425 lines
11 KiB
C
425 lines
11 KiB
C
// SPDX-License-Identifier: GPL-2.0
|
|
/*
|
|
* Crypto acceleration support for Rockchip RK3288
|
|
*
|
|
* Copyright (c) 2015, Fuzhou Rockchip Electronics Co., Ltd
|
|
*
|
|
* Author: Zain Wang <zain.wang@rock-chips.com>
|
|
*
|
|
* Some ideas are from marvell-cesa.c and s5p-sss.c driver.
|
|
*/
|
|
#include "rk_crypto_core.h"
|
|
#include "rk_crypto_v1.h"
|
|
#include "rk_crypto_v1_reg.h"
|
|
|
|
#define RK_CRYPTO_DEC BIT(0)
|
|
|
|
static struct rk_alg_ctx *rk_alg_ctx_cast(
|
|
struct rk_crypto_dev *rk_dev)
|
|
{
|
|
struct skcipher_request *req =
|
|
skcipher_request_cast(rk_dev->async_req);
|
|
struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
|
|
return &ctx->algs_ctx;
|
|
}
|
|
|
|
static int rk_crypto_irq_handle(int irq, void *dev_id)
|
|
{
|
|
struct rk_crypto_dev *rk_dev = platform_get_drvdata(dev_id);
|
|
u32 interrupt_status;
|
|
|
|
interrupt_status = CRYPTO_READ(rk_dev, RK_CRYPTO_INTSTS);
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_INTSTS, interrupt_status);
|
|
|
|
if (interrupt_status & 0x0a) {
|
|
dev_warn(rk_dev->dev, "DMA Error\n");
|
|
rk_dev->err = -EFAULT;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void rk_crypto_complete(struct crypto_async_request *base, int err)
|
|
{
|
|
if (base->complete)
|
|
base->complete(base, err);
|
|
}
|
|
|
|
static int rk_handle_req(struct rk_crypto_dev *rk_dev,
|
|
struct skcipher_request *req)
|
|
{
|
|
struct rk_cipher_ctx *ctx = crypto_tfm_ctx(req->base.tfm);
|
|
|
|
if (!IS_ALIGNED(req->cryptlen, ctx->algs_ctx.align_size))
|
|
return -EINVAL;
|
|
else
|
|
return rk_dev->enqueue(rk_dev, &req->base);
|
|
}
|
|
|
|
static int rk_get_bc(u32 algo, u32 mode, u32 *bc_val)
|
|
{
|
|
/* default DES ECB mode */
|
|
*bc_val = 0;
|
|
|
|
switch (algo) {
|
|
case CIPHER_ALGO_DES3_EDE:
|
|
*bc_val |= RK_CRYPTO_TDES_SELECT;
|
|
fallthrough;
|
|
case CIPHER_ALGO_DES:
|
|
if (mode == CIPHER_MODE_ECB)
|
|
*bc_val = 0;
|
|
else if (mode == CIPHER_MODE_CBC)
|
|
*bc_val = RK_CRYPTO_TDES_CHAINMODE_CBC;
|
|
else
|
|
goto error;
|
|
break;
|
|
case CIPHER_ALGO_AES:
|
|
if (mode == CIPHER_MODE_ECB)
|
|
*bc_val = RK_CRYPTO_AES_ECB_MODE;
|
|
else if (mode == CIPHER_MODE_CBC)
|
|
*bc_val = RK_CRYPTO_AES_CBC_MODE;
|
|
else
|
|
goto error;
|
|
break;
|
|
default:
|
|
goto error;
|
|
}
|
|
|
|
return 0;
|
|
error:
|
|
return -EINVAL;
|
|
}
|
|
|
|
static int rk_cipher_setkey(struct crypto_skcipher *cipher,
|
|
