caliptra: Support caliptra manifest verification

The Caliptra manifest tool always sign 127 metadata entries,
even if some entries are unused. The number of metadata
entries is hardcoded to 127.

Signed-off-by: chengyu_lin <chengyu_lin@aspeedtech.com>
Change-Id: I0085e1754b208b6b040483b8be82f88a63ab04d0

Author: chengyu-lin

include/zephyr/drivers/cptra.h

@@ -31,6 +31,7 @@
 #define CPTRA_ECDSA_SIG_LEN			96	/* ECDSA384 */
 #define CPTRA_ECDSA_SHA_LEN			48	/* SHA384 */
 #define CPTRA_MBOX_SZ				0x20000	/* 128KB */
+#define CPTRA_IMC_ENTRY_COUNT			127	/* Max IMC entry count */
 
 /* Mailbox commands */
 enum cptra_mbox_cmd {
@@ -508,16 +509,18 @@ struct cptra_manifest_preamble {
 	uint32_t metadata_owner_LMS_sig[405];
 };
 
+struct cptra_manifest_ime {
+	uint32_t fw_id;
+	uint32_t flags;
+	uint8_t digest[48]; /* SHA384 */
+};
+
 struct cptra_set_auth_manifest_ia {
 	uint32_t manifest_size;
 
 	struct cptra_manifest_preamble preamble;
 	uint32_t metadata_entry_entry_count;
-	struct {
-		uint32_t fw_id;
-		uint32_t flags;
-		uint8_t digest[48];
-	} metadata_entries[1];
+	struct cptra_manifest_ime metadata_entries[CPTRA_IMC_ENTRY_COUNT];
 };
 
 struct cptra_set_auth_manifest_oa {

samples/boards/ast2700_evb/demo/src/cptra_sample.c

@@ -1607,7 +1607,9 @@ __attribute__((unused)) static void cptra_test_set_auth_manifest(void)
 	memset(&output, 0, sizeof(struct cptra_set_auth_manifest_oa));
 
 	/* Set input data */
-	input.manifest_size = sizeof(struct cptra_set_auth_manifest_ia) - 4;
+	input.manifest_size = sizeof(struct cptra_manifest_preamble) +
+			      sizeof(uint32_t) +
+			      sizeof(struct cptra_manifest_ime);
 	input.preamble.manifest_marker = CPTRA_MBCMD_SET_AUTH_MANIFEST;
 	input.preamble.preamble_size = sizeof(struct cptra_manifest_preamble);
 	input.preamble.manifest_version = 1;
@@ -1734,7 +1736,7 @@ __attribute__((unused)) static void cptra_test_set_auth_manifest(void)
 	LOG_DBG("Hashing metadata entries");
 	memset(hash, 0, sizeof(hash));
 	range = sizeof(input.metadata_entry_entry_count) +
-		sizeof(input.metadata_entries);
+		sizeof(input.metadata_entries[0]);
 #if defined(CONFIG_MBEDTLS)
 	ret = mbedtls_sha512((const uint8_t *)&input.metadata_entry_entry_count, range,
 			     hash, 1);