4a174a1734
CAAM only has a single clock in i.mx7d. Logic was added to initialize only the single clock. The Secure Memory registers moved in CAAM era included in i.mx7d. This required changes to support access to two different versions of the register map. The registers are access through a data structure that overlay the register region. Two new Secure Memory register structures were created to support the different versions. Logic was also added to determine which version is implemented based on the CAAM era, and access functions were added to support register access to the Secure Memory Command and Status registers. Signed-off-by: Dan Douglass <dan.douglass@freescale.com>
126 lines
4.5 KiB
C
126 lines
4.5 KiB
C
|
|
/*
|
|
* CAAM Secure Memory/Keywrap API Definitions
|
|
* Copyright (C) 2008-2015 Freescale Semiconductor, Inc.
|
|
*/
|
|
|
|
#ifndef SM_H
|
|
#define SM_H
|
|
|
|
|
|
/* Storage access permissions */
|
|
#define SM_PERM_READ 0x01
|
|
#define SM_PERM_WRITE 0x02
|
|
#define SM_PERM_BLOB 0x03
|
|
|
|
/* Define treatment of secure memory vs. general memory blobs */
|
|
#define SM_SECMEM 0
|
|
#define SM_GENMEM 1
|
|
|
|
/* Define treatment of red/black keys */
|
|
#define RED_KEY 0
|
|
#define BLACK_KEY 1
|
|
|
|
/* Define key encryption/covering options */
|
|
#define KEY_COVER_ECB 0 /* cover key in AES-ECB */
|
|
#define KEY_COVER_CCM 1 /* cover key with AES-CCM */
|
|
|
|
/*
|
|
* Round a key size up to an AES blocksize boundary so to allow for
|
|
* padding out to a full block
|
|
*/
|
|
#define AES_BLOCK_PAD(x) ((x % 16) ? ((x >> 4) + 1) << 4 : x)
|
|
|
|
/* Define space required for BKEK + MAC tag storage in any blob */
|
|
#define BLOB_OVERHEAD (32 + 16)
|
|
|
|
/* Keystore maintenance functions */
|
|
void sm_init_keystore(struct device *dev);
|
|
u32 sm_detect_keystore_units(struct device *dev);
|
|
int sm_establish_keystore(struct device *dev, u32 unit);
|
|
void sm_release_keystore(struct device *dev, u32 unit);
|
|
void caam_sm_shutdown(struct platform_device *pdev);
|
|
int caam_sm_example_init(struct platform_device *pdev);
|
|
|
|
/* Keystore accessor functions */
|
|
extern int sm_keystore_slot_alloc(struct device *dev, u32 unit, u32 size,
|
|
u32 *slot);
|
|
extern int sm_keystore_slot_dealloc(struct device *dev, u32 unit, u32 slot);
|
|
extern int sm_keystore_slot_load(struct device *dev, u32 unit, u32 slot,
|
|
const u8 *key_data, u32 key_length);
|
|
extern int sm_keystore_slot_read(struct device *dev, u32 unit, u32 slot,
|
|
u32 key_length, u8 *key_data);
|
|
extern int sm_keystore_cover_key(struct device *dev, u32 unit, u32 slot,
|
|
u16 key_length, u8 keyauth);
|
|
extern int sm_keystore_slot_export(struct device *dev, u32 unit, u32 slot,
|
|
u8 keycolor, u8 keyauth, u8 *outbuf,
|
|
u16 keylen, u8 *keymod);
|
|
extern int sm_keystore_slot_import(struct device *dev, u32 unit, u32 slot,
|
|
u8 keycolor, u8 keyauth, u8 *inbuf,
|
|
u16 keylen, u8 *keymod);
|
|
|
|
/* Prior functions from legacy API, deprecated */
|
|
extern int sm_keystore_slot_encapsulate(struct device *dev, u32 unit,
|
|
u32 inslot, u32 outslot, u16 secretlen,
|
|
u8 *keymod, u16 keymodlen);
|
|
extern int sm_keystore_slot_decapsulate(struct device *dev, u32 unit,
|
|
u32 inslot, u32 outslot, u16 secretlen,
|
|
u8 *keymod, u16 keymodlen);
|
|
|
|
/* Data structure to hold per-slot information */
|
|
struct keystore_data_slot_info {
|
|
u8 allocated; /* Track slot assignments */
|
|
u32 key_length; /* Size of the key */
|
|
};
|
|
|
|
/* Data structure to hold keystore information */
|
|
struct keystore_data {
|
|
void *base_address; /* Virtual base of secure memory pages */
|
|
void *phys_address; /* Physical base of secure memory pages */
|
|
u32 slot_count; /* Number of slots in the keystore */
|
|
struct keystore_data_slot_info *slot; /* Per-slot information */
|
|
};
|
|
|
|
/* store the detected attributes of a secure memory page */
|
|
struct sm_page_descriptor {
|
|
u16 phys_pagenum; /* may be discontiguous */
|
|
u16 own_part; /* Owning partition */
|
|
void *pg_base; /* Calculated virtual address */
|
|
void *pg_phys; /* Calculated physical address */
|
|
struct keystore_data *ksdata;
|
|
};
|
|
|
|
struct caam_drv_private_sm {
|
|
struct device *parentdev; /* this ends up as the controller */
|
|
struct device *smringdev; /* ring that owns this instance */
|
|
struct platform_device *sm_pdev; /* Secure Memory platform device */
|
|
spinlock_t kslock ____cacheline_aligned;
|
|
|
|
/* SM Register offset from JR base address */
|
|
u32 sm_reg_offset;
|
|
|
|
/* Default parameters for geometry */
|
|
u32 max_pages; /* maximum pages this instance can support */
|
|
u32 top_partition; /* highest partition number in this instance */
|
|
u32 top_page; /* highest page number in this instance */
|
|
u32 page_size; /* page size */
|
|
u32 slot_size; /* selected size of each storage block */
|
|
|
|
/* Partition/Page Allocation Map */
|
|
u32 localpages; /* Number of pages we can access */
|
|
struct sm_page_descriptor *pagedesc; /* Allocated per-page */
|
|
|
|
/* Installed handlers for keystore access */
|
|
int (*data_init)(struct device *dev, u32 unit);
|
|
void (*data_cleanup)(struct device *dev, u32 unit);
|
|
int (*slot_alloc)(struct device *dev, u32 unit, u32 size, u32 *slot);
|
|
int (*slot_dealloc)(struct device *dev, u32 unit, u32 slot);
|
|
void *(*slot_get_address)(struct device *dev, u32 unit, u32 handle);
|
|
void *(*slot_get_physical)(struct device *dev, u32 unit, u32 handle);
|
|
u32 (*slot_get_base)(struct device *dev, u32 unit, u32 handle);
|
|
u32 (*slot_get_offset)(struct device *dev, u32 unit, u32 handle);
|
|
u32 (*slot_get_slot_size)(struct device *dev, u32 unit, u32 handle);
|
|
};
|
|
|
|
#endif /* SM_H */
|