mirror of https://github.com/acidanthera/audk.git
238 lines
6.4 KiB
C
238 lines
6.4 KiB
C
/** @file
|
|
Ihis library is BaseCrypto router. It will redirect hash request to each individual
|
|
hash handler registerd, such as SHA1, SHA256.
|
|
Platform can use PcdTpm2HashMask to mask some hash engines.
|
|
|
|
Copyright (c) 2013 - 2015, Intel Corporation. All rights reserved. <BR>
|
|
This program and the accompanying materials
|
|
are licensed and made available under the terms and conditions of the BSD License
|
|
which accompanies this distribution. The full text of the license may be found at
|
|
http://opensource.org/licenses/bsd-license.php
|
|
|
|
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
|
|
**/
|
|
|
|
#include <PiPei.h>
|
|
#include <Library/BaseLib.h>
|
|
#include <Library/BaseMemoryLib.h>
|
|
#include <Library/Tpm2CommandLib.h>
|
|
#include <Library/DebugLib.h>
|
|
#include <Library/MemoryAllocationLib.h>
|
|
#include <Library/PcdLib.h>
|
|
#include <Library/HashLib.h>
|
|
|
|
#include "HashLibBaseCryptoRouterCommon.h"
|
|
|
|
HASH_INTERFACE mHashInterface[HASH_COUNT] = {{{0}, NULL, NULL, NULL}};
|
|
UINTN mHashInterfaceCount = 0;
|
|
|
|
/**
|
|
Start hash sequence.
|
|
|
|
@param HashHandle Hash handle.
|
|
|
|
@retval EFI_SUCCESS Hash sequence start and HandleHandle returned.
|
|
@retval EFI_OUT_OF_RESOURCES No enough resource to start hash.
|
|
**/
|
|
EFI_STATUS
|
|
EFIAPI
|
|
HashStart (
|
|
OUT HASH_HANDLE *HashHandle
|
|
)
|
|
{
|
|
HASH_HANDLE *HashCtx;
|
|
UINTN Index;
|
|
UINT32 HashMask;
|
|
|
|
if (mHashInterfaceCount == 0) {
|
|
return EFI_UNSUPPORTED;
|
|
}
|
|
|
|
HashCtx = AllocatePool (sizeof(*HashCtx) * mHashInterfaceCount);
|
|
ASSERT (HashCtx != NULL);
|
|
|
|
for (Index = 0; Index < mHashInterfaceCount; Index++) {
|
|
HashMask = Tpm2GetHashMaskFromAlgo (&mHashInterface[Index].HashGuid);
|
|
if ((HashMask & PcdGet32 (PcdTpm2HashMask)) != 0) {
|
|
mHashInterface[Index].HashInit (&HashCtx[Index]);
|
|
}
|
|
}
|
|
|
|
*HashHandle = (HASH_HANDLE)HashCtx;
|
|
|
|
return EFI_SUCCESS;
|
|
}
|
|
|
|
/**
|
|
Update hash sequence data.
|
|
|
|
@param HashHandle Hash handle.
|
|
@param DataToHash Data to be hashed.
|
|
@param DataToHashLen Data size.
|
|
|
|
@retval EFI_SUCCESS Hash sequence updated.
|
|
**/
|
|
EFI_STATUS
|
|
EFIAPI
|
|
HashUpdate (
|
|
IN HASH_HANDLE HashHandle,
|
|
IN VOID *DataToHash,
|
|
IN UINTN DataToHashLen
|
|
)
|
|
{
|
|
HASH_HANDLE *HashCtx;
|
|
UINTN Index;
|
|
UINT32 HashMask;
|
|
|
|
if (mHashInterfaceCount == 0) {
|
|
return EFI_UNSUPPORTED;
|
|
}
|
|
|
|
HashCtx = (HASH_HANDLE *)HashHandle;
|
|
|
|
for (Index = 0; Index < mHashInterfaceCount; Index++) {
|
|
HashMask = Tpm2GetHashMaskFromAlgo (&mHashInterface[Index].HashGuid);
|
|
if ((HashMask & PcdGet32 (PcdTpm2HashMask)) != 0) {
|
|
mHashInterface[Index].HashUpdate (HashCtx[Index], DataToHash, DataToHashLen);
|
|
}
|
|
}
|
|
|
|
return EFI_SUCCESS;
|
|
}
|
|
|
|
/**
|
|
Hash sequence complete and extend to PCR.
|
|
|
|
@param HashHandle Hash handle.
|
|
@param PcrIndex PCR to be extended.
|
|
@param DataToHash Data to be hashed.
|
|
@param DataToHashLen Data size.
|
|
@param DigestList Digest list.
|
|
|
|
@retval EFI_SUCCESS Hash sequence complete and DigestList is returned.
