mirror of
https://github.com/espressif/esp-idf.git
synced 2024-09-20 10:46:02 -04:00
84 lines
3.1 KiB
C
84 lines
3.1 KiB
C
/*
|
|
* SPDX-FileCopyrightText: 2017-2022 Espressif Systems (Shanghai) CO LTD
|
|
*
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*/
|
|
|
|
#include <stdlib.h>
|
|
#include "sdkconfig.h"
|
|
#include "esp_efuse.h"
|
|
#include "esp_efuse_utility.h"
|
|
#include "esp_efuse_table.h"
|
|
#include "esp_types.h"
|
|
#include "assert.h"
|
|
#include "esp_err.h"
|
|
#include "esp_fault.h"
|
|
#include "esp_log.h"
|
|
#include "soc/efuse_periph.h"
|
|
#include "sys/param.h"
|
|
|
|
static __attribute__((unused)) const char *TAG = "efuse";
|
|
|
|
#ifdef CONFIG_BOOTLOADER_APP_SEC_VER_SIZE_EFUSE_FIELD
|
|
#define APP_SEC_VER_SIZE_EFUSE_FIELD CONFIG_BOOTLOADER_APP_SEC_VER_SIZE_EFUSE_FIELD
|
|
#else
|
|
#define APP_SEC_VER_SIZE_EFUSE_FIELD 4 // smallest possible size for all chips
|
|
#endif
|
|
|
|
// Reset efuse write registers
|
|
void esp_efuse_reset(void)
|
|
{
|
|
esp_efuse_utility_reset();
|
|
}
|
|
|
|
uint32_t esp_efuse_read_secure_version(void)
|
|
{
|
|
uint32_t secure_version = 0;
|
|
size_t size = MIN(APP_SEC_VER_SIZE_EFUSE_FIELD, esp_efuse_get_field_size(ESP_EFUSE_SECURE_VERSION));
|
|
esp_efuse_read_field_blob(ESP_EFUSE_SECURE_VERSION, &secure_version, size);
|
|
return __builtin_popcount(secure_version & ((1ULL << size) - 1));
|
|
}
|
|
|
|
bool esp_efuse_check_secure_version(uint32_t secure_version)
|
|
{
|
|
uint32_t sec_ver_hw = esp_efuse_read_secure_version();
|
|
/* Additional copies for Anti FI check */
|
|
uint32_t sec_ver_hw_c1 = esp_efuse_read_secure_version();
|
|
uint32_t sec_ver_hw_c2 = esp_efuse_read_secure_version();
|
|
ESP_FAULT_ASSERT(sec_ver_hw == sec_ver_hw_c1);
|
|
ESP_FAULT_ASSERT(sec_ver_hw == sec_ver_hw_c2);
|
|
|
|
bool ret_status = (secure_version >= sec_ver_hw);
|
|
/* Anti FI check */
|
|
ESP_FAULT_ASSERT(ret_status == (secure_version >= sec_ver_hw));
|
|
return ret_status;
|
|
}
|
|
|
|
esp_err_t esp_efuse_update_secure_version(uint32_t secure_version)
|
|
{
|
|
size_t size = MIN(APP_SEC_VER_SIZE_EFUSE_FIELD, esp_efuse_get_field_size(ESP_EFUSE_SECURE_VERSION));
|
|
if (size < secure_version) {
|
|
ESP_LOGE(TAG, "Max secure version is %d. Given %"PRIu32" version can not be written.", size, secure_version);
|
|
return ESP_ERR_INVALID_ARG;
|
|
}
|
|
esp_efuse_coding_scheme_t coding_scheme = esp_efuse_get_coding_scheme(ESP_EFUSE_SECURE_VERSION_NUM_BLOCK);
|
|
if (coding_scheme != EFUSE_CODING_SCHEME_NONE) {
|
|
ESP_LOGE(TAG, "Anti rollback is not supported with any coding scheme.");
|
|
return ESP_ERR_NOT_SUPPORTED;
|
|
}
|
|
uint32_t sec_ver_hw = esp_efuse_read_secure_version();
|
|
// If secure_version is the same as in eFuse field than it is ok just go out.
|
|
if (sec_ver_hw < secure_version) {
|
|
uint32_t num_bit_hw = (1ULL << sec_ver_hw) - 1;
|
|
uint32_t num_bit_app = (1ULL << secure_version) - 1;
|
|
// Repeated programming of programmed bits is strictly forbidden
|
|
uint32_t new_bits = num_bit_app - num_bit_hw; // get only new bits
|
|
esp_efuse_write_field_blob(ESP_EFUSE_SECURE_VERSION, &new_bits, size);
|
|
ESP_LOGI(TAG, "Anti-rollback is set. eFuse field is updated(%"PRIu32").", secure_version);
|
|
} else if (sec_ver_hw > secure_version) {
|
|
ESP_LOGE(TAG, "Anti-rollback is not set. secure_version of app is lower that eFuse field(%"PRIu32").", sec_ver_hw);
|
|
return ESP_FAIL;
|
|
}
|
|
return ESP_OK;
|
|
}
|