Files
linux-nv-oot/drivers/crypto/tegra-se-nvhost.h
Laxman Dewangan 13556fa7d2 crypto: Use SPDX GPL 2.0 license format
Use SPDX license format for license and copyright
information. Update year also.

Bug 4078035

Change-Id: I8a5b0f60c702b7fb9a30b5b50ca4058165d38cc9
Signed-off-by: Laxman Dewangan <ldewangan@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nv-oot/+/2890632
Reviewed-by: svcacv <svcacv@nvidia.com>
Reviewed-by: Jonathan Hunter <jonathanh@nvidia.com>
GVS: Gerrit_Virtual_Submit <buildbot_gerritrpt@nvidia.com>
2023-04-21 11:40:45 -07:00

511 lines
14 KiB
C

/* SPDX-License-Identifier: GPL-2.0-only */
/*
* Copyright (c) 2015-2023, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
*
* Header file for Tegra Security Engine
*/
#ifndef _CRYPTO_TEGRA_SE_H
#define _CRYPTO_TEGRA_SE_H
#include <crypto/hash.h>
#include <crypto/sha1.h>
#define PFX "tegra-se-nvhost: "
#define ENCRYPT 1
#define DECRYPT 0
#define TEGRA_SE_CRA_PRIORITY 300
#define TEGRA_SE_COMPOSITE_PRIORITY 400
#define TEGRA_SE_CRYPTO_QUEUE_LENGTH 100
#define SE_MAX_SRC_SG_COUNT 50
#define SE_MAX_DST_SG_COUNT 50
#define TEGRA_SE_KEYSLOT_COUNT 16
#define SE_MAX_LAST_BLOCK_SIZE 0xFFFFF
/* SE register definitions */
#define SE1_AES0_CONFIG_REG_OFFSET 0x204
#define SE2_AES1_CONFIG_REG_OFFSET 0x404
#define SE_AES_CRYPTO_CONFIG_OFFSET 0x4
#define SE_AES_IN_ADDR_OFFSET 0x8
#define SE_AES_IN_ADDR_HI_OFFSET 0xC
#define SE_AES_OUT_ADDR_OFFSET 0x10
#define SE_AES_OUT_ADDR_HI_OFFSET 0x14
#define SE_AES_CRYPTO_LINEAR_CTR 0x18
#define SE_AES_CRYPTO_LAST_BLOCK_OFFSET 0x28
#define SE_AES_OPERATION_OFFSET 0x34
#define SE_AES_CRYPTO_KEYTABLE_ADDR_OFFSET 0xB8
#define SE_AES_CRYPTO_KEYTABLE_DATA_OFFSET 0xBC
#define SE_AES_CRYPTO_CTR_SPARE 0xE0
#define SE_AES_CTR_LITTLE_ENDIAN 1
#define SE_CONFIG_ENC_ALG_SHIFT 12
#define SE_CONFIG_DEC_ALG_SHIFT 8
#define ALG_AES_ENC 1
#define ALG_RNG 2
#define ALG_SHA 3
#define ALG_RSA 4
#define ALG_NOP 0
#define ALG_AES_DEC 1
#define ALG_KEYFETCH 5
#define ALG_HMAC 7
#define ALG_KDF 8
#define ALG_INS 13
#define SE_CONFIG_ENC_ALG(x) (x << SE_CONFIG_ENC_ALG_SHIFT)
#define SE_CONFIG_DEC_ALG(x) (x << SE_CONFIG_DEC_ALG_SHIFT)
#define SE_CONFIG_DST_SHIFT 2
#define DST_MEMORY 0
#define DST_HASHREG 1
#define DST_KEYTAB 2
#define DST_SRK 3
#define DST_RSAREG 4
#define SE_CONFIG_DST(x) (x << SE_CONFIG_DST_SHIFT)
#define SE_CONFIG_ENC_MODE_SHIFT 24
#define SE_CONFIG_DEC_MODE_SHIFT 16
#define MODE_KEY128 0
#define MODE_KEY192 1
#define MODE_KEY256 2
