mmc_rpmb.c 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673
  1. /* Copyright Statement:
  2. *
  3. * This software/firmware and related documentation ("MediaTek Software") are
  4. * protected under relevant copyright laws. The information contained herein
  5. * is confidential and proprietary to MediaTek Inc. and/or its licensors.
  6. * Without the prior written permission of MediaTek inc. and/or its licensors,
  7. * any reproduction, modification, use or disclosure of MediaTek Software,
  8. * and information contained herein, in whole or in part, shall be strictly prohibited.
  9. */
  10. /* MediaTek Inc. (C) 2015. All rights reserved.
  11. *
  12. * BY OPENING THIS FILE, RECEIVER HEREBY UNEQUIVOCALLY ACKNOWLEDGES AND AGREES
  13. * THAT THE SOFTWARE/FIRMWARE AND ITS DOCUMENTATIONS ("MEDIATEK SOFTWARE")
  14. * RECEIVED FROM MEDIATEK AND/OR ITS REPRESENTATIVES ARE PROVIDED TO RECEIVER ON
  15. * AN "AS-IS" BASIS ONLY. MEDIATEK EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES,
  16. * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF
  17. * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT.
  18. * NEITHER DOES MEDIATEK PROVIDE ANY WARRANTY WHATSOEVER WITH RESPECT TO THE
  19. * SOFTWARE OF ANY THIRD PARTY WHICH MAY BE USED BY, INCORPORATED IN, OR
  20. * SUPPLIED WITH THE MEDIATEK SOFTWARE, AND RECEIVER AGREES TO LOOK ONLY TO SUCH
  21. * THIRD PARTY FOR ANY WARRANTY CLAIM RELATING THERETO. RECEIVER EXPRESSLY ACKNOWLEDGES
  22. * THAT IT IS RECEIVER'S SOLE RESPONSIBILITY TO OBTAIN FROM ANY THIRD PARTY ALL PROPER LICENSES
  23. * CONTAINED IN MEDIATEK SOFTWARE. MEDIATEK SHALL ALSO NOT BE RESPONSIBLE FOR ANY MEDIATEK
  24. * SOFTWARE RELEASES MADE TO RECEIVER'S SPECIFICATION OR TO CONFORM TO A PARTICULAR
  25. * STANDARD OR OPEN FORUM. RECEIVER'S SOLE AND EXCLUSIVE REMEDY AND MEDIATEK'S ENTIRE AND
  26. * CUMULATIVE LIABILITY WITH RESPECT TO THE MEDIATEK SOFTWARE RELEASED HEREUNDER WILL BE,
  27. * AT MEDIATEK'S OPTION, TO REVISE OR REPLACE THE MEDIATEK SOFTWARE AT ISSUE,
  28. * OR REFUND ANY SOFTWARE LICENSE FEES OR SERVICE CHARGE PAID BY RECEIVER TO
  29. * MEDIATEK FOR SUCH MEDIATEK SOFTWARE AT ISSUE.
  30. *
  31. * The following software/firmware and/or related documentation ("MediaTek Software")
  32. * have been modified by MediaTek Inc. All revisions are subject to any receiver\'s
  33. * applicable license agreements with MediaTek Inc.
