),
|
|
out_vec, IOVEC_LEN(out_vec));
|
|
if (status == PSA_SUCCESS) {
|
|
*token_size = out_vec[0].len;
|
|
}
|
|
|
|
return status;
|
|
}
|
|
|
|
|
|
#else /* !PLAT_RSS_NOT_SUPPORTED */
|
|
|
|
static const uint8_t delegated_key[] = {
|
|
0x20, 0x11, 0xC7, 0xF0, 0x3C, 0xEE, 0x43, 0x25, 0x17, 0x6E,
|
|
0x52, 0x4F, 0x03, 0x3C, 0x0C, 0xE1, 0xE2, 0x1A, 0x76, 0xE6,
|
|
0xC1, 0xA4, 0xF0, 0xB8, 0x39, 0xAA, 0x1D, 0xF6, 0x1E, 0x0E,
|
|
0x8A, 0x5C, 0x8A, 0x05, 0x74, 0x0F, 0x9B, 0x69, 0xEF, 0xA7,
|
|
0xEB, 0x1A, 0x41, 0x85, 0xBD, 0x11, 0x7F, 0x68
|
|
};
|
|
|
|
static const uint8_t platform_token[] = {
|
|
0xD2, 0x84, 0x44, 0xA1, 0x01, 0x38, 0x22, 0xA0,
|
|
0x59, 0x02, 0x33, 0xA9, 0x19, 0x01, 0x09, 0x78,
|
|
0x1C, 0x68, 0x74, 0x74, 0x70, 0x3A, 0x2F, 0x2F,
|
|
0x61, 0x72, 0x6D, 0x2E, 0x63, 0x6F, 0x6D, 0x2F,
|
|
0x43, 0x43, 0x41, 0x2D, 0x53, 0x53, 0x44, 0x2F,
|
|
0x31, 0x2E, 0x30, 0x2E, 0x30, 0x0A, 0x58, 0x20,
|
|
0xB5, 0x97, 0x3C, 0xB6, 0x8B, 0xAA, 0x9F, 0xC5,
|
|
0x55, 0x58, 0x78, 0x6B, 0x7E, 0xC6, 0x7F, 0x69,
|
|
0xE4, 0x0D, 0xF5, 0xBA, 0x5A, 0xA9, 0x21, 0xCD,
|
|
0x0C, 0x27, 0xF4, 0x05, 0x87, 0xA0, 0x11, 0xEA,
|
|
0x19, 0x09, 0x5C, 0x58, 0x20, 0x7F, 0x45, 0x4C,
|
|
0x46, 0x02, 0x01, 0x01, 0x00, 0x00, 0x00, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x03, 0x00, 0x3E,
|
|
0x00, 0x01, 0x00, 0x00, 0x00, 0x50, 0x58, 0x00,
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x19, 0x01, 0x00,
|
|
0x58, 0x21, 0x01, 0x07, 0x06, 0x05, 0x04, 0x03,
|
|
0x02, 0x01, 0x00, 0x0F, 0x0E, 0x0D, 0x0C, 0x0B,
|
|
0x0A, 0x09, 0x08, 0x17, 0x16, 0x15, 0x14, 0x13,
|
|
0x12, 0x11, 0x10, 0x1F, 0x1E, 0x1D, 0x1C, 0x1B,
|
|
0x1A, 0x19, 0x18, 0x19, 0x09, 0x61, 0x58, 0x21,
|
|
0x01, 0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01,
|
|
0x00, 0x0F, 0x0E, 0x0D, 0x0C, 0x0B, 0x0A, 0x09,
|
|
0x08, 0x17, 0x16, 0x15, 0x14, 0x13, 0x12, 0x11,
|
|
0x10, 0x1F, 0x1E, 0x1D, 0x1C, 0x1B, 0x1A, 0x19,
|
|
0x18, 0x19, 0x09, 0x5B, 0x19, 0x30, 0x03, 0x19,
|
|
0x09, 0x62, 0x67, 0x73, 0x68, 0x61, 0x2D, 0x32,
|
|
0x35, 0x36, 0x19, 0x09, 0x5F, 0x84, 0xA5, 0x01,
|
|
0x62, 0x42, 0x4C, 0x05, 0x58, 0x20, 0x07, 0x06,
|
|
0x05, 0x04, 0x03, 0x02, 0x01, 0x00, 0x0F, 0x0E,
|
|
0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08, 0x17, 0x16,
|
|
0x15, 0x14, 0x13, 0x12, 0x11, 0x10, 0x1F, 0x1E,
|
|
0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18, 0x04, 0x65,
|
|
0x33, 0x2E, 0x34, 0x2E, 0x32, 0x02, 0x58, 0x20,
|
|
0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00,
|
|
0x0F, 0x0E, 0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08,
|
|
0x17, 0x16, 0x15, 0x14, 0x13, 0x12, 0x11, 0x10,
|
|
0x1F, 0x1E, 0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18,
|
|
0x06, 0x74, 0x54, 0x46, 0x2D, 0x4D, 0x5F, 0x53,
|
|
0x48, 0x41, 0x32, 0x35, 0x36, 0x4D, 0x65, 0x6D,
|
|
0x50, 0x72, 0x65, 0x58, 0x49, 0x50, 0xA4, 0x01,
|
|
0x62, 0x4D, 0x31, 0x05, 0x58, 0x20, 0x07, 0x06,
|
|
0x05, 0x04, 0x03, 0x02, 0x01, 0x00, 0x0F, 0x0E,
|
|
0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08, 0x17, 0x16,
|
|
0x15, 0x14, 0x13, 0x12, 0x11, 0x10, 0x1F, 0x1E,
|
|
0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18, 0x04, 0x63,
|
|
0x31, 0x2E, 0x32, 0x02, 0x58, 0x20, 0x07, 0x06,
|
|