#define MODE_GMAC 3
#define MODE_GCM 4
#define MODE_GCM_FINAL 5
#define MODE_CMAC 7
#define MODE_SHA1 0
#define MODE_SHA224 4
#define MODE_SHA256 5
#define MODE_SHA384 6
#define MODE_SHA512 7
#define MODE_SHA3_224 9
#define MODE_SHA3_256 10
#define MODE_SHA3_384 11
#define MODE_SHA3_512 12
#define MODE_SHAKE128 13
#define MODE_SHAKE256 14
#define MODE_HMAC_SHA256_1KEY 0
#define MODE_HMAC_SHA256_2KEY 1
#define SE_CONFIG_ENC_MODE(x) (x << SE_CONFIG_ENC_MODE_SHIFT)
#define SE_CONFIG_DEC_MODE(x) (x << SE_CONFIG_DEC_MODE_SHIFT)
#define SE_RNG_CONFIG_REG_OFFSET 0x234
#define DRBG_MODE_SHIFT 0
#define DRBG_MODE_NORMAL 0
#define DRBG_MODE_FORCE_INSTANTION 1
#define DRBG_MODE_FORCE_RESEED 2
#define SE_RNG_CONFIG_MODE(x) (x << DRBG_MODE_SHIFT)
#define SE_RNG_SRC_CONFIG_REG_OFFSET 0x2d8
#define DRBG_RO_ENT_SRC_SHIFT 1
#define DRBG_RO_ENT_SRC_ENABLE 1
#define DRBG_RO_ENT_SRC_DISABLE 0
#define SE_RNG_SRC_CONFIG_RO_ENT_SRC(x) (x << DRBG_RO_ENT_SRC_SHIFT)
#define DRBG_RO_ENT_SRC_LOCK_SHIFT 0
#define DRBG_RO_ENT_SRC_LOCK_ENABLE 1
#define DRBG_RO_ENT_SRC_LOCK_DISABLE 0
#define SE_RNG_SRC_CONFIG_RO_ENT_SRC_LOCK(x) (x << DRBG_RO_ENT_SRC_LOCK_SHIFT)
#define DRBG_SRC_SHIFT 2
#define DRBG_SRC_NONE 0
#define DRBG_SRC_ENTROPY 1
#define DRBG_SRC_LFSR 2
#define SE_RNG_CONFIG_SRC(x) (x << DRBG_SRC_SHIFT)
#define SE_RNG_RESEED_INTERVAL_REG_OFFSET 0x2dc
#define SE_KEYTABLE_REG_OFFSET 0x31c
#define SE_CRYPTO_KEYIV_PKT_SUBKEY_SEL_SHIFT 3
#define SE_CRYPTO_KEYIV_PKT_SUBKEY_SEL(x) \
(x << SE_CRYPTO_KEYIV_PKT_SUBKEY_SEL_SHIFT)
#define SUBKEY_SEL_KEY1 0
#define SUBKEY_SEL_KEY2 1
#define SE_KEYTABLE_SLOT_SHIFT 4
#define SE_KEYTABLE_SLOT(x) (x << SE_KEYTABLE_SLOT_SHIFT)
#define SE_KEYTABLE_QUAD_SHIFT 2
#define QUAD_KEYS_128 0
#define QUAD_KEYS_192 1
#define QUAD_KEYS_256 1
#define QUAD_ORG_IV 2
#define QUAD_UPDTD_IV 3
#define SE_KEYTABLE_QUAD(x) (x << SE_KEYTABLE_QUAD_SHIFT)
#define SE_KEYTABLE_OP_TYPE_SHIFT 9
#define OP_READ 0
#define OP_WRITE 1
#define SE_KEYTABLE_OP_TYPE(x) (x << SE_KEYTABLE_OP_TYPE_SHIFT)
#define SE_KEYTABLE_TABLE_SEL_SHIFT 8
#define TABLE_KEYIV 0
#define TABLE_SCHEDULE 1
#define SE_KEYTABLE_TABLE_SEL(x) (x << SE_KEYTABLE_TABLE_SEL_SHIFT)
#define SE_KEYTABLE_PKT_SHIFT 0
#define SE_KEYTABLE_PKT(x) (x << SE_KEYTABLE_PKT_SHIFT)
#define SE_OP_DONE_SHIFT 4
#define OP_DONE 1
#define SE_OP_DONE(x, y) ((x) && (y << SE_OP_DONE_SHIFT))
#define SE_CRYPTO_HASH_SHIFT 0
#define HASH_DISABLE 0
#define HASH_ENABLE 1
#define SE_CRYPTO_HASH(x) (x << SE_CRYPTO_HASH_SHIFT)
