mirror of
https://github.com/Atmosphere-NX/Atmosphere
synced 2024-09-20 07:08:59 +00:00
275 lines
12 KiB
C++
275 lines
12 KiB
C++
|
/*
|
||
|
|
* Copyright (c) 2018-2020 Atmosphère-NX
|
||
|
|
*
|
||
|
|
* This program is free software; you can redistribute it and/or modify it
|
||
|
|
* under the terms and conditions of the GNU General Public License,
|
||
|
|
* version 2, as published by the Free Software Foundation.
|
||
|
|
*
|
||
|
|
* This program is distributed in the hope it will be useful, but WITHOUT
|
||
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
||
|
|
* more details.
|
||
|
|
*
|
||
|
|
* You should have received a copy of the GNU General Public License
|
||
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||
|
|
*/
|
||
|
|
#include <exosphere.hpp>
|
||
|
|
|
||
|
|
namespace ams::pmc {
|
||
|
|
|
||
|
|
namespace {
|
||
|
|
|
||
|
|
constinit uintptr_t g_register_address = secmon::MemoryRegionPhysicalDevicePmc.GetAddress();
|
||
|
|
|
||
|
|
constexpr inline u32 WriteMask = 0x1;
|
||
|
|
constexpr inline u32 ReadMask = 0x2;
|
||
|
|
|
||
|
|
enum class LockMode {
|
||
|
|
Read,
|
||
|
|
Write,
|
||
|
|
ReadWrite,
|
||
|
|
};
|
||
|
|
|
||
|
|
template<LockMode Mode>
|
||
|
|
constexpr inline u32 LockMask = [] {
|
||
|
|
switch (Mode) {
|
||
|
|
case LockMode::Read: return ReadMask;
|
||
|
|
case LockMode::Write: return WriteMask;
|
||
|
|
case LockMode::ReadWrite: return ReadMask | WriteMask;
|
||
|
|
default: __builtin_unreachable();
|
||
|
|
}
|
||
|
|
}();
|
||
|
|
|
||
|
|
constexpr inline size_t NumSecureScratchRegisters = 120;
|
||
|
|
constexpr inline size_t NumSecureDisableRegisters = 8;
|
||
|
|
|
||
|
|
template<size_t SecureScratch> requires (SecureScratch < NumSecureScratchRegisters)
|
||
|
|
constexpr inline std::pair<size_t, size_t> DisableRegisterIndex = [] {
|
||
|
|
if constexpr (SecureScratch < 8) {
|
||
|
|
return std::pair<size_t, size_t>{0, 4 + 2 * SecureScratch};
|
||
|
|
} else {
|
||
|
|
constexpr size_t Relative = SecureScratch - 8;
|
||
|
|
return std::pair<size_t, size_t>{1 + (Relative / 16), 2 * (Relative % 16)};
|
||
|
|
}
|
||
|
|
}();
|
||
|
|
|
||
|
|
struct LockInfo {
|
||
|
|
size_t scratch;
|
||
|
|
LockMode mode;
|
||
|
|
};
|
||
|
|
|
||
|
|
template<LockInfo Info>
|
||
|
|
constexpr ALWAYS_INLINE void SetSecureScratchMask(std::array<u32, NumSecureDisableRegisters> &disables) {
|
||
|
|
constexpr std::pair<size_t, size_t> Location = DisableRegisterIndex<Info.scratch>;
|
||
|
|
disables[Location.first] |= LockMask<Info.mode> << Location.second;
|
||
|
|
}
|
||
|
|
|
||
|
|
template<LockInfo... Info>
|
||
|
|
constexpr ALWAYS_INLINE void SetSecureScratchMasks(std::array<u32, NumSecureDisableRegisters> &disables) {
|
||
|
|
(SetSecureScratchMask<Info>(disables), ...);
|
||
|
|
}
|
||
|
|
|
||
|
|
template<size_t... Ix>
|
||
|
|
constexpr ALWAYS_INLINE void SetSecureScratchReadWriteMasks(std::array<u32, NumSecureDisableRegisters> &disables) {
|
||
|
|
(SetSecureScratchMask<LockInfo{Ix, LockMode::ReadWrite}>(disables), ...);
|
||
|
|
}
|
||
|
|
|
||
|
|
template<size_t... Ix>
|
||
|
|
constexpr ALWAYS_INLINE void SetSecureScratchReadMasks(std::array<u32, NumSecureDisableRegisters> &disables) {
|
||
|
|
(SetSecureScratchMask<LockInfo{Ix, LockMode::Read}>(disables), ...);
|
||
|
|
}
|
||
|
|
|
||
|
|
template<size_t... Ix>
|
||
|
|
constexpr ALWAYS_INLINE void SetSecureScratchWriteMasks(std::array<u32, NumSecureDisableRegisters> &disables) {
|
||
|
|
(SetSecureScratchMask<LockInfo{Ix, LockMode::Write}>(disables), ...);
|
||
|
|
}
|
||
|
|
|
||
|
|
template<SecureRegister Register>
|
||
|
|
constexpr ALWAYS_INLINE std::array<u32, NumSecureDisableRegisters> GetSecureScratchMasks() {
|
||
|
|
std::array<u32, NumSecureDisableRegisters> disables = {};
|
||
|
|
|
||
|
|
if constexpr ((Register & SecureRegister_Other) != 0) {
|
||
|
|
constexpr std::array<u32, NumSecureDisableRegisters> NonOtherDisables = GetSecureScratchMasks<static_cast<SecureRegister>(~SecureRegister_Other)>();
|
||
|
|
for (size_t i = 0; i < NumSecureDisableRegisters; i++) {
|
||
|
|
disables[i] |= ~NonOtherDisables[i];
|
||
|
|
}
|
||
