mirror of
https://github.com/projectacrn/acrn-hypervisor.git
synced 2025-06-29 00:37:15 +00:00
VRPMB-BE: add RPMB protocol
This patch implements RPMB protocol into vRPMB backend VBS-U. It will handle RPMB request from VRPMB FE. Signed-off-by: weideng <wei.a.deng@intel.com> Signed-off-by: yingbinx <yingbinx.zeng@intel.com> Acked-by: Zhu Bing <bing.zhu@intel.com>
This commit is contained in:
yingbinx
lijinxia
parent
6c4ebe3f26
commit
b6bec540f7
@ -56,6 +56,7 @@
|
|||||||
#include <fcntl.h>
|
#include <fcntl.h>
|
||||||
#include <sys/ioctl.h>
|
#include <sys/ioctl.h>
|
||||||
#include <linux/types.h>
|
#include <linux/types.h>
|
||||||
|
#include <rpmb.h>
|
||||||
|
|
||||||
#define VIRTIO_RPMB_RINGSZ 64
|
#define VIRTIO_RPMB_RINGSZ 64
|
||||||
|
|
||||||
@ -63,6 +64,8 @@ static int virtio_rpmb_debug;
|
|||||||
#define DPRINTF(params) do { if (virtio_rpmb_debug) printf params; } while (0)
|
#define DPRINTF(params) do { if (virtio_rpmb_debug) printf params; } while (0)
|
||||||
#define WPRINTF(params) (printf params)
|
#define WPRINTF(params) (printf params)
|
||||||
|
|
||||||
|
#define SEQ_CMD_MAX 3 /*support up to 3 cmds*/
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* virtio-rpmb struct
|
* virtio-rpmb struct
|
||||||
*/
|
*/
|
||||||
@ -77,16 +80,238 @@ struct virtio_rpmb {
|
|||||||
int vmid;
|
int vmid;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
struct virtio_rpmb_ioctl_cmd {
|
||||||
|
unsigned int cmd; /*ioctl cmd*/
|
||||||
|
int result; /* result for ioctl cmd*/
|
||||||
|
};
|
||||||
|
|
||||||
|
struct virtio_rpmb_ioc_seq_cmd {
|
||||||
|
struct virtio_rpmb_ioctl_cmd ioc;
|
||||||
|
union {
|
||||||
|
__u64 num_of_cmds; /*num of seq cmds*/
|
||||||
|
__u64 seq_base;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
struct virtio_rpmb_ioc_seq_data {
|
||||||
|
struct virtio_rpmb_ioc_seq_cmd seq_cmd;
|
||||||
|
struct rpmb_cmd cmds[SEQ_CMD_MAX + 1];
|
||||||
|
};
|
||||||
|
|
||||||
|
/*
|
||||||
|
* get start address of seq cmds.
|
||||||
|
*/
|
||||||
|
static struct rpmb_cmd *
|
||||||
|
virtio_rpmb_get_seq_cmds(void *pdata)
|
||||||
|
{
|
||||||
|
struct virtio_rpmb_ioc_seq_data *seq_data;
|
||||||
|
|
||||||
|
if (!pdata) {
|
||||||
|
DPRINTF(("error, invalid args!\n"));
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
seq_data = (struct virtio_rpmb_ioc_seq_data *)pdata;
|
||||||
|
|
||||||
|
return (struct rpmb_cmd *)&seq_data->cmds[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* get address of seq specail frames.
|
||||||
|
* index: the index of cmds.
|
||||||
|
*/
|
||||||
|
static struct rpmb_frame *
|
||||||
|
virtio_rpmb_get_seq_frames(void *pdata, __u32 index)
|
||||||
|
{
|
||||||
|
struct virtio_rpmb_ioc_seq_data *seq_data;
|
||||||
|
struct rpmb_frame *frames;
|
||||||
|
struct rpmb_cmd *cmds, *cmd;
|
||||||
|
__u64 ncmds;
|
||||||
|
__u32 offset = 0;
|
||||||
|
__u32 num = 0;
|
||||||
|
|
||||||
|
if (!pdata || index > SEQ_CMD_MAX) {
|
||||||
|
DPRINTF(("error, invalid args!\n"));
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
seq_data = (struct virtio_rpmb_ioc_seq_data *)pdata;
|
||||||
|
|
||||||
|
/* get number of cmds.*/
|
||||||
|
ncmds = seq_data->seq_cmd.num_of_cmds;
|
||||||
|
if (ncmds > SEQ_CMD_MAX) {
|
||||||
|
DPRINTF(("error, ncmds(%llu) > max\n", ncmds));
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* get start address of cmds.*/
|
||||||
|
cmds = virtio_rpmb_get_seq_cmds(pdata);
|
||||||
|
if (!cmds) {
|
||||||
|
DPRINTF(("fail to get seq cmds.\n"));
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* get start address of frames.*/
|
||||||
|
frames = (struct rpmb_frame *)&seq_data->cmds[ncmds + 1];
|
||||||
|
if (!frames) {
|
||||||
|
DPRINTF(("error, invalid frames ptr.\n"));
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
for (num = 0; num < index; num++) {
|
||||||
|
cmd = &cmds[num];
|
||||||
|
if (!cmd) {
|
||||||
|
DPRINTF(("error, invalid cmd ptr.\n"));
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
offset += cmd->nframes;
|
||||||
|
}
|
||||||
|
|
||||||
|
return (struct rpmb_frame *)&frames[offset];
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* get address of all seq data.
