QTI implementation for block keyslot manager and crypto vops for crypto support in CQHCI. Change-Id: I9b64f85ca97c269a6ecd6fde2bb693745d4c43d4 Signed-off-by: Neeraj Soni <neersoni@codeaurora.org>tirimbino
Neeraj Soni
5 years ago
committed by
Gerrit - the friendly Code Review server
parent
a058c82783
commit
8e301b5255
@ -0,0 +1,304 @@ |
||||
// SPDX-License-Identifier: GPL-2.0-only
|
||||
/*
|
||||
* Copyright (c) 2020, Linux Foundation. All rights reserved. |
||||
* |
||||
* This program is free software; you can redistribute it and/or modify |
||||
* it under the terms of the GNU General Public License version 2 and |
||||
* only version 2 as published by the Free Software Foundation. |
||||
* |
||||
* This program is distributed in the hope that it will be useful, |
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
* GNU General Public License for more details. |
||||
* |
||||
*/ |
||||
|
||||
#include <crypto/algapi.h> |
||||
#include "sdhci.h" |
||||
#include "sdhci-pltfm.h" |
||||
#include "sdhci-msm.h" |
||||
#include "cmdq_hci-crypto-qti.h" |
||||
#include <linux/crypto-qti-common.h> |
||||
|
||||
#define RAW_SECRET_SIZE 32 |
||||
#define MINIMUM_DUN_SIZE 512 |
||||
#define MAXIMUM_DUN_SIZE 65536 |
||||
|
||||
static struct cmdq_host_crypto_variant_ops cmdq_crypto_qti_variant_ops = { |
||||
.host_init_crypto = cmdq_crypto_qti_init_crypto, |
||||
.enable = cmdq_crypto_qti_enable, |
||||
.disable = cmdq_crypto_qti_disable, |
||||
.resume = cmdq_crypto_qti_resume, |
||||
.debug = cmdq_crypto_qti_debug, |
||||
}; |
||||
|
||||
static bool ice_cap_idx_valid(struct cmdq_host *host, |
||||
unsigned int cap_idx) |
||||
{ |
||||
return cap_idx < host->crypto_capabilities.num_crypto_cap; |
||||
} |
||||
|
||||
static uint8_t get_data_unit_size_mask(unsigned int data_unit_size) |
||||
{ |
||||
if (data_unit_size < MINIMUM_DUN_SIZE || |
||||
data_unit_size > MAXIMUM_DUN_SIZE || |
||||
!is_power_of_2(data_unit_size)) |
||||
return 0; |
||||
|
||||
return data_unit_size / MINIMUM_DUN_SIZE; |
||||
} |
||||
|
||||
|
||||
void cmdq_crypto_qti_enable(struct cmdq_host *host) |
||||
{ |
||||
int err = 0; |
||||
|
||||
if (!cmdq_host_is_crypto_supported(host)) |
||||
return; |
||||
|
||||
host->caps |= CMDQ_CAP_CRYPTO_SUPPORT; |
||||
|
||||
err = crypto_qti_enable(host->crypto_vops->priv); |
||||
if (err) { |
||||
pr_err("%s: Error enabling crypto, err %d\n", |
||||
__func__, err); |
||||
cmdq_crypto_qti_disable(host); |
||||
} |
||||
} |
||||
|
||||
void cmdq_crypto_qti_disable(struct cmdq_host *host) |
||||
{ |
||||
/* cmdq_crypto_disable_spec(host) and
|
||||
* crypto_qti_disable(host->crypto_vops->priv) |
||||
* are needed here? |
||||
*/ |
||||
} |
||||
|
||||
static int cmdq_crypto_qti_keyslot_program(struct keyslot_manager *ksm, |
||||
const struct blk_crypto_key *key, |
||||
unsigned int slot) |
||||
{ |
||||
struct cmdq_host *host = keyslot_manager_private(ksm); |
