zcrypt_api.c 54 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142
  1. // SPDX-License-Identifier: GPL-2.0+
  2. /*
  3. * Copyright IBM Corp. 2001, 2018
  4. * Author(s): Robert Burroughs
  5. * Eric Rossman (edrossma@us.ibm.com)
  6. * Cornelia Huck <cornelia.huck@de.ibm.com>
  7. *
  8. * Hotplug & misc device support: Jochen Roehrig (roehrig@de.ibm.com)
  9. * Major cleanup & driver split: Martin Schwidefsky <schwidefsky@de.ibm.com>
  10. * Ralph Wuerthner <rwuerthn@de.ibm.com>
  11. * MSGTYPE restruct: Holger Dengler <hd@linux.vnet.ibm.com>
  12. * Multiple device nodes: Harald Freudenberger <freude@linux.ibm.com>
  13. */
  14. #include <linux/module.h>
  15. #include <linux/init.h>
  16. #include <linux/interrupt.h>
  17. #include <linux/miscdevice.h>
  18. #include <linux/fs.h>
  19. #include <linux/compat.h>
  20. #include <linux/slab.h>
  21. #include <linux/atomic.h>
  22. #include <linux/uaccess.h>
  23. #include <linux/hw_random.h>
  24. #include <linux/debugfs.h>
  25. #include <linux/cdev.h>
  26. #include <linux/ctype.h>
  27. #include <linux/capability.h>
  28. #include <asm/debug.h>
  29. #define CREATE_TRACE_POINTS
  30. #include <asm/trace/zcrypt.h>
  31. #include "zcrypt_api.h"
  32. #include "zcrypt_debug.h"
  33. #include "zcrypt_msgtype6.h"
  34. #include "zcrypt_msgtype50.h"
  35. #include "zcrypt_ccamisc.h"
  36. #include "zcrypt_ep11misc.h"
  37. /*
  38. * Module description.
  39. */
  40. MODULE_AUTHOR("IBM Corporation");
  41. MODULE_DESCRIPTION("Cryptographic Coprocessor interface, " \
  42. "Copyright IBM Corp. 2001, 2012");
  43. MODULE_LICENSE("GPL");
  44. /*
  45. * zcrypt tracepoint functions
  46. */
  47. EXPORT_TRACEPOINT_SYMBOL(s390_zcrypt_req);
  48. EXPORT_TRACEPOINT_SYMBOL(s390_zcrypt_rep);
  49. static int zcrypt_hwrng_seed = 1;
  50. module_param_named(hwrng_seed, zcrypt_hwrng_seed, int, 0440);
  51. MODULE_PARM_DESC(hwrng_seed, "Turn on/off hwrng auto seed, default is 1 (on).");
  52. DEFINE_SPINLOCK(zcrypt_list_lock);
  53. LIST_HEAD(zcrypt_card_list);
  54. int zcrypt_device_count;
  55. static atomic_t zcrypt_open_count = ATOMIC_INIT(0);
  56. static atomic_t zcrypt_rescan_count = ATOMIC_INIT(0);
  57. atomic_t zcrypt_rescan_req = ATOMIC_INIT(0);
  58. EXPORT_SYMBOL(zcrypt_rescan_req);
  59. static LIST_HEAD(zcrypt_ops_list);
  60. /* Zcrypt related debug feature stuff. */
  61. debug_info_t *zcrypt_dbf_info;
  62. /**
  63. * Process a rescan of the transport layer.
  64. *
  65. * Returns 1, if the rescan has been processed, otherwise 0.
  66. */
  67. static inline int zcrypt_process_rescan(void)
  68. {
  69. if (atomic_read(&zcrypt_rescan_req)) {
  70. atomic_set(&zcrypt_rescan_req, 0);
  71. atomic_inc(&zcrypt_rescan_count);
  72. ap_bus_force_rescan();
  73. ZCRYPT_DBF(DBF_INFO, "rescan count=%07d\n",
  74. atomic_inc_return(&zcrypt_rescan_count));
  75. return 1;
  76. }
  77. return 0;
  78. }
  79. void zcrypt_msgtype_register(struct zcrypt_ops *zops)
  80. {
  81. list_add_tail(&zops->list, &zcrypt_ops_list);
  82. }
  83. void zcrypt_msgtype_unregister(struct zcrypt_ops *zops)
  84. {
  85. list_del_init(&zops->list);
  86. }
  87. struct zcrypt_ops *zcrypt_msgtype(unsigned char *name, int variant)
  88. {
  89. struct zcrypt_ops *zops;
  90. list_for_each_entry(zops, &zcrypt_ops_list, list)
  91. if ((zops->variant == variant) &&
  92. (!strncmp(zops->name, name, sizeof(zops->name))))
  93. return zops;
  94. return NULL;
  95. }
  96. EXPORT_SYMBOL(zcrypt_msgtype);
  97. /*
  98. * Multi device nodes extension functions.
