Linux Audio

Check our new training course

Loading...
v5.9
   1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 * Copyright (c) 2010-2011 Picochip Ltd., Jamie Iles
   4 */
   5#include <crypto/internal/aead.h>
   6#include <crypto/aes.h>
   7#include <crypto/algapi.h>
   8#include <crypto/authenc.h>
   9#include <crypto/internal/des.h>
  10#include <crypto/md5.h>
  11#include <crypto/sha.h>
  12#include <crypto/internal/skcipher.h>
  13#include <linux/clk.h>
  14#include <linux/crypto.h>
  15#include <linux/delay.h>
  16#include <linux/dma-mapping.h>
  17#include <linux/dmapool.h>
  18#include <linux/err.h>
  19#include <linux/init.h>
  20#include <linux/interrupt.h>
  21#include <linux/io.h>
  22#include <linux/list.h>
  23#include <linux/module.h>
  24#include <linux/of.h>
  25#include <linux/platform_device.h>
  26#include <linux/pm.h>
  27#include <linux/rtnetlink.h>
  28#include <linux/scatterlist.h>
  29#include <linux/sched.h>
  30#include <linux/sizes.h>
  31#include <linux/slab.h>
  32#include <linux/timer.h>
  33
  34#include "picoxcell_crypto_regs.h"
  35
  36/*
  37 * The threshold for the number of entries in the CMD FIFO available before
  38 * the CMD0_CNT interrupt is raised. Increasing this value will reduce the
  39 * number of interrupts raised to the CPU.
  40 */
  41#define CMD0_IRQ_THRESHOLD   1
  42
  43/*
  44 * The timeout period (in jiffies) for a PDU. When the the number of PDUs in
  45 * flight is greater than the STAT_IRQ_THRESHOLD or 0 the timer is disabled.
  46 * When there are packets in flight but lower than the threshold, we enable
  47 * the timer and at expiry, attempt to remove any processed packets from the
  48 * queue and if there are still packets left, schedule the timer again.
  49 */
  50#define PACKET_TIMEOUT	    1
  51
  52/* The priority to register each algorithm with. */
  53#define SPACC_CRYPTO_ALG_PRIORITY	10000
  54
  55#define SPACC_CRYPTO_KASUMI_F8_KEY_LEN	16
  56#define SPACC_CRYPTO_IPSEC_CIPHER_PG_SZ 64
  57#define SPACC_CRYPTO_IPSEC_HASH_PG_SZ	64
  58#define SPACC_CRYPTO_IPSEC_MAX_CTXS	32
  59#define SPACC_CRYPTO_IPSEC_FIFO_SZ	32
  60#define SPACC_CRYPTO_L2_CIPHER_PG_SZ	64
  61#define SPACC_CRYPTO_L2_HASH_PG_SZ	64
  62#define SPACC_CRYPTO_L2_MAX_CTXS	128
  63#define SPACC_CRYPTO_L2_FIFO_SZ		128
  64
  65#define MAX_DDT_LEN			16
  66
  67/* DDT format. This must match the hardware DDT format exactly. */
  68struct spacc_ddt {
  69	dma_addr_t	p;
  70	u32		len;
  71};
  72
  73/*
  74 * Asynchronous crypto request structure.
  75 *
  76 * This structure defines a request that is either queued for processing or
  77 * being processed.
  78 */
  79struct spacc_req {
  80	struct list_head		list;
  81	struct spacc_engine		*engine;
  82	struct crypto_async_request	*req;
  83	int				result;
  84	bool				is_encrypt;
  85	unsigned			ctx_id;
  86	dma_addr_t			src_addr, dst_addr;
  87	struct spacc_ddt		*src_ddt, *dst_ddt;
  88	void				(*complete)(struct spacc_req *req);
  89	struct skcipher_request		fallback_req;	// keep at the end
  90};
  91
  92struct spacc_aead {
  93	unsigned long			ctrl_default;
  94	unsigned long			type;
  95	struct aead_alg			alg;
  96	struct spacc_engine		*engine;
  97	struct list_head		entry;
  98	int				key_offs;
  99	int				iv_offs;
 100};
 101
 102struct spacc_engine {
 103	void __iomem			*regs;
 104	struct list_head		pending;
 105	int				next_ctx;
 106	spinlock_t			hw_lock;
 107	int				in_flight;
 108	struct list_head		completed;
 109	struct list_head		in_progress;
 110	struct tasklet_struct		complete;
 111	unsigned long			fifo_sz;
 112	void __iomem			*cipher_ctx_base;
 113	void __iomem			*hash_key_base;
 114	struct spacc_alg		*algs;
 115	unsigned			num_algs;
 116	struct list_head		registered_algs;
 117	struct spacc_aead		*aeads;
 118	unsigned			num_aeads;
 119	struct list_head		registered_aeads;
 120	size_t				cipher_pg_sz;
 121	size_t				hash_pg_sz;
 122	const char			*name;
 123	struct clk			*clk;
 124	struct device			*dev;
 125	unsigned			max_ctxs;
 126	struct timer_list		packet_timeout;
 127	unsigned			stat_irq_thresh;
 128	struct dma_pool			*req_pool;
 129};
 130
 131/* Algorithm type mask. */
 132#define SPACC_CRYPTO_ALG_MASK		0x7
 133
 134/* SPACC definition of a crypto algorithm. */
 135struct spacc_alg {
 136	unsigned long			ctrl_default;
 137	unsigned long			type;
 138	struct skcipher_alg		alg;
 139	struct spacc_engine		*engine;
 140	struct list_head		entry;
 141	int				key_offs;
 142	int				iv_offs;
 143};
 144
 145/* Generic context structure for any algorithm type. */
 146struct spacc_generic_ctx {
 147	struct spacc_engine		*engine;
 148	int				flags;
 149	int				key_offs;
 150	int				iv_offs;
 151};
 152
 153/* Block cipher context. */
 154struct spacc_ablk_ctx {
 155	struct spacc_generic_ctx	generic;
 156	u8				key[AES_MAX_KEY_SIZE];
 157	u8				key_len;
 158	/*
 159	 * The fallback cipher. If the operation can't be done in hardware,
 160	 * fallback to a software version.
 161	 */
 162	struct crypto_skcipher		*sw_cipher;
 163};
 164
 165/* AEAD cipher context. */
 166struct spacc_aead_ctx {
 167	struct spacc_generic_ctx	generic;
 168	u8				cipher_key[AES_MAX_KEY_SIZE];
 169	u8				hash_ctx[SPACC_CRYPTO_IPSEC_HASH_PG_SZ];
 170	u8				cipher_key_len;
 171	u8				hash_key_len;
 172	struct crypto_aead		*sw_cipher;
 173};
 174
 175static int spacc_ablk_submit(struct spacc_req *req);
 176
 177static inline struct spacc_alg *to_spacc_skcipher(struct skcipher_alg *alg)
 178{
 179	return alg ? container_of(alg, struct spacc_alg, alg) : NULL;
 180}
 181
 182static inline struct spacc_aead *to_spacc_aead(struct aead_alg *alg)
 183{
 184	return container_of(alg, struct spacc_aead, alg);
 185}
 186
 187static inline int spacc_fifo_cmd_full(struct spacc_engine *engine)
 188{
 189	u32 fifo_stat = readl(engine->regs + SPA_FIFO_STAT_REG_OFFSET);
 190
 191	return fifo_stat & SPA_FIFO_CMD_FULL;
 192}
 193
 194/*
 195 * Given a cipher context, and a context number, get the base address of the
 196 * context page.
 197 *
 198 * Returns the address of the context page where the key/context may
 199 * be written.
 200 */
 201static inline void __iomem *spacc_ctx_page_addr(struct spacc_generic_ctx *ctx,
 202						unsigned indx,
 203						bool is_cipher_ctx)
 204{
 205	return is_cipher_ctx ? ctx->engine->cipher_ctx_base +
 206			(indx * ctx->engine->cipher_pg_sz) :
 207		ctx->engine->hash_key_base + (indx * ctx->engine->hash_pg_sz);
 208}
 209
 210/* The context pages can only be written with 32-bit accesses. */
 211static inline void memcpy_toio32(u32 __iomem *dst, const void *src,
 212				 unsigned count)
 213{
 214	const u32 *src32 = (const u32 *) src;
 215
 216	while (count--)
 217		writel(*src32++, dst++);
 218}
 219
 220static void spacc_cipher_write_ctx(struct spacc_generic_ctx *ctx,
 221				   void __iomem *page_addr, const u8 *key,
 222				   size_t key_len, const u8 *iv, size_t iv_len)
 223{
 224	void __iomem *key_ptr = page_addr + ctx->key_offs;
 225	void __iomem *iv_ptr = page_addr + ctx->iv_offs;
 226
 227	memcpy_toio32(key_ptr, key, key_len / 4);
 228	memcpy_toio32(iv_ptr, iv, iv_len / 4);
 229}
 230
 231/*
 232 * Load a context into the engines context memory.
 233 *
 234 * Returns the index of the context page where the context was loaded.
 235 */
 236static unsigned spacc_load_ctx(struct spacc_generic_ctx *ctx,
 237			       const u8 *ciph_key, size_t ciph_len,
 238			       const u8 *iv, size_t ivlen, const u8 *hash_key,
 239			       size_t hash_len)
 240{
 241	unsigned indx = ctx->engine->next_ctx++;
 242	void __iomem *ciph_page_addr, *hash_page_addr;
 243
 244	ciph_page_addr = spacc_ctx_page_addr(ctx, indx, 1);
 245	hash_page_addr = spacc_ctx_page_addr(ctx, indx, 0);
 246
 247	ctx->engine->next_ctx &= ctx->engine->fifo_sz - 1;
 248	spacc_cipher_write_ctx(ctx, ciph_page_addr, ciph_key, ciph_len, iv,
 249			       ivlen);
 250	writel(ciph_len | (indx << SPA_KEY_SZ_CTX_INDEX_OFFSET) |
 251	       (1 << SPA_KEY_SZ_CIPHER_OFFSET),
 252	       ctx->engine->regs + SPA_KEY_SZ_REG_OFFSET);
 253
 254	if (hash_key) {
 255		memcpy_toio32(hash_page_addr, hash_key, hash_len / 4);
 256		writel(hash_len | (indx << SPA_KEY_SZ_CTX_INDEX_OFFSET),
 257		       ctx->engine->regs + SPA_KEY_SZ_REG_OFFSET);
 258	}
 259
 260	return indx;
 261}
 262
 263static inline void ddt_set(struct spacc_ddt *ddt, dma_addr_t phys, size_t len)
 264{
 265	ddt->p = phys;
 266	ddt->len = len;
 267}
 268
 269/*
 270 * Take a crypto request and scatterlists for the data and turn them into DDTs
 271 * for passing to the crypto engines. This also DMA maps the data so that the
 272 * crypto engines can DMA to/from them.
 273 */
 274static struct spacc_ddt *spacc_sg_to_ddt(struct spacc_engine *engine,
 275					 struct scatterlist *payload,
 276					 unsigned nbytes,
 277					 enum dma_data_direction dir,
 278					 dma_addr_t *ddt_phys)
 279{
 280	unsigned mapped_ents;
 281	struct scatterlist *cur;
 282	struct spacc_ddt *ddt;
 283	int i;
 284	int nents;
 285
 286	nents = sg_nents_for_len(payload, nbytes);
 287	if (nents < 0) {
 288		dev_err(engine->dev, "Invalid numbers of SG.\n");
 289		return NULL;
 290	}
 291	mapped_ents = dma_map_sg(engine->dev, payload, nents, dir);
 292
 293	if (mapped_ents + 1 > MAX_DDT_LEN)
 294		goto out;
 295
 296	ddt = dma_pool_alloc(engine->req_pool, GFP_ATOMIC, ddt_phys);
 297	if (!ddt)
 298		goto out;
 299
 300	for_each_sg(payload, cur, mapped_ents, i)
 301		ddt_set(&ddt[i], sg_dma_address(cur), sg_dma_len(cur));
 302	ddt_set(&ddt[mapped_ents], 0, 0);
 303
 304	return ddt;
 305
 306out:
 307	dma_unmap_sg(engine->dev, payload, nents, dir);
 308	return NULL;
 309}
 310
 311static int spacc_aead_make_ddts(struct aead_request *areq)
 312{
 313	struct crypto_aead *aead = crypto_aead_reqtfm(areq);
 314	struct spacc_req *req = aead_request_ctx(areq);
 315	struct spacc_engine *engine = req->engine;
 316	struct spacc_ddt *src_ddt, *dst_ddt;
 317	unsigned total;
 318	int src_nents, dst_nents;
 319	struct scatterlist *cur;
 320	int i, dst_ents, src_ents;
 321
 322	total = areq->assoclen + areq->cryptlen;
 323	if (req->is_encrypt)
 324		total += crypto_aead_authsize(aead);
 325
 326	src_nents = sg_nents_for_len(areq->src, total);
 327	if (src_nents < 0) {
 328		dev_err(engine->dev, "Invalid numbers of src SG.\n");
 329		return src_nents;
 330	}
 331	if (src_nents + 1 > MAX_DDT_LEN)
 332		return -E2BIG;
 333
 334	dst_nents = 0;
 335	if (areq->src != areq->dst) {
 336		dst_nents = sg_nents_for_len(areq->dst, total);
 337		if (dst_nents < 0) {
 338			dev_err(engine->dev, "Invalid numbers of dst SG.\n");
 339			return dst_nents;
 340		}
 341		if (src_nents + 1 > MAX_DDT_LEN)
 342			return -E2BIG;
 343	}
 344
 345	src_ddt = dma_pool_alloc(engine->req_pool, GFP_ATOMIC, &req->src_addr);
 346	if (!src_ddt)
 347		goto err;
 348
 349	dst_ddt = dma_pool_alloc(engine->req_pool, GFP_ATOMIC, &req->dst_addr);
 350	if (!dst_ddt)
 351		goto err_free_src;
 352
 353	req->src_ddt = src_ddt;
 354	req->dst_ddt = dst_ddt;
 355
 356	if (dst_nents) {
 357		src_ents = dma_map_sg(engine->dev, areq->src, src_nents,
 358				      DMA_TO_DEVICE);
 359		if (!src_ents)
 360			goto err_free_dst;
 361
 362		dst_ents = dma_map_sg(engine->dev, areq->dst, dst_nents,
 363				      DMA_FROM_DEVICE);
 364
 365		if (!dst_ents) {
 366			dma_unmap_sg(engine->dev, areq->src, src_nents,
 367				     DMA_TO_DEVICE);
 368			goto err_free_dst;
 369		}
 370	} else {
 371		src_ents = dma_map_sg(engine->dev, areq->src, src_nents,
 372				      DMA_BIDIRECTIONAL);
 373		if (!src_ents)
 374			goto err_free_dst;
 375		dst_ents = src_ents;
 376	}
 377
 378	/*
 379	 * Now map in the payload for the source and destination and terminate
 380	 * with the NULL pointers.
 381	 */
 382	for_each_sg(areq->src, cur, src_ents, i)
 383		ddt_set(src_ddt++, sg_dma_address(cur), sg_dma_len(cur));
 384
 385	/* For decryption we need to skip the associated data. */
 386	total = req->is_encrypt ? 0 : areq->assoclen;
 387	for_each_sg(areq->dst, cur, dst_ents, i) {
 388		unsigned len = sg_dma_len(cur);
 389
 390		if (len <= total) {
 391			total -= len;
 392			continue;
 393		}
 394
 395		ddt_set(dst_ddt++, sg_dma_address(cur) + total, len - total);
 396	}
 397
 398	ddt_set(src_ddt, 0, 0);
 399	ddt_set(dst_ddt, 0, 0);
 400
 401	return 0;
 402
 403err_free_dst:
 404	dma_pool_free(engine->req_pool, dst_ddt, req->dst_addr);
 405err_free_src:
 406	dma_pool_free(engine->req_pool, src_ddt, req->src_addr);
 407err:
 408	return -ENOMEM;
 409}
 410
 411static void spacc_aead_free_ddts(struct spacc_req *req)
 412{
 413	struct aead_request *areq = container_of(req->req, struct aead_request,
 414						 base);
 415	struct crypto_aead *aead = crypto_aead_reqtfm(areq);
 416	unsigned total = areq->assoclen + areq->cryptlen +
 417			 (req->is_encrypt ? crypto_aead_authsize(aead) : 0);
 418	struct spacc_aead_ctx *aead_ctx = crypto_aead_ctx(aead);
 419	struct spacc_engine *engine = aead_ctx->generic.engine;
 420	int nents = sg_nents_for_len(areq->src, total);
 421
 422	/* sg_nents_for_len should not fail since it works when mapping sg */
 423	if (unlikely(nents < 0)) {
 424		dev_err(engine->dev, "Invalid numbers of src SG.\n");
 425		return;
 426	}
 427
 428	if (areq->src != areq->dst) {
 429		dma_unmap_sg(engine->dev, areq->src, nents, DMA_TO_DEVICE);
 430		nents = sg_nents_for_len(areq->dst, total);
 431		if (unlikely(nents < 0)) {
 432			dev_err(engine->dev, "Invalid numbers of dst SG.\n");
 433			return;
 434		}
 435		dma_unmap_sg(engine->dev, areq->dst, nents, DMA_FROM_DEVICE);
 436	} else
 437		dma_unmap_sg(engine->dev, areq->src, nents, DMA_BIDIRECTIONAL);
 438
 439	dma_pool_free(engine->req_pool, req->src_ddt, req->src_addr);
 440	dma_pool_free(engine->req_pool, req->dst_ddt, req->dst_addr);
 441}
 442
 443static void spacc_free_ddt(struct spacc_req *req, struct spacc_ddt *ddt,
 444			   dma_addr_t ddt_addr, struct scatterlist *payload,
 445			   unsigned nbytes, enum dma_data_direction dir)
 446{
 447	int nents = sg_nents_for_len(payload, nbytes);
 448
 449	if (nents < 0) {
 450		dev_err(req->engine->dev, "Invalid numbers of SG.\n");
 451		return;
 452	}
 453
 454	dma_unmap_sg(req->engine->dev, payload, nents, dir);
 455	dma_pool_free(req->engine->req_pool, ddt, ddt_addr);
 456}
 457
 458static int spacc_aead_setkey(struct crypto_aead *tfm, const u8 *key,
 459			     unsigned int keylen)
 460{
 461	struct spacc_aead_ctx *ctx = crypto_aead_ctx(tfm);
 462	struct crypto_authenc_keys keys;
 463	int err;
 464
 465	crypto_aead_clear_flags(ctx->sw_cipher, CRYPTO_TFM_REQ_MASK);
 466	crypto_aead_set_flags(ctx->sw_cipher, crypto_aead_get_flags(tfm) &
 467					      CRYPTO_TFM_REQ_MASK);
 468	err = crypto_aead_setkey(ctx->sw_cipher, key, keylen);
 
 
 
 469	if (err)
 470		return err;
 471
 472	if (crypto_authenc_extractkeys(&keys, key, keylen) != 0)
 473		goto badkey;
 474
 475	if (keys.enckeylen > AES_MAX_KEY_SIZE)
 476		goto badkey;
 477
 478	if (keys.authkeylen > sizeof(ctx->hash_ctx))
 479		goto badkey;
 480
 481	memcpy(ctx->cipher_key, keys.enckey, keys.enckeylen);
 482	ctx->cipher_key_len = keys.enckeylen;
 483
 484	memcpy(ctx->hash_ctx, keys.authkey, keys.authkeylen);
 485	ctx->hash_key_len = keys.authkeylen;
 486
 487	memzero_explicit(&keys, sizeof(keys));
 488	return 0;
 489
 490badkey:
 
