s1a/bin/efuse-gen.sh

 #!/bin/bash

EXEC_BASEDIR=$(dirname $(readlink -f $0))
BASEDIR_TOP=$(readlink -f ${EXEC_BASEDIR}/..)
VENDOR_KEYTOOL=${EXEC_BASEDIR}/../binary-tool/vendor-keytool
#
# Settings
#
VERSION=0.4

# Check file
check_file() {
    if [ ! -f "$2" ]; then echo Error: Unable to open $1: \""$2"\"; exit 1 ; fi
}

# Check file is size or exit. $1: file, $2: size
check_size() {
    local filesize=$(wc -c < "$1")
    if [ $filesize -ne $2 ]; then
        echo "Error: File \"$1\" incorrect size. Was $filesize, expected $2"
        exit 1
    fi
}

# Check optional file argument exists and is given size
# $1 arg name
# $2 size
# $3 file
check_opt_file() {
    if [ -n "$3" ]; then
        check_file "$1" "$3"
        local filesize=$(wc -c < "$3")
        if [ $filesize -ne $2 ]; then
            echo "Incorrect size $filesize != $2 for $1 $3"
            exit 1
        fi
    fi
}

check_opt_boolean() {
    if [ -n "$2" ]; then
        if [ "$2" != "true" ] && [ "$2" != "false" ]; then
            echo Error: invalid value $1: \""$2"\"
            exit 1
        fi
    fi
}

usage() {
    cat << EOF
Usage: $(basename $0) --help
       $(basename $0) --version
       $(basename $0) [--device-roothash device_roothash.bin] \\
                      [--dvgk dvgk.bin] \\
                      [--dvuk dvuk.bin] \\
                      [--enable-usb-password true] \\
                      [--enable-dif-password true] \\
                      [--enable-dvuk-derive-with-cid true] \\
                      [--enable-device-vendor-scs true] \\
                      -o pattern.efuse
       $(basename $0) --audio-id audio_id_value \\
                      -o audio_id.efuse
       $(basename $0) --device-scs-vendor-segid seg_id_value \\
                      -o device-scs-vendor-id.efuse
       $(basename $0) --kl -etsi [csv_file_input for etsi] \\
       $(basename $0) --kl -dgpk1 [csv_file_input for dgpk1] \\
       $(basename $0) --kl -dgpk2 [csv_file_input for dgpk2]

EOF
    exit 1
}

function generate_efuse_device_pattern() {
    local argv=("$@")
    local i=0
	local patt_text=$(mktemp --tmpdir)

    # Parse args
    while [ $i -lt $# ]; do
        arg="${argv[$i]}"
        #echo "i=$i argv[$i]=${argv[$i]}"
        i=$((i + 1))
        case "$arg" in
            -o)
                output="${argv[$i]}" ;;
            --dvgk)
                dvgk="${argv[$i]}" ;;
            --dvuk)
                dvuk="${argv[$i]}" ;;
			--device-roothash)
                device_roothash="${argv[$i]}" ;;
            --enable-usb-password)
                enable_usb_password="${argv[$i]}" ;;
            --enable-dif-password)
                enable_dif_password="${argv[$i]}" ;;
            --enable-dvuk-derive-with-cid)
                enable_dvuk_derive_with_cid="${argv[$i]}" ;;
            --enable-device-vendor-scs)
                enable_device_vendor_scs="${argv[$i]}" ;;
            *)
                echo "Unknown option $arg"; exit 1
                ;;
        esac
        i=$((i + 1))
    done

    # Verify args
    if [ -z "$output" ]; then echo Error: Missing output file option -o; exit 1; fi

    check_opt_file input 1024 "$input"
    check_opt_file dvgk 16 "$dvgk"
    check_opt_file dvuk 16 "$dvuk"
    check_opt_file device_roothash 32 "$device_roothash"

    check_opt_boolean enable-usb-password "$enable_usb_password"
    check_opt_boolean enable-dif-password "$enable_dif_password"
    check_opt_boolean enable-dvuk-derive-with-cid "$enable_dvuk_derive_with_cid"
    check_opt_boolean enable-device-vendor-scs "$enable_device_vendor_scs"

