1 /* SPDX-License-Identifier: MIT */
3 * Copyright (C) 2017 Google, Inc.
4 * Copyright _ 2017-2019, Intel Corporation.
7 * Sean Paul <seanpaul@chromium.org>
8 * Ramalingam C <ramalingam.c@intel.com>
11 #include <linux/component.h>
12 #include <linux/i2c.h>
13 #include <linux/random.h>
15 #include <drm/display/drm_hdcp_helper.h>
16 #include <drm/i915_component.h>
20 #include "intel_connector.h"
22 #include "intel_display_power.h"
23 #include "intel_display_power_well.h"
24 #include "intel_display_types.h"
25 #include "intel_hdcp.h"
26 #include "intel_pcode.h"
28 #define KEY_LOAD_TRIES 5
29 #define HDCP2_LC_RETRY_CNT 3
31 static int intel_conn_to_vcpi(struct intel_connector *connector)
33 /* For HDMI this is forced to be 0x0. For DP SST also this is 0x0. */
34 return connector->port ? connector->port->vcpi.vcpi : 0;
38 * intel_hdcp_required_content_stream selects the most highest common possible HDCP
39 * content_type for all streams in DP MST topology because security f/w doesn't
40 * have any provision to mark content_type for each stream separately, it marks
41 * all available streams with the content_type proivided at the time of port
42 * authentication. This may prohibit the userspace to use type1 content on
43 * HDCP 2.2 capable sink because of other sink are not capable of HDCP 2.2 in
44 * DP MST topology. Though it is not compulsory, security fw should change its
45 * policy to mark different content_types for different streams.
48 intel_hdcp_required_content_stream(struct intel_digital_port *dig_port)
50 struct drm_connector_list_iter conn_iter;
51 struct intel_digital_port *conn_dig_port;
52 struct intel_connector *connector;
53 struct drm_i915_private *i915 = to_i915(dig_port->base.base.dev);
54 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
55 bool enforce_type0 = false;
60 if (dig_port->hdcp_auth_status)
63 drm_connector_list_iter_begin(&i915->drm, &conn_iter);
64 for_each_intel_connector_iter(connector, &conn_iter) {
65 if (connector->base.status == connector_status_disconnected)
68 if (!intel_encoder_is_mst(intel_attached_encoder(connector)))
71 conn_dig_port = intel_attached_dig_port(connector);
72 if (conn_dig_port != dig_port)
75 if (!enforce_type0 && !dig_port->hdcp_mst_type1_capable)
78 data->streams[data->k].stream_id = intel_conn_to_vcpi(connector);
81 /* if there is only one active stream */
82 if (dig_port->dp.active_mst_links <= 1)
85 drm_connector_list_iter_end(&conn_iter);
87 if (drm_WARN_ON(&i915->drm, data->k > INTEL_NUM_PIPES(i915) || data->k == 0))
91 * Apply common protection level across all streams in DP MST Topology.
92 * Use highest supported content type for all streams in DP MST Topology.
94 for (k = 0; k < data->k; k++)
95 data->streams[k].stream_type =
96 enforce_type0 ? DRM_MODE_HDCP_CONTENT_TYPE0 : DRM_MODE_HDCP_CONTENT_TYPE1;
101 static int intel_hdcp_prepare_streams(struct intel_connector *connector)
103 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
104 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
105 struct intel_hdcp *hdcp = &connector->hdcp;
108 if (!intel_encoder_is_mst(intel_attached_encoder(connector))) {
110 data->streams[0].stream_type = hdcp->content_type;
112 ret = intel_hdcp_required_content_stream(dig_port);
121 bool intel_hdcp_is_ksv_valid(u8 *ksv)
124 /* KSV has 20 1's and 20 0's */
125 for (i = 0; i < DRM_HDCP_KSV_LEN; i++)
126 ones += hweight8(ksv[i]);
134 int intel_hdcp_read_valid_bksv(struct intel_digital_port *dig_port,
135 const struct intel_hdcp_shim *shim, u8 *bksv)
137 struct drm_i915_private *i915 = to_i915(dig_port->base.base.dev);
138 int ret, i, tries = 2;
140 /* HDCP spec states that we must retry the bksv if it is invalid */
141 for (i = 0; i < tries; i++) {
142 ret = shim->read_bksv(dig_port, bksv);
145 if (intel_hdcp_is_ksv_valid(bksv))
149 drm_dbg_kms(&i915->drm, "Bksv is invalid\n");
156 /* Is HDCP1.4 capable on Platform and Sink */
157 bool intel_hdcp_capable(struct intel_connector *connector)
159 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
160 const struct intel_hdcp_shim *shim = connector->hdcp.shim;
161 bool capable = false;
167 if (shim->hdcp_capable) {
168 shim->hdcp_capable(dig_port, &capable);
170 if (!intel_hdcp_read_valid_bksv(dig_port, shim, bksv))
177 /* Is HDCP2.2 capable on Platform and Sink */
178 bool intel_hdcp2_capable(struct intel_connector *connector)
180 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
181 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
182 struct intel_hdcp *hdcp = &connector->hdcp;
183 bool capable = false;
185 /* I915 support for HDCP2.2 */
186 if (!hdcp->hdcp2_supported)
189 /* MEI interface is solid */
190 mutex_lock(&dev_priv->hdcp_comp_mutex);
191 if (!dev_priv->hdcp_comp_added || !dev_priv->hdcp_master) {
192 mutex_unlock(&dev_priv->hdcp_comp_mutex);
195 mutex_unlock(&dev_priv->hdcp_comp_mutex);
197 /* Sink's capability for HDCP2.2 */
198 hdcp->shim->hdcp_2_2_capable(dig_port, &capable);
203 static bool intel_hdcp_in_use(struct drm_i915_private *dev_priv,
204 enum transcoder cpu_transcoder, enum port port)
206 return intel_de_read(dev_priv,
207 HDCP_STATUS(dev_priv, cpu_transcoder, port)) &
211 static bool intel_hdcp2_in_use(struct drm_i915_private *dev_priv,
212 enum transcoder cpu_transcoder, enum port port)
214 return intel_de_read(dev_priv,
215 HDCP2_STATUS(dev_priv, cpu_transcoder, port)) &
216 LINK_ENCRYPTION_STATUS;
219 static int intel_hdcp_poll_ksv_fifo(struct intel_digital_port *dig_port,
220 const struct intel_hdcp_shim *shim)
225 /* Poll for ksv list ready (spec says max time allowed is 5s) */
226 ret = __wait_for(read_ret = shim->read_ksv_ready(dig_port,
228 read_ret || ksv_ready, 5 * 1000 * 1000, 1000,
240 static bool hdcp_key_loadable(struct drm_i915_private *dev_priv)
242 enum i915_power_well_id id;
243 intel_wakeref_t wakeref;
244 bool enabled = false;
247 * On HSW and BDW, Display HW loads the Key as soon as Display resumes.
248 * On all BXT+, SW can load the keys only when the PW#1 is turned on.
250 if (IS_HASWELL(dev_priv) || IS_BROADWELL(dev_priv))
251 id = HSW_DISP_PW_GLOBAL;
255 /* PG1 (power well #1) needs to be enabled */
256 with_intel_runtime_pm(&dev_priv->runtime_pm, wakeref)
257 enabled = intel_display_power_well_is_enabled(dev_priv, id);
260 * Another req for hdcp key loadability is enabled state of pll for
261 * cdclk. Without active crtc we wont land here. So we are assuming that
262 * cdclk is already on.
268 static void intel_hdcp_clear_keys(struct drm_i915_private *dev_priv)
270 intel_de_write(dev_priv, HDCP_KEY_CONF, HDCP_CLEAR_KEYS_TRIGGER);
271 intel_de_write(dev_priv, HDCP_KEY_STATUS,
272 HDCP_KEY_LOAD_DONE | HDCP_KEY_LOAD_STATUS | HDCP_FUSE_IN_PROGRESS | HDCP_FUSE_ERROR | HDCP_FUSE_DONE);
275 static int intel_hdcp_load_keys(struct drm_i915_private *dev_priv)
280 val = intel_de_read(dev_priv, HDCP_KEY_STATUS);
281 if ((val & HDCP_KEY_LOAD_DONE) && (val & HDCP_KEY_LOAD_STATUS))
285 * On HSW and BDW HW loads the HDCP1.4 Key when Display comes
286 * out of reset. So if Key is not already loaded, its an error state.
288 if (IS_HASWELL(dev_priv) || IS_BROADWELL(dev_priv))
289 if (!(intel_de_read(dev_priv, HDCP_KEY_STATUS) & HDCP_KEY_LOAD_DONE))
293 * Initiate loading the HDCP key from fuses.
