IN UINTN index

);

//////////////////////////////////////////////////////////////////////////

// Security regions

//////////////////////////////////////////////////////////////////////////

Configure boot loader parameters and tests EFI environment for compatibility

.SH SYNOPSIS

DcsCfg -aa

DcsCfg -ds <BN> -pl

DcsCfg -pf <gpt_file_name> -pl

DcsCfg -ds <BN> -pf <gpt_file_name> -ps

DcsCfg -ds <BN> -pf <gpt_file_name> -pa

DcsCfg -pf <gpt_file_name> -pnt <PNT> -phide <HS> <HE> -ps

DcsCfg -kp <key_file>

DcsCfg -ds <BN> -srm <total_security_regions>

.SH OPTIONS

-ds <BN> – select device

-de <BN> – end device to check (starts from select)

-aa - ask authorization parameters

-ach - create header on block device

-vec <BN> - block device encrypt

-vdc <BN> - block device decrypt

-vcp <BN> - block device change password

-rnd <type> <param>- select rnadom type (0 - none, 1 - file, 2- rdrand, 3 HMAC, 4 OPENSSL 5 TPM)

-rndgen <file> - generate random file

-rndload - load rnd generator state from file

-rndsave - save rnd generator state to file

-pl - GPT list

-pf <gpt_file_name> - file with GPT and params

-ps - save GPT to file

-prndsave - save random state to params

-prndload - load random state from params

-pwdcache - edit password cache in params

-kp <key_file_name> - keys file of platform to save

-srm <SRT> - mark disk as security regions container(write CRC of platform to 61 sector); <SRT> - number of possible security regions

-srw <SRT> - wipe security regions data with random data (write random data [62, 62 + 256 * SRT]) it has to be free! check first partition start sector!

-sra <SRN> - add <gpt_file_name> to security region <SRN>

-wipe <SS SE> - write random data to sectors range [SS,SE]

-osdecrypt - decrypt OS (rescue)

-osrestorekey - restore key (rescue)

-tpmpcrs <s> <e>- print PCRs

-tpmnvlist - List NV regions in TPM

-tpmcfg - Configure TPM

.SH DESCRIPTION

NOTES:

PCRYPTO_INFO gAuthCryptInfo = NULL;

PCRYPTO_INFO gHeaderCryptInfo = NULL;

CHAR8 Header[512];

EFI_HANDLE SecRegionHandle = NULL;

UINT64 SecRegionSector = 0;

ERR_PRINT(L"Header error %d\n", vcres);

return EFI_CRC_ERROR;

}

return EFI_SUCCESS;

}

UINT64 VolumeSize = 0;

PCRYPTO_INFO ci = 0;

EFI_LBA vhsector;

EFI_HANDLE hDisk = NULL;

HARDDRIVE_DEVICE_PATH hdp;

BOOLEAN isPart;

return EFI_NOT_FOUND;

}

if (AskConfirm("Save [N]?", 1)) {

res = bio->WriteBlocks(bio, bio->Media->MediaId, vhsector, 512, Header);

}

if (phDisk != NULL) *phDisk = hDisk;

return res;

}

//////////////////////////////////////////////////////////////////////////

// USB

#define OPT_DISK_START L"-ds"

#define OPT_DISK_END L"-de"

#define OPT_DISK_BOOT L"-db"

#define OPT_USB_LIST L"-ul"

#define OPT_TOUCH_LIST L"-tl"

#define OPT_TOUCH_TEST L"-tt"

#define OPT_BEEP_LIST L"-bl"

#define OPT_BEEP_TEST L"-bt"

#define OPT_SETUP L"-setup"

#define OPT_PARTITION_LIST L"-pl"

#define OPT_PARTITION_FILE L"-pf"

#define OPT_PARTITION_SAVE L"-ps"

#define OPT_PARTITION_RND_SAVE L"-prndsave"

#define OPT_PARTITION_EDIT_PWD_CACHE L"-pwdcache"

#define OPT_KEYFILE_PLATFORM L"-kp"

#define OPT_SECREGION_MARK L"-srm"

#define OPT_SECREGION_WIPE L"-srw"

#define OPT_SECREGION_ADD L"-sra"