|
|
**/
|
|
EFI_STATUS
|
|
EFIAPI
|
|
HashCompleteAndExtend (
|
|
IN HASH_HANDLE HashHandle,
|
|
IN TPMI_DH_PCR PcrIndex,
|
|
IN VOID *DataToHash,
|
|
IN UINTN DataToHashLen,
|
|
OUT TPML_DIGEST_VALUES *DigestList
|
|
)
|
|
{
|
|
TPML_DIGEST_VALUES Digest;
|
|
HASH_HANDLE *HashCtx;
|
|
UINTN Index;
|
|
EFI_STATUS Status;
|
|
UINT32 HashMask;
|
|
|
|
if (mHashInterfaceCount == 0) {
|
|
return EFI_UNSUPPORTED;
|
|
}
|
|
|
|
HashCtx = (HASH_HANDLE *)HashHandle;
|
|
ZeroMem (DigestList, sizeof(*DigestList));
|
|
|
|
for (Index = 0; Index < mHashInterfaceCount; Index++) {
|
|
HashMask = Tpm2GetHashMaskFromAlgo (&mHashInterface[Index].HashGuid);
|
|
if ((HashMask & PcdGet32 (PcdTpm2HashMask)) != 0) {
|
|
mHashInterface[Index].HashUpdate (HashCtx[Index], DataToHash, DataToHashLen);
|
|
mHashInterface[Index].HashFinal (HashCtx[Index], &Digest);
|
|
Tpm2SetHashToDigestList (DigestList, &Digest);
|
|
}
|
|
}
|
|
|
|
FreePool (HashCtx);
|
|
|
|
Status = Tpm2PcrExtend (
|
|
PcrIndex,
|
|
DigestList
|
|
);
|
|
return Status;
|
|
}
|
|
|
|
/**
|
|
Hash data and extend to PCR.
|
|
|
|
@param PcrIndex PCR to be extended.
|
|
@param DataToHash Data to be hashed.
|
|
@param DataToHashLen Data size.
|
|
@param DigestList Digest list.
|
|
|
|
@retval EFI_SUCCESS Hash data and DigestList is returned.
|
|
**/
|
|
EFI_STATUS
|
|
EFIAPI
|
|
HashAndExtend (
|
|
IN TPMI_DH_PCR PcrIndex,
|
|
IN VOID *DataToHash,
|
|
IN UINTN DataToHashLen,
|
|
OUT TPML_DIGEST_VALUES *DigestList
|
|
)
|
|
{
|
|
HASH_HANDLE HashHandle;
|
|
EFI_STATUS Status;
|
|
|
|
if (mHashInterfaceCount == 0) {
|
|
return EFI_UNSUPPORTED;
|
|
}
|
|
|
|
HashStart (&HashHandle);
|
|
HashUpdate (HashHandle, DataToHash, DataToHashLen);
|
|
Status = HashCompleteAndExtend (HashHandle, PcrIndex, NULL, 0, DigestList);
|
|
|
|
return Status;
|
|
}
|
|
|
|
/**
|
|
This service register Hash.
|
|
|
|
@param HashInterface Hash interface
|
|
|
|
@retval EFI_SUCCESS This hash interface is registered successfully.
|
|
@retval EFI_UNSUPPORTED System does not support register this interface.
|
|
@retval EFI_ALREADY_STARTED System already register this interface.
|
|
**/
|
|
EFI_STATUS
|
|
EFIAPI
|
|
RegisterHashInterfaceLib (
|
|
IN HASH_INTERFACE *HashInterface
|
|
)
|
|
{
|
|
UINTN Index;
|
|
UINT32 HashMask;
|
|
UINT32 BiosSupportedHashMask;
|
|
EFI_STATUS Status;
|
|
|
|
//
|
|
// Check allow
|
|
//
|
|
HashMask = Tpm2GetHashMaskFromAlgo (&HashInterface->HashGuid);
|
|
if ((HashMask & PcdGet32 (PcdTpm2HashMask)) == 0) {
|
|
return EFI_UNSUPPORTED;
|
|
}
|
|
|
|
if (mHashInterfaceCount >= sizeof(mHashInterface)/sizeof(mHashInterface[0])) {
|
|
return EFI_OUT_OF_RESOURCES;
|
|
}
|
|
BiosSupportedHashMask = PcdGet32 (PcdTcg2HashAlgorithmBitmap);
|
|
Status = PcdSet32S (PcdTcg2HashAlgorithmBitmap, BiosSupportedHashMask | HashMask);
|
|
ASSERT_EFI_ERROR (Status);
|
|
|
|
//
|
|
// Check duplication
|
|
//
|
|
for (Index = 0; Index < mHashInterfaceCount; Index++) {
|
|
if (CompareGuid (&mHashInterface[Index].HashGuid, &HashInterface->HashGuid)) {
|
|
return EFI_ALREADY_STARTED;
|
|
}
|
|
}
|
|
|
|
CopyMem (&mHashInterface[mHashInterfaceCount], HashInterface, sizeof(*HashInterface));
|
|
mHashInterfaceCount ++;
|
|
|
|
return EFI_SUCCESS;
|
|
} |