From nobody Mon Feb 9 15:25:43 2026 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 90C4AEB64D7 for ; Fri, 23 Jun 2023 03:22:40 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230308AbjFWDWj (ORCPT ); Thu, 22 Jun 2023 23:22:39 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:58146 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230433AbjFWDWI (ORCPT ); Thu, 22 Jun 2023 23:22:08 -0400 Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 898361A1 for ; Thu, 22 Jun 2023 20:21:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1687490504; x=1719026504; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=v6oMD+XI9cvs9H/ri9mbGRLCBrfXRtOxe2Uwq1RIVUY=; b=TcAnPIVmGrA22fIu+s6hPMSf3hpqDj+sM31V7iydmxge0TLblYF/w7+z 4jMx0ODLso1579U084SzUf6eqTqYjWrVmWBukw8xJJWTcCMl80BOeXO2/ ZO/xpqd8ASsKoKBAjXQi7hIqQ3gEuAsRARAQ2k6ZizBq0LhuzWtzv2lyU tg03vZZBIaKyZQh53fALhju8uh+Wbw7UuJ2TxVUhaALU7aEZ2EmHz8rsr 1XUAt0QHxASAjIv9HmLabfRAu51qKneu8ka5qnp+4yWnho7wAfQEUDwST MmibPHNvHXNtsiabvCcUD3cjWJedhEDO0yqV4XsSPzLWpHupujcRvKJHr Q==; X-IronPort-AV: E=McAfee;i="6600,9927,10749"; a="359539579" X-IronPort-AV: E=Sophos;i="6.01,150,1684825200"; d="scan'208";a="359539579" Received: from orsmga006.jf.intel.com ([10.7.209.51]) by fmsmga104.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 22 Jun 2023 20:21:44 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6600,9927,10749"; a="692526481" X-IronPort-AV: E=Sophos;i="6.01,150,1684825200"; d="scan'208";a="692526481" Received: from unknown (HELO localhost.localdomain) ([10.226.216.90]) by orsmga006.jf.intel.com with ESMTP; 22 Jun 2023 20:21:43 -0700 From: tien.sung.ang@intel.com To: Dinh Nguyen Cc: linux-kernel@vger.kernel.org, Ang Tien Sung Subject: [PATCH 08/12] firmware: stratix10-svc: ECDSA SHA2 data signing Date: Fri, 23 Jun 2023 11:20:25 +0800 Message-Id: <20230623032029.1755017-9-tien.sung.ang@intel.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230623032029.1755017-1-tien.sung.ang@intel.com> References: <20230623032029.1755017-1-tien.sung.ang@intel.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Type: text/plain; charset="utf-8" From: Ang Tien Sung Support ECDSA SHA2 signing. Signed-off-by: Ang Tien Sung --- drivers/firmware/stratix10-svc.c | 32 ++++++++ include/linux/firmware/intel/stratix10-smc.h | 75 +++++++++++++++++++ .../firmware/intel/stratix10-svc-client.h | 7 ++ 3 files changed, 114 insertions(+) diff --git a/drivers/firmware/stratix10-svc.c b/drivers/firmware/stratix10-= svc.c index 642478ce2855..ccb8f314b624 100644 --- a/drivers/firmware/stratix10-svc.c +++ b/drivers/firmware/stratix10-svc.c @@ -335,6 +335,7 @@ static void svc_thread_recv_status_ok(struct stratix10_= svc_data *p_data, case COMMAND_FCS_CRYPTO_GET_DIGEST_INIT: case COMMAND_FCS_CRYPTO_MAC_VERIFY_INIT: case COMMAND_FCS_CRYPTO_ECDSA_HASH_SIGNING_INIT: + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_INIT: cb_data->status =3D BIT(SVC_STATUS_OK); break; case COMMAND_RECONFIG_DATA_SUBMIT: @@ -377,6 +378,8 @@ static void svc_thread_recv_status_ok(struct stratix10_= svc_data *p_data, case COMMAND_FCS_CRYPTO_MAC_VERIFY_UPDATE: case COMMAND_FCS_CRYPTO_MAC_VERIFY_FINALIZE: case COMMAND_FCS_CRYPTO_ECDSA_HASH_SIGNING_FINALIZE: + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_UPDATE: + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_FINALIZE: cb_data->status =3D BIT(SVC_STATUS_OK); cb_data->kaddr2 =3D svc_pa_to_va(res.a2); cb_data->kaddr3 =3D &res.a3; @@ -676,6 +679,32 @@ static int svc_normal_to_secure_thread(void *data) a5 =3D (unsigned long)pdata->paddr_output; a6 =3D (unsigned long)pdata->size_output; break; + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_INIT: + a0 =3D INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_INIT; + a1 =3D pdata->arg[0]; + a2 =3D pdata->arg[1]; + a3 =3D pdata->arg[2]; + a4 =3D pdata->arg[3]; + a5 =3D pdata->arg[4]; + break; + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_UPDATE: + a0 =3D INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_UPDATE; + a1 =3D pdata->arg[0]; + a2 =3D pdata->arg[1]; + a3 =3D (unsigned long)pdata->paddr; + a4 =3D (unsigned long)pdata->size; + a5 =3D (unsigned long)pdata->paddr_output; + a6 =3D (unsigned long)pdata->size_output; + break; + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_FINALIZE: + a0 =3D INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_FINALIZE; + a1 =3D pdata->arg[0]; + a2 =3D pdata->arg[1]; + a3 =3D (unsigned long)pdata->paddr; + a4 =3D (unsigned long)pdata->size; + a5 =3D (unsigned long)pdata->paddr_output; + a6 =3D (unsigned long)pdata->size_output; + break; /* for polling */ case COMMAND_POLL_SERVICE_STATUS: a0 =3D INTEL_SIP_SMC_SERVICE_COMPLETED; @@ -773,6 +802,9 @@ static int svc_normal_to_secure_thread(void *data) =20 case