feat(doe): add PCIe DOE tests
This patch adds PCIe DOE tests for
- DOE discovery protocol
- SPDM get version
To build this test suite use 'TEST=pcie-doe'
option.
The spdm.h is imported from https://github.com/DMTF/libspdm
project.
Change-Id: I8db1048d01b4f8061d8a4ddccc198159ed61e6b7
Signed-off-by: AlexeiFedorov <Alexei.Fedorov@arm.com>
diff --git a/include/lib/spdm/spdm.h b/include/lib/spdm/spdm.h
new file mode 100644
index 0000000..9e41c52
--- /dev/null
+++ b/include/lib/spdm/spdm.h
@@ -0,0 +1,1226 @@
+/**
+ * Copyright Notice:
+ * Copyright 2021-2024 DMTF. All rights reserved.
+ * License: BSD 3-Clause License. For full text see link: https://github.com/DMTF/libspdm/blob/main/LICENSE.md
+ **/
+
+/** @file
+ * Definitions of DSP0274 Security Protocol & data Model Specification (SPDM)
+ * version 1.2.0 in Distributed Management Task Force (DMTF).
+ **/
+
+#ifndef SPDM_H
+#define SPDM_H
+
+#pragma pack(1)
+
+/* 4 means SPDM spec 1.0, 1.1, 1.2, 1.3 */
+#define SPDM_MAX_VERSION_COUNT 4
+#define SPDM_MAX_SLOT_COUNT 8
+#define SPDM_MAX_OPAQUE_DATA_SIZE 1024
+#define SPDM_MAX_CSR_TRACKING_TAG 7
+/* MeasurementRecordLength is 3 bytes. */
+#define SPDM_MAX_MEASUREMENT_RECORD_LENGTH 0xFFFFFF
+
+#define SPDM_NONCE_SIZE 32
+#define SPDM_RANDOM_DATA_SIZE 32
+#define SPDM_REQ_CONTEXT_SIZE 8
+
+/* SPDM response code (1.0) */
+#define SPDM_DIGESTS 0x01
+#define SPDM_CERTIFICATE 0x02
+#define SPDM_CHALLENGE_AUTH 0x03
+#define SPDM_VERSION 0x04
+#define SPDM_MEASUREMENTS 0x60
+#define SPDM_CAPABILITIES 0x61
+#define SPDM_ALGORITHMS 0x63
+#define SPDM_VENDOR_DEFINED_RESPONSE 0x7E
+#define SPDM_ERROR 0x7F
+
+/* SPDM response code (1.1) */
+#define SPDM_KEY_EXCHANGE_RSP 0x64
+#define SPDM_FINISH_RSP 0x65
+#define SPDM_PSK_EXCHANGE_RSP 0x66
+#define SPDM_PSK_FINISH_RSP 0x67
+#define SPDM_HEARTBEAT_ACK 0x68
+#define SPDM_KEY_UPDATE_ACK 0x69
+#define SPDM_ENCAPSULATED_REQUEST 0x6A
+#define SPDM_ENCAPSULATED_RESPONSE_ACK 0x6B
+#define SPDM_END_SESSION_ACK 0x6C
+
+/* SPDM response code (1.2) */
+#define SPDM_CSR 0x6D
+#define SPDM_SET_CERTIFICATE_RSP 0x6E
+#define SPDM_CHUNK_SEND_ACK 0x05
+#define SPDM_CHUNK_RESPONSE 0x06
+
+/* SPDM response code (1.3) */
+#define SPDM_SUPPORTED_EVENT_TYPES 0x62
+
+/* SPDM request code (1.0) */
+#define SPDM_GET_DIGESTS 0x81
+#define SPDM_GET_CERTIFICATE 0x82
+#define SPDM_CHALLENGE 0x83
+#define SPDM_GET_VERSION 0x84
+#define SPDM_GET_MEASUREMENTS 0xE0
+#define SPDM_GET_CAPABILITIES 0xE1
+#define SPDM_NEGOTIATE_ALGORITHMS 0xE3
+#define SPDM_VENDOR_DEFINED_REQUEST 0xFE
+#define SPDM_RESPOND_IF_READY 0xFF
+
+/* SPDM request code (1.1) */
+#define SPDM_KEY_EXCHANGE 0xE4
+#define SPDM_FINISH 0xE5
+#define SPDM_PSK_EXCHANGE 0xE6
+#define SPDM_PSK_FINISH 0xE7
+#define SPDM_HEARTBEAT 0xE8
+#define SPDM_KEY_UPDATE 0xE9
+#define SPDM_GET_ENCAPSULATED_REQUEST 0xEA
+#define SPDM_DELIVER_ENCAPSULATED_RESPONSE 0xEB
+#define SPDM_END_SESSION 0xEC
+
+/* SPDM request code (1.2) */
+#define SPDM_GET_CSR 0xED
+#define SPDM_SET_CERTIFICATE 0xEE
+#define SPDM_CHUNK_SEND 0x85
+#define SPDM_CHUNK_GET 0x86
+
+/* SPDM request code (1.3) */
+#define SPDM_GET_SUPPORTED_EVENT_TYPES 0xE2
+
+/* SPDM message header*/
+typedef struct {
+ uint8_t spdm_version;
+ uint8_t request_response_code;
+ uint8_t param1;
+ uint8_t param2;
+} spdm_message_header_t;
+
+#define SPDM_MESSAGE_VERSION_10 0x10
+#define SPDM_MESSAGE_VERSION_11 0x11
+#define SPDM_MESSAGE_VERSION_12 0x12
+#define SPDM_MESSAGE_VERSION_13 0x13
+#define SPDM_MESSAGE_VERSION SPDM_MESSAGE_VERSION_10
+
+/* SPDM GET_VERSION request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+} spdm_get_version_request_t;
+
+
+/* SPDM GET_VERSION response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+ uint8_t reserved;
+ uint8_t version_number_entry_count;
+ /*spdm_version_number_t version_number_entry[version_number_entry_count];*/
+} spdm_version_response_t;
+
+/* SPDM VERSION structure
+ * bit[15:12] major_version
+ * bit[11:8] minor_version
+ * bit[7:4] update_version_number
+ * bit[3:0] alpha*/
+typedef uint16_t spdm_version_number_t;
+#define SPDM_VERSION_NUMBER_SHIFT_BIT 8
+
+#define SPDM_VERSION_1_2_SIGNING_PREFIX_CONTEXT "dmtf-spdm-v1.2.*"
+#define SPDM_VERSION_1_2_SIGNING_PREFIX_CONTEXT_SIZE \
+ (sizeof(SPDM_VERSION_1_2_SIGNING_PREFIX_CONTEXT) - 1)
+#define SPDM_VERSION_1_2_SIGNING_CONTEXT_SIZE 100
+
+/* SPDM GET_CAPABILITIES request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD
+ * Below field is added in 1.1.*/
+ uint8_t reserved;
+ uint8_t ct_exponent;
+ uint16_t reserved2;
+ uint32_t flags;
+ /* Below field is added in 1.2.*/
+ uint32_t data_transfer_size;
+ uint32_t max_spdm_msg_size;
+} spdm_get_capabilities_request_t;
+
+/* SPDM GET_CAPABILITIES response*/
+
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+ uint8_t reserved;
+ uint8_t ct_exponent;
+ uint16_t reserved2;
+ uint32_t flags;
+ /* Below field is added in 1.2.*/
+ uint32_t data_transfer_size;
+ uint32_t max_spdm_msg_size;
+} spdm_capabilities_response_t;
+
+#define SPDM_MIN_DATA_TRANSFER_SIZE_VERSION_12 42
+
+/* SPDM GET_CAPABILITIES request flags (1.1) */
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_CERT_CAP 0x00000002
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_CHAL_CAP 0x00000004
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_ENCRYPT_CAP 0x00000040
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MAC_CAP 0x00000080
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MUT_AUTH_CAP 0x00000100
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_KEY_EX_CAP 0x00000200
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_PSK_CAP (0x00000400 | 0x00000800)
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_PSK_CAP_REQUESTER 0x00000400
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_ENCAP_CAP 0x00001000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_HBEAT_CAP 0x00002000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_KEY_UPD_CAP 0x00004000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_HANDSHAKE_IN_THE_CLEAR_CAP 0x00008000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_PUB_KEY_ID_CAP 0x00010000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_11_MASK ( \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_CERT_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_CHAL_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_ENCRYPT_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MAC_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MUT_AUTH_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_KEY_EX_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_PSK_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_ENCAP_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_HBEAT_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_KEY_UPD_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_HANDSHAKE_IN_THE_CLEAR_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_PUB_KEY_ID_CAP)
+
+/* SPDM GET_CAPABILITIES request flags (1.2) */
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_CHUNK_CAP 0x00020000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_12_MASK ( \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_11_MASK | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_CHUNK_CAP)
+
+/* SPDM GET_CAPABILITIES request flags (1.3) */
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_EP_INFO_CAP (0x00400000 | 0x00800000)
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_EP_INFO_CAP_NO_SIG 0x00400000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_EP_INFO_CAP_SIG 0x00800000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_EVENT_CAP 0x02000000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MULTI_KEY_CAP (0x04000000 | 0x08000000)
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MULTI_KEY_CAP_ONLY 0x04000000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MULTI_KEY_CAP_NEG 0x08000000
+#define SPDM_GET_CAPABILITIES_REQUEST_FLAGS_13_MASK ( \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_12_MASK | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_EP_INFO_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_EVENT_CAP | \
+ SPDM_GET_CAPABILITIES_REQUEST_FLAGS_MULTI_KEY_CAP)
+
+/* SPDM GET_CAPABILITIES response flags (1.0) */
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CACHE_CAP 0x00000001
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CERT_CAP 0x00000002
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CHAL_CAP 0x00000004
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_CAP (0x00000008 | 0x00000010)
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_CAP_NO_SIG 0x00000008
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_CAP_SIG 0x00000010
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_FRESH_CAP 0x00000020
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_10_MASK ( \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CACHE_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CERT_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CHAL_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEAS_FRESH_CAP)
+
+/* SPDM GET_CAPABILITIES response flags (1.1) */
