#!/bin/bash EXEC_BASEDIR=$(dirname $(readlink -f $0)) BASEDIR_TOP=$(readlink -f ${EXEC_BASEDIR}/..) VENDOR_KEYTOOL=${EXEC_BASEDIR}/../binary-tool/vendor-keytool # # Settings # VERSION=0.4 # Check file check_file() { if [ ! -f "$2" ]; then echo Error: Unable to open $1: \""$2"\"; exit 1 ; fi } # Check file is size or exit. $1: file, $2: size check_size() { local filesize=$(wc -c < "$1") if [ $filesize -ne $2 ]; then echo "Error: File \"$1\" incorrect size. Was $filesize, expected $2" exit 1 fi } # Check optional file argument exists and is given size # $1 arg name # $2 size # $3 file check_opt_file() { if [ -n "$3" ]; then check_file "$1" "$3" local filesize=$(wc -c < "$3") if [ $filesize -ne $2 ]; then echo "Incorrect size $filesize != $2 for $1 $3" exit 1 fi fi } check_opt_boolean() { if [ -n "$2" ]; then if [ "$2" != "true" ] && [ "$2" != "false" ]; then echo Error: invalid value $1: \""$2"\" exit 1 fi fi } usage() { cat << EOF Usage: $(basename $0) --help $(basename $0) --version $(basename $0) [--input base.efuse.bin] \\ [--dfu-device-roothash dfu-device_roothash.bin] \\ [--device-roothash device_roothash.bin] \\ [--dvgk dvgk.bin] \\ [--dvuk dvuk.bin] \\ [--enable-usb-password true] \\ [--enable-dif-password true] \\ [--enable-dvuk-derive-with-cid true] \\ [--enable-device-vendor-scs true] \\ -o pattern.efuse $(basename $0) --audio-id audio_id_value \\ -o audio_id.efuse $(basename $0) --device-scs-segid seg_id_value \\ -o device-scs-id.efuse $(basename $0) --device-vendor-segid vend_id_value \\ -o device-vedor-id.efuse $(basename $0) --kl -etsi [csv_file_input for etsi] \\ $(basename $0) --kl -dgpk1 [csv_file_input for dgpk1] \\ $(basename $0) --kl -dgpk2 [csv_file_input for dgpk2] EOF exit 1 } function generate_efuse_device_pattern() { local argv=("$@") local i=0 local patt_text=$(mktemp --tmpdir) local patt=$(mktemp --tmpdir) local wrlock=$(mktemp --tmpdir) local license0=$(mktemp --tmpdir) local license1=$(mktemp --tmpdir) local efusebit=$(mktemp --tmpdir) # Parse args while [ $i -lt $# ]; do arg="${argv[$i]}" #echo "i=$i argv[$i]=${argv[$i]}" i=$((i + 1)) case "$arg" in --input) input="${argv[$i]}" ;; -o) output="${argv[$i]}" ;; --dvgk) dvgk="${argv[$i]}" ;; --dvuk) dvuk="${argv[$i]}" ;; --device-roothash) device_roothash="${argv[$i]}" ;; --dfu-device-roothash) dfu_roothash="${argv[$i]}" ;; --enable-usb-password) enable_usb_password="${argv[$i]}" ;; --enable-dif-password) enable_dif_password="${argv[$i]}" ;; --enable-dvuk-derive-with-cid) enable_dvuk_derive_with_cid="${argv[$i]}" ;; --enable-device-vendor-scs) enable_device_vendor_scs="${argv[$i]}" ;; *) echo "Unknown option $arg"; exit 1 ;; esac i=$((i + 1)) done # Verify args if [ -z "$output" ]; then echo Error: Missing output file option -o; exit 1; fi check_opt_file input 1024 "$input" check_opt_file dvgk 16 "$dvgk" check_opt_file dvuk 16 "$dvuk" check_opt_file device_roothash 32 "$device_roothash" check_opt_file dfu-roothash 32 "$dfu_roothash" check_opt_boolean enable-usb-password "$enable_usb_password" check_opt_boolean