From 33df49519eb19556497bb3fdf442b058be324895 Mon Sep 17 00:00:00 2001 From: Julius Werner Date: Tue, 16 Dec 2014 22:48:26 -0800 Subject: rk3288: Implement support for CRYPTO module and use it in vboot hashing This patch implements support for the CRYPTO module in RK3288 and ties it into the new vboot vb2ex_hwcrypto API. We only implement SHA256 for now, since the engine doesn't support SHA512 and it's very unlikely that we'll ever use SHA1 for anything again. BRANCH=None BUG=chrome-os-partner:32987 TEST=Booted Pinky, confirmed that it uses the hardware crypto engine and that firmware body hashing time dropped to about 1.5ms (from over 70ms). Change-Id: I91d0860b42b93d690d2fa083324d343efe7da5f1 Signed-off-by: Stefan Reinauer Original-Commit-Id: e60d42cbffd0748e13bfe1a281877460ecde936b Original-Change-Id: I92510082b311a48a56224a4fc44b1bbce39b17ac Original-Signed-off-by: Julius Werner Original-Reviewed-on: https://chromium-review.googlesource.com/236436 Original-Reviewed-by: Aaron Durbin Original-Reviewed-by: Randall Spangler Reviewed-on: http://review.coreboot.org/9641 Tested-by: build bot (Jenkins) Reviewed-by: Marc Jones --- src/soc/rockchip/rk3288/Makefile.inc | 1 + src/soc/rockchip/rk3288/bootblock.c | 2 + src/soc/rockchip/rk3288/clock.c | 10 ++ src/soc/rockchip/rk3288/crypto.c | 134 +++++++++++++++++++++++ src/soc/rockchip/rk3288/include/soc/addressmap.h | 2 + src/soc/rockchip/rk3288/include/soc/clock.h | 1 + 6 files changed, 150 insertions(+) create mode 100644 src/soc/rockchip/rk3288/crypto.c (limited to 'src/soc/rockchip') diff --git a/src/soc/rockchip/rk3288/Makefile.inc b/src/soc/rockchip/rk3288/Makefile.inc index 4ad0c146ee..c7e52a9f3e 100644 --- a/src/soc/rockchip/rk3288/Makefile.inc +++ b/src/soc/rockchip/rk3288/Makefile.inc @@ -36,6 +36,7 @@ verstage-y += timer.c verstage-$(CONFIG_DRIVERS_UART) += uart.c verstage-y += gpio.c verstage-y += clock.c +verstage-y += crypto.c verstage-y += i2c.c romstage-y += cbmem.c diff --git a/src/soc/rockchip/rk3288/bootblock.c b/src/soc/rockchip/rk3288/bootblock.c index 9ea3ec02a4..65ad2ee7f2 100644 --- a/src/soc/rockchip/rk3288/bootblock.c +++ b/src/soc/rockchip/rk3288/bootblock.c @@ -39,4 +39,6 @@ static void bootblock_soc_init(void) mmu_config_range_kb((uintptr_t)_sram/KiB, _sram_size/KiB, DCACHE_WRITETHROUGH); dcache_mmu_enable(); + + rkclk_configure_crypto(148500*KHz); } diff --git a/src/soc/rockchip/rk3288/clock.c b/src/soc/rockchip/rk3288/clock.c index ab12e8c896..d7420ea8d6 100644 --- a/src/soc/rockchip/rk3288/clock.c +++ b/src/soc/rockchip/rk3288/clock.c @@ -493,6 +493,16 @@ void rkclk_configure_i2s(unsigned int hz) writel(d << 16 | n, &cru_ptr->cru_clksel_con[8]); } +void rkclk_configure_crypto(unsigned int hz) +{ + u32 div = PD_BUS_ACLK_HZ / hz; + + assert((div - 1 < 4) && (div * hz == PD_BUS_ACLK_HZ)); + assert(hz <= 150*MHz); /* Suggested max in TRM. */ + writel(RK_CLRSETBITS(0x3 << 6, (div - 1) << 6), + &cru_ptr->cru_clksel_con[26]); +} + void rkclk_configure_tsadc(unsigned int hz) { u32 div; diff --git a/src/soc/rockchip/rk3288/crypto.c b/src/soc/rockchip/rk3288/crypto.c new file mode 100644 index 0000000000..60bfa42451 --- /dev/null +++ b/src/soc/rockchip/rk3288/crypto.c @@ -0,0 +1,134 @@ +/* + * This file is part of the coreboot project. + * + * Copyright 2014 Google Inc. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; version 2 of the License. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#include +#include +#include +#include +#include +#include +#include + +enum rk3288_crypto_interrupt_bits { + PKA_DONE = 1 << 5, + HASH_DONE = 1 << 4, + HRDMA_ERR = 1 << 3, + HRDMA_DONE = 1 << 2, + BCDMA_ERR = 1 << 1, + BCDMA_DONE = 1 << 0, +}; + +struct rk3288_crypto { + u32 intsts; + u32 intena; + u32 ctrl; + u32 conf; + u32 brdmas; + u32 btdmas; + u32 btdmal; + u32 hrdmas; + u32 hrdmal; + u8 _res0[0x80 - 0x24]; + u32 aes_ctrl; + u32 aes_sts; + u32 aes_din[4]; + u32 aes_dout[4]; + u32 aes_iv[4]; + u32 aes_key[8]; + u32 aes_cnt[4]; + u8 _res1[0x100 - 0xe8]; + u32 tdes_ctrl; + u32 tdes_sts; + u32 tdes_din[2]; + u32 tdes_dout[2]; + u32 tdes_iv[2]; + u32 tdes_key[3][2]; + u8 _res2[0x180 - 0x138]; + u32 hash_ctrl; + u32 hash_sts; + u32 hash_msg_len; + u32 hash_dout[8]; + u32 hash_seed[5]; + u8 _res3[0x200 - 0x1c0]; + u32 trng_ctrl; + u32 trng_dout[8]; +} *crypto = (void *)CRYPTO_BASE; +check_member(rk3288_crypto, trng_dout[7], 0x220); + +int vb2ex_hwcrypto_digest_init(enum vb2_hash_algorithm hash_alg, + uint32_t data_size) +{ + if (hash_alg != VB2_HASH_SHA256) { + printk(BIOS_INFO, "RK3288 doesn't support hash_alg %d!\n", + hash_alg); + return VB2_ERROR_EX_HWCRYPTO_UNSUPPORTED; + } + + write32(RK_SETBITS(1 << 6), &crypto->ctrl); /* Assert HASH_FLUSH */ + udelay(1); /* for 10+ cycles to */ + write32(RK_CLRBITS(1 << 6), &crypto->ctrl); /* clear out old hash */ + + /* Enable DMA byte swapping for little-endian bus (Byteswap_??FIFO) */ + write32(1 << 5 | 1 << 4 | 1 << 3, &crypto->conf); + + write32(HRDMA_ERR | HRDMA_DONE, &crypto->intena); /* enable interrupt */ + + write32(data_size, &crypto->hash_msg_len); /* program total size */ + write32(1 << 3 | 0x2, &crypto->hash_ctrl); /* swap DOUT, SHA256 */ + + printk(BIOS_DEBUG, "Initialized RK3288 HW crypto for %u byte SHA256\n", + data_size); + return VB2_SUCCESS; +} + +int vb2ex_hwcrypto_digest_extend(const uint8_t *buf, uint32_t size) +{ + uint32_t intsts; + + write32(HRDMA_ERR | HRDMA_DONE, &crypto->intsts); /* clear interrupts */ + + /* NOTE: This assumes that the DMA is reading from uncached SRAM. */ + write32((uint32_t)buf, &crypto->hrdmas); + write32(size / sizeof(uint32_t), &crypto->hrdmal); + write32(RK_SETBITS(1 << 3), &crypto->ctrl); /* Set HASH_START */ + do { + intsts = read32(&crypto->intsts); + if (intsts & HRDMA_ERR) { + printk(BIOS_ERR, "ERROR: DMA error during HW crypto\n"); + return VB2_ERROR_UNKNOWN; + } + } while (!(intsts & HRDMA_DONE)); /* wait for DMA to finish */ + + return VB2_SUCCESS; +} + +int vb2ex_hwcrypto_digest_finalize(uint8_t *digest, uint32_t digest_size) +{ + uint32_t *dest = (uint32_t *)digest; + uint32_t *src = crypto->hash_dout; + assert(digest_size == sizeof(crypto->hash_dout)); + + while (!(read32(&crypto->hash_sts) & 0x1)) + /* wait for crypto engine to set HASH_DONE bit */; + + while ((uint8_t *)dest < digest + digest_size) + *dest++ = read32(src++); + + return VB2_SUCCESS; +} diff --git a/src/soc/rockchip/rk3288/include/soc/addressmap.h b/src/soc/rockchip/rk3288/include/soc/addressmap.h index 9be7f7bd0e..14f145f8ab 100644 --- a/src/soc/rockchip/rk3288/include/soc/addressmap.h +++ b/src/soc/rockchip/rk3288/include/soc/addressmap.h @@ -78,6 +78,8 @@ #define TIMER6_BASE 0xFF810000 #define TIMER7_BASE 0xFF810020 +#define CRYPTO_BASE 0xFF8A0000 + #define VOP_BIG_BASE 0xFF930000 #define VOP_LIT_BASE 0xFF940000 #define EDP_BASE 0xFF970000 diff --git a/src/soc/rockchip/rk3288/include/soc/clock.h b/src/soc/rockchip/rk3288/include/soc/clock.h index cbf4ba0df3..6694485791 100644 --- a/src/soc/rockchip/rk3288/include/soc/clock.h +++ b/src/soc/rockchip/rk3288/include/soc/clock.h @@ -45,6 +45,7 @@ void rkclk_ddr_phy_ctl_reset(u32 ch, u32 n); void rkclk_configure_ddr(unsigned int hz); void rkclk_configure_i2s(unsigned int hz); void rkclk_configure_cpu(void); +void rkclk_configure_crypto(unsigned int hz); void rkclk_configure_tsadc(unsigned int hz); void rkclk_configure_vop_aclk(u32 vop_id, u32 aclk_hz); int rkclk_configure_vop_dclk(u32 vop_id, u32 dclk_hz); -- cgit v1.2.3