?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Linux 4.18.10
[linux/fpc-iii.git] / drivers / s390 / crypto / zcrypt_api.c
blobfebcdb5135bfd518475cb1fea82517727ab0d99e
1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3 * zcrypt 2.1.0
4 *
5 * Copyright IBM Corp. 2001, 2012
6 * Author(s): Robert Burroughs
7 * Eric Rossman (edrossma@us.ibm.com)
8 * Cornelia Huck <cornelia.huck@de.ibm.com>
9 *
10 * Hotplug & misc device support: Jochen Roehrig (roehrig@de.ibm.com)
11 * Major cleanup & driver split: Martin Schwidefsky <schwidefsky@de.ibm.com>
12 * Ralph Wuerthner <rwuerthn@de.ibm.com>
13 * MSGTYPE restruct: Holger Dengler <hd@linux.vnet.ibm.com>
14 */
15
16 #include <linux/module.h>
17 #include <linux/init.h>
18 #include <linux/interrupt.h>
19 #include <linux/miscdevice.h>
20 #include <linux/fs.h>
21 #include <linux/compat.h>
22 #include <linux/slab.h>
23 #include <linux/atomic.h>
24 #include <linux/uaccess.h>
25 #include <linux/hw_random.h>
26 #include <linux/debugfs.h>
27 #include <asm/debug.h>
28
29 #define CREATE_TRACE_POINTS
30 #include <asm/trace/zcrypt.h>
31
32 #include "zcrypt_api.h"
33 #include "zcrypt_debug.h"
34
35 #include "zcrypt_msgtype6.h"
36 #include "zcrypt_msgtype50.h"
37
38 /*
39 * Module description.
40 */
41 MODULE_AUTHOR("IBM Corporation");
42 MODULE_DESCRIPTION("Cryptographic Coprocessor interface, " \
43 "Copyright IBM Corp. 2001, 2012");
44 MODULE_LICENSE("GPL");
45
46 /*
47 * zcrypt tracepoint functions
48 */
49 EXPORT_TRACEPOINT_SYMBOL(s390_zcrypt_req);
50 EXPORT_TRACEPOINT_SYMBOL(s390_zcrypt_rep);
51
52 static int zcrypt_hwrng_seed = 1;
53 module_param_named(hwrng_seed, zcrypt_hwrng_seed, int, S_IRUSR|S_IRGRP);
54 MODULE_PARM_DESC(hwrng_seed, "Turn on/off hwrng auto seed, default is 1 (on).");
55
56 DEFINE_SPINLOCK(zcrypt_list_lock);
57 LIST_HEAD(zcrypt_card_list);
58 int zcrypt_device_count;
59
60 static atomic_t zcrypt_open_count = ATOMIC_INIT(0);
61 static atomic_t zcrypt_rescan_count = ATOMIC_INIT(0);
62
63 atomic_t zcrypt_rescan_req = ATOMIC_INIT(0);
64 EXPORT_SYMBOL(zcrypt_rescan_req);
65
66 static LIST_HEAD(zcrypt_ops_list);
67
68 /* Zcrypt related debug feature stuff. */
69 debug_info_t *zcrypt_dbf_info;
70
71 /**
72 * Process a rescan of the transport layer.
73 *
74 * Returns 1, if the rescan has been processed, otherwise 0.
75 */
76 static inline int zcrypt_process_rescan(void)
77 {
78 if (atomic_read(&zcrypt_rescan_req)) {
79 atomic_set(&zcrypt_rescan_req, 0);
80 atomic_inc(&zcrypt_rescan_count);
81 ap_bus_force_rescan();
82 ZCRYPT_DBF(DBF_INFO, "rescan count=%07d\n",
83 atomic_inc_return(&zcrypt_rescan_count));
84 return 1;
85 }
86 return 0;
87 }
88
89 void zcrypt_msgtype_register(struct zcrypt_ops *zops)
90 {
91 list_add_tail(&zops->list, &zcrypt_ops_list);
92 }
93
94 void zcrypt_msgtype_unregister(struct zcrypt_ops *zops)
95 {
96 list_del_init(&zops->list);
97 }
98
99 struct zcrypt_ops *zcrypt_msgtype(unsigned char *name, int variant)
100 {
101 struct zcrypt_ops *zops;
102
103 list_for_each_entry(zops, &zcrypt_ops_list, list)
104 if ((zops->variant == variant) &&
105 (!strncmp(zops->name, name, sizeof(zops->name))))
106 return zops;
107 return NULL;
108 }
109 EXPORT_SYMBOL(zcrypt_msgtype);
110
111 /**
112 * zcrypt_read (): Not supported beyond zcrypt 1.3.1.
113 *
114 * This function is not supported beyond zcrypt 1.3.1.
115 */
116 static ssize_t zcrypt_read(struct file *filp, char __user *buf,
117 size_t count, loff_t *f_pos)
118 {
119 return -EPERM;
120 }
121
122 /**
123 * zcrypt_write(): Not allowed.
124 *
125 * Write is is not allowed
126 */
127 static ssize_t zcrypt_write(struct file *filp, const char __user *buf,
128 size_t count, loff_t *f_pos)
129 {
130 return -EPERM;
131 }
132
133 /**
134 * zcrypt_open(): Count number of users.
135 *
136 * Device open function to count number of users.
137 */
138 static int zcrypt_open(struct inode *inode, struct file *filp)
139 {
140 atomic_inc(&zcrypt_open_count);
141 return nonseekable_open(inode, filp);
142 }
143
144 /**
145 * zcrypt_release(): Count number of users.
146 *
147 * Device close function to count number of users.