  99. */
  100. #ifdef CONFIG_ZCRYPT_MULTIDEVNODES
  101. struct zcdn_device;
  102. static struct class *zcrypt_class;
  103. static dev_t zcrypt_devt;
  104. static struct cdev zcrypt_cdev;
  105. struct zcdn_device {
  106. struct device device;
  107. struct ap_perms perms;
  108. };
  109. #define to_zcdn_dev(x) container_of((x), struct zcdn_device, device)
  110. #define ZCDN_MAX_NAME 32
  111. static int zcdn_create(const char *name);
  112. static int zcdn_destroy(const char *name);
  113. /*
  114. * Find zcdn device by name.
  115. * Returns reference to the zcdn device which needs to be released
  116. * with put_device() after use.
  117. */
  118. static inline struct zcdn_device *find_zcdndev_by_name(const char *name)
  119. {
  120. struct device *dev = class_find_device_by_name(zcrypt_class, name);
  121. return dev ? to_zcdn_dev(dev) : NULL;
  122. }
  123. /*
  124. * Find zcdn device by devt value.
  125. * Returns reference to the zcdn device which needs to be released
  126. * with put_device() after use.
  127. */
  128. static inline struct zcdn_device *find_zcdndev_by_devt(dev_t devt)
  129. {
  130. struct device *dev = class_find_device_by_devt(zcrypt_class, devt);
  131. return dev ? to_zcdn_dev(dev) : NULL;
  132. }
  133. static ssize_t ioctlmask_show(struct device *dev,
  134. struct device_attribute *attr,
  135. char *buf)
  136. {
  137. int i, rc;
  138. struct zcdn_device *zcdndev = to_zcdn_dev(dev);
  139. if (mutex_lock_interruptible(&ap_perms_mutex))
  140. return -ERESTARTSYS;
  141. buf[0] = '0';
  142. buf[1] = 'x';
  143. for (i = 0; i < sizeof(zcdndev->perms.ioctlm) / sizeof(long); i++)
  144. snprintf(buf + 2 + 2 * i * sizeof(long),
  145. PAGE_SIZE - 2 - 2 * i * sizeof(long),
  146. "%016lx", zcdndev->perms.ioctlm[i]);
  147. buf[2 + 2 * i * sizeof(long)] = '\n';
  148. buf[2 + 2 * i * sizeof(long) + 1] = '\0';
  149. rc = 2 + 2 * i * sizeof(long) + 1;
  150. mutex_unlock(&ap_perms_mutex);
  151. return rc;
  152. }
  153. static ssize_t ioctlmask_store(struct device *dev,
  154. struct device_attribute *attr,
  155. const char *buf, size_t count)
  156. {
  157. int rc;
  158. struct zcdn_device *zcdndev = to_zcdn_dev(dev);
  159. rc = ap_parse_mask_str(buf, zcdndev->perms.ioctlm,
  160. AP_IOCTLS, &ap_perms_mutex);
  161. if (rc)
  162. return rc;
  163. return count;
  164. }
  165. static DEVICE_ATTR_RW(ioctlmask);
  166. static ssize_t apmask_show(struct device *dev,
  167. struct device_attribute *attr,
  168. char *buf)
  169. {
  170. int i, rc;
  171. struct zcdn_device *zcdndev = to_zcdn_dev(dev);
  172. if (mutex_lock_interruptible(&ap_perms_mutex))
  173. return -ERESTARTSYS;
  174. buf[0] = '0';
  175. buf[1] = 'x';
  176. for (i = 0; i < sizeof(zcdndev->perms.apm) / sizeof(long); i++)
  177. snprintf(buf + 2 + 2 * i * sizeof(long),
  178. PAGE_SIZE - 2 - 2 * i * sizeof(long),
  179. "%016lx", zcdndev->perms.apm[i]);
  180. buf[2 + 2 * i * sizeof(long)] = '\n';
  181. buf[2 + 2 * i * sizeof(long) + 1] = '\0';
  182. rc = 2 + 2 * i * sizeof(long) + 1;
  183. mutex_unlock(&ap_perms_mutex);
  184. return rc;
  185. }
  186. static ssize_t apmask_store(struct device *dev,
  187. struct device_attribute *attr,
  188. const char *buf, size_t count)
  189. {
  190. int rc;
  191. struct zcdn_device *zcdndev = to_zcdn_dev(dev);
  192. rc = ap_parse_mask_str(buf, zcdndev->perms.apm,
  193. AP_DEVICES, &ap_perms_mutex);
  194. if (rc)
  195. return rc;
  196. return count;
  197. }
  198. static DEVICE_ATTR_RW(apmask);
  199. static ssize_t aqmask_show(struct device *dev,
  200. struct device_attribute *attr,
