#pragma author WerWolv #pragma description ARM OPTEE Trusted Application #pragma endian little import type.magic; import type.size; import type.guid; import std.mem; import * from elf as ELF; enum shdr_img_type : u32 { SHDR_TA = 0, SHDR_BOOTSTRAP_TA = 1, SHDR_ENCRYPTED_TA = 2, SHDR_SUBKEY = 3 }; enum tee_algorithm : u32 { TEE_ALG_AES_ECB_NOPAD = 0x10000010, TEE_ALG_AES_CBC_NOPAD = 0x10000110, TEE_ALG_AES_CTR = 0x10000210, TEE_ALG_AES_CTS = 0x10000310, TEE_ALG_AES_XTS = 0x10000410, TEE_ALG_AES_CBC_MAC_NOPAD = 0x30000110, TEE_ALG_AES_CBC_MAC_PKCS5 = 0x30000510, TEE_ALG_AES_CMAC = 0x30000610, TEE_ALG_AES_CCM = 0x40000710, TEE_ALG_AES_GCM = 0x40000810, TEE_ALG_DES_ECB_NOPAD = 0x10000011, TEE_ALG_DES_CBC_NOPAD = 0x10000111, TEE_ALG_DES_CBC_MAC_NOPAD = 0x30000111, TEE_ALG_DES_CBC_MAC_PKCS5 = 0x30000511, TEE_ALG_DES3_ECB_NOPAD = 0x10000013, TEE_ALG_DES3_CBC_NOPAD = 0x10000113, TEE_ALG_DES3_CBC_MAC_NOPAD = 0x30000113, TEE_ALG_DES3_CBC_MAC_PKCS5 = 0x30000513, TEE_ALG_SM4_ECB_NOPAD = 0x10000014, TEE_ALG_SM4_CBC_NOPAD = 0x10000114, TEE_ALG_SM4_CTR = 0x10000214, TEE_ALG_RSASSA_PKCS1_V1_5_MD5 = 0x70001830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA1 = 0x70002830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA224 = 0x70003830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA256 = 0x70004830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA384 = 0x70005830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA512 = 0x70006830, TEE_ALG_RSASSA_PKCS1_V1_5_MD5SHA1 = 0x7000F830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA3_224 = 0x70008830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA3_256 = 0x70009830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA3_384 = 0x7000A830, TEE_ALG_RSASSA_PKCS1_V1_5_SHA3_512 = 0x7000B830, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA1 = 0x70212930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA224 = 0x70313930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA256 = 0x70414930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA384 = 0x70515930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA512 = 0x70616930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA3_224 = 0x70818930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA3_256 = 0x70919930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA3_384 = 0x70A1A930, TEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA3_512 = 0x70B1B930, TEE_ALG_RSAES_PKCS1_V1_5 = 0x60000130, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA1 = 0x60210230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA224 = 0x60310230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA256 = 0x60410230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA384 = 0x60510230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA512 = 0x60610230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA3_224 = 0x60810230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA3_256 = 0x60910230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA3_384 = 0x60A10230, TEE_ALG_RSAES_PKCS1_OAEP_MGF1_SHA3_512 = 0x60B10230, TEE_ALG_RSA_NOPAD = 0x60000030, TEE_ALG_DSA_SHA1 = 0x70002131, TEE_ALG_DSA_SHA224 = 0x70003131, TEE_ALG_DSA_SHA256 = 0x70004131, TEE_ALG_DSA_SHA3_224 = 0x70008131, TEE_ALG_DSA_SHA3_256 = 0x70009131, TEE_ALG_DSA_SHA3_384 = 0x7000A131, TEE_ALG_DSA_SHA3_512 = 0x7000B131, TEE_ALG_SM2_DSA_SM3 = 0x70006045, TEE_ALG_DH_DERIVE_SHARED_SECRET = 0x80000032, TEE_ALG_SM2_KEP = 0x60000045, TEE_ALG_MD5 = 0x50000001, TEE_ALG_SHA1 = 0x50000002, TEE_ALG_SHA224 = 0x50000003, TEE_ALG_SHA256 = 0x50000004, TEE_ALG_SHA384 = 0x50000005, TEE_ALG_SHA512 = 0x50000006, TEE_ALG_SHA3_224 = 0x50000008, TEE_ALG_SHA3_256 = 0x50000009, TEE_ALG_SHA3_384 = 0x5000000A, TEE_ALG_SHA3_512 = 0x5000000B, TEE_ALG_MD5SHA1 = 