crypto: ccp - CCP device driver and interface support
[linux-block.git] / include / linux / ccp.h
CommitLineData
63b94509
TL
1/*
2 * AMD Cryptographic Coprocessor (CCP) driver
3 *
4 * Copyright (C) 2013 Advanced Micro Devices, Inc.
5 *
6 * Author: Tom Lendacky <thomas.lendacky@amd.com>
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License version 2 as
10 * published by the Free Software Foundation.
11 */
12
13#ifndef __CPP_H__
14#define __CPP_H__
15
16#include <linux/scatterlist.h>
17#include <linux/workqueue.h>
18#include <linux/list.h>
19#include <crypto/aes.h>
20#include <crypto/sha.h>
21
22
23struct ccp_device;
24struct ccp_cmd;
25
26/**
27 * ccp_enqueue_cmd - queue an operation for processing by the CCP
28 *
29 * @cmd: ccp_cmd struct to be processed
30 *
31 * Refer to the ccp_cmd struct below for required fields.
32 *
33 * Queue a cmd to be processed by the CCP. If queueing the cmd
34 * would exceed the defined length of the cmd queue the cmd will
35 * only be queued if the CCP_CMD_MAY_BACKLOG flag is set and will
36 * result in a return code of -EBUSY.
37 *
38 * The callback routine specified in the ccp_cmd struct will be
39 * called to notify the caller of completion (if the cmd was not
40 * backlogged) or advancement out of the backlog. If the cmd has
41 * advanced out of the backlog the "err" value of the callback
42 * will be -EINPROGRESS. Any other "err" value during callback is
43 * the result of the operation.
44 *
45 * The cmd has been successfully queued if:
46 * the return code is -EINPROGRESS or
47 * the return code is -EBUSY and CCP_CMD_MAY_BACKLOG flag is set
48 */
49int ccp_enqueue_cmd(struct ccp_cmd *cmd);
50
51
52/***** AES engine *****/
53/**
54 * ccp_aes_type - AES key size
55 *
56 * @CCP_AES_TYPE_128: 128-bit key
57 * @CCP_AES_TYPE_192: 192-bit key
58 * @CCP_AES_TYPE_256: 256-bit key
59 */
60enum ccp_aes_type {
61 CCP_AES_TYPE_128 = 0,
62 CCP_AES_TYPE_192,
63 CCP_AES_TYPE_256,
64 CCP_AES_TYPE__LAST,
65};
66
67/**
68 * ccp_aes_mode - AES operation mode
69 *
70 * @CCP_AES_MODE_ECB: ECB mode
71 * @CCP_AES_MODE_CBC: CBC mode
72 * @CCP_AES_MODE_OFB: OFB mode
73 * @CCP_AES_MODE_CFB: CFB mode
74 * @CCP_AES_MODE_CTR: CTR mode
75 * @CCP_AES_MODE_CMAC: CMAC mode
76 */
77enum ccp_aes_mode {
78 CCP_AES_MODE_ECB = 0,
79 CCP_AES_MODE_CBC,
80 CCP_AES_MODE_OFB,
81 CCP_AES_MODE_CFB,
82 CCP_AES_MODE_CTR,
83 CCP_AES_MODE_CMAC,
84 CCP_AES_MODE__LAST,
85};
86
87/**
88 * ccp_aes_mode - AES operation mode
89 *
90 * @CCP_AES_ACTION_DECRYPT: AES decrypt operation
91 * @CCP_AES_ACTION_ENCRYPT: AES encrypt operation
92 */
93enum ccp_aes_action {
94 CCP_AES_ACTION_DECRYPT = 0,
95 CCP_AES_ACTION_ENCRYPT,
96 CCP_AES_ACTION__LAST,
97};
98
99/**
100 * struct ccp_aes_engine - CCP AES operation
101 * @type: AES operation key size
102 * @mode: AES operation mode
103 * @action: AES operation (decrypt/encrypt)
104 * @key: key to be used for this AES operation
105 * @key_len: length in bytes of key
106 * @iv: IV to be used for this AES operation
107 * @iv_len: length in bytes of iv
108 * @src: data to be used for this operation
109 * @dst: data produced by this operation
110 * @src_len: length in bytes of data used for this operation
111 * @cmac_final: indicates final operation when running in CMAC mode
112 * @cmac_key: K1/K2 key used in final CMAC operation
113 * @cmac_key_len: length in bytes of cmac_key
114 *
115 * Variables required to be set when calling ccp_enqueue_cmd():
116 * - type, mode, action, key, key_len, src, dst, src_len
117 * - iv, iv_len for any mode other than ECB
118 * - cmac_final for CMAC mode
119 * - cmac_key, cmac_key_len for CMAC mode if cmac_final is non-zero
120 *
121 * The iv variable is used as both input and output. On completion of the
122 * AES operation the new IV overwrites the old IV.
