1 // SPDX-License-Identifier: GPL-2.0+
2 /* * CAAM control-plane driver backend
3 * Controller-level driver, kernel property detection, initialization
5 * Copyright 2008-2012 Freescale Semiconductor, Inc.
6 * Copyright 2018-2019 NXP
9 #include <linux/device.h>
10 #include <linux/of_address.h>
11 #include <linux/of_irq.h>
12 #include <linux/sys_soc.h>
13 #include <linux/fsl/mc.h>
19 #include "desc_constr.h"
23 EXPORT_SYMBOL(caam_dpaa2
);
30 * Descriptor to instantiate RNG State Handle 0 in normal mode and
31 * load the JDKEK, TDKEK and TDSK registers
33 static void build_instantiation_desc(u32
*desc
, int handle
, int do_sk
)
35 u32
*jump_cmd
, op_flags
;
37 init_job_desc(desc
, 0);
39 op_flags
= OP_TYPE_CLASS1_ALG
| OP_ALG_ALGSEL_RNG
|
40 (handle
<< OP_ALG_AAI_SHIFT
) | OP_ALG_AS_INIT
|
43 /* INIT RNG in non-test mode */
44 append_operation(desc
, op_flags
);
46 if (!handle
&& do_sk
) {
48 * For SH0, Secure Keys must be generated as well
52 jump_cmd
= append_jump(desc
, JUMP_CLASS_CLASS1
);
53 set_jump_tgt_here(desc
, jump_cmd
);
56 * load 1 to clear written reg:
57 * resets the done interrrupt and returns the RNG to idle.
59 append_load_imm_u32(desc
, 1, LDST_SRCDST_WORD_CLRW
);
61 /* Initialize State Handle */
62 append_operation(desc
, OP_TYPE_CLASS1_ALG
| OP_ALG_ALGSEL_RNG
|
66 append_jump(desc
, JUMP_CLASS_CLASS1
| JUMP_TYPE_HALT
);
69 /* Descriptor for deinstantiation of State Handle 0 of the RNG block. */
70 static void build_deinstantiation_desc(u32
*desc
, int handle
)
72 init_job_desc(desc
, 0);
74 /* Uninstantiate State Handle 0 */
75 append_operation(desc
, OP_TYPE_CLASS1_ALG
| OP_ALG_ALGSEL_RNG
|
76 (handle
<< OP_ALG_AAI_SHIFT
) | OP_ALG_AS_INITFINAL
);
78 append_jump(desc
, JUMP_CLASS_CLASS1
| JUMP_TYPE_HALT
);
82 * run_descriptor_deco0 - runs a descriptor on DECO0, under direct control of
83 * the software (no JR/QI used).
84 * @ctrldev - pointer to device
85 * @status - descriptor status, after being run
87 * Return: - 0 if no error occurred
88 * - -ENODEV if the DECO couldn't be acquired
89 * - -EAGAIN if an error occurred while executing the descriptor
91 static inline int run_descriptor_deco0(struct device
*ctrldev
, u32
*desc
,
94 struct caam_drv_private
*ctrlpriv
= dev_get_drvdata(ctrldev
);
95 struct caam_ctrl __iomem
*ctrl
= ctrlpriv
->ctrl
;
96 struct caam_deco __iomem
*deco
= ctrlpriv
->deco
;
97 unsigned int timeout
= 100000;
98 u32 deco_dbg_reg
, deco_state
, flags
;
102 if (ctrlpriv
->virt_en
== 1 ||
104 * Apparently on i.MX8M{Q,M,N,P} it doesn't matter if virt_en == 1
105 * and the following steps should be performed regardless
107 of_machine_is_compatible("fsl,imx8mq") ||
108 of_machine_is_compatible("fsl,imx8mm") ||
109 of_machine_is_compatible("fsl,imx8mn") ||
110 of_machine_is_compatible("fsl,imx8mp")) {
111 clrsetbits_32(&ctrl
->deco_rsr
, 0, DECORSR_JR0
);
113 while (!(rd_reg32(&ctrl
->deco_rsr
) & DECORSR_VALID
) &&
120 clrsetbits_32(&ctrl
->deco_rq
, 0, DECORR_RQD0ENABLE
);
122 while (!(rd_reg32(&ctrl
->deco_rq
) & DECORR_DEN0
) &&
127 dev_err(ctrldev
, "failed to acquire DECO 0\n");
128 clrsetbits_32(&ctrl
->deco_rq
, DECORR_RQD0ENABLE
, 0);
132 for (i
= 0; i
< desc_len(desc
); i
++)
133 wr_reg32(&deco
->descbuf
[i
], caam32_to_cpu(*(desc
+ i
)));
135 flags
= DECO_JQCR_WHL
;
137 * If the descriptor length is longer than 4 words, then the
138 * FOUR bit in JRCTRL register must be set.
