1 /* 2 * Copyright (c) 2022, Arm Limited. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #ifndef CCA_COT_H 8 #define CCA_COT_H 9 10 /* Certificates. */ 11 enum { 12 /* Certificates owned by the silicon provider. */ 13 CCA_CONTENT_CERT, 14 CORE_SWD_KEY_CERT, 15 SPMC_CONTENT_CERT, 16 SIP_SECURE_PARTITION_CONTENT_CERT, 17 18 /* Certificates owned by the platform owner. */ 19 PLAT_KEY_CERT, 20 PLAT_SECURE_PARTITION_CONTENT_CERT, 21 NON_TRUSTED_FW_CONTENT_CERT, 22 }; 23 24 /* Certificate extensions. */ 25 enum { 26 /* Extensions used in certificates owned by the silicon provider. */ 27 TRUSTED_FW_NVCOUNTER_EXT, 28 TRUSTED_BOOT_FW_HASH_EXT, 29 TRUSTED_BOOT_FW_CONFIG_HASH_EXT, 30 HW_CONFIG_HASH_EXT, 31 FW_CONFIG_HASH_EXT, 32 SWD_ROT_PK_EXT, 33 CORE_SWD_PK_EXT, 34 SOC_AP_FW_HASH_EXT, 35 SOC_FW_CONFIG_HASH_EXT, 36 RMM_HASH_EXT, 37 TRUSTED_OS_FW_HASH_EXT, 38 TRUSTED_OS_FW_CONFIG_HASH_EXT, 39 SP_PKG1_HASH_EXT, 40 SP_PKG2_HASH_EXT, 41 SP_PKG3_HASH_EXT, 42 SP_PKG4_HASH_EXT, 43 44 /* Extensions used in certificates owned by the platform owner. */ 45 PROT_PK_EXT, 46 PLAT_PK_EXT, 47 SP_PKG5_HASH_EXT, 48 SP_PKG6_HASH_EXT, 49 SP_PKG7_HASH_EXT, 50 SP_PKG8_HASH_EXT, 51 NON_TRUSTED_FW_NVCOUNTER_EXT, 52 NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, 53 NON_TRUSTED_FW_CONFIG_HASH_EXT, 54 }; 55 56 /* Keys. */ 57 enum { 58 /* Keys owned by the silicon provider. */ 59 ROT_KEY, 60 SWD_ROT_KEY, 61 CORE_SWD_KEY, 62 63 /* Keys owned by the platform owner. */ 64 PROT_KEY, 65 PLAT_KEY, 66 }; 67 68 #endif /* CCA_COT_H */ 69