1/*
  2 * AMD Cryptographic Coprocessor (CCP) crypto API support
  3 *
  4 * Copyright (C) 2013 Advanced Micro Devices, Inc.
  5 *
  6 * Author: Tom Lendacky <thomas.lendacky@amd.com>
  7 *
  8 * This program is free software; you can redistribute it and/or modify
  9 * it under the terms of the GNU General Public License version 2 as
 10 * published by the Free Software Foundation.
 11 */
 12
 13#ifndef __CCP_CRYPTO_H__
 14#define __CCP_CRYPTO_H__
 15
 16#include <linux/list.h>
 17#include <linux/wait.h>
 18#include <linux/pci.h>
 19#include <linux/ccp.h>
 20#include <linux/crypto.h>
 21#include <crypto/algapi.h>
 22#include <crypto/aes.h>
 23#include <crypto/ctr.h>
 24#include <crypto/hash.h>
 25#include <crypto/sha.h>
 26
 27#define CCP_CRA_PRIORITY	300
 28
 29struct ccp_crypto_ablkcipher_alg {
 30	struct list_head entry;
 31
 32	u32 mode;
 33
 34	struct crypto_alg alg;
 35};
 36
 37struct ccp_crypto_ahash_alg {
 38	struct list_head entry;
 39
 40	const __be32 *init;
 41	u32 type;
 42	u32 mode;
 43
 44	/* Child algorithm used for HMAC, CMAC, etc */
 45	char child_alg[CRYPTO_MAX_ALG_NAME];
 46
 47	struct ahash_alg alg;
 48};
 49
 50static inline struct ccp_crypto_ablkcipher_alg *
 51	ccp_crypto_ablkcipher_alg(struct crypto_tfm *tfm)
 52{
 53	struct crypto_alg *alg = tfm->__crt_alg;
 54
 55	return container_of(alg, struct ccp_crypto_ablkcipher_alg, alg);
 56}
 57
 58static inline struct ccp_crypto_ahash_alg *
 59	ccp_crypto_ahash_alg(struct crypto_tfm *tfm)
 60{
 61	struct crypto_alg *alg = tfm->__crt_alg;
 62	struct ahash_alg *ahash_alg;
 63
 64	ahash_alg = container_of(alg, struct ahash_alg, halg.base);
 65
 66	return container_of(ahash_alg, struct ccp_crypto_ahash_alg, alg);
 67}
 68
 69/***** AES related defines *****/
 70struct ccp_aes_ctx {
 71	/* Fallback cipher for XTS with unsupported unit sizes */
 72	struct crypto_ablkcipher *tfm_ablkcipher;
 73
 74	/* Cipher used to generate CMAC K1/K2 keys */
 75	struct crypto_cipher *tfm_cipher;
 76
 77	enum ccp_engine engine;
 78	enum ccp_aes_type type;
 79	enum ccp_aes_mode mode;
 80
 81	struct scatterlist key_sg;
 82	unsigned int key_len;
 83	u8 key[AES_MAX_KEY_SIZE];
 84
 85	u8 nonce[CTR_RFC3686_NONCE_SIZE];
 86
 87	/* CMAC key structures */
 88	struct scatterlist k1_sg;
 89	struct scatterlist k2_sg;
 90	unsigned int kn_len;
 91	u8 k1[AES_BLOCK_SIZE];
 92	u8 k2[AES_BLOCK_SIZE];
 93};
 94
 95struct ccp_aes_req_ctx {
 96	struct scatterlist iv_sg;
 97	u8 iv[AES_BLOCK_SIZE];
 98
 99	/* Fields used for RFC3686 requests */
100	u8 *rfc3686_info;
101	u8 rfc3686_iv[AES_BLOCK_SIZE];
102
103	struct ccp_cmd cmd;
104};
105
106struct ccp_aes_cmac_req_ctx {
107	unsigned int null_msg;
108	unsigned int final;
109
110	struct scatterlist *src;
111	unsigned int nbytes;
112
113	u64 hash_cnt;
114	unsigned int hash_rem;
115
116	struct sg_table data_sg;
117
118	struct scatterlist iv_sg;
119	u8 iv[AES_BLOCK_SIZE];
120
121	struct scatterlist buf_sg;
122	unsigned int buf_count;
123	u8 buf[AES_BLOCK_SIZE];
124
125	struct scatterlist pad_sg;
126	unsigned int pad_count;
127	u8 pad[AES_BLOCK_SIZE];
128
129	struct ccp_cmd cmd;
130};
131
132struct ccp_aes_cmac_exp_ctx {
133	unsigned int null_msg;
134
135	u8 iv[AES_BLOCK_SIZE];
136
137	unsigned int buf_count;
138	u8 buf[AES_BLOCK_SIZE];
139};
140
141/***** SHA related defines *****/
142#define MAX_SHA_CONTEXT_SIZE	SHA256_DIGEST_SIZE
143#define MAX_SHA_BLOCK_SIZE	SHA256_BLOCK_SIZE
144
145struct ccp_sha_ctx {
146	struct scatterlist opad_sg;
147	unsigned int opad_count;
148
149	unsigned int key_len;
150	u8 key[MAX_SHA_BLOCK_SIZE];
151	u8 ipad[MAX_SHA_BLOCK_SIZE];
152	u8 opad[MAX_SHA_BLOCK_SIZE];
153	struct crypto_shash *hmac_tfm;
154};
155
156struct ccp_sha_req_ctx {
157	enum ccp_sha_type type;
158
159	u64 msg_bits;
160
161	unsigned int first;
162	unsigned int final;
163
164	struct scatterlist *src;
165	unsigned int nbytes;
166
167	u64 hash_cnt;
168	unsigned int hash_rem;
169
170	struct sg_table data_sg;
171
172	struct scatterlist ctx_sg;
173	u8 ctx[MAX_SHA_CONTEXT_SIZE];
174
175	struct scatterlist buf_sg;
176	unsigned int buf_count;
177	u8 buf[MAX_SHA_BLOCK_SIZE];
178
179	/* CCP driver command */
180	struct ccp_cmd cmd;
181};
182
183struct ccp_sha_exp_ctx {
184	enum ccp_sha_type type;
185
186	u64 msg_bits;
187
188	unsigned int first;
189
190	u8 ctx[MAX_SHA_CONTEXT_SIZE];
191
192	unsigned int buf_count;
193	u8 buf[MAX_SHA_BLOCK_SIZE];
194};
195
196/***** Common Context Structure *****/
197struct ccp_ctx {
198	int (*complete)(struct crypto_async_request *req, int ret);
199
200	union {
201		struct ccp_aes_ctx aes;
202		struct ccp_sha_ctx sha;
203	} u;
204};
205
206int ccp_crypto_enqueue_request(struct crypto_async_request *req,
207			       struct ccp_cmd *cmd);
208struct scatterlist *ccp_crypto_sg_table_add(struct sg_table *table,
209					    struct scatterlist *sg_add);
210
211int ccp_register_aes_algs(struct list_head *head);
212int ccp_register_aes_cmac_algs(struct list_head *head);
213int ccp_register_aes_xts_algs(struct list_head *head);
214int ccp_register_sha_algs(struct list_head *head);
215
216#endif