2 * Cipher algorithms supported by the CESA: DES, 3DES and AES.
4 * Author: Boris Brezillon <boris.brezillon@free-electrons.com>
5 * Author: Arnaud Ebalard <arno@natisbad.org>
7 * This work is based on an initial version written by
8 * Sebastian Andrzej Siewior < sebastian at breakpoint dot cc >
10 * This program is free software; you can redistribute it and/or modify it
11 * under the terms of the GNU General Public License version 2 as published
12 * by the Free Software Foundation.
15 #include <crypto/aes.h>
16 #include <crypto/des.h>
20 struct mv_cesa_des_ctx {
21 struct mv_cesa_ctx base;
25 struct mv_cesa_aes_ctx {
26 struct mv_cesa_ctx base;
27 struct crypto_aes_ctx aes;
30 struct mv_cesa_ablkcipher_dma_iter {
31 struct mv_cesa_dma_iter base;
32 struct mv_cesa_sg_dma_iter src;
33 struct mv_cesa_sg_dma_iter dst;
37 mv_cesa_ablkcipher_req_iter_init(struct mv_cesa_ablkcipher_dma_iter *iter,
38 struct ablkcipher_request *req)
40 mv_cesa_req_dma_iter_init(&iter->base, req->nbytes);
41 mv_cesa_sg_dma_iter_init(&iter->src, req->src, DMA_TO_DEVICE);
42 mv_cesa_sg_dma_iter_init(&iter->dst, req->dst, DMA_FROM_DEVICE);
46 mv_cesa_ablkcipher_req_iter_next_op(struct mv_cesa_ablkcipher_dma_iter *iter)
48 iter->src.op_offset = 0;
49 iter->dst.op_offset = 0;
51 return mv_cesa_req_dma_iter_next_op(&iter->base);
55 mv_cesa_ablkcipher_dma_cleanup(struct ablkcipher_request *req)
57 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
59 if (req->dst != req->src) {
60 dma_unmap_sg(cesa_dev->dev, req->dst, creq->dst_nents,
62 dma_unmap_sg(cesa_dev->dev, req->src, creq->src_nents,
65 dma_unmap_sg(cesa_dev->dev, req->src, creq->src_nents,
68 mv_cesa_dma_cleanup(&creq->req.dma);
71 static inline void mv_cesa_ablkcipher_cleanup(struct ablkcipher_request *req)
73 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
75 if (creq->req.base.type == CESA_DMA_REQ)
76 mv_cesa_ablkcipher_dma_cleanup(req);
79 static void mv_cesa_ablkcipher_std_step(struct ablkcipher_request *req)
81 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
82 struct mv_cesa_ablkcipher_std_req *sreq = &creq->req.std;
83 struct mv_cesa_engine *engine = sreq->base.engine;
84 size_t len = min_t(size_t, req->nbytes - sreq->offset,
85 CESA_SA_SRAM_PAYLOAD_SIZE);
87 len = sg_pcopy_to_buffer(req->src, creq->src_nents,
88 engine->sram + CESA_SA_DATA_SRAM_OFFSET,
92 mv_cesa_set_crypt_op_len(&sreq->op, len);
94 /* FIXME: only update enc_len field */
95 if (!sreq->skip_ctx) {
96 memcpy(engine->sram, &sreq->op, sizeof(sreq->op));
97 sreq->skip_ctx = true;
99 memcpy(engine->sram, &sreq->op, sizeof(sreq->op.desc));
102 mv_cesa_set_int_mask(engine, CESA_SA_INT_ACCEL0_DONE);
103 writel(CESA_SA_CFG_PARA_DIS, engine->regs + CESA_SA_CFG);
104 writel(CESA_SA_CMD_EN_CESA_SA_ACCL0, engine->regs + CESA_SA_CMD);
107 static int mv_cesa_ablkcipher_std_process(struct ablkcipher_request *req,
110 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
111 struct mv_cesa_ablkcipher_std_req *sreq = &creq->req.std;
112 struct mv_cesa_engine *engine = sreq->base.engine;
115 len = sg_pcopy_from_buffer(req->dst, creq->dst_nents,
116 engine->sram + CESA_SA_DATA_SRAM_OFFSET,
117 sreq->size, sreq->offset);
120 if (sreq->offset < req->nbytes)
126 static int mv_cesa_ablkcipher_process(struct crypto_async_request *req,
129 struct ablkcipher_request *ablkreq = ablkcipher_request_cast(req);
130 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(ablkreq);
131 struct mv_cesa_ablkcipher_std_req *sreq = &creq->req.std;
132 struct mv_cesa_engine *engine = sreq->base.engine;
135 if (creq->req.base.type == CESA_DMA_REQ)
