mirror of
https://github.com/torvalds/linux.git
synced 2024-12-04 18:13:04 +00:00
45f5d0176d
The authentication algorithm supports a maximum of 128-byte keys.
The allocated key memory is insufficient.
Fixes: 2f072d75d1 ("crypto: hisilicon - Add aead support on SEC2")
Signed-off-by: Kai Ye <yekai13@huawei.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
411 lines
6.5 KiB
C
411 lines
6.5 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/* Copyright (c) 2019 HiSilicon Limited. */
|
|
|
|
#ifndef __HISI_SEC_V2_CRYPTO_H
|
|
#define __HISI_SEC_V2_CRYPTO_H
|
|
|
|
#define SEC_AIV_SIZE 12
|
|
#define SEC_IV_SIZE 24
|
|
#define SEC_MAX_KEY_SIZE 64
|
|
#define SEC_MAX_AKEY_SIZE 128
|
|
#define SEC_COMM_SCENE 0
|
|
#define SEC_MIN_BLOCK_SZ 1
|
|
|
|
enum sec_calg {
|
|
SEC_CALG_3DES = 0x1,
|
|
SEC_CALG_AES = 0x2,
|
|
SEC_CALG_SM4 = 0x3,
|
|
};
|
|
|
|
enum sec_hash_alg {
|
|
SEC_A_HMAC_SHA1 = 0x10,
|
|
SEC_A_HMAC_SHA256 = 0x11,
|
|
SEC_A_HMAC_SHA512 = 0x15,
|
|
};
|
|
|
|
enum sec_mac_len {
|
|
SEC_HMAC_CCM_MAC = 16,
|
|
SEC_HMAC_GCM_MAC = 16,
|
|
SEC_SM3_MAC = 32,
|
|
SEC_HMAC_SM3_MAC = 32,
|
|
SEC_HMAC_MD5_MAC = 16,
|
|
SEC_HMAC_SHA1_MAC = 20,
|
|
SEC_HMAC_SHA256_MAC = 32,
|
|
SEC_HMAC_SHA512_MAC = 64,
|
|
};
|
|
|
|
enum sec_cmode {
|
|
SEC_CMODE_ECB = 0x0,
|
|
SEC_CMODE_CBC = 0x1,
|
|
SEC_CMODE_CFB = 0x2,
|
|
SEC_CMODE_OFB = 0x3,
|
|
SEC_CMODE_CTR = 0x4,
|
|
SEC_CMODE_CCM = 0x5,
|
|
SEC_CMODE_GCM = 0x6,
|
|
SEC_CMODE_XTS = 0x7,
|
|
};
|
|
|
|
enum sec_ckey_type {
|
|
SEC_CKEY_128BIT = 0x0,
|
|
SEC_CKEY_192BIT = 0x1,
|
|
SEC_CKEY_256BIT = 0x2,
|
|
SEC_CKEY_3DES_3KEY = 0x1,
|
|
SEC_CKEY_3DES_2KEY = 0x3,
|
|
};
|
|
|
|
enum sec_bd_type {
|
|
SEC_BD_TYPE1 = 0x1,
|
|
SEC_BD_TYPE2 = 0x2,
|
|
SEC_BD_TYPE3 = 0x3,
|
|
};
|
|
|
|
enum sec_auth {
|
|
SEC_NO_AUTH = 0x0,
|
|
SEC_AUTH_TYPE1 = 0x1,
|
|
SEC_AUTH_TYPE2 = 0x2,
|
|
};
|
|
|
|
enum sec_cipher_dir {
|
|
SEC_CIPHER_ENC = 0x1,
|
|
SEC_CIPHER_DEC = 0x2,
|
|
};
|
|
|
|
enum sec_addr_type {
|
|
SEC_PBUF = 0x0,
|
|
SEC_SGL = 0x1,
|
|
SEC_PRP = 0x2,
|
|
};
|
|
|
|
struct bd_status {
|
|
u64 tag;
|
|
u8 done;
|
|
u8 err_type;
|
|
u16 flag;
|
|
u16 icv;
|
|
};
|
|
|
|
enum {
|
|
AUTHPAD_PAD,
|
|
AUTHPAD_NOPAD,
|
|
};
|
|
|
|
enum {
|
|
AIGEN_GEN,
|
|
AIGEN_NOGEN,
|
|
};
|
|
|
|
struct sec_sqe_type2 {
|
|
/*
|
|
* mac_len: 0~4 bits
|
|
* a_key_len: 5~10 bits
|
|
* a_alg: 11~16 bits
|
|
*/
|
|
__le32 mac_key_alg;
|
|
|
|
/*
|
|
* c_icv_len: 0~5 bits
|
|
* c_width: 6~8 bits
|
|
* c_key_len: 9~11 bits
|
|
* c_mode: 12~15 bits
|
|
*/
|
|
__le16 icvw_kmode;
|
|
|
|
/* c_alg: 0~3 bits */
|
|
__u8 c_alg;
|
|
__u8 rsvd4;
|
|
|
|
/*
|
|
* a_len: 0~23 bits
|
|
* iv_offset_l: 24~31 bits
|
|
*/
|
|
__le32 alen_ivllen;
|
|
|
|
/*
|
|
* c_len: 0~23 bits
|
|
