1 /* 2 * Copyright (C) 2016 The Android Open Source Project 3 * 4 * Permission is hereby granted, free of charge, to any person 5 * obtaining a copy of this software and associated documentation 6 * files (the "Software"), to deal in the Software without 7 * restriction, including without limitation the rights to use, copy, 8 * modify, merge, publish, distribute, sublicense, and/or sell copies 9 * of the Software, and to permit persons to whom the Software is 10 * furnished to do so, subject to the following conditions: 11 * 12 * The above copyright notice and this permission notice shall be 13 * included in all copies or substantial portions of the Software. 14 * 15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 16 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 17 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 18 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS 19 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN 20 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN 21 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 22 * SOFTWARE. 23 */ 24 25 #if !defined(AVB_INSIDE_LIBAVB_H) && !defined(AVB_COMPILATION) 26 #error "Never include this file directly, include libavb.h instead." 27 #endif 28 29 #ifndef AVB_VBMETA_IMAGE_H_ 30 #define AVB_VBMETA_IMAGE_H_ 31 32 #include "avb_sysdeps.h" 33 34 #ifdef __cplusplus 35 extern "C" { 36 #endif 37 38 #include "avb_crypto.h" 39 #include "avb_descriptor.h" 40 41 /* Size of the vbmeta image header. */ 42 #define AVB_VBMETA_IMAGE_HEADER_SIZE 256 43 44 /* Magic for the vbmeta image header. */ 45 #define AVB_MAGIC "AVB0" 46 #define AVB_MAGIC_LEN 4 47 48 /* Maximum size of the release string including the terminating NUL byte. */ 49 #define AVB_RELEASE_STRING_SIZE 48 50 51 /* Flags for the vbmeta image. 52 * 53 * AVB_VBMETA_IMAGE_FLAGS_HASHTREE_DISABLED: If this flag is set, 54 * hashtree image verification will be disabled. 55 * 56 * AVB_VBMETA_IMAGE_FLAGS_VERIFICATION_DISABLED: If this flag is set, 57 * verification will be disabled and descriptors will not be parsed. 58 */ 59 typedef enum { 60 AVB_VBMETA_IMAGE_FLAGS_HASHTREE_DISABLED = (1 << 0), 61 AVB_VBMETA_IMAGE_FLAGS_VERIFICATION_DISABLED = (1 << 1) 62 } AvbVBMetaImageFlags; 63 64 /* Binary format for header of the vbmeta image. 65 * 66 * The vbmeta image consists of three blocks: 67 * 68 * +-----------------------------------------+ 69 * | Header data - fixed size | 70 * +-----------------------------------------+ 71 * | Authentication data - variable size | 72 * +-----------------------------------------+ 73 * | Auxiliary data - variable size | 74 * +-----------------------------------------+ 75 * 76 * The "Header data" block is described by this struct and is always 77 * |AVB_VBMETA_IMAGE_HEADER_SIZE| bytes long. 78 * 79 * The "Authentication data" block is |authentication_data_block_size| 80 * bytes long and contains the hash and signature used to authenticate 81 * the vbmeta image. The type of the hash and signature is defined by 82 * the |algorithm_type| field. 83 * 84 * The "Auxiliary data" is |auxiliary_data_block_size| bytes long and 85 * contains the auxiliary data including the public key used to make 86 * the signature and descriptors. 87 * 88 * The public key is at offset |public_key_offset| with size 89 * |public_key_size| in this block. The size of the public key data is 90 * defined by the |algorithm_type| field. The format of the public key 91 * data is described in the |AvbRSAPublicKeyHeader| struct. 92 * 93 * The descriptors starts at |descriptors_offset| from the beginning 94 * of the "Auxiliary Data" block and take up |descriptors_size| 95 * bytes. Each descriptor is stored as a |AvbDescriptor| with tag and 96 * number of bytes following. The number of descriptors can be 97 * determined by walking this data until |descriptors_size| is 98 * exhausted. 99 * 100 * The size of each of the "Authentication data" and "Auxiliary data" 101 * blocks must be divisible by 64. This is to ensure proper alignment. 