atmel-i2c.c 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395
  1. // SPDX-License-Identifier: GPL-2.0
  2. /*
  3. * Microchip / Atmel ECC (I2C) driver.
  4. *
  5. * Copyright (c) 2017, Microchip Technology Inc.
  6. * Author: Tudor Ambarus <[email protected]>
  7. */
  8. #include <linux/bitrev.h>
  9. #include <linux/crc16.h>
  10. #include <linux/delay.h>
  11. #include <linux/device.h>
  12. #include <linux/err.h>
  13. #include <linux/errno.h>
  14. #include <linux/i2c.h>
  15. #include <linux/init.h>
  16. #include <linux/kernel.h>
  17. #include <linux/module.h>
  18. #include <linux/scatterlist.h>
  19. #include <linux/slab.h>
  20. #include <linux/workqueue.h>
  21. #include "atmel-i2c.h"
  22. static const struct {
  23. u8 value;
  24. const char *error_text;
  25. } error_list[] = {
  26. { 0x01, "CheckMac or Verify miscompare" },
  27. { 0x03, "Parse Error" },
  28. { 0x05, "ECC Fault" },
  29. { 0x0F, "Execution Error" },
  30. { 0xEE, "Watchdog about to expire" },
  31. { 0xFF, "CRC or other communication error" },
  32. };
  33. /**
  34. * atmel_i2c_checksum() - Generate 16-bit CRC as required by ATMEL ECC.
  35. * CRC16 verification of the count, opcode, param1, param2 and data bytes.
  36. * The checksum is saved in little-endian format in the least significant
  37. * two bytes of the command. CRC polynomial is 0x8005 and the initial register
  38. * value should be zero.
  39. *
  40. * @cmd : structure used for communicating with the device.
  41. */
  42. static void atmel_i2c_checksum(struct atmel_i2c_cmd *cmd)
  43. {
  44. u8 *data = &cmd->count;
  45. size_t len = cmd->count - CRC_SIZE;
  46. __le16 *__crc16 = (__le16 *)(data + len);
  47. *__crc16 = cpu_to_le16(bitrev16(crc16(0, data, len)));
  48. }
  49. void atmel_i2c_init_read_cmd(struct atmel_i2c_cmd *cmd)
  50. {
  51. cmd->word_addr = COMMAND;
  52. cmd->opcode = OPCODE_READ;
  53. /*
  54. * Read the word from Configuration zone that contains the lock bytes
  55. * (UserExtra, Selector, LockValue, LockConfig).
  56. */
  57. cmd->param1 = CONFIG_ZONE;
  58. cmd->param2 = cpu_to_le16(DEVICE_LOCK_ADDR);
  59. cmd->count = READ_COUNT;
  60. atmel_i2c_checksum(cmd);
  61. cmd->msecs = MAX_EXEC_TIME_READ;
  62. cmd->rxsize = READ_RSP_SIZE;
  63. }
  64. EXPORT_SYMBOL(atmel_i2c_init_read_cmd);
  65. void atmel_i2c_init_random_cmd(struct atmel_i2c_cmd *cmd)
  66. {
  67. cmd->word_addr = COMMAND;
  68. cmd->opcode = OPCODE_RANDOM;
  69. cmd->param1 = 0;
  70. cmd->param2 = 0;
  71. cmd->count = RANDOM_COUNT;
  72. atmel_i2c_checksum(cmd);
  73. cmd->msecs = MAX_EXEC_TIME_RANDOM;
  74. cmd->rxsize = RANDOM_RSP_SIZE;
  75. }
  76. EXPORT_SYMBOL(atmel_i2c_init_random_cmd);
  77. void atmel_i2c_init_genkey_cmd(struct atmel_i2c_cmd *cmd, u16 keyid)
  78. {
  79. cmd->word_addr = COMMAND;
  80. cmd->count = GENKEY_COUNT;
  81. cmd->opcode = OPCODE_GENKEY;
  82. cmd->param1 = GENKEY_MODE_PRIVATE;
  83. /* a random private key will be generated and stored in slot keyID */
  84. cmd->param2 = cpu_to_le16(keyid);
  85. atmel_i2c_checksum(cmd);
  86. cmd->msecs = MAX_EXEC_TIME_GENKEY;
  87. cmd->rxsize = GENKEY_RSP_SIZE;
  88. }
  89. EXPORT_SYMBOL(atmel_i2c_init_genkey_cmd);
  90. int atmel_i2c_init_ecdh_cmd(struct atmel_i2c_cmd *cmd,
  91. struct scatterlist *pubkey)
  92. {
  93. size_t copied;
  94. cmd->word_addr = COMMAND;
  95. cmd->count = ECDH_COUNT;
  96. cmd->opcode = OPCODE_ECDH;
  97. cmd->param1 = ECDH_PREFIX_MODE;
  98. /* private key slot */
  99. cmd->param2 = cpu_to_le16(DATA_SLOT_2);
  100. /*
  101. * The device only supports NIST P256 ECC keys. The public key size will
  102. * always be the same. Use a macro for the key size to avoid unnecessary
  103. * computations.