148 */
149 static int zcrypt_release(struct inode *inode, struct file *filp)
150 {
151 atomic_dec(&zcrypt_open_count);
152 return 0;
153 }
154
155 static inline struct zcrypt_queue *zcrypt_pick_queue(struct zcrypt_card *zc,
156 struct zcrypt_queue *zq,
157 unsigned int weight)
158 {
159 if (!zq || !try_module_get(zq->queue->ap_dev.drv->driver.owner))
160 return NULL;
161 zcrypt_queue_get(zq);
162 get_device(&zq->queue->ap_dev.device);
163 atomic_add(weight, &zc->load);
164 atomic_add(weight, &zq->load);
165 zq->request_count++;
166 return zq;
167 }
168
169 static inline void zcrypt_drop_queue(struct zcrypt_card *zc,
170 struct zcrypt_queue *zq,
171 unsigned int weight)
172 {
173 struct module *mod = zq->queue->ap_dev.drv->driver.owner;
174
175 zq->request_count--;
176 atomic_sub(weight, &zc->load);
177 atomic_sub(weight, &zq->load);
178 put_device(&zq->queue->ap_dev.device);
179 zcrypt_queue_put(zq);
180 module_put(mod);
181 }
182
183 static inline bool zcrypt_card_compare(struct zcrypt_card *zc,
184 struct zcrypt_card *pref_zc,
185 unsigned weight, unsigned pref_weight)
186 {
187 if (!pref_zc)
188 return false;
189 weight += atomic_read(&zc->load);
190 pref_weight += atomic_read(&pref_zc->load);
191 if (weight == pref_weight)
192 return atomic_read(&zc->card->total_request_count) >
193 atomic_read(&pref_zc->card->total_request_count);
194 return weight > pref_weight;
195 }
196
197 static inline bool zcrypt_queue_compare(struct zcrypt_queue *zq,
198 struct zcrypt_queue *pref_zq,
199 unsigned weight, unsigned pref_weight)
200 {
201 if (!pref_zq)
202 return false;
203 weight += atomic_read(&zq->load);
204 pref_weight += atomic_read(&pref_zq->load);
205 if (weight == pref_weight)
206 return zq->queue->total_request_count >
207 pref_zq->queue->total_request_count;
208 return weight > pref_weight;
209 }
210
211 /*
212 * zcrypt ioctls.
213 */
214 static long zcrypt_rsa_modexpo(struct ica_rsa_modexpo *mex)
215 {
216 struct zcrypt_card *zc, *pref_zc;
217 struct zcrypt_queue *zq, *pref_zq;
218 unsigned int weight, pref_weight;
219 unsigned int func_code;
220 int qid = 0, rc = -ENODEV;
221
222 trace_s390_zcrypt_req(mex, TP_ICARSAMODEXPO);
223
224 if (mex->outputdatalength < mex->inputdatalength) {
225 rc = -EINVAL;
226 goto out;
227 }
228
229 /*
230 * As long as outputdatalength is big enough, we can set the
231 * outputdatalength equal to the inputdatalength, since that is the
232 * number of bytes we will copy in any case
233 */
234 mex->outputdatalength = mex->inputdatalength;
235
236 rc = get_rsa_modex_fc(mex, &func_code);
237 if (rc)
238 goto out;
239
240 pref_zc = NULL;
241 pref_zq = NULL;
242 spin_lock(&zcrypt_list_lock);
243 for_each_zcrypt_card(zc) {
244 /* Check for online accelarator and CCA cards */
245 if (!zc->online || !(zc->card->functions & 0x18000000))
246 continue;
247 /* Check for size limits */
248 if (zc->min_mod_size > mex->inputdatalength ||
249 zc->max_mod_size < mex->inputdatalength)
250 continue;
251 /* get weight index of the card device */
252 weight = zc->speed_rating[func_code];
253 if (zcrypt_card_compare(zc, pref_zc, weight, pref_weight))
254 continue;
255 for_each_zcrypt_queue(zq, zc) {
256 /* check if device is online and eligible */
257 if (!zq->online || !zq->ops->rsa_modexpo)
258 continue;
259 if (zcrypt_queue_compare(zq, pref_zq,
260 weight, pref_weight))
261 continue;
262 pref_zc = zc;
263 pref_zq = zq;
264 pref_weight = weight;
265 }
266 }
267 pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, weight);
268 spin_unlock(&zcrypt_list_lock);
269
270 if (!pref_zq) {
271 rc = -ENODEV;
272 goto out;
273 }
274
275 qid = pref_zq->queue->qid;
276 rc = pref_zq->ops->rsa_modexpo(pref_zq, mex);
277
278 spin_lock(&zcrypt_list_lock);
279 zcrypt_drop_queue(pref_zc, pref_zq, weight);
280 spin_unlock(&zcrypt_list_lock);
281
282 out:
283 trace_s390_zcrypt_rep(mex, func_code, rc,
284 AP_QID_CARD(qid), AP_QID_QUEUE(qid));
285 return rc;
286 }
287
288 static long zcrypt_rsa_crt(struct ica_rsa_modexpo_crt *crt)
289 {
290 struct zcrypt_card *zc, *pref_zc;
291 struct zcrypt_queue *zq, *pref_zq;
292 unsigned int weight, pref_weight;
293 unsigned int func_code;
294 int qid = 0, rc = -ENODEV;
295
296 trace_s390_zcrypt_req(crt, TP_ICARSACRT);
297
298 if (crt->outputdatalength < crt->inputdatalength) {
299 rc = -EINVAL;
300 goto out;
301 }
302
303 /*
304 * As long as outputdatalength is big enough, we can set the
305 * outputdatalength equal to the inputdatalength, since that is the
306 * number of bytes we will copy in any case
307 */
308 crt->outputdatalength = crt->inputdatalength;
309
310 rc = get_rsa_crt_fc(crt, &func_code);
311 if (rc)
312 goto out;
313
314 pref_zc = NULL;
315 pref_zq = NULL;
316 spin_lock(&zcrypt_list_lock);
317 for_each_zcrypt_card(zc) {
318 /* Check for online accelarator and CCA cards */
319 if (!zc->online || !(zc->card->functions & 0x18000000))