295 * BXT+ platforms, HDCP key needs to be loaded by SW. Only display
296 * version 9 platforms (minus BXT) differ in the key load trigger
297 * process from other platforms. These platforms use the GT Driver
300 if (DISPLAY_VER(dev_priv) == 9 && !IS_BROXTON(dev_priv)) {
301 ret = snb_pcode_write(&dev_priv->uncore, SKL_PCODE_LOAD_HDCP_KEYS, 1);
303 drm_err(&dev_priv->drm,
304 "Failed to initiate HDCP key load (%d)\n",
309 intel_de_write(dev_priv, HDCP_KEY_CONF, HDCP_KEY_LOAD_TRIGGER);
312 /* Wait for the keys to load (500us) */
313 ret = __intel_wait_for_register(&dev_priv->uncore, HDCP_KEY_STATUS,
314 HDCP_KEY_LOAD_DONE, HDCP_KEY_LOAD_DONE,
318 else if (!(val & HDCP_KEY_LOAD_STATUS))
321 /* Send Aksv over to PCH display for use in authentication */
322 intel_de_write(dev_priv, HDCP_KEY_CONF, HDCP_AKSV_SEND_TRIGGER);
327 /* Returns updated SHA-1 index */
328 static int intel_write_sha_text(struct drm_i915_private *dev_priv, u32 sha_text)
330 intel_de_write(dev_priv, HDCP_SHA_TEXT, sha_text);
331 if (intel_de_wait_for_set(dev_priv, HDCP_REP_CTL, HDCP_SHA1_READY, 1)) {
332 drm_err(&dev_priv->drm, "Timed out waiting for SHA1 ready\n");
339 u32 intel_hdcp_get_repeater_ctl(struct drm_i915_private *dev_priv,
340 enum transcoder cpu_transcoder, enum port port)
342 if (DISPLAY_VER(dev_priv) >= 12) {
343 switch (cpu_transcoder) {
345 return HDCP_TRANSA_REP_PRESENT |
348 return HDCP_TRANSB_REP_PRESENT |
351 return HDCP_TRANSC_REP_PRESENT |
354 return HDCP_TRANSD_REP_PRESENT |
357 drm_err(&dev_priv->drm, "Unknown transcoder %d\n",
365 return HDCP_DDIA_REP_PRESENT | HDCP_DDIA_SHA1_M0;
367 return HDCP_DDIB_REP_PRESENT | HDCP_DDIB_SHA1_M0;
369 return HDCP_DDIC_REP_PRESENT | HDCP_DDIC_SHA1_M0;
371 return HDCP_DDID_REP_PRESENT | HDCP_DDID_SHA1_M0;
373 return HDCP_DDIE_REP_PRESENT | HDCP_DDIE_SHA1_M0;
375 drm_err(&dev_priv->drm, "Unknown port %d\n", port);
381 int intel_hdcp_validate_v_prime(struct intel_connector *connector,
382 const struct intel_hdcp_shim *shim,
383 u8 *ksv_fifo, u8 num_downstream, u8 *bstatus)
385 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
386 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
387 enum transcoder cpu_transcoder = connector->hdcp.cpu_transcoder;
388 enum port port = dig_port->base.port;
389 u32 vprime, sha_text, sha_leftovers, rep_ctl;
390 int ret, i, j, sha_idx;
392 /* Process V' values from the receiver */
393 for (i = 0; i < DRM_HDCP_V_PRIME_NUM_PARTS; i++) {
394 ret = shim->read_v_prime_part(dig_port, i, &vprime);
397 intel_de_write(dev_priv, HDCP_SHA_V_PRIME(i), vprime);
401 * We need to write the concatenation of all device KSVs, BINFO (DP) ||
402 * BSTATUS (HDMI), and M0 (which is added via HDCP_REP_CTL). This byte
403 * stream is written via the HDCP_SHA_TEXT register in 32-bit
404 * increments. Every 64 bytes, we need to write HDCP_REP_CTL again. This
405 * index will keep track of our progress through the 64 bytes as well as
406 * helping us work the 40-bit KSVs through our 32-bit register.
408 * NOTE: data passed via HDCP_SHA_TEXT should be big-endian
413 rep_ctl = intel_hdcp_get_repeater_ctl(dev_priv, cpu_transcoder, port);
414 intel_de_write(dev_priv, HDCP_REP_CTL, rep_ctl | HDCP_SHA1_TEXT_32);
415 for (i = 0; i < num_downstream; i++) {
416 unsigned int sha_empty;
417 u8 *ksv = &ksv_fifo[i * DRM_HDCP_KSV_LEN];
419 /* Fill up the empty slots in sha_text and write it out */
420 sha_empty = sizeof(sha_text) - sha_leftovers;
421 for (j = 0; j < sha_empty; j++) {
422 u8 off = ((sizeof(sha_text) - j - 1 - sha_leftovers) * 8);
423 sha_text |= ksv[j] << off;
426 ret = intel_write_sha_text(dev_priv, sha_text);
430 /* Programming guide writes this every 64 bytes */
431 sha_idx += sizeof(sha_text);
433 intel_de_write(dev_priv, HDCP_REP_CTL,
434 rep_ctl | HDCP_SHA1_TEXT_32);
436 /* Store the leftover bytes from the ksv in sha_text */
437 sha_leftovers = DRM_HDCP_KSV_LEN - sha_empty;
439 for (j = 0; j < sha_leftovers; j++)
440 sha_text |= ksv[sha_empty + j] <<
441 ((sizeof(sha_text) - j - 1) * 8);
444 * If we still have room in sha_text for more data, continue.
445 * Otherwise, write it out immediately.
447 if (sizeof(sha_text) > sha_leftovers)
450 ret = intel_write_sha_text(dev_priv, sha_text);
455 sha_idx += sizeof(sha_text);
459 * We need to write BINFO/BSTATUS, and M0 now. Depending on how many
460 * bytes are leftover from the last ksv, we might be able to fit them
461 * all in sha_text (first 2 cases), or we might need to split them up
462 * into 2 writes (last 2 cases).
464 if (sha_leftovers == 0) {
465 /* Write 16 bits of text, 16 bits of M0 */
466 intel_de_write(dev_priv, HDCP_REP_CTL,
467 rep_ctl | HDCP_SHA1_TEXT_16);
468 ret = intel_write_sha_text(dev_priv,
469 bstatus[0] << 8 | bstatus[1]);
472 sha_idx += sizeof(sha_text);
474 /* Write 32 bits of M0 */
475 intel_de_write(dev_priv, HDCP_REP_CTL,
476 rep_ctl | HDCP_SHA1_TEXT_0);
477 ret = intel_write_sha_text(dev_priv, 0);
480 sha_idx += sizeof(sha_text);
482 /* Write 16 bits of M0 */
483 intel_de_write(dev_priv, HDCP_REP_CTL,
484 rep_ctl | HDCP_SHA1_TEXT_16);
485 ret = intel_write_sha_text(dev_priv, 0);
488 sha_idx += sizeof(sha_text);
490 } else if (sha_leftovers == 1) {
491 /* Write 24 bits of text, 8 bits of M0 */
492 intel_de_write(dev_priv, HDCP_REP_CTL,
493 rep_ctl | HDCP_SHA1_TEXT_24);
494 sha_text |= bstatus[0] << 16 | bstatus[1] << 8;
495 /* Only 24-bits of data, must be in the LSB */
496 sha_text = (sha_text & 0xffffff00) >> 8;
497 ret = intel_write_sha_text(dev_priv, sha_text);
500 sha_idx += sizeof(sha_text);
502 /* Write 32 bits of M0 */
503 intel_de_write(dev_priv, HDCP_REP_CTL,
504 rep_ctl | HDCP_SHA1_TEXT_0);
505 ret = intel_write_sha_text(dev_priv, 0);
508 sha_idx += sizeof(sha_text);
510 /* Write 24 bits of M0 */
511 intel_de_write(dev_priv, HDCP_REP_CTL,
512 rep_ctl | HDCP_SHA1_TEXT_8);
513 ret = intel_write_sha_text(dev_priv, 0);
516 sha_idx += sizeof(sha_text);
518 } else if (sha_leftovers == 2) {
519 /* Write 32 bits of text */
520 intel_de_write(dev_priv, HDCP_REP_CTL,
521 rep_ctl | HDCP_SHA1_TEXT_32);
522 sha_text |= bstatus[0] << 8 | bstatus[1];
523 ret = intel_write_sha_text(dev_priv, sha_text);
526 sha_idx += sizeof(sha_text);
528 /* Write 64 bits of M0 */
529 intel_de_write(dev_priv, HDCP_REP_CTL,
530 rep_ctl | HDCP_SHA1_TEXT_0);
531 for (i = 0; i < 2; i++) {
532 ret = intel_write_sha_text(dev_priv, 0);
535 sha_idx += sizeof(sha_text);
539 * Terminate the SHA-1 stream by hand. For the other leftover
540 * cases this is appended by the hardware.
542 intel_de_write(dev_priv, HDCP_REP_CTL,
543 rep_ctl | HDCP_SHA1_TEXT_32);
544 sha_text = DRM_HDCP_SHA1_TERMINATOR << 24;
545 ret = intel_write_sha_text(dev_priv, sha_text);
548 sha_idx += sizeof(sha_text);
549 } else if (sha_leftovers == 3) {
550 /* Write 32 bits of text (filled from LSB) */
551 intel_de_write(dev_priv, HDCP_REP_CTL,
552 rep_ctl | HDCP_SHA1_TEXT_32);
553 sha_text |= bstatus[0];
554 ret = intel_write_sha_text(dev_priv, sha_text);
557 sha_idx += sizeof(sha_text);
559 /* Write 8 bits of text (filled from LSB), 24 bits of M0 */
560 intel_de_write(dev_priv, HDCP_REP_CTL,
561 rep_ctl | HDCP_SHA1_TEXT_8);
562 ret = intel_write_sha_text(dev_priv, bstatus[1]);
565 sha_idx += sizeof(sha_text);
567 /* Write 32 bits of M0 */
568 intel_de_write(dev_priv, HDCP_REP_CTL,
569 rep_ctl | HDCP_SHA1_TEXT_0);
570 ret = intel_write_sha_text(dev_priv, 0);
573 sha_idx += sizeof(sha_text);
575 /* Write 8 bits of M0 */
576 intel_de_write(dev_priv, HDCP_REP_CTL,
577 rep_ctl | HDCP_SHA1_TEXT_24);
578 ret = intel_write_sha_text(dev_priv, 0);
581 sha_idx += sizeof(sha_text);
583 drm_dbg_kms(&dev_priv->drm, "Invalid number of leftovers %d\n",
588 intel_de_write(dev_priv, HDCP_REP_CTL, rep_ctl | HDCP_SHA1_TEXT_32);
589 /* Fill up to 64-4 bytes with zeros (leave the last write for length) */
590 while ((sha_idx % 64) < (64 - sizeof(sha_text))) {
591 ret = intel_write_sha_text(dev_priv, 0);
594 sha_idx += sizeof(sha_text);
598 * Last write gets the length of the concatenation in bits. That is:
599 * - 5 bytes per device
600 * - 10 bytes for BINFO/BSTATUS(2), M0(8)
602 sha_text = (num_downstream * 5 + 10) * 8;
603 ret = intel_write_sha_text(dev_priv, sha_text);
607 /* Tell the HW we're done with the hash and wait for it to ACK */
608 intel_de_write(dev_priv, HDCP_REP_CTL,
609 rep_ctl | HDCP_SHA1_COMPLETE_HASH);
610 if (intel_de_wait_for_set(dev_priv, HDCP_REP_CTL,
611 HDCP_SHA1_COMPLETE, 1)) {
612 drm_err(&dev_priv->drm, "Timed out waiting for SHA1 complete\n");
615 if (!(intel_de_read(dev_priv, HDCP_REP_CTL) & HDCP_SHA1_V_MATCH)) {
616 drm_dbg_kms(&dev_priv->drm, "SHA-1 mismatch, HDCP failed\n");
623 /* Implements Part 2 of the HDCP authorization procedure */
625 int intel_hdcp_auth_downstream(struct intel_connector *connector)
627 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
628 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
629 const struct intel_hdcp_shim *shim = connector->hdcp.shim;
630 u8 bstatus[2], num_downstream, *ksv_fifo;
631 int ret, i, tries = 3;
633 ret = intel_hdcp_poll_ksv_fifo(dig_port, shim);
635 drm_dbg_kms(&dev_priv->drm,
636 "KSV list failed to become ready (%d)\n", ret);
640 ret = shim->read_bstatus(dig_port, bstatus);
644 if (DRM_HDCP_MAX_DEVICE_EXCEEDED(bstatus[0]) ||
645 DRM_HDCP_MAX_CASCADE_EXCEEDED(bstatus[1])) {
646 drm_dbg_kms(&dev_priv->drm, "Max Topology Limit Exceeded\n");
651 * When repeater reports 0 device count, HDCP1.4 spec allows disabling
652 * the HDCP encryption. That implies that repeater can't have its own
653 * display. As there is no consumption of encrypted content in the
654 * repeater with 0 downstream devices, we are failing the
657 num_downstream = DRM_HDCP_NUM_DOWNSTREAM(bstatus[0]);
658 if (num_downstream == 0) {
659 drm_dbg_kms(&dev_priv->drm,
660 "Repeater with zero downstream devices\n");
664 ksv_fifo = kcalloc(DRM_HDCP_KSV_LEN, num_downstream, GFP_KERNEL);
666 drm_dbg_kms(&dev_priv->drm, "Out of mem: ksv_fifo\n");
670 ret = shim->read_ksv_fifo(dig_port, num_downstream, ksv_fifo);
674 if (drm_hdcp_check_ksvs_revoked(&dev_priv->drm, ksv_fifo,
675 num_downstream) > 0) {
676 drm_err(&dev_priv->drm, "Revoked Ksv(s) in ksv_fifo\n");
682 * When V prime mismatches, DP Spec mandates re-read of
683 * V prime atleast twice.