140 if (desc_len(desc
) >= 4)
141 flags
|= DECO_JQCR_FOUR
;
143 /* Instruct the DECO to execute it */
144 clrsetbits_32(&deco
->jr_ctl_hi
, 0, flags
);
148 deco_dbg_reg
= rd_reg32(&deco
->desc_dbg
);
150 if (ctrlpriv
->era
< 10)
151 deco_state
= (deco_dbg_reg
& DESC_DBG_DECO_STAT_MASK
) >>
152 DESC_DBG_DECO_STAT_SHIFT
;
154 deco_state
= (rd_reg32(&deco
->dbg_exec
) &
155 DESC_DER_DECO_STAT_MASK
) >>
156 DESC_DER_DECO_STAT_SHIFT
;
159 * If an error occured in the descriptor, then
160 * the DECO status field will be set to 0x0D
162 if (deco_state
== DECO_STAT_HOST_ERR
)
166 } while ((deco_dbg_reg
& DESC_DBG_DECO_STAT_VALID
) && --timeout
);
168 *status
= rd_reg32(&deco
->op_status_hi
) &
169 DECO_OP_STATUS_HI_ERR_MASK
;
171 if (ctrlpriv
->virt_en
== 1)
172 clrsetbits_32(&ctrl
->deco_rsr
, DECORSR_JR0
, 0);
174 /* Mark the DECO as free */
175 clrsetbits_32(&ctrl
->deco_rq
, DECORR_RQD0ENABLE
, 0);
184 * deinstantiate_rng - builds and executes a descriptor on DECO0,
185 * which deinitializes the RNG block.
186 * @ctrldev - pointer to device
187 * @state_handle_mask - bitmask containing the instantiation status
188 * for the RNG4 state handles which exist in
189 * the RNG4 block: 1 if it's been instantiated
191 * Return: - 0 if no error occurred
192 * - -ENOMEM if there isn't enough memory to allocate the descriptor
193 * - -ENODEV if DECO0 couldn't be acquired
194 * - -EAGAIN if an error occurred when executing the descriptor
196 static int deinstantiate_rng(struct device
*ctrldev
, int state_handle_mask
)
201 desc
= kmalloc(CAAM_CMD_SZ
* 3, GFP_KERNEL
| GFP_DMA
);
205 for (sh_idx
= 0; sh_idx
< RNG4_MAX_HANDLES
; sh_idx
++) {
207 * If the corresponding bit is set, then it means the state
208 * handle was initialized by us, and thus it needs to be
209 * deinitialized as well
211 if ((1 << sh_idx
) & state_handle_mask
) {
213 * Create the descriptor for deinstantating this state
216 build_deinstantiation_desc(desc
, sh_idx
);
218 /* Try to run it through DECO0 */
219 ret
= run_descriptor_deco0(ctrldev
, desc
, &status
);
222 (status
&& status
!= JRSTA_SSRC_JUMP_HALT_CC
)) {
224 "Failed to deinstantiate RNG4 SH%d\n",
228 dev_info(ctrldev
, "Deinstantiated RNG4 SH%d\n", sh_idx
);
237 static void devm_deinstantiate_rng(void *data
)
239 struct device
*ctrldev
= data
;
240 struct caam_drv_private
*ctrlpriv
= dev_get_drvdata(ctrldev
);
243 * De-initialize RNG state handles initialized by this driver.
244 * In case of SoCs with Management Complex, RNG is managed by MC f/w.
246 if (ctrlpriv
->rng4_sh_init
)
247 deinstantiate_rng(ctrldev
, ctrlpriv
->rng4_sh_init
);
251 * instantiate_rng - builds and executes a descriptor on DECO0,
252 * which initializes the RNG block.
253 * @ctrldev - pointer to device
254 * @state_handle_mask - bitmask containing the instantiation status
255 * for the RNG4 state handles which exist in
256 * the RNG4 block: 1 if it's been instantiated
257 * by an external entry, 0 otherwise.
258 * @gen_sk - generate data to be loaded into the JDKEK, TDKEK and TDSK;
259 * Caution: this can be done only once; if the keys need to be
260 * regenerated, a POR is required
262 * Return: - 0 if no error occurred
263 * - -ENOMEM if there isn't enough memory to allocate the descriptor
264 * - -ENODEV if DECO0 couldn't be acquired
265 * - -EAGAIN if an error occurred when executing the descriptor
266 * f.i. there was a RNG hardware error due to not "good enough"
267 * entropy being aquired.