  104. */
  105. copied = sg_copy_to_buffer(pubkey,
  106. sg_nents_for_len(pubkey,
  107. ATMEL_ECC_PUBKEY_SIZE),
  108. cmd->data, ATMEL_ECC_PUBKEY_SIZE);
  109. if (copied != ATMEL_ECC_PUBKEY_SIZE)
  110. return -EINVAL;
  111. atmel_i2c_checksum(cmd);
  112. cmd->msecs = MAX_EXEC_TIME_ECDH;
  113. cmd->rxsize = ECDH_RSP_SIZE;
  114. return 0;
  115. }
  116. EXPORT_SYMBOL(atmel_i2c_init_ecdh_cmd);
  117. /*
  118. * After wake and after execution of a command, there will be error, status, or
  119. * result bytes in the device's output register that can be retrieved by the
  120. * system. When the length of that group is four bytes, the codes returned are
  121. * detailed in error_list.
  122. */
  123. static int atmel_i2c_status(struct device *dev, u8 *status)
  124. {
  125. size_t err_list_len = ARRAY_SIZE(error_list);
  126. int i;
  127. u8 err_id = status[1];
  128. if (*status != STATUS_SIZE)
  129. return 0;
  130. if (err_id == STATUS_WAKE_SUCCESSFUL || err_id == STATUS_NOERR)
  131. return 0;
  132. for (i = 0; i < err_list_len; i++)
  133. if (error_list[i].value == err_id)
  134. break;
  135. /* if err_id is not in the error_list then ignore it */
  136. if (i != err_list_len) {
  137. dev_err(dev, "%02x: %s:\n", err_id, error_list[i].error_text);
  138. return err_id;
  139. }
  140. return 0;
  141. }
  142. static int atmel_i2c_wakeup(struct i2c_client *client)
  143. {
  144. struct atmel_i2c_client_priv *i2c_priv = i2c_get_clientdata(client);
  145. u8 status[STATUS_RSP_SIZE];
  146. int ret;
  147. /*
  148. * The device ignores any levels or transitions on the SCL pin when the
  149. * device is idle, asleep or during waking up. Don't check for error
  150. * when waking up the device.
  151. */
  152. i2c_transfer_buffer_flags(client, i2c_priv->wake_token,
  153. i2c_priv->wake_token_sz, I2C_M_IGNORE_NAK);
  154. /*
  155. * Wait to wake the device. Typical execution times for ecdh and genkey
  156. * are around tens of milliseconds. Delta is chosen to 50 microseconds.
