forked from espressif/esp-idf
feat(soc): Updated soc cap for flash encryption
1) In the ESP32-P4 SoC, we have an eFuse to disable the MSPI access when in download mode. This commit adds relevant soc cap for esp32p4 chip. 2) Added FE related soc caps 3) Removed unwanted cap from soc_caps 4) esp_hw_support: Enable flash encryption related ll APIs for esp32p4
This commit is contained in:
committed by
Mahavir Jain
parent
096d1ce1bb
commit
e09d50d244
@@ -24,8 +24,6 @@
|
|||||||
extern "C" {
|
extern "C" {
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
//TODO: IDF-7545
|
|
||||||
|
|
||||||
/// Choose type of chip you want to encrypt manully
|
/// Choose type of chip you want to encrypt manully
|
||||||
typedef enum
|
typedef enum
|
||||||
{
|
{
|
||||||
@@ -38,10 +36,9 @@ typedef enum
|
|||||||
*/
|
*/
|
||||||
static inline void spi_flash_encrypt_ll_enable(void)
|
static inline void spi_flash_encrypt_ll_enable(void)
|
||||||
{
|
{
|
||||||
// REG_SET_BIT(HP_SYSTEM_EXTERNAL_DEVICE_ENCRYPT_DECRYPT_CONTROL_REG,
|
REG_SET_BIT(HP_SYSTEM_CRYPTO_CTRL_REG,
|
||||||
// HP_SYSTEM_ENABLE_DOWNLOAD_MANUAL_ENCRYPT |
|
HP_SYSTEM_REG_ENABLE_DOWNLOAD_MANUAL_ENCRYPT |
|
||||||
// HP_SYSTEM_ENABLE_SPI_MANUAL_ENCRYPT);
|
HP_SYSTEM_REG_ENABLE_SPI_MANUAL_ENCRYPT);
|
||||||
abort();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/*
|
/*
|
||||||
@@ -49,9 +46,8 @@ static inline void spi_flash_encrypt_ll_enable(void)
|
|||||||
*/
|
*/
|
||||||
static inline void spi_flash_encrypt_ll_disable(void)
|
static inline void spi_flash_encrypt_ll_disable(void)
|
||||||
{
|
{
|
||||||
// REG_CLR_BIT(HP_SYSTEM_EXTERNAL_DEVICE_ENCRYPT_DECRYPT_CONTROL_REG,
|
REG_CLR_BIT(HP_SYSTEM_CRYPTO_CTRL_REG,
|
||||||
// HP_SYSTEM_ENABLE_SPI_MANUAL_ENCRYPT);
|
HP_SYSTEM_REG_ENABLE_SPI_MANUAL_ENCRYPT);
|
||||||
abort();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
@@ -1111,10 +1111,6 @@ config SOC_TWAI_SUPPORTS_RX_STATUS
|
|||||||
bool
|
bool
|
||||||
default y
|
default y
|
||||||
|
|
||||||
config SOC_EFUSE_DIS_DOWNLOAD_ICACHE
|
|
||||||
bool
|
|
||||||
default y
|
|
||||||
|
|
||||||
config SOC_EFUSE_DIS_PAD_JTAG
|
config SOC_EFUSE_DIS_PAD_JTAG
|
||||||
bool
|
bool
|
||||||
default y
|
default y
|
||||||
@@ -1131,6 +1127,10 @@ config SOC_EFUSE_SOFT_DIS_JTAG
|
|||||||
bool
|
bool
|
||||||
default y
|
default y
|
||||||
|
|
||||||
|
config SOC_EFUSE_DIS_DOWNLOAD_MSPI
|
||||||
|
bool
|
||||||
|
default y
|
||||||
|
|
||||||
config SOC_SECURE_BOOT_V2_RSA
|
config SOC_SECURE_BOOT_V2_RSA
|
||||||
bool
|
bool
|
||||||
default y
|
default y
|
||||||
@@ -1159,10 +1159,18 @@ config SOC_FLASH_ENCRYPTION_XTS_AES
|
|||||||
bool
|
bool
|
||||||
default y
|
default y
|
||||||
|
|
||||||
|
config SOC_FLASH_ENCRYPTION_XTS_AES_OPTIONS
|
||||||
|
bool
|
||||||
|
default y
|
||||||
|
|
||||||
config SOC_FLASH_ENCRYPTION_XTS_AES_128
|
config SOC_FLASH_ENCRYPTION_XTS_AES_128
|
||||||
bool
|
bool
|
||||||
default y
|
default y
|
||||||
|
|
||||||
|
config SOC_FLASH_ENCRYPTION_XTS_AES_256
|
||||||
|
bool
|
||||||
|
default y
|
||||||
|
|
||||||
config SOC_UART_NUM
|
config SOC_UART_NUM
|
||||||
int
|
int
|
||||||
default 6
|
default 6
|
||||||
|
@@ -491,11 +491,12 @@
|
|||||||
#define SOC_TWAI_SUPPORTS_RX_STATUS 1
|
#define SOC_TWAI_SUPPORTS_RX_STATUS 1
|
||||||
|
|
||||||
/*-------------------------- eFuse CAPS----------------------------*/
|
/*-------------------------- eFuse CAPS----------------------------*/
|
||||||
#define SOC_EFUSE_DIS_DOWNLOAD_ICACHE 1
|
|
||||||
#define SOC_EFUSE_DIS_PAD_JTAG 1
|
#define SOC_EFUSE_DIS_PAD_JTAG 1
|
||||||
#define SOC_EFUSE_DIS_USB_JTAG 1
|
#define SOC_EFUSE_DIS_USB_JTAG 1
|
||||||
#define SOC_EFUSE_DIS_DIRECT_BOOT 1
|
#define SOC_EFUSE_DIS_DIRECT_BOOT 1
|
||||||
#define SOC_EFUSE_SOFT_DIS_JTAG 1
|
#define SOC_EFUSE_SOFT_DIS_JTAG 1
|
||||||
|
/* Capability to disable the MSPI access in download mode */
|
||||||
|
#define SOC_EFUSE_DIS_DOWNLOAD_MSPI 1
|
||||||
|
|
||||||
/*-------------------------- Secure Boot CAPS----------------------------*/
|
/*-------------------------- Secure Boot CAPS----------------------------*/
|
||||||
#define SOC_SECURE_BOOT_V2_RSA 1
|
#define SOC_SECURE_BOOT_V2_RSA 1
|
||||||
@@ -507,7 +508,9 @@
|
|||||||
/*-------------------------- Flash Encryption CAPS----------------------------*/
|
/*-------------------------- Flash Encryption CAPS----------------------------*/
|
||||||
#define SOC_FLASH_ENCRYPTED_XTS_AES_BLOCK_MAX (64)
|
#define SOC_FLASH_ENCRYPTED_XTS_AES_BLOCK_MAX (64)
|
||||||
#define SOC_FLASH_ENCRYPTION_XTS_AES 1
|
#define SOC_FLASH_ENCRYPTION_XTS_AES 1
|
||||||
|
#define SOC_FLASH_ENCRYPTION_XTS_AES_OPTIONS 1
|
||||||
#define SOC_FLASH_ENCRYPTION_XTS_AES_128 1
|
#define SOC_FLASH_ENCRYPTION_XTS_AES_128 1
|
||||||
|
#define SOC_FLASH_ENCRYPTION_XTS_AES_256 1
|
||||||
|
|
||||||
/*-------------------------- MEMPROT CAPS ------------------------------------*/
|
/*-------------------------- MEMPROT CAPS ------------------------------------*/
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user