269 static int instantiate_rng(struct device
*ctrldev
, int state_handle_mask
,
272 struct caam_drv_private
*ctrlpriv
= dev_get_drvdata(ctrldev
);
273 struct caam_ctrl __iomem
*ctrl
;
274 u32
*desc
, status
= 0, rdsta_val
;
277 ctrl
= (struct caam_ctrl __iomem
*)ctrlpriv
->ctrl
;
278 desc
= kmalloc(CAAM_CMD_SZ
* 7, GFP_KERNEL
| GFP_DMA
);
282 for (sh_idx
= 0; sh_idx
< RNG4_MAX_HANDLES
; sh_idx
++) {
283 const u32 rdsta_if
= RDSTA_IF0
<< sh_idx
;
284 const u32 rdsta_pr
= RDSTA_PR0
<< sh_idx
;
285 const u32 rdsta_mask
= rdsta_if
| rdsta_pr
;
287 * If the corresponding bit is set, this state handle
288 * was initialized by somebody else, so it's left alone.
290 if (rdsta_if
& state_handle_mask
) {
291 if (rdsta_pr
& state_handle_mask
)
295 "RNG4 SH%d was previously instantiated without prediction resistance. Tearing it down\n",
298 ret
= deinstantiate_rng(ctrldev
, rdsta_if
);
303 /* Create the descriptor for instantiating RNG State Handle */
304 build_instantiation_desc(desc
, sh_idx
, gen_sk
);
306 /* Try to run it through DECO0 */
307 ret
= run_descriptor_deco0(ctrldev
, desc
, &status
);
310 * If ret is not 0, or descriptor status is not 0, then
311 * something went wrong. No need to try the next state
312 * handle (if available), bail out here.
313 * Also, if for some reason, the State Handle didn't get
314 * instantiated although the descriptor has finished
315 * without any error (HW optimizations for later
316 * CAAM eras), then try again.
321 rdsta_val
= rd_reg32(&ctrl
->r4tst
[0].rdsta
) & RDSTA_MASK
;
322 if ((status
&& status
!= JRSTA_SSRC_JUMP_HALT_CC
) ||
323 (rdsta_val
& rdsta_mask
) != rdsta_mask
) {
328 dev_info(ctrldev
, "Instantiated RNG4 SH%d\n", sh_idx
);
329 /* Clear the contents before recreating the descriptor */
330 memset(desc
, 0x00, CAAM_CMD_SZ
* 7);
336 ret
= devm_add_action_or_reset(ctrldev
, devm_deinstantiate_rng
,
343 * kick_trng - sets the various parameters for enabling the initialization
344 * of the RNG4 block in CAAM
345 * @pdev - pointer to the platform device
346 * @ent_delay - Defines the length (in system clocks) of each entropy sample.
348 static void kick_trng(struct platform_device
*pdev
, int ent_delay
)
350 struct device
*ctrldev
= &pdev
->dev
;
351 struct caam_drv_private
*ctrlpriv
= dev_get_drvdata(ctrldev
);
352 struct caam_ctrl __iomem
*ctrl
;
353 struct rng4tst __iomem
*r4tst
;
356 ctrl
= (struct caam_ctrl __iomem
*)ctrlpriv
->ctrl
;
357 r4tst
= &ctrl
->r4tst
[0];
360 * Setting both RTMCTL:PRGM and RTMCTL:TRNG_ACC causes TRNG to
361 * properly invalidate the entropy in the entropy register and
362 * force re-generation.
364 clrsetbits_32(&r4tst
->rtmctl
, 0, RTMCTL_PRGM
| RTMCTL_ACC
);
367 * Performance-wise, it does not make sense to
368 * set the delay to a value that is lower
369 * than the last one that worked (i.e. the state handles
370 * were instantiated properly. Thus, instead of wasting
371 * time trying to set the values controlling the sample
372 * frequency, the function simply returns.