const u8 *key, unsigned int keylen)
|
|
{
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(cipher);
|
|
struct skcipher_alg *alg = crypto_skcipher_alg(cipher);
|
|
struct rk_crypto_algt *algt;
|
|
int err;
|
|
|
|
algt = container_of(alg, struct rk_crypto_algt, alg.crypto);
|
|
|
|
CRYPTO_MSG("algo = %x, mode = %x, key_len = %d\n",
|
|
algt->algo, algt->mode, keylen);
|
|
|
|
switch (algt->algo) {
|
|
case CIPHER_ALGO_DES:
|
|
if (keylen != DES_KEY_SIZE)
|
|
goto error;
|
|
|
|
err = verify_skcipher_des_key(cipher, key);
|
|
if (err)
|
|
goto error;
|
|
|
|
break;
|
|
case CIPHER_ALGO_DES3_EDE:
|
|
err = verify_skcipher_des3_key(cipher, key);
|
|
if (err)
|
|
goto error;
|
|
break;
|
|
case CIPHER_ALGO_AES:
|
|
if (keylen != AES_KEYSIZE_128 &&
|
|
keylen != AES_KEYSIZE_192 &&
|
|
keylen != AES_KEYSIZE_256)
|
|
goto error;
|
|
break;
|
|
default:
|
|
goto error;
|
|
}
|
|
|
|
memcpy(ctx->key, key, keylen);
|
|
ctx->keylen = keylen;
|
|
|
|
return 0;
|
|
|
|
error:
|
|
return -EINVAL;
|
|
}
|
|
|
|
|
|
static int rk_cipher_encrypt(struct skcipher_request *req)
|
|
{
|
|
struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
struct skcipher_alg *alg = crypto_skcipher_alg(tfm);
|
|
struct rk_crypto_dev *rk_dev = ctx->rk_dev;
|
|
struct rk_crypto_algt *algt;
|
|
int ret;
|
|
|
|
algt = container_of(alg, struct rk_crypto_algt, alg.crypto);
|
|
|
|
ret = rk_get_bc(algt->algo, algt->mode, &ctx->mode);
|
|
if (ret)
|
|
return ret;
|
|
|
|
CRYPTO_MSG("ctx->mode = %x\n", ctx->mode);
|
|
|
|
return rk_handle_req(rk_dev, req);
|
|
}
|
|
|
|
static int rk_cipher_decrypt(struct skcipher_request *req)
|
|
{
|
|
struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
struct skcipher_alg *alg = crypto_skcipher_alg(tfm);
|
|
struct rk_crypto_dev *rk_dev = ctx->rk_dev;
|
|
struct rk_crypto_algt *algt;
|
|
int ret;
|
|
|
|
algt = container_of(alg, struct rk_crypto_algt, alg.crypto);
|
|
|
|
ret = rk_get_bc(algt->algo, algt->mode, &ctx->mode);
|
|
if (ret)
|
|
return ret;
|
|
|
|
ctx->mode |= RK_CRYPTO_DEC;
|
|
|
|
CRYPTO_MSG("ctx->mode = %x\n", ctx->mode);
|
|
|
|
return rk_handle_req(rk_dev, req);
|
|
}
|
|
|
|
static void rk_ablk_hw_init(struct rk_crypto_dev *rk_dev)
|
|
{
|
|
struct skcipher_request *req =
|
|
skcipher_request_cast(rk_dev->async_req);
|
|
struct crypto_skcipher *cipher = crypto_skcipher_reqtfm(req);
|
|
struct crypto_tfm *tfm = crypto_skcipher_tfm(cipher);
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(cipher);
|
|