 491	memzero_explicit(&keys, sizeof(keys));
 492	return -EINVAL;
 493}
 494
 495static int spacc_aead_setauthsize(struct crypto_aead *tfm,
 496				  unsigned int authsize)
 497{
 498	struct spacc_aead_ctx *ctx = crypto_tfm_ctx(crypto_aead_tfm(tfm));
 499
 500	return crypto_aead_setauthsize(ctx->sw_cipher, authsize);
 501}
 502
 503/*
 504 * Check if an AEAD request requires a fallback operation. Some requests can't
 505 * be completed in hardware because the hardware may not support certain key
 506 * sizes. In these cases we need to complete the request in software.
 507 */
 508static int spacc_aead_need_fallback(struct aead_request *aead_req)
 509{
 510	struct crypto_aead *aead = crypto_aead_reqtfm(aead_req);
 511	struct aead_alg *alg = crypto_aead_alg(aead);
 512	struct spacc_aead *spacc_alg = to_spacc_aead(alg);
 513	struct spacc_aead_ctx *ctx = crypto_aead_ctx(aead);
 514
 515	/*
 516	 * If we have a non-supported key-length, then we need to do a
 517	 * software fallback.
 518	 */
 519	if ((spacc_alg->ctrl_default & SPACC_CRYPTO_ALG_MASK) ==
 520	    SPA_CTRL_CIPH_ALG_AES &&
 521	    ctx->cipher_key_len != AES_KEYSIZE_128 &&
 522	    ctx->cipher_key_len != AES_KEYSIZE_256)
 523		return 1;
 524
 525	return 0;
 526}
 527
 528static int spacc_aead_do_fallback(struct aead_request *req, unsigned alg_type,
 529				  bool is_encrypt)
 530{
 531	struct crypto_tfm *old_tfm = crypto_aead_tfm(crypto_aead_reqtfm(req));
 532	struct spacc_aead_ctx *ctx = crypto_tfm_ctx(old_tfm);
 533	struct aead_request *subreq = aead_request_ctx(req);
 534
 535	aead_request_set_tfm(subreq, ctx->sw_cipher);
 536	aead_request_set_callback(subreq, req->base.flags,
 537				  req->base.complete, req->base.data);
 538	aead_request_set_crypt(subreq, req->src, req->dst, req->cryptlen,
 539			       req->iv);
 540	aead_request_set_ad(subreq, req->assoclen);
 541
 542	return is_encrypt ? crypto_aead_encrypt(subreq) :
 543			    crypto_aead_decrypt(subreq);
 544}
 545
 546static void spacc_aead_complete(struct spacc_req *req)
 547{
 548	spacc_aead_free_ddts(req);
 549	req->req->complete(req->req, req->result);
 550}
 551
 552static int spacc_aead_submit(struct spacc_req *req)
 553{
 554	struct aead_request *aead_req =
 555		container_of(req->req, struct aead_request, base);
 556	struct crypto_aead *aead = crypto_aead_reqtfm(aead_req);
 557	unsigned int authsize = crypto_aead_authsize(aead);
 558	struct spacc_aead_ctx *ctx = crypto_aead_ctx(aead);
 559	struct aead_alg *alg = crypto_aead_alg(aead);
 560	struct spacc_aead *spacc_alg = to_spacc_aead(alg);
 561	struct spacc_engine *engine = ctx->generic.engine;
 562	u32 ctrl, proc_len, assoc_len;
 563
 564	req->result = -EINPROGRESS;
 565	req->ctx_id = spacc_load_ctx(&ctx->generic, ctx->cipher_key,
 566		ctx->cipher_key_len, aead_req->iv, crypto_aead_ivsize(aead),
 567		ctx->hash_ctx, ctx->hash_key_len);
 568
 569	/* Set the source and destination DDT pointers. */
 570	writel(req->src_addr, engine->regs + SPA_SRC_PTR_REG_OFFSET);
 571	writel(req->dst_addr, engine->regs + SPA_DST_PTR_REG_OFFSET);
 572	writel(0, engine->regs + SPA_OFFSET_REG_OFFSET);
 573
 574	assoc_len = aead_req->assoclen;
 575	proc_len = aead_req->cryptlen + assoc_len;
 576
 577	/*
 578	 * If we are decrypting, we need to take the length of the ICV out of
 579	 * the processing length.
 580	 */
 581	if (!req->is_encrypt)
 582		proc_len -= authsize;
 583
 584	writel(proc_len, engine->regs + SPA_PROC_LEN_REG_OFFSET);
 585	writel(assoc_len, engine->regs + SPA_AAD_LEN_REG_OFFSET);
 586	writel(authsize, engine->regs + SPA_ICV_LEN_REG_OFFSET);
 587	writel(0, engine->regs + SPA_ICV_OFFSET_REG_OFFSET);
 588	writel(0, engine->regs + SPA_AUX_INFO_REG_OFFSET);
 589
 590	ctrl = spacc_alg->ctrl_default | (req->ctx_id << SPA_CTRL_CTX_IDX) |
 591		(1 << SPA_CTRL_ICV_APPEND);
 592	if (req->is_encrypt)
 593		ctrl |= (1 << SPA_CTRL_ENCRYPT_IDX) | (1 << SPA_CTRL_AAD_COPY);
 594	else
 595		ctrl |= (1 << SPA_CTRL_KEY_EXP);
 596
 597	mod_timer(&engine->packet_timeout, jiffies + PACKET_TIMEOUT);
 598
 599	writel(ctrl, engine->regs + SPA_CTRL_REG_OFFSET);
 600
 601	return -EINPROGRESS;
 602}
 603
 604static int spacc_req_submit(struct spacc_req *req);
 605
 606static void spacc_push(struct spacc_engine *engine)
 607{
 608	struct spacc_req *req;
 609
 610	while (!list_empty(&engine->pending) &&
 611	       engine->in_flight + 1 <= engine->fifo_sz) {
 612
 613		++engine->in_flight;
 614		req = list_first_entry(&engine->pending, struct spacc_req,
 615				       list);
 616		list_move_tail(&req->list, &engine->in_progress);
 617
 618		req->result = spacc_req_submit(req);
 619	}
 620}
 621
 622/*
 623 * Setup an AEAD request for processing. This will configure the engine, load
 624 * the context and then start the packet processing.
 625 */
 626static int spacc_aead_setup(struct aead_request *req,
 627			    unsigned alg_type, bool is_encrypt)
 628{
 629	struct crypto_aead *aead = crypto_aead_reqtfm(req);
 630	struct aead_alg *alg = crypto_aead_alg(aead);
 631	struct spacc_engine *engine = to_spacc_aead(alg)->engine;
 632	struct spacc_req *dev_req = aead_request_ctx(req);
 633	int err;
 634	unsigned long flags;
 635
 636	dev_req->req		= &req->base;
 637	dev_req->is_encrypt	= is_encrypt;
 638	dev_req->result		= -EBUSY;
 639	dev_req->engine		= engine;
 640	dev_req->complete	= spacc_aead_complete;
 641
 642	if (unlikely(spacc_aead_need_fallback(req) ||
 643		     ((err = spacc_aead_make_ddts(req)) == -E2BIG)))
 644		return spacc_aead_do_fallback(req, alg_type, is_encrypt);
 645
 646	if (err)
 647		goto out;
 648
 649	err = -EINPROGRESS;
 650	spin_lock_irqsave(&engine->hw_lock, flags);
 651	if (unlikely(spacc_fifo_cmd_full(engine)) ||
 652	    engine->in_flight + 1 > engine->fifo_sz) {
 653		if (!(req->base.flags & CRYPTO_TFM_REQ_MAY_BACKLOG)) {
 654			err = -EBUSY;
 655			spin_unlock_irqrestore(&engine->hw_lock, flags);
 656			goto out_free_ddts;
 657		}
 658		list_add_tail(&dev_req->list, &engine->pending);
 659	} else {
 660		list_add_tail(&dev_req->list, &engine->pending);
 661		spacc_push(engine);
 662	}
 663	spin_unlock_irqrestore(&engine->hw_lock, flags);
 664
 665	goto out;
 666
 667out_free_ddts:
 668	spacc_aead_free_ddts(dev_req);
 669out:
 670	return err;
 671}
 672
 673static int spacc_aead_encrypt(struct aead_request *req)
 674{
 675	struct crypto_aead *aead = crypto_aead_reqtfm(req);
 676	struct spacc_aead *alg = to_spacc_aead(crypto_aead_alg(aead));
 677
 678	return spacc_aead_setup(req, alg->type, 1);
 679}
 680
 681static int spacc_aead_decrypt(struct aead_request *req)
 682{
 683	struct crypto_aead *aead = crypto_aead_reqtfm(req);
 684	struct spacc_aead  *alg = to_spacc_aead(crypto_aead_alg(aead));
 685
 686	return spacc_aead_setup(req, alg->type, 0);
 687}
 688
 689/*
 690 * Initialise a new AEAD context. This is responsible for allocating the
 691 * fallback cipher and initialising the context.
 692 */
 693static int spacc_aead_cra_init(struct crypto_aead *tfm)
 694{
 695	struct spacc_aead_ctx *ctx = crypto_aead_ctx(tfm);
 696	struct aead_alg *alg = crypto_aead_alg(tfm);
 697	struct spacc_aead *spacc_alg = to_spacc_aead(alg);
 698	struct spacc_engine *engine = spacc_alg->engine;
 699
 700	ctx->generic.flags = spacc_alg->type;
 701	ctx->generic.engine = engine;
 702	ctx->sw_cipher = crypto_alloc_aead(alg->base.cra_name, 0,
 703					   CRYPTO_ALG_NEED_FALLBACK);
 704	if (IS_ERR(ctx->sw_cipher))
 705		return PTR_ERR(ctx->sw_cipher);
 706	ctx->generic.key_offs = spacc_alg->key_offs;
 707	ctx->generic.iv_offs = spacc_alg->iv_offs;
 708
 709	crypto_aead_set_reqsize(
 710		tfm,
 711		max(sizeof(struct spacc_req),
 712		    sizeof(struct aead_request) +
 713		    crypto_aead_reqsize(ctx->sw_cipher)));
 714
 715	return 0;
 716}
 717
 718/*
 719 * Destructor for an AEAD context. This is called when the transform is freed
 720 * and must free the fallback cipher.
 721 */
 722static void spacc_aead_cra_exit(struct crypto_aead *tfm)
 723{
 724	struct spacc_aead_ctx *ctx = crypto_aead_ctx(tfm);
 725
 726	crypto_free_aead(ctx->sw_cipher);
 727}
 728
 729/*
 730 * Set the DES key for a block cipher transform. This also performs weak key
 731 * checking if the transform has requested it.
 732 */
 733static int spacc_des_setkey(struct crypto_skcipher *cipher, const u8 *key,
 734			    unsigned int len)
 735{
 736	struct spacc_ablk_ctx *ctx = crypto_skcipher_ctx(cipher);
 737	int err;
 738
 739	err = verify_skcipher_des_key(cipher, key);
 740	if (err)
 741		return err;
 742
 743	memcpy(ctx->key, key, len);
 744	ctx->key_len = len;
 745
 746	return 0;
 747}
 748
 749/*
 750 * Set the 3DES key for a block cipher transform. This also performs weak key
 751 * checking if the transform has requested it.
 752 */
 753static int spacc_des3_setkey(struct crypto_skcipher *cipher, const u8 *key,
 754			     unsigned int len)
 755{
 756	struct spacc_ablk_ctx *ctx = crypto_skcipher_ctx(cipher);
 757	int err;
 758
 759	err = verify_skcipher_des3_key(cipher, key);
 760	if (err)
 761		return err;
 762
 763	memcpy(ctx->key, key, len);
 764	ctx->key_len = len;
 765
 766	return 0;
 767}
 768
 769/*
 770 * Set the key for an AES block cipher. Some key lengths are not supported in
 771 * hardware so this must also check whether a fallback is needed.
 772 */
 773static int spacc_aes_setkey(struct crypto_skcipher *cipher, const u8 *key,
 774			    unsigned int len)
 775{
 776	struct crypto_tfm *tfm = crypto_skcipher_tfm(cipher);
 777	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(tfm);
 778	int err = 0;
 779
 780	if (len > AES_MAX_KEY_SIZE)
 
 781		return -EINVAL;
 
 782
 783	/*
 784	 * IPSec engine only supports 128 and 256 bit AES keys. If we get a
 785	 * request for any other size (192 bits) then we need to do a software
 786	 * fallback.
 787	 */
 788	if (len != AES_KEYSIZE_128 && len != AES_KEYSIZE_256) {
 789		if (!ctx->sw_cipher)
 790			return -EINVAL;
 791
 792		/*
 793		 * Set the fallback transform to use the same request flags as
 794		 * the hardware transform.
 795		 */
 796		crypto_skcipher_clear_flags(ctx->sw_cipher,
 797					    CRYPTO_TFM_REQ_MASK);
 798		crypto_skcipher_set_flags(ctx->sw_cipher,
 799					  cipher->base.crt_flags &
 800					  CRYPTO_TFM_REQ_MASK);
 801
 802		err = crypto_skcipher_setkey(ctx->sw_cipher, key, len);
 
 
 
 
 
 
 803		if (err)
 804			goto sw_setkey_failed;
 805	}
 806
 807	memcpy(ctx->key, key, len);
 808	ctx->key_len = len;
 809
 810sw_setkey_failed:
 811	return err;
 812}
 813
 814static int spacc_kasumi_f8_setkey(struct crypto_skcipher *cipher,
 815				  const u8 *key, unsigned int len)
 816{
 817	struct crypto_tfm *tfm = crypto_skcipher_tfm(cipher);
 818	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(tfm);
 819	int err = 0;
 820
 821	if (len > AES_MAX_KEY_SIZE) {
 
 822		err = -EINVAL;
 823		goto out;
 824	}
 825
 826	memcpy(ctx->key, key, len);
 827	ctx->key_len = len;
 828
 829out:
 830	return err;
 831}
 832
 833static int spacc_ablk_need_fallback(struct spacc_req *req)
 834{
 835	struct skcipher_request *ablk_req = skcipher_request_cast(req->req);
 836	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(ablk_req);
 837	struct spacc_alg *spacc_alg = to_spacc_skcipher(crypto_skcipher_alg(tfm));
 838	struct spacc_ablk_ctx *ctx;
 
 
 
 839
 840	ctx = crypto_skcipher_ctx(tfm);
 841
 842	return (spacc_alg->ctrl_default & SPACC_CRYPTO_ALG_MASK) ==
 843			SPA_CTRL_CIPH_ALG_AES &&
 844			ctx->key_len != AES_KEYSIZE_128 &&
 845			ctx->key_len != AES_KEYSIZE_256;
 846}
 847
 848static void spacc_ablk_complete(struct spacc_req *req)
 849{
 850	struct skcipher_request *ablk_req = skcipher_request_cast(req->req);
 851
 852	if (ablk_req->src != ablk_req->dst) {
 853		spacc_free_ddt(req, req->src_ddt, req->src_addr, ablk_req->src,
 854			       ablk_req->cryptlen, DMA_TO_DEVICE);
 855		spacc_free_ddt(req, req->dst_ddt, req->dst_addr, ablk_req->dst,
 856			       ablk_req->cryptlen, DMA_FROM_DEVICE);
 857	} else
 858		spacc_free_ddt(req, req->dst_ddt, req->dst_addr, ablk_req->dst,
 859			       ablk_req->cryptlen, DMA_BIDIRECTIONAL);
 860
 861	req->req->complete(req->req, req->result);
 862}
 863
 864static int spacc_ablk_submit(struct spacc_req *req)
 865{
 866	struct skcipher_request *ablk_req = skcipher_request_cast(req->req);
 867	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(ablk_req);
 868	struct skcipher_alg *alg = crypto_skcipher_alg(tfm);
 869	struct spacc_alg *spacc_alg = to_spacc_skcipher(alg);
 870	struct spacc_ablk_ctx *ctx = crypto_skcipher_ctx(tfm);
 871	struct spacc_engine *engine = ctx->generic.engine;
 872	u32 ctrl;
 873
 874	req->ctx_id = spacc_load_ctx(&ctx->generic, ctx->key,
 875		ctx->key_len, ablk_req->iv, alg->ivsize,
 876		NULL, 0);
 877
 878	writel(req->src_addr, engine->regs + SPA_SRC_PTR_REG_OFFSET);
 879	writel(req->dst_addr, engine->regs + SPA_DST_PTR_REG_OFFSET);
 880	writel(0, engine->regs + SPA_OFFSET_REG_OFFSET);
 881
 882	writel(ablk_req->cryptlen, engine->regs + SPA_PROC_LEN_REG_OFFSET);
 883	writel(0, engine->regs + SPA_ICV_OFFSET_REG_OFFSET);
 884	writel(0, engine->regs + SPA_AUX_INFO_REG_OFFSET);
 885	writel(0, engine->regs + SPA_AAD_LEN_REG_OFFSET);
 886
 887	ctrl = spacc_alg->ctrl_default | (req->ctx_id << SPA_CTRL_CTX_IDX) |
 888		(req->is_encrypt ? (1 << SPA_CTRL_ENCRYPT_IDX) :
 889		 (1 << SPA_CTRL_KEY_EXP));
 890
 891	mod_timer(&engine->packet_timeout, jiffies + PACKET_TIMEOUT);
 892
 893	writel(ctrl, engine->regs + SPA_CTRL_REG_OFFSET);
 894
 895	return -EINPROGRESS;
 896}
 897
 898static int spacc_ablk_do_fallback(struct skcipher_request *req,
 899				  unsigned alg_type, bool is_encrypt)
 900{
 901	struct crypto_tfm *old_tfm =
 902	    crypto_skcipher_tfm(crypto_skcipher_reqtfm(req));
 903	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(old_tfm);
 904	struct spacc_req *dev_req = skcipher_request_ctx(req);
 905	int err;
 906
 907	/*
 908	 * Change the request to use the software fallback transform, and once
 909	 * the ciphering has completed, put the old transform back into the
 910	 * request.
 911	 */
 912	skcipher_request_set_tfm(&dev_req->fallback_req, ctx->sw_cipher);
 913	skcipher_request_set_callback(&dev_req->fallback_req, req->base.flags,
 914				      req->base.complete, req->base.data);
 915	skcipher_request_set_crypt(&dev_req->fallback_req, req->src, req->dst,
 916				   req->cryptlen, req->iv);
 917	err = is_encrypt ? crypto_skcipher_encrypt(&dev_req->fallback_req) :
 918			   crypto_skcipher_decrypt(&dev_req->fallback_req);
 919
 920	return err;
 921}
 922
 923static int spacc_ablk_setup(struct skcipher_request *req, unsigned alg_type,
 924			    bool is_encrypt)
 925{
 926	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
 927	struct skcipher_alg *alg = crypto_skcipher_alg(tfm);
 928	struct spacc_engine *engine = to_spacc_skcipher(alg)->engine;
 929	struct spacc_req *dev_req = skcipher_request_ctx(req);
 930	unsigned long flags;
 931	int err = -ENOMEM;
 932
 933	dev_req->req		= &req->base;
 934	dev_req->is_encrypt	= is_encrypt;
 935	dev_req->engine		= engine;
 936	dev_req->complete	= spacc_ablk_complete;
 937	dev_req->result		= -EINPROGRESS;
 938
 939	if (unlikely(spacc_ablk_need_fallback(dev_req)))
 940		return spacc_ablk_do_fallback(req, alg_type, is_encrypt);
 941
 942	/*
 943	 * Create the DDT's for the engine. If we share the same source and
 944	 * destination then we can optimize by reusing the DDT's.
 945	 */
 946	if (req->src != req->dst) {
 947		dev_req->src_ddt = spacc_sg_to_ddt(engine, req->src,
 948			req->cryptlen, DMA_TO_DEVICE, &dev_req->src_addr);
 949		if (!dev_req->src_ddt)
 950			goto out;
 951
 952		dev_req->dst_ddt = spacc_sg_to_ddt(engine, req->dst,
 953			req->cryptlen, DMA_FROM_DEVICE, &dev_req->dst_addr);
 954		if (!dev_req->dst_ddt)
 955			goto out_free_src;
 956	} else {
 957		dev_req->dst_ddt = spacc_sg_to_ddt(engine, req->dst,
 958			req->cryptlen, DMA_BIDIRECTIONAL, &dev_req->dst_addr);
 959		if (!dev_req->dst_ddt)
 960			goto out;
 961
 962		dev_req->src_ddt = NULL;
 963		dev_req->src_addr = dev_req->dst_addr;
 964	}
 965
 966	err = -EINPROGRESS;
 967	spin_lock_irqsave(&engine->hw_lock, flags);
 968	/*
 969	 * Check if the engine will accept the operation now. If it won't then
 970	 * we either stick it on the end of a pending list if we can backlog,
 971	 * or bailout with an error if not.
 972	 */
 973	if (unlikely(spacc_fifo_cmd_full(engine)) ||
 974	    engine->in_flight + 1 > engine->fifo_sz) {
 975		if (!(req->base.flags & CRYPTO_TFM_REQ_MAY_BACKLOG)) {
 976			err = -EBUSY;
 977			spin_unlock_irqrestore(&engine->hw_lock, flags);
 978			goto out_free_ddts;
 979		}
 980		list_add_tail(&dev_req->list, &engine->pending);
 981	} else {
 982		list_add_tail(&dev_req->list, &engine->pending);
 983		spacc_push(engine);
 984	}
 985	spin_unlock_irqrestore(&engine->hw_lock, flags);
 986
 987	goto out;
 988
 989out_free_ddts:
 990	spacc_free_ddt(dev_req, dev_req->dst_ddt, dev_req->dst_addr, req->dst,
 991		       req->cryptlen, req->src == req->dst ?
 992		       DMA_BIDIRECTIONAL : DMA_FROM_DEVICE);
 993out_free_src:
 994	if (req->src != req->dst)
 995		spacc_free_ddt(dev_req, dev_req->src_ddt, dev_req->src_addr,
 996			       req->src, req->cryptlen, DMA_TO_DEVICE);
 997out:
 998	return err;
 999}
1000
1001static int spacc_ablk_init_tfm(struct crypto_skcipher *tfm)
1002{
1003	struct spacc_ablk_ctx *ctx = crypto_skcipher_ctx(tfm);
1004	struct skcipher_alg *alg = crypto_skcipher_alg(tfm);
1005	struct spacc_alg *spacc_alg = to_spacc_skcipher(alg);
1006	struct spacc_engine *engine = spacc_alg->engine;
1007
1008	ctx->generic.flags = spacc_alg->type;
1009	ctx->generic.engine = engine;
1010	if (alg->base.cra_flags & CRYPTO_ALG_NEED_FALLBACK) {
1011		ctx->sw_cipher = crypto_alloc_skcipher(alg->base.cra_name, 0,
1012						       CRYPTO_ALG_NEED_FALLBACK);
1013		if (IS_ERR(ctx->sw_cipher)) {
1014			dev_warn(engine->dev, "failed to allocate fallback for %s\n",
1015				 alg->base.cra_name);
1016			return PTR_ERR(ctx->sw_cipher);
1017		}
1018		crypto_skcipher_set_reqsize(tfm, sizeof(struct spacc_req) +
1019						 crypto_skcipher_reqsize(ctx->sw_cipher));
1020	} else {
1021		/* take the size without the fallback skcipher_request at the end */
1022		crypto_skcipher_set_reqsize(tfm, offsetof(struct spacc_req,
1023							  fallback_req));
1024	}
1025
1026	ctx->generic.key_offs = spacc_alg->key_offs;
1027	ctx->generic.iv_offs = spacc_alg->iv_offs;
1028
 
