20 Dec, 2011
4 commits
-
Access to the SEC4 DECOs (DEscriptor COntrollers) (for debug purposes)
isn't supported or used, and its register access initialization code
erroneously makes illegal i/o accesses that show up as errors when
run under simulation. Remove it until proper support (via DECORR)
is added.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
the polarity of the definition for error propagation was reverse
in the initial desc.h. Fix desc.h and its users.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
manual removal of double-spaces - no non-whitespace changes.
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
this is the result of running unexpand -a on desc.h.
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu
30 Nov, 2011
1 commit
-
This patch converts the drivers in drivers/crypto/* to use the
module_platform_driver() macro which makes the code smaller and a bit
simpler.Cc: James Hsiao
Cc: Sebastian Andrzej Siewior
Cc: Kim Phillips
Cc: "David S. Miller"
Signed-off-by: Axel Lin
Acked-by: Vladimir Zapolskiy
Acked-by: Jamie Iles
Signed-off-by: Herbert Xu
21 Nov, 2011
1 commit
-
specifically, add these algorithm combinations:
authenc-hmac-md5-cbc-aes-caam
authenc-hmac-md5-cbc-des3_ede-caam
authenc-hmac-md5-cbc-des-caamSigned-off-by: Kim Phillips
Signed-off-by: Herbert Xu
26 Jul, 2011
1 commit
-
* 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6:
fs: take the ACL checks to common code
bury posix_acl_..._masq() variants
kill boilerplates around posix_acl_create_masq()
generic_acl: no need to clone acl just to push it to set_cached_acl()
kill boilerplate around posix_acl_chmod_masq()
reiserfs: cache negative ACLs for v1 stat format
xfs: cache negative ACLs if there is no attribute fork
9p: do no return 0 from ->check_acl without actually checking
vfs: move ACL cache lookup into generic code
CIFS: Fix oops while mounting with prefixpath
xfs: Fix wrong return value of xfs_file_aio_write
fix devtmpfs race
caam: don't pass bogus S_IFCHR to debugfs_create_...()
get rid of create_proc_entry() abuses - proc_mkdir() is there for purpose
asus-wmi: ->is_visible() can't return negative
fix jffs2 ACLs on big-endian with 16bit mode_t
9p: close ACL leaks
ocfs2_init_acl(): fix a leak
VFS : mount lock scalability for internal mounts
24 Jul, 2011
1 commit
-
it will be replaced with S_IFREG anyway
Signed-off-by: Al Viro
15 Jul, 2011
4 commits
-
caam now supports encrypt and decrypt
for aes, des and 3desSigned-off-by: Yuan Kang
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
Job descriptors only contain header and seq pointers.
Other commands are stored in separate shared descriptors
for encrypt, decrypt and givencrypt, stored as arrays
in caam_ctx.This requires additional macros to create math commands
to calculate assoclen and cryptlen.Signed-off-by: Yuan Kang
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
caam_ctx.key_phys to key_dma
caam_alg_template supports multiple algorithm types
listed in union, which requires cases for
different types in function caam_alg_allocSigned-off-by: Yuan Kang
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
"aead_authenc" and "ipsec_esp" changed to "aead,"
except for function "ipsec_esp," which is changed
to "init_aead_job."Variable name of aead_request structures changed
to "req" and name of aead_givcrypt_request structure
changed to "areq"Signed-off-by: Yuan Kang
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu
30 Jun, 2011
2 commits
-
drivers/crypto/caam/ctrl.c: In function 'caam_probe':
drivers/crypto/caam/ctrl.c:55:23: warning: unused variable 'perfmon'Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
setkey allocates 16 bytes (CAAM_CMD_SZ *
DESC_AEAD_SHARED_TEXT_LEN) shy of what is needed to
store the shared descriptor, resulting in memory
corruption. Fix this.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu
19 May, 2011
4 commits
-
In doing so, sha512 sized keys would not fit with the current
descriptor inlining mechanism, so we now calculate whether keys
should be referenced instead by pointers in the shared descriptor.also, use symbols for descriptor text lengths, and, ahem, unmap and
free key i/o memory in cra_exit.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
Key sharing is enabled by default in the shared descriptor.
Using CBC decrypt, AES has to alter the key in order to decrypt.