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ENCRYPT_CAP 0x00000040
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MAC_CAP 0x00000080
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MUT_AUTH_CAP 0x00000100
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_KEY_EX_CAP 0x00000200
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_PSK_CAP (0x00000400 | 0x00000800)
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_PSK_CAP_RESPONDER 0x00000400
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_PSK_CAP_RESPONDER_WITH_CONTEXT 0x00000800
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ENCAP_CAP 0x00001000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_HBEAT_CAP 0x00002000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_KEY_UPD_CAP 0x00004000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_HANDSHAKE_IN_THE_CLEAR_CAP 0x00008000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_PUB_KEY_ID_CAP 0x00010000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_11_MASK ( \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_10_MASK | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ENCRYPT_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MAC_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MUT_AUTH_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_KEY_EX_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_PSK_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ENCAP_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_HBEAT_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_KEY_UPD_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_HANDSHAKE_IN_THE_CLEAR_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_PUB_KEY_ID_CAP)
+
+/* SPDM GET_CAPABILITIES request flags (1.2) */
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CHUNK_CAP 0x00020000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ALIAS_CERT_CAP 0x00040000
+
+/* SPDM GET_CAPABILITIES response flags (1.2.1)*/
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_SET_CERT_CAP 0x00080000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CSR_CAP 0x00100000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CERT_INSTALL_RESET_CAP 0x00200000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_12_MASK ( \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_11_MASK | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CHUNK_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_ALIAS_CERT_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_SET_CERT_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CSR_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_CERT_INSTALL_RESET_CAP)
+
+/* SPDM GET_CAPABILITIES response flags (1.3) */
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_EP_INFO_CAP (0x00400000 | 0x00800000)
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_EP_INFO_CAP_NO_SIG 0x00400000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_EP_INFO_CAP_SIG 0x00800000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEL_CAP 0x01000000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_EVENT_CAP 0x02000000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MULTI_KEY_CAP (0x04000000 | 0x08000000)
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MULTI_KEY_CAP_ONLY 0x04000000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MULTI_KEY_CAP_NEG 0x08000000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_GET_KEY_PAIR_INFO_CAP 0x10000000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_SET_KEY_PAIR_INFO_CAP 0x20000000
+#define SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_13_MASK ( \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_12_MASK | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_EP_INFO_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MEL_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_EVENT_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_MULTI_KEY_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_GET_KEY_PAIR_INFO_CAP | \
+ SPDM_GET_CAPABILITIES_RESPONSE_FLAGS_SET_KEY_PAIR_INFO_CAP)
+
+/* SPDM NEGOTIATE_ALGORITHMS request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == Number of Algorithms Structure Tables
+ * param2 == RSVD*/
+ uint16_t length;
+ uint8_t measurement_specification;
+ /* other_params_support is added in 1.2.
+ * BIT[0:3]=opaque_data_format support
+ * BIT[4]=ResponderMultiKeyConn, added in 1.3
+ * BIT[5:7]=reserved*/
+ uint8_t other_params_support;
+ uint32_t base_asym_algo;
+ uint32_t base_hash_algo;
+ uint8_t reserved2[12];
+ uint8_t ext_asym_count;
+ uint8_t ext_hash_count;
+ uint8_t reserved3;
+ uint8_t mel_specification;
+ /*spdm_extended_algorithm_t ext_asym[ext_asym_count];
+ * spdm_extended_algorithm_t ext_hash[ext_hash_count];
+ * Below field is added in 1.1.
+ * spdm_negotiate_algorithms_struct_table_t alg_struct[param1];*/
+} spdm_negotiate_algorithms_request_t;
+
+#define SPDM_NEGOTIATE_ALGORITHMS_REQUEST_MAX_LENGTH_VERSION_10 0x40
+#define SPDM_NEGOTIATE_ALGORITHMS_REQUEST_MAX_LENGTH_VERSION_11 0x80
+#define SPDM_NEGOTIATE_ALGORITHMS_REQUEST_MAX_LENGTH_VERSION_12 0x80
+#define SPDM_NEGOTIATE_ALGORITHMS_REQUEST_MAX_EXT_ALG_COUNT_VERSION_10 0x08
+#define SPDM_NEGOTIATE_ALGORITHMS_REQUEST_MAX_EXT_ALG_COUNT_VERSION_11 0x14
+#define SPDM_NEGOTIATE_ALGORITHMS_REQUEST_MAX_EXT_ALG_COUNT_VERSION_12 0x14
+
+typedef struct {
+ uint8_t alg_type;
+ uint8_t alg_count; /* BIT[0:3]=ext_alg_count, BIT[4:7]=fixed_alg_byte_count*/
+ /*uint8_t alg_supported[fixed_alg_byte_count];
+ * uint32_t alg_external[ext_alg_count];*/
+} spdm_negotiate_algorithms_struct_table_t;
+
+#define SPDM_NEGOTIATE_ALGORITHMS_MAX_NUM_STRUCT_TABLE_ALG 4
+#define SPDM_NEGOTIATE_ALGORITHMS_STRUCT_TABLE_ALG_TYPE_DHE 2
+#define SPDM_NEGOTIATE_ALGORITHMS_STRUCT_TABLE_ALG_TYPE_AEAD 3
+#define SPDM_NEGOTIATE_ALGORITHMS_STRUCT_TABLE_ALG_TYPE_REQ_BASE_ASYM_ALG 4
+#define SPDM_NEGOTIATE_ALGORITHMS_STRUCT_TABLE_ALG_TYPE_KEY_SCHEDULE 5
+
+typedef struct {
+ uint8_t alg_type;
+ uint8_t alg_count;
+ uint16_t alg_supported;
+} spdm_negotiate_algorithms_common_struct_table_t;
+
+
+/* SPDM NEGOTIATE_ALGORITHMS request base_asym_algo/REQ_BASE_ASYM_ALG */
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_RSASSA_2048 0x00000001
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_RSAPSS_2048 0x00000002
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_RSASSA_3072 0x00000004
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_RSAPSS_3072 0x00000008
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_ECDSA_ECC_NIST_P256 0x00000010
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_RSASSA_4096 0x00000020
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_RSAPSS_4096 0x00000040
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_ECDSA_ECC_NIST_P384 0x00000080
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_ECDSA_ECC_NIST_P521 0x00000100
+
+/* SPDM NEGOTIATE_ALGORITHMS request base_asym_algo/REQ_BASE_ASYM_ALG (1.2) */
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_TPM_ALG_SM2_ECC_SM2_P256 0x00000200
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_EDDSA_ED25519 0x00000400
+#define SPDM_ALGORITHMS_BASE_ASYM_ALGO_EDDSA_ED448 0x00000800
+
+/* SPDM NEGOTIATE_ALGORITHMS request base_hash_algo */
+#define SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_SHA_256 0x00000001
+#define SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_SHA_384 0x00000002
+#define SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_SHA_512 0x00000004
+#define SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_SHA3_256 0x00000008
+#define SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_SHA3_384 0x00000010
+#define SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_SHA3_512 0x00000020
+
+/* SPDM NEGOTIATE_ALGORITHMS request base_hash_algo (1.2) */
+#define SPDM_ALGORITHMS_BASE_HASH_ALGO_TPM_ALG_SM3_256 0x00000040
+
+/* SPDM NEGOTIATE_ALGORITHMS request DHE */
+#define SPDM_ALGORITHMS_DHE_NAMED_GROUP_FFDHE_2048 0x00000001
+#define SPDM_ALGORITHMS_DHE_NAMED_GROUP_FFDHE_3072 0x00000002
+#define SPDM_ALGORITHMS_DHE_NAMED_GROUP_FFDHE_4096 0x00000004
+#define SPDM_ALGORITHMS_DHE_NAMED_GROUP_SECP_256_R1 0x00000008
+#define SPDM_ALGORITHMS_DHE_NAMED_GROUP_SECP_384_R1 0x00000010
+#define SPDM_ALGORITHMS_DHE_NAMED_GROUP_SECP_521_R1 0x00000020
+
+/* SPDM NEGOTIATE_ALGORITHMS request DHE (1.2) */
+#define SPDM_ALGORITHMS_DHE_NAMED_GROUP_SM2_P256 0x00000040
+
+/* SPDM NEGOTIATE_ALGORITHMS request AEAD */
+#define SPDM_ALGORITHMS_AEAD_CIPHER_SUITE_AES_128_GCM 0x00000001
+#define SPDM_ALGORITHMS_AEAD_CIPHER_SUITE_AES_256_GCM 0x00000002
+#define SPDM_ALGORITHMS_AEAD_CIPHER_SUITE_CHACHA20_POLY1305 0x00000004
+
+/* SPDM NEGOTIATE_ALGORITHMS request AEAD (1.2) */
+#define SPDM_ALGORITHMS_AEAD_CIPHER_SUITE_AEAD_SM4_GCM 0x00000008
+
+/* SPDM NEGOTIATE_ALGORITHMS request KEY_SCHEDULE */
+#define SPDM_ALGORITHMS_KEY_SCHEDULE_HMAC_HASH 0x00000001
+
+/* SPDM NEGOTIATE_ALGORITHMS response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == Number of Algorithms Structure Tables
+ * param2 == RSVD*/
+ uint16_t length;
+ uint8_t measurement_specification_sel;
+ /* other_params_selection is added in 1.2.
