1 /*
2  * Copyright (c) 2015-2020, ARM Limited and Contributors. All rights reserved.
3  *
4  * SPDX-License-Identifier: BSD-3-Clause
5  */
6 
7 #ifndef TBBR_OID_H
8 #define TBBR_OID_H
9 
10 #define	MAX_OID_NAME_LEN	30
11 
12 /*
13  * The following is a list of OID values defined and reserved by ARM, which
14  * are used to define the extension fields of the certificate structure, as
15  * defined in the Trusted Board Boot Requirements (TBBR) specification,
16  * ARM DEN0006C-1.
17  */
18 
19 
20 /* TrustedFirmwareNVCounter - Non-volatile counter extension */
21 #define TRUSTED_FW_NVCOUNTER_OID		"1.3.6.1.4.1.4128.2100.1"
22 /* NonTrustedFirmwareNVCounter - Non-volatile counter extension */
23 #define NON_TRUSTED_FW_NVCOUNTER_OID		"1.3.6.1.4.1.4128.2100.2"
24 
25 
26 /*
27  * Non-Trusted Firmware Updater Certificate
28  */
29 
30 /* APFirmwareUpdaterConfigHash - BL2U */
31 #define AP_FWU_CFG_HASH_OID			"1.3.6.1.4.1.4128.2100.101"
32 /* SCPFirmwareUpdaterConfigHash - SCP_BL2U */
33 #define SCP_FWU_CFG_HASH_OID			"1.3.6.1.4.1.4128.2100.102"
34 /* FirmwareUpdaterHash - NS_BL2U */
35 #define FWU_HASH_OID				"1.3.6.1.4.1.4128.2100.103"
36 /* TrustedWatchdogRefreshTime */
37 #define TRUSTED_WATCHDOG_TIME_OID		"1.3.6.1.4.1.4128.2100.104"
38 
39 
40 /*
41  * Trusted Boot Firmware Certificate
42  */
43 
44 /* TrustedBootFirmwareHash - BL2 */
45 #define TRUSTED_BOOT_FW_HASH_OID		"1.3.6.1.4.1.4128.2100.201"
46 #define TRUSTED_BOOT_FW_CONFIG_HASH_OID		"1.3.6.1.4.1.4128.2100.202"
47 #define HW_CONFIG_HASH_OID			"1.3.6.1.4.1.4128.2100.203"
48 #define FW_CONFIG_HASH_OID			"1.3.6.1.4.1.4128.2100.204"
49 
50 /*
51  * Trusted Key Certificate
52  */
53 
54 /* PrimaryDebugCertificatePK */
55 #define PRIMARY_DEBUG_PK_OID			"1.3.6.1.4.1.4128.2100.301"
56 /* TrustedWorldPK */
57 #define TRUSTED_WORLD_PK_OID			"1.3.6.1.4.1.4128.2100.302"
58 /* NonTrustedWorldPK */
59 #define NON_TRUSTED_WORLD_PK_OID		"1.3.6.1.4.1.4128.2100.303"
60 
61 
62 /*
63  * Trusted Debug Certificate
64  */
65 
66 /* DebugScenario */
67 #define TRUSTED_DEBUG_SCENARIO_OID		"1.3.6.1.4.1.4128.2100.401"
68 /* SoC Specific */
69 #define TRUSTED_DEBUG_SOC_SPEC_OID		"1.3.6.1.4.1.4128.2100.402"
70 /* SecondaryDebugCertPK */
71 #define SECONDARY_DEBUG_PK_OID			"1.3.6.1.4.1.4128.2100.403"
72 
73 
74 /*
75  * SoC Firmware Key Certificate
76  */
77 
78 /* SoCFirmwareContentCertPK */
79 #define SOC_FW_CONTENT_CERT_PK_OID		"1.3.6.1.4.1.4128.2100.501"
80 
81 /*
82  * SoC Firmware Content Certificate
83  */
84 
85 /* APRomPatchHash - BL1_PATCH */
86 #define APROM_PATCH_HASH_OID			"1.3.6.1.4.1.4128.2100.601"
87 /* SoCConfigHash */
