mirror of
https://github.com/AsahiLinux/u-boot
synced 2024-12-21 02:33:07 +00:00
3bb4db4c38
It is useful to read information about the current TPM state, where supported, e.g. for debugging purposes when verified boot fails. Add support for this to the TPM interface as well as Cr50. Add a simple sandbox test. Signed-off-by: Simon Glass <sjg@chromium.org> Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org> Signed-off-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
185 lines
3.9 KiB
C
185 lines
3.9 KiB
C
// SPDX-License-Identifier: GPL-2.0+
|
|
/*
|
|
* Copyright (c) 2015 Google, Inc
|
|
* Written by Simon Glass <sjg@chromium.org>
|
|
*/
|
|
|
|
#define LOG_CATEGORY UCLASS_TPM
|
|
|
|
#include <common.h>
|
|
#include <dm.h>
|
|
#include <log.h>
|
|
#include <tpm_api.h>
|
|
#include <tpm-v1.h>
|
|
#include <tpm-v2.h>
|
|
#include <dm/lists.h>
|
|
#include <linux/delay.h>
|
|
#include <linux/unaligned/be_byteshift.h>
|
|
#include "tpm_internal.h"
|
|
|
|
#define TPM_RNG_DRV_NAME "tpm-rng"
|
|
|
|
int tpm_open(struct udevice *dev)
|
|
{
|
|
struct tpm_ops *ops = tpm_get_ops(dev);
|
|
|
|
if (!ops->open)
|
|
return -ENOSYS;
|
|
|
|
return ops->open(dev);
|
|
}
|
|
|
|
int tpm_close(struct udevice *dev)
|
|
{
|
|
struct tpm_ops *ops = tpm_get_ops(dev);
|
|
|
|
if (!ops->close)
|
|
return -ENOSYS;
|
|
|
|
return ops->close(dev);
|
|
}
|
|
|
|
int tpm_get_desc(struct udevice *dev, char *buf, int size)
|
|
{
|
|
struct tpm_ops *ops = tpm_get_ops(dev);
|
|
|
|
if (!ops->get_desc)
|
|
return -ENOSYS;
|
|
|
|
return ops->get_desc(dev, buf, size);
|
|
}
|
|
|
|
int tpm_report_state(struct udevice *dev, char *buf, int size)
|
|
{
|
|
struct tpm_ops *ops = tpm_get_ops(dev);
|
|
|
|
if (!ops->report_state)
|
|
return -ENOSYS;
|
|
|
|
return ops->report_state(dev, buf, size);
|
|
}
|
|
|
|
/* Returns max number of milliseconds to wait */
|
|
static ulong tpm_tis_i2c_calc_ordinal_duration(struct tpm_chip_priv *priv,
|
|
u32 ordinal)
|
|
{
|
|
int duration_idx = TPM_UNDEFINED;
|
|
int duration = 0;
|
|
|
|
if (ordinal < TPM_MAX_ORDINAL) {
|
|
duration_idx = tpm_ordinal_duration[ordinal];
|
|
} else if ((ordinal & TPM_PROTECTED_ORDINAL_MASK) <
|
|
TPM_MAX_PROTECTED_ORDINAL) {
|
|
duration_idx = tpm_protected_ordinal_duration[
|
|
ordinal & TPM_PROTECTED_ORDINAL_MASK];
|
|
}
|
|
|
|
if (duration_idx != TPM_UNDEFINED)
|
|
duration = priv->duration_ms[duration_idx];
|
|
|
|
if (duration <= 0)
|
|
return 2 * 60 * 1000; /* Two minutes timeout */
|
|
else
|
|
return duration;
|
|
}
|
|
|
|
int tpm_xfer(struct udevice *dev, const uint8_t *sendbuf, size_t send_size,
|
|
uint8_t *recvbuf, size_t *recv_size)
|
|
{
|
|
struct tpm_chip_priv *priv = dev_get_uclass_priv(dev);
|
|
struct tpm_ops *ops = tpm_get_ops(dev);
|
|
ulong start, stop;
|
|
uint count, ordinal;
|
|
int ret, ret2 = 0;
|
|
|
|
if (ops->xfer)
|
|
return ops->xfer(dev, sendbuf, send_size, recvbuf, recv_size);
|
|
|
|
if (!ops->send || !ops->recv)
|
|
return -ENOSYS;
|
|
|
|
/* switch endianess: big->little */
|
|
count = get_unaligned_be32(sendbuf + TPM_CMD_COUNT_BYTE);
|
|
ordinal = get_unaligned_be32(sendbuf + TPM_CMD_ORDINAL_BYTE);
|
|
|
|
if (count == 0) {
|
|
log_debug("no data\n");
|
|
return -ENODATA;
|
|
}
|
|
if (count > send_size) {
|
|
log_debug("invalid count value %x %zx\n", count, send_size);
|
|
return -E2BIG;
|
|
}
|
|
|
|
log_debug("%s: Calling send\n", __func__);
|
|
ret = ops->send(dev, sendbuf, send_size);
|
|
if (ret < 0)
|
|
return ret;
|
|
|
|
start = get_timer(0);
|
|
stop = tpm_tis_i2c_calc_ordinal_duration(priv, ordinal);
|
|
do {
|
|
ret = ops->recv(dev, priv->buf, sizeof(priv->buf));
|
|
if (ret >= 0) {
|
|
if (ret > *recv_size)
|
|
return -ENOSPC;
|
|
memcpy(recvbuf, priv->buf, ret);
|
|
*recv_size = ret;
|
|
ret = 0;
|
|
break;
|
|
} else if (ret != -EAGAIN) {
|
|
return ret;
|
|
}
|
|
|
|
mdelay(priv->retry_time_ms);
|
|
if (get_timer(start) > stop) {
|
|
ret = -ETIMEDOUT;
|
|
break;
|
|
}
|
|
} while (ret);
|
|
|
|
if (ret) {
|
|
if (ops->cleanup) {
|
|
ret2 = ops->cleanup(dev);
|
|
if (ret2)
|
|
return log_msg_ret("cleanup", ret2);
|
|
}
|
|
return log_msg_ret("xfer", ret);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int tpm_uclass_post_probe(struct udevice *dev)
|
|
{
|
|
int ret;
|
|
const char *drv = TPM_RNG_DRV_NAME;
|
|
struct udevice *child;
|
|
|
|
if (CONFIG_IS_ENABLED(TPM_RNG)) {
|
|
ret = device_find_first_child_by_uclass(dev, UCLASS_RNG,
|
|
&child);
|
|
|
|
if (ret != -ENODEV) {
|
|
log_debug("RNG child already added to the TPM device\n");
|
|
return ret;
|
|
}
|
|
|
|
ret = device_bind_driver(dev, drv, TPM_RNG_DRV_NAME, &child);
|
|
if (ret)
|
|
return log_msg_ret("bind", ret);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
UCLASS_DRIVER(tpm) = {
|
|
.id = UCLASS_TPM,
|
|
.name = "tpm",
|
|
.flags = DM_UC_FLAG_SEQ_ALIAS,
|
|
#if CONFIG_IS_ENABLED(OF_REAL)
|
|
.post_bind = dm_scan_fdt_dev,
|
|
#endif
|
|
.post_probe = tpm_uclass_post_probe,
|
|
.per_device_auto = sizeof(struct tpm_chip_priv),
|
|
};
|