diff options
| author | Ji Luo <ji.luo@nxp.com> | 2019-07-17 12:21:09 +0800 |
|---|---|---|
| committer | Ji Luo <ji.luo@nxp.com> | 2019-07-17 12:21:09 +0800 |
| commit | d38685ac5f99ea62e3b9c291e0396fec6fb222e7 (patch) | |
| tree | e1f5eda56539a5c0e7bb9554737417f926f65b5e /lib | |
| parent | 827f6a10e4a1ca3dc4c3844cff3e97f5dcd35857 (diff) | |
MA-15151 Limit some hwcrypto commands within bootloader
It can be dangerous to export some hwcrypto commands to Linux,
add commands to limit some commands within bootloader.
Test: hwcrypto commands can't be used after locking boot state.
Change-Id: Ib0a96a87f661778c133178840d8dccf49f151c22
Signed-off-by: Ji Luo <ji.luo@nxp.com>
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/trusty/ql-tipc/hwcrypto.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/lib/trusty/ql-tipc/hwcrypto.c b/lib/trusty/ql-tipc/hwcrypto.c index 50532b005b..800b759c53 100644 --- a/lib/trusty/ql-tipc/hwcrypto.c +++ b/lib/trusty/ql-tipc/hwcrypto.c @@ -262,3 +262,8 @@ int hwcrypto_gen_bkek(uint32_t buf, uint32_t len) sizeof(req), NULL, 0, false); return rc; } + +int hwcrypto_lock_boot_state(void) +{ + return hwcrypto_do_tipc(HWCRYPTO_LOCK_BOOT_STATE, NULL, 0, NULL, 0, false); +} |