  201. char *buf)
  202. {
  203. int i, rc;
  204. struct zcdn_device *zcdndev = to_zcdn_dev(dev);
  205. if (mutex_lock_interruptible(&ap_perms_mutex))
  206. return -ERESTARTSYS;
  207. buf[0] = '0';
  208. buf[1] = 'x';
  209. for (i = 0; i < sizeof(zcdndev->perms.aqm) / sizeof(long); i++)
  210. snprintf(buf + 2 + 2 * i * sizeof(long),
  211. PAGE_SIZE - 2 - 2 * i * sizeof(long),
  212. "%016lx", zcdndev->perms.aqm[i]);
  213. buf[2 + 2 * i * sizeof(long)] = '\n';
  214. buf[2 + 2 * i * sizeof(long) + 1] = '\0';
  215. rc = 2 + 2 * i * sizeof(long) + 1;
  216. mutex_unlock(&ap_perms_mutex);
  217. return rc;
  218. }
  219. static ssize_t aqmask_store(struct device *dev,
  220. struct device_attribute *attr,
  221. const char *buf, size_t count)
  222. {
  223. int rc;
  224. struct zcdn_device *zcdndev = to_zcdn_dev(dev);
  225. rc = ap_parse_mask_str(buf, zcdndev->perms.aqm,
  226. AP_DOMAINS, &ap_perms_mutex);
  227. if (rc)
  228. return rc;
  229. return count;
  230. }
  231. static DEVICE_ATTR_RW(aqmask);
  232. static struct attribute *zcdn_dev_attrs[] = {
  233. &dev_attr_ioctlmask.attr,
  234. &dev_attr_apmask.attr,
  235. &dev_attr_aqmask.attr,
  236. NULL
  237. };
  238. static struct attribute_group zcdn_dev_attr_group = {
  239. .attrs = zcdn_dev_attrs
  240. };
  241. static const struct attribute_group *zcdn_dev_attr_groups[] = {
  242. &zcdn_dev_attr_group,
  243. NULL
  244. };
  245. static ssize_t zcdn_create_store(struct class *class,
  246. struct class_attribute *attr,
  247. const char *buf, size_t count)
  248. {
  249. int rc;
  250. char name[ZCDN_MAX_NAME];
  251. strncpy(name, skip_spaces(buf), sizeof(name));
  252. name[sizeof(name) - 1] = '\0';
  253. rc = zcdn_create(strim(name));
  254. return rc ? rc : count;
  255. }
  256. static const struct class_attribute class_attr_zcdn_create =
  257. __ATTR(create, 0600, NULL, zcdn_create_store);
  258. static ssize_t zcdn_destroy_store(struct class *class,
  259. struct class_attribute *attr,
  260. const char *buf, size_t count)
  261. {
  262. int rc;
  263. char name[ZCDN_MAX_NAME];
  264. strncpy(name, skip_spaces(buf), sizeof(name));
  265. name[sizeof(name) - 1] = '\0';
  266. rc = zcdn_destroy(strim(name));
  267. return rc ? rc : count;
  268. }
  269. static const struct class_attribute class_attr_zcdn_destroy =
  270. __ATTR(destroy, 0600, NULL, zcdn_destroy_store);
  271. static void zcdn_device_release(struct device *dev)
  272. {
  273. struct zcdn_device *zcdndev = to_zcdn_dev(dev);
  274. ZCRYPT_DBF(DBF_INFO, "releasing zcdn device %d:%d\n",
  275. MAJOR(dev->devt), MINOR(dev->devt));
  276. kfree(zcdndev);
  277. }
  278. static int zcdn_create(const char *name)
  279. {
  280. dev_t devt;
  281. int i, rc = 0;
  282. char nodename[ZCDN_MAX_NAME];
  283. struct zcdn_device *zcdndev;
  284. if (mutex_lock_interruptible(&ap_perms_mutex))
  285. return -ERESTARTSYS;
  286. /* check if device node with this name already exists */
  287. if (name[0]) {
  288. zcdndev = find_zcdndev_by_name(name);
  289. if (zcdndev) {
  290. put_device(&zcdndev->device);
  291. rc = -EEXIST;
  292. goto unlockout;
  293. }
  294. }
  295. /* find an unused minor number */
  296. for (i = 0; i < ZCRYPT_MAX_MINOR_NODES; i++) {
  297. devt = MKDEV(MAJOR(zcrypt_devt), MINOR(zcrypt_devt) + i);
  298. zcdndev = find_zcdndev_by_devt(devt);
  299. if (zcdndev)
  300. put_device(&zcdndev->device);
  301. else
  302. break;
  303. }
  304. if (i == ZCRYPT_MAX_MINOR_NODES) {
  305. rc = -ENOSPC;
  306. goto unlockout;
  307. }
  308. /* alloc and prepare a new zcdn device */