enable-dif-password "$enable_dif_password" check_opt_boolean enable-dvuk-derive-with-cid "$enable_dvuk_derive_with_cid" check_opt_boolean enable-device-vendor-scs "$enable_device_vendor_scs" #efuse_obj mode if [ "$dvgk" != "" ]; then keyinfo="$(xxd -p -c 16 $dvgk)" echo "efuse_obj set DVGK $keyinfo" >> $patt_text echo "efuse_obj lock DVGK" >> $patt_text fi if [ "$dvuk" != "" ]; then keyinfo="$(xxd -p -c 16 $dvuk)" echo "efuse_obj set DVUK $keyinfo" >> $patt_text echo "efuse_obj lock DVUK" >> $patt_text fi if [ "$device_roothash" != "" ]; then keyinfo="$(xxd -p -c 32 $device_roothash)" echo "efuse_obj set HASH_NORMAL_DEVICE_ROOTCERT $keyinfo" >> $patt_text echo "efuse_obj lock HASH_NORMAL_DEVICE_ROOTCERT" >> $patt_text if [ "$dfu_roothash" != "" ]; then keyinfo="$(xxd -p -c 32 $dfu_roothash)" fi echo "efuse_obj set HASH_DFU_DEVICE_ROOTCERT $keyinfo" >> $patt_text echo "efuse_obj lock HASH_DFU_DEVICE_ROOTCERT" >> $patt_text fi if [ "$dfu_roothash" != "" ] && [ -z "$device_roothash" ]; then keyinfo="$(xxd -p -c 32 $dfu_roothash)" echo "efuse_obj set HASH_DFU_DEVICE_ROOTCERT $keyinfo" >> $patt_text echo "efuse_obj lock HASH_DFU_DEVICE_ROOTCERT" >> $patt_text fi if [ "$enable_device_vendor_scs" == "true" ]; then echo "efuse_obj set FEAT_ENABLE_DEVICE_ROOT_PUBRSA_PROT 01" >> $patt_text echo "efuse_obj set FEAT_ENABLE_DEVICE_LVL1_PUBRSA_PROT 01" >> $patt_text echo "efuse_obj set FEAT_ENABLE_DEVICE_LVLX_PUBRSA_PROT 01" >> $patt_text echo "efuse_obj set FEAT_ENABLE_DEVICE_VENDOR_SIG 01" >> $patt_text echo "efuse_obj set FEAT_ENABLE_DEVICE_PROT 01" >> $patt_text echo "efuse_obj set FEAT_ENABLE_DEVICE_SCS_SIG 01" >> $patt_text fi if [ "$enable_usb_password" == "true" ]; then echo "efuse_obj set FEAT_ENABLE_USB_AUTH 01" >> $patt_text fi if [ "$enable_dif_password" == "true" ]; then echo "efuse_obj set FEAT_ENABLE_DIF_MASTER_PROT 01" >> $patt_text fi if [ "$enable_dvuk_derive_with_cid" == "true" ]; then echo "efuse_obj set FEAT_ENABLE_DVUK_DERIVE_WITH_CID 01" >> $patt_text fi cp $patt_text $output.obj rm -f $patt_text # Generate empty eFUSE pattern data if [ -n "$input" ]; then dd if="$input" of=$patt count=1024 bs=1 &> /dev/null else dd if=/dev/zero of=$patt count=1024 bs=1 &> /dev/null fi # Construct wrlock bits dd if=$patt of=$wrlock bs=16 skip=29 count=1 &> /dev/null b_1d2=$(xxd -ps -s2 -l1 $wrlock) b_1d3=$(xxd -ps -s3 -l1 $wrlock) b_1d6=$(xxd -ps -s6 -l1 $wrlock) if [ "$dvgk" != "" ]; then dd if="$dvgk" of="$patt" bs=16 seek=50 count=1 \ conv=notrunc >& /dev/null b_1d6="$(printf %02x $(( 0x$b_1d6 | 0x04 )))" fi if [ "$dvuk" != "" ]; then dd if="$dvuk" of="$patt" bs=16 seek=51 count=1 \ conv=notrunc >& /dev/null b_1d6="$(printf %02x $(( 0x$b_1d6 | 0x08 )))" fi if [ "$device_roothash" != "" ]; then dd if="$device_roothash" of="$patt" bs=16 seek=23 count=2 \ conv=notrunc >& /dev/null dd if="$device_roothash" of="$patt" bs=16 seek=25 count=2 \ conv=notrunc >& /dev/null b_1d2="$(printf %02x $(( 0x$b_1d2 | 0x80 )))" b_1d3="$(printf %02x $(( 0x$b_1d3 | 0x07 )))" fi if [ "$dfu_roothash" != "" ]; then