109c434b8SThomas Gleixner // SPDX-License-Identifier: GPL-2.0-only 281658ad0SDavid S. Miller /* Glue code for CAMELLIA encryption optimized for sparc64 crypto opcodes. 381658ad0SDavid S. Miller * 481658ad0SDavid S. Miller * Copyright (C) 2012 David S. Miller <davem@davemloft.net> 581658ad0SDavid S. Miller */ 681658ad0SDavid S. Miller 771741680SDavid S. Miller #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt 871741680SDavid S. Miller 981658ad0SDavid S. Miller #include <linux/crypto.h> 1081658ad0SDavid S. Miller #include <linux/init.h> 1181658ad0SDavid S. Miller #include <linux/module.h> 1281658ad0SDavid S. Miller #include <linux/mm.h> 1381658ad0SDavid S. Miller #include <linux/types.h> 1481658ad0SDavid S. Miller #include <crypto/algapi.h> 15*c72a26efSEric Biggers #include <crypto/internal/skcipher.h> 1681658ad0SDavid S. Miller 1781658ad0SDavid S. Miller #include <asm/fpumacro.h> 1881658ad0SDavid S. Miller #include <asm/pstate.h> 1981658ad0SDavid S. Miller #include <asm/elf.h> 2081658ad0SDavid S. Miller 2110803624SDavid S. Miller #include "opcodes.h" 2210803624SDavid S. Miller 2381658ad0SDavid S. Miller #define CAMELLIA_MIN_KEY_SIZE 16 2481658ad0SDavid S. Miller #define CAMELLIA_MAX_KEY_SIZE 32 2581658ad0SDavid S. Miller #define CAMELLIA_BLOCK_SIZE 16 2681658ad0SDavid S. Miller #define CAMELLIA_TABLE_BYTE_LEN 272 2781658ad0SDavid S. Miller 2881658ad0SDavid S. Miller struct camellia_sparc64_ctx { 2981658ad0SDavid S. Miller u64 encrypt_key[CAMELLIA_TABLE_BYTE_LEN / sizeof(u64)]; 3081658ad0SDavid S. Miller u64 decrypt_key[CAMELLIA_TABLE_BYTE_LEN / sizeof(u64)]; 3181658ad0SDavid S. Miller int key_len; 3281658ad0SDavid S. Miller }; 3381658ad0SDavid S. Miller 3481658ad0SDavid S. Miller extern void camellia_sparc64_key_expand(const u32 *in_key, u64 *encrypt_key, 3581658ad0SDavid S. Miller unsigned int key_len, u64 *decrypt_key); 3681658ad0SDavid S. Miller 3781658ad0SDavid S. Miller static int camellia_set_key(struct crypto_tfm *tfm, const u8 *_in_key, 3881658ad0SDavid S. Miller unsigned int key_len) 3981658ad0SDavid S. Miller { 4081658ad0SDavid S. Miller struct camellia_sparc64_ctx *ctx = crypto_tfm_ctx(tfm); 4181658ad0SDavid S. Miller const u32 *in_key = (const u32 *) _in_key; 4281658ad0SDavid S. Miller u32 *flags = &tfm->crt_flags; 4381658ad0SDavid S. Miller 4481658ad0SDavid S. Miller if (key_len != 16 && key_len != 24 && key_len != 32) { 4581658ad0SDavid S. Miller *flags |= CRYPTO_TFM_RES_BAD_KEY_LEN; 4681658ad0SDavid S. Miller return -EINVAL; 4781658ad0SDavid S. Miller } 4881658ad0SDavid S. Miller 4981658ad0SDavid S. Miller ctx->key_len = key_len; 5081658ad0SDavid S. Miller 5181658ad0SDavid S. Miller camellia_sparc64_key_expand(in_key, &ctx->encrypt_key[0], 5281658ad0SDavid S. Miller key_len, &ctx->decrypt_key[0]); 5381658ad0SDavid S. Miller return 0; 5481658ad0SDavid S. Miller } 5581658ad0SDavid S. Miller 56*c72a26efSEric Biggers static int camellia_set_key_skcipher(struct crypto_skcipher *tfm, 57*c72a26efSEric Biggers const u8 *in_key, unsigned int key_len) 58*c72a26efSEric Biggers { 59*c72a26efSEric Biggers return camellia_set_key(crypto_skcipher_tfm(tfm), in_key, key_len); 60*c72a26efSEric Biggers } 61*c72a26efSEric Biggers 