u32 ivsize, block, conf_reg = 0;
|
|
|
|
block = crypto_tfm_alg_blocksize(tfm);
|
|
ivsize = crypto_skcipher_ivsize(cipher);
|
|
|
|
if (block == DES_BLOCK_SIZE) {
|
|
memcpy_toio(ctx->rk_dev->reg + RK_CRYPTO_TDES_KEY1_0,
|
|
ctx->key, ctx->keylen);
|
|
ctx->mode |= RK_CRYPTO_TDES_FIFO_MODE |
|
|
RK_CRYPTO_TDES_BYTESWAP_KEY |
|
|
RK_CRYPTO_TDES_BYTESWAP_IV;
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_TDES_CTRL, ctx->mode);
|
|
memcpy_toio(rk_dev->reg + RK_CRYPTO_TDES_IV_0,
|
|
req->iv, ivsize);
|
|
conf_reg = RK_CRYPTO_DESSEL;
|
|
} else {
|
|
memcpy_toio(ctx->rk_dev->reg + RK_CRYPTO_AES_KEY_0,
|
|
ctx->key, ctx->keylen);
|
|
ctx->mode |= RK_CRYPTO_AES_FIFO_MODE |
|
|
RK_CRYPTO_AES_KEY_CHANGE |
|
|
RK_CRYPTO_AES_BYTESWAP_KEY |
|
|
RK_CRYPTO_AES_BYTESWAP_IV;
|
|
if (ctx->keylen == AES_KEYSIZE_192)
|
|
ctx->mode |= RK_CRYPTO_AES_192BIT_key;
|
|
else if (ctx->keylen == AES_KEYSIZE_256)
|
|
ctx->mode |= RK_CRYPTO_AES_256BIT_key;
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_AES_CTRL, ctx->mode);
|
|
memcpy_toio(rk_dev->reg + RK_CRYPTO_AES_IV_0,
|
|
req->iv, ivsize);
|
|
}
|
|
conf_reg |= RK_CRYPTO_BYTESWAP_BTFIFO |
|
|
RK_CRYPTO_BYTESWAP_BRFIFO;
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_CONF, conf_reg);
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_INTENA,
|
|
RK_CRYPTO_BCDMA_ERR_ENA | RK_CRYPTO_BCDMA_DONE_ENA);
|
|
}
|
|
|
|
static void crypto_dma_start(struct rk_crypto_dev *rk_dev)
|
|
{
|
|
struct rk_alg_ctx *alg_ctx = rk_alg_ctx_cast(rk_dev);
|
|
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_BRDMAS, alg_ctx->addr_in);
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_BRDMAL, alg_ctx->count / 4);
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_BTDMAS, alg_ctx->addr_out);
|
|
CRYPTO_WRITE(rk_dev, RK_CRYPTO_CTRL, RK_CRYPTO_BLOCK_START |
|
|
_SBF(RK_CRYPTO_BLOCK_START, 16));
|
|
}
|
|
|
|
static int rk_set_data_start(struct rk_crypto_dev *rk_dev)
|
|
{
|
|
int err;
|
|
struct skcipher_request *req =
|
|
skcipher_request_cast(rk_dev->async_req);
|
|
struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
struct rk_alg_ctx *alg_ctx = rk_alg_ctx_cast(rk_dev);
|
|
u32 ivsize = crypto_skcipher_ivsize(tfm);
|
|
u8 *src_last_blk = page_address(sg_page(alg_ctx->sg_src)) +
|
|
alg_ctx->sg_src->offset + alg_ctx->sg_src->length - ivsize;
|
|
|
|
/* Store the iv that need to be updated in chain mode.
|
|
* And update the IV buffer to contain the next IV for decryption mode.