  309. zcdndev = kzalloc(sizeof(*zcdndev), GFP_KERNEL);
  310. if (!zcdndev) {
  311. rc = -ENOMEM;
  312. goto unlockout;
  313. }
  314. zcdndev->device.release = zcdn_device_release;
  315. zcdndev->device.class = zcrypt_class;
  316. zcdndev->device.devt = devt;
  317. zcdndev->device.groups = zcdn_dev_attr_groups;
  318. if (name[0])
  319. strncpy(nodename, name, sizeof(nodename));
  320. else
  321. snprintf(nodename, sizeof(nodename),
  322. ZCRYPT_NAME "_%d", (int) MINOR(devt));
  323. nodename[sizeof(nodename)-1] = '\0';
  324. if (dev_set_name(&zcdndev->device, nodename)) {
  325. rc = -EINVAL;
  326. goto unlockout;
  327. }
  328. rc = device_register(&zcdndev->device);
  329. if (rc) {
  330. put_device(&zcdndev->device);
  331. goto unlockout;
  332. }
  333. ZCRYPT_DBF(DBF_INFO, "created zcdn device %d:%d\n",
  334. MAJOR(devt), MINOR(devt));
  335. unlockout:
  336. mutex_unlock(&ap_perms_mutex);
  337. return rc;
  338. }
  339. static int zcdn_destroy(const char *name)
  340. {
  341. int rc = 0;
  342. struct zcdn_device *zcdndev;
  343. if (mutex_lock_interruptible(&ap_perms_mutex))
  344. return -ERESTARTSYS;
  345. /* try to find this zcdn device */
  346. zcdndev = find_zcdndev_by_name(name);
  347. if (!zcdndev) {
  348. rc = -ENOENT;
  349. goto unlockout;
  350. }
  351. /*
  352. * The zcdn device is not hard destroyed. It is subject to
  353. * reference counting and thus just needs to be unregistered.
  354. */
  355. put_device(&zcdndev->device);
  356. device_unregister(&zcdndev->device);
  357. unlockout:
  358. mutex_unlock(&ap_perms_mutex);
  359. return rc;
  360. }
  361. static void zcdn_destroy_all(void)
  362. {
  363. int i;
  364. dev_t devt;
  365. struct zcdn_device *zcdndev;
  366. mutex_lock(&ap_perms_mutex);
  367. for (i = 0; i < ZCRYPT_MAX_MINOR_NODES; i++) {
  368. devt = MKDEV(MAJOR(zcrypt_devt), MINOR(zcrypt_devt) + i);
  369. zcdndev = find_zcdndev_by_devt(devt);
  370. if (zcdndev) {
  371. put_device(&zcdndev->device);
  372. device_unregister(&zcdndev->device);
  373. }
  374. }
  375. mutex_unlock(&ap_perms_mutex);
  376. }
  377. #endif
  378. /**
  379. * zcrypt_read (): Not supported beyond zcrypt 1.3.1.
  380. *
  381. * This function is not supported beyond zcrypt 1.3.1.
  382. */
  383. static ssize_t zcrypt_read(struct file *filp, char __user *buf,
  384. size_t count, loff_t *f_pos)
  385. {
  386. return -EPERM;
  387. }
  388. /**
  389. * zcrypt_write(): Not allowed.
  390. *
  391. * Write is is not allowed
  392. */
  393. static ssize_t zcrypt_write(struct file *filp, const char __user *buf,
  394. size_t count, loff_t *f_pos)
  395. {
  396. return -EPERM;
  397. }
  398. /**
  399. * zcrypt_open(): Count number of users.
  400. *
  401. * Device open function to count number of users.
  402. */
  403. static int zcrypt_open(struct inode *inode, struct file *filp)
  404. {
  405. struct ap_perms *perms = &ap_perms;
  406. #ifdef CONFIG_ZCRYPT_MULTIDEVNODES
  407. if (filp->f_inode->i_cdev == &zcrypt_cdev) {
  408. struct zcdn_device *zcdndev;
  409. if (mutex_lock_interruptible(&ap_perms_mutex))
  410. return -ERESTARTSYS;
  411. zcdndev = find_zcdndev_by_devt(filp->f_inode->i_rdev);
  412. /* find returns a reference, no get_device() needed */
  413. mutex_unlock(&ap_perms_mutex);
  414. if (zcdndev)
  415. perms = &zcdndev->perms;
  416. }
  417. #endif
  418. filp->private_data = (void *) perms;
  419. atomic_inc(&zcrypt_open_count);
  420. return stream_open(inode, filp);
  421. }
  422. /**
  423. * zcrypt_release(): Count number of users.
  424. *
  425. * Device close function to count number of users.
