From: tien.sung.ang@intel.com
To: Dinh Nguyen <dinguyen@kernel.org>
Cc: linux-kernel@vger.kernel.org, Ang Tien Sung <tien.sung.ang@intel.com>
Subject: [PATCH 03/12] firmware: stratix10-svc: AES encrypt and decrypt
Date: Fri, 23 Jun 2023 11:20:20 +0800 [thread overview]
Message-ID: <20230623032029.1755017-4-tien.sung.ang@intel.com> (raw)
In-Reply-To: <20230623032029.1755017-1-tien.sung.ang@intel.com>
From: Ang Tien Sung <tien.sung.ang@intel.com>
One of the new crypto services introduced for AES encryption and
decryption. It is dependent on open/close crypto session commands
and crypto service key commands.
An import of the AES 128/256bit crypto service key before starting
an AES service is required. This command sends a request to encrypt
or decrypt a blob. The blob could be split into multiple commands
based on the crypto process stage that is INIT, UPDATE and
FINALIZE.
Signed-off-by: Ang Tien Sung <tien.sung.ang@intel.com>
---
drivers/firmware/stratix10-svc.c | 34 +++++++++
include/linux/firmware/intel/stratix10-smc.h | 70 +++++++++++++++++++
.../firmware/intel/stratix10-svc-client.h | 7 ++
3 files changed, 111 insertions(+)
diff --git a/drivers/firmware/stratix10-svc.c b/drivers/firmware/stratix10-svc.c
index fc9d982cbdb1..d7a11f7a43f3 100644
--- a/drivers/firmware/stratix10-svc.c
+++ b/drivers/firmware/stratix10-svc.c
@@ -331,6 +331,7 @@ static void svc_thread_recv_status_ok(struct stratix10_svc_data *p_data,
case COMMAND_FCS_CRYPTO_CLOSE_SESSION:
case COMMAND_FCS_CRYPTO_IMPORT_KEY:
case COMMAND_FCS_CRYPTO_REMOVE_KEY:
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_INIT:
cb_data->status = BIT(SVC_STATUS_OK);
break;
case COMMAND_RECONFIG_DATA_SUBMIT:
@@ -366,6 +367,8 @@ static void svc_thread_recv_status_ok(struct stratix10_svc_data *p_data,
break;
case COMMAND_FCS_CRYPTO_EXPORT_KEY:
case COMMAND_FCS_CRYPTO_GET_KEY_INFO:
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_UPDATE:
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_FINALIZE:
cb_data->status = BIT(SVC_STATUS_OK);
cb_data->kaddr2 = svc_pa_to_va(res.a2);
cb_data->kaddr3 = &res.a3;
@@ -567,6 +570,32 @@ static int svc_normal_to_secure_thread(void *data)
a3 = (unsigned long)pdata->paddr_output;
a4 = (unsigned long)pdata->size_output;
break;
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_INIT:
+ a0 = INTEL_SIP_SMC_FCS_AES_CRYPTO_INIT;
+ a1 = pdata->arg[0];
+ a2 = pdata->arg[1];
+ a3 = pdata->arg[2];
+ a4 = (unsigned long)pdata->paddr;
+ a5 = (unsigned long)pdata->size;
+ break;
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_UPDATE:
+ a0 = INTEL_SIP_SMC_FCS_AES_CRYPTO_UPDATE;
+ a1 = pdata->arg[0];
+ a2 = pdata->arg[1];
+ a3 = (unsigned long)pdata->paddr;
+ a4 = (unsigned long)pdata->size;
+ a5 = (unsigned long)pdata->paddr_output;
+ a6 = (unsigned long)pdata->size_output;
+ break;
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_FINALIZE:
+ a0 = INTEL_SIP_SMC_FCS_AES_CRYPTO_FINALIZE;
+ a1 = pdata->arg[0];
+ a2 = pdata->arg[1];
+ a3 = (unsigned long)pdata->paddr;
