platform: msm_shared: Add verified boot hash support
Compute the digest over all vbmeta's
present on device and provide the digest
to keymaster. This digest is provided as
part of the keymaster attestation certificate.
Change-Id: I183793a6aa229441ef2eeced42e455d2c7a6de69
diff --git a/include/km_main.h b/include/km_main.h
index 946683e..544dc55 100644
--- a/include/km_main.h
+++ b/include/km_main.h
@@ -71,10 +71,15 @@
KEYMASTER_WRITE_LK_DEVICE_STATE = (KEYMASTER_UTILS_CMD_ID + 3UL),
KEYMASTER_MILESTONE_CALL = (KEYMASTER_UTILS_CMD_ID + 4UL),
KEYMASTER_SECURE_WRITE_PROTECT = (KEYMASTER_UTILS_CMD_ID + 6UL),
+ KEYMASTER_SET_VBH = (KEYMASTER_UTILS_CMD_ID + 17UL),
KEYMASTER_LAST_CMD_ENTRY = (int)0xFFFFFFFFULL
} keymaster_cmd_t;
+typedef enum {
+ KM_ERROR_INVALID_TAG = -40,
+} keymaster_error_t;
+
/*
* Utils Api struct
@@ -263,4 +268,15 @@
int status;
}__attribute__((packed)) km_set_boot_state_rsp_t;
+typedef struct
+{
+ uint32_t cmd_id;
+ char vbh[32];
+} __attribute__ ((packed)) km_set_vbh_req_t;
+
+typedef struct
+{
+ int status;
+} __attribute__ ((packed)) km_set_vbh_rsp_t;
+
#endif /* KM_MAIN_H */