123 */
124struct ccp_aes_engine {
125 enum ccp_aes_type type;
126 enum ccp_aes_mode mode;
127 enum ccp_aes_action action;
128
129 struct scatterlist *key;
130 u32 key_len; /* In bytes */
131
132 struct scatterlist *iv;
133 u32 iv_len; /* In bytes */
134
135 struct scatterlist *src, *dst;
136 u32 src_len; /* In bytes */
137
138 u32 cmac_final; /* Indicates final cmac cmd */
139 struct scatterlist *cmac_key; /* K1/K2 cmac key required for
140 * final cmac cmd */
141 u32 cmac_key_len; /* In bytes */
142};
143
144/***** XTS-AES engine *****/
145/**
146 * ccp_xts_aes_unit_size - XTS unit size
147 *
148 * @CCP_XTS_AES_UNIT_SIZE_16: Unit size of 16 bytes
149 * @CCP_XTS_AES_UNIT_SIZE_512: Unit size of 512 bytes
150 * @CCP_XTS_AES_UNIT_SIZE_1024: Unit size of 1024 bytes
151 * @CCP_XTS_AES_UNIT_SIZE_2048: Unit size of 2048 bytes
152 * @CCP_XTS_AES_UNIT_SIZE_4096: Unit size of 4096 bytes
153 */
154enum ccp_xts_aes_unit_size {
155 CCP_XTS_AES_UNIT_SIZE_16 = 0,
156 CCP_XTS_AES_UNIT_SIZE_512,
157 CCP_XTS_AES_UNIT_SIZE_1024,
158 CCP_XTS_AES_UNIT_SIZE_2048,
159 CCP_XTS_AES_UNIT_SIZE_4096,
160 CCP_XTS_AES_UNIT_SIZE__LAST,
161};
162
163/**
164 * struct ccp_xts_aes_engine - CCP XTS AES operation
165 * @action: AES operation (decrypt/encrypt)
166 * @unit_size: unit size of the XTS operation
167 * @key: key to be used for this XTS AES operation
168 * @key_len: length in bytes of key
169 * @iv: IV to be used for this XTS AES operation
170 * @iv_len: length in bytes of iv
171 * @src: data to be used for this operation
172 * @dst: data produced by this operation
173 * @src_len: length in bytes of data used for this operation
174 * @final: indicates final XTS operation
175 *
176 * Variables required to be set when calling ccp_enqueue_cmd():
177 * - action, unit_size, key, key_len, iv, iv_len, src, dst, src_len, final
178 *
179 * The iv variable is used as both input and output. On completion of the
180 * AES operation the new IV overwrites the old IV.
181 */
182struct ccp_xts_aes_engine {
183 enum ccp_aes_action action;
184 enum ccp_xts_aes_unit_size unit_size;
185
186 struct scatterlist *key;
187 u32 key_len; /* In bytes */
188
189 struct scatterlist *iv;
190 u32 iv_len; /* In bytes */
191
192 struct scatterlist *src, *dst;
193 u32 src_len; /* In bytes */
194
195 u32 final;
196};
197
198/***** SHA engine *****/
199#define CCP_SHA_BLOCKSIZE SHA256_BLOCK_SIZE
200#define CCP_SHA_CTXSIZE SHA256_DIGEST_SIZE
201
202/**
203 * ccp_sha_type - type of SHA operation
204 *
205 * @CCP_SHA_TYPE_1: SHA-1 operation
206 * @CCP_SHA_TYPE_224: SHA-224 operation
207 * @CCP_SHA_TYPE_256: SHA-256 operation
208 */
209enum ccp_sha_type {
210 CCP_SHA_TYPE_1 = 1,
211 CCP_SHA_TYPE_224,
212 CCP_SHA_TYPE_256,
213 CCP_SHA_TYPE__LAST,
214};
215
216/**
217 * struct ccp_sha_engine - CCP SHA operation
218 * @type: Type of SHA operation
219 * @ctx: current hash value
220 * @ctx_len: length in bytes of hash value
221 * @src: data to be used for this operation
222 * @src_len: length in bytes of data used for this operation
223 * @final: indicates final SHA operation
224 * @msg_bits: total length of the message in bits used in final SHA operation
225 *
226 * Variables required to be set when calling ccp_enqueue_cmd():
227 * - type, ctx, ctx_len, src, src_len, final
228 * - msg_bits if final is non-zero
229 *
230 * The ctx variable is used as both input and output. On completion of the
231 * SHA operation the new hash value overwrites the old hash value.