6281658ad0SDavid S. Miller extern void camellia_sparc64_crypt(const u64 *key, const u32 *input, 6381658ad0SDavid S. Miller u32 *output, unsigned int key_len); 6481658ad0SDavid S. Miller 6581658ad0SDavid S. Miller static void camellia_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src) 6681658ad0SDavid S. Miller { 6781658ad0SDavid S. Miller struct camellia_sparc64_ctx *ctx = crypto_tfm_ctx(tfm); 6881658ad0SDavid S. Miller 6981658ad0SDavid S. Miller camellia_sparc64_crypt(&ctx->encrypt_key[0], 7081658ad0SDavid S. Miller (const u32 *) src, 7181658ad0SDavid S. Miller (u32 *) dst, ctx->key_len); 7281658ad0SDavid S. Miller } 7381658ad0SDavid S. Miller 7481658ad0SDavid S. Miller static void camellia_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src) 7581658ad0SDavid S. Miller { 7681658ad0SDavid S. Miller struct camellia_sparc64_ctx *ctx = crypto_tfm_ctx(tfm); 7781658ad0SDavid S. Miller 7881658ad0SDavid S. Miller camellia_sparc64_crypt(&ctx->decrypt_key[0], 7981658ad0SDavid S. Miller (const u32 *) src, 8081658ad0SDavid S. Miller (u32 *) dst, ctx->key_len); 8181658ad0SDavid S. Miller } 8281658ad0SDavid S. Miller 8381658ad0SDavid S. Miller extern void camellia_sparc64_load_keys(const u64 *key, unsigned int key_len); 8481658ad0SDavid S. Miller 8581658ad0SDavid S. Miller typedef void ecb_crypt_op(const u64 *input, u64 *output, unsigned int len, 8681658ad0SDavid S. Miller const u64 *key); 8781658ad0SDavid S. Miller 8881658ad0SDavid S. Miller extern ecb_crypt_op camellia_sparc64_ecb_crypt_3_grand_rounds; 8981658ad0SDavid S. Miller extern ecb_crypt_op camellia_sparc64_ecb_crypt_4_grand_rounds; 9081658ad0SDavid S. Miller 91*c72a26efSEric Biggers static int __ecb_crypt(struct skcipher_request *req, bool encrypt) 9281658ad0SDavid S. Miller { 93*c72a26efSEric Biggers struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req); 94*c72a26efSEric Biggers const struct camellia_sparc64_ctx *ctx = crypto_skcipher_ctx(tfm); 95*c72a26efSEric Biggers struct skcipher_walk walk; 9681658ad0SDavid S. Miller ecb_crypt_op *op; 9781658ad0SDavid S. Miller const u64 *key; 98*c72a26efSEric Biggers unsigned int nbytes; 9981658ad0SDavid S. Miller int err; 10081658ad0SDavid S. Miller 10181658ad0SDavid S. Miller op = camellia_sparc64_ecb_crypt_3_grand_rounds; 10281658ad0SDavid S. Miller if (ctx->key_len != 16) 10381658ad0SDavid S. Miller op = camellia_sparc64_ecb_crypt_4_grand_rounds; 10481658ad0SDavid S. Miller 105*c72a26efSEric Biggers err = skcipher_walk_virt(&walk, req, true); 106*c72a26efSEric Biggers if (err) 107*c72a26efSEric Biggers return err; 10881658ad0SDavid S. Miller 10981658ad0SDavid S. Miller if (encrypt) 11081658ad0SDavid S. Miller key = &ctx->encrypt_key[0]; 11181658ad0SDavid S. Miller else 11281658ad0SDavid S. Miller key = &ctx->decrypt_key[0]; 11381658ad0SDavid S. Miller camellia_sparc64_load_keys(key, ctx->key_len); 114*c72a26efSEric Biggers while ((nbytes = walk.nbytes) != 0) { 115*c72a26efSEric Biggers op(walk.src.virt.addr, walk.dst.virt.addr, 116*c72a26efSEric Biggers round_down(nbytes, CAMELLIA_BLOCK_SIZE), key); 117*c72a26efSEric Biggers err = skcipher_walk_done(&walk, nbytes % CAMELLIA_BLOCK_SIZE); 11881658ad0SDavid S. Miller } 11981658ad0SDavid