# CHIPSEC: Platform Security Assessment Framework # Copyright (c) 2018 - 2021, Intel Corporation # Copyright (c) 2024, Amd Corporation # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; Version 2. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. # # Contact information: # chipsec@intel.com # AMD: # chipsec@amd.com # """ Displays CPU information Reference: - Intel 64 and IA-32 Architectures Software Developer Manual (SDM) - https://www.intel.com/content/www/us/en/developer/articles/technical/intel-sdm.html Usage: ``chipsec_main -m common.cpu.cpu_info`` Examples: >>> chipsec_main.py -m common.cpu.cpu_info Registers used: - IA32_BIOS_SIGN_ID.MICROCODE .. note: No PASS/FAIL returned, INFORMATION only. """ import struct from chipsec.module_common import BaseModule, CPU from chipsec.library.returncode import ModuleResult from chipsec.library.defines import bytestostring from typing import List TAGS = [CPU] METADATA_TAGS = ['OPENSOURCE', 'IA', 'COMMON', 'CPU', 'CPU_INFO'] class cpu_info(BaseModule): def __init__(self): super(cpu_info, self).__init__() self.cs.set_scope({ "IA32_BIOS_SIGN_ID": "8086.MSR", }) self.result.url = 'https://chipsec.github.io/modules/chipsec.modules.common.cpu.cpu_info.html' def is_supported(self) -> bool: if self.cs.is_intel(): if self.cs.register.has_field('IA32_BIOS_SIGN_ID', 'MICROCODE'): return True self.logger.log_important('IA32_BIOS_SIGN_ID.MICROCODE not defined for platform. Skipping module.') else: return self.cs.is_amd() return False def run_intel(self, module_argv: List[str]) -> int: signId = self.cs.register.get_list_by_name('IA32_BIOS_SIGN_ID') # thread_count = 1 # if not self.cs.os_helper.is_efi(): # thread_count = self.cs.hals.msr.get_cpu_thread_count() # for thread in range(thread_count): for reg in signId: # Handle processor binding so we are always checking processor 0 # for this example. No need to do this in UEFI Shell. if not self.cs.os_helper.is_efi(): self.cs.helper.set_affinity(reg.instance) regdata = reg.read_field('MICROCODE') self.logger.log(f'[*] Thread {reg.instance:04d}') brand = '' for eax_val in [0x80000002, 0x80000003, 0x80000004]: regs = self.cs.hals.cpu.cpuid(eax_val, 0) for i in range(4): brand += bytestostring(struct.pack('> 4) & 0xF family = (eax >> 8) & 0xF if (family == 0x0F) or (family == 0x06): model = ((eax >> 12) & 0xF0) | model if family == 0x0F: family = ((eax >> 20) & 0xFF) | family self.logger.log(f'[*] Family: {family:02X} Model: {model:02X} Stepping: {stepping:01X}') self.logger.log(f'[*] Microcode: {regdata:08X}') self.logger.log('[*]') self.logger.log_information('Processor information displayed') self.result.setStatusBit(self.result.status.INFORMATION) return self.result.getReturnCode(ModuleResult.INFORMATION) def run_amd(self) -> int: # Determine number of threads to check thread_count = 1 if not self.cs.os_helper.is_efi(): (_, _, r_rcx, _) = self.cs.hals.cpu.cpuid(0x80000008,0) thread_count = r_rcx & 0xff for thread in range(thread_count): # Handle processor binding so we are always checking processor 0 # for this example. No need to do this in UEFI Shell. if not self.cs.os_helper.is_efi(): self.cs.helper.set_affinity(thread) # Display thread self.logger.log(f'[*] Thread {thread:04d}') # Get processor brand string brand = '' brand = brand.rstrip('\x00') self.logger.log(f'[*] Processor: {brand}') # "Authentic AMD" e_rbx = int("htuA".encode('utf-8').hex(),16) #0x68747541 e_rcx = int("DMAc".encode('utf-8').hex(),16) #0x444D4163 e_rdx = int("itne".encode('utf-8').hex(),16) #0x69746E65 (_, r_rbx, r_rcx, r_rdx) = self.cs.hals.cpu.cpuid(0x00, 0x00) if not(e_rbx == r_rbx and e_rcx == r_rcx and e_rdx == r_rdx): self.logger.log_failed("Not Authentic AMD") self.res = ModuleResult.FAILED return self.res # Get processor version information (r_rax, _, _, _) = self.cs.hals.cpu.cpuid(0x01, 0x00) baseModel = (r_rax >> 4) & 0xF baseFamily = (r_rax >> 8) & 0xF extModel = (r_rax >> 16) & 0xF extFamily = (r_rax >> 20) & 0xF stepping = (r_rax) & 0xF family = baseFamily + extFamily model = (extModel << 4) & baseModel self.logger.log(f'[*] Family: {family:02X} Model: {model:02X} Stepping: {stepping:01X}') # Get microcode revision microcode_rev = self.cs.register.read_field('PATCH_LEVEL', 'PatchLevel', cpu_thread=thread) self.logger.log(f'[*] Microcode: {microcode_rev:08X}') self.logger.log('[*]') self.logger.log_information('Processor information displayed') self.res = ModuleResult.INFORMATION return self.res def run(self, module_argv: List[str]) -> int: # Log the start of the test self.logger.start_test('Current Processor Information:') if self.cs.is_intel(): return self.run_intel(module_argv) else: return self.run_amd()