232 */
233struct ccp_sha_engine {
234 enum ccp_sha_type type;
235
236 struct scatterlist *ctx;
237 u32 ctx_len; /* In bytes */
238
239 struct scatterlist *src;
240 u32 src_len; /* In bytes */
241
242 u32 final; /* Indicates final sha cmd */
243 u64 msg_bits; /* Message length in bits required for
244 * final sha cmd */
245};
246
247/***** RSA engine *****/
248/**
249 * struct ccp_rsa_engine - CCP RSA operation
250 * @key_size: length in bits of RSA key
251 * @exp: RSA exponent
252 * @exp_len: length in bytes of exponent
253 * @mod: RSA modulus
254 * @mod_len: length in bytes of modulus
255 * @src: data to be used for this operation
256 * @dst: data produced by this operation
257 * @src_len: length in bytes of data used for this operation
258 *
259 * Variables required to be set when calling ccp_enqueue_cmd():
260 * - key_size, exp, exp_len, mod, mod_len, src, dst, src_len
261 */
262struct ccp_rsa_engine {
263 u32 key_size; /* In bits */
264
265 struct scatterlist *exp;
266 u32 exp_len; /* In bytes */
267
268 struct scatterlist *mod;
269 u32 mod_len; /* In bytes */
270
271 struct scatterlist *src, *dst;
272 u32 src_len; /* In bytes */
273};
274
275/***** Passthru engine *****/
276/**
277 * ccp_passthru_bitwise - type of bitwise passthru operation
278 *
279 * @CCP_PASSTHRU_BITWISE_NOOP: no bitwise operation performed
280 * @CCP_PASSTHRU_BITWISE_AND: perform bitwise AND of src with mask
281 * @CCP_PASSTHRU_BITWISE_OR: perform bitwise OR of src with mask
282 * @CCP_PASSTHRU_BITWISE_XOR: perform bitwise XOR of src with mask
283 * @CCP_PASSTHRU_BITWISE_MASK: overwrite with mask
284 */
285enum ccp_passthru_bitwise {
286 CCP_PASSTHRU_BITWISE_NOOP = 0,
287 CCP_PASSTHRU_BITWISE_AND,
288 CCP_PASSTHRU_BITWISE_OR,
289 CCP_PASSTHRU_BITWISE_XOR,
290 CCP_PASSTHRU_BITWISE_MASK,
291 CCP_PASSTHRU_BITWISE__LAST,
292};
293
294/**
295 * ccp_passthru_byteswap - type of byteswap passthru operation
296 *
297 * @CCP_PASSTHRU_BYTESWAP_NOOP: no byte swapping performed
298 * @CCP_PASSTHRU_BYTESWAP_32BIT: swap bytes within 32-bit words
299 * @CCP_PASSTHRU_BYTESWAP_256BIT: swap bytes within 256-bit words
300 */
301enum ccp_passthru_byteswap {
302 CCP_PASSTHRU_BYTESWAP_NOOP = 0,
303 CCP_PASSTHRU_BYTESWAP_32BIT,
304 CCP_PASSTHRU_BYTESWAP_256BIT,
305 CCP_PASSTHRU_BYTESWAP__LAST,
306};
307
308/**
309 * struct ccp_passthru_engine - CCP pass-through operation
310 * @bit_mod: bitwise operation to perform
311 * @byte_swap: byteswap operation to perform
312 * @mask: mask to be applied to data
313 * @mask_len: length in bytes of mask
314 * @src: data to be used for this operation
315 * @dst: data produced by this operation
316 * @src_len: length in bytes of data used for this operation
317 * @final: indicate final pass-through operation
318 *
319 * Variables required to be set when calling ccp_enqueue_cmd():
320 * - bit_mod, byte_swap, src, dst, src_len
321 * - mask, mask_len if bit_mod is not CCP_PASSTHRU_BITWISE_NOOP
322 */
323struct ccp_passthru_engine {
324 enum ccp_passthru_bitwise bit_mod;
325 enum ccp_passthru_byteswap byte_swap;
