• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (c) 2015-2018, ARM Limited and Contributors. All rights reserved.
3  *
4  * SPDX-License-Identifier: BSD-3-Clause
5  */
6 
7 #ifndef TBBR_OID_H
8 #define TBBR_OID_H
9 
10 /*
11  * The following is a list of OID values defined and reserved by ARM, which
12  * are used to define the extension fields of the certificate structure, as
13  * defined in the Trusted Board Boot Requirements (TBBR) specification,
14  * ARM DEN0006C-1.
15  */
16 
17 
18 /* TrustedFirmwareNVCounter - Non-volatile counter extension */
19 #define TRUSTED_FW_NVCOUNTER_OID		"1.3.6.1.4.1.4128.2100.1"
20 /* NonTrustedFirmwareNVCounter - Non-volatile counter extension */
21 #define NON_TRUSTED_FW_NVCOUNTER_OID		"1.3.6.1.4.1.4128.2100.2"
22 
23 
24 /*
25  * Non-Trusted Firmware Updater Certificate
26  */
27 
28 /* APFirmwareUpdaterConfigHash - BL2U */
29 #define AP_FWU_CFG_HASH_OID			"1.3.6.1.4.1.4128.2100.101"
30 /* SCPFirmwareUpdaterConfigHash - SCP_BL2U */
31 #define SCP_FWU_CFG_HASH_OID			"1.3.6.1.4.1.4128.2100.102"
32 /* FirmwareUpdaterHash - NS_BL2U */
33 #define FWU_HASH_OID				"1.3.6.1.4.1.4128.2100.103"
34 /* TrustedWatchdogRefreshTime */
35 #define TRUSTED_WATCHDOG_TIME_OID		"1.3.6.1.4.1.4128.2100.104"
36 
37 
38 /*
39  * Trusted Boot Firmware Certificate
40  */
41 
42 /* TrustedBootFirmwareHash - BL2 */
43 #define TRUSTED_BOOT_FW_HASH_OID		"1.3.6.1.4.1.4128.2100.201"
44 #define TRUSTED_BOOT_FW_CONFIG_HASH_OID		"1.3.6.1.4.1.4128.2100.202"
45 #define HW_CONFIG_HASH_OID			"1.3.6.1.4.1.4128.2100.203"
46 
47 /*
48  * Trusted Key Certificate
49  */
50 
51 /* PrimaryDebugCertificatePK */
52 #define PRIMARY_DEBUG_PK_OID			"1.3.6.1.4.1.4128.2100.301"
53 /* TrustedWorldPK */
54 #define TRUSTED_WORLD_PK_OID			"1.3.6.1.4.1.4128.2100.302"
55 /* NonTrustedWorldPK */
56 #define NON_TRUSTED_WORLD_PK_OID		"1.3.6.1.4.1.4128.2100.303"
57 
58 
59 /*
60  * Trusted Debug Certificate
61  */
62 
63 /* DebugScenario */
64 #define TRUSTED_DEBUG_SCENARIO_OID		"1.3.6.1.4.1.4128.2100.401"
65 /* SoC Specific */
66 #define TRUSTED_DEBUG_SOC_SPEC_OID		"1.3.6.1.4.1.4128.2100.402"
67 /* SecondaryDebugCertPK */
68 #define SECONDARY_DEBUG_PK_OID			"1.3.6.1.4.1.4128.2100.403"
69 
70 
71 /*
72  * SoC Firmware Key Certificate
73  */
74 
75 /* SoCFirmwareContentCertPK */
76 #define SOC_FW_CONTENT_CERT_PK_OID		"1.3.6.1.4.1.4128.2100.501"
77 
78 /*
79  * SoC Firmware Content Certificate
80  */
81 
82 /* APRomPatchHash - BL1_PATCH */
83 #define APROM_PATCH_HASH_OID			"1.3.6.1.4.1.4128.2100.601"
84 /* SoCConfigHash */
85 #define SOC_CONFIG_HASH_OID			"1.3.6.1.4.1.4128.2100.602"
86 /* SoCAPFirmwareHash - BL31 */
87 #define SOC_AP_FW_HASH_OID			"1.3.6.1.4.1.4128.2100.603"
88 /* SoCFirmwareConfigHash = SOC_FW_CONFIG */
89 #define SOC_FW_CONFIG_HASH_OID			"1.3.6.1.4.1.4128.2100.604"
90 
91 /*
92  * SCP Firmware Key Certificate
93  */
94 
95 /* SCPFirmwareContentCertPK */
96 #define SCP_FW_CONTENT_CERT_PK_OID		"1.3.6.1.4.1.4128.2100.701"
97 
98 
99 /*
100  * SCP Firmware Content Certificate
101  */
102 
103 /* SCPFirmwareHash - SCP_BL2 */
104 #define SCP_FW_HASH_OID				"1.3.6.1.4.1.4128.2100.801"
105 /* SCPRomPatchHash - SCP_BL1_PATCH */
106 #define SCP_ROM_PATCH_HASH_OID			"1.3.6.1.4.1.4128.2100.802"
107 
108 
109 /*
110  * Trusted OS Firmware Key Certificate
111  */
112 
113 /* TrustedOSFirmwareContentCertPK */
114 #define TRUSTED_OS_FW_CONTENT_CERT_PK_OID	"1.3.6.1.4.1.4128.2100.901"
115 
116 
117 /*
118  * Trusted OS Firmware Content Certificate
119  */
120 
121 /* TrustedOSFirmwareHash - BL32 */
122 #define TRUSTED_OS_FW_HASH_OID			"1.3.6.1.4.1.4128.2100.1001"
123 /* TrustedOSExtra1FirmwareHash - BL32 Extra1 */
124 #define TRUSTED_OS_FW_EXTRA1_HASH_OID		"1.3.6.1.4.1.4128.2100.1002"
125 /* TrustedOSExtra2FirmwareHash - BL32 Extra2 */
126 #define TRUSTED_OS_FW_EXTRA2_HASH_OID		"1.3.6.1.4.1.4128.2100.1003"
127 /* TrustedOSFirmwareConfigHash - TOS_FW_CONFIG */
128 #define TRUSTED_OS_FW_CONFIG_HASH_OID		"1.3.6.1.4.1.4128.2100.1004"
129 
130 
131 /*
132  * Non-Trusted Firmware Key Certificate
133  */
134 
135 /* NonTrustedFirmwareContentCertPK */
136 #define NON_TRUSTED_FW_CONTENT_CERT_PK_OID	"1.3.6.1.4.1.4128.2100.1101"
137 
138 
139 /*
140  * Non-Trusted Firmware Content Certificate
141  */
142 
143 /* NonTrustedWorldBootloaderHash - BL33 */
144 #define NON_TRUSTED_WORLD_BOOTLOADER_HASH_OID	"1.3.6.1.4.1.4128.2100.1201"
145 /* NonTrustedFirmwareConfigHash - NT_FW_CONFIG */
146 #define NON_TRUSTED_FW_CONFIG_HASH_OID		"1.3.6.1.4.1.4128.2100.1202"
147 
148 #endif /* TBBR_OID_H */
149