efuse.h 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387
  1. /*
  2. * SPDX-FileCopyrightText: 2023 Espressif Systems (Shanghai) CO LTD
  3. *
  4. * SPDX-License-Identifier: Apache-2.0
  5. */
  6. #ifndef _ROM_EFUSE_H_
  7. #define _ROM_EFUSE_H_
  8. #ifdef __cplusplus
  9. extern "C" {
  10. #endif
  11. #include <stdint.h>
  12. #include <stddef.h>
  13. #include <stdbool.h>
  14. /** \defgroup efuse_APIs efuse APIs
  15. * @brief ESP32 efuse read/write APIs
  16. * @attention
  17. *
  18. */
  19. /** @addtogroup efuse_APIs
  20. * @{
  21. */
  22. typedef enum {
  23. ETS_EFUSE_KEY_PURPOSE_USER = 0,
  24. ETS_EFUSE_KEY_PURPOSE_ECDSA_KEY = 1,
  25. ETS_EFUSE_KEY_PURPOSE_XTS_AES_256_KEY_1 = 2,
  26. ETS_EFUSE_KEY_PURPOSE_XTS_AES_256_KEY_2 = 3,
  27. ETS_EFUSE_KEY_PURPOSE_XTS_AES_128_KEY = 4,
  28. ETS_EFUSE_KEY_PURPOSE_HMAC_DOWN_ALL = 5,
  29. ETS_EFUSE_KEY_PURPOSE_HMAC_DOWN_JTAG = 6,
  30. ETS_EFUSE_KEY_PURPOSE_HMAC_DOWN_DIGITAL_SIGNATURE = 7,
  31. ETS_EFUSE_KEY_PURPOSE_HMAC_UP = 8,
  32. ETS_EFUSE_KEY_PURPOSE_SECURE_BOOT_DIGEST0 = 9,
  33. ETS_EFUSE_KEY_PURPOSE_SECURE_BOOT_DIGEST1 = 10,
  34. ETS_EFUSE_KEY_PURPOSE_SECURE_BOOT_DIGEST2 = 11,
  35. ETS_EFUSE_KEY_PURPOSE_KM_INIT_KEY = 12,
  36. ETS_EFUSE_KEY_PURPOSE_MAX,
  37. } ets_efuse_purpose_t;
  38. typedef enum {
  39. ETS_EFUSE_BLOCK0 = 0,
  40. ETS_EFUSE_MAC_SPI_SYS_0 = 1,
  41. ETS_EFUSE_BLOCK_SYS_PART1_DATA = 2,
  42. ETS_EFUSE_BLOCK_USR_DATA = 3,
  43. ETS_EFUSE_BLOCK_KEY0 = 4,
  44. ETS_EFUSE_BLOCK_KEY1 = 5,
  45. ETS_EFUSE_BLOCK_KEY2 = 6,
  46. ETS_EFUSE_BLOCK_KEY3 = 7,
  47. ETS_EFUSE_BLOCK_KEY4 = 8,
  48. ETS_EFUSE_BLOCK_KEY5 = 9,
  49. ETS_EFUSE_BLOCK_SYS_PART2_DATA = 10,
  50. ETS_EFUSE_BLOCK_MAX,
  51. } ets_efuse_block_t;
  52. /**
  53. * @brief set timing accroding the apb clock, so no read error or write error happens.
  54. *
  55. * @param clock: apb clock in HZ, only accept 5M(in FPGA), 10M(in FPGA), 20M, 40M, 80M.
  56. *
  57. * @return : 0 if success, others if clock not accepted
  58. */
  59. int ets_efuse_set_timing(uint32_t clock);
  60. /**
  61. * @brief Enable efuse subsystem. Called after reset. Doesn't need to be called again.
  62. */
  63. void ets_efuse_start(void);
  64. /**
  65. * @brief Efuse read operation: copies data from physical efuses to efuse read registers.
  66. *
  67. * @param null
  68. *
  69. * @return : 0 if success, others if apb clock is not accepted
  70. */
  71. int ets_efuse_read(void);
  72. /**
  73. * @brief Efuse write operation: Copies data from efuse write registers to efuse. Operates on a single block of efuses at a time.
  74. *
  75. * @note This function does not update read efuses, call ets_efuse_read() once all programming is complete.
