bl_sec.c 34 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799
  1. /*
  2. * Copyright (c) 2016-2022 Bouffalolab.
  3. *
  4. * This file is part of
  5. * *** Bouffalolab Software Dev Kit ***
  6. * (see www.bouffalolab.com).
  7. *
  8. * Redistribution and use in source and binary forms, with or without modification,
  9. * are permitted provided that the following conditions are met:
  10. * 1. Redistributions of source code must retain the above copyright notice,
  11. * this list of conditions and the following disclaimer.
  12. * 2. Redistributions in binary form must reproduce the above copyright notice,
  13. * this list of conditions and the following disclaimer in the documentation
  14. * and/or other materials provided with the distribution.
  15. * 3. Neither the name of Bouffalo Lab nor the names of its contributors
  16. * may be used to endorse or promote products derived from this software
  17. * without specific prior written permission.
  18. *
  19. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  20. * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  21. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  22. * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
  23. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  24. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
  25. * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
  26. * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
  27. * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  28. * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  29. */
  30. #include <stdio.h>
  31. #include <sec_eng_reg.h>
  32. //FIXME no BL808/BL606p header file including is Allowed here
  33. #ifdef BL808
  34. #include <bl808_sec_eng.h>
  35. #elif defined(BL606P)
  36. #include <bl606p_sec_eng.h>
  37. #else
  38. #error "Use CHIP BL808/BL606P for this module"
  39. #endif
  40. #include <aos/kernel.h>
  41. #include "bl_sec.h"
  42. // #include "bl_irq.h"
  43. #include <blog.h>
  44. #define xstr(a) str_macro(a)
  45. #define str_macro(a) #a
  46. #define TRNG_LOOP_COUNTER (17)
  47. #define TRNG_SIZE_IN_WORD (8)
  48. #define TRNG_SIZE_IN_BYTES (32)
  49. static uint32_t trng_buffer[TRNG_SIZE_IN_WORD];
  50. static unsigned int trng_idx = 0;
  51. // BL_Sem_t g_bl_sec_sha_mutex = NULL;
  52. #if 0
  53. static inline void _trng_trigger()
  54. {
  55. uint32_t TRNGx = SEC_ENG_BASE;
  56. uint32_t val;
  57. val = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_0);
  58. if (BL_IS_REG_BIT_SET(val, SEC_ENG_SE_TRNG_0_BUSY)) {
  59. return;
  60. }
  61. BL_WR_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_1, trng_buffer[0]);
  62. BL_WR_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_2, trng_buffer[1]);
  63. val = BL_SET_REG_BIT(val, SEC_ENG_SE_TRNG_0_INT_SET_1T);
  64. val = BL_SET_REG_BIT(val, SEC_ENG_SE_TRNG_0_INT_CLR_1T);
  65. val = BL_SET_REG_BIT(val, SEC_ENG_SE_TRNG_0_EN);
  66. val = BL_SET_REG_BIT(val, SEC_ENG_SE_TRNG_0_TRIG_1T);
  67. BL_WR_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_0, val);
  68. }
  69. static inline void wait_trng4feed()
  70. {
  71. uint32_t TRNGx = SEC_ENG_BASE;
  72. uint32_t val;
  73. val = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_0);
  74. while (BL_IS_REG_BIT_SET(val, SEC_ENG_SE_TRNG_0_BUSY)) {
  75. /*wait until trng is NOT busy*/
  76. val = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_0);
  77. }
  78. val = BL_SET_REG_BIT(val, SEC_ENG_SE_TRNG_0_INT_CLR_1T);
  79. val = BL_CLR_REG_BIT(val, SEC_ENG_SE_TRNG_0_TRIG_1T);
  80. BL_WR_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_0, val);
  81. blog_debug("Feed random number is %08lx\r\n", trng_buffer[0]);
  82. trng_buffer[0] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_0);
  83. trng_buffer[1] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_1);
  84. trng_buffer[2] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_2);
  85. trng_buffer[3] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_3);
  86. trng_buffer[4] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_4);
  87. trng_buffer[5] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_5);
  88. trng_buffer[6] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_6);
