Linux Audio

Check our new training course

Loading...
Note: File does not exist in v6.13.7.
  1/*
  2 * Cipher algorithms supported by the CESA: DES, 3DES and AES.
  3 *
  4 * Author: Boris Brezillon <boris.brezillon@free-electrons.com>
  5 * Author: Arnaud Ebalard <arno@natisbad.org>
  6 *
  7 * This work is based on an initial version written by
  8 * Sebastian Andrzej Siewior < sebastian at breakpoint dot cc >
  9 *
 10 * This program is free software; you can redistribute it and/or modify it
 11 * under the terms of the GNU General Public License version 2 as published
 12 * by the Free Software Foundation.
 13 */
 14
 15#include <crypto/aes.h>
 16#include <crypto/des.h>
 17
 18#include "cesa.h"
 19
 20struct mv_cesa_des_ctx {
 21	struct mv_cesa_ctx base;
 22	u8 key[DES_KEY_SIZE];
 23};
 24
 25struct mv_cesa_des3_ctx {
 26	struct mv_cesa_ctx base;
 27	u8 key[DES3_EDE_KEY_SIZE];
 28};
 29
 30struct mv_cesa_aes_ctx {
 31	struct mv_cesa_ctx base;
 32	struct crypto_aes_ctx aes;
 33};
 34
 35struct mv_cesa_skcipher_dma_iter {
 36	struct mv_cesa_dma_iter base;
 37	struct mv_cesa_sg_dma_iter src;
 38	struct mv_cesa_sg_dma_iter dst;
 39};
 40
 41static inline void
 42mv_cesa_skcipher_req_iter_init(struct mv_cesa_skcipher_dma_iter *iter,
 43			       struct skcipher_request *req)
 44{
 45	mv_cesa_req_dma_iter_init(&iter->base, req->cryptlen);
 46	mv_cesa_sg_dma_iter_init(&iter->src, req->src, DMA_TO_DEVICE);
 47	mv_cesa_sg_dma_iter_init(&iter->dst, req->dst, DMA_FROM_DEVICE);
 48}
 49
 50static inline bool
 51mv_cesa_skcipher_req_iter_next_op(struct mv_cesa_skcipher_dma_iter *iter)
 52{
 53	iter->src.op_offset = 0;
 54	iter->dst.op_offset = 0;
 55
 56	return mv_cesa_req_dma_iter_next_op(&iter->base);
 57}
 58
 59static inline void
 60mv_cesa_skcipher_dma_cleanup(struct skcipher_request *req)
 61{
 62	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
 63
 64	if (req->dst != req->src) {
 65		dma_unmap_sg(cesa_dev->dev, req->dst, creq->dst_nents,
 66			     DMA_FROM_DEVICE);
 67		dma_unmap_sg(cesa_dev->dev, req->src, creq->src_nents,
 68			     DMA_TO_DEVICE);
 69	} else {
 70		dma_unmap_sg(cesa_dev->dev, req->src, creq->src_nents,
 71			     DMA_BIDIRECTIONAL);
 72	}
 73	mv_cesa_dma_cleanup(&creq->base);
 74}
 75
 76static inline void mv_cesa_skcipher_cleanup(struct skcipher_request *req)
 77{
 78	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
 79
 80	if (mv_cesa_req_get_type(&creq->base) == CESA_DMA_REQ)
 81		mv_cesa_skcipher_dma_cleanup(req);
 82}
 83
 84static void mv_cesa_skcipher_std_step(struct skcipher_request *req)
 85{
 86	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
 87	struct mv_cesa_skcipher_std_req *sreq = &creq->std;
 88	struct mv_cesa_engine *engine = creq->base.engine;
 89	size_t  len = min_t(size_t, req->cryptlen - sreq->offset,
 90			    CESA_SA_SRAM_PAYLOAD_SIZE);
 91
 92	mv_cesa_adjust_op(engine, &sreq->op);
 93	memcpy_toio(engine->sram, &sreq->op, sizeof(sreq->op));
 94
 95	len = sg_pcopy_to_buffer(req->src, creq->src_nents,
 96				 engine->sram + CESA_SA_DATA_SRAM_OFFSET,
 97				 len, sreq->offset);
 98
 99	sreq->size = len;
100	mv_cesa_set_crypt_op_len(&sreq->op, len);
101
102	/* FIXME: only update enc_len field */
103	if (!sreq->skip_ctx) {
104		memcpy_toio(engine->sram, &sreq->op, sizeof(sreq->op));
