github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-09-23 01:37:44 +00:00
Code Issues Projects Releases Wiki Activity

hv: refactor seed management

Browse Source 
New component to maintain seed retrieval and derivation: seed.

1. Retrieve seed from bootloader in Hypervisor's boot stage.
2. Derive virtual seed for Guest/Trusty if need.

Tracked-On: #2724
Signed-off-by: Qi Yadong <yadong.qi@intel.com>
Reviewed-by: Zhu Bing <bing.zhu@intel.com>
This commit is contained in:
Qi Yadong
2019-03-06 13:24:55 +08:00
committed by wenlingz
parent 4d0419ed71
commit 95d1e40283
11 changed files with 572 additions and 131 deletions
Download Patch File Download Diff File Expand all files Collapse all files

94
hypervisor/arch/x86/seed/seed_abl.c Normal file
View File

@@ -0,0 +1,94 @@
/*
* Copyright (C) 2018 Intel Corporation. All rights reserved.
*
* SPDX-License-Identifier: BSD-3-Clause
*/
#include <hypervisor.h>
#include <seed.h>
#include "seed_abl.h"
#define ABL_SEED_LEN 32U
struct abl_seed_info {
uint8_t svn;
uint8_t reserved[3];
uint8_t seed[ABL_SEED_LEN];
};
#define ABL_SEED_LIST_MAX 4U
struct abl_svn_seed {
uint32_t size_of_this_struct;
uint32_t version;
uint32_t num_seeds;
struct abl_seed_info seed_list[ABL_SEED_LIST_MAX];
};
/*
* parse_seed_abl
*
* description:
* This function parse seed_list which provided by ABL.
*
* input:
* cmdline pointer to cmdline string
*
* output:
* phy_seed pointer to physical seed structure
*
* return value:
* true if parse successfully, otherwise false.
*/
bool parse_seed_abl(uint64_t addr, struct physical_seed *phy_seed)
{
uint32_t i;
uint32_t legacy_seed_index = 0U;
struct seed_info *seed_list;
struct abl_svn_seed *abl_seed = (struct abl_svn_seed *)hpa2hva(addr);
bool status = false;
stac();
if ((phy_seed != NULL) && (abl_seed != NULL) &&
(abl_seed->num_seeds >= 2U) && (abl_seed->num_seeds <= ABL_SEED_LIST_MAX)) {
seed_list = phy_seed->seed_list;
/*
* The seed_list from ABL contains several seeds which based on SVN
* and one legacy seed which is not based on SVN. The legacy seed's
* svn value is minimum in the seed list. And CSE ensures at least two
* seeds will be generated which will contain the legacy seed.
* Here find the legacy seed index first.
*/
for (i = 1U; i < abl_seed->num_seeds; i++) {
if (abl_seed->seed_list[i].svn < abl_seed->seed_list[legacy_seed_index].svn) {
legacy_seed_index = i;
}
}
/*
* Copy out abl_seed for trusty and clear the original seed in memory.
* The SOS requires the legacy seed to derive RPMB key. So skip the
* legacy seed when clear original seed.
*/
(void)memset((void *)&phy_seed->seed_list[0U], 0U, sizeof(phy_seed->seed_list));
for (i = 0U; i < abl_seed->num_seeds; i++) {
seed_list[i].cse_svn = abl_seed->seed_list[i].svn;
(void)memcpy_s((void *)&seed_list[i].seed[0U], sizeof(seed_list[i].seed),
(void *)&abl_seed->seed_list[i].seed[0U], sizeof(abl_seed->seed_list[i].seed));
if (i == legacy_seed_index) {
continue;
}
(void)memset((void *)&abl_seed->seed_list[i].seed[0U], 0U,
sizeof(abl_seed->seed_list[i].seed));
}
phy_seed->num_seeds = abl_seed->num_seeds;
status = true;
}
clac();
return status;
}