685 for (i = 0; i < tries; i++) {
686 ret = intel_hdcp_validate_v_prime(connector, shim,
687 ksv_fifo, num_downstream,
694 drm_dbg_kms(&dev_priv->drm,
695 "V Prime validation failed.(%d)\n", ret);
699 drm_dbg_kms(&dev_priv->drm, "HDCP is enabled (%d downstream devices)\n",
707 /* Implements Part 1 of the HDCP authorization procedure */
708 static int intel_hdcp_auth(struct intel_connector *connector)
710 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
711 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
712 struct intel_hdcp *hdcp = &connector->hdcp;
713 const struct intel_hdcp_shim *shim = hdcp->shim;
714 enum transcoder cpu_transcoder = connector->hdcp.cpu_transcoder;
715 enum port port = dig_port->base.port;
716 unsigned long r0_prime_gen_start;
717 int ret, i, tries = 2;
720 u8 shim[DRM_HDCP_AN_LEN];
724 u8 shim[DRM_HDCP_KSV_LEN];
728 u8 shim[DRM_HDCP_RI_LEN];
730 bool repeater_present, hdcp_capable;
733 * Detects whether the display is HDCP capable. Although we check for
734 * valid Bksv below, the HDCP over DP spec requires that we check
735 * whether the display supports HDCP before we write An. For HDMI
736 * displays, this is not necessary.
738 if (shim->hdcp_capable) {
739 ret = shim->hdcp_capable(dig_port, &hdcp_capable);
743 drm_dbg_kms(&dev_priv->drm,
744 "Panel is not HDCP capable\n");
749 /* Initialize An with 2 random values and acquire it */
750 for (i = 0; i < 2; i++)
751 intel_de_write(dev_priv,
752 HDCP_ANINIT(dev_priv, cpu_transcoder, port),
754 intel_de_write(dev_priv, HDCP_CONF(dev_priv, cpu_transcoder, port),
755 HDCP_CONF_CAPTURE_AN);
757 /* Wait for An to be acquired */
758 if (intel_de_wait_for_set(dev_priv,
759 HDCP_STATUS(dev_priv, cpu_transcoder, port),
760 HDCP_STATUS_AN_READY, 1)) {
761 drm_err(&dev_priv->drm, "Timed out waiting for An\n");
765 an.reg[0] = intel_de_read(dev_priv,
766 HDCP_ANLO(dev_priv, cpu_transcoder, port));
767 an.reg[1] = intel_de_read(dev_priv,
768 HDCP_ANHI(dev_priv, cpu_transcoder, port));
769 ret = shim->write_an_aksv(dig_port, an.shim);
773 r0_prime_gen_start = jiffies;
775 memset(&bksv, 0, sizeof(bksv));
777 ret = intel_hdcp_read_valid_bksv(dig_port, shim, bksv.shim);
781 if (drm_hdcp_check_ksvs_revoked(&dev_priv->drm, bksv.shim, 1) > 0) {
782 drm_err(&dev_priv->drm, "BKSV is revoked\n");
786 intel_de_write(dev_priv, HDCP_BKSVLO(dev_priv, cpu_transcoder, port),
788 intel_de_write(dev_priv, HDCP_BKSVHI(dev_priv, cpu_transcoder, port),
791 ret = shim->repeater_present(dig_port, &repeater_present);
794 if (repeater_present)
795 intel_de_write(dev_priv, HDCP_REP_CTL,
796 intel_hdcp_get_repeater_ctl(dev_priv, cpu_transcoder, port));
798 ret = shim->toggle_signalling(dig_port, cpu_transcoder, true);
802 intel_de_write(dev_priv, HDCP_CONF(dev_priv, cpu_transcoder, port),
803 HDCP_CONF_AUTH_AND_ENC);
805 /* Wait for R0 ready */
806 if (wait_for(intel_de_read(dev_priv, HDCP_STATUS(dev_priv, cpu_transcoder, port)) &
807 (HDCP_STATUS_R0_READY | HDCP_STATUS_ENC), 1)) {
808 drm_err(&dev_priv->drm, "Timed out waiting for R0 ready\n");
813 * Wait for R0' to become available. The spec says 100ms from Aksv, but
814 * some monitors can take longer than this. We'll set the timeout at
815 * 300ms just to be sure.
817 * On DP, there's an R0_READY bit available but no such bit
818 * exists on HDMI. Since the upper-bound is the same, we'll just do
819 * the stupid thing instead of polling on one and not the other.
821 wait_remaining_ms_from_jiffies(r0_prime_gen_start, 300);
826 * DP HDCP Spec mandates the two more reattempt to read R0, incase
829 for (i = 0; i < tries; i++) {
831 ret = shim->read_ri_prime(dig_port, ri.shim);
834 intel_de_write(dev_priv,
835 HDCP_RPRIME(dev_priv, cpu_transcoder, port),
838 /* Wait for Ri prime match */
839 if (!wait_for(intel_de_read(dev_priv, HDCP_STATUS(dev_priv, cpu_transcoder, port)) &
840 (HDCP_STATUS_RI_MATCH | HDCP_STATUS_ENC), 1))
845 drm_dbg_kms(&dev_priv->drm,
846 "Timed out waiting for Ri prime match (%x)\n",
847 intel_de_read(dev_priv, HDCP_STATUS(dev_priv,
848 cpu_transcoder, port)));
852 /* Wait for encryption confirmation */
853 if (intel_de_wait_for_set(dev_priv,
854 HDCP_STATUS(dev_priv, cpu_transcoder, port),
856 HDCP_ENCRYPT_STATUS_CHANGE_TIMEOUT_MS)) {
857 drm_err(&dev_priv->drm, "Timed out waiting for encryption\n");
861 /* DP MST Auth Part 1 Step 2.a and Step 2.b */
862 if (shim->stream_encryption) {
863 ret = shim->stream_encryption(connector, true);
865 drm_err(&dev_priv->drm, "[%s:%d] Failed to enable HDCP 1.4 stream enc\n",
866 connector->base.name, connector->base.base.id);
869 drm_dbg_kms(&dev_priv->drm, "HDCP 1.4 transcoder: %s stream encrypted\n",
870 transcoder_name(hdcp->stream_transcoder));
873 if (repeater_present)
874 return intel_hdcp_auth_downstream(connector);
876 drm_dbg_kms(&dev_priv->drm, "HDCP is enabled (no repeater present)\n");
880 static int _intel_hdcp_disable(struct intel_connector *connector)
882 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
883 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
884 struct intel_hdcp *hdcp = &connector->hdcp;
885 enum port port = dig_port->base.port;
886 enum transcoder cpu_transcoder = hdcp->cpu_transcoder;
890 drm_dbg_kms(&dev_priv->drm, "[%s:%d] HDCP is being disabled...\n",
891 connector->base.name, connector->base.base.id);
893 if (hdcp->shim->stream_encryption) {
894 ret = hdcp->shim->stream_encryption(connector, false);
896 drm_err(&dev_priv->drm, "[%s:%d] Failed to disable HDCP 1.4 stream enc\n",
897 connector->base.name, connector->base.base.id);
900 drm_dbg_kms(&dev_priv->drm, "HDCP 1.4 transcoder: %s stream encryption disabled\n",
901 transcoder_name(hdcp->stream_transcoder));
903 * If there are other connectors on this port using HDCP,
904 * don't disable it until it disabled HDCP encryption for
905 * all connectors in MST topology.