+ * BIT[0:3]=opaque_data_format select,
+ * BIT[4]=RequesterMultiKeyConnSel, added in 1.3
+ * BIT[5:7]=reserved*/
+ uint8_t other_params_selection;
+ uint32_t measurement_hash_algo;
+ uint32_t base_asym_sel;
+ uint32_t base_hash_sel;
+ uint8_t reserved2[11];
+ uint8_t mel_specification_sel;
+ uint8_t ext_asym_sel_count;
+ uint8_t ext_hash_sel_count;
+ uint16_t reserved3;
+ /*spdm_extended_algorithm_t ext_asym_sel[ext_asym_sel_count];
+ * spdm_extended_algorithm_t ext_hash_sel[ext_hash_sel_count];
+ * Below field is added in 1.1.
+ * spdm_negotiate_algorithms_struct_table_t alg_struct[param1];*/
+} spdm_algorithms_response_t;
+
+/* SPDM NEGOTIATE_ALGORITHMS response measurement_hash_algo */
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_RAW_BIT_STREAM_ONLY 0x00000001
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_TPM_ALG_SHA_256 0x00000002
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_TPM_ALG_SHA_384 0x00000004
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_TPM_ALG_SHA_512 0x00000008
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_TPM_ALG_SHA3_256 0x00000010
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_TPM_ALG_SHA3_384 0x00000020
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_TPM_ALG_SHA3_512 0x00000040
+
+/* SPDM NEGOTIATE_ALGORITHMS response measurement_hash_algo (1.2) */
+#define SPDM_ALGORITHMS_MEASUREMENT_HASH_ALGO_TPM_ALG_SM3_256 0x00000080
+
+/* SPDM Opaque Data Format (1.2) */
+#define SPDM_ALGORITHMS_OPAQUE_DATA_FORMAT_NONE 0x0
+#define SPDM_ALGORITHMS_OPAQUE_DATA_FORMAT_0 0x1
+#define SPDM_ALGORITHMS_OPAQUE_DATA_FORMAT_1 0x2
+#define SPDM_ALGORITHMS_OPAQUE_DATA_FORMAT_MASK 0xF
+/* SPDM Multi-Connection Selection (1.3) */
+#define SPDM_ALGORITHMS_MULTI_KEY_CONN 0x10
+
+/* SPDM Opaque Data Format 1 (1.2) */
+typedef struct {
+ uint8_t total_elements;
+ uint8_t reserved[3];
+ /*opaque_element_table_t opaque_list[];*/
+} spdm_general_opaque_data_table_header_t;
+
+/* SPDM extended algorithm */
+typedef struct {
+ uint8_t registry_id;
+ uint8_t reserved;
+ uint16_t algorithm_id;
+} spdm_extended_algorithm_t;
+
+/* SPDM registry_id */
+#define SPDM_REGISTRY_ID_DMTF 0x0
+#define SPDM_REGISTRY_ID_TCG 0x1
+#define SPDM_REGISTRY_ID_USB 0x2
+#define SPDM_REGISTRY_ID_PCISIG 0x3
+#define SPDM_REGISTRY_ID_IANA 0x4
+#define SPDM_REGISTRY_ID_HDBASET 0x5
+#define SPDM_REGISTRY_ID_MIPI 0x6
+#define SPDM_REGISTRY_ID_CXL 0x7
+#define SPDM_REGISTRY_ID_JEDEC 0x8
+#define SPDM_REGISTRY_ID_VESA 0x9
+#define SPDM_REGISTRY_ID_IANA_CBOR 0xa
+#define SPDM_REGISTRY_ID_MAX 0xa
+
+/* SPDM GET_DIGESTS request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+} spdm_get_digest_request_t;
+
+/* SPDM GET_DIGESTS response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD (supported_slot_mask in 1.3)
+ * param2 == slot_mask (provisioned_slot_mask in 1.3) determing slot_count
+ * cert slot state:
+ * 1) not exist: supported_slot_mask[slot_id] = 0
+ * 2) exist and empty: supported_slot_mask[slot_id] = 1 && provisioned_slot_mask[slot_id] = 0
+ * 3) exist with key: supported_slot_mask[slot_id] = 1 && provisioned_slot_mask[slot_id] = 1 && cert_model = 0
+ * 4) exist with key/cert: supported_slot_mask[slot_id] = 1 && provisioned_slot_mask[slot_id] = 1 && cert_model = !0
+ *
+ * uint8_t digest[digest_size][slot_count];
+ *
+ * Below field is added in 1.3. Present if MULTI_KEY_CONN is 1.
+ * spdm_key_pair_id_t key_pair_id[slot_count];
+ * spdm_certificate_info_t certificate_info[slot_count];
+ * spdm_key_usage_bit_mask_t key_usage_bit_mask[slot_count];*/
+} spdm_digest_response_t;
+
+typedef uint8_t spdm_key_pair_id_t;
+
+typedef uint8_t spdm_certificate_info_t;
+#define SPDM_CERTIFICATE_INFO_CERT_MODEL_MASK 0x7
+#define SPDM_CERTIFICATE_INFO_CERT_MODEL_NONE 0x0
+#define SPDM_CERTIFICATE_INFO_CERT_MODEL_DEVICE_CERT 0x1
+#define SPDM_CERTIFICATE_INFO_CERT_MODEL_ALIAS_CERT 0x2
+#define SPDM_CERTIFICATE_INFO_CERT_MODEL_GENERIC_CERT 0x3
+
+typedef uint16_t spdm_key_usage_bit_mask_t;
+#define SPDM_KEY_USAGE_BIT_MASK_KEY_EX_USE 0x1
+#define SPDM_KEY_USAGE_BIT_MASK_CHALLENGE_USE 0x2
+#define SPDM_KEY_USAGE_BIT_MASK_MEASUREMENT_USE 0x4
+#define SPDM_KEY_USAGE_BIT_MASK_ENDPOINT_INFO_USE 0x8
+#define SPDM_KEY_USAGE_BIT_MASK_STANDARDS_KEY_USE 0x4000
+#define SPDM_KEY_USAGE_BIT_MASK_VENDOR_KEY_USE 0x8000
+
+/* SPDM GET_CERTIFICATE request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == BIT[0:3]=slot_id, BIT[4:7]=RSVD
+ * param2 == Request Attribute in 1.3 */
+ uint16_t offset;
+ uint16_t length;
+} spdm_get_certificate_request_t;
+
+#define SPDM_GET_CERTIFICATE_REQUEST_SLOT_ID_MASK 0xF
+
+/* SPDM GET_CERTIFICATE request Attributes */
+#define SPDM_GET_CERTIFICATE_REQUEST_ATTRIBUTES_SLOT_SIZE_REQUESTED 0x01
+
+/* SPDM GET_CERTIFICATE response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == BIT[0:3]=slot_id, BIT[4:7]=RSVD
+ * param2 == Response Attribute in 1.3 */
+ uint16_t portion_length;
+ uint16_t remainder_length;
+ /*uint8_t cert_chain[portion_length];*/
+} spdm_certificate_response_t;
+
+#define SPDM_CERTIFICATE_RESPONSE_SLOT_ID_MASK 0xF
+
+/* SPDM CERTIFICATE response Attributes */
+#define SPDM_CERTIFICATE_RESPONSE_ATTRIBUTES_CERTIFICATE_INFO_MASK 0x7
+
+typedef struct {
+ /* Total length of the certificate chain, in bytes,
+ * including all fields in this table.*/
+
+ uint16_t length;
+ uint16_t reserved;
+
+ /* digest of the Root Certificate.