 
1029	return 0;
1030}
1031
1032static void spacc_ablk_exit_tfm(struct crypto_skcipher *tfm)
1033{
1034	struct spacc_ablk_ctx *ctx = crypto_skcipher_ctx(tfm);
1035
1036	crypto_free_skcipher(ctx->sw_cipher);
1037}
1038
1039static int spacc_ablk_encrypt(struct skcipher_request *req)
1040{
1041	struct crypto_skcipher *cipher = crypto_skcipher_reqtfm(req);
1042	struct skcipher_alg *alg = crypto_skcipher_alg(cipher);
1043	struct spacc_alg *spacc_alg = to_spacc_skcipher(alg);
1044
1045	return spacc_ablk_setup(req, spacc_alg->type, 1);
1046}
1047
1048static int spacc_ablk_decrypt(struct skcipher_request *req)
1049{
1050	struct crypto_skcipher *cipher = crypto_skcipher_reqtfm(req);
1051	struct skcipher_alg *alg = crypto_skcipher_alg(cipher);
1052	struct spacc_alg *spacc_alg = to_spacc_skcipher(alg);
1053
1054	return spacc_ablk_setup(req, spacc_alg->type, 0);
1055}
1056
1057static inline int spacc_fifo_stat_empty(struct spacc_engine *engine)
1058{
1059	return readl(engine->regs + SPA_FIFO_STAT_REG_OFFSET) &
1060		SPA_FIFO_STAT_EMPTY;
1061}
1062
1063static void spacc_process_done(struct spacc_engine *engine)
1064{
1065	struct spacc_req *req;
1066	unsigned long flags;
1067
1068	spin_lock_irqsave(&engine->hw_lock, flags);
1069
1070	while (!spacc_fifo_stat_empty(engine)) {
1071		req = list_first_entry(&engine->in_progress, struct spacc_req,
1072				       list);
1073		list_move_tail(&req->list, &engine->completed);
1074		--engine->in_flight;
1075
1076		/* POP the status register. */
1077		writel(~0, engine->regs + SPA_STAT_POP_REG_OFFSET);
1078		req->result = (readl(engine->regs + SPA_STATUS_REG_OFFSET) &
1079		     SPA_STATUS_RES_CODE_MASK) >> SPA_STATUS_RES_CODE_OFFSET;
1080
1081		/*
1082		 * Convert the SPAcc error status into the standard POSIX error
1083		 * codes.
1084		 */
1085		if (unlikely(req->result)) {
1086			switch (req->result) {
1087			case SPA_STATUS_ICV_FAIL:
1088				req->result = -EBADMSG;
1089				break;
1090
1091			case SPA_STATUS_MEMORY_ERROR:
1092				dev_warn(engine->dev,
1093					 "memory error triggered\n");
1094				req->result = -EFAULT;
1095				break;
1096
1097			case SPA_STATUS_BLOCK_ERROR:
1098				dev_warn(engine->dev,
1099					 "block error triggered\n");
1100				req->result = -EIO;
1101				break;
1102			}
1103		}
1104	}
1105
1106	tasklet_schedule(&engine->complete);
1107
1108	spin_unlock_irqrestore(&engine->hw_lock, flags);
1109}
1110
1111static irqreturn_t spacc_spacc_irq(int irq, void *dev)
1112{
1113	struct spacc_engine *engine = (struct spacc_engine *)dev;
1114	u32 spacc_irq_stat = readl(engine->regs + SPA_IRQ_STAT_REG_OFFSET);
1115
1116	writel(spacc_irq_stat, engine->regs + SPA_IRQ_STAT_REG_OFFSET);
1117	spacc_process_done(engine);
1118
1119	return IRQ_HANDLED;
1120}
1121
1122static void spacc_packet_timeout(struct timer_list *t)
1123{
1124	struct spacc_engine *engine = from_timer(engine, t, packet_timeout);
1125
1126	spacc_process_done(engine);
1127}
1128
1129static int spacc_req_submit(struct spacc_req *req)
1130{
1131	struct crypto_alg *alg = req->req->tfm->__crt_alg;
1132
1133	if (CRYPTO_ALG_TYPE_AEAD == (CRYPTO_ALG_TYPE_MASK & alg->cra_flags))
1134		return spacc_aead_submit(req);
1135	else
1136		return spacc_ablk_submit(req);
1137}
1138
1139static void spacc_spacc_complete(unsigned long data)
1140{
1141	struct spacc_engine *engine = (struct spacc_engine *)data;
1142	struct spacc_req *req, *tmp;
1143	unsigned long flags;
1144	LIST_HEAD(completed);
1145
1146	spin_lock_irqsave(&engine->hw_lock, flags);
1147
1148	list_splice_init(&engine->completed, &completed);
1149	spacc_push(engine);
1150	if (engine->in_flight)
1151		mod_timer(&engine->packet_timeout, jiffies + PACKET_TIMEOUT);
1152
1153	spin_unlock_irqrestore(&engine->hw_lock, flags);
1154
1155	list_for_each_entry_safe(req, tmp, &completed, list) {
1156		list_del(&req->list);
1157		req->complete(req);
1158	}
1159}
1160
1161#ifdef CONFIG_PM
1162static int spacc_suspend(struct device *dev)
1163{
1164	struct spacc_engine *engine = dev_get_drvdata(dev);
1165
1166	/*
1167	 * We only support standby mode. All we have to do is gate the clock to
1168	 * the spacc. The hardware will preserve state until we turn it back
1169	 * on again.
1170	 */
1171	clk_disable(engine->clk);
1172
1173	return 0;
1174}
1175
1176static int spacc_resume(struct device *dev)
1177{
1178	struct spacc_engine *engine = dev_get_drvdata(dev);
1179
1180	return clk_enable(engine->clk);
1181}
1182
1183static const struct dev_pm_ops spacc_pm_ops = {
1184	.suspend	= spacc_suspend,
1185	.resume		= spacc_resume,
1186};
1187#endif /* CONFIG_PM */
1188
1189static inline struct spacc_engine *spacc_dev_to_engine(struct device *dev)
1190{
1191	return dev ? dev_get_drvdata(dev) : NULL;
1192}
1193
1194static ssize_t spacc_stat_irq_thresh_show(struct device *dev,
1195					  struct device_attribute *attr,
1196					  char *buf)
1197{
1198	struct spacc_engine *engine = spacc_dev_to_engine(dev);
1199
1200	return snprintf(buf, PAGE_SIZE, "%u\n", engine->stat_irq_thresh);
1201}
1202
1203static ssize_t spacc_stat_irq_thresh_store(struct device *dev,
1204					   struct device_attribute *attr,
1205					   const char *buf, size_t len)
1206{
1207	struct spacc_engine *engine = spacc_dev_to_engine(dev);
1208	unsigned long thresh;
1209
1210	if (kstrtoul(buf, 0, &thresh))
1211		return -EINVAL;
1212
1213	thresh = clamp(thresh, 1UL, engine->fifo_sz - 1);
1214
1215	engine->stat_irq_thresh = thresh;
1216	writel(engine->stat_irq_thresh << SPA_IRQ_CTRL_STAT_CNT_OFFSET,
1217	       engine->regs + SPA_IRQ_CTRL_REG_OFFSET);
1218
1219	return len;
1220}
1221static DEVICE_ATTR(stat_irq_thresh, 0644, spacc_stat_irq_thresh_show,
1222		   spacc_stat_irq_thresh_store);
1223
1224static struct spacc_alg ipsec_engine_algs[] = {
1225	{
1226		.ctrl_default = SPA_CTRL_CIPH_ALG_AES | SPA_CTRL_CIPH_MODE_CBC,
1227		.key_offs = 0,
1228		.iv_offs = AES_MAX_KEY_SIZE,
1229		.alg = {
1230			.base.cra_name		= "cbc(aes)",
1231			.base.cra_driver_name	= "cbc-aes-picoxcell",
1232			.base.cra_priority	= SPACC_CRYPTO_ALG_PRIORITY,
1233			.base.cra_flags		= CRYPTO_ALG_KERN_DRIVER_ONLY |
1234						  CRYPTO_ALG_ASYNC |
1235						  CRYPTO_ALG_ALLOCATES_MEMORY |
1236						  CRYPTO_ALG_NEED_FALLBACK,
1237			.base.cra_blocksize	= AES_BLOCK_SIZE,
1238			.base.cra_ctxsize	= sizeof(struct spacc_ablk_ctx),
1239			.base.cra_module	= THIS_MODULE,
1240
1241			.setkey			= spacc_aes_setkey,
1242			.encrypt 		= spacc_ablk_encrypt,
1243			.decrypt 		= spacc_ablk_decrypt,
1244			.min_keysize 		= AES_MIN_KEY_SIZE,
1245			.max_keysize 		= AES_MAX_KEY_SIZE,
1246			.ivsize			= AES_BLOCK_SIZE,
1247			.init			= spacc_ablk_init_tfm,
1248			.exit			= spacc_ablk_exit_tfm,
 
 
1249		},
1250	},
1251	{
1252		.key_offs = 0,
1253		.iv_offs = AES_MAX_KEY_SIZE,
1254		.ctrl_default = SPA_CTRL_CIPH_ALG_AES | SPA_CTRL_CIPH_MODE_ECB,
1255		.alg = {
1256			.base.cra_name		= "ecb(aes)",
1257			.base.cra_driver_name	= "ecb-aes-picoxcell",
1258			.base.cra_priority	= SPACC_CRYPTO_ALG_PRIORITY,
1259			.base.cra_flags		= CRYPTO_ALG_KERN_DRIVER_ONLY |
1260						  CRYPTO_ALG_ASYNC |
1261						  CRYPTO_ALG_ALLOCATES_MEMORY |
1262						  CRYPTO_ALG_NEED_FALLBACK,
1263			.base.cra_blocksize	= AES_BLOCK_SIZE,
1264			.base.cra_ctxsize	= sizeof(struct spacc_ablk_ctx),
1265			.base.cra_module	= THIS_MODULE,
1266
1267			.setkey			= spacc_aes_setkey,
1268			.encrypt 		= spacc_ablk_encrypt,
1269			.decrypt 		= spacc_ablk_decrypt,
1270			.min_keysize 		= AES_MIN_KEY_SIZE,
1271			.max_keysize 		= AES_MAX_KEY_SIZE,
1272			.init			= spacc_ablk_init_tfm,
1273			.exit			= spacc_ablk_exit_tfm,
 
1274		},
1275	},
1276	{
1277		.key_offs = DES_BLOCK_SIZE,
1278		.iv_offs = 0,
1279		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_CBC,
1280		.alg = {
1281			.base.cra_name		= "cbc(des)",
1282			.base.cra_driver_name	= "cbc-des-picoxcell",
1283			.base.cra_priority	= SPACC_CRYPTO_ALG_PRIORITY,
1284			.base.cra_flags		= CRYPTO_ALG_KERN_DRIVER_ONLY |
1285						  CRYPTO_ALG_ASYNC |
1286						  CRYPTO_ALG_ALLOCATES_MEMORY,
1287			.base.cra_blocksize	= DES_BLOCK_SIZE,
1288			.base.cra_ctxsize	= sizeof(struct spacc_ablk_ctx),
1289			.base.cra_module	= THIS_MODULE,
1290
1291			.setkey			= spacc_des_setkey,
1292			.encrypt		= spacc_ablk_encrypt,
1293			.decrypt		= spacc_ablk_decrypt,
1294			.min_keysize		= DES_KEY_SIZE,
1295			.max_keysize		= DES_KEY_SIZE,
1296			.ivsize			= DES_BLOCK_SIZE,
1297			.init			= spacc_ablk_init_tfm,
1298			.exit			= spacc_ablk_exit_tfm,
 
 
1299		},
1300	},
1301	{
1302		.key_offs = DES_BLOCK_SIZE,
1303		.iv_offs = 0,
1304		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_ECB,
1305		.alg = {
1306			.base.cra_name		= "ecb(des)",
1307			.base.cra_driver_name	= "ecb-des-picoxcell",
1308			.base.cra_priority	= SPACC_CRYPTO_ALG_PRIORITY,
1309			.base.cra_flags		= CRYPTO_ALG_KERN_DRIVER_ONLY |
1310						  CRYPTO_ALG_ASYNC |
1311						  CRYPTO_ALG_ALLOCATES_MEMORY,
1312			.base.cra_blocksize	= DES_BLOCK_SIZE,
1313			.base.cra_ctxsize	= sizeof(struct spacc_ablk_ctx),
1314			.base.cra_module	= THIS_MODULE,
1315
1316			.setkey			= spacc_des_setkey,
1317			.encrypt		= spacc_ablk_encrypt,
1318			.decrypt		= spacc_ablk_decrypt,
1319			.min_keysize		= DES_KEY_SIZE,
1320			.max_keysize		= DES_KEY_SIZE,
1321			.init			= spacc_ablk_init_tfm,
1322			.exit			= spacc_ablk_exit_tfm,
 
 
1323		},
1324	},
1325	{
1326		.key_offs = DES_BLOCK_SIZE,
1327		.iv_offs = 0,
1328		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_CBC,
1329		.alg = {
1330			.base.cra_name		= "cbc(des3_ede)",
1331			.base.cra_driver_name	= "cbc-des3-ede-picoxcell",
1332			.base.cra_priority	= SPACC_CRYPTO_ALG_PRIORITY,
1333			.base.cra_flags		= CRYPTO_ALG_ASYNC |
1334						  CRYPTO_ALG_ALLOCATES_MEMORY |
1335						  CRYPTO_ALG_KERN_DRIVER_ONLY,
1336			.base.cra_blocksize	= DES3_EDE_BLOCK_SIZE,
1337			.base.cra_ctxsize	= sizeof(struct spacc_ablk_ctx),
1338			.base.cra_module	= THIS_MODULE,
1339
1340			.setkey			= spacc_des3_setkey,
1341			.encrypt		= spacc_ablk_encrypt,
1342			.decrypt		= spacc_ablk_decrypt,
1343			.min_keysize		= DES3_EDE_KEY_SIZE,
1344			.max_keysize		= DES3_EDE_KEY_SIZE,
1345			.ivsize			= DES3_EDE_BLOCK_SIZE,
1346			.init			= spacc_ablk_init_tfm,
1347			.exit			= spacc_ablk_exit_tfm,
 