  76. *
  77. * @return : 0 if success, others if apb clock is not accepted
  78. */
  79. int ets_efuse_program(ets_efuse_block_t block);
  80. /**
  81. * @brief Set all Efuse program registers to zero.
  82. *
  83. * Call this before writing new data to the program registers.
  84. */
  85. void ets_efuse_clear_program_registers(void);
  86. /**
  87. * @brief Program a block of key data to an efuse block
  88. *
  89. * @param key_block Block to read purpose for. Must be in range ETS_EFUSE_BLOCK_KEY0 to ETS_EFUSE_BLOCK_KEY6. Key block must be unused (@ref ets_efuse_key_block_unused).
  90. * @param purpose Purpose to set for this key. Purpose must be already unset.
  91. * @param data Pointer to data to write.
  92. * @param data_len Length of data to write.
  93. *
  94. * @note This function also calls ets_efuse_program() for the specified block, and for block 0 (setting the purpose)
  95. */
  96. int ets_efuse_write_key(ets_efuse_block_t key_block, ets_efuse_purpose_t purpose, const void *data, size_t data_len);
  97. /* @brief Return the address of a particular efuse block's first read register
  98. *
  99. * @param block Index of efuse block to look up
  100. *
  101. * @return 0 if block is invalid, otherwise a numeric read register address
  102. * of the first word in the block.
  103. */
  104. uint32_t ets_efuse_get_read_register_address(ets_efuse_block_t block);
  105. /**
  106. * @brief Return the current purpose set for an efuse key block
  107. *
  108. * @param key_block Block to read purpose for. Must be in range ETS_EFUSE_BLOCK_KEY0 to ETS_EFUSE_BLOCK_KEY6.
  109. */
  110. ets_efuse_purpose_t ets_efuse_get_key_purpose(ets_efuse_block_t key_block);
  111. /**
  112. * @brief Find a key block with the particular purpose set
  113. *
  114. * @param purpose Purpose to search for.
  115. * @param[out] key_block Pointer which will be set to the key block if found. Can be NULL, if only need to test the key block exists.
  116. * @return true if found, false if not found. If false, value at key_block pointer is unchanged.
  117. */
  118. bool ets_efuse_find_purpose(ets_efuse_purpose_t purpose, ets_efuse_block_t *key_block);
  119. /**
  120. * Return true if the key block is unused, false otherwise.
  121. *
  122. * An unused key block is all zero content, not read or write protected,
  123. * and has purpose 0 (ETS_EFUSE_KEY_PURPOSE_USER)
  124. *
  125. * @param key_block key block to check.
  126. *
  127. * @return true if key block is unused, false if key block or used
  128. * or the specified block index is not a key block.
  129. */
  130. bool ets_efuse_key_block_unused(ets_efuse_block_t key_block);
  131. /**
  132. * @brief Search for an unused key block and return the first one found.
  133. *
  134. * See @ref ets_efuse_key_block_unused for a description of an unused key block.
  135. *
  136. * @return First unused key block, or ETS_EFUSE_BLOCK_MAX if no unused key block is found.
  137. */
  138. ets_efuse_block_t ets_efuse_find_unused_key_block(void);
  139. /**
  140. * @brief Return the number of unused efuse key blocks (0-6)
  141. */
  142. unsigned ets_efuse_count_unused_key_blocks(void);
  143. /**
  144. * @brief Calculate Reed-Solomon Encoding values for a block of efuse data.
  145. *
  146. * @param data Pointer to data buffer (length 32 bytes)
  147. * @param rs_values Pointer to write encoded data to (length 12 bytes)
  148. */
  149. void ets_efuse_rs_calculate(const void *data, void *rs_values);
  150. /**
  151. * @brief Read spi flash pads configuration from Efuse
  152. *
  153. * @return
  154. * - 0 for default SPI pins.
  155. * - 1 for default HSPI pins.
  156. * - Other values define a custom pin configuration mask. Pins are encoded as per the EFUSE_SPICONFIG_RET_SPICLK,
  157. * EFUSE_SPICONFIG_RET_SPIQ, EFUSE_SPICONFIG_RET_SPID, EFUSE_SPICONFIG_RET_SPICS0, EFUSE_SPICONFIG_RET_SPIHD macros.
  158. * WP pin (for quad I/O modes) is not saved in efuse and not returned by this function.
