e9e87ec47c
Most Allwinner sunxi SoCs have separate boot ROMs in non-secure and secure mode. The "non-secure" or "normal" boot ROM (NBROM) uses the existing sunxi_egon image type. The secure boot ROM (SBROM) uses a completely different image type, known as TOC0. A TOC0 image is composed of a header and two or more items. One item is the firmware binary. The others form a chain linking the firmware signature to the root-of-trust public key (ROTPK), which has its hash burned in the SoC's eFuses. Signatures are made using RSA-2048 + SHA256. The pseudo-ASN.1 structure is manually assembled; this is done to work around bugs/quirks in the boot ROM, which vary between SoCs. This TOC0 implementation has been verified to work with the A50, A64, H5, H6, and H616 SBROMs, and it may work with other SoCs. Signed-off-by: Samuel Holland <samuel@sholland.org> Acked-by: Andre Przywara <andre.przywara@arm.com> Signed-off-by: Andre Przywara <andre.przywara@arm.com>
120 lines
3.9 KiB
C
120 lines
3.9 KiB
C
/* SPDX-License-Identifier: GPL-2.0+ */
|
|
/*
|
|
* (C) Copyright 2007-2011
|
|
* Allwinner Technology Co., Ltd. <www.allwinnertech.com>
|
|
* Tom Cubie <tangliang@allwinnertech.com>
|
|
*
|
|
* Constants and data structures used in Allwinner "eGON" images, as
|
|
* parsed by the Boot-ROM.
|
|
*
|
|
* Shared between mkimage and the SPL.
|
|
*/
|
|
|
|
#ifndef SUNXI_IMAGE_H
|
|
#define SUNXI_IMAGE_H
|
|
|
|
#include <linux/compiler_attributes.h>
|
|
#include <linux/types.h>
|
|
|
|
#define BOOT0_MAGIC "eGON.BT0"
|
|
#define BROM_STAMP_VALUE 0x5f0a6c39
|
|
#define SPL_SIGNATURE "SPL" /* marks "sunxi" SPL header */
|
|
#define SPL_MAJOR_BITS 3
|
|
#define SPL_MINOR_BITS 5
|
|
#define SPL_VERSION(maj, min) \
|
|
((((maj) & ((1U << SPL_MAJOR_BITS) - 1)) << SPL_MINOR_BITS) | \
|
|
((min) & ((1U << SPL_MINOR_BITS) - 1)))
|
|
|
|
#define SPL_HEADER_VERSION SPL_VERSION(0, 2)
|
|
|
|
#define SPL_ENV_HEADER_VERSION SPL_VERSION(0, 1)
|
|
#define SPL_DT_HEADER_VERSION SPL_VERSION(0, 2)
|
|
#define SPL_DRAM_HEADER_VERSION SPL_VERSION(0, 3)
|
|
|
|
/* boot head definition from sun4i boot code */
|
|
struct boot_file_head {
|
|
uint32_t b_instruction; /* one intruction jumping to real code */
|
|
uint8_t magic[8]; /* ="eGON.BT0" or "eGON.BT1", not C-style str */
|
|
uint32_t check_sum; /* generated by PC */
|
|
uint32_t length; /* generated by PC */
|
|
/*
|
|
* We use a simplified header, only filling in what is needed
|
|
* by the boot ROM. To be compatible with Allwinner tools we
|
|
* would need to implement the proper fields here instead of
|
|
* padding.
|
|
*
|
|
* Actually we want the ability to recognize our "sunxi" variant
|
|
* of the SPL. To do so, let's place a special signature into the
|
|
* "pub_head_size" field. We can reasonably expect Allwinner's
|
|
* boot0 to always have the upper 16 bits of this set to 0 (after
|
|
* all the value shouldn't be larger than the limit imposed by
|
|
* SRAM size).
|
|
* If the signature is present (at 0x14), then we know it's safe
|
|
* to use the remaining 8 bytes (at 0x18) for our own purposes.
|
|
* (E.g. sunxi-tools "fel" utility can pass information there.)
|
|
*/
|
|
union {
|
|
uint32_t pub_head_size;
|
|
uint8_t spl_signature[4];
|
|
};
|
|
uint32_t fel_script_address; /* since v0.1, set by sunxi-fel */
|
|
/*
|
|
* If the fel_uEnv_length member below is set to a non-zero value,
|
|
* it specifies the size (byte count) of data at fel_script_address.
|
|
* At the same time this indicates that the data is in uEnv.txt
|
|
* compatible format, ready to be imported via "env import -t".
|
|
*/
|
|
uint32_t fel_uEnv_length; /* since v0.1, set by sunxi-fel */
|
|
/*
|
|
* Offset of an ASCIIZ string (relative to the SPL header), which
|
|
* contains the default device tree name (CONFIG_DEFAULT_DEVICE_TREE).
|
|
* This is optional and may be set to NULL. Is intended to be used
|
|
* by flash programming tools for providing nice informative messages
|
|
* to the users.
|
|
*/
|
|
uint32_t dt_name_offset; /* since v0.2, set by mksunxiboot */
|
|
uint32_t dram_size; /* in MiB, since v0.3, set by SPL */
|
|
uint32_t boot_media; /* written here by the boot ROM */
|
|
/* A padding area (may be used for storing text strings) */
|
|
uint32_t string_pool[13]; /* since v0.2, filled by mksunxiboot */
|
|
/* The header must be a multiple of 32 bytes (for VBAR alignment) */
|
|
};
|
|
|
|
/* Compile time check to assure proper alignment of structure */
|
|
typedef char boot_file_head_not_multiple_of_32[1 - 2*(sizeof(struct boot_file_head) % 32)];
|
|
|
|
struct __packed toc0_main_info {
|
|
uint8_t name[8];
|
|
__le32 magic;
|
|
__le32 checksum;
|
|
__le32 serial;
|
|
__le32 status;
|
|
__le32 num_items;
|
|
__le32 length;
|
|
uint8_t platform[4];
|
|
uint8_t reserved[8];
|
|
uint8_t end[4];
|
|
};
|
|
|
|
#define TOC0_MAIN_INFO_NAME "TOC0.GLH"
|
|
#define TOC0_MAIN_INFO_MAGIC 0x89119800
|
|
#define TOC0_MAIN_INFO_END "MIE;"
|
|
|
|
struct __packed toc0_item_info {
|
|
__le32 name;
|
|
__le32 offset;
|
|
__le32 length;
|
|
__le32 status;
|
|
__le32 type;
|
|
__le32 load_addr;
|
|
uint8_t reserved[4];
|
|
uint8_t end[4];
|
|
};
|
|
|
|
#define TOC0_ITEM_INFO_NAME_CERT 0x00010101
|
|
#define TOC0_ITEM_INFO_NAME_FIRMWARE 0x00010202
|
|
#define TOC0_ITEM_INFO_NAME_KEY 0x00010303
|
|
#define TOC0_ITEM_INFO_END "IIE;"
|
|
|
|
#endif
|