1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3 * Copyright 2019 Google LLC
4 */
5
6 #include <common.h>
7 #include <dm.h>
8 #include <log.h>
9 #include <tpm_api.h>
10 #include <tpm-v1.h>
11 #include <tpm-v2.h>
12 #include <tpm_api.h>
13
tpm_startup(struct udevice * dev,enum tpm_startup_type mode)14 u32 tpm_startup(struct udevice *dev, enum tpm_startup_type mode)
15 {
16 if (tpm_is_v1(dev)) {
17 return tpm1_startup(dev, mode);
18 } else if (tpm_is_v2(dev)) {
19 enum tpm2_startup_types type;
20
21 switch (mode) {
22 case TPM_ST_CLEAR:
23 type = TPM2_SU_CLEAR;
24 break;
25 case TPM_ST_STATE:
26 type = TPM2_SU_STATE;
27 break;
28 default:
29 case TPM_ST_DEACTIVATED:
30 return -EINVAL;
31 }
32 return tpm2_startup(dev, type);
33 } else {
34 return -ENOSYS;
35 }
36 }
37
tpm_auto_start(struct udevice * dev)38 u32 tpm_auto_start(struct udevice *dev)
39 {
40 u32 rc;
41
42 /*
43 * the tpm_init() will return -EBUSY if the init has already happened
44 * The selftest and startup code can run multiple times with no side
45 * effects
46 */
47 rc = tpm_init(dev);
48 if (rc && rc != -EBUSY)
49 return rc;
50
51 if (tpm_is_v1(dev))
52 return tpm1_auto_start(dev);
53 else if (tpm_is_v2(dev))
54 return tpm2_auto_start(dev);
55 else
56 return -ENOSYS;
57 }
58
tpm_resume(struct udevice * dev)59 u32 tpm_resume(struct udevice *dev)
60 {
61 if (tpm_is_v1(dev))
62 return tpm1_startup(dev, TPM_ST_STATE);
63 else if (tpm_is_v2(dev))
64 return tpm2_startup(dev, TPM2_SU_STATE);
65 else
66 return -ENOSYS;
67 }
68
tpm_self_test_full(struct udevice * dev)69 u32 tpm_self_test_full(struct udevice *dev)
70 {
71 if (tpm_is_v1(dev))
72 return tpm1_self_test_full(dev);
73 else if (tpm_is_v2(dev))
74 return tpm2_self_test(dev, TPMI_YES);
75 else
76 return -ENOSYS;
77 }
78
tpm_continue_self_test(struct udevice * dev)79 u32 tpm_continue_self_test(struct udevice *dev)
80 {
81 if (tpm_is_v1(dev))
82 return tpm1_continue_self_test(dev);
83 else if (tpm_is_v2(dev))
84 return tpm2_self_test(dev, TPMI_NO);
85 else
86 return -ENOSYS;
87 }
88
tpm_clear_and_reenable(struct udevice * dev)89 u32 tpm_clear_and_reenable(struct udevice *dev)
90 {
91 u32 ret;
92
93 log_info("TPM: Clear and re-enable\n");
94 ret = tpm_force_clear(dev);
95 if (ret != TPM_SUCCESS) {
96 log_err("Can't initiate a force clear\n");
97 return ret;
98 }
99
100 if (tpm_is_v1(dev)) {
101 ret = tpm1_physical_enable(dev);
102 if (ret != TPM_SUCCESS) {
103 log_err("TPM: Can't set enabled state\n");
104 return ret;
105 }
106
107 ret = tpm1_physical_set_deactivated(dev, 0);
108 if (ret != TPM_SUCCESS) {
109 log_err("TPM: Can't set deactivated state\n");
110 return ret;
111 }
112 }
113
114 return TPM_SUCCESS;
115 }
116
tpm_nv_enable_locking(struct udevice * dev)117 u32 tpm_nv_enable_locking(struct udevice *dev)
118 {
119 if (tpm_is_v1(dev))
120 return tpm1_nv_define_space(dev, TPM_NV_INDEX_LOCK, 0, 0);
121 else if (tpm_is_v2(dev))
122 return -ENOSYS;
123 else
124 return -ENOSYS;
125 }
126
tpm_nv_read_value(struct udevice * dev,u32 index,void * data,u32 count)127 u32 tpm_nv_read_value(struct udevice *dev, u32 index, void *data, u32 count)
128 {
129 if (tpm_is_v1(dev))
130 return tpm1_nv_read_value(dev, index, data, count);
131 else if (tpm_is_v2(dev))
132 return tpm2_nv_read_value(dev, index, data, count);
133 else
134 return -ENOSYS;
135 }
136
tpm_nv_write_value(struct udevice * dev,u32 index,const void * data,u32 count)137 u32 tpm_nv_write_value(struct udevice *dev, u32 index, const void *data,
138 u32 count)
139 {
140 if (tpm_is_v1(dev))
141 return tpm1_nv_write_value(dev, index, data, count);
142 else if (tpm_is_v2(dev))
143 return tpm2_nv_write_value(dev, index, data, count);
144 else
145 return -ENOSYS;
146 }
147
tpm_set_global_lock(struct udevice * dev)148 u32 tpm_set_global_lock(struct udevice *dev)
149 {
150 return tpm_nv_write_value(dev, TPM_NV_INDEX_0, NULL, 0);
151 }
152
tpm_write_lock(struct udevice * dev,u32 index)153 u32 tpm_write_lock(struct udevice *dev, u32 index)
154 {
155 if (tpm_is_v1(dev))
156 return -ENOSYS;
157 else if (tpm_is_v2(dev))
158 return tpm2_write_lock(dev, index);
159 else
160 return -ENOSYS;
161 }
162
tpm_pcr_extend(struct udevice * dev,u32 index,const void * in_digest,uint size,void * out_digest,const char * name)163 u32 tpm_pcr_extend(struct udevice *dev, u32 index, const void *in_digest,
164 uint size, void *out_digest, const char *name)
165 {
166 if (tpm_is_v1(dev)) {
167 return tpm1_extend(dev, index, in_digest, out_digest);
168 } else if (tpm_is_v2(dev)) {
169 return tpm2_pcr_extend(dev, index, TPM2_ALG_SHA256, in_digest,
170 TPM2_DIGEST_LEN);
171 /* @name is ignored as we do not support the TPM log here */
172 } else {
173 return -ENOSYS;
174 }
175 }
176
tpm_pcr_read(struct udevice * dev,u32 index,void * data,size_t count)177 u32 tpm_pcr_read(struct udevice *dev, u32 index, void *data, size_t count)
178 {
179 if (tpm_is_v1(dev))
180 return tpm1_pcr_read(dev, index, data, count);
181 else if (tpm_is_v2(dev))
182 return -ENOSYS;
183 else
184 return -ENOSYS;
185 }
186
tpm_tsc_physical_presence(struct udevice * dev,u16 presence)187 u32 tpm_tsc_physical_presence(struct udevice *dev, u16 presence)
188 {
189 if (tpm_is_v1(dev))
190 return tpm1_tsc_physical_presence(dev, presence);
191
192 /*
193 * Nothing to do on TPM2 for this; use platform hierarchy availability
194 * instead.
