| James Hsiao | 049359d | 2009-02-05 16:18:13 +1100 | [diff] [blame] | 1 | /** | 
 | 2 |  * AMCC SoC PPC4xx Crypto Driver | 
 | 3 |  * | 
 | 4 |  * Copyright (c) 2008 Applied Micro Circuits Corporation. | 
 | 5 |  * All rights reserved. James Hsiao <jhsiao@amcc.com> | 
 | 6 |  * | 
 | 7 |  * This program is free software; you can redistribute it and/or modify | 
 | 8 |  * it under the terms of the GNU General Public License as published by | 
 | 9 |  * the Free Software Foundation; either version 2 of the License, or | 
 | 10 |  * (at your option) any later version. | 
 | 11 |  * | 
 | 12 |  * This program is distributed in the hope that it will be useful, | 
 | 13 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of | 
 | 14 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the | 
 | 15 |  * GNU General Public License for more details. | 
 | 16 |  * | 
 | 17 |  * This file implements the Linux crypto algorithms. | 
 | 18 |  */ | 
 | 19 |  | 
 | 20 | #include <linux/kernel.h> | 
 | 21 | #include <linux/interrupt.h> | 
 | 22 | #include <linux/spinlock_types.h> | 
 | 23 | #include <linux/scatterlist.h> | 
 | 24 | #include <linux/crypto.h> | 
 | 25 | #include <linux/hash.h> | 
 | 26 | #include <crypto/internal/hash.h> | 
 | 27 | #include <linux/dma-mapping.h> | 
 | 28 | #include <crypto/algapi.h> | 
 | 29 | #include <crypto/aes.h> | 
 | 30 | #include <crypto/sha.h> | 
 | 31 | #include "crypto4xx_reg_def.h" | 
 | 32 | #include "crypto4xx_sa.h" | 
 | 33 | #include "crypto4xx_core.h" | 
 | 34 |  | 
 | 35 | void set_dynamic_sa_command_0(struct dynamic_sa_ctl *sa, u32 save_h, | 
 | 36 | 			      u32 save_iv, u32 ld_h, u32 ld_iv, u32 hdr_proc, | 
 | 37 | 			      u32 h, u32 c, u32 pad_type, u32 op_grp, u32 op, | 
 | 38 | 			      u32 dir) | 
 | 39 | { | 
 | 40 | 	sa->sa_command_0.w = 0; | 
 | 41 | 	sa->sa_command_0.bf.save_hash_state = save_h; | 
 | 42 | 	sa->sa_command_0.bf.save_iv = save_iv; | 
 | 43 | 	sa->sa_command_0.bf.load_hash_state = ld_h; | 
 | 44 | 	sa->sa_command_0.bf.load_iv = ld_iv; | 
 | 45 | 	sa->sa_command_0.bf.hdr_proc = hdr_proc; | 
 | 46 | 	sa->sa_command_0.bf.hash_alg = h; | 
 | 47 | 	sa->sa_command_0.bf.cipher_alg = c; | 
 | 48 | 	sa->sa_command_0.bf.pad_type = pad_type & 3; | 
 | 49 | 	sa->sa_command_0.bf.extend_pad = pad_type >> 2; | 
 | 50 | 	sa->sa_command_0.bf.op_group = op_grp; | 
 | 51 | 	sa->sa_command_0.bf.opcode = op; | 
