ra8_nsc.h

Go to the documentation of this file.

 
#pragma once
 
#ifdef __cplusplus
extern "C" {
#endif
 
#include <stdint.h>
 
#include "ra8_err.h"
#include "ra8_nsc_veneer.h"
 
/* =============================================================================
 * XSPI (external octa-SPI flash) veneers
 * =============================================================================
 */

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_xspi_read(uint32_t flash_off,
                                                         uint8_t* ns_dst,
                                                         uint32_t len);

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_xspi_status(uint8_t instance, uint32_t* out_mask);
 
/* =============================================================================
 * Ethernet veneers
 * =============================================================================
 */

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_eth_send(const uint8_t* ns_frame, uint16_t len);

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_eth_recv(uint8_t* ns_buf, uint16_t* inout_len);
 
/* =============================================================================
 * Logging veneer
 * =============================================================================
 */

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_log_emit(const char* tag, const char* message);
 
/* =============================================================================
 * Peripheral init veneer (boot-time only)
 * =============================================================================
 */

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_periph_init(void);
 
/* =============================================================================
 * Watchdog veneers (Secure-owned WDT; NS runs the ThreadX supervisor)
 * =============================================================================
 */

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_wdt_start(void);

RA8_NSC_VENEER void ra8_nsc_wdt_refresh(void);
 
/* =============================================================================
 * Key vault veneer
 * =============================================================================
 */

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_key_vault_challenge(uint16_t       slot,
                                                                   const uint8_t* ns_chal,
                                                                   uint8_t*       ns_digest);
 
/* The sealed-key-import and TRNG NSC veneers (ra8_nsc_key_import /
 * ra8_nsc_trng_read) were declared here but never defined -- a phantom NS->S
 * entry point that misrepresents the trust-boundary surface. They are removed
 * until a real definition exists (enforced by
 * scripts/checks/check_nsc_veneer_defs.py). The secure-side backing code lives
 * in libs/ra8_secure_app/src/{key_import,secure_trng}.c; re-add each
 * declaration in the
 * same change that adds its RA8_NSC_VENEER definition. */
 
/* =============================================================================
 * Constants surfaced to NS callers
 * =============================================================================
 */

typedef enum : uint32_t {
  k_ra8_nsc_xspi_max_read   = 4096U, 
  k_ra8_nsc_eth_frame_max   = 1518U, 
  k_ra8_nsc_log_msg_max_len = 128U,  
} ra8_nsc_limits_t;
 
/* =============================================================================
 * OTA bank-commit veneers (forwarded to libs/ra8_secure_app/src/ota_commit.c)
 * =============================================================================
 */

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_ota_commit(uint8_t target_bank);

[[nodiscard]] RA8_NSC_VENEER ra8_err_t ra8_nsc_flash_bank_config(uint32_t raw_value);
 
#ifdef __cplusplus
}
#endif