efuse.h 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383
  1. /*
  2. * SPDX-FileCopyrightText: 2015-2022 Espressif Systems (Shanghai) CO LTD
  3. *
  4. * SPDX-License-Identifier: Apache-2.0
  5. */
  6. #pragma once
  7. #ifdef __cplusplus
  8. extern "C" {
  9. #endif
  10. #include <stdint.h>
  11. #include <stddef.h>
  12. #include <stdbool.h>
  13. /** \defgroup efuse_APIs efuse APIs
  14. * @brief ESP32 efuse read/write APIs
  15. * @attention
  16. *
  17. */
  18. /** @addtogroup efuse_APIs
  19. * @{
  20. */
  21. typedef enum {
  22. ETS_EFUSE_KEY_PURPOSE_USER = 0,
  23. ETS_EFUSE_KEY_PURPOSE_RESERVED = 1,
  24. ETS_EFUSE_KEY_PURPOSE_XTS_AES_256_KEY_1 = 2,
  25. ETS_EFUSE_KEY_PURPOSE_XTS_AES_256_KEY_2 = 3,
  26. ETS_EFUSE_KEY_PURPOSE_XTS_AES_128_KEY = 4,
  27. ETS_EFUSE_KEY_PURPOSE_HMAC_DOWN_ALL = 5,
  28. ETS_EFUSE_KEY_PURPOSE_HMAC_DOWN_JTAG = 6,
  29. ETS_EFUSE_KEY_PURPOSE_HMAC_DOWN_DIGITAL_SIGNATURE = 7,
  30. ETS_EFUSE_KEY_PURPOSE_HMAC_UP = 8,
  31. ETS_EFUSE_KEY_PURPOSE_SECURE_BOOT_DIGEST0 = 9,
  32. ETS_EFUSE_KEY_PURPOSE_SECURE_BOOT_DIGEST1 = 10,
  33. ETS_EFUSE_KEY_PURPOSE_SECURE_BOOT_DIGEST2 = 11,
  34. ETS_EFUSE_KEY_PURPOSE_MAX,
  35. } ets_efuse_purpose_t;
  36. typedef enum {
  37. ETS_EFUSE_BLOCK0 = 0,
  38. ETS_EFUSE_MAC_SPI_SYS_0 = 1,
  39. ETS_EFUSE_BLOCK_SYS_DATA = 2,
  40. ETS_EFUSE_BLOCK_USR_DATA = 3,
  41. ETS_EFUSE_BLOCK_KEY0 = 4,
  42. ETS_EFUSE_BLOCK_KEY1 = 5,
  43. ETS_EFUSE_BLOCK_KEY2 = 6,
  44. ETS_EFUSE_BLOCK_KEY3 = 7,
  45. ETS_EFUSE_BLOCK_KEY4 = 8,
  46. ETS_EFUSE_BLOCK_KEY5 = 9,
  47. ETS_EFUSE_BLOCK_KEY6 = 10,
  48. ETS_EFUSE_BLOCK_MAX,
  49. } ets_efuse_block_t;
  50. /**
  51. * @brief set timing accroding the apb clock, so no read error or write error happens.
  52. *
  53. * @param clock: apb clock in HZ, only accept 5M(in FPGA), 10M(in FPGA), 20M, 40M, 80M.
  54. *
  55. * @return : 0 if success, others if clock not accepted
  56. */
  57. int ets_efuse_set_timing(uint32_t clock);
  58. /**
  59. * @brief Enable efuse subsystem. Called after reset. Doesn't need to be called again.
  60. */
  61. void ets_efuse_start(void);
  62. /**
  63. * @brief Efuse read operation: copies data from physical efuses to efuse read registers.
  64. *
  65. * @param null
  66. *
  67. * @return : 0 if success, others if apb clock is not accepted
  68. */
  69. int ets_efuse_read(void);
  70. /**
  71. * @brief Efuse write operation: Copies data from efuse write registers to efuse. Operates on a single block of efuses at a time.
  72. *
  73. * @note This function does not update read efuses, call ets_efuse_read() once all programming is complete.
  74. *
  75. * @return : 0 if success, others if apb clock is not accepted
  76. */
  77. int ets_efuse_program(ets_efuse_block_t block);
  78. /**
  79. * @brief Set all Efuse program registers to zero.