907 if (dig_port->num_hdcp_streams > 0)
911 hdcp->hdcp_encrypted = false;
912 intel_de_write(dev_priv, HDCP_CONF(dev_priv, cpu_transcoder, port), 0);
913 if (intel_de_wait_for_clear(dev_priv,
914 HDCP_STATUS(dev_priv, cpu_transcoder, port),
915 ~0, HDCP_ENCRYPT_STATUS_CHANGE_TIMEOUT_MS)) {
916 drm_err(&dev_priv->drm,
917 "Failed to disable HDCP, timeout clearing status\n");
921 repeater_ctl = intel_hdcp_get_repeater_ctl(dev_priv, cpu_transcoder,
923 intel_de_write(dev_priv, HDCP_REP_CTL,
924 intel_de_read(dev_priv, HDCP_REP_CTL) & ~repeater_ctl);
926 ret = hdcp->shim->toggle_signalling(dig_port, cpu_transcoder, false);
928 drm_err(&dev_priv->drm, "Failed to disable HDCP signalling\n");
932 drm_dbg_kms(&dev_priv->drm, "HDCP is disabled\n");
936 static int _intel_hdcp_enable(struct intel_connector *connector)
938 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
939 struct intel_hdcp *hdcp = &connector->hdcp;
940 int i, ret, tries = 3;
942 drm_dbg_kms(&dev_priv->drm, "[%s:%d] HDCP is being enabled...\n",
943 connector->base.name, connector->base.base.id);
945 if (!hdcp_key_loadable(dev_priv)) {
946 drm_err(&dev_priv->drm, "HDCP key Load is not possible\n");
950 for (i = 0; i < KEY_LOAD_TRIES; i++) {
951 ret = intel_hdcp_load_keys(dev_priv);
954 intel_hdcp_clear_keys(dev_priv);
957 drm_err(&dev_priv->drm, "Could not load HDCP keys, (%d)\n",
962 /* Incase of authentication failures, HDCP spec expects reauth. */
963 for (i = 0; i < tries; i++) {
964 ret = intel_hdcp_auth(connector);
966 hdcp->hdcp_encrypted = true;
970 drm_dbg_kms(&dev_priv->drm, "HDCP Auth failure (%d)\n", ret);
972 /* Ensuring HDCP encryption and signalling are stopped. */
973 _intel_hdcp_disable(connector);
976 drm_dbg_kms(&dev_priv->drm,
977 "HDCP authentication failed (%d tries/%d)\n", tries, ret);
981 static struct intel_connector *intel_hdcp_to_connector(struct intel_hdcp *hdcp)
983 return container_of(hdcp, struct intel_connector, hdcp);
986 static void intel_hdcp_update_value(struct intel_connector *connector,
987 u64 value, bool update_property)
989 struct drm_device *dev = connector->base.dev;
990 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
991 struct intel_hdcp *hdcp = &connector->hdcp;
993 drm_WARN_ON(connector->base.dev, !mutex_is_locked(&hdcp->mutex));
995 if (hdcp->value == value)
998 drm_WARN_ON(dev, !mutex_is_locked(&dig_port->hdcp_mutex));
1000 if (hdcp->value == DRM_MODE_CONTENT_PROTECTION_ENABLED) {
1001 if (!drm_WARN_ON(dev, dig_port->num_hdcp_streams == 0))
1002 dig_port->num_hdcp_streams--;
1003 } else if (value == DRM_MODE_CONTENT_PROTECTION_ENABLED) {
1004 dig_port->num_hdcp_streams++;
1007 hdcp->value = value;
1008 if (update_property) {
1009 drm_connector_get(&connector->base);
1010 schedule_work(&hdcp->prop_work);
1014 /* Implements Part 3 of the HDCP authorization procedure */
1015 static int intel_hdcp_check_link(struct intel_connector *connector)
1017 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1018 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1019 struct intel_hdcp *hdcp = &connector->hdcp;
1020 enum port port = dig_port->base.port;
1021 enum transcoder cpu_transcoder;
1024 mutex_lock(&hdcp->mutex);
1025 mutex_lock(&dig_port->hdcp_mutex);
1027 cpu_transcoder = hdcp->cpu_transcoder;
1029 /* Check_link valid only when HDCP1.4 is enabled */
1030 if (hdcp->value != DRM_MODE_CONTENT_PROTECTION_ENABLED ||
1031 !hdcp->hdcp_encrypted) {
1036 if (drm_WARN_ON(&dev_priv->drm,
1037 !intel_hdcp_in_use(dev_priv, cpu_transcoder, port))) {
1038 drm_err(&dev_priv->drm,
1039 "%s:%d HDCP link stopped encryption,%x\n",
1040 connector->base.name, connector->base.base.id,
1041 intel_de_read(dev_priv, HDCP_STATUS(dev_priv, cpu_transcoder, port)));
1043 intel_hdcp_update_value(connector,
1044 DRM_MODE_CONTENT_PROTECTION_DESIRED,
1049 if (hdcp->shim->check_link(dig_port, connector)) {
1050 if (hdcp->value != DRM_MODE_CONTENT_PROTECTION_UNDESIRED) {
1051 intel_hdcp_update_value(connector,
1052 DRM_MODE_CONTENT_PROTECTION_ENABLED, true);
1057 drm_dbg_kms(&dev_priv->drm,
1058 "[%s:%d] HDCP link failed, retrying authentication\n",
1059 connector->base.name, connector->base.base.id);
1061 ret = _intel_hdcp_disable(connector);
1063 drm_err(&dev_priv->drm, "Failed to disable hdcp (%d)\n", ret);
1064 intel_hdcp_update_value(connector,
1065 DRM_MODE_CONTENT_PROTECTION_DESIRED,
1070 ret = _intel_hdcp_enable(connector);
1072 drm_err(&dev_priv->drm, "Failed to enable hdcp (%d)\n", ret);
1073 intel_hdcp_update_value(connector,
1074 DRM_MODE_CONTENT_PROTECTION_DESIRED,
1080 mutex_unlock(&dig_port->hdcp_mutex);
1081 mutex_unlock(&hdcp->mutex);
1085 static void intel_hdcp_prop_work(struct work_struct *work)
1087 struct intel_hdcp *hdcp = container_of(work, struct intel_hdcp,
1089 struct intel_connector *connector = intel_hdcp_to_connector(hdcp);
1090 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1092 drm_modeset_lock(&dev_priv->drm.mode_config.connection_mutex, NULL);
1093 mutex_lock(&hdcp->mutex);
1096 * This worker is only used to flip between ENABLED/DESIRED. Either of
1097 * those to UNDESIRED is handled by core. If value == UNDESIRED,
1098 * we're running just after hdcp has been disabled, so just exit
1100 if (hdcp->value != DRM_MODE_CONTENT_PROTECTION_UNDESIRED)
1101 drm_hdcp_update_content_protection(&connector->base,
1104 mutex_unlock(&hdcp->mutex);
1105 drm_modeset_unlock(&dev_priv->drm.mode_config.connection_mutex);
1107 drm_connector_put(&connector->base);
1110 bool is_hdcp_supported(struct drm_i915_private *dev_priv, enum port port)
1112 return INTEL_INFO(dev_priv)->display.has_hdcp &&
1113 (DISPLAY_VER(dev_priv) >= 12 || port < PORT_E);
1117 hdcp2_prepare_ake_init(struct intel_connector *connector,
1118 struct hdcp2_ake_init *ake_data)
1120 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1121 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1122 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1123 struct i915_hdcp_comp_master *comp;
1126 mutex_lock(&dev_priv->hdcp_comp_mutex);
1127 comp = dev_priv->hdcp_master;
1129 if (!comp || !comp->ops) {
1130 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1134 ret = comp->ops->initiate_hdcp2_session(comp->mei_dev, data, ake_data);
1136 drm_dbg_kms(&dev_priv->drm, "Prepare_ake_init failed. %d\n",
1138 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1144 hdcp2_verify_rx_cert_prepare_km(struct intel_connector *connector,
1145 struct hdcp2_ake_send_cert *rx_cert,
1147 struct hdcp2_ake_no_stored_km *ek_pub_km,
1150 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1151 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1152 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1153 struct i915_hdcp_comp_master *comp;
1156 mutex_lock(&dev_priv->hdcp_comp_mutex);
1157 comp = dev_priv->hdcp_master;
1159 if (!comp || !comp->ops) {
1160 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1164 ret = comp->ops->verify_receiver_cert_prepare_km(comp->mei_dev, data,
1168 drm_dbg_kms(&dev_priv->drm, "Verify rx_cert failed. %d\n",
1170 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1175 static int hdcp2_verify_hprime(struct intel_connector *connector,
1176 struct hdcp2_ake_send_hprime *rx_hprime)
1178 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1179 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1180 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1181 struct i915_hdcp_comp_master *comp;
1184 mutex_lock(&dev_priv->hdcp_comp_mutex);
1185 comp = dev_priv->hdcp_master;
1187 if (!comp || !comp->ops) {
1188 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1192 ret = comp->ops->verify_hprime(comp->mei_dev, data, rx_hprime);
1194 drm_dbg_kms(&dev_priv->drm, "Verify hprime failed. %d\n", ret);
1195 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1201 hdcp2_store_pairing_info(struct intel_connector *connector,
1202 struct hdcp2_ake_send_pairing_info *pairing_info)
1204 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1205 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1206 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1207 struct i915_hdcp_comp_master *comp;
1210 mutex_lock(&dev_priv->hdcp_comp_mutex);
1211 comp = dev_priv->hdcp_master;
1213 if (!comp || !comp->ops) {
1214 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1218 ret = comp->ops->store_pairing_info(comp->mei_dev, data, pairing_info);
1220 drm_dbg_kms(&dev_priv->drm, "Store pairing info failed. %d\n",
1222 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1228 hdcp2_prepare_lc_init(struct intel_connector *connector,
1229 struct hdcp2_lc_init *lc_init)
1231 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1232 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1233 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1234 struct i915_hdcp_comp_master *comp;
1237 mutex_lock(&dev_priv->hdcp_comp_mutex);
1238 comp = dev_priv->hdcp_master;
1240 if (!comp || !comp->ops) {
1241 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1245 ret = comp->ops->initiate_locality_check(comp->mei_dev, data, lc_init);
1247 drm_dbg_kms(&dev_priv->drm, "Prepare lc_init failed. %d\n",
1249 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1255 hdcp2_verify_lprime(struct intel_connector *connector,
1256 struct hdcp2_lc_send_lprime *rx_lprime)
