1// SPDX-License-Identifier: (GPL-2.0+ OR BSD-3-Clause)
2/*
3 * Shared descriptors for ahash algorithms
4 *
5 * Copyright 2017-2019 NXP
6 */
7
8#include "compat.h"
9#include "desc_constr.h"
10#include "caamhash_desc.h"
11
12/**
13 * cnstr_shdsc_ahash - ahash shared descriptor
14 * @desc: pointer to buffer used for descriptor construction
15 * @adata: pointer to authentication transform definitions.
16 *         A split key is required for SEC Era < 6; the size of the split key
17 *         is specified in this case.
18 *         Valid algorithm values - one of OP_ALG_ALGSEL_{MD5, SHA1, SHA224,
19 *         SHA256, SHA384, SHA512}.
20 * @state: algorithm state OP_ALG_AS_{INIT, FINALIZE, INITFINALIZE, UPDATE}
21 * @digestsize: algorithm's digest size
22 * @ctx_len: size of Context Register
23 * @import_ctx: true if previous Context Register needs to be restored
24 *              must be true for ahash update and final
25 *              must be false for ahash first and digest
26 * @era: SEC Era
27 */
28void cnstr_shdsc_ahash(u32 * const desc, struct alginfo *adata, u32 state,
29		       int digestsize, int ctx_len, bool import_ctx, int era)
30{
31	u32 op = adata->algtype;
32
33	init_sh_desc(desc, HDR_SHARE_SERIAL);
34
35	/* Append key if it has been set; ahash update excluded */
36	if (state != OP_ALG_AS_UPDATE && adata->keylen) {
37		u32 *skip_key_load;
38
39		/* Skip key loading if already shared */
40		skip_key_load = append_jump(desc, JUMP_JSL | JUMP_TEST_ALL |
41					    JUMP_COND_SHRD);
42
43		if (era < 6)
44			append_key_as_imm(desc, adata->key_virt,
45					  adata->keylen_pad,
46					  adata->keylen, CLASS_2 |
47					  KEY_DEST_MDHA_SPLIT | KEY_ENC);
48		else
49			append_proto_dkp(desc, adata);
50
51		set_jump_tgt_here(desc, skip_key_load);
52
53		op |= OP_ALG_AAI_HMAC_PRECOMP;
54	}
55
56	/* If needed, import context from software */
57	if (import_ctx)
58		append_seq_load(desc, ctx_len, LDST_CLASS_2_CCB |
59				LDST_SRCDST_BYTE_CONTEXT);
60
61	/* Class 2 operation */
62	append_operation(desc, op | state | OP_ALG_ENCRYPT);
63
64	/*
65	 * Load from buf and/or src and write to req->result or state->context
66	 * Calculate remaining bytes to read
67	 */
68	append_math_add(desc, VARSEQINLEN, SEQINLEN, REG0, CAAM_CMD_SZ);
69	/* Read remaining bytes */
70	append_seq_fifo_load(desc, 0, FIFOLD_CLASS_CLASS2 | FIFOLD_TYPE_LAST2 |
71			     FIFOLD_TYPE_MSG | KEY_VLF);
72	/* Store class2 context bytes */
73	append_seq_store(desc, digestsize, LDST_CLASS_2_CCB |
74			 LDST_SRCDST_BYTE_CONTEXT);
75}
76EXPORT_SYMBOL(cnstr_shdsc_ahash);
77
78/**
79 * cnstr_shdsc_sk_hash - shared descriptor for symmetric key cipher-based
80 *                       hash algorithms
81 * @desc: pointer to buffer used for descriptor construction
82 * @adata: pointer to authentication transform definitions.
83 * @state: algorithm state OP_ALG_AS_{INIT, FINALIZE, INITFINALIZE, UPDATE}
84 * @digestsize: algorithm's digest size
85 * @ctx_len: size of Context Register
86 */
87void cnstr_shdsc_sk_hash(u32 * const desc, struct alginfo *adata, u32 state,
88			 int digestsize, int ctx_len)
89{
90	u32 *skip_key_load;
91
92	init_sh_desc(desc, HDR_SHARE_SERIAL | HDR_SAVECTX);
93
94	/* Skip loading of key, context if already shared */
95	skip_key_load = append_jump(desc, JUMP_TEST_ALL | JUMP_COND_SHRD);
96
97	if (state == OP_ALG_AS_INIT || state == OP_ALG_AS_INITFINAL) {
98		append_key_as_imm(desc, adata->key_virt, adata->keylen,
99				  adata->keylen, CLASS_1 | KEY_DEST_CLASS_REG);
100	} else { /* UPDATE, FINALIZE */
101		if (is_xcbc_aes(adata->algtype))
102			/* Load K1 */
103			append_key(desc, adata->key_dma, adata->keylen,
104				   CLASS_1 | KEY_DEST_CLASS_REG | KEY_ENC);
105		else /* CMAC */
106			append_key_as_imm(desc, adata->key_virt, adata->keylen,
107					  adata->keylen, CLASS_1 |
108					  KEY_DEST_CLASS_REG);
109		/* Restore context */
110		append_seq_load(desc, ctx_len, LDST_CLASS_1_CCB |
111				LDST_SRCDST_BYTE_CONTEXT);
112	}
113
114	set_jump_tgt_here(desc, skip_key_load);
115
116	/* Class 1 operation */
117	append_operation(desc, adata->algtype | state | OP_ALG_ENCRYPT);
118
119	/*
120	 * Load from buf and/or src and write to req->result or state->context
121	 * Calculate remaining bytes to read
122	 */
123	append_math_add(desc, VARSEQINLEN, SEQINLEN, REG0, CAAM_CMD_SZ);
124
125	/* Read remaining bytes */
126	append_seq_fifo_load(desc, 0, FIFOLD_CLASS_CLASS1 | FIFOLD_TYPE_LAST1 |
127			     FIFOLD_TYPE_MSG | FIFOLDST_VLF);
128
129	/*
130	 * Save context:
131	 * - xcbc: partial hash, keys K2 and K3
132	 * - cmac: partial hash, constant L = E(K,0)
133	 */
134	append_seq_store(desc, digestsize, LDST_CLASS_1_CCB |
135			 LDST_SRCDST_BYTE_CONTEXT);
136	if (is_xcbc_aes(adata->algtype) && state == OP_ALG_AS_INIT)
137		/* Save K1 */
138		append_fifo_store(desc, adata->key_dma, adata->keylen,
139				  LDST_CLASS_1_CCB | FIFOST_TYPE_KEY_KEK);
140}
141EXPORT_SYMBOL(cnstr_shdsc_sk_hash);
142
143MODULE_LICENSE("Dual BSD/GPL");
144MODULE_DESCRIPTION("FSL CAAM ahash descriptors support");
145MODULE_AUTHOR("NXP Semiconductors");
146