	#efuse_obj mode
	if [ "$dvgk" != "" ]; then
		keyinfo="$(xxd -p -c 16 $dvgk)"
		echo "efuse_obj set DVGK $keyinfo" >> $patt_text
		echo "efuse_obj lock DVGK" >> $patt_text
	fi

	if [ "$dvuk" != "" ]; then
		keyinfo="$(xxd -p -c 16 $dvuk)"
		echo "efuse_obj set DVUK $keyinfo" >> $patt_text
		echo "efuse_obj lock DVUK" >> $patt_text
	fi

	if [ "$device_roothash" != "" ]; then
		keyinfo="$(xxd -p -c 32 $device_roothash)"
		echo "efuse_obj set HASH_NORMAL_DEVICE_ROOTCERT $keyinfo" >> $patt_text
		echo "efuse_obj lock HASH_NORMAL_DEVICE_ROOTCERT" >> $patt_text
	fi

	if [ "$enable_device_vendor_scs" == "true" ]; then
		echo "efuse_obj set FEAT_ENABLE_DEVICE_ROOT_PUBRSA_PROT 01" >> $patt_text
		echo "efuse_obj set FEAT_ENABLE_DEVICE_LVL1_PUBRSA_PROT 01" >> $patt_text
		echo "efuse_obj set FEAT_ENABLE_DEVICE_LVLX_PUBRSA_PROT 01" >> $patt_text
		echo "efuse_obj set FEAT_ENABLE_DEVICE_VENDOR_SIG 01" >> $patt_text
		echo "efuse_obj set FEAT_ENABLE_DEVICE_PROT 01" >> $patt_text
		echo "efuse_obj set FEAT_ENABLE_DEVICE_SCS_SIG 01" >> $patt_text
	fi

	if [ "$enable_usb_password" == "true" ]; then
		echo "efuse_obj set FEAT_ENABLE_USB_AUTH 01" >> $patt_text
	fi

	if [ "$enable_dif_password" == "true" ]; then
		echo "efuse_obj set FEAT_ENABLE_DIF_MASTER_PROT 01" >> $patt_text
	fi

	if [ "$enable_dvuk_derive_with_cid" == "true" ]; then
		echo "efuse_obj set FEAT_ENABLE_DVUK_DERIVE_WITH_CID 01" >> $patt_text
	fi

	cp $patt_text $output
	rm -f $patt_text
}

function generate_audio_id_pattern() {
    local argv=("$@")
    local i=0
	local patt_text=$(mktemp --tmpdir)

    # Parse args
    i=0
    while [ $i -lt $# ]; do
        arg="${argv[$i]}"
        #echo "i=$i argv[$i]=${argv[$i]}"
        i=$((i + 1))
        case "$arg" in
            --audio-id)
                audio_id_value="${argv[$i]}" ;;
           -o)
                output="${argv[$i]}" ;;
            *)
                echo "Unknown option $arg"; exit 1
                ;;
        esac
        i=$((i + 1))
    done

    # Verify args
    if [ -z "$output" ]; then echo Error: Missing output file option -o; exit 1; fi

    if [ -z $audio_id_value ]; then
        echo Error: invalid audio_id_value
        exit 1
    fi

	#efuse_obj mode
	v=$(printf %08x $audio_id_value)
	id_info=${v:6:2}${v:4:2}${v:2:2}${v:0:2}
	echo "efuse_obj set AUDIO_VENDOR_ID $id_info" >> $patt_text
	echo "efuse_obj lock AUDIO_VENDOR_ID" >> $patt_text
	cp $patt_text $output
	rm -f $patt_text
}

function generate_mkt_id_pattern() {
    local argv=("$@")
    local i=0
	local patt_text=$(mktemp --tmpdir)

    # Parse args
    i=0
    while [ $i -lt $# ]; do
        arg="${argv[$i]}"
        #echo "i=$i argv[$i]=${argv[$i]}"
        i=$((i + 1))
        case "$arg" in
            --device-scs-vendor-segid)
                mkt_id_value="${argv[$i]}" ;;
           -o)
                output="${argv[$i]}" ;;
            *)
                echo "Unknown option $arg"; exit 1
                ;;
        esac
        i=$((i + 1))
    done