374 val
= (rd_reg32(&r4tst
->rtsdctl
) & RTSDCTL_ENT_DLY_MASK
)
375 >> RTSDCTL_ENT_DLY_SHIFT
;
376 if (ent_delay
<= val
)
379 val
= rd_reg32(&r4tst
->rtsdctl
);
380 val
= (val
& ~RTSDCTL_ENT_DLY_MASK
) |
381 (ent_delay
<< RTSDCTL_ENT_DLY_SHIFT
);
382 wr_reg32(&r4tst
->rtsdctl
, val
);
383 /* min. freq. count, equal to 1/4 of the entropy sample length */
384 wr_reg32(&r4tst
->rtfrqmin
, ent_delay
>> 2);
385 /* disable maximum frequency count */
386 wr_reg32(&r4tst
->rtfrqmax
, RTFRQMAX_DISABLE
);
387 /* read the control register */
388 val
= rd_reg32(&r4tst
->rtmctl
);
391 * select raw sampling in both entropy shifter
392 * and statistical checker; ; put RNG4 into run mode
394 clrsetbits_32(&r4tst
->rtmctl
, RTMCTL_PRGM
| RTMCTL_ACC
,
395 RTMCTL_SAMP_MODE_RAW_ES_SC
);
398 static int caam_get_era_from_hw(struct caam_ctrl __iomem
*ctrl
)
400 static const struct {
424 ccbvid
= rd_reg32(&ctrl
->perfmon
.ccb_id
);
425 era
= (ccbvid
& CCBVID_ERA_MASK
) >> CCBVID_ERA_SHIFT
;
426 if (era
) /* This is '0' prior to CAAM ERA-6 */
429 id_ms
= rd_reg32(&ctrl
->perfmon
.caam_id_ms
);
430 ip_id
= (id_ms
& SECVID_MS_IPID_MASK
) >> SECVID_MS_IPID_SHIFT
;
431 maj_rev
= (id_ms
& SECVID_MS_MAJ_REV_MASK
) >> SECVID_MS_MAJ_REV_SHIFT
;
433 for (i
= 0; i
< ARRAY_SIZE(id
); i
++)
434 if (id
[i
].ip_id
== ip_id
&& id
[i
].maj_rev
== maj_rev
)
441 * caam_get_era() - Return the ERA of the SEC on SoC, based
442 * on "sec-era" optional property in the DTS. This property is updated
444 * In case this property is not passed an attempt to retrieve the CAAM
445 * era via register reads will be made.
447 static int caam_get_era(struct caam_ctrl __iomem
*ctrl
)
449 struct device_node
*caam_node
;
453 caam_node
= of_find_compatible_node(NULL
, NULL
, "fsl,sec-v4.0");
454 ret
= of_property_read_u32(caam_node
, "fsl,sec-era", &prop
);
455 of_node_put(caam_node
);
460 return caam_get_era_from_hw(ctrl
);
464 * ERRATA: imx6 devices (imx6D, imx6Q, imx6DL, imx6S, imx6DP and imx6QP)
465 * have an issue wherein AXI bus transactions may not occur in the correct
466 * order. This isn't a problem running single descriptors, but can be if
467 * running multiple concurrent descriptors. Reworking the driver to throttle
468 * to single requests is impractical, thus the workaround is to limit the AXI
469 * pipeline to a depth of 1 (from it's default of 4) to preclude this situation
472 static void handle_imx6_err005766(u32
*mcr
)
474 if (of_machine_is_compatible("fsl,imx6q") ||
475 of_machine_is_compatible("fsl,imx6dl") ||
476 of_machine_is_compatible("fsl,imx6qp"))
477 clrsetbits_32(mcr
, MCFGR_AXIPIPE_MASK
,
478 1 << MCFGR_AXIPIPE_SHIFT
);
481 static const struct of_device_id caam_match
[] = {
483 .compatible
= "fsl,sec-v4.0",
486 .compatible
= "fsl,sec4.0",
490 MODULE_DEVICE_TABLE(of
, caam_match
);
492 struct caam_imx_data
{
493 const struct clk_bulk_data
*clks
;
497 static const struct clk_bulk_data caam_imx6_clks
[] = {
501 { .id
= "emi_slow" },
504 static const struct caam_imx_data caam_imx6_data
= {
505 .clks
= caam_imx6_clks
