1*91f16700Schasinglulu /* 2*91f16700Schasinglulu * Copyright (c) 2022-2023, Arm Limited. All rights reserved. 3*91f16700Schasinglulu * 4*91f16700Schasinglulu * SPDX-License-Identifier: BSD-3-Clause 5*91f16700Schasinglulu */ 6*91f16700Schasinglulu 7*91f16700Schasinglulu #ifndef CCA_COT_H 8*91f16700Schasinglulu #define CCA_COT_H 9*91f16700Schasinglulu 10*91f16700Schasinglulu /* Certificates. */ 11*91f16700Schasinglulu enum { 12*91f16700Schasinglulu /* Certificates owned by the silicon provider. */ 13*91f16700Schasinglulu CCA_CONTENT_CERT, 14*91f16700Schasinglulu CORE_SWD_KEY_CERT, 15*91f16700Schasinglulu SPMC_CONTENT_CERT, 16*91f16700Schasinglulu SIP_SECURE_PARTITION_CONTENT_CERT, 17*91f16700Schasinglulu 18*91f16700Schasinglulu /* Certificates owned by the platform owner. */ 19*91f16700Schasinglulu PLAT_KEY_CERT, 20*91f16700Schasinglulu PLAT_SECURE_PARTITION_CONTENT_CERT, 21*91f16700Schasinglulu NON_TRUSTED_FW_CONTENT_CERT, 22*91f16700Schasinglulu }; 23*91f16700Schasinglulu 24*91f16700Schasinglulu /* Certificate extensions. */ 25*91f16700Schasinglulu enum { 26*91f16700Schasinglulu /* Extensions used in certificates owned by the silicon provider. */ 27*91f16700Schasinglulu CCA_FW_NVCOUNTER_EXT, 28*91f16700Schasinglulu TRUSTED_FW_NVCOUNTER_EXT, 29*91f16700Schasinglulu TRUSTED_BOOT_FW_HASH_EXT, 30*91f16700Schasinglulu TRUSTED_BOOT_FW_CONFIG_HASH_EXT, 31*91f16700Schasinglulu HW_CONFIG_HASH_EXT, 32*91f16700Schasinglulu FW_CONFIG_HASH_EXT, 33*91f16700Schasinglulu SWD_ROT_PK_EXT, 34*91f16700Schasinglulu CORE_SWD_PK_EXT, 35*91f16700Schasinglulu SOC_AP_FW_HASH_EXT, 36*91f16700Schasinglulu SOC_FW_CONFIG_HASH_EXT, 37*91f16700Schasinglulu RMM_HASH_EXT, 38*91f16700Schasinglulu TRUSTED_OS_FW_HASH_EXT, 39*91f16700Schasinglulu TRUSTED_OS_FW_CONFIG_HASH_EXT, 40*91f16700Schasinglulu SP_PKG1_HASH_EXT, 41*91f16700Schasinglulu SP_PKG2_HASH_EXT, 42*91f16700Schasinglulu SP_PKG3_HASH_EXT, 43*91f16700Schasinglulu SP_PKG4_HASH_EXT, 44*91f16700Schasinglulu 45*91f16700Schasinglulu /* Extensions used in certificates owned by the platform owner. */ 46*91f16700Schasinglulu PROT_PK_EXT, 47*91f16700Schasinglulu PLAT_PK_EXT, 48*91f16700Schasinglulu SP_PKG5_HASH_EXT, 49*91f16700Schasinglulu SP_PKG6_HASH_EXT, 50*91f16700Schasinglulu SP_PKG7_HASH_EXT, 51*91f16700Schasinglulu SP_PKG8_HASH_EXT, 52*91f16700Schasinglulu NON_TRUSTED_FW_NVCOUNTER_EXT, 53*91f16700Schasinglulu NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, 54*91f16700Schasinglulu NON_TRUSTED_FW_CONFIG_HASH_EXT, 55*91f16700Schasinglulu }; 56*91f16700Schasinglulu 57*91f16700Schasinglulu /* Keys. */ 58*91f16700Schasinglulu enum { 59*91f16700Schasinglulu /* Keys owned by the silicon provider. */ 60*91f16700Schasinglulu ROT_KEY, 61*91f16700Schasinglulu SWD_ROT_KEY, 62*91f16700Schasinglulu CORE_SWD_KEY, 63*91f16700Schasinglulu 64*91f16700Schasinglulu /* Keys owned by the platform owner. */ 65*91f16700Schasinglulu PROT_KEY, 66*91f16700Schasinglulu PLAT_KEY, 67*91f16700Schasinglulu }; 68*91f16700Schasinglulu 69*91f16700Schasinglulu #endif /* CCA_COT_H */ 70