#define OPT_SECREGION_DUMP L"-srdump"

#define OPT_WIPE L"-wipe"

#define OPT_OS_DECRYPT L"-osdecrypt"

#define OPT_OS_RESTORE_KEY L"-osrestorekey"

#define OPT_TPM_PCRS L"-tpmpcrs"

#define OPT_TPM_NVLIST L"-tpmnvlist"

#define OPT_TPM_CFG L"-tpmcfg"

#define OPT_TBL_APPEND L"-tba"

#define OPT_TBL_DUMP L"-tbdump"

STATIC CONST SHELL_PARAM_ITEM ParamList[] = {

{ OPT_TBL_DUMP, TypeValue },

{ OPT_TBL_FILE, TypeValue },

{ OPT_WIPE, TypeDoubleValue },

{ OPT_OS_DECRYPT, TypeFlag },

{ OPT_OS_RESTORE_KEY, TypeFlag },

{ OPT_TPM_PCRS, TypeDoubleValue },

{ OPT_TPM_NVLIST, TypeFlag },

{ OPT_TPM_CFG, TypeFlag },

ParamCount = ShellCommandLineGetCount(Package);

// Common parameters

if (ShellCommandLineGetFlag(Package, OPT_DISK_START)) {

CONST CHAR16* opt = NULL;

TestAuthAsk();

}

// Beep

if (ShellCommandLineGetFlag(Package, OPT_BEEP_LIST)) {

PrintSpeakerList();

PrintUsbList();

}

if (ShellCommandLineGetFlag(Package, OPT_RND_LOAD)) {

CONST CHAR16* opt = NULL;

UINT8 temp[4];

InitGraph();

gST->ConOut->EnableCursor(gST->ConOut, TRUE);

ERR_PRINT(L"\n\rInteractive setup is not implemented! Press enter to continue\n\r");

return res;

}

CHAR8* prompt,

CHAR8* str,

UINTN max_len,

int

AskInt(

extern DCS_DISK_ENTRY_LIST *DeList;

extern DCS_DEP_EXEC *DeExecParams;

// DcsCfg data

extern CONST CHAR16* DcsDiskEntrysFileName;

CHAR8* prompt,

CHAR8* str,

UINTN max_len,

{

UINTN len = 0;

return (UINT32)len;

}

DCS_DISK_ENTRY_LIST *DeList = NULL;

EFI_PARTITION_TABLE_HEADER *GptMainHdr = NULL;

EFI_PARTITION_ENTRY *GptMainEntrys = NULL;

goto error;

}

ERR_PRINT(L"Can't alloc CryptoHeader\n");

res = EFI_BUFFER_TOO_SMALL;

goto error;

}

// Load disk IDs

if (EFI_ERROR(res)) {

ERR_PRINT(L"Can't MBR \n");

goto error;

SetMem(&DeDiskId, sizeof(DeDiskId), 0);

DeDiskId.Type = DE_DISKID;

CopyMem(&DeDiskId.GptID, &GptMainHdr->DiskGUID, sizeof(DiskIdGpt));

// Load crypto header

if (EFI_ERROR(res)) {

ERR_PRINT(L"Can't read CryptoHeader\n");

goto error;

MEM_FREE(GptMainEntrys);

MEM_FREE(GptAltHdr);

MEM_FREE(GptAltEntrys);

return res;

}

DeList->Count = DE_IDX_TOTAL;

Offset = 0;

DeList->DE[DE_IDX_CRYPTOHEADER].Sectors.Start = 62 * 512;

DeList_UPDATE_END

)

{

EFI_STATUS res = EFI_SUCCESS;

DeList = (DCS_DISK_ENTRY_LIST*)(DeBuffer + 512);

CopyMem(&DeDiskId, &DeList->DE[DE_IDX_DISKID], sizeof(DeDiskId));

res = BlockIo->WriteBlocks(BlockIo, BlockIo->Media->MediaId,

DeList->DE[i].Sectors.Start >> 9,

(UINTN)DeList->DE[i].Sectors.Length,

}

if (EFI_ERROR(res)) {

ERR_PRINT(L"Write: %r\n", res);

GptSqueze();

GptSort();

GptSyncMainAlt();

}

BOOLEAN