S. Miller fprs_write(0); 12081658ad0SDavid S. Miller return err; 12181658ad0SDavid S. Miller } 12281658ad0SDavid S. Miller 123*c72a26efSEric Biggers static int ecb_encrypt(struct skcipher_request *req) 12481658ad0SDavid S. Miller { 125*c72a26efSEric Biggers return __ecb_crypt(req, true); 12681658ad0SDavid S. Miller } 12781658ad0SDavid S. Miller 128*c72a26efSEric Biggers static int ecb_decrypt(struct skcipher_request *req) 12981658ad0SDavid S. Miller { 130*c72a26efSEric Biggers return __ecb_crypt(req, false); 13181658ad0SDavid S. Miller } 13281658ad0SDavid S. Miller 13381658ad0SDavid S. Miller typedef void cbc_crypt_op(const u64 *input, u64 *output, unsigned int len, 13481658ad0SDavid S. Miller const u64 *key, u64 *iv); 13581658ad0SDavid S. Miller 13681658ad0SDavid S. Miller extern cbc_crypt_op camellia_sparc64_cbc_encrypt_3_grand_rounds; 13781658ad0SDavid S. Miller extern cbc_crypt_op camellia_sparc64_cbc_encrypt_4_grand_rounds; 13881658ad0SDavid S. Miller extern cbc_crypt_op camellia_sparc64_cbc_decrypt_3_grand_rounds; 13981658ad0SDavid S. Miller extern cbc_crypt_op camellia_sparc64_cbc_decrypt_4_grand_rounds; 14081658ad0SDavid S. Miller 141*c72a26efSEric Biggers static int cbc_encrypt(struct skcipher_request *req) 14281658ad0SDavid S. Miller { 143*c72a26efSEric Biggers struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req); 144*c72a26efSEric Biggers const struct camellia_sparc64_ctx *ctx = crypto_skcipher_ctx(tfm); 145*c72a26efSEric Biggers struct skcipher_walk walk; 14681658ad0SDavid S. Miller cbc_crypt_op *op; 14781658ad0SDavid S. Miller const u64 *key; 148*c72a26efSEric Biggers unsigned int nbytes; 14981658ad0SDavid S. Miller int err; 15081658ad0SDavid S. Miller 15181658ad0SDavid S. Miller op = camellia_sparc64_cbc_encrypt_3_grand_rounds; 15281658ad0SDavid S. Miller if (ctx->key_len != 16) 15381658ad0SDavid S. Miller op = camellia_sparc64_cbc_encrypt_4_grand_rounds; 15481658ad0SDavid S. Miller 155*c72a26efSEric Biggers err = skcipher_walk_virt(&walk, req, true); 156*c72a26efSEric Biggers if (err) 157*c72a26efSEric Biggers return err; 15881658ad0SDavid S. Miller 15981658ad0SDavid S. Miller key = &ctx->encrypt_key[0]; 16081658ad0SDavid S. Miller camellia_sparc64_load_keys(key, ctx->key_len); 161*c72a26efSEric Biggers while ((nbytes = walk.nbytes) != 0) { 162*c72a26efSEric Biggers op(walk.src.virt.addr, walk.dst.virt.addr, 163*c72a26efSEric Biggers round_down(nbytes, CAMELLIA_BLOCK_SIZE), key, walk.iv); 164*c72a26efSEric Biggers err = skcipher_walk_done(&walk, nbytes % CAMELLIA_BLOCK_SIZE); 16581658ad0SDavid S. Miller } 16681658ad0SDavid S. Miller fprs_write(0); 16781658ad0SDavid S. Miller return err; 16881658ad0SDavid S. Miller } 16981658ad0SDavid S. Miller 170*c72a26efSEric Biggers static int cbc_decrypt(struct skcipher_request *req) 17181658ad0SDavid S. Miller { 172*c72a26efSEric Biggers struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req); 173*c72a26efSEric Biggers const struct camellia_sparc64_ctx *ctx = crypto_skcipher_ctx(tfm); 174*c72a26efSEric Biggers struct skcipher_walk walk; 17581658ad0SDavid S. Miller cbc_crypt_op *op; 17681658ad0SDavid S. Miller const u64 *key; 177*c72a26efSEric Biggers unsigned int nbytes; 