1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
|
// SPDX-License-Identifier: Apache-2.0
/*
* NX Cryptographic accellerators
*
* Copyright 2015-2019 IBM Corp.
*/
#include <skiboot.h>
#include <chip.h>
#include <xscom.h>
#include <io.h>
#include <cpu.h>
#include <nx.h>
/* Configuration settings */
#define CFG_SYM_FC_ENABLE (0) /* disable all sym functions */
#define CFG_SYM_ENABLE (0) /* disable sym engines */
#define CFG_ASYM_FC_ENABLE (0) /* disable all asym functions */
#define CFG_ASYM_ENABLE (0) /* disable asym engines */
#define CFG_CRB_IQ_SYM (0) /* don't use any extra input queues */
#define CFG_CRB_IQ_ASYM (0) /* don't use any extra input queues */
#define AES_SHA_MAX_RR (1) /* valid range: 1-8 */
#define AES_SHA_CSB_WR NX_DMA_CSB_WR_PDMA
#define AES_SHA_COMPLETION_MODE NX_DMA_COMPLETION_MODE_PDMA
#define AES_SHA_CPB_WR NX_DMA_CPB_WR_DMA_NOPAD
#define AES_SHA_OUTPUT_DATA_WR NX_DMA_OUTPUT_DATA_WR_DMA
#define AMF_MAX_RR (1) /* valid range: 1-8 */
#define AMF_CSB_WR NX_DMA_CSB_WR_PDMA
#define AMF_COMPLETION_MODE NX_DMA_COMPLETION_MODE_PDMA
#define AMF_CPB_WR (0) /* CPB WR not done with AMF */
#define AMF_OUTPUT_DATA_WR NX_DMA_OUTPUT_DATA_WR_DMA
#define EE_CH7 (0) /* disable engine AMF 3(P8) */
#define EE_CH6 (0) /* disable engine AMF 2(P8) */
#define EE_CH5 (0) /* disable engine AMF 1(P8) */
#define EE_CH4 (0) /* disable engine SYM AMF 0(P8) */
#define EE_CH3 (0) /* disable engine SYM 1 */
#define EE_CH2 (0) /* disable engine SYM 0 */
static int nx_cfg_sym(u32 gcid, u64 xcfg)
{
u64 cfg, ci, ct;
int rc, instance = gcid + 1;
BUILD_ASSERT(MAX_CHIPS < NX_SYM_CFG_CI_MAX);
rc = xscom_read(gcid, xcfg, &cfg);
if (rc) {
prerror("NX%d: ERROR: XSCOM SYM config read failure %d\n",
gcid, rc);
return rc;
}
ct = GETFIELD(NX_SYM_CFG_CT, cfg);
if (!ct)
prlog(PR_INFO, "NX%d: SYM CT set to %u\n", gcid, NX_CT_SYM);
else if (ct == NX_CT_SYM)
prlog(PR_INFO, "NX%d: SYM CT already set to %u\n",
gcid, NX_CT_SYM);
else
prlog(PR_INFO, "NX%d: SYM CT already set to %u, "
"changing to %u\n", gcid, (unsigned int)ct, NX_CT_SYM);
ct = NX_CT_SYM;
cfg = SETFIELD(NX_SYM_CFG_CT, cfg, ct);
/* Coprocessor Instance must be shifted left.
* See hw doc Section 5.5.1.