320 continue;
321 /* Check for size limits */
322 if (zc->min_mod_size > crt->inputdatalength ||
323 zc->max_mod_size < crt->inputdatalength)
324 continue;
325 /* get weight index of the card device */
326 weight = zc->speed_rating[func_code];
327 if (zcrypt_card_compare(zc, pref_zc, weight, pref_weight))
328 continue;
329 for_each_zcrypt_queue(zq, zc) {
330 /* check if device is online and eligible */
331 if (!zq->online || !zq->ops->rsa_modexpo_crt)
332 continue;
333 if (zcrypt_queue_compare(zq, pref_zq,
334 weight, pref_weight))
335 continue;
336 pref_zc = zc;
337 pref_zq = zq;
338 pref_weight = weight;
339 }
340 }
341 pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, weight);
342 spin_unlock(&zcrypt_list_lock);
343
344 if (!pref_zq) {
345 rc = -ENODEV;
346 goto out;
347 }
348
349 qid = pref_zq->queue->qid;
350 rc = pref_zq->ops->rsa_modexpo_crt(pref_zq, crt);
351
352 spin_lock(&zcrypt_list_lock);
353 zcrypt_drop_queue(pref_zc, pref_zq, weight);
354 spin_unlock(&zcrypt_list_lock);
355
356 out:
357 trace_s390_zcrypt_rep(crt, func_code, rc,
358 AP_QID_CARD(qid), AP_QID_QUEUE(qid));
359 return rc;
360 }
361
362 long zcrypt_send_cprb(struct ica_xcRB *xcRB)
363 {
364 struct zcrypt_card *zc, *pref_zc;
365 struct zcrypt_queue *zq, *pref_zq;
366 struct ap_message ap_msg;
367 unsigned int weight, pref_weight;
368 unsigned int func_code;
369 unsigned short *domain;
370 int qid = 0, rc = -ENODEV;
371
372 trace_s390_zcrypt_req(xcRB, TB_ZSECSENDCPRB);
373
374 ap_init_message(&ap_msg);
375 rc = get_cprb_fc(xcRB, &ap_msg, &func_code, &domain);
376 if (rc)
377 goto out;
378
379 pref_zc = NULL;
380 pref_zq = NULL;
381 spin_lock(&zcrypt_list_lock);
382 for_each_zcrypt_card(zc) {
383 /* Check for online CCA cards */
384 if (!zc->online || !(zc->card->functions & 0x10000000))
385 continue;
386 /* Check for user selected CCA card */
387 if (xcRB->user_defined != AUTOSELECT &&
388 xcRB->user_defined != zc->card->id)
389 continue;
390 /* get weight index of the card device */
391 weight = speed_idx_cca(func_code) * zc->speed_rating[SECKEY];
392 if (zcrypt_card_compare(zc, pref_zc, weight, pref_weight))
393 continue;
394 for_each_zcrypt_queue(zq, zc) {
395 /* check if device is online and eligible */
396 if (!zq->online ||
397 !zq->ops->send_cprb ||
398 ((*domain != (unsigned short) AUTOSELECT) &&
399 (*domain != AP_QID_QUEUE(zq->queue->qid))))
400 continue;
401 if (zcrypt_queue_compare(zq, pref_zq,
402 weight, pref_weight))
403 continue;
404 pref_zc = zc;
405 pref_zq = zq;
406 pref_weight = weight;
407 }
408 }
409 pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, weight);
410 spin_unlock(&zcrypt_list_lock);
411
412 if (!pref_zq) {
413 rc = -ENODEV;
414 goto out;
415 }
416
417 /* in case of auto select, provide the correct domain */
418 qid = pref_zq->queue->qid;
419 if (*domain == (unsigned short) AUTOSELECT)
420 *domain = AP_QID_QUEUE(qid);
421
422 rc = pref_zq->ops->send_cprb(pref_zq, xcRB, &ap_msg);
423
424 spin_lock(&zcrypt_list_lock);
425 zcrypt_drop_queue(pref_zc, pref_zq, weight);
426 spin_unlock(&zcrypt_list_lock);
427
428 out:
429 ap_release_message(&ap_msg);
430 trace_s390_zcrypt_rep(xcRB, func_code, rc,
431 AP_QID_CARD(qid), AP_QID_QUEUE(qid));
432 return rc;
433 }
434 EXPORT_SYMBOL(zcrypt_send_cprb);
435
436 static bool is_desired_ep11_card(unsigned int dev_id,
437 unsigned short target_num,
438 struct ep11_target_dev *targets)
439 {
440 while (target_num-- > 0) {
441 if (dev_id == targets->ap_id)
442 return true;
443 targets++;
444 }
445 return false;
446 }
447
448 static bool is_desired_ep11_queue(unsigned int dev_qid,
449 unsigned short target_num,
450 struct ep11_target_dev *targets)
451 {
452 while (target_num-- > 0) {
453 if (AP_MKQID(targets->ap_id, targets->dom_id) == dev_qid)
454 return true;
455 targets++;
456 }
457 return false;
458 }
459
460 static long zcrypt_send_ep11_cprb(struct ep11_urb *xcrb)
461 {
462 struct zcrypt_card *zc, *pref_zc;
463 struct zcrypt_queue *zq, *pref_zq;
464 struct ep11_target_dev *targets;
465 unsigned short target_num;
466 unsigned int weight, pref_weight;
467 unsigned int func_code;
468 struct ap_message ap_msg;
469 int qid = 0, rc = -ENODEV;
470
471 trace_s390_zcrypt_req(xcrb, TP_ZSENDEP11CPRB);
472
473 ap_init_message(&ap_msg);
474
475 target_num = (unsigned short) xcrb->targets_num;
476
477 /* empty list indicates autoselect (all available targets) */
478 targets = NULL;
479 if (target_num != 0) {
480 struct ep11_target_dev __user *uptr;
481
482 targets = kcalloc(target_num, sizeof(*targets), GFP_KERNEL);
483 if (!targets) {
484 rc = -ENOMEM;
485 goto out;
486 }
487
488 uptr = (struct ep11_target_dev __force __user *) xcrb->targets;
489 if (copy_from_user(targets, uptr,
490 target_num * sizeof(*targets))) {
491 rc = -EFAULT;
492 goto out_free;
493 }
494 }
495
496 rc = get_ep11cprb_fc(xcrb, &ap_msg, &func_code);
497 if (rc)
498 goto out_free;