326
327 struct scatterlist *mask;
328 u32 mask_len; /* In bytes */
329
330 struct scatterlist *src, *dst;
331 u32 src_len; /* In bytes */
332
333 u32 final;
334};
335
336/***** ECC engine *****/
337#define CCP_ECC_MODULUS_BYTES 48 /* 384-bits */
338#define CCP_ECC_MAX_OPERANDS 6
339#define CCP_ECC_MAX_OUTPUTS 3
340
341/**
342 * ccp_ecc_function - type of ECC function
343 *
344 * @CCP_ECC_FUNCTION_MMUL_384BIT: 384-bit modular multiplication
345 * @CCP_ECC_FUNCTION_MADD_384BIT: 384-bit modular addition
346 * @CCP_ECC_FUNCTION_MINV_384BIT: 384-bit multiplicative inverse
347 * @CCP_ECC_FUNCTION_PADD_384BIT: 384-bit point addition
348 * @CCP_ECC_FUNCTION_PMUL_384BIT: 384-bit point multiplication
349 * @CCP_ECC_FUNCTION_PDBL_384BIT: 384-bit point doubling
350 */
351enum ccp_ecc_function {
352 CCP_ECC_FUNCTION_MMUL_384BIT = 0,
353 CCP_ECC_FUNCTION_MADD_384BIT,
354 CCP_ECC_FUNCTION_MINV_384BIT,
355 CCP_ECC_FUNCTION_PADD_384BIT,
356 CCP_ECC_FUNCTION_PMUL_384BIT,
357 CCP_ECC_FUNCTION_PDBL_384BIT,
358};
359
360/**
361 * struct ccp_ecc_modular_math - CCP ECC modular math parameters
362 * @operand_1: first operand for the modular math operation
363 * @operand_1_len: length of the first operand
364 * @operand_2: second operand for the modular math operation
365 * (not used for CCP_ECC_FUNCTION_MINV_384BIT)
366 * @operand_2_len: length of the second operand
367 * (not used for CCP_ECC_FUNCTION_MINV_384BIT)
368 * @result: result of the modular math operation
369 * @result_len: length of the supplied result buffer
370 */
371struct ccp_ecc_modular_math {
372 struct scatterlist *operand_1;
373 unsigned int operand_1_len; /* In bytes */
374
375 struct scatterlist *operand_2;
376 unsigned int operand_2_len; /* In bytes */
377
378 struct scatterlist *result;
379 unsigned int result_len; /* In bytes */
380};
381
382/**
383 * struct ccp_ecc_point - CCP ECC point definition
384 * @x: the x coordinate of the ECC point
385 * @x_len: the length of the x coordinate
386 * @y: the y coordinate of the ECC point
387 * @y_len: the length of the y coordinate
388 */
389struct ccp_ecc_point {
390 struct scatterlist *x;
391 unsigned int x_len; /* In bytes */
392
393 struct scatterlist *y;
394 unsigned int y_len; /* In bytes */
395};
396
397/**
398 * struct ccp_ecc_point_math - CCP ECC point math parameters
399 * @point_1: the first point of the ECC point math operation
400 * @point_2: the second point of the ECC point math operation
401 * (only used for CCP_ECC_FUNCTION_PADD_384BIT)
402 * @domain_a: the a parameter of the ECC curve
403 * @domain_a_len: the length of the a parameter
404 * @scalar: the scalar parameter for the point match operation
405 * (only used for CCP_ECC_FUNCTION_PMUL_384BIT)
406 * @scalar_len: the length of the scalar parameter
407 * (only used for CCP_ECC_FUNCTION_PMUL_384BIT)
408 * @result: the point resulting from the point math operation
409 */
410struct ccp_ecc_point_math {
411 struct ccp_ecc_point point_1;
412 struct ccp_ecc_point point_2;
413
414 struct scatterlist *domain_a;
415 unsigned int domain_a_len; /* In bytes */