|
||||||
|
*/
|
||||||
|
static void *
|
||||||
|
virtio_rpmb_get_seq_data(void *pdata)
|
||||||
|
{
|
||||||
|
struct virtio_rpmb_ioc_seq_data *seq_data;
|
||||||
|
|
||||||
|
if (!pdata) {
|
||||||
|
DPRINTF(("error, invalid args!\n"));
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
seq_data = (struct virtio_rpmb_ioc_seq_data *)pdata;
|
||||||
|
|
||||||
|
return (void *)&seq_data->seq_cmd.seq_base;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Address space is different between
|
||||||
|
* SOS VBS-U and UOS kernel.
|
||||||
|
* Update frames_ptr to current space.
|
||||||
|
*/
|
||||||
|
static int
|
||||||
|
virtio_rpmb_map_seq_frames(struct iovec *iov)
|
||||||
|
{
|
||||||
|
struct virtio_rpmb_ioc_seq_cmd *seq_cmd = NULL;
|
||||||
|
struct rpmb_cmd *cmds, *cmd;
|
||||||
|
__u64 index;
|
||||||
|
|
||||||
|
if (!iov) {
|
||||||
|
DPRINTF(("error, invalid arg!\n"));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
|
||||||
|
seq_cmd = (struct virtio_rpmb_ioc_seq_cmd *)(iov->iov_base);
|
||||||
|
if (!seq_cmd || seq_cmd->num_of_cmds > SEQ_CMD_MAX) {
|
||||||
|
DPRINTF(("found invalid data.\n"));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* get start address of cmds.*/
|
||||||
|
cmds = virtio_rpmb_get_seq_cmds(iov->iov_base);
|
||||||
|
if (!cmds) {
|
||||||
|
DPRINTF(("fail to get seq cmds.\n"));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* set frames_ptr to VBS-U space.*/
|
||||||
|
for (index = 0; index < seq_cmd->num_of_cmds; index++) {
|
||||||
|
cmd = &cmds[index];
|
||||||
|
if (!cmd) {
|
||||||
|
DPRINTF(("error, invalid cmd ptr.\n"));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
/* set frames address.*/
|
||||||
|
cmd->frames = virtio_rpmb_get_seq_frames(iov->iov_base, index);
|
||||||
|
if (!cmd->frames) {
|
||||||
|
DPRINTF(("fail to get frames[%llu] ptr!\n", index));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
static int
|
||||||
|
virtio_rpmb_seq_handler(struct virtio_rpmb *rpmb, struct iovec *iov)
|
||||||
|
{
|
||||||
|
struct virtio_rpmb_ioctl_cmd *ioc = NULL;
|
||||||
|
int fd;
|
||||||
|
void *pdata;
|
||||||
|
int rc;
|
||||||
|
|
||||||
|
if (!rpmb || !iov) {
|
||||||
|
DPRINTF(("found invalid args!!!\n"));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* update frames_ptr to curent space*/
|
||||||
|
rc = virtio_rpmb_map_seq_frames(iov);
|
||||||
|
if (rc) {
|
||||||
|
DPRINTF(("fail to map seq frames\n"));
|
||||||
|
return rc;
|
||||||
|
}
|
||||||
|
|
||||||
|
ioc = (struct virtio_rpmb_ioctl_cmd *)(iov->iov_base);
|
||||||
|
if (!ioc) {
|
||||||
|
DPRINTF(("error, get ioc is NULL!\n"));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
|
||||||
|
pdata = virtio_rpmb_get_seq_data(iov->iov_base);
|
||||||
|
if (!pdata) {
|
||||||
|
DPRINTF(("fail to get seq data\n"));
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* open rpmb device.*/
|
||||||
|
rc = open("/dev/rpmb0", O_RDWR | O_NONBLOCK);
|
||||||
|
if (rc < 0) {
|
||||||
|
DPRINTF(("failed to open /dev/rpmb0.\n"));
|
||||||
|
return rc;
|
||||||
|
}
|
||||||
|
fd = rc;
|
||||||
|
|
||||||
|
/* send ioctl cmd.*/
|
||||||
|
rc = ioctl(fd, ioc->cmd, pdata);
|
||||||
|
if (rc)
|
||||||
|
DPRINTF(("seq ioctl cmd failed(%d).\n", rc));
|
||||||
|
|
||||||
|
/* close rpmb device.*/
|
||||||
|
close(fd);
|
||||||
|
|
||||||
|
return rc;
|
||||||
|
}
|
||||||
|
|
||||||
static void
|
static void
|
||||||
virtio_rpmb_notify(void *base, struct virtio_vq_info *vq)
|
virtio_rpmb_notify(void *base, struct virtio_vq_info *vq)
|
||||||
{
|
{
|
||||||
struct iovec iov;
|
struct iovec iov;
|
||||||
int len;
|
int len;
