u-boot.git/include/fsl_sec.h, branch v2020.10

crypto/fsl: instantiate the RNG with prediciton resistance

2020-07-27T08:46:29+00:00

If it is already instantiated tear it down first and then reinstanciate
it again with prediction resistance.

Signed-off-by: Michael Walle 
Reviewed-by: Priyanka Jain

crypto/fsl: don't regenerate secure keys

2020-07-27T08:46:29+00:00

The secure keys (TDKEK, JDKEK, TDSK) can only be generated once after a
POR. Otherwise the RNG4 will throw an error.

Signed-off-by: Michael Walle 
Reviewed-by: Horia Geantă 
Reviewed-by: Priyanka Jain

crypto/fsl: support newer SEC modules

2020-07-27T08:46:29+00:00

Since Era 10, the version registers changed. Add the version registers
and use them on newer modules.

Signed-off-by: Michael Walle 
Reviewed-by: Horia Geantă 
Reviewed-by: Priyanka Jain

crypto/fsl: export caam_get_era()

2020-07-27T08:46:29+00:00

We need the era in other modules, too. For example, to get the RNG
version.

Signed-off-by: Michael Walle 
Reviewed-by: Horia Geantă 
Reviewed-by: Priyanka Jain

armv8: lx2160a: add icid setup for platform devices

2019-11-08T05:43:38+00:00

Add ICID setup for the platform devices contained on this chip: usb,
sata, sdhc, sec.

Signed-off-by: Laurentiu Tudor 
Reviewed-by: Horia Geanta 
Reviewed-by: Priyanka Jain

fsl_sec: fix register layout on Layerscape architectures

2019-03-03T16:31:04+00:00

On Layerscape architectures the SEC memory map is 1MB and the
register blocks contained in it are 64KB aligned, not 4KB as
the ccsr_sec structure currently assumes. Fix the layout of
the structure for these architectures.

Signed-off-by: Laurentiu Tudor 
Reviewed-by: Horia Geanta 
Reviewed-by: Bharat Bhushan 
Reviewed-by: Prabhakar Kushwaha

SPDX: Convert all of our single license tags to Linux Kernel style

2018-05-07T13:34:12+00:00

When U-Boot started using SPDX tags we were among the early adopters and
there weren't a lot of other examples to borrow from.  So we picked the
area of the file that usually had a full license text and replaced it
with an appropriate SPDX-License-Identifier: entry.  Since then, the
Linux Kernel has adopted SPDX tags and they place it as the very first
line in a file (except where shebangs are used, then it's second line)
and with slightly different comment styles than us.

In part due to community overlap, in part due to better tag visibility
and in part for other minor reasons, switch over to that style.

This commit changes all instances where we have a single declared
license in the tag as both the before and after are identical in tag
contents.  There's also a few places where I found we did not have a tag
and have introduced one.

Signed-off-by: Tom Rini

crypto/fsl: instantiate all rng state handles

2018-02-09T16:34:34+00:00

Extend the instantiate_rng() function and the corresponding CAAM job
descriptor to instantiate all RNG state handles. This moves the RNG
instantiation code in line with the CAAM kernel driver.

Previously, only the first state handle was instantiated. The second
one was instantiated by the CAAM kernel driver. This works if the
kernel runs in secure mode, but fails in non-secure mode since the
kernel driver uses DEC0 directly instead of over the job ring
interface. Instantiating all RNG state handles in u-boot removes the
need for using DEC0 in the kernel driver, making it possible to use
the CAAM in non-secure mode.

Signed-off-by: Lukas Auer 
Tested-by: Bryan O'Donoghue 
Reviewed-by: York Sun

crypto/fsl: fix BLOB encapsulation and decapsulation

2018-01-08T13:26:03+00:00

The blob_encap and blob_decap functions were not flushing the dcache
before passing data to CAAM/DMA and not invalidating the dcache when
getting data back.
Therefore, blob encapsulation and decapsulation failed with errors like
the following due to data cache incoherency:
"40000006: DECO: desc idx 0: Invalid KEY command"

To ensure coherency, we require the key_mod, src and dst buffers to be
aligned to the cache line size and flush/invalidate the memory regions.
The same requirements apply to the job descriptor.

Tested on an i.MX6Q board.

Reviewed-by: Sumit Garg 
Signed-off-by: Clemens Gruber

crypto: Move CONFIG_SYS_FSL_SEC_LE and _BE to Kconfig

2017-01-05T00:40:19+00:00

Use Kconfig option to set little- or big-endian access to secure
boot and trust architecture.

Signed-off-by: York Sun