1/*
2 * Copyright (c) 2015, ARM Limited and Contributors. All rights reserved.
3 *
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions are met:
6 *
7 * Redistributions of source code must retain the above copyright notice, this
8 * list of conditions and the following disclaimer.
9 *
10 * Redistributions in binary form must reproduce the above copyright notice,
11 * this list of conditions and the following disclaimer in the documentation
12 * and/or other materials provided with the distribution.
13 *
14 * Neither the name of ARM nor the names of its contributors may be used
15 * to endorse or promote products derived from this software without specific
16 * prior written permission.
17 *
18 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
19 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
22 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
23 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
24 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
25 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
26 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28 * POSSIBILITY OF SUCH DAMAGE.
29 */
30
31#include "tbb_cert.h"
32#include "tbb_key.h"
33
34/*
35 * Certificates used in the chain of trust
36 *
37 * The order of the certificates must follow the enumeration specified in
38 * tbb_cert.h. All certificates are self-signed.
39 */
40cert_t certs[NUM_CERTIFICATES] = {
41	{
42		.id = BL2_CERT,
43		.fn = NULL,
44		.cn = "BL2 Certificate",
45		.key = &keys[ROT_KEY],
46		.issuer = &certs[BL2_CERT],
47	},
48	{
49		.id = TRUSTED_KEY_CERT,
50		.fn = NULL,
51		.cn = "Trusted Key Certificate",
52		.key = &keys[ROT_KEY],
53		.issuer = &certs[TRUSTED_KEY_CERT],
54	},
55	{
56		.id = BL30_KEY_CERT,
57		.fn = NULL,
58		.cn = "BL3-0 Key Certificate",
59		.key = &keys[TRUSTED_WORLD_KEY],
60		.issuer = &certs[BL30_KEY_CERT],
61	},
62	{
63		.id = BL30_CERT,
64		.fn = NULL,
65		.cn = "BL3-0 Content Certificate",
66		.key = &keys[BL30_KEY],
67		.issuer = &certs[BL30_CERT],
68	},
69	{
70		.id = BL31_KEY_CERT,
71		.fn = NULL,
72		.cn = "BL3-1 Key Certificate",
73		.key = &keys[TRUSTED_WORLD_KEY],
74		.issuer = &certs[BL31_KEY_CERT],
75	},
76	{
77		.id = BL31_CERT,
78		.fn = NULL,
79		.cn = "BL3-1 Content Certificate",
80		.key = &keys[BL31_KEY],
81		.issuer = &certs[BL31_CERT],
82	},
83	{
84		.id = BL32_KEY_CERT,
85		.fn = NULL,
86		.cn = "BL3-2 Key Certificate",
87		.key = &keys[TRUSTED_WORLD_KEY],
88		.issuer = &certs[BL32_KEY_CERT],
89	},
90	{
91		.id = BL32_CERT,
92		.fn = NULL,
93		.cn = "BL3-2 Content Certificate",
94		.key = &keys[BL32_KEY],
95		.issuer = &certs[BL32_CERT],
96	},
97	{
98		.id = BL33_KEY_CERT,
99		.fn = NULL,
100		.cn = "BL3-3 Key Certificate",
101		.key = &keys[NON_TRUSTED_WORLD_KEY],
102		.issuer = &certs[BL33_KEY_CERT],
103	},
104	{
105		.id = BL33_CERT,
106		.fn = NULL,
107		.cn = "BL3-3 Content Certificate",
108		.key = &keys[BL33_KEY],
109		.issuer = &certs[BL33_CERT],
110	}
111};
112