  80. *
  81. * Call this before writing new data to the program registers.
  82. */
  83. void ets_efuse_clear_program_registers(void);
  84. /**
  85. * @brief Program a block of key data to an efuse block
  86. *
  87. * @param key_block Block to read purpose for. Must be in range ETS_EFUSE_BLOCK_KEY0 to ETS_EFUSE_BLOCK_KEY6. Key block must be unused (@ref ets_efuse_key_block_unused).
  88. * @param purpose Purpose to set for this key. Purpose must be already unset.
  89. * @param data Pointer to data to write.
  90. * @param data_len Length of data to write.
  91. *
  92. * @note This function also calls ets_efuse_program() for the specified block, and for block 0 (setting the purpose)
  93. */
  94. int ets_efuse_write_key(ets_efuse_block_t key_block, ets_efuse_purpose_t purpose, const void *data, size_t data_len);
  95. /* @brief Return the address of a particular efuse block's first read register
  96. *
  97. * @param block Index of efuse block to look up
  98. *
  99. * @return 0 if block is invalid, otherwise a numeric read register address
  100. * of the first word in the block.
  101. */
  102. uint32_t ets_efuse_get_read_register_address(ets_efuse_block_t block);
  103. /**
  104. * @brief Return the current purpose set for an efuse key block
  105. *
  106. * @param key_block Block to read purpose for. Must be in range ETS_EFUSE_BLOCK_KEY0 to ETS_EFUSE_BLOCK_KEY6.
  107. */
  108. ets_efuse_purpose_t ets_efuse_get_key_purpose(ets_efuse_block_t key_block);
  109. /**
  110. * @brief Find a key block with the particular purpose set
  111. *
  112. * @param purpose Purpose to search for.
  113. * @param[out] key_block Pointer which will be set to the key block if found. Can be NULL, if only need to test the key block exists.
  114. * @return true if found, false if not found. If false, value at key_block pointer is unchanged.
  115. */
  116. bool ets_efuse_find_purpose(ets_efuse_purpose_t purpose, ets_efuse_block_t *key_block);
  117. /**
  118. * Return true if the key block is unused, false otherwise.
  119. *
  120. * An unused key block is all zero content, not read or write protected,
  121. * and has purpose 0 (ETS_EFUSE_KEY_PURPOSE_USER)
  122. *
  123. * @param key_block key block to check.
  124. *
  125. * @return true if key block is unused, false if key block or used
  126. * or the specified block index is not a key block.
  127. */
  128. bool ets_efuse_key_block_unused(ets_efuse_block_t key_block);
  129. /**
  130. * @brief Search for an unused key block and return the first one found.
  131. *
  132. * See @ref ets_efuse_key_block_unused for a description of an unused key block.
  133. *
  134. * @return First unused key block, or ETS_EFUSE_BLOCK_MAX if no unused key block is found.
  135. */
  136. ets_efuse_block_t ets_efuse_find_unused_key_block(void);
  137. /**
  138. * @brief Return the number of unused efuse key blocks (0-6)
  139. */
  140. unsigned ets_efuse_count_unused_key_blocks(void);
  141. /**
  142. * @brief Calculate Reed-Solomon Encoding values for a block of efuse data.
  143. *
  144. * @param data Pointer to data buffer (length 32 bytes)
  145. * @param rs_values Pointer to write encoded data to (length 12 bytes)
  146. */
  147. void ets_efuse_rs_calculate(const void *data, void *rs_values);
  148. /**
  149. * @brief Read spi flash pads configuration from Efuse
  150. *
  151. * @return
  152. * - 0 for default SPI pins.
  153. * - 1 for default HSPI pins.
  154. * - Other values define a custom pin configuration mask. Pins are encoded as per the EFUSE_SPICONFIG_RET_SPICLK,
  155. * EFUSE_SPICONFIG_RET_SPIQ, EFUSE_SPICONFIG_RET_SPID, EFUSE_SPICONFIG_RET_SPICS0, EFUSE_SPICONFIG_RET_SPIHD macros.
  156. * WP pin (for quad I/O modes) is not saved in efuse and not returned by this function.