136 ret = mv_cesa_dma_process(&creq->req.dma, status);
138 ret = mv_cesa_ablkcipher_std_process(ablkreq, status);
143 memcpy(ablkreq->info, engine->sram + CESA_SA_CRYPT_IV_SRAM_OFFSET,
144 crypto_ablkcipher_ivsize(crypto_ablkcipher_reqtfm(ablkreq)));
149 static void mv_cesa_ablkcipher_step(struct crypto_async_request *req)
151 struct ablkcipher_request *ablkreq = ablkcipher_request_cast(req);
152 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(ablkreq);
154 if (creq->req.base.type == CESA_DMA_REQ)
155 mv_cesa_dma_step(&creq->req.dma);
157 mv_cesa_ablkcipher_std_step(ablkreq);
161 mv_cesa_ablkcipher_dma_prepare(struct ablkcipher_request *req)
163 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
164 struct mv_cesa_tdma_req *dreq = &creq->req.dma;
166 mv_cesa_dma_prepare(dreq, dreq->base.engine);
170 mv_cesa_ablkcipher_std_prepare(struct ablkcipher_request *req)
172 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
173 struct mv_cesa_ablkcipher_std_req *sreq = &creq->req.std;
174 struct mv_cesa_engine *engine = sreq->base.engine;
178 mv_cesa_adjust_op(engine, &sreq->op);
179 memcpy(engine->sram, &sreq->op, sizeof(sreq->op));
182 static inline void mv_cesa_ablkcipher_prepare(struct crypto_async_request *req,
183 struct mv_cesa_engine *engine)
185 struct ablkcipher_request *ablkreq = ablkcipher_request_cast(req);
186 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(ablkreq);
188 creq->req.base.engine = engine;
190 if (creq->req.base.type == CESA_DMA_REQ)
191 mv_cesa_ablkcipher_dma_prepare(ablkreq);
193 mv_cesa_ablkcipher_std_prepare(ablkreq);
197 mv_cesa_ablkcipher_req_cleanup(struct crypto_async_request *req)
199 struct ablkcipher_request *ablkreq = ablkcipher_request_cast(req);
201 mv_cesa_ablkcipher_cleanup(ablkreq);
204 static const struct mv_cesa_req_ops mv_cesa_ablkcipher_req_ops = {
205 .step = mv_cesa_ablkcipher_step,
206 .process = mv_cesa_ablkcipher_process,
207 .prepare = mv_cesa_ablkcipher_prepare,
208 .cleanup = mv_cesa_ablkcipher_req_cleanup,
211 static int mv_cesa_ablkcipher_cra_init(struct crypto_tfm *tfm)
213 struct mv_cesa_aes_ctx *ctx = crypto_tfm_ctx(tfm);
215 ctx->base.ops = &mv_cesa_ablkcipher_req_ops;
217 tfm->crt_ablkcipher.reqsize = sizeof(struct mv_cesa_ablkcipher_req);
222 static int mv_cesa_aes_setkey(struct crypto_ablkcipher *cipher, const u8 *key,
225 struct crypto_tfm *tfm = crypto_ablkcipher_tfm(cipher);
226 struct mv_cesa_aes_ctx *ctx = crypto_tfm_ctx(tfm);
232 ret = crypto_aes_expand_key(&ctx->aes, key, len);
234 crypto_ablkcipher_set_flags(cipher, CRYPTO_TFM_RES_BAD_KEY_LEN);
238 remaining = (ctx->aes.key_length - 16) / 4;
239 offset = ctx->aes.key_length + 24 - remaining;
240 for (i = 0; i < remaining; i++)
241 ctx->aes.key_dec[4 + i] =
242 cpu_to_le32(ctx->aes.key_enc[offset + i]);
247 static int mv_cesa_des_setkey(struct crypto_ablkcipher *cipher, const u8 *key,
250 struct crypto_tfm *tfm = crypto_ablkcipher_tfm(cipher);
251 struct mv_cesa_des_ctx *ctx = crypto_tfm_ctx(tfm);
252 u32 tmp[DES_EXPKEY_WORDS];
255 if (len != DES_KEY_SIZE) {
256 crypto_ablkcipher_set_flags(cipher, CRYPTO_TFM_RES_BAD_KEY_LEN);
260 ret = des_ekey(tmp, key);
261 if (!ret && (tfm->crt_flags & CRYPTO_TFM_REQ_WEAK_KEY)) {
262 tfm->crt_flags |= CRYPTO_TFM_RES_WEAK_KEY;
266 memcpy(ctx->key, key, DES_KEY_SIZE);
271 static int mv_cesa_ablkcipher_dma_req_init(struct ablkcipher_request *req,
272 const struct mv_cesa_op_ctx *op_templ)
274 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
275 gfp_t flags = (req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP) ?