    # Verify args
    if [ -z "$output" ]; then echo Error: Missing output file option -o; exit 1; fi

    if [ -z $mkt_id_value ]; then
        echo Error: invalid mkt_id_value
        exit 1
    fi

	#efuse_obj mode
	v=$(printf %08x $mkt_id_value)
	id_info=${v:6:2}${v:4:2}${v:2:2}${v:0:2}
	echo "efuse_obj set DEVICE_SCS_VENDOR_SEGID $id_info" >> $patt_text
	echo "efuse_obj lock DEVICE_SCS_VENDOR_SEGID" >> $patt_text
	cp $patt_text $output
	rm -f $patt_text
}

function generate_kl_pattern() {
    local argv=("$@")
    local i=1

    # Parse args
    while [ $i -lt $# ]; do
        arg="${argv[$i]}"
        i=$((i + 1))
        #echo "generate_kl_pattern arg=$arg"
        case "$arg" in
            -etsi)
                input="${argv[$i]}"
                echo "reading input=$input"
                etsi_fuse=true
                echo "reading etsi_fuse=$etsi_fuse"
                output="${argv[$i]}".bin
                echo "reading output=$output"
                ;;
            -dgpk1)
                input="${argv[$i]}"
                echo "reading input=$input"
                dgpk1_fuse=true
                echo "reading dgpk1_fuse=$dgpk1_fuse"
                output="${argv[$i]}".bin
                echo "reading output=$output"
                ;;
            -dgpk2)
                input="${argv[$i]}"
                echo "reading input=$input"
                dgpk2_fuse=true
                echo "reading dgpk2_fuse=$dgpk2_fuse"
                output="${argv[$i]}".bin
                echo "reading output=$output"
                ;;
            *)
                echo "Unknown option $arg"; exit 1
                ;;
        esac
        i=$((i + 1))
    done

    # Verify args
    if [ -z "$input" ]; then echo Error: Missing input file option ; exit 1; fi
    if [ -z "$output" ]; then echo Error: Missing output path option ; exit 1; fi

    local patt=$(mktemp -p .)
	local etsi_sck_0=$(mktemp -p .)
	local etsi_sck_1=$(mktemp -p .)
	local etsi_sck_2=$(mktemp -p .)
	local etsi_sck_3=$(mktemp -p .)
    local etsi_config_0=$(mktemp -p .)
    local etsi_config_1=$(mktemp -p .)
    local etsi_config_2=$(mktemp -p .)
    local etsi_config_3=$(mktemp -p .)
	local etsi_sck_lock=$(mktemp -p .)

    local dgpk_1=$(mktemp -p .)
	local dgpk_2=$(mktemp -p .)
	local dgpk_lock=$(mktemp -p .)

    echo "reading $input, Generating $output"
    dos2unix $input
    sed -i -e '$a\' $input

    #Generate empty efuse pattern bytes array
    dd if=/dev/zero of=$patt count=1024 bs=1 &> /dev/null


	if [ "$etsi_fuse" != "" ]; then
        # Construct zero-filled etsi_sck0~3
        dd if=/dev/zero of=$etsi_sck_0 count=16 bs=1 &>/dev/null
        dd if=/dev/zero of=$etsi_sck_1 count=16 bs=1 &>/dev/null
        dd if=/dev/zero of=$etsi_sck_2 count=16 bs=1 &>/dev/null
        dd if=/dev/zero of=$etsi_sck_3 count=16 bs=1 &>/dev/null

        # Construct zero-filled etsi_sck0~3_config
        dd if=/dev/zero of=$etsi_config_0 count=4 bs=1 &>/dev/null
        dd if=/dev/zero of=$etsi_config_1 count=4 bs=1 &>/dev/null
        dd if=/dev/zero of=$etsi_config_2 count=4 bs=1 &>/dev/null
        dd if=/dev/zero of=$etsi_config_3 count=4 bs=1 &>/dev/null