|
|
*/
|
|
if (ctx->mode & RK_CRYPTO_DEC) {
|
|
memcpy(ctx->iv, src_last_blk, ivsize);
|
|
sg_pcopy_to_buffer(alg_ctx->req_src, alg_ctx->src_nents,
|
|
req->iv, ivsize, alg_ctx->total - ivsize);
|
|
}
|
|
|
|
err = rk_dev->load_data(rk_dev, alg_ctx->sg_src, alg_ctx->sg_dst);
|
|
if (!err)
|
|
crypto_dma_start(rk_dev);
|
|
return err;
|
|
}
|
|
|
|
static int rk_ablk_start(struct rk_crypto_dev *rk_dev)
|
|
{
|
|
struct skcipher_request *req =
|
|
skcipher_request_cast(rk_dev->async_req);
|
|
struct rk_alg_ctx *alg_ctx = rk_alg_ctx_cast(rk_dev);
|
|
int err = 0;
|
|
|
|
alg_ctx->left_bytes = req->cryptlen;
|
|
alg_ctx->total = req->cryptlen;
|
|
alg_ctx->sg_src = req->src;
|
|
alg_ctx->req_src = req->src;
|
|
alg_ctx->src_nents = sg_nents_for_len(req->src, req->cryptlen);
|
|
alg_ctx->sg_dst = req->dst;
|
|
alg_ctx->req_dst = req->dst;
|
|
alg_ctx->dst_nents = sg_nents_for_len(req->dst, req->cryptlen);
|
|
|
|
rk_ablk_hw_init(rk_dev);
|
|
err = rk_set_data_start(rk_dev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static void rk_iv_copyback(struct rk_crypto_dev *rk_dev)
|
|
{
|
|
struct skcipher_request *req =
|
|
skcipher_request_cast(rk_dev->async_req);
|
|
struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
struct rk_alg_ctx *alg_ctx = rk_alg_ctx_cast(rk_dev);
|
|
u32 ivsize = crypto_skcipher_ivsize(tfm);
|
|
|
|
/* Update the IV buffer to contain the next IV for encryption mode. */
|
|
if (!(ctx->mode & RK_CRYPTO_DEC) && req->iv) {
|
|
if (alg_ctx->aligned) {
|
|
memcpy(req->iv, sg_virt(alg_ctx->sg_dst) +
|
|
alg_ctx->sg_dst->length - ivsize, ivsize);
|
|
} else {
|
|
memcpy(req->iv, rk_dev->addr_vir +
|
|
alg_ctx->count - ivsize, ivsize);
|
|
}
|
|
}
|
|
}
|
|
|
|
static void rk_update_iv(struct rk_crypto_dev *rk_dev)
|
|
{
|
|
struct skcipher_request *req =
|
|
skcipher_request_cast(rk_dev->async_req);
|
|
struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
struct rk_alg_ctx *alg_ctx = rk_alg_ctx_cast(rk_dev);
|
|
u32 ivsize = crypto_skcipher_ivsize(tfm);
|
|
u8 *new_iv = NULL;
|
|
|
|
if (ctx->mode & RK_CRYPTO_DEC) {
|
|
new_iv = ctx->iv;
|
|
} else {
|
|
new_iv = page_address(sg_page(alg_ctx->sg_dst)) +
|
|
alg_ctx->sg_dst->offset +
|
|
alg_ctx->sg_dst->length - ivsize;
|
|
}
|
|
|
|
if (ivsize == DES_BLOCK_SIZE)
|
|
memcpy_toio(rk_dev->reg + RK_CRYPTO_TDES_IV_0, new_iv, ivsize);
|
|
else if (ivsize == AES_BLOCK_SIZE)
|
|
memcpy_toio(rk_dev->reg + RK_CRYPTO_AES_IV_0, new_iv, ivsize);
|
|
}
|
|
|
|
/* return:
|
|
* true some err was occurred
|
|
* fault no err, continue
|
|
*/
|
|
static int rk_ablk_rx(struct rk_crypto_dev *rk_dev)
