1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3 * Copyright (c) 2022, Ramin <raminterex@yahoo.com>
4 * Copyright (c) 2022, Svyatoslav Ryhel <clamor95@gmail.com>
5 */
6
7 #include <command.h>
8 #include <log.h>
9 #include <vsprintf.h>
10 #include <linux/string.h>
11 #include <asm/arch-tegra/crypto.h>
12 #include <asm/arch-tegra/fuse.h>
13 #include "bct.h"
14 #include "uboot_aes.h"
15
16 /*
17 * @param bct boot config table start in RAM
18 * @param ect bootloader start in RAM
19 * @param ebt_size bootloader file size in bytes
20 * Return: 0, or 1 if failed
21 */
bct_patch(u8 * bct,u8 * ebt,u32 ebt_size)22 static int bct_patch(u8 *bct, u8 *ebt, u32 ebt_size)
23 {
24 struct nvboot_config_table *bct_tbl = NULL;
25 u8 ebt_hash[AES128_KEY_LENGTH] = { 0 };
26 u8 bct_hash[AES128_KEY_LENGTH] = { 0 };
27 u8 *sbct = bct + UBCT_LENGTH;
28 bool encrypted;
29 int ret;
30
31 ebt_size = roundup(ebt_size, EBT_ALIGNMENT);
32
33 encrypted = tegra_fuse_get_operation_mode() == MODE_ODM_PRODUCTION_SECURE;
34
35 if (encrypted) {
36 ret = decrypt_data_block(sbct, sbct, SBCT_LENGTH);
37 if (ret)
38 return 1;
39
40 ret = encrypt_data_block(ebt, ebt, ebt_size);
41 if (ret)
42 return 1;
43 }
44
45 ret = sign_data_block(ebt, ebt_size, ebt_hash);
46 if (ret)
47 return 1;
48
49 bct_tbl = (struct nvboot_config_table *)bct;
50
51 memcpy((u8 *)&bct_tbl->bootloader[0].crypto_hash,
52 ebt_hash, NVBOOT_CMAC_AES_HASH_LENGTH * 4);
53 bct_tbl->bootloader[0].entry_point = CONFIG_SPL_TEXT_BASE;
54 bct_tbl->bootloader[0].load_addr = CONFIG_SPL_TEXT_BASE;
55 bct_tbl->bootloader[0].length = ebt_size;
56
57 if (encrypted) {
58 ret = encrypt_data_block(sbct, sbct, SBCT_LENGTH);
59 if (ret)
60 return 1;
61 }
62
63 ret = sign_data_block(sbct, SBCT_LENGTH, bct_hash);
64 if (ret)
65 return 1;
66
67 memcpy((u8 *)&bct_tbl->crypto_hash, bct_hash,
68 NVBOOT_CMAC_AES_HASH_LENGTH * 4);
69
70 return 0;
71 }
72
do_ebtupdate(struct cmd_tbl * cmdtp,int flag,int argc,char * const argv[])73 static int do_ebtupdate(struct cmd_tbl *cmdtp, int flag, int argc,
74 char *const argv[])
75 {
76 u32 bct_addr = hextoul(argv[1], NULL);
77 u32 ebt_addr = hextoul(argv[2], NULL);
78 u32 ebt_size = hextoul(argv[3], NULL);
79
80 return bct_patch((u8 *)bct_addr, (u8 *)ebt_addr, ebt_size);
81 }
82
83 U_BOOT_CMD(ebtupdate, 4, 0, do_ebtupdate,
84 "update bootloader on re-crypted Tegra124 devices",
85 ""
86 );
87