        # Construct zero-filled etsi_sck_0~1_lock
        dd if=/dev/zero of=$etsi_sck_lock count=1 bs=1 &>/dev/null

        b_etsi_sck_lock=$(xxd -ps -l1 $etsi_sck_lock)
	fi

	if [ "$dgpk1_fuse" != "" ]; then
		# Construct zero-filled dgpk1
        dd if=/dev/zero of=$dgpk_1 count=16 bs=1 &>/dev/null

        # Construct zero-filled dgpk1_lock
	    dd if=/dev/zero of=$dgpk_lock count=1 bs=1 &>/dev/null
        b_dgpk_1_lock=$(xxd -ps -l1 $dgpk_lock)
	fi

    if [ "$dgpk2_fuse" != "" ]; then
		# Construct zero-filled dgpk2
        dd if=/dev/zero of=$dgpk_2 count=16 bs=1 &>/dev/null

        # Construct zero-filled dgpk2_lock
	    dd if=/dev/zero of=$dgpk_lock count=1 bs=1 &>/dev/null
        b_dgpk_2_lock=$(xxd -ps -l1 $dgpk_lock)
	fi

    while IFS=',' read feat sz value
    do
        len_value=${#value}
        case $feat in
            ETSI_SCK_0)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_sck_0
                ;;
			ETSI_SCK_1)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_sck_1
                ;;
			ETSI_SCK_2)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_sck_2
                ;;
			ETSI_SCK_3)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_sck_3
                ;;
            ETSI_SCK_CONFIG_0)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_config_0
                ;;
            ETSI_SCK_CONFIG_1)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_config_1
                ;;
            ETSI_SCK_CONFIG_2)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_config_2
                ;;
            ETSI_SCK_CONFIG_3)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $etsi_config_3
                ;;
            ETSI_SCK_0_LOCK)
                echo found ${feat} bit length ${sz} value ${value}
                if ([ "$value" != "0" ] && [ "$value" != "1" ]); then
                    echo feature $feat : $value is not in expected range
                    break
                fi
                if [ "$value" == "1" ]; then
                    b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x01 )))"
                fi
                ;;
            ETSI_SCK_1_LOCK)
                echo found ${feat} bit length ${sz} value ${value}
                if ([ "$value" != "0" ] && [ "$value" != "1" ]); then
                    echo feature $feat : $value is not in expected range
                    break
                fi
                if [ "$value" == "1" ]; then
                    b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x02 )))"
                fi
                ;;
            ETSI_SCK_2_LOCK)
                echo found ${feat} bit length ${sz} value ${value}
                if ([ "$value" != "0" ] && [ "$value" != "1" ]); then
                    echo feature $feat : $value is not in expected range
                    break
                fi
                if [ "$value" == "1" ]; then
                    b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x04 )))"
                fi
                ;;
            ETSI_SCK_3_LOCK)
                echo found ${feat} bit length ${sz} value ${value}
                if ([ "$value" != "0" ] && [ "$value" != "1" ]); then
                    echo feature $feat : $value is not in expected range
                    break
                fi
                if [ "$value" == "1" ]; then
                    b_etsi_sck_lock="$(printf %02x $(( 0x$b_etsi_sck_lock | 0x08 )))"
                fi
                ;;
            DGPK_1)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $dgpk_1
                ;;
			DGPK_2)
                echo found ${feat} bit length ${sz} value ${value}
                if [ $len_value != $(($sz / 4)) ]; then
                    echo feature $feat : $value has invalid length $(($len_value * 4)).
                    echo expected length is $sz bits.
                    break
                fi
                if ! [[ $value =~ ^[0-9a-fA-F]{$len_value}$ ]]; then
                    echo $feat:$value invalid format, Only hexadecimal numbers are acceptable.
                    break
                fi
                echo $value | xxd -r -p > $dgpk_2
                ;;
            DGPK_1_LOCK)
                echo found ${feat} bit length ${sz} value ${value}
                if ([ "$value" != "0" ] && [ "$value" != "1" ]); then
                    echo feature $feat : $value is not in expected range
                    break
                fi
                if [ "$value" == "1" ]; then
                    b_dgpk_1_lock="$(printf %02x $(( 0x$b_dgpk_1_lock | 0x10 )))"
                fi
                ;;
            DGPK_2_LOCK)
                echo found ${feat} bit length ${sz} value ${value}
                if ([ "$value" != "0" ] && [ "$value" != "1" ]); then
                    echo feature $feat : $value is not in expected range
                    break
                fi
                if [ "$value" == "1" ]; then
                    b_dgpk_2_lock="$(printf %02x $(( 0x$b_dgpk_2_lock | 0x20 )))"
                fi
                ;;
			*)
                echo Feature ${feat} is not supported
                ;;
        esac
    done < <(tail -n +2 $input)