  157. */
  158. usleep_range(TWHI_MIN, TWHI_MAX);
  159. ret = i2c_master_recv(client, status, STATUS_SIZE);
  160. if (ret < 0)
  161. return ret;
  162. return atmel_i2c_status(&client->dev, status);
  163. }
  164. static int atmel_i2c_sleep(struct i2c_client *client)
  165. {
  166. u8 sleep = SLEEP_TOKEN;
  167. return i2c_master_send(client, &sleep, 1);
  168. }
  169. /*
  170. * atmel_i2c_send_receive() - send a command to the device and receive its
  171. * response.
  172. * @client: i2c client device
  173. * @cmd : structure used to communicate with the device
  174. *
  175. * After the device receives a Wake token, a watchdog counter starts within the
  176. * device. After the watchdog timer expires, the device enters sleep mode
  177. * regardless of whether some I/O transmission or command execution is in
  178. * progress. If a command is attempted when insufficient time remains prior to
  179. * watchdog timer execution, the device will return the watchdog timeout error
  180. * code without attempting to execute the command. There is no way to reset the
  181. * counter other than to put the device into sleep or idle mode and then
  182. * wake it up again.
  183. */
  184. int atmel_i2c_send_receive(struct i2c_client *client, struct atmel_i2c_cmd *cmd)
  185. {
  186. struct atmel_i2c_client_priv *i2c_priv = i2c_get_clientdata(client);
  187. int ret;
  188. mutex_lock(&i2c_priv->lock);
  189. ret = atmel_i2c_wakeup(client);
  190. if (ret)
  191. goto err;
  192. /* send the command */
  193. ret = i2c_master_send(client, (u8 *)cmd, cmd->count + WORD_ADDR_SIZE);
  194. if (ret < 0)
  195. goto err;
  196. /* delay the appropriate amount of time for command to execute */
  197. msleep(cmd->msecs);
  198. /* receive the response */
  199. ret = i2c_master_recv(client, cmd->data, cmd->rxsize);
  200. if (ret < 0)
  201. goto err;
  202. /* put the device into low-power mode */
  203. ret = atmel_i2c_sleep(client);
  204. if (ret < 0)
  205. goto err;
  206. mutex_unlock(&i2c_priv->lock);
  207. return atmel_i2c_status(&client->dev, cmd->data);
  208. err:
  209. mutex_unlock(&i2c_priv->lock);
  210. return ret;
  211. }
  212. EXPORT_SYMBOL(atmel_i2c_send_receive);
  213. static void atmel_i2c_work_handler(struct work_struct *work)
  214. {
  215. struct atmel_i2c_work_data *work_data =
  216. container_of(work, struct atmel_i2c_work_data, work);
  217. struct atmel_i2c_cmd *cmd = &work_data->cmd;
  218. struct i2c_client *client = work_data->client;
  219. int status;
  220. status = atmel_i2c_send_receive(client, cmd);
  221. work_data->cbk(work_data, work_data->areq, status);
  222. }
  223. static struct workqueue_struct *atmel_wq;
  224. void atmel_i2c_enqueue(struct atmel_i2c_work_data *work_data,
  225. void (*cbk)(struct atmel_i2c_work_data *work_data,
  226. void *areq, int status),
  227. void *areq)
  228. {
  229. work_data->cbk = (void *)cbk;
  230. work_data->areq = areq;
  231. INIT_WORK(&work_data->work, atmel_i2c_work_handler);
  232. queue_work(atmel_wq, &work_data->work);
  233. }
  234. EXPORT_SYMBOL(atmel_i2c_enqueue);
  235. void atmel_i2c_flush_queue(void)
  236. {
  237. flush_workqueue(atmel_wq);
  238. }
  239. EXPORT_SYMBOL(atmel_i2c_flush_queue);
  240. static inline size_t atmel_i2c_wake_token_sz(u32 bus_clk_rate)
  241. {
  242. u32 no_of_bits = DIV_ROUND_UP(TWLO_USEC * bus_clk_rate, USEC_PER_SEC);
  243. /* return the size of the wake_token in bytes */
  244. return DIV_ROUND_UP(no_of_bits, 8);
  245. }
  246. static int device_sanity_check(struct i2c_client *client)
  247. {
  248. struct atmel_i2c_cmd *cmd;
  249. int ret;
  250. cmd = kmalloc(sizeof(*cmd), GFP_KERNEL);
  251. if (!cmd)
  252. return -ENOMEM;
  253. atmel_i2c_init_read_cmd(cmd);
  254. ret = atmel_i2c_send_receive(client, cmd);
  255. if (ret)
  256. goto free_cmd;
  257. /*
  258. * It is vital that the Configuration, Data and OTP zones be locked
  259. * prior to release into the field of the system containing the device.