dd if="$dfu_roothash" of="$patt" bs=16 seek=25 count=2 \ conv=notrunc >& /dev/null b_1d3="$(printf %02x $(( 0x$b_1d3 | 0x06 )))" fi echo $b_1d2 | xxd -r -p > $efusebit dd if=$efusebit of=$wrlock bs=1 seek=2 count=1 conv=notrunc >& /dev/null echo $b_1d3 | xxd -r -p > $efusebit dd if=$efusebit of=$wrlock bs=1 seek=3 count=1 conv=notrunc >& /dev/null echo $b_1d6 | xxd -r -p > $efusebit dd if=$efusebit of=$wrlock bs=1 seek=6 count=1 conv=notrunc >& /dev/null filesize=$(wc -c < $wrlock) if [ $filesize -ne 16 ]; then echo Internal Error -- Invalid write-lock pattern length exit 1 fi dd if=$wrlock of=$patt bs=16 seek=29 count=1 conv=notrunc >& /dev/null dd if=$patt of=$license0 bs=16 skip=0 count=1 &> /dev/null b_001=$(xxd -ps -s1 -l1 $license0) b_002=$(xxd -ps -s2 -l1 $license0) b_003=$(xxd -ps -s3 -l1 $license0) if [ "$enable_device_vendor_scs" == "true" ]; then b_001="$(printf %02x $(( 0x$b_001 | 0x0C )))" b_002="$(printf %02x $(( 0x$b_002 | 0xFF )))" b_003="$(printf %02x $(( 0x$b_003 | 0x03 )))" fi echo $b_001 | xxd -r -p > $efusebit dd if=$efusebit of=$license0 bs=1 seek=1 count=1 conv=notrunc >& /dev/null echo $b_002 | xxd -r -p > $efusebit dd if=$efusebit of=$license0 bs=1 seek=2 count=1 conv=notrunc >& /dev/null echo $b_003 | xxd -r -p > $efusebit dd if=$efusebit of=$license0 bs=1 seek=3 count=1 conv=notrunc >& /dev/null b_007=$(xxd -ps -s7 -l1 $license0) if [ "$enable_usb_password" == "true" ]; then b_007="$(printf %02x $(( 0x$b_007 | 0x80 )))" fi echo $b_007 | xxd -r -p > $efusebit dd if=$efusebit of=$license0 bs=1 seek=7 count=1 conv=notrunc >& /dev/null filesize=$(wc -c < $license0) if [ $filesize -ne 16 ]; then echo Internal Error -- Invalid license0 pattern length exit 1 fi dd if=$license0 of=$patt bs=16 seek=0 count=1 conv=notrunc >& /dev/null dd if=$patt of=$license1 bs=16 skip=1 count=1 &> /dev/null b_010=$(xxd -ps -s0 -l1 $license1) if [ "$enable_dif_password" == "true" ]; then b_010="$(printf %02x $(( 0x$b_010 | 0x01 )))" fi echo $b_010 | xxd -r -p > $efusebit dd if=$efusebit of=$license1 bs=1 seek=0 count=1 conv=notrunc >& /dev/null b_015=$(xxd -ps -s5 -l1 $license1) if [ "$enable_dvuk_derive_with_cid" == "true" ]; then b_015="$(printf %02x $(( 0x$b_015 | 0x02 )))" fi echo $b_015 | xxd -r -p > $efusebit dd if=$efusebit of=$license1 bs=1 seek=5 count=1 conv=notrunc >& /dev/null filesize=$(wc -c < $license1) if [ $filesize -ne 16 ]; then echo Internal Error -- Invalid license1 pattern length exit 1 fi dd if=$license1 of=$patt bs=16 seek=1 count=1 conv=notrunc >& /dev/null ${BASEDIR_TOP}/aml_encrypt_s4 --efsproc --input $patt --output $output --option=debug rm -f $patt rm -f $wrlock rm -f $license0 rm -f $license1 rm -f $efusebit } function append_uint32_le() { local input=$1 local output=$2 local v= local vrev= v=$(printf %08x $input) # 00010001 vrev=${v:6:2}${v:4:2}${v:2:2}${v:0:2} echo $vrev | xxd -r -p >> $output } function generate_audio_id_pattern() { local argv=("$@") local i=0 local patt_text=$(mktemp --tmpdir) local patt=$(mktemp --tmpdir) local