-
Notifications
You must be signed in to change notification settings - Fork 807
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This commit pulls over the ROM read digest FI test from the pentest branch of nasahlpa/opentitan that has been used for the penetration testing. Signed-off-by: Pascal Nasahl <[email protected]>
- Loading branch information
1 parent
4ec5ee8
commit bd6f0f9
Showing
10 changed files
with
239 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,122 @@ | ||
| // Copyright lowRISC contributors (OpenTitan project). | ||
| // Licensed under the Apache License, Version 2.0, see LICENSE for details. | ||
| // SPDX-License-Identifier: Apache-2.0 | ||
|
|
||
| #include "sw/device/tests/penetrationtests/firmware/fi/rom_fi.h" | ||
|
|
||
| #include "sw/device/lib/base/abs_mmio.h" | ||
| #include "sw/device/lib/base/memory.h" | ||
| #include "sw/device/lib/base/status.h" | ||
| #include "sw/device/lib/dif/dif_rom_ctrl.h" | ||
| #include "sw/device/lib/dif/dif_rv_core_ibex.h" | ||
| #include "sw/device/lib/runtime/log.h" | ||
| #include "sw/device/lib/testing/test_framework/ottf_test_config.h" | ||
| #include "sw/device/lib/testing/test_framework/ujson_ottf.h" | ||
| #include "sw/device/lib/ujson/ujson.h" | ||
| #include "sw/device/sca/lib/sca.h" | ||
| #include "sw/device/tests/penetrationtests/firmware/lib/sca_lib.h" | ||
| #include "sw/device/tests/penetrationtests/json/rom_fi_commands.h" | ||
|
|
||
| #include "hw/top_earlgrey/sw/autogen/top_earlgrey.h" | ||
| #include "rom_ctrl_regs.h" | ||
|
|
||
| // NOP macros. | ||
| #define NOP1 "addi x0, x0, 0\n" | ||
| #define NOP10 NOP1 NOP1 NOP1 NOP1 NOP1 NOP1 NOP1 NOP1 NOP1 NOP1 | ||
| #define NOP30 NOP10 NOP10 NOP10 | ||
|
|
||
| // Interface to Ibex. | ||
| static dif_rv_core_ibex_t rv_core_ibex; | ||
|
|
||
| static dif_rom_ctrl_t rom_ctrl; | ||
|
|
||
| status_t handle_rom_read(ujson_t *uj) { | ||
| sca_registered_alerts_t reg_alerts = sca_get_triggered_alerts(); | ||
|
|
||
| dif_rom_ctrl_digest_t expected_digest; | ||
| dif_rom_ctrl_digest_t fi_digest[8]; | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &expected_digest)); | ||
|
|
||
| sca_set_trigger_high(); | ||
| asm volatile(NOP30); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[0])); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[1])); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[2])); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[3])); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[4])); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[5])); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[6])); | ||
| TRY(dif_rom_ctrl_get_digest(&rom_ctrl, &fi_digest[7])); | ||
| asm volatile(NOP30); | ||
| sca_set_trigger_low(); | ||
|
|
||
| // Get registered alerts from alert handler. | ||
| reg_alerts = sca_get_triggered_alerts(); | ||
|
|
||
| // Read ERR_STATUS register. | ||
| dif_rv_core_ibex_error_status_t codes; | ||
| TRY(dif_rv_core_ibex_get_error_status(&rv_core_ibex, &codes)); | ||
|
|
||
| rom_fi_digest_t uj_output; | ||
| memset(uj_output.digest, 0, sizeof(uj_output.digest)); | ||
| for (size_t i = 0; i < 8; i++) { | ||
| if (memcmp(&expected_digest, &fi_digest[i], | ||
| ROM_CTRL_DIGEST_MULTIREG_COUNT)) { | ||
| uj_output.digest[i] = | ||
| fi_digest[i] | ||
| .digest[0]; // Just return the first 32-bit of the digest. | ||
| } | ||
| } | ||
|
|
||
| // Send the first 8 bytes of the digest and the alerts back to the host. | ||
| uj_output.err_status = codes; | ||
| memcpy(uj_output.alerts, reg_alerts.alerts, sizeof(reg_alerts.alerts)); | ||
| RESP_OK(ujson_serialize_rom_fi_digest_t, uj, &uj_output); | ||
| return OK_STATUS(); | ||
| } | ||
|
|
||
| status_t handle_rom_fi_init(ujson_t *uj) { | ||
| sca_select_trigger_type(kScaTriggerTypeSw); | ||
| sca_init(kScaTriggerSourceAes, | ||
| kScaPeripheralIoDiv4 | kScaPeripheralEdn | kScaPeripheralCsrng | | ||
| kScaPeripheralEntropy | kScaPeripheralKmac); | ||
|
|
||
| // Configure the alert handler. Alerts triggered by IP blocks are captured | ||
| // and reported to the test. | ||