1258 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1259 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1260 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1261 struct i915_hdcp_comp_master *comp;
1264 mutex_lock(&dev_priv->hdcp_comp_mutex);
1265 comp = dev_priv->hdcp_master;
1267 if (!comp || !comp->ops) {
1268 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1272 ret = comp->ops->verify_lprime(comp->mei_dev, data, rx_lprime);
1274 drm_dbg_kms(&dev_priv->drm, "Verify L_Prime failed. %d\n",
1276 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1281 static int hdcp2_prepare_skey(struct intel_connector *connector,
1282 struct hdcp2_ske_send_eks *ske_data)
1284 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1285 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1286 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1287 struct i915_hdcp_comp_master *comp;
1290 mutex_lock(&dev_priv->hdcp_comp_mutex);
1291 comp = dev_priv->hdcp_master;
1293 if (!comp || !comp->ops) {
1294 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1298 ret = comp->ops->get_session_key(comp->mei_dev, data, ske_data);
1300 drm_dbg_kms(&dev_priv->drm, "Get session key failed. %d\n",
1302 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1308 hdcp2_verify_rep_topology_prepare_ack(struct intel_connector *connector,
1309 struct hdcp2_rep_send_receiverid_list
1311 struct hdcp2_rep_send_ack *rep_send_ack)
1313 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1314 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1315 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1316 struct i915_hdcp_comp_master *comp;
1319 mutex_lock(&dev_priv->hdcp_comp_mutex);
1320 comp = dev_priv->hdcp_master;
1322 if (!comp || !comp->ops) {
1323 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1327 ret = comp->ops->repeater_check_flow_prepare_ack(comp->mei_dev, data,
1331 drm_dbg_kms(&dev_priv->drm,
1332 "Verify rep topology failed. %d\n", ret);
1333 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1339 hdcp2_verify_mprime(struct intel_connector *connector,
1340 struct hdcp2_rep_stream_ready *stream_ready)
1342 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1343 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1344 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1345 struct i915_hdcp_comp_master *comp;
1348 mutex_lock(&dev_priv->hdcp_comp_mutex);
1349 comp = dev_priv->hdcp_master;
1351 if (!comp || !comp->ops) {
1352 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1356 ret = comp->ops->verify_mprime(comp->mei_dev, data, stream_ready);
1358 drm_dbg_kms(&dev_priv->drm, "Verify mprime failed. %d\n", ret);
1359 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1364 static int hdcp2_authenticate_port(struct intel_connector *connector)
1366 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1367 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1368 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1369 struct i915_hdcp_comp_master *comp;
1372 mutex_lock(&dev_priv->hdcp_comp_mutex);
1373 comp = dev_priv->hdcp_master;
1375 if (!comp || !comp->ops) {
1376 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1380 ret = comp->ops->enable_hdcp_authentication(comp->mei_dev, data);
1382 drm_dbg_kms(&dev_priv->drm, "Enable hdcp auth failed. %d\n",
1384 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1389 static int hdcp2_close_mei_session(struct intel_connector *connector)
1391 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1392 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1393 struct i915_hdcp_comp_master *comp;
1396 mutex_lock(&dev_priv->hdcp_comp_mutex);
1397 comp = dev_priv->hdcp_master;
1399 if (!comp || !comp->ops) {
1400 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1404 ret = comp->ops->close_hdcp_session(comp->mei_dev,
1405 &dig_port->hdcp_port_data);
1406 mutex_unlock(&dev_priv->hdcp_comp_mutex);
1411 static int hdcp2_deauthenticate_port(struct intel_connector *connector)
1413 return hdcp2_close_mei_session(connector);
1416 /* Authentication flow starts from here */
1417 static int hdcp2_authentication_key_exchange(struct intel_connector *connector)
1419 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1420 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1421 struct intel_hdcp *hdcp = &connector->hdcp;
1423 struct hdcp2_ake_init ake_init;
1424 struct hdcp2_ake_send_cert send_cert;
1425 struct hdcp2_ake_no_stored_km no_stored_km;
1426 struct hdcp2_ake_send_hprime send_hprime;
1427 struct hdcp2_ake_send_pairing_info pairing_info;
1429 const struct intel_hdcp_shim *shim = hdcp->shim;
1433 /* Init for seq_num */
1434 hdcp->seq_num_v = 0;
1435 hdcp->seq_num_m = 0;
1437 ret = hdcp2_prepare_ake_init(connector, &msgs.ake_init);
1441 ret = shim->write_2_2_msg(dig_port, &msgs.ake_init,
1442 sizeof(msgs.ake_init));
1446 ret = shim->read_2_2_msg(dig_port, HDCP_2_2_AKE_SEND_CERT,
1447 &msgs.send_cert, sizeof(msgs.send_cert));
1451 if (msgs.send_cert.rx_caps[0] != HDCP_2_2_RX_CAPS_VERSION_VAL) {
1452 drm_dbg_kms(&dev_priv->drm, "cert.rx_caps dont claim HDCP2.2\n");
1456 hdcp->is_repeater = HDCP_2_2_RX_REPEATER(msgs.send_cert.rx_caps[2]);
1458 if (drm_hdcp_check_ksvs_revoked(&dev_priv->drm,
1459 msgs.send_cert.cert_rx.receiver_id,
1461 drm_err(&dev_priv->drm, "Receiver ID is revoked\n");
1466 * Here msgs.no_stored_km will hold msgs corresponding to the km
1469 ret = hdcp2_verify_rx_cert_prepare_km(connector, &msgs.send_cert,
1471 &msgs.no_stored_km, &size);
1475 ret = shim->write_2_2_msg(dig_port, &msgs.no_stored_km, size);
1479 ret = shim->read_2_2_msg(dig_port, HDCP_2_2_AKE_SEND_HPRIME,
1480 &msgs.send_hprime, sizeof(msgs.send_hprime));
1484 ret = hdcp2_verify_hprime(connector, &msgs.send_hprime);
1488 if (!hdcp->is_paired) {
1489 /* Pairing is required */
1490 ret = shim->read_2_2_msg(dig_port,
1491 HDCP_2_2_AKE_SEND_PAIRING_INFO,
1493 sizeof(msgs.pairing_info));
1497 ret = hdcp2_store_pairing_info(connector, &msgs.pairing_info);
1500 hdcp->is_paired = true;
1506 static int hdcp2_locality_check(struct intel_connector *connector)
1508 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1509 struct intel_hdcp *hdcp = &connector->hdcp;
1511 struct hdcp2_lc_init lc_init;
1512 struct hdcp2_lc_send_lprime send_lprime;
1514 const struct intel_hdcp_shim *shim = hdcp->shim;
1515 int tries = HDCP2_LC_RETRY_CNT, ret, i;
1517 for (i = 0; i < tries; i++) {
1518 ret = hdcp2_prepare_lc_init(connector, &msgs.lc_init);
1522 ret = shim->write_2_2_msg(dig_port, &msgs.lc_init,
1523 sizeof(msgs.lc_init));
1527 ret = shim->read_2_2_msg(dig_port,
1528 HDCP_2_2_LC_SEND_LPRIME,
1530 sizeof(msgs.send_lprime));
1534 ret = hdcp2_verify_lprime(connector, &msgs.send_lprime);
1542 static int hdcp2_session_key_exchange(struct intel_connector *connector)
1544 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1545 struct intel_hdcp *hdcp = &connector->hdcp;
1546 struct hdcp2_ske_send_eks send_eks;
1549 ret = hdcp2_prepare_skey(connector, &send_eks);
1553 ret = hdcp->shim->write_2_2_msg(dig_port, &send_eks,
1562 int _hdcp2_propagate_stream_management_info(struct intel_connector *connector)
1564 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1565 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1566 struct intel_hdcp *hdcp = &connector->hdcp;
1568 struct hdcp2_rep_stream_manage stream_manage;
1569 struct hdcp2_rep_stream_ready stream_ready;
1571 const struct intel_hdcp_shim *shim = hdcp->shim;
1572 int ret, streams_size_delta, i;
1574 if (connector->hdcp.seq_num_m > HDCP_2_2_SEQ_NUM_MAX)
1577 /* Prepare RepeaterAuth_Stream_Manage msg */
1578 msgs.stream_manage.msg_id = HDCP_2_2_REP_STREAM_MANAGE;
1579 drm_hdcp_cpu_to_be24(msgs.stream_manage.seq_num_m, hdcp->seq_num_m);
1581 msgs.stream_manage.k = cpu_to_be16(data->k);
1583 for (i = 0; i < data->k; i++) {
1584 msgs.stream_manage.streams[i].stream_id = data->streams[i].stream_id;
1585 msgs.stream_manage.streams[i].stream_type = data->streams[i].stream_type;
1588 streams_size_delta = (HDCP_2_2_MAX_CONTENT_STREAMS_CNT - data->k) *
1589 sizeof(struct hdcp2_streamid_type);
1590 /* Send it to Repeater */
1591 ret = shim->write_2_2_msg(dig_port, &msgs.stream_manage,
1592 sizeof(msgs.stream_manage) - streams_size_delta);
1596 ret = shim->read_2_2_msg(dig_port, HDCP_2_2_REP_STREAM_READY,
1597 &msgs.stream_ready, sizeof(msgs.stream_ready));
1601 data->seq_num_m = hdcp->seq_num_m;
1603 ret = hdcp2_verify_mprime(connector, &msgs.stream_ready);
1612 int hdcp2_authenticate_repeater_topology(struct intel_connector *connector)
1614 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1615 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1616 struct intel_hdcp *hdcp = &connector->hdcp;
1618 struct hdcp2_rep_send_receiverid_list recvid_list;
1619 struct hdcp2_rep_send_ack rep_ack;
1621 const struct intel_hdcp_shim *shim = hdcp->shim;
1622 u32 seq_num_v, device_cnt;
1626 ret = shim->read_2_2_msg(dig_port, HDCP_2_2_REP_SEND_RECVID_LIST,
1627 &msgs.recvid_list, sizeof(msgs.recvid_list));
1631 rx_info = msgs.recvid_list.rx_info;
1633 if (HDCP_2_2_MAX_CASCADE_EXCEEDED(rx_info[1]) ||
1634 HDCP_2_2_MAX_DEVS_EXCEEDED(rx_info[1])) {
1635 drm_dbg_kms(&dev_priv->drm, "Topology Max Size Exceeded\n");
1640 * MST topology is not Type 1 capable if it contains a downstream
1641 * device that is only HDCP 1.x or Legacy HDCP 2.0/2.1 compliant.
