1 | /* |
2 | * Copyright (c) 2018 Apple Computer, Inc. All rights reserved. |
3 | * |
4 | * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ |
5 | * |
6 | * This file contains Original Code and/or Modifications of Original Code |
7 | * as defined in and that are subject to the Apple Public Source License |
8 | * Version 2.0 (the 'License'). You may not use this file except in |
9 | * compliance with the License. The rights granted to you under the License |
10 | * may not be used to create, or enable the creation or redistribution of, |
11 | * unlawful or unlicensed copies of an Apple operating system, or to |
12 | * circumvent, violate, or enable the circumvention or violation of, any |
13 | * terms of an Apple operating system software license agreement. |
14 | * |
15 | * Please obtain a copy of the License at |
16 | * http://www.opensource.apple.com/apsl/ and read it before using this file. |
17 | * |
18 | * The Original Code and all software distributed under the License are |
19 | * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER |
20 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, |
21 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, |
22 | * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. |
23 | * Please see the License for the specific language governing rights and |
24 | * limitations under the License. |
25 | * |
26 | * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ |
27 | */ |
28 | |
29 | #ifndef _KERN_TRUSTCACHE_H_ |
30 | #define _KERN_TRUSTCACHE_H_ |
31 | |
32 | #include <stdint.h> |
33 | |
34 | #include <kern/cs_blobs.h> |
35 | |
36 | #include <uuid/uuid.h> |
37 | |
38 | #ifdef XNU_PLATFORM_BridgeOS |
39 | /* Version 0 trust caches: No defined sorting order (thus only suitable for small trust caches). |
40 | * Used for loadable trust caches only, until phasing out support. */ |
41 | typedef uint8_t trust_cache_hash0[CS_CDHASH_LEN]; |
42 | struct trust_cache_module0 { |
43 | uint32_t version; |
44 | uuid_t uuid; |
45 | uint32_t num_hashes; |
46 | trust_cache_hash0 hashes[]; |
47 | } __attribute__((__packed__)); |
48 | #endif |
49 | |
50 | |
51 | /* Version 1 trust caches: Always sorted by cdhash, added hash type and flags field. |
52 | * Suitable for all trust caches. */ |
53 | |
54 | struct trust_cache_entry1 { |
55 | uint8_t cdhash[CS_CDHASH_LEN]; |
56 | uint8_t hash_type; |
57 | uint8_t flags; |
58 | } __attribute__((__packed__)); |
59 | |
60 | struct trust_cache_module1 { |
61 | uint32_t version; |
62 | uuid_t uuid; |
63 | uint32_t num_entries; |
64 | struct trust_cache_entry1 entries[]; |
65 | } __attribute__((__packed__)); |
66 | |
67 | // Trust Cache Entry Flags |
68 | #define CS_TRUST_CACHE_AMFID 0x1 // valid cdhash for amfid |
69 | |
70 | /* Trust Cache lookup functions return their result as a 32bit value |
71 | * comprised of subfields, for straightforward passing through layers. |
72 | * |
73 | * Format: |
74 | * |
75 | * 0xXXCCBBAA |
76 | * |
77 | * AA: 0-7: lookup result |
78 | * bit 0: TC_LOOKUP_FOUND: set if any entry found |
79 | * bit 1: (obsolete) TC_LOOKUP_FALLBACK: set if found in legacy static trust cache |
80 | * bit 2-7: reserved |
81 | * BB: 8-15: entry flags pass-through, see "Trust Cache Entry Flags" above |
82 | * CC: 16-23: code directory hash type of entry, see CS_HASHTYPE_* in cs_blobs.h |
83 | * XX: 24-31: reserved |
84 | */ |
85 | |
86 | #define TC_LOOKUP_HASH_TYPE_SHIFT 16 |
87 | #define TC_LOOKUP_HASH_TYPE_MASK 0xff0000L; |
88 | #define TC_LOOKUP_FLAGS_SHIFT 8 |
89 | #define TC_LOOKUP_FLAGS_MASK 0xff00L |
90 | #define TC_LOOKUP_RESULT_SHIFT 0 |
91 | #define TC_LOOKUP_RESULT_MASK 0xffL |
92 | |
93 | #define TC_LOOKUP_FOUND 1 |
94 | |
95 | #endif /* _KERN_TRUSTCACHE_H */ |
96 | |