 
1348		},
1349	},
1350	{
1351		.key_offs = DES_BLOCK_SIZE,
1352		.iv_offs = 0,
1353		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_ECB,
1354		.alg = {
1355			.base.cra_name		= "ecb(des3_ede)",
1356			.base.cra_driver_name	= "ecb-des3-ede-picoxcell",
1357			.base.cra_priority	= SPACC_CRYPTO_ALG_PRIORITY,
1358			.base.cra_flags		= CRYPTO_ALG_ASYNC |
1359						  CRYPTO_ALG_ALLOCATES_MEMORY |
1360						  CRYPTO_ALG_KERN_DRIVER_ONLY,
1361			.base.cra_blocksize	= DES3_EDE_BLOCK_SIZE,
1362			.base.cra_ctxsize	= sizeof(struct spacc_ablk_ctx),
1363			.base.cra_module	= THIS_MODULE,
1364
1365			.setkey			= spacc_des3_setkey,
1366			.encrypt		= spacc_ablk_encrypt,
1367			.decrypt		= spacc_ablk_decrypt,
1368			.min_keysize		= DES3_EDE_KEY_SIZE,
1369			.max_keysize		= DES3_EDE_KEY_SIZE,
1370			.init			= spacc_ablk_init_tfm,
1371			.exit			= spacc_ablk_exit_tfm,
 
 
1372		},
1373	},
1374};
1375
1376static struct spacc_aead ipsec_engine_aeads[] = {
1377	{
1378		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1379				SPA_CTRL_CIPH_MODE_CBC |
1380				SPA_CTRL_HASH_ALG_SHA |
1381				SPA_CTRL_HASH_MODE_HMAC,
1382		.key_offs = 0,
1383		.iv_offs = AES_MAX_KEY_SIZE,
1384		.alg = {
1385			.base = {
1386				.cra_name = "authenc(hmac(sha1),cbc(aes))",
1387				.cra_driver_name = "authenc-hmac-sha1-"
1388						   "cbc-aes-picoxcell",
1389				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1390				.cra_flags = CRYPTO_ALG_ASYNC |
1391					     CRYPTO_ALG_ALLOCATES_MEMORY |
1392					     CRYPTO_ALG_NEED_FALLBACK |
1393					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1394				.cra_blocksize = AES_BLOCK_SIZE,
1395				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1396				.cra_module = THIS_MODULE,
1397			},
1398			.setkey = spacc_aead_setkey,
1399			.setauthsize = spacc_aead_setauthsize,
1400			.encrypt = spacc_aead_encrypt,
1401			.decrypt = spacc_aead_decrypt,
1402			.ivsize = AES_BLOCK_SIZE,
1403			.maxauthsize = SHA1_DIGEST_SIZE,
1404			.init = spacc_aead_cra_init,
1405			.exit = spacc_aead_cra_exit,
1406		},
1407	},
1408	{
1409		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1410				SPA_CTRL_CIPH_MODE_CBC |
1411				SPA_CTRL_HASH_ALG_SHA256 |
1412				SPA_CTRL_HASH_MODE_HMAC,
1413		.key_offs = 0,
1414		.iv_offs = AES_MAX_KEY_SIZE,
1415		.alg = {
1416			.base = {
1417				.cra_name = "authenc(hmac(sha256),cbc(aes))",
1418				.cra_driver_name = "authenc-hmac-sha256-"
1419						   "cbc-aes-picoxcell",
1420				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1421				.cra_flags = CRYPTO_ALG_ASYNC |
1422					     CRYPTO_ALG_ALLOCATES_MEMORY |
1423					     CRYPTO_ALG_NEED_FALLBACK |
1424					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1425				.cra_blocksize = AES_BLOCK_SIZE,
1426				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1427				.cra_module = THIS_MODULE,
1428			},
1429			.setkey = spacc_aead_setkey,
1430			.setauthsize = spacc_aead_setauthsize,
1431			.encrypt = spacc_aead_encrypt,
1432			.decrypt = spacc_aead_decrypt,
1433			.ivsize = AES_BLOCK_SIZE,
1434			.maxauthsize = SHA256_DIGEST_SIZE,
1435			.init = spacc_aead_cra_init,
1436			.exit = spacc_aead_cra_exit,
1437		},
1438	},
1439	{
1440		.key_offs = 0,
1441		.iv_offs = AES_MAX_KEY_SIZE,
1442		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1443				SPA_CTRL_CIPH_MODE_CBC |
1444				SPA_CTRL_HASH_ALG_MD5 |
1445				SPA_CTRL_HASH_MODE_HMAC,
1446		.alg = {
1447			.base = {
1448				.cra_name = "authenc(hmac(md5),cbc(aes))",
1449				.cra_driver_name = "authenc-hmac-md5-"
1450						   "cbc-aes-picoxcell",
1451				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1452				.cra_flags = CRYPTO_ALG_ASYNC |
1453					     CRYPTO_ALG_ALLOCATES_MEMORY |
1454					     CRYPTO_ALG_NEED_FALLBACK |
1455					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1456				.cra_blocksize = AES_BLOCK_SIZE,
1457				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1458				.cra_module = THIS_MODULE,
1459			},
1460			.setkey = spacc_aead_setkey,
1461			.setauthsize = spacc_aead_setauthsize,
1462			.encrypt = spacc_aead_encrypt,
1463			.decrypt = spacc_aead_decrypt,
1464			.ivsize = AES_BLOCK_SIZE,
1465			.maxauthsize = MD5_DIGEST_SIZE,
1466			.init = spacc_aead_cra_init,
1467			.exit = spacc_aead_cra_exit,
1468		},
1469	},
1470	{
1471		.key_offs = DES_BLOCK_SIZE,
1472		.iv_offs = 0,
1473		.ctrl_default = SPA_CTRL_CIPH_ALG_DES |
1474				SPA_CTRL_CIPH_MODE_CBC |
1475				SPA_CTRL_HASH_ALG_SHA |
1476				SPA_CTRL_HASH_MODE_HMAC,
1477		.alg = {
1478			.base = {
1479				.cra_name = "authenc(hmac(sha1),cbc(des3_ede))",
1480				.cra_driver_name = "authenc-hmac-sha1-"
1481						   "cbc-3des-picoxcell",
1482				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1483				.cra_flags = CRYPTO_ALG_ASYNC |
1484					     CRYPTO_ALG_ALLOCATES_MEMORY |
1485					     CRYPTO_ALG_NEED_FALLBACK |
1486					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1487				.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1488				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1489				.cra_module = THIS_MODULE,
1490			},
1491			.setkey = spacc_aead_setkey,
1492			.setauthsize = spacc_aead_setauthsize,
1493			.encrypt = spacc_aead_encrypt,
1494			.decrypt = spacc_aead_decrypt,
1495			.ivsize = DES3_EDE_BLOCK_SIZE,
1496			.maxauthsize = SHA1_DIGEST_SIZE,
1497			.init = spacc_aead_cra_init,
1498			.exit = spacc_aead_cra_exit,
1499		},
1500	},
1501	{
1502		.key_offs = DES_BLOCK_SIZE,
1503		.iv_offs = 0,
1504		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1505				SPA_CTRL_CIPH_MODE_CBC |
1506				SPA_CTRL_HASH_ALG_SHA256 |
1507				SPA_CTRL_HASH_MODE_HMAC,
1508		.alg = {
1509			.base = {
1510				.cra_name = "authenc(hmac(sha256),"
1511					    "cbc(des3_ede))",
1512				.cra_driver_name = "authenc-hmac-sha256-"
1513						   "cbc-3des-picoxcell",
1514				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1515				.cra_flags = CRYPTO_ALG_ASYNC |
1516					     CRYPTO_ALG_ALLOCATES_MEMORY |
1517					     CRYPTO_ALG_NEED_FALLBACK |
1518					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1519				.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1520				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1521				.cra_module = THIS_MODULE,
1522			},
1523			.setkey = spacc_aead_setkey,
1524			.setauthsize = spacc_aead_setauthsize,
1525			.encrypt = spacc_aead_encrypt,
1526			.decrypt = spacc_aead_decrypt,
1527			.ivsize = DES3_EDE_BLOCK_SIZE,
1528			.maxauthsize = SHA256_DIGEST_SIZE,
1529			.init = spacc_aead_cra_init,
1530			.exit = spacc_aead_cra_exit,
1531		},
1532	},
1533	{
1534		.key_offs = DES_BLOCK_SIZE,
1535		.iv_offs = 0,
1536		.ctrl_default = SPA_CTRL_CIPH_ALG_DES |
1537				SPA_CTRL_CIPH_MODE_CBC |
1538				SPA_CTRL_HASH_ALG_MD5 |
1539				SPA_CTRL_HASH_MODE_HMAC,
1540		.alg = {
1541			.base = {
1542				.cra_name = "authenc(hmac(md5),cbc(des3_ede))",
1543				.cra_driver_name = "authenc-hmac-md5-"
1544						   "cbc-3des-picoxcell",
1545				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1546				.cra_flags = CRYPTO_ALG_ASYNC |
1547					     CRYPTO_ALG_ALLOCATES_MEMORY |
1548					     CRYPTO_ALG_NEED_FALLBACK |
1549					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1550				.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1551				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1552				.cra_module = THIS_MODULE,
1553			},
1554			.setkey = spacc_aead_setkey,
1555			.setauthsize = spacc_aead_setauthsize,
1556			.encrypt = spacc_aead_encrypt,
1557			.decrypt = spacc_aead_decrypt,
1558			.ivsize = DES3_EDE_BLOCK_SIZE,
1559			.maxauthsize = MD5_DIGEST_SIZE,
1560			.init = spacc_aead_cra_init,
1561			.exit = spacc_aead_cra_exit,
1562		},
1563	},
1564};
1565
1566static struct spacc_alg l2_engine_algs[] = {
1567	{
1568		.key_offs = 0,
1569		.iv_offs = SPACC_CRYPTO_KASUMI_F8_KEY_LEN,
1570		.ctrl_default = SPA_CTRL_CIPH_ALG_KASUMI |
1571				SPA_CTRL_CIPH_MODE_F8,
1572		.alg = {
1573			.base.cra_name		= "f8(kasumi)",
1574			.base.cra_driver_name	= "f8-kasumi-picoxcell",
1575			.base.cra_priority	= SPACC_CRYPTO_ALG_PRIORITY,
1576			.base.cra_flags		= CRYPTO_ALG_ASYNC |
1577						  CRYPTO_ALG_ALLOCATES_MEMORY |
1578						  CRYPTO_ALG_KERN_DRIVER_ONLY,
1579			.base.cra_blocksize	= 8,
1580			.base.cra_ctxsize	= sizeof(struct spacc_ablk_ctx),
1581			.base.cra_module	= THIS_MODULE,
1582
1583			.setkey			= spacc_kasumi_f8_setkey,
1584			.encrypt		= spacc_ablk_encrypt,
1585			.decrypt		= spacc_ablk_decrypt,
1586			.min_keysize		= 16,
1587			.max_keysize		= 16,
1588			.ivsize			= 8,
1589			.init			= spacc_ablk_init_tfm,
1590			.exit			= spacc_ablk_exit_tfm,
 
1591		},
1592	},
1593};
1594
1595#ifdef CONFIG_OF
1596static const struct of_device_id spacc_of_id_table[] = {
1597	{ .compatible = "picochip,spacc-ipsec" },
1598	{ .compatible = "picochip,spacc-l2" },
1599	{}
1600};
1601MODULE_DEVICE_TABLE(of, spacc_of_id_table);
1602#endif /* CONFIG_OF */
1603
1604static void spacc_tasklet_kill(void *data)
1605{
1606	tasklet_kill(data);
1607}
1608
1609static int spacc_probe(struct platform_device *pdev)
1610{
1611	int i, err, ret;
1612	struct resource *irq;
1613	struct device_node *np = pdev->dev.of_node;
1614	struct spacc_engine *engine = devm_kzalloc(&pdev->dev, sizeof(*engine),
1615						   GFP_KERNEL);
1616	if (!engine)
1617		return -ENOMEM;
1618
1619	if (of_device_is_compatible(np, "picochip,spacc-ipsec")) {
1620		engine->max_ctxs	= SPACC_CRYPTO_IPSEC_MAX_CTXS;
1621		engine->cipher_pg_sz	= SPACC_CRYPTO_IPSEC_CIPHER_PG_SZ;
1622		engine->hash_pg_sz	= SPACC_CRYPTO_IPSEC_HASH_PG_SZ;
1623		engine->fifo_sz		= SPACC_CRYPTO_IPSEC_FIFO_SZ;
1624		engine->algs		= ipsec_engine_algs;
1625		engine->num_algs	= ARRAY_SIZE(ipsec_engine_algs);
1626		engine->aeads		= ipsec_engine_aeads;
1627		engine->num_aeads	= ARRAY_SIZE(ipsec_engine_aeads);
1628	} else if (of_device_is_compatible(np, "picochip,spacc-l2")) {
1629		engine->max_ctxs	= SPACC_CRYPTO_L2_MAX_CTXS;
1630		engine->cipher_pg_sz	= SPACC_CRYPTO_L2_CIPHER_PG_SZ;
1631		engine->hash_pg_sz	= SPACC_CRYPTO_L2_HASH_PG_SZ;
1632		engine->fifo_sz		= SPACC_CRYPTO_L2_FIFO_SZ;
1633		engine->algs		= l2_engine_algs;
1634		engine->num_algs	= ARRAY_SIZE(l2_engine_algs);
1635	} else {
1636		return -EINVAL;
1637	}
1638
1639	engine->name = dev_name(&pdev->dev);
1640
1641	engine->regs = devm_platform_ioremap_resource(pdev, 0);
1642	if (IS_ERR(engine->regs))
1643		return PTR_ERR(engine->regs);
1644
1645	irq = platform_get_resource(pdev, IORESOURCE_IRQ, 0);
1646	if (!irq) {
1647		dev_err(&pdev->dev, "no memory/irq resource for engine\n");
1648		return -ENXIO;
1649	}
1650
1651	tasklet_init(&engine->complete, spacc_spacc_complete,
1652		     (unsigned long)engine);
1653
1654	ret = devm_add_action(&pdev->dev, spacc_tasklet_kill,
1655			      &engine->complete);
1656	if (ret)
1657		return ret;
1658
1659	if (devm_request_irq(&pdev->dev, irq->start, spacc_spacc_irq, 0,
1660			     engine->name, engine)) {
1661		dev_err(engine->dev, "failed to request IRQ\n");
1662		return -EBUSY;
1663	}
1664
1665	engine->dev		= &pdev->dev;
1666	engine->cipher_ctx_base = engine->regs + SPA_CIPH_KEY_BASE_REG_OFFSET;
1667	engine->hash_key_base	= engine->regs + SPA_HASH_KEY_BASE_REG_OFFSET;
1668
1669	engine->req_pool = dmam_pool_create(engine->name, engine->dev,
1670		MAX_DDT_LEN * sizeof(struct spacc_ddt), 8, SZ_64K);
1671	if (!engine->req_pool)
1672		return -ENOMEM;
1673
1674	spin_lock_init(&engine->hw_lock);
1675
1676	engine->clk = clk_get(&pdev->dev, "ref");
1677	if (IS_ERR(engine->clk)) {
1678		dev_info(&pdev->dev, "clk unavailable\n");
1679		return PTR_ERR(engine->clk);
1680	}
1681
1682	if (clk_prepare_enable(engine->clk)) {
1683		dev_info(&pdev->dev, "unable to prepare/enable clk\n");
1684		ret = -EIO;
1685		goto err_clk_put;
1686	}
1687
1688	ret = device_create_file(&pdev->dev, &dev_attr_stat_irq_thresh);
1689	if (ret)
1690		goto err_clk_disable;
1691
1692
1693	/*
1694	 * Use an IRQ threshold of 50% as a default. This seems to be a
1695	 * reasonable trade off of latency against throughput but can be
1696	 * changed at runtime.
1697	 */
1698	engine->stat_irq_thresh = (engine->fifo_sz / 2);
1699
1700	/*
1701	 * Configure the interrupts. We only use the STAT_CNT interrupt as we
1702	 * only submit a new packet for processing when we complete another in
1703	 * the queue. This minimizes time spent in the interrupt handler.
1704	 */
1705	writel(engine->stat_irq_thresh << SPA_IRQ_CTRL_STAT_CNT_OFFSET,
1706	       engine->regs + SPA_IRQ_CTRL_REG_OFFSET);
1707	writel(SPA_IRQ_EN_STAT_EN | SPA_IRQ_EN_GLBL_EN,
1708	       engine->regs + SPA_IRQ_EN_REG_OFFSET);
1709
1710	timer_setup(&engine->packet_timeout, spacc_packet_timeout, 0);
1711
1712	INIT_LIST_HEAD(&engine->pending);
1713	INIT_LIST_HEAD(&engine->completed);
1714	INIT_LIST_HEAD(&engine->in_progress);
1715	engine->in_flight = 0;
 