  34. */
  35. #include "msdc.h"
  36. #include "mmc_rpmb.h"
  37. #define RPMB_KEY_DUMP 0
  38. #if defined(MMC_MSDC_DRV_LK)
  39. extern int32_t rpmb_hmac(uint32_t pattern, uint32_t size);
  40. extern unsigned int g_random_pattern;
  41. u32 *shared_msg_addr =(u32 *)0x44A02040;
  42. u32 *shared_hmac_addr = (u32 *)0x44A02CE0;
  43. #include <arch/ops.h>
  44. //For arch_clean_invalidate_cache_range() is defined in bootable/bootloader/include/arch/ops.h
  45. #endif
  46. #ifndef swab16
  47. #define swab16(x) \
  48. ((u16)( \
  49. (((u16)(x) & (u16)0x00ffU) << 8) | \
  50. (((u16)(x) & (u16)0xff00U) >> 8) ))
  51. #endif
  52. #ifndef swab32
  53. #define swab32(x) \
  54. ((u32)( \
  55. (((u32)(x) & (u32)0x000000ffUL) << 24) | \
  56. (((u32)(x) & (u32)0x0000ff00UL) << 8) | \
  57. (((u32)(x) & (u32)0x00ff0000UL) >> 8) | \
  58. (((u32)(x) & (u32)0xff000000UL) >> 24) ))
  59. #endif
  60. #ifndef cpu_to_be16
  61. #define cpu_to_be16(x) ({ u16 _x = x; swab16(_x); })
  62. #endif
  63. #ifndef cpu_to_be32
  64. #define cpu_to_be32(x) ({ u32 _x = x; swab32(_x); })
  65. #endif
  66. #ifndef be16_to_cpu
  67. #define be16_to_cpu(x) cpu_to_be16(x)
  68. #endif
  69. #ifndef be32_to_cpu
  70. #define be32_to_cpu(x) cpu_to_be32(x)
  71. #endif
  72. static const char * const rpmb_err_msg[] = {
  73. "",
  74. "General failure",
  75. "Authentication failure",
  76. "Counter failure",
  77. "Address failure",
  78. "Write failure",
  79. "Read failure",
  80. "Authentication key not yet programmed",
  81. };
  82. static int mmc_rpmb_pre_frame(struct mmc_rpmb_req *rpmb_req)
  83. {
  84. struct mmc_rpmb_cfg *rpmb_cfg = rpmb_req->rpmb_cfg;
  85. u8 *data_frame = rpmb_req->data_frame;
  86. #if defined(MMC_MSDC_DRV_LK)
  87. u32 wc;
  88. #endif
  89. u16 blks = rpmb_cfg->blk_cnt;
  90. u16 addr;
  91. u16 type;
  92. u8 *nonce = rpmb_cfg->nonce;
  93. memset(data_frame, 0, 512 * blks);
  94. type = cpu_to_be16(rpmb_cfg->type);
  95. memcpy(data_frame + RPMB_TYPE_BEG, &type, 2);
  96. if (rpmb_cfg->type == RPMB_PROGRAM_KEY) {
  97. memcpy(data_frame + RPMB_MAC_BEG, rpmb_cfg->mac, RPMB_SZ_MAC);
  98. } else if (rpmb_cfg->type == RPMB_GET_WRITE_COUNTER ||
  99. rpmb_cfg->type == RPMB_READ_DATA) {
  100. /*
  101. * One package prepared
  102. * This request needs Nonce and type
  103. * If is data read, then also need addr
  104. */
  105. if (rpmb_cfg->type == RPMB_READ_DATA) {
  106. addr = cpu_to_be16(rpmb_cfg->addr);
  107. memcpy(data_frame + RPMB_ADDR_BEG, &addr, 2);
  108. }
  109. /* convert Nonce code */
  110. memcpy(data_frame + RPMB_NONCE_BEG, nonce, RPMB_SZ_NONCE);
  111. #if defined(MMC_MSDC_DRV_LK)
  112. } else if (rpmb_cfg->type == RPMB_WRITE_DATA) {
  113. addr = cpu_to_be16(rpmb_cfg->addr);
  114. memcpy(data_frame + RPMB_ADDR_BEG, &addr, 2);
  115. wc = cpu_to_be32(rpmb_cfg->wc);
  116. memcpy(data_frame + RPMB_WCOUNTER_BEG, &wc, 4);
  117. blks = cpu_to_be16(rpmb_cfg->blk_cnt);
  118. memcpy(data_frame + RPMB_BLKS_BEG, &blks, 2);
  119. #endif
  120. }
  121. return 0;
  122. }
  123. static int mmc_rpmb_post_frame(struct mmc_rpmb_req *rpmb_req)
  124. {
  125. struct mmc_rpmb_cfg *rpmb_cfg = rpmb_req->rpmb_cfg;
  126. u8 *data_frame = rpmb_req->data_frame;
  127. u16 result;
  128. memcpy(&result, data_frame + RPMB_RES_BEG, 2);
  129. rpmb_cfg->result = cpu_to_be16(result);
  130. if (rpmb_cfg->type == RPMB_GET_WRITE_COUNTER ||
  131. rpmb_cfg->type == RPMB_WRITE_DATA) {
  132. rpmb_cfg->wc = cpu_to_be32(*(u32 *)&data_frame[RPMB_WCOUNTER_BEG]);
  133. msdc_pr_info("%s, rpmb_cfg->wc = %x\n", __func__, rpmb_cfg->wc);
  134. }
  135. if (rpmb_cfg->type == RPMB_GET_WRITE_COUNTER ||
  136. rpmb_cfg->type == RPMB_READ_DATA) {
  137. /* nonce copy */
  138. memcpy(rpmb_cfg->nonce, data_frame + RPMB_NONCE_BEG, RPMB_SZ_NONCE);
  139. }
  140. if (rpmb_cfg->mac) {
  141. /*
  142. * To do. compute if mac is legal or not. Current we don't do this since we just perform get wc to check if we need set key.