|
||||||
uint16_t idx;
|
uint16_t idx;
|
||||||
|
struct virtio_rpmb *rpmb = (struct virtio_rpmb *)base;
|
||||||
|
struct virtio_rpmb_ioctl_cmd *ioc;
|
||||||
|
|
||||||
while (vq_has_descs(vq)) {
|
while (vq_has_descs(vq)) {
|
||||||
vq_getchain(vq, &idx, &iov, 1, NULL);
|
vq_getchain(vq, &idx, &iov, 1, NULL);
|
||||||
|
|
||||||
|
ioc = (struct virtio_rpmb_ioctl_cmd *)(iov.iov_base);
|
||||||
|
|
||||||
|
switch (ioc->cmd) {
|
||||||
|
case RPMB_IOC_SEQ_CMD:
|
||||||
|
ioc->result = virtio_rpmb_seq_handler(rpmb, &iov);
|
||||||
|
break;
|
||||||
|
|
||||||
|
default:
|
||||||
|
DPRINTF(("found unsupported ioctl(%u)!\n", ioc->cmd));
|
||||||
|
ioc->result = -1;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
len = iov.iov_len;
|
len = iov.iov_len;
|
||||||
assert(len > 0);
|
assert(len > 0);
|
||||||
|
|
||||||
|
|||||||
145
devicemodel/include/rpmb.h
Normal file
145
devicemodel/include/rpmb.h
Normal file
@ -0,0 +1,145 @@
|
|||||||
|
/*
|
||||||
|
* Copyright (C) 2018 Intel Corporation
|
||||||
|
* All rights reserved.
|
||||||
|
*
|
||||||
|
* Redistribution and use in source and binary forms, with or without
|
||||||
|
* modification, are permitted provided that the following conditions
|
||||||
|
* are met:
|
||||||
|
* 1. Redistributions of source code must retain the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer
|
||||||
|
* in this position and unchanged.
|
||||||
|
* 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer in the
|
||||||
|
* documentation and/or other materials provided with the distribution.
|
||||||
|
*
|
||||||
|
* Contact Information: weideng <wei.a.deng@intel.com>
|
||||||
|
*
|
||||||
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
||||||
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||||
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||||
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
||||||
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||||
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||||
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||||
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||||
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||||
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||||
|
* SUCH DAMAGE.
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
#ifndef __RPMB_H__
|
||||||
|
#define __RPMB_H__
|
||||||
|
|
||||||
|
#include <linux/types.h>
|
||||||
|
|
||||||
|
/**
|
||||||
|
* struct rpmb_cmd: rpmb access command
|
||||||
|
*
|
||||||
|
* @flags: command flags
|
||||||
|
* 0 - read command
|
||||||
|
* 1 - write command RPMB_F_WRITE
|
||||||
|
* 2 - reliable write RPMB_F_REL_WRITE
|
||||||
|
* @nframes: number of rpmb frames in the command
|
||||||
|
* @frames: list of rpmb frames
|
||||||
|
*/
|
||||||
|
struct rpmb_cmd {
|
||||||
|
__u32 flags;
|
||||||
|
__u32 nframes;
|
||||||
|
struct rpmb_frame *frames;
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* struct rpmb_data - rpmb data be transmitted in RPMB request
|
||||||
|
*
|
||||||
|
* @req_type: request type (program key, read, write, write counter)
|
||||||
|
* @icmd: list of input frames
|
||||||
|
* @ocmd: list of result frames
|
||||||
|
*/
|
||||||
|
struct rpmb_data {
|
||||||
|
__u16 req_type;
|
||||||
|
struct rpmb_cmd icmd;
|
||||||
|
struct rpmb_cmd ocmd;
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* struct rpmb_frame - rpmb frame as defined by specs
|
||||||
|
*
|
||||||
|
* @stuff : stuff bytes
|
||||||
|
* @key_mac : The authentication key or the message authentication
|
||||||
|
* code (MAC) depending on the request/response type.