audio_id_efuse=$(mktemp --tmpdir) # default audio_id_offset 0xB8 local audio_id_offset=184 local audio_id_size=4 local wrlock=$(mktemp --tmpdir) local efusebit=$(mktemp --tmpdir) # Parse args i=0 while [ $i -lt $# ]; do arg="${argv[$i]}" #echo "i=$i argv[$i]=${argv[$i]}" i=$((i + 1)) case "$arg" in --audio-id) audio_id_value="${argv[$i]}" ;; -o) output="${argv[$i]}" ;; *) echo "Unknown option $arg"; exit 1 ;; esac i=$((i + 1)) done # Verify args if [ -z "$output" ]; then echo Error: Missing output file option -o; exit 1; fi if [ -z $audio_id_value ]; then echo Error: invalid audio_id_value exit 1 fi #efuse_obj mode v=$(printf %08x $audio_id_value) id_info=${v:6:2}${v:4:2}${v:2:2}${v:0:2} echo "efuse_obj set AUDIO_VENDOR_ID $id_info" >> $patt_text echo "efuse_obj lock AUDIO_VENDOR_ID" >> $patt_text cp $patt_text $output.obj rm -f $patt_text # Generate empty eFUSE pattern data dd if=/dev/zero of=$patt count=1024 bs=1 &> /dev/null append_uint32_le $audio_id_value $audio_id_efuse dd if=$audio_id_efuse of=$patt bs=1 seek=$audio_id_offset count=$audio_id_size \ conv=notrunc >& /dev/null dd if=$patt of=$wrlock bs=16 skip=29 count=1 &> /dev/null b_1dd=$(xxd -ps -s13 -l1 $wrlock) b_1dd="$(printf %02x $(( 0x$b_1dd | 0x04 )))" echo $b_1dd | xxd -r -p > $efusebit dd if=$efusebit of=$wrlock bs=1 seek=13 count=1 conv=notrunc >& /dev/null filesize=$(wc -c < $wrlock) if [ $filesize -ne 16 ]; then echo Internal Error -- Invalid write-lock pattern length exit 1 fi dd if=$wrlock of=$patt bs=16 seek=29 count=1 conv=notrunc >& /dev/null ${BASEDIR_TOP}/aml_encrypt_s4 --efsproc --input $patt --output $output --option=debug rm -f $patt rm -f $audio_id_efuse rm -f $wrlock rm -f $efusebit } function generate_mkt_id_pattern() { local argv=("$@") local i=0 local patt_text=$(mktemp --tmpdir) local patt=$(mktemp --tmpdir) local mkt_id_efuse=$(mktemp --tmpdir) # default mkt_id_offset 0xA8 local mkt_id_offset=168 local mkt_id_size=4 # Parse args i=0 while [ $i -lt $# ]; do arg="${argv[$i]}" #echo "i=$i argv[$i]=${argv[$i]}" i=$((i + 1)) case "$arg" in --device-scs-segid) mkt_id_value="${argv[$i]}" ;; -o) output="${argv[$i]}" ;; *) echo "Unknown option $arg"; exit 1 ;; esac i=$((i + 1)) done # Verify args if [ -z "$output" ]; then echo Error: Missing output file option -o; exit 1; fi if [ -z $mkt_id_value ]; then echo Error: invalid mkt_id_value exit 1 fi #efuse_obj mode v=$(printf %08x $mkt_id_value) id_info=${v:6:2}${v:4:2}${v:2:2}${v:0:2} echo "efuse_obj set DEVICE_SCS_SEGID $id_info" >> $patt_text echo "efuse_obj lock DEVICE_SCS_SEGID" >> $patt_text cp $patt_text $output.obj rm -f $patt_text # Generate empty eFUSE pattern data dd if=/dev/zero of=$patt count=1024 bs=1 &> /dev/null append_uint32_le $mkt_id_value $mkt_id_efuse dd if=$mkt_id_efuse of=$patt bs=1 seek=$mkt_id_offset count=$mkt_id_size \ conv=notrunc >& /dev/null ${BASEDIR_TOP}/aml_encrypt_s4 --efsproc --input $patt --output $output --option=debug rm -f $patt rm -f $mkt_id_efuse } function generate_vendor_id_pattern() { local argv=("$@") local i=0 local