  260. * Failure to lock these zones may permit modification of any secret
  261. * keys and may lead to other security problems.
  262. */
  263. if (cmd->data[LOCK_CONFIG_IDX] || cmd->data[LOCK_VALUE_IDX]) {
  264. dev_err(&client->dev, "Configuration or Data and OTP zones are unlocked!\n");
  265. ret = -ENOTSUPP;
  266. }
  267. /* fall through */
  268. free_cmd:
  269. kfree(cmd);
  270. return ret;
  271. }
  272. int atmel_i2c_probe(struct i2c_client *client, const struct i2c_device_id *id)
  273. {
  274. struct atmel_i2c_client_priv *i2c_priv;
  275. struct device *dev = &client->dev;
  276. int ret;
  277. u32 bus_clk_rate;
  278. if (!i2c_check_functionality(client->adapter, I2C_FUNC_I2C)) {
  279. dev_err(dev, "I2C_FUNC_I2C not supported\n");
  280. return -ENODEV;
  281. }
  282. bus_clk_rate = i2c_acpi_find_bus_speed(&client->adapter->dev);
  283. if (!bus_clk_rate) {
  284. ret = device_property_read_u32(&client->adapter->dev,
  285. "clock-frequency", &bus_clk_rate);
  286. if (ret) {
  287. dev_err(dev, "failed to read clock-frequency property\n");
  288. return ret;
  289. }
  290. }
  291. if (bus_clk_rate > 1000000L) {
  292. dev_err(dev, "%u exceeds maximum supported clock frequency (1MHz)\n",
  293. bus_clk_rate);
  294. return -EINVAL;
  295. }
  296. i2c_priv = devm_kmalloc(dev, sizeof(*i2c_priv), GFP_KERNEL);
  297. if (!i2c_priv)
  298. return -ENOMEM;
  299. i2c_priv->client = client;
  300. mutex_init(&i2c_priv->lock);
  301. /*
  302. * WAKE_TOKEN_MAX_SIZE was calculated for the maximum bus_clk_rate -
  303. * 1MHz. The previous bus_clk_rate check ensures us that wake_token_sz
  304. * will always be smaller than or equal to WAKE_TOKEN_MAX_SIZE.
  305. */
  306. i2c_priv->wake_token_sz = atmel_i2c_wake_token_sz(bus_clk_rate);
  307. memset(i2c_priv->wake_token, 0, sizeof(i2c_priv->wake_token));
  308. atomic_set(&i2c_priv->tfm_count, 0);
  309. i2c_set_clientdata(client, i2c_priv);
  310. return device_sanity_check(client);
  311. }
  312. EXPORT_SYMBOL(atmel_i2c_probe);
  313. static int __init atmel_i2c_init(void)
  314. {
  315. atmel_wq = alloc_workqueue("atmel_wq", 0, 0);
  316. return atmel_wq ? 0 : -ENOMEM;
  317. }
  318. static void __exit atmel_i2c_exit(void)
  319. {
  320. destroy_workqueue(atmel_wq);
  321. }
  322. module_init(atmel_i2c_init);
  323. module_exit(atmel_i2c_exit);
  324. MODULE_AUTHOR("Tudor Ambarus <[email protected]>");
  325. MODULE_DESCRIPTION("Microchip / Atmel ECC (I2C) driver");
  326. MODULE_LICENSE("GPL v2");