0x5000000F, TEE_ALG_HMAC_MD5 = 0x30000001, TEE_ALG_HMAC_SHA1 = 0x30000002, TEE_ALG_HMAC_SHA224 = 0x30000003, TEE_ALG_HMAC_SHA256 = 0x30000004, TEE_ALG_HMAC_SHA384 = 0x30000005, TEE_ALG_HMAC_SHA512 = 0x30000006, TEE_ALG_HMAC_SM3 = 0x30000007, TEE_ALG_HMAC_SHA3_224 = 0x30000008, TEE_ALG_HMAC_SHA3_256 = 0x30000009, TEE_ALG_HMAC_SHA3_384 = 0x3000000A, TEE_ALG_HMAC_SHA3_512 = 0x3000000B, /* * These are used in the OP-TEE ABI, due to an inconsistency in the v1.1 * specification the wrong values we assumed and now we're stuck with those. * * In GP Internal Core API v1.1 * "Table 6-12: Structure of Algorithm Identifier" * indicates ECDSA have the algorithm "0x41" and ECDH "0x42" * whereas * "Table 6-11: List of Algorithm Identifiers" defines * TEE_ALG_ECDSA_P192 as 0x70001042 * * We chose to define __OPTEE_TEE_ALG_ECDSA_P192 as 0x70001041 and so on * to conform to table 6-12. */ __OPTEE_ALG_ECDSA_P192 = 0x70001041, __OPTEE_ALG_ECDSA_P224 = 0x70002041, __OPTEE_ALG_ECDSA_P256 = 0x70003041, __OPTEE_ALG_ECDSA_P384 = 0x70004041, __OPTEE_ALG_ECDSA_P521 = 0x70005041, __OPTEE_ALG_ECDH_P192 = 0x80001042, __OPTEE_ALG_ECDH_P224 = 0x80002042, __OPTEE_ALG_ECDH_P256 = 0x80003042, __OPTEE_ALG_ECDH_P384 = 0x80004042, __OPTEE_ALG_ECDH_P521 = 0x80005042, /* TEE_ALG_ECDSA_P* and TEE_ALG_ECDH_P* are deprecated */ TEE_ALG_ECDSA_P192 = tee_algorithm::TEE_ALG_ECDSA_SHA1, TEE_ALG_ECDSA_P224 = tee_algorithm::TEE_ALG_ECDSA_SHA224, TEE_ALG_ECDSA_P256 = tee_algorithm::TEE_ALG_ECDSA_SHA256, TEE_ALG_ECDSA_P384 = tee_algorithm::TEE_ALG_ECDSA_SHA384, TEE_ALG_ECDSA_P521 = tee_algorithm::TEE_ALG_ECDSA_SHA512, TEE_ALG_ECDH_P192 = tee_algorithm::TEE_ALG_ECDH_DERIVE_SHARED_SECRET, TEE_ALG_ECDH_P224 = tee_algorithm::TEE_ALG_ECDH_DERIVE_SHARED_SECRET, TEE_ALG_ECDH_P256 = tee_algorithm::TEE_ALG_ECDH_DERIVE_SHARED_SECRET, TEE_ALG_ECDH_P384 = tee_algorithm::TEE_ALG_ECDH_DERIVE_SHARED_SECRET, TEE_ALG_ECDH_P521 = tee_algorithm::TEE_ALG_ECDH_DERIVE_SHARED_SECRET, TEE_ALG_ECDH_DERIVE_SHARED_SECRET = 0x80000042, TEE_ALG_ECDSA_SHA1 = 0x70001042, TEE_ALG_ECDSA_SHA224 = 0x70002042, TEE_ALG_ECDSA_SHA256 = 0x70003042, TEE_ALG_ECDSA_SHA384 = 0x70004042, TEE_ALG_ECDSA_SHA512 = 0x70005042, TEE_ALG_ECDSA_SHA3_224 = 0x70006042, TEE_ALG_ECDSA_SHA3_256 = 0x70007042, TEE_ALG_ECDSA_SHA3_384 = 0x70008042, TEE_ALG_ECDSA_SHA3_512 = 0x70009042, TEE_ALG_ED25519 = 0x70006043, TEE_ALG_ED448 = 0x70006044, TEE_ALG_SM2_PKE = 0x80000046, TEE_ALG_HKDF = 0x80000047, TEE_ALG_SM3 = 0x50000007, TEE_ALG_X25519 = 0x80000044, TEE_ALG_X448 = 0x80000045, TEE_ALG_SM4_ECB_PKCS5 = 0x10000015, TEE_ALG_SM4_CBC_PKCS5 = 0x10000115, TEE_ALG_ILLEGAL_VALUE = 0xEFFFFFFF, TEE_ALG_SHA3_224 = 0x50000008, TEE_ALG_SHA3_256 = 0x50000009, TEE_ALG_SHA3_384 = 0x5000000A, TEE_ALG_SHA3_512 = 0x5000000B, TEE_ALG_SHAKE128 = 0x50000101, TEE_ALG_SHAKE256 = 0x50000102 }; struct shdr { type::Magic<"HSTO"> magic; shdr_img_type img_type; type::Size img_size; tee_algorithm algo; type::Size hash_size; type::Size sig_size; std::mem::Bytes hash; std::mem::Bytes sig; }; struct shdr_bootstrap_ta { be type::GUID uuid; u32 ta_version; }; enum shdr_enc_key_type : u32 { SHDR_ENC_KEY_DEV_SPECIFIC = 0, SHDR_ENC_KEY_CLASS_WIDE = 1, }; struct shdr_encrypted_ta { tee_algorithm enc_algo; shdr_enc_key_type flags; type::Size iv_size; type::Size tag_size; std::mem::Bytes iv; std::mem::Bytes tag; }; struct OPTEE_TrustedApplication { shdr shdr; match (shdr.img_type) { (shdr_img_type::SHDR_BOOTSTRAP_TA): { shdr_bootstrap_ta bootstrap_ta_subheader; } (shdr_img_type::SHDR_ENCRYPTED_TA): { shdr_bootstrap_ta bootstrap_ta_subheader; shdr_encrypted_ta encrypted_ta_subheader; } } if (shdr.img_type == shdr_img_type::SHDR_ENCRYPTED_TA) { std::mem::Bytes encrypted_data; } else { ELF elf; } }; OPTEE_TrustedApplication trusted_application @ 0x00;