,
506 .num_clks
= ARRAY_SIZE(caam_imx6_clks
),
509 static const struct clk_bulk_data caam_imx7_clks
[] = {
514 static const struct caam_imx_data caam_imx7_data
= {
515 .clks
= caam_imx7_clks
,
516 .num_clks
= ARRAY_SIZE(caam_imx7_clks
),
519 static const struct clk_bulk_data caam_imx6ul_clks
[] = {
525 static const struct caam_imx_data caam_imx6ul_data
= {
526 .clks
= caam_imx6ul_clks
,
527 .num_clks
= ARRAY_SIZE(caam_imx6ul_clks
),
530 static const struct soc_device_attribute caam_imx_soc_table
[] = {
531 { .soc_id
= "i.MX6UL", .data
= &caam_imx6ul_data
},
532 { .soc_id
= "i.MX6*", .data
= &caam_imx6_data
},
533 { .soc_id
= "i.MX7*", .data
= &caam_imx7_data
},
534 { .soc_id
= "i.MX8M*", .data
= &caam_imx7_data
},
535 { .family
= "Freescale i.MX" },
539 static void disable_clocks(void *data
)
541 struct caam_drv_private
*ctrlpriv
= data
;
543 clk_bulk_disable_unprepare(ctrlpriv
->num_clks
, ctrlpriv
->clks
);
546 static int init_clocks(struct device
*dev
, const struct caam_imx_data
*data
)
548 struct caam_drv_private
*ctrlpriv
= dev_get_drvdata(dev
);
551 ctrlpriv
->num_clks
= data
->num_clks
;
552 ctrlpriv
->clks
= devm_kmemdup(dev
, data
->clks
,
553 data
->num_clks
* sizeof(data
->clks
[0]),
558 ret
= devm_clk_bulk_get(dev
, ctrlpriv
->num_clks
, ctrlpriv
->clks
);
561 "Failed to request all necessary clocks\n");
565 ret
= clk_bulk_prepare_enable(ctrlpriv
->num_clks
, ctrlpriv
->clks
);
568 "Failed to prepare/enable all necessary clocks\n");
572 return devm_add_action_or_reset(dev
, disable_clocks
, ctrlpriv
);
575 #ifdef CONFIG_DEBUG_FS
576 static void caam_remove_debugfs(void *root
)
578 debugfs_remove_recursive(root
);
582 #ifdef CONFIG_FSL_MC_BUS
583 static bool check_version(struct fsl_mc_version
*mc_version
, u32 major
,
584 u32 minor
, u32 revision
)
586 if (mc_version
->major
> major
)
589 if (mc_version
->major
== major
) {
590 if (mc_version
->minor
> minor
)
593 if (mc_version
->minor
== minor
&&
594 mc_version
->revision
> revision
)
602 /* Probe routine for CAAM top (controller) level */
603 static int caam_probe(struct platform_device
*pdev
)
605 int ret
, ring
, gen_sk
, ent_delay
= RTSDCTL_ENT_DLY_MIN
;
607 const struct soc_device_attribute
*imx_soc_match
;
609 struct device_node
*nprop
, *np
;
610 struct caam_ctrl __iomem
*ctrl
;
611 struct caam_drv_private
*ctrlpriv
;
612 #ifdef CONFIG_DEBUG_FS
613 struct caam_perfmon
*perfmon
;
614 struct dentry
*dfs_root
;
616 u32 scfgr
, comp_params
;
619 int BLOCK_OFFSET
= 0;
620 bool pr_support
= false;
622 ctrlpriv
= devm_kzalloc(&pdev
->dev
, sizeof(*ctrlpriv
), GFP_KERNEL
);
627 dev_set_drvdata(dev
, ctrlpriv
);
628 nprop
= pdev
->dev
.of_node
;
630 imx_soc_match
= soc_device_match(caam_imx_soc_table
);
631 caam_imx
= (bool)imx_soc_match
;
634 if (!imx_soc_match
->data
) {
635 dev_err(dev
, "No clock data provided for i.MX SoC");
639 ret
= init_clocks(dev
, imx_soc_match
->data
);
645 /* Get configuration properties from device tree */
646 /* First, get register page */
647 ctrl
= devm_of_iomap(dev