105		sreq->skip_ctx = true;
106	} else {
107		memcpy_toio(engine->sram, &sreq->op, sizeof(sreq->op.desc));
108	}
109
110	mv_cesa_set_int_mask(engine, CESA_SA_INT_ACCEL0_DONE);
111	writel_relaxed(CESA_SA_CFG_PARA_DIS, engine->regs + CESA_SA_CFG);
112	BUG_ON(readl(engine->regs + CESA_SA_CMD) &
113	       CESA_SA_CMD_EN_CESA_SA_ACCL0);
114	writel(CESA_SA_CMD_EN_CESA_SA_ACCL0, engine->regs + CESA_SA_CMD);
115}
116
117static int mv_cesa_skcipher_std_process(struct skcipher_request *req,
118					u32 status)
119{
120	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
121	struct mv_cesa_skcipher_std_req *sreq = &creq->std;
122	struct mv_cesa_engine *engine = creq->base.engine;
123	size_t len;
124
125	len = sg_pcopy_from_buffer(req->dst, creq->dst_nents,
126				   engine->sram + CESA_SA_DATA_SRAM_OFFSET,
127				   sreq->size, sreq->offset);
128
129	sreq->offset += len;
130	if (sreq->offset < req->cryptlen)
131		return -EINPROGRESS;
132
133	return 0;
134}
135
136static int mv_cesa_skcipher_process(struct crypto_async_request *req,
137				    u32 status)
138{
139	struct skcipher_request *skreq = skcipher_request_cast(req);
140	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(skreq);
141	struct mv_cesa_req *basereq = &creq->base;
142
143	if (mv_cesa_req_get_type(basereq) == CESA_STD_REQ)
144		return mv_cesa_skcipher_std_process(skreq, status);
145
146	return mv_cesa_dma_process(basereq, status);
147}
148
149static void mv_cesa_skcipher_step(struct crypto_async_request *req)
150{
151	struct skcipher_request *skreq = skcipher_request_cast(req);
152	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(skreq);
153
154	if (mv_cesa_req_get_type(&creq->base) == CESA_DMA_REQ)
155		mv_cesa_dma_step(&creq->base);
156	else
157		mv_cesa_skcipher_std_step(skreq);
158}
159
160static inline void
161mv_cesa_skcipher_dma_prepare(struct skcipher_request *req)
162{
163	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
164	struct mv_cesa_req *basereq = &creq->base;
165
166	mv_cesa_dma_prepare(basereq, basereq->engine);
167}
168
169static inline void
170mv_cesa_skcipher_std_prepare(struct skcipher_request *req)
171{
172	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
173	struct mv_cesa_skcipher_std_req *sreq = &creq->std;
174
175	sreq->size = 0;
176	sreq->offset = 0;
177}
178
179static inline void mv_cesa_skcipher_prepare(struct crypto_async_request *req,
180					    struct mv_cesa_engine *engine)
181{
182	struct skcipher_request *skreq = skcipher_request_cast(req);
183	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(skreq);
184	creq->base.engine = engine;
185
186	if (mv_cesa_req_get_type(&creq->base) == CESA_DMA_REQ)
187		mv_cesa_skcipher_dma_prepare(skreq);
188	else
189		mv_cesa_skcipher_std_prepare(skreq);
190}
191
192static inline void
193mv_cesa_skcipher_req_cleanup(struct crypto_async_request *req)
194{
195	struct skcipher_request *skreq = skcipher_request_cast(req);
196
197	mv_cesa_skcipher_cleanup(skreq);
198}
199
200static void
201mv_cesa_skcipher_complete(struct crypto_async_request *req)
202{
203	struct skcipher_request *skreq = skcipher_request_cast(req);
204	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(skreq);
205	struct mv_cesa_engine *engine = creq->base.engine;