17881658ad0SDavid S. Miller int err; 17981658ad0SDavid S. Miller 18081658ad0SDavid S. Miller op = camellia_sparc64_cbc_decrypt_3_grand_rounds; 18181658ad0SDavid S. Miller if (ctx->key_len != 16) 18281658ad0SDavid S. Miller op = camellia_sparc64_cbc_decrypt_4_grand_rounds; 18381658ad0SDavid S. Miller 184*c72a26efSEric Biggers err = skcipher_walk_virt(&walk, req, true); 185*c72a26efSEric Biggers if (err) 186*c72a26efSEric Biggers return err; 18781658ad0SDavid S. Miller 18881658ad0SDavid S. Miller key = &ctx->decrypt_key[0]; 18981658ad0SDavid S. Miller camellia_sparc64_load_keys(key, ctx->key_len); 190*c72a26efSEric Biggers while ((nbytes = walk.nbytes) != 0) { 191*c72a26efSEric Biggers op(walk.src.virt.addr, walk.dst.virt.addr, 192*c72a26efSEric Biggers round_down(nbytes, CAMELLIA_BLOCK_SIZE), key, walk.iv); 193*c72a26efSEric Biggers err = skcipher_walk_done(&walk, nbytes % CAMELLIA_BLOCK_SIZE); 19481658ad0SDavid S. Miller } 19581658ad0SDavid S. Miller fprs_write(0); 19681658ad0SDavid S. Miller return err; 19781658ad0SDavid S. Miller } 19881658ad0SDavid S. Miller 199*c72a26efSEric Biggers static struct crypto_alg cipher_alg = { 20081658ad0SDavid S. Miller .cra_name = "camellia", 20181658ad0SDavid S. Miller .cra_driver_name = "camellia-sparc64", 20210803624SDavid S. Miller .cra_priority = SPARC_CR_OPCODE_PRIORITY, 20381658ad0SDavid S. Miller .cra_flags = CRYPTO_ALG_TYPE_CIPHER, 20481658ad0SDavid S. Miller .cra_blocksize = CAMELLIA_BLOCK_SIZE, 20581658ad0SDavid S. Miller .cra_ctxsize = sizeof(struct camellia_sparc64_ctx), 20681658ad0SDavid S. Miller .cra_alignmask = 3, 20781658ad0SDavid S. Miller .cra_module = THIS_MODULE, 20881658ad0SDavid S. Miller .cra_u = { 20981658ad0SDavid S. Miller .cipher = { 21081658ad0SDavid S. Miller .cia_min_keysize = CAMELLIA_MIN_KEY_SIZE, 21181658ad0SDavid S. Miller .cia_max_keysize = CAMELLIA_MAX_KEY_SIZE, 21281658ad0SDavid S. Miller .cia_setkey = camellia_set_key, 21381658ad0SDavid S. Miller .cia_encrypt = camellia_encrypt, 21481658ad0SDavid S. Miller .cia_decrypt = camellia_decrypt 21581658ad0SDavid S. Miller } 21681658ad0SDavid S. Miller } 217*c72a26efSEric Biggers }; 218*c72a26efSEric Biggers 219*c72a26efSEric Biggers static struct skcipher_alg skcipher_algs[] = { 220*c72a26efSEric Biggers { 221*c72a26efSEric Biggers .base.cra_name = "ecb(camellia)", 222*c72a26efSEric Biggers .base.cra_driver_name = "ecb-camellia-sparc64", 223*c72a26efSEric Biggers .base.cra_priority = SPARC_CR_OPCODE_PRIORITY, 224*c72a26efSEric Biggers .base.cra_blocksize = CAMELLIA_BLOCK_SIZE, 225*c72a26efSEric Biggers .base.cra_ctxsize = sizeof(struct camellia_sparc64_ctx), 226*c72a26efSEric Biggers .base.cra_alignmask = 7, 227*c72a26efSEric Biggers .base.cra_module = THIS_MODULE, 22881658ad0SDavid S. Miller .min_keysize = CAMELLIA_MIN_KEY_SIZE, 22981658ad0SDavid S. Miller .max_keysize = CAMELLIA_MAX_KEY_SIZE, 230*c72a26efSEric Biggers .setkey = camellia_set_key_skcipher, 23181658ad0SDavid S. Miller .encrypt = ecb_encrypt, 23281658ad0SDavid S. Miller .decrypt = ecb_decrypt, 23381658ad0SDavid S. Miller }, { 234*c72a26efSEric Biggers .base.cra_name = "cbc(camellia)", 235*c72a26efSEric Biggers .base.cra_driver_name = "cbc-camellia-sparc64", 