wolfBoot/test-app/wolfcrypt_support.c

325 lines
11 KiB
C

/* wolfcrypt_support.c
*
* Support infrastructure for wolfCrypt test and benchmark
*
* Copyright (C) 2026 wolfSSL Inc.
*
* This file is part of wolfBoot.
*
* wolfBoot is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* wolfBoot is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
*/
#include <stdint.h>
#include <wolfssl/wolfcrypt/settings.h>
#include <wolfssl/wolfcrypt/types.h>
#if defined(WOLFCRYPT_TEST) || defined(WOLFCRYPT_BENCHMARK)
/* ========== TIME FUNCTIONS ========== */
/*
* Time implementation strategy:
* 1. If WOLFCRYPT_SECURE_MODE - use secure world API
* 2. If target has SysTick/timer - use hardware timer
* 3. Fallback - simple counter (not accurate for benchmarks)
*/
#if defined(WOLFCRYPT_SECURE_MODE)
/* Use secure mode API for time */
#include "wolfboot/wc_secure.h"
#elif defined(TARGET_va416x0)
/* Use Vorago SDK HAL_time_ms (incremented by SysTick_Handler every 1ms) */
extern volatile uint64_t HAL_time_ms;
#elif defined(TARGET_lpc55s69)
extern volatile uint64_t SysTick_time_ms;
#elif defined(TARGET_imx95_m7)
/* Cortex-M7 DWT cycle counter. Exact, free to read, and needs no
* peripheral - which matters here because the M7 has no console UART
* routed on this carrier.
*
* IMX95_M7_HZ is a build-time constant, not a run-time reading: the M7
* clock is owned by the System Manager on the M33 and the core cannot
* query it without an SCMI round trip. 800 MHz is what this board's
* clk_summary reports ("m7 800000000"); override with -DIMX95_M7_HZ if the
* System Manager is configured differently, or every reported figure
* scales by the ratio.
*
* CYCCNT is 32 bits and wraps every ~5.4 s at that rate, and the wrap
* accounting below can only recover one wrap per read. my_time() alone
* does not read often enough to guarantee that - it is called only when
* wolfCrypt validates a certificate date - so app_imx95_m7.c drives
* imx95_m7_cyc_sample() from SysTick to keep the invariant true. */
#include "hal/imx95_m7.h"
#ifndef IMX95_M7_HZ
#define IMX95_M7_HZ 800000000ULL
#endif
static uint64_t m7_cyc_hi = 0;
static uint32_t m7_cyc_last = 0;
static int m7_cyc_inited = 0;
static uint64_t m7_start_ticks = 0;
/* Reached from both thread and interrupt context, so the wrap accounting
* is a critical section. PRIMASK is saved and restored rather than
* unconditionally re-enabled, since the caller may already be masked. */
static uint64_t m7_get_ticks(void)
{
uint32_t now, primask;
uint64_t ticks;
__asm__ volatile ("mrs %0, primask" : "=r"(primask));
__asm__ volatile ("cpsid i" ::: "memory");
if (!m7_cyc_inited) {
imx95_dwt_init();
m7_cyc_hi = 0;
m7_cyc_last = 0;
m7_cyc_inited = 1;
}
now = DWT_CYCCNT;
if (now < m7_cyc_last)
m7_cyc_hi += 0x100000000ULL; /* wrapped since last read */
m7_cyc_last = now;
ticks = m7_cyc_hi + now;
if ((primask & 1U) == 0U)
__asm__ volatile ("cpsie i" ::: "memory");
return ticks;
}
/* Called from the app's SysTick handler; see app_imx95_m7.c. */
void imx95_m7_cyc_sample(void)
{
(void)m7_get_ticks();
}
#elif defined(TARGET_nxp_t2080) || defined(TARGET_nxp_t1024)
/* PPC time base register for accurate timing (e6500). */
static uint32_t ppc_tb_hz = 0;
static unsigned long long ppc_start_ticks = 0;
static unsigned long long ppc_get_ticks(void)
{
unsigned long hi, lo, tmp;
__asm__ volatile (
"1: mftbu %0\n"
" mftb %1\n"
" mftbu %2\n"
" cmpw %0, %2\n"
" bne 1b\n"
: "=r"(hi), "=r"(lo), "=r"(tmp)
);
return ((unsigned long long)hi << 32) | lo;
}
static uint32_t ppc_get_timebase_hz(void)
{
/* CoreNet (e6500): platform PLL ratio in RCWSR0 (DCFG/GUTS + 0x100),
* bits (RCWSR0 >> 25) & 0x1f (U-Boot mpc85xx/speed.c). Platform clock =
* SYSCLK * ratio; time base = platform_clock / 16 (TBCLK_DIV = 16).