  89. trng_buffer[7] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_7);
  90. }
  91. uint32_t bl_sec_get_random_word(void)
  92. {
  93. trng_idx = (trng_idx & 0x7);
  94. if (0 == trng_idx) {
  95. _trng_trigger();
  96. }
  97. return trng_buffer[trng_idx++];
  98. }
  99. #endif
  100. void bl_rand_stream(uint8_t *buf, int len)
  101. {
  102. // int pos, copysize;
  103. // pos = 0;
  104. // if (trng_idx) {
  105. // /*reset trng_buffer*/
  106. // _trng_trigger();
  107. // wait_trng4feed();
  108. // trng_idx = 0;
  109. // }
  110. // while (len > 0) {
  111. // if (trng_idx) {
  112. // /*reset trng_buffer*/
  113. // _trng_trigger();
  114. // wait_trng4feed();
  115. // trng_idx = 0;
  116. // }
  117. // copysize = len > TRNG_SIZE_IN_BYTES ? TRNG_SIZE_IN_BYTES : len;
  118. // memcpy(buf + pos, trng_buffer, copysize);
  119. // pos += copysize;
  120. // len -= copysize;
  121. // trng_idx = TRNG_SIZE_IN_BYTES - 1;
  122. // }
  123. // _trng_trigger();
  124. // wait_trng4feed();
  125. // trng_idx = 0;
  126. int i;
  127. for (i = 0; i < len; i++) {
  128. buf[i] = (uint8_t)bl_rand();
  129. }
  130. }
  131. int bl_rand()
  132. {
  133. // unsigned int val;
  134. // int counter = 0;
  135. // do {
  136. // val = bl_sec_get_random_word();
  137. // if ((counter++) > TRNG_LOOP_COUNTER) {
  138. // puts("[BL] [SEC] Failed after loop " xstr(TRNG_LOOP_COUNTER) "\r\n");
  139. // break;
  140. // }
  141. // } while (0 == val);
  142. // val >>= 1;//leave signe bit alone
  143. return rand();
  144. }
  145. #if 0
  146. void sec_trng_IRQHandler(void)
  147. {
  148. uint32_t TRNGx = SEC_ENG_BASE;
  149. uint32_t val;
  150. if (aos_now_ms() < 1000 * 2) {
  151. /*debug when boot*/
  152. puts("[BL] [SEC] TRNG Handler\r\n");
  153. }
  154. val = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_0);
  155. val = BL_SET_REG_BIT(val, SEC_ENG_SE_TRNG_0_INT_CLR_1T);
  156. val = BL_CLR_REG_BIT(val, SEC_ENG_SE_TRNG_0_TRIG_1T);
  157. BL_WR_REG(TRNGx, SEC_ENG_SE_TRNG_0_CTRL_0, val);
  158. blog_debug("random number is %08lx\r\n", trng_buffer[0]);
  159. trng_buffer[0] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_0);
  160. trng_buffer[1] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_1);
  161. trng_buffer[2] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_2);
  162. trng_buffer[3] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_3);
  163. trng_buffer[4] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_4);
  164. trng_buffer[5] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_5);
  165. trng_buffer[6] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_6);
  166. trng_buffer[7] = BL_RD_REG(TRNGx, SEC_ENG_SE_TRNG_0_DOUT_7);
  167. }
  168. #endif
  169. int bl_sec_init(void)
  170. {
  171. #if 0
  172. if (g_bl_sec_sha_mutex) {
  173. return 0;
  174. }
  175. g_bl_sec_sha_mutex = bl_os_mutex_create();
  176. _trng_trigger();
  177. wait_trng4feed();
  178. /*Trigger again*/
  179. _trng_trigger();
  180. wait_trng4feed();
  181. bl_irq_register(SEC_TRNG_IRQn, sec_trng_IRQHandler);
  182. bl_irq_enable(SEC_TRNG_IRQn);
  183. #endif
  184. return 0;
  185. }
  186. int bl_exp_mod(uint32_t *src, uint32_t *result, int len, uint32_t *exp, int exp_len, uint32_t *mod, int mod_len)
  187. {
  188. return 0;
  189. }
  190. int bl_sec_test(void)
  191. {
  192. blog_print("------------------TRNG TEST---------------------------------\r\n");
  193. blog_print("**********TRNG TEST rand[%08x]**************\r\n", bl_rand());
  194. blog_print("**********TRNG TEST rand[%08x]**************\r\n", bl_rand());
  195. blog_print("------------------------------------------------------------\r\n");
  196. return 0;
  197. }
  198. void _dump_rsa_data(const uint8_t *data, int size)
  199. {
  200. int i;
  201. for (i = 0; i < size; i++) {
  202. switch (i & 0xF) {
  203. case 0x0:
  204. {
  205. blog_print("[%04X]:", i);
  206. blog_print(" %02X", data[i]);
  207. }
  208. break;
  209. case 0xF:
  210. {
  211. blog_print(" %02X", data[i]);
  212. puts("\r\n");
  213. }
  214. break;
  215. default:
  216. {
  217. blog_print(" %02X", data[i]);
  218. }
  219. }
  220. }
  221. }
