1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3  * Copyright 2014-2016 Freescale Semiconductor, Inc.
4  * Copyright 2017 NXP
5  */
6 
7 #include <common.h>
8 #include <errno.h>
9 #include <fsl_sec.h>
10 #include <memalign.h>
11 #include "desc.h"
12 #include "desc_constr.h"
13 #include "jobdesc.h"
14 #include "jr.h"
15 
16 /* Size of MFG descriptor */
17 #define MFG_PUBK_DSC_WORDS 4
18 #define MFG_SIGN_DSC_WORDS 8
19 
mfg_build_sign_dsc(u32 * dsc_ptr,const u8 * m,int size,u8 * dgst,u8 * c,u8 * d)20 static void mfg_build_sign_dsc(u32 *dsc_ptr, const u8 *m, int size,
21 			       u8 *dgst, u8 *c, u8 *d)
22 {
23 	u32 *dsc = dsc_ptr;
24 	struct pdb_mp_sign *pdb;
25 
26 	init_job_desc_pdb(dsc, 0, sizeof(struct pdb_mp_sign));
27 
28 	pdb = (struct pdb_mp_sign *)desc_pdb(dsc);
29 
30 	/* Curve */
31 	pdb->pdb_hdr = (PDB_MP_CSEL_P256);
32 
33 	/* Message Pointer */
34 	pdb_add_ptr(&pdb->dma_addr_msg, virt_to_phys((void *)m));
35 
36 	/* mes-resp Pointer */
37 	pdb_add_ptr(&pdb->dma_addr_hash, virt_to_phys((void *)dgst));
38 
39 	/* C Pointer */
40 	pdb_add_ptr(&pdb->dma_addr_c_sig, virt_to_phys((void *)c));
41 
42 	/* d Pointer */
43 	pdb_add_ptr(&pdb->dma_addr_d_sig, virt_to_phys((void *)d));
44 
45 	/* Message Size */
46 	pdb->img_size = size;
47 
48 	/* MP PubK generate key command */
49 	append_cmd(dsc, (CMD_OPERATION | OP_TYPE_DECAP_PROTOCOL |
50 			 OP_PCLID_MP_SIGN));
51 }
52 
mfg_build_pubk_dsc(u32 * dsc_ptr,u8 * dst)53 static void mfg_build_pubk_dsc(u32 *dsc_ptr, u8 *dst)
54 {
55 	u32 *dsc = dsc_ptr;
56 	struct pdb_mp_pub_k *pdb;
57 
58 	init_job_desc_pdb(dsc, 0, sizeof(struct pdb_mp_pub_k));
59 
60 	pdb = (struct pdb_mp_pub_k *)desc_pdb(dsc);
61 
62 	/* Curve */
63 	pdb->pdb_hdr = (PDB_MP_CSEL_P256);
64 
65 	/* Message Pointer */
66 	pdb_add_ptr(&pdb->dma_pkey, virt_to_phys((void *)dst));
67 
68 	/* MP Sign key command */
69 	append_cmd(dsc, (CMD_OPERATION | OP_TYPE_DECAP_PROTOCOL |
70 			 OP_PCLID_MP_PUB_KEY));
71 }
72 
gen_mppubk(u8 * dst)73 int gen_mppubk(u8 *dst)
74 {
75 	int size, ret;
76 	u32 *dsc;
77 
78 	/* Job Descriptor initialization */
79 	dsc = memalign(ARCH_DMA_MINALIGN,
80 		       sizeof(uint32_t) * MFG_PUBK_DSC_WORDS);
81 	if (!dsc) {
82 		debug("Not enough memory for descriptor allocation\n");
83 		return -ENOMEM;
84 	}
85 
86 	mfg_build_pubk_dsc(dsc, dst);
87 
88 	size = roundup(sizeof(uint32_t) * MFG_PUBK_DSC_WORDS,
89 		       ARCH_DMA_MINALIGN);
90 	flush_dcache_range((unsigned long)dsc, (unsigned long)dsc + size);
91 
92 	size = roundup(FSL_CAAM_MP_PUBK_BYTES, ARCH_DMA_MINALIGN);
93 	flush_dcache_range((unsigned long)dst, (unsigned long)dst + size);
94 
95 	/* Execute Job Descriptor */
96 	puts("\nGenerating Manufacturing Protection Public Key\n");
97 
98 	ret = run_descriptor_jr(dsc);
99 	if (ret) {
100 		debug("Error in public key generation %d\n", ret);
101 		goto err;
102 	}
103 
104 	size = roundup(FSL_CAAM_MP_PUBK_BYTES, ARCH_DMA_MINALIGN);
105 	invalidate_dcache_range((unsigned long)dst, (unsigned long)dst + size);
106 err:
107 	free(dsc);
108 	return ret;
109 }
110 
sign_mppubk(const u8 * m,int data_size,u8 * dgst,u8 * c,u8 * d)111 int sign_mppubk(const u8 *m, int data_size, u8 *dgst, u8 *c, u8 *d)
112 {
113 	int size, ret;
114 	u32 *dsc;
115 
116 	/* Job Descriptor initialization */
117 	dsc = memalign(ARCH_DMA_MINALIGN,
118 		       sizeof(uint32_t) * MFG_SIGN_DSC_WORDS);
119 	if (!dsc) {
120 		debug("Not enough memory for descriptor allocation\n");
121 		return -ENOMEM;
122 	}
123 
124 	mfg_build_sign_dsc(dsc, m, data_size, dgst, c, d);
125 
126 	size = roundup(sizeof(uint32_t) * MFG_SIGN_DSC_WORDS,
127 		       ARCH_DMA_MINALIGN);
128 	flush_dcache_range((unsigned long)dsc, (unsigned long)dsc + size);
129 
130 	size = roundup(data_size, ARCH_DMA_MINALIGN);
131 	flush_dcache_range((unsigned long)m, (unsigned long)m + size);
132 
133 	size = roundup(FSL_CAAM_MP_MES_DGST_BYTES, ARCH_DMA_MINALIGN);
134 	flush_dcache_range((unsigned long)dgst, (unsigned long)dgst + size);
135 
136 	size = roundup(FSL_CAAM_MP_PRVK_BYTES, ARCH_DMA_MINALIGN);
137 	flush_dcache_range((unsigned long)c, (unsigned long)c + size);
138 	flush_dcache_range((unsigned long)d, (unsigned long)d + size);
139 
140 	/* Execute Job Descriptor */
141 	puts("\nSigning message with Manufacturing Protection Private Key\n");
142 
143 	ret = run_descriptor_jr(dsc);
144 	if (ret) {
145 		debug("Error in public key generation %d\n", ret);
146 		goto err;
147 	}
148 
149 	size = roundup(FSL_CAAM_MP_MES_DGST_BYTES, ARCH_DMA_MINALIGN);
150 	invalidate_dcache_range((unsigned long)dgst,
151 				(unsigned long)dgst + size);
152 
153 	size = roundup(FSL_CAAM_MP_PRVK_BYTES, ARCH_DMA_MINALIGN);
154 	invalidate_dcache_range((unsigned long)c, (unsigned long)c + size);
155 	invalidate_dcache_range((unsigned long)d, (unsigned long)d + size);
156 
157 err:
158 	free(dsc);
159 	return ret;
160 }
161