276 GFP_KERNEL : GFP_ATOMIC;
277 struct mv_cesa_tdma_req *dreq = &creq->req.dma;
278 struct mv_cesa_ablkcipher_dma_iter iter;
279 struct mv_cesa_tdma_chain chain;
280 bool skip_ctx = false;
283 dreq->base.type = CESA_DMA_REQ;
284 dreq->chain.first = NULL;
285 dreq->chain.last = NULL;
287 if (req->src != req->dst) {
288 ret = dma_map_sg(cesa_dev->dev, req->src, creq->src_nents,
293 ret = dma_map_sg(cesa_dev->dev, req->dst, creq->dst_nents,
300 ret = dma_map_sg(cesa_dev->dev, req->src, creq->src_nents,
306 mv_cesa_tdma_desc_iter_init(&chain);
307 mv_cesa_ablkcipher_req_iter_init(&iter, req);
310 struct mv_cesa_op_ctx *op;
312 op = mv_cesa_dma_add_op(&chain, op_templ, skip_ctx, flags);
319 mv_cesa_set_crypt_op_len(op, iter.base.op_len);
321 /* Add input transfers */
322 ret = mv_cesa_dma_add_op_transfers(&chain, &iter.base,
327 /* Add dummy desc to launch the crypto operation */
328 ret = mv_cesa_dma_add_dummy_launch(&chain, flags);
332 /* Add output transfers */
333 ret = mv_cesa_dma_add_op_transfers(&chain, &iter.base,
338 } while (mv_cesa_ablkcipher_req_iter_next_op(&iter));
345 mv_cesa_dma_cleanup(dreq);
346 if (req->dst != req->src)
347 dma_unmap_sg(cesa_dev->dev, req->dst, creq->dst_nents,
351 dma_unmap_sg(cesa_dev->dev, req->src, creq->src_nents,
352 req->dst != req->src ? DMA_TO_DEVICE : DMA_BIDIRECTIONAL);
358 mv_cesa_ablkcipher_std_req_init(struct ablkcipher_request *req,
359 const struct mv_cesa_op_ctx *op_templ)
361 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
362 struct mv_cesa_ablkcipher_std_req *sreq = &creq->req.std;
364 sreq->base.type = CESA_STD_REQ;
365 sreq->op = *op_templ;
366 sreq->skip_ctx = false;
371 static int mv_cesa_ablkcipher_req_init(struct ablkcipher_request *req,
372 struct mv_cesa_op_ctx *tmpl)
374 struct mv_cesa_ablkcipher_req *creq = ablkcipher_request_ctx(req);
375 struct crypto_ablkcipher *tfm = crypto_ablkcipher_reqtfm(req);
376 unsigned int blksize = crypto_ablkcipher_blocksize(tfm);
379 if (!IS_ALIGNED(req->nbytes, blksize))
382 creq->src_nents = sg_nents_for_len(req->src, req->nbytes);
383 creq->dst_nents = sg_nents_for_len(req->dst, req->nbytes);
385 mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_OP_CRYPT_ONLY,
386 CESA_SA_DESC_CFG_OP_MSK);
388 /* TODO: add a threshold for DMA usage */
389 if (cesa_dev->caps->has_tdma)
390 ret = mv_cesa_ablkcipher_dma_req_init(req, tmpl);
392 ret = mv_cesa_ablkcipher_std_req_init(req, tmpl);
397 static int mv_cesa_des_op(struct ablkcipher_request *req,
398 struct mv_cesa_op_ctx *tmpl)
400 struct mv_cesa_des_ctx *ctx = crypto_tfm_ctx(req->base.tfm);
403 mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_CRYPTM_DES,
404 CESA_SA_DESC_CFG_CRYPTM_MSK);
406 memcpy(tmpl->ctx.blkcipher.key, ctx->key, DES_KEY_SIZE);
408 ret = mv_cesa_ablkcipher_req_init(req, tmpl);
412 ret = mv_cesa_queue_req(&req->base);
413 if (ret && ret != -EINPROGRESS)
414 mv_cesa_ablkcipher_cleanup(req);