236*c72a26efSEric Biggers .base.cra_priority = SPARC_CR_OPCODE_PRIORITY, 237*c72a26efSEric Biggers .base.cra_blocksize = CAMELLIA_BLOCK_SIZE, 238*c72a26efSEric Biggers .base.cra_ctxsize = sizeof(struct camellia_sparc64_ctx), 239*c72a26efSEric Biggers .base.cra_alignmask = 7, 240*c72a26efSEric Biggers .base.cra_module = THIS_MODULE, 24181658ad0SDavid S. Miller .min_keysize = CAMELLIA_MIN_KEY_SIZE, 24281658ad0SDavid S. Miller .max_keysize = CAMELLIA_MAX_KEY_SIZE, 243a66d7f72SDave Kleikamp .ivsize = CAMELLIA_BLOCK_SIZE, 244*c72a26efSEric Biggers .setkey = camellia_set_key_skcipher, 24581658ad0SDavid S. Miller .encrypt = cbc_encrypt, 24681658ad0SDavid S. Miller .decrypt = cbc_decrypt, 24781658ad0SDavid S. Miller } 24881658ad0SDavid S. Miller }; 24981658ad0SDavid S. Miller 25081658ad0SDavid S. Miller static bool __init sparc64_has_camellia_opcode(void) 25181658ad0SDavid S. Miller { 25281658ad0SDavid S. Miller unsigned long cfr; 25381658ad0SDavid S. Miller 25481658ad0SDavid S. Miller if (!(sparc64_elf_hwcap & HWCAP_SPARC_CRYPTO)) 25581658ad0SDavid S. Miller return false; 25681658ad0SDavid S. Miller 25781658ad0SDavid S. Miller __asm__ __volatile__("rd %%asr26, %0" : "=r" (cfr)); 25881658ad0SDavid S. Miller if (!(cfr & CFR_CAMELLIA)) 25981658ad0SDavid S. Miller return false; 26081658ad0SDavid S. Miller 26181658ad0SDavid S. Miller return true; 26281658ad0SDavid S. Miller } 26381658ad0SDavid S. Miller 26481658ad0SDavid S. Miller static int __init camellia_sparc64_mod_init(void) 26581658ad0SDavid S. Miller { 266*c72a26efSEric Biggers int err; 267*c72a26efSEric Biggers 268*c72a26efSEric Biggers if (!sparc64_has_camellia_opcode()) { 26981658ad0SDavid S. Miller pr_info("sparc64 camellia opcodes not available.\n"); 27081658ad0SDavid S. Miller return -ENODEV; 27181658ad0SDavid S. Miller } 272*c72a26efSEric Biggers pr_info("Using sparc64 camellia opcodes optimized CAMELLIA implementation\n"); 273*c72a26efSEric Biggers err = crypto_register_alg(&cipher_alg); 274*c72a26efSEric Biggers if (err) 275*c72a26efSEric Biggers return err; 276*c72a26efSEric Biggers err = crypto_register_skciphers(skcipher_algs, 277*c72a26efSEric Biggers ARRAY_SIZE(skcipher_algs)); 278*c72a26efSEric Biggers if (err) 279*c72a26efSEric Biggers crypto_unregister_alg(&cipher_alg); 280*c72a26efSEric Biggers return err; 281*c72a26efSEric Biggers } 28281658ad0SDavid S. Miller 28381658ad0SDavid S. Miller static void __exit camellia_sparc64_mod_fini(void) 28481658ad0SDavid S. Miller { 285*c72a26efSEric Biggers crypto_unregister_alg(&cipher_alg); 286*c72a26efSEric Biggers crypto_unregister_skciphers(skcipher_algs, ARRAY_SIZE(skcipher_algs)); 28781658ad0SDavid S. Miller } 28881658ad0SDavid S. Miller 28981658ad0SDavid S. Miller module_init(camellia_sparc64_mod_init); 29081658ad0SDavid S. Miller module_exit(camellia_sparc64_mod_fini); 29181658ad0SDavid S. Miller 29281658ad0SDavid S. Miller MODULE_LICENSE("GPL"); 29381658ad0SDavid S. Miller MODULE_DESCRIPTION("Camellia Cipher Algorithm, sparc64 camellia opcode accelerated"); 29481658ad0SDavid S. Miller 2957d676fdbSMathias Krause MODULE_ALIAS_CRYPTO("camellia"); 296226f7ceaSDavid S. Miller 297226f7ceaSDavid S. Miller #include "crop_devid.c" 298