||||
int err = 0; |
||||
u8 data_unit_mask; |
||||
int crypto_alg_id; |
||||
|
||||
crypto_alg_id = cmdq_crypto_cap_find(host, key->crypto_mode, |
||||
key->data_unit_size); |
||||
|
||||
if (!cmdq_is_crypto_enabled(host) || |
||||
!cmdq_keyslot_valid(host, slot) || |
||||
!ice_cap_idx_valid(host, crypto_alg_id)) { |
||||
return -EINVAL; |
||||
} |
||||
|
||||
data_unit_mask = get_data_unit_size_mask(key->data_unit_size); |
||||
|
||||
if (!(data_unit_mask & |
||||
host->crypto_cap_array[crypto_alg_id].sdus_mask)) { |
||||
return -EINVAL; |
||||
} |
||||
|
||||
err = crypto_qti_keyslot_program(host->crypto_vops->priv, key, |
||||
slot, data_unit_mask, crypto_alg_id); |
||||
if (err) |
||||
pr_err("%s: failed with error %d\n", __func__, err); |
||||
|
||||
return err; |
||||
} |
||||
|
||||
static int cmdq_crypto_qti_keyslot_evict(struct keyslot_manager *ksm, |
||||
const struct blk_crypto_key *key, |
||||
unsigned int slot) |
||||
{ |
||||
int err = 0; |
||||
struct cmdq_host *host = keyslot_manager_private(ksm); |
||||
|
||||
if (!cmdq_is_crypto_enabled(host) || |
||||
!cmdq_keyslot_valid(host, slot)) |
||||
return -EINVAL; |
||||
|
||||
err = crypto_qti_keyslot_evict(host->crypto_vops->priv, slot); |
||||
if (err) |
||||
pr_err("%s: failed with error %d\n", __func__, err); |
||||
|
||||
return err; |
||||
} |
||||
|
||||
static int cmdq_crypto_qti_derive_raw_secret(struct keyslot_manager *ksm, |
||||
const u8 *wrapped_key, unsigned int wrapped_key_size, |
||||
u8 *secret, unsigned int secret_size) |
||||
{ |
||||
int err = 0; |
||||
|
||||
if (wrapped_key_size <= RAW_SECRET_SIZE) { |
||||
pr_err("%s: Invalid wrapped_key_size: %u\n", __func__, |
||||
wrapped_key_size); |
||||
err = -EINVAL; |
||||
return err; |
||||
} |
||||
if (secret_size != RAW_SECRET_SIZE) { |
||||
pr_err("%s: Invalid secret size: %u\n", __func__, secret_size); |
||||
err = -EINVAL; |
||||
return err; |
||||
} |
||||
memcpy(secret, wrapped_key, secret_size); |
||||
return 0; |
||||
} |
||||
|
||||
static const struct keyslot_mgmt_ll_ops cmdq_crypto_qti_ksm_ops = { |
||||
.keyslot_program = cmdq_crypto_qti_keyslot_program, |
||||
.keyslot_evict = cmdq_crypto_qti_keyslot_evict, |
||||
.derive_raw_secret = cmdq_crypto_qti_derive_raw_secret |
||||
}; |
||||
|
||||
enum blk_crypto_mode_num cmdq_blk_crypto_qti_mode_num_for_alg_dusize( |
||||
enum cmdq_crypto_alg cmdq_crypto_alg, |
||||
enum cmdq_crypto_key_size key_size) |
||||
{ |
||||
/*
|
||||
* Currently the only mode that eMMC and blk-crypto both support. |
||||
*/ |
||||
if (cmdq_crypto_alg == CMDQ_CRYPTO_ALG_AES_XTS && |
||||
key_size == CMDQ_CRYPTO_KEY_SIZE_256) |
||||
return BLK_ENCRYPTION_MODE_AES_256_XTS; |
||||
|
||||
return BLK_ENCRYPTION_MODE_INVALID; |
||||
} |
||||
|
||||
int cmdq_host_init_crypto_qti_spec(struct cmdq_host *host, |
||||
const struct keyslot_mgmt_ll_ops *ksm_ops) |
||||
