mirror of https://github.com/ARMmbed/mbed-os.git
92 lines
3.4 KiB
Python
92 lines
3.4 KiB
Python
#!/usr/bin/python
|
|
# Copyright (c) 2017-2020 ARM Limited
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
import os
|
|
from os.path import abspath, basename, dirname, splitext, isdir
|
|
from os.path import join as path_join
|
|
import re
|
|
from argparse import Namespace
|
|
from tools.psa.tfm.bin_utils.assemble import Assembly
|
|
from tools.psa.tfm.bin_utils.imgtool import do_sign
|
|
from tools.psa.tfm.bin_utils.imgtool_lib import version
|
|
|
|
SCRIPT_DIR = dirname(abspath(__file__))
|
|
MBED_OS_ROOT = abspath(path_join(SCRIPT_DIR, os.pardir, os.pardir))
|
|
MUSCA_A1_BASE = path_join(MBED_OS_ROOT, 'targets', 'TARGET_ARM_SSG', 'TARGET_MUSCA_A1')
|
|
|
|
|
|
def musca_tfm_bin(t_self, non_secure_bin, secure_bin):
|
|
|
|
assert os.path.isfile(secure_bin)
|
|
assert os.path.isfile(non_secure_bin)
|
|
|
|
build_dir = dirname(non_secure_bin)
|
|
tempdir = path_join(build_dir, 'temp')
|
|
if not isdir(tempdir):
|
|
os.makedirs(tempdir)
|
|
flash_layout = path_join(MUSCA_A1_BASE, 'partition', 'flash_layout.h')
|
|
mcuboot_bin = path_join(MUSCA_A1_BASE, 'mcuboot.bin')
|
|
image_macros = path_join(MUSCA_A1_BASE, 'partition', 'image_macros_preprocessed.c')
|
|
ns_bin_name, ns_bin_ext = splitext(basename(non_secure_bin))
|
|
concatenated_bin = path_join(tempdir, 'tfm_' + ns_bin_name + ns_bin_ext)
|
|
signed_bin = path_join(tempdir, 'tfm_' + ns_bin_name + '_signed' + ns_bin_ext)
|
|
|
|
assert os.path.isfile(image_macros)
|
|
|
|
#1. Concatenate secure TFM and non-secure mbed binaries
|
|
output = Assembly(image_macros, concatenated_bin)
|
|
output.add_image(secure_bin, "SECURE")
|
|
output.add_image(non_secure_bin, "NON_SECURE")
|
|
|
|
#2. Run imgtool to sign the concatenated binary
|
|
sign_args = Namespace(
|
|
layout=image_macros,
|
|
key=path_join(SCRIPT_DIR, 'musca_a1-root-rsa-3072.pem'),
|
|
public_key_format=None,
|
|
align=1,
|
|
dependencies=None,
|
|
version=version.decode_version('1.0'),
|
|
header_size=0x400,
|
|
pad=0x100000,
|
|
security_counter=None,
|
|
rsa_pkcs1_15=False,
|
|
included_header=False,
|
|
infile=concatenated_bin,
|
|
outfile=signed_bin
|
|
)
|
|
do_sign(sign_args)
|
|
|
|
#3. Concatenate mcuboot and signed binary and overwrite mbed built binary file
|
|
mcuboot_image_size = find_bl2_size(flash_layout)
|
|
with open(mcuboot_bin, "rb") as mcuboot_fh, open(signed_bin, "rb") as signed_fh:
|
|
with open(non_secure_bin, "w+b") as out_fh:
|
|
out_fh.write(mcuboot_fh.read())
|
|
out_fh.seek(mcuboot_image_size)
|
|
out_fh.write(signed_fh.read())
|
|
|
|
|
|
def find_bl2_size(configFile):
|
|
bl2_size_re = re.compile(r"^#define\s+FLASH_AREA_BL2_SIZE\s+\({0,1}(0x[0-9a-fA-F]+)\){0,1}")
|
|
bl2_size = None
|
|
with open(configFile, 'r') as flash_layout_file:
|
|
for line in flash_layout_file:
|
|
m = bl2_size_re.match(line)
|
|
if m is not None:
|
|
bl2_size = int(m.group(1), 0)
|
|
break
|
|
return bl2_size
|