  157. */
  158. uint32_t ets_efuse_get_spiconfig(void);
  159. /**
  160. * @brief Read spi flash wp pad from Efuse
  161. *
  162. * @return
  163. * - 0x3f for invalid.
  164. * - 0~46 is valid.
  165. */
  166. uint32_t ets_efuse_get_wp_pad(void);
  167. /**
  168. * @brief Read opi flash pads configuration from Efuse
  169. *
  170. * @return
  171. * - 0 for default SPI pins.
  172. * - Other values define a custom pin configuration mask. From the LSB, every 6 bits represent a GPIO number which stand for:
  173. * DQS, D4, D5, D6, D7 accordingly.
  174. */
  175. uint32_t ets_efuse_get_opiconfig(void);
  176. /**
  177. * @brief Read if download mode disabled from Efuse
  178. *
  179. * @return
  180. * - true for efuse disable download mode.
  181. * - false for efuse doesn't disable download mode.
  182. */
  183. bool ets_efuse_download_modes_disabled(void);
  184. /**
  185. * @brief Read if legacy spi flash boot mode disabled from Efuse
  186. *
  187. * @return
  188. * - true for efuse disable legacy spi flash boot mode.
  189. * - false for efuse doesn't disable legacy spi flash boot mode.
  190. */
  191. bool ets_efuse_legacy_spi_boot_mode_disabled(void);
  192. /**
  193. * @brief Read if uart print control value from Efuse
  194. *
  195. * @return
  196. * - 0 for uart force print.
  197. * - 1 for uart print when GPIO46 is low when digital reset.
  198. * 2 for uart print when GPIO46 is high when digital reset.
  199. * 3 for uart force slient
  200. */
  201. uint32_t ets_efuse_get_uart_print_control(void);
  202. /**
  203. * @brief Read if USB-Serial-JTAG print during rom boot is disabled from Efuse
  204. *
  205. * @return
  206. * - 1 for efuse disable USB-Serial-JTAG print during rom boot.
  207. * - 0 for efuse doesn't disable USB-Serial-JTAG print during rom boot.
  208. */
  209. uint32_t ets_efuse_usb_serial_jtag_print_is_disabled(void);
  210. /**
  211. * @brief Read if usb download mode disabled from Efuse
  212. *
  213. * (Also returns true if security download mode is enabled, as this mode
  214. * disables USB download.)
  215. *
  216. * @return
  217. * - true for efuse disable usb download mode.
  218. * - false for efuse doesn't disable usb download mode.
  219. */
  220. bool ets_efuse_usb_download_mode_disabled(void);
  221. /**
  222. * @brief Read if tiny basic mode disabled from Efuse
  223. *
  224. * @return
  225. * - true for efuse disable tiny basic mode.
  226. * - false for efuse doesn't disable tiny basic mode.
  227. */
  228. bool ets_efuse_tiny_basic_mode_disabled(void);
  229. /**
  230. * @brief Read if usb module disabled from Efuse
  231. *
  232. * @return
  233. * - true for efuse disable usb module.
  234. * - false for efuse doesn't disable usb module.
  235. */
  236. bool ets_efuse_usb_module_disabled(void);
  237. /**
  238. * @brief Read if security download modes enabled from Efuse
  239. *
  240. * @return
  241. * - true for efuse enable security download mode.
  242. * - false for efuse doesn't enable security download mode.
  243. */
  244. bool ets_efuse_security_download_modes_enabled(void);
  245. /**
  246. * @brief Return true if secure boot is enabled in EFuse
  247. */
  248. bool ets_efuse_secure_boot_enabled(void);
  249. /**
  250. * @brief Return true if secure boot aggressive revoke is enabled in EFuse
  251. */
  252. bool ets_efuse_secure_boot_aggressive_revoke_enabled(void);
  253. /**
  254. * @brief Return true if cache encryption (flash, PSRAM, etc) is enabled from boot via EFuse
  255. */
  256. bool ets_efuse_cache_encryption_enabled(void);
  257. /**
  258. * @brief Return true if EFuse indicates an external phy needs to be used for USB
  259. */
  260. bool ets_efuse_usb_use_ext_phy(void);
  261. /**
  262. * @brief Return true if EFuse indicates USB device persistence is disabled
  263. */
  264. bool ets_efuse_usb_force_nopersist(void);
  265. /**
  266. * @brief Return true if OPI pins GPIO33-37 are powered by VDDSPI, otherwise by VDD33CPU
  267. */
  268. bool ets_efuse_flash_opi_5pads_power_sel_vddspi(void);
  269. /**
  270. * @brief Return true if EFuse indicates an opi flash is attached.
