2019-08-18 05:31:09 +00:00
|
|
|
set(srcs
|
2019-06-21 06:29:32 +00:00
|
|
|
"src/bootloader_common.c"
|
2020-07-08 08:42:50 +00:00
|
|
|
"src/bootloader_common_loader.c"
|
|
|
|
"src/bootloader_clock_init.c"
|
2019-06-21 06:29:32 +00:00
|
|
|
"src/bootloader_flash.c"
|
2020-02-03 10:12:32 +00:00
|
|
|
"src/bootloader_mem.c"
|
2019-06-21 06:29:32 +00:00
|
|
|
"src/bootloader_random.c"
|
2020-05-21 07:09:27 +00:00
|
|
|
"src/bootloader_random_${IDF_TARGET}.c"
|
2019-06-21 06:29:32 +00:00
|
|
|
"src/bootloader_utility.c"
|
|
|
|
"src/esp_image_format.c"
|
2020-03-11 17:48:56 +00:00
|
|
|
"src/flash_encrypt.c"
|
2021-01-25 20:27:03 +00:00
|
|
|
"src/secure_boot.c"
|
2019-06-21 06:29:32 +00:00
|
|
|
"src/flash_partitions.c"
|
2019-08-08 03:44:24 +00:00
|
|
|
"src/flash_qio_mode.c"
|
2019-08-09 05:26:49 +00:00
|
|
|
"src/bootloader_flash_config_${IDF_TARGET}.c"
|
2019-10-02 17:19:26 +00:00
|
|
|
"src/bootloader_efuse_${IDF_TARGET}.c"
|
2019-08-08 03:44:24 +00:00
|
|
|
)
|
2018-01-12 02:49:13 +00:00
|
|
|
|
2019-05-10 02:53:08 +00:00
|
|
|
if(BOOTLOADER_BUILD)
|
2019-04-28 07:38:23 +00:00
|
|
|
set(include_dirs "include" "include_bootloader")
|
2019-11-05 13:42:43 +00:00
|
|
|
set(priv_requires micro-ecc spi_flash efuse)
|
2019-08-08 03:44:24 +00:00
|
|
|
list(APPEND srcs
|
2020-02-24 19:51:41 +00:00
|
|
|
"src/bootloader_init.c"
|
2020-07-08 08:42:50 +00:00
|
|
|
"src/bootloader_clock_loader.c"
|
2020-04-30 13:30:15 +00:00
|
|
|
"src/bootloader_console.c"
|
|
|
|
"src/bootloader_console_loader.c"
|
2020-07-08 08:42:50 +00:00
|
|
|
"src/bootloader_panic.c"
|
2020-02-24 19:51:41 +00:00
|
|
|
"src/${IDF_TARGET}/bootloader_sha.c"
|
|
|
|
"src/${IDF_TARGET}/flash_encrypt.c"
|
|
|
|
"src/${IDF_TARGET}/bootloader_${IDF_TARGET}.c"
|
|
|
|
)
|
2020-08-08 12:15:27 +00:00
|
|
|
list(APPEND priv_requires hal)
|
2018-01-12 02:49:13 +00:00
|
|
|
else()
|
2019-08-08 03:44:24 +00:00
|
|
|
list(APPEND srcs
|
2020-02-24 19:51:41 +00:00
|
|
|
"src/idf/bootloader_sha.c")
|
2019-04-28 07:38:23 +00:00
|
|
|
set(include_dirs "include")
|
|
|
|
set(priv_include_dirs "include_bootloader")
|
2021-03-05 14:22:29 +00:00
|
|
|
set(priv_requires spi_flash mbedtls efuse app_update)
|
2018-01-12 02:49:13 +00:00
|
|
|
endif()
|
|
|
|
|
2021-03-05 14:22:29 +00:00
|
|
|
if(BOOTLOADER_BUILD)
|
|
|
|
if(CONFIG_SECURE_SIGNED_ON_BOOT)
|
|
|
|
if(CONFIG_SECURE_SIGNED_APPS_ECDSA_SCHEME)
|
|
|
|
list(APPEND srcs "src/secure_boot_v1/secure_boot_signatures_bootloader.c")
|
|
|
|
endif()
|
|
|
|
|
|
|
|
if(CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME)
|
|
|
|
list(APPEND srcs "src/secure_boot_v2/secure_boot_signatures_bootloader.c")
|
|
|
|
endif()
|
|
|
|
endif()
|
|
|
|
else()
|
|
|
|
if(CONFIG_SECURE_SIGNED_ON_UPDATE)
|
|
|
|
if(CONFIG_SECURE_SIGNED_APPS_ECDSA_SCHEME)
|
|
|
|
list(APPEND srcs "src/secure_boot_v1/secure_boot_signatures_app.c")
|
|
|
|
endif()
|
|
|
|
|
|
|
|
if(CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME)
|
|
|
|
list(APPEND srcs "src/secure_boot_v2/secure_boot_signatures_app.c")
|
|
|
|
endif()
|
2020-02-24 19:51:41 +00:00
|
|
|
endif()
|
|
|
|
endif()
|
|
|
|
|
|
|
|
if(CONFIG_SECURE_BOOT AND BOOTLOADER_BUILD)
|
|
|
|
list(APPEND srcs
|
|
|
|
"src/${IDF_TARGET}/secure_boot.c")
|
|
|
|
endif()
|
|
|
|
|
2019-08-08 03:44:24 +00:00
|
|
|
set(requires soc) #unfortunately the header directly uses SOC registers
|
2018-10-19 19:02:55 +00:00
|
|
|
|
2019-04-28 07:38:23 +00:00
|
|
|
idf_component_register(SRCS "${srcs}"
|
|
|
|
INCLUDE_DIRS "${include_dirs}"
|
|
|
|
PRIV_INCLUDE_DIRS "${priv_include_dirs}"
|
|
|
|
REQUIRES "${requires}"
|
2019-05-09 02:25:08 +00:00
|
|
|
PRIV_REQUIRES "${priv_requires}")
|
|
|
|
|
2020-02-24 19:51:41 +00:00
|
|
|
if(CONFIG_SECURE_SIGNED_APPS AND (CONFIG_SECURE_BOOT_V1_ENABLED OR CONFIG_SECURE_SIGNED_APPS_ECDSA_SCHEME))
|
2019-10-29 01:46:09 +00:00
|
|
|
if(BOOTLOADER_BUILD)