499
500 pref_zc = NULL;
501 pref_zq = NULL;
502 spin_lock(&zcrypt_list_lock);
503 for_each_zcrypt_card(zc) {
504 /* Check for online EP11 cards */
505 if (!zc->online || !(zc->card->functions & 0x04000000))
506 continue;
507 /* Check for user selected EP11 card */
508 if (targets &&
509 !is_desired_ep11_card(zc->card->id, target_num, targets))
510 continue;
511 /* get weight index of the card device */
512 weight = speed_idx_ep11(func_code) * zc->speed_rating[SECKEY];
513 if (zcrypt_card_compare(zc, pref_zc, weight, pref_weight))
514 continue;
515 for_each_zcrypt_queue(zq, zc) {
516 /* check if device is online and eligible */
517 if (!zq->online ||
518 !zq->ops->send_ep11_cprb ||
519 (targets &&
520 !is_desired_ep11_queue(zq->queue->qid,
521 target_num, targets)))
522 continue;
523 if (zcrypt_queue_compare(zq, pref_zq,
524 weight, pref_weight))
525 continue;
526 pref_zc = zc;
527 pref_zq = zq;
528 pref_weight = weight;
529 }
530 }
531 pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, weight);
532 spin_unlock(&zcrypt_list_lock);
533
534 if (!pref_zq) {
535 rc = -ENODEV;
536 goto out_free;
537 }
538
539 qid = pref_zq->queue->qid;
540 rc = pref_zq->ops->send_ep11_cprb(pref_zq, xcrb, &ap_msg);
541
542 spin_lock(&zcrypt_list_lock);
543 zcrypt_drop_queue(pref_zc, pref_zq, weight);
544 spin_unlock(&zcrypt_list_lock);
545
546 out_free:
547 kfree(targets);
548 out:
549 ap_release_message(&ap_msg);
550 trace_s390_zcrypt_rep(xcrb, func_code, rc,
551 AP_QID_CARD(qid), AP_QID_QUEUE(qid));
552 return rc;
553 }
554
555 static long zcrypt_rng(char *buffer)
556 {
557 struct zcrypt_card *zc, *pref_zc;
558 struct zcrypt_queue *zq, *pref_zq;
559 unsigned int weight, pref_weight;
560 unsigned int func_code;
561 struct ap_message ap_msg;
562 unsigned int domain;
563 int qid = 0, rc = -ENODEV;
564
565 trace_s390_zcrypt_req(buffer, TP_HWRNGCPRB);
566
567 ap_init_message(&ap_msg);
568 rc = get_rng_fc(&ap_msg, &func_code, &domain);
569 if (rc)
570 goto out;
571
572 pref_zc = NULL;
573 pref_zq = NULL;
574 spin_lock(&zcrypt_list_lock);
575 for_each_zcrypt_card(zc) {
576 /* Check for online CCA cards */
577 if (!zc->online || !(zc->card->functions & 0x10000000))
578 continue;
579 /* get weight index of the card device */
580 weight = zc->speed_rating[func_code];
581 if (zcrypt_card_compare(zc, pref_zc, weight, pref_weight))
582 continue;
583 for_each_zcrypt_queue(zq, zc) {
584 /* check if device is online and eligible */
585 if (!zq->online || !zq->ops->rng)
586 continue;
587 if (zcrypt_queue_compare(zq, pref_zq,
588 weight, pref_weight))
589 continue;
590 pref_zc = zc;
591 pref_zq = zq;
592 pref_weight = weight;
593 }
594 }
595 pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, weight);
596 spin_unlock(&zcrypt_list_lock);
597
598 if (!pref_zq) {
599 rc = -ENODEV;
600 goto out;
601 }
602
603 qid = pref_zq->queue->qid;
604 rc = pref_zq->ops->rng(pref_zq, buffer, &ap_msg);
605
606 spin_lock(&zcrypt_list_lock);
607 zcrypt_drop_queue(pref_zc, pref_zq, weight);
608 spin_unlock(&zcrypt_list_lock);
609
610 out:
611 ap_release_message(&ap_msg);
612 trace_s390_zcrypt_rep(buffer, func_code, rc,
613 AP_QID_CARD(qid), AP_QID_QUEUE(qid));
614 return rc;
615 }
616
617 static void zcrypt_device_status_mask(struct zcrypt_device_status *devstatus)
618 {
619 struct zcrypt_card *zc;
620 struct zcrypt_queue *zq;
621 struct zcrypt_device_status *stat;
622 int card, queue;
623
624 memset(devstatus, 0, MAX_ZDEV_ENTRIES
625 * sizeof(struct zcrypt_device_status));
626
627 spin_lock(&zcrypt_list_lock);
628 for_each_zcrypt_card(zc) {
629 for_each_zcrypt_queue(zq, zc) {
630 card = AP_QID_CARD(zq->queue->qid);
631 if (card >= MAX_ZDEV_CARDIDS)
632 continue;
633 queue = AP_QID_QUEUE(zq->queue->qid);
634 stat = &devstatus[card * AP_DOMAINS + queue];
635 stat->hwtype = zc->card->ap_dev.device_type;
636 stat->functions = zc->card->functions >> 26;
637 stat->qid = zq->queue->qid;
638 stat->online = zq->online ? 0x01 : 0x00;
639 }
640 }
641 spin_unlock(&zcrypt_list_lock);
642 }
643
644 void zcrypt_device_status_mask_ext(struct zcrypt_device_status_ext *devstatus)
645 {
646 struct zcrypt_card *zc;
647 struct zcrypt_queue *zq;
648 struct zcrypt_device_status_ext *stat;
649 int card, queue;
650
651 memset(devstatus, 0, MAX_ZDEV_ENTRIES_EXT
652 * sizeof(struct zcrypt_device_status_ext));
653
654 spin_lock(&zcrypt_list_lock);
655 for_each_zcrypt_card(zc) {
656 for_each_zcrypt_queue(zq, zc) {
657 card = AP_QID_CARD(zq->queue->qid);
658 queue = AP_QID_QUEUE(zq->queue->qid);
659 stat = &devstatus[card * AP_DOMAINS + queue];
660 stat->hwtype = zc->card->ap_dev.device_type;
661 stat->functions = zc->card->functions >> 26;
662 stat->qid = zq->queue->qid;
663 stat->online = zq->online ? 0x01 : 0x00;
664 }
665 }
666 spin_unlock(&zcrypt_list_lock);
667 }
668 EXPORT_SYMBOL(zcrypt_device_status_mask_ext);
669
