1 /*
2  * Copyright (c) 2022, Arm Limited. All rights reserved.
3  *
4  * SPDX-License-Identifier: BSD-3-Clause
5  */
6 
7 #ifndef CCA_COT_H
8 #define CCA_COT_H
9 
10 /* Certificates. */
11 enum {
12 	/* Certificates owned by the silicon provider. */
13 	CCA_CONTENT_CERT,
14 	CORE_SWD_KEY_CERT,
15 	SPMC_CONTENT_CERT,
16 	SIP_SECURE_PARTITION_CONTENT_CERT,
17 
18 	/* Certificates owned by the platform owner. */
19 	PLAT_KEY_CERT,
20 	PLAT_SECURE_PARTITION_CONTENT_CERT,
21 	NON_TRUSTED_FW_CONTENT_CERT,
22 };
23 
24 /* Certificate extensions. */
25 enum {
26 	/* Extensions used in certificates owned by the silicon provider. */
27 	TRUSTED_FW_NVCOUNTER_EXT,
28 	TRUSTED_BOOT_FW_HASH_EXT,
29 	TRUSTED_BOOT_FW_CONFIG_HASH_EXT,
30 	HW_CONFIG_HASH_EXT,
31 	FW_CONFIG_HASH_EXT,
32 	SWD_ROT_PK_EXT,
33 	CORE_SWD_PK_EXT,
34 	SOC_AP_FW_HASH_EXT,
35 	SOC_FW_CONFIG_HASH_EXT,
36 	RMM_HASH_EXT,
37 	TRUSTED_OS_FW_HASH_EXT,
38 	TRUSTED_OS_FW_CONFIG_HASH_EXT,
39 	SP_PKG1_HASH_EXT,
40 	SP_PKG2_HASH_EXT,
41 	SP_PKG3_HASH_EXT,
42 	SP_PKG4_HASH_EXT,
43 
44 	/* Extensions used in certificates owned by the platform owner. */
45 	PROT_PK_EXT,
46 	PLAT_PK_EXT,
47 	SP_PKG5_HASH_EXT,
48 	SP_PKG6_HASH_EXT,
49 	SP_PKG7_HASH_EXT,
50 	SP_PKG8_HASH_EXT,
51 	NON_TRUSTED_FW_NVCOUNTER_EXT,
52 	NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT,
53 	NON_TRUSTED_FW_CONFIG_HASH_EXT,
54 };
55 
56 /* Keys. */
57 enum {
58 	/* Keys owned by the silicon provider. */
59 	ROT_KEY,
60 	SWD_ROT_KEY,
61 	CORE_SWD_KEY,
62 
63 	/* Keys owned by the platform owner. */
64 	PROT_KEY,
65 	PLAT_KEY,
66 };
67 
68 #endif /* CCA_COT_H */
69