mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2026-08-31 07:03:28 -04:00
fb98254a5e
Add support for Intel Key Protection Technology (KPT) on QAT GEN6 devices. KPT protects private keys from exposure by keeping them wrapped (encrypted) while in use, in-flight, and at rest. Keys remain in wrapped form and are not exposed in plaintext in host memory. This feature operates outside of the Linux crypto framework and kernel keyring. Extend the firmware admin interface to enable and configure KPT. During device initialisation, if KPT is enabled, the driver sends an admin message to firmware to enable KPT mode and configure parameters such as the maximum number of SWK (Symmetric Wrapping Key) slots and the SWK time-to-live (TTL). Expose KPT configuration via a new sysfs attribute group, "qat_kpt", and add ABI documentation. Co-developed-by: Nitesh Venkatesh <nitesh.venkatesh@intel.com> Signed-off-by: Nitesh Venkatesh <nitesh.venkatesh@intel.com> Signed-off-by: Junyuan Wang <junyuan.wang@intel.com> Reviewed-by: Giovanni Cabiddu <giovanni.cabiddu@intel.com> Reviewed-by: Ahsan Atta <ahsan.atta@intel.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
36 lines
1.7 KiB
C
36 lines
1.7 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/* Copyright(c) 2023 Intel Corporation */
|
|
#ifndef ADF_ADMIN
|
|
#define ADF_ADMIN
|
|
|
|
#include "icp_qat_fw_init_admin.h"
|
|
|
|
struct adf_accel_dev;
|
|
|
|
int adf_init_admin_comms(struct adf_accel_dev *accel_dev);
|
|
void adf_exit_admin_comms(struct adf_accel_dev *accel_dev);
|
|
int adf_send_admin_init(struct adf_accel_dev *accel_dev);
|
|
int adf_get_ae_fw_counters(struct adf_accel_dev *accel_dev, u16 ae, u64 *reqs, u64 *resps);
|
|
int adf_init_admin_pm(struct adf_accel_dev *accel_dev, u32 idle_delay);
|
|
int adf_send_admin_tim_sync(struct adf_accel_dev *accel_dev, u32 cnt);
|
|
int adf_send_admin_hb_timer(struct adf_accel_dev *accel_dev, uint32_t ticks);
|
|
int adf_send_admin_rl_init(struct adf_accel_dev *accel_dev,
|
|
struct icp_qat_fw_init_admin_slice_cnt *slices);
|
|
int adf_send_admin_rl_add_update(struct adf_accel_dev *accel_dev,
|
|
struct icp_qat_fw_init_admin_req *req);
|
|
int adf_send_admin_rl_delete(struct adf_accel_dev *accel_dev, u16 node_id,
|
|
u8 node_type);
|
|
int adf_get_fw_timestamp(struct adf_accel_dev *accel_dev, u64 *timestamp);
|
|
int adf_get_pm_info(struct adf_accel_dev *accel_dev, dma_addr_t p_state_addr, size_t buff_size);
|
|
int adf_get_cnv_stats(struct adf_accel_dev *accel_dev, u16 ae, u16 *err_cnt, u16 *latest_err);
|
|
int adf_send_admin_tl_start(struct adf_accel_dev *accel_dev,
|
|
dma_addr_t tl_dma_addr, size_t layout_sz, u8 *rp_indexes,
|
|
struct icp_qat_fw_init_admin_slice_cnt *slice_count);
|
|
int adf_send_admin_tl_stop(struct adf_accel_dev *accel_dev);
|
|
int adf_send_admin_arb_query(struct adf_accel_dev *accel_dev, int cmd, u8 *svn);
|
|
int adf_send_admin_arb_commit(struct adf_accel_dev *accel_dev);
|
|
int adf_send_admin_kpt_init(struct adf_accel_dev *accel_dev, void *init_cfg,
|
|
size_t init_cfg_sz, dma_addr_t init_ptr);
|
|
|
|
#endif
|