mirror of
https://github.com/Atmosphere-NX/Atmosphere.git
synced 2024-11-18 08:11:21 +00:00
117 lines
3.8 KiB
C
117 lines
3.8 KiB
C
#ifndef EXOSPHERE_SE_H
|
|
#define EXOSPHERE_SE_H
|
|
|
|
/* Exosphere driver for the Tegra X1 security engine. */
|
|
|
|
#define KEYSLOT_AES_MAX 0x10
|
|
#define KEYSLOT_RSA_MAX 0x2
|
|
|
|
#define KEYSIZE_AES_MAX 0x20
|
|
#define KEYSIZE_RSA_MAX 0x100
|
|
|
|
#define ALG_SHIFT (12)
|
|
#define ALG_DEC_SHIFT (8)
|
|
#define ALG_NOP (0 << ALG_SHIFT)
|
|
#define ALG_AES_ENC (1 << ALG_SHIFT)
|
|
#define ALG_AES_DEC ((1 << ALG_DEC_SHIFT) | ALG_NOP)
|
|
#define ALG_RNG (2 << ALG_SHIFT)
|
|
#define ALG_SHA (3 << ALG_SHIFT)
|
|
#define ALG_RSA (4 << ALG_SHIFT)
|
|
|
|
#define DST_SHIFT (2)
|
|
#define DST_MEMORY (0 << DST_SHIFT)
|
|
#define DST_HASHREG (1 << DST_SHIFT)
|
|
#define DST_KEYTAB (2 << DST_SHIFT)
|
|
#define DST_SRK (3 << DST_SHIFT)
|
|
#define DST_RSAREG (4 << DST_SHIFT)
|
|
|
|
|
|
|
|
#define OP_ABORT 0
|
|
#define OP_START 1
|
|
#define OP_RESTART 2
|
|
#define OP_CTX_SAVE 3
|
|
#define OP_RESTART_IN 4
|
|
|
|
|
|
typedef struct security_engine {
|
|
unsigned int _0x0;
|
|
unsigned int _0x4;
|
|
unsigned int OPERATION_REG;
|
|
unsigned int INT_ENABLE_REG;
|
|
unsigned int INT_STATUS_REG;
|
|
unsigned int CONFIG_REG;
|
|
unsigned int IN_LL_ADDR_REG;
|
|
unsigned int _0x1C;
|
|
unsigned int _0x20;
|
|
unsigned int OUT_LL_ADDR_REG;
|
|
unsigned int _0x28;
|
|
unsigned int _0x2C;
|
|
unsigned char cmacOutput[0x10];
|
|
unsigned char reserved0x40[0x240];
|
|
unsigned int AES_KEY_READ_DISABLE_REG;
|
|
unsigned int AES_KEYSLOT_FLAGS[0x10];
|
|
unsigned char _0x2C4[0x3C];
|
|
unsigned int _0x300;
|
|
unsigned int CRYPTO_REG;
|
|
unsigned int CRYPTO_CTR_REG[4];
|
|
unsigned int BLOCK_COUNT_REG;
|
|
unsigned int AES_KEYTABLE_ADDR;
|
|
unsigned int AES_KEYTABLE_DATA;
|
|
unsigned int _0x324;
|
|
unsigned int _0x328;
|
|
unsigned int _0x32C;
|
|
unsigned int CRYPTO_KEYTABLE_DST_REG;
|
|
unsigned char _0x334[0xCC];
|
|
unsigned int RSA_CONFIG;
|
|
unsigned int RSA_KEY_SIZE_REG;
|
|
unsigned int RSA_EXP_SIZE_REG;
|
|
unsigned int RSA_KEY_READ_DISABLE_REG;
|
|
unsigned int RSA_KEYSLOT_FLAGS[2];
|
|
unsigned int _0x418;
|
|
unsigned int _0x41C;
|
|
unsigned int RSA_KEYTABLE_ADDR;
|
|
unsigned int RSA_KEYTABLE_DATA;
|
|
unsigned int RSA_OUTPUT;
|
|
unsigned char _0x42C[0x3D4];
|
|
unsigned int FLAGS_REG;
|
|
unsigned int ERR_STATUS_REG;
|
|
unsigned int _0x808;
|
|
unsigned int _0x80C;
|
|
unsigned int _0x810;
|
|
unsigned int _0x814;
|
|
unsigned int _0x818;
|
|
unsigned int _0x81C;
|
|
unsigned char _0x820[0x17E0];
|
|
} security_engine_t;
|
|
|
|
/* TODO: Define constants for the C driver. */
|
|
|
|
|
|
/* WIP, API subject to change. */
|
|
|
|
|
|
|
|
void set_security_engine_address(security_engine_t *security_engine);
|
|
security_engine_t *get_security_engine_address(void);
|
|
|
|
void set_aes_keyslot_flags(unsigned int keyslot, unsigned int flags);
|
|
void set_rsa_keyslot_flags(unsigned int keyslot, unsigned int flags);
|
|
void clear_aes_keyslot(unsigned int keyslot);
|
|
void clear_rsa_keyslot(unsigned int keyslot);
|
|
|
|
void set_aes_keyslot(unsigned int keyslot, const unsigned char *key, unsigned int key_size);
|
|
void decrypt_data_into_keyslot(unsigned int keyslot_dst, unsigned int keyslot_src, const unsigned char *wrapped_key, unsigned int wrapped_key_size);
|
|
void set_rsa_keyslot(unsigned int keyslot, const unsigned char *modulus, unsigned int modulus_size, const unsigned char *exp, unsigned int exp_size);
|
|
void set_aes_keyslot_iv(unsigned int keyslot, const unsigned char *iv, unsigned int iv_size);
|
|
void set_se_ctr(const char *ctr);
|
|
|
|
void se_crypt_aes(unsigned int keyslot, unsigned char *dst, unsigned int dst_size, const unsigned char *src, unsigned int src_size, unsigned int config, unsigned int mode, unsigned int (*callback)(void));
|
|
void se_exp_mod(unsigned int keyslot, unsigned char *buf, unsigned int size, unsigned int (*callback)(void));
|
|
|
|
void se_generate_random(unsigned int keyslot, unsigned char *dst, unsigned int size);
|
|
|
|
/* TODO: SE context save API, consider extending AES API for secure world vs non-secure world operations. */
|
|
/* In particular, smc_crypt_aes takes in raw DMA lists, and we need to support that. */
|
|
|
|
#endif /* EXOSPHERE_SE_H */ |