670 static void zcrypt_status_mask(char status[], size_t max_adapters)
671 {
672 struct zcrypt_card *zc;
673 struct zcrypt_queue *zq;
674 int card;
675
676 memset(status, 0, max_adapters);
677 spin_lock(&zcrypt_list_lock);
678 for_each_zcrypt_card(zc) {
679 for_each_zcrypt_queue(zq, zc) {
680 card = AP_QID_CARD(zq->queue->qid);
681 if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index
682 || card >= max_adapters)
683 continue;
684 status[card] = zc->online ? zc->user_space_type : 0x0d;
685 }
686 }
687 spin_unlock(&zcrypt_list_lock);
688 }
689
690 static void zcrypt_qdepth_mask(char qdepth[], size_t max_adapters)
691 {
692 struct zcrypt_card *zc;
693 struct zcrypt_queue *zq;
694 int card;
695
696 memset(qdepth, 0, max_adapters);
697 spin_lock(&zcrypt_list_lock);
698 local_bh_disable();
699 for_each_zcrypt_card(zc) {
700 for_each_zcrypt_queue(zq, zc) {
701 card = AP_QID_CARD(zq->queue->qid);
702 if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index
703 || card >= max_adapters)
704 continue;
705 spin_lock(&zq->queue->lock);
706 qdepth[card] =
707 zq->queue->pendingq_count +
708 zq->queue->requestq_count;
709 spin_unlock(&zq->queue->lock);
710 }
711 }
712 local_bh_enable();
713 spin_unlock(&zcrypt_list_lock);
714 }
715
716 static void zcrypt_perdev_reqcnt(int reqcnt[], size_t max_adapters)
717 {
718 struct zcrypt_card *zc;
719 struct zcrypt_queue *zq;
720 int card;
721
722 memset(reqcnt, 0, sizeof(int) * max_adapters);
723 spin_lock(&zcrypt_list_lock);
724 local_bh_disable();
725 for_each_zcrypt_card(zc) {
726 for_each_zcrypt_queue(zq, zc) {
727 card = AP_QID_CARD(zq->queue->qid);
728 if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index
729 || card >= max_adapters)
730 continue;
731 spin_lock(&zq->queue->lock);
732 reqcnt[card] = zq->queue->total_request_count;
733 spin_unlock(&zq->queue->lock);
734 }
735 }
736 local_bh_enable();
737 spin_unlock(&zcrypt_list_lock);
738 }
739
740 static int zcrypt_pendingq_count(void)
741 {
742 struct zcrypt_card *zc;
743 struct zcrypt_queue *zq;
744 int pendingq_count;
745
746 pendingq_count = 0;
747 spin_lock(&zcrypt_list_lock);
748 local_bh_disable();
749 for_each_zcrypt_card(zc) {
750 for_each_zcrypt_queue(zq, zc) {
751 if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index)
752 continue;
753 spin_lock(&zq->queue->lock);
754 pendingq_count += zq->queue->pendingq_count;
755 spin_unlock(&zq->queue->lock);
756 }
757 }
758 local_bh_enable();
759 spin_unlock(&zcrypt_list_lock);
760 return pendingq_count;
761 }
762
763 static int zcrypt_requestq_count(void)
764 {
765 struct zcrypt_card *zc;
766 struct zcrypt_queue *zq;
767 int requestq_count;
768
769 requestq_count = 0;
770 spin_lock(&zcrypt_list_lock);
771 local_bh_disable();
772 for_each_zcrypt_card(zc) {
773 for_each_zcrypt_queue(zq, zc) {
774 if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index)
775 continue;
776 spin_lock(&zq->queue->lock);
777 requestq_count += zq->queue->requestq_count;
778 spin_unlock(&zq->queue->lock);
779 }
780 }
781 local_bh_enable();
782 spin_unlock(&zcrypt_list_lock);
783 return requestq_count;
784 }
785
786 static long zcrypt_unlocked_ioctl(struct file *filp, unsigned int cmd,
787 unsigned long arg)
788 {
789 int rc = 0;
790
791 switch (cmd) {
792 case ICARSAMODEXPO: {
793 struct ica_rsa_modexpo __user *umex = (void __user *) arg;
794 struct ica_rsa_modexpo mex;
795 if (copy_from_user(&mex, umex, sizeof(mex)))
796 return -EFAULT;
797 do {
798 rc = zcrypt_rsa_modexpo(&mex);
799 } while (rc == -EAGAIN);
800 /* on failure: retry once again after a requested rescan */
801 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
802 do {
803 rc = zcrypt_rsa_modexpo(&mex);
804 } while (rc == -EAGAIN);
805 if (rc) {
806 ZCRYPT_DBF(DBF_DEBUG, "ioctl ICARSAMODEXPO rc=%d\n", rc);
807 return rc;
808 }
809 return put_user(mex.outputdatalength, &umex->outputdatalength);
810 }
811 case ICARSACRT: {
812 struct ica_rsa_modexpo_crt __user *ucrt = (void __user *) arg;
813 struct ica_rsa_modexpo_crt crt;
814 if (copy_from_user(&crt, ucrt, sizeof(crt)))
815 return -EFAULT;
816 do {
817 rc = zcrypt_rsa_crt(&crt);
818 } while (rc == -EAGAIN);
819 /* on failure: retry once again after a requested rescan */
820 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
821 do {
822 rc = zcrypt_rsa_crt(&crt);
823 } while (rc == -EAGAIN);
824 if (rc) {
825 ZCRYPT_DBF(DBF_DEBUG, "ioctl ICARSACRT rc=%d\n", rc);
826 return rc;
827 }
828 return put_user(crt.outputdatalength, &ucrt->outputdatalength);
829 }
830 case ZSECSENDCPRB: {
831 struct ica_xcRB __user *uxcRB = (void __user *) arg;
832 struct ica_xcRB xcRB;
833 if (copy_from_user(&xcRB, uxcRB, sizeof(xcRB)))
834 return -EFAULT;
835 do {
836 rc = zcrypt_send_cprb(&xcRB);
837 } while (rc == -EAGAIN);
838 /* on failure: retry once again after a requested rescan */
839 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
840 do {
841 rc = zcrypt_send_cprb(&xcRB);