+ * Note that Root Certificate is ASN.1 DER-encoded for this digest.
+ * The hash size is determined by the SPDM device.*/
+
+ /*uint8_t root_hash[hash_size];*/
+
+ /* One or more ASN.1 DER-encoded X509v3 certificates where the first certificate is signed by the Root
+ * Certificate or is the Root Certificate itself and each subsequent certificate is signed by the preceding
+ * certificate. The last certificate is the Leaf Certificate.*/
+
+ /*uint8_t certificates[length - 4 - hash_size];*/
+} spdm_cert_chain_t;
+
+/* Maximum size, in bytes, of a certificate chain. */
+#define SPDM_MAX_CERTIFICATE_CHAIN_SIZE 65535
+
+/* SPDM CHALLENGE request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == slot_id
+ * param2 == HashType*/
+ uint8_t nonce[32];
+ /*uint8_t requester_context[SPDM_REQ_CONTEXT_SIZE]; */
+} spdm_challenge_request_t;
+
+/* SPDM CHALLENGE response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == ResponseAttribute, BIT[0:3]=slot_id, BIT[4:6]=RSVD, BIT[7]=basic_mut_auth(deprecated in 1.2)
+ * param2 == slot_mask
+ * uint8_t cert_chain_hash[digest_size];
+ * uint8_t nonce[32];
+ * uint8_t measurement_summary_hash[digest_size];
+ * uint16_t opaque_length;
+ * uint8_t opaque_data[opaque_length];
+ * uint8_t requester_context[SPDM_REQ_CONTEXT_SIZE];
+ * uint8_t signature[key_size];*/
+} spdm_challenge_auth_response_t;
+
+/* SPDM generic request measurement summary HashType */
+#define SPDM_REQUEST_NO_MEASUREMENT_SUMMARY_HASH 0
+#define SPDM_REQUEST_TCB_COMPONENT_MEASUREMENT_HASH 1
+#define SPDM_REQUEST_ALL_MEASUREMENTS_HASH 0xFF
+
+/* SPDM CHALLENGE request measurement summary HashType */
+#define SPDM_CHALLENGE_REQUEST_NO_MEASUREMENT_SUMMARY_HASH SPDM_REQUEST_NO_MEASUREMENT_SUMMARY_HASH
+#define SPDM_CHALLENGE_REQUEST_TCB_COMPONENT_MEASUREMENT_HASH \
+ SPDM_REQUEST_TCB_COMPONENT_MEASUREMENT_HASH
+#define SPDM_CHALLENGE_REQUEST_ALL_MEASUREMENTS_HASH SPDM_REQUEST_ALL_MEASUREMENTS_HASH
+
+#define SPDM_CHALLENGE_AUTH_RESPONSE_ATTRIBUTE_SLOT_ID_MASK 0xF
+#define SPDM_CHALLENGE_AUTH_RESPONSE_ATTRIBUTE_BASIC_MUT_AUTH_REQ 0x00000080 /* Deprecated in SPDM 1.2*/
+
+#define SPDM_CHALLENGE_AUTH_SIGN_CONTEXT "responder-challenge_auth signing"
+#define SPDM_CHALLENGE_AUTH_SIGN_CONTEXT_SIZE (sizeof(SPDM_CHALLENGE_AUTH_SIGN_CONTEXT) - 1)
+#define SPDM_MUT_CHALLENGE_AUTH_SIGN_CONTEXT "requester-challenge_auth signing"
+#define SPDM_MUT_CHALLENGE_AUTH_SIGN_CONTEXT_SIZE (sizeof(SPDM_MUT_CHALLENGE_AUTH_SIGN_CONTEXT) - 1)
+
+/* SPDM GET_MEASUREMENTS request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == Attributes
+ * param2 == measurement_operation*/
+ uint8_t nonce[32];
+ /* Below field is added in 1.1.*/
+ uint8_t slot_id_param; /* BIT[0:3]=slot_id, BIT[4:7]=RSVD*/
+ /*uint8_t requester_context[SPDM_REQ_CONTEXT_SIZE]; */
+} spdm_get_measurements_request_t;
+
+#define SPDM_GET_MEASUREMENTS_REQUEST_SLOT_ID_MASK 0xF
+
+/* SPDM GET_MEASUREMENTS request Attributes */
+#define SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_GENERATE_SIGNATURE 0x00000001
+#define SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_RAW_BIT_STREAM_REQUESTED 0x00000002
+#define SPDM_GET_MEASUREMENTS_REQUEST_ATTRIBUTES_NEW_MEASUREMENT_REQUESTED 0x00000004
+
+/* SPDM GET_MEASUREMENTS request measurement_operation */
+#define SPDM_GET_MEASUREMENTS_REQUEST_MEASUREMENT_OPERATION_TOTAL_NUMBER_OF_MEASUREMENTS 0
+
+/*SPDM_GET_MEASUREMENTS_REQUEST_MEASUREMENT_OPERATION_INDEX */
+#define SPDM_GET_MEASUREMENTS_REQUEST_MEASUREMENT_OPERATION_ALL_MEASUREMENTS 0xFF
+
+
+/* SPDM MEASUREMENTS block common header */
+typedef struct {
+ uint8_t index;
+ uint8_t measurement_specification;
+ uint16_t measurement_size;
+ /*uint8_t measurement[measurement_size];*/
+} spdm_measurement_block_common_header_t;
+
+#define SPDM_MEASUREMENT_SPECIFICATION_DMTF 0x01
+
+/* SPDM MEASUREMENTS block DMTF header */
+typedef struct {
+ uint8_t dmtf_spec_measurement_value_type;
+ uint16_t dmtf_spec_measurement_value_size;
+ /*uint8_t Dmtf_spec_measurement_value[dmtf_spec_measurement_value_size];*/
+} spdm_measurement_block_dmtf_header_t;
+
+typedef struct {
+ spdm_measurement_block_common_header_t measurement_block_common_header;
+ spdm_measurement_block_dmtf_header_t measurement_block_dmtf_header;
+ /*uint8_t hash_value[hash_size];*/
+} spdm_measurement_block_dmtf_t;
+
+/* SPDM MEASUREMENTS block MeasurementValueType */
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_IMMUTABLE_ROM 0
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_MUTABLE_FIRMWARE 1
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_HARDWARE_CONFIGURATION 2
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_FIRMWARE_CONFIGURATION 3
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_MEASUREMENT_MANIFEST 4
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_DEVICE_MODE 5
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_VERSION 6
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_SECURE_VERSION_NUMBER 7
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_HASH_EXTEND_MEASUREMENT 8
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_INFORMATIONAL 9
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_STRUCTURED_MEASUREMENT_MANIFEST 10
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_MASK 0x7
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_TYPE_RAW_BIT_STREAM 0x00000080
+
+/* SPDM MEASUREMENTS block index */
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_INDEX_MEASUREMENT_MANIFEST 0xFD
+#define SPDM_MEASUREMENT_BLOCK_MEASUREMENT_INDEX_DEVICE_MODE 0xFE
+
+/* SPDM MEASUREMENTS device mode */
+typedef struct {
+ uint32_t operational_mode_capabilities;
+ uint32_t operational_mode_state;
+ uint32_t device_mode_capabilities;
+ uint32_t device_mode_state;
+} spdm_measurements_device_mode_t;
+
+#define SPDM_MEASUREMENT_DEVICE_OPERATION_MODE_MANUFACTURING_MODE 0x00000001
+#define SPDM_MEASUREMENT_DEVICE_OPERATION_MODE_VALIDATION_MODE 0x00000002
+#define SPDM_MEASUREMENT_DEVICE_OPERATION_MODE_NORMAL_MODE 0x00000004
+#define SPDM_MEASUREMENT_DEVICE_OPERATION_MODE_RECOVERY_MODE 0x00000008
+#define SPDM_MEASUREMENT_DEVICE_OPERATION_MODE_RMA_MODE 0x00000010
+#define SPDM_MEASUREMENT_DEVICE_OPERATION_MODE_DECOMMISSIONED_MODE 0x00000020
+
+#define SPDM_MEASUREMENT_DEVICE_MODE_NON_INVASIVE_DEBUG_MODE_IS_ACTIVE 0x00000001
+#define SPDM_MEASUREMENT_DEVICE_MODE_INVASIVE_DEBUG_MODE_IS_ACTIVE 0x00000002
+#define SPDM_MEASUREMENT_DEVICE_MODE_NON_INVASIVE_DEBUG_MODE_HAS_BEEN_ACTIVE 0x00000004
+#define SPDM_MEASUREMENT_DEVICE_MODE_INVASIVE_DEBUG_MODE_HAS_BEEN_ACTIVE 0x00000008
+#define SPDM_MEASUREMENT_DEVICE_MODE_INVASIVE_DEBUG_MODE_HAS_BEEN_ACTIVE_AFTER_MFG 0x00000010
+
+/* SPDM MEASUREMENTS SVN */
+typedef uint64_t spdm_measurements_secure_version_number_t;
+
+/* SPDM GET_MEASUREMENTS response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == TotalNumberOfMeasurement/RSVD
+ * param2 == BIT[0:3]=slot_id, BIT[4:5]=content changed, BIT[6:7]=RSVD*/
+ uint8_t number_of_blocks;
+ uint8_t measurement_record_length[3];
+ /*uint8_t measurement_record[measurement_record_length];
+ * uint8_t nonce[32];
+ * uint16_t opaque_length;
+ * uint8_t opaque_data[opaque_length];
+ * uint8_t requester_context[SPDM_REQ_CONTEXT_SIZE];
+ * uint8_t signature[key_size];*/