206	unsigned int ivsize;
207
208	atomic_sub(skreq->cryptlen, &engine->load);
209	ivsize = crypto_skcipher_ivsize(crypto_skcipher_reqtfm(skreq));
210
211	if (mv_cesa_req_get_type(&creq->base) == CESA_DMA_REQ) {
212		struct mv_cesa_req *basereq;
213
214		basereq = &creq->base;
215		memcpy(skreq->iv, basereq->chain.last->op->ctx.blkcipher.iv,
216		       ivsize);
217	} else {
218		memcpy_fromio(skreq->iv,
219			      engine->sram + CESA_SA_CRYPT_IV_SRAM_OFFSET,
220			      ivsize);
221	}
222}
223
224static const struct mv_cesa_req_ops mv_cesa_skcipher_req_ops = {
225	.step = mv_cesa_skcipher_step,
226	.process = mv_cesa_skcipher_process,
227	.cleanup = mv_cesa_skcipher_req_cleanup,
228	.complete = mv_cesa_skcipher_complete,
229};
230
231static void mv_cesa_skcipher_cra_exit(struct crypto_tfm *tfm)
232{
233	void *ctx = crypto_tfm_ctx(tfm);
234
235	memzero_explicit(ctx, tfm->__crt_alg->cra_ctxsize);
236}
237
238static int mv_cesa_skcipher_cra_init(struct crypto_tfm *tfm)
239{
240	struct mv_cesa_ctx *ctx = crypto_tfm_ctx(tfm);
241
242	ctx->ops = &mv_cesa_skcipher_req_ops;
243
244	crypto_skcipher_set_reqsize(__crypto_skcipher_cast(tfm),
245				    sizeof(struct mv_cesa_skcipher_req));
246
247	return 0;
248}
249
250static int mv_cesa_aes_setkey(struct crypto_skcipher *cipher, const u8 *key,
251			      unsigned int len)
252{
253	struct crypto_tfm *tfm = crypto_skcipher_tfm(cipher);
254	struct mv_cesa_aes_ctx *ctx = crypto_tfm_ctx(tfm);
255	int remaining;
256	int offset;
257	int ret;
258	int i;
259
260	ret = crypto_aes_expand_key(&ctx->aes, key, len);
261	if (ret) {
262		crypto_skcipher_set_flags(cipher, CRYPTO_TFM_RES_BAD_KEY_LEN);
263		return ret;
264	}
265
266	remaining = (ctx->aes.key_length - 16) / 4;
267	offset = ctx->aes.key_length + 24 - remaining;
268	for (i = 0; i < remaining; i++)
269		ctx->aes.key_dec[4 + i] =
270			cpu_to_le32(ctx->aes.key_enc[offset + i]);
271
272	return 0;
273}
274
275static int mv_cesa_des_setkey(struct crypto_skcipher *cipher, const u8 *key,
276			      unsigned int len)
277{
278	struct crypto_tfm *tfm = crypto_skcipher_tfm(cipher);
279	struct mv_cesa_des_ctx *ctx = crypto_tfm_ctx(tfm);
280	u32 tmp[DES_EXPKEY_WORDS];
281	int ret;
282
283	if (len != DES_KEY_SIZE) {
284		crypto_skcipher_set_flags(cipher, CRYPTO_TFM_RES_BAD_KEY_LEN);
285		return -EINVAL;
286	}
287
288	ret = des_ekey(tmp, key);
289	if (!ret && (tfm->crt_flags & CRYPTO_TFM_REQ_WEAK_KEY)) {
290		tfm->crt_flags |= CRYPTO_TFM_RES_WEAK_KEY;
291		return -EINVAL;
292	}
293
294	memcpy(ctx->key, key, DES_KEY_SIZE);
295
296	return 0;
297}
298
299static int mv_cesa_des3_ede_setkey(struct crypto_skcipher *cipher,
300				   const u8 *key, unsigned int len)
301{
302	struct crypto_tfm *tfm = crypto_skcipher_tfm(cipher);
303	struct mv_cesa_des_ctx *ctx = crypto_tfm_ctx(tfm);
304
305	if (len != DES3_EDE_KEY_SIZE) {
306		crypto_skcipher_set_flags(cipher, CRYPTO_TFM_RES_BAD_KEY_LEN);
307		return -EINVAL;
308	}
309
310	memcpy(ctx->key, key, DES3_EDE_KEY_SIZE);
311
312	return 0;
313}
314
315static int mv_cesa_skcipher_dma_req_init(struct skcipher_request *req,
316					 const struct mv_cesa_op_ctx *op_templ)
317{
318	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
319	gfp_t flags = (req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP) ?
