ra8_rsip_mgmt.h

Go to the documentation of this file.

 
#pragma once
 
#include <stdint.h>
 
#include "ra8_err.h"
#include "ra8_rsip_keys.h"
#include "ra8_rsip_regs.h"
 
#ifdef __cplusplus
extern "C" {
#endif
 
/* =============================================================================
 * OEM boot loader version (anti-rollback)
 * =============================================================================
 */

[[nodiscard]] ra8_err_t ra8_rsip_oem_bl_version_get(uint32_t* out);

[[nodiscard]] ra8_err_t ra8_rsip_oem_bl_version_increment(void);

[[nodiscard]] ra8_err_t ra8_rsip_oem_bl_version_lock(void);
 
/* =============================================================================
 * Wrapped-key vault
 * =============================================================================
 */

[[nodiscard]] ra8_err_t ra8_rsip_kv_read(uint8_t slot, uint8_t* out);

[[nodiscard]] ra8_err_t ra8_rsip_kv_write(uint8_t slot, const uint8_t* in);

[[nodiscard]] ra8_err_t ra8_rsip_kv_erase(uint8_t slot);

[[nodiscard]] ra8_err_t ra8_rsip_kv_count(uint32_t* out);
 
/* =============================================================================
 * Key wrap / unwrap engine
 * =============================================================================
 */

[[nodiscard]] ra8_err_t ra8_rsip_key_wrap(const ra8_rsip_key_handle_t* kek,
                                          const uint8_t*               iv,
                                          const ra8_rsip_key_handle_t* src,
                                          uint8_t*                     blob);

[[nodiscard]] ra8_err_t ra8_rsip_key_unwrap(const ra8_rsip_key_handle_t* kek,
                                            const uint8_t*               iv,
                                            const uint8_t*               blob,
                                            ra8_rsip_key_handle_t*       dest);
 
/* =============================================================================
 * Key Derivation Function
 * =============================================================================
 */

[[nodiscard]] ra8_err_t ra8_rsip_kdf(ra8_rsip_kdf_op_t            op,
                                     const ra8_rsip_key_handle_t* ikm,
                                     const uint8_t*               label,
                                     uint32_t                     label_len,
                                     const uint8_t*               salt,
                                     uint32_t                     salt_len,
                                     uint32_t                     out_len,
                                     ra8_rsip_key_handle_t*       out);
 
/* =============================================================================
 * Device lifecycle + debug authorisation
 * =============================================================================
 */

[[nodiscard]] ra8_err_t ra8_rsip_life_get(ra8_rsip_life_state_t* out);

[[nodiscard]] ra8_err_t ra8_rsip_life_advance(ra8_rsip_life_state_t state);

[[nodiscard]] ra8_err_t ra8_rsip_debug_level_get(ra8_rsip_debug_level_t* out);

[[nodiscard]] ra8_err_t ra8_rsip_debug_level_set(ra8_rsip_debug_level_t level);
 
/* =============================================================================
 * Tamper subsystem
 * =============================================================================
 */

[[nodiscard]] ra8_err_t ra8_rsip_tamper_enable(uint32_t sources);

[[nodiscard]] ra8_err_t ra8_rsip_tamper_status(uint32_t* out);

[[nodiscard]] ra8_err_t ra8_rsip_tamper_ack(uint32_t mask);

[[nodiscard]] ra8_err_t ra8_rsip_dpa_arm(bool enable);
 
/* =============================================================================
 * DOTF key delivery routing
 * =============================================================================
 */

[[nodiscard]] ra8_err_t ra8_rsip_dotf_route(uint8_t which, uint8_t slot, bool on);
 
#ifdef __cplusplus
}
#endif