{ |
||||
int cap_idx = 0; |
||||
int err = 0; |
||||
unsigned int crypto_modes_supported[BLK_ENCRYPTION_MODE_MAX]; |
||||
enum blk_crypto_mode_num blk_mode_num; |
||||
|
||||
/* Default to disabling crypto */ |
||||
host->caps &= ~CMDQ_CAP_CRYPTO_SUPPORT; |
||||
|
||||
if (!(cmdq_readl(host, CQCAP) & CQ_CAP_CS)) { |
||||
pr_debug("%s no crypto capability\n", __func__); |
||||
err = -ENODEV; |
||||
goto out; |
||||
} |
||||
|
||||
/*
|
||||
* Crypto Capabilities should never be 0, because the |
||||
* config_array_ptr > 04h. So we use a 0 value to indicate that |
||||
* crypto init failed, and can't be enabled. |
||||
*/ |
||||
host->crypto_capabilities.reg_val = cmdq_readl(host, CQ_CCAP); |
||||
host->crypto_cfg_register = |
||||
(u32)host->crypto_capabilities.config_array_ptr * 0x100; |
||||
host->crypto_cap_array = |
||||
devm_kcalloc(mmc_dev(host->mmc), |
||||
host->crypto_capabilities.num_crypto_cap, |
||||
sizeof(host->crypto_cap_array[0]), GFP_KERNEL); |
||||
if (!host->crypto_cap_array) { |
||||
err = -ENOMEM; |
||||
pr_err("%s failed to allocate memory\n", __func__); |
||||
goto out; |
||||
} |
||||
|
||||
memset(crypto_modes_supported, 0, sizeof(crypto_modes_supported)); |
||||
|
||||
/*
|
||||
* Store all the capabilities now so that we don't need to repeatedly |
||||
* access the device each time we want to know its capabilities |
||||
*/ |
||||
for (cap_idx = 0; cap_idx < host->crypto_capabilities.num_crypto_cap; |
||||
cap_idx++) { |
||||
host->crypto_cap_array[cap_idx].reg_val = |
||||
cpu_to_le32(cmdq_readl(host, |
||||
CQ_CRYPTOCAP + |
||||
cap_idx * sizeof(__le32))); |
||||
blk_mode_num = cmdq_blk_crypto_qti_mode_num_for_alg_dusize( |
||||
host->crypto_cap_array[cap_idx].algorithm_id, |
||||
host->crypto_cap_array[cap_idx].key_size); |
||||
if (blk_mode_num == BLK_ENCRYPTION_MODE_INVALID) |
||||
continue; |
||||
crypto_modes_supported[blk_mode_num] |= |
||||
host->crypto_cap_array[cap_idx].sdus_mask * 512; |
||||
} |
||||
|
||||
host->ksm = keyslot_manager_create(cmdq_num_keyslots(host), ksm_ops, |
||||
BLK_CRYPTO_FEATURE_STANDARD_KEYS | |
||||
BLK_CRYPTO_FEATURE_WRAPPED_KEYS, |
||||
crypto_modes_supported, host); |
||||
|
||||
if (!host->ksm) { |
||||
err = -ENOMEM; |
||||
goto out; |
||||
} |
||||
/*
|
||||
* In case host controller supports cryptographic operations |
||||
* then, it uses 128bit task descriptor. Upper 64 bits of task |
||||
* descriptor would be used to pass crypto specific informaton. |
||||
*/ |
||||
host->caps |= CMDQ_TASK_DESC_SZ_128; |
||||
|
||||
return 0; |
||||
|
||||
out: |
||||
/* Indicate that init failed by setting crypto_capabilities to 0 */ |
||||
host->crypto_capabilities.reg_val = 0; |
||||
return err; |
||||
} |
||||
|
||||
int cmdq_crypto_qti_init_crypto(struct cmdq_host *host, |
||||
const struct keyslot_mgmt_ll_ops *ksm_ops) |
||||
{ |
||||
int err = 0; |
||||
struct sdhci_host *sdhci = mmc_priv(host->mmc); |