320		      GFP_KERNEL : GFP_ATOMIC;
321	struct mv_cesa_req *basereq = &creq->base;
322	struct mv_cesa_skcipher_dma_iter iter;
323	bool skip_ctx = false;
324	int ret;
325	unsigned int ivsize;
326
327	basereq->chain.first = NULL;
328	basereq->chain.last = NULL;
329
330	if (req->src != req->dst) {
331		ret = dma_map_sg(cesa_dev->dev, req->src, creq->src_nents,
332				 DMA_TO_DEVICE);
333		if (!ret)
334			return -ENOMEM;
335
336		ret = dma_map_sg(cesa_dev->dev, req->dst, creq->dst_nents,
337				 DMA_FROM_DEVICE);
338		if (!ret) {
339			ret = -ENOMEM;
340			goto err_unmap_src;
341		}
342	} else {
343		ret = dma_map_sg(cesa_dev->dev, req->src, creq->src_nents,
344				 DMA_BIDIRECTIONAL);
345		if (!ret)
346			return -ENOMEM;
347	}
348
349	mv_cesa_tdma_desc_iter_init(&basereq->chain);
350	mv_cesa_skcipher_req_iter_init(&iter, req);
351
352	do {
353		struct mv_cesa_op_ctx *op;
354
355		op = mv_cesa_dma_add_op(&basereq->chain, op_templ, skip_ctx, flags);
356		if (IS_ERR(op)) {
357			ret = PTR_ERR(op);
358			goto err_free_tdma;
359		}
360		skip_ctx = true;
361
362		mv_cesa_set_crypt_op_len(op, iter.base.op_len);
363
364		/* Add input transfers */
365		ret = mv_cesa_dma_add_op_transfers(&basereq->chain, &iter.base,
366						   &iter.src, flags);
367		if (ret)
368			goto err_free_tdma;
369
370		/* Add dummy desc to launch the crypto operation */
371		ret = mv_cesa_dma_add_dummy_launch(&basereq->chain, flags);
372		if (ret)
373			goto err_free_tdma;
374
375		/* Add output transfers */
376		ret = mv_cesa_dma_add_op_transfers(&basereq->chain, &iter.base,
377						   &iter.dst, flags);
378		if (ret)
379			goto err_free_tdma;
380
381	} while (mv_cesa_skcipher_req_iter_next_op(&iter));
382
383	/* Add output data for IV */
384	ivsize = crypto_skcipher_ivsize(crypto_skcipher_reqtfm(req));
385	ret = mv_cesa_dma_add_result_op(&basereq->chain, CESA_SA_CFG_SRAM_OFFSET,
386				    CESA_SA_DATA_SRAM_OFFSET,
387				    CESA_TDMA_SRC_IN_SRAM, flags);
388
389	if (ret)
390		goto err_free_tdma;
391
392	basereq->chain.last->flags |= CESA_TDMA_END_OF_REQ;
393
394	return 0;
395
396err_free_tdma:
397	mv_cesa_dma_cleanup(basereq);
398	if (req->dst != req->src)
399		dma_unmap_sg(cesa_dev->dev, req->dst, creq->dst_nents,
400			     DMA_FROM_DEVICE);
401
402err_unmap_src:
403	dma_unmap_sg(cesa_dev->dev, req->src, creq->src_nents,
404		     req->dst != req->src ? DMA_TO_DEVICE : DMA_BIDIRECTIONAL);
405
406	return ret;
407}
408
409static inline int
410mv_cesa_skcipher_std_req_init(struct skcipher_request *req,
411			      const struct mv_cesa_op_ctx *op_templ)
412{
413	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
414	struct mv_cesa_skcipher_std_req *sreq = &creq->std;
415	struct mv_cesa_req *basereq = &creq->base;
416
417	sreq->op = *op_templ;
418	sreq->skip_ctx = false;
419	basereq->chain.first = NULL;
420	basereq->chain.last = NULL;
421
422	return 0;
423}
424