|
|
{
|
|
int err = 0;
|
|
struct rk_alg_ctx *alg_ctx = rk_alg_ctx_cast(rk_dev);
|
|
|
|
CRYPTO_TRACE("left_bytes = %u\n", alg_ctx->left_bytes);
|
|
|
|
err = rk_dev->unload_data(rk_dev);
|
|
if (err)
|
|
goto out_rx;
|
|
|
|
if (alg_ctx->left_bytes) {
|
|
rk_update_iv(rk_dev);
|
|
if (alg_ctx->aligned) {
|
|
if (sg_is_last(alg_ctx->sg_src)) {
|
|
dev_err(rk_dev->dev, "[%s:%d] Lack of data\n",
|
|
__func__, __LINE__);
|
|
err = -ENOMEM;
|
|
goto out_rx;
|
|
}
|
|
alg_ctx->sg_src = sg_next(alg_ctx->sg_src);
|
|
alg_ctx->sg_dst = sg_next(alg_ctx->sg_dst);
|
|
}
|
|
err = rk_set_data_start(rk_dev);
|
|
} else {
|
|
rk_iv_copyback(rk_dev);
|
|
}
|
|
out_rx:
|
|
return err;
|
|
}
|
|
|
|
static int rk_ablk_init_tfm(struct crypto_skcipher *tfm)
|
|
{
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
struct skcipher_alg *alg = crypto_skcipher_alg(tfm);
|
|
struct rk_alg_ctx *alg_ctx = &ctx->algs_ctx;
|
|
struct rk_crypto_algt *algt;
|
|
struct rk_crypto_dev *rk_dev;
|
|
const char *alg_name = crypto_tfm_alg_name(crypto_skcipher_tfm(tfm));
|
|
|
|
algt = container_of(alg, struct rk_crypto_algt, alg.crypto);
|
|
rk_dev = algt->rk_dev;
|
|
|
|
memset(ctx, 0x00, sizeof(*ctx));
|
|
|
|
if (!rk_dev->request_crypto)
|
|
return -EFAULT;
|
|
|
|
rk_dev->request_crypto(rk_dev, alg_name);
|
|
|
|
alg_ctx->align_size = crypto_skcipher_alignmask(tfm) + 1;
|
|
|
|
alg_ctx->ops.start = rk_ablk_start;
|
|
alg_ctx->ops.update = rk_ablk_rx;
|
|
alg_ctx->ops.complete = rk_crypto_complete;
|
|
alg_ctx->ops.irq_handle = rk_crypto_irq_handle;
|
|
|
|
ctx->rk_dev = rk_dev;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void rk_ablk_exit_tfm(struct crypto_skcipher *tfm)
|
|
{
|
|
struct rk_cipher_ctx *ctx = crypto_skcipher_ctx(tfm);
|
|
const char *alg_name = crypto_tfm_alg_name(crypto_skcipher_tfm(tfm));
|
|
|
|
ctx->rk_dev->release_crypto(ctx->rk_dev, alg_name);
|
|
}
|
|
|
|
struct rk_crypto_algt rk_v1_ecb_aes_alg =
|
|
RK_CIPHER_ALGO_INIT(AES, ECB, ecb(aes), ecb-aes-rk);
|
|
|
|
struct rk_crypto_algt rk_v1_cbc_aes_alg =
|
|
RK_CIPHER_ALGO_INIT(AES, CBC, cbc(aes), cbc-aes-rk);
|
|
|
|
struct rk_crypto_algt rk_v1_ecb_des_alg =
|
|
RK_CIPHER_ALGO_INIT(DES, ECB, ecb(des), ecb-des-rk);
|
|
|
|
struct rk_crypto_algt rk_v1_cbc_des_alg =
|
|
RK_CIPHER_ALGO_INIT(DES, CBC, cbc(des), cbc-des-rk);
|
|
|
|
struct rk_crypto_algt rk_v1_ecb_des3_ede_alg =
|
|
RK_CIPHER_ALGO_INIT(DES3_EDE, ECB, ecb(des3_ede), ecb-des3_ede-rk);
|
|
|
|
struct rk_crypto_algt rk_v1_cbc_des3_ede_alg =
|
|
RK_CIPHER_ALGO_INIT(DES3_EDE, CBC, cbc(des3_ede), cbc-des3_ede-rk);
|