1 // SPDX-License-Identifier: GPL-2.0
3 * CAAM/SEC 4.x functions for handling key-generation jobs
5 * Copyright 2008-2011 Freescale Semiconductor, Inc.
11 #include "desc_constr.h"
15 * split_key_len - Compute MDHA split key length for a given algorithm
16 * @hash: Hashing algorithm selection, one of OP_ALG_ALGSEL_* - MD5, SHA1,
17 * SHA224, SHA384, SHA512.
19 * Return: MDHA split key length
21 static inline u32 split_key_len(u32 hash)
23 /* Sizes for MDHA pads (*not* keys): MD5, SHA1, 224, 256, 384, 512 */
24 static const u8 mdpadlen[] = { 16, 20, 32, 32, 64, 64 };
27 idx = (hash & OP_ALG_ALGSEL_SUBMASK) >> OP_ALG_ALGSEL_SHIFT;
29 return (u32)(mdpadlen[idx] * 2);
33 * split_key_pad_len - Compute MDHA split key pad length for a given algorithm
34 * @hash: Hashing algorithm selection, one of OP_ALG_ALGSEL_* - MD5, SHA1,
35 * SHA224, SHA384, SHA512.
37 * Return: MDHA split key pad length
39 static inline u32 split_key_pad_len(u32 hash)
41 return ALIGN(split_key_len(hash), 16);
44 void split_key_done(struct device *dev, u32 *desc, u32 err,
47 struct split_key_result *res = context;
50 dev_err(dev, "%s %d: err 0x%x\n", __func__, __LINE__, err);
54 caam_jr_strstatus(dev, err);
58 complete(&res->completion);
60 EXPORT_SYMBOL(split_key_done);
62 get a split ipad/opad key
64 Split key generation-----------------------------------------------
66 [00] 0xb0810008 jobdesc: stidx=1 share=never len=8
67 [01] 0x04000014 key: class2->keyreg len=20
69 [03] 0x84410014 operation: cls2-op sha1 hmac init dec
70 [04] 0x24940000 fifold: class2 msgdata-last2 len=0 imm
71 [05] 0xa4000001 jump: class2 local all ->1 [06]
72 [06] 0x64260028 fifostr: class2 mdsplit-jdk len=40
75 int gen_split_key(struct device *jrdev, u8 *key_out,
76 struct alginfo * const adata, const u8 *key_in, u32 keylen,
80 struct split_key_result result;
81 dma_addr_t dma_addr_in, dma_addr_out;
84 adata->keylen = split_key_len(adata->algtype & OP_ALG_ALGSEL_MASK);
85 adata->keylen_pad = split_key_pad_len(adata->algtype &
89 dev_err(jrdev, "split keylen %d split keylen padded %d\n",
90 adata->keylen, adata->keylen_pad);
91 print_hex_dump(KERN_ERR, "ctx.key@" __stringify(__LINE__)": ",
92 DUMP_PREFIX_ADDRESS, 16, 4, key_in, keylen, 1);
95 if (adata->keylen_pad > max_keylen)
98 desc = kmalloc(CAAM_CMD_SZ * 6 + CAAM_PTR_SZ * 2, GFP_KERNEL | GFP_DMA);
100 dev_err(jrdev, "unable to allocate key input memory\n");
104 dma_addr_in = dma_map_single(jrdev, (void *)key_in, keylen,
106 if (dma_mapping_error(jrdev, dma_addr_in)) {
107 dev_err(jrdev, "unable to map key input memory\n");
111 dma_addr_out = dma_map_single(jrdev, key_out, adata->keylen_pad,
113 if (dma_mapping_error(jrdev, dma_addr_out)) {
114 dev_err(jrdev, "unable to map key output memory\n");
118 init_job_desc(desc, 0);
119 append_key(desc, dma_addr_in, keylen, CLASS_2 | KEY_DEST_CLASS_REG);
121 /* Sets MDHA up into an HMAC-INIT */
122 append_operation(desc, (adata->algtype & OP_ALG_ALGSEL_MASK) |
123 OP_ALG_AAI_HMAC | OP_TYPE_CLASS2_ALG | OP_ALG_DECRYPT |
127 * do a FIFO_LOAD of zero, this will trigger the internal key expansion
128 * into both pads inside MDHA
130 append_fifo_load_as_imm(desc, NULL, 0, LDST_CLASS_2_CCB |
131 FIFOLD_TYPE_MSG | FIFOLD_TYPE_LAST2);
134 * FIFO_STORE with the explicit split-key content store
137 append_fifo_store(desc, dma_addr_out, adata->keylen,
138 LDST_CLASS_2_CCB | FIFOST_TYPE_SPLIT_KEK);
141 print_hex_dump(KERN_ERR, "ctx.key@"__stringify(__LINE__)": ",
142 DUMP_PREFIX_ADDRESS, 16, 4, key_in, keylen, 1);
143 print_hex_dump(KERN_ERR, "jobdesc@"__stringify(__LINE__)": ",
144 DUMP_PREFIX_ADDRESS, 16, 4, desc, desc_bytes(desc), 1);
148 init_completion(&result.completion);
150 ret = caam_jr_enqueue(jrdev, desc, split_key_done, &result);
153 wait_for_completion(&result.completion);
156 print_hex_dump(KERN_ERR, "ctx.key@"__stringify(__LINE__)": ",
157 DUMP_PREFIX_ADDRESS, 16, 4, key_out,
158 adata->keylen_pad, 1);
162 dma_unmap_single(jrdev, dma_addr_out, adata->keylen_pad,
165 dma_unmap_single(jrdev, dma_addr_in, keylen, DMA_TO_DEVICE);
170 EXPORT_SYMBOL(gen_split_key);