1643 dig_port->hdcp_mst_type1_capable =
1644 !HDCP_2_2_HDCP1_DEVICE_CONNECTED(rx_info[1]) &&
1645 !HDCP_2_2_HDCP_2_0_REP_CONNECTED(rx_info[1]);
1647 /* Converting and Storing the seq_num_v to local variable as DWORD */
1649 drm_hdcp_be24_to_cpu((const u8 *)msgs.recvid_list.seq_num_v);
1651 if (!hdcp->hdcp2_encrypted && seq_num_v) {
1652 drm_dbg_kms(&dev_priv->drm,
1653 "Non zero Seq_num_v at first RecvId_List msg\n");
1657 if (seq_num_v < hdcp->seq_num_v) {
1658 /* Roll over of the seq_num_v from repeater. Reauthenticate. */
1659 drm_dbg_kms(&dev_priv->drm, "Seq_num_v roll over.\n");
1663 device_cnt = (HDCP_2_2_DEV_COUNT_HI(rx_info[0]) << 4 |
1664 HDCP_2_2_DEV_COUNT_LO(rx_info[1]));
1665 if (drm_hdcp_check_ksvs_revoked(&dev_priv->drm,
1666 msgs.recvid_list.receiver_ids,
1668 drm_err(&dev_priv->drm, "Revoked receiver ID(s) is in list\n");
1672 ret = hdcp2_verify_rep_topology_prepare_ack(connector,
1678 hdcp->seq_num_v = seq_num_v;
1679 ret = shim->write_2_2_msg(dig_port, &msgs.rep_ack,
1680 sizeof(msgs.rep_ack));
1687 static int hdcp2_authenticate_sink(struct intel_connector *connector)
1689 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1690 struct drm_i915_private *i915 = to_i915(connector->base.dev);
1691 struct intel_hdcp *hdcp = &connector->hdcp;
1692 const struct intel_hdcp_shim *shim = hdcp->shim;
1695 ret = hdcp2_authentication_key_exchange(connector);
1697 drm_dbg_kms(&i915->drm, "AKE Failed. Err : %d\n", ret);
1701 ret = hdcp2_locality_check(connector);
1703 drm_dbg_kms(&i915->drm,
1704 "Locality Check failed. Err : %d\n", ret);
1708 ret = hdcp2_session_key_exchange(connector);
1710 drm_dbg_kms(&i915->drm, "SKE Failed. Err : %d\n", ret);
1714 if (shim->config_stream_type) {
1715 ret = shim->config_stream_type(dig_port,
1717 hdcp->content_type);
1722 if (hdcp->is_repeater) {
1723 ret = hdcp2_authenticate_repeater_topology(connector);
1725 drm_dbg_kms(&i915->drm,
1726 "Repeater Auth Failed. Err: %d\n", ret);
1734 static int hdcp2_enable_stream_encryption(struct intel_connector *connector)
1736 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1737 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1738 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1739 struct intel_hdcp *hdcp = &connector->hdcp;
1740 enum transcoder cpu_transcoder = hdcp->cpu_transcoder;
1741 enum port port = dig_port->base.port;
1744 if (!(intel_de_read(dev_priv, HDCP2_STATUS(dev_priv, cpu_transcoder, port)) &
1745 LINK_ENCRYPTION_STATUS)) {
1746 drm_err(&dev_priv->drm, "[%s:%d] HDCP 2.2 Link is not encrypted\n",
1747 connector->base.name, connector->base.base.id);
1752 if (hdcp->shim->stream_2_2_encryption) {
1753 ret = hdcp->shim->stream_2_2_encryption(connector, true);
1755 drm_err(&dev_priv->drm, "[%s:%d] Failed to enable HDCP 2.2 stream enc\n",
1756 connector->base.name, connector->base.base.id);
1759 drm_dbg_kms(&dev_priv->drm, "HDCP 2.2 transcoder: %s stream encrypted\n",
1760 transcoder_name(hdcp->stream_transcoder));
1766 if (hdcp2_deauthenticate_port(connector) < 0)
1767 drm_dbg_kms(&dev_priv->drm, "Port deauth failed.\n");
1769 dig_port->hdcp_auth_status = false;
1775 static int hdcp2_enable_encryption(struct intel_connector *connector)
1777 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1778 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1779 struct intel_hdcp *hdcp = &connector->hdcp;
1780 enum port port = dig_port->base.port;
1781 enum transcoder cpu_transcoder = hdcp->cpu_transcoder;
1784 drm_WARN_ON(&dev_priv->drm,
1785 intel_de_read(dev_priv, HDCP2_STATUS(dev_priv, cpu_transcoder, port)) &
1786 LINK_ENCRYPTION_STATUS);
1787 if (hdcp->shim->toggle_signalling) {
1788 ret = hdcp->shim->toggle_signalling(dig_port, cpu_transcoder,
1791 drm_err(&dev_priv->drm,
1792 "Failed to enable HDCP signalling. %d\n",
1798 if (intel_de_read(dev_priv, HDCP2_STATUS(dev_priv, cpu_transcoder, port)) &
1800 /* Link is Authenticated. Now set for Encryption */
1801 intel_de_write(dev_priv,
1802 HDCP2_CTL(dev_priv, cpu_transcoder, port),
1803 intel_de_read(dev_priv, HDCP2_CTL(dev_priv, cpu_transcoder, port)) | CTL_LINK_ENCRYPTION_REQ);
1806 ret = intel_de_wait_for_set(dev_priv,
1807 HDCP2_STATUS(dev_priv, cpu_transcoder,
1809 LINK_ENCRYPTION_STATUS,
1810 HDCP_ENCRYPT_STATUS_CHANGE_TIMEOUT_MS);
1811 dig_port->hdcp_auth_status = true;
1816 static int hdcp2_disable_encryption(struct intel_connector *connector)
1818 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1819 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
1820 struct intel_hdcp *hdcp = &connector->hdcp;
1821 enum port port = dig_port->base.port;
1822 enum transcoder cpu_transcoder = hdcp->cpu_transcoder;
1825 drm_WARN_ON(&dev_priv->drm, !(intel_de_read(dev_priv, HDCP2_STATUS(dev_priv, cpu_transcoder, port)) &
1826 LINK_ENCRYPTION_STATUS));
1828 intel_de_write(dev_priv, HDCP2_CTL(dev_priv, cpu_transcoder, port),
1829 intel_de_read(dev_priv, HDCP2_CTL(dev_priv, cpu_transcoder, port)) & ~CTL_LINK_ENCRYPTION_REQ);
1831 ret = intel_de_wait_for_clear(dev_priv,
1832 HDCP2_STATUS(dev_priv, cpu_transcoder,
1834 LINK_ENCRYPTION_STATUS,
1835 HDCP_ENCRYPT_STATUS_CHANGE_TIMEOUT_MS);
1836 if (ret == -ETIMEDOUT)
1837 drm_dbg_kms(&dev_priv->drm, "Disable Encryption Timedout");
1839 if (hdcp->shim->toggle_signalling) {
1840 ret = hdcp->shim->toggle_signalling(dig_port, cpu_transcoder,
1843 drm_err(&dev_priv->drm,
1844 "Failed to disable HDCP signalling. %d\n",
1854 hdcp2_propagate_stream_management_info(struct intel_connector *connector)
1856 struct drm_i915_private *i915 = to_i915(connector->base.dev);
1857 int i, tries = 3, ret;
1859 if (!connector->hdcp.is_repeater)
1862 for (i = 0; i < tries; i++) {
1863 ret = _hdcp2_propagate_stream_management_info(connector);
1867 /* Lets restart the auth incase of seq_num_m roll over */
1868 if (connector->hdcp.seq_num_m > HDCP_2_2_SEQ_NUM_MAX) {
1869 drm_dbg_kms(&i915->drm,
1870 "seq_num_m roll over.(%d)\n", ret);
1874 drm_dbg_kms(&i915->drm,
1875 "HDCP2 stream management %d of %d Failed.(%d)\n",
1882 static int hdcp2_authenticate_and_encrypt(struct intel_connector *connector)
1884 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1885 struct drm_i915_private *i915 = to_i915(connector->base.dev);
1886 int ret = 0, i, tries = 3;
1888 for (i = 0; i < tries && !dig_port->hdcp_auth_status; i++) {
1889 ret = hdcp2_authenticate_sink(connector);
1891 ret = intel_hdcp_prepare_streams(connector);
1893 drm_dbg_kms(&i915->drm,
1894 "Prepare streams failed.(%d)\n",
1899 ret = hdcp2_propagate_stream_management_info(connector);
1901 drm_dbg_kms(&i915->drm,
1902 "Stream management failed.(%d)\n",
1907 ret = hdcp2_authenticate_port(connector);
1910 drm_dbg_kms(&i915->drm, "HDCP2 port auth failed.(%d)\n",
1914 /* Clearing the mei hdcp session */
1915 drm_dbg_kms(&i915->drm, "HDCP2.2 Auth %d of %d Failed.(%d)\n",
1917 if (hdcp2_deauthenticate_port(connector) < 0)
1918 drm_dbg_kms(&i915->drm, "Port deauth failed.\n");
1921 if (!ret && !dig_port->hdcp_auth_status) {
1923 * Ensuring the required 200mSec min time interval between
1924 * Session Key Exchange and encryption.
