emmc RPMB, Enhance and GP Update On 4/2/2019 Biyong Sun

Size: px

Start display at page:

Download "emmc RPMB, Enhance and GP Update On 4/2/2019 Biyong Sun"

岱冀
3 years ago
Views:

1 emmc RPMB, Enhance and GP Update On 4/2/2019 Biyong Sun

2 emmc 布局大小总计 128KB 开始地址 WPG 总的大小 WPG 的大小默认存储媒介增强存储媒介

3 测试环境 HW: i.mx6q SDB SW: L4.1.15_2.0.0

4 emmc RPMB (Replay Protected Memory Block)

5 RPMB 的写入安全密钥读写控制随机字节安全密钥含有安全密钥的 HMAC 写入控制写入控制随机字节需要检查含有安全密钥的 HMAC 将要写入的地址数据写入控制需要检查

6 RPMB read 安全密钥将要读取的地址随机字节安全密钥含有安全密钥的 HMAC 写入控制数据随机字节需要检查

7 mmc-utils 中与 PRMB 有关的指令 mmc rpmb write-key <rpmb device> <key file> mmc rpmb write-block <rpmb device> <address> <256 byte data file> <key file> mmc rpmb read-block <rpmb device> <address> <blocks count> <output file> [key file] 请查看 mmc 的帮助以获得更多信息

8 使用 RPMB 设置密钥 (OTP) 将密钥和错误密钥写入 RPMB 从 RPMB 中读取密钥和错误密钥

9 设置密钥 (OTP) echo 'Authkeymustbe32byteslength_0000' > keyfile.txt mmc rpmb write-key /dev/mmcblk3rpmb keyfile.txt 注意! 这是只可烧写一次的 ( 不可逆的 ) 需要重启电源

10 将密钥和错误密钥写入 RPMB echo '256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.' > data.txt echo 'Authkeymustbe32byteslength_0000' > keyfile.txt mmc rpmb write-key /dev/mmcblk3rpmb keyfile.txt echo 'Authkeymustbe32byteslength_1111' > Wrongkeyfile.txt mmc rpmb write-block /dev/mmcblk3rpmb 0 data.txt Wrongkeyfile.txt RPMB operation failed, retcode 0x0002

11 从 RPMB 中读取密钥和错误密钥 mmc rpmb read-block /dev/mmcblk3rpmb 0 1 out.txt mmc rpmb read-block /dev/mmcblk3rpmb 0 1 out.txt keyfile.txt cat out.txt 256bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.25 6bytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256b ytedatafile.256bytedatafile.256bytedatafile.256bytedatafile.256byt edatafile.256bytedatafile.256bytedatafile.256bytedatafile. mmc rpmb read-block /dev/mmcblk3rpmb 0 1 out.txt Wrongkeyfile.txt RPMB MAC mismatch 使用密钥 / MAC( 消息身份验证代码 ) 时, 请确保数据已认证不能是通过黑客入侵伪造的数据

12 Enhanced User Data Area (pseudoslc Mode)

13 什么是 Enhanced User Data Area 简单而言就是伪造的 SLC 使该区域更加可靠启用后容量会变小 ( 从 MLC 到 SLC) pslc 模式可以提高写入速度

14 Enable the enhanced user area 检查 MAX_ENH_SIZE_MULT mmc extcsd read /dev/mmcblk3 grep MAX_ENH_SIZE_MULT -A 1 Max Enhanced Area Size [MAX_ENH_SIZE_MULT]: 0x0000ea i.e KiB 启用所有区域以增强命令 : mmc enh_area set <-y -n -c> <start KiB> <length KiB> <device> mmc enh_area set -n /dev/mmcblk3 在真正使用 -y 之前, 请使用 -n 进行检查 mmc enh_area set -y /dev/mmcblk3 Enhanced User Data Area Size [ENH_SIZE_MULT]: 0x0000ea i.e KiB Max Enhanced Area Size [MAX_ENH_SIZE_MULT]: 0x0000ea i.e KiB 注意! 这是只可编程一次的 ( 不可逆的 ) 更改需要重启电源

