blob: 435b8a444b273b430cd4e9697ac721bc76dde9c1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
|
/* Copyright 2019 The Chromium OS Authors. All rights reserved.
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*/
/*
* STM32H743 MCU configuration
*/
#ifndef __BOARD_H
#define __BOARD_H
#undef CONFIG_SYSTEM_UNLOCKED
/*
* Flash layout:
*
* +++++++++++++
* | RO | Bank 1
* | |
* | |
* | ......... |
* | Rollback | (last two sectors)
* +-----------+
* | RW | Bank 2
* | |
* | |
* | |
* | |
* +++++++++++++
*
* We adjust the following macros to accommodate a rollback region
* and RO/RW regions of different sizes.
*/
#undef _IMAGE_SIZE
#undef CONFIG_ROLLBACK_OFF
#undef CONFIG_ROLLBACK_SIZE
#undef CONFIG_FLASH_PSTATE
#undef CONFIG_FW_PSTATE_SIZE
#undef CONFIG_FW_PSTATE_OFF
#undef CONFIG_RO_MEM_OFF
#undef CONFIG_RO_STORAGE_OFF
#undef CONFIG_RO_SIZE
#undef CONFIG_RW_MEM_OFF
#undef CONFIG_RW_STORAGE_OFF
#undef CONFIG_RW_SIZE
#undef CONFIG_EC_PROTECTED_STORAGE_OFF
#undef CONFIG_EC_PROTECTED_STORAGE_SIZE
#undef CONFIG_EC_WRITABLE_STORAGE_OFF
#undef CONFIG_EC_WRITABLE_STORAGE_SIZE
#undef CONFIG_WP_STORAGE_OFF
#undef CONFIG_WP_STORAGE_SIZE
/*
* EC rollback protection block
*
* We need 2 independently erasable blocks, at a minimum.
*/
#define CONFIG_ROLLBACK_SIZE (2 * CONFIG_FLASH_BANK_SIZE)
#define CONFIG_ROLLBACK_OFF ((CONFIG_FLASH_SIZE / 2) - CONFIG_ROLLBACK_SIZE)
#define CONFIG_RO_MEM_OFF 0
#define CONFIG_RO_SIZE CONFIG_ROLLBACK_OFF
#define CONFIG_RW_MEM_OFF (CONFIG_FLASH_SIZE / 2)
#define CONFIG_RW_SIZE (CONFIG_FLASH_SIZE / 2)
#define CONFIG_RO_STORAGE_OFF 0
#define CONFIG_RW_STORAGE_OFF 0
#define CONFIG_EC_PROTECTED_STORAGE_OFF CONFIG_RO_MEM_OFF
#define CONFIG_EC_PROTECTED_STORAGE_SIZE CONFIG_RO_SIZE
#define CONFIG_EC_WRITABLE_STORAGE_OFF CONFIG_RW_MEM_OFF
#define CONFIG_EC_WRITABLE_STORAGE_SIZE CONFIG_RW_SIZE
#define CONFIG_WP_STORAGE_OFF CONFIG_EC_PROTECTED_STORAGE_OFF
#define CONFIG_WP_STORAGE_SIZE CONFIG_EC_PROTECTED_STORAGE_SIZE
/* Disabled features */
#undef CONFIG_ADC
#undef CONFIG_HIBERNATE
#undef CONFIG_I2C
#undef CONFIG_LID_SWITCH
#undef CONFIG_TASK_PROFILING
/* Enabled features */
#define CONFIG_AES
#define CONFIG_AES_GCM
#define CONFIG_DMA
#define CONFIG_FORCE_CONSOLE_RESUME
#define CONFIG_FPU
#define CONFIG_HOST_COMMAND_STATUS
#define CONFIG_LOW_POWER_IDLE
#define CONFIG_MKBP_EVENT
#define CONFIG_MKBP_USE_GPIO
#define CONFIG_PRINTF_LEGACY_LI_FORMAT
#define CONFIG_RNG
#define CONFIG_RWSIG_TYPE_RWSIG
#define CONFIG_SHA256
#define CONFIG_SHA256_UNROLLED
#undef CONFIG_SHAREDLIB_SIZE
#define CONFIG_SHAREDLIB_SIZE 0
#define CONFIG_STM_HWTIMER32
#define CONFIG_SUPPRESSED_HOST_COMMANDS \
EC_CMD_CONSOLE_SNAPSHOT, EC_CMD_CONSOLE_READ, EC_CMD_PD_GET_LOG_ENTRY
#define CONFIG_WATCHDOG_HELP
#define CONFIG_WP_ACTIVE_HIGH
#ifndef TEST_BUILD
/* TODO(hesling): Fix the illogical dependency between spi.c
* and host_command.c
*
* Currently, the chip/stm32/spi.c depends on functions defined in
* common/host_command.c. When unit test builds use their own tasklist
* without the HOSTCMD task, host_command.c is excluded from the build,
* but chip/stm32/spi.c remains (because of CONFIG_SPI).
