mcuboot/boot/zephyr/include/single_loader.h

/*
 * SPDX-License-Identifier: Apache-2.0
 *
 * Copyright (c) 2021-2021 Crodeon Technologies
 *
 */

#ifndef H_SINGLE_LOADER_
#define H_SINGLE_LOADER_
#include "bootutil/fault_injection_hardening.h"

/**
 * Handle an encrypted firmware in the main flash.
 * This will decrypt the image inplace
 */
int boot_handle_enc_fw();

fih_ret boot_image_validate(const struct flash_area *fa_p,
                    struct image_header *hdr);
#endif
Add support for signed images in single loader mode Signed-off-by: Wouter Cappelle <wouter.cappelle@crodeon.com> 2021-05-03 22:53:05 +08:00			`/*`
			`* SPDX-License-Identifier: Apache-2.0`
			`*`
			`* Copyright (c) 2021-2021 Crodeon Technologies`
			`*`
			`*/`

			`#ifndef H_SINGLE_LOADER_`
			`#define H_SINGLE_LOADER_`
			`#include "bootutil/fault_injection_hardening.h"`

			`/**`
			`* Handle an encrypted firmware in the main flash.`
			`* This will decrypt the image inplace`
			`*/`
			`int boot_handle_enc_fw();`

fih: Hardening of fault injection countermeasures Returned values are now hardcoded. Indeed, while it is not strictly needed (few return values different from SUCCESS or FAILURE) complexity added by encoding return values might cause the software to be vulnerable to fault attacks. Return type changed from fih_int to fih_ret to make the whole thing much simpler and therefore more robust to fault attacks. In addition, its easier to predict compiler behavior. Affectation of sentive variables has been hardened using macro FIH_SET (affectation + check wether write access has been properly done). FIH_DECLARE() is added to ease the declaration of sentive variables. Equality tests fih_eq() and fih_not_eq() are now macros because inlining produce more complex code (and weaker) than macros. In addition fih_not_eq is modified to be the negation of fih_eq which was not the case until now. when FIH_NOT_EQ is used , FIH_SET(fih_rc, FIH_FAILURE) has been added in some part of the code. variable image_mask (bootutil_priv.h) is now volatile because a double IF test is made on it. some others parts of the code have been hardenned (eg. loop on images) Signed-off-by: Michael Grand <m.grand@trustngo.tech> 2022-11-24 23:49:56 +08:00			`fih_ret boot_image_validate(const struct flash_area *fa_p,`
Add support for signed images in single loader mode Signed-off-by: Wouter Cappelle <wouter.cappelle@crodeon.com> 2021-05-03 22:53:05 +08:00			`struct image_header *hdr);`
			`#endif`