1*91f16700Schasinglulu /* 2*91f16700Schasinglulu * Copyright (c) 2020, Arm Limited. All rights reserved. 3*91f16700Schasinglulu * 4*91f16700Schasinglulu * SPDX-License-Identifier: BSD-3-Clause 5*91f16700Schasinglulu */ 6*91f16700Schasinglulu 7*91f16700Schasinglulu #ifndef DUALROOT_COT_H 8*91f16700Schasinglulu #define DUALROOT_COT_H 9*91f16700Schasinglulu 10*91f16700Schasinglulu /* Certificates. */ 11*91f16700Schasinglulu enum { 12*91f16700Schasinglulu /* Certificates owned by the silicon provider. */ 13*91f16700Schasinglulu TRUSTED_BOOT_FW_CERT, 14*91f16700Schasinglulu TRUSTED_KEY_CERT, 15*91f16700Schasinglulu SCP_FW_KEY_CERT, 16*91f16700Schasinglulu SCP_FW_CONTENT_CERT, 17*91f16700Schasinglulu SOC_FW_KEY_CERT, 18*91f16700Schasinglulu SOC_FW_CONTENT_CERT, 19*91f16700Schasinglulu TRUSTED_OS_FW_KEY_CERT, 20*91f16700Schasinglulu TRUSTED_OS_FW_CONTENT_CERT, 21*91f16700Schasinglulu SIP_SECURE_PARTITION_CONTENT_CERT, 22*91f16700Schasinglulu FWU_CERT, 23*91f16700Schasinglulu 24*91f16700Schasinglulu /* Certificates owned by the platform owner. */ 25*91f16700Schasinglulu NON_TRUSTED_FW_CONTENT_CERT, 26*91f16700Schasinglulu PLAT_SECURE_PARTITION_CONTENT_CERT, 27*91f16700Schasinglulu }; 28*91f16700Schasinglulu 29*91f16700Schasinglulu /* Certificate extensions. */ 30*91f16700Schasinglulu enum { 31*91f16700Schasinglulu /* Extensions used in certificates owned by the silicon provider. */ 32*91f16700Schasinglulu TRUSTED_FW_NVCOUNTER_EXT, 33*91f16700Schasinglulu TRUSTED_BOOT_FW_HASH_EXT, 34*91f16700Schasinglulu TRUSTED_BOOT_FW_CONFIG_HASH_EXT, 35*91f16700Schasinglulu HW_CONFIG_HASH_EXT, 36*91f16700Schasinglulu FW_CONFIG_HASH_EXT, 37*91f16700Schasinglulu TRUSTED_WORLD_PK_EXT, 38*91f16700Schasinglulu SCP_FW_CONTENT_CERT_PK_EXT, 39*91f16700Schasinglulu SCP_FW_HASH_EXT, 40*91f16700Schasinglulu SOC_FW_CONTENT_CERT_PK_EXT, 41*91f16700Schasinglulu SOC_AP_FW_HASH_EXT, 42*91f16700Schasinglulu SOC_FW_CONFIG_HASH_EXT, 43*91f16700Schasinglulu TRUSTED_OS_FW_CONTENT_CERT_PK_EXT, 44*91f16700Schasinglulu TRUSTED_OS_FW_HASH_EXT, 45*91f16700Schasinglulu TRUSTED_OS_FW_EXTRA1_HASH_EXT, 46*91f16700Schasinglulu TRUSTED_OS_FW_EXTRA2_HASH_EXT, 47*91f16700Schasinglulu TRUSTED_OS_FW_CONFIG_HASH_EXT, 48*91f16700Schasinglulu SP_PKG1_HASH_EXT, 49*91f16700Schasinglulu SP_PKG2_HASH_EXT, 50*91f16700Schasinglulu SP_PKG3_HASH_EXT, 51*91f16700Schasinglulu SP_PKG4_HASH_EXT, 52*91f16700Schasinglulu SP_PKG5_HASH_EXT, 53*91f16700Schasinglulu SP_PKG6_HASH_EXT, 54*91f16700Schasinglulu SP_PKG7_HASH_EXT, 55*91f16700Schasinglulu SP_PKG8_HASH_EXT, 56*91f16700Schasinglulu SCP_FWU_CFG_HASH_EXT, 57*91f16700Schasinglulu AP_FWU_CFG_HASH_EXT, 58*91f16700Schasinglulu FWU_HASH_EXT, 59*91f16700Schasinglulu 60*91f16700Schasinglulu /* Extensions used in certificates owned by the platform owner. */ 61*91f16700Schasinglulu PROT_PK_EXT, 62*91f16700Schasinglulu NON_TRUSTED_FW_NVCOUNTER_EXT, 63*91f16700Schasinglulu NON_TRUSTED_FW_CONTENT_CERT_PK_EXT, 64*91f16700Schasinglulu NON_TRUSTED_WORLD_BOOTLOADER_HASH_EXT, 65*91f16700Schasinglulu NON_TRUSTED_FW_CONFIG_HASH_EXT, 66*91f16700Schasinglulu }; 67*91f16700Schasinglulu 68*91f16700Schasinglulu /* Keys. */ 69*91f16700Schasinglulu enum { 70*91f16700Schasinglulu /* Keys owned by the silicon provider. */ 71*91f16700Schasinglulu ROT_KEY, 72*91f16700Schasinglulu TRUSTED_WORLD_KEY, 73*91f16700Schasinglulu SCP_FW_CONTENT_CERT_KEY, 74*91f16700Schasinglulu SOC_FW_CONTENT_CERT_KEY, 75*91f16700Schasinglulu TRUSTED_OS_FW_CONTENT_CERT_KEY, 76*91f16700Schasinglulu 77*91f16700Schasinglulu /* Keys owned by the platform owner. */ 78*91f16700Schasinglulu PROT_KEY, 79*91f16700Schasinglulu }; 80*91f16700Schasinglulu 81*91f16700Schasinglulu #endif /* DUALROOT_COT_H */ 82