During high traffic decryption rates, i.e, when sharing starts to
take place, we need to use a different OPERATION option to tell AES
that the key was already altered by the PRIOR descriptor - we need
the following kind of logic:if ( shared )
operation where AES uses decryption key (DK=1)
else
operation where AES uses encryption key (DK=0)this patch implements this logic using a conditional and
a non-conditional local jump within the decryption job
descriptor.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
this fixes a build error since cryptodev-2.6 got rebased
to include commit d714d1979d7b4df7e2c127407f4014ce71f73cd0
"dt: eliminate of_platform_driver shim code".Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu
04 May, 2011
2 commits
-
during recent descriptor development, an Invalid Sequence Command
error triggered a:BUG: recent printk recursion!
due to insufficient memory allocated for the error text.
The Invalid Sequence Command error text is the longest.
The length of the maximum error string is computed as
the sum of:"DECO: ": 6
"jump tgt desc idx 255: ": 23
Invalid Sequence Command text: 272
zero termination character: 1i.e, 302 characters.
Define this maximum error string length in error.h and fix
caam_jr_strstatus callsites.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu
03 May, 2011
4 commits
-
keep the hex error value reporting version (a) to be consistent
with decrypt_done(), and (b) to keep our hardware guys happy.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
remains from descriptor debugging - not required for normal operation.
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
The presence of a h/w Queue Interface would fail due to this
cut-n-paste snafu.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu -
- add IRQF_SHARED to request_irq flags to support parts such as
the p1023 that has one IRQ line per couple of rings.- resetting a job ring triggers an interrupt, so move request_irq
prior to jr_reset to avoid 'got IRQ but nobody cared' messages.- disable IRQs in h/w to avoid contention between reset and
interrupt status- delete invalid comment - if there were incomplete jobs,
module would be in use, preventing an unload.Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu
08 Apr, 2011
1 commit
-
Error handling code following a kmalloc should free the allocated data.
The semantic match that finds the problem is as follows:
(http://www.emn.fr/x-info/coccinelle/)//
@r exists@
local idexpression x;
statement S;
expression E;
identifier f,f1,l;
position p1,p2;
expression *ptr != NULL;
@@x@p1 = \(kmalloc\|kzalloc\|kcalloc\)(...);
...
if (x == NULL) S
}
(
x->f1 = E
|
(x->f1 == NULL || ...)
|
f(...,x->f1,...)
)
...>
(
return \(0\|\|ptr\);
|
return@p2 ...;
)@script:python@
p1 << r.p1;
p2 << r.p2;
@@print "* file: %s kmalloc %s return %s" % (p1[0].file,p1[0].line,p2[0].line)
//Signed-off-by: Julia Lawall
Acked-by: Kim Phillips
Signed-off-by: Herbert Xu
27 Mar, 2011
4 commits
-
ARRAY_SIZE() was intended here instead of sizeof(). sizeof() is four
times larger than ARRAY_SIZE(). outstr is normally 256 chars so
printing garbage to it could overfill the buffer and corrupt memory.Signed-off-by: Dan Carpenter
Acked-by: Kim Phillips
Signed-off-by: Herbert Xu -
t_alg is an ERR_PTR here so we can't dereference it.
Signed-off-by: Dan Carpenter
Acked-by: Kim Phillips
Signed-off-by: Herbert Xu -
Help clarify that the number trailing in compatible nomenclature
is the version number of the device, i.e., change:"fsl,p4080-sec4.0", "fsl,sec4.0";
to:
"fsl,p4080-sec-v4.0", "fsl,sec-v4.0";
Signed-off-by: Kim Phillips
Cc: Kumar Gala
Cc: Steve Cornelius
Signed-off-by: Herbert Xu -
The SEC4 supercedes the SEC2.x/3.x as Freescale's
Integrated Security Engine. Its programming model is
incompatible with all prior versions of the SEC (talitos).The SEC4 is also known as the Cryptographic Accelerator
and Assurance Module (CAAM); this driver is named caam.This initial submission does not include support for Data Path
mode operation - AEAD descriptors are submitted via the job
ring interface, while the Queue Interface (QI) is enabled
for use by others. Only AEAD algorithms are implemented
at this time, for use with IPsec.Many thanks to the Freescale STC team for their contributions
to this driver.Signed-off-by: Steve Cornelius
Signed-off-by: Kim Phillips
Signed-off-by: Herbert Xu