  222. static void RSA_Compare_Data(const uint8_t *expected, const uint8_t *input, uint32_t len)
  223. {
  224. int i = 0, is_failed = 0;
  225. for (i = 0; i < len; i++) {
  226. if (input[i] != expected[i]) {
  227. is_failed = 1;
  228. blog_info("%s[%02d], %02x %02x\r\n",
  229. input[i] ==expected[i] ? "S" : "F",
  230. i,
  231. input[i],
  232. expected[i]
  233. );
  234. }
  235. }
  236. if (is_failed) {
  237. blog_error("====== Failed %lu Bytes======\r\n", len);
  238. } else {
  239. blog_info("====== Success %lu Bytes=====\r\n", len);
  240. }
  241. }
  242. static void _pka_test_case2(void)
  243. {
  244. static const uint8_t n[256] = {
  245. 0xd8, 0xa6, 0x4f, 0xea, 0x28, 0xf9, 0xdf, 0x07, 0x04, 0x55, 0xfa, 0xfb, 0x50, 0x5d, 0xbe, 0xb6,
  246. 0x9f, 0x7b, 0x53, 0x96, 0xef, 0x05, 0x5e, 0x0a, 0xf5, 0x2d, 0xe3, 0x67, 0x78, 0x07, 0x6b, 0xf6,
  247. 0xb2, 0x17, 0xac, 0x2e, 0x51, 0x42, 0x84, 0xbb, 0xfe, 0x3e, 0x5f, 0x0c, 0x85, 0xc4, 0x9d, 0xd4,
  248. 0x8b, 0xd5, 0xfa, 0x17, 0x2d, 0xb1, 0x26, 0x81, 0xe7, 0x79, 0x07, 0x45, 0x82, 0x42, 0x22, 0x3d,
  249. 0x0d, 0x97, 0xcf, 0xde, 0xea, 0xb8, 0xba, 0x16, 0x05, 0x8a, 0x5b, 0x0f, 0xec, 0x07, 0x30, 0xa4,
  250. 0xc6, 0xbf, 0xff, 0x20, 0x52, 0x1b, 0x94, 0xad, 0xfa, 0xb7, 0x6e, 0x83, 0x14, 0x48, 0x58, 0x14,
  251. 0x99, 0xe7, 0xa3, 0x9e, 0xc1, 0x08, 0xbd, 0xfe, 0x20, 0x11, 0x56, 0xdb, 0x96, 0x0a, 0xbb, 0x0b,
  252. 0xbc, 0xd4, 0x37, 0x55, 0xf9, 0x9c, 0x6d, 0x5b, 0x87, 0x4e, 0x50, 0x9f, 0x24, 0x0e, 0x3a, 0x1a,
  253. 0x0c, 0x54, 0x67, 0xbd, 0x0f, 0x34, 0x03, 0x5e, 0x45, 0x5b, 0x93, 0x42, 0xbe, 0x71, 0xe6, 0xa7,
  254. 0xf9, 0x49, 0x1a, 0xb3, 0xb2, 0xfb, 0x0e, 0xee, 0x3d, 0xcf, 0x0c, 0x5a, 0xf8, 0xb5, 0x80, 0x42,
  255. 0x7c, 0x0c, 0x75, 0xc5, 0xe1, 0x17, 0x29, 0x39, 0x55, 0x2b, 0xb1, 0xf5, 0x72, 0x06, 0x9e, 0x54,
  256. 0x0b, 0x0e, 0xf2, 0x95, 0xc8, 0x5b, 0x69, 0xaf, 0x5b, 0x81, 0x97, 0xae, 0xb1, 0x6e, 0xc4, 0x6d,
  257. 0x95, 0xd8, 0x22, 0x1e, 0x39, 0xf0, 0x76, 0x54, 0x19, 0x96, 0x03, 0x4c, 0x25, 0x85, 0x2f, 0xe1,
  258. 0x84, 0xd7, 0xc1, 0x62, 0xe1, 0x9e, 0x9f, 0x1f, 0xd4, 0xb8, 0xf0, 0xc2, 0x68, 0x76, 0x7c, 0xcf,
  259. 0x43, 0x3e, 0x60, 0x93, 0xd0, 0x89, 0x65, 0xae, 0x72, 0xcd, 0xd6, 0x00, 0x0d, 0x91, 0x42, 0x90,
  260. 0x98, 0x02, 0xa9, 0xf6, 0x82, 0x1b, 0xb5, 0x22, 0xfd, 0xb6, 0xc2, 0x5c, 0xad, 0x86, 0x81, 0x1d,
  261. };
  262. static const uint8_t m[256] = {
  263. 0x30, 0x31, 0x36, 0x64, 0x61, 0x34, 0x31, 0x66, 0x34, 0x62, 0x66, 0x35, 0x38, 0x61, 0x36, 0x32,
  264. 0x35, 0x61, 0x61, 0x35, 0x63, 0x33, 0x30, 0x37, 0x62, 0x63, 0x64, 0x31, 0x61, 0x37, 0x35, 0x30,
  265. 0x33, 0x64, 0x62, 0x30, 0x36, 0x63, 0x39, 0x37, 0x62, 0x30, 0x39, 0x31, 0x39, 0x33, 0x38, 0x61,
  266. 0x32, 0x31, 0x62, 0x35, 0x66, 0x36, 0x38, 0x65, 0x33, 0x37, 0x37, 0x61, 0x62, 0x38, 0x39, 0x39,
  267. 0x62, 0x65, 0x66, 0x37, 0x63, 0x61, 0x31, 0x36, 0x35, 0x30, 0x65, 0x38, 0x66, 0x30, 0x38, 0x64,
  268. 0x37, 0x32, 0x38, 0x37, 0x64, 0x64, 0x30, 0x66, 0x36, 0x64, 0x32, 0x61, 0x64, 0x36, 0x34, 0x31,
  269. 0x32, 0x38, 0x38, 0x33, 0x38, 0x63, 0x35, 0x39, 0x35, 0x61, 0x32, 0x64, 0x31, 0x30, 0x65, 0x34,
  270. 0x36, 0x37, 0x61, 0x62, 0x35, 0x34, 0x35, 0x33, 0x63, 0x34, 0x65, 0x63, 0x37, 0x37, 0x30, 0x35,
  271. 0x33, 0x38, 0x61, 0x63, 0x39, 0x66, 0x38, 0x30, 0x36, 0x66, 0x30, 0x38, 0x66, 0x66, 0x33, 0x30,
  272. 0x38, 0x65, 0x36, 0x65, 0x64, 0x62, 0x35, 0x35, 0x34, 0x31, 0x66, 0x39, 0x66, 0x30, 0x34, 0x36,
  273. 0x63, 0x36, 0x37, 0x32, 0x62, 0x31, 0x32, 0x30, 0x37, 0x37, 0x35, 0x35, 0x62, 0x30, 0x35, 0x66,
  274. 0x35, 0x36, 0x64, 0x33, 0x61, 0x36, 0x36, 0x31, 0x37, 0x64, 0x63, 0x37, 0x35, 0x34, 0x64, 0x35,
  275. 0x65, 0x32, 0x30, 0x34, 0x63, 0x31, 0x36, 0x31, 0x36, 0x61, 0x31, 0x33, 0x65, 0x33, 0x62, 0x31,
  276. 0x34, 0x65, 0x38, 0x65, 0x32, 0x39, 0x63, 0x39, 0x35, 0x33, 0x33, 0x38, 0x36, 0x65, 0x65, 0x64,
  277. 0x62, 0x63, 0x30, 0x39, 0x34, 0x30, 0x37, 0x62, 0x39, 0x34, 0x33, 0x34, 0x38, 0x37, 0x37, 0x36,
  278. 0x36, 0x37, 0x63, 0x62, 0x33, 0x30, 0x39, 0x63, 0x36, 0x33, 0x30, 0x34, 0x32, 0x32, 0x36, 0x32,
  279. };
  280. static const uint8_t e[4] = {
  281. 0x00, 0x01, 0x00, 0x01,
  282. };
  283. static const uint8_t nprime[256] = {
  284. 0x38, 0x62, 0xc1, 0xf5, 0x55, 0x2d, 0x3d, 0x60, 0x5e, 0x42, 0xe1, 0x65, 0xde, 0xed, 0x35, 0xd5,
