otbn.h

// Copyright lowRISC contributors (OpenTitan project).
// Licensed under the Apache License, Version 2.0, see LICENSE for details.
// SPDX-License-Identifier: Apache-2.0
 
#ifndef OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_DRIVERS_OTBN_H_
#define OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_DRIVERS_OTBN_H_
 
#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>
 
#include "sw/device/silicon_creator/lib/error.h"
 
#ifdef __cplusplus
extern "C" {
#endif
 
/**
 * Constants related to OTBN wide words
 */
enum {
  /* Length of an OTBN wide word in bits */
  kScOtbnWideWordNumBits = 256,
  /* Length of an OTBN wide word in words */
  kScOtbnWideWordNumWords = kScOtbnWideWordNumBits / (sizeof(uint32_t) * 8),
};
 
/**
 * The following constants represent the expected number of sec_mmio register
 * writes performed by functions in provided in this module. See
 * `SEC_MMIO_WRITE_INCREMENT()` for more details.
 *
 * Example:
 * ```
 *  sc_otbn_execute();
 *  SEC_MMIO_WRITE_INCREMENT(kScOtbnSecMmioExecute);
 * ```
 */
enum {
  kScOtbnSecMmioExecute = 1,
};
 
/**
 * OTBN commands
 *
 * TODO(#16754): replace these with constants from otbn_regs.h
 */
typedef enum sc_otbn_cmd {
  kScOtbnCmdExecute = 0xd8,
  kScOtbnCmdSecWipeDmem = 0xc3,
  kScOtbnCmdSecWipeImem = 0x1e,
} sc_otbn_cmd_t;
 
/**
 * OTBN status
 *
 * TODO(#16754): replace these with constants from otbn_regs.h
 */
typedef enum sc_otbn_status {
  kScOtbnStatusIdle = 0x00,
  kScOtbnStatusBusyExecute = 0x01,
  kScOtbnStatusBusySecWipeDmem = 0x02,
  kScOtbnStatusBusySecWipeImem = 0x03,
  kScOtbnStatusBusySecWipeInt = 0x04,
  kScOtbnStatusLocked = 0xFF,
} sc_otbn_status_t;
 
/**
 * The address of an OTBN symbol as seen by OTBN
 *
 * Use `OTBN_DECLARE_SYMBOL_ADDR()` together with `OTBN_ADDR_T_INIT()` to
 * initialize this type.
 */
typedef uint32_t sc_otbn_addr_t;
 
/**
 * Information about an embedded OTBN application image.
 *
 * All pointers reference data in the normal CPU address space.
 * uint32_t values are addresses in the OTBN address space.
 *
 * Use `OTBN_DECLARE_APP_SYMBOLS()` together with `OTBN_APP_T_INIT()` to
 * initialize this structure.
 */
typedef struct sc_otbn_app {
  /**
   * Start of OTBN instruction memory.
   */
  const uint32_t *imem_start;
  /**
   * The first word after OTBN instruction memory.
   *
   * This address satifies `imem_len = imem_end - imem_start`.
   */
  const uint32_t *imem_end;
  /**
   * Start of initialized OTBN data.
   *
   * Data in between dmem_data_start and dmem_data_end will be copied to OTBN
   * at app load time.
   */
  const uint32_t *dmem_data_start;
  /**
   * The first word after initialized OTBN data.
   *
   * Should satisfy `dmem_data_start <= dmem_data_end`.
   */
  const uint32_t *dmem_data_end;
  /**
   * Start of initialized data section in OTBN's DMEM.
   *
   * This pointer references OTBN's memory and is used to copy data at app load
   * time.
   */
  const sc_otbn_addr_t dmem_data_start_addr;
} sc_otbn_app_t;
 
/**
 * Generate the prefix to add to an OTBN symbol name used on the Ibex side
 *
 * The result is a pointer to Ibex's rodata that should be used to initialise
 * memory for that symbol.
 *
 * This is needed by the OTBN driver to support DMEM/IMEM ranges but
 * application code shouldn't need to use this. Use the `sc_otbn_addr_t` type
 * and supporting macros instead.
 */
#define OTBN_SYMBOL_PTR(app_name, sym) _otbn_local_app_##app_name##_##sym
 
/**
 * Generate the prefix to add to an OTBN symbol name used on the OTBN side
 *
 * The result is a pointer whose integer value is the address by which the
 * symbol should be accessed in OTBN memory.
 *
 * This is an internal macro used in `OTBN_DECLARE_SYMBOL_ADDR` and
 * `OTBN_ADDR_T_INIT` but application code shouldn't need to use it directly.
 */
#define OTBN_SYMBOL_ADDR(app_name, sym) _otbn_remote_app_##app_name##_##sym
 
/**
 * Makes a symbol in the OTBN application image available.
 *
 * This is needed by the OTBN driver to support DMEM/IMEM ranges but
 * application code shouldn't need to use this. To get access to OTBN
 * addresses, use `OTBN_DECLARE_SYMBOL_ADDR` instead.
 */
#define OTBN_DECLARE_SYMBOL_PTR(app_name, symbol_name) \
  extern const uint32_t OTBN_SYMBOL_PTR(app_name, symbol_name)[]
 