  426. */
  427. static int zcrypt_release(struct inode *inode, struct file *filp)
  428. {
  429. #ifdef CONFIG_ZCRYPT_MULTIDEVNODES
  430. if (filp->f_inode->i_cdev == &zcrypt_cdev) {
  431. struct zcdn_device *zcdndev;
  432. mutex_lock(&ap_perms_mutex);
  433. zcdndev = find_zcdndev_by_devt(filp->f_inode->i_rdev);
  434. mutex_unlock(&ap_perms_mutex);
  435. if (zcdndev) {
  436. /* 2 puts here: one for find, one for open */
  437. put_device(&zcdndev->device);
  438. put_device(&zcdndev->device);
  439. }
  440. }
  441. #endif
  442. atomic_dec(&zcrypt_open_count);
  443. return 0;
  444. }
  445. static inline int zcrypt_check_ioctl(struct ap_perms *perms,
  446. unsigned int cmd)
  447. {
  448. int rc = -EPERM;
  449. int ioctlnr = (cmd & _IOC_NRMASK) >> _IOC_NRSHIFT;
  450. if (ioctlnr > 0 && ioctlnr < AP_IOCTLS) {
  451. if (test_bit_inv(ioctlnr, perms->ioctlm))
  452. rc = 0;
  453. }
  454. if (rc)
  455. ZCRYPT_DBF(DBF_WARN,
  456. "ioctl check failed: ioctlnr=0x%04x rc=%d\n",
  457. ioctlnr, rc);
  458. return rc;
  459. }
  460. static inline bool zcrypt_check_card(struct ap_perms *perms, int card)
  461. {
  462. return test_bit_inv(card, perms->apm) ? true : false;
  463. }
  464. static inline bool zcrypt_check_queue(struct ap_perms *perms, int queue)
  465. {
  466. return test_bit_inv(queue, perms->aqm) ? true : false;
  467. }
  468. static inline struct zcrypt_queue *zcrypt_pick_queue(struct zcrypt_card *zc,
  469. struct zcrypt_queue *zq,
  470. struct module **pmod,
  471. unsigned int weight)
  472. {
  473. if (!zq || !try_module_get(zq->queue->ap_dev.drv->driver.owner))
  474. return NULL;
  475. zcrypt_queue_get(zq);
  476. get_device(&zq->queue->ap_dev.device);
  477. atomic_add(weight, &zc->load);
  478. atomic_add(weight, &zq->load);
  479. zq->request_count++;
  480. *pmod = zq->queue->ap_dev.drv->driver.owner;
  481. return zq;
  482. }
  483. static inline void zcrypt_drop_queue(struct zcrypt_card *zc,
  484. struct zcrypt_queue *zq,
  485. struct module *mod,
  486. unsigned int weight)
  487. {
  488. zq->request_count--;
  489. atomic_sub(weight, &zc->load);
  490. atomic_sub(weight, &zq->load);
  491. put_device(&zq->queue->ap_dev.device);
  492. zcrypt_queue_put(zq);
  493. module_put(mod);
  494. }
  495. static inline bool zcrypt_card_compare(struct zcrypt_card *zc,
  496. struct zcrypt_card *pref_zc,
  497. unsigned int weight,
  498. unsigned int pref_weight)
  499. {
  500. if (!pref_zc)
  501. return true;
  502. weight += atomic_read(&zc->load);
  503. pref_weight += atomic_read(&pref_zc->load);
  504. if (weight == pref_weight)
  505. return atomic64_read(&zc->card->total_request_count) <
  506. atomic64_read(&pref_zc->card->total_request_count);
  507. return weight < pref_weight;
  508. }
  509. static inline bool zcrypt_queue_compare(struct zcrypt_queue *zq,
  510. struct zcrypt_queue *pref_zq,
  511. unsigned int weight,
  512. unsigned int pref_weight)
  513. {
  514. if (!pref_zq)
  515. return true;
  516. weight += atomic_read(&zq->load);
  517. pref_weight += atomic_read(&pref_zq->load);
  518. if (weight == pref_weight)
  519. return zq->queue->total_request_count <
  520. pref_zq->queue->total_request_count;
  521. return weight < pref_weight;
  522. }
  523. /*
  524. * zcrypt ioctls.