425static int mv_cesa_skcipher_req_init(struct skcipher_request *req,
426				     struct mv_cesa_op_ctx *tmpl)
427{
428	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
429	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
430	unsigned int blksize = crypto_skcipher_blocksize(tfm);
431	int ret;
432
433	if (!IS_ALIGNED(req->cryptlen, blksize))
434		return -EINVAL;
435
436	creq->src_nents = sg_nents_for_len(req->src, req->cryptlen);
437	if (creq->src_nents < 0) {
438		dev_err(cesa_dev->dev, "Invalid number of src SG");
439		return creq->src_nents;
440	}
441	creq->dst_nents = sg_nents_for_len(req->dst, req->cryptlen);
442	if (creq->dst_nents < 0) {
443		dev_err(cesa_dev->dev, "Invalid number of dst SG");
444		return creq->dst_nents;
445	}
446
447	mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_OP_CRYPT_ONLY,
448			      CESA_SA_DESC_CFG_OP_MSK);
449
450	if (cesa_dev->caps->has_tdma)
451		ret = mv_cesa_skcipher_dma_req_init(req, tmpl);
452	else
453		ret = mv_cesa_skcipher_std_req_init(req, tmpl);
454
455	return ret;
456}
457
458static int mv_cesa_skcipher_queue_req(struct skcipher_request *req,
459				      struct mv_cesa_op_ctx *tmpl)
460{
461	int ret;
462	struct mv_cesa_skcipher_req *creq = skcipher_request_ctx(req);
463	struct mv_cesa_engine *engine;
464
465	ret = mv_cesa_skcipher_req_init(req, tmpl);
466	if (ret)
467		return ret;
468
469	engine = mv_cesa_select_engine(req->cryptlen);
470	mv_cesa_skcipher_prepare(&req->base, engine);
471
472	ret = mv_cesa_queue_req(&req->base, &creq->base);
473
474	if (mv_cesa_req_needs_cleanup(&req->base, ret))
475		mv_cesa_skcipher_cleanup(req);
476
477	return ret;
478}
479
480static int mv_cesa_des_op(struct skcipher_request *req,
481			  struct mv_cesa_op_ctx *tmpl)
482{
483	struct mv_cesa_des_ctx *ctx = crypto_tfm_ctx(req->base.tfm);
484
485	mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_CRYPTM_DES,
486			      CESA_SA_DESC_CFG_CRYPTM_MSK);
487
488	memcpy(tmpl->ctx.blkcipher.key, ctx->key, DES_KEY_SIZE);
489
490	return mv_cesa_skcipher_queue_req(req, tmpl);
491}
492
493static int mv_cesa_ecb_des_encrypt(struct skcipher_request *req)
494{
495	struct mv_cesa_op_ctx tmpl;
496
497	mv_cesa_set_op_cfg(&tmpl,
498			   CESA_SA_DESC_CFG_CRYPTCM_ECB |
499			   CESA_SA_DESC_CFG_DIR_ENC);
500
501	return mv_cesa_des_op(req, &tmpl);
502}
503
504static int mv_cesa_ecb_des_decrypt(struct skcipher_request *req)
505{
506	struct mv_cesa_op_ctx tmpl;
507
508	mv_cesa_set_op_cfg(&tmpl,
509			   CESA_SA_DESC_CFG_CRYPTCM_ECB |
510			   CESA_SA_DESC_CFG_DIR_DEC);
511
512	return mv_cesa_des_op(req, &tmpl);
513}
514
515struct skcipher_alg mv_cesa_ecb_des_alg = {
516	.setkey = mv_cesa_des_setkey,
517	.encrypt = mv_cesa_ecb_des_encrypt,
518	.decrypt = mv_cesa_ecb_des_decrypt,
519	.min_keysize = DES_KEY_SIZE,
520	.max_keysize = DES_KEY_SIZE,
521	.base = {
522		.cra_name = "ecb(des)",
523		.cra_driver_name = "mv-ecb-des",
524		.cra_priority = 300,