patt_text=$(mktemp --tmpdir) local patt=$(mktemp --tmpdir) local vend_id_efuse=$(mktemp --tmpdir) # default vend_id_offset 0xAC local vend_id_offset=172 local vend_id_size=4 # Parse args i=0 while [ $i -lt $# ]; do arg="${argv[$i]}" #echo "i=$i argv[$i]=${argv[$i]}" i=$((i + 1)) case "$arg" in --device-vendor-segid) vend_id_value="${argv[$i]}" ;; -o) output="${argv[$i]}" ;; *) echo "Unknown option $arg"; exit 1 ;; esac i=$((i + 1)) done # Verify args if [ -z "$output" ]; then echo Error: Missing output file option -o; exit 1; fi if [ -z $vend_id_value ]; then echo Error: invalid vendor_id_value exit 1 fi #efuse_obj mode v=$(printf %08x $vend_id_value) id_info=${v:6:2}${v:4:2}${v:2:2}${v:0:2} echo "efuse_obj set DEVICE_VENDOR_SEGID $id_info" >> $patt_text echo "efuse_obj lock DEVICE_VENDOR_SEGID" >> $patt_text cp $patt_text $output.obj rm -f $patt_text # Generate empty eFUSE pattern data dd if=/dev/zero of=$patt count=1024 bs=1 &> /dev/null append_uint32_le $vend_id_value $vend_id_efuse dd if=$vend_id_efuse of=$patt bs=1 seek=$vend_id_offset count=$vend_id_size \ conv=notrunc >& /dev/null ${BASEDIR_TOP}/aml_encrypt_s4 --efsproc --input $patt --output $output --option=debug rm -f $patt rm -f $vend_id_efuse } function generate_kl_pattern() { local argv=("$@") local i=1 # Parse args while [ $i -lt $# ]; do arg="${argv[$i]}" i=$((i + 1)) #echo "generate_kl_pattern arg=$arg" case "$arg" in -etsi) input="${argv[$i]}" echo "reading input=$input" etsi_fuse=true echo "reading etsi_fuse=$etsi_fuse" output="${argv[$i]}".bin echo "reading output=$output" ;; -dgpk1) input="${argv[$i]}" echo "reading input=$input" dgpk1_fuse=true echo "reading dgpk1_fuse=$dgpk1_fuse" output="${argv[$i]}".bin echo "reading output=$output" ;; -dgpk2) input="${argv[$i]}" echo "reading input=$input" dgpk2_fuse=true echo "reading dgpk2_fuse=$dgpk2_fuse" output="${argv[$i]}".bin echo "reading output=$output" ;; *) echo "Unknown option $arg"; exit 1 ;; esac i=$((i + 1)) done # Verify args if [ -z "$input" ]; then echo Error: Missing input file option ; exit 1; fi if [ -z "$output" ]; then echo Error: Missing output path option ; exit 1; fi local patt=$(mktemp -p .) local etsi_sck_0=$(mktemp -p .) local etsi_sck_1=$(mktemp -p .) local etsi_sck_2=$(mktemp -p .) local etsi_sck_3=$(mktemp -p .) local etsi_config_0=$(mktemp -p .) local etsi_config_1=$(mktemp -p .) local etsi_config_2=$(mktemp -p .) local etsi_config_3=$(mktemp -p .) local etsi_sck_lock=$(mktemp -p .) local dgpk_1=$(mktemp -p .) local dgpk_2=$(mktemp -p .) local dgpk_lock=$(mktemp -p .) echo "reading $input, Generating $output" dos2unix $input sed -i -e '$a\' $input #Generate empty efuse pattern bytes array dd if=/dev/zero of=$patt count=1024 bs=1 &> /dev/null if [ "$etsi_fuse" != "" ]; then # Construct zero-filled etsi_sck0~3 dd if=/dev/zero of=$etsi_sck_0 count=16 bs=1 &>/dev/null dd if=/dev/zero of=$etsi_sck_1 count=16 bs=1 &>/dev/null dd if=/dev/zero of=$etsi_sck_2 count=16 bs=1 &>/dev/null dd if=/dev/zero of=$etsi_sck_3 count=16 bs=1 &>/dev/null # Construct