* CCSRBAR is board-relocated: CW VPX3-152 uses 0xEF000000; reading the
* RDB default 0xFE000000 there is unmapped (0xFFFFFFFF -> ratio 31). */
#ifdef BOARD_CW_VPX3152
uintptr_t ccsr = 0xEF000000UL;
#else
uintptr_t ccsr = 0xFE000000UL;
#endif
volatile uint32_t *rcwsr0 = (volatile uint32_t *)(ccsr + 0xE0100UL);
uint32_t plat_ratio = ((*rcwsr0) >> 25) & 0x1FU;
#if defined(BOARD_NAII_68PPC2) || defined(TARGET_nxp_t1024)
uint32_t sys_clk = 100000000; /* 100 MHz */
#else
uint32_t sys_clk = 66666667; /* 66.66 MHz */
#endif
return (sys_clk * plat_ratio) / 16U;
}
#elif defined(TARGET_nxp_ls1028a)
/* ARMv8 generic system counter (enabled by the wolfBoot HAL). */
static unsigned long long a64_tb_hz = 0;
static unsigned long long a64_start_ticks = 0;
static unsigned long long a64_get_ticks(void)
{
unsigned long long v;
__asm__ volatile ("mrs %0, cntpct_el0" : "=r"(v));
return v;
}
static unsigned long long a64_get_hz(void)
{
unsigned long long v;
__asm__ volatile ("mrs %0, cntfrq_el0" : "=r"(v));
/* wolfBoot programs CNTFRQ_EL0 from CNTFID0; fall back to the 25 MHz
* LS1028A default if it reads zero (matches now_ms). */
return v ? v : 25000000ULL;
}
#elif defined(TARGET_mpfs250)
/* PolarFire SoC RISC-V timer. Mirrors hal_get_timer() in src/boot_riscv.c:
* - S-mode under stock HSS: the 'time' CSR (CLINT MTIME) runs at
* RISCV_SMODE_TIMER_FREQ (1 MHz), so timing is accurate.
* - M-mode (no HSS): the 'time'/'cycle' user CSRs trap on the E51; read
* the machine 'mcycle' counter (CPU clock) instead. */
#include "../hal/riscv.h"
#ifndef RISCV_SMODE_TIMER_FREQ
/* M-mode: mcycle counts the CPU clock (MSS_CPU_CLK, 600 MHz). */
#define RISCV_SMODE_TIMER_FREQ 600000000UL
#endif
static uint64_t mpfs_start_ticks = 0;
static uint64_t mpfs_get_ticks(void)
{
#ifdef WOLFBOOT_RISCV_MMODE
return (uint64_t)csr_read(mcycle);
#else
return (uint64_t)csr_read(time);
#endif
}
#else
/* Simple tick counter fallback */
static volatile unsigned int tick_counter = 0;
#endif
/* my_time() - Used by wolfCrypt ASN.c for certificate time checking
* Returns: Current time in seconds since epoch (or counter value)
*/
unsigned long my_time(unsigned long* timer)
{
#if defined(WOLFCRYPT_SECURE_MODE)
/* Get time from secure world */
unsigned long t = wolfBoot_nsc_get_time();
if (timer) *timer = t;
return t;
#elif defined(TARGET_va416x0)
unsigned long t = (unsigned long)(HAL_time_ms / 1000);
if (timer) *timer = t;
return t;
#elif defined(TARGET_lpc55s69)
unsigned long t = (unsigned long)(SysTick_time_ms / 1000);
if (timer) *timer = t;
return t;
#elif defined(TARGET_imx95_m7)
{
unsigned long t = (unsigned long)(m7_get_ticks() / IMX95_M7_HZ);
if (timer) *timer = t;
return t;
}
#elif defined(TARGET_nxp_t2080) || defined(TARGET_nxp_t1024)
if (ppc_tb_hz == 0)
ppc_tb_hz = ppc_get_timebase_hz();
{
unsigned long t = (unsigned long)(ppc_get_ticks() / ppc_tb_hz);
if (timer) *timer = t;
return t;
}
#elif defined(TARGET_nxp_ls1028a)
if (a64_tb_hz == 0)