  271. */
  272. bool ets_efuse_flash_opi_mode(void);
  273. /**
  274. * @brief Return true if EFuse indicates to send a flash resume command.
  275. */
  276. bool ets_efuse_force_send_resume(void);
  277. /**
  278. * @brief return the time in us ROM boot need wait flash to power on from Efuse
  279. *
  280. * @return
  281. * - uint32_t the time in us.
  282. */
  283. uint32_t ets_efuse_get_flash_delay_us(void);
  284. #define EFUSE_SPICONFIG_SPI_DEFAULTS 0
  285. #define EFUSE_SPICONFIG_HSPI_DEFAULTS 1
  286. #define EFUSE_SPICONFIG_RET_SPICLK_MASK 0x3f
  287. #define EFUSE_SPICONFIG_RET_SPICLK_SHIFT 0
  288. #define EFUSE_SPICONFIG_RET_SPICLK(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPICLK_SHIFT) & EFUSE_SPICONFIG_RET_SPICLK_MASK)
  289. #define EFUSE_SPICONFIG_RET_SPIQ_MASK 0x3f
  290. #define EFUSE_SPICONFIG_RET_SPIQ_SHIFT 6
  291. #define EFUSE_SPICONFIG_RET_SPIQ(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPIQ_SHIFT) & EFUSE_SPICONFIG_RET_SPIQ_MASK)
  292. #define EFUSE_SPICONFIG_RET_SPID_MASK 0x3f
  293. #define EFUSE_SPICONFIG_RET_SPID_SHIFT 12
  294. #define EFUSE_SPICONFIG_RET_SPID(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPID_SHIFT) & EFUSE_SPICONFIG_RET_SPID_MASK)
  295. #define EFUSE_SPICONFIG_RET_SPICS0_MASK 0x3f
  296. #define EFUSE_SPICONFIG_RET_SPICS0_SHIFT 18
  297. #define EFUSE_SPICONFIG_RET_SPICS0(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPICS0_SHIFT) & EFUSE_SPICONFIG_RET_SPICS0_MASK)
  298. #define EFUSE_SPICONFIG_RET_SPIHD_MASK 0x3f
  299. #define EFUSE_SPICONFIG_RET_SPIHD_SHIFT 24
  300. #define EFUSE_SPICONFIG_RET_SPIHD(ret) (((ret) >> EFUSE_SPICONFIG_RET_SPIHD_SHIFT) & EFUSE_SPICONFIG_RET_SPIHD_MASK)
  301. /**
  302. * @brief Enable JTAG temporarily by writing a JTAG HMAC "key" into
  303. * the JTAG_CTRL registers.
  304. *
  305. * Works if JTAG has been "soft" disabled by burning the EFUSE_SOFT_DIS_JTAG efuse.
  306. *
  307. * Will enable the HMAC module to generate a "downstream" HMAC value from a key already saved in efuse, and then write the JTAG HMAC "key" which will enable JTAG if the two keys match.
  308. *
  309. * @param jtag_hmac_key Pointer to a 32 byte array containing a valid key. Supplied by user.
  310. * @param key_block Index of a key block containing the source for this key.
  311. *
  312. * @return ETS_FAILED if HMAC operation fails or invalid parameter, ETS_OK otherwise. ETS_OK doesn't necessarily mean that JTAG was enabled.
  313. */
  314. int ets_jtag_enable_temporarily(const uint8_t *jtag_hmac_key, ets_efuse_block_t key_block);
  315. /**
  316. * @brief A crc8 algorithm used for MAC addresses in efuse
  317. *
  318. * @param unsigned char const *p : Pointer to original data.
  319. *
  320. * @param unsigned int len : Data length in byte.
  321. *
  322. * @return unsigned char: Crc value.
  323. */
  324. unsigned char esp_crc8(unsigned char const *p, unsigned int len);
  325. /**
  326. * @}
  327. */
  328. #ifdef __cplusplus
  329. }
  330. #endif