#define SE4_SHA_IN_ADDR_OFFSET 0x8
#define SE4_SHA_TASK_CONFIG 0x108
#define HW_INIT_HASH_DISABLE 0
#define HW_INIT_HASH_ENABLE 1
#define SE4_HW_INIT_HASH_SHIFT 0
#define SE4_HW_INIT_HASH(x) (x << SE4_HW_INIT_HASH_SHIFT)
#define SE_CRYPTO_XOR_POS_SHIFT 1
#define XOR_BYPASS 0
#define XOR_BOTH 1
#define XOR_TOP 2
#define XOR_BOTTOM 3
#define SE_CRYPTO_XOR_POS(x) (x << SE_CRYPTO_XOR_POS_SHIFT)
#define SE_CRYPTO_INPUT_SEL_SHIFT 3
#define INPUT_MEMORY 0
#define INPUT_RANDOM 1
#define INPUT_AESOUT 2
#define INPUT_LNR_CTR 3
#define SE_CRYPTO_INPUT_SEL(x) (x << SE_CRYPTO_INPUT_SEL_SHIFT)
#define SE_CRYPTO_VCTRAM_SEL_SHIFT 5
#define VCTRAM_MEMORY 0
#define VCTRAM_TWEAK 1
#define VCTRAM_AESOUT 2
#define VCTRAM_PREVAHB 3
#define SE_CRYPTO_VCTRAM_SEL(x) (x << SE_CRYPTO_VCTRAM_SEL_SHIFT)
#define SE_CRYPTO_IV_SEL_SHIFT 7
#define IV_ORIGINAL 0
#define IV_UPDATED 1
#define IV_REG 2
#define SE_CRYPTO_IV_SEL(x) (x << SE_CRYPTO_IV_SEL_SHIFT)
#define SE_CRYPTO_CORE_SEL_SHIFT 9
#define CORE_DECRYPT 0
#define CORE_ENCRYPT 1
#define SE_CRYPTO_CORE_SEL(x) (x << SE_CRYPTO_CORE_SEL_SHIFT)
#define SE_CRYPTO_KEY2_INDEX_SHIFT 28
#define SE_CRYPTO_KEY2_INDEX(x) (x << SE_CRYPTO_KEY2_INDEX_SHIFT)
#define SE_CRYPTO_KEY_INDEX_SHIFT 24
#define SE_CRYPTO_KEY_INDEX(x) (x << SE_CRYPTO_KEY_INDEX_SHIFT)
#define SE_CRYPTO_CTR_CNTN_SHIFT 11
#define SE_CRYPTO_CTR_CNTN(x) (x << SE_CRYPTO_CTR_CNTN_SHIFT)
#define SE_CRYPTO_CTR_REG_COUNT 4
#define OP_START 1
#define OP_RESTART_OUT 2
#define OP_CTX_SAVE 3
#define OP_RESTART_IN 4
#define OP_RESTART_INOUT 5
#define OP_DUMMY 6
#define SE_OPERATION_OP_SHIFT 0
#define SE_OPERATION_OP(x) (x << SE_OPERATION_OP_SHIFT)
#define SE_OPERATION_LASTBUF_SHIFT 16
#define SE_OPERATION_LASTBUF(x) (x << SE_OPERATION_LASTBUF_SHIFT)
#define LASTBUF_TRUE 1
#define LASTBUF_FALSE 0
#define SE_OPERATION_WRSTALL_SHIFT 15
#define SE_OPERATION_WRSTALL(x) (x << SE_OPERATION_WRSTALL_SHIFT)
#define WRSTALL_TRUE 1
#define WRSTALL_FALSE 0
#define SE_OPERATION_FINAL_SHIFT 5
#define SE_OPERATION_FINAL(x) (x << SE_OPERATION_FINAL_SHIFT)
#define FINAL_TRUE 1
#define FINAL_FALSE 0
#define SE_OPERATION_INIT_SHIFT 4
#define SE_OPERATION_INIT(x) (x << SE_OPERATION_INIT_SHIFT)
#define INIT_TRUE 1
#define INIT_FALSE 0
#define SE_ADDR_HI_MSB_SHIFT 24
#define SE_ADDR_HI_SZ_SHIFT 0
#define SE_ADDR_HI_MSB(x) (x << SE_ADDR_HI_MSB_SHIFT)
#define MSB(x) ((x & 0xFF00000000) >> 32)
#define SE_ADDR_HI_SZ(x) (x << SE_ADDR_HI_SZ_SHIFT)