+} spdm_measurements_response_t;
+
+#define SPDM_MEASUREMENTS_RESPONSE_SLOT_ID_MASK 0xF
+
+/* SPDM MEASUREMENTS content changed */
+#define SPDM_MEASUREMENTS_RESPONSE_CONTENT_CHANGE_MASK 0x30
+#define SPDM_MEASUREMENTS_RESPONSE_CONTENT_CHANGE_NO_DETECTION 0x00
+#define SPDM_MEASUREMENTS_RESPONSE_CONTENT_CHANGE_DETECTED 0x10
+#define SPDM_MEASUREMENTS_RESPONSE_CONTENT_NO_CHANGE_DETECTED 0x20
+
+#define SPDM_MEASUREMENTS_SIGN_CONTEXT "responder-measurements signing"
+#define SPDM_MEASUREMENTS_SIGN_CONTEXT_SIZE (sizeof(SPDM_MEASUREMENTS_SIGN_CONTEXT) - 1)
+
+#define SPDM_MEL_SPECIFICATION_DMTF 0x01
+
+/* SPDM ERROR response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == Error Code
+ * param2 == Error data
+ * uint8_t extended_error_data[32];*/
+} spdm_error_response_t;
+
+#define SPDM_EXTENDED_ERROR_DATA_MAX_SIZE 32
+
+/* SPDM error code */
+#define SPDM_ERROR_CODE_INVALID_REQUEST 0x01
+#define SPDM_ERROR_CODE_BUSY 0x03
+#define SPDM_ERROR_CODE_UNEXPECTED_REQUEST 0x04
+#define SPDM_ERROR_CODE_UNSPECIFIED 0x05
+#define SPDM_ERROR_CODE_UNSUPPORTED_REQUEST 0x07
+#define SPDM_ERROR_CODE_VERSION_MISMATCH 0x41
+#define SPDM_ERROR_CODE_RESPONSE_NOT_READY 0x42
+#define SPDM_ERROR_CODE_REQUEST_RESYNCH 0x43
+#define SPDM_ERROR_CODE_VENDOR_DEFINED 0xFF
+
+/* SPDM error code (1.1) */
+#define SPDM_ERROR_CODE_DECRYPT_ERROR 0x06
+#define SPDM_ERROR_CODE_REQUEST_IN_FLIGHT 0x08
+#define SPDM_ERROR_CODE_INVALID_RESPONSE_CODE 0x09
+#define SPDM_ERROR_CODE_SESSION_LIMIT_EXCEEDED 0x0A
+
+/* SPDM error code (1.2) */
+#define SPDM_ERROR_CODE_SESSION_REQUIRED 0x0B
+#define SPDM_ERROR_CODE_RESET_REQUIRED 0x0C
+#define SPDM_ERROR_CODE_RESPONSE_TOO_LARGE 0x0D
+#define SPDM_ERROR_CODE_REQUEST_TOO_LARGE 0x0E
+#define SPDM_ERROR_CODE_LARGE_RESPONSE 0x0F
+#define SPDM_ERROR_CODE_MESSAGE_LOST 0x10
+
+/* SPDM error code (1.3) */
+#define SPDM_ERROR_CODE_OPERATION_FAILED 0x44
+
+/* SPDM ResponseNotReady extended data */
+typedef struct {
+ uint8_t rd_exponent;
+ uint8_t request_code;
+ uint8_t token;
+ uint8_t rd_tm;
+} spdm_error_data_response_not_ready_t;
+
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == Error Code
+ * param2 == Error data*/
+ spdm_error_data_response_not_ready_t extend_error_data;
+} spdm_error_response_data_response_not_ready_t;
+
+/* SPDM LargeResponse extended data */
+typedef struct {
+ uint8_t handle;
+} spdm_error_data_large_response_t;
+
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == Error Code
+ * param2 == Error data*/
+ spdm_error_data_large_response_t extend_error_data;
+} spdm_error_response_large_response_t;
+
+/* SPDM RESPONSE_IF_READY request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == request_code
+ * param2 == token*/
+} spdm_response_if_ready_request_t;
+
+/* Maximum size of a vendor defined message data length
+ * limited by the length field size which is 2 bytes */
+#define SPDM_MAX_VENDOR_DEFINED_DATA_LEN 65535
+/* Maximum size of a vendor defined vendor id length
+ * limited by the length field size which is 1 byte */
+#define SPDM_MAX_VENDOR_ID_LENGTH 255
+
+/* SPDM VENDOR_DEFINED request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+ uint16_t standard_id;
+ uint8_t len;
+ /*uint8_t vendor_id[len];
+ * uint16_t payload_length;
+ * uint8_t vendor_defined_payload[payload_length];*/
+} spdm_vendor_defined_request_msg_t;
+
+/* SPDM VENDOR_DEFINED response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+ uint16_t standard_id;
+ uint8_t len;
+ /*uint8_t vendor_id[len];
+ * uint16_t payload_length;
+ * uint8_t vendor_defined_payload[payload_length];*/
+} spdm_vendor_defined_response_msg_t;
+
+/* Below command is defined in SPDM 1.1 */
+
+/* SPDM KEY_EXCHANGE request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == HashType
+ * param2 == slot_id*/
+ uint16_t req_session_id;
+ /* session_policy is added in 1.2.*/
+ uint8_t session_policy;
+ uint8_t reserved;
+ uint8_t random_data[32];
+ /*uint8_t exchange_data[D];
+ * uint16_t opaque_length;
+ * uint8_t opaque_data[opaque_length];*/
+} spdm_key_exchange_request_t;
+
+/* SPDM KEY_EXCHANGE request session_policy */
+#define SPDM_KEY_EXCHANGE_REQUEST_SESSION_POLICY_TERMINATION_POLICY_RUNTIME_UPDATE 0x00000001
+
+/* SPDM KEY_EXCHANGE request measurement summary HashType */
+#define SPDM_KEY_EXCHANGE_REQUEST_NO_MEASUREMENT_SUMMARY_HASH \
+ SPDM_REQUEST_NO_MEASUREMENT_SUMMARY_HASH
+#define SPDM_KEY_EXCHANGE_REQUEST_TCB_COMPONENT_MEASUREMENT_HASH \
+ SPDM_REQUEST_TCB_COMPONENT_MEASUREMENT_HASH
+#define SPDM_KEY_EXCHANGE_REQUEST_ALL_MEASUREMENTS_HASH SPDM_REQUEST_ALL_MEASUREMENTS_HASH
+
+/* SPDM KEY_EXCHANGE response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == heartbeat_period
+ * param2 == RSVD*/
+ uint16_t rsp_session_id;
+ uint8_t mut_auth_requested;
+ uint8_t req_slot_id_param;
+ uint8_t random_data[32];
+ /*uint8_t exchange_data[D];
+ * uint8_t measurement_summary_hash[digest_size];
+ * uint16_t opaque_length;
+ * uint8_t opaque_data[opaque_length];
+ * uint8_t signature[S];
+ * uint8_t verify_data[H];*/
+} spdm_key_exchange_response_t;
+
+/* SPDM KEY_EXCHANGE response mut_auth_requested */
+#define SPDM_KEY_EXCHANGE_RESPONSE_MUT_AUTH_REQUESTED 0x00000001
+#define SPDM_KEY_EXCHANGE_RESPONSE_MUT_AUTH_REQUESTED_WITH_ENCAP_REQUEST 0x00000002
+#define SPDM_KEY_EXCHANGE_RESPONSE_MUT_AUTH_REQUESTED_WITH_GET_DIGESTS 0x00000004
+
+#define SPDM_KEY_EXCHANGE_RESPONSE_SIGN_CONTEXT "responder-key_exchange_rsp signing"
+#define SPDM_KEY_EXCHANGE_RESPONSE_SIGN_CONTEXT_SIZE \
+ (sizeof(SPDM_KEY_EXCHANGE_RESPONSE_SIGN_CONTEXT) - 1)
+
+#define SPDM_VERSION_1_2_KEY_EXCHANGE_REQUESTER_CONTEXT "Requester-KEP-dmtf-spdm-v1.2"
+#define SPDM_VERSION_1_2_KEY_EXCHANGE_REQUESTER_CONTEXT_SIZE \
+ (sizeof(SPDM_VERSION_1_2_KEY_EXCHANGE_REQUESTER_CONTEXT) - 1)
+
+#define SPDM_VERSION_1_2_KEY_EXCHANGE_RESPONDER_CONTEXT "Responder-KEP-dmtf-spdm-v1.2"
+#define SPDM_VERSION_1_2_KEY_EXCHANGE_RESPONDER_CONTEXT_SIZE \
+ (sizeof(SPDM_VERSION_1_2_KEY_EXCHANGE_RESPONDER_CONTEXT) - 1)
+
+/* SPDM FINISH request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == signature_included
+ * param2 == req_slot_id
+ * uint8_t signature[S];
+ * uint8_t verify_data[H];*/
+} spdm_finish_request_t;
+
+/* SPDM FINISH request signature_included */
+#define SPDM_FINISH_REQUEST_ATTRIBUTES_SIGNATURE_INCLUDED 0x00000001
+
+/* SPDM FINISH response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD
+ * uint8_t verify_data[H];*/
+} spdm_finish_response_t;
+
+#define SPDM_FINISH_SIGN_CONTEXT "requester-finish signing"
+#define SPDM_FINISH_SIGN_CONTEXT_SIZE (sizeof(SPDM_FINISH_SIGN_CONTEXT) - 1)
+
+/* SPDM PSK_EXCHANGE request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == HashType
+ * param2 == RSVD/session_policy (1.2)*/
+ uint16_t req_session_id;
+ uint16_t psk_hint_length;
+ uint16_t context_length;
+ uint16_t opaque_length;
+ /*uint8_t psk_hint[psk_hint_length];
+ * uint8_t context[context_length];
+ * uint8_t opaque_data[opaque_length];*/
+} spdm_psk_exchange_request_t;
+
+/* SPDM PSK_EXCHANGE request measurement summary HashType */
+#define SPDM_PSK_EXCHANGE_REQUEST_NO_MEASUREMENT_SUMMARY_HASH \
+ SPDM_REQUEST_NO_MEASUREMENT_SUMMARY_HASH
+#define SPDM_PSK_EXCHANGE_REQUEST_TCB_COMPONENT_MEASUREMENT_HASH \
+ SPDM_REQUEST_TCB_COMPONENT_MEASUREMENT_HASH