 
1716
1717	platform_set_drvdata(pdev, engine);
1718
1719	ret = -EINVAL;
1720	INIT_LIST_HEAD(&engine->registered_algs);
1721	for (i = 0; i < engine->num_algs; ++i) {
1722		engine->algs[i].engine = engine;
1723		err = crypto_register_skcipher(&engine->algs[i].alg);
1724		if (!err) {
1725			list_add_tail(&engine->algs[i].entry,
1726				      &engine->registered_algs);
1727			ret = 0;
1728		}
1729		if (err)
1730			dev_err(engine->dev, "failed to register alg \"%s\"\n",
1731				engine->algs[i].alg.base.cra_name);
1732		else
1733			dev_dbg(engine->dev, "registered alg \"%s\"\n",
1734				engine->algs[i].alg.base.cra_name);
1735	}
1736
1737	INIT_LIST_HEAD(&engine->registered_aeads);
1738	for (i = 0; i < engine->num_aeads; ++i) {
1739		engine->aeads[i].engine = engine;
1740		err = crypto_register_aead(&engine->aeads[i].alg);
1741		if (!err) {
1742			list_add_tail(&engine->aeads[i].entry,
1743				      &engine->registered_aeads);
1744			ret = 0;
1745		}
1746		if (err)
1747			dev_err(engine->dev, "failed to register alg \"%s\"\n",
1748				engine->aeads[i].alg.base.cra_name);
1749		else
1750			dev_dbg(engine->dev, "registered alg \"%s\"\n",
1751				engine->aeads[i].alg.base.cra_name);
1752	}
1753
1754	if (!ret)
1755		return 0;
1756
1757	del_timer_sync(&engine->packet_timeout);
1758	device_remove_file(&pdev->dev, &dev_attr_stat_irq_thresh);
1759err_clk_disable:
1760	clk_disable_unprepare(engine->clk);
1761err_clk_put:
1762	clk_put(engine->clk);
1763
1764	return ret;
1765}
1766
1767static int spacc_remove(struct platform_device *pdev)
1768{
1769	struct spacc_aead *aead, *an;
1770	struct spacc_alg *alg, *next;
1771	struct spacc_engine *engine = platform_get_drvdata(pdev);
1772
1773	del_timer_sync(&engine->packet_timeout);
1774	device_remove_file(&pdev->dev, &dev_attr_stat_irq_thresh);
1775
1776	list_for_each_entry_safe(aead, an, &engine->registered_aeads, entry) {
1777		list_del(&aead->entry);
1778		crypto_unregister_aead(&aead->alg);
1779	}
1780
1781	list_for_each_entry_safe(alg, next, &engine->registered_algs, entry) {
1782		list_del(&alg->entry);
1783		crypto_unregister_skcipher(&alg->alg);
1784	}
1785
1786	clk_disable_unprepare(engine->clk);
1787	clk_put(engine->clk);
1788
1789	return 0;
1790}
1791
1792static struct platform_driver spacc_driver = {
1793	.probe		= spacc_probe,
1794	.remove		= spacc_remove,
1795	.driver		= {
1796		.name	= "picochip,spacc",
1797#ifdef CONFIG_PM
1798		.pm	= &spacc_pm_ops,
1799#endif /* CONFIG_PM */
1800		.of_match_table	= of_match_ptr(spacc_of_id_table),
1801	},
1802};
1803
1804module_platform_driver(spacc_driver);
1805
1806MODULE_LICENSE("GPL");
1807MODULE_AUTHOR("Jamie Iles");
v5.4
   1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 * Copyright (c) 2010-2011 Picochip Ltd., Jamie Iles
   4 */
   5#include <crypto/internal/aead.h>
   6#include <crypto/aes.h>
   7#include <crypto/algapi.h>
   8#include <crypto/authenc.h>
   9#include <crypto/internal/des.h>
  10#include <crypto/md5.h>
  11#include <crypto/sha.h>
  12#include <crypto/internal/skcipher.h>
  13#include <linux/clk.h>
  14#include <linux/crypto.h>
  15#include <linux/delay.h>
  16#include <linux/dma-mapping.h>
  17#include <linux/dmapool.h>
  18#include <linux/err.h>
  19#include <linux/init.h>
  20#include <linux/interrupt.h>
  21#include <linux/io.h>
  22#include <linux/list.h>
  23#include <linux/module.h>
  24#include <linux/of.h>
  25#include <linux/platform_device.h>
  26#include <linux/pm.h>
  27#include <linux/rtnetlink.h>
  28#include <linux/scatterlist.h>
  29#include <linux/sched.h>
  30#include <linux/sizes.h>
  31#include <linux/slab.h>
  32#include <linux/timer.h>
  33
  34#include "picoxcell_crypto_regs.h"
  35
  36/*
  37 * The threshold for the number of entries in the CMD FIFO available before
  38 * the CMD0_CNT interrupt is raised. Increasing this value will reduce the
  39 * number of interrupts raised to the CPU.
  40 */
  41#define CMD0_IRQ_THRESHOLD   1
  42
  43/*
  44 * The timeout period (in jiffies) for a PDU. When the the number of PDUs in
  45 * flight is greater than the STAT_IRQ_THRESHOLD or 0 the timer is disabled.
  46 * When there are packets in flight but lower than the threshold, we enable
  47 * the timer and at expiry, attempt to remove any processed packets from the
  48 * queue and if there are still packets left, schedule the timer again.
  49 */
  50#define PACKET_TIMEOUT	    1
  51
  52/* The priority to register each algorithm with. */
  53#define SPACC_CRYPTO_ALG_PRIORITY	10000
  54
  55#define SPACC_CRYPTO_KASUMI_F8_KEY_LEN	16
  56#define SPACC_CRYPTO_IPSEC_CIPHER_PG_SZ 64
  57#define SPACC_CRYPTO_IPSEC_HASH_PG_SZ	64
  58#define SPACC_CRYPTO_IPSEC_MAX_CTXS	32
  59#define SPACC_CRYPTO_IPSEC_FIFO_SZ	32
  60#define SPACC_CRYPTO_L2_CIPHER_PG_SZ	64
  61#define SPACC_CRYPTO_L2_HASH_PG_SZ	64
  62#define SPACC_CRYPTO_L2_MAX_CTXS	128
  63#define SPACC_CRYPTO_L2_FIFO_SZ		128
  64
  65#define MAX_DDT_LEN			16
  66
  67/* DDT format. This must match the hardware DDT format exactly. */
  68struct spacc_ddt {
  69	dma_addr_t	p;
  70	u32		len;
  71};
  72
  73/*
  74 * Asynchronous crypto request structure.
  75 *
  76 * This structure defines a request that is either queued for processing or
  77 * being processed.
  78 */
  79struct spacc_req {
  80	struct list_head		list;
  81	struct spacc_engine		*engine;
  82	struct crypto_async_request	*req;
  83	int				result;
  84	bool				is_encrypt;
  85	unsigned			ctx_id;
  86	dma_addr_t			src_addr, dst_addr;
  87	struct spacc_ddt		*src_ddt, *dst_ddt;
  88	void				(*complete)(struct spacc_req *req);
 