419 static int mv_cesa_ecb_des_encrypt(struct ablkcipher_request *req)
421 struct mv_cesa_op_ctx tmpl;
423 mv_cesa_set_op_cfg(&tmpl,
424 CESA_SA_DESC_CFG_CRYPTCM_ECB |
425 CESA_SA_DESC_CFG_DIR_ENC);
427 return mv_cesa_des_op(req, &tmpl);
430 static int mv_cesa_ecb_des_decrypt(struct ablkcipher_request *req)
432 struct mv_cesa_op_ctx tmpl;
434 mv_cesa_set_op_cfg(&tmpl,
435 CESA_SA_DESC_CFG_CRYPTCM_ECB |
436 CESA_SA_DESC_CFG_DIR_DEC);
438 return mv_cesa_des_op(req, &tmpl);
441 struct crypto_alg mv_cesa_ecb_des_alg = {
442 .cra_name = "ecb(des)",
443 .cra_driver_name = "mv-ecb-des",
445 .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
446 CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
447 .cra_blocksize = DES_BLOCK_SIZE,
448 .cra_ctxsize = sizeof(struct mv_cesa_des_ctx),
450 .cra_type = &crypto_ablkcipher_type,
451 .cra_module = THIS_MODULE,
452 .cra_init = mv_cesa_ablkcipher_cra_init,
455 .min_keysize = DES_KEY_SIZE,
456 .max_keysize = DES_KEY_SIZE,
457 .setkey = mv_cesa_des_setkey,
458 .encrypt = mv_cesa_ecb_des_encrypt,
459 .decrypt = mv_cesa_ecb_des_decrypt,
464 static int mv_cesa_cbc_des_op(struct ablkcipher_request *req,
465 struct mv_cesa_op_ctx *tmpl)
467 mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_CRYPTCM_CBC,
468 CESA_SA_DESC_CFG_CRYPTCM_MSK);
470 memcpy(tmpl->ctx.blkcipher.iv, req->info, DES_BLOCK_SIZE);
472 return mv_cesa_des_op(req, tmpl);
475 static int mv_cesa_cbc_des_encrypt(struct ablkcipher_request *req)
477 struct mv_cesa_op_ctx tmpl;
479 mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_ENC);
481 return mv_cesa_cbc_des_op(req, &tmpl);
484 static int mv_cesa_cbc_des_decrypt(struct ablkcipher_request *req)
486 struct mv_cesa_op_ctx tmpl;
488 mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_DEC);
490 return mv_cesa_cbc_des_op(req, &tmpl);
493 struct crypto_alg mv_cesa_cbc_des_alg = {
494 .cra_name = "cbc(des)",
495 .cra_driver_name = "mv-cbc-des",
497 .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
498 CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
499 .cra_blocksize = DES_BLOCK_SIZE,
500 .cra_ctxsize = sizeof(struct mv_cesa_des_ctx),
502 .cra_type = &crypto_ablkcipher_type,
503 .cra_module = THIS_MODULE,
504 .cra_init = mv_cesa_ablkcipher_cra_init,
507 .min_keysize = DES_KEY_SIZE,
508 .max_keysize = DES_KEY_SIZE,
509 .ivsize = DES_BLOCK_SIZE,
510 .setkey = mv_cesa_des_setkey,
511 .encrypt = mv_cesa_cbc_des_encrypt,
512 .decrypt = mv_cesa_cbc_des_decrypt,
517 static int mv_cesa_aes_op(struct ablkcipher_request *req,
518 struct mv_cesa_op_ctx *tmpl)
520 struct mv_cesa_aes_ctx *ctx = crypto_tfm_ctx(req->base.tfm);
525 cfg = CESA_SA_DESC_CFG_CRYPTM_AES;
527 if (mv_cesa_get_op_cfg(tmpl) & CESA_SA_DESC_CFG_DIR_DEC)
528 key = ctx->aes.key_dec;
530 key = ctx->aes.key_enc;
532 for (i = 0; i < ctx->aes.key_length / sizeof(u32); i++)
533 tmpl->ctx.blkcipher.key[i] = cpu_to_le32(key[i]);
