diff options
author | Manish Pandey <manish.pandey2@arm.com> | 2020-07-31 16:25:17 +0100 |
---|---|---|
committer | Manish Pandey <manish.pandey2@arm.com> | 2020-08-12 14:30:31 +0100 |
commit | 2947412d547307019c919e8131353538511f83d9 (patch) | |
tree | fbe092970dbdc94dd4be01c4e1aeec9478e15249 /include/drivers/auth/auth_mod.h | |
parent | 23d5f03ad00a7a815555d52a15f34fdcc958cccd (diff) | |
download | trusted-firmware-a-2947412d547307019c919e8131353538511f83d9.tar.gz |
dualroot: add chain of trust for Platform owned SPs
For dualroot CoT there are two sets of SP certificates, one owned by
Silicon Provider(SiP) and other owned by Platform. Each certificate can
have a maximum of 4 SPs.
This patch reduces the number of SiP owned SPs from 8 to 4 and adds
the remaining 4 to Plat owned SP.
Plat owned SP certificate is signed using Platform RoT key and
protected against anti-rollback using the Non-trusted Non-volatile
counter.
Change-Id: Idc3ddd87d6d85a5506a7435f45a6ec17c4c50425
Signed-off-by: Manish Pandey <manish.pandey2@arm.com>
Diffstat (limited to 'include/drivers/auth/auth_mod.h')
-rw-r--r-- | include/drivers/auth/auth_mod.h | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/include/drivers/auth/auth_mod.h b/include/drivers/auth/auth_mod.h index 504e539393..3965b58e79 100644 --- a/include/drivers/auth/auth_mod.h +++ b/include/drivers/auth/auth_mod.h @@ -51,11 +51,15 @@ extern const size_t cot_desc_size; extern unsigned int auth_img_flags[MAX_NUMBER_IDS]; #if defined(SPD_spmd) -#define DEFINE_SIP_SP_PKG(n) \ + +#define DEFINE_SIP_SP_PKG(n) DEFINE_SP_PKG(n, sip_sp_content_cert) +#define DEFINE_PLAT_SP_PKG(n) DEFINE_SP_PKG(n, plat_sp_content_cert) + +#define DEFINE_SP_PKG(n, cert) \ static const auth_img_desc_t sp_pkg##n = { \ .img_id = SP_PKG##n##_ID, \ .img_type = IMG_RAW, \ - .parent = &sip_sp_content_cert, \ + .parent = &cert, \ .img_auth_methods = (const auth_method_desc_t[AUTH_METHOD_NUM]) { \ [0] = { \ .type = AUTH_METHOD_HASH, \ @@ -66,6 +70,7 @@ extern unsigned int auth_img_flags[MAX_NUMBER_IDS]; } \ } \ } + #endif #endif /* TRUSTED_BOARD_BOOT */ |