  89};
  90
  91struct spacc_aead {
  92	unsigned long			ctrl_default;
  93	unsigned long			type;
  94	struct aead_alg			alg;
  95	struct spacc_engine		*engine;
  96	struct list_head		entry;
  97	int				key_offs;
  98	int				iv_offs;
  99};
 100
 101struct spacc_engine {
 102	void __iomem			*regs;
 103	struct list_head		pending;
 104	int				next_ctx;
 105	spinlock_t			hw_lock;
 106	int				in_flight;
 107	struct list_head		completed;
 108	struct list_head		in_progress;
 109	struct tasklet_struct		complete;
 110	unsigned long			fifo_sz;
 111	void __iomem			*cipher_ctx_base;
 112	void __iomem			*hash_key_base;
 113	struct spacc_alg		*algs;
 114	unsigned			num_algs;
 115	struct list_head		registered_algs;
 116	struct spacc_aead		*aeads;
 117	unsigned			num_aeads;
 118	struct list_head		registered_aeads;
 119	size_t				cipher_pg_sz;
 120	size_t				hash_pg_sz;
 121	const char			*name;
 122	struct clk			*clk;
 123	struct device			*dev;
 124	unsigned			max_ctxs;
 125	struct timer_list		packet_timeout;
 126	unsigned			stat_irq_thresh;
 127	struct dma_pool			*req_pool;
 128};
 129
 130/* Algorithm type mask. */
 131#define SPACC_CRYPTO_ALG_MASK		0x7
 132
 133/* SPACC definition of a crypto algorithm. */
 134struct spacc_alg {
 135	unsigned long			ctrl_default;
 136	unsigned long			type;
 137	struct crypto_alg		alg;
 138	struct spacc_engine		*engine;
 139	struct list_head		entry;
 140	int				key_offs;
 141	int				iv_offs;
 142};
 143
 144/* Generic context structure for any algorithm type. */
 145struct spacc_generic_ctx {
 146	struct spacc_engine		*engine;
 147	int				flags;
 148	int				key_offs;
 149	int				iv_offs;
 150};
 151
 152/* Block cipher context. */
 153struct spacc_ablk_ctx {
 154	struct spacc_generic_ctx	generic;
 155	u8				key[AES_MAX_KEY_SIZE];
 156	u8				key_len;
 157	/*
 158	 * The fallback cipher. If the operation can't be done in hardware,
 159	 * fallback to a software version.
 160	 */
 161	struct crypto_sync_skcipher	*sw_cipher;
 162};
 163
 164/* AEAD cipher context. */
 165struct spacc_aead_ctx {
 166	struct spacc_generic_ctx	generic;
 167	u8				cipher_key[AES_MAX_KEY_SIZE];
 168	u8				hash_ctx[SPACC_CRYPTO_IPSEC_HASH_PG_SZ];
 169	u8				cipher_key_len;
 170	u8				hash_key_len;
 171	struct crypto_aead		*sw_cipher;
 172};
 173
 174static int spacc_ablk_submit(struct spacc_req *req);
 175
 176static inline struct spacc_alg *to_spacc_alg(struct crypto_alg *alg)
 177{
 178	return alg ? container_of(alg, struct spacc_alg, alg) : NULL;
 179}
 180
 181static inline struct spacc_aead *to_spacc_aead(struct aead_alg *alg)
 182{
 183	return container_of(alg, struct spacc_aead, alg);
 184}
 185
 186static inline int spacc_fifo_cmd_full(struct spacc_engine *engine)
 187{
 188	u32 fifo_stat = readl(engine->regs + SPA_FIFO_STAT_REG_OFFSET);
 189
 190	return fifo_stat & SPA_FIFO_CMD_FULL;
 191}
 192
 193/*
 194 * Given a cipher context, and a context number, get the base address of the
 195 * context page.
 196 *
 197 * Returns the address of the context page where the key/context may
 198 * be written.
 199 */
 200static inline void __iomem *spacc_ctx_page_addr(struct spacc_generic_ctx *ctx,
 201						unsigned indx,
 202						bool is_cipher_ctx)
 203{
 204	return is_cipher_ctx ? ctx->engine->cipher_ctx_base +
 205			(indx * ctx->engine->cipher_pg_sz) :
 206		ctx->engine->hash_key_base + (indx * ctx->engine->hash_pg_sz);
 207}
 208
 209/* The context pages can only be written with 32-bit accesses. */
 210static inline void memcpy_toio32(u32 __iomem *dst, const void *src,
 211				 unsigned count)
 212{
 213	const u32 *src32 = (const u32 *) src;
 214
 215	while (count--)
 216		writel(*src32++, dst++);
 217}
 218
 219static void spacc_cipher_write_ctx(struct spacc_generic_ctx *ctx,
 220				   void __iomem *page_addr, const u8 *key,
 221				   size_t key_len, const u8 *iv, size_t iv_len)
 222{
 223	void __iomem *key_ptr = page_addr + ctx->key_offs;
 224	void __iomem *iv_ptr = page_addr + ctx->iv_offs;
 225
 226	memcpy_toio32(key_ptr, key, key_len / 4);
 227	memcpy_toio32(iv_ptr, iv, iv_len / 4);
 228}
 229
 230/*
 231 * Load a context into the engines context memory.
 232 *
 233 * Returns the index of the context page where the context was loaded.
 234 */
 235static unsigned spacc_load_ctx(struct spacc_generic_ctx *ctx,
 236			       const u8 *ciph_key, size_t ciph_len,
 237			       const u8 *iv, size_t ivlen, const u8 *hash_key,
 238			       size_t hash_len)
 239{
 240	unsigned indx = ctx->engine->next_ctx++;
 241	void __iomem *ciph_page_addr, *hash_page_addr;
 242
 243	ciph_page_addr = spacc_ctx_page_addr(ctx, indx, 1);
 244	hash_page_addr = spacc_ctx_page_addr(ctx, indx, 0);
 245
 246	ctx->engine->next_ctx &= ctx->engine->fifo_sz - 1;
 247	spacc_cipher_write_ctx(ctx, ciph_page_addr, ciph_key, ciph_len, iv,
 248			       ivlen);
 249	writel(ciph_len | (indx << SPA_KEY_SZ_CTX_INDEX_OFFSET) |
 250	       (1 << SPA_KEY_SZ_CIPHER_OFFSET),
 251	       ctx->engine->regs + SPA_KEY_SZ_REG_OFFSET);
 252
 253	if (hash_key) {
 254		memcpy_toio32(hash_page_addr, hash_key, hash_len / 4);
 255		writel(hash_len | (indx << SPA_KEY_SZ_CTX_INDEX_OFFSET),
 256		       ctx->engine->regs + SPA_KEY_SZ_REG_OFFSET);
 257	}
 258
 259	return indx;
 260}
 261
 262static inline void ddt_set(struct spacc_ddt *ddt, dma_addr_t phys, size_t len)
 263{
 264	ddt->p = phys;
 265	ddt->len = len;
 266}
 267
 268/*
 269 * Take a crypto request and scatterlists for the data and turn them into DDTs
 270 * for passing to the crypto engines. This also DMA maps the data so that the
 271 * crypto engines can DMA to/from them.
 272 */
 273static struct spacc_ddt *spacc_sg_to_ddt(struct spacc_engine *engine,
 274					 struct scatterlist *payload,
 275					 unsigned nbytes,
 276					 enum dma_data_direction dir,
 277					 dma_addr_t *ddt_phys)
 278{
 279	unsigned mapped_ents;
 280	struct scatterlist *cur;
 281	struct spacc_ddt *ddt;
 282	int i;
 283	int nents;
 284
 285	nents = sg_nents_for_len(payload, nbytes);
 286	if (nents < 0) {
 287		dev_err(engine->dev, "Invalid numbers of SG.\n");
 288		return NULL;
 289	}
 290	mapped_ents = dma_map_sg(engine->dev, payload, nents, dir);
 291
 292	if (mapped_ents + 1 > MAX_DDT_LEN)
 293		goto out;
 294
 295	ddt = dma_pool_alloc(engine->req_pool, GFP_ATOMIC, ddt_phys);
 296	if (!ddt)
 297		goto out;
 298
 299	for_each_sg(payload, cur, mapped_ents, i)
 300		ddt_set(&ddt[i], sg_dma_address(cur), sg_dma_len(cur));
 301	ddt_set(&ddt[mapped_ents], 0, 0);
 302
 303	return ddt;
 304
 305out:
 306	dma_unmap_sg(engine->dev, payload, nents, dir);
 307	return NULL;
 308}
 309
 310static int spacc_aead_make_ddts(struct aead_request *areq)
 311{
 312	struct crypto_aead *aead = crypto_aead_reqtfm(areq);
 313	struct spacc_req *req = aead_request_ctx(areq);
 314	struct spacc_engine *engine = req->engine;
 315	struct spacc_ddt *src_ddt, *dst_ddt;
 316	unsigned total;
 317	int src_nents, dst_nents;
 318	struct scatterlist *cur;
 319	int i, dst_ents, src_ents;
 320
 321	total = areq->assoclen + areq->cryptlen;
 322	if (req->is_encrypt)
 323		total += crypto_aead_authsize(aead);
 324
 325	src_nents = sg_nents_for_len(areq->src, total);
 326	if (src_nents < 0) {
 327		dev_err(engine->dev, "Invalid numbers of src SG.\n");
 328		return src_nents;
 329	}
 330	if (src_nents + 1 > MAX_DDT_LEN)
 331		return -E2BIG;
 332
 333	dst_nents = 0;
 334	if (areq->src != areq->dst) {
 335		dst_nents = sg_nents_for_len(areq->dst, total);
 336		if (dst_nents < 0) {
 337			dev_err(engine->dev, "Invalid numbers of dst SG.\n");
 338			return dst_nents;
 339		}
 340		if (src_nents + 1 > MAX_DDT_LEN)
 341			return -E2BIG;
 342	}
 343
 344	src_ddt = dma_pool_alloc(engine->req_pool, GFP_ATOMIC, &req->src_addr);
 345	if (!src_ddt)
 346		goto err;
 347
 348	dst_ddt = dma_pool_alloc(engine->req_pool, GFP_ATOMIC, &req->dst_addr);
 349	if (!dst_ddt)
 350		goto err_free_src;
 351
 352	req->src_ddt = src_ddt;
 353	req->dst_ddt = dst_ddt;
 354
 355	if (dst_nents) {
 356		src_ents = dma_map_sg(engine->dev, areq->src, src_nents,
 357				      DMA_TO_DEVICE);
 358		if (!src_ents)
 359			goto err_free_dst;
 360
 361		dst_ents = dma_map_sg(engine->dev, areq->dst, dst_nents,
 362				      DMA_FROM_DEVICE);
 363
 364		if (!dst_ents) {
 365			dma_unmap_sg(engine->dev, areq->src, src_nents,
 366				     DMA_TO_DEVICE);
 367			goto err_free_dst;
 368		}
 369	} else {
 370		src_ents = dma_map_sg(engine->dev, areq->src, src_nents,
 371				      DMA_BIDIRECTIONAL);
 372		if (!src_ents)
 373			goto err_free_dst;
 374		dst_ents = src_ents;
 375	}
 376
 377	/*
 378	 * Now map in the payload for the source and destination and terminate
 379	 * with the NULL pointers.
 380	 */
 381	for_each_sg(areq->src, cur, src_ents, i)
 382		ddt_set(src_ddt++, sg_dma_address(cur), sg_dma_len(cur));
 383
 384	/* For decryption we need to skip the associated data. */
 385	total = req->is_encrypt ? 0 : areq->assoclen;
 386	for_each_sg(areq->dst, cur, dst_ents, i) {
 387		unsigned len = sg_dma_len(cur);
 388
 389		if (len <= total) {
 390			total -= len;
 391			continue;
 392		}
 393
 394		ddt_set(dst_ddt++, sg_dma_address(cur) + total, len - total);
 395	}
 396
 397	ddt_set(src_ddt, 0, 0);
 398	ddt_set(dst_ddt, 0, 0);
 399
 400	return 0;
 401
 402err_free_dst:
 403	dma_pool_free(engine->req_pool, dst_ddt, req->dst_addr);
 404err_free_src:
 405	dma_pool_free(engine->req_pool, src_ddt, req->src_addr);
 406err:
 407	return -ENOMEM;
 408}
 409
 410static void spacc_aead_free_ddts(struct spacc_req *req)
 411{
 412	struct aead_request *areq = container_of(req->req, struct aead_request,
 413						 base);
 414	struct crypto_aead *aead = crypto_aead_reqtfm(areq);
 415	unsigned total = areq->assoclen + areq->cryptlen +
 416			 (req->is_encrypt ? crypto_aead_authsize(aead) : 0);
 417	struct spacc_aead_ctx *aead_ctx = crypto_aead_ctx(aead);
 418	struct spacc_engine *engine = aead_ctx->generic.engine;
 419	int nents = sg_nents_for_len(areq->src, total);
 420
 421	/* sg_nents_for_len should not fail since it works when mapping sg */
 422	if (unlikely(nents < 0)) {
 423		dev_err(engine->dev, "Invalid numbers of src SG.\n");
 424		return;
 425	}
 426
 427	if (areq->src != areq->dst) {
 428		dma_unmap_sg(engine->dev, areq->src, nents, DMA_TO_DEVICE);
 429		nents = sg_nents_for_len(areq->dst, total);
 430		if (unlikely(nents < 0)) {
 431			dev_err(engine->dev, "Invalid numbers of dst SG.\n");
 432			return;
 433		}
 434		dma_unmap_sg(engine->dev, areq->dst, nents, DMA_FROM_DEVICE);
 435	} else
 436		dma_unmap_sg(engine->dev, areq->src, nents, DMA_BIDIRECTIONAL);
 437
 438	dma_pool_free(engine->req_pool, req->src_ddt, req->src_addr);
 439	dma_pool_free(engine->req_pool, req->dst_ddt, req->dst_addr);
 440}
 441
 442static void spacc_free_ddt(struct spacc_req *req, struct spacc_ddt *ddt,
 443			   dma_addr_t ddt_addr, struct scatterlist *payload,
 444			   unsigned nbytes, enum dma_data_direction dir)
 445{
 446	int nents = sg_nents_for_len(payload, nbytes);
 447
 448	if (nents < 0) {
 449		dev_err(req->engine->dev, "Invalid numbers of SG.\n");
 450		return;
 451	}
 452
 453	dma_unmap_sg(req->engine->dev, payload, nents, dir);
 454	dma_pool_free(req->engine->req_pool, ddt, ddt_addr);
 455}
 456
 457static int spacc_aead_setkey(struct crypto_aead *tfm, const u8 *key,
 458			     unsigned int keylen)
 459{
 460	struct spacc_aead_ctx *ctx = crypto_aead_ctx(tfm);
 461	struct crypto_authenc_keys keys;
 462	int err;
 463
 464	crypto_aead_clear_flags(ctx->sw_cipher, CRYPTO_TFM_REQ_MASK);
 465	crypto_aead_set_flags(ctx->sw_cipher, crypto_aead_get_flags(tfm) &
 466					      CRYPTO_TFM_REQ_MASK);
 467	err = crypto_aead_setkey(ctx->sw_cipher, key, keylen);
 468	crypto_aead_clear_flags(tfm, CRYPTO_TFM_RES_MASK);
 469	crypto_aead_set_flags(tfm, crypto_aead_get_flags(ctx->sw_cipher) &
 470				   CRYPTO_TFM_RES_MASK);
 471	if (err)
 472		return err;
 473
 474	if (crypto_authenc_extractkeys(&keys, key, keylen) != 0)
 475		goto badkey;
 476
 477	if (keys.enckeylen > AES_MAX_KEY_SIZE)
 478		goto badkey;
 479
 480	if (keys.authkeylen > sizeof(ctx->hash_ctx))
 481		goto badkey;
 482
 483	memcpy(ctx->cipher_key, keys.enckey, keys.enckeylen);
 484	ctx->cipher_key_len = keys.enckeylen;
 485
 486	memcpy(ctx->hash_ctx, keys.authkey, keys.authkeylen);
 487	ctx->hash_key_len = keys.authkeylen;
 488
 489	memzero_explicit(&keys, sizeof(keys));
 490	return 0;
 491
 492badkey:
 493	crypto_aead_set_flags(tfm, CRYPTO_TFM_RES_BAD_KEY_LEN);
 494	memzero_explicit(&keys, sizeof(keys));
 495	return -EINVAL;
 496}
 497
 498static int spacc_aead_setauthsize(struct crypto_aead *tfm,
 499				  unsigned int authsize)
 500{
 501	struct spacc_aead_ctx *ctx = crypto_tfm_ctx(crypto_aead_tfm(tfm));
 502
 503	return crypto_aead_setauthsize(ctx->sw_cipher, authsize);
 504}
 505
 506/*
 507 * Check if an AEAD request requires a fallback operation. Some requests can't
 508 * be completed in hardware because the hardware may not support certain key
 509 * sizes. In these cases we need to complete the request in software.
 510 */
 511static int spacc_aead_need_fallback(struct aead_request *aead_req)
 512{
 513	struct crypto_aead *aead = crypto_aead_reqtfm(aead_req);
 514	struct aead_alg *alg = crypto_aead_alg(aead);
 515	struct spacc_aead *spacc_alg = to_spacc_aead(alg);
 516	struct spacc_aead_ctx *ctx = crypto_aead_ctx(aead);
 517
 518	/*
 519	 * If we have a non-supported key-length, then we need to do a
 520	 * software fallback.
 521	 */
 522	if ((spacc_alg->ctrl_default & SPACC_CRYPTO_ALG_MASK) ==
 523	    SPA_CTRL_CIPH_ALG_AES &&
 524	    ctx->cipher_key_len != AES_KEYSIZE_128 &&
 525	    ctx->cipher_key_len != AES_KEYSIZE_256)
 526		return 1;
 527
 528	return 0;
 529}
 530
 531static int spacc_aead_do_fallback(struct aead_request *req, unsigned alg_type,
 532				  bool is_encrypt)
 533{
 534	struct crypto_tfm *old_tfm = crypto_aead_tfm(crypto_aead_reqtfm(req));
 535	struct spacc_aead_ctx *ctx = crypto_tfm_ctx(old_tfm);
 536	struct aead_request *subreq = aead_request_ctx(req);
 537
 538	aead_request_set_tfm(subreq, ctx->sw_cipher);
 539	aead_request_set_callback(subreq, req->base.flags,
 540				  req->base.complete, req->base.data);
 541	aead_request_set_crypt(subreq, req->src, req->dst, req->cryptlen,
 542			       req->iv);
 543	aead_request_set_ad(subreq, req->assoclen);
 544
 545	return is_encrypt ? crypto_aead_encrypt(subreq) :
 546			    crypto_aead_decrypt(subreq);
 547}
 548
 549static void spacc_aead_complete(struct spacc_req *req)
 550{
 551	spacc_aead_free_ddts(req);
 552	req->req->complete(req->req, req->result);
 553}
 554
 555static int spacc_aead_submit(struct spacc_req *req)
 556{
 557	struct aead_request *aead_req =
 558		container_of(req->req, struct aead_request, base);
 559	struct crypto_aead *aead = crypto_aead_reqtfm(aead_req);
 560	unsigned int authsize = crypto_aead_authsize(aead);
 561	struct spacc_aead_ctx *ctx = crypto_aead_ctx(aead);
 562	struct aead_alg *alg = crypto_aead_alg(aead);
 563	struct spacc_aead *spacc_alg = to_spacc_aead(alg);
 564	struct spacc_engine *engine = ctx->generic.engine;
 565	u32 ctrl, proc_len, assoc_len;
 566
 567	req->result = -EINPROGRESS;
 568	req->ctx_id = spacc_load_ctx(&ctx->generic, ctx->cipher_key,
 569		ctx->cipher_key_len, aead_req->iv, crypto_aead_ivsize(aead),
 570		ctx->hash_ctx, ctx->hash_key_len);
 571
 572	/* Set the source and destination DDT pointers. */
 573	writel(req->src_addr, engine->regs + SPA_SRC_PTR_REG_OFFSET);
 574	writel(req->dst_addr, engine->regs + SPA_DST_PTR_REG_OFFSET);
 575	writel(0, engine->regs + SPA_OFFSET_REG_OFFSET);
 576
 577	assoc_len = aead_req->assoclen;
 578	proc_len = aead_req->cryptlen + assoc_len;
 579
 580	/*
 581	 * If we are decrypting, we need to take the length of the ICV out of
 582	 * the processing length.
 583	 */
 584	if (!req->is_encrypt)
 585		proc_len -= authsize;
 586
 587	writel(proc_len, engine->regs + SPA_PROC_LEN_REG_OFFSET);
 588	writel(assoc_len, engine->regs + SPA_AAD_LEN_REG_OFFSET);
 589	writel(authsize, engine->regs + SPA_ICV_LEN_REG_OFFSET);
 590	writel(0, engine->regs + SPA_ICV_OFFSET_REG_OFFSET);
 591	writel(0, engine->regs + SPA_AUX_INFO_REG_OFFSET);
 592
 593	ctrl = spacc_alg->ctrl_default | (req->ctx_id << SPA_CTRL_CTX_IDX) |
 594		(1 << SPA_CTRL_ICV_APPEND);
 595	if (req->is_encrypt)
 596		ctrl |= (1 << SPA_CTRL_ENCRYPT_IDX) | (1 << SPA_CTRL_AAD_COPY);
 597	else
 598		ctrl |= (1 << SPA_CTRL_KEY_EXP);
 599
 600	mod_timer(&engine->packet_timeout, jiffies + PACKET_TIMEOUT);
 601
 602	writel(ctrl, engine->regs + SPA_CTRL_REG_OFFSET);
 603
 604	return -EINPROGRESS;
 605}
 606
 607static int spacc_req_submit(struct spacc_req *req);
 608
 609static void spacc_push(struct spacc_engine *engine)
 610{
 611	struct spacc_req *req;
 612
 613	while (!list_empty(&engine->pending) &&
 614	       engine->in_flight + 1 <= engine->fifo_sz) {
 615
 616		++engine->in_flight;
 617		req = list_first_entry(&engine->pending, struct spacc_req,
 618				       list);
 619		list_move_tail(&req->list, &engine->in_progress);
 620
 621		req->result = spacc_req_submit(req);
 622	}
 623}
 624
 625/*
 626 * Setup an AEAD request for processing. This will configure the engine, load
 627 * the context and then start the packet processing.
 628 */
 629static int spacc_aead_setup(struct aead_request *req,
 630			    unsigned alg_type, bool is_encrypt)
 631{
 632	struct crypto_aead *aead = crypto_aead_reqtfm(req);
 633	struct aead_alg *alg = crypto_aead_alg(aead);
 634	struct spacc_engine *engine = to_spacc_aead(alg)->engine;
 635	struct spacc_req *dev_req = aead_request_ctx(req);
 636	int err;
 637	unsigned long flags;
 638
 639	dev_req->req		= &req->base;
 640	dev_req->is_encrypt	= is_encrypt;
 641	dev_req->result		= -EBUSY;
 642	dev_req->engine		= engine;
 643	dev_req->complete	= spacc_aead_complete;
 644
 645	if (unlikely(spacc_aead_need_fallback(req) ||
 646		     ((err = spacc_aead_make_ddts(req)) == -E2BIG)))
 647		return spacc_aead_do_fallback(req, alg_type, is_encrypt);
 648
 649	if (err)
 650		goto out;
 651
 652	err = -EINPROGRESS;
 653	spin_lock_irqsave(&engine->hw_lock, flags);
 654	if (unlikely(spacc_fifo_cmd_full(engine)) ||
 655	    engine->in_flight + 1 > engine->fifo_sz) {
 656		if (!(req->base.flags & CRYPTO_TFM_REQ_MAY_BACKLOG)) {
 657			err = -EBUSY;
 658			spin_unlock_irqrestore(&engine->hw_lock, flags);
 659			goto out_free_ddts;
 660		}
 661		list_add_tail(&dev_req->list, &engine->pending);
 662	} else {
 663		list_add_tail(&dev_req->list, &engine->pending);
 664		spacc_push(engine);
 665	}
 666	spin_unlock_irqrestore(&engine->hw_lock, flags);
 667
 668	goto out;
 669
 670out_free_ddts:
 671	spacc_aead_free_ddts(dev_req);
 672out:
 673	return err;
 674}
 675
 676static int spacc_aead_encrypt(struct aead_request *req)
 677{
 678	struct crypto_aead *aead = crypto_aead_reqtfm(req);
 679	struct spacc_aead *alg = to_spacc_aead(crypto_aead_alg(aead));
 680
 681	return spacc_aead_setup(req, alg->type, 1);
 682}
 683
 684static int spacc_aead_decrypt(struct aead_request *req)
 685{
 686	struct crypto_aead *aead = crypto_aead_reqtfm(req);
 687	struct spacc_aead  *alg = to_spacc_aead(crypto_aead_alg(aead));
 688
 689	return spacc_aead_setup(req, alg->type, 0);
 690}
 691
 692/*
 693 * Initialise a new AEAD context. This is responsible for allocating the
 694 * fallback cipher and initialising the context.
 695 */
 696static int spacc_aead_cra_init(struct crypto_aead *tfm)
 697{
 698	struct spacc_aead_ctx *ctx = crypto_aead_ctx(tfm);
 699	struct aead_alg *alg = crypto_aead_alg(tfm);
 700	struct spacc_aead *spacc_alg = to_spacc_aead(alg);
 701	struct spacc_engine *engine = spacc_alg->engine;
 702
 703	ctx->generic.flags = spacc_alg->type;
 704	ctx->generic.engine = engine;
 705	ctx->sw_cipher = crypto_alloc_aead(alg->base.cra_name, 0,
 706					   CRYPTO_ALG_NEED_FALLBACK);
 707	if (IS_ERR(ctx->sw_cipher))
 708		return PTR_ERR(ctx->sw_cipher);
 709	ctx->generic.key_offs = spacc_alg->key_offs;
 710	ctx->generic.iv_offs = spacc_alg->iv_offs;
 711
 712	crypto_aead_set_reqsize(
 713		tfm,
 714		max(sizeof(struct spacc_req),
 715		    sizeof(struct aead_request) +
 716		    crypto_aead_reqsize(ctx->sw_cipher)));
 717
 718	return 0;
 719}
 720
 721/*
 722 * Destructor for an AEAD context. This is called when the transform is freed
 723 * and must free the fallback cipher.
 724 */
 725static void spacc_aead_cra_exit(struct crypto_aead *tfm)
 726{
 727	struct spacc_aead_ctx *ctx = crypto_aead_ctx(tfm);
 728
 729	crypto_free_aead(ctx->sw_cipher);
 730}
 731
 732/*
 733 * Set the DES key for a block cipher transform. This also performs weak key
 734 * checking if the transform has requested it.
 735 */
 736static int spacc_des_setkey(struct crypto_ablkcipher *cipher, const u8 *key,
 737			    unsigned int len)
 738{
 739	struct spacc_ablk_ctx *ctx = crypto_ablkcipher_ctx(cipher);
 740	int err;
 741
 742	err = verify_ablkcipher_des_key(cipher, key);
 743	if (err)
 744		return err;
 745
 746	memcpy(ctx->key, key, len);
 747	ctx->key_len = len;
 748
 749	return 0;
 750}
 751
 752/*
 753 * Set the 3DES key for a block cipher transform. This also performs weak key
 754 * checking if the transform has requested it.
 755 */
 756static int spacc_des3_setkey(struct crypto_ablkcipher *cipher, const u8 *key,
 757			     unsigned int len)
 758{
 759	struct spacc_ablk_ctx *ctx = crypto_ablkcipher_ctx(cipher);
 760	int err;
 761
 762	err = verify_ablkcipher_des3_key(cipher, key);
 763	if (err)
 764		return err;
 765
 766	memcpy(ctx->key, key, len);
 767	ctx->key_len = len;
 768
 769	return 0;
 770}
 771
 772/*
 773 * Set the key for an AES block cipher. Some key lengths are not supported in
 774 * hardware so this must also check whether a fallback is needed.
 775 */
 776static int spacc_aes_setkey(struct crypto_ablkcipher *cipher, const u8 *key,
 777			    unsigned int len)
 778{
 779	struct crypto_tfm *tfm = crypto_ablkcipher_tfm(cipher);
 780	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(tfm);
 781	int err = 0;
 782
 783	if (len > AES_MAX_KEY_SIZE) {
 784		crypto_ablkcipher_set_flags(cipher, CRYPTO_TFM_RES_BAD_KEY_LEN);
 785		return -EINVAL;
 786	}
 787
 788	/*
 789	 * IPSec engine only supports 128 and 256 bit AES keys. If we get a
 790	 * request for any other size (192 bits) then we need to do a software
 791	 * fallback.
 792	 */
 793	if (len != AES_KEYSIZE_128 && len != AES_KEYSIZE_256) {
 794		if (!ctx->sw_cipher)
 795			return -EINVAL;
 796
 797		/*
 798		 * Set the fallback transform to use the same request flags as
 799		 * the hardware transform.
 800		 */
 801		crypto_sync_skcipher_clear_flags(ctx->sw_cipher,
 802					    CRYPTO_TFM_REQ_MASK);
 803		crypto_sync_skcipher_set_flags(ctx->sw_cipher,
 804					  cipher->base.crt_flags &
 805					  CRYPTO_TFM_REQ_MASK);
 806
 807		err = crypto_sync_skcipher_setkey(ctx->sw_cipher, key, len);
 808
 809		tfm->crt_flags &= ~CRYPTO_TFM_RES_MASK;
 810		tfm->crt_flags |=
 811			crypto_sync_skcipher_get_flags(ctx->sw_cipher) &
 812			CRYPTO_TFM_RES_MASK;
 813
 814		if (err)
 815			goto sw_setkey_failed;
 816	}
 817
 818	memcpy(ctx->key, key, len);
 819	ctx->key_len = len;
 820
 821sw_setkey_failed:
 822	return err;
 823}
 824
 825static int spacc_kasumi_f8_setkey(struct crypto_ablkcipher *cipher,
 826				  const u8 *key, unsigned int len)
 827{
 828	struct crypto_tfm *tfm = crypto_ablkcipher_tfm(cipher);
 829	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(tfm);
 830	int err = 0;
 831
 832	if (len > AES_MAX_KEY_SIZE) {
 833		crypto_ablkcipher_set_flags(cipher, CRYPTO_TFM_RES_BAD_KEY_LEN);
 834		err = -EINVAL;
 835		goto out;
 836	}
 837
 838	memcpy(ctx->key, key, len);
 839	ctx->key_len = len;
 840
 841out:
 842	return err;
 843}
 844
 845static int spacc_ablk_need_fallback(struct spacc_req *req)
 846{
 
 
 
 847	struct spacc_ablk_ctx *ctx;
 848	struct crypto_tfm *tfm = req->req->tfm;
 849	struct crypto_alg *alg = req->req->tfm->__crt_alg;
 850	struct spacc_alg *spacc_alg = to_spacc_alg(alg);
 851
 852	ctx = crypto_tfm_ctx(tfm);
 853
 854	return (spacc_alg->ctrl_default & SPACC_CRYPTO_ALG_MASK) ==
 855			SPA_CTRL_CIPH_ALG_AES &&
 856			ctx->key_len != AES_KEYSIZE_128 &&
 857			ctx->key_len != AES_KEYSIZE_256;
 858}
 859
 860static void spacc_ablk_complete(struct spacc_req *req)
 861{
 862	struct ablkcipher_request *ablk_req = ablkcipher_request_cast(req->req);
 863
 864	if (ablk_req->src != ablk_req->dst) {
 865		spacc_free_ddt(req, req->src_ddt, req->src_addr, ablk_req->src,
 866			       ablk_req->nbytes, DMA_TO_DEVICE);
 867		spacc_free_ddt(req, req->dst_ddt, req->dst_addr, ablk_req->dst,
 868			       ablk_req->nbytes, DMA_FROM_DEVICE);
 869	} else
 870		spacc_free_ddt(req, req->dst_ddt, req->dst_addr, ablk_req->dst,
 871			       ablk_req->nbytes, DMA_BIDIRECTIONAL);
 872
 873	req->req->complete(req->req, req->result);
 874}
 875
 876static int spacc_ablk_submit(struct spacc_req *req)
 877{
 878	struct crypto_tfm *tfm = req->req->tfm;
 879	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(tfm);
 880	struct ablkcipher_request *ablk_req = ablkcipher_request_cast(req->req);
 881	struct crypto_alg *alg = req->req->tfm->__crt_alg;
 882	struct spacc_alg *spacc_alg = to_spacc_alg(alg);
 883	struct spacc_engine *engine = ctx->generic.engine;
 884	u32 ctrl;
 885
 886	req->ctx_id = spacc_load_ctx(&ctx->generic, ctx->key,
 887		ctx->key_len, ablk_req->info, alg->cra_ablkcipher.ivsize,
 888		NULL, 0);
 889
 890	writel(req->src_addr, engine->regs + SPA_SRC_PTR_REG_OFFSET);
 891	writel(req->dst_addr, engine->regs + SPA_DST_PTR_REG_OFFSET);
 892	writel(0, engine->regs + SPA_OFFSET_REG_OFFSET);
 893
 894	writel(ablk_req->nbytes, engine->regs + SPA_PROC_LEN_REG_OFFSET);
 895	writel(0, engine->regs + SPA_ICV_OFFSET_REG_OFFSET);
 896	writel(0, engine->regs + SPA_AUX_INFO_REG_OFFSET);
 897	writel(0, engine->regs + SPA_AAD_LEN_REG_OFFSET);
 898
 899	ctrl = spacc_alg->ctrl_default | (req->ctx_id << SPA_CTRL_CTX_IDX) |
 900		(req->is_encrypt ? (1 << SPA_CTRL_ENCRYPT_IDX) :
 901		 (1 << SPA_CTRL_KEY_EXP));
 902
 903	mod_timer(&engine->packet_timeout, jiffies + PACKET_TIMEOUT);
 904
 905	writel(ctrl, engine->regs + SPA_CTRL_REG_OFFSET);
 906
 907	return -EINPROGRESS;
 908}
 909
 910static int spacc_ablk_do_fallback(struct ablkcipher_request *req,
 911				  unsigned alg_type, bool is_encrypt)
 912{
 913	struct crypto_tfm *old_tfm =
 914	    crypto_ablkcipher_tfm(crypto_ablkcipher_reqtfm(req));
 915	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(old_tfm);
 916	SYNC_SKCIPHER_REQUEST_ON_STACK(subreq, ctx->sw_cipher);
 917	int err;
 918
 919	/*
 920	 * Change the request to use the software fallback transform, and once
 921	 * the ciphering has completed, put the old transform back into the
 922	 * request.
 923	 */
 924	skcipher_request_set_sync_tfm(subreq, ctx->sw_cipher);
 925	skcipher_request_set_callback(subreq, req->base.flags, NULL, NULL);
 926	skcipher_request_set_crypt(subreq, req->src, req->dst,
 927				   req->nbytes, req->info);
 928	err = is_encrypt ? crypto_skcipher_encrypt(subreq) :
 929			   crypto_skcipher_decrypt(subreq);
 930	skcipher_request_zero(subreq);
 931
 932	return err;
 933}
 934
 935static int spacc_ablk_setup(struct ablkcipher_request *req, unsigned alg_type,
 936			    bool is_encrypt)
 937{
 938	struct crypto_alg *alg = req->base.tfm->__crt_alg;
 939	struct spacc_engine *engine = to_spacc_alg(alg)->engine;
 940	struct spacc_req *dev_req = ablkcipher_request_ctx(req);
 
