1 // SPDX-License-Identifier: GPL-2.0+ 2 /* 3 * K2HK: secure kernel command file 4 * 5 * (C) Copyright 2012-2014 6 * Texas Instruments Incorporated, <www.ti.com> 7 */ 8 9 #include <common.h> 10 #include <command.h> 11 #include <mach/mon.h> 12 #include <spl.h> 13 asm(".arch_extension sec\n\t"); 14 15 int mon_install(u32 addr, u32 dpsc, u32 freq, u32 bm_addr) 16 { 17 int result; 18 19 __asm__ __volatile__ ( 20 "stmfd r13!, {lr}\n" 21 "mov r0, %1\n" 22 "mov r1, %2\n" 23 "mov r2, %3\n" 24 "mov r3, %4\n" 25 "blx r0\n" 26 "mov %0, r0\n" 27 "ldmfd r13!, {lr}\n" 28 : "=&r" (result) 29 : "r" (addr), "r" (dpsc), "r" (freq), "r" (bm_addr) 30 : "cc", "r0", "r1", "r2", "r3", "memory"); 31 return result; 32 } 33 34 int mon_power_on(int core_id, void *ep) 35 { 36 int result; 37 38 asm volatile ( 39 "stmfd r13!, {lr}\n" 40 "mov r1, %1\n" 41 "mov r2, %2\n" 42 "mov r0, #0\n" 43 "smc #0\n" 44 "mov %0, r0\n" 45 "ldmfd r13!, {lr}\n" 46 : "=&r" (result) 47 : "r" (core_id), "r" (ep) 48 : "cc", "r0", "r1", "r2", "memory"); 49 return result; 50 } 51 52 int mon_power_off(int core_id) 53 { 54 int result; 55 56 asm volatile ( 57 "stmfd r13!, {lr}\n" 58 "mov r1, %1\n" 59 "mov r0, #1\n" 60 "smc #1\n" 61 "mov %0, r0\n" 62 "ldmfd r13!, {lr}\n" 63 : "=&r" (result) 64 : "r" (core_id) 65 : "cc", "r0", "r1", "memory"); 66 return result; 67 } 68 69 #ifdef CONFIG_TI_SECURE_DEVICE 70 #define KS2_HS_SEC_HEADER_LEN 0x60 71 #define KS2_HS_SEC_TAG_OFFSET 0x34 72 #define KS2_AUTH_CMD 130 73 74 /** 75 * k2_hs_bm_auth() - Invokes security functions using a 76 * proprietary TI interface. This binary and source for 77 * this is available in the secure development package or 78 * SECDEV. For details on how to access this please refer 79 * doc/README.ti-secure 80 * 81 * @cmd: Secure monitor command 82 * @arg1: Argument for command 83 * 84 * returns non-zero value on success, zero on error 85 */ 86 static int k2_hs_bm_auth(int cmd, void *arg1) 87 { 88 int result; 89 90 asm volatile ( 91 "stmfd r13!, {r4-r12, lr}\n" 92 "mov r0, %1\n" 93 "mov r1, %2\n" 94 "smc #2\n" 95 "mov %0, r0\n" 96 "ldmfd r13!, {r4-r12, lr}\n" 97 : "=&r" (result) 98 : "r" (cmd), "r" (arg1) 99 : "cc", "r0", "r1", "memory"); 100 101 return result; 102 } 103 104 void board_fit_image_post_process(void **p_image, size_t *p_size) 105 { 106 int result = 0; 107 void *image = *p_image; 108 109 if (strncmp(image + KS2_HS_SEC_TAG_OFFSET, "KEYS", 4)) { 110 printf("No signature found in image!\n"); 111 hang(); 112 } 113 114 result = k2_hs_bm_auth(KS2_AUTH_CMD, image); 115 if (result == 0) { 116 printf("Authentication failed!\n"); 117 hang(); 118 } 119 120 /* 121 * Overwrite the image headers after authentication 122 * and decryption. Update size to reflect removal 123 * of header. 124 */ 125 *p_size -= KS2_HS_SEC_HEADER_LEN; 126 memcpy(image, image + KS2_HS_SEC_HEADER_LEN, *p_size); 127 128 /* 129 * Output notification of successful authentication to re-assure the 130 * user that the secure code is being processed as expected. However 131 * suppress any such log output in case of building for SPL and booting 132 * via YMODEM. This is done to avoid disturbing the YMODEM serial 133 * protocol transactions. 134 */ 135 if (!(IS_ENABLED(CONFIG_SPL_BUILD) && 136 IS_ENABLED(CONFIG_SPL_YMODEM_SUPPORT) && 137 spl_boot_device() == BOOT_DEVICE_UART)) 138 printf("Authentication passed\n"); 139 } 140 #endif 141