|
|
disables[0] &= 0x007FFFF0;
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_DramParameters) != 0) {
|
||
|
|
SetSecureScratchReadWriteMasks< 8, 9, 10, 11, 12, 13, 14, 15,
|
||
|
|
17, 18, 19, 20,
|
||
|
|
40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50,
|
||
|
|
52, 53, 54,
|
||
|
|
56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73,
|
||
|
|
79, 80, 81, 82, 83, 84,
|
||
|
|
86, 87, 88, 89, 90, 91, 92, 93, 94, 95, 96, 97, 98,
|
||
|
|
104, 105, 106, 107
|
||
|
|
>(disables);
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_ResetVector) != 0) {
|
||
|
|
SetSecureScratchReadWriteMasks<34, 35>(disables);
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_Carveout) != 0) {
|
||
|
|
SetSecureScratchReadWriteMasks<16, 39, 51, 55, 74, 75, 76, 77, 78, 99, 100, 101, 102, 103>(disables);
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_CmacWrite) != 0) {
|
||
|
|
SetSecureScratchWriteMasks<112, 113, 114, 115>(disables);
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_CmacRead) != 0) {
|
||
|
|
SetSecureScratchReadMasks<112, 113, 114, 115>(disables);
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_KeySourceWrite) != 0) {
|
||
|
|
SetSecureScratchWriteMasks<24, 25, 26, 27>(disables);
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_KeySourceRead) != 0) {
|
||
|
|
SetSecureScratchReadMasks<24, 25, 26, 27>(disables);
|
||
|
|
}
|
||
|
|
if constexpr ((Register & SecureRegister_Srk) != 0) {
|
||
|
|
SetSecureScratchReadWriteMasks<4, 5, 6, 7>(disables);
|
||
|
|
}
|
||
|
|
|
||
|
|
return disables;
|
||
|
|
}
|
||
|
|
|
||
|
|
/* Validate that the secure scratch masks produced are correct. */
|
||
|
|
#include "pmc_secure_scratch_test.inc"
|
||
|
|
|
||
|
|
ALWAYS_INLINE void LockBits(uintptr_t address, u32 mask) {
|
||
|
|
reg::Write(address, reg::Read(address) | mask);
|
||
|
|
}
|
||
|
|
|
||
|
|
template<SecureRegister Register>
|
||
|
|
ALWAYS_INLINE void SetSecureScratchMasks(uintptr_t address) {
|
||
|
|
constexpr auto Masks = GetSecureScratchMasks<Register>();
|
||
|
|
|
||
|
|
if constexpr (Masks[0] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE , Masks[0]); }
|
||
|
|
if constexpr (Masks[1] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE2, Masks[1]); }
|
||
|
|
if constexpr (Masks[2] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE3, Masks[2]); }
|
||
|
|
if constexpr (Masks[3] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE4, Masks[3]); }
|
||
|
|
if constexpr (Masks[4] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE5, Masks[4]); }
|
||
|
|
if constexpr (Masks[5] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE6, Masks[5]); }
|
||
|
|
if constexpr (Masks[6] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE7, Masks[6]); }
|
||
|
|
if constexpr (Masks[7] != 0) { LockBits(address + APBDEV_PMC_SEC_DISABLE8, Masks[7]); }
|
||
|
|
|
||
|
|
static_assert(Masks.size() == 8);
|
||
|
|
}
|
||
|
|
|
||
|
|
template<SecureRegister Register>
|
||
|
|
ALWAYS_INLINE bool TestSecureScratchMasks(uintptr_t address) {
|
||
|
|
constexpr auto Masks = GetSecureScratchMasks<Register>();
|
||
|
|
|
||
|
|
if constexpr (Masks[0] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE ) & Masks[0]) != Masks[0]) { return false; } }
|
||
|
|
if constexpr (Masks[1] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE2) & Masks[1]) != Masks[1]) { return false; } }
|
||
|
|
if constexpr (Masks[2] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE3) & Masks[2]) != Masks[2]) { return false; } }
|
||
|
|
if constexpr (Masks[3] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE4) & Masks[3]) != Masks[3]) { return false; } }
|
||
|
|
if constexpr (Masks[4] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE5) & Masks[4]) != Masks[4]) { return false; } }
|
||
|
|
if constexpr (Masks[5] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE6) & Masks[5]) != Masks[5]) { return false; } }
|
||
|
|
if constexpr (Masks[6] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE7) & Masks[6]) != Masks[6]) { return false; } }
|
||
|
|
if constexpr (Masks[7] != 0) { if ((reg::Read(address + APBDEV_PMC_SEC_DISABLE8) & Masks[7]) != Masks[7]) { return false; } }