525		.cra_flags = CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
526		.cra_blocksize = DES_BLOCK_SIZE,
527		.cra_ctxsize = sizeof(struct mv_cesa_des_ctx),
528		.cra_alignmask = 0,
529		.cra_module = THIS_MODULE,
530		.cra_init = mv_cesa_skcipher_cra_init,
531		.cra_exit = mv_cesa_skcipher_cra_exit,
532	},
533};
534
535static int mv_cesa_cbc_des_op(struct skcipher_request *req,
536			      struct mv_cesa_op_ctx *tmpl)
537{
538	mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_CRYPTCM_CBC,
539			      CESA_SA_DESC_CFG_CRYPTCM_MSK);
540
541	memcpy(tmpl->ctx.blkcipher.iv, req->iv, DES_BLOCK_SIZE);
542
543	return mv_cesa_des_op(req, tmpl);
544}
545
546static int mv_cesa_cbc_des_encrypt(struct skcipher_request *req)
547{
548	struct mv_cesa_op_ctx tmpl;
549
550	mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_ENC);
551
552	return mv_cesa_cbc_des_op(req, &tmpl);
553}
554
555static int mv_cesa_cbc_des_decrypt(struct skcipher_request *req)
556{
557	struct mv_cesa_op_ctx tmpl;
558
559	mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_DEC);
560
561	return mv_cesa_cbc_des_op(req, &tmpl);
562}
563
564struct skcipher_alg mv_cesa_cbc_des_alg = {
565	.setkey = mv_cesa_des_setkey,
566	.encrypt = mv_cesa_cbc_des_encrypt,
567	.decrypt = mv_cesa_cbc_des_decrypt,
568	.min_keysize = DES_KEY_SIZE,
569	.max_keysize = DES_KEY_SIZE,
570	.ivsize = DES_BLOCK_SIZE,
571	.base = {
572		.cra_name = "cbc(des)",
573		.cra_driver_name = "mv-cbc-des",
574		.cra_priority = 300,
575		.cra_flags = CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
576		.cra_blocksize = DES_BLOCK_SIZE,
577		.cra_ctxsize = sizeof(struct mv_cesa_des_ctx),
578		.cra_alignmask = 0,
579		.cra_module = THIS_MODULE,
580		.cra_init = mv_cesa_skcipher_cra_init,
581		.cra_exit = mv_cesa_skcipher_cra_exit,
582	},
583};
584
585static int mv_cesa_des3_op(struct skcipher_request *req,
586			   struct mv_cesa_op_ctx *tmpl)
587{
588	struct mv_cesa_des3_ctx *ctx = crypto_tfm_ctx(req->base.tfm);
589
590	mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_CRYPTM_3DES,
591			      CESA_SA_DESC_CFG_CRYPTM_MSK);
592
593	memcpy(tmpl->ctx.blkcipher.key, ctx->key, DES3_EDE_KEY_SIZE);
594
595	return mv_cesa_skcipher_queue_req(req, tmpl);
596}
597
598static int mv_cesa_ecb_des3_ede_encrypt(struct skcipher_request *req)
599{
600	struct mv_cesa_op_ctx tmpl;
601
602	mv_cesa_set_op_cfg(&tmpl,
603			   CESA_SA_DESC_CFG_CRYPTCM_ECB |
604			   CESA_SA_DESC_CFG_3DES_EDE |
605			   CESA_SA_DESC_CFG_DIR_ENC);
606
607	return mv_cesa_des3_op(req, &tmpl);
608}
609
610static int mv_cesa_ecb_des3_ede_decrypt(struct skcipher_request *req)
611{
612	struct mv_cesa_op_ctx tmpl;
613
614	mv_cesa_set_op_cfg(&tmpl,
615			   CESA_SA_DESC_CFG_CRYPTCM_ECB |
616			   CESA_SA_DESC_CFG_3DES_EDE |
617			   CESA_SA_DESC_CFG_DIR_DEC);
618
619	return mv_cesa_des3_op(req, &tmpl);
620}
621
622struct skcipher_alg mv_cesa_ecb_des3_ede_alg = {