15 GP (General Purpose Partition)

16 GP(General Purpose Partition) 高达 4 个 GP 可用于创建物理分区 GP 具有增强属性

17 创建 GP 指令 mmc gp create <-y -n -c> <length KiB> <partition> <enh_attr> <ext_attr> <device> 检查 MAX_ENH_SIZE_MULT mmc extcsd read /dev/mmcblk3 grep MAX_ENH_SIZE_MULT -A 1 Max Enhanced Area Size [MAX_ENH_SIZE_MULT]: 0x0000ea i.e KiB 创建 2 个 GP 创建 gp2 mmc gp create -n /dev/mmcblk3 Enhanced GP1 Partition Size [GP_SIZE_MULT_1]: 0x00000b i.e KiB Max Enhanced Area Size [MAX_ENH_SIZE_MULT]: 0x0000ea i.e KiB 注意 : 如果并非创建最后一个 gp,-n 仅用来检查和设置 emmc 寄存器创建 gp1 mmc gp create -y /dev/mmcblk3 Enhanced GP1 Partition Size [GP_SIZE_MULT_1]: 0x i.e KiB Max Enhanced Area Size [MAX_ENH_SIZE_MULT]: 0x0000ea i.e KiB 注意! 这是只可编程一次的 ( 不可逆的 ) 更改需要重启电源

18 使用 GP ls /dev/mmcblk3* mmcblk3 mmcblk3boot0 mmcblk3boot1 mmcblk3gp0 mmcblk3gp1 mmcblk3rpmb fdisk -l Disk /dev/mmcblk3: 6 GiB, bytes, sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk /dev/mmcblk3gp1: 88 MiB, bytes, sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk /dev/mmcblk3gp0: 512 MiB, bytes, sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes 注意 :emmc 消耗大约 2G 来获得增强的 88MiB + 512MiB = 600MiB 总容量从大约 6.6G 增加到大约 8G

19 使用 GP(Cont.) fdisk /dev/mmcblk3gp0 Command (m for help): p Disk /dev/mmcblk3gp0: 512 MiB, bytes, sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: dos Disk identifier: 0xd0d48a7b Device Boot Start End Sectors Size Id Type /dev/mmcblk3gp0p M c W95 FAT32 (LBA) /dev/mmcblk3gp0p M 83 Linux mkfs.vfat -F 32 mkfs.ext3 /dev/mmcblk3gp0p1 /dev/mmcblk3gp0p2

20 Miscellaneous

21 设备可靠性 mmc write_reliability set <-y -n -c> <partition> <device> Enable write reliability per partition for the <device>. Dry-run only unless -y or -c is passed. Use -c if more partitioning settings are still to come. 注意! 这是只可编程一次的 ( 不可逆的 ) 更改

22 设置快速启动 mmc bootbus set <boot_mode> <reset_boot_bus_conditions> <boot_bus_width> <device> Set Boot Bus Conditions. <boot_mode> must be "single_backward single_hs dual" <reset_boot_bus_conditions> must be "x1 retain" <boot_bus_width> must be "x1 x4 x8 将总线设置为 8 位 ddr 模式 mmc bootbus set dual retain x8 /dev/mmcblk3

23 设置快速启动 (Cont.)

24 原文链接 : 由 Biyong Sun 于上传的文件

P4Dual-915GL_BIOS_CN.p65

P4Dual-915GL_BIOS_CN.p65 1 Main H/W Monitor Boot Security Exit System Overview System Time System Date Total Memory DIMM 1 DIMM 2 [ 14:00:09] [Wed 01/05/2005] BIOS Version : P4Dual-915GL BIOS P1.00 Processor Type : Intel (R) Pentium