  143. */
  144. #if defined(MMC_MSDC_DRV_LK)
  145. memcpy(rpmb_cfg->mac, data_frame + RPMB_MAC_BEG, RPMB_SZ_MAC);
  146. #endif
  147. }
  148. return 0;
  149. }
  150. static int mmc_rpmb_send_command(struct mmc_card *card, u8 *data_frame, u16 blks, u16 type, u8 req_type)
  151. {
  152. struct mmc_host *host = card->host;
  153. int err;
  154. /*
  155. * Auto CMD23 and CMD25 or CMD18
  156. */
  157. if ((req_type == RPMB_REQ && type == RPMB_WRITE_DATA) ||
  158. (req_type == RPMB_REQ && type == RPMB_PROGRAM_KEY))
  159. msdc_set_reliable_write(host, 1);
  160. else
  161. msdc_set_reliable_write(host, 0);
  162. msdc_set_autocmd(host, MSDC_AUTOCMD23, 1);
  163. if (req_type == RPMB_REQ)
  164. err = mmc_block_write(0, 0, blks, (unsigned long *) data_frame);
  165. else
  166. err = mmc_block_read(0, 0, blks, (unsigned long *) data_frame);
  167. msdc_set_autocmd(host, MSDC_AUTOCMD23, 0);
  168. if (err)
  169. msdc_pr_err("%s: CMD%s failed. (%d)\n", __func__, ((req_type==RPMB_REQ) ? "25":"18"), err);
  170. return err;
  171. }
  172. static int mmc_rpmb_start_req(struct mmc_card *card, struct mmc_rpmb_req *rpmb_req)
  173. {
  174. int err = 0;
  175. u16 blks = rpmb_req->rpmb_cfg->blk_cnt;
  176. u16 type = rpmb_req->rpmb_cfg->type;
  177. u8 *data_frame = rpmb_req->data_frame;
  178. /*
  179. * STEP 1: send request to RPMB partition
  180. */
  181. if (type == RPMB_WRITE_DATA)
  182. err = mmc_rpmb_send_command(card, data_frame, blks, type, RPMB_REQ);
  183. else
  184. err = mmc_rpmb_send_command(card, data_frame, 1, type, RPMB_REQ);
  185. if (err) {
  186. msdc_pr_err("%s step 1, request failed (%d)\n", __func__, err);
  187. goto out;
  188. }
  189. /*
  190. * STEP 2: check write result
  191. * Only for WRITE_DATA or Program key
  192. */
  193. memset(data_frame, 0, 512 * blks);
  194. if (type == RPMB_WRITE_DATA || type == RPMB_PROGRAM_KEY) {
  195. data_frame[RPMB_TYPE_BEG + 1] = RPMB_RESULT_READ;
  196. err = mmc_rpmb_send_command(card, data_frame, 1, RPMB_RESULT_READ, RPMB_REQ);
  197. if (err) {
  198. msdc_pr_err("%s step 2, request result failed (%d)\n", __func__, err);
  199. goto out;
  200. }
  201. }
  202. /*
  203. * STEP 3: get response from RPMB partition
  204. */
  205. data_frame[RPMB_TYPE_BEG] = 0;
  206. data_frame[RPMB_TYPE_BEG + 1] = type;
  207. if (type == RPMB_READ_DATA)
  208. err = mmc_rpmb_send_command(card, data_frame, blks, type, RPMB_RESP);
  209. else
  210. err = mmc_rpmb_send_command(card, data_frame, 1, type, RPMB_RESP);