+#define SPDM_PSK_EXCHANGE_REQUEST_ALL_MEASUREMENTS_HASH SPDM_REQUEST_ALL_MEASUREMENTS_HASH
+
+/* SPDM PSK_EXCHANGE response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == heartbeat_period
+ * param2 == RSVD*/
+ uint16_t rsp_session_id;
+ uint16_t reserved;
+ uint16_t context_length;
+ uint16_t opaque_length;
+ /*uint8_t measurement_summary_hash[digest_size];
+ * uint8_t context[context_length];
+ * uint8_t opaque_data[opaque_length];
+ * uint8_t verify_data[H];*/
+} spdm_psk_exchange_response_t;
+
+/* SPDM PSK_FINISH request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD
+ * uint8_t verify_data[H];*/
+} spdm_psk_finish_request_t;
+
+/* SPDM PSK_FINISH response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+} spdm_psk_finish_response_t;
+
+
+/* SPDM HEARTBEAT request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+} spdm_heartbeat_request_t;
+
+/* SPDM HEARTBEAT response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+} spdm_heartbeat_response_t;
+
+/* SPDM KEY_UPDATE request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == key_operation
+ * param2 == tag*/
+} spdm_key_update_request_t;
+
+/* SPDM KEY_UPDATE Operations table */
+#define SPDM_KEY_UPDATE_OPERATIONS_TABLE_UPDATE_KEY 1
+#define SPDM_KEY_UPDATE_OPERATIONS_TABLE_UPDATE_ALL_KEYS 2
+#define SPDM_KEY_UPDATE_OPERATIONS_TABLE_VERIFY_NEW_KEY 3
+
+/* SPDM KEY_UPDATE response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == key_operation
+ * param2 == tag*/
+} spdm_key_update_response_t;
+
+/* SPDM GET_ENCAPSULATED_REQUEST request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+} spdm_get_encapsulated_request_request_t;
+
+/* SPDM ENCAPSULATED_REQUEST response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == request_id
+ * param2 == RSVD
+ * uint8_t encapsulated_request[];*/
+} spdm_encapsulated_request_response_t;
+
+/* SPDM DELIVER_ENCAPSULATED_RESPONSE request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == request_id
+ * param2 == RSVD
+ * uint8_t encapsulated_response[];*/
+} spdm_deliver_encapsulated_response_request_t;
+
+/* SPDM ENCAPSULATED_RESPONSE_ACK response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == request_id
+ * param2 == payload_type*/
+
+ /* below 4 bytes are added in 1.2.*/
+ uint8_t ack_request_id;
+ uint8_t reserved[3];
+
+ /*uint8_t encapsulated_request[];*/
+} spdm_encapsulated_response_ack_response_t;
+
+/* SPDM ENCAPSULATED_RESPONSE_ACK_RESPONSE payload Type */
+#define SPDM_ENCAPSULATED_RESPONSE_ACK_RESPONSE_PAYLOAD_TYPE_ABSENT 0
+#define SPDM_ENCAPSULATED_RESPONSE_ACK_RESPONSE_PAYLOAD_TYPE_PRESENT 1
+#define SPDM_ENCAPSULATED_RESPONSE_ACK_RESPONSE_PAYLOAD_TYPE_REQ_SLOT_NUMBER 2
+
+/* SPDM END_SESSION request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == end_session_request_attributes
+ * param2 == RSVD*/
+} spdm_end_session_request_t;
+
+/* SPDM END_SESSION request Attributes */
+#define SPDM_END_SESSION_REQUEST_ATTRIBUTES_PRESERVE_NEGOTIATED_STATE_CLEAR 0x00000001
+
+/* SPDM END_SESSION response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+} spdm_end_session_response_t;
+
+/* SPDM SET_CERTIFICATE request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == BIT[0:3]=slot_id, BIT[4:7]=RSVD
+ * param2 == RSVD
+ * param1 and param2 are updated in 1.3
+ * param1 == Request attributes, BIT[0:3]=slot_id, BIT[4:6]=SetCertModel, BIT[7]=Erase
+ * param2 == KeyPairID
+ * void * cert_chain*/
+} spdm_set_certificate_request_t;
+
+#define SPDM_SET_CERTIFICATE_REQUEST_SLOT_ID_MASK 0xF
+
+/* SPDM SET_CERTIFICATE request Attributes */
+#define SPDM_SET_CERTIFICATE_REQUEST_ATTRIBUTES_CERT_MODEL_MASK 0x70
+#define SPDM_SET_CERTIFICATE_REQUEST_ATTRIBUTES_CERT_MODEL_OFFSET 4
+#define SPDM_SET_CERTIFICATE_REQUEST_ATTRIBUTES_ERASE 0x80
+
+/* SPDM SET_CERTIFICATE_RSP response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == BIT[0:3]=slot_id, BIT[4:7]=RSVD
+ * param2 == RSVD*/
+} spdm_set_certificate_response_t;
+
+#define SPDM_SET_CERTIFICATE_RESPONSE_SLOT_ID_MASK 0xF
+
+/* SPDM GET_CSR request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == key_pair_id in 1.3
+ * param2 == Request Attribute in 1.3*/
+ uint16_t requester_info_length;
+ uint16_t opaque_data_length;
+ /* uint8_t RequesterInfo[requester_info_length];
+ * uint8_t opaque_data[opaque_data_length]; */
+} spdm_get_csr_request_t;
+
+/* SPDM GET_CSR request Attributes */
+#define SPDM_GET_CSR_REQUEST_ATTRIBUTES_CERT_MODEL_MASK 0x07
+#define SPDM_GET_CSR_REQUEST_ATTRIBUTES_CSR_TRACKING_TAG_MASK 0x38
+#define SPDM_GET_CSR_REQUEST_ATTRIBUTES_CSR_TRACKING_TAG_OFFSET 3
+#define SPDM_GET_CSR_REQUEST_ATTRIBUTES_OVERWRITE 0x80
+#define SPDM_GET_CSR_REQUEST_ATTRIBUTES_MAX_CSR_CERT_MODEL 4
+
+/* Maximum size, in bytes, of a CSR. */
+#define SPDM_MAX_CSR_SIZE 65535
+
+/* SPDM CSR response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD*/
+ uint16_t csr_length;
+ uint16_t reserved;
+} spdm_csr_response_t;
+
+/* SPDM CHUNK_SEND request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 - Request Attributes
+ * param2 - Handle */
+ uint16_t chunk_seq_no;
+ uint16_t reserved;
+ uint32_t chunk_size;
+
+ /* uint32_t large_message_size;
+ * uint8_t spdm_chunk[chunk_size]; */
+} spdm_chunk_send_request_t;
+
+#define SPDM_CHUNK_SEND_REQUEST_ATTRIBUTE_LAST_CHUNK (1 << 0)
+
+/* SPDM CHUNK_SEND_ACK response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 - Response Attributes
+ * param2 - Handle */
+ uint16_t chunk_seq_no;
+ /* uint8_t response_to_large_request[variable] */
+} spdm_chunk_send_ack_response_t;
+
+#define SPDM_CHUNK_SEND_ACK_RESPONSE_ATTRIBUTE_EARLY_ERROR_DETECTED (1 << 0)
+
+/* SPDM CHUNK_GET request */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 - Reserved
+ * param2 - Handle */
+ uint16_t chunk_seq_no;
+} spdm_chunk_get_request_t;
+
+/* SPDM CHUNK_RESPONSE response */
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 - Response Attributes
+ * param2 - Handle */
+ uint16_t chunk_seq_no;
+ uint16_t reserved;
+ uint32_t chunk_size;
+
+ /* uint32_t large_message_size;
+ * uint8_t spdm_chunk[chunk_size]; */
+} spdm_chunk_response_response_t;
+
+#define SPDM_CHUNK_GET_RESPONSE_ATTRIBUTE_LAST_CHUNK (1 << 0)
+
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == RSVD
+ * param2 == RSVD */
+} spdm_get_supported_event_types_request_t;
+
+typedef struct {
+ spdm_message_header_t header;
+ /* param1 == EventGroupCount
+ * param2 == RSVD */
+ uint32_t supported_event_groups_list_len;
+ /* uint8_t supported_event_groups_list[supported_event_groups_list_len] */
+} spdm_supported_event_types_response_t;
+
+#pragma pack()
+
+#define SPDM_VERSION_1_1_BIN_CONCAT_LABEL "spdm1.1 "
+#define SPDM_VERSION_1_2_BIN_CONCAT_LABEL "spdm1.2 "
+#define SPDM_BIN_STR_0_LABEL "derived"
+#define SPDM_BIN_STR_1_LABEL "req hs data"
+#define SPDM_BIN_STR_2_LABEL "rsp hs data"
+#define SPDM_BIN_STR_3_LABEL "req app data"
+#define SPDM_BIN_STR_4_LABEL "rsp app data"
+#define SPDM_BIN_STR_5_LABEL "key"
+#define SPDM_BIN_STR_6_LABEL "iv"
+#define SPDM_BIN_STR_7_LABEL "finished"
+#define SPDM_BIN_STR_8_LABEL "exp master"
+#define SPDM_BIN_STR_9_LABEL "traffic upd"
+
+/**
+ * The maximum amount of time in microseconds the Responder has to provide a response
+ * to requests that do not require cryptographic processing.