    if [ "$etsi_fuse" != "" ]; then
        #ETSI_SCK_0, 56=block#56
        dd if="$etsi_sck_0" of="$patt" bs=16 seek=56 count=1 conv=notrunc >& /dev/null
        dd if="$etsi_sck_1" of="$patt" bs=16 seek=57 count=1 conv=notrunc >& /dev/null
        dd if="$etsi_sck_2" of="$patt" bs=16 seek=58 count=1 conv=notrunc >& /dev/null
        dd if="$etsi_sck_3" of="$patt" bs=16 seek=59 count=1 conv=notrunc >& /dev/null

        #ETSI_CONFIG_0, 56=(128/32)*block#14
        dd if="$etsi_config_0" of="$patt" bs=4 seek=56 count=1 conv=notrunc >& /dev/null
        dd if="$etsi_config_1" of="$patt" bs=4 seek=57 count=1 conv=notrunc >& /dev/null
        dd if="$etsi_config_2" of="$patt" bs=4 seek=58 count=1 conv=notrunc >& /dev/null
        dd if="$etsi_config_3" of="$patt" bs=4 seek=59 count=1 conv=notrunc >& /dev/null

        #LICENSE_LOCK_0_B56_LOCK, 471=(Byte offset: 0x1D7)
        echo $b_etsi_sck_lock | xxd -r -p > $etsi_sck_lock
        dd if="$etsi_sck_lock" of="$patt" bs=1 seek=471 count=1 conv=notrunc >& /dev/null
	fi

	if [ "$dgpk1_fuse" != "" ]; then
		#DGPK_1, 52=block#52
	    dd if="$dgpk_1" of="$patt" bs=16 seek=52 count=1 conv=notrunc >& /dev/null

        #LICENSE_LOCK_0_B52_LOCK, 470=(Byte offset: 0x1D6)
        echo $b_dgpk_1_lock | xxd -r -p > $dgpk_lock
        dd if="$dgpk_lock" of="$patt" bs=1 seek=470 count=1 conv=notrunc >& /dev/null
	fi

    if [ "$dgpk2_fuse" != "" ]; then
		#DGPK_2, 53=block#53
        dd if="$dgpk_2" of="$patt" bs=16 seek=53 count=1 conv=notrunc >& /dev/null

        #LICENSE_LOCK_0_B52_LOCK, 470=(Byte offset: 0x1D6)
        echo $b_dgpk_2_lock | xxd -r -p > $dgpk_lock
        dd if="$dgpk_lock" of="$patt" bs=1 seek=470 count=1 conv=notrunc >& /dev/null
	fi

	${BASEDIR_TOP}/aml_encrypt_s4 --efsproc --input $patt --output $output --option=debug

	rm -f $patt
    rm -f $etsi_sck_lock
    rm -f $etsi_config_0
    rm -f $etsi_config_1
    rm -f $etsi_config_2
    rm -f $etsi_config_3
    rm -f $etsi_sck_0
    rm -f $etsi_sck_1
    rm -f $etsi_sck_2
    rm -f $etsi_sck_3

    rm -f $dgpk_lock
    rm -f $dgpk_1
    rm -f $dgpk_2
}

parse_main() {
    case "$@" in
        --help)
            usage
            ;;
        --version)
            echo "$(basename $0) version $VERSION"
            ;;
        *--audio-id*)
            generate_audio_id_pattern "$@"
            ;;
        *--device-scs-vendor-segid*)
            generate_mkt_id_pattern "$@"
            ;;
        *--kl*)
            generate_kl_pattern "$@"
            ;;
        *-o*)
            generate_efuse_device_pattern "$@"
            ;;
        *)
            usage "$@"
            ;;
    esac
}

parse_main "$@"