#define SE_LAST_BLOCK_RESIDUAL_BITS_SHIFT 20
#define SE_LAST_BLOCK_RESIDUAL_BITS(x) (x << SE_LAST_BLOCK_RESIDUAL_BITS_SHIFT)
#define SE_BUFF_SIZE_MASK 0xFF000000
#define SE_MAX_TASKS_PER_SUBMIT 64
#define SE_MAX_SUBMIT_CHAIN_SZ 10
#define SE_WORD_SIZE_BYTES 4
#define SE_MAX_MEM_ALLOC 4194304
#define SE_MAX_GATHER_BUF_SZ 32768
#define SE_MAX_AESBUF_ALLOC (SE_MAX_MEM_ALLOC / SE_MAX_GATHER_BUF_SZ)
#define SE_MAX_AESBUF_TIMEOUT (20 * SE_MAX_AESBUF_ALLOC)
/* FIXME: The below 2 macros should fine tuned
* based on discussions with CPU team
*/
#define SE_MAX_CMDBUF_TIMEOUT (200 * SE_MAX_SUBMIT_CHAIN_SZ)
#define SE_WAIT_UDELAY 500 /* micro seconds */
#define SE_KEYSLOT_TIMEOUT 100
#define SE_KEYSLOT_MDELAY 1000
#define SE_INT_ENABLE_REG_OFFSET 0x88
#define SE1_INT_ENABLE_SHIFT 1
#define SE1_INT_ENABLE(x) (x << SE1_INT_ENABLE_SHIFT)
#define SE2_INT_ENABLE_SHIFT 0
#define SE2_INT_ENABLE(x) (x << SE2_INT_ENABLE_SHIFT)
#define SE3_INT_ENABLE_SHIFT 2
#define SE3_INT_ENABLE(x) (x << SE3_INT_ENABLE_SHIFT)
#define SE4_INT_ENABLE_SHIFT 3
#define SE4_INT_ENABLE(x) (x << SE4_INT_ENABLE_SHIFT)
#define INT_DISABLE 0
#define INT_ENABLE 1
#define SE1_AES0_INT_ENABLE_OFFSET 0x2EC
#define SE2_AES1_INT_ENABLE_OFFSET 0x4EC
#define SE3_RSA_INT_ENABLE_OFFSET 0x754
#define SE4_SHA_INT_ENABLE_OFFSET 0x180
#define SE1_AES0_INT_STATUS_REG_OFFSET 0x2F0
#define SE2_AES1_INT_STATUS_REG_OFFSET 0x4F0
#define SE3_RSA_INT_STATUS_REG_OFFSET 0x758
#define SE4_SHA_INT_STATUS_REG_OFFSET 0x184
#define SE_CRYPTO_KEYTABLE_DST_REG_OFFSET 0X330
#define SE_CRYPTO_KEYTABLE_DST_WORD_QUAD_SHIFT 0
#define SE_CRYPTO_KEYTABLE_DST_WORD_QUAD(x) \
(x << SE_CRYPTO_KEYTABLE_DST_WORD_QUAD_SHIFT)
#define SE_KEYTABLE_QUAD_SIZE_BYTES 16
#define SE_SPARE_0_REG_OFFSET 0x80c
#define TEGRA_SE_SHA_MAX_BLOCK_SIZE 128
#define SE4_SHA_CONFIG_REG_OFFSET 0x104
#define SE_SHA_MSG_LENGTH_OFFSET 0x18
#define SE_SHA_OPERATION_OFFSET 0x78
#define SE_SHA_HASH_LENGTH 0xa8
#define SHA_DISABLE 0
#define SHA_ENABLE 1
#define SE_HASH_RESULT_REG_OFFSET 0x13c
#define SE_CMAC_RESULT_REG_OFFSET 0x4c4
#define T234_SE_CMAC_RESULT_REG_OFFSET 0x0c0
#define SE_STATIC_MEM_ALLOC_BUFSZ 512
#define TEGRA_SE_KEY_256_SIZE 32
#define TEGRA_SE_KEY_512_SIZE 64
#define TEGRA_SE_KEY_192_SIZE 24
#define TEGRA_SE_KEY_128_SIZE 16
#define TEGRA_SE_AES_BLOCK_SIZE 16
#define TEGRA_SE_AES_MIN_KEY_SIZE 16
#define TEGRA_SE_AES_MAX_KEY_SIZE 64
#define TEGRA_SE_AES_IV_SIZE 16
#define TEGRA_SE_RNG_IV_SIZE 16
#define TEGRA_SE_RNG_DT_SIZE 16
