mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-16 17:44:19 +00:00
e7f1181f8a
The client platform relies on the DICE attestation scheme. RSS provides the DICE Protection Environment (DPE) service. TF-A measured boot framework supports multiple backends. A given platform always enables the corresponding backend which is required by the attestation scheme. Signed-off-by: Tamas Ban <tamas.ban@arm.com> Change-Id: Idc3360d0d7216e4859e99b5db3d377407e0aeee5
36 lines
856 B
C
36 lines
856 B
C
|
|
/*
|
|
* Copyright (c) 2024, Arm Limited. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
|
|
#include <assert.h>
|
|
#include <stdint.h>
|
|
|
|
#include <common/desc_image_load.h>
|
|
#include <drivers/measured_boot/rss/dice_prot_env.h>
|
|
|
|
extern struct dpe_metadata tc_dpe_metadata[];
|
|
|
|
int plat_mboot_measure_image(unsigned int image_id, image_info_t *image_data)
|
|
{
|
|
int err;
|
|
|
|
/* Calculate image hash and record it in the DPE service in RSS. */
|
|
err = dpe_measure_and_record(tc_dpe_metadata,
|
|
image_data->image_base,
|
|
image_data->image_size,
|
|
image_id);
|
|
if (err != 0) {
|
|
ERROR("%s%s image id %u (%i)\n",
|
|
"Failed to ", "record in DPE", image_id, err);
|
|
}
|
|
|
|
return err;
|
|
}
|
|
|
|
int plat_mboot_measure_key(void *pk_oid, void *pk_ptr, unsigned int pk_len)
|
|
{
|
|
return dpe_set_signer_id(tc_dpe_metadata, pk_oid, pk_ptr, pk_len);
|
|
}
|