  525. */
  526. static long zcrypt_rsa_modexpo(struct ap_perms *perms,
  527. struct zcrypt_track *tr,
  528. struct ica_rsa_modexpo *mex)
  529. {
  530. struct zcrypt_card *zc, *pref_zc;
  531. struct zcrypt_queue *zq, *pref_zq;
  532. struct ap_message ap_msg;
  533. unsigned int wgt = 0, pref_wgt = 0;
  534. unsigned int func_code;
  535. int cpen, qpen, qid = 0, rc = -ENODEV;
  536. struct module *mod;
  537. trace_s390_zcrypt_req(mex, TP_ICARSAMODEXPO);
  538. ap_init_message(&ap_msg);
  539. #ifdef CONFIG_ZCRYPT_DEBUG
  540. if (tr && tr->fi.cmd)
  541. ap_msg.fi.cmd = tr->fi.cmd;
  542. #endif
  543. if (mex->outputdatalength < mex->inputdatalength) {
  544. func_code = 0;
  545. rc = -EINVAL;
  546. goto out;
  547. }
  548. /*
  549. * As long as outputdatalength is big enough, we can set the
  550. * outputdatalength equal to the inputdatalength, since that is the
  551. * number of bytes we will copy in any case
  552. */
  553. mex->outputdatalength = mex->inputdatalength;
  554. rc = get_rsa_modex_fc(mex, &func_code);
  555. if (rc)
  556. goto out;
  557. pref_zc = NULL;
  558. pref_zq = NULL;
  559. spin_lock(&zcrypt_list_lock);
  560. for_each_zcrypt_card(zc) {
  561. /* Check for useable accelarator or CCA card */
  562. if (!zc->online || !zc->card->config ||
  563. !(zc->card->functions & 0x18000000))
  564. continue;
  565. /* Check for size limits */
  566. if (zc->min_mod_size > mex->inputdatalength ||
  567. zc->max_mod_size < mex->inputdatalength)
  568. continue;
  569. /* check if device node has admission for this card */
  570. if (!zcrypt_check_card(perms, zc->card->id))
  571. continue;
  572. /* get weight index of the card device */
  573. wgt = zc->speed_rating[func_code];
  574. /* penalty if this msg was previously sent via this card */
  575. cpen = (tr && tr->again_counter && tr->last_qid &&
  576. AP_QID_CARD(tr->last_qid) == zc->card->id) ?
  577. TRACK_AGAIN_CARD_WEIGHT_PENALTY : 0;
  578. if (!zcrypt_card_compare(zc, pref_zc, wgt + cpen, pref_wgt))
  579. continue;
  580. for_each_zcrypt_queue(zq, zc) {
  581. /* check if device is useable and eligible */
  582. if (!zq->online || !zq->ops->rsa_modexpo ||
  583. !zq->queue->config)
  584. continue;
  585. /* check if device node has admission for this queue */
  586. if (!zcrypt_check_queue(perms,
  587. AP_QID_QUEUE(zq->queue->qid)))
  588. continue;
  589. /* penalty if the msg was previously sent at this qid */
  590. qpen = (tr && tr->again_counter && tr->last_qid &&
  591. tr->last_qid == zq->queue->qid) ?
  592. TRACK_AGAIN_QUEUE_WEIGHT_PENALTY : 0;
  593. if (!zcrypt_queue_compare(zq, pref_zq,
  594. wgt + cpen + qpen, pref_wgt))
  595. continue;
  596. pref_zc = zc;
  597. pref_zq = zq;
  598. pref_wgt = wgt + cpen + qpen;
  599. }
  600. }
  601. pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, &mod, wgt);
  602. spin_unlock(&zcrypt_list_lock);
  603. if (!pref_zq) {
  604. rc = -ENODEV;
  605. goto out;
  606. }
  607. qid = pref_zq->queue->qid;
  608. rc = pref_zq->ops->rsa_modexpo(pref_zq, mex, &ap_msg);
  609. spin_lock(&zcrypt_list_lock);
  610. zcrypt_drop_queue(pref_zc, pref_zq, mod, wgt);
  611. spin_unlock(&zcrypt_list_lock);
  612. out:
  613. ap_release_message(&ap_msg);
  614. if (tr) {
  615. tr->last_rc = rc;
  616. tr->last_qid = qid;
  617. }
  618. trace_s390_zcrypt_rep(mex, func_code, rc,
  619. AP_QID_CARD(qid), AP_QID_QUEUE(qid));
  620. return rc;
  621. }
  622. static long zcrypt_rsa_crt(struct ap_perms *perms,
  623. struct zcrypt_track *tr,
  624. struct ica_rsa_modexpo_crt *crt)
  625. {
  626. struct zcrypt_card *zc, *pref_zc;
  627. struct zcrypt_queue *zq, *pref_zq;
  628. struct ap_message ap_msg;
  629. unsigned int wgt = 0, pref_wgt = 0;
  630. unsigned int func_code;
  631. int cpen, qpen, qid = 0, rc = -ENODEV;
  632. struct module *mod;
  633. trace_s390_zcrypt_req(crt, TP_ICARSACRT);
  634. ap_init_message(&ap_msg);
  635. #ifdef CONFIG_ZCRYPT_DEBUG
  636. if (tr && tr->fi.cmd)
  637. ap_msg.fi.cmd = tr->fi.cmd;
  638. #endif
  639. if (crt->outputdatalength < crt->inputdatalength) {
  640. func_code = 0;
  641. rc = -EINVAL;
  642. goto out;
  643. }
  644. /*
  645. * As long as outputdatalength is big enough, we can set the
  646. * outputdatalength equal to the inputdatalength, since that is the
  647. * number of bytes we will copy in any case
  648. */
  649. crt->outputdatalength = crt->inputdatalength;
  650. rc = get_rsa_crt_fc(crt, &func_code);
  651. if (rc)
  652. goto out;
  653. pref_zc = NULL;
  654. pref_zq = NULL;
  655. spin_lock(&zcrypt_list_lock);
  656. for_each_zcrypt_card(zc) {
  657. /* Check for useable accelarator or CCA card */
  658. if (!zc->online || !zc->card->config ||
  659. !(zc->card->functions & 0x18000000))
  660. continue;
  661. /* Check for size limits */
  662. if (zc->min_mod_size > crt->inputdatalength ||
  663. zc->max_mod_size < crt->inputdatalength)
  664. continue;
  665. /* check if device node has admission for this card */
  666. if (!zcrypt_check_card(perms, zc->card->id))
  667. continue;
  668. /* get weight index of the card device */
  669. wgt = zc->speed_rating[func_code];