||||
struct sdhci_pltfm_host *pltfm_host = sdhci_priv(sdhci); |
||||
struct sdhci_msm_host *msm_host = pltfm_host->priv; |
||||
struct resource *cmdq_ice_memres = NULL; |
||||
|
||||
cmdq_ice_memres = platform_get_resource_byname(msm_host->pdev, |
||||
IORESOURCE_MEM, |
||||
"cmdq_ice"); |
||||
if (!cmdq_ice_memres) { |
||||
pr_debug("%s ICE not supported\n", __func__); |
||||
host->icemmio = NULL; |
||||
return PTR_ERR(cmdq_ice_memres); |
||||
} |
||||
|
||||
host->icemmio = devm_ioremap(&msm_host->pdev->dev, |
||||
cmdq_ice_memres->start, |
||||
resource_size(cmdq_ice_memres)); |
||||
if (!host->icemmio) { |
||||
pr_err("%s failed to remap ice regs\n", __func__); |
||||
return PTR_ERR(host->icemmio); |
||||
} |
||||
|
||||
err = cmdq_host_init_crypto_qti_spec(host, &cmdq_crypto_qti_ksm_ops); |
||||
if (err) { |
||||
pr_err("%s: Error initiating crypto capabilities, err %d\n", |
||||
__func__, err); |
||||
return err; |
||||
} |
||||
|
||||
err = crypto_qti_init_crypto(&msm_host->pdev->dev, |
||||
host->icemmio, (void **)&host->crypto_vops->priv); |
||||
if (err) { |
||||
pr_err("%s: Error initiating crypto, err %d\n", |
||||
__func__, err); |
||||
} |
||||
return err; |
||||
} |
||||
|
||||
int cmdq_crypto_qti_debug(struct cmdq_host *host) |
||||
{ |
||||
return crypto_qti_debug(host->crypto_vops->priv); |
||||
} |
||||
|
||||
void cmdq_crypto_qti_set_vops(struct cmdq_host *host) |
||||
{ |
||||
return cmdq_crypto_set_vops(host, &cmdq_crypto_qti_variant_ops); |
||||
} |
||||
|
||||
int cmdq_crypto_qti_resume(struct cmdq_host *host) |
||||
{ |
||||
return crypto_qti_resume(host->crypto_vops->priv); |
||||
} |
||||
@ -0,0 +1,33 @@ |
||||
/* Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
* |
||||
* This program is free software; you can redistribute it and/or modify |
||||
* it under the terms of the GNU General Public License version 2 and |
||||
* only version 2 as published by the Free Software Foundation. |
||||
* |
||||
* This program is distributed in the hope that it will be useful, |
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
* GNU General Public License for more details. |
||||
*/ |
||||
|
||||
#ifndef _CMDQ_HCI_CRYPTO_QTI_H |
||||
#define _CMDQ_HCI_CRYPTO_QTI_H |
||||
|
||||
#include "cmdq_hci-crypto.h" |
||||
|
||||
void cmdq_crypto_qti_enable(struct cmdq_host *host); |
||||
|
||||
void cmdq_crypto_qti_disable(struct cmdq_host *host); |
||||
|
||||
#ifdef CONFIG_BLK_INLINE_ENCRYPTION |
||||
int cmdq_crypto_qti_init_crypto(struct cmdq_host *host, |
||||
const struct keyslot_mgmt_ll_ops *ksm_ops); |
||||
#endif |
||||
|
||||
int cmdq_crypto_qti_debug(struct cmdq_host *host); |
||||
|
||||
void cmdq_crypto_qti_set_vops(struct cmdq_host *host); |
||||
|
||||
int cmdq_crypto_qti_resume(struct cmdq_host *host); |
||||
|
||||
#endif /* _CMDQ_HCI_CRYPTO_QTI_H */ |
||||
Loading…
Reference in new issue