 | 52 | 	sa->sa_command_0.bf.dir = dir; | 
 | 53 | } | 
 | 54 |  | 
 | 55 | void set_dynamic_sa_command_1(struct dynamic_sa_ctl *sa, u32 cm, u32 hmac_mc, | 
 | 56 | 			      u32 cfb, u32 esn, u32 sn_mask, u32 mute, | 
 | 57 | 			      u32 cp_pad, u32 cp_pay, u32 cp_hdr) | 
 | 58 | { | 
 | 59 | 	sa->sa_command_1.w = 0; | 
 | 60 | 	sa->sa_command_1.bf.crypto_mode31 = (cm & 4) >> 2; | 
 | 61 | 	sa->sa_command_1.bf.crypto_mode9_8 = cm & 3; | 
 | 62 | 	sa->sa_command_1.bf.feedback_mode = cfb, | 
 | 63 | 	sa->sa_command_1.bf.sa_rev = 1; | 
 | 64 | 	sa->sa_command_1.bf.extended_seq_num = esn; | 
 | 65 | 	sa->sa_command_1.bf.seq_num_mask = sn_mask; | 
 | 66 | 	sa->sa_command_1.bf.mutable_bit_proc = mute; | 
 | 67 | 	sa->sa_command_1.bf.copy_pad = cp_pad; | 
 | 68 | 	sa->sa_command_1.bf.copy_payload = cp_pay; | 
 | 69 | 	sa->sa_command_1.bf.copy_hdr = cp_hdr; | 
 | 70 | } | 
 | 71 |  | 
 | 72 | int crypto4xx_encrypt(struct ablkcipher_request *req) | 
 | 73 | { | 
 | 74 | 	struct crypto4xx_ctx *ctx = crypto_tfm_ctx(req->base.tfm); | 
 | 75 |  | 
 | 76 | 	ctx->direction = DIR_OUTBOUND; | 
 | 77 | 	ctx->hash_final = 0; | 
 | 78 | 	ctx->is_hash = 0; | 
 | 79 | 	ctx->pd_ctl = 0x1; | 
 | 80 |  | 
 | 81 | 	return crypto4xx_build_pd(&req->base, ctx, req->src, req->dst, | 
 | 82 | 				  req->nbytes, req->info, | 
 | 83 | 				  get_dynamic_sa_iv_size(ctx)); | 
 | 84 | } | 
 | 85 |  | 
 | 86 | int crypto4xx_decrypt(struct ablkcipher_request *req) | 
 | 87 | { | 
 | 88 | 	struct crypto4xx_ctx *ctx = crypto_tfm_ctx(req->base.tfm); | 
 | 89 |  | 
 | 90 | 	ctx->direction = DIR_INBOUND; | 
 | 91 | 	ctx->hash_final = 0; | 
 | 92 | 	ctx->is_hash = 0; | 
 | 93 | 	ctx->pd_ctl = 1; | 
 | 94 |  | 
 | 95 | 	return crypto4xx_build_pd(&req->base, ctx, req->src, req->dst, | 
 | 96 | 				  req->nbytes, req->info, | 
 | 97 | 				  get_dynamic_sa_iv_size(ctx)); | 
 | 98 | } | 
 | 99 |  | 
 | 100 | /** | 
 | 101 |  * AES Functions | 
 | 102 |  */ | 
 | 103 | static int crypto4xx_setkey_aes(struct crypto_ablkcipher *cipher, | 
 | 104 | 				const u8 *key, | 
 | 105 | 				unsigned int keylen, | 
 | 106 | 				unsigned char cm, | 
 | 107 | 				u8 fb) | 
 | 108 | { | 
 | 109 | 	struct crypto_tfm *tfm = crypto_ablkcipher_tfm(cipher); | 
 | 110 | 	struct crypto4xx_ctx *ctx = crypto_tfm_ctx(tfm); | 
 | 111 | 	struct dynamic_sa_ctl *sa; | 
 | 112 | 	int    rc; | 
 | 113 |  | 
 | 114 | 	if (keylen != AES_KEYSIZE_256 && | 