623	.setkey = mv_cesa_des3_ede_setkey,
624	.encrypt = mv_cesa_ecb_des3_ede_encrypt,
625	.decrypt = mv_cesa_ecb_des3_ede_decrypt,
626	.min_keysize = DES3_EDE_KEY_SIZE,
627	.max_keysize = DES3_EDE_KEY_SIZE,
628	.ivsize = DES3_EDE_BLOCK_SIZE,
629	.base = {
630		.cra_name = "ecb(des3_ede)",
631		.cra_driver_name = "mv-ecb-des3-ede",
632		.cra_priority = 300,
633		.cra_flags = CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
634		.cra_blocksize = DES3_EDE_BLOCK_SIZE,
635		.cra_ctxsize = sizeof(struct mv_cesa_des3_ctx),
636		.cra_alignmask = 0,
637		.cra_module = THIS_MODULE,
638		.cra_init = mv_cesa_skcipher_cra_init,
639		.cra_exit = mv_cesa_skcipher_cra_exit,
640	},
641};
642
643static int mv_cesa_cbc_des3_op(struct skcipher_request *req,
644			       struct mv_cesa_op_ctx *tmpl)
645{
646	memcpy(tmpl->ctx.blkcipher.iv, req->iv, DES3_EDE_BLOCK_SIZE);
647
648	return mv_cesa_des3_op(req, tmpl);
649}
650
651static int mv_cesa_cbc_des3_ede_encrypt(struct skcipher_request *req)
652{
653	struct mv_cesa_op_ctx tmpl;
654
655	mv_cesa_set_op_cfg(&tmpl,
656			   CESA_SA_DESC_CFG_CRYPTCM_CBC |
657			   CESA_SA_DESC_CFG_3DES_EDE |
658			   CESA_SA_DESC_CFG_DIR_ENC);
659
660	return mv_cesa_cbc_des3_op(req, &tmpl);
661}
662
663static int mv_cesa_cbc_des3_ede_decrypt(struct skcipher_request *req)
664{
665	struct mv_cesa_op_ctx tmpl;
666
667	mv_cesa_set_op_cfg(&tmpl,
668			   CESA_SA_DESC_CFG_CRYPTCM_CBC |
669			   CESA_SA_DESC_CFG_3DES_EDE |
670			   CESA_SA_DESC_CFG_DIR_DEC);
671
672	return mv_cesa_cbc_des3_op(req, &tmpl);
673}
674
675struct skcipher_alg mv_cesa_cbc_des3_ede_alg = {
676	.setkey = mv_cesa_des3_ede_setkey,
677	.encrypt = mv_cesa_cbc_des3_ede_encrypt,
678	.decrypt = mv_cesa_cbc_des3_ede_decrypt,
679	.min_keysize = DES3_EDE_KEY_SIZE,
680	.max_keysize = DES3_EDE_KEY_SIZE,
681	.ivsize = DES3_EDE_BLOCK_SIZE,
682	.base = {
683		.cra_name = "cbc(des3_ede)",
684		.cra_driver_name = "mv-cbc-des3-ede",
685		.cra_priority = 300,
686		.cra_flags = CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
687		.cra_blocksize = DES3_EDE_BLOCK_SIZE,
688		.cra_ctxsize = sizeof(struct mv_cesa_des3_ctx),
689		.cra_alignmask = 0,
690		.cra_module = THIS_MODULE,
691		.cra_init = mv_cesa_skcipher_cra_init,
692		.cra_exit = mv_cesa_skcipher_cra_exit,
693	},
694};
695
696static int mv_cesa_aes_op(struct skcipher_request *req,
697			  struct mv_cesa_op_ctx *tmpl)
698{
699	struct mv_cesa_aes_ctx *ctx = crypto_tfm_ctx(req->base.tfm);
700	int i;
701	u32 *key;
702	u32 cfg;
703
704	cfg = CESA_SA_DESC_CFG_CRYPTM_AES;
705
706	if (mv_cesa_get_op_cfg(tmpl) & CESA_SA_DESC_CFG_DIR_DEC)
707		key = ctx->aes.key_dec;
708	else
709		key = ctx->aes.key_enc;
710
711	for (i = 0; i < ctx->aes.key_length / sizeof(u32); i++)
712		tmpl->ctx.blkcipher.key[i] = cpu_to_le32(key[i]);
713
714	if (ctx->aes.key_length == 24)
715		cfg |= CESA_SA_DESC_CFG_AES_LEN_192;
716	else if (ctx->aes.key_length == 32)
