u-boot.git/drivers/crypto, branch v2015.10

Correct License and Copyright information on few files

2015-08-13T00:47:46+00:00

gpio.h - Added missing copyright in few files.
rsa-mod-exp.h - Corrected copyright in the file.
fsl_sec.h - Added missing license in files
drivers/crypto/fsl/Makefile - Removed the incomplete GPLv2 license and replaced it with GPLv2+ license

Signed-off-by: Ruchika Gupta

drivers: hierarchize drivers Kconfig menu

2015-08-13T00:47:44+00:00

The menuconfig for drivers are getting more and more cluttered
and unreadable because too many entries are displayed in a single
flat menu.  Use hierarchic menu for each category.

Signed-off-by: Masahiro Yamada 
Reviewed-by: Simon Glass 
[trini: Update to apply again in a few places, drop USB hunk]
Signed-off-by: Tom Rini

drivers/crypto/fsl: clean-up - use fdt_setprop_u32 helper

2015-08-03T19:06:38+00:00

Signed-off-by: Horia Geantă 
Acked-by: Ruchika Gupta
Reviewed-by: York Sun

drivers/crypto/fsl: fix snooping for write transactions

2015-08-03T19:06:38+00:00

HW coherency won't work properly for CAAM write transactions
if AWCACHE is left to default (POR) value - 4'b0001.
It has to be programmed to 4'b0010.

For platforms that have HW coherency support:
-PPC-based: the update has no effect; CAAM coherency already works
due to the IOMMU (PAMU) driver setting the correct memory coherency
attributes
-ARM-based: the update fixes cache coherency issues,
since IOMMU (SMMU) driver is not programmed to behave similar to PAMU

Fixes: b9eebfade974c ("fsl_sec: Add hardware accelerated SHA256 and SHA1")
Signed-off-by: Horia Geantă 
Reviewed-by: Aneesh Bansal 
Reviewed-by: Mingkai Hu 
Acked-by: Ruchika Gupta
Reviewed-by: York Sun

drivers/crypto/fsl: fix "era" property value on LE platforms

2015-08-03T19:06:38+00:00

Use fdt_setprop_u32() instead of fdt_setprop().

Fixes: 0181937fa371a ("crypto/fsl: Add fixup for crypto node")
Signed-off-by: Horia Geantă 
Reviewed-by: Mingkai Hu 
Acked-by: Ruchika Gupta
Reviewed-by: York Sun

drivers/crypto/fsl: enable raw data instead of von Neumann data

2015-08-03T19:06:37+00:00

The sampling of the oscillator can be done in multiple modes for
generating the entropy value. By default, this is set to von
Neumann. This patch changes the sampling to raw data, since it
has been discovered that the generated entropy has a better
'quality'.

Signed-off-by: Alex Porosanu 
Acked-by: Ruchika Gupta
Reviewed-by: York Sun

drivers/crypto/fsl: disable RNG oscillator maximum frequency check

2015-08-03T19:06:37+00:00

The rtfrqmax & rtfrqmin set the bounds of the expected frequency of the
oscillator, when SEC runs at its maximum frequency. For certain platforms
(f.i. T2080), the oscillator is very fast and thus if the SEC runs at
a lower than normal frequency, the ring oscillator is incorrectly detected
as being out of bounds.

This patch effectively disables the maximum frequency check, by setting a
high enough maximum allowable frequency for the oscillator. The reasoning
behind this is that usually a broken oscillator will run too slow
(i.e. not run at all) rather than run too fast.

Signed-off-by: Alex Porosanu 
Acked-by: Ruchika Gupta
Reviewed-by: York Sun

Merge branch 'master' of git://git.denx.de/u-boot-mpc85xx

2015-03-06T01:50:30+00:00

rsa : Compile Modular Exponentiation files based on CONFIG_RSA_SOFTWARE_EXP

2015-03-05T20:04:59+00:00

Remove dependency of rsa_mod_exp from CONFIG_FIT_SIGNATURE.
As rsa modular exponentiation is an independent module
and can be invoked independently.

Signed-off-by: Gaurav Rana 
Acked-by: Simon Glass 
Reviewed-by: York Sun

imx6: Added DEK blob generator command

2015-03-02T08:57:06+00:00

Freescale's SEC block has built-in Data Encryption
Key(DEK) Blob Protocol which provides a method for
protecting a DEK for non-secure memory storage.
SEC block protects data in a data structure called
a Secret Key Blob, which provides both confidentiality
and integrity protection.
Every time the blob encapsulation is executed,
a AES-256 key is randomly generated to encrypt the DEK.
This key is encrypted with the OTP Secret key
from SoC. The resulting blob consists of the encrypted
AES-256 key, the encrypted DEK, and a 16-bit MAC.

During decapsulation, the reverse process is performed
to get back the original DEK. A caveat to the blob
decapsulation process,  is that the DEK is decrypted
in secure-memory and can only be read by FSL SEC HW.
The DEK is used to decrypt data during encrypted boot.

Commands added
--------------
  dek_blob - encapsulating DEK as a cryptgraphic blob

Commands Syntax
---------------
  dek_blob src dst len

    Encapsulate and create blob of a len-bits DEK at
    address src and store the result at address dst.

Signed-off-by: Raul Cardenas 
Signed-off-by: Nitin Garg 

Signed-off-by: Ulises Cardenas 

Signed-off-by: Ulises Cardenas-B45798