+ **/
+#define SPDM_ST1_VALUE_US 100000
+
+/* id-DMTF 1.3.6.1.4.1.412 */
+#define SPDM_OID_DMTF \
+ { /*0x06, 0x07,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C }
+/* id-DMTF-spdm, { id-DMTF 274 }, 1.3.6.1.4.1.412.274 */
+#define SPDM_OID_DMTF_SPDM \
+ { /*0x06, 0x09,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C, 0x82, 0x12 }
+/* id-DMTF-device-info, { id-DMTF-spdm 1 }, 1.3.6.1.4.1.412.274.1 */
+#define SPDM_OID_DMTF_DEVICE_INFO \
+ { /*0x06, 0x0A,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C, 0x82, 0x12, 0x01 }
+/* id-DMTF-hardware-identity, { id-DMTF-spdm 2 }, 1.3.6.1.4.1.412.274.2 */
+#define SPDM_OID_DMTF_HARDWARE_IDENTITY \
+ { /*0x06, 0x0A,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C, 0x82, 0x12, 0x02 }
+/* id-DMTF-eku-responder-auth, { id-DMTF-spdm 3 }, 1.3.6.1.4.1.412.274.3 */
+#define SPDM_OID_DMTF_EKU_RESPONDER_AUTH \
+ { /*0x06, 0x0A,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C, 0x82, 0x12, 0x03 }
+/* id-DMTF-eku-requester-auth, { id-DMTF-spdm 4 }, 1.3.6.1.4.1.412.274.4 */
+#define SPDM_OID_DMTF_EKU_REQUESTER_AUTH \
+ { /*0x06, 0x0A,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C, 0x82, 0x12, 0x04 }
+/* id-DMTF-mutable-certificate, { id-DMTF-spdm 5 }, 1.3.6.1.4.1.412.274.5 */
+#define SPDM_OID_DMTF_MUTABLE_CERTIFICATE \
+ { /*0x06, 0x0A,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C, 0x82, 0x12, 0x05 }
+/* id-DMTF-SPDM-extension, { id-DMTF-spdm 6 }, 1.3.6.1.4.1.412.274.6 */
+#define SPDM_OID_DMTF_SPDM_EXTENSION \
+ { /*0x06, 0x0A,*/ 0x2B, 0x06, 0x01, 0x04, 0x01, 0x83, 0x1C, 0x82, 0x12, 0x06 }
+
+/* DMTF Event Type IDs */
+#define SPDM_DMTF_EVENT_TYPE_EVENT_LOST 1
+#define SPDM_DMTF_EVENT_TYPE_MEASUREMENT_CHANGED 2
+#define SPDM_DMTF_EVENT_TYPE_MEASUREMENT_PRE_UPDATE 3
+#define SPDM_DMTF_EVENT_TYPE_CERTIFICATE_CHANGED 4
+
+#endif /* SPDM_H */
diff --git a/lib/pcie/pcie.c b/lib/pcie/pcie.c
index 22464c2..c3906d5 100644
--- a/lib/pcie/pcie.c
+++ b/lib/pcie/pcie.c
@@ -5,9 +5,10 @@
*/
#include <assert.h>
+#include <stddef.h>
+
#include <debug.h>
#include <mmio.h>
-#include <stddef.h>
#include <pcie.h>
#include <pcie_spec.h>
#include <tftf_lib.h>
diff --git a/lib/pcie/pcie_doe.c b/lib/pcie/pcie_doe.c
index 7cdbd66..3c6819c 100644
--- a/lib/pcie/pcie_doe.c
+++ b/lib/pcie/pcie_doe.c
@@ -5,10 +5,11 @@
*
*/
-#include <stdlib.h>
-#include <debug.h>
#include <errno.h>
+#include <stdlib.h>
#include <string.h>
+
+#include <debug.h>
#include <pcie.h>
#include <pcie_doe.h>
#include <tftf_lib.h>
diff --git a/plat/arm/fvp/platform.mk b/plat/arm/fvp/platform.mk
index 99183ec..7a2850f 100644
--- a/plat/arm/fvp/platform.mk
+++ b/plat/arm/fvp/platform.mk
@@ -1,5 +1,5 @@
#
-# Copyright (c) 2018-2022, Arm Limited. All rights reserved.
+# Copyright (c) 2018-2024, Arm Limited. All rights reserved.
#
# SPDX-License-Identifier: BSD-3-Clause
#
@@ -90,6 +90,11 @@
$(eval $(call add_define,TFTF_DEFINES,PA_SIZE))
$(eval $(call add_define,REALM_DEFINES,PA_SIZE))
+ifeq ($(TESTS),pcie-doe)
+USE_PCIE=1
+$(eval $(call add_define,TFTF_DEFINES,USE_PCIE))
+endif
+
PLAT_INCLUDES += -Iplat/arm/fvp/include/
PLAT_SOURCES := drivers/arm/gic/arm_gic_v2v3.c \
diff --git a/tftf/framework/framework.mk b/tftf/framework/framework.mk
index b25d1d0..0bae3cf 100644
--- a/tftf/framework/framework.mk
+++ b/tftf/framework/framework.mk
@@ -1,5 +1,5 @@
#
-# Copyright (c) 2018-2023, Arm Limited. All rights reserved.
+# Copyright (c) 2018-2024, Arm Limited. All rights reserved.
#
# SPDX-License-Identifier: BSD-3-Clause
#
@@ -19,6 +19,8 @@
-Iinclude/lib \
-Iinclude/lib/${ARCH} \
-Iinclude/lib/extensions \
+ -Iinclude/lib/pcie \
+ -Iinclude/lib/spdm \
-Iinclude/lib/utils \
-Iinclude/lib/xlat_tables \
-Iinclude/plat/common \
diff --git a/tftf/tests/doe_tests/doe_helpers.c b/tftf/tests/doe_tests/doe_helpers.c
new file mode 100644
index 0000000..28b6a86
--- /dev/null
+++ b/tftf/tests/doe_tests/doe_helpers.c
@@ -0,0 +1,154 @@
+/*
+ * Copyright (c) 2024, Arm Limited. All rights reserved.