#define TEGRA_SE_RNG_KEY_SIZE 16
#define TEGRA_SE_RNG_SEED_SIZE (TEGRA_SE_RNG_IV_SIZE + \
TEGRA_SE_RNG_KEY_SIZE + \
TEGRA_SE_RNG_DT_SIZE)
#define TEGRA_SE_AES_CMAC_DIGEST_SIZE 16
#define TEGRA_SE_AES_CBC_MAC_DIGEST_SIZE 16
#define TEGRA_SE_RSA512_INPUT_SIZE 64
#define TEGRA_SE_RSA1024_INPUT_SIZE 128
#define TEGRA_SE_RSA1536_INPUT_SIZE 192
#define TEGRA_SE_RSA2048_INPUT_SIZE 256
#define TEGRA_SE_AES_CMAC_STATE_SIZE 16
#define SHA1_STATE_SIZE 20
#define SHA224_STATE_SIZE 32
#define SHA256_STATE_SIZE 32
#define SHA384_STATE_SIZE 64
#define SHA512_STATE_SIZE 64
#define SHA3_224_STATE_SIZE 200
#define SHA3_256_STATE_SIZE 200
#define SHA3_384_STATE_SIZE 200
#define SHA3_512_STATE_SIZE 200
#define TEGRA_SE_RSA_KEYSLOT_COUNT 4
#define SE_RSA_OUTPUT 0x628
#define RSA_KEY_SLOT_ONE 0
#define RSA_KEY_SLOT_TW0 1
#define RSA_KEY_SLOT_THREE 2
#define RSA_KEY_SLOT_FOUR 3
#define RSA_KEY_NUM_SHIFT 7
#define RSA_KEY_NUM(x) (x << RSA_KEY_NUM_SHIFT)
#define RSA_KEY_TYPE_EXP 0
#define RSA_KEY_TYPE_MOD 1
#define RSA_KEY_TYPE_SHIFT 6
#define RSA_KEY_TYPE(x) (x << RSA_KEY_TYPE_SHIFT)
#define RSA_KEY_SLOT_SHIFT 23
#define RSA_KEY_SLOT(x) (x << RSA_KEY_SLOT_SHIFT)
#define SE3_RSA_CONFIG_REG_OFFSET 0x604
#define SE_RSA_OPERATION_OFFSET 0x20
#define SE_RSA_KEYTABLE_ADDR_OFFSET 0x148
#define SE_RSA_KEYTABLE_DATA_OFFSET 0x14C
#define RSA_KEY_PKT_WORD_ADDR_SHIFT 0
#define RSA_KEY_PKT_WORD_ADDR(x) (x << RSA_KEY_PKT_WORD_ADDR_SHIFT)
#define SE_RSA_KEYTABLE_PKT_SHIFT 0
#define SE_RSA_KEYTABLE_PKT(x) (x << SE_RSA_KEYTABLE_PKT_SHIFT)
#define SE_MAGIC_PATTERN 0x4E56
#define SE_STORE_KEY_IN_MEM 0x0001
#define SE_SLOT_NUM_MASK 0xF000
#define SE_SLOT_POSITION 12
#define SE_KEY_LEN_MASK 0x3FF
#define SE_MAGIC_PATTERN_OFFSET 16
#define SE_STREAMID_REG_OFFSET 0x90
#define SE_AES_CRYPTO_AAD_LENGTH_0_OFFSET 0x128
#define SE_AES_CRYPTO_MSG_LENGTH_0_OFFSET 0x130
#define SE_AES_GCM_GMAC_SIZE 16
/* Key manifest */
#define SE_KEYMANIFEST_ORIGIN(x) (x << 0)
#define SE_KEYMANIFEST_USER(x) (x << 4)
#define NS 3
#define SE_KEYMANIFEST_PURPOSE(x) (x << 8)
#define ENC 0
#define CMAC 1
#define HMAC 2
#define KW 3
#define KUW 4
#define KWUW 5
#define KDK 6
#define KDD 7
#define KDD_KUW 8
#define XTS 9
#define GCM 10
#define SE_KEYMANIFEST_SIZE(x) (x << 14)
#define KEY128 0
#define KEY192 1
#define KEY256 2
#define SE_KEYMANIFEST_EX(x) (x << 12)
#define SE_AES_CRYPTO_KEYTABLE_KEYMANIFEST_OFFSET 0x110
#define SE_AES_CRYPTO_KEYTABLE_DST_OFFSET 0x2c
#define SE_AES_KEY_INDEX(x) (x << 8)