/**
 * Makes the OTBN address of a symbol in the OTBN application available.
 *
 * Symbols are typically function or data pointers, i.e. labels in assembly
 * code. Unlike OTBN_DECLARE_SYMBOL_PTR, this will work for symbols in the .bss
 * section (which exist on the OTBN side, even though they don't have backing
 * data on Ibex).
 *
 * Use this macro instead of manually declaring the symbols as symbol names
 * might change.
 *
 * @param app_name    Name of the application the function is contained in.
 * @param symbol_name Name of the symbol (function, label).
 */
#define OTBN_DECLARE_SYMBOL_ADDR(app_name, symbol_name) \
  extern const uint32_t OTBN_SYMBOL_ADDR(app_name, symbol_name)[]
 
/**
 * Makes an embedded OTBN application image available for use.
 *
 * Make symbols available that indicate the start and the end of instruction
 * and data memory regions, as they are stored in the device memory.
 *
 * Use this macro instead of manually declaring the symbols as symbol names
 * might change.
 *
 * @param app_name Name of the application to load, which is typically the
 *                 name of the main (assembly) source file.
 */
#define OTBN_DECLARE_APP_SYMBOLS(app_name)             \
  OTBN_DECLARE_SYMBOL_PTR(app_name, _imem_start);      \
  OTBN_DECLARE_SYMBOL_PTR(app_name, _imem_end);        \
  OTBN_DECLARE_SYMBOL_PTR(app_name, _dmem_data_start); \
  OTBN_DECLARE_SYMBOL_PTR(app_name, _dmem_data_end);   \
  OTBN_DECLARE_SYMBOL_ADDR(app_name, _dmem_data_start);
 
/**
 * Initializes the OTBN application information structure.
 *
 * After making all required symbols from the application image available
 * through `OTBN_DECLARE_APP_SYMBOLS()`, use this macro to initialize an
 * `sc_otbn_app_t` struct with those symbols.
 *
 * @param app_name Name of the application to load.
 * @see OTBN_DECLARE_APP_SYMBOLS()
 */
#define OTBN_APP_T_INIT(app_name)                                           \
  ((sc_otbn_app_t){                                                         \
      .imem_start = OTBN_SYMBOL_PTR(app_name, _imem_start),                 \
      .imem_end = OTBN_SYMBOL_PTR(app_name, _imem_end),                     \
      .dmem_data_start = OTBN_SYMBOL_PTR(app_name, _dmem_data_start),       \
      .dmem_data_end = OTBN_SYMBOL_PTR(app_name, _dmem_data_end),           \
      .dmem_data_start_addr = OTBN_ADDR_T_INIT(app_name, _dmem_data_start), \
  })
 
/**
 * Initializes an `sc_otbn_addr_t`.
 */
#define OTBN_ADDR_T_INIT(app_name, symbol_name) \
  ((uint32_t)OTBN_SYMBOL_ADDR(app_name, symbol_name))
 
/**
 * (Re-)loads an application into OTBN.
 *
 * Load the application image with both instruction and data segments into
 * OTBN.
 *
 * @param app The application to load into OTBN.
 * @return The result of the operation.
 */
OT_WARN_UNUSED_RESULT
rom_error_t sc_otbn_load_app(const sc_otbn_app_t app);
 
/**
 * Copies data from the CPU memory to OTBN data memory.
 *
 * @param num_words Number of 32b words to copy.
 * @param dest Address of the destination in OTBN's data memory.
 * @param src Source of the data to copy.
 * @return The result of the operation.
 */
OT_WARN_UNUSED_RESULT
rom_error_t sc_otbn_dmem_write(size_t num_words, const uint32_t *src,
                               sc_otbn_addr_t dest);
 
/**
 * Copies data from OTBN's data memory to CPU memory.
 *
 * @param num_words The number of 32b words to copy.
 * @param src The address in OTBN data memory to copy from.
 * @param[out] dest The destination of the copied data in main memory
 *                  (preallocated).
 * @return The result of the operation.
 */
OT_WARN_UNUSED_RESULT
rom_error_t sc_otbn_dmem_read(size_t num_words, const sc_otbn_addr_t src,
                              uint32_t *dest);
 
/**
 * Start the execution of the application loaded into OTBN.
 *
 * This function blocks until OTBN is idle.
 *
 * @return Result of the operation.
 */
OT_WARN_UNUSED_RESULT
rom_error_t sc_otbn_execute(void);
 
/**
 * Blocks until OTBN is idle.
 *
 * If OTBN is or becomes locked, an error will occur.
 *
 * @return Result of the operation.
 */
OT_WARN_UNUSED_RESULT
rom_error_t sc_otbn_busy_wait_for_done(void);
 
/**
 * Read OTBN's instruction count register.
 *
 * OTBN automatically calculates how many instructions are executed in a given
 * program and writes the result to this register. Software can read it to
 * verify that instructions were not unexpectedly skipped or added (for
 * instance, due to fault injection attacks).
 *
 * Note that the OTBN hardware resets the instruction count register to 0 when
 * the EXECUTE command is issued, so there is no need for software to reset the
 * counter between programs.
 *
 * @return count the value from the instruction count register
 */
OT_WARN_UNUSED_RESULT
uint32_t sc_otbn_instruction_count_get(void);
 
/**
 * Wipe IMEM securely.
 *
 * This function blocks until OTBN is idle.
 *
 * @return Result of the operation.
 */
OT_WARN_UNUSED_RESULT
rom_error_t sc_otbn_imem_sec_wipe(void);
 
/**
 * Wipe DMEM securely.
 *
 * This function blocks until OTBN is idle.
 *
 * @return Result of the operation.
 */
OT_WARN_UNUSED_RESULT
rom_error_t sc_otbn_dmem_sec_wipe(void);
 
#ifdef __cplusplus
}
#endif
 
#endif  // OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_DRIVERS_OTBN_H_