842 } while (rc == -EAGAIN);
843 if (rc)
844 ZCRYPT_DBF(DBF_DEBUG, "ioctl ZSENDCPRB rc=%d\n", rc);
845 if (copy_to_user(uxcRB, &xcRB, sizeof(xcRB)))
846 return -EFAULT;
847 return rc;
848 }
849 case ZSENDEP11CPRB: {
850 struct ep11_urb __user *uxcrb = (void __user *)arg;
851 struct ep11_urb xcrb;
852 if (copy_from_user(&xcrb, uxcrb, sizeof(xcrb)))
853 return -EFAULT;
854 do {
855 rc = zcrypt_send_ep11_cprb(&xcrb);
856 } while (rc == -EAGAIN);
857 /* on failure: retry once again after a requested rescan */
858 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
859 do {
860 rc = zcrypt_send_ep11_cprb(&xcrb);
861 } while (rc == -EAGAIN);
862 if (rc)
863 ZCRYPT_DBF(DBF_DEBUG, "ioctl ZSENDEP11CPRB rc=%d\n", rc);
864 if (copy_to_user(uxcrb, &xcrb, sizeof(xcrb)))
865 return -EFAULT;
866 return rc;
867 }
868 case ZCRYPT_DEVICE_STATUS: {
869 struct zcrypt_device_status_ext *device_status;
870 size_t total_size = MAX_ZDEV_ENTRIES_EXT
871 * sizeof(struct zcrypt_device_status_ext);
872
873 device_status = kzalloc(total_size, GFP_KERNEL);
874 if (!device_status)
875 return -ENOMEM;
876 zcrypt_device_status_mask_ext(device_status);
877 if (copy_to_user((char __user *) arg, device_status,
878 total_size))
879 rc = -EFAULT;
880 kfree(device_status);
881 return rc;
882 }
883 case ZCRYPT_STATUS_MASK: {
884 char status[AP_DEVICES];
885
886 zcrypt_status_mask(status, AP_DEVICES);
887 if (copy_to_user((char __user *) arg, status, sizeof(status)))
888 return -EFAULT;
889 return 0;
890 }
891 case ZCRYPT_QDEPTH_MASK: {
892 char qdepth[AP_DEVICES];
893
894 zcrypt_qdepth_mask(qdepth, AP_DEVICES);
895 if (copy_to_user((char __user *) arg, qdepth, sizeof(qdepth)))
896 return -EFAULT;
897 return 0;
898 }
899 case ZCRYPT_PERDEV_REQCNT: {
900 int *reqcnt;
901
902 reqcnt = kcalloc(AP_DEVICES, sizeof(int), GFP_KERNEL);
903 if (!reqcnt)
904 return -ENOMEM;
905 zcrypt_perdev_reqcnt(reqcnt, AP_DEVICES);
906 if (copy_to_user((int __user *) arg, reqcnt, sizeof(reqcnt)))
907 rc = -EFAULT;
908 kfree(reqcnt);
909 return rc;
910 }
911 case Z90STAT_REQUESTQ_COUNT:
912 return put_user(zcrypt_requestq_count(), (int __user *) arg);
913 case Z90STAT_PENDINGQ_COUNT:
914 return put_user(zcrypt_pendingq_count(), (int __user *) arg);
915 case Z90STAT_TOTALOPEN_COUNT:
916 return put_user(atomic_read(&zcrypt_open_count),
917 (int __user *) arg);
918 case Z90STAT_DOMAIN_INDEX:
919 return put_user(ap_domain_index, (int __user *) arg);
920 /*
921 * Deprecated ioctls
922 */
923 case ZDEVICESTATUS: {
924 /* the old ioctl supports only 64 adapters */
925 struct zcrypt_device_status *device_status;
926 size_t total_size = MAX_ZDEV_ENTRIES
927 * sizeof(struct zcrypt_device_status);
928
929 device_status = kzalloc(total_size, GFP_KERNEL);
930 if (!device_status)
931 return -ENOMEM;
932 zcrypt_device_status_mask(device_status);
933 if (copy_to_user((char __user *) arg, device_status,
934 total_size))
935 rc = -EFAULT;
936 kfree(device_status);
937 return rc;
938 }
939 case Z90STAT_STATUS_MASK: {
940 /* the old ioctl supports only 64 adapters */
941 char status[MAX_ZDEV_CARDIDS];
942
943 zcrypt_status_mask(status, MAX_ZDEV_CARDIDS);
944 if (copy_to_user((char __user *) arg, status, sizeof(status)))
945 return -EFAULT;
946 return 0;
947 }
948 case Z90STAT_QDEPTH_MASK: {
949 /* the old ioctl supports only 64 adapters */
950 char qdepth[MAX_ZDEV_CARDIDS];
951
952 zcrypt_qdepth_mask(qdepth, MAX_ZDEV_CARDIDS);
953 if (copy_to_user((char __user *) arg, qdepth, sizeof(qdepth)))
954 return -EFAULT;
955 return 0;
956 }
957 case Z90STAT_PERDEV_REQCNT: {
958 /* the old ioctl supports only 64 adapters */
959 int reqcnt[MAX_ZDEV_CARDIDS];
960
961 zcrypt_perdev_reqcnt(reqcnt, MAX_ZDEV_CARDIDS);
962 if (copy_to_user((int __user *) arg, reqcnt, sizeof(reqcnt)))
963 return -EFAULT;
964 return 0;
965 }
966 /* unknown ioctl number */
967 default:
968 ZCRYPT_DBF(DBF_DEBUG, "unknown ioctl 0x%08x\n", cmd);
969 return -ENOIOCTLCMD;
970 }
971 }
972
973 #ifdef CONFIG_COMPAT
974 /*
975 * ioctl32 conversion routines
976 */
977 struct compat_ica_rsa_modexpo {
978 compat_uptr_t inputdata;
979 unsigned int inputdatalength;
980 compat_uptr_t outputdata;
981 unsigned int outputdatalength;
982 compat_uptr_t b_key;
983 compat_uptr_t n_modulus;
984 };
985
986 static long trans_modexpo32(struct file *filp, unsigned int cmd,
987 unsigned long arg)
988 {
989 struct compat_ica_rsa_modexpo __user *umex32 = compat_ptr(arg);
990 struct compat_ica_rsa_modexpo mex32;
991 struct ica_rsa_modexpo mex64;
992 long rc;
993
994 if (copy_from_user(&mex32, umex32, sizeof(mex32)))
995 return -EFAULT;
996 mex64.inputdata = compat_ptr(mex32.inputdata);
997 mex64.inputdatalength = mex32.inputdatalength;
998 mex64.outputdata = compat_ptr(mex32.outputdata);
999 mex64.outputdatalength = mex32.outputdatalength;
1000 mex64.b_key = compat_ptr(mex32.b_key);
1001 mex64.n_modulus = compat_ptr(mex32.n_modulus);