#define SE_SHA_CRYPTO_KEYTABLE_KEYMANIFEST_OFFSET 0x98
#define SE_SHA_CRYPTO_KEYTABLE_DST_OFFSET 0xa4
#define SE_SHA_CRYPTO_KEYTABLE_ADDR_OFFSET 0x90
#define SE_SHA_CRYPTO_KEYTABLE_DATA_OFFSET 0x94
/* cdma opcodes */
#if 0
static inline u32 nvhost_opcode_setclass(
unsigned class_id, unsigned offset, unsigned mask)
{
return (0 << 28) | (offset << 16) | (class_id << 6) | mask;
}
static inline u32 nvhost_opcode_nonincr(unsigned offset, unsigned count)
{
return (2 << 28) | (offset << 16) | count;
}
static inline u32 nvhost_opcode_mask(unsigned offset, unsigned mask)
{
return (3 << 28) | (offset << 16) | mask;
}
static inline u32 nvhost_opcode_imm(unsigned offset, unsigned value)
{
return (4 << 28) | (offset << 16) | value;
}
static inline u32 nvhost_opcode_restart(unsigned address)
{
return (5 << 28) | (address >> 4);
}
static inline u32 nvhost_opcode_gather_nonincr(unsigned offset, unsigned count)
{
return (6 << 28) | (offset << 16) | BIT(15) | count;
}
static inline u32 nvhost_opcode_gather_incr(unsigned offset, unsigned count)
{
return (6 << 28) | (offset << 16) | BIT(15) | BIT(14) | count;
}
static inline u32 nvhost_opcode_gather_insert(unsigned offset, unsigned incr,
unsigned count)
{
return (6 << 28) | (offset << 16) | BIT(15) | (incr << 14) | count;
}
static inline u32 nvhost_opcode_setstreamid(unsigned streamid)
{
return (7 << 28) | streamid;
}
static inline u32 nvhost_opcode_setpayload(unsigned payload)
{
return (9 << 28) | payload;
}
static inline u32 nvhost_opcode_incr_w(unsigned int offset)
{
/* 20-bit offset supported */
return (10 << 28) | offset;
}
static inline u32 nvhost_opcode_nonincr_w(unsigned int offset)
{
/* 20-bit offset supported */
return (11 << 28) | offset;
}
static inline u32 nvhost_opcode_acquire_mlock(unsigned id)
{
return (14 << 28) | id;
}
static inline u32 nvhost_opcode_release_mlock(unsigned id)
{
return (14 << 28) | (1 << 24) | id;
}
static inline u32 nvhost_class_host_incr_syncpt_base(
unsigned base_indx, unsigned offset)
{
return host1x_uclass_incr_syncpt_base_base_indx_f(base_indx)
| host1x_uclass_incr_syncpt_base_offset_f(offset);
}
static inline u32 nvhost_class_host_incr_syncpt(
unsigned cond, unsigned indx)
{
return host1x_uclass_incr_syncpt_cond_f(cond)
| host1x_uclass_incr_syncpt_indx_f(indx);
}
#define NVHOST_OPCODE_NOOP nvhost_opcode_nonincr(0, 0)
static inline u32 nvhost_mask2(unsigned x, unsigned y)
{
return 1 | (1 << (y - x));
}
#endif
#endif /* _CRYPTO_TEGRA_SE_H */