  670. /* penalty if this msg was previously sent via this card */
  671. cpen = (tr && tr->again_counter && tr->last_qid &&
  672. AP_QID_CARD(tr->last_qid) == zc->card->id) ?
  673. TRACK_AGAIN_CARD_WEIGHT_PENALTY : 0;
  674. if (!zcrypt_card_compare(zc, pref_zc, wgt + cpen, pref_wgt))
  675. continue;
  676. for_each_zcrypt_queue(zq, zc) {
  677. /* check if device is useable and eligible */
  678. if (!zq->online || !zq->ops->rsa_modexpo_crt ||
  679. !zq->queue->config)
  680. continue;
  681. /* check if device node has admission for this queue */
  682. if (!zcrypt_check_queue(perms,
  683. AP_QID_QUEUE(zq->queue->qid)))
  684. continue;
  685. /* penalty if the msg was previously sent at this qid */
  686. qpen = (tr && tr->again_counter && tr->last_qid &&
  687. tr->last_qid == zq->queue->qid) ?
  688. TRACK_AGAIN_QUEUE_WEIGHT_PENALTY : 0;
  689. if (!zcrypt_queue_compare(zq, pref_zq,
  690. wgt + cpen + qpen, pref_wgt))
  691. continue;
  692. pref_zc = zc;
  693. pref_zq = zq;
  694. pref_wgt = wgt + cpen + qpen;
  695. }
  696. }
  697. pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, &mod, wgt);
  698. spin_unlock(&zcrypt_list_lock);
  699. if (!pref_zq) {
  700. rc = -ENODEV;
  701. goto out;
  702. }
  703. qid = pref_zq->queue->qid;
  704. rc = pref_zq->ops->rsa_modexpo_crt(pref_zq, crt, &ap_msg);
  705. spin_lock(&zcrypt_list_lock);
  706. zcrypt_drop_queue(pref_zc, pref_zq, mod, wgt);
  707. spin_unlock(&zcrypt_list_lock);
  708. out:
  709. ap_release_message(&ap_msg);
  710. if (tr) {
  711. tr->last_rc = rc;
  712. tr->last_qid = qid;
  713. }
  714. trace_s390_zcrypt_rep(crt, func_code, rc,
  715. AP_QID_CARD(qid), AP_QID_QUEUE(qid));
  716. return rc;
  717. }
  718. static long _zcrypt_send_cprb(bool userspace, struct ap_perms *perms,
  719. struct zcrypt_track *tr,
  720. struct ica_xcRB *xcRB)
  721. {
  722. struct zcrypt_card *zc, *pref_zc;
  723. struct zcrypt_queue *zq, *pref_zq;
  724. struct ap_message ap_msg;
  725. unsigned int wgt = 0, pref_wgt = 0;
  726. unsigned int func_code;
  727. unsigned short *domain, tdom;
  728. int cpen, qpen, qid = 0, rc = -ENODEV;
  729. struct module *mod;
  730. trace_s390_zcrypt_req(xcRB, TB_ZSECSENDCPRB);
  731. xcRB->status = 0;
  732. ap_init_message(&ap_msg);
  733. #ifdef CONFIG_ZCRYPT_DEBUG
  734. if (tr && tr->fi.cmd)
  735. ap_msg.fi.cmd = tr->fi.cmd;
  736. if (tr && tr->fi.action == AP_FI_ACTION_CCA_AGENT_FF) {
  737. ZCRYPT_DBF_WARN("%s fi cmd 0x%04x: forcing invalid agent_ID 'FF'\n",
  738. __func__, tr->fi.cmd);
  739. xcRB->agent_ID = 0x4646;
  740. }
  741. #endif
  742. rc = get_cprb_fc(userspace, xcRB, &ap_msg, &func_code, &domain);
  743. if (rc)
  744. goto out;
  745. /*
  746. * If a valid target domain is set and this domain is NOT a usage
  747. * domain but a control only domain, use the default domain as target.