|
||
|
|
static_assert(Masks.size() == 8);
|
||
|
|
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
NOINLINE void WriteRandomValueToRegister(uintptr_t offset) {
|
||
|
|
/* Create an aligned buffer. */
|
||
|
|
util::AlignedBuffer<hw::DataCacheLineSize, sizeof(u32)> buf;
|
||
|
|
|
||
|
|
/* Generate random bytes into it. */
|
||
|
|
se::GenerateRandomBytes(buf, sizeof(u32));
|
||
|
|
|
||
|
|
/* Read the random value. */
|
||
|
|
const u32 random = *reinterpret_cast<const u32 *>(static_cast<u8 *>(buf));
|
||
|
|
|
||
|
|
/* Get the address. */
|
||
|
|
const uintptr_t address = g_register_address + offset;
|
||
|
|
|
||
|
|
/* Write the value. */
|
||
|
|
reg::Write(address, random);
|
||
|
|
|
||
|
|
/* Verify it was written. */
|
||
|
|
AMS_ABORT_UNLESS(reg::Read(address) == random);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
void SetRegisterAddress(uintptr_t address) {
|
||
|
|
g_register_address = address;
|
||
|
|
}
|
||
|
|
|
||
|
|
void InitializeRandomScratch() {
|
||
|
|
/* Write random data to the scratch that contains the SRK. */
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH4);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH5);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH6);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH7);
|
||
|
|
|
||
|
|
/* Lock the SRK scratch. */
|
||
|
|
LockSecureRegister(SecureRegister_Srk);
|
||
|
|
|
||
|
|
/* Write random data to the scratch used for tzram cmac. */
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH112);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH113);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH114);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH115);
|
||
|
|
|
||
|
|
/* Write random data to the scratch used for tzram key source. */
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH24);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH25);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH26);
|
||
|
|
WriteRandomValueToRegister(APBDEV_PMC_SECURE_SCRATCH27);
|
||
|
|
|
||
|
|
/* Here, Nintendo locks the SRK scratch a second time. */
|
||
|
|
/* This may just be "to be sure". */
|
||
|
|
LockSecureRegister(SecureRegister_Srk);
|
||
|
|
}
|
||
|
|
|
||
|
|
void LockSecureRegister(SecureRegister reg) {
|
||
|
|
/* Get the address. */
|
||
|
|
const uintptr_t address = g_register_address;
|
||
|
|
|
||
|
|
/* Apply each mask. */
|
||
|
|
#define PMC_PROCESS_REG(REG) do { if ((reg & SecureRegister_##REG) != 0) { SetSecureScratchMasks<SecureRegister_##REG>(address); } } while (0)
|
||
|
|
PMC_PROCESS_REG(Other);
|
||
|
|
PMC_PROCESS_REG(DramParameters);
|
||
|
|
PMC_PROCESS_REG(ResetVector);
|
||
|
|
PMC_PROCESS_REG(Carveout);
|
||
|
|
PMC_PROCESS_REG(CmacWrite);
|
||
|
|
PMC_PROCESS_REG(CmacRead);
|
||
|
|
PMC_PROCESS_REG(KeySourceWrite);
|
||
|
|
PMC_PROCESS_REG(KeySourceRead);
|
||
|
|
PMC_PROCESS_REG(Srk);
|
||
|
|
#undef PMC_PROCESS_REG
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
LockState GetSecureRegisterLockState(SecureRegister reg) {
|
||
|
|
bool all_valid = true;
|
||
|
|
bool any_valid = false;
|
||
|
|
|
||
|
|
/* Get the address. */
|
||
|
|
const uintptr_t address = g_register_address;
|
||
|
|
|
||
|
|
/* Test each mask. */
|
||
|
|
#define PMC_PROCESS_REG(REG) do { if ((reg & SecureRegister_##REG) != 0) { const bool test = TestSecureScratchMasks<SecureRegister_##REG>(address); all_valid &= test; any_valid |= test; } } while (0)
|
||
|
|
PMC_PROCESS_REG(Other);
|
||
|
|
PMC_PROCESS_REG(DramParameters);
|
||
|
|
PMC_PROCESS_REG(ResetVector);
|
||
|
|
PMC_PROCESS_REG(Carveout);
|
||
|
|
PMC_PROCESS_REG(CmacWrite);
|
||
|
|
PMC_PROCESS_REG(CmacRead);
|
||
|
|
PMC_PROCESS_REG(KeySourceWrite);
|
||
|
|
PMC_PROCESS_REG(KeySourceRead);
|
||
|
|
PMC_PROCESS_REG(Srk);
|
||
|
|
#undef PMC_PROCESS_REG
|
||
|
|
|
||
|
|
if (all_valid) {
|
||
|
|
return LockState::Locked;
|
||
|
|
} else if (any_valid) {
|
||
|
|
return LockState::PartiallyLocked;
|
||
|
|
} else {
|
||
|
|
return LockState::NotLocked;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|