, nprop
, 0, NULL
);
648 ret
= PTR_ERR_OR_ZERO(ctrl
);
650 dev_err(dev
, "caam: of_iomap() failed\n");
654 caam_little_end
= !(bool)(rd_reg32(&ctrl
->perfmon
.status
) &
655 (CSTA_PLEND
| CSTA_ALT_PLEND
));
656 comp_params
= rd_reg32(&ctrl
->perfmon
.comp_parms_ms
);
657 if (comp_params
& CTPR_MS_PS
&& rd_reg32(&ctrl
->mcr
) & MCFGR_LONG_PTR
)
658 caam_ptr_sz
= sizeof(u64
);
660 caam_ptr_sz
= sizeof(u32
);
661 caam_dpaa2
= !!(comp_params
& CTPR_MS_DPAA2
);
662 ctrlpriv
->qi_present
= !!(comp_params
& CTPR_MS_QI_MASK
);
664 #ifdef CONFIG_CAAM_QI
665 /* If (DPAA 1.x) QI present, check whether dependencies are available */
666 if (ctrlpriv
->qi_present
&& !caam_dpaa2
) {
667 ret
= qman_is_probed();
669 return -EPROBE_DEFER
;
670 } else if (ret
< 0) {
671 dev_err(dev
, "failing probe due to qman probe error\n");
675 ret
= qman_portals_probed();
677 return -EPROBE_DEFER
;
678 } else if (ret
< 0) {
679 dev_err(dev
, "failing probe due to qman portals probe error\n");
685 /* Allocating the BLOCK_OFFSET based on the supported page size on
688 pg_size
= (comp_params
& CTPR_MS_PG_SZ_MASK
) >> CTPR_MS_PG_SZ_SHIFT
;
690 BLOCK_OFFSET
= PG_SIZE_4K
;
692 BLOCK_OFFSET
= PG_SIZE_64K
;
694 ctrlpriv
->ctrl
= (struct caam_ctrl __iomem __force
*)ctrl
;
695 ctrlpriv
->assure
= (struct caam_assurance __iomem __force
*)
696 ((__force
uint8_t *)ctrl
+
697 BLOCK_OFFSET
* ASSURE_BLOCK_NUMBER
699 ctrlpriv
->deco
= (struct caam_deco __iomem __force
*)
700 ((__force
uint8_t *)ctrl
+
701 BLOCK_OFFSET
* DECO_BLOCK_NUMBER
704 /* Get the IRQ of the controller (for security violations only) */
705 ctrlpriv
->secvio_irq
= irq_of_parse_and_map(nprop
, 0);
706 np
= of_find_compatible_node(NULL
, NULL
, "fsl,qoriq-mc");
707 ctrlpriv
->mc_en
= !!np
;
710 #ifdef CONFIG_FSL_MC_BUS
711 if (ctrlpriv
->mc_en
) {
712 struct fsl_mc_version
*mc_version
;
714 mc_version
= fsl_mc_get_version();
716 pr_support
= check_version(mc_version
, 10, 20, 0);
718 return -EPROBE_DEFER
;
723 * Enable DECO watchdogs and, if this is a PHYS_ADDR_T_64BIT kernel,
724 * long pointers in master configuration register.
725 * In case of SoCs with Management Complex, MC f/w performs
728 if (!ctrlpriv
->mc_en
)
729 clrsetbits_32(&ctrl
->mcr
, MCFGR_AWCACHE_MASK
,
730 MCFGR_AWCACHE_CACH
| MCFGR_AWCACHE_BUFF
|
731 MCFGR_WDENABLE
| MCFGR_LARGE_BURST
);
733 handle_imx6_err005766(&ctrl
->mcr
);
736 * Read the Compile Time paramters and SCFGR to determine
737 * if Virtualization is enabled for this platform
739 scfgr
= rd_reg32(&ctrl
->scfgr
);
741 ctrlpriv
->virt_en
= 0;
742 if (comp_params
& CTPR_MS_VIRT_EN_INCL
) {
743 /* VIRT_EN_INCL = 1 & VIRT_EN_POR = 1 or
744 * VIRT_EN_INCL = 1 & VIRT_EN_POR = 0 & SCFGR_VIRT_EN = 1
746 if ((comp_params
& CTPR_MS_VIRT_EN_POR
) ||
747 (!(comp_params
& CTPR_MS_VIRT_EN_POR
) &&
748 (scfgr
& SCFGR_VIRT_EN
)))
749 ctrlpriv
->virt_en
= 1;
751 /* VIRT_EN_INCL = 0 && VIRT_EN_POR_VALUE = 1 */
752 if (comp_params
& CTPR_MS_VIRT_EN_POR
)
753 ctrlpriv
->virt_en
= 1;
756 if (ctrlpriv
->virt_en
== 1)
757 clrsetbits_32(&ctrl