| sca_configure_alert_handler(); | ||
|
|
||
| // Disable the instruction cache and dummy instructions for FI attacks. | ||
| sca_configure_cpu(); | ||
|
|
||
| // Initialize rom_ctrl. | ||
| mmio_region_t rom_ctrl_reg = | ||
| mmio_region_from_addr(TOP_EARLGREY_ROM_CTRL_REGS_BASE_ADDR); | ||
| TRY(dif_rom_ctrl_init(rom_ctrl_reg, &rom_ctrl)); | ||
|
|
||
| // Configure Ibex to allow reading ERR_STATUS register. | ||
| TRY(dif_rv_core_ibex_init( | ||
| mmio_region_from_addr(TOP_EARLGREY_RV_CORE_IBEX_CFG_BASE_ADDR), | ||
| &rv_core_ibex)); | ||
|
|
||
| // Read device ID and return to host. | ||
| penetrationtest_device_id_t uj_output; | ||
| TRY(sca_read_device_id(uj_output.device_id)); | ||
| RESP_OK(ujson_serialize_penetrationtest_device_id_t, uj, &uj_output); | ||
|
|
||
| return OK_STATUS(); | ||
| } | ||
|
|
||
| status_t handle_rom_fi(ujson_t *uj) { | ||
| rom_fi_subcommand_t cmd; | ||
| TRY(ujson_deserialize_rom_fi_subcommand_t(uj, &cmd)); | ||
| switch (cmd) { | ||
| case kRomFiSubcommandInit: | ||
| return handle_rom_fi_init(uj); | ||
| case kRomFiSubcommandRead: | ||
| return handle_rom_read(uj); | ||
| default: | ||
| LOG_ERROR("Unrecognized Rom FI subcommand: %d", cmd); | ||
| return INVALID_ARGUMENT(); | ||
| } | ||
| return OK_STATUS(); | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,39 @@ | ||
| // Copyright lowRISC contributors (OpenTitan project). | ||
| // Licensed under the Apache License, Version 2.0, see LICENSE for details. | ||
| // SPDX-License-Identifier: Apache-2.0 | ||
|
|
||
| #ifndef OPENTITAN_SW_DEVICE_TESTS_PENETRATIONTESTS_FIRMWARE_FI_ROM_FI_H_ | ||
| #define OPENTITAN_SW_DEVICE_TESTS_PENETRATIONTESTS_FIRMWARE_FI_ROM_FI_H_ | ||
|
|
||
| #include "sw/device/lib/base/status.h" | ||
| #include "sw/device/lib/ujson/ujson.h" | ||
|
|
||
| /** | ||
| * ROM read FI test. | ||
| * | ||
| * Read the ROM digest while injecting faults. | ||
| * | ||
| * @param uj An initialized uJSON context. | ||
| * @return OK or error. | ||
| */ | ||
| status_t handle_rom_fi_init(ujson_t *uj); | ||
|
|
||
| /** | ||
| * Initializes the trigger and configures the device for the Rom FI test. | ||
| * | ||
| * @param uj An initialized uJSON context. | ||
| * @return OK or error. | ||
| */ | ||
| status_t handle_rom_fi_init(ujson_t *uj); | ||
|
|
||
| /** | ||
| * Rom FI command handler. | ||
| * | ||
| * Command handler for the Rom FI command. | ||
| * | ||
| * @param uj An initialized uJSON context. | ||
| * @return OK or error. | ||
| */ | ||
| status_t handle_rom_fi(ujson_t *uj); | ||
|
|
||
| #endif // OPENTITAN_SW_DEVICE_TESTS_PENETRATIONTESTS_FIRMWARE_FI_ROM_FI_H_ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| // Copyright lowRISC contributors (OpenTitan project). | ||
| // Licensed under the Apache License, Version 2.0, see LICENSE for details. | ||
| // SPDX-License-Identifier: Apache-2.0 | ||
|
|
||
| #define UJSON_SERDE_IMPL 1 | ||
| #include "rom_fi_commands.h" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| // Copyright lowRISC contributors (OpenTitan project). | ||
| // Licensed under the Apache License, Version 2.0, see LICENSE for details. | ||
| // SPDX-License-Identifier: Apache-2.0 | ||
|
|
||
| #ifndef OPENTITAN_SW_DEVICE_TESTS_PENETRATIONTESTS_JSON_ROM_FI_COMMANDS_H_ | ||
| #define OPENTITAN_SW_DEVICE_TESTS_PENETRATIONTESTS_JSON_ROM_FI_COMMANDS_H_ | ||
| #include "sw/device/lib/ujson/ujson_derive.h" | ||
| #ifdef __cplusplus | ||
| extern "C" { | ||
| #endif | ||
|
|
||
| // clang-format off | ||
|
|
||
| #define ROMFI_SUBCOMMAND(_, value) \ | ||
| value(_, Init) \ | ||
| value(_, Read) | ||
| UJSON_SERDE_ENUM(RomFiSubcommand, rom_fi_subcommand_t, ROMFI_SUBCOMMAND); | ||
|
|
||
|
|
||
| #define ROMFI_DIGEST(field, string) \ | ||
| field(digest, uint32_t, 8) \ | ||
| field(alerts, uint32_t, 3) \ | ||
| field(err_status, uint32_t) | ||
| UJSON_SERDE_STRUCT(RomFiDigest, rom_fi_digest_t, ROMFI_DIGEST); | ||
|
|
||
| // clang-format on | ||
|
|
||
| #ifdef __cplusplus | ||
| } | ||
| #endif | ||
| #endif // OPENTITAN_SW_DEVICE_TESTS_PENETRATIONTESTS_JSON_ROM_FI_COMMANDS_H_ |