1002 do {
1003 rc = zcrypt_rsa_modexpo(&mex64);
1004 } while (rc == -EAGAIN);
1005 /* on failure: retry once again after a requested rescan */
1006 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
1007 do {
1008 rc = zcrypt_rsa_modexpo(&mex64);
1009 } while (rc == -EAGAIN);
1010 if (rc)
1011 return rc;
1012 return put_user(mex64.outputdatalength,
1013 &umex32->outputdatalength);
1014 }
1015
1016 struct compat_ica_rsa_modexpo_crt {
1017 compat_uptr_t inputdata;
1018 unsigned int inputdatalength;
1019 compat_uptr_t outputdata;
1020 unsigned int outputdatalength;
1021 compat_uptr_t bp_key;
1022 compat_uptr_t bq_key;
1023 compat_uptr_t np_prime;
1024 compat_uptr_t nq_prime;
1025 compat_uptr_t u_mult_inv;
1026 };
1027
1028 static long trans_modexpo_crt32(struct file *filp, unsigned int cmd,
1029 unsigned long arg)
1030 {
1031 struct compat_ica_rsa_modexpo_crt __user *ucrt32 = compat_ptr(arg);
1032 struct compat_ica_rsa_modexpo_crt crt32;
1033 struct ica_rsa_modexpo_crt crt64;
1034 long rc;
1035
1036 if (copy_from_user(&crt32, ucrt32, sizeof(crt32)))
1037 return -EFAULT;
1038 crt64.inputdata = compat_ptr(crt32.inputdata);
1039 crt64.inputdatalength = crt32.inputdatalength;
1040 crt64.outputdata= compat_ptr(crt32.outputdata);
1041 crt64.outputdatalength = crt32.outputdatalength;
1042 crt64.bp_key = compat_ptr(crt32.bp_key);
1043 crt64.bq_key = compat_ptr(crt32.bq_key);
1044 crt64.np_prime = compat_ptr(crt32.np_prime);
1045 crt64.nq_prime = compat_ptr(crt32.nq_prime);
1046 crt64.u_mult_inv = compat_ptr(crt32.u_mult_inv);
1047 do {
1048 rc = zcrypt_rsa_crt(&crt64);
1049 } while (rc == -EAGAIN);
1050 /* on failure: retry once again after a requested rescan */
1051 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
1052 do {
1053 rc = zcrypt_rsa_crt(&crt64);
1054 } while (rc == -EAGAIN);
1055 if (rc)
1056 return rc;
1057 return put_user(crt64.outputdatalength,
1058 &ucrt32->outputdatalength);
1059 }
1060
1061 struct compat_ica_xcRB {
1062 unsigned short agent_ID;
1063 unsigned int user_defined;
1064 unsigned short request_ID;
1065 unsigned int request_control_blk_length;
1066 unsigned char padding1[16 - sizeof (compat_uptr_t)];
1067 compat_uptr_t request_control_blk_addr;
1068 unsigned int request_data_length;
1069 char padding2[16 - sizeof (compat_uptr_t)];
1070 compat_uptr_t request_data_address;
1071 unsigned int reply_control_blk_length;
1072 char padding3[16 - sizeof (compat_uptr_t)];
1073 compat_uptr_t reply_control_blk_addr;
1074 unsigned int reply_data_length;
1075 char padding4[16 - sizeof (compat_uptr_t)];
1076 compat_uptr_t reply_data_addr;
1077 unsigned short priority_window;
1078 unsigned int status;
1079 } __attribute__((packed));
1080
1081 static long trans_xcRB32(struct file *filp, unsigned int cmd,
1082 unsigned long arg)
1083 {
1084 struct compat_ica_xcRB __user *uxcRB32 = compat_ptr(arg);
1085 struct compat_ica_xcRB xcRB32;
1086 struct ica_xcRB xcRB64;
1087 long rc;
1088
1089 if (copy_from_user(&xcRB32, uxcRB32, sizeof(xcRB32)))
1090 return -EFAULT;
1091 xcRB64.agent_ID = xcRB32.agent_ID;
1092 xcRB64.user_defined = xcRB32.user_defined;
1093 xcRB64.request_ID = xcRB32.request_ID;
1094 xcRB64.request_control_blk_length =
1095 xcRB32.request_control_blk_length;
1096 xcRB64.request_control_blk_addr =
1097 compat_ptr(xcRB32.request_control_blk_addr);
1098 xcRB64.request_data_length =
1099 xcRB32.request_data_length;
1100 xcRB64.request_data_address =
1101 compat_ptr(xcRB32.request_data_address);
1102 xcRB64.reply_control_blk_length =
1103 xcRB32.reply_control_blk_length;
1104 xcRB64.reply_control_blk_addr =
1105 compat_ptr(xcRB32.reply_control_blk_addr);
1106 xcRB64.reply_data_length = xcRB32.reply_data_length;
1107 xcRB64.reply_data_addr =
1108 compat_ptr(xcRB32.reply_data_addr);
1109 xcRB64.priority_window = xcRB32.priority_window;
1110 xcRB64.status = xcRB32.status;
1111 do {
1112 rc = zcrypt_send_cprb(&xcRB64);
1113 } while (rc == -EAGAIN);
1114 /* on failure: retry once again after a requested rescan */
1115 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
1116 do {
1117 rc = zcrypt_send_cprb(&xcRB64);
1118 } while (rc == -EAGAIN);
1119 xcRB32.reply_control_blk_length = xcRB64.reply_control_blk_length;
1120 xcRB32.reply_data_length = xcRB64.reply_data_length;
1121 xcRB32.status = xcRB64.status;
1122 if (copy_to_user(uxcRB32, &xcRB32, sizeof(xcRB32)))
1123 return -EFAULT;
1124 return rc;
1125 }
1126
1127 static long zcrypt_compat_ioctl(struct file *filp, unsigned int cmd,
1128 unsigned long arg)
1129 {
1130 if (cmd == ICARSAMODEXPO)
1131 return trans_modexpo32(filp, cmd, arg);
1132 if (cmd == ICARSACRT)
1133 return trans_modexpo_crt32(filp, cmd, arg);
1134 if (cmd == ZSECSENDCPRB)
1135 return trans_xcRB32(filp, cmd, arg);
1136 return zcrypt_unlocked_ioctl(filp, cmd, arg);
1137 }
1138 #endif
1139
1140 /*
1141 * Misc device file operations.