88 #define SOC_CONFIG_HASH_OID			"1.3.6.1.4.1.4128.2100.602"
89 /* SoCAPFirmwareHash - BL31 */
90 #define SOC_AP_FW_HASH_OID			"1.3.6.1.4.1.4128.2100.603"
91 /* SoCFirmwareConfigHash = SOC_FW_CONFIG */
92 #define SOC_FW_CONFIG_HASH_OID			"1.3.6.1.4.1.4128.2100.604"
93 
94 /*
95  * SCP Firmware Key Certificate
96  */
97 
98 /* SCPFirmwareContentCertPK */
99 #define SCP_FW_CONTENT_CERT_PK_OID		"1.3.6.1.4.1.4128.2100.701"
100 
101 
102 /*
103  * SCP Firmware Content Certificate
104  */
105 
106 /* SCPFirmwareHash - SCP_BL2 */
107 #define SCP_FW_HASH_OID				"1.3.6.1.4.1.4128.2100.801"
108 /* SCPRomPatchHash - SCP_BL1_PATCH */
109 #define SCP_ROM_PATCH_HASH_OID			"1.3.6.1.4.1.4128.2100.802"
110 
111 
112 /*
113  * Trusted OS Firmware Key Certificate
114  */
115 
116 /* TrustedOSFirmwareContentCertPK */
117 #define TRUSTED_OS_FW_CONTENT_CERT_PK_OID	"1.3.6.1.4.1.4128.2100.901"
118 
119 
120 /*
121  * Trusted OS Firmware Content Certificate
122  */
123 
124 /* TrustedOSFirmwareHash - BL32 */
125 #define TRUSTED_OS_FW_HASH_OID			"1.3.6.1.4.1.4128.2100.1001"
126 /* TrustedOSExtra1FirmwareHash - BL32 Extra1 */
127 #define TRUSTED_OS_FW_EXTRA1_HASH_OID		"1.3.6.1.4.1.4128.2100.1002"
128 /* TrustedOSExtra2FirmwareHash - BL32 Extra2 */
129 #define TRUSTED_OS_FW_EXTRA2_HASH_OID		"1.3.6.1.4.1.4128.2100.1003"
130 /* TrustedOSFirmwareConfigHash - TOS_FW_CONFIG */
131 #define TRUSTED_OS_FW_CONFIG_HASH_OID		"1.3.6.1.4.1.4128.2100.1004"
132 
133 
134 /*
135  * Non-Trusted Firmware Key Certificate
136  */
137 
138 /* NonTrustedFirmwareContentCertPK */
139 #define NON_TRUSTED_FW_CONTENT_CERT_PK_OID	"1.3.6.1.4.1.4128.2100.1101"
140 
141 
142 /*
143  * Non-Trusted Firmware Content Certificate
144  */
145 
146 /* NonTrustedWorldBootloaderHash - BL33 */
147 #define NON_TRUSTED_WORLD_BOOTLOADER_HASH_OID	"1.3.6.1.4.1.4128.2100.1201"
148 /* NonTrustedFirmwareConfigHash - NT_FW_CONFIG */
149 #define NON_TRUSTED_FW_CONFIG_HASH_OID		"1.3.6.1.4.1.4128.2100.1202"
150 
151 /*
152  * Secure Partitions Content Certificate
153  */
154 #define SP_PKG1_HASH_OID			"1.3.6.1.4.1.4128.2100.1301"
155 #define SP_PKG2_HASH_OID			"1.3.6.1.4.1.4128.2100.1302"
156 #define SP_PKG3_HASH_OID			"1.3.6.1.4.1.4128.2100.1303"
157 #define SP_PKG4_HASH_OID			"1.3.6.1.4.1.4128.2100.1304"
158 #define SP_PKG5_HASH_OID			"1.3.6.1.4.1.4128.2100.1305"
159 #define SP_PKG6_HASH_OID			"1.3.6.1.4.1.4128.2100.1306"
160 #define SP_PKG7_HASH_OID			"1.3.6.1.4.1.4128.2100.1307"
161 #define SP_PKG8_HASH_OID			"1.3.6.1.4.1.4128.2100.1308"
162 
163 #ifdef PLAT_DEF_OID
164 #include <platform_oid.h>
165 #endif
166 #endif /* TBBR_OID_H */
167