717		cfg |= CESA_SA_DESC_CFG_AES_LEN_256;
718
719	mv_cesa_update_op_cfg(tmpl, cfg,
720			      CESA_SA_DESC_CFG_CRYPTM_MSK |
721			      CESA_SA_DESC_CFG_AES_LEN_MSK);
722
723	return mv_cesa_skcipher_queue_req(req, tmpl);
724}
725
726static int mv_cesa_ecb_aes_encrypt(struct skcipher_request *req)
727{
728	struct mv_cesa_op_ctx tmpl;
729
730	mv_cesa_set_op_cfg(&tmpl,
731			   CESA_SA_DESC_CFG_CRYPTCM_ECB |
732			   CESA_SA_DESC_CFG_DIR_ENC);
733
734	return mv_cesa_aes_op(req, &tmpl);
735}
736
737static int mv_cesa_ecb_aes_decrypt(struct skcipher_request *req)
738{
739	struct mv_cesa_op_ctx tmpl;
740
741	mv_cesa_set_op_cfg(&tmpl,
742			   CESA_SA_DESC_CFG_CRYPTCM_ECB |
743			   CESA_SA_DESC_CFG_DIR_DEC);
744
745	return mv_cesa_aes_op(req, &tmpl);
746}
747
748struct skcipher_alg mv_cesa_ecb_aes_alg = {
749	.setkey = mv_cesa_aes_setkey,
750	.encrypt = mv_cesa_ecb_aes_encrypt,
751	.decrypt = mv_cesa_ecb_aes_decrypt,
752	.min_keysize = AES_MIN_KEY_SIZE,
753	.max_keysize = AES_MAX_KEY_SIZE,
754	.base = {
755		.cra_name = "ecb(aes)",
756		.cra_driver_name = "mv-ecb-aes",
757		.cra_priority = 300,
758		.cra_flags = CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
759		.cra_blocksize = AES_BLOCK_SIZE,
760		.cra_ctxsize = sizeof(struct mv_cesa_aes_ctx),
761		.cra_alignmask = 0,
762		.cra_module = THIS_MODULE,
763		.cra_init = mv_cesa_skcipher_cra_init,
764		.cra_exit = mv_cesa_skcipher_cra_exit,
765	},
766};
767
768static int mv_cesa_cbc_aes_op(struct skcipher_request *req,
769			      struct mv_cesa_op_ctx *tmpl)
770{
771	mv_cesa_update_op_cfg(tmpl, CESA_SA_DESC_CFG_CRYPTCM_CBC,
772			      CESA_SA_DESC_CFG_CRYPTCM_MSK);
773	memcpy(tmpl->ctx.blkcipher.iv, req->iv, AES_BLOCK_SIZE);
774
775	return mv_cesa_aes_op(req, tmpl);
776}
777
778static int mv_cesa_cbc_aes_encrypt(struct skcipher_request *req)
779{
780	struct mv_cesa_op_ctx tmpl;
781
782	mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_ENC);
783
784	return mv_cesa_cbc_aes_op(req, &tmpl);
785}
786
787static int mv_cesa_cbc_aes_decrypt(struct skcipher_request *req)
788{
789	struct mv_cesa_op_ctx tmpl;
790
791	mv_cesa_set_op_cfg(&tmpl, CESA_SA_DESC_CFG_DIR_DEC);
792
793	return mv_cesa_cbc_aes_op(req, &tmpl);
794}
795
796struct skcipher_alg mv_cesa_cbc_aes_alg = {
797	.setkey = mv_cesa_aes_setkey,
798	.encrypt = mv_cesa_cbc_aes_encrypt,
799	.decrypt = mv_cesa_cbc_aes_decrypt,
800	.min_keysize = AES_MIN_KEY_SIZE,
801	.max_keysize = AES_MAX_KEY_SIZE,
802	.ivsize = AES_BLOCK_SIZE,
803	.base = {
804		.cra_name = "cbc(aes)",
805		.cra_driver_name = "mv-cbc-aes",
806		.cra_priority = 300,
807		.cra_flags = CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
808		.cra_blocksize = AES_BLOCK_SIZE,
809		.cra_ctxsize = sizeof(struct mv_cesa_aes_ctx),
810		.cra_alignmask = 0,
811		.cra_module = THIS_MODULE,
812		.cra_init = mv_cesa_skcipher_cra_init,
813		.cra_exit = mv_cesa_skcipher_cra_exit,
814	},
815};