+ a4 = (unsigned long)pdata->size;
+ a5 = (unsigned long)pdata->paddr_output;
+ a6 = (unsigned long)pdata->size_output;
+ break;
/* for polling */
case COMMAND_POLL_SERVICE_STATUS:
a0 = INTEL_SIP_SMC_SERVICE_COMPLETED;
@@ -650,6 +679,11 @@ static int svc_normal_to_secure_thread(void *data)
case COMMAND_FCS_CRYPTO_CLOSE_SESSION:
case COMMAND_FCS_CRYPTO_IMPORT_KEY:
case COMMAND_FCS_CRYPTO_EXPORT_KEY:
+ case COMMAND_FCS_CRYPTO_REMOVE_KEY:
+ case COMMAND_FCS_CRYPTO_GET_KEY_INFO:
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_INIT:
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_UPDATE:
+ case COMMAND_FCS_CRYPTO_AES_CRYPT_FINALIZE:
cbdata->status = BIT(SVC_STATUS_INVALID_PARAM);
cbdata->kaddr1 = NULL;
cbdata->kaddr2 = NULL;
diff --git a/include/linux/firmware/intel/stratix10-smc.h b/include/linux/firmware/intel/stratix10-smc.h
index ff1e66df2d0d..b2f2a7268a0c 100644
--- a/include/linux/firmware/intel/stratix10-smc.h
+++ b/include/linux/firmware/intel/stratix10-smc.h
@@ -729,4 +729,74 @@ INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_FPGA_CONFIG_COMPLETED_WRITE)
#define INTEL_SIP_SMC_FUNCID_FCS_GET_CRYPTO_SERVICE_KEY_INFO 115
#define INTEL_SIP_SMC_FCS_GET_CRYPTO_SERVICE_KEY_INFO \
INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_FCS_GET_CRYPTO_SERVICE_KEY_INFO)
+
+/**
+ * Request INTEL_SIP_SMC_FCS_AES_CRYPTO_INIT
+ * Sync call to initialize AES crypto operation
+ *
+ * Call register usage:
+ * a0 INTEL_SIP_SMC_FCS_AES_CRYPTO_INIT
+ * a1 session ID
+ * a2 context ID
+ * a3 key UID
+ * a4 physical address of AES crypto parameter data (include block mode,
+ * encrypt/decrypt, IV fields
+ * a5 size of AES crypto parameter data
+ * a6-a7 not used
+ *
+ * Return status:
+ * a0 INTEL_SIP_SMC_STATUS_OK, INTEL_SIP_SMC_STATUS_NOT_SUPPORTED or
+ * INTEL_SIP_SMC_STATUS_ERROR
+ * a1 mailbox errors if a0 is INTEL_SIP_SMC_STATUS_ERROR
+ * a2-a3 not used
+ */
+#define INTEL_SIP_SMC_FUNCID_FCS_AES_CRYPTO_INIT 116
+#define INTEL_SIP_SMC_FCS_AES_CRYPTO_INIT \
+ INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_FCS_AES_CRYPTO_INIT)
+
+/**
+ * Request INTEL_SIP_SMC_FCS_AES_CRYPTO_UPDATE
+ * Sync call to decrypt/encrypt a data block
+ *
+ * Call register usage:
+ * a0 INTEL_SIP_SMC_FCS_AES_CRYPTO_UPDATE
+ * a1 session ID
+ * a2 context ID
+ * a3 physical address of source
+ * a4 size of source
+ * a5 physical address of destination
+ * a6 size of destination
+ * a7 not used
+ *
+ * Return status:
+ * a0 INTEL_SIP_SMC_STATUS_OK, INTEL_SIP_SMC_STATUS_NOT_SUPPORTED or
+ * INTEL_SIP_SMC_STATUS_ERROR
+ * a1-a3 not used
+ */
+#define INTEL_SIP_SMC_FUNCID_FCS_AES_CRYPTO_UPDATE 117
+#define INTEL_SIP_SMC_FCS_AES_CRYPTO_UPDATE \
+ INTEL_SIP_SMC_STD_CALL_VAL(INTEL_SIP_SMC_FUNCID_FCS_AES_CRYPTO_UPDATE)
+
+/**
+ * Request INTEL_SIP_SMC_FCS_AES_CRYPTO_FINALIZE
+ * Sync call to decrypt/encrypt a data block
+ *
+ * Call register usage:
+ * a0 INTEL_SIP_SMC_FCS_AES_CRYPTO_FINALIZE
+ * a1 session ID
+ * a2 context ID
+ * a3 physical address of source
+ * a4 size of source
+ * a5 physical address of destation
