112 lines
2.8 KiB
C
112 lines
2.8 KiB
C
|
// SPDX-License-Identifier: GPL-2.0-only
|
||
|
|
/*
|
||
|
|
* Crypto TZ library for storage encryption.
|
||
|
|
*
|
||
|
|
* Copyright (c) 2022-2024 Qualcomm Innovation Center, Inc. All rights reserved.
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include <asm/cacheflush.h>
|
||
|
|
#include <linux/qcom_scm.h>
|
||
|
|
#include <linux/qtee_shmbridge.h>
|
||
|
|
#include <linux/crypto-qti-common.h>
|
||
|
|
#include <linux/module.h>
|
||
|
|
#include "crypto-qti-platform.h"
|
||
|
|
|
||
|
|
#define ICE_CIPHER_MODE_XTS_256 3
|
||
|
|
|
||
|
|
int crypto_qti_program_key(const struct ice_mmio_data *mmio_data,
|
||
|
|
const struct blk_crypto_key *key, unsigned int slot,
|
||
|
|
unsigned int data_unit_mask, int capid, int storage_type)
|
||
|
|
{
|
||
|
|
int err = 0;
|
||
|
|
struct qtee_shm shm;
|
||
|
|
int i;
|
||
|
|
union {
|
||
|
|
u8 bytes[BLK_CRYPTO_MAX_WRAPPED_KEY_SIZE];
|
||
|
|
u32 words[BLK_CRYPTO_MAX_WRAPPED_KEY_SIZE / sizeof(u32)];
|
||
|
|
} key_new;
|
||
|
|
|
||
|
|
err = qtee_shmbridge_allocate_shm(key->size, &shm);
|
||
|
|
if (err)
|
||
|
|
return -ENOMEM;
|
||
|
|
|
||
|
|
memcpy(key_new.bytes, key->raw, key->size);
|
||
|
|
if (!key->crypto_cfg.is_hw_wrapped) {
|
||
|
|
for (i = 0; i < ARRAY_SIZE(key_new.words); i++)
|
||
|
|
__cpu_to_be32s(&key_new.words[i]);
|
||
|
|
}
|
||
|
|
|
||
|
|
memcpy(shm.vaddr, key_new.bytes, key->size);
|
||
|
|
qtee_shmbridge_flush_shm_buf(&shm);
|
||
|
|
|
||
|
|
err = qcom_scm_config_set_ice_key(slot, shm.paddr, key->size,
|
||
|
|
ICE_CIPHER_MODE_XTS_256,
|
||
|
|
data_unit_mask, storage_type);
|
||
|
|
|
||
|
|
if (err)
|
||
|
|
pr_err("%s:SCM call Error: 0x%x slot %d\n",
|
||
|
|
__func__, err, slot);
|
||
|
|
|
||
|
|
qtee_shmbridge_inv_shm_buf(&shm);
|
||
|
|
qtee_shmbridge_free_shm(&shm);
|
||
|
|
|
||
|
|
return err;
|
||
|
|
}
|
||
|
|
EXPORT_SYMBOL(crypto_qti_program_key);
|
||
|
|
|
||
|
|
int crypto_qti_invalidate_key(const struct ice_mmio_data *mmio_data,
|
||
|
|
unsigned int slot, int storage_type)
|
||
|
|
{
|
||
|
|
int err = 0;
|
||
|
|
|
||
|
|
err = qcom_scm_clear_ice_key(slot, storage_type);
|
||
|
|
|
||
|
|
if (err)
|
||
|
|
pr_err("%s:SCM call Error: 0x%x\n", __func__, err);
|
||
|
|
|
||
|
|
return err;
|
||
|
|
}
|
||
|
|
EXPORT_SYMBOL(crypto_qti_invalidate_key);
|
||
|
|
|
||
|
|
int crypto_qti_derive_raw_secret_platform(
|
||
|
|
const u8 *wrapped_key,
|
||
|
|
unsigned int wrapped_key_size, u8 *secret,
|
||
|
|
unsigned int secret_size)
|
||
|
|
{
|
||
|
|
int err = 0;
|
||
|
|
struct qtee_shm shm_key, shm_secret;
|
||
|
|
|
||
|
|
err = qtee_shmbridge_allocate_shm(wrapped_key_size, &shm_key);
|
||
|
|
if (err)
|
||
|
|
return -ENOMEM;
|
||
|
|
|
||
|
|
err = qtee_shmbridge_allocate_shm(secret_size, &shm_secret);
|
||
|
|
if (err)
|
||
|
|
return -ENOMEM;
|
||
|
|
|
||
|
|
memcpy(shm_key.vaddr, wrapped_key, wrapped_key_size);
|
||
|
|
qtee_shmbridge_flush_shm_buf(&shm_key);
|
||
|
|
|
||
|
|
memset(shm_secret.vaddr, 0, secret_size);
|
||
|
|
qtee_shmbridge_flush_shm_buf(&shm_secret);
|
||
|
|
|
||
|
|
err = qcom_scm_derive_raw_secret(shm_key.paddr, wrapped_key_size,
|
||
|
|
shm_secret.paddr, secret_size);
|
||
|
|
if (err) {
|
||
|
|
pr_err("%s:SCM call Error for derive raw secret: 0x%x\n",
|
||
|
|
__func__, err);
|
||
|
|
}
|
||
|
|
|
||
|
|
qtee_shmbridge_inv_shm_buf(&shm_secret);
|
||
|
|
memcpy(secret, shm_secret.vaddr, secret_size);
|
||
|
|
|
||
|
|
qtee_shmbridge_inv_shm_buf(&shm_key);
|
||
|
|
qtee_shmbridge_free_shm(&shm_key);
|
||
|
|
qtee_shmbridge_free_shm(&shm_secret);
|
||
|
|
return err;
|
||
|
|
}
|
||
|
|
EXPORT_SYMBOL(crypto_qti_derive_raw_secret_platform);
|
||
|
|
|
||
|
|
MODULE_LICENSE("GPL v2");
|
||
|
|
MODULE_DESCRIPTION("Crypto TZ library for storage encryption");
|