195 */
196 else if (tpm_is_v2(dev))
197 return 0;
198 else
199 return -ENOSYS;
200 }
201
tpm_finalise_physical_presence(struct udevice * dev)202 u32 tpm_finalise_physical_presence(struct udevice *dev)
203 {
204 if (tpm_is_v1(dev))
205 return tpm1_finalise_physical_presence(dev);
206
207 /* Nothing needs to be done with tpm2 */
208 else if (tpm_is_v2(dev))
209 return 0;
210 else
211 return -ENOSYS;
212 }
213
tpm_read_pubek(struct udevice * dev,void * data,size_t count)214 u32 tpm_read_pubek(struct udevice *dev, void *data, size_t count)
215 {
216 if (tpm_is_v1(dev))
217 return tpm1_read_pubek(dev, data, count);
218 else if (tpm_is_v2(dev))
219 return -ENOSYS; /* not implemented yet */
220 else
221 return -ENOSYS;
222 }
223
tpm_force_clear(struct udevice * dev)224 u32 tpm_force_clear(struct udevice *dev)
225 {
226 if (tpm_is_v1(dev))
227 return tpm1_force_clear(dev);
228 else if (tpm_is_v2(dev))
229 return tpm2_clear(dev, TPM2_RH_PLATFORM, NULL, 0);
230 else
231 return -ENOSYS;
232 }
233
tpm_physical_enable(struct udevice * dev)234 u32 tpm_physical_enable(struct udevice *dev)
235 {
236 if (tpm_is_v1(dev))
237 return tpm1_physical_enable(dev);
238
239 /* Nothing needs to be done with tpm2 */
240 else if (tpm_is_v2(dev))
241 return 0;
242 else
243 return -ENOSYS;
244 }
245
tpm_physical_disable(struct udevice * dev)246 u32 tpm_physical_disable(struct udevice *dev)
247 {
248 if (tpm_is_v1(dev))
249 return tpm1_physical_disable(dev);
250
251 /* Nothing needs to be done with tpm2 */
252 else if (tpm_is_v2(dev))
253 return 0;
254 else
255 return -ENOSYS;
256 }
257
tpm_physical_set_deactivated(struct udevice * dev,u8 state)258 u32 tpm_physical_set_deactivated(struct udevice *dev, u8 state)
259 {
260 if (tpm_is_v1(dev))
261 return tpm1_physical_set_deactivated(dev, state);
262 /* Nothing needs to be done with tpm2 */
263 else if (tpm_is_v2(dev))
264 return 0;
265 else
266 return -ENOSYS;
267 }
268
tpm_get_capability(struct udevice * dev,u32 cap_area,u32 sub_cap,void * cap,size_t count)269 u32 tpm_get_capability(struct udevice *dev, u32 cap_area, u32 sub_cap,
270 void *cap, size_t count)
271 {
272 if (tpm_is_v1(dev))
273 return tpm1_get_capability(dev, cap_area, sub_cap, cap, count);
274 else if (tpm_is_v2(dev))
275 return tpm2_get_capability(dev, cap_area, sub_cap, cap, count);
276 else
277 return -ENOSYS;
278 }
279
tpm_get_permissions(struct udevice * dev,u32 index,u32 * perm)280 u32 tpm_get_permissions(struct udevice *dev, u32 index, u32 *perm)
281 {
282 if (tpm_is_v1(dev))
283 return tpm1_get_permissions(dev, index, perm);
284 else if (tpm_is_v2(dev))
285 return -ENOSYS; /* not implemented yet */
286 else
287 return -ENOSYS;
288 }
289
tpm_get_random(struct udevice * dev,void * data,u32 count)290 u32 tpm_get_random(struct udevice *dev, void *data, u32 count)
291 {
292 if (tpm_is_v1(dev))
293 return tpm1_get_random(dev, data, count);
294 else if (tpm_is_v2(dev))
295 return tpm2_get_random(dev, data, count);
296
297 return -ENOSYS;
298 }
299