102 * 103 * Descriptors are free-form blocks stored in a part of the vbmeta 104 * image subject to the same integrity checks as the rest of the 105 * image. See the documentation for |AvbDescriptor| for well-known 106 * descriptors. See avb_descriptor_foreach() for a convenience 107 * function to iterate over descriptors. 108 * 109 * This struct is versioned, see the |required_libavb_version_major| 110 * and |required_libavb_version_minor| fields. This represents the 111 * minimum version of libavb required to verify the header and depends 112 * on the features (e.g. algorithms, descriptors) used. Note that this 113 * may be 1.0 even if generated by an avbtool from 1.4 but where no 114 * features introduced after 1.0 has been used. See the "Versioning 115 * and compatibility" section in the README.md file for more details. 116 * 117 * All fields are stored in network byte order when serialized. To 118 * generate a copy with fields swapped to native byte order, use the 119 * function avb_vbmeta_image_header_to_host_byte_order(). 120 * 121 * Before reading and/or using any of this data, you MUST verify it 122 * using avb_vbmeta_image_verify() and reject it unless it's signed by 123 * a known good public key. 124 */ 125 typedef struct AvbVBMetaImageHeader { 126 /* 0: Four bytes equal to "AVB0" (AVB_MAGIC). */ 127 uint8_t magic[AVB_MAGIC_LEN]; 128 129 /* 4: The major version of libavb required for this header. */ 130 uint32_t required_libavb_version_major; 131 /* 8: The minor version of libavb required for this header. */ 132 uint32_t required_libavb_version_minor; 133 134 /* 12: The size of the signature block. */ 135 uint64_t authentication_data_block_size; 136 /* 20: The size of the auxiliary data block. */ 137 uint64_t auxiliary_data_block_size; 138 139 /* 28: The verification algorithm used, see |AvbAlgorithmType| enum. */ 140 uint32_t algorithm_type; 141 142 /* 32: Offset into the "Authentication data" block of hash data. */ 143 uint64_t hash_offset; 144 /* 40: Length of the hash data. */ 145 uint64_t hash_size; 146 147 /* 48: Offset into the "Authentication data" block of signature data. */ 148 uint64_t signature_offset; 149 /* 56: Length of the signature data. */ 150 uint64_t signature_size; 151 152 /* 64: Offset into the "Auxiliary data" block of public key data. */ 153 uint64_t public_key_offset; 154 /* 72: Length of the public key data. */ 155 uint64_t public_key_size; 156 157 /* 80: Offset into the "Auxiliary data" block of public key metadata. */ 158 uint64_t public_key_metadata_offset; 159 /* 88: Length of the public key metadata. Must be set to zero if there 160 * is no public key metadata. 161 */ 162 uint64_t public_key_metadata_size; 163 164 /* 96: Offset into the "Auxiliary data" block of descriptor data. */ 165 uint64_t descriptors_offset; 166 /* 104: Length of descriptor data. */ 167 uint64_t descriptors_size; 168 169 /* 112: The rollback index which can be used to prevent rollback to 170 * older versions. 171 */ 172 uint64_t rollback_index; 173 174 /* 120: Flags from the AvbVBMetaImageFlags enumeration. This must be 175 * set to zero if the vbmeta image is not a top-level image. 176 */ 177 uint32_t flags; 178 179 /* 124: The location of the rollback index defined in this header. 180 * Only valid for the main vbmeta. For chained partitions, the rollback 181 * index location must be specified in the AvbChainPartitionDescriptor 182 * and this value must be set to 0. 183 */ 184 uint32_t rollback_index_location; 185 186 /* 128: The release string from avbtool, e.g. "avbtool 1.0.0" or 187 * "avbtool 1.0.0 xyz_board Git-234abde89". Is guaranteed to be NUL 188 * terminated. Applications must not make assumptions about how this 189 * string is formatted. 190 */ 191 uint8_t release_string[AVB_RELEASE_STRING_SIZE]; 192 193 /* 176: Padding to ensure struct is size AVB_VBMETA_IMAGE_HEADER_SIZE 194 * bytes. This must be set to zeroes. 195 */ 196 uint8_t reserved[80]; 197 } AVB_ATTR_PACKED AvbVBMetaImageHeader; 198 199 /* Copies |src| to |dest|, byte-swapping fields in the process. 200 * 201 * Make sure you've verified |src| using avb_vbmeta_image_verify() 202 * before accessing the data and/or using this function. 