core/lib/crypto.c

0001 // SPDX-License-Identifier: GPL-2.0 OR Linux-OpenIB
0002 // Copyright (c) 2019 Mellanox Technologies.
0003
0004 #include "mlx5_core.h"
0005 #include "lib/mlx5.h"
0006
0007 int mlx5_create_encryption_key(struct mlx5_core_dev *mdev,
0008                    void *key, u32 sz_bytes,
0009                    u32 key_type, u32 *p_key_id)
0010 {
0011     u32 in[MLX5_ST_SZ_DW(create_encryption_key_in)] = {};
0012     u32 out[MLX5_ST_SZ_DW(general_obj_out_cmd_hdr)];
0013     u32 sz_bits = sz_bytes * BITS_PER_BYTE;
0014     u8  general_obj_key_size;
0015     u64 general_obj_types;
0016     void *obj, *key_p;
0017     int err;
0018
0019     obj = MLX5_ADDR_OF(create_encryption_key_in, in, encryption_key_object);
0020     key_p = MLX5_ADDR_OF(encryption_key_obj, obj, key);
0021
0022     general_obj_types = MLX5_CAP_GEN_64(mdev, general_obj_types);
0023     if (!(general_obj_types &
0024           MLX5_HCA_CAP_GENERAL_OBJECT_TYPES_ENCRYPTION_KEY))
0025         return -EINVAL;
0026
0027     switch (sz_bits) {
0028     case 128:
0029         general_obj_key_size =
0030             MLX5_GENERAL_OBJECT_TYPE_ENCRYPTION_KEY_KEY_SIZE_128;
0031         key_p += sz_bytes;
0032         break;
0033     case 256:
0034         general_obj_key_size =
0035             MLX5_GENERAL_OBJECT_TYPE_ENCRYPTION_KEY_KEY_SIZE_256;
0036         break;
0037     default:
0038         return -EINVAL;
0039     }
0040
0041     memcpy(key_p, key, sz_bytes);
0042
0043     MLX5_SET(encryption_key_obj, obj, key_size, general_obj_key_size);
0044     MLX5_SET(encryption_key_obj, obj, key_type, key_type);
0045     MLX5_SET(general_obj_in_cmd_hdr, in, opcode,
0046          MLX5_CMD_OP_CREATE_GENERAL_OBJECT);
0047     MLX5_SET(general_obj_in_cmd_hdr, in, obj_type,
0048          MLX5_GENERAL_OBJECT_TYPES_ENCRYPTION_KEY);
0049     MLX5_SET(encryption_key_obj, obj, pd, mdev->mlx5e_res.hw_objs.pdn);
0050
0051     err = mlx5_cmd_exec(mdev, in, sizeof(in), out, sizeof(out));
0052     if (!err)
0053         *p_key_id = MLX5_GET(general_obj_out_cmd_hdr, out, obj_id);
0054
0055     /* avoid leaking key on the stack */
0056     memzero_explicit(in, sizeof(in));
0057
0058     return err;
0059 }
0060
0061 void mlx5_destroy_encryption_key(struct mlx5_core_dev *mdev, u32 key_id)
0062 {
0063     u32 in[MLX5_ST_SZ_DW(general_obj_in_cmd_hdr)] = {};
0064     u32 out[MLX5_ST_SZ_DW(general_obj_out_cmd_hdr)];
0065
0066     MLX5_SET(general_obj_in_cmd_hdr, in, opcode,
0067          MLX5_CMD_OP_DESTROY_GENERAL_OBJECT);
0068     MLX5_SET(general_obj_in_cmd_hdr, in, obj_type,
0069          MLX5_GENERAL_OBJECT_TYPES_ENCRYPTION_KEY);
0070     MLX5_SET(general_obj_in_cmd_hdr, in, obj_id, key_id);
0071
0072     mlx5_cmd_exec(mdev, in, sizeof(in), out, sizeof(out));
0073 }