/* Copyright 2015 The Chromium OS Authors. All rights reserved. * Use of this source code is governed by a BSD-style license that can be * found in the LICENSE file. * * Secure storage APIs - kernel version space */ #include "2sysincludes.h" #include "2common.h" #include "2crc8.h" #include "2misc.h" #include "2secdata.h" vb2_error_t vb2api_secdata_kernel_check(struct vb2_context *ctx) { struct vb2_secdata_kernel *sec = (struct vb2_secdata_kernel *)ctx->secdata_kernel; /* Verify CRC */ if (sec->crc8 != vb2_crc8(sec, offsetof(struct vb2_secdata_kernel, crc8))) { VB2_DEBUG("secdata_kernel: bad CRC\n"); return VB2_ERROR_SECDATA_KERNEL_CRC; } /* Verify version */ if (sec->struct_version < VB2_SECDATA_KERNEL_VERSION) { VB2_DEBUG("secdata_firmware: version incompatible\n"); return VB2_ERROR_SECDATA_KERNEL_VERSION; } /* Verify UID */ if (sec->uid != VB2_SECDATA_KERNEL_UID) { VB2_DEBUG("secdata_kernel: bad UID\n"); return VB2_ERROR_SECDATA_KERNEL_UID; } return VB2_SUCCESS; } vb2_error_t vb2api_secdata_kernel_create(struct vb2_context *ctx) { struct vb2_secdata_kernel *sec = (struct vb2_secdata_kernel *)ctx->secdata_kernel; /* Clear the entire struct */ memset(sec, 0, sizeof(*sec)); /* Set to current version */ sec->struct_version = VB2_SECDATA_KERNEL_VERSION; /* Set UID */ sec->uid = VB2_SECDATA_KERNEL_UID; /* Calculate initial CRC */ sec->crc8 = vb2_crc8(sec, offsetof(struct vb2_secdata_kernel, crc8)); /* Mark as changed */ ctx->flags |= VB2_CONTEXT_SECDATA_KERNEL_CHANGED; return VB2_SUCCESS; } vb2_error_t vb2_secdata_kernel_init(struct vb2_context *ctx) { struct vb2_shared_data *sd = vb2_get_sd(ctx); vb2_error_t rv; rv = vb2api_secdata_kernel_check(ctx); if (rv) return rv; /* Set status flag */ sd->status |= VB2_SD_STATUS_SECDATA_KERNEL_INIT; return VB2_SUCCESS; } vb2_error_t vb2_secdata_kernel_get(struct vb2_context *ctx, enum vb2_secdata_kernel_param param, uint32_t *dest) { struct vb2_shared_data *sd = vb2_get_sd(ctx); struct vb2_secdata_kernel *sec = (struct vb2_secdata_kernel *)ctx->secdata_kernel; if (!(sd->status & VB2_SD_STATUS_SECDATA_KERNEL_INIT)) return VB2_ERROR_SECDATA_KERNEL_GET_UNINITIALIZED; switch (param) { case VB2_SECDATA_KERNEL_VERSIONS: *dest = sec->kernel_versions; return VB2_SUCCESS; default: return VB2_ERROR_SECDATA_KERNEL_GET_PARAM; } } vb2_error_t vb2_secdata_kernel_set(struct vb2_context *ctx, enum vb2_secdata_kernel_param param, uint32_t value) { struct vb2_shared_data *sd = vb2_get_sd(ctx); struct vb2_secdata_kernel *sec = (struct vb2_secdata_kernel *)ctx->secdata_kernel; uint32_t now; if (!(sd->status & VB2_SD_STATUS_SECDATA_KERNEL_INIT)) return VB2_ERROR_SECDATA_KERNEL_SET_UNINITIALIZED; /* If not changing the value, don't regenerate the CRC. */ if (vb2_secdata_kernel_get(ctx, param, &now) == VB2_SUCCESS && now == value) return VB2_SUCCESS; switch (param) { case VB2_SECDATA_KERNEL_VERSIONS: VB2_DEBUG("secdata_kernel versions updated from 0x%x to 0x%x\n", sec->kernel_versions, value); sec->kernel_versions = value; break; default: return VB2_ERROR_SECDATA_KERNEL_SET_PARAM; } /* Regenerate CRC */ sec->crc8 = vb2_crc8(sec, offsetof(struct vb2_secdata_kernel, crc8)); ctx->flags |= VB2_CONTEXT_SECDATA_KERNEL_CHANGED; return VB2_SUCCESS; }