  285. 0xc5, 0x85, 0xe4, 0x4e, 0xeb, 0x74, 0xa5, 0x22, 0xb3, 0xed, 0x5f, 0x5b, 0xb1, 0xb9, 0xe9, 0x0a,
  286. 0x7d, 0xa5, 0x74, 0x58, 0xf8, 0xa1, 0xab, 0x17, 0x74, 0xd0, 0x07, 0xa3, 0x7f, 0xd2, 0x9b, 0x50,
  287. 0x2a, 0xed, 0x5e, 0xdc, 0x5a, 0x69, 0xfe, 0x0e, 0xb1, 0xd8, 0x53, 0x35, 0x9b, 0xef, 0x1d, 0x76,
  288. 0x52, 0x9e, 0x87, 0x3c, 0xb0, 0x82, 0x4e, 0x03, 0xdf, 0x75, 0xed, 0x09, 0x9f, 0x3d, 0x37, 0xf6,
  289. 0xe8, 0x0d, 0xc9, 0x2e, 0x81, 0xf2, 0x9d, 0x2e, 0xaa, 0xe6, 0x53, 0x79, 0x6b, 0x99, 0xef, 0x46,
  290. 0x36, 0xd9, 0x2e, 0x9d, 0x15, 0xd1, 0x7f, 0x23, 0x14, 0xb9, 0xeb, 0x33, 0xa7, 0xd4, 0x8e, 0x86,
  291. 0x60, 0xc9, 0xd9, 0x7c, 0xca, 0x54, 0x59, 0x57, 0x94, 0x1e, 0x52, 0x4d, 0xc8, 0x3f, 0x9b, 0x24,
  292. 0x28, 0x25, 0xcb, 0x57, 0xca, 0x8f, 0x16, 0x5a, 0x37, 0xc2, 0xc6, 0xae, 0xc5, 0xe7, 0xc4, 0x2e,
  293. 0xf3, 0x24, 0x1c, 0xb7, 0xe9, 0xf5, 0x92, 0x4e, 0xd4, 0x51, 0x50, 0xff, 0xde, 0x44, 0x3c, 0xae,
  294. 0x72, 0xbd, 0x16, 0x39, 0x63, 0x8a, 0x22, 0x9c, 0x95, 0xda, 0x21, 0xf0, 0x4c, 0x12, 0x36, 0x2d,
  295. 0x00, 0xad, 0xb3, 0x89, 0xb5, 0x09, 0x9e, 0x3d, 0x24, 0x81, 0xfc, 0xef, 0x99, 0x95, 0x22, 0x9d,
  296. 0xb3, 0x94, 0x39, 0x32, 0xdd, 0xc4, 0x2b, 0x2f, 0xb0, 0x13, 0xfe, 0xb5, 0x5e, 0xc7, 0x64, 0x93,
  297. 0x7a, 0xb5, 0x81, 0x93, 0x1f, 0x9f, 0x96, 0x1e, 0x7a, 0x5c, 0x8d, 0xde, 0x8f, 0xae, 0xd9, 0xc8,
  298. 0xdd, 0x35, 0x1e, 0x17, 0x47, 0xb6, 0xab, 0xed, 0xb6, 0x82, 0x22, 0x4c, 0x62, 0xbd, 0x12, 0x4e,
  299. 0x44, 0x5c, 0x48, 0x2b, 0x75, 0x63, 0x1c, 0xde, 0xfa, 0x15, 0x0d, 0xb1, 0x50, 0x31, 0xb6, 0xcb,
  300. };
  301. static const uint8_t inv_r[256] = {
  302. 0x2f, 0xb7, 0xf5, 0x4a, 0xd2, 0x19, 0xde, 0x24, 0x7c, 0xdb, 0xcd, 0x52, 0x6e, 0xbc, 0x2c, 0x5c,
  303. 0x76, 0x9a, 0x36, 0xc3, 0x87, 0x33, 0xf7, 0xe9, 0x3d, 0x5b, 0x3d, 0xcd, 0x33, 0x7a, 0x3b, 0x4e,
  304. 0x55, 0xf5, 0xd9, 0x42, 0x76, 0x63, 0x28, 0x7a, 0xa8, 0x7c, 0xf7, 0xd1, 0xf6, 0x0d, 0x26, 0xba,
  305. 0xbe, 0x9f, 0x35, 0xf4, 0x86, 0xc5, 0x93, 0x4c, 0xe8, 0x76, 0xda, 0x88, 0xb8, 0xbe, 0xad, 0x25,
  306. 0x6b, 0xe7, 0x44, 0x3b, 0x1c, 0x2c, 0x99, 0x15, 0xee, 0x33, 0x46, 0xc6, 0xe0, 0xb0, 0x39, 0x6d,
  307. 0x20, 0xb2, 0x68, 0xc7, 0x75, 0x41, 0x2c, 0xff, 0xcb, 0x93, 0x1d, 0x40, 0xd2, 0x0e, 0x64, 0xea,
  308. 0x2e, 0x0a, 0x55, 0x9f, 0x04, 0x9d, 0xfd, 0x5e, 0x24, 0xa9, 0x28, 0x5c, 0x2d, 0x1b, 0x29, 0x87,
  309. 0x61, 0x6b, 0x50, 0x6a, 0x31, 0x31, 0x43, 0x12, 0x13, 0xe3, 0x1f, 0x47, 0x8a, 0x11, 0xd2, 0x5b,
  310. 0x26, 0x5e, 0x79, 0x04, 0x0b, 0xa8, 0xb0, 0x36, 0x22, 0xda, 0x3c, 0x5e, 0xb9, 0x09, 0x48, 0xb0,
  311. 0x32, 0x38, 0x25, 0xec, 0xfd, 0x5e, 0xef, 0xff, 0x80, 0x33, 0x9f, 0x94, 0x8c, 0x6e, 0x2a, 0xfb,
  312. 0xbf, 0x65, 0x18, 0x98, 0x7e, 0xff, 0x41, 0xde, 0x00, 0x2f, 0xd2, 0x7d, 0xbf, 0x4c, 0x54, 0x4e,
  313. 0x1c, 0x46, 0xd6, 0xab, 0xf6, 0x07, 0x34, 0x63, 0xe3, 0x0b, 0x81, 0xa0, 0x94, 0x7d, 0xaf, 0x7e,
  314. 0x37, 0xd6, 0xc5, 0xa6, 0x4a, 0x90, 0x6c, 0x44, 0x6a, 0xd9, 0x0f, 0x20, 0xb2, 0xef, 0x22, 0xa0,
  315. 0xdf, 0x38, 0x2d, 0x0b, 0xb3, 0x03, 0xb2, 0xc8, 0xe6, 0x8d, 0x74, 0xbf, 0x45, 0x91, 0xe0, 0x22,
  316. 0x16, 0xbf, 0xc4, 0xda, 0x54, 0x26, 0xaa, 0x65, 0x85, 0x88, 0xc3, 0xfb, 0x9f, 0xfc, 0x14, 0xc4,
  317. 0xff, 0x8b, 0x88, 0x47, 0x5f, 0xb1, 0x55, 0xdf, 0x47, 0x5c, 0xc0, 0x27, 0x39, 0x7b, 0xe8, 0xad,
  318. };
  319. uint32_t result[64];
  320. static const uint8_t encrypted[256] = {
  321. 0x9e, 0xf6, 0x6f, 0x46, 0xf5, 0x51, 0x1a, 0xbc, 0xc2, 0x9c, 0x49, 0x02, 0x21, 0x6c, 0x20, 0xae,
  322. 0x49, 0x91, 0xcd, 0xba, 0xb9, 0x4f, 0xaf, 0xfd, 0x8d, 0x9a, 0x27, 0xbc, 0x0b, 0x69, 0x57, 0xc4,
  323. 0xba, 0x18, 0xe1, 0x56, 0x45, 0x55, 0xbb, 0x3f, 0x7b, 0xca, 0x45, 0xb3, 0x9a, 0x0e, 0xd7, 0x64,
  324. 0x6e, 0x71, 0xce, 0xd3, 0x08, 0xc9, 0x4b, 0x97, 0xab, 0x24, 0xe4, 0x6c, 0xe3, 0xc7, 0x52, 0x97,
  325. 0x3c, 0x45, 0x17, 0x3b, 0x17, 0x0a, 0x90, 0x50, 0xed, 0x73, 0x4b, 0x49, 0x07, 0xee, 0x13, 0xaf,
  326. 0x47, 0x1e, 0xd0, 0x24, 0xb1, 0xd2, 0xc8, 0x09, 0x75, 0xf3, 0x14, 0x9c, 0x71, 0x99, 0xe3, 0x94,
  327. 0x5b, 0xf6, 0xef, 0x2e, 0x79, 0xf5, 0x1d, 0xdc, 0xa7, 0xc5, 0xed, 0x0a, 0x3f, 0x1d, 0x43, 0xd0,
  328. 0x19, 0x14, 0x3a, 0xb7, 0x35, 0xc2, 0x3f, 0xa1, 0x9c, 0x00, 0xde, 0xf6, 0x96, 0x55, 0xf8, 0x0c,
  329. 0x79, 0x08, 0x68, 0xf3, 0x84, 0x7c, 0x2e, 0x0c, 0x51, 0xb6, 0x5e, 0x9e, 0xcd, 0x50, 0xcc, 0x5f,