|
||||||
|
* The MAC will be delivered in the last (or the only)
|
||||||
|
* block of data.
|
||||||
|
* @data : Data to be written or read by signed access.
|
||||||
|
* @nonce : Random number generated by the host for the requests
|
||||||
|
* and copied to the response by the RPMB engine.
|
||||||
|
* @write_counter: Counter value for the total amount of the successful
|
||||||
|
* authenticated data write requests made by the host.
|
||||||
|
* @addr : Address of the data to be programmed to or read
|
||||||
|
* from the RPMB. Address is the serial number of
|
||||||
|
* the accessed block (half sector 256B).
|
||||||
|
* @block_count : Number of blocks (half sectors, 256B) requested to be
|
||||||
|
* read/programmed.
|
||||||
|
* @result : Includes information about the status of the write counter
|
||||||
|
* (valid, expired) and result of the access made to the RPMB.
|
||||||
|
* @req_resp : Defines the type of request and response to/from the memory.
|
||||||
|
*/
|
||||||
|
struct rpmb_frame {
|
||||||
|
__u8 stuff[196];
|
||||||
|
__u8 key_mac[32];
|
||||||
|
__u8 data[256];
|
||||||
|
__u8 nonce[16];
|
||||||
|
__be32 write_counter;
|
||||||
|
__be16 addr;
|
||||||
|
__be16 block_count;
|
||||||
|
__be16 result;
|
||||||
|
__be16 req_resp;
|
||||||
|
} __attribute__((packed));
|
||||||
|
|
||||||
|
/**
|
||||||
|
* struct rpmb_cmd - rpmb access command
|
||||||
|
*
|
||||||
|
* @flags: command flags
|
||||||
|
* 0 - read command
|
||||||
|
* 1 - write commnad RPMB_F_WRITE
|
||||||
|
* 2 - reliable write RPMB_F_REL_WRITE
|
||||||
|
* @nframes: number of rpmb frames in the command
|
||||||
|
* @frames_ptr: a pointer to the list of rpmb frames
|
||||||
|
*/
|
||||||
|
struct rpmb_ioc_cmd {
|
||||||
|
__u32 flags;
|
||||||
|
__u32 nframes;
|
||||||
|
__aligned_u64 frames_ptr;
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* struct rpmb_ioc_req_cmd - rpmb operation request command
|
||||||
|
*
|
||||||
|
* @req_type: request type: must match the in frame req_resp
|
||||||
|
* program key
|
||||||
|
* get write counter
|
||||||
|
* write data
|
||||||
|
* read data
|
||||||
|
* @icmd: input command
|
||||||
|
* @ocmd: output/result command
|
||||||
|
*/
|
||||||
|
struct rpmb_ioc_req_cmd {
|
||||||
|
__u64 req_type;
|
||||||
|
struct rpmb_ioc_cmd icmd;
|
||||||
|
struct rpmb_ioc_cmd ocmd;
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* struct rpmb_ioc_seq_cmd - rpmb command sequence
|
||||||
|
*
|
||||||
|
* @num_of_cmds: number of commands
|
||||||
|
* @cmds: list of rpmb commands
|
||||||
|
*/
|
||||||
|
struct rpmb_ioc_seq_cmd {
|
||||||
|
__u64 num_of_cmds;
|
||||||
|
struct rpmb_ioc_cmd cmds[0];
|
||||||
|
};
|
||||||
|
|
||||||
|
#define RPMB_IOC_REQ_CMD _IOWR(0xB5, 80, struct rpmb_ioc_req_cmd)
|
||||||
|
#define RPMB_IOC_SEQ_CMD _IOWR(0xB5, 81, struct rpmb_ioc_seq_cmd)
|
||||||
|
|
||||||
|
#endif /* __RPMB_H__ */
|
||||||
Loading…
Reference in New Issue
Block a user