blob: d59346b4bd4c5aeeb6b33fec13771ee276b8391a [file] [log] [blame]
/*
* Copyright (c) 2020-2025, Arm Limited. All rights reserved.
*
* SPDX-License-Identifier: BSD-3-Clause
*/
#include <assert.h>
#include <errno.h>
#include <string.h>
#include "event_log.h"
/* Running Event Log Pointer */
static uint8_t *log_ptr;
/* Pointer to the first byte past end of the Event Log buffer */
static uintptr_t log_end;
/* Hash function for event log operations set by user. */
static const struct event_log_hash_info *crypto_hash_info;
/* TCG_EfiSpecIdEvent */
static const id_event_headers_t id_event_header = {
.header = { .pcr_index = PCR_0,
.event_type = EV_NO_ACTION,
.digest = { 0 },
.event_size =
(uint32_t)(sizeof(id_event_struct_t) +
(sizeof(id_event_algorithm_size_t) *
HASH_ALG_COUNT)) },
.struct_header = { .signature = TCG_ID_EVENT_SIGNATURE_03,
.platform_class = PLATFORM_CLASS_CLIENT,
.spec_version_minor = TCG_SPEC_VERSION_MINOR_TPM2,
.spec_version_major = TCG_SPEC_VERSION_MAJOR_TPM2,
.spec_errata = TCG_SPEC_ERRATA_TPM2,
.uintn_size = (uint8_t)(sizeof(unsigned int) /
sizeof(uint32_t)),
.number_of_algorithms = HASH_ALG_COUNT }
};
static const event2_header_t locality_event_header = {
/*
* All EV_NO_ACTION events SHALL set
* TCG_PCR_EVENT2.pcrIndex = 0, unless otherwise specified
*/
.pcr_index = PCR_0,
/*
* All EV_NO_ACTION events SHALL set
* TCG_PCR_EVENT2.eventType = 03h
*/
.event_type = EV_NO_ACTION,
/*
* All EV_NO_ACTION events SHALL set TCG_PCR_EVENT2.digests to all
* 0x00's for each allocated Hash algorithm
*/
.digests = { .count = HASH_ALG_COUNT }
};
/* Message digest algorithm */
enum crypto_md_algo {
CRYPTO_MD_SHA256,
CRYPTO_MD_SHA384,
CRYPTO_MD_SHA512,
};
int event_log_record(const uint8_t *hash, uint32_t event_type,
const event_log_metadata_t *metadata_ptr)
{
void *ptr = log_ptr;
uint32_t name_len = 0U;
/* event_log_buf_init() must have been called prior to this. */
if (hash == NULL || metadata_ptr == NULL || log_ptr == NULL) {
return -EINVAL;
}
if (metadata_ptr->name != NULL) {
name_len = (uint32_t)strlen(metadata_ptr->name) + 1U;
}
/* Check for space in Event Log buffer */
if (((uintptr_t)ptr + (uint32_t)EVENT2_HDR_SIZE + name_len) > log_end) {
return -ENOMEM;
}
/*
* As per TCG specifications, firmware components that are measured
* into PCR[0] must be logged in the event log using the event type
* EV_POST_CODE.
*/
/* TCG_PCR_EVENT2.PCRIndex */
((event2_header_t *)ptr)->pcr_index = metadata_ptr->pcr;
/* TCG_PCR_EVENT2.EventType */
((event2_header_t *)ptr)->event_type = event_type;
/* TCG_PCR_EVENT2.Digests.Count */
ptr = (uint8_t *)ptr + offsetof(event2_header_t, digests);
((tpml_digest_values *)ptr)->count = HASH_ALG_COUNT;
/* TCG_PCR_EVENT2.Digests[] */
ptr = (uint8_t *)((uintptr_t)ptr +
offsetof(tpml_digest_values, digests));
/* TCG_PCR_EVENT2.Digests[].AlgorithmId */
((tpmt_ha *)ptr)->algorithm_id = TPM_ALG_ID;
/* TCG_PCR_EVENT2.Digests[].Digest[] */
ptr = (uint8_t *)((uintptr_t)ptr + offsetof(tpmt_ha, digest));
/* Copy digest */
(void)memcpy(ptr, (const void *)hash, TCG_DIGEST_SIZE);
/* TCG_PCR_EVENT2.EventSize */
ptr = (uint8_t *)((uintptr_t)ptr + TCG_DIGEST_SIZE);
((event2_data_t *)ptr)->event_size = name_len;
/* Copy event data to TCG_PCR_EVENT2.Event */
if (metadata_ptr->name != NULL) {
(void)memcpy((void *)(((event2_data_t *)ptr)->event),
(const void *)metadata_ptr->name, name_len);
}
/* End of event data */
log_ptr = (uint8_t *)((uintptr_t)ptr + offsetof(event2_data_t, event) +
name_len);
return 0;
}
int event_log_init(uint8_t *start, uint8_t *finish)
{
if ((start == NULL || finish == NULL) || start > finish) {
return -EINVAL;
}
log_ptr = start;
log_end = (uintptr_t)finish;
return 0;
}
int event_log_write_specid_event(void)
{
void *ptr;
/* event_log_buf_init() must have been called prior to this. */