 941	unsigned long flags;
 942	int err = -ENOMEM;
 943
 944	dev_req->req		= &req->base;
 945	dev_req->is_encrypt	= is_encrypt;
 946	dev_req->engine		= engine;
 947	dev_req->complete	= spacc_ablk_complete;
 948	dev_req->result		= -EINPROGRESS;
 949
 950	if (unlikely(spacc_ablk_need_fallback(dev_req)))
 951		return spacc_ablk_do_fallback(req, alg_type, is_encrypt);
 952
 953	/*
 954	 * Create the DDT's for the engine. If we share the same source and
 955	 * destination then we can optimize by reusing the DDT's.
 956	 */
 957	if (req->src != req->dst) {
 958		dev_req->src_ddt = spacc_sg_to_ddt(engine, req->src,
 959			req->nbytes, DMA_TO_DEVICE, &dev_req->src_addr);
 960		if (!dev_req->src_ddt)
 961			goto out;
 962
 963		dev_req->dst_ddt = spacc_sg_to_ddt(engine, req->dst,
 964			req->nbytes, DMA_FROM_DEVICE, &dev_req->dst_addr);
 965		if (!dev_req->dst_ddt)
 966			goto out_free_src;
 967	} else {
 968		dev_req->dst_ddt = spacc_sg_to_ddt(engine, req->dst,
 969			req->nbytes, DMA_BIDIRECTIONAL, &dev_req->dst_addr);
 970		if (!dev_req->dst_ddt)
 971			goto out;
 972
 973		dev_req->src_ddt = NULL;
 974		dev_req->src_addr = dev_req->dst_addr;
 975	}
 976
 977	err = -EINPROGRESS;
 978	spin_lock_irqsave(&engine->hw_lock, flags);
 979	/*
 980	 * Check if the engine will accept the operation now. If it won't then
 981	 * we either stick it on the end of a pending list if we can backlog,
 982	 * or bailout with an error if not.
 983	 */
 984	if (unlikely(spacc_fifo_cmd_full(engine)) ||
 985	    engine->in_flight + 1 > engine->fifo_sz) {
 986		if (!(req->base.flags & CRYPTO_TFM_REQ_MAY_BACKLOG)) {
 987			err = -EBUSY;
 988			spin_unlock_irqrestore(&engine->hw_lock, flags);
 989			goto out_free_ddts;
 990		}
 991		list_add_tail(&dev_req->list, &engine->pending);
 992	} else {
 993		list_add_tail(&dev_req->list, &engine->pending);
 994		spacc_push(engine);
 995	}
 996	spin_unlock_irqrestore(&engine->hw_lock, flags);
 997
 998	goto out;
 999
1000out_free_ddts:
1001	spacc_free_ddt(dev_req, dev_req->dst_ddt, dev_req->dst_addr, req->dst,
1002		       req->nbytes, req->src == req->dst ?
1003		       DMA_BIDIRECTIONAL : DMA_FROM_DEVICE);
1004out_free_src:
1005	if (req->src != req->dst)
1006		spacc_free_ddt(dev_req, dev_req->src_ddt, dev_req->src_addr,
1007			       req->src, req->nbytes, DMA_TO_DEVICE);
1008out:
1009	return err;
1010}
1011
1012static int spacc_ablk_cra_init(struct crypto_tfm *tfm)
1013{
1014	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(tfm);
1015	struct crypto_alg *alg = tfm->__crt_alg;
1016	struct spacc_alg *spacc_alg = to_spacc_alg(alg);
1017	struct spacc_engine *engine = spacc_alg->engine;
1018
1019	ctx->generic.flags = spacc_alg->type;
1020	ctx->generic.engine = engine;
1021	if (alg->cra_flags & CRYPTO_ALG_NEED_FALLBACK) {
1022		ctx->sw_cipher = crypto_alloc_sync_skcipher(
1023			alg->cra_name, 0, CRYPTO_ALG_NEED_FALLBACK);
1024		if (IS_ERR(ctx->sw_cipher)) {
1025			dev_warn(engine->dev, "failed to allocate fallback for %s\n",
1026				 alg->cra_name);
1027			return PTR_ERR(ctx->sw_cipher);
1028		}
 
 
 
 
 
 
1029	}
 
1030	ctx->generic.key_offs = spacc_alg->key_offs;
1031	ctx->generic.iv_offs = spacc_alg->iv_offs;
1032
1033	tfm->crt_ablkcipher.reqsize = sizeof(struct spacc_req);
1034
1035	return 0;
1036}
1037
1038static void spacc_ablk_cra_exit(struct crypto_tfm *tfm)
1039{
1040	struct spacc_ablk_ctx *ctx = crypto_tfm_ctx(tfm);
1041
1042	crypto_free_sync_skcipher(ctx->sw_cipher);
1043}
1044
1045static int spacc_ablk_encrypt(struct ablkcipher_request *req)
1046{
1047	struct crypto_ablkcipher *cipher = crypto_ablkcipher_reqtfm(req);
1048	struct crypto_tfm *tfm = crypto_ablkcipher_tfm(cipher);
1049	struct spacc_alg *alg = to_spacc_alg(tfm->__crt_alg);
1050
1051	return spacc_ablk_setup(req, alg->type, 1);
1052}
1053
1054static int spacc_ablk_decrypt(struct ablkcipher_request *req)
1055{
1056	struct crypto_ablkcipher *cipher = crypto_ablkcipher_reqtfm(req);
1057	struct crypto_tfm *tfm = crypto_ablkcipher_tfm(cipher);
1058	struct spacc_alg *alg = to_spacc_alg(tfm->__crt_alg);
1059
1060	return spacc_ablk_setup(req, alg->type, 0);
1061}
1062
1063static inline int spacc_fifo_stat_empty(struct spacc_engine *engine)
1064{
1065	return readl(engine->regs + SPA_FIFO_STAT_REG_OFFSET) &
1066		SPA_FIFO_STAT_EMPTY;
1067}
1068
1069static void spacc_process_done(struct spacc_engine *engine)
1070{
1071	struct spacc_req *req;
1072	unsigned long flags;
1073
1074	spin_lock_irqsave(&engine->hw_lock, flags);
1075
1076	while (!spacc_fifo_stat_empty(engine)) {
1077		req = list_first_entry(&engine->in_progress, struct spacc_req,
1078				       list);
1079		list_move_tail(&req->list, &engine->completed);
1080		--engine->in_flight;
1081
1082		/* POP the status register. */
1083		writel(~0, engine->regs + SPA_STAT_POP_REG_OFFSET);
1084		req->result = (readl(engine->regs + SPA_STATUS_REG_OFFSET) &
1085		     SPA_STATUS_RES_CODE_MASK) >> SPA_STATUS_RES_CODE_OFFSET;
1086
1087		/*
1088		 * Convert the SPAcc error status into the standard POSIX error
1089		 * codes.
1090		 */
1091		if (unlikely(req->result)) {
1092			switch (req->result) {
1093			case SPA_STATUS_ICV_FAIL:
1094				req->result = -EBADMSG;
1095				break;
1096
1097			case SPA_STATUS_MEMORY_ERROR:
1098				dev_warn(engine->dev,
1099					 "memory error triggered\n");
1100				req->result = -EFAULT;
1101				break;
1102
1103			case SPA_STATUS_BLOCK_ERROR:
1104				dev_warn(engine->dev,
1105					 "block error triggered\n");
1106				req->result = -EIO;
1107				break;
1108			}
1109		}
1110	}
1111
1112	tasklet_schedule(&engine->complete);
1113
1114	spin_unlock_irqrestore(&engine->hw_lock, flags);
1115}
1116
1117static irqreturn_t spacc_spacc_irq(int irq, void *dev)
1118{
1119	struct spacc_engine *engine = (struct spacc_engine *)dev;
1120	u32 spacc_irq_stat = readl(engine->regs + SPA_IRQ_STAT_REG_OFFSET);
1121
1122	writel(spacc_irq_stat, engine->regs + SPA_IRQ_STAT_REG_OFFSET);
1123	spacc_process_done(engine);
1124
1125	return IRQ_HANDLED;
1126}
1127
1128static void spacc_packet_timeout(struct timer_list *t)
1129{
1130	struct spacc_engine *engine = from_timer(engine, t, packet_timeout);
1131
1132	spacc_process_done(engine);
1133}
1134
1135static int spacc_req_submit(struct spacc_req *req)
1136{
1137	struct crypto_alg *alg = req->req->tfm->__crt_alg;
1138
1139	if (CRYPTO_ALG_TYPE_AEAD == (CRYPTO_ALG_TYPE_MASK & alg->cra_flags))
1140		return spacc_aead_submit(req);
1141	else
1142		return spacc_ablk_submit(req);
1143}
1144
1145static void spacc_spacc_complete(unsigned long data)
1146{
1147	struct spacc_engine *engine = (struct spacc_engine *)data;
1148	struct spacc_req *req, *tmp;
1149	unsigned long flags;
1150	LIST_HEAD(completed);
1151
1152	spin_lock_irqsave(&engine->hw_lock, flags);
1153
1154	list_splice_init(&engine->completed, &completed);
1155	spacc_push(engine);
1156	if (engine->in_flight)
1157		mod_timer(&engine->packet_timeout, jiffies + PACKET_TIMEOUT);
1158
1159	spin_unlock_irqrestore(&engine->hw_lock, flags);
1160
1161	list_for_each_entry_safe(req, tmp, &completed, list) {
1162		list_del(&req->list);
1163		req->complete(req);
1164	}
1165}
1166
1167#ifdef CONFIG_PM
1168static int spacc_suspend(struct device *dev)
1169{
1170	struct spacc_engine *engine = dev_get_drvdata(dev);
1171
1172	/*
1173	 * We only support standby mode. All we have to do is gate the clock to
1174	 * the spacc. The hardware will preserve state until we turn it back
1175	 * on again.
1176	 */
1177	clk_disable(engine->clk);
1178
1179	return 0;
1180}
1181
1182static int spacc_resume(struct device *dev)
1183{
1184	struct spacc_engine *engine = dev_get_drvdata(dev);
1185
1186	return clk_enable(engine->clk);
1187}
1188
1189static const struct dev_pm_ops spacc_pm_ops = {
1190	.suspend	= spacc_suspend,
1191	.resume		= spacc_resume,
1192};
1193#endif /* CONFIG_PM */
1194
1195static inline struct spacc_engine *spacc_dev_to_engine(struct device *dev)
1196{
1197	return dev ? dev_get_drvdata(dev) : NULL;
1198}
1199
1200static ssize_t spacc_stat_irq_thresh_show(struct device *dev,
1201					  struct device_attribute *attr,
1202					  char *buf)
1203{
1204	struct spacc_engine *engine = spacc_dev_to_engine(dev);
1205
1206	return snprintf(buf, PAGE_SIZE, "%u\n", engine->stat_irq_thresh);
1207}
1208
1209static ssize_t spacc_stat_irq_thresh_store(struct device *dev,
1210					   struct device_attribute *attr,
1211					   const char *buf, size_t len)
1212{
1213	struct spacc_engine *engine = spacc_dev_to_engine(dev);
1214	unsigned long thresh;
1215
1216	if (kstrtoul(buf, 0, &thresh))
1217		return -EINVAL;
1218
1219	thresh = clamp(thresh, 1UL, engine->fifo_sz - 1);
1220
1221	engine->stat_irq_thresh = thresh;
1222	writel(engine->stat_irq_thresh << SPA_IRQ_CTRL_STAT_CNT_OFFSET,
1223	       engine->regs + SPA_IRQ_CTRL_REG_OFFSET);
1224
1225	return len;
1226}
1227static DEVICE_ATTR(stat_irq_thresh, 0644, spacc_stat_irq_thresh_show,
1228		   spacc_stat_irq_thresh_store);
1229
1230static struct spacc_alg ipsec_engine_algs[] = {
1231	{
1232		.ctrl_default = SPA_CTRL_CIPH_ALG_AES | SPA_CTRL_CIPH_MODE_CBC,
1233		.key_offs = 0,
1234		.iv_offs = AES_MAX_KEY_SIZE,
1235		.alg = {
1236			.cra_name = "cbc(aes)",
1237			.cra_driver_name = "cbc-aes-picoxcell",
1238			.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1239			.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
1240				     CRYPTO_ALG_KERN_DRIVER_ONLY |
1241				     CRYPTO_ALG_ASYNC |
1242				     CRYPTO_ALG_NEED_FALLBACK,
1243			.cra_blocksize = AES_BLOCK_SIZE,
1244			.cra_ctxsize = sizeof(struct spacc_ablk_ctx),
1245			.cra_type = &crypto_ablkcipher_type,
1246			.cra_module = THIS_MODULE,
1247			.cra_ablkcipher = {
1248				.setkey = spacc_aes_setkey,
1249				.encrypt = spacc_ablk_encrypt,
1250				.decrypt = spacc_ablk_decrypt,
1251				.min_keysize = AES_MIN_KEY_SIZE,
1252				.max_keysize = AES_MAX_KEY_SIZE,
1253				.ivsize = AES_BLOCK_SIZE,
1254			},
1255			.cra_init = spacc_ablk_cra_init,
1256			.cra_exit = spacc_ablk_cra_exit,
1257		},
1258	},
1259	{
1260		.key_offs = 0,
1261		.iv_offs = AES_MAX_KEY_SIZE,
1262		.ctrl_default = SPA_CTRL_CIPH_ALG_AES | SPA_CTRL_CIPH_MODE_ECB,
1263		.alg = {
1264			.cra_name = "ecb(aes)",
1265			.cra_driver_name = "ecb-aes-picoxcell",
1266			.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1267			.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
1268				CRYPTO_ALG_KERN_DRIVER_ONLY |
1269				CRYPTO_ALG_ASYNC | CRYPTO_ALG_NEED_FALLBACK,
1270			.cra_blocksize = AES_BLOCK_SIZE,
1271			.cra_ctxsize = sizeof(struct spacc_ablk_ctx),
1272			.cra_type = &crypto_ablkcipher_type,
1273			.cra_module = THIS_MODULE,
1274			.cra_ablkcipher = {
1275				.setkey = spacc_aes_setkey,
1276				.encrypt = spacc_ablk_encrypt,
1277				.decrypt = spacc_ablk_decrypt,
1278				.min_keysize = AES_MIN_KEY_SIZE,
1279				.max_keysize = AES_MAX_KEY_SIZE,
1280			},
1281			.cra_init = spacc_ablk_cra_init,
1282			.cra_exit = spacc_ablk_cra_exit,
1283		},
1284	},
1285	{
1286		.key_offs = DES_BLOCK_SIZE,
1287		.iv_offs = 0,
1288		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_CBC,
1289		.alg = {
1290			.cra_name = "cbc(des)",
1291			.cra_driver_name = "cbc-des-picoxcell",
1292			.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1293			.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
1294					CRYPTO_ALG_ASYNC |
1295					CRYPTO_ALG_KERN_DRIVER_ONLY,
1296			.cra_blocksize = DES_BLOCK_SIZE,
1297			.cra_ctxsize = sizeof(struct spacc_ablk_ctx),
1298			.cra_type = &crypto_ablkcipher_type,
1299			.cra_module = THIS_MODULE,
1300			.cra_ablkcipher = {
1301				.setkey = spacc_des_setkey,
1302				.encrypt = spacc_ablk_encrypt,
1303				.decrypt = spacc_ablk_decrypt,
1304				.min_keysize = DES_KEY_SIZE,
1305				.max_keysize = DES_KEY_SIZE,
1306				.ivsize = DES_BLOCK_SIZE,
1307			},
1308			.cra_init = spacc_ablk_cra_init,
1309			.cra_exit = spacc_ablk_cra_exit,
1310		},
1311	},
1312	{
1313		.key_offs = DES_BLOCK_SIZE,
1314		.iv_offs = 0,
1315		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_ECB,
1316		.alg = {
1317			.cra_name = "ecb(des)",
1318			.cra_driver_name = "ecb-des-picoxcell",
1319			.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1320			.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
1321					CRYPTO_ALG_ASYNC |
1322					CRYPTO_ALG_KERN_DRIVER_ONLY,
1323			.cra_blocksize = DES_BLOCK_SIZE,
1324			.cra_ctxsize = sizeof(struct spacc_ablk_ctx),
1325			.cra_type = &crypto_ablkcipher_type,
1326			.cra_module = THIS_MODULE,
1327			.cra_ablkcipher = {
1328				.setkey = spacc_des_setkey,
1329				.encrypt = spacc_ablk_encrypt,
1330				.decrypt = spacc_ablk_decrypt,
1331				.min_keysize = DES_KEY_SIZE,
1332				.max_keysize = DES_KEY_SIZE,
1333			},
1334			.cra_init = spacc_ablk_cra_init,
1335			.cra_exit = spacc_ablk_cra_exit,
1336		},
1337	},
1338	{
1339		.key_offs = DES_BLOCK_SIZE,
1340		.iv_offs = 0,
1341		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_CBC,
1342		.alg = {
1343			.cra_name = "cbc(des3_ede)",
1344			.cra_driver_name = "cbc-des3-ede-picoxcell",
1345			.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1346			.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
1347					CRYPTO_ALG_ASYNC |
1348					CRYPTO_ALG_KERN_DRIVER_ONLY,
1349			.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1350			.cra_ctxsize = sizeof(struct spacc_ablk_ctx),
1351			.cra_type = &crypto_ablkcipher_type,
1352			.cra_module = THIS_MODULE,
1353			.cra_ablkcipher = {
1354				.setkey = spacc_des3_setkey,
1355				.encrypt = spacc_ablk_encrypt,
1356				.decrypt = spacc_ablk_decrypt,
1357				.min_keysize = DES3_EDE_KEY_SIZE,
1358				.max_keysize = DES3_EDE_KEY_SIZE,
1359				.ivsize = DES3_EDE_BLOCK_SIZE,
1360			},
1361			.cra_init = spacc_ablk_cra_init,
1362			.cra_exit = spacc_ablk_cra_exit,
1363		},
1364	},
1365	{
1366		.key_offs = DES_BLOCK_SIZE,
1367		.iv_offs = 0,
1368		.ctrl_default = SPA_CTRL_CIPH_ALG_DES | SPA_CTRL_CIPH_MODE_ECB,
1369		.alg = {
1370			.cra_name = "ecb(des3_ede)",
1371			.cra_driver_name = "ecb-des3-ede-picoxcell",
1372			.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1373			.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
1374					CRYPTO_ALG_ASYNC |
1375					CRYPTO_ALG_KERN_DRIVER_ONLY,
1376			.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1377			.cra_ctxsize = sizeof(struct spacc_ablk_ctx),
1378			.cra_type = &crypto_ablkcipher_type,
1379			.cra_module = THIS_MODULE,
1380			.cra_ablkcipher = {
1381				.setkey = spacc_des3_setkey,
1382				.encrypt = spacc_ablk_encrypt,
1383				.decrypt = spacc_ablk_decrypt,
1384				.min_keysize = DES3_EDE_KEY_SIZE,
1385				.max_keysize = DES3_EDE_KEY_SIZE,
1386			},
1387			.cra_init = spacc_ablk_cra_init,
1388			.cra_exit = spacc_ablk_cra_exit,
1389		},
1390	},
1391};
1392
1393static struct spacc_aead ipsec_engine_aeads[] = {
1394	{
1395		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1396				SPA_CTRL_CIPH_MODE_CBC |
1397				SPA_CTRL_HASH_ALG_SHA |
1398				SPA_CTRL_HASH_MODE_HMAC,
1399		.key_offs = 0,
1400		.iv_offs = AES_MAX_KEY_SIZE,
1401		.alg = {
1402			.base = {
1403				.cra_name = "authenc(hmac(sha1),cbc(aes))",
1404				.cra_driver_name = "authenc-hmac-sha1-"
1405						   "cbc-aes-picoxcell",
1406				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1407				.cra_flags = CRYPTO_ALG_ASYNC |
 