  211. if (err) {
  212. msdc_pr_err("%s step 3, response failed (%d)\n", __func__, err);
  213. }
  214. out:
  215. return err;
  216. }
  217. int mmc_rpmb_check_result(u16 result)
  218. {
  219. if (result) {
  220. msdc_pr_err("%s %s %s\n", __func__, rpmb_err_msg[result & 0x7],
  221. (result & 0x80) ? "Write counter has expired" : "");
  222. }
  223. return result;
  224. }
  225. int mmc_rpmb_get_wc(u32 *wc, int *rpmb_result)
  226. {
  227. struct mmc_card *card = mmc_get_card(0);
  228. struct mmc_rpmb_cfg rpmb_cfg;
  229. struct mmc_rpmb_req rpmb_req;
  230. u8 *ext_csd = &card->raw_ext_csd[0];
  231. u8 rpmb_frame[512];
  232. u8 nonce[16];
  233. u8 val;
  234. int ret = 0;
  235. memset(&rpmb_cfg, 0, sizeof(struct mmc_rpmb_cfg));
  236. memset(nonce, 0, 16);
  237. rpmb_cfg.type = RPMB_GET_WRITE_COUNTER;
  238. rpmb_cfg.result = 0;
  239. rpmb_cfg.blk_cnt = 1;
  240. rpmb_cfg.addr = 0;
  241. rpmb_cfg.wc = 0;
  242. rpmb_cfg.nonce = nonce;
  243. rpmb_cfg.data = NULL;
  244. rpmb_cfg.mac = NULL;
  245. /*
  246. * 1. Switch to RPMB partition.
  247. */
  248. val = (ext_csd[EXT_CSD_PART_CFG] & ~0x7) | (EXT_CSD_PART_CFG_RPMB_PART & 0x7);
  249. ret = mmc_set_part_config(card, val);
  250. if (ret) {
  251. msdc_pr_err("%s, mmc_set_part_config failed!! (%x)\n", __func__, ret);
  252. return ret;
  253. }
  254. msdc_pr_info("%s, mmc_set_part_config done!!\n", __func__);
  255. rpmb_req.rpmb_cfg = &rpmb_cfg;
  256. rpmb_req.data_frame = rpmb_frame;
  257. /*
  258. * 2. Prepare get wc data frame.
  259. */
  260. ret = mmc_rpmb_pre_frame(&rpmb_req);
  261. /*
  262. * 3. CMD 23 and followed CMD25/18 procedure.
  263. */
  264. ret = mmc_rpmb_start_req(card, &rpmb_req);
  265. if (ret) {
  266. msdc_pr_err("%s, mmc_rpmb_part_ops failed!! (%x)\n", __func__, ret);
  267. return ret;
  268. }
  269. ret = mmc_rpmb_post_frame(&rpmb_req);
  270. msdc_pr_info("%s, rpmb_req.result=%x\n", __func__, rpmb_cfg.result);
  271. #if defined(MMC_MSDC_DRV_LK)
  272. memcpy(shared_msg_addr, rpmb_frame + RPMB_DATA_BEG, 284);
  273. arch_clean_invalidate_cache_range((addr_t) shared_msg_addr, 4096);
  274. ret = rpmb_hmac(g_random_pattern, 284);
  275. if (ret) {
  276. msdc_pr_err("%s, rpmb_hmac error.\n", __func__);
  277. }
  278. if (memcmp(rpmb_frame + RPMB_MAC_BEG, shared_hmac_addr, 32) != 0) {
  279. msdc_pr_err("%s, compare hmac error!!\n", __func__);
  280. return ret;
  281. }
  282. #endif
  283. //ret = be16_to_cpu(rpmb_req.result);
  284. /*
  285. * 4. Check result.