if (log_ptr == NULL) {
return -EFAULT;
}
if (((uintptr_t)log_ptr + ID_EVENT_SIZE) > log_end) {
return -ENOMEM;
}
ptr = log_ptr;
/*
* Add Specification ID Event first
*
* Copy TCG_EfiSpecIDEventStruct structure header
*/
(void)memcpy(ptr, (const void *)&id_event_header,
sizeof(id_event_header));
ptr = (uint8_t *)((uintptr_t)ptr + sizeof(id_event_header));
/* TCG_EfiSpecIdEventAlgorithmSize structure */
((id_event_algorithm_size_t *)ptr)->algorithm_id = TPM_ALG_ID;
((id_event_algorithm_size_t *)ptr)->digest_size = TCG_DIGEST_SIZE;
ptr = (uint8_t *)((uintptr_t)ptr + sizeof(id_event_algorithm_size_t));
/*
* TCG_EfiSpecIDEventStruct.vendorInfoSize
* No vendor data
*/
((id_event_struct_data_t *)ptr)->vendor_info_size = 0;
log_ptr = (uint8_t *)((uintptr_t)ptr +
offsetof(id_event_struct_data_t, vendor_info));
return 0;
}
int event_log_write_header(void)
{
const char locality_signature[] = TCG_STARTUP_LOCALITY_SIGNATURE;
void *ptr;
int rc;
rc = event_log_write_specid_event();
if (rc < 0) {
return rc;
}
if (((uintptr_t)log_ptr + LOC_EVENT_SIZE) > log_end) {
return -ENOMEM;
}
ptr = log_ptr;
/*
* The Startup Locality event should be placed in the log before
* any event which extends PCR[0].
*
* Ref. TCG PC Client Platform Firmware Profile 9.4.5.3
*/
/* Copy Startup Locality Event Header */
(void)memcpy(ptr, (const void *)&locality_event_header,
sizeof(locality_event_header));
ptr = (uint8_t *)((uintptr_t)ptr + sizeof(locality_event_header));
/* TCG_PCR_EVENT2.Digests[].AlgorithmId */
((tpmt_ha *)ptr)->algorithm_id = TPM_ALG_ID;
/* TCG_PCR_EVENT2.Digests[].Digest[] */
(void)memset(&((tpmt_ha *)ptr)->digest, 0, TCG_DIGEST_SIZE);
ptr = (uint8_t *)((uintptr_t)ptr + offsetof(tpmt_ha, digest) +
TCG_DIGEST_SIZE);
/* TCG_PCR_EVENT2.EventSize */
((event2_data_t *)ptr)->event_size =
(uint32_t)sizeof(startup_locality_event_t);
ptr = (uint8_t *)((uintptr_t)ptr + offsetof(event2_data_t, event));
/* TCG_EfiStartupLocalityEvent.Signature */
(void)memcpy(ptr, (const void *)locality_signature,
sizeof(TCG_STARTUP_LOCALITY_SIGNATURE));
/*
* TCG_EfiStartupLocalityEvent.StartupLocality = 0:
* the platform's boot firmware
*/
((startup_locality_event_t *)ptr)->startup_locality = 0U;
log_ptr =
(uint8_t *)((uintptr_t)ptr + sizeof(startup_locality_event_t));
return 0;
}
int event_log_measure(uintptr_t data_base, uint32_t data_size,
unsigned char *hash_data)
{
if (crypto_hash_info == NULL) {
return -EINVAL;
}
return crypto_hash_info->func(crypto_hash_info->ids[0],
(void *)data_base, data_size, hash_data);
}
int event_log_init_and_reg(uint8_t *start, uint8_t *finish,
const struct event_log_hash_info *hash_info)
{
int rc = event_log_init(start, finish);
if (rc < 0) {
return rc;
}
if (crypto_hash_info != NULL) {
return -EEXIST;
}
if (hash_info == NULL || hash_info->func == NULL ||
hash_info->count < 0 || hash_info->count > HASH_ALG_COUNT) {
return -EINVAL;
}
crypto_hash_info = hash_info;
return 0;
}
int event_log_measure_and_record(uintptr_t data_base, uint32_t data_size,
uint32_t data_id,
const event_log_metadata_t *metadata_ptr)
{
unsigned char hash_data[MAX_DIGEST_SIZE];
int rc;
if (metadata_ptr == NULL) {
return -EINVAL;
}
/* Get the metadata associated with this image. */
while (metadata_ptr->id != data_id) {
if (metadata_ptr->id == EVLOG_INVALID_ID) {
return -EINVAL;
}
metadata_ptr++;
}
/* Measure the payload with algorithm selected by EventLog driver */
rc = event_log_measure(data_base, data_size, hash_data);
if (rc != 0) {
return rc;
}
rc = event_log_record(hash_data, EV_POST_CODE, metadata_ptr);
if (rc != 0) {
return rc;
}
return 0;
}
size_t event_log_get_cur_size(uint8_t *_start)
{
assert(_start != NULL);
assert(log_ptr >= _start);
return (size_t)((uintptr_t)log_ptr - (uintptr_t)_start);
}