|
|
|
|
# Whether CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES or not, we need verification key to embed
|
|
|
|
# in the library.
|
|
|
|
if(CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES)
|
|
|
|
# We generate the key from the signing key. The signing key is passed from the main project.
|
|
|
|
get_filename_component(secure_boot_signing_key
|
|
|
|
"${SECURE_BOOT_SIGNING_KEY}"
|
|
|
|
ABSOLUTE BASE_DIR "${project_dir}")
|
|
|
|
get_filename_component(secure_boot_verification_key
|
|
|
|
"signature_verification_key.bin"
|
|
|
|
ABSOLUTE BASE_DIR "${CMAKE_CURRENT_BINARY_DIR}")
|
|
|
|
add_custom_command(OUTPUT "${secure_boot_verification_key}"
|
|
|
|
COMMAND ${ESPSECUREPY}
|
2019-05-09 02:25:08 +00:00
|
|
|
extract_public_key --keyfile "${secure_boot_signing_key}"
|
|
|
|
"${secure_boot_verification_key}"
|
2019-10-29 01:46:09 +00:00
|
|
|
DEPENDS ${secure_boot_signing_key}
|
|
|
|
VERBATIM)
|
|
|
|
else()
|
|
|
|
# We expect to 'inherit' the verification key passed from main project.
|
|
|
|
get_filename_component(secure_boot_verification_key
|
|
|
|
${SECURE_BOOT_VERIFICATION_KEY}
|
|
|
|
ABSOLUTE BASE_DIR "${project_dir}")
|
|
|
|
endif()
|
|
|
|
else() # normal app build
|
|
|
|
idf_build_get_property(project_dir PROJECT_DIR)
|
|
|
|
|
|
|
|
if(CONFIG_SECURE_BOOT_VERIFICATION_KEY)
|
|
|
|
# verification-only build supplies verification key
|
|
|
|
set(secure_boot_verification_key ${CONFIG_SECURE_BOOT_VERIFICATION_KEY})
|
|
|
|
get_filename_component(secure_boot_verification_key
|
|
|
|
${secure_boot_verification_key}
|
|
|
|
ABSOLUTE BASE_DIR "${project_dir}")
|
|
|
|
else()
|
|
|
|
# sign at build time, extracts key from signing key
|
|
|
|
set(secure_boot_verification_key "${CMAKE_BINARY_DIR}/signature_verification_key.bin")
|
|
|
|
get_filename_component(secure_boot_signing_key
|
|
|
|
${CONFIG_SECURE_BOOT_SIGNING_KEY}
|
|
|
|
ABSOLUTE BASE_DIR "${project_dir}")
|
|
|
|
|
|
|
|
add_custom_command(OUTPUT "${secure_boot_verification_key}"
|
|
|
|
COMMAND ${ESPSECUREPY}
|
|
|
|
extract_public_key --keyfile "${secure_boot_signing_key}"
|
|
|
|
"${secure_boot_verification_key}"
|
|
|
|
WORKING_DIRECTORY ${project_dir}
|
|
|
|
DEPENDS ${secure_boot_signing_key}
|
|
|
|
VERBATIM)
|
|
|
|
endif()
|
2018-10-19 19:02:55 +00:00
|
|
|
endif()
|
2018-01-12 02:49:13 +00:00
|
|
|
|
2019-10-29 01:46:09 +00:00
|
|
|
# Embed the verification key in the binary (app & bootloader)
|
|
|
|
#
|
|
|
|
target_add_binary_data(${COMPONENT_LIB} "${secure_boot_verification_key}" "BINARY"
|
|
|
|
RENAME_TO signature_verification_key_bin)
|
2019-05-09 02:25:08 +00:00
|
|
|
set_property(DIRECTORY "${CMAKE_CURRENT_SOURCE_DIR}"
|
|
|
|
APPEND PROPERTY ADDITIONAL_MAKE_CLEAN_FILES
|
|
|
|
"${secure_boot_verification_key}")
|
|
|
|
endif()
|
2020-07-08 08:42:50 +00:00
|
|
|
|
|
|
|
if(BOOTLOADER_BUILD)
|
|
|
|
target_link_libraries(${COMPONENT_LIB} INTERFACE "-u abort")
|
|
|
|
endif()
|