  330. 0x71, 0x99, 0xc1, 0x0d, 0xf0, 0x3c, 0xd0, 0x80, 0x02, 0xf0, 0x8f, 0x12, 0x3e, 0x49, 0xa4, 0x9b,
  331. 0x1f, 0x14, 0x05, 0xf2, 0x7b, 0x41, 0xc1, 0x3e, 0x8a, 0xb2, 0xab, 0x70, 0x28, 0x2f, 0x20, 0x94,
  332. 0x17, 0x65, 0xf3, 0x89, 0x28, 0x6d, 0xcd, 0x0c, 0xea, 0x03, 0x4a, 0x10, 0x9d, 0xf9, 0x2e, 0xf4,
  333. 0x64, 0x79, 0x7a, 0xec, 0x46, 0xb4, 0xdf, 0xce, 0x6a, 0x8e, 0xd8, 0x35, 0x62, 0xb3, 0x04, 0xea,
  334. 0xf9, 0xc4, 0xde, 0xba, 0x2a, 0x5e, 0xbf, 0x59, 0xfa, 0xef, 0x2a, 0x42, 0x18, 0xc9, 0xf5, 0x7a,
  335. 0x73, 0xb8, 0x67, 0x78, 0x97, 0x6d, 0x75, 0x4b, 0xdd, 0xfb, 0x9b, 0xe6, 0x4c, 0x04, 0x9c, 0x61,
  336. 0x5f, 0x9a, 0x12, 0xbf, 0x2e, 0x75, 0x63, 0xdd, 0x50, 0xba, 0x2c, 0xef, 0xb0, 0x9a, 0x65, 0x24,
  337. };
  338. Sec_Eng_PKA_Reset();
  339. Sec_Eng_PKA_BigEndian_Enable();
  340. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 0, (uint32_t*)n, 64, 0);
  341. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 1, (uint32_t*)nprime, 64, 0);
  342. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 2, (uint32_t*)m, 64, 0);
  343. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 3, (uint32_t*)e, 1, 0);
  344. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_256, 4, 0, 0);
  345. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_256, 5, 0, 1);
  346. Sec_Eng_PKA_LMUL2N(
  347. SEC_ENG_PKA_REG_SIZE_512, 2,
  348. SEC_ENG_PKA_REG_SIZE_256, 2,
  349. 2048,
  350. 0
  351. );
  352. Sec_Eng_PKA_MREM(
  353. SEC_ENG_PKA_REG_SIZE_256, 2,
  354. SEC_ENG_PKA_REG_SIZE_512, 2,
  355. SEC_ENG_PKA_REG_SIZE_256, 0,
  356. 0
  357. );
  358. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_512, 2, 0, 1);
  359. Sec_Eng_PKA_MEXP(
  360. SEC_ENG_PKA_REG_SIZE_256, 4,
  361. SEC_ENG_PKA_REG_SIZE_256, 2,
  362. SEC_ENG_PKA_REG_SIZE_256, 3,
  363. SEC_ENG_PKA_REG_SIZE_256, 0,
  364. 1
  365. );
  366. Sec_Eng_PKA_Move_Data(
  367. SEC_ENG_PKA_REG_SIZE_256, 2,
  368. SEC_ENG_PKA_REG_SIZE_256, 4,
  369. 1
  370. );
  371. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 1, (uint32_t*)inv_r, 64, 0);
  372. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_256, 4, 0, 0);
  373. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_256, 5, 0, 1);
  374. Sec_Eng_PKA_LMUL(
  375. SEC_ENG_PKA_REG_SIZE_512, 2,
  376. SEC_ENG_PKA_REG_SIZE_256, 2,
  377. SEC_ENG_PKA_REG_SIZE_256, 1,
  378. 0
  379. );
  380. Sec_Eng_PKA_MREM(
  381. SEC_ENG_PKA_REG_SIZE_256, 2,
  382. SEC_ENG_PKA_REG_SIZE_512, 2,
  383. SEC_ENG_PKA_REG_SIZE_256, 0,
  384. 0
  385. );
  386. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_512, 2, 0, 1);
  387. Sec_Eng_PKA_Read_Data(
  388. SEC_ENG_PKA_REG_SIZE_256, 2,
  389. result,
  390. 64
  391. );
  392. _dump_rsa_data((uint8_t*)result, sizeof(result));
  393. RSA_Compare_Data(encrypted, (uint8_t*)result, sizeof(result));
  394. }
  395. static void __attribute__((unused)) dump_xgcd_step(uint32_t result[64])
  396. {
  397. puts(" ---- PKA 8:0\r\n");
  398. Sec_Eng_PKA_Read_Data(
  399. SEC_ENG_PKA_REG_SIZE_256, 0,
  400. result,
  401. 64
  402. );
  403. _dump_rsa_data((uint8_t*)result, 256);
  404. puts(" ---- PKA 8:1\r\n");
  405. Sec_Eng_PKA_Read_Data(
  406. SEC_ENG_PKA_REG_SIZE_256, 1,
  407. result,
  408. 64
  409. );
  410. _dump_rsa_data((uint8_t*)result, 256);
  411. puts(" ---- PKA 8:2\r\n");
  412. Sec_Eng_PKA_Read_Data(
  413. SEC_ENG_PKA_REG_SIZE_256, 2,
  414. result,
  415. 64
  416. );
  417. _dump_rsa_data((uint8_t*)result, 256);
  418. puts(" ---- PKA 8:3\r\n");
  419. Sec_Eng_PKA_Read_Data(
  420. SEC_ENG_PKA_REG_SIZE_256, 3,
  421. result,
  422. 64
  423. );
  424. _dump_rsa_data((uint8_t*)result, 256);
  425. puts(" ---- PKA 8:4\r\n");
  426. Sec_Eng_PKA_Read_Data(
  427. SEC_ENG_PKA_REG_SIZE_256, 4,
  428. result,
  429. 64
  430. );
  431. _dump_rsa_data((uint8_t*)result, 256);
  432. puts(" ---- PKA 8:5\r\n");
  433. Sec_Eng_PKA_Read_Data(
  434. SEC_ENG_PKA_REG_SIZE_256, 5,
  435. result,
  436. 64
  437. );
  438. _dump_rsa_data((uint8_t*)result, 256);
  439. puts(" ---- PKA 8:6\r\n");
  440. Sec_Eng_PKA_Read_Data(
  441. SEC_ENG_PKA_REG_SIZE_256, 6,
  442. result,
  443. 64
  444. );
  445. _dump_rsa_data((uint8_t*)result, 256);
  446. puts(" ---- PKA 8:7\r\n");
  447. Sec_Eng_PKA_Read_Data(
  448. SEC_ENG_PKA_REG_SIZE_256, 7,
