You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This example demonstrates using wolfBoot on the Infineon AURIX TC3xx family of microcontrollers. The example is based on the TC375 Lite-Kit V2, but should be easily adaptable to other TC3xx devices. This README assumes basic familiarity with the TC375 SoC, the AURIX IDE, and Lauterbach Trace32 debugger.
4
4
5
+
## Overview
6
+
7
+
-[WolfBoot on Infineon AURIX TC3xx](#wolfboot-on-infineon-aurix-tc3xx)
8
+
-[Overview](#overview)
9
+
-[Important notes](#important-notes)
10
+
-[Flash Partitioning](#flash-partitioning)
11
+
-[Building and running the wolfBoot demo](#building-and-running-the-wolfboot-demo)
12
+
-[Prerequisites](#prerequisites)
13
+
-[Clone wolfBoot](#clone-wolfboot)
14
+
-[Build wolfBoot keytools and generate keys](#build-wolfboot-keytools-and-generate-keys)
15
+
-[Install the Infineon TC3xx SDK into the wolfBoot project](#install-the-infineon-tc3xx-sdk-into-the-wolfboot-project)
16
+
-[Build wolfBoot](#build-wolfboot)
17
+
-[Connect the Lauterbach to the TC375 Device in TRACE32](#connect-the-lauterbach-to-the-tc375-device-in-trace32)
18
+
-[Update the start address in UCBs using TRACE32](#update-the-start-address-in-ucbs-using-trace32)
19
+
-[Load and run the wolfBoot demo in TRACE32](#load-and-run-the-wolfboot-demo-in-trace32)
20
+
-[wolfHSM Compatibility](#wolfhsm-compatibility)
21
+
-[Building wolfBoot with wolfHSM](#building-wolfboot-with-wolfhsm)
The example contains two projects: `wolfBoot-tc3xx` and `test-app`. The `wolfBoot-tc3xx` project contains the wolfBoot bootloader, and the `test-app` project contains a simple firmware application that will be loaded and executed by wolfBoot. The `test-app` project is a simple blinky application that blinks LED2 on the TC375 Lite-Kit V2 once per second when running the base image, and rapidly (~3x/sec) when running the update image. The test app determines if it is a base or update image by inspecting the firmware version (obtained through the wolfBoot API). The firmware version is set in the image header by the wolfBoot keytools when signing the test app binaries. The same test app binary is used for both the base and update images, with the only difference being the firmware version set by the keytools.
6
26
7
27
## Important notes
8
28
9
-
- In the TC375 UCBs, BMDHx.STAD must point to the wolfBoot entrypoint `0xA000_0000`. This is the default value of the TC375 and so need not be changed unless it has already been modified or you wish to rearrange the memory map.
29
+
- In the TC375 UCBs, BMDHx.STAD must point to the wolfBoot entrypoint `0xA00A_0000`. You can modify this in the `UCB` section of the TRACE32 IDE as described in the steps later in this document. Please refer to the TRACE32 manual and the TC37xx user manual for more information on the UCBs.
10
30
- Because TC3xx PFLASH ECC prevents reading from erased flash, the `EXT_FLASH` option is used to redirect flash reads to the `ext_flash_read()` HAL API, where the flash pages requested to be read can be blank-checked by hardware before reading.
11
31
- TC3xx PFLASH is write-once (`NVM_FLASH_WRITEONCE`), however wolfBoot `NVM_FLASH_WRITEONCE` does not support `EXT_FLASH`. Therefore the write-once functionality is re-implemented in the `HAL` layer.
12
32
- This demo app is only compatible with the GCC toolchain build configurations shipped with the AURIX IDE. The TASKING compiler build configurations are not yet supported.