COMMAND_FCS_CRYPTO_ECDSA_HASH_SIGNING_INIT: case COMMAND_FCS_CRYPTO_ECDSA_HASH_SIGNING_FINALIZE: + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_INIT: + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_UPDATE: + case COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_FINALIZE: cbdata->status =3D BIT(SVC_STATUS_INVALID_PARAM); cbdata->kaddr1 =3D NULL; cbdata->kaddr2 =3D NULL; diff --git a/include/linux/firmware/intel/stratix10-smc.h b/include/linux/f= irmware/intel/stratix10-smc.h index 3283269daf45..3bd814916f3e 100644 --- a/include/linux/firmware/intel/stratix10-smc.h +++ b/include/linux/firmware/intel/stratix10-smc.h @@ -1005,4 +1005,79 @@ INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_FPG= A_CONFIG_COMPLETED_WRITE) #define INTEL_SIP_SMC_FUNCID_ECDSA_HASH_SIGNING_FINALIZE 127 #define INTEL_SIP_SMC_FCS_ECDSA_HASH_SIGNING_FINALIZE \ INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_ECDSA_HASH_SIGNING_FINAL= IZE) + +/** + * Request INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_INIT + * Sync call to digital signature signing request on a data blob + * + * Call register usage: + * a0 INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_INIT + * a1 session ID + * a2 context ID + * a3 key UID + * a4 size of crypto parameter data + * a5 crypto parameter data + * 3:0 ECC algorithm + * 63:4 not used + * a6-a7 not used + * + * Return status: + * a0 INTEL_SIP_SMC_STATUS_OK, INTEL_SIP_SMC_STATUS_NOT_SUPPORTED or + * INTEL_SIP_SMC_STATUS_ERROR + * a1 mailbox errors if a0 is INTEL_SIP_SMC_STATUS_ERROR + * a2-a3 not used + */ +#define INTEL_SIP_SMC_FUNCID_ECDSA_SHA2_DATA_SIGNING_INIT 128 +#define INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_INIT \ + INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_ECDSA_SHA2_DATA_SIGNING_= INIT) + +/** + * Request INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_UPDATE + * Sync call to digital signature signing request on a data blob + * + * Call register usage: + * a0 INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_UPDATE + * a1 session ID + * a2 context ID + * a3 physical address of source + * a4 size of source + * a5 physical address of destination + * a6 size of destination + * a7 not used + * + * Return status: + * a0 INTEL_SIP_SMC_STATUS_OK, INTEL_SIP_SMC_STATUS_NOT_SUPPORTED or + * INTEL_SIP_SMC_STATUS_ERROR + * a1 mailbox errors if a0 is INTEL_SIP_SMC_STATUS_ERROR + * a2 physical address of response data + * a3 size of response data + */ +#define INTEL_SIP_SMC_FUNCID_ECDSA_SHA2_DATA_SIGNING_UPDATE 129 +#define INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_UPDATE \ + INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_ECDSA_SHA2_DATA_SIGNING_= UPDATE) + +/** + * Request INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_FINALIZE + * Sync call to digital signature signing request on a data blob + * + * Call register usage: + * a0 INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_FINALIZE + * a1 session ID + * a2 context ID + * a3 physical address of source + * a4 size of source + * a5 physical address of destation + * a6 size of destation + * a7 not used + * + * Return status: + * a0 INTEL_SIP_SMC_STATUS_OK, INTEL_SIP_SMC_STATUS_NOT_SUPPORTED or + * INTEL_SIP_SMC_STATUS_ERROR + * a1 mailbox errors if a0 is INTEL_SIP_SMC_STATUS_ERROR + * a2 physical address of response data + * a3 size of response data + */ +#define INTEL_SIP_SMC_FUNCID_ECDSA_SHA2_DATA_SIGNING_FINALIZE 130 +#define INTEL_SIP_SMC_FCS_ECDSA_SHA2_DATA_SIGNING_FINALIZE \ + INTEL_SIP_SMC_FAST_CALL_VAL(INTEL_SIP_SMC_FUNCID_ECDSA_SHA2_DATA_SIGNING_= FINALIZE) #endif diff --git a/include/linux/firmware/intel/stratix10-svc-client.h b/include/= linux/firmware/intel/stratix10-svc-client.h index 9569a55fb3ab..875e6e13632e 100644 --- a/include/linux/firmware/intel/stratix10-svc-client.h +++ b/include/linux/firmware/intel/stratix10-svc-client.h @@ -172,6 +172,10 @@ struct stratix10_svc_chan; * digital signature signing request on a data blob, return status is * SVC_STATUS_OK or SVC_STATUS_ERROR * + * @COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING (INIT, UPDATE and FINALIZE): + * send SHA2 digital signature signing request on a data blob, + * return status is SVC_STATUS_OK or SVC_STATUS_ERROR + * */ enum stratix10_svc_command_code { /* for FPGA */ @@ -216,6 +220,9 @@ enum stratix10_svc_command_code { COMMAND_FCS_CRYPTO_MAC_VERIFY_FINALIZE, COMMAND_FCS_CRYPTO_ECDSA_HASH_SIGNING_INIT, COMMAND_FCS_CRYPTO_ECDSA_HASH_SIGNING_FINALIZE, + COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_INIT, + COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_UPDATE, + COMMAND_FCS_CRYPTO_ECDSA_SHA2_DATA_SIGNING_FINALIZE, /* Non-mailbox SMC Call */ COMMAND_SMC_SVC_VERSION =3D 200, }; --=20 2.25.1