  159. */
  160. uint32_t ets_efuse_get_spiconfig(void);
  161. /**
  162. * @brief Read spi flash wp pad from Efuse
  163. *
  164. * @return
  165. * - 0x3f for invalid.
  166. * - 0~46 is valid.
  167. */
  168. uint32_t ets_efuse_get_wp_pad(void);
  169. /**
  170. * @brief Read opi flash pads configuration from Efuse
  171. *
  172. * @return
  173. * - 0 for default SPI pins.
  174. * - Other values define a custom pin configuration mask. From the LSB, every 6 bits represent a GPIO number which stand for:
  175. * DQS, D4, D5, D6, D7 accordingly.
  176. */
  177. uint32_t ets_efuse_get_opiconfig(void);
  178. /**
  179. * @brief Read if download mode disabled from Efuse
  180. *
  181. * @return
  182. * - true for efuse disable download mode.
  183. * - false for efuse doesn't disable download mode.
  184. */
  185. bool ets_efuse_download_modes_disabled(void);
  186. /**
  187. * @brief Read if legacy spi flash boot mode disabled from Efuse
  188. *
  189. * @return
  190. * - true for efuse disable legacy spi flash boot mode.
  191. * - false for efuse doesn't disable legacy spi flash boot mode.
  192. */
  193. bool ets_efuse_legacy_spi_boot_mode_disabled(void);
  194. /**
  195. * @brief Read if uart print control value from Efuse
  196. *
  197. * @return
  198. * - 0 for uart force print.
  199. * - 1 for uart print when GPIO8 is low when digital reset.
  200. * 2 for uart print when GPIO8 is high when digital reset.
  201. * 3 for uart force slient
  202. */
  203. uint32_t ets_efuse_get_uart_print_control(void);
  204. /**
  205. * @brief Read if USB-Serial-JTAG print during rom boot is disabled from Efuse
  206. *
  207. * @return
  208. * - 1 for efuse disable USB-Serial-JTAG print during rom boot.
  209. * - 0 for efuse doesn't disable USB-Serial-JTAG print during rom boot.
  210. */
  211. uint32_t ets_efuse_usb_serial_jtag_print_is_disabled(void);
  212. /**
  213. * @brief Read if usb download mode disabled from Efuse
  214. *
  215. * (Also returns true if security download mode is enabled, as this mode
  216. * disables USB download.)
  217. *
  218. * @return
  219. * - true for efuse disable usb download mode.
  220. * - false for efuse doesn't disable usb download mode.
  221. */
  222. bool ets_efuse_usb_download_mode_disabled(void);
  223. /**
  224. * @brief Read if tiny basic mode disabled from Efuse
  225. *
  226. * @return
  227. * - true for efuse disable tiny basic mode.
  228. * - false for efuse doesn't disable tiny basic mode.
  229. */
  230. bool ets_efuse_tiny_basic_mode_disabled(void);
  231. /**
  232. * @brief Read if usb module disabled from Efuse
  233. *
  234. * @return
  235. * - true for efuse disable usb module.
  236. * - false for efuse doesn't disable usb module.
  237. */
  238. bool ets_efuse_usb_module_disabled(void);
  239. /**
  240. * @brief Read if security download modes enabled from Efuse
  241. *
  242. * @return
  243. * - true for efuse enable security download mode.
  244. * - false for efuse doesn't enable security download mode.
  245. */
  246. bool ets_efuse_security_download_modes_enabled(void);
  247. /**
  248. * @brief Return true if secure boot is enabled in EFuse
  249. */
  250. bool ets_efuse_secure_boot_enabled(void);
  251. /**
  252. * @brief Return true if secure boot aggressive revoke is enabled in EFuse
  253. */
  254. bool ets_efuse_secure_boot_aggressive_revoke_enabled(void);
  255. /**
  256. * @brief Return true if cache encryption (flash, etc) is enabled from boot via EFuse
  257. */
  258. bool ets_efuse_cache_encryption_enabled(void);
  259. /**
  260. * @brief Return true if EFuse indicates an external phy needs to be used for USB
  261. */
  262. bool ets_efuse_usb_use_ext_phy(void);
  263. /**
  264. * @brief Return true if EFuse indicates USB device persistence is disabled
  265. */
  266. bool ets_efuse_usb_force_nopersist(void);
  267. /**
  268. * @brief Return true if OPI pins GPIO33-37 are powered by VDDSPI, otherwise by VDD33CPU
  269. */
  270. bool ets_efuse_flash_opi_5pads_power_sel_vddspi(void);
  271. /**
  272. * @brief Return true if EFuse indicates an opi flash is attached.