*/
ci = GETFIELD(NX_SYM_CFG_CI, cfg) >> NX_SYM_CFG_CI_LSHIFT;
if (!ci)
prlog(PR_INFO, "NX%d: SYM CI set to %d\n", gcid, instance);
else if (ci == instance)
prlog(PR_INFO, "NX%d: SYM CI already set to %u\n", gcid,
(unsigned int)ci);
else
prlog(PR_INFO, "NX%d: SYM CI already set to %u, "
"changing to %d\n", gcid, (unsigned int)ci, instance);
ci = instance;
cfg = SETFIELD(NX_SYM_CFG_CI, cfg, ci << NX_SYM_CFG_CI_LSHIFT);
cfg = SETFIELD(NX_SYM_CFG_FC_ENABLE, cfg, CFG_SYM_FC_ENABLE);
cfg = SETFIELD(NX_SYM_CFG_ENABLE, cfg, CFG_SYM_ENABLE);
rc = xscom_write(gcid, xcfg, cfg);
if (rc)
prerror("NX%d: ERROR: SYM CT %u CI %u config failure %d\n",
gcid, (unsigned int)ct, (unsigned int)ci, rc);
else
prlog(PR_DEBUG, "NX%d: SYM Config 0x%016lx\n",
gcid, (unsigned long)cfg);
return rc;
}
static int nx_cfg_asym(u32 gcid, u64 xcfg)
{
u64 cfg, ci, ct;
int rc, instance = gcid + 1;
BUILD_ASSERT(MAX_CHIPS < NX_ASYM_CFG_CI_MAX);
rc = xscom_read(gcid, xcfg, &cfg);
if (rc) {
prerror("NX%d: ERROR: XSCOM ASYM config read failure %d\n",
gcid, rc);
return rc;
}
ct = GETFIELD(NX_ASYM_CFG_CT, cfg);
if (!ct)
prlog(PR_INFO, "NX%d: ASYM CT set to %u\n",
gcid, NX_CT_ASYM);
else if (ct == NX_CT_ASYM)
prlog(PR_INFO, "NX%d: ASYM CT already set to %u\n",
gcid, NX_CT_ASYM);
else
prlog(PR_INFO, "NX%d: ASYM CT already set to %u, "
"changing to %u\n", gcid, (unsigned int)ct, NX_CT_ASYM);
ct = NX_CT_ASYM;
cfg = SETFIELD(NX_ASYM_CFG_CT, cfg, ct);
/* Coprocessor Instance must be shifted left.
* See hw doc Section 5.5.1.
*/
ci = GETFIELD(NX_ASYM_CFG_CI, cfg) >> NX_ASYM_CFG_CI_LSHIFT;
if (!ci)
prlog(PR_INFO, "NX%d: ASYM CI set to %d\n", gcid, instance);
else if (ci == instance)
prlog(PR_INFO, "NX%d: ASYM CI already set to %u\n", gcid,
(unsigned int)ci);
else
prlog(PR_INFO, "NX%d: ASYM CI already set to %u, "
"changing to %d\n", gcid, (unsigned int)ci, instance);
ci = instance;
cfg = SETFIELD(NX_ASYM_CFG_CI, cfg, ci << NX_ASYM_CFG_CI_LSHIFT);
cfg = SETFIELD(NX_ASYM_CFG_FC_ENABLE, cfg, CFG_ASYM_FC_ENABLE);
cfg = SETFIELD(NX_ASYM_CFG_ENABLE, cfg, CFG_ASYM_ENABLE);
rc = xscom_write(gcid, xcfg, cfg);
if (rc)
prerror("NX%d: ERROR: ASYM CT %u CI %u config failure %d\n",
gcid, (unsigned int)ct, (unsigned int)ci, rc);
else
prlog(PR_DEBUG, "NX%d: ASYM Config 0x%016lx\n",
gcid, (unsigned long)cfg);
return rc;
}
static int nx_cfg_dma(u32 gcid, u64 xcfg)
{
u64 cfg;
int rc;
rc = xscom_read(gcid, xcfg, &cfg);
if (rc) {
prerror("NX%d: ERROR: XSCOM DMA config read failure %d\n",
gcid, rc);
return rc;
}
cfg = SETFIELD(NX_DMA_CFG_AES_SHA_MAX_RR, cfg,
AES_SHA_MAX_RR);
cfg = SETFIELD(NX_DMA_CFG_AES_SHA_CSB_WR, cfg,
AES_SHA_CSB_WR);
cfg = SETFIELD(NX_DMA_CFG_AES_SHA_COMPLETION_MODE, cfg,
AES_SHA_COMPLETION_MODE);
cfg = SETFIELD(NX_DMA_CFG_AES_SHA_CPB_WR, cfg,
AES_SHA_CPB_WR);