  286. */
  287. *rpmb_result = mmc_rpmb_check_result(rpmb_cfg.result);
  288. *wc = rpmb_cfg.wc;
  289. return ret;
  290. }
  291. int mmc_rpmb_set_key(u8 *key)
  292. {
  293. struct mmc_card *card = mmc_get_card(0);
  294. struct mmc_rpmb_cfg rpmb_cfg;
  295. struct mmc_rpmb_req rpmb_req;
  296. u8 *ext_csd = &card->raw_ext_csd[0];
  297. u8 rpmb_frame[512];
  298. u8 val;
  299. int ret, rpmb_result = 0;
  300. u32 wc;
  301. #if RPMB_KEY_DUMP
  302. int i;
  303. #endif
  304. ret = mmc_rpmb_get_wc(&wc, &rpmb_result);
  305. #if RPMB_KEY_DUMP
  306. msdc_pr_info("rpmb key=\n");
  307. for (i = 0; i < 32; i++)
  308. msdc_pr_info("0x%x, ", key[i]);
  309. #endif
  310. /* if any errors, return it */
  311. if (ret) {
  312. msdc_pr_err("%s, get wc failed!! (%d)\n", __func__, ret);
  313. return ret;
  314. }
  315. if (rpmb_result != 7) {
  316. msdc_pr_err("mmc rpmb key is already programmed!!\n");
  317. return ret;
  318. }
  319. memset(&rpmb_cfg, 0, sizeof(struct mmc_rpmb_cfg));
  320. rpmb_cfg.type = RPMB_PROGRAM_KEY;
  321. rpmb_cfg.result = 0;
  322. rpmb_cfg.blk_cnt = 1;
  323. rpmb_cfg.addr = 0;
  324. rpmb_cfg.wc = 0;
  325. rpmb_cfg.nonce = NULL;
  326. rpmb_cfg.data = NULL;
  327. rpmb_cfg.mac = key;
  328. /*
  329. * 1. Switch to RPMB partition.
  330. */
  331. val = (ext_csd[EXT_CSD_PART_CFG] & ~0x7) | (EXT_CSD_PART_CFG_RPMB_PART & 0x7);
  332. ret = mmc_set_part_config(card, val);
  333. if (ret) {
  334. msdc_pr_err("%s, mmc_set_part_config failed!! (%x)\n", __func__, ret);
  335. return ret;
  336. }
  337. rpmb_req.rpmb_cfg = &rpmb_cfg;
  338. rpmb_req.data_frame = rpmb_frame;
  339. /*
  340. * 2. Prepare program key data frame.
  341. */
  342. ret = mmc_rpmb_pre_frame(&rpmb_req);
  343. /*
  344. * 3. CMD 23 and followed CMD25/18 procedure.
  345. */
  346. ret = mmc_rpmb_start_req(card, &rpmb_req);
  347. if (ret) {
  348. msdc_pr_err("%s, mmc_rpmb_part_ops failed!! (%x)\n", __func__, ret);
  349. return ret;
  350. }
  351. ret = mmc_rpmb_post_frame(&rpmb_req);
  352. msdc_pr_info("%s, rpmb_req.result=%x\n", __func__, rpmb_cfg.result);
  353. //ret = be16_to_cpu(rpmb_req.result);
  354. /*
  355. * 4. Check result.
