1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
/* Copyright 2020 The ChromiumOS Authors
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*
*/
#ifndef __CR50_INCLUDE_AP_RO_INTEGRITY_CHECK_H
#define __CR50_INCLUDE_AP_RO_INTEGRITY_CHECK_H
#include "flash_log.h"
enum ap_ro_status {
/* All AP RO Verification V1 statuses are less than 20 */
AP_RO_NOT_RUN = 0,
AP_RO_PASS_UNVERIFIED_GBB = 1,
AP_RO_FAIL = 2,
AP_RO_UNSUPPORTED_UNKNOWN = 3, /* Deprecated */
AP_RO_UNSUPPORTED_NOT_TRIGGERED = 4,
AP_RO_UNSUPPORTED_TRIGGERED = 5,
AP_RO_PASS = 6,
AP_RO_IN_PROGRESS = 7,
/* All AP RO Verification V2 status are 20 or greater */
AP_RO_V2_SUCCESS = 20,
AP_RO_V2_FAILED_VERIFICATION = 21,
AP_RO_V2_INCONSISTENT_GSCVD = 22,
AP_RO_V2_INCONSISTENT_KEYBLOCK = 23,
AP_RO_V2_INCONSISTENT_KEY = 24,
AP_RO_V2_SPI_READ = 25,
AP_RO_V2_UNSUPPORTED_CRYPTO_ALGORITHM = 26,
AP_RO_V2_VERSION_MISMATCH = 27,
AP_RO_V2_OUT_OF_MEMORY = 28,
AP_RO_V2_INTERNAL = 29,
AP_RO_V2_TOO_BIG = 30,
AP_RO_V2_MISSING_GSCVD = 31,
AP_RO_V2_BOARD_ID_MISMATCH = 32,
AP_RO_V2_SETTING_NOT_PROVISIONED = 33,
AP_RO_V2_UNKNOWN = 34,
};
/*
* validate_ap_ro: based on information saved in an H1 RO flash page verify
* contents of the AP flash. Hold the EC in reset if verification fails.
*/
void validate_ap_ro(void);
/*
* ap_ro_add_flash_event: add a flash log event to keep track of AP RO
* verification attempt progress.
*/
void ap_ro_add_flash_event(enum ap_ro_verification_ev event);
/*
* ap_ro_board_id_blocked: Returns True if AP RO verification is disabled for
* the board's RLZ.
*/
int ap_ro_board_id_blocked(void);
/*
* ap_ro_device_reset: Clear AP RO verification state on a new boot.
*/
void ap_ro_device_reset(void);
/*
* Clear the AP RO result and release the EC from reset. This should only be
* done through a key combo.
*/
void ap_ro_clear_ec_rst_override(void);
#endif /* ! __CR50_INCLUDE_AP_RO_INTEGRITY_CHECK_H */
|