  273. */
  274. bool ets_efuse_flash_opi_mode(void);
  275. /**
  276. * @brief Return true if EFuse indicates to send a flash resume command.
  277. */
  278. bool ets_efuse_force_send_resume(void);
  279. /**
  280. * @brief return the time in us ROM boot need wait flash to power on from Efuse
  281. *
  282. * @return
  283. * - uint32_t the time in us.
  284. */
  285. uint32_t ets_efuse_get_flash_delay_us(void);
  286. #define EFUSE_SPICONFIG_SPI_DEFAULTS 0
  287. #define EFUSE_SPICONFIG_HSPI_DEFAULTS 1
  288. #define EFUSE_SPICONFIG_RET_SPICLK_MASK 0x3f
  289. #define EFUSE_SPICONFIG_RET_SPICLK_SHIFT 0
  290. #define EFUSE_SPICONFIG_RET_SPICLK(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPICLK_SHIFT) & EFUSE_SPICONFIG_RET_SPICLK_MASK)
  291. #define EFUSE_SPICONFIG_RET_SPIQ_MASK 0x3f
  292. #define EFUSE_SPICONFIG_RET_SPIQ_SHIFT 6
  293. #define EFUSE_SPICONFIG_RET_SPIQ(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPIQ_SHIFT) & EFUSE_SPICONFIG_RET_SPIQ_MASK)
  294. #define EFUSE_SPICONFIG_RET_SPID_MASK 0x3f
  295. #define EFUSE_SPICONFIG_RET_SPID_SHIFT 12
  296. #define EFUSE_SPICONFIG_RET_SPID(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPID_SHIFT) & EFUSE_SPICONFIG_RET_SPID_MASK)
  297. #define EFUSE_SPICONFIG_RET_SPICS0_MASK 0x3f
  298. #define EFUSE_SPICONFIG_RET_SPICS0_SHIFT 18
  299. #define EFUSE_SPICONFIG_RET_SPICS0(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPICS0_SHIFT) & EFUSE_SPICONFIG_RET_SPICS0_MASK)
  300. #define EFUSE_SPICONFIG_RET_SPIHD_MASK 0x3f
  301. #define EFUSE_SPICONFIG_RET_SPIHD_SHIFT 24
  302. #define EFUSE_SPICONFIG_RET_SPIHD(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPIHD_SHIFT) & EFUSE_SPICONFIG_RET_SPIHD_MASK)
  303. /**
  304. * @brief Enable JTAG temporarily by writing a JTAG HMAC "key" into
  305. * the JTAG_CTRL registers.
  306. *
  307. * Works if JTAG has been "soft" disabled by burning the EFUSE_SOFT_DIS_JTAG efuse.
  308. *
  309. * Will enable the HMAC module to generate a "downstream" HMAC value from a key already saved in efuse, and then write the JTAG HMAC "key" which will enable JTAG if the two keys match.
  310. *
  311. * @param jtag_hmac_key Pointer to a 32 byte array containing a valid key. Supplied by user.
  312. * @param key_block Index of a key block containing the source for this key.
  313. *
  314. * @return ETS_FAILED if HMAC operation fails or invalid parameter, ETS_OK otherwise. ETS_OK doesn't necessarily mean that JTAG was enabled.
  315. */
  316. int ets_jtag_enable_temporarily(const uint8_t *jtag_hmac_key, ets_efuse_block_t key_block);
  317. /**
  318. * @brief A crc8 algorithm used for MAC addresses in efuse
  319. *
  320. * @param unsigned char const *p : Pointer to original data.
  321. *
  322. * @param unsigned int len : Data length in byte.
  323. *
  324. * @return unsigned char: Crc value.
  325. */
  326. unsigned char esp_crc8(unsigned char const *p, unsigned int len);
  327. /**
  328. * @}
  329. */
  330. #ifdef __cplusplus
  331. }
  332. #endif
  333. #endif /* _ROM_EFUSE_H_ */