535 if (ctx->aes.key_length == 24)
536 cfg |= CESA_SA_DESC_CFG_AES_LEN_192;
537 else if (ctx->aes.key_length == 32)
538 cfg |= CESA_SA_DESC_CFG_AES_LEN_256;
540 mv_cesa_update_op_cfg(tmpl, cfg,
541 CESA_SA_DESC_CFG_CRYPTM_MSK |
542 CESA_SA_DESC_CFG_AES_LEN_MSK);
544 ret = mv_cesa_ablkcipher_req_init(req, tmpl);
548 ret = mv_cesa_queue_req(&req->base);
549 if (ret && ret != -EINPROGRESS)
550 mv_cesa_ablkcipher_cleanup(req);
555 static int mv_cesa_ecb_aes_encrypt(struct ablkcipher_request *req)
557 struct mv_cesa_op_ctx tmpl;
559 mv_cesa_set_op_cfg(&tmpl,
560 CESA_SA_DESC_CFG_CRYPTCM_ECB |
561 CESA_SA_DESC_CFG_DIR_ENC);
563 return mv_cesa_aes_op(req, &tmpl);
566 static int mv_cesa_ecb_aes_decrypt(struct ablkcipher_request *req)
568 struct mv_cesa_op_ctx tmpl;
570 mv_cesa_set_op_cfg(&tmpl,
571 CESA_SA_DESC_CFG_CRYPTCM_ECB |
572 CESA_SA_DESC_CFG_DIR_DEC);
574 return mv_cesa_aes_op(req, &tmpl);
577 struct crypto_alg mv_cesa_ecb_aes_alg = {
578 .cra_name = "ecb(aes)",
579 .cra_driver_name = "mv-ecb-aes",
581 .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
582 CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
583 .cra_blocksize = AES_BLOCK_SIZE,
584 .cra_ctxsize = sizeof(struct mv_cesa_aes_ctx),
586 .cra_type = &crypto_ablkcipher_type,
587 .cra_module = THIS_MODULE,
588 .cra_init = mv_cesa_ablkcipher_cra_init,
591 .min_keysize = AES_MIN_KEY_SIZE,
592 .max_keysize = AES_MAX_KEY_SIZE,
593 .setkey = mv_cesa_aes_setkey,
594 .encrypt = mv_cesa_ecb_aes_encrypt,
595 .decrypt = mv_cesa_ecb_aes_decrypt,
600 static int mv_cesa_cbc_aes_op(struct ablkcipher_request *req,
601 struct mv_cesa_op_ctx *tmpl)
603 mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_CRYPTCM_CBC,
604 CESA_SA_DESC_CFG_CRYPTCM_MSK);
605 memcpy(tmpl->ctx.blkcipher.iv, req->info, AES_BLOCK_SIZE);
607 return mv_cesa_aes_op(req, tmpl);
610 static int mv_cesa_cbc_aes_encrypt(struct ablkcipher_request *req)
612 struct mv_cesa_op_ctx tmpl;
614 mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_ENC);
616 return mv_cesa_cbc_aes_op(req, &tmpl);
619 static int mv_cesa_cbc_aes_decrypt(struct ablkcipher_request *req)
621 struct mv_cesa_op_ctx tmpl;
623 mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_DEC);
625 return mv_cesa_cbc_aes_op(req, &tmpl);
628 struct crypto_alg mv_cesa_cbc_aes_alg = {
629 .cra_name = "cbc(aes)",
630 .cra_driver_name = "mv-cbc-aes",
632 .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
633 CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
634 .cra_blocksize = AES_BLOCK_SIZE,
635 .cra_ctxsize = sizeof(struct mv_cesa_aes_ctx),
637 .cra_type = &crypto_ablkcipher_type,
638 .cra_module = THIS_MODULE,
639 .cra_init = mv_cesa_ablkcipher_cra_init,
642 .min_keysize = AES_MIN_KEY_SIZE,
643 .max_keysize = AES_MAX_KEY_SIZE,
644 .ivsize = AES_BLOCK_SIZE,
645 .setkey = mv_cesa_aes_setkey,
646 .encrypt = mv_cesa_cbc_aes_encrypt,
647 .decrypt = mv_cesa_cbc_aes_decrypt,