1142 */
1143 static const struct file_operations zcrypt_fops = {
1144 .owner = THIS_MODULE,
1145 .read = zcrypt_read,
1146 .write = zcrypt_write,
1147 .unlocked_ioctl = zcrypt_unlocked_ioctl,
1148 #ifdef CONFIG_COMPAT
1149 .compat_ioctl = zcrypt_compat_ioctl,
1150 #endif
1151 .open = zcrypt_open,
1152 .release = zcrypt_release,
1153 .llseek = no_llseek,
1154 };
1155
1156 /*
1157 * Misc device.
1158 */
1159 static struct miscdevice zcrypt_misc_device = {
1160 .minor = MISC_DYNAMIC_MINOR,
1161 .name = "z90crypt",
1162 .fops = &zcrypt_fops,
1163 };
1164
1165 static int zcrypt_rng_device_count;
1166 static u32 *zcrypt_rng_buffer;
1167 static int zcrypt_rng_buffer_index;
1168 static DEFINE_MUTEX(zcrypt_rng_mutex);
1169
1170 static int zcrypt_rng_data_read(struct hwrng *rng, u32 *data)
1171 {
1172 int rc;
1173
1174 /*
1175 * We don't need locking here because the RNG API guarantees serialized
1176 * read method calls.
1177 */
1178 if (zcrypt_rng_buffer_index == 0) {
1179 rc = zcrypt_rng((char *) zcrypt_rng_buffer);
1180 /* on failure: retry once again after a requested rescan */
1181 if ((rc == -ENODEV) && (zcrypt_process_rescan()))
1182 rc = zcrypt_rng((char *) zcrypt_rng_buffer);
1183 if (rc < 0)
1184 return -EIO;
1185 zcrypt_rng_buffer_index = rc / sizeof *data;
1186 }
1187 *data = zcrypt_rng_buffer[--zcrypt_rng_buffer_index];
1188 return sizeof *data;
1189 }
1190
1191 static struct hwrng zcrypt_rng_dev = {
1192 .name = "zcrypt",
1193 .data_read = zcrypt_rng_data_read,
1194 .quality = 990,
1195 };
1196
1197 int zcrypt_rng_device_add(void)
1198 {
1199 int rc = 0;
1200
1201 mutex_lock(&zcrypt_rng_mutex);
1202 if (zcrypt_rng_device_count == 0) {
1203 zcrypt_rng_buffer = (u32 *) get_zeroed_page(GFP_KERNEL);
1204 if (!zcrypt_rng_buffer) {
1205 rc = -ENOMEM;
1206 goto out;
1207 }
1208 zcrypt_rng_buffer_index = 0;
1209 if (!zcrypt_hwrng_seed)
1210 zcrypt_rng_dev.quality = 0;
1211 rc = hwrng_register(&zcrypt_rng_dev);
1212 if (rc)
1213 goto out_free;
1214 zcrypt_rng_device_count = 1;
1215 } else
1216 zcrypt_rng_device_count++;
1217 mutex_unlock(&zcrypt_rng_mutex);
1218 return 0;
1219
1220 out_free:
1221 free_page((unsigned long) zcrypt_rng_buffer);
1222 out:
1223 mutex_unlock(&zcrypt_rng_mutex);
1224 return rc;
1225 }
1226
1227 void zcrypt_rng_device_remove(void)
1228 {
1229 mutex_lock(&zcrypt_rng_mutex);
1230 zcrypt_rng_device_count--;
1231 if (zcrypt_rng_device_count == 0) {
1232 hwrng_unregister(&zcrypt_rng_dev);
1233 free_page((unsigned long) zcrypt_rng_buffer);
1234 }
1235 mutex_unlock(&zcrypt_rng_mutex);
1236 }
1237
1238 int __init zcrypt_debug_init(void)
1239 {
1240 zcrypt_dbf_info = debug_register("zcrypt", 1, 1,
1241 DBF_MAX_SPRINTF_ARGS * sizeof(long));
1242 debug_register_view(zcrypt_dbf_info, &debug_sprintf_view);
1243 debug_set_level(zcrypt_dbf_info, DBF_ERR);
1244
1245 return 0;
1246 }
1247
1248 void zcrypt_debug_exit(void)
1249 {
1250 debug_unregister(zcrypt_dbf_info);
1251 }
1252
1253 /**
1254 * zcrypt_api_init(): Module initialization.
1255 *
1256 * The module initialization code.
1257 */
1258 int __init zcrypt_api_init(void)
1259 {
1260 int rc;
1261
1262 rc = zcrypt_debug_init();
1263 if (rc)
1264 goto out;
1265
1266 /* Register the request sprayer. */
1267 rc = misc_register(&zcrypt_misc_device);
1268 if (rc < 0)
1269 goto out;
1270
1271 zcrypt_msgtype6_init();
1272 zcrypt_msgtype50_init();
1273 return 0;
1274
1275 out:
1276 return rc;
1277 }
1278
1279 /**
1280 * zcrypt_api_exit(): Module termination.
1281 *
1282 * The module termination code.
1283 */
1284 void __exit zcrypt_api_exit(void)
1285 {
1286 misc_deregister(&zcrypt_misc_device);
1287 zcrypt_msgtype6_exit();
1288 zcrypt_msgtype50_exit();
1289 zcrypt_debug_exit();
1290 }
1291
1292 module_init(zcrypt_api_init);
1293 module_exit(zcrypt_api_exit);
Linux with added FPC-III support