4c45dba50a
Since the nonstandard inline encryption support on Exynos SoCs requires that raw cryptographic keys be copied into the PRDT, it is desirable to zeroize those keys after each request to keep them from being left in memory. Therefore, add a quirk bit that enables the zeroization. We could instead do the zeroization unconditionally. However, using a quirk bit avoids adding the zeroization overhead to standard devices. Reviewed-by: Bart Van Assche <bvanassche@acm.org> Reviewed-by: Peter Griffin <peter.griffin@linaro.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Link: https://lore.kernel.org/r/20240708235330.103590-6-ebiggers@kernel.org Reviewed-by: Alim Akhtar <alim.akhtar@samsung.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
110 lines
2.7 KiB
C
110 lines
2.7 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/*
|
|
* Copyright 2019 Google LLC
|
|
*/
|
|
|
|
#ifndef _UFSHCD_CRYPTO_H
|
|
#define _UFSHCD_CRYPTO_H
|
|
|
|
#include <scsi/scsi_cmnd.h>
|
|
#include <ufs/ufshcd.h>
|
|
#include "ufshcd-priv.h"
|
|
#include <ufs/ufshci.h>
|
|
|
|
#ifdef CONFIG_SCSI_UFS_CRYPTO
|
|
|
|
static inline void ufshcd_prepare_lrbp_crypto(struct request *rq,
|
|
struct ufshcd_lrb *lrbp)
|
|
{
|
|
if (!rq || !rq->crypt_keyslot) {
|
|
lrbp->crypto_key_slot = -1;
|
|
return;
|
|
}
|
|
|
|
lrbp->crypto_key_slot = blk_crypto_keyslot_index(rq->crypt_keyslot);
|
|
lrbp->data_unit_num = rq->crypt_ctx->bc_dun[0];
|
|
}
|
|
|
|
static inline void
|
|
ufshcd_prepare_req_desc_hdr_crypto(struct ufshcd_lrb *lrbp,
|
|
struct request_desc_header *h)
|
|
{
|
|
if (lrbp->crypto_key_slot < 0)
|
|
return;
|
|
h->enable_crypto = 1;
|
|
h->cci = lrbp->crypto_key_slot;
|
|
h->dunl = cpu_to_le32(lower_32_bits(lrbp->data_unit_num));
|
|
h->dunu = cpu_to_le32(upper_32_bits(lrbp->data_unit_num));
|
|
}
|
|
|
|
static inline int ufshcd_crypto_fill_prdt(struct ufs_hba *hba,
|
|
struct ufshcd_lrb *lrbp)
|
|
{
|
|
struct scsi_cmnd *cmd = lrbp->cmd;
|
|
const struct bio_crypt_ctx *crypt_ctx = scsi_cmd_to_rq(cmd)->crypt_ctx;
|
|
|
|
if (crypt_ctx && hba->vops && hba->vops->fill_crypto_prdt)
|
|
return hba->vops->fill_crypto_prdt(hba, crypt_ctx,
|
|
lrbp->ucd_prdt_ptr,
|
|
scsi_sg_count(cmd));
|
|
return 0;
|
|
}
|
|
|
|
static inline void ufshcd_crypto_clear_prdt(struct ufs_hba *hba,
|
|
struct ufshcd_lrb *lrbp)
|
|
{
|
|
if (!(hba->quirks & UFSHCD_QUIRK_KEYS_IN_PRDT))
|
|
return;
|
|
|
|
if (!(scsi_cmd_to_rq(lrbp->cmd)->crypt_ctx))
|
|
return;
|
|
|
|
/* Zeroize the PRDT because it can contain cryptographic keys. */
|
|
memzero_explicit(lrbp->ucd_prdt_ptr,
|
|
ufshcd_sg_entry_size(hba) * scsi_sg_count(lrbp->cmd));
|
|
}
|
|
|
|
bool ufshcd_crypto_enable(struct ufs_hba *hba);
|
|
|
|
int ufshcd_hba_init_crypto_capabilities(struct ufs_hba *hba);
|
|
|
|
void ufshcd_init_crypto(struct ufs_hba *hba);
|
|
|
|
void ufshcd_crypto_register(struct ufs_hba *hba, struct request_queue *q);
|
|
|
|
#else /* CONFIG_SCSI_UFS_CRYPTO */
|
|
|
|
static inline void ufshcd_prepare_lrbp_crypto(struct request *rq,
|
|
struct ufshcd_lrb *lrbp) { }
|
|
|
|
static inline void
|
|
ufshcd_prepare_req_desc_hdr_crypto(struct ufshcd_lrb *lrbp,
|
|
struct request_desc_header *h) { }
|
|
|
|
static inline int ufshcd_crypto_fill_prdt(struct ufs_hba *hba,
|
|
struct ufshcd_lrb *lrbp)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static inline void ufshcd_crypto_clear_prdt(struct ufs_hba *hba,
|
|
struct ufshcd_lrb *lrbp) { }
|
|
|
|
static inline bool ufshcd_crypto_enable(struct ufs_hba *hba)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
static inline int ufshcd_hba_init_crypto_capabilities(struct ufs_hba *hba)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static inline void ufshcd_init_crypto(struct ufs_hba *hba) { }
|
|
|
|
static inline void ufshcd_crypto_register(struct ufs_hba *hba,
|
|
struct request_queue *q) { }
|
|
|
|
#endif /* CONFIG_SCSI_UFS_CRYPTO */
|
|
|
|
#endif /* _UFSHCD_CRYPTO_H */
|