1926 msleep(HDCP_2_2_DELAY_BEFORE_ENCRYPTION_EN);
1927 ret = hdcp2_enable_encryption(connector);
1929 drm_dbg_kms(&i915->drm,
1930 "Encryption Enable Failed.(%d)\n", ret);
1931 if (hdcp2_deauthenticate_port(connector) < 0)
1932 drm_dbg_kms(&i915->drm, "Port deauth failed.\n");
1937 ret = hdcp2_enable_stream_encryption(connector);
1942 static int _intel_hdcp2_enable(struct intel_connector *connector)
1944 struct drm_i915_private *i915 = to_i915(connector->base.dev);
1945 struct intel_hdcp *hdcp = &connector->hdcp;
1948 drm_dbg_kms(&i915->drm, "[%s:%d] HDCP2.2 is being enabled. Type: %d\n",
1949 connector->base.name, connector->base.base.id,
1950 hdcp->content_type);
1952 ret = hdcp2_authenticate_and_encrypt(connector);
1954 drm_dbg_kms(&i915->drm, "HDCP2 Type%d Enabling Failed. (%d)\n",
1955 hdcp->content_type, ret);
1959 drm_dbg_kms(&i915->drm, "[%s:%d] HDCP2.2 is enabled. Type %d\n",
1960 connector->base.name, connector->base.base.id,
1961 hdcp->content_type);
1963 hdcp->hdcp2_encrypted = true;
1968 _intel_hdcp2_disable(struct intel_connector *connector, bool hdcp2_link_recovery)
1970 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
1971 struct drm_i915_private *i915 = to_i915(connector->base.dev);
1972 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
1973 struct intel_hdcp *hdcp = &connector->hdcp;
1976 drm_dbg_kms(&i915->drm, "[%s:%d] HDCP2.2 is being Disabled\n",
1977 connector->base.name, connector->base.base.id);
1979 if (hdcp->shim->stream_2_2_encryption) {
1980 ret = hdcp->shim->stream_2_2_encryption(connector, false);
1982 drm_err(&i915->drm, "[%s:%d] Failed to disable HDCP 2.2 stream enc\n",
1983 connector->base.name, connector->base.base.id);
1986 drm_dbg_kms(&i915->drm, "HDCP 2.2 transcoder: %s stream encryption disabled\n",
1987 transcoder_name(hdcp->stream_transcoder));
1989 if (dig_port->num_hdcp_streams > 0 && !hdcp2_link_recovery)
1993 ret = hdcp2_disable_encryption(connector);
1995 if (hdcp2_deauthenticate_port(connector) < 0)
1996 drm_dbg_kms(&i915->drm, "Port deauth failed.\n");
1998 connector->hdcp.hdcp2_encrypted = false;
1999 dig_port->hdcp_auth_status = false;
2005 /* Implements the Link Integrity Check for HDCP2.2 */
2006 static int intel_hdcp2_check_link(struct intel_connector *connector)
2008 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
2009 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
2010 struct intel_hdcp *hdcp = &connector->hdcp;
2011 enum port port = dig_port->base.port;
2012 enum transcoder cpu_transcoder;
2015 mutex_lock(&hdcp->mutex);
2016 mutex_lock(&dig_port->hdcp_mutex);
2017 cpu_transcoder = hdcp->cpu_transcoder;
2019 /* hdcp2_check_link is expected only when HDCP2.2 is Enabled */
2020 if (hdcp->value != DRM_MODE_CONTENT_PROTECTION_ENABLED ||
2021 !hdcp->hdcp2_encrypted) {
2026 if (drm_WARN_ON(&dev_priv->drm,
2027 !intel_hdcp2_in_use(dev_priv, cpu_transcoder, port))) {
2028 drm_err(&dev_priv->drm,
2029 "HDCP2.2 link stopped the encryption, %x\n",
2030 intel_de_read(dev_priv, HDCP2_STATUS(dev_priv, cpu_transcoder, port)));
2032 _intel_hdcp2_disable(connector, true);
2033 intel_hdcp_update_value(connector,
2034 DRM_MODE_CONTENT_PROTECTION_DESIRED,
2039 ret = hdcp->shim->check_2_2_link(dig_port, connector);
2040 if (ret == HDCP_LINK_PROTECTED) {
2041 if (hdcp->value != DRM_MODE_CONTENT_PROTECTION_UNDESIRED) {
2042 intel_hdcp_update_value(connector,
2043 DRM_MODE_CONTENT_PROTECTION_ENABLED,
2049 if (ret == HDCP_TOPOLOGY_CHANGE) {
2050 if (hdcp->value == DRM_MODE_CONTENT_PROTECTION_UNDESIRED)
2053 drm_dbg_kms(&dev_priv->drm,
2054 "HDCP2.2 Downstream topology change\n");
2055 ret = hdcp2_authenticate_repeater_topology(connector);
2057 intel_hdcp_update_value(connector,
2058 DRM_MODE_CONTENT_PROTECTION_ENABLED,
2062 drm_dbg_kms(&dev_priv->drm,
2063 "[%s:%d] Repeater topology auth failed.(%d)\n",
2064 connector->base.name, connector->base.base.id,
2067 drm_dbg_kms(&dev_priv->drm,
2068 "[%s:%d] HDCP2.2 link failed, retrying auth\n",
2069 connector->base.name, connector->base.base.id);
2072 ret = _intel_hdcp2_disable(connector, true);
2074 drm_err(&dev_priv->drm,
2075 "[%s:%d] Failed to disable hdcp2.2 (%d)\n",
2076 connector->base.name, connector->base.base.id, ret);
2077 intel_hdcp_update_value(connector,
2078 DRM_MODE_CONTENT_PROTECTION_DESIRED, true);
2082 ret = _intel_hdcp2_enable(connector);
2084 drm_dbg_kms(&dev_priv->drm,
2085 "[%s:%d] Failed to enable hdcp2.2 (%d)\n",
2086 connector->base.name, connector->base.base.id,
2088 intel_hdcp_update_value(connector,
2089 DRM_MODE_CONTENT_PROTECTION_DESIRED,
2095 mutex_unlock(&dig_port->hdcp_mutex);
2096 mutex_unlock(&hdcp->mutex);
2100 static void intel_hdcp_check_work(struct work_struct *work)
2102 struct intel_hdcp *hdcp = container_of(to_delayed_work(work),
2105 struct intel_connector *connector = intel_hdcp_to_connector(hdcp);
2107 if (drm_connector_is_unregistered(&connector->base))
2110 if (!intel_hdcp2_check_link(connector))
2111 schedule_delayed_work(&hdcp->check_work,
2112 DRM_HDCP2_CHECK_PERIOD_MS);
2113 else if (!intel_hdcp_check_link(connector))
2114 schedule_delayed_work(&hdcp->check_work,
2115 DRM_HDCP_CHECK_PERIOD_MS);
2118 static int i915_hdcp_component_bind(struct device *i915_kdev,
2119 struct device *mei_kdev, void *data)
2121 struct drm_i915_private *dev_priv = kdev_to_i915(i915_kdev);
2123 drm_dbg(&dev_priv->drm, "I915 HDCP comp bind\n");
2124 mutex_lock(&dev_priv->hdcp_comp_mutex);
2125 dev_priv->hdcp_master = (struct i915_hdcp_comp_master *)data;
2126 dev_priv->hdcp_master->mei_dev = mei_kdev;
2127 mutex_unlock(&dev_priv->hdcp_comp_mutex);
2132 static void i915_hdcp_component_unbind(struct device *i915_kdev,
2133 struct device *mei_kdev, void *data)
2135 struct drm_i915_private *dev_priv = kdev_to_i915(i915_kdev);
2137 drm_dbg(&dev_priv->drm, "I915 HDCP comp unbind\n");
2138 mutex_lock(&dev_priv->hdcp_comp_mutex);
2139 dev_priv->hdcp_master = NULL;
2140 mutex_unlock(&dev_priv->hdcp_comp_mutex);
2143 static const struct component_ops i915_hdcp_component_ops = {
2144 .bind = i915_hdcp_component_bind,
2145 .unbind = i915_hdcp_component_unbind,
2148 static enum mei_fw_ddi intel_get_mei_fw_ddi_index(enum port port)
2153 case PORT_B ... PORT_F:
2154 return (enum mei_fw_ddi)port;
2156 return MEI_DDI_INVALID_PORT;
2160 static enum mei_fw_tc intel_get_mei_fw_tc(enum transcoder cpu_transcoder)
2162 switch (cpu_transcoder) {
2163 case TRANSCODER_A ... TRANSCODER_D:
2164 return (enum mei_fw_tc)(cpu_transcoder | 0x10);
2165 default: /* eDP, DSI TRANSCODERS are non HDCP capable */
2166 return MEI_INVALID_TRANSCODER;
2170 static int initialize_hdcp_port_data(struct intel_connector *connector,
2171 struct intel_digital_port *dig_port,
2172 const struct intel_hdcp_shim *shim)
2174 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
2175 struct hdcp_port_data *data = &dig_port->hdcp_port_data;
2176 struct intel_hdcp *hdcp = &connector->hdcp;
2177 enum port port = dig_port->base.port;
2179 if (DISPLAY_VER(dev_priv) < 12)
2180 data->fw_ddi = intel_get_mei_fw_ddi_index(port);
2183 * As per ME FW API expectation, for GEN 12+, fw_ddi is filled
2184 * with zero(INVALID PORT index).
2186 data->fw_ddi = MEI_DDI_INVALID_PORT;
2189 * As associated transcoder is set and modified at modeset, here fw_tc
2190 * is initialized to zero (invalid transcoder index). This will be
2191 * retained for <Gen12 forever.
2193 data->fw_tc = MEI_INVALID_TRANSCODER;
2195 data->port_type = (u8)HDCP_PORT_TYPE_INTEGRATED;
2196 data->protocol = (u8)shim->protocol;
2199 data->streams = kcalloc(INTEL_NUM_PIPES(dev_priv),
2200 sizeof(struct hdcp2_streamid_type),
2202 if (!data->streams) {
2203 drm_err(&dev_priv->drm, "Out of Memory\n");
2207 data->streams[0].stream_id = 0;
2208 data->streams[0].stream_type = hdcp->content_type;
2213 static bool is_hdcp2_supported(struct drm_i915_private *dev_priv)
2215 if (!IS_ENABLED(CONFIG_INTEL_MEI_HDCP))
2218 return (DISPLAY_VER(dev_priv) >= 10 ||
2219 IS_KABYLAKE(dev_priv) ||
2220 IS_COFFEELAKE(dev_priv) ||
2221 IS_COMETLAKE(dev_priv));
2224 void intel_hdcp_component_init(struct drm_i915_private *dev_priv)
2228 if (!is_hdcp2_supported(dev_priv))
2231 mutex_lock(&dev_priv->hdcp_comp_mutex);
2232 drm_WARN_ON(&dev_priv->drm, dev_priv->hdcp_comp_added);
2234 dev_priv->hdcp_comp_added = true;
2235 mutex_unlock(&dev_priv->hdcp_comp_mutex);
2236 ret = component_add_typed(dev_priv->drm.dev, &i915_hdcp_component_ops,
2237 I915_COMPONENT_HDCP);
2239 drm_dbg_kms(&dev_priv->drm, "Failed at component add(%d)\n",
2241 mutex_lock(&dev_priv->hdcp_comp_mutex);
2242 dev_priv->hdcp_comp_added = false;
2243 mutex_unlock(&dev_priv->hdcp_comp_mutex);
2248 static void intel_hdcp2_init(struct intel_connector *connector,
2249 struct intel_digital_port *dig_port,
2250 const struct intel_hdcp_shim *shim)
2252 struct drm_i915_private *i915 = to_i915(connector->base.dev);
2253 struct intel_hdcp *hdcp = &connector->hdcp;
2256 ret = initialize_hdcp_port_data(connector, dig_port, shim);
2258 drm_dbg_kms(&i915->drm, "Mei hdcp data init failed\n");
2262 hdcp->hdcp2_supported = true;
2265 int intel_hdcp_init(struct intel_connector *connector,
2266 struct intel_digital_port *dig_port,
2267 const struct intel_hdcp_shim *shim)
2269 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
2270 struct intel_hdcp *hdcp = &connector->hdcp;
2276 if (is_hdcp2_supported(dev_priv))
2277 intel_hdcp2_init(connector, dig_port, shim);
2280 drm_connector_attach_content_protection_property(&connector->base,
2281 hdcp->hdcp2_supported);
2283 hdcp->hdcp2_supported = false;
2284 kfree(dig_port->hdcp_port_data.streams);
2289 mutex_init(&hdcp->mutex);
2290 INIT_DELAYED_WORK(&hdcp->check_work, intel_hdcp_check_work);
2291 INIT_WORK(&hdcp->prop_work, intel_hdcp_prop_work);
2292 init_waitqueue_head(&hdcp->cp_irq_queue);
2297 int intel_hdcp_enable(struct intel_connector *connector,
2298 const struct intel_crtc_state *pipe_config, u8 content_type)
2300 struct drm_i915_private *dev_priv = to_i915(connector->base.dev);
2301 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
2302 struct intel_hdcp *hdcp = &connector->hdcp;
2303 unsigned long check_link_interval = DRM_HDCP_CHECK_PERIOD_MS;
2309 if (!connector->encoder) {
2310 drm_err(&dev_priv->drm, "[%s:%d] encoder is not initialized\n",
2311 connector->base.name, connector->base.base.id);
2315 mutex_lock(&hdcp->mutex);
2316 mutex_lock(&dig_port->hdcp_mutex);
2317 drm_WARN_ON(&dev_priv->drm,
2318 hdcp->value == DRM_MODE_CONTENT_PROTECTION_ENABLED);
2319 hdcp->content_type = content_type;
2321 if (intel_crtc_has_type(pipe_config, INTEL_OUTPUT_DP_MST)) {
2322 hdcp->cpu_transcoder = pipe_config->mst_master_transcoder;
2323 hdcp->stream_transcoder = pipe_config->cpu_transcoder;
2325 hdcp->cpu_transcoder = pipe_config->cpu_transcoder;
2326 hdcp->stream_transcoder = INVALID_TRANSCODER;
2329 if (DISPLAY_VER(dev_priv) >= 12)
2330 dig_port->hdcp_port_data.fw_tc = intel_get_mei_fw_tc(hdcp->cpu_transcoder);
2333 * Considering that HDCP2.2 is more secure than HDCP1.4, If the setup
2334 * is capable of HDCP2.2, it is preferred to use HDCP2.2.