  356. */
  357. ret = mmc_rpmb_check_result(rpmb_cfg.result);
  358. if (ret == 0)
  359. msdc_pr_info("RPMB key is successfully programmed!!\n");
  360. return ret;
  361. }
  362. u32 mmc_rpmb_get_size(void)
  363. {
  364. struct mmc_card *card = mmc_get_card(0);
  365. u8 *ext_csd = &card->raw_ext_csd[0];
  366. return ext_csd[EXT_CSD_RPMB_SIZE_MULT] * 128 * 1024;
  367. }
  368. //get ext_csd[222]
  369. u32 mmc_rpmb_get_rel_wr_sec_c(void)
  370. {
  371. struct mmc_card *card = mmc_get_card(0);
  372. u8 *ext_csd = &card->raw_ext_csd[0];
  373. printf("RPMB rel_wr_sec=%d\n", ext_csd[EXT_CSD_REL_WR_SEC_C]);
  374. return ext_csd[EXT_CSD_REL_WR_SEC_C];
  375. }
  376. #if defined(MMC_MSDC_DRV_LK)
  377. int mmc_rpmb_read_data(u32 blkAddr, u32 *buf, u32 bufLen)
  378. {
  379. struct mmc_card *card = mmc_get_card(0);
  380. struct mmc_rpmb_cfg rpmb_cfg;
  381. struct mmc_rpmb_req rpmb_req;
  382. u32 blkLen;
  383. u32 left_size = bufLen;
  384. u32 tran_size;
  385. u8 *ext_csd = &card->raw_ext_csd[0];
  386. u8 rpmb_frame[512];
  387. u8 nonce[16];
  388. u8 val;
  389. u32 ret = 0, i;
  390. /*
  391. * 1. Switch to RPMB partition.
  392. */
  393. val = (ext_csd[EXT_CSD_PART_CFG] & ~0x7) | (EXT_CSD_PART_CFG_RPMB_PART & 0x7);
  394. ret = mmc_set_part_config(card, val);
  395. if (ret) {
  396. msdc_pr_err("%s, mmc_set_part_config failed!! (%x)\n", __func__, ret);
  397. return ret;
  398. }
  399. msdc_pr_info("%s, mmc_set_part_config done!!\n", __func__);
  400. blkLen = (bufLen % RPMB_SZ_DATA) ? (bufLen / RPMB_SZ_DATA + 1) : (bufLen / RPMB_SZ_DATA);
  401. for (i = 0; i < blkLen; i++) {
  402. memset(&rpmb_cfg, 0, sizeof(struct mmc_rpmb_cfg));
  403. memset(nonce, 0, 16);
  404. rpmb_cfg.type = RPMB_READ_DATA;
  405. rpmb_cfg.result = 0;
  406. rpmb_cfg.blk_cnt = 1;
  407. rpmb_cfg.addr = blkAddr + i;
  408. rpmb_cfg.wc = 0;
  409. rpmb_cfg.nonce = nonce;
  410. rpmb_cfg.data = NULL;
  411. rpmb_cfg.mac = NULL;
  412. rpmb_req.rpmb_cfg = &rpmb_cfg;
  413. rpmb_req.data_frame = rpmb_frame;
  414. /*
  415. * 2. Prepare read data frame.
  416. */
  417. ret = mmc_rpmb_pre_frame(&rpmb_req);
  418. /*
  419. * 3. CMD 23 and followed CMD25/18 procedure.
  420. */
  421. ret = mmc_rpmb_start_req(card, &rpmb_req);
  422. if (ret) {
  423. msdc_pr_err("%s, mmc_rpmb_start_req failed!! (%x)\n", __func__, ret);
  424. return ret;
  425. }
  426. ret = mmc_rpmb_post_frame(&rpmb_req);
  427. msdc_pr_info("%s, rpmb_req.result=%x\n", __func__, rpmb_cfg.result);
  428. //ret = be16_to_cpu(rpmb_req.result);
  429. /*
  430. * 4. Authenticate hmac.
  431. */
  432. memcpy(shared_msg_addr, rpmb_frame + RPMB_DATA_BEG, 284);
  433. arch_clean_invalidate_cache_range((addr_t) shared_msg_addr, 4096);
  434. ret = rpmb_hmac(g_random_pattern, 284);
  435. if (ret) {
  436. msdc_pr_err("%s, rpmb_hmac error.\n", __func__);
  437. }
  438. if (memcmp(rpmb_frame + RPMB_MAC_BEG, shared_hmac_addr, 32) != 0) {
  439. msdc_pr_err("%s, compare hmac error!!\n", __func__);
  440. return ret;
  441. }
  442. /*
  443. * 5. Authenticate nonce.
  444. */
  445. if (memcmp(nonce, rpmb_cfg.nonce, RPMB_SZ_NONCE) != 0) {
  446. msdc_pr_err("%s, compare nonce error!!\n", __func__);
  447. return ret;
  448. }
  449. /*
  450. * 6. Check result.