* This triggers an undefined reference linker error.
* The reproduce case:
* - Allow CONFIG_SPI in TEST_BUILDs
* - make BOARD=nucleo-h743zi tests
*/
# define CONFIG_SPI
#endif
/*
* We want to prevent flash readout, and use it as indicator of protection
* status.
*/
#define CONFIG_FLASH_READOUT_PROTECTION_AS_PSTATE
/*
* RW does slow compute, RO does slow flash erase.
*/
#undef CONFIG_WATCHDOG_PERIOD_MS
#define CONFIG_WATCHDOG_PERIOD_MS 10000
/*
* These allow console commands to be flagged as restricted.
* Restricted commands will only be permitted to run when
* console_is_restricted() returns false.
* See console_is_restricted's definition in board.c.
*/
#define CONFIG_CONSOLE_COMMAND_FLAGS
#define CONFIG_RESTRICTED_CONSOLE_COMMANDS
/* Setup UART console */
#undef CONFIG_UART_CONSOLE
#define CONFIG_UART_CONSOLE 3 /* The UART console is on USART3 */
#define CONFIG_UART_TX_DMA
#define CONFIG_UART_TX_DMA_PH DMAMUX1_REQ_USART3_TX
#undef CONFIG_UART_TX_BUF_SIZE
#define CONFIG_UART_TX_BUF_SIZE 2048
/* Console commands */
#define CONFIG_CMD_FLASH
#define CONFIG_CMD_IDLE_STATS
#ifdef SECTION_IS_RW
/*
* Use the malloc code only in the RW section (for the private library),
* we cannot enable it in RO since it is not compatible with the
* RW verification (shared_mem_init done too late).
*/
# define CONFIG_MALLOC
#else /* !SECTION_IS_RW */
/* RO verifies the RW partition signature */
# define CONFIG_RSA
# define CONFIG_RSA_KEY_SIZE 3072
# define CONFIG_RSA_EXPONENT_3
# define CONFIG_RWSIG
#endif /* SECTION_IS_RW */
/*
* We do not use any "locally" generated entropy: this is normally used
* to add local entropy when the main source of entropy is remote.
*/
#undef CONFIG_ROLLBACK_SECRET_LOCAL_ENTROPY_SIZE
#ifdef SECTION_IS_RW
# undef CONFIG_ROLLBACK_UPDATE
#endif
/*
* Add rollback protection
*/
#define CONFIG_ROLLBACK
#define CONFIG_ROLLBACK_MPU_PROTECT
#ifndef __ASSEMBLER__
/* Timer selection */
# define TIM_CLOCK32 2
# define TIM_WATCHDOG 16
# include "gpio_signal.h"
#endif /* !__ASSEMBLER__ */
#endif /* __BOARD_H */
|