mirror of
https://github.com/trezor/trezor-firmware.git
synced 2024-12-29 01:28:10 +00:00
35d40cc164
Previously we checked whether the current vendor header and the new vendor header are the same by comparing the embedded keyset. What originally looked like a good idea is not that good, because this disallows us from ever changing the vendor header signing keys without causing erasure of the storage during the version update. This commit fixes that by changing the logic to comparing just the vendor string. Change of function names is purely cosmetic: * vendor_keys_hash -> vendor_header_hash * check_vendor_keys_lock -> check_vendor_header_lock
124 lines
4.0 KiB
C
124 lines
4.0 KiB
C
/*
|
|
* This file is part of the Trezor project, https://trezor.io/
|
|
*
|
|
* Copyright (c) SatoshiLabs
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef TREZORHAL_FLASH_H
|
|
#define TREZORHAL_FLASH_H
|
|
|
|
#include <stdint.h>
|
|
#include <stdlib.h>
|
|
#include "secbool.h"
|
|
|
|
// see docs/memory.md for more information
|
|
|
|
#if TREZOR_MODEL == T
|
|
#define FLASH_SECTOR_COUNT 24
|
|
#elif TREZOR_MODEL == 1
|
|
#define FLASH_SECTOR_COUNT 12
|
|
#else
|
|
#error Unknown Trezor model
|
|
#endif
|
|
|
|
#define FLASH_SECTOR_BOARDLOADER_START 0
|
|
// 1
|
|
#define FLASH_SECTOR_BOARDLOADER_END 2
|
|
|
|
// 3
|
|
|
|
#if TREZOR_MODEL == T
|
|
#define FLASH_SECTOR_STORAGE_1 4
|
|
#define FLASH_SECTOR_STORAGE_2 16
|
|
#elif TREZOR_MODEL == 1
|
|
#define FLASH_SECTOR_STORAGE_1 2
|
|
#define FLASH_SECTOR_STORAGE_2 3
|
|
#else
|
|
#error Unknown Trezor model
|
|
#endif
|
|
|
|
#define FLASH_SECTOR_BOOTLOADER 5
|
|
|
|
#define FLASH_SECTOR_FIRMWARE_START 6
|
|
// 7
|
|
// 8
|
|
// 9
|
|
// 10
|
|
#define FLASH_SECTOR_FIRMWARE_END 11
|
|
|
|
#define FLASH_SECTOR_UNUSED_START 12
|
|
// 13
|
|
// 14
|
|
#define FLASH_SECTOR_UNUSED_END 15
|
|
|
|
#define FLASH_SECTOR_FIRMWARE_EXTRA_START 17
|
|
// 18
|
|
// 19
|
|
// 20
|
|
// 21
|
|
// 22
|
|
#define FLASH_SECTOR_FIRMWARE_EXTRA_END 23
|
|
|
|
#define BOOTLOADER_SECTORS_COUNT (1)
|
|
#define STORAGE_SECTORS_COUNT (2)
|
|
#define FIRMWARE_SECTORS_COUNT (6 + 7)
|
|
|
|
extern const uint8_t STORAGE_SECTORS[STORAGE_SECTORS_COUNT];
|
|
extern const uint8_t FIRMWARE_SECTORS[FIRMWARE_SECTORS_COUNT];
|
|
|
|
// note: FLASH_SR_RDERR is STM32F42xxx and STM32F43xxx specific (STM32F427)
|
|
// (reference RM0090 section 3.7.5)
|
|
#ifndef STM32F427xx
|
|
#define FLASH_SR_RDERR 0
|
|
#endif
|
|
|
|
#define FLASH_STATUS_ALL_FLAGS \
|
|
(FLASH_SR_RDERR | FLASH_SR_PGSERR | FLASH_SR_PGPERR | FLASH_SR_PGAERR | \
|
|
FLASH_SR_WRPERR | FLASH_SR_SOP | FLASH_SR_EOP)
|
|
|
|
void flash_init(void);
|
|
|
|
secbool __wur flash_unlock_write(void);
|
|
secbool __wur flash_lock_write(void);
|
|
|
|
const void *flash_get_address(uint8_t sector, uint32_t offset, uint32_t size);
|
|
|
|
secbool __wur flash_erase_sectors(const uint8_t *sectors, int len,
|
|
void (*progress)(int pos, int len));
|
|
static inline secbool flash_erase(uint8_t sector) {
|
|
return flash_erase_sectors(§or, 1, NULL);
|
|
}
|
|
secbool __wur flash_write_byte(uint8_t sector, uint32_t offset, uint8_t data);
|
|
secbool __wur flash_write_word(uint8_t sector, uint32_t offset, uint32_t data);
|
|
|
|
#define FLASH_OTP_NUM_BLOCKS 16
|
|
#define FLASH_OTP_BLOCK_SIZE 32
|
|
|
|
// OTP blocks allocation
|
|
#define FLASH_OTP_BLOCK_BATCH 0
|
|
#define FLASH_OTP_BLOCK_BOOTLOADER_VERSION 1
|
|
#define FLASH_OTP_BLOCK_VENDOR_HEADER_LOCK 2
|
|
#define FLASH_OTP_BLOCK_RANDOMNESS 3
|
|
|
|
secbool __wur flash_otp_read(uint8_t block, uint8_t offset, uint8_t *data,
|
|
uint8_t datalen);
|
|
secbool __wur flash_otp_write(uint8_t block, uint8_t offset,
|
|
const uint8_t *data, uint8_t datalen);
|
|
secbool __wur flash_otp_lock(uint8_t block);
|
|
secbool __wur flash_otp_is_locked(uint8_t block);
|
|
|
|
#endif // TREZORHAL_FLASH_H
|