  451. */
  452. if (mmc_rpmb_check_result(rpmb_cfg.result))
  453. return ret;
  454. if (left_size >= RPMB_SZ_DATA)
  455. tran_size = RPMB_SZ_DATA;
  456. else
  457. tran_size = left_size;
  458. memcpy(buf + i * RPMB_SZ_DATA, rpmb_frame + RPMB_DATA_BEG, tran_size);
  459. left_size -= tran_size;
  460. }
  461. return ret;
  462. }
  463. int mmc_rpmb_write_data(u32 blkAddr, u32 *buf, u32 bufLen)
  464. {
  465. struct mmc_card *card = mmc_get_card(0);
  466. struct mmc_rpmb_cfg rpmb_cfg;
  467. struct mmc_rpmb_req rpmb_req;
  468. u32 blkLen;
  469. u32 left_size = bufLen;
  470. u32 tran_size;
  471. u8 rpmb_frame[512];
  472. int ret = 0, rpmb_result = 0;
  473. u32 wc;
  474. u32 i;
  475. blkLen = (bufLen % RPMB_SZ_DATA) ? (bufLen / RPMB_SZ_DATA + 1) : (bufLen / RPMB_SZ_DATA);
  476. for (i = 0; i < blkLen; i++) {
  477. ret = mmc_rpmb_get_wc(&wc, &rpmb_result);
  478. /* if any errors, return it */
  479. if (ret) {
  480. msdc_pr_err("%s, get wc failed!! (%d)\n", __func__, ret);
  481. return ret;
  482. }
  483. memset(&rpmb_cfg, 0, sizeof(struct mmc_rpmb_cfg));
  484. rpmb_cfg.type = RPMB_WRITE_DATA;
  485. rpmb_cfg.result = 0;
  486. rpmb_cfg.blk_cnt = 1;
  487. rpmb_cfg.addr = blkAddr + i;
  488. rpmb_cfg.wc = wc;
  489. rpmb_cfg.nonce = NULL;
  490. rpmb_cfg.data = (u8 *)buf;
  491. rpmb_cfg.mac = NULL;
  492. rpmb_req.rpmb_cfg = &rpmb_cfg;
  493. rpmb_req.data_frame = rpmb_frame;
  494. /*
  495. * 1. Prepare write data frame.
  496. */
  497. ret = mmc_rpmb_pre_frame(&rpmb_req);
  498. if (left_size >= RPMB_SZ_DATA)
  499. tran_size = RPMB_SZ_DATA;
  500. else
  501. tran_size = left_size;
  502. memcpy(rpmb_frame + RPMB_DATA_BEG, buf + i * RPMB_SZ_DATA, tran_size);
  503. /*
  504. * 2. Compute hmac.
  505. */
  506. memcpy(shared_msg_addr, rpmb_frame + RPMB_DATA_BEG, 284);
  507. arch_clean_invalidate_cache_range((addr_t) shared_msg_addr, 4096);
  508. ret = rpmb_hmac(g_random_pattern, 284);
  509. if (ret)
  510. msdc_pr_err("%s, rpmb_hmac error!!\n", __func__);
  511. memcpy(rpmb_frame + RPMB_MAC_BEG, shared_hmac_addr, 32);
  512. /*
  513. * 3. CMD 23 and followed CMD25/18 procedure.
  514. */
  515. ret = mmc_rpmb_start_req(card, &rpmb_req);
  516. if (ret) {
  517. msdc_pr_err("%s, mmc_rpmb_part_ops failed!! (%x)\n", __func__, ret);
  518. return ret;
  519. }
  520. ret = mmc_rpmb_post_frame(&rpmb_req);
  521. msdc_pr_info("%s, rpmb_req.result=%x\n", __func__, rpmb_cfg.result);
  522. /*
  523. * 4. Check result.
  524. */
  525. ret = mmc_rpmb_check_result(rpmb_cfg.result);
  526. if (ret)
  527. msdc_pr_err("%s, check result error!!\n", __func__);
  528. left_size -= tran_size;
  529. }
  530. return ret;
  531. }
  532. #endif