203 */ 204 void avb_vbmeta_image_header_to_host_byte_order(const AvbVBMetaImageHeader* src, 205 AvbVBMetaImageHeader* dest); 206 207 /* Return codes used in avb_vbmeta_image_verify(). 208 * 209 * AVB_VBMETA_VERIFY_RESULT_OK is returned if the vbmeta image header 210 * is valid, the hash is correct and the signature is correct. Keep in 211 * mind that you still need to check that you know the public key used 212 * to sign the image, see avb_vbmeta_image_verify() for details. 213 * 214 * AVB_VBMETA_VERIFY_RESULT_OK_NOT_SIGNED is returned if the vbmeta 215 * image header is valid but there is no signature or hash. 216 * 217 * AVB_VBMETA_VERIFY_RESULT_INVALID_VBMETA_HEADER is returned if the 218 * header of the vbmeta image is invalid, for example, invalid magic 219 * or inconsistent data. 220 * 221 * AVB_VBMETA_VERIFY_RESULT_UNSUPPORTED_VERSION is returned if a) the 222 * vbmeta image requires a minimum version of libavb which exceeds the 223 * version of libavb used; or b) the vbmeta image major version 224 * differs from the major version of libavb in use. 225 * 226 * AVB_VBMETA_VERIFY_RESULT_HASH_MISMATCH is returned if the hash 227 * stored in the "Authentication data" block does not match the 228 * calculated hash. 229 * 230 * AVB_VBMETA_VERIFY_RESULT_SIGNATURE_MISMATCH is returned if the 231 * signature stored in the "Authentication data" block is invalid or 232 * doesn't match the public key stored in the vbmeta image. 233 */ 234 typedef enum { 235 AVB_VBMETA_VERIFY_RESULT_OK, 236 AVB_VBMETA_VERIFY_RESULT_OK_NOT_SIGNED, 237 AVB_VBMETA_VERIFY_RESULT_INVALID_VBMETA_HEADER, 238 AVB_VBMETA_VERIFY_RESULT_UNSUPPORTED_VERSION, 239 AVB_VBMETA_VERIFY_RESULT_HASH_MISMATCH, 240 AVB_VBMETA_VERIFY_RESULT_SIGNATURE_MISMATCH, 241 } AvbVBMetaVerifyResult; 242 243 /* Get a textual representation of |result|. */ 244 const char* avb_vbmeta_verify_result_to_string(AvbVBMetaVerifyResult result); 245 246 /* Checks that vbmeta image at |data| of size |length| is a valid 247 * vbmeta image. The complete contents of the vbmeta image must be 248 * passed in. It's fine if |length| is bigger than the actual image, 249 * typically callers of this function will load the entire contents of 250 * the 'vbmeta_a' or 'vbmeta_b' partition and pass in its length (for 251 * example, 1 MiB). 252 * 253 * See the |AvbVBMetaImageHeader| struct for information about the 254 * three blocks (header, authentication, auxiliary) that make up a 255 * vbmeta image. 256 * 257 * If the function returns |AVB_VBMETA_VERIFY_RESULT_OK| and 258 * |out_public_key_data| is non-NULL, it will be set to point inside 259 * |data| for where the serialized public key data is stored and 260 * |out_public_key_length|, if non-NULL, will be set to the length of 261 * the public key data. If there is no public key in the metadata then 262 * |out_public_key_data| is set to NULL. 263 * 264 * See the |AvbVBMetaVerifyResult| enum for possible return values. 265 * 266 * VERY IMPORTANT: 267 * 268 * 1. Even if |AVB_VBMETA_VERIFY_RESULT_OK| is returned, you still 269 * need to check that the public key embedded in the image 270 * matches a known key! You can use 'avbtool extract_public_key' 271 * to extract the key (at build time, then store it along your 272 * code) and compare it to what is returned in 273 * |out_public_key_data|. 274 * 275 * 2. You need to check the |rollback_index| field against a stored 276 * value in NVRAM and reject the vbmeta image if the value in 277 * NVRAM is bigger than |rollback_index|. You must also update 278 * the value stored in NVRAM to the smallest value of 279 * |rollback_index| field from boot images in all bootable and 280 * authentic slots marked as GOOD. 281 * 282 * This is a low-level function to only verify the vbmeta data - you 283 * are likely looking for avb_slot_verify() instead for verifying 284 * integrity data for a whole set of partitions. 285 */ 286 AvbVBMetaVerifyResult avb_vbmeta_image_verify( 287 const uint8_t* data, 288 size_t length, 289 const uint8_t** out_public_key_data, 290 size_t* out_public_key_length) AVB_ATTR_WARN_UNUSED_RESULT; 291 292 #ifdef __cplusplus 293 } 294 #endif 295 296 #endif /* AVB_VBMETA_IMAGE_H_ */ 297