zero-filled etsi_sck0~3_config dd if=/dev/zero of=$etsi_config_0 count=4 bs=1 &>/dev/null dd if=/dev/zero of=$etsi_config_1 count=4 bs=1 &>/dev/null dd if=/dev/zero of=$etsi_config_2 count=4 bs=1 &>/dev/null dd if=/dev/zero of=$etsi_config_3 count=4 bs=1 &>/dev/null # Construct zero-filled etsi_sck_0~1_lock dd if=/dev/zero of=$etsi_sck_lock count=1 bs=1 &>/dev/null b_etsi_sck_lock=$(xxd -ps -l1 $etsi_sck_lock) fi if [ "$dgpk1_fuse" != "" ]; then # Construct zero-filled dgpk1 dd if=/dev/zero of=$dgpk_1 count=16 bs=1 &>/dev/null # Construct zero-filled dgpk1_lock dd if=/dev/zero of=$dgpk_lock count=1 bs=1 &>/dev/null b_dgpk_1_lock=$(xxd -ps -l1 $dgpk_lock) fi if [ "$dgpk2_fuse" != "" ]; then # Construct zero-filled dgpk2 dd if=/dev/zero of=$dgpk_2 count=16 bs=1 &>/dev/null # Construct zero-filled dgpk2_lock dd if=/dev/zero of=$dgpk_lock count=1 bs=1 &>/dev/null b_dgpk_2_lock=$(xxd -ps -l1 $dgpk_lock) fi while IFS=',' read feat sz value do len_value=${#value} case $feat in ETSI_SCK_0) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_sck_0 ;; ETSI_SCK_1) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_sck_1 ;; ETSI_SCK_2) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_sck_2 ;; ETSI_SCK_3) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_sck_3 ;; ETSI_SCK_CONFIG_0) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_config_0 ;; ETSI_SCK_CONFIG_1) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_config_1 ;; ETSI_SCK_CONFIG_2) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_config_2 ;; ETSI_SCK_CONFIG_3) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $etsi_config_3 ;; ETSI_SCK_0_LOCK) echo found ${feat} bit length ${sz} value ${value} if ([ "$value" != "0" ] && [ "$value" != "1" ]); then echo feature $feat : $value is not in expected range break fi if [ "$value" == "1" ]; then b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x01 )))" fi ;; ETSI_SCK_1_LOCK) echo found ${feat} bit length ${sz} value ${value} if ([ "$value" != "0" ] && [ "$value" != "1" ]); then echo feature $feat : $value is not in expected range break fi if [ "$value" == "1" ]; then b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x02 )))" fi ;; ETSI_SCK_2_LOCK) echo found ${feat} bit length ${sz} value ${value} if ([ "$value" != "0" ] && [ "$value" != "1" ]); then echo feature $feat : $value is not in expected range break fi if [ "$value" == "1" ]; then b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x04 )))" fi ;; ETSI_SCK_3_LOCK) echo found ${feat} bit length ${sz} value ${value} if ([ "$value" != "0" ] && [ "$value" != "1" ]); then echo feature $feat : $value is not in expected range break fi if [ "$value" == "1" ]; then b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x08 )))" fi ;; DGPK_1) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $dgpk_1 ;; DGPK_2) echo found ${feat} bit length ${sz} value ${value} if [ $len_value != $(($sz / 4)) ]; then echo feature $feat : $value has invalid length $(($len_value * 4)). echo expected length is $sz bits. break fi