+ *
+ * SPDX-License-Identifier: BSD-3-Clause
+ */
+
+#include <errno.h>
+#include <stdbool.h>
+#include <stdlib.h>
+
+#include <debug.h>
+#include <pcie.h>
+#include <pcie_doe.h>
+#include <spdm.h>
+
+#include <platform_pcie.h>
+
+void pcie_init(void)
+{
+ /* Create PCIe table and enumeration */
+ pcie_create_info_table();
+}
+
+/*
+ * @brief Returns the BDF Table pointer
+ *
+ * @param None
+ *
+ * @return BDF Table pointer
+ */
+pcie_device_bdf_table_t *get_pcie_bdf_table(void)
+{
+ return pcie_get_bdf_table();
+}
+
+int find_doe_device(uint32_t *bdf_ptr, uint32_t *cap_base_ptr)
+{
+ pcie_device_bdf_table_t *bdf_table_ptr = pcie_get_bdf_table();
+ uint32_t num_bdf = bdf_table_ptr->num_entries;
+
+ INFO("PCI BDF table entries: %u\n", num_bdf);
+
+ /* If no entries in BDF table return error */
+ if (num_bdf == 0) {
+ ERROR("No BDFs entries found\n");
+ return -ENODEV;
+ }
+
+ INFO("PCI BDF table 0x%lx\n", (uintptr_t)bdf_table_ptr);
+
+ while (num_bdf-- != 0) {
+ uint32_t bdf = bdf_table_ptr->device[num_bdf].bdf;
+ uint32_t status, doe_cap_base;
+
+ /* Check for DOE capability */
+ status = pcie_find_capability(bdf, PCIE_ECAP, DOE_CAP_ID, &doe_cap_base);
+ if (status == PCIE_SUCCESS) {
+ INFO("PCIe DOE capability: bdf 0x%x cap_base 0x%x\n", bdf, doe_cap_base);
+ *bdf_ptr = bdf;
+ *cap_base_ptr = doe_cap_base;
+ return 0;
+ }
+ }
+
+ ERROR("No PCIe DOE capability found\n");
+ return -ENODEV;
+}
+
+int get_spdm_version(uint32_t bdf, uint32_t doe_cap_base)
+{
+ uint32_t response[SPDM_GET_VERS_RESP_LEN], resp_len;
+ spdm_version_response_t *ver_resp;
+ spdm_version_number_t *ver_ptr;
+ uint8_t entry_count;
+ int ret;
+ const spdm_get_version_request_t ver_req = {
+ { SPDM_MESSAGE_VERSION, SPDM_GET_VERSION, }
+ };
+
+ ret = pcie_doe_send_req(DOE_HEADER_1, bdf, doe_cap_base,
+ (uint32_t *)&ver_req,
+ sizeof(spdm_get_version_request_t));
+ if (ret != 0) {
+ return ret;
+ }
+
+ ret = pcie_doe_recv_resp(bdf, doe_cap_base, response, &resp_len);
+ if (ret != 0) {
+ return ret;
+ }
+
+ ver_resp = (spdm_version_response_t *)response;
+
+ if (ver_resp->header.spdm_version != SPDM_MESSAGE_VERSION) {
+ ERROR("SPDM response v.%u doesn't match requested %u\n",
+ ver_resp->header.spdm_version,
+ SPDM_MESSAGE_VERSION);
+ return -EPROGMISMATCH;
+ }
+
+ if (ver_resp->header.request_response_code != SPDM_VERSION) {
+ ERROR("SPDM response code %u doesn't match expected %u\n",
+ ver_resp->header.request_response_code,
+ SPDM_VERSION);
+ return -EBADMSG;
+ }
+
+ entry_count = ver_resp->version_number_entry_count;
+ INFO("SPDM version entries: %u\n", entry_count);
+
+ ver_ptr = (spdm_version_number_t *)(
+ (uintptr_t)&ver_resp->version_number_entry_count +
+ sizeof(ver_resp->version_number_entry_count));
+
+ while (entry_count-- != 0) {
+ spdm_version_number_t ver = *ver_ptr++;
+
+ INFO("SPDM v%llu.%llu.%llu.%llu\n",
+ EXTRACT(SPDM_VER_MAJOR, ver),
+ EXTRACT(SPDM_VER_MINOR, ver),
+ EXTRACT(SPDM_VER_UPDATE, ver),
+ EXTRACT(SPDM_VER_ALPHA, ver));
+ }
+ return ret;
+}
+
+int doe_discovery(uint32_t bdf, uint32_t doe_cap_base)
+{
+ pcie_doe_disc_req_t request = { 0, };
+ pcie_doe_disc_resp_t response;
+ uint32_t resp_len;
+ int ret;
+
+ do {
+ ret = pcie_doe_send_req(DOE_HEADER_0, bdf, doe_cap_base,
+ (uint32_t *)&request,
+ sizeof(pcie_doe_disc_req_t));
+ if (ret != 0) {
+ return ret;
+ }
+
+ ret = pcie_doe_recv_resp(bdf, doe_cap_base,
+ (uint32_t *)&response, &resp_len);
+ if (ret != 0) {
+ return ret;
+ }
+
+ print_doe_disc(&response);
+ request.index = response.next_index;
+
+ } while (response.next_index != 0);
+
+ return 0;
+}
diff --git a/tftf/tests/doe_tests/doe_helpers.h b/tftf/tests/doe_tests/doe_helpers.h
new file mode 100644
index 0000000..08137e3
--- /dev/null
+++ b/tftf/tests/doe_tests/doe_helpers.h
@@ -0,0 +1,16 @@
+/*
+ * Copyright (c) 2024, Arm Limited. All rights reserved.
+ *
+ * SPDX-License-Identifier: BSD-3-Clause
+ *
+ */
+
+#ifndef DOE_HELPERS_H
+#define DOE_HELPERS_H
+
+void pcie_init(void);
+int find_doe_device(uint32_t *bdf_ptr, uint32_t *cap_base_ptr);
+int doe_discovery(uint32_t bdf, uint32_t doe_cap_base);
+int get_spdm_version(uint32_t bdf, uint32_t doe_cap_base);
+
+#endif /* DOE_HELPERS_H */
diff --git a/tftf/tests/doe_tests/test_doe.c b/tftf/tests/doe_tests/test_doe.c
new file mode 100644
index 0000000..6eb5079
--- /dev/null
+++ b/tftf/tests/doe_tests/test_doe.c
@@ -0,0 +1,49 @@
+/*
+ * Copyright (c) 2024, Arm Limited. All rights reserved.
+ *
+ * SPDX-License-Identifier: BSD-3-Clause
+ */
+
+#include "doe_helpers.h"
+
+#include <test_helpers.h>
+
+#define SKIP_TEST_IF_DOE_NOT_SUPPORTED() \
+ do { \
+ if (find_doe_device(&bdf, &doe_cap_base) != 0) { \
+ tftf_testcase_printf("PCIe DOE not supported\n"); \
+ return TEST_RESULT_SKIPPED; \
+ } \
+ } while (false)
+
+test_result_t doe_discovery_test(void)
+{
+ uint32_t bdf, doe_cap_base;
+ int ret;
+
+ pcie_init();
+
+ SKIP_TEST_IF_DOE_NOT_SUPPORTED();
+
+ ret = doe_discovery(bdf, doe_cap_base);
+ if (ret != 0) {
+ return TEST_RESULT_FAIL;
+ }
+
+ return TEST_RESULT_SUCCESS;
+}
+
+test_result_t spdm_version_test(void)
+{
+ uint32_t bdf, doe_cap_base;
+ int ret;
+
+ SKIP_TEST_IF_DOE_NOT_SUPPORTED();
+
+ ret = get_spdm_version(bdf, doe_cap_base);
+ if (ret != 0) {
+ return TEST_RESULT_FAIL;
+ }
+
+ return TEST_RESULT_SUCCESS;
+}
diff --git a/tftf/tests/tests-pcie-doe.mk b/tftf/tests/tests-pcie-doe.mk
new file mode 100644
index 0000000..14bc9cf
--- /dev/null
+++ b/tftf/tests/tests-pcie-doe.mk
@@ -0,0 +1,22 @@
+#
+# Copyright (c) 2024, Arm Limited. All rights reserved.
+#
+# SPDX-License-Identifier: BSD-3-Clause
+#
+
+TESTS_SOURCES += \
+ $(addprefix plat/arm/fvp/, \
+ fvp_pcie.c \
+ )
+
+TESTS_SOURCES += \
+ $(addprefix tftf/tests/doe_tests/, \
+ doe_helpers.c \
+ test_doe.c \
+ )
+
+TESTS_SOURCES += \
+ $(addprefix lib/pcie/, \
+ pcie.c \
+ pcie_doe.c \
+ )
diff --git a/tftf/tests/tests-pcie-doe.xml b/tftf/tests/tests-pcie-doe.xml
new file mode 100644
index 0000000..ed8b7cb
--- /dev/null
+++ b/tftf/tests/tests-pcie-doe.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!--
+ Copyright (c) 2024, Arm Limited. All rights reserved.
+
+ SPDX-License-Identifier: BSD-3-Clause
+-->
+
+<testsuites>
+ <testsuite name="PCI Data Object Exchange" description="Check PCI DOE support">
+ <testcase name="PCI DOE Discovery" function="doe_discovery_test" />
+ <testcase name="SPDM Get Version" function="spdm_version_test" />
+ </testsuite>
+</testsuites>