+ * a6 size of destation
+ * a7 not used
+ *
+ * Return status:
+ * a0 INTEL_SIP_SMC_STATUS_OK, INTEL_SIP_SMC_STATUS_NOT_SUPPORTED or
+ * INTEL_SIP_SMC_STATUS_ERROR
+ * a1-a3 not used
+ */
+#define INTEL_SIP_SMC_FUNCID_FCS_AES_CRYPTO_FINALIZE 118
+#define INTEL_SIP_SMC_FCS_AES_CRYPTO_FINALIZE \
+ INTEL_SIP_SMC_STD_CALL_VAL(INTEL_SIP_SMC_FUNCID_FCS_AES_CRYPTO_FINALIZE)
#endif
diff --git a/include/linux/firmware/intel/stratix10-svc-client.h b/include/linux/firmware/intel/stratix10-svc-client.h
index 84685918c5d2..2d4a016468ae 100644
--- a/include/linux/firmware/intel/stratix10-svc-client.h
+++ b/include/linux/firmware/intel/stratix10-svc-client.h
@@ -157,6 +157,10 @@ struct stratix10_svc_chan;
* @COMMAND_FCS_CRYPTO_GET_KEY_INFO: get the crypto service key object
* info, return status is SVC_STATUS_OK or SVC_STATUS_ERROR
*
+ * @COMMAND_FCS_CRYPTO_AES_CRYPT: sends request to encrypt or decrypt a
+ * data block, return status is SVC_STATUS_OK or SVC_STATUS_ERROR
+ *
+ *
*/
enum stratix10_svc_command_code {
/* for FPGA */
@@ -190,6 +194,9 @@ enum stratix10_svc_command_code {
COMMAND_FCS_CRYPTO_EXPORT_KEY,
COMMAND_FCS_CRYPTO_REMOVE_KEY,
COMMAND_FCS_CRYPTO_GET_KEY_INFO,
+ COMMAND_FCS_CRYPTO_AES_CRYPT_INIT,
+ COMMAND_FCS_CRYPTO_AES_CRYPT_UPDATE,
+ COMMAND_FCS_CRYPTO_AES_CRYPT_FINALIZE,
/* Non-mailbox SMC Call */
COMMAND_SMC_SVC_VERSION = 200,
};
--
2.25.1
next prev parent reply other threads:[~2023-06-23 3:22 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-06-23 3:20 [PATCH 00/12] New Crypto service commands tien.sung.ang
2023-06-23 3:20 ` [PATCH 01/12] firmware: stratix10-svc: support open & close crypto session tien.sung.ang
2023-06-23 3:20 ` [PATCH 02/12] firmware: stratix10-svc: crypto key management tien.sung.ang
2023-06-23 3:20 ` tien.sung.ang [this message]
2023-06-23 3:20 ` [PATCH 04/12] firmware: stratix10-svc: increase msg arg size tien.sung.ang
2023-06-23 3:20 ` [PATCH 05/12] firmware: stratix10-svc: SHA-2 digest tien.sung.ang
2023-06-23 3:20 ` [PATCH 06/12] firmware: stratix10-svc: HMAC SHA2 verify tien.sung.ang
2023-06-23 3:20 ` [PATCH 07/12] firmware: stratix10-svc: ECDSA Hash signing tien.sung.ang
2023-06-23 3:20 ` [PATCH 08/12] firmware: stratix10-svc: ECDSA SHA2 data signing tien.sung.ang
2023-06-23 3:20 ` [PATCH 09/12] firmware: stratix10-svc: hash signature verification tien.sung.ang
2023-06-23 3:20 ` [PATCH 10/12] firmware: stratix10-svc: SHA2 " tien.sung.ang
2023-06-23 3:20 ` [PATCH 11/12] firmware: stratix10-svc: public key request tien.sung.ang
2023-06-23 3:20 ` [PATCH 12/12] firmware: stratix10-svc: ECDH request tien.sung.ang
2023-06-23 5:36 ` [PATCH 00/12] New Crypto service commands Dinh Nguyen
2023-06-23 6:53 ` Ang, Tien Sung
2023-06-23 7:32 ` Dinh Nguyen
2023-06-23 7:35 ` Ang, Tien Sung
2023-06-27 15:17 ` Dinh Nguyen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20230623032029.1755017-4-tien.sung.ang@intel.com \
--to=tien.sung.ang@intel.com \
--cc=dinguyen@kernel.org \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox