1/* 2 * zcrypt 2.1.0 3 * 4 * Copyright IBM Corp. 2001, 2012 5 * Author(s): Robert Burroughs 6 * Eric Rossman (edrossma@us.ibm.com) 7 * Cornelia Huck <cornelia.huck@de.ibm.com> 8 * 9 * Hotplug & misc device support: Jochen Roehrig (roehrig@de.ibm.com) 10 * Major cleanup & driver split: Martin Schwidefsky <schwidefsky@de.ibm.com> 11 * Ralph Wuerthner <rwuerthn@de.ibm.com> 12 * MSGTYPE restruct: Holger Dengler <hd@linux.vnet.ibm.com> 13 * 14 * This program is free software; you can redistribute it and/or modify 15 * it under the terms of the GNU General Public License as published by 16 * the Free Software Foundation; either version 2, or (at your option) 17 * any later version. 18 * 19 * This program is distributed in the hope that it will be useful, 20 * but WITHOUT ANY WARRANTY; without even the implied warranty of 21 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 22 * GNU General Public License for more details. 23 * 24 * You should have received a copy of the GNU General Public License 25 * along with this program; if not, write to the Free Software 26 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 27 */ 28 29#include <linux/module.h> 30#include <linux/init.h> 31#include <linux/interrupt.h> 32#include <linux/miscdevice.h> 33#include <linux/fs.h> 34#include <linux/proc_fs.h> 35#include <linux/seq_file.h> 36#include <linux/compat.h> 37#include <linux/slab.h> 38#include <linux/atomic.h> 39#include <asm/uaccess.h> 40#include <linux/hw_random.h> 41#include <linux/debugfs.h> 42#include <asm/debug.h> 43 44#include "zcrypt_debug.h" 45#include "zcrypt_api.h" 46 47#include "zcrypt_msgtype6.h" 48 49/* 50 * Module description. 51 */ 52MODULE_AUTHOR("IBM Corporation"); 53MODULE_DESCRIPTION("Cryptographic Coprocessor interface, " \ 54 "Copyright IBM Corp. 2001, 2012"); 55MODULE_LICENSE("GPL"); 56 57static DEFINE_SPINLOCK(zcrypt_device_lock); 58static LIST_HEAD(zcrypt_device_list); 59static int zcrypt_device_count = 0; 60static atomic_t zcrypt_open_count = ATOMIC_INIT(0); 61static atomic_t zcrypt_rescan_count = ATOMIC_INIT(0); 62 63atomic_t zcrypt_rescan_req = ATOMIC_INIT(0); 64EXPORT_SYMBOL(zcrypt_rescan_req); 65 66static int zcrypt_rng_device_add(void); 67static void zcrypt_rng_device_remove(void); 68 69static DEFINE_SPINLOCK(zcrypt_ops_list_lock); 70static LIST_HEAD(zcrypt_ops_list); 71 72static debug_info_t *zcrypt_dbf_common; 73static debug_info_t *zcrypt_dbf_devices; 74static struct dentry *debugfs_root; 75 76/* 77 * Device attributes common for all crypto devices. 78 */ 79static ssize_t zcrypt_type_show(struct device *dev, 80 struct device_attribute *attr, char *buf) 81{ 82 struct zcrypt_device *zdev = to_ap_dev(dev)->private; 83 return snprintf(buf, PAGE_SIZE, "%s\n", zdev->type_string); 84} 85 86static DEVICE_ATTR(type, 0444, zcrypt_type_show, NULL); 87 88static ssize_t zcrypt_online_show(struct device *dev, 89 struct device_attribute *attr, char *buf) 90{ 91 struct zcrypt_device *zdev = to_ap_dev(dev)->private; 92 return snprintf(buf, PAGE_SIZE, "%d\n", zdev->online); 93} 94 95static ssize_t zcrypt_online_store(struct device *dev, 96 struct device_attribute *attr, 97 const char *buf, size_t count) 98{ 99 struct zcrypt_device *zdev = to_ap_dev(dev)->private; 100 int online; 101 102 if (sscanf(buf, "%d\n", &online) != 1 || online < 0 || online > 1) 103 return -EINVAL; 104 zdev->online = online; 105 ZCRYPT_DBF_DEV(DBF_INFO, zdev, "dev%04xo%dman", zdev->ap_dev->qid, 106 zdev->online); 107 if (!online) 108 ap_flush_queue(zdev->ap_dev); 109 return count; 110} 111 112static DEVICE_ATTR(online, 0644, zcrypt_online_show, zcrypt_online_store); 113 114static struct attribute * zcrypt_device_attrs[] = { 115 &dev_attr_type.attr, 116 &dev_attr_online.attr, 117 NULL, 118}; 119 120static struct attribute_group zcrypt_device_attr_group = { 121 .attrs = zcrypt_device_attrs, 122}; 123 124/** 125 * Process a rescan of the transport layer. 126 * 127 * Returns 1, if the rescan has been processed, otherwise 0. 128 */ 129static inline int zcrypt_process_rescan(void) 130{ 131 if (atomic_read(&zcrypt_rescan_req)) { 132 atomic_set(&zcrypt_rescan_req, 0); 133 atomic_inc(&zcrypt_rescan_count); 134 ap_bus_force_rescan(); 135 ZCRYPT_DBF_COMMON(DBF_INFO, "rescan%07d", 136 atomic_inc_return(&zcrypt_rescan_count)); 137 return 1; 138 } 139 return 0; 140} 141 142/** 143 * __zcrypt_increase_preference(): Increase preference of a crypto device. 144 * @zdev: Pointer the crypto device 145 * 146 * Move the device towards the head of the device list. 147 * Need to be called while holding the zcrypt device list lock. 148 * Note: cards with speed_rating of 0 are kept at the end of the list. 149 */ 150static void __zcrypt_increase_preference(struct zcrypt_device *zdev) 151{ 152 struct zcrypt_device *tmp; 153 struct list_head *l; 154 155 if (zdev->speed_rating == 0) 156 return; 157 for (l = zdev->list.prev; l != &zcrypt_device_list; l = l->prev) { 158 tmp = list_entry(l, struct zcrypt_device, list); 159 if ((tmp->request_count + 1) * tmp->speed_rating <= 160 (zdev->request_count + 1) * zdev->speed_rating && 161 tmp->speed_rating != 0) 162 break; 163 } 164 if (l == zdev->list.prev) 165 return; 166 /* Move zdev behind l */ 167 list_move(&zdev->list, l); 168} 169 170/** 171 * __zcrypt_decrease_preference(): Decrease preference of a crypto device. 172 * @zdev: Pointer to a crypto device. 173 * 174 * Move the device towards the tail of the device list. 175 * Need to be called while holding the zcrypt device list lock. 176 * Note: cards with speed_rating of 0 are kept at the end of the list. 177 */ 178static void __zcrypt_decrease_preference(struct zcrypt_device *zdev) 179{ 180 struct zcrypt_device *tmp; 181 struct list_head *l; 182 183 if (zdev->speed_rating == 0) 184 return; 185 for (l = zdev->list.next; l != &zcrypt_device_list; l = l->next) { 186 tmp = list_entry(l, struct zcrypt_device, list); 187 if ((tmp->request_count + 1) * tmp->speed_rating > 188 (zdev->request_count + 1) * zdev->speed_rating || 189 tmp->speed_rating == 0) 190 break; 191 } 192 if (l == zdev->list.next) 193 return; 194 /* Move zdev before l */ 195 list_move_tail(&zdev->list, l); 196} 197 198static void zcrypt_device_release(struct kref *kref) 199{ 200 struct zcrypt_device *zdev = 201 container_of(kref, struct zcrypt_device, refcount); 202 zcrypt_device_free(zdev); 203} 204 205void zcrypt_device_get(struct zcrypt_device *zdev) 206{ 207 kref_get(&zdev->refcount); 208} 209EXPORT_SYMBOL(zcrypt_device_get); 210 211int zcrypt_device_put(struct zcrypt_device *zdev) 212{ 213 return kref_put(&zdev->refcount, zcrypt_device_release); 214} 215EXPORT_SYMBOL(zcrypt_device_put); 216 217struct zcrypt_device *zcrypt_device_alloc(size_t max_response_size) 218{ 219 struct zcrypt_device *zdev; 220 221 zdev = kzalloc(sizeof(struct zcrypt_device), GFP_KERNEL); 222 if (!zdev) 223 return NULL; 224 zdev->reply.message = kmalloc(max_response_size, GFP_KERNEL); 225 if (!zdev->reply.message) 226 goto out_free; 227 zdev->reply.length = max_response_size; 228 spin_lock_init(&zdev->lock); 229 INIT_LIST_HEAD(&zdev->list); 230 zdev->dbf_area = zcrypt_dbf_devices; 231 return zdev; 232 233out_free: 234 kfree(zdev); 235 return NULL; 236} 237EXPORT_SYMBOL(zcrypt_device_alloc); 238 239void zcrypt_device_free(struct zcrypt_device *zdev) 240{ 241 kfree(zdev->reply.message); 242 kfree(zdev); 243} 244EXPORT_SYMBOL(zcrypt_device_free); 245 246/** 247 * zcrypt_device_register() - Register a crypto device. 248 * @zdev: Pointer to a crypto device 249 * 250 * Register a crypto device. Returns 0 if successful. 251 */ 252int zcrypt_device_register(struct zcrypt_device *zdev) 253{ 254 int rc; 255 256 if (!zdev->ops) 257 return -ENODEV; 258 rc = sysfs_create_group(&zdev->ap_dev->device.kobj, 259 &zcrypt_device_attr_group); 260 if (rc) 261 goto out; 262 get_device(&zdev->ap_dev->device); 263 kref_init(&zdev->refcount); 264 spin_lock_bh(&zcrypt_device_lock); 265 zdev->online = 1; /* New devices are online by default. */ 266 ZCRYPT_DBF_DEV(DBF_INFO, zdev, "dev%04xo%dreg", zdev->ap_dev->qid, 267 zdev->online); 268 list_add_tail(&zdev->list, &zcrypt_device_list); 269 __zcrypt_increase_preference(zdev); 270 zcrypt_device_count++; 271 spin_unlock_bh(&zcrypt_device_lock); 272 if (zdev->ops->rng) { 273 rc = zcrypt_rng_device_add(); 274 if (rc) 275 goto out_unregister; 276 } 277 return 0; 278 279out_unregister: 280 spin_lock_bh(&zcrypt_device_lock); 281 zcrypt_device_count--; 282 list_del_init(&zdev->list); 283 spin_unlock_bh(&zcrypt_device_lock); 284 sysfs_remove_group(&zdev->ap_dev->device.kobj, 285 &zcrypt_device_attr_group); 286 put_device(&zdev->ap_dev->device); 287 zcrypt_device_put(zdev); 288out: 289 return rc; 290} 291EXPORT_SYMBOL(zcrypt_device_register); 292 293/** 294 * zcrypt_device_unregister(): Unregister a crypto device. 295 * @zdev: Pointer to crypto device 296 * 297 * Unregister a crypto device. 298 */ 299void zcrypt_device_unregister(struct zcrypt_device *zdev) 300{ 301 if (zdev->ops->rng) 302 zcrypt_rng_device_remove(); 303 spin_lock_bh(&zcrypt_device_lock); 304 zcrypt_device_count--; 305 list_del_init(&zdev->list); 306 spin_unlock_bh(&zcrypt_device_lock); 307 sysfs_remove_group(&zdev->ap_dev->device.kobj, 308 &zcrypt_device_attr_group); 309 put_device(&zdev->ap_dev->device); 310 zcrypt_device_put(zdev); 311} 312EXPORT_SYMBOL(zcrypt_device_unregister); 313 314void zcrypt_msgtype_register(struct zcrypt_ops *zops) 315{ 316 if (zops->owner) { 317 spin_lock_bh(&zcrypt_ops_list_lock); 318 list_add_tail(&zops->list, &zcrypt_ops_list); 319 spin_unlock_bh(&zcrypt_ops_list_lock); 320 } 321} 322EXPORT_SYMBOL(zcrypt_msgtype_register); 323 324void zcrypt_msgtype_unregister(struct zcrypt_ops *zops) 325{ 326 spin_lock_bh(&zcrypt_ops_list_lock); 327 list_del_init(&zops->list); 328 spin_unlock_bh(&zcrypt_ops_list_lock); 329} 330EXPORT_SYMBOL(zcrypt_msgtype_unregister); 331 332static inline 333struct zcrypt_ops *__ops_lookup(unsigned char *name, int variant) 334{ 335 struct zcrypt_ops *zops; 336 int found = 0; 337 338 spin_lock_bh(&zcrypt_ops_list_lock); 339 list_for_each_entry(zops, &zcrypt_ops_list, list) { 340 if ((zops->variant == variant) && 341 (!strncmp(zops->owner->name, name, MODULE_NAME_LEN))) { 342 found = 1; 343 break; 344 } 345 } 346 if (!found || !try_module_get(zops->owner)) 347 zops = NULL; 348 349 spin_unlock_bh(&zcrypt_ops_list_lock); 350 351 return zops; 352} 353 354struct zcrypt_ops *zcrypt_msgtype_request(unsigned char *name, int variant) 355{ 356 struct zcrypt_ops *zops = NULL; 357 358 zops = __ops_lookup(name, variant); 359 if (!zops) { 360 request_module("%s", name); 361 zops = __ops_lookup(name, variant); 362 } 363 return zops; 364} 365EXPORT_SYMBOL(zcrypt_msgtype_request); 366 367void zcrypt_msgtype_release(struct zcrypt_ops *zops) 368{ 369 if (zops) 370 module_put(zops->owner); 371} 372EXPORT_SYMBOL(zcrypt_msgtype_release); 373 374/** 375 * zcrypt_read (): Not supported beyond zcrypt 1.3.1. 376 * 377 * This function is not supported beyond zcrypt 1.3.1. 378 */ 379static ssize_t zcrypt_read(struct file *filp, char __user *buf, 380 size_t count, loff_t *f_pos) 381{ 382 return -EPERM; 383} 384 385/** 386 * zcrypt_write(): Not allowed. 387 * 388 * Write is is not allowed 389 */ 390static ssize_t zcrypt_write(struct file *filp, const char __user *buf, 391 size_t count, loff_t *f_pos) 392{ 393 return -EPERM; 394} 395 396/** 397 * zcrypt_open(): Count number of users. 398 * 399 * Device open function to count number of users. 400 */ 401static int zcrypt_open(struct inode *inode, struct file *filp) 402{ 403 atomic_inc(&zcrypt_open_count); 404 return nonseekable_open(inode, filp); 405} 406 407/** 408 * zcrypt_release(): Count number of users. 409 * 410 * Device close function to count number of users. 411 */ 412static int zcrypt_release(struct inode *inode, struct file *filp) 413{ 414 atomic_dec(&zcrypt_open_count); 415 return 0; 416} 417 418/* 419 * zcrypt ioctls. 420 */ 421static long zcrypt_rsa_modexpo(struct ica_rsa_modexpo *mex) 422{ 423 struct zcrypt_device *zdev; 424 int rc; 425 426 if (mex->outputdatalength < mex->inputdatalength) 427 return -EINVAL; 428 /* 429 * As long as outputdatalength is big enough, we can set the 430 * outputdatalength equal to the inputdatalength, since that is the 431 * number of bytes we will copy in any case 432 */ 433 mex->outputdatalength = mex->inputdatalength; 434 435 spin_lock_bh(&zcrypt_device_lock); 436 list_for_each_entry(zdev, &zcrypt_device_list, list) { 437 if (!zdev->online || 438 !zdev->ops->rsa_modexpo || 439 zdev->min_mod_size > mex->inputdatalength || 440 zdev->max_mod_size < mex->inputdatalength) 441 continue; 442 zcrypt_device_get(zdev); 443 get_device(&zdev->ap_dev->device); 444 zdev->request_count++; 445 __zcrypt_decrease_preference(zdev); 446 if (try_module_get(zdev->ap_dev->drv->driver.owner)) { 447 spin_unlock_bh(&zcrypt_device_lock); 448 rc = zdev->ops->rsa_modexpo(zdev, mex); 449 spin_lock_bh(&zcrypt_device_lock); 450 module_put(zdev->ap_dev->drv->driver.owner); 451 } 452 else 453 rc = -EAGAIN; 454 zdev->request_count--; 455 __zcrypt_increase_preference(zdev); 456 put_device(&zdev->ap_dev->device); 457 zcrypt_device_put(zdev); 458 spin_unlock_bh(&zcrypt_device_lock); 459 return rc; 460 } 461 spin_unlock_bh(&zcrypt_device_lock); 462 return -ENODEV; 463} 464 465static long zcrypt_rsa_crt(struct ica_rsa_modexpo_crt *crt) 466{ 467 struct zcrypt_device *zdev; 468 unsigned long long z1, z2, z3; 469 int rc, copied; 470 471 if (crt->outputdatalength < crt->inputdatalength || 472 (crt->inputdatalength & 1)) 473 return -EINVAL; 474 /* 475 * As long as outputdatalength is big enough, we can set the 476 * outputdatalength equal to the inputdatalength, since that is the 477 * number of bytes we will copy in any case 478 */ 479 crt->outputdatalength = crt->inputdatalength; 480 481 copied = 0; 482 restart: 483 spin_lock_bh(&zcrypt_device_lock); 484 list_for_each_entry(zdev, &zcrypt_device_list, list) { 485 if (!zdev->online || 486 !zdev->ops->rsa_modexpo_crt || 487 zdev->min_mod_size > crt->inputdatalength || 488 zdev->max_mod_size < crt->inputdatalength) 489 continue; 490 if (zdev->short_crt && crt->inputdatalength > 240) { 491 /* 492 * Check inputdata for leading zeros for cards 493 * that can't handle np_prime, bp_key, or 494 * u_mult_inv > 128 bytes. 495 */ 496 if (copied == 0) { 497 unsigned int len; 498 spin_unlock_bh(&zcrypt_device_lock); 499 /* len is max 256 / 2 - 120 = 8 500 * For bigger device just assume len of leading 501 * 0s is 8 as stated in the requirements for 502 * ica_rsa_modexpo_crt struct in zcrypt.h. 503 */ 504 if (crt->inputdatalength <= 256) 505 len = crt->inputdatalength / 2 - 120; 506 else 507 len = 8; 508 if (len > sizeof(z1)) 509 return -EFAULT; 510 z1 = z2 = z3 = 0; 511 if (copy_from_user(&z1, crt->np_prime, len) || 512 copy_from_user(&z2, crt->bp_key, len) || 513 copy_from_user(&z3, crt->u_mult_inv, len)) 514 return -EFAULT; 515 z1 = z2 = z3 = 0; 516 copied = 1; 517 /* 518 * We have to restart device lookup - 519 * the device list may have changed by now. 520 */ 521 goto restart; 522 } 523 if (z1 != 0ULL || z2 != 0ULL || z3 != 0ULL) 524 /* The device can't handle this request. */ 525 continue; 526 } 527 zcrypt_device_get(zdev); 528 get_device(&zdev->ap_dev->device); 529 zdev->request_count++; 530 __zcrypt_decrease_preference(zdev); 531 if (try_module_get(zdev->ap_dev->drv->driver.owner)) { 532 spin_unlock_bh(&zcrypt_device_lock); 533 rc = zdev->ops->rsa_modexpo_crt(zdev, crt); 534 spin_lock_bh(&zcrypt_device_lock); 535 module_put(zdev->ap_dev->drv->driver.owner); 536 } 537 else 538 rc = -EAGAIN; 539 zdev->request_count--; 540 __zcrypt_increase_preference(zdev); 541 put_device(&zdev->ap_dev->device); 542 zcrypt_device_put(zdev); 543 spin_unlock_bh(&zcrypt_device_lock); 544 return rc; 545 } 546 spin_unlock_bh(&zcrypt_device_lock); 547 return -ENODEV; 548} 549 550static long zcrypt_send_cprb(struct ica_xcRB *xcRB) 551{ 552 struct zcrypt_device *zdev; 553 int rc; 554 555 spin_lock_bh(&zcrypt_device_lock); 556 list_for_each_entry(zdev, &zcrypt_device_list, list) { 557 if (!zdev->online || !zdev->ops->send_cprb || 558 (zdev->ops->variant == MSGTYPE06_VARIANT_EP11) || 559 (xcRB->user_defined != AUTOSELECT && 560 AP_QID_DEVICE(zdev->ap_dev->qid) != xcRB->user_defined)) 561 continue; 562 zcrypt_device_get(zdev); 563 get_device(&zdev->ap_dev->device); 564 zdev->request_count++; 565 __zcrypt_decrease_preference(zdev); 566 if (try_module_get(zdev->ap_dev->drv->driver.owner)) { 567 spin_unlock_bh(&zcrypt_device_lock); 568 rc = zdev->ops->send_cprb(zdev, xcRB); 569 spin_lock_bh(&zcrypt_device_lock); 570 module_put(zdev->ap_dev->drv->driver.owner); 571 } 572 else 573 rc = -EAGAIN; 574 zdev->request_count--; 575 __zcrypt_increase_preference(zdev); 576 put_device(&zdev->ap_dev->device); 577 zcrypt_device_put(zdev); 578 spin_unlock_bh(&zcrypt_device_lock); 579 return rc; 580 } 581 spin_unlock_bh(&zcrypt_device_lock); 582 return -ENODEV; 583} 584 585struct ep11_target_dev_list { 586 unsigned short targets_num; 587 struct ep11_target_dev *targets; 588}; 589 590static bool is_desired_ep11dev(unsigned int dev_qid, 591 struct ep11_target_dev_list dev_list) 592{ 593 int n; 594 595 for (n = 0; n < dev_list.targets_num; n++, dev_list.targets++) { 596 if ((AP_QID_DEVICE(dev_qid) == dev_list.targets->ap_id) && 597 (AP_QID_QUEUE(dev_qid) == dev_list.targets->dom_id)) { 598 return true; 599 } 600 } 601 return false; 602} 603 604static long zcrypt_send_ep11_cprb(struct ep11_urb *xcrb) 605{ 606 struct zcrypt_device *zdev; 607 bool autoselect = false; 608 int rc; 609 struct ep11_target_dev_list ep11_dev_list = { 610 .targets_num = 0x00, 611 .targets = NULL, 612 }; 613 614 ep11_dev_list.targets_num = (unsigned short) xcrb->targets_num; 615 616 /* empty list indicates autoselect (all available targets) */ 617 if (ep11_dev_list.targets_num == 0) 618 autoselect = true; 619 else { 620 ep11_dev_list.targets = kcalloc((unsigned short) 621 xcrb->targets_num, 622 sizeof(struct ep11_target_dev), 623 GFP_KERNEL); 624 if (!ep11_dev_list.targets) 625 return -ENOMEM; 626 627 if (copy_from_user(ep11_dev_list.targets, 628 (struct ep11_target_dev __force __user *) 629 xcrb->targets, xcrb->targets_num * 630 sizeof(struct ep11_target_dev))) 631 return -EFAULT; 632 } 633 634 spin_lock_bh(&zcrypt_device_lock); 635 list_for_each_entry(zdev, &zcrypt_device_list, list) { 636 /* check if device is eligible */ 637 if (!zdev->online || 638 zdev->ops->variant != MSGTYPE06_VARIANT_EP11) 639 continue; 640 641 /* check if device is selected as valid target */ 642 if (!is_desired_ep11dev(zdev->ap_dev->qid, ep11_dev_list) && 643 !autoselect) 644 continue; 645 646 zcrypt_device_get(zdev); 647 get_device(&zdev->ap_dev->device); 648 zdev->request_count++; 649 __zcrypt_decrease_preference(zdev); 650 if (try_module_get(zdev->ap_dev->drv->driver.owner)) { 651 spin_unlock_bh(&zcrypt_device_lock); 652 rc = zdev->ops->send_ep11_cprb(zdev, xcrb); 653 spin_lock_bh(&zcrypt_device_lock); 654 module_put(zdev->ap_dev->drv->driver.owner); 655 } else { 656 rc = -EAGAIN; 657 } 658 zdev->request_count--; 659 __zcrypt_increase_preference(zdev); 660 put_device(&zdev->ap_dev->device); 661 zcrypt_device_put(zdev); 662 spin_unlock_bh(&zcrypt_device_lock); 663 return rc; 664 } 665 spin_unlock_bh(&zcrypt_device_lock); 666 return -ENODEV; 667} 668 669static long zcrypt_rng(char *buffer) 670{ 671 struct zcrypt_device *zdev; 672 int rc; 673 674 spin_lock_bh(&zcrypt_device_lock); 675 list_for_each_entry(zdev, &zcrypt_device_list, list) { 676 if (!zdev->online || !zdev->ops->rng) 677 continue; 678 zcrypt_device_get(zdev); 679 get_device(&zdev->ap_dev->device); 680 zdev->request_count++; 681 __zcrypt_decrease_preference(zdev); 682 if (try_module_get(zdev->ap_dev->drv->driver.owner)) { 683 spin_unlock_bh(&zcrypt_device_lock); 684 rc = zdev->ops->rng(zdev, buffer); 685 spin_lock_bh(&zcrypt_device_lock); 686 module_put(zdev->ap_dev->drv->driver.owner); 687 } else 688 rc = -EAGAIN; 689 zdev->request_count--; 690 __zcrypt_increase_preference(zdev); 691 put_device(&zdev->ap_dev->device); 692 zcrypt_device_put(zdev); 693 spin_unlock_bh(&zcrypt_device_lock); 694 return rc; 695 } 696 spin_unlock_bh(&zcrypt_device_lock); 697 return -ENODEV; 698} 699 700static void zcrypt_status_mask(char status[AP_DEVICES]) 701{ 702 struct zcrypt_device *zdev; 703 704 memset(status, 0, sizeof(char) * AP_DEVICES); 705 spin_lock_bh(&zcrypt_device_lock); 706 list_for_each_entry(zdev, &zcrypt_device_list, list) 707 status[AP_QID_DEVICE(zdev->ap_dev->qid)] = 708 zdev->online ? zdev->user_space_type : 0x0d; 709 spin_unlock_bh(&zcrypt_device_lock); 710} 711 712static void zcrypt_qdepth_mask(char qdepth[AP_DEVICES]) 713{ 714 struct zcrypt_device *zdev; 715 716 memset(qdepth, 0, sizeof(char) * AP_DEVICES); 717 spin_lock_bh(&zcrypt_device_lock); 718 list_for_each_entry(zdev, &zcrypt_device_list, list) { 719 spin_lock(&zdev->ap_dev->lock); 720 qdepth[AP_QID_DEVICE(zdev->ap_dev->qid)] = 721 zdev->ap_dev->pendingq_count + 722 zdev->ap_dev->requestq_count; 723 spin_unlock(&zdev->ap_dev->lock); 724 } 725 spin_unlock_bh(&zcrypt_device_lock); 726} 727 728static void zcrypt_perdev_reqcnt(int reqcnt[AP_DEVICES]) 729{ 730 struct zcrypt_device *zdev; 731 732 memset(reqcnt, 0, sizeof(int) * AP_DEVICES); 733 spin_lock_bh(&zcrypt_device_lock); 734 list_for_each_entry(zdev, &zcrypt_device_list, list) { 735 spin_lock(&zdev->ap_dev->lock); 736 reqcnt[AP_QID_DEVICE(zdev->ap_dev->qid)] = 737 zdev->ap_dev->total_request_count; 738 spin_unlock(&zdev->ap_dev->lock); 739 } 740 spin_unlock_bh(&zcrypt_device_lock); 741} 742 743static int zcrypt_pendingq_count(void) 744{ 745 struct zcrypt_device *zdev; 746 int pendingq_count = 0; 747 748 spin_lock_bh(&zcrypt_device_lock); 749 list_for_each_entry(zdev, &zcrypt_device_list, list) { 750 spin_lock(&zdev->ap_dev->lock); 751 pendingq_count += zdev->ap_dev->pendingq_count; 752 spin_unlock(&zdev->ap_dev->lock); 753 } 754 spin_unlock_bh(&zcrypt_device_lock); 755 return pendingq_count; 756} 757 758static int zcrypt_requestq_count(void) 759{ 760 struct zcrypt_device *zdev; 761 int requestq_count = 0; 762 763 spin_lock_bh(&zcrypt_device_lock); 764 list_for_each_entry(zdev, &zcrypt_device_list, list) { 765 spin_lock(&zdev->ap_dev->lock); 766 requestq_count += zdev->ap_dev->requestq_count; 767 spin_unlock(&zdev->ap_dev->lock); 768 } 769 spin_unlock_bh(&zcrypt_device_lock); 770 return requestq_count; 771} 772 773static int zcrypt_count_type(int type) 774{ 775 struct zcrypt_device *zdev; 776 int device_count = 0; 777 778 spin_lock_bh(&zcrypt_device_lock); 779 list_for_each_entry(zdev, &zcrypt_device_list, list) 780 if (zdev->user_space_type == type) 781 device_count++; 782 spin_unlock_bh(&zcrypt_device_lock); 783 return device_count; 784} 785 786/** 787 * zcrypt_ica_status(): Old, depracted combi status call. 788 * 789 * Old, deprecated combi status call. 790 */ 791static long zcrypt_ica_status(struct file *filp, unsigned long arg) 792{ 793 struct ica_z90_status *pstat; 794 int ret; 795 796 pstat = kzalloc(sizeof(*pstat), GFP_KERNEL); 797 if (!pstat) 798 return -ENOMEM; 799 pstat->totalcount = zcrypt_device_count; 800 pstat->leedslitecount = zcrypt_count_type(ZCRYPT_PCICA); 801 pstat->leeds2count = zcrypt_count_type(ZCRYPT_PCICC); 802 pstat->requestqWaitCount = zcrypt_requestq_count(); 803 pstat->pendingqWaitCount = zcrypt_pendingq_count(); 804 pstat->totalOpenCount = atomic_read(&zcrypt_open_count); 805 pstat->cryptoDomain = ap_domain_index; 806 zcrypt_status_mask(pstat->status); 807 zcrypt_qdepth_mask(pstat->qdepth); 808 ret = 0; 809 if (copy_to_user((void __user *) arg, pstat, sizeof(*pstat))) 810 ret = -EFAULT; 811 kfree(pstat); 812 return ret; 813} 814 815static long zcrypt_unlocked_ioctl(struct file *filp, unsigned int cmd, 816 unsigned long arg) 817{ 818 int rc; 819 820 switch (cmd) { 821 case ICARSAMODEXPO: { 822 struct ica_rsa_modexpo __user *umex = (void __user *) arg; 823 struct ica_rsa_modexpo mex; 824 if (copy_from_user(&mex, umex, sizeof(mex))) 825 return -EFAULT; 826 do { 827 rc = zcrypt_rsa_modexpo(&mex); 828 } while (rc == -EAGAIN); 829 /* on failure: retry once again after a requested rescan */ 830 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 831 do { 832 rc = zcrypt_rsa_modexpo(&mex); 833 } while (rc == -EAGAIN); 834 if (rc) 835 return rc; 836 return put_user(mex.outputdatalength, &umex->outputdatalength); 837 } 838 case ICARSACRT: { 839 struct ica_rsa_modexpo_crt __user *ucrt = (void __user *) arg; 840 struct ica_rsa_modexpo_crt crt; 841 if (copy_from_user(&crt, ucrt, sizeof(crt))) 842 return -EFAULT; 843 do { 844 rc = zcrypt_rsa_crt(&crt); 845 } while (rc == -EAGAIN); 846 /* on failure: retry once again after a requested rescan */ 847 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 848 do { 849 rc = zcrypt_rsa_crt(&crt); 850 } while (rc == -EAGAIN); 851 if (rc) 852 return rc; 853 return put_user(crt.outputdatalength, &ucrt->outputdatalength); 854 } 855 case ZSECSENDCPRB: { 856 struct ica_xcRB __user *uxcRB = (void __user *) arg; 857 struct ica_xcRB xcRB; 858 if (copy_from_user(&xcRB, uxcRB, sizeof(xcRB))) 859 return -EFAULT; 860 do { 861 rc = zcrypt_send_cprb(&xcRB); 862 } while (rc == -EAGAIN); 863 /* on failure: retry once again after a requested rescan */ 864 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 865 do { 866 rc = zcrypt_send_cprb(&xcRB); 867 } while (rc == -EAGAIN); 868 if (copy_to_user(uxcRB, &xcRB, sizeof(xcRB))) 869 return -EFAULT; 870 return rc; 871 } 872 case ZSENDEP11CPRB: { 873 struct ep11_urb __user *uxcrb = (void __user *)arg; 874 struct ep11_urb xcrb; 875 if (copy_from_user(&xcrb, uxcrb, sizeof(xcrb))) 876 return -EFAULT; 877 do { 878 rc = zcrypt_send_ep11_cprb(&xcrb); 879 } while (rc == -EAGAIN); 880 /* on failure: retry once again after a requested rescan */ 881 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 882 do { 883 rc = zcrypt_send_ep11_cprb(&xcrb); 884 } while (rc == -EAGAIN); 885 if (copy_to_user(uxcrb, &xcrb, sizeof(xcrb))) 886 return -EFAULT; 887 return rc; 888 } 889 case Z90STAT_STATUS_MASK: { 890 char status[AP_DEVICES]; 891 zcrypt_status_mask(status); 892 if (copy_to_user((char __user *) arg, status, 893 sizeof(char) * AP_DEVICES)) 894 return -EFAULT; 895 return 0; 896 } 897 case Z90STAT_QDEPTH_MASK: { 898 char qdepth[AP_DEVICES]; 899 zcrypt_qdepth_mask(qdepth); 900 if (copy_to_user((char __user *) arg, qdepth, 901 sizeof(char) * AP_DEVICES)) 902 return -EFAULT; 903 return 0; 904 } 905 case Z90STAT_PERDEV_REQCNT: { 906 int reqcnt[AP_DEVICES]; 907 zcrypt_perdev_reqcnt(reqcnt); 908 if (copy_to_user((int __user *) arg, reqcnt, 909 sizeof(int) * AP_DEVICES)) 910 return -EFAULT; 911 return 0; 912 } 913 case Z90STAT_REQUESTQ_COUNT: 914 return put_user(zcrypt_requestq_count(), (int __user *) arg); 915 case Z90STAT_PENDINGQ_COUNT: 916 return put_user(zcrypt_pendingq_count(), (int __user *) arg); 917 case Z90STAT_TOTALOPEN_COUNT: 918 return put_user(atomic_read(&zcrypt_open_count), 919 (int __user *) arg); 920 case Z90STAT_DOMAIN_INDEX: 921 return put_user(ap_domain_index, (int __user *) arg); 922 /* 923 * Deprecated ioctls. Don't add another device count ioctl, 924 * you can count them yourself in the user space with the 925 * output of the Z90STAT_STATUS_MASK ioctl. 926 */ 927 case ICAZ90STATUS: 928 return zcrypt_ica_status(filp, arg); 929 case Z90STAT_TOTALCOUNT: 930 return put_user(zcrypt_device_count, (int __user *) arg); 931 case Z90STAT_PCICACOUNT: 932 return put_user(zcrypt_count_type(ZCRYPT_PCICA), 933 (int __user *) arg); 934 case Z90STAT_PCICCCOUNT: 935 return put_user(zcrypt_count_type(ZCRYPT_PCICC), 936 (int __user *) arg); 937 case Z90STAT_PCIXCCMCL2COUNT: 938 return put_user(zcrypt_count_type(ZCRYPT_PCIXCC_MCL2), 939 (int __user *) arg); 940 case Z90STAT_PCIXCCMCL3COUNT: 941 return put_user(zcrypt_count_type(ZCRYPT_PCIXCC_MCL3), 942 (int __user *) arg); 943 case Z90STAT_PCIXCCCOUNT: 944 return put_user(zcrypt_count_type(ZCRYPT_PCIXCC_MCL2) + 945 zcrypt_count_type(ZCRYPT_PCIXCC_MCL3), 946 (int __user *) arg); 947 case Z90STAT_CEX2CCOUNT: 948 return put_user(zcrypt_count_type(ZCRYPT_CEX2C), 949 (int __user *) arg); 950 case Z90STAT_CEX2ACOUNT: 951 return put_user(zcrypt_count_type(ZCRYPT_CEX2A), 952 (int __user *) arg); 953 default: 954 /* unknown ioctl number */ 955 return -ENOIOCTLCMD; 956 } 957} 958 959#ifdef CONFIG_COMPAT 960/* 961 * ioctl32 conversion routines 962 */ 963struct compat_ica_rsa_modexpo { 964 compat_uptr_t inputdata; 965 unsigned int inputdatalength; 966 compat_uptr_t outputdata; 967 unsigned int outputdatalength; 968 compat_uptr_t b_key; 969 compat_uptr_t n_modulus; 970}; 971 972static long trans_modexpo32(struct file *filp, unsigned int cmd, 973 unsigned long arg) 974{ 975 struct compat_ica_rsa_modexpo __user *umex32 = compat_ptr(arg); 976 struct compat_ica_rsa_modexpo mex32; 977 struct ica_rsa_modexpo mex64; 978 long rc; 979 980 if (copy_from_user(&mex32, umex32, sizeof(mex32))) 981 return -EFAULT; 982 mex64.inputdata = compat_ptr(mex32.inputdata); 983 mex64.inputdatalength = mex32.inputdatalength; 984 mex64.outputdata = compat_ptr(mex32.outputdata); 985 mex64.outputdatalength = mex32.outputdatalength; 986 mex64.b_key = compat_ptr(mex32.b_key); 987 mex64.n_modulus = compat_ptr(mex32.n_modulus); 988 do { 989 rc = zcrypt_rsa_modexpo(&mex64); 990 } while (rc == -EAGAIN); 991 /* on failure: retry once again after a requested rescan */ 992 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 993 do { 994 rc = zcrypt_rsa_modexpo(&mex64); 995 } while (rc == -EAGAIN); 996 if (rc) 997 return rc; 998 return put_user(mex64.outputdatalength, 999 &umex32->outputdatalength); 1000} 1001 1002struct compat_ica_rsa_modexpo_crt { 1003 compat_uptr_t inputdata; 1004 unsigned int inputdatalength; 1005 compat_uptr_t outputdata; 1006 unsigned int outputdatalength; 1007 compat_uptr_t bp_key; 1008 compat_uptr_t bq_key; 1009 compat_uptr_t np_prime; 1010 compat_uptr_t nq_prime; 1011 compat_uptr_t u_mult_inv; 1012}; 1013 1014static long trans_modexpo_crt32(struct file *filp, unsigned int cmd, 1015 unsigned long arg) 1016{ 1017 struct compat_ica_rsa_modexpo_crt __user *ucrt32 = compat_ptr(arg); 1018 struct compat_ica_rsa_modexpo_crt crt32; 1019 struct ica_rsa_modexpo_crt crt64; 1020 long rc; 1021 1022 if (copy_from_user(&crt32, ucrt32, sizeof(crt32))) 1023 return -EFAULT; 1024 crt64.inputdata = compat_ptr(crt32.inputdata); 1025 crt64.inputdatalength = crt32.inputdatalength; 1026 crt64.outputdata= compat_ptr(crt32.outputdata); 1027 crt64.outputdatalength = crt32.outputdatalength; 1028 crt64.bp_key = compat_ptr(crt32.bp_key); 1029 crt64.bq_key = compat_ptr(crt32.bq_key); 1030 crt64.np_prime = compat_ptr(crt32.np_prime); 1031 crt64.nq_prime = compat_ptr(crt32.nq_prime); 1032 crt64.u_mult_inv = compat_ptr(crt32.u_mult_inv); 1033 do { 1034 rc = zcrypt_rsa_crt(&crt64); 1035 } while (rc == -EAGAIN); 1036 /* on failure: retry once again after a requested rescan */ 1037 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 1038 do { 1039 rc = zcrypt_rsa_crt(&crt64); 1040 } while (rc == -EAGAIN); 1041 if (rc) 1042 return rc; 1043 return put_user(crt64.outputdatalength, 1044 &ucrt32->outputdatalength); 1045} 1046 1047struct compat_ica_xcRB { 1048 unsigned short agent_ID; 1049 unsigned int user_defined; 1050 unsigned short request_ID; 1051 unsigned int request_control_blk_length; 1052 unsigned char padding1[16 - sizeof (compat_uptr_t)]; 1053 compat_uptr_t request_control_blk_addr; 1054 unsigned int request_data_length; 1055 char padding2[16 - sizeof (compat_uptr_t)]; 1056 compat_uptr_t request_data_address; 1057 unsigned int reply_control_blk_length; 1058 char padding3[16 - sizeof (compat_uptr_t)]; 1059 compat_uptr_t reply_control_blk_addr; 1060 unsigned int reply_data_length; 1061 char padding4[16 - sizeof (compat_uptr_t)]; 1062 compat_uptr_t reply_data_addr; 1063 unsigned short priority_window; 1064 unsigned int status; 1065} __attribute__((packed)); 1066 1067static long trans_xcRB32(struct file *filp, unsigned int cmd, 1068 unsigned long arg) 1069{ 1070 struct compat_ica_xcRB __user *uxcRB32 = compat_ptr(arg); 1071 struct compat_ica_xcRB xcRB32; 1072 struct ica_xcRB xcRB64; 1073 long rc; 1074 1075 if (copy_from_user(&xcRB32, uxcRB32, sizeof(xcRB32))) 1076 return -EFAULT; 1077 xcRB64.agent_ID = xcRB32.agent_ID; 1078 xcRB64.user_defined = xcRB32.user_defined; 1079 xcRB64.request_ID = xcRB32.request_ID; 1080 xcRB64.request_control_blk_length = 1081 xcRB32.request_control_blk_length; 1082 xcRB64.request_control_blk_addr = 1083 compat_ptr(xcRB32.request_control_blk_addr); 1084 xcRB64.request_data_length = 1085 xcRB32.request_data_length; 1086 xcRB64.request_data_address = 1087 compat_ptr(xcRB32.request_data_address); 1088 xcRB64.reply_control_blk_length = 1089 xcRB32.reply_control_blk_length; 1090 xcRB64.reply_control_blk_addr = 1091 compat_ptr(xcRB32.reply_control_blk_addr); 1092 xcRB64.reply_data_length = xcRB32.reply_data_length; 1093 xcRB64.reply_data_addr = 1094 compat_ptr(xcRB32.reply_data_addr); 1095 xcRB64.priority_window = xcRB32.priority_window; 1096 xcRB64.status = xcRB32.status; 1097 do { 1098 rc = zcrypt_send_cprb(&xcRB64); 1099 } while (rc == -EAGAIN); 1100 /* on failure: retry once again after a requested rescan */ 1101 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 1102 do { 1103 rc = zcrypt_send_cprb(&xcRB64); 1104 } while (rc == -EAGAIN); 1105 xcRB32.reply_control_blk_length = xcRB64.reply_control_blk_length; 1106 xcRB32.reply_data_length = xcRB64.reply_data_length; 1107 xcRB32.status = xcRB64.status; 1108 if (copy_to_user(uxcRB32, &xcRB32, sizeof(xcRB32))) 1109 return -EFAULT; 1110 return rc; 1111} 1112 1113static long zcrypt_compat_ioctl(struct file *filp, unsigned int cmd, 1114 unsigned long arg) 1115{ 1116 if (cmd == ICARSAMODEXPO) 1117 return trans_modexpo32(filp, cmd, arg); 1118 if (cmd == ICARSACRT) 1119 return trans_modexpo_crt32(filp, cmd, arg); 1120 if (cmd == ZSECSENDCPRB) 1121 return trans_xcRB32(filp, cmd, arg); 1122 return zcrypt_unlocked_ioctl(filp, cmd, arg); 1123} 1124#endif 1125 1126/* 1127 * Misc device file operations. 1128 */ 1129static const struct file_operations zcrypt_fops = { 1130 .owner = THIS_MODULE, 1131 .read = zcrypt_read, 1132 .write = zcrypt_write, 1133 .unlocked_ioctl = zcrypt_unlocked_ioctl, 1134#ifdef CONFIG_COMPAT 1135 .compat_ioctl = zcrypt_compat_ioctl, 1136#endif 1137 .open = zcrypt_open, 1138 .release = zcrypt_release, 1139 .llseek = no_llseek, 1140}; 1141 1142/* 1143 * Misc device. 1144 */ 1145static struct miscdevice zcrypt_misc_device = { 1146 .minor = MISC_DYNAMIC_MINOR, 1147 .name = "z90crypt", 1148 .fops = &zcrypt_fops, 1149}; 1150 1151/* 1152 * Deprecated /proc entry support. 1153 */ 1154static struct proc_dir_entry *zcrypt_entry; 1155 1156static void sprintcl(struct seq_file *m, unsigned char *addr, unsigned int len) 1157{ 1158 int i; 1159 1160 for (i = 0; i < len; i++) 1161 seq_printf(m, "%01x", (unsigned int) addr[i]); 1162 seq_putc(m, ' '); 1163} 1164 1165static void sprintrw(struct seq_file *m, unsigned char *addr, unsigned int len) 1166{ 1167 int inl, c, cx; 1168 1169 seq_printf(m, " "); 1170 inl = 0; 1171 for (c = 0; c < (len / 16); c++) { 1172 sprintcl(m, addr+inl, 16); 1173 inl += 16; 1174 } 1175 cx = len%16; 1176 if (cx) { 1177 sprintcl(m, addr+inl, cx); 1178 inl += cx; 1179 } 1180 seq_putc(m, '\n'); 1181} 1182 1183static void sprinthx(unsigned char *title, struct seq_file *m, 1184 unsigned char *addr, unsigned int len) 1185{ 1186 int inl, r, rx; 1187 1188 seq_printf(m, "\n%s\n", title); 1189 inl = 0; 1190 for (r = 0; r < (len / 64); r++) { 1191 sprintrw(m, addr+inl, 64); 1192 inl += 64; 1193 } 1194 rx = len % 64; 1195 if (rx) { 1196 sprintrw(m, addr+inl, rx); 1197 inl += rx; 1198 } 1199 seq_putc(m, '\n'); 1200} 1201 1202static void sprinthx4(unsigned char *title, struct seq_file *m, 1203 unsigned int *array, unsigned int len) 1204{ 1205 int r; 1206 1207 seq_printf(m, "\n%s\n", title); 1208 for (r = 0; r < len; r++) { 1209 if ((r % 8) == 0) 1210 seq_printf(m, " "); 1211 seq_printf(m, "%08X ", array[r]); 1212 if ((r % 8) == 7) 1213 seq_putc(m, '\n'); 1214 } 1215 seq_putc(m, '\n'); 1216} 1217 1218static int zcrypt_proc_show(struct seq_file *m, void *v) 1219{ 1220 char workarea[sizeof(int) * AP_DEVICES]; 1221 1222 seq_printf(m, "\nzcrypt version: %d.%d.%d\n", 1223 ZCRYPT_VERSION, ZCRYPT_RELEASE, ZCRYPT_VARIANT); 1224 seq_printf(m, "Cryptographic domain: %d\n", ap_domain_index); 1225 seq_printf(m, "Total device count: %d\n", zcrypt_device_count); 1226 seq_printf(m, "PCICA count: %d\n", zcrypt_count_type(ZCRYPT_PCICA)); 1227 seq_printf(m, "PCICC count: %d\n", zcrypt_count_type(ZCRYPT_PCICC)); 1228 seq_printf(m, "PCIXCC MCL2 count: %d\n", 1229 zcrypt_count_type(ZCRYPT_PCIXCC_MCL2)); 1230 seq_printf(m, "PCIXCC MCL3 count: %d\n", 1231 zcrypt_count_type(ZCRYPT_PCIXCC_MCL3)); 1232 seq_printf(m, "CEX2C count: %d\n", zcrypt_count_type(ZCRYPT_CEX2C)); 1233 seq_printf(m, "CEX2A count: %d\n", zcrypt_count_type(ZCRYPT_CEX2A)); 1234 seq_printf(m, "CEX3C count: %d\n", zcrypt_count_type(ZCRYPT_CEX3C)); 1235 seq_printf(m, "CEX3A count: %d\n", zcrypt_count_type(ZCRYPT_CEX3A)); 1236 seq_printf(m, "requestq count: %d\n", zcrypt_requestq_count()); 1237 seq_printf(m, "pendingq count: %d\n", zcrypt_pendingq_count()); 1238 seq_printf(m, "Total open handles: %d\n\n", 1239 atomic_read(&zcrypt_open_count)); 1240 zcrypt_status_mask(workarea); 1241 sprinthx("Online devices: 1=PCICA 2=PCICC 3=PCIXCC(MCL2) " 1242 "4=PCIXCC(MCL3) 5=CEX2C 6=CEX2A 7=CEX3C 8=CEX3A", 1243 m, workarea, AP_DEVICES); 1244 zcrypt_qdepth_mask(workarea); 1245 sprinthx("Waiting work element counts", m, workarea, AP_DEVICES); 1246 zcrypt_perdev_reqcnt((int *) workarea); 1247 sprinthx4("Per-device successfully completed request counts", 1248 m, (unsigned int *) workarea, AP_DEVICES); 1249 return 0; 1250} 1251 1252static int zcrypt_proc_open(struct inode *inode, struct file *file) 1253{ 1254 return single_open(file, zcrypt_proc_show, NULL); 1255} 1256 1257static void zcrypt_disable_card(int index) 1258{ 1259 struct zcrypt_device *zdev; 1260 1261 spin_lock_bh(&zcrypt_device_lock); 1262 list_for_each_entry(zdev, &zcrypt_device_list, list) 1263 if (AP_QID_DEVICE(zdev->ap_dev->qid) == index) { 1264 zdev->online = 0; 1265 ap_flush_queue(zdev->ap_dev); 1266 break; 1267 } 1268 spin_unlock_bh(&zcrypt_device_lock); 1269} 1270 1271static void zcrypt_enable_card(int index) 1272{ 1273 struct zcrypt_device *zdev; 1274 1275 spin_lock_bh(&zcrypt_device_lock); 