1408					     CRYPTO_ALG_NEED_FALLBACK |
1409					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1410				.cra_blocksize = AES_BLOCK_SIZE,
1411				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1412				.cra_module = THIS_MODULE,
1413			},
1414			.setkey = spacc_aead_setkey,
1415			.setauthsize = spacc_aead_setauthsize,
1416			.encrypt = spacc_aead_encrypt,
1417			.decrypt = spacc_aead_decrypt,
1418			.ivsize = AES_BLOCK_SIZE,
1419			.maxauthsize = SHA1_DIGEST_SIZE,
1420			.init = spacc_aead_cra_init,
1421			.exit = spacc_aead_cra_exit,
1422		},
1423	},
1424	{
1425		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1426				SPA_CTRL_CIPH_MODE_CBC |
1427				SPA_CTRL_HASH_ALG_SHA256 |
1428				SPA_CTRL_HASH_MODE_HMAC,
1429		.key_offs = 0,
1430		.iv_offs = AES_MAX_KEY_SIZE,
1431		.alg = {
1432			.base = {
1433				.cra_name = "authenc(hmac(sha256),cbc(aes))",
1434				.cra_driver_name = "authenc-hmac-sha256-"
1435						   "cbc-aes-picoxcell",
1436				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1437				.cra_flags = CRYPTO_ALG_ASYNC |
 
1438					     CRYPTO_ALG_NEED_FALLBACK |
1439					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1440				.cra_blocksize = AES_BLOCK_SIZE,
1441				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1442				.cra_module = THIS_MODULE,
1443			},
1444			.setkey = spacc_aead_setkey,
1445			.setauthsize = spacc_aead_setauthsize,
1446			.encrypt = spacc_aead_encrypt,
1447			.decrypt = spacc_aead_decrypt,
1448			.ivsize = AES_BLOCK_SIZE,
1449			.maxauthsize = SHA256_DIGEST_SIZE,
1450			.init = spacc_aead_cra_init,
1451			.exit = spacc_aead_cra_exit,
1452		},
1453	},
1454	{
1455		.key_offs = 0,
1456		.iv_offs = AES_MAX_KEY_SIZE,
1457		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1458				SPA_CTRL_CIPH_MODE_CBC |
1459				SPA_CTRL_HASH_ALG_MD5 |
1460				SPA_CTRL_HASH_MODE_HMAC,
1461		.alg = {
1462			.base = {
1463				.cra_name = "authenc(hmac(md5),cbc(aes))",
1464				.cra_driver_name = "authenc-hmac-md5-"
1465						   "cbc-aes-picoxcell",
1466				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1467				.cra_flags = CRYPTO_ALG_ASYNC |
 
1468					     CRYPTO_ALG_NEED_FALLBACK |
1469					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1470				.cra_blocksize = AES_BLOCK_SIZE,
1471				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1472				.cra_module = THIS_MODULE,
1473			},
1474			.setkey = spacc_aead_setkey,
1475			.setauthsize = spacc_aead_setauthsize,
1476			.encrypt = spacc_aead_encrypt,
1477			.decrypt = spacc_aead_decrypt,
1478			.ivsize = AES_BLOCK_SIZE,
1479			.maxauthsize = MD5_DIGEST_SIZE,
1480			.init = spacc_aead_cra_init,
1481			.exit = spacc_aead_cra_exit,
1482		},
1483	},
1484	{
1485		.key_offs = DES_BLOCK_SIZE,
1486		.iv_offs = 0,
1487		.ctrl_default = SPA_CTRL_CIPH_ALG_DES |
1488				SPA_CTRL_CIPH_MODE_CBC |
1489				SPA_CTRL_HASH_ALG_SHA |
1490				SPA_CTRL_HASH_MODE_HMAC,
1491		.alg = {
1492			.base = {
1493				.cra_name = "authenc(hmac(sha1),cbc(des3_ede))",
1494				.cra_driver_name = "authenc-hmac-sha1-"
1495						   "cbc-3des-picoxcell",
1496				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1497				.cra_flags = CRYPTO_ALG_ASYNC |
 
1498					     CRYPTO_ALG_NEED_FALLBACK |
1499					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1500				.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1501				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1502				.cra_module = THIS_MODULE,
1503			},
1504			.setkey = spacc_aead_setkey,
1505			.setauthsize = spacc_aead_setauthsize,
1506			.encrypt = spacc_aead_encrypt,
1507			.decrypt = spacc_aead_decrypt,
1508			.ivsize = DES3_EDE_BLOCK_SIZE,
1509			.maxauthsize = SHA1_DIGEST_SIZE,
1510			.init = spacc_aead_cra_init,
1511			.exit = spacc_aead_cra_exit,
1512		},
1513	},
1514	{
1515		.key_offs = DES_BLOCK_SIZE,
1516		.iv_offs = 0,
1517		.ctrl_default = SPA_CTRL_CIPH_ALG_AES |
1518				SPA_CTRL_CIPH_MODE_CBC |
1519				SPA_CTRL_HASH_ALG_SHA256 |
1520				SPA_CTRL_HASH_MODE_HMAC,
1521		.alg = {
1522			.base = {
1523				.cra_name = "authenc(hmac(sha256),"
1524					    "cbc(des3_ede))",
1525				.cra_driver_name = "authenc-hmac-sha256-"
1526						   "cbc-3des-picoxcell",
1527				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1528				.cra_flags = CRYPTO_ALG_ASYNC |
 
1529					     CRYPTO_ALG_NEED_FALLBACK |
1530					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1531				.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1532				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1533				.cra_module = THIS_MODULE,
1534			},
1535			.setkey = spacc_aead_setkey,
1536			.setauthsize = spacc_aead_setauthsize,
1537			.encrypt = spacc_aead_encrypt,
1538			.decrypt = spacc_aead_decrypt,
1539			.ivsize = DES3_EDE_BLOCK_SIZE,
1540			.maxauthsize = SHA256_DIGEST_SIZE,
1541			.init = spacc_aead_cra_init,
1542			.exit = spacc_aead_cra_exit,
1543		},
1544	},
1545	{
1546		.key_offs = DES_BLOCK_SIZE,
1547		.iv_offs = 0,
1548		.ctrl_default = SPA_CTRL_CIPH_ALG_DES |
1549				SPA_CTRL_CIPH_MODE_CBC |
1550				SPA_CTRL_HASH_ALG_MD5 |
1551				SPA_CTRL_HASH_MODE_HMAC,
1552		.alg = {
1553			.base = {
1554				.cra_name = "authenc(hmac(md5),cbc(des3_ede))",
1555				.cra_driver_name = "authenc-hmac-md5-"
1556						   "cbc-3des-picoxcell",
1557				.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1558				.cra_flags = CRYPTO_ALG_ASYNC |
 
1559					     CRYPTO_ALG_NEED_FALLBACK |
1560					     CRYPTO_ALG_KERN_DRIVER_ONLY,
1561				.cra_blocksize = DES3_EDE_BLOCK_SIZE,
1562				.cra_ctxsize = sizeof(struct spacc_aead_ctx),
1563				.cra_module = THIS_MODULE,
1564			},
1565			.setkey = spacc_aead_setkey,
1566			.setauthsize = spacc_aead_setauthsize,
1567			.encrypt = spacc_aead_encrypt,
1568			.decrypt = spacc_aead_decrypt,
1569			.ivsize = DES3_EDE_BLOCK_SIZE,
1570			.maxauthsize = MD5_DIGEST_SIZE,
1571			.init = spacc_aead_cra_init,
1572			.exit = spacc_aead_cra_exit,
1573		},
1574	},
1575};
1576
1577static struct spacc_alg l2_engine_algs[] = {
1578	{
1579		.key_offs = 0,
1580		.iv_offs = SPACC_CRYPTO_KASUMI_F8_KEY_LEN,
1581		.ctrl_default = SPA_CTRL_CIPH_ALG_KASUMI |
1582				SPA_CTRL_CIPH_MODE_F8,
1583		.alg = {
1584			.cra_name = "f8(kasumi)",
1585			.cra_driver_name = "f8-kasumi-picoxcell",
1586			.cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
1587			.cra_flags = CRYPTO_ALG_ASYNC |
1588					CRYPTO_ALG_KERN_DRIVER_ONLY,
1589			.cra_blocksize = 8,
1590			.cra_ctxsize = sizeof(struct spacc_ablk_ctx),
1591			.cra_type = &crypto_ablkcipher_type,
1592			.cra_module = THIS_MODULE,
1593			.cra_ablkcipher = {
1594				.setkey = spacc_kasumi_f8_setkey,
1595				.encrypt = spacc_ablk_encrypt,
1596				.decrypt = spacc_ablk_decrypt,
1597				.min_keysize = 16,
1598				.max_keysize = 16,
1599				.ivsize = 8,
1600			},
1601			.cra_init = spacc_ablk_cra_init,
1602			.cra_exit = spacc_ablk_cra_exit,
1603		},
1604	},
1605};
1606
1607#ifdef CONFIG_OF
1608static const struct of_device_id spacc_of_id_table[] = {
1609	{ .compatible = "picochip,spacc-ipsec" },
1610	{ .compatible = "picochip,spacc-l2" },
1611	{}
1612};
1613MODULE_DEVICE_TABLE(of, spacc_of_id_table);
1614#endif /* CONFIG_OF */
1615
 
 
 
 
 
1616static int spacc_probe(struct platform_device *pdev)
1617{
1618	int i, err, ret;
1619	struct resource *irq;
1620	struct device_node *np = pdev->dev.of_node;
1621	struct spacc_engine *engine = devm_kzalloc(&pdev->dev, sizeof(*engine),
1622						   GFP_KERNEL);
1623	if (!engine)
1624		return -ENOMEM;
1625
1626	if (of_device_is_compatible(np, "picochip,spacc-ipsec")) {
1627		engine->max_ctxs	= SPACC_CRYPTO_IPSEC_MAX_CTXS;
1628		engine->cipher_pg_sz	= SPACC_CRYPTO_IPSEC_CIPHER_PG_SZ;
1629		engine->hash_pg_sz	= SPACC_CRYPTO_IPSEC_HASH_PG_SZ;
1630		engine->fifo_sz		= SPACC_CRYPTO_IPSEC_FIFO_SZ;
1631		engine->algs		= ipsec_engine_algs;
1632		engine->num_algs	= ARRAY_SIZE(ipsec_engine_algs);
1633		engine->aeads		= ipsec_engine_aeads;
1634		engine->num_aeads	= ARRAY_SIZE(ipsec_engine_aeads);
1635	} else if (of_device_is_compatible(np, "picochip,spacc-l2")) {
1636		engine->max_ctxs	= SPACC_CRYPTO_L2_MAX_CTXS;
1637		engine->cipher_pg_sz	= SPACC_CRYPTO_L2_CIPHER_PG_SZ;
1638		engine->hash_pg_sz	= SPACC_CRYPTO_L2_HASH_PG_SZ;
1639		engine->fifo_sz		= SPACC_CRYPTO_L2_FIFO_SZ;
1640		engine->algs		= l2_engine_algs;
1641		engine->num_algs	= ARRAY_SIZE(l2_engine_algs);
1642	} else {
1643		return -EINVAL;
1644	}
1645
1646	engine->name = dev_name(&pdev->dev);
1647
1648	engine->regs = devm_platform_ioremap_resource(pdev, 0);
1649	if (IS_ERR(engine->regs))
1650		return PTR_ERR(engine->regs);
1651
1652	irq = platform_get_resource(pdev, IORESOURCE_IRQ, 0);
1653	if (!irq) {
1654		dev_err(&pdev->dev, "no memory/irq resource for engine\n");
1655		return -ENXIO;
1656	}
1657
 
 
 
 
 
 
 
 
1658	if (devm_request_irq(&pdev->dev, irq->start, spacc_spacc_irq, 0,
1659			     engine->name, engine)) {
1660		dev_err(engine->dev, "failed to request IRQ\n");
1661		return -EBUSY;
1662	}
1663
1664	engine->dev		= &pdev->dev;
1665	engine->cipher_ctx_base = engine->regs + SPA_CIPH_KEY_BASE_REG_OFFSET;
1666	engine->hash_key_base	= engine->regs + SPA_HASH_KEY_BASE_REG_OFFSET;
1667
1668	engine->req_pool = dmam_pool_create(engine->name, engine->dev,
1669		MAX_DDT_LEN * sizeof(struct spacc_ddt), 8, SZ_64K);
1670	if (!engine->req_pool)
1671		return -ENOMEM;
1672
1673	spin_lock_init(&engine->hw_lock);
1674
1675	engine->clk = clk_get(&pdev->dev, "ref");
1676	if (IS_ERR(engine->clk)) {
1677		dev_info(&pdev->dev, "clk unavailable\n");
1678		return PTR_ERR(engine->clk);
1679	}
1680
1681	if (clk_prepare_enable(engine->clk)) {
1682		dev_info(&pdev->dev, "unable to prepare/enable clk\n");
1683		ret = -EIO;
1684		goto err_clk_put;
1685	}
1686
1687	ret = device_create_file(&pdev->dev, &dev_attr_stat_irq_thresh);
1688	if (ret)
1689		goto err_clk_disable;
1690
1691
1692	/*
1693	 * Use an IRQ threshold of 50% as a default. This seems to be a
1694	 * reasonable trade off of latency against throughput but can be
1695	 * changed at runtime.
1696	 */
1697	engine->stat_irq_thresh = (engine->fifo_sz / 2);
1698
1699	/*
1700	 * Configure the interrupts. We only use the STAT_CNT interrupt as we
1701	 * only submit a new packet for processing when we complete another in
1702	 * the queue. This minimizes time spent in the interrupt handler.
1703	 */
1704	writel(engine->stat_irq_thresh << SPA_IRQ_CTRL_STAT_CNT_OFFSET,
1705	       engine->regs + SPA_IRQ_CTRL_REG_OFFSET);
1706	writel(SPA_IRQ_EN_STAT_EN | SPA_IRQ_EN_GLBL_EN,
1707	       engine->regs + SPA_IRQ_EN_REG_OFFSET);
1708
1709	timer_setup(&engine->packet_timeout, spacc_packet_timeout, 0);
1710
1711	INIT_LIST_HEAD(&engine->pending);
1712	INIT_LIST_HEAD(&engine->completed);
1713	INIT_LIST_HEAD(&engine->in_progress);
1714	engine->in_flight = 0;
1715	tasklet_init(&engine->complete, spacc_spacc_complete,
1716		     (unsigned long)engine);
1717
1718	platform_set_drvdata(pdev, engine);
1719
1720	ret = -EINVAL;
1721	INIT_LIST_HEAD(&engine->registered_algs);
1722	for (i = 0; i < engine->num_algs; ++i) {
1723		engine->algs[i].engine = engine;
1724		err = crypto_register_alg(&engine->algs[i].alg);
1725		if (!err) {
1726			list_add_tail(&engine->algs[i].entry,
1727				      &engine->registered_algs);
1728			ret = 0;
1729		}
1730		if (err)
1731			dev_err(engine->dev, "failed to register alg \"%s\"\n",
1732				engine->algs[i].alg.cra_name);
1733		else
1734			dev_dbg(engine->dev, "registered alg \"%s\"\n",
1735				engine->algs[i].alg.cra_name);
1736	}
1737
1738	INIT_LIST_HEAD(&engine->registered_aeads);
1739	for (i = 0; i < engine->num_aeads; ++i) {
1740		engine->aeads[i].engine = engine;
1741		err = crypto_register_aead(&engine->aeads[i].alg);
1742		if (!err) {
1743			list_add_tail(&engine->aeads[i].entry,
1744				      &engine->registered_aeads);
1745			ret = 0;
1746		}
1747		if (err)
1748			dev_err(engine->dev, "failed to register alg \"%s\"\n",
1749				engine->aeads[i].alg.base.cra_name);
1750		else
1751			dev_dbg(engine->dev, "registered alg \"%s\"\n",
1752				engine->aeads[i].alg.base.cra_name);
1753	}
1754
1755	if (!ret)
1756		return 0;
1757
1758	del_timer_sync(&engine->packet_timeout);
1759	device_remove_file(&pdev->dev, &dev_attr_stat_irq_thresh);
1760err_clk_disable:
1761	clk_disable_unprepare(engine->clk);
1762err_clk_put:
1763	clk_put(engine->clk);
1764
1765	return ret;
1766}
1767
1768static int spacc_remove(struct platform_device *pdev)
1769{
1770	struct spacc_aead *aead, *an;
1771	struct spacc_alg *alg, *next;
1772	struct spacc_engine *engine = platform_get_drvdata(pdev);
1773
1774	del_timer_sync(&engine->packet_timeout);
1775	device_remove_file(&pdev->dev, &dev_attr_stat_irq_thresh);
1776
1777	list_for_each_entry_safe(aead, an, &engine->registered_aeads, entry) {
1778		list_del(&aead->entry);
1779		crypto_unregister_aead(&aead->alg);
1780	}
1781
1782	list_for_each_entry_safe(alg, next, &engine->registered_algs, entry) {
1783		list_del(&alg->entry);
1784		crypto_unregister_alg(&alg->alg);
1785	}
1786
1787	clk_disable_unprepare(engine->clk);
1788	clk_put(engine->clk);
1789
1790	return 0;
1791}
1792
1793static struct platform_driver spacc_driver = {
1794	.probe		= spacc_probe,
1795	.remove		= spacc_remove,
1796	.driver		= {
1797		.name	= "picochip,spacc",
1798#ifdef CONFIG_PM
1799		.pm	= &spacc_pm_ops,
1800#endif /* CONFIG_PM */
1801		.of_match_table	= of_match_ptr(spacc_of_id_table),
1802	},
1803};
1804
1805module_platform_driver(spacc_driver);
1806
1807MODULE_LICENSE("GPL");
1808MODULE_AUTHOR("Jamie Iles");