416
417 struct scatterlist *scalar;
418 unsigned int scalar_len; /* In bytes */
419
420 struct ccp_ecc_point result;
421};
422
423/**
424 * struct ccp_ecc_engine - CCP ECC operation
425 * @function: ECC function to perform
426 * @mod: ECC modulus
427 * @mod_len: length in bytes of modulus
428 * @mm: module math parameters
429 * @pm: point math parameters
430 * @ecc_result: result of the ECC operation
431 *
432 * Variables required to be set when calling ccp_enqueue_cmd():
433 * - function, mod, mod_len
434 * - operand, operand_len, operand_count, output, output_len, output_count
435 * - ecc_result
436 */
437struct ccp_ecc_engine {
438 enum ccp_ecc_function function;
439
440 struct scatterlist *mod;
441 u32 mod_len; /* In bytes */
442
443 union {
444 struct ccp_ecc_modular_math mm;
445 struct ccp_ecc_point_math pm;
446 } u;
447
448 u16 ecc_result;
449};
450
451
452/**
453 * ccp_engine - CCP operation identifiers
454 *
455 * @CCP_ENGINE_AES: AES operation
456 * @CCP_ENGINE_XTS_AES: 128-bit XTS AES operation
457 * @CCP_ENGINE_RSVD1: unused
458 * @CCP_ENGINE_SHA: SHA operation
459 * @CCP_ENGINE_RSA: RSA operation
460 * @CCP_ENGINE_PASSTHRU: pass-through operation
461 * @CCP_ENGINE_ZLIB_DECOMPRESS: unused
462 * @CCP_ENGINE_ECC: ECC operation
463 */
464enum ccp_engine {
465 CCP_ENGINE_AES = 0,
466 CCP_ENGINE_XTS_AES_128,
467 CCP_ENGINE_RSVD1,
468 CCP_ENGINE_SHA,
469 CCP_ENGINE_RSA,
470 CCP_ENGINE_PASSTHRU,
471 CCP_ENGINE_ZLIB_DECOMPRESS,
472 CCP_ENGINE_ECC,
473 CCP_ENGINE__LAST,
474};
475
476/* Flag values for flags member of ccp_cmd */
477#define CCP_CMD_MAY_BACKLOG 0x00000001
478
479/**
480 * struct ccp_cmd - CPP operation request
481 * @entry: list element (ccp driver use only)
482 * @work: work element used for callbacks (ccp driver use only)
483 * @ccp: CCP device to be run on (ccp driver use only)
484 * @ret: operation return code (ccp driver use only)
485 * @flags: cmd processing flags
486 * @engine: CCP operation to perform
487 * @engine_error: CCP engine return code
488 * @u: engine specific structures, refer to specific engine struct below
489 * @callback: operation completion callback function
490 * @data: parameter value to be supplied to the callback function
491 *
492 * Variables required to be set when calling ccp_enqueue_cmd():
493 * - engine, callback
494 * - See the operation structures below for what is required for each
495 * operation.
496 */
497struct ccp_cmd {
498 /* The list_head, work_struct, ccp and ret variables are for use
499 * by the CCP driver only.
500 */
501 struct list_head entry;
502 struct work_struct work;
503 struct ccp_device *ccp;
504 int ret;
505
506 u32 flags;
507
508 enum ccp_engine engine;
509 u32 engine_error;
510
511 union {
512 struct ccp_aes_engine aes;
513 struct ccp_xts_aes_engine xts;
514 struct ccp_sha_engine sha;
515 struct ccp_rsa_engine rsa;
516 struct ccp_passthru_engine passthru;
517 struct ccp_ecc_engine ecc;
518 } u;
519
520 /* Completion callback support */
521 void (*callback)(void *data, int err);
522 void *data;
523};
524
525#endif