cfg = SETFIELD(NX_DMA_CFG_AES_SHA_OUTPUT_DATA_WR, cfg,
AES_SHA_OUTPUT_DATA_WR);
cfg = SETFIELD(NX_DMA_CFG_AMF_MAX_RR, cfg,
AMF_MAX_RR);
cfg = SETFIELD(NX_DMA_CFG_AMF_CSB_WR, cfg,
AMF_CSB_WR);
cfg = SETFIELD(NX_DMA_CFG_AMF_COMPLETION_MODE, cfg,
AMF_COMPLETION_MODE);
cfg = SETFIELD(NX_DMA_CFG_AMF_CPB_WR, cfg,
AMF_CPB_WR);
cfg = SETFIELD(NX_DMA_CFG_AMF_OUTPUT_DATA_WR, cfg,
AMF_OUTPUT_DATA_WR);
rc = xscom_write(gcid, xcfg, cfg);
if (rc)
prerror("NX%d: ERROR: DMA config failure %d\n", gcid, rc);
else
prlog(PR_DEBUG, "NX%d: DMA 0x%016lx\n", gcid,
(unsigned long)cfg);
return rc;
}
static int nx_cfg_iq(u32 gcid, u64 xcfg)
{
u64 cfg;
int rc;
rc = xscom_read(gcid, xcfg, &cfg);
if (rc) {
prerror("NX%d: ERROR: XSCOM CRB IQ config read failure %d\n",
gcid, rc);
return rc;
}
cfg = SETFIELD(NX_CRB_IQ_SYM, cfg, CFG_CRB_IQ_SYM);
cfg = SETFIELD(NX_CRB_IQ_ASYM, cfg, CFG_CRB_IQ_ASYM);
rc = xscom_write(gcid, xcfg, cfg);
if (rc)
prerror("NX%d: ERROR: CRB Input Queue failure %d\n", gcid, rc);
else
prlog(PR_DEBUG, "NX%d: CRB Input Queue 0x%016lx\n",
gcid, (unsigned long)cfg);
return rc;
}
static int nx_cfg_ee(u32 gcid, u64 xcfg)
{
u64 cfg;
int rc;
rc = xscom_read(gcid, xcfg, &cfg);
if (rc) {
prerror("NX%d: ERROR: XSCOM EE config read failure %d\n",
gcid, rc);
return rc;
}
cfg = SETFIELD(NX_EE_CFG_CH7, cfg, EE_CH7);
cfg = SETFIELD(NX_EE_CFG_CH6, cfg, EE_CH6);
cfg = SETFIELD(NX_EE_CFG_CH5, cfg, EE_CH5);
cfg = SETFIELD(NX_EE_CFG_CH4, cfg, EE_CH4);
cfg = SETFIELD(NX_EE_CFG_CH3, cfg, EE_CH3);
cfg = SETFIELD(NX_EE_CFG_CH2, cfg, EE_CH2);
rc = xscom_write(gcid, xcfg, cfg);
if (rc)
prerror("NX%d: ERROR: Engine Enable failure %d\n", gcid, rc);
else
prlog(PR_DEBUG, "NX%d: Engine Enable 0x%016lx\n",
gcid, (unsigned long)cfg);
return rc;
}
void nx_create_crypto_node(struct dt_node *node)
{
u32 gcid;
u32 pb_base;
u64 cfg_dma, cfg_sym, cfg_asym, cfg_iq, cfg_ee;
int rc;
gcid = dt_get_chip_id(node);
pb_base = dt_get_address(node, 0, NULL);
prlog(PR_INFO, "NX%d: Crypto at 0x%x\n", gcid, pb_base);
if (dt_node_is_compatible(node, "ibm,power8-nx")) {
cfg_dma = pb_base + NX_P8_DMA_CFG;
cfg_sym = pb_base + NX_P8_SYM_CFG;
cfg_asym = pb_base + NX_P8_ASYM_CFG;
cfg_iq = pb_base + NX_P8_CRB_IQ;
cfg_ee = pb_base + NX_P8_EE_CFG;
} else if (dt_node_is_compatible(node, "ibm,power9-nx")) {
prlog(PR_INFO, "NX%d: POWER9 nx-crypto not yet supported\n",
gcid);
return;
} else {
prerror("NX%d: ERROR: Unknown NX type!\n", gcid);
return;
}
rc = nx_cfg_dma(gcid, cfg_dma);
if (rc)
return;
rc = nx_cfg_sym(gcid, cfg_sym);
if (rc)
return;
rc = nx_cfg_asym(gcid, cfg_asym);
if (rc)
return;
rc = nx_cfg_iq(gcid, cfg_iq);
if (rc)
return;
rc = nx_cfg_ee(gcid, cfg_ee);
if (rc)
return;
prlog(PR_INFO, "NX%d: Crypto Coprocessors Disabled (not supported)\n", gcid);
}
|