if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then echo $feat:$value invalid format, Only hexadecimal numbers are acceptable. break fi echo $value | xxd -r -p > $dgpk_2 ;; DGPK_1_LOCK) echo found ${feat} bit length ${sz} value ${value} if ([ "$value" != "0" ] && [ "$value" != "1" ]); then echo feature $feat : $value is not in expected range break fi if [ "$value" == "1" ]; then b_dgpk_1_lock="$(printf %02x $(( 0x$b_dgpk_1_lock | 0x10 )))" fi ;; DGPK_2_LOCK) echo found ${feat} bit length ${sz} value ${value} if ([ "$value" != "0" ] && [ "$value" != "1" ]); then echo feature $feat : $value is not in expected range break fi if [ "$value" == "1" ]; then b_dgpk_2_lock="$(printf %02x $(( 0x$b_dgpk_2_lock | 0x20 )))" fi ;; *) echo Feature ${feat} is not supported ;; esac done < <(tail -n +2 $input) if [ "$etsi_fuse" != "" ]; then #ETSI_SCK_0, 56=block#56 dd if="$etsi_sck_0" of="$patt" bs=16 seek=56 count=1 conv=notrunc >& /dev/null dd if="$etsi_sck_1" of="$patt" bs=16 seek=57 count=1 conv=notrunc >& /dev/null dd if="$etsi_sck_2" of="$patt" bs=16 seek=58 count=1 conv=notrunc >& /dev/null dd if="$etsi_sck_3" of="$patt" bs=16 seek=59 count=1 conv=notrunc >& /dev/null #ETSI_CONFIG_0, 56=(128/32)*block#14 dd if="$etsi_config_0" of="$patt" bs=4 seek=56 count=1 conv=notrunc >& /dev/null dd if="$etsi_config_1" of="$patt" bs=4 seek=57 count=1 conv=notrunc >& /dev/null dd if="$etsi_config_2" of="$patt" bs=4 seek=58 count=1 conv=notrunc >& /dev/null dd if="$etsi_config_3" of="$patt" bs=4 seek=59 count=1 conv=notrunc >& /dev/null #LICENSE_LOCK_0_B56_LOCK, 471=(Byte offset: 0x1D7) echo $b_etsi_sck_lock | xxd -r -p > $etsi_sck_lock dd if="$etsi_sck_lock" of="$patt" bs=1 seek=471 count=1 conv=notrunc >& /dev/null fi if [ "$dgpk1_fuse" != "" ]; then #DGPK_1, 52=block#52 dd if="$dgpk_1" of="$patt" bs=16 seek=52 count=1 conv=notrunc >& /dev/null #LICENSE_LOCK_0_B52_LOCK, 470=(Byte offset: 0x1D6) echo $b_dgpk_1_lock | xxd -r -p > $dgpk_lock dd if="$dgpk_lock" of="$patt" bs=1 seek=470 count=1 conv=notrunc >& /dev/null fi if [ "$dgpk2_fuse" != "" ]; then #DGPK_2, 53=block#53 dd if="$dgpk_2" of="$patt" bs=16 seek=53 count=1 conv=notrunc >& /dev/null #LICENSE_LOCK_0_B52_LOCK, 470=(Byte offset: 0x1D6) echo $b_dgpk_2_lock | xxd -r -p > $dgpk_lock dd if="$dgpk_lock" of="$patt" bs=1 seek=470 count=1 conv=notrunc >& /dev/null fi ${BASEDIR_TOP}/aml_encrypt_s4 --efsproc --input $patt --output $output --option=debug rm -f $patt rm -f $etsi_sck_lock rm -f $etsi_config_0 rm -f $etsi_config_1 rm -f $etsi_config_2 rm -f $etsi_config_3 rm -f $etsi_sck_0 rm -f $etsi_sck_1 rm -f $etsi_sck_2 rm -f $etsi_sck_3 rm -f $dgpk_lock rm -f $dgpk_1 rm -f $dgpk_2 } parse_main() { case "$@" in --help) usage ;; --version) echo "$(basename $0) version $VERSION" ;; *--audio-id*) generate_audio_id_pattern "$@" ;; *--device-vendor-segid*) generate_vendor_id_pattern "$@" ;; *--device-scs-segid*) generate_mkt_id_pattern "$@" ;; *--kl*) generate_kl_pattern "$@" ;; *-o*) generate_efuse_device_pattern "$@" ;; *) usage "$@" ;; esac } parse_main "$@"