@@ -18,20 +38,22 @@ The TC3xx AURIX port of wolfBoot places all images in PFLASH, and uses both PFLA
18
38
```
19
39
+==========+
20
40
| PFLASH0 |
21
-
+==========+ <-- 0x8000_0000
22
-
| wolfBoot | 128K
23
-
+----------+ <-- 0x8002_0000
24
-
| SWAP | 16K
25
-
+----------+ <-- 0x8002_4000
26
-
| Unused | ~2.86M
41
+
+----------+ <-- 0x8000_0000
42
+
| Unused | 640K
43
+
+==========+ <-- 0x800A_0000
44
+
| wolfBoot | 172K
45
+
+----------+ <-- 0x8002_B000
46
+
| Unused | ~2.8M
27
47
+----------+ <-- 0x8030_0000
28
48
29
49
+==========+
30
50
| PFLASH1 |
31
51
+==========+ <-- 0x8030_0000
32
-
| BOOT | 1.5M
33
-
+----------+ <-- 0x8048_0000
34
-
| UPDATE | 1.5M
52
+
| BOOT | 1.5M (0x17E000)
53
+
+----------+ <-- 0x8047_E000
54
+
| UPDATE | 1.5M (0x17E000)
55
+
+----------+ <-- 0x805F_C000
56
+
| SWAP | 16K (0x4000)
35
57
+----------+ <-- 0x8060_0000
36
58
```
37
59
@@ -54,20 +76,19 @@ Please refer to the [wolfBoot](wolfBoot-tc3xx/Lcf_Gnu_Tricore_Tc.lsl) and [test-
54
76
55
77
1. Open a WSL2 terminal and navigate to the top level `wolfBoot` directory
56
78
2. Compile the keytools by running `make keytools`
57
-
3. Use the helper script to generate a new signing key pair using RSA 4096
79
+
3. Use the helper script to generate a new signing key pair using ECC 256
58
80
1. Navigate to `wolfBoot/tools/scripts/tc3xx`
59
81
2. Run `./gen-tc3xx-keys.sh`. This generates the signing private key `wolfBoot/priv.der` and adds the public key to the wolfBoot keystore (see [keygen](https://github.com/wolfSSL/wolfBoot/blob/aurix-tc3xx-support/docs/Signing.md) for more information). If you already have generated a key, you will be prompted to overwrite it.
image header size calculated at runtime (1024 bytes)
173
+
image header size calculated at runtime (256 bytes)
155
174
Calculating SHA256 digest...
156
175
Signing the digest...
157
176
Output image(s) successfully created.
158
177
```
159
178
160
-
### Load and run the wolfBoot demo
179
+
### Connect the Lauterbach to the TC375 Device in TRACE32
180
+
181
+
1. Ensure the Lauterbach probe is connected to the debug port of the tc375 LiteKit
182
+
2. Open Trace32 Power View for Tricore
183
+
3. Open the SYStem menu and click "DETECT" to detect the tc375 device. Click "CONTINUE" in the pop-up window, and then choose "Set TC375xx" when the device is detected
184
+
185
+
### Update the start address in UCBs using TRACE32
186
+
187
+
The default Boot Mode Header (BMHD) start address on a new TC375 `0xA0000000` but the wolfBoot application has a start address of `0xA00A0000`. We must therefore update the BMHD UCBs with the correct entry point such that it can boot wolfBoot out of reset.
188
+
189
+
1. Select the TC37x dropdown menu and click UCBs
190
+
2. Expand `BMHD0_COPY`
191
+
3. Click "Edit"
192
+
4. Set the `STAD` to `0xA00A0000`
193
+
5. Click "Update" to recompute the CRC
194
+
6. Click "Check" to verify the new CRC
195
+
7. Click "Write" to update the UCB in flash
196
+
8. Perform the same operations (2-7) on the `BMHD0_ORIG` UCB
161
197
162
-
1. Load wolfBoot and the firmware application images to the tc3xx device using Trace32 and a Lauterbach probe
163
-
1. Ensure the Lauterbach probe is connected to the debug port of the tc375 LiteKit
164
-
2. Open Trace32 Power View for Tricore
165
-
3. Open the SYStem menu and click "DETECT" to detect the tc375 device. Click "CONTINUE" in the pop-up window, and then choose "Set TC375xx" when the device is detected
166
-
4. Click "File" -> "ChangeDir and Run Script" and choose the `wolfBoot/tools/scripts/tc3xx/wolfBoot-loadAll-$BUILD.cmm` script, where $BUILD should be either "debug" or "release" depending on your build type in (4) and (6).
198
+
The device is now configured to boot from `0xA00A0000` out of reset.
199
+
200
+
### Load and run the wolfBoot demo in TRACE32
201
+
202
+
We can now load wolfBoot and the firmware application images to the tc3xx device using Trace32 and a Lauterbach probe
203
+
204
+
1. Click "File" -> "ChangeDir and Run Script" and choose the `wolfBoot/tools/scripts/tc3xx/wolfBoot-loadAll-$BUILD.cmm` script, where $BUILD should be either "debug" or "release" depending on your build type in (4) and (6).
167
205
168
206
wolfBoot and the demo applications are now loaded into flash, and core0 will be halted at the wolfBoot entry point (`core0_main()`).