* iv_offset_h: 24~31 bits
|
|
*/
|
|
__le32 clen_ivhlen;
|
|
|
|
__le16 auth_src_offset;
|
|
__le16 cipher_src_offset;
|
|
__le16 cs_ip_header_offset;
|
|
__le16 cs_udp_header_offset;
|
|
__le16 pass_word_len;
|
|
__le16 dk_len;
|
|
__u8 salt3;
|
|
__u8 salt2;
|
|
__u8 salt1;
|
|
__u8 salt0;
|
|
|
|
__le16 tag;
|
|
__le16 rsvd5;
|
|
|
|
/*
|
|
* c_pad_type: 0~3 bits
|
|
* c_pad_len: 4~11 bits
|
|
* c_pad_data_type: 12~15 bits
|
|
*/
|
|
__le16 cph_pad;
|
|
|
|
/* c_pad_len_field: 0~1 bits */
|
|
__le16 c_pad_len_field;
|
|
|
|
__le64 long_a_data_len;
|
|
__le64 a_ivin_addr;
|
|
__le64 a_key_addr;
|
|
__le64 mac_addr;
|
|
__le64 c_ivin_addr;
|
|
__le64 c_key_addr;
|
|
|
|
__le64 data_src_addr;
|
|
__le64 data_dst_addr;
|
|
|
|
/*
|
|
* done: 0 bit
|
|
* icv: 1~3 bits
|
|
* csc: 4~6 bits
|
|
* flag: 7-10 bits
|
|
* dif_check: 11~13 bits
|
|
*/
|
|
__le16 done_flag;
|
|
|
|
__u8 error_type;
|
|
__u8 warning_type;
|
|
__u8 mac_i3;
|
|
__u8 mac_i2;
|
|
__u8 mac_i1;
|
|
__u8 mac_i0;
|
|
__le16 check_sum_i;
|
|
__u8 tls_pad_len_i;
|
|
__u8 rsvd12;
|
|
__le32 counter;
|
|
};
|
|
|
|
struct sec_sqe {
|
|
/*
|
|
* type: 0~3 bits
|
|
* cipher: 4~5 bits
|
|
* auth: 6~7 bit s
|
|
*/
|
|
__u8 type_cipher_auth;
|
|
|
|
/*
|
|
* seq: 0 bit
|
|
* de: 1~2 bits
|
|
* scene: 3~6 bits
|
|
* src_addr_type: ~7 bit, with sdm_addr_type 0-1 bits
|
|
*/
|
|
__u8 sds_sa_type;
|
|
|
|
/*
|
|
* src_addr_type: 0~1 bits, not used now,
|
|
* if support PRP, set this field, or set zero.
|
|
* dst_addr_type: 2~4 bits
|
|
* mac_addr_type: 5~7 bits
|
|
*/
|
|
__u8 sdm_addr_type;
|
|
__u8 rsvd0;
|
|
|
|
/*
|
|
* nonce_len(type2): 0~3 bits
|
|
* huk(type2): 4 bit
|
|
* key_s(type2): 5 bit
|
|
* ci_gen: 6~7 bits
|
|
*/
|
|
__u8 huk_key_ci;
|
|
|
|
/*
|
|
* ai_gen: 0~1 bits
|
|
* a_pad(type2): 2~3 bits
|
|
* c_s(type2): 4~5 bits
|
|
*/
|
|
__u8 ai_apd_cs;
|
|
|
|
/*
|
|
* rhf(type2): 0 bit
|
|
* c_key_type: 1~2 bits
|
|
* a_key_type: 3~4 bits
|
|
* write_frame_len(type2): 5~7 bits
|
|
*/
|
|
__u8 rca_key_frm;
|
|
|
|
/*
|
|
* cal_iv_addr_en(type2): 0 bit
|
|
* tls_up(type2): 1 bit
|
|
* inveld: 7 bit
|
|
*/
|
|
__u8 iv_tls_ld;
|
|
|
|
/* Just using type2 BD now */
|
|
struct sec_sqe_type2 type2;
|
|
};
|
|
|
|
struct bd3_auth_ivin {
|
|
__le64 a_ivin_addr;
|
|
__le32 rsvd0;
|
|
__le32 rsvd1;
|
|
} __packed __aligned(4);
|
|
|
|
struct bd3_skip_data {
|
|
__le32 rsvd0;
|
|
|
|
/*
|
|
* gran_num: 0~15 bits
|
|
* reserved: 16~31 bits
|
|
*/
|
|
__le32 gran_num;
|
|
|
|
/*
|
|
* src_skip_data_len: 0~24 bits
|
|
* reserved: 25~31 bits
|
|
*/
|
|
__le32 src_skip_data_len;
|
|
|
|
/*
|
|
* dst_skip_data_len: 0~24 bits
|
|
* reserved: 25~31 bits
|
|
*/
|
|
__le32 dst_skip_data_len;
|
|
};
|
|
|
|
struct bd3_stream_scene {
|
|
__le64 c_ivin_addr;
|