1276 list_for_each_entry(zdev, &zcrypt_device_list, list) 1277 if (AP_QID_DEVICE(zdev->ap_dev->qid) == index) { 1278 zdev->online = 1; 1279 break; 1280 } 1281 spin_unlock_bh(&zcrypt_device_lock); 1282} 1283 1284static ssize_t zcrypt_proc_write(struct file *file, const char __user *buffer, 1285 size_t count, loff_t *pos) 1286{ 1287 unsigned char *lbuf, *ptr; 1288 size_t local_count; 1289 int j; 1290 1291 if (count <= 0) 1292 return 0; 1293 1294#define LBUFSIZE 1200UL 1295 lbuf = kmalloc(LBUFSIZE, GFP_KERNEL); 1296 if (!lbuf) 1297 return 0; 1298 1299 local_count = min(LBUFSIZE - 1, count); 1300 if (copy_from_user(lbuf, buffer, local_count) != 0) { 1301 kfree(lbuf); 1302 return -EFAULT; 1303 } 1304 lbuf[local_count] = '\0'; 1305 1306 ptr = strstr(lbuf, "Online devices"); 1307 if (!ptr) 1308 goto out; 1309 ptr = strstr(ptr, "\n"); 1310 if (!ptr) 1311 goto out; 1312 ptr++; 1313 1314 if (strstr(ptr, "Waiting work element counts") == NULL) 1315 goto out; 1316 1317 for (j = 0; j < 64 && *ptr; ptr++) { 1318 /* 1319 * '0' for no device, '1' for PCICA, '2' for PCICC, 1320 * '3' for PCIXCC_MCL2, '4' for PCIXCC_MCL3, 1321 * '5' for CEX2C and '6' for CEX2A' 1322 * '7' for CEX3C and '8' for CEX3A 1323 */ 1324 if (*ptr >= '0' && *ptr <= '8') 1325 j++; 1326 else if (*ptr == 'd' || *ptr == 'D') 1327 zcrypt_disable_card(j++); 1328 else if (*ptr == 'e' || *ptr == 'E') 1329 zcrypt_enable_card(j++); 1330 else if (*ptr != ' ' && *ptr != '\t') 1331 break; 1332 } 1333out: 1334 kfree(lbuf); 1335 return count; 1336} 1337 1338static const struct file_operations zcrypt_proc_fops = { 1339 .owner = THIS_MODULE, 1340 .open = zcrypt_proc_open, 1341 .read = seq_read, 1342 .llseek = seq_lseek, 1343 .release = single_release, 1344 .write = zcrypt_proc_write, 1345}; 1346 1347static int zcrypt_rng_device_count; 1348static u32 *zcrypt_rng_buffer; 1349static int zcrypt_rng_buffer_index; 1350static DEFINE_MUTEX(zcrypt_rng_mutex); 1351 1352static int zcrypt_rng_data_read(struct hwrng *rng, u32 *data) 1353{ 1354 int rc; 1355 1356 /* 1357 * We don't need locking here because the RNG API guarantees serialized 1358 * read method calls. 1359 */ 1360 if (zcrypt_rng_buffer_index == 0) { 1361 rc = zcrypt_rng((char *) zcrypt_rng_buffer); 1362 /* on failure: retry once again after a requested rescan */ 1363 if ((rc == -ENODEV) && (zcrypt_process_rescan())) 1364 rc = zcrypt_rng((char *) zcrypt_rng_buffer); 1365 if (rc < 0) 1366 return -EIO; 1367 zcrypt_rng_buffer_index = rc / sizeof *data; 1368 } 1369 *data = zcrypt_rng_buffer[--zcrypt_rng_buffer_index]; 1370 return sizeof *data; 1371} 1372 1373static struct hwrng zcrypt_rng_dev = { 1374 .name = "zcrypt", 1375 .data_read = zcrypt_rng_data_read, 1376}; 1377 1378static int zcrypt_rng_device_add(void) 1379{ 1380 int rc = 0; 1381 1382 mutex_lock(&zcrypt_rng_mutex); 1383 if (zcrypt_rng_device_count == 0) { 1384 zcrypt_rng_buffer = (u32 *) get_zeroed_page(GFP_KERNEL); 1385 if (!zcrypt_rng_buffer) { 1386 rc = -ENOMEM; 1387 goto out; 1388 } 1389 zcrypt_rng_buffer_index = 0; 1390 rc = hwrng_register(&zcrypt_rng_dev); 1391 if (rc) 1392 goto out_free; 1393 zcrypt_rng_device_count = 1; 1394 } else 1395 zcrypt_rng_device_count++; 1396 mutex_unlock(&zcrypt_rng_mutex); 1397 return 0; 1398 1399out_free: 1400 free_page((unsigned long) zcrypt_rng_buffer); 1401out: 1402 mutex_unlock(&zcrypt_rng_mutex); 1403 return rc; 1404} 1405 1406static void zcrypt_rng_device_remove(void) 1407{ 1408 mutex_lock(&zcrypt_rng_mutex); 1409 zcrypt_rng_device_count--; 1410 if (zcrypt_rng_device_count == 0) { 1411 hwrng_unregister(&zcrypt_rng_dev); 1412 free_page((unsigned long) zcrypt_rng_buffer); 1413 } 1414 mutex_unlock(&zcrypt_rng_mutex); 1415} 1416 1417int __init zcrypt_debug_init(void) 1418{ 1419 debugfs_root = debugfs_create_dir("zcrypt", NULL); 1420 1421 zcrypt_dbf_common = debug_register("zcrypt_common", 1, 1, 16); 1422 debug_register_view(zcrypt_dbf_common, &debug_hex_ascii_view); 1423 debug_set_level(zcrypt_dbf_common, DBF_ERR); 1424 1425 zcrypt_dbf_devices = debug_register("zcrypt_devices", 1, 1, 16); 1426 debug_register_view(zcrypt_dbf_devices, &debug_hex_ascii_view); 1427 debug_set_level(zcrypt_dbf_devices, DBF_ERR); 1428 1429 return 0; 1430} 1431 1432void zcrypt_debug_exit(void) 1433{ 1434 debugfs_remove(debugfs_root); 1435 if (zcrypt_dbf_common) 1436 debug_unregister(zcrypt_dbf_common); 1437 if (zcrypt_dbf_devices) 1438 debug_unregister(zcrypt_dbf_devices); 1439} 1440 1441/** 1442 * zcrypt_api_init(): Module initialization. 1443 * 1444 * The module initialization code. 1445 */ 1446int __init zcrypt_api_init(void) 1447{ 1448 int rc; 1449 1450 rc = zcrypt_debug_init(); 1451 if (rc) 1452 goto out; 1453 1454 atomic_set(&zcrypt_rescan_req, 0); 1455 1456 /* Register the request sprayer. */ 1457 rc = misc_register(&zcrypt_misc_device); 1458 if (rc < 0) 1459 goto out; 1460 1461 /* Set up the proc file system */ 1462 zcrypt_entry = proc_create("driver/z90crypt", 0644, NULL, &zcrypt_proc_fops); 1463 if (!zcrypt_entry) { 1464 rc = -ENOMEM; 1465 goto out_misc; 1466 } 1467 1468 return 0; 1469 1470out_misc: 1471 misc_deregister(&zcrypt_misc_device); 1472out: 1473 return rc; 1474} 1475 1476/** 1477 * zcrypt_api_exit(): Module termination. 1478 * 1479 * The module termination code. 1480 */ 1481void zcrypt_api_exit(void) 1482{ 1483 remove_proc_entry("driver/z90crypt", NULL); 1484 misc_deregister(&zcrypt_misc_device); 1485 zcrypt_debug_exit(); 1486} 1487 1488module_init(zcrypt_api_init); 1489module_exit(zcrypt_api_exit); 1490