->jrstart
, 0, JRSTART_JR0_START
|
758 JRSTART_JR1_START
| JRSTART_JR2_START
|
761 ret
= dma_set_mask_and_coherent(dev
, caam_get_dma_mask(dev
));
763 dev_err(dev
, "dma_set_mask_and_coherent failed (%d)\n", ret
);
767 ctrlpriv
->era
= caam_get_era(ctrl
);
768 ctrlpriv
->domain
= iommu_get_domain_for_dev(dev
);
770 #ifdef CONFIG_DEBUG_FS
772 * FIXME: needs better naming distinction, as some amalgamation of
773 * "caam" and nprop->full_name. The OF name isn't distinctive,
774 * but does separate instances
776 perfmon
= (struct caam_perfmon __force
*)&ctrl
->perfmon
;
778 dfs_root
= debugfs_create_dir(dev_name(dev
), NULL
);
779 ret
= devm_add_action_or_reset(dev
, caam_remove_debugfs
, dfs_root
);
783 ctrlpriv
->ctl
= debugfs_create_dir("ctl", dfs_root
);
786 /* Check to see if (DPAA 1.x) QI present. If so, enable */
787 if (ctrlpriv
->qi_present
&& !caam_dpaa2
) {
788 ctrlpriv
->qi
= (struct caam_queue_if __iomem __force
*)
789 ((__force
uint8_t *)ctrl
+
790 BLOCK_OFFSET
* QI_BLOCK_NUMBER
792 /* This is all that's required to physically enable QI */
793 wr_reg32(&ctrlpriv
->qi
->qi_control_lo
, QICTL_DQEN
);
795 /* If QMAN driver is present, init CAAM-QI backend */
796 #ifdef CONFIG_CAAM_QI
797 ret
= caam_qi_init(pdev
);
799 dev_err(dev
, "caam qi i/f init failed: %d\n", ret
);
804 for_each_available_child_of_node(nprop
, np
)
805 if (of_device_is_compatible(np
, "fsl,sec-v4.0-job-ring") ||
806 of_device_is_compatible(np
, "fsl,sec4.0-job-ring")) {
807 ctrlpriv
->jr
[ring
] = (struct caam_job_ring __iomem __force
*)
808 ((__force
uint8_t *)ctrl
+
809 (ring
+ JR_BLOCK_NUMBER
) *
812 ctrlpriv
->total_jobrs
++;
816 /* If no QI and no rings specified, quit and go home */
817 if ((!ctrlpriv
->qi_present
) && (!ctrlpriv
->total_jobrs
)) {
818 dev_err(dev
, "no queues configured, terminating\n");
822 if (ctrlpriv
->era
< 10)
823 rng_vid
= (rd_reg32(&ctrl
->perfmon
.cha_id_ls
) &
824 CHA_ID_LS_RNG_MASK
) >> CHA_ID_LS_RNG_SHIFT
;
826 rng_vid
= (rd_reg32(&ctrl
->vreg
.rng
) & CHA_VER_VID_MASK
) >>
830 * If SEC has RNG version >= 4 and RNG state handle has not been
831 * already instantiated, do RNG instantiation
832 * In case of SoCs with Management Complex, RNG is managed by MC f/w.
834 if (!(ctrlpriv
->mc_en
&& pr_support
) && rng_vid
>= 4) {
835 ctrlpriv
->rng4_sh_init
=
836 rd_reg32(&ctrl
->r4tst
[0].rdsta
);
838 * If the secure keys (TDKEK, JDKEK, TDSK), were already
839 * generated, signal this to the function that is instantiating
840 * the state handles. An error would occur if RNG4 attempts
841 * to regenerate these keys before the next POR.
843 gen_sk
= ctrlpriv
->rng4_sh_init
& RDSTA_SKVN
? 0 : 1;
844 ctrlpriv
->rng4_sh_init
&= RDSTA_MASK
;
847 rd_reg32(&ctrl
->r4tst
[0].rdsta
) &
850 * If either SH were instantiated by somebody else
851 * (e.g. u-boot) then it is assumed that the entropy
852 * parameters are properly set and thus the function
853 * setting these (kick_trng(...)) is skipped.
854 * Also, if a handle was instantiated, do not change
855 * the TRNG parameters.