169
207
@@ -173,15 +211,45 @@ wolfBoot and the demo applications are now loaded into flash, and core0 will be
173
211
174
212
To rerun the demo, simply rerun the loader script in Trace32 and repeat the above steps
175
213
214
+
## wolfHSM Compatibility
215
+
216
+
wolfBoot has full support for wolfHSM on the AURIX TC3xx platform. The wolfBoot application functions as the HSM client, and all cryptographic operations required to verify application images are offloaded to the HSM. When used in tandem with wolfHSM, wolfBoot can be configured to use keys stored on the HSM for cryptographic operations, or to store keys in the default keystore and send them on-demand to the HSM for usage. The former option is the default configuration, and is recommended for most use cases, as key material will never leave the secure boundary of the HSM. The latter option is useful for development and testing, before keys have been preloaded onto the HSM.
217
+
218
+
Note that information regarding the AURIX TC3xx HSM core is restricted by NDA with Infineon. Source code for the wolfHSM TC3xx platform port is therefore not publicly available and cannot be included for distribution in wolfBoot. Instructions to build wolfBoot with wolfHSM compatibility are provided here, but the wolfHSM TC3xx port must be obtained separately from wolfSSL. To obtain the wolfHSM TC3xx port, please contact wolfSSL at [[email protected]](mailto:[email protected]).
219
+
220
+
### Building wolfBoot with wolfHSM
221
+
222
+
Steps to build wolfBoot on TC3xx with wolfHSM are largely similar to the non-HSM case, with a few key differences.
223
+
224
+
1. Obtain the wolfHSM release for the AURIX TC3xx from wolfSSL
225
+
2. Extract the contents of the `infineon/tc3xx` directory from the wolfHSM TC3xx release you obtained from wolfSSL into the [wolfBoot/IDE/AURIX/wolfHSM-infineon-tc3xx](./wolfHSM-infineon-tc3xx/) directory. The contents of this directory should now be:
226
+
227
+
```
228
+
IDE/AURIX/wolfHSM-infineon-tc3xx/
229
+
├── README.md
230
+
├── T32
231
+
├── placeholder.txt
232
+
├── port
233
+
├── tchsm-client
234
+
├── tchsm-server
235
+
├── wolfHSM
236
+
└── wolfssl
237
+
```
238
+
239
+
3. Build the wolfHSM server application and load it onto the HSM core, following the instructions provided in the release you obtained from wolfSSL. You do not need to build or load the demo client application, as wolfBoot will act as the client.
240
+
4. Follow all of the steps in [Building and Running the wolfBoot Demo](#building-and-running-the-wolfboot-demo) for the non-HSM enabled case, but with the following key differences:
241
+
1. The [wolfBoot-tc3xx-wolfHSM](./wolfBoot-tc3xx-wolfHSM/) AURIX Studio project should be used instead of `wolfBoot-tc3xx`
242
+
2. Use the `wolfBoot-wolfHSM-loadAll-XXX.cmm` lauterbach scripts instead of `wolfBoot-loadAll-XXX.cmm` to load the wolfBoot and test-app images in the TRACE32 GUI
243
+
5. If using the default build options in [wolfBoot-tc3xx-wolfHSM](./wolfBoot-tc3xx-wolfHSM/), wolfBoot will expect the public key for image verification to be stored at a specific keyId for the wolfBoot client ID. You can use [whnvmtool](https://github.com/wolfSSL/wolfHSM/tree/main/tools/whnvmtool) to generate a loadable NVM image that contains the required keys. [wolfBoot-wolfHSM-keys.nvminit](../../tools/scripts/tc3xx/wolfBoot-wolfHSM-keys.nvminit) provides an example `whnvmtool` config file that will include the generated key in the NVM image, which can then be loaded to the device via a flash programming tool. See the `whnvmtool` documentation and the documentation included in your wolfHSM AURIX release for more details. Note: if you want to use the standard wolfBoot keystore functionality in conjunction with wolfHSM for testing purposes (doesn't require pre-loading keys on the HSM) you can configure wolfBoot to send the keys to the HSM on-the-fly as ephemeral keys. To do this, ensure `WOLFBOOT_USE_WOLFHSM_PUBKEY_ID` is **NOT** defined, and remove the `--nolocalkeys` argument when invoking `keygen` in the `./gen-tc3xx-keys.sh` script.
176
244
177
245
## Troubleshooting
178
246
179
-
### WSL "bad interpreter" error
247
+
### WSL "bad interpreter" error
180
248
181
249
When running a shell script in WSL, you may see the following error:
182
250
183
251
```
184
-
$ ./gen-tc3xx-target.sh:
252
+
$ ./gen-tc3xx-target.sh:
185
253
/bin/bash^M: bad interpreter: No such file or directory
0 commit comments