 | 115 | 		keylen != AES_KEYSIZE_192 && keylen != AES_KEYSIZE_128) { | 
 | 116 | 		crypto_ablkcipher_set_flags(cipher, | 
 | 117 | 				CRYPTO_TFM_RES_BAD_KEY_LEN); | 
 | 118 | 		return -EINVAL; | 
 | 119 | 	} | 
 | 120 |  | 
 | 121 | 	/* Create SA */ | 
 | 122 | 	if (ctx->sa_in_dma_addr || ctx->sa_out_dma_addr) | 
 | 123 | 		crypto4xx_free_sa(ctx); | 
 | 124 |  | 
 | 125 | 	rc = crypto4xx_alloc_sa(ctx, SA_AES128_LEN + (keylen-16) / 4); | 
 | 126 | 	if (rc) | 
 | 127 | 		return rc; | 
 | 128 |  | 
 | 129 | 	if (ctx->state_record_dma_addr == 0) { | 
 | 130 | 		rc = crypto4xx_alloc_state_record(ctx); | 
 | 131 | 		if (rc) { | 
 | 132 | 			crypto4xx_free_sa(ctx); | 
 | 133 | 			return rc; | 
 | 134 | 		} | 
 | 135 | 	} | 
 | 136 | 	/* Setup SA */ | 
 | 137 | 	sa = (struct dynamic_sa_ctl *) ctx->sa_in; | 
 | 138 | 	ctx->hash_final = 0; | 
 | 139 |  | 
 | 140 | 	set_dynamic_sa_command_0(sa, SA_NOT_SAVE_HASH, SA_NOT_SAVE_IV, | 
 | 141 | 				 SA_LOAD_HASH_FROM_SA, SA_LOAD_IV_FROM_STATE, | 
 | 142 | 				 SA_NO_HEADER_PROC, SA_HASH_ALG_NULL, | 
 | 143 | 				 SA_CIPHER_ALG_AES, SA_PAD_TYPE_ZERO, | 
 | 144 | 				 SA_OP_GROUP_BASIC, SA_OPCODE_DECRYPT, | 
 | 145 | 				 DIR_INBOUND); | 
 | 146 |  | 
 | 147 | 	set_dynamic_sa_command_1(sa, cm, SA_HASH_MODE_HASH, | 
 | 148 | 				 fb, SA_EXTENDED_SN_OFF, | 
 | 149 | 				 SA_SEQ_MASK_OFF, SA_MC_ENABLE, | 
 | 150 | 				 SA_NOT_COPY_PAD, SA_NOT_COPY_PAYLOAD, | 
 | 151 | 				 SA_NOT_COPY_HDR); | 
 | 152 | 	crypto4xx_memcpy_le(ctx->sa_in + get_dynamic_sa_offset_key_field(ctx), | 
 | 153 | 			    key, keylen); | 
 | 154 | 	sa->sa_contents = SA_AES_CONTENTS | (keylen << 2); | 
 | 155 | 	sa->sa_command_1.bf.key_len = keylen >> 3; | 
 | 156 | 	ctx->is_hash = 0; | 
 | 157 | 	ctx->direction = DIR_INBOUND; | 
 | 158 | 	memcpy(ctx->sa_in + get_dynamic_sa_offset_state_ptr_field(ctx), | 
 | 159 | 			(void *)&ctx->state_record_dma_addr, 4); | 
 | 160 | 	ctx->offset_to_sr_ptr = get_dynamic_sa_offset_state_ptr_field(ctx); | 
 | 161 |  | 
 | 162 | 	memcpy(ctx->sa_out, ctx->sa_in, ctx->sa_len * 4); | 
 | 163 | 	sa = (struct dynamic_sa_ctl *) ctx->sa_out; | 
 | 164 | 	sa->sa_command_0.bf.dir = DIR_OUTBOUND; | 
 | 165 |  | 
 | 166 | 	return 0; | 
 | 167 | } | 
 | 168 |  | 
 | 169 | int crypto4xx_setkey_aes_cbc(struct crypto_ablkcipher *cipher, | 
 | 170 | 			     const u8 *key, unsigned int keylen) | 
 | 171 | { | 