  449. result,
  450. 64
  451. );
  452. _dump_rsa_data((uint8_t*)result, 256);
  453. }
  454. static void _pka_test_case_xgcd(void)
  455. {
  456. int count = 0;
  457. static const uint8_t n[256] = {
  458. 0xd8, 0xa6, 0x4f, 0xea, 0x28, 0xf9, 0xdf, 0x07, 0x04, 0x55, 0xfa, 0xfb, 0x50, 0x5d, 0xbe, 0xb6,
  459. 0x9f, 0x7b, 0x53, 0x96, 0xef, 0x05, 0x5e, 0x0a, 0xf5, 0x2d, 0xe3, 0x67, 0x78, 0x07, 0x6b, 0xf6,
  460. 0xb2, 0x17, 0xac, 0x2e, 0x51, 0x42, 0x84, 0xbb, 0xfe, 0x3e, 0x5f, 0x0c, 0x85, 0xc4, 0x9d, 0xd4,
  461. 0x8b, 0xd5, 0xfa, 0x17, 0x2d, 0xb1, 0x26, 0x81, 0xe7, 0x79, 0x07, 0x45, 0x82, 0x42, 0x22, 0x3d,
  462. 0x0d, 0x97, 0xcf, 0xde, 0xea, 0xb8, 0xba, 0x16, 0x05, 0x8a, 0x5b, 0x0f, 0xec, 0x07, 0x30, 0xa4,
  463. 0xc6, 0xbf, 0xff, 0x20, 0x52, 0x1b, 0x94, 0xad, 0xfa, 0xb7, 0x6e, 0x83, 0x14, 0x48, 0x58, 0x14,
  464. 0x99, 0xe7, 0xa3, 0x9e, 0xc1, 0x08, 0xbd, 0xfe, 0x20, 0x11, 0x56, 0xdb, 0x96, 0x0a, 0xbb, 0x0b,
  465. 0xbc, 0xd4, 0x37, 0x55, 0xf9, 0x9c, 0x6d, 0x5b, 0x87, 0x4e, 0x50, 0x9f, 0x24, 0x0e, 0x3a, 0x1a,
  466. 0x0c, 0x54, 0x67, 0xbd, 0x0f, 0x34, 0x03, 0x5e, 0x45, 0x5b, 0x93, 0x42, 0xbe, 0x71, 0xe6, 0xa7,
  467. 0xf9, 0x49, 0x1a, 0xb3, 0xb2, 0xfb, 0x0e, 0xee, 0x3d, 0xcf, 0x0c, 0x5a, 0xf8, 0xb5, 0x80, 0x42,
  468. 0x7c, 0x0c, 0x75, 0xc5, 0xe1, 0x17, 0x29, 0x39, 0x55, 0x2b, 0xb1, 0xf5, 0x72, 0x06, 0x9e, 0x54,
  469. 0x0b, 0x0e, 0xf2, 0x95, 0xc8, 0x5b, 0x69, 0xaf, 0x5b, 0x81, 0x97, 0xae, 0xb1, 0x6e, 0xc4, 0x6d,
  470. 0x95, 0xd8, 0x22, 0x1e, 0x39, 0xf0, 0x76, 0x54, 0x19, 0x96, 0x03, 0x4c, 0x25, 0x85, 0x2f, 0xe1,
  471. 0x84, 0xd7, 0xc1, 0x62, 0xe1, 0x9e, 0x9f, 0x1f, 0xd4, 0xb8, 0xf0, 0xc2, 0x68, 0x76, 0x7c, 0xcf,
  472. 0x43, 0x3e, 0x60, 0x93, 0xd0, 0x89, 0x65, 0xae, 0x72, 0xcd, 0xd6, 0x00, 0x0d, 0x91, 0x42, 0x90,
  473. 0x98, 0x02, 0xa9, 0xf6, 0x82, 0x1b, 0xb5, 0x22, 0xfd, 0xb6, 0xc2, 0x5c, 0xad, 0x86, 0x81, 0x1d,
  474. };
  475. #if 0
  476. static const uint8_t nprime[256] = {
  477. 0x38, 0x62, 0xc1, 0xf5, 0x55, 0x2d, 0x3d, 0x60, 0x5e, 0x42, 0xe1, 0x65, 0xde, 0xed, 0x35, 0xd5,
  478. 0xc5, 0x85, 0xe4, 0x4e, 0xeb, 0x74, 0xa5, 0x22, 0xb3, 0xed, 0x5f, 0x5b, 0xb1, 0xb9, 0xe9, 0x0a,
  479. 0x7d, 0xa5, 0x74, 0x58, 0xf8, 0xa1, 0xab, 0x17, 0x74, 0xd0, 0x07, 0xa3, 0x7f, 0xd2, 0x9b, 0x50,
  480. 0x2a, 0xed, 0x5e, 0xdc, 0x5a, 0x69, 0xfe, 0x0e, 0xb1, 0xd8, 0x53, 0x35, 0x9b, 0xef, 0x1d, 0x76,
  481. 0x52, 0x9e, 0x87, 0x3c, 0xb0, 0x82, 0x4e, 0x03, 0xdf, 0x75, 0xed, 0x09, 0x9f, 0x3d, 0x37, 0xf6,
  482. 0xe8, 0x0d, 0xc9, 0x2e, 0x81, 0xf2, 0x9d, 0x2e, 0xaa, 0xe6, 0x53, 0x79, 0x6b, 0x99, 0xef, 0x46,
  483. 0x36, 0xd9, 0x2e, 0x9d, 0x15, 0xd1, 0x7f, 0x23, 0x14, 0xb9, 0xeb, 0x33, 0xa7, 0xd4, 0x8e, 0x86,
  484. 0x60, 0xc9, 0xd9, 0x7c, 0xca, 0x54, 0x59, 0x57, 0x94, 0x1e, 0x52, 0x4d, 0xc8, 0x3f, 0x9b, 0x24,
  485. 0x28, 0x25, 0xcb, 0x57, 0xca, 0x8f, 0x16, 0x5a, 0x37, 0xc2, 0xc6, 0xae, 0xc5, 0xe7, 0xc4, 0x2e,
  486. 0xf3, 0x24, 0x1c, 0xb7, 0xe9, 0xf5, 0x92, 0x4e, 0xd4, 0x51, 0x50, 0xff, 0xde, 0x44, 0x3c, 0xae,
  487. 0x72, 0xbd, 0x16, 0x39, 0x63, 0x8a, 0x22, 0x9c, 0x95, 0xda, 0x21, 0xf0, 0x4c, 0x12, 0x36, 0x2d,
  488. 0x00, 0xad, 0xb3, 0x89, 0xb5, 0x09, 0x9e, 0x3d, 0x24, 0x81, 0xfc, 0xef, 0x99, 0x95, 0x22, 0x9d,
  489. 0xb3, 0x94, 0x39, 0x32, 0xdd, 0xc4, 0x2b, 0x2f, 0xb0, 0x13, 0xfe, 0xb5, 0x5e, 0xc7, 0x64, 0x93,
  490. 0x7a, 0xb5, 0x81, 0x93, 0x1f, 0x9f, 0x96, 0x1e, 0x7a, 0x5c, 0x8d, 0xde, 0x8f, 0xae, 0xd9, 0xc8,
  491. 0xdd, 0x35, 0x1e, 0x17, 0x47, 0xb6, 0xab, 0xed, 0xb6, 0x82, 0x22, 0x4c, 0x62, 0xbd, 0x12, 0x4e,
  492. 0x44, 0x5c, 0x48, 0x2b, 0x75, 0x63, 0x1c, 0xde, 0xfa, 0x15, 0x0d, 0xb1, 0x50, 0x31, 0xb6, 0xcb,
  493. };
  494. static const uint8_t inv_r[256] = {
  495. 0x2f, 0xb7, 0xf5, 0x4a, 0xd2, 0x19, 0xde, 0x24, 0x7c, 0xdb, 0xcd, 0x52, 0x6e, 0xbc, 0x2c, 0x5c,
  496. 0x76, 0x9a, 0x36, 0xc3, 0x87, 0x33, 0xf7, 0xe9, 0x3d, 0x5b, 0x3d, 0xcd, 0x33, 0x7a, 0x3b, 0x4e,
  497. 0x55, 0xf5, 0xd9, 0x42, 0x76, 0x63, 0x28, 0x7a, 0xa8, 0x7c, 0xf7, 0xd1, 0xf6, 0x0d, 0x26, 0xba,
  498. 0xbe, 0x9f, 0x35, 0xf4, 0x86, 0xc5, 0x93, 0x4c, 0xe8, 0x76, 0xda, 0x88, 0xb8, 0xbe, 0xad, 0x25,
  499. 0x6b, 0xe7, 0x44, 0x3b, 0x1c, 0x2c, 0x99, 0x15, 0xee, 0x33, 0x46, 0xc6, 0xe0, 0xb0, 0x39, 0x6d,
  500. 0x20, 0xb2, 0x68, 0xc7, 0x75, 0x41, 0x2c, 0xff, 0xcb, 0x93, 0x1d, 0x40, 0xd2, 0x0e, 0x64, 0xea,