a64_tb_hz = a64_get_hz();
{
unsigned long t = (unsigned long)(a64_get_ticks() / a64_tb_hz);
if (timer) *timer = t;
return t;
}
#elif defined(TARGET_mpfs250)
unsigned long t = (unsigned long)(mpfs_get_ticks() / RISCV_SMODE_TIMER_FREQ);
if (timer) *timer = t;
return t;
#else
/* Simple incrementing counter */
tick_counter++;
if (timer) *timer = tick_counter;
return tick_counter;
#endif
}
#ifdef WOLFCRYPT_BENCHMARK
/* current_time() - Used by wolfCrypt benchmark tool for timing measurements
* Parameter: reset - if non-zero, reset the timer
* Returns: Current time in seconds (floating point)
*/
double current_time(int reset)
{
#if defined(WOLFCRYPT_SECURE_MODE)
return wolfBoot_nsc_current_time(reset);
#elif defined(TARGET_va416x0)
(void)reset;
/* Use Vorago SDK SysTick-based millisecond counter */
return (double)HAL_time_ms / 1000.0;
#elif defined(TARGET_lpc55s69)
(void)reset;
return (double)SysTick_time_ms / 1000.0;
#elif defined(TARGET_imx95_m7)
/* Take a new origin rather than zeroing the counter: my_time() shares it
* and the benchmark resets once per algorithm, which would otherwise walk
* wolfCrypt's notion of wall-clock time backwards dozens of times a run. */
if (reset)
m7_start_ticks = m7_get_ticks();
return (double)(m7_get_ticks() - m7_start_ticks) / (double)IMX95_M7_HZ;
#elif defined(TARGET_nxp_t2080) || defined(TARGET_nxp_t1024)
if (ppc_tb_hz == 0)
ppc_tb_hz = ppc_get_timebase_hz();
if (reset)
ppc_start_ticks = ppc_get_ticks();
return (double)(ppc_get_ticks() - ppc_start_ticks) / (double)ppc_tb_hz;
#elif defined(TARGET_nxp_ls1028a)
if (a64_tb_hz == 0)
a64_tb_hz = a64_get_hz();
if (reset)
a64_start_ticks = a64_get_ticks();
return (double)(a64_get_ticks() - a64_start_ticks) / (double)a64_tb_hz;
#elif defined(TARGET_mpfs250)
if (reset)
mpfs_start_ticks = mpfs_get_ticks();
return (double)(mpfs_get_ticks() - mpfs_start_ticks) / (double)RISCV_SMODE_TIMER_FREQ;
#else
/* Simple counter-based timing */
if (reset)
tick_counter = 0;
else
tick_counter++;
return (double)tick_counter;
#endif
}
#endif /* WOLFCRYPT_BENCHMARK */
/* ========== RNG SEED FUNCTIONS ========== */
/*
* RNG seed generation strategy:
* 1. If WOLFCRYPT_SECURE_MODE - use secure TRNG
* 2. If target has TRNG - use hardware random
* 3. Fallback - pseudo-random based on time (NOT cryptographically secure)
*/
/* Simple incrementing RNG for testing (not cryptographically secure).
* Fixed non-zero seed for deterministic test/benchmark results. */
static uint32_t test_rng_counter = 0x12345678;
/* my_rng_seed_gen() - Generate random seed/data for test/benchmark
* This is NOT cryptographically secure - only for testing!
* Returns: 0 on success
*/
int my_rng_seed_gen(unsigned char* output, unsigned int sz)
{
unsigned int i;
for (i = 0; i < sz; i++) {
if ((i % 4) == 0) {
test_rng_counter++;
}
output[i] = (unsigned char)(test_rng_counter >> ((i % 4) * 8));
}
return 0;
}
#endif /* WOLFCRYPT_TEST || WOLFCRYPT_BENCHMARK */