857 if (!(ctrlpriv
->rng4_sh_init
|| inst_handles
)) {
859 "Entropy delay = %u\n",
861 kick_trng(pdev
, ent_delay
);
865 * if instantiate_rng(...) fails, the loop will rerun
866 * and the kick_trng(...) function will modfiy the
867 * upper and lower limits of the entropy sampling
868 * interval, leading to a sucessful initialization of
871 ret
= instantiate_rng(dev
, inst_handles
,
875 * if here, the loop will rerun,
876 * so don't hog the CPU
879 } while ((ret
== -EAGAIN
) && (ent_delay
< RTSDCTL_ENT_DLY_MAX
));
881 dev_err(dev
, "failed to instantiate RNG");
885 * Set handles init'ed by this module as the complement of the
886 * already initialized ones
888 ctrlpriv
->rng4_sh_init
= ~ctrlpriv
->rng4_sh_init
& RDSTA_MASK
;
890 /* Enable RDB bit so that RNG works faster */
891 clrsetbits_32(&ctrl
->scfgr
, 0, SCFGR_RDBENABLE
);
894 /* NOTE: RTIC detection ought to go here, around Si time */
896 caam_id
= (u64
)rd_reg32(&ctrl
->perfmon
.caam_id_ms
) << 32 |
897 (u64
)rd_reg32(&ctrl
->perfmon
.caam_id_ls
);
899 /* Report "alive" for developer to see */
900 dev_info(dev
, "device ID = 0x%016llx (Era %d)\n", caam_id
,
902 dev_info(dev
, "job rings = %d, qi = %d\n",
903 ctrlpriv
->total_jobrs
, ctrlpriv
->qi_present
);
905 #ifdef CONFIG_DEBUG_FS
906 debugfs_create_file("rq_dequeued", S_IRUSR
| S_IRGRP
| S_IROTH
,
907 ctrlpriv
->ctl
, &perfmon
->req_dequeued
,
909 debugfs_create_file("ob_rq_encrypted", S_IRUSR
| S_IRGRP
| S_IROTH
,
910 ctrlpriv
->ctl
, &perfmon
->ob_enc_req
,
912 debugfs_create_file("ib_rq_decrypted", S_IRUSR
| S_IRGRP
| S_IROTH
,
913 ctrlpriv
->ctl
, &perfmon
->ib_dec_req
,
915 debugfs_create_file("ob_bytes_encrypted", S_IRUSR
| S_IRGRP
| S_IROTH
,
916 ctrlpriv
->ctl
, &perfmon
->ob_enc_bytes
,
918 debugfs_create_file("ob_bytes_protected", S_IRUSR
| S_IRGRP
| S_IROTH
,
919 ctrlpriv
->ctl
, &perfmon
->ob_prot_bytes
,
921 debugfs_create_file("ib_bytes_decrypted", S_IRUSR
| S_IRGRP
| S_IROTH
,
922 ctrlpriv
->ctl
, &perfmon
->ib_dec_bytes
,
924 debugfs_create_file("ib_bytes_validated", S_IRUSR
| S_IRGRP
| S_IROTH
,
925 ctrlpriv
->ctl
, &perfmon
->ib_valid_bytes
,
928 /* Controller level - global status values */
929 debugfs_create_file("fault_addr", S_IRUSR
| S_IRGRP
| S_IROTH
,
930 ctrlpriv
->ctl
, &perfmon
->faultaddr
,
932 debugfs_create_file("fault_detail", S_IRUSR
| S_IRGRP
| S_IROTH
,
933 ctrlpriv
->ctl
, &perfmon
->faultdetail
,
935 debugfs_create_file("fault_status", S_IRUSR
| S_IRGRP
| S_IROTH
,
936 ctrlpriv
->ctl
, &perfmon
->status
,
939 /* Internal covering keys (useful in non-secure mode only) */
940 ctrlpriv
->ctl_kek_wrap
.data
= (__force
void *)&ctrlpriv
->ctrl
->kek
[0];
941 ctrlpriv
->ctl_kek_wrap
.size
= KEK_KEY_SIZE
* sizeof(u32
);
942 debugfs_create_blob("kek", S_IRUSR
| S_IRGRP
| S_IROTH
, ctrlpriv
->ctl
,
943 &ctrlpriv
->ctl_kek_wrap
);
945 ctrlpriv
->ctl_tkek_wrap
.data
= (__force
void *)&ctrlpriv
->ctrl
->tkek
[0];
946 ctrlpriv
->ctl_tkek_wrap
.size
= KEK_KEY_SIZE
* sizeof(u32
);
947 debugfs_create_blob("tkek", S_IRUSR
| S_IRGRP
| S_IROTH
, ctrlpriv
->ctl
,
948 &ctrlpriv
->ctl_tkek_wrap
);
950 ctrlpriv
->ctl_tdsk_wrap
.data
= (__force
void *)&ctrlpriv
->ctrl
->tdsk
[0];
951 ctrlpriv
->ctl_tdsk_wrap
.size
= KEK_KEY_SIZE
* sizeof(u32
);
952 debugfs_create_blob("tdsk", S_IRUSR
| S_IRGRP
| S_IROTH
, ctrlpriv
->ctl
,
953 &ctrlpriv
->ctl_tdsk_wrap
);
956 ret
= devm_of_platform_populate(dev
);
958 dev_err(dev
, "JR platform devices creation error\n");
963 static struct platform_driver caam_driver
= {
966 .of_match_table
= caam_match
,
971 module_platform_driver(caam_driver
);
973 MODULE_LICENSE("GPL");
974 MODULE_DESCRIPTION("FSL CAAM request backend");
975 MODULE_AUTHOR("Freescale Semiconductor - NMG/STC");