2336 if (intel_hdcp2_capable(connector)) {
2337 ret = _intel_hdcp2_enable(connector);
2339 check_link_interval = DRM_HDCP2_CHECK_PERIOD_MS;
2343 * When HDCP2.2 fails and Content Type is not Type1, HDCP1.4 will
2346 if (ret && intel_hdcp_capable(connector) &&
2347 hdcp->content_type != DRM_MODE_HDCP_CONTENT_TYPE1) {
2348 ret = _intel_hdcp_enable(connector);
2352 schedule_delayed_work(&hdcp->check_work, check_link_interval);
2353 intel_hdcp_update_value(connector,
2354 DRM_MODE_CONTENT_PROTECTION_ENABLED,
2358 mutex_unlock(&dig_port->hdcp_mutex);
2359 mutex_unlock(&hdcp->mutex);
2363 int intel_hdcp_disable(struct intel_connector *connector)
2365 struct intel_digital_port *dig_port = intel_attached_dig_port(connector);
2366 struct intel_hdcp *hdcp = &connector->hdcp;
2372 mutex_lock(&hdcp->mutex);
2373 mutex_lock(&dig_port->hdcp_mutex);
2375 if (hdcp->value == DRM_MODE_CONTENT_PROTECTION_UNDESIRED)
2378 intel_hdcp_update_value(connector,
2379 DRM_MODE_CONTENT_PROTECTION_UNDESIRED, false);
2380 if (hdcp->hdcp2_encrypted)
2381 ret = _intel_hdcp2_disable(connector, false);
2382 else if (hdcp->hdcp_encrypted)
2383 ret = _intel_hdcp_disable(connector);
2386 mutex_unlock(&dig_port->hdcp_mutex);
2387 mutex_unlock(&hdcp->mutex);
2388 cancel_delayed_work_sync(&hdcp->check_work);
2392 void intel_hdcp_update_pipe(struct intel_atomic_state *state,
2393 struct intel_encoder *encoder,
2394 const struct intel_crtc_state *crtc_state,
2395 const struct drm_connector_state *conn_state)
2397 struct intel_connector *connector =
2398 to_intel_connector(conn_state->connector);
2399 struct intel_hdcp *hdcp = &connector->hdcp;
2400 bool content_protection_type_changed, desired_and_not_enabled = false;
2402 if (!connector->hdcp.shim)
2405 content_protection_type_changed =
2406 (conn_state->hdcp_content_type != hdcp->content_type &&
2407 conn_state->content_protection !=
2408 DRM_MODE_CONTENT_PROTECTION_UNDESIRED);
2411 * During the HDCP encryption session if Type change is requested,
2412 * disable the HDCP and reenable it with new TYPE value.
2414 if (conn_state->content_protection ==
2415 DRM_MODE_CONTENT_PROTECTION_UNDESIRED ||
2416 content_protection_type_changed)
2417 intel_hdcp_disable(connector);
2420 * Mark the hdcp state as DESIRED after the hdcp disable of type
2423 if (content_protection_type_changed) {
2424 mutex_lock(&hdcp->mutex);
2425 hdcp->value = DRM_MODE_CONTENT_PROTECTION_DESIRED;
2426 drm_connector_get(&connector->base);
2427 schedule_work(&hdcp->prop_work);
2428 mutex_unlock(&hdcp->mutex);
2431 if (conn_state->content_protection ==
2432 DRM_MODE_CONTENT_PROTECTION_DESIRED) {
2433 mutex_lock(&hdcp->mutex);
2434 /* Avoid enabling hdcp, if it already ENABLED */
2435 desired_and_not_enabled =
2436 hdcp->value != DRM_MODE_CONTENT_PROTECTION_ENABLED;
2437 mutex_unlock(&hdcp->mutex);
2439 * If HDCP already ENABLED and CP property is DESIRED, schedule
2440 * prop_work to update correct CP property to user space.
2442 if (!desired_and_not_enabled && !content_protection_type_changed) {
2443 drm_connector_get(&connector->base);
2444 schedule_work(&hdcp->prop_work);
2448 if (desired_and_not_enabled || content_protection_type_changed)
2449 intel_hdcp_enable(connector,
2451 (u8)conn_state->hdcp_content_type);
2454 void intel_hdcp_component_fini(struct drm_i915_private *dev_priv)
2456 mutex_lock(&dev_priv->hdcp_comp_mutex);
2457 if (!dev_priv->hdcp_comp_added) {
2458 mutex_unlock(&dev_priv->hdcp_comp_mutex);
2462 dev_priv->hdcp_comp_added = false;
2463 mutex_unlock(&dev_priv->hdcp_comp_mutex);
2465 component_del(dev_priv->drm.dev, &i915_hdcp_component_ops);
2468 void intel_hdcp_cleanup(struct intel_connector *connector)
2470 struct intel_hdcp *hdcp = &connector->hdcp;
2476 * If the connector is registered, it's possible userspace could kick
2477 * off another HDCP enable, which would re-spawn the workers.
2479 drm_WARN_ON(connector->base.dev,
2480 connector->base.registration_state == DRM_CONNECTOR_REGISTERED);
2483 * Now that the connector is not registered, check_work won't be run,
2484 * but cancel any outstanding instances of it
2486 cancel_delayed_work_sync(&hdcp->check_work);
2489 * We don't cancel prop_work in the same way as check_work since it
2490 * requires connection_mutex which could be held while calling this
2491 * function. Instead, we rely on the connector references grabbed before
2492 * scheduling prop_work to ensure the connector is alive when prop_work
2493 * is run. So if we're in the destroy path (which is where this
2494 * function should be called), we're "guaranteed" that prop_work is not
2495 * active (tl;dr This Should Never Happen).
2497 drm_WARN_ON(connector->base.dev, work_pending(&hdcp->prop_work));
2499 mutex_lock(&hdcp->mutex);
2501 mutex_unlock(&hdcp->mutex);
2504 void intel_hdcp_atomic_check(struct drm_connector *connector,
2505 struct drm_connector_state *old_state,
2506 struct drm_connector_state *new_state)
2508 u64 old_cp = old_state->content_protection;
2509 u64 new_cp = new_state->content_protection;
2510 struct drm_crtc_state *crtc_state;
2512 if (!new_state->crtc) {
2514 * If the connector is being disabled with CP enabled, mark it
2515 * desired so it's re-enabled when the connector is brought back
2517 if (old_cp == DRM_MODE_CONTENT_PROTECTION_ENABLED)
2518 new_state->content_protection =
2519 DRM_MODE_CONTENT_PROTECTION_DESIRED;
2523 crtc_state = drm_atomic_get_new_crtc_state(new_state->state,
2526 * Fix the HDCP uapi content protection state in case of modeset.
2527 * FIXME: As per HDCP content protection property uapi doc, an uevent()
2528 * need to be sent if there is transition from ENABLED->DESIRED.
2530 if (drm_atomic_crtc_needs_modeset(crtc_state) &&
2531 (old_cp == DRM_MODE_CONTENT_PROTECTION_ENABLED &&
2532 new_cp != DRM_MODE_CONTENT_PROTECTION_UNDESIRED))
2533 new_state->content_protection =
2534 DRM_MODE_CONTENT_PROTECTION_DESIRED;
2537 * Nothing to do if the state didn't change, or HDCP was activated since
2538 * the last commit. And also no change in hdcp content type.
2540 if (old_cp == new_cp ||
2541 (old_cp == DRM_MODE_CONTENT_PROTECTION_DESIRED &&
2542 new_cp == DRM_MODE_CONTENT_PROTECTION_ENABLED)) {
2543 if (old_state->hdcp_content_type ==
2544 new_state->hdcp_content_type)
2548 crtc_state->mode_changed = true;
2551 /* Handles the CP_IRQ raised from the DP HDCP sink */
2552 void intel_hdcp_handle_cp_irq(struct intel_connector *connector)
2554 struct intel_hdcp *hdcp = &connector->hdcp;
2559 atomic_inc(&connector->hdcp.cp_irq_count);
2560 wake_up_all(&connector->hdcp.cp_irq_queue);
2562 schedule_delayed_work(&hdcp->check_work, 0);