0x05, 0x04, 0x03, 0x02, 0x01, 0x00, 0x0F, 0x0E,
|
|
0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08, 0x17, 0x16,
|
|
0x15, 0x14, 0x13, 0x12, 0x11, 0x10, 0x1F, 0x1E,
|
|
0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18, 0xA4, 0x01,
|
|
0x62, 0x4D, 0x32, 0x05, 0x58, 0x20, 0x07, 0x06,
|
|
0x05, 0x04, 0x03, 0x02, 0x01, 0x00, 0x0F, 0x0E,
|
|
0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08, 0x17, 0x16,
|
|
0x15, 0x14, 0x13, 0x12, 0x11, 0x10, 0x1F, 0x1E,
|
|
0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18, 0x04, 0x65,
|
|
0x31, 0x2E, 0x32, 0x2E, 0x33, 0x02, 0x58, 0x20,
|
|
0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00,
|
|
0x0F, 0x0E, 0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08,
|
|
0x17, 0x16, 0x15, 0x14, 0x13, 0x12, 0x11, 0x10,
|
|
0x1F, 0x1E, 0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18,
|
|
0xA4, 0x01, 0x62, 0x4D, 0x33, 0x05, 0x58, 0x20,
|
|
0x07, 0x06, 0x05, 0x04, 0x03, 0x02, 0x01, 0x00,
|
|
0x0F, 0x0E, 0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08,
|
|
0x17, 0x16, 0x15, 0x14, 0x13, 0x12, 0x11, 0x10,
|
|
0x1F, 0x1E, 0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18,
|
|
0x04, 0x61, 0x31, 0x02, 0x58, 0x20, 0x07, 0x06,
|
|
0x05, 0x04, 0x03, 0x02, 0x01, 0x00, 0x0F, 0x0E,
|
|
0x0D, 0x0C, 0x0B, 0x0A, 0x09, 0x08, 0x17, 0x16,
|
|
0x15, 0x14, 0x13, 0x12, 0x11, 0x10, 0x1F, 0x1E,
|
|
0x1D, 0x1C, 0x1B, 0x1A, 0x19, 0x18, 0x19, 0x09,
|
|
0x60, 0x6C, 0x77, 0x68, 0x61, 0x74, 0x65, 0x76,
|
|
0x65, 0x72, 0x2E, 0x63, 0x6F, 0x6D, 0x58, 0x60,
|
|
0xE6, 0xB6, 0x38, 0x4F, 0xAE, 0x3F, 0x6E, 0x67,
|
|
0xF5, 0xD4, 0x97, 0x4B, 0x3F, 0xFD, 0x0A, 0xFA,
|
|
0x1D, 0xF0, 0x2F, 0x73, 0xB8, 0xFF, 0x5F, 0x02,
|
|
0xC0, 0x0F, 0x40, 0xAC, 0xF3, 0xA2, 0x9D, 0xB5,
|
|
0x31, 0x50, 0x16, 0x4F, 0xFA, 0x34, 0x3D, 0x0E,
|
|
0xAF, 0xE0, 0xD0, 0xD1, 0x6C, 0xF0, 0x9D, 0xC1,
|
|
0x01, 0x42, 0xA2, 0x3C, 0xCE, 0xD4, 0x4A, 0x59,
|
|
0xDC, 0x29, 0x0A, 0x30, 0x93, 0x5F, 0xB4, 0x98,
|
|
0x61, 0xBA, 0xE3, 0x91, 0x22, 0x95, 0x24, 0xF4,
|
|
0xAE, 0x47, 0x93, 0xD3, 0x84, 0xA3, 0x76, 0xD0,
|
|
0xC1, 0x26, 0x96, 0x53, 0xA3, 0x60, 0x3F, 0x6C,
|
|
0x75, 0x96, 0x90, 0x6A, 0xF9, 0x4E, 0xDA, 0x30
|
|
};
|
|
|
|
psa_status_t
|
|
rss_delegated_attest_get_delegated_key(uint8_t ecc_curve,
|
|
uint32_t key_bits,
|
|
uint8_t *key_buf,
|
|
size_t key_buf_size,
|
|
size_t *key_size,
|
|
uint32_t hash_algo)
|
|
{
|
|
(void)ecc_curve;
|
|
(void)key_bits;
|
|
(void)hash_algo;
|
|
|
|
if (key_buf_size < sizeof(delegated_key)) {
|
|
return PSA_ERROR_BUFFER_TOO_SMALL;
|
|
}
|
|
|
|
(void)memcpy(key_buf, delegated_key, sizeof(delegated_key));
|
|
*key_size = sizeof(delegated_key);
|
|
|
|
return PSA_SUCCESS;
|
|
}
|
|
psa_status_t
|
|
rss_delegated_attest_get_token(const uint8_t *dak_pub_hash,
|
|
size_t dak_pub_hash_size,
|
|
uint8_t *token_buf,
|
|
size_t token_buf_size,
|
|
size_t *token_size)
|
|
{
|
|
(void)dak_pub_hash;
|
|
(void)dak_pub_hash_size;
|
|
|
|
if (token_buf_size < sizeof(platform_token)) {
|
|
return PSA_ERROR_BUFFER_TOO_SMALL;
|
|
}
|
|
|
|
(void)memcpy(token_buf, platform_token, sizeof(platform_token));
|
|
*token_size = sizeof(platform_token);
|
|
|
|
return PSA_SUCCESS;
|
|
}
|
|
#endif /* !PLAT_RSS_NOT_SUPPORTED */
|