  501. 0x2e, 0x0a, 0x55, 0x9f, 0x04, 0x9d, 0xfd, 0x5e, 0x24, 0xa9, 0x28, 0x5c, 0x2d, 0x1b, 0x29, 0x87,
  502. 0x61, 0x6b, 0x50, 0x6a, 0x31, 0x31, 0x43, 0x12, 0x13, 0xe3, 0x1f, 0x47, 0x8a, 0x11, 0xd2, 0x5b,
  503. 0x26, 0x5e, 0x79, 0x04, 0x0b, 0xa8, 0xb0, 0x36, 0x22, 0xda, 0x3c, 0x5e, 0xb9, 0x09, 0x48, 0xb0,
  504. 0x32, 0x38, 0x25, 0xec, 0xfd, 0x5e, 0xef, 0xff, 0x80, 0x33, 0x9f, 0x94, 0x8c, 0x6e, 0x2a, 0xfb,
  505. 0xbf, 0x65, 0x18, 0x98, 0x7e, 0xff, 0x41, 0xde, 0x00, 0x2f, 0xd2, 0x7d, 0xbf, 0x4c, 0x54, 0x4e,
  506. 0x1c, 0x46, 0xd6, 0xab, 0xf6, 0x07, 0x34, 0x63, 0xe3, 0x0b, 0x81, 0xa0, 0x94, 0x7d, 0xaf, 0x7e,
  507. 0x37, 0xd6, 0xc5, 0xa6, 0x4a, 0x90, 0x6c, 0x44, 0x6a, 0xd9, 0x0f, 0x20, 0xb2, 0xef, 0x22, 0xa0,
  508. 0xdf, 0x38, 0x2d, 0x0b, 0xb3, 0x03, 0xb2, 0xc8, 0xe6, 0x8d, 0x74, 0xbf, 0x45, 0x91, 0xe0, 0x22,
  509. 0x16, 0xbf, 0xc4, 0xda, 0x54, 0x26, 0xaa, 0x65, 0x85, 0x88, 0xc3, 0xfb, 0x9f, 0xfc, 0x14, 0xc4,
  510. 0xff, 0x8b, 0x88, 0x47, 0x5f, 0xb1, 0x55, 0xdf, 0x47, 0x5c, 0xc0, 0x27, 0x39, 0x7b, 0xe8, 0xad,
  511. };
  512. #endif
  513. static const uint8_t n_exp[256] = {
  514. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  515. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  516. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  517. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  518. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  519. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  520. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  521. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  522. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  523. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  524. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  525. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  526. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  527. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  528. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  529. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01,
  530. };
  531. static const uint8_t all_zero[256] = {
  532. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  533. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  534. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  535. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  536. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  537. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  538. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  539. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  540. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  541. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  542. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  543. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  544. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  545. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  546. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  547. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  548. };
  549. uint32_t result[64];
  550. uint8_t pka_a_eq_0 = 0;
  551. (void) count;
  552. Sec_Eng_PKA_Reset();
  553. Sec_Eng_PKA_BigEndian_Enable();
  554. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 1, (uint32_t*)n, 64, 0);
  555. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_256, 2, 0, 0);
  556. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_256, 3, 0, 1);
  557. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 0, (uint32_t*)n_exp, 64, 0);
  558. Sec_Eng_PKA_LMUL2N(
  559. SEC_ENG_PKA_REG_SIZE_512, 1,
  560. SEC_ENG_PKA_REG_SIZE_256, 0,
  561. 2048,
  562. 0
  563. );
  564. Sec_Eng_PKA_LDIV(
  565. SEC_ENG_PKA_REG_SIZE_256, 0,
  566. SEC_ENG_PKA_REG_SIZE_512, 1,
  567. SEC_ENG_PKA_REG_SIZE_256, 1,
  568. 0
  569. );
  570. Sec_Eng_PKA_MREM(
  571. SEC_ENG_PKA_REG_SIZE_256, 4,
  572. SEC_ENG_PKA_REG_SIZE_512, 1,
  573. SEC_ENG_PKA_REG_SIZE_256, 1,
  574. 0
  575. );
  576. Sec_Eng_PKA_CREG(SEC_ENG_PKA_REG_SIZE_512, 1, 0, 1);
  577. Sec_Eng_PKA_Move_Data(
  578. SEC_ENG_PKA_REG_SIZE_256, 2,
  579. SEC_ENG_PKA_REG_SIZE_256, 1,
  580. 0
  581. );
  582. Sec_Eng_PKA_Move_Data(
  583. SEC_ENG_PKA_REG_SIZE_256, 1,
  584. SEC_ENG_PKA_REG_SIZE_256, 4,
