[nrf noup] boot: add support for MPCCONF based write protection

Add support for write protecting both the bootloader partition
and the booted image partitions on nRF54H20 by configuring the
global domain MPCs. The protection scheme uses a combination of
UICR.MPCCONF, to protect the bootloader partition from boot, and
ironside_se_mpcconf_write(), to protect the images that will be
booted. Currently the only goal of the support is to write protect
the MRAM partitions - in the future more advanced schemes could be
added. Unlike the somewhat related and recently added PERIPHCONF
support, the MPC configuration is hardcoded in MCUboot and is not
currently possible to change via DFU.

The feature depends on support added in IronSide SE v23.4.0+27.

Signed-off-by: Jonathan Nilsen <jonathan.nilsen@nordicsemi.no>

Author: jonathannilsen

boot/zephyr/CMakeLists.txt

@@ -822,6 +822,10 @@ endif()
 if(CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF)
   zephyr_sources(${BOOT_DIR}/zephyr/load_ironside_se_conf.c)
 endif()
+if(CONFIG_NCS_MCUBOOT_MPCCONF_STATIC_WRITE_PROTECTION)
+  zephyr_sources(${BOOT_DIR}/zephyr/load_ironside_se_conf_mpc.c)
+endif()
+
 
 if(SYSBUILD AND CONFIG_PCD_APP)
     # Sysbuild requires details of the RAM flash device are stored to the cache of MCUboot so

boot/zephyr/include/load_ironside_se_conf.h

@@ -13,6 +13,7 @@
 extern "C" {
 #endif
 
+struct boot_rsp;
 struct boot_loader_state;
 struct image_header;
 struct flash_area;
@@ -30,6 +31,15 @@ int nrf_add_custom_tlv_data(struct boot_loader_state *state, int slot);
 /* Configure peripherals using parameters loaded from PERIPHCONF TLVs. */
 int nrf_load_periphconf(void);
 
+/* Update information about which slot is being booted.
+ * This determines which MPCCONF that is loaded by nrf_load_mpcconf(): active images are
+ * write protected, and inactivate images are kept writable.
+ */
+int nrf_mpcconf_update_active_slot(const struct boot_rsp *rsp);
+
+/* Configure global domain MPCs based on the images being booted. */
+int nrf_load_mpcconf(void);
+
 #ifdef __cplusplus
 }
 #endif

boot/zephyr/load_ironside_se_conf.c

@@ -8,15 +8,16 @@
 #include "bootutil/bootutil_log.h"
 #include "../bootutil/src/bootutil_priv.h"
 #include "flash_map_backend/flash_map_backend.h"
+#include <zephyr/devicetree.h>
 #include <zephyr/sys/math_extras.h>
+#include <zephyr/sys/util.h>
 
 #include <ironside/se/api.h>
 
 BOOT_LOG_MODULE_DECLARE(mcuboot);
 
 #define PERIPHCONF_TLV_ID CONFIG_NCS_MCUBOOT_PERIPHCONF_TLV_ID
-
-#define MAX_PERIPHCONFS CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF_MAX_BLOBS
+#define MAX_PERIPHCONFS   CONFIG_NCS_MCUBOOT_LOAD_PERIPHCONF_MAX_BLOBS
 
 /* To store parsed PERIPHCONF parameters between reading them from
  * the TLVs and calling the IronSide API.