Added NSC functions to facilitate updates from NS application

Author: danielinux

include/wolfboot/wolfboot.h

@@ -411,6 +411,32 @@ int wolfBoot_set_encrypt_key(const uint8_t *key, const uint8_t *nonce);
 int wolfBoot_get_encrypt_key(uint8_t *key, uint8_t *nonce);
 int wolfBoot_erase_encrypt_key(void);
 
+#ifndef __WOLFBOOT
+
+/* Applications can access update success/trigger and flash erase/write
+ * via non-secure callable, to facilitate updates
+ */
+
+/* Call wolfBoot_success from non-secure application */
+void wolfBoot_nsc_success(void);
+
+/* Call wolfBoot_update_trigger from non-secure application */
+void wolfBoot_nsc_update_trigger(void);
+
+/* Erase one or more sectors in the update partition.
+ * - address: offset within the update partition ('0' corresponds to PARTITION_UPDATE_ADDRESS)
+ * - len: size, in bytes
+ */
+int wolfBoot_nsc_erase_update(uint32_t address, uint32_t len);
+
+/* Write the content of buffer `buf` and size `len` to the update partition,
+ *  at offset address, from non-secure application
+ * - address: offset within the update partition ('0' corresponds to PARTITION_UPDATE_ADDRESS)
+ * - len: size, in bytes
+ */
+int wolfBoot_nsc_write_update(uint32_t address, const uint8_t *buf, uint32_t len);
+#endif /* !__WOLFBOOT */
+
 
 #ifdef __cplusplus
 }

src/libwolfboot.c

@@ -1984,3 +1984,40 @@ int wolfBoot_ram_decrypt(uint8_t *src, uint8_t *dst)
 }
 #endif /* MMU */
 #endif /* EXT_ENCRYPTED */
+
+#if defined(WOLFCRYPT_SECURE_MODE)
+__attribute__((cmse_nonsecure_entry))
+void wolfBoot_nsc_success(void)
+{
+    wolfBoot_success();
+}
+
+__attribute__((cmse_nonsecure_entry))
+void wolfBoot_nsc_update_trigger(void)
+{
+    wolfBoot_update_trigger();
+}
+
+__attribute__((cmse_nonsecure_entry))
+int wolfBoot_nsc_erase_update(uint32_t address, uint32_t len)
+{
+    if (address > WOLFBOOT_PARTITION_SIZE)
+        return -1;
+    if (address + len > WOLFBOOT_PARTITION_SIZE)
+        return -1;
+    hal_flash_erase(address + WOLFBOOT_PARTITION_UPDATE_ADDRESS, len);
+
+}
+
+__attribute__((cmse_nonsecure_entry))
+int wolfBoot_nsc_write_update(uint32_t address, const uint8_t *buf, uint32_t len)
+{
+    if (address > WOLFBOOT_PARTITION_SIZE)
+        return -1;
+    if (address + len > WOLFBOOT_PARTITION_SIZE)
+        return -1;
+    hal_flash_write(address + WOLFBOOT_PARTITION_UPDATE_ADDRESS, buf, len);
+}
+
+#endif
+