|
__le64 long_a_data_len;
|
|
|
|
/*
|
|
* auth_pad: 0~1 bits
|
|
* stream_protocol: 2~4 bits
|
|
* reserved: 5~7 bits
|
|
*/
|
|
__u8 stream_auth_pad;
|
|
__u8 plaintext_type;
|
|
__le16 pad_len_1p3;
|
|
} __packed __aligned(4);
|
|
|
|
struct bd3_no_scene {
|
|
__le64 c_ivin_addr;
|
|
__le32 rsvd0;
|
|
__le32 rsvd1;
|
|
__le32 rsvd2;
|
|
} __packed __aligned(4);
|
|
|
|
struct bd3_check_sum {
|
|
__u8 rsvd0;
|
|
__u8 hac_sva_status;
|
|
__le16 check_sum_i;
|
|
};
|
|
|
|
struct bd3_tls_type_back {
|
|
__u8 tls_1p3_type_back;
|
|
__u8 hac_sva_status;
|
|
__le16 pad_len_1p3_back;
|
|
};
|
|
|
|
struct sec_sqe3 {
|
|
/*
|
|
* type: 0~3 bit
|
|
* bd_invalid: 4 bit
|
|
* scene: 5~8 bit
|
|
* de: 9~10 bit
|
|
* src_addr_type: 11~13 bit
|
|
* dst_addr_type: 14~16 bit
|
|
* mac_addr_type: 17~19 bit
|
|
* reserved: 20~31 bits
|
|
*/
|
|
__le32 bd_param;
|
|
|
|
/*
|
|
* cipher: 0~1 bits
|
|
* ci_gen: 2~3 bit
|
|
* c_icv_len: 4~9 bit
|
|
* c_width: 10~12 bits
|
|
* c_key_len: 13~15 bits
|
|
*/
|
|
__le16 c_icv_key;
|
|
|
|
/*
|
|
* c_mode : 0~3 bits
|
|
* c_alg : 4~7 bits
|
|
*/
|
|
__u8 c_mode_alg;
|
|
|
|
/*
|
|
* nonce_len : 0~3 bits
|
|
* huk : 4 bits
|
|
* cal_iv_addr_en : 5 bits
|
|
* seq : 6 bits
|
|
* reserved : 7 bits
|
|
*/
|
|
__u8 huk_iv_seq;
|
|
|
|
__le64 tag;
|
|
__le64 data_src_addr;
|
|
__le64 a_key_addr;
|
|
union {
|
|
struct bd3_auth_ivin auth_ivin;
|
|
struct bd3_skip_data skip_data;
|
|
};
|
|
|
|
__le64 c_key_addr;
|
|
|
|
/*
|
|
* auth: 0~1 bits
|
|
* ai_gen: 2~3 bits
|
|
* mac_len: 4~8 bits
|
|
* akey_len: 9~14 bits
|
|
* a_alg: 15~20 bits
|
|
* key_sel: 21~24 bits
|
|
* ctr_count_mode/sm4_xts: 25~26 bits
|
|
* sva_prefetch: 27 bits
|
|
* key_wrap_num: 28~30 bits
|
|
* update_key: 31 bits
|
|
*/
|
|
__le32 auth_mac_key;
|
|
__le32 salt;
|
|
__le16 auth_src_offset;
|
|
__le16 cipher_src_offset;
|
|
|
|
/*
|
|
* auth_len: 0~23 bit
|
|
* auth_key_offset: 24~31 bits
|
|
*/
|
|
__le32 a_len_key;
|
|
|
|
/*
|
|
* cipher_len: 0~23 bit
|
|
* auth_ivin_offset: 24~31 bits
|
|
*/
|
|
__le32 c_len_ivin;
|
|
__le64 data_dst_addr;
|
|
__le64 mac_addr;
|
|
union {
|
|
struct bd3_stream_scene stream_scene;
|
|
struct bd3_no_scene no_scene;
|
|
};
|
|
|
|
/*
|
|
* done: 0 bit
|
|
* icv: 1~3 bit
|
|
* csc: 4~6 bit
|
|
* flag: 7~10 bit
|
|
* reserved: 11~15 bit
|
|
*/
|
|
__le16 done_flag;
|
|
__u8 error_type;
|
|
__u8 warning_type;
|
|
union {
|
|
__le32 mac_i;
|
|
__le32 kek_key_addr_l;
|
|
};
|
|
union {
|
|
__le32 kek_key_addr_h;
|
|
struct bd3_check_sum check_sum;
|
|
struct bd3_tls_type_back tls_type_back;
|
|
};
|
|
__le32 counter;
|
|
} __packed __aligned(4);
|
|
|
|
int sec_register_to_crypto(struct hisi_qm *qm);
|
|
void sec_unregister_from_crypto(struct hisi_qm *qm);
|
|
#endif
|