  585. 1
  586. );
  587. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 4, (uint32_t*)all_zero, 64, 0);
  588. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 5, (uint32_t*)n_exp, 64, 0);
  589. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 6, (uint32_t*)n_exp, 64, 0);
  590. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 7, (uint32_t*)all_zero, 64, 0);
  591. Sec_Eng_PKA_LMUL(
  592. SEC_ENG_PKA_REG_SIZE_256, 8,
  593. SEC_ENG_PKA_REG_SIZE_256, 0,
  594. SEC_ENG_PKA_REG_SIZE_256, 5,
  595. 0
  596. );
  597. Sec_Eng_PKA_LSUB(
  598. SEC_ENG_PKA_REG_SIZE_256, 8,
  599. SEC_ENG_PKA_REG_SIZE_256, 4,
  600. SEC_ENG_PKA_REG_SIZE_256, 8,
  601. 0
  602. );
  603. Sec_Eng_PKA_LMUL(
  604. SEC_ENG_PKA_REG_SIZE_256, 9,
  605. SEC_ENG_PKA_REG_SIZE_256, 0,
  606. SEC_ENG_PKA_REG_SIZE_256, 7,
  607. 0
  608. );
  609. Sec_Eng_PKA_LSUB(
  610. SEC_ENG_PKA_REG_SIZE_256, 9,
  611. SEC_ENG_PKA_REG_SIZE_256, 6,
  612. SEC_ENG_PKA_REG_SIZE_256, 9,
  613. 0
  614. );
  615. Sec_Eng_PKA_Move_Data(
  616. SEC_ENG_PKA_REG_SIZE_256, 4,
  617. SEC_ENG_PKA_REG_SIZE_256, 5,
  618. 0
  619. );
  620. Sec_Eng_PKA_Move_Data(
  621. SEC_ENG_PKA_REG_SIZE_256, 5,
  622. SEC_ENG_PKA_REG_SIZE_256, 8,
  623. 0
  624. );
  625. Sec_Eng_PKA_Move_Data(
  626. SEC_ENG_PKA_REG_SIZE_256, 6,
  627. SEC_ENG_PKA_REG_SIZE_256, 7,
  628. 0
  629. );
  630. Sec_Eng_PKA_Move_Data(
  631. SEC_ENG_PKA_REG_SIZE_256, 7,
  632. SEC_ENG_PKA_REG_SIZE_256, 9,
  633. 1
  634. );
  635. #if 0
  636. blog_info("Dumping Step count %d\r\n", count++);
  637. dump_xgcd_step(result);
  638. #endif
  639. while (!pka_a_eq_0) {
  640. Sec_Eng_PKA_LDIV(
  641. SEC_ENG_PKA_REG_SIZE_256, 0,
  642. SEC_ENG_PKA_REG_SIZE_256, 2,
  643. SEC_ENG_PKA_REG_SIZE_256, 1,
  644. 0
  645. );
  646. Sec_Eng_PKA_MREM(
  647. SEC_ENG_PKA_REG_SIZE_256, 3,
  648. SEC_ENG_PKA_REG_SIZE_256, 2,
  649. SEC_ENG_PKA_REG_SIZE_256, 1,
  650. 0
  651. );
  652. Sec_Eng_PKA_LMUL(
  653. SEC_ENG_PKA_REG_SIZE_256, 8,
  654. SEC_ENG_PKA_REG_SIZE_256, 0,
  655. SEC_ENG_PKA_REG_SIZE_256, 5,
  656. 0
  657. );
  658. Sec_Eng_PKA_LSUB(
  659. SEC_ENG_PKA_REG_SIZE_256, 8,
  660. SEC_ENG_PKA_REG_SIZE_256, 4,
  661. SEC_ENG_PKA_REG_SIZE_256, 8,
  662. 0
  663. );
  664. Sec_Eng_PKA_LMUL(
  665. SEC_ENG_PKA_REG_SIZE_256, 9,
  666. SEC_ENG_PKA_REG_SIZE_256, 0,
  667. SEC_ENG_PKA_REG_SIZE_256, 7,
  668. 0
  669. );
  670. Sec_Eng_PKA_LSUB(
  671. SEC_ENG_PKA_REG_SIZE_256, 9,
  672. SEC_ENG_PKA_REG_SIZE_256, 6,
  673. SEC_ENG_PKA_REG_SIZE_256, 9,
  674. 0
  675. );
  676. Sec_Eng_PKA_Move_Data(
  677. SEC_ENG_PKA_REG_SIZE_256, 2,
  678. SEC_ENG_PKA_REG_SIZE_256, 1,
  679. 0
  680. );
  681. Sec_Eng_PKA_Move_Data(
  682. SEC_ENG_PKA_REG_SIZE_256, 4,
  683. SEC_ENG_PKA_REG_SIZE_256, 5,
  684. 0
  685. );
  686. Sec_Eng_PKA_Move_Data(
  687. SEC_ENG_PKA_REG_SIZE_256, 5,
  688. SEC_ENG_PKA_REG_SIZE_256, 8,
  689. 0
  690. );
  691. Sec_Eng_PKA_Move_Data(
  692. SEC_ENG_PKA_REG_SIZE_256, 6,
  693. SEC_ENG_PKA_REG_SIZE_256, 7,
  694. 0
  695. );
  696. Sec_Eng_PKA_Move_Data(
  697. SEC_ENG_PKA_REG_SIZE_256, 7,
  698. SEC_ENG_PKA_REG_SIZE_256, 9,
  699. 1
  700. );
  701. Sec_Eng_PKA_Move_Data(
  702. SEC_ENG_PKA_REG_SIZE_256, 1,
  703. SEC_ENG_PKA_REG_SIZE_256, 3,
  704. 1
  705. );
  706. Sec_Eng_PKA_Write_Data(SEC_ENG_PKA_REG_SIZE_256, 10, (uint32_t*)n_exp, 64, 0);
  707. Sec_Eng_PKA_LCMP(
  708. &pka_a_eq_0,
  709. SEC_ENG_PKA_REG_SIZE_256, 1,
  710. SEC_ENG_PKA_REG_SIZE_256, 10
  711. );
  712. #if 0
  713. blog_info("Dumping Step count %d\r\n", count++);
  714. dump_xgcd_step(result);
  715. #endif
  716. }
  717. Sec_Eng_PKA_Read_Data(
  718. SEC_ENG_PKA_REG_SIZE_256, 6,
  719. result,
  720. 64
  721. );
  722. _dump_rsa_data((uint8_t*)result, sizeof(result));
  723. //RSA_Compare_Data(encrypted, (uint8_t*)result, sizeof(result));
  724. }
  725. int bl_pka_test(void)
  726. {
  727. #if 0
  728. bl_irq_register(SEC_PKA_IRQn, bl_sec_pka_IRQHandler);
  729. bl_irq_enable(SEC_PKA_IRQn);
  730. #endif
  731. _pka_test_case2();
  732. _pka_test_case_xgcd();
  733. _pka_test_case2();
  734. return 0;
  735. }
  736. void bl_sec_pka_IRQHandler(void)
  737. {
  738. puts("--->>> PKA IRQ\r\n");
  739. SEC_Eng_IntMask(SEC_ENG_INT_PKA, MASK);
  740. }