 | 172 | 	return crypto4xx_setkey_aes(cipher, key, keylen, CRYPTO_MODE_CBC, | 
 | 173 | 				    CRYPTO_FEEDBACK_MODE_NO_FB); | 
 | 174 | } | 
 | 175 |  | 
 | 176 | /** | 
 | 177 |  * HASH SHA1 Functions | 
 | 178 |  */ | 
 | 179 | static int crypto4xx_hash_alg_init(struct crypto_tfm *tfm, | 
 | 180 | 				   unsigned int sa_len, | 
 | 181 | 				   unsigned char ha, | 
 | 182 | 				   unsigned char hm) | 
 | 183 | { | 
 | 184 | 	struct crypto_alg *alg = tfm->__crt_alg; | 
 | 185 | 	struct crypto4xx_alg *my_alg = crypto_alg_to_crypto4xx_alg(alg); | 
 | 186 | 	struct crypto4xx_ctx *ctx = crypto_tfm_ctx(tfm); | 
 | 187 | 	struct dynamic_sa_ctl *sa; | 
 | 188 | 	struct dynamic_sa_hash160 *sa_in; | 
 | 189 | 	int rc; | 
 | 190 |  | 
 | 191 | 	ctx->dev   = my_alg->dev; | 
 | 192 | 	ctx->is_hash = 1; | 
 | 193 | 	ctx->hash_final = 0; | 
 | 194 |  | 
 | 195 | 	/* Create SA */ | 
 | 196 | 	if (ctx->sa_in_dma_addr || ctx->sa_out_dma_addr) | 
 | 197 | 		crypto4xx_free_sa(ctx); | 
 | 198 |  | 
 | 199 | 	rc = crypto4xx_alloc_sa(ctx, sa_len); | 
 | 200 | 	if (rc) | 
 | 201 | 		return rc; | 
 | 202 |  | 
 | 203 | 	if (ctx->state_record_dma_addr == 0) { | 
 | 204 | 		crypto4xx_alloc_state_record(ctx); | 
 | 205 | 		if (!ctx->state_record_dma_addr) { | 
 | 206 | 			crypto4xx_free_sa(ctx); | 
 | 207 | 			return -ENOMEM; | 
 | 208 | 		} | 
 | 209 | 	} | 
 | 210 |  | 
| Herbert Xu | 6b1679f | 2009-07-12 23:08:28 +0800 | [diff] [blame] | 211 | 	crypto_ahash_set_reqsize(__crypto_ahash_cast(tfm), | 
 | 212 | 				 sizeof(struct crypto4xx_ctx)); | 
| James Hsiao | 049359d | 2009-02-05 16:18:13 +1100 | [diff] [blame] | 213 | 	sa = (struct dynamic_sa_ctl *) ctx->sa_in; | 
 | 214 | 	set_dynamic_sa_command_0(sa, SA_SAVE_HASH, SA_NOT_SAVE_IV, | 
 | 215 | 				 SA_NOT_LOAD_HASH, SA_LOAD_IV_FROM_SA, | 
 | 216 | 				 SA_NO_HEADER_PROC, ha, SA_CIPHER_ALG_NULL, | 
 | 217 | 				 SA_PAD_TYPE_ZERO, SA_OP_GROUP_BASIC, | 
 | 218 | 				 SA_OPCODE_HASH, DIR_INBOUND); | 
 | 219 | 	set_dynamic_sa_command_1(sa, 0, SA_HASH_MODE_HASH, | 
 | 220 | 				 CRYPTO_FEEDBACK_MODE_NO_FB, SA_EXTENDED_SN_OFF, | 
 | 221 | 				 SA_SEQ_MASK_OFF, SA_MC_ENABLE, | 
 | 222 | 				 SA_NOT_COPY_PAD, SA_NOT_COPY_PAYLOAD, | 
 | 223 | 				 SA_NOT_COPY_HDR); | 
 | 224 | 	ctx->direction = DIR_INBOUND; | 
 | 225 | 	sa->sa_contents = SA_HASH160_CONTENTS; | 
 | 226 | 	sa_in = (struct dynamic_sa_hash160 *) ctx->sa_in; | 
 | 227 | 	/* Need to zero hash digest in SA */ | 
 | 228 | 	memset(sa_in->inner_digest, 0, sizeof(sa_in->inner_digest)); | 
 | 229 | 	memset(sa_in->outer_digest, 0, sizeof(sa_in->outer_digest)); | 
 | 230 | 	sa_in->state_ptr = ctx->state_record_dma_addr; | 
 | 231 | 	ctx->offset_to_sr_ptr = get_dynamic_sa_offset_state_ptr_field(ctx); | 
 | 232 |  | 
 | 233 | 	return 0; | 
 | 234 | } | 
 | 235 |  | 
 | 236 | int crypto4xx_hash_init(struct ahash_request *req) | 
 | 237 | { | 
 | 238 | 	struct crypto4xx_ctx *ctx = crypto_tfm_ctx(req->base.tfm); | 
 | 239 | 	int ds; | 
 | 240 | 	struct dynamic_sa_ctl *sa; | 
 | 241 |  | 
 | 242 | 	sa = (struct dynamic_sa_ctl *) ctx->sa_in; | 
 | 243 | 	ds = crypto_ahash_digestsize( | 
 | 244 | 			__crypto_ahash_cast(req->base.tfm)); | 
 | 245 | 	sa->sa_command_0.bf.digest_len = ds >> 2; | 
 | 246 | 	sa->sa_command_0.bf.load_hash_state = SA_LOAD_HASH_FROM_SA; | 
 | 247 | 	ctx->is_hash = 1; | 
 | 248 | 	ctx->direction = DIR_INBOUND; | 
 | 249 |  | 
 | 250 | 	return 0; | 
 | 251 | } | 
 | 252 |  | 
 | 253 | int crypto4xx_hash_update(struct ahash_request *req) | 
 | 254 | { | 
 | 255 | 	struct crypto4xx_ctx *ctx = crypto_tfm_ctx(req->base.tfm); | 
 | 256 |  | 
 | 257 | 	ctx->is_hash = 1; | 
 | 258 | 	ctx->hash_final = 0; | 
 | 259 | 	ctx->pd_ctl = 0x11; | 
 | 260 | 	ctx->direction = DIR_INBOUND; | 
 | 261 |  | 
 | 262 | 	return crypto4xx_build_pd(&req->base, ctx, req->src, | 
 | 263 | 				  (struct scatterlist *) req->result, | 
 | 264 | 				  req->nbytes, NULL, 0); | 
 | 265 | } | 
 | 266 |  | 
 | 267 | int crypto4xx_hash_final(struct ahash_request *req) | 
 | 268 | { | 
 | 269 | 	return 0; | 
 | 270 | } | 
 | 271 |  | 
 | 272 | int crypto4xx_hash_digest(struct ahash_request *req) | 
 | 273 | { | 
 | 274 | 	struct crypto4xx_ctx *ctx = crypto_tfm_ctx(req->base.tfm); | 
 | 275 |  | 
 | 276 | 	ctx->hash_final = 1; | 
 | 277 | 	ctx->pd_ctl = 0x11; | 
 | 278 | 	ctx->direction = DIR_INBOUND; | 
 | 279 |  | 
 | 280 | 	return crypto4xx_build_pd(&req->base, ctx, req->src, | 
 | 281 | 				  (struct scatterlist *) req->result, | 
 | 282 | 				  req->nbytes, NULL, 0); | 
 | 283 | } | 
 | 284 |  | 
 | 285 | /** | 
 | 286 |  * SHA1 Algorithm | 
 | 287 |  */ | 
 | 288 | int crypto4xx_sha1_alg_init(struct crypto_tfm *tfm) | 
 | 289 | { | 
 | 290 | 	return crypto4xx_hash_alg_init(tfm, SA_HASH160_LEN, SA_HASH_ALG_SHA1, | 
 | 291 | 				       SA_HASH_MODE_HASH); | 
 | 292 | } | 
 | 293 |  | 
 | 294 |  |