  748. */
  749. tdom = *domain;
  750. if (tdom < AP_DOMAINS &&
  751. !ap_test_config_usage_domain(tdom) &&
  752. ap_test_config_ctrl_domain(tdom) &&
  753. ap_domain_index >= 0)
  754. tdom = ap_domain_index;
  755. pref_zc = NULL;
  756. pref_zq = NULL;
  757. spin_lock(&zcrypt_list_lock);
  758. for_each_zcrypt_card(zc) {
  759. /* Check for useable CCA card */
  760. if (!zc->online || !zc->card->config ||
  761. !(zc->card->functions & 0x10000000))
  762. continue;
  763. /* Check for user selected CCA card */
  764. if (xcRB->user_defined != AUTOSELECT &&
  765. xcRB->user_defined != zc->card->id)
  766. continue;
  767. /* check if device node has admission for this card */
  768. if (!zcrypt_check_card(perms, zc->card->id))
  769. continue;
  770. /* get weight index of the card device */
  771. wgt = speed_idx_cca(func_code) * zc->speed_rating[SECKEY];
  772. /* penalty if this msg was previously sent via this card */
  773. cpen = (tr && tr->again_counter && tr->last_qid &&
  774. AP_QID_CARD(tr->last_qid) == zc->card->id) ?
  775. TRACK_AGAIN_CARD_WEIGHT_PENALTY : 0;
  776. if (!zcrypt_card_compare(zc, pref_zc, wgt + cpen, pref_wgt))
  777. continue;
  778. for_each_zcrypt_queue(zq, zc) {
  779. /* check for device useable and eligible */
  780. if (!zq->online ||
  781. !zq->ops->send_cprb ||
  782. !zq->queue->config ||
  783. (tdom != AUTOSEL_DOM &&
  784. tdom != AP_QID_QUEUE(zq->queue->qid)))
  785. continue;
  786. /* check if device node has admission for this queue */
  787. if (!zcrypt_check_queue(perms,
  788. AP_QID_QUEUE(zq->queue->qid)))
  789. continue;
  790. /* penalty if the msg was previously sent at this qid */
  791. qpen = (tr && tr->again_counter && tr->last_qid &&
  792. tr->last_qid == zq->queue->qid) ?
  793. TRACK_AGAIN_QUEUE_WEIGHT_PENALTY : 0;
  794. if (!zcrypt_queue_compare(zq, pref_zq,
  795. wgt + cpen + qpen, pref_wgt))
  796. continue;
  797. pref_zc = zc;
  798. pref_zq = zq;
  799. pref_wgt = wgt + cpen + qpen;
  800. }
  801. }
  802. pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, &mod, wgt);
  803. spin_unlock(&zcrypt_list_lock);
  804. if (!pref_zq) {
  805. rc = -ENODEV;
  806. goto out;
  807. }
  808. /* in case of auto select, provide the correct domain */
  809. qid = pref_zq->queue->qid;
  810. if (*domain == AUTOSEL_DOM)
  811. *domain = AP_QID_QUEUE(qid);
  812. #ifdef CONFIG_ZCRYPT_DEBUG
  813. if (tr && tr->fi.action == AP_FI_ACTION_CCA_DOM_INVAL) {
  814. ZCRYPT_DBF_WARN("%s fi cmd 0x%04x: forcing invalid domain\n",
  815. __func__, tr->fi.cmd);
  816. *domain = 99;
  817. }
  818. #endif
  819. rc = pref_zq->ops->send_cprb(userspace, pref_zq, xcRB, &ap_msg);
  820. spin_lock(&zcrypt_list_lock);
  821. zcrypt_drop_queue(pref_zc, pref_zq, mod, wgt);
  822. spin_unlock(&zcrypt_list_lock);
  823. out:
  824. ap_release_message(&ap_msg);
  825. if (tr) {
  826. tr->last_rc = rc;
  827. tr->last_qid = qid;
  828. }
  829. trace_s390_zcrypt_rep(xcRB, func_code, rc,
  830. AP_QID_CARD(qid), AP_QID_QUEUE(qid));
  831. return rc;
  832. }
  833. long zcrypt_send_cprb(struct ica_xcRB *xcRB)
  834. {
  835. return _zcrypt_send_cprb(false, &ap_perms, NULL, xcRB);
  836. }
  837. EXPORT_SYMBOL(zcrypt_send_cprb);
  838. static bool is_desired_ep11_card(unsigned int dev_id,
  839. unsigned short target_num,
  840. struct ep11_target_dev *targets)
  841. {
  842. while (target_num-- > 0) {
  843. if (targets->ap_id == dev_id || targets->ap_id == AUTOSEL_AP)
  844. return true;
  845. targets++;
  846. }
  847. return false;
  848. }
  849. static bool is_desired_ep11_queue(unsigned int dev_qid,
  850. unsigned short target_num,
  851. struct ep11_target_dev *targets)
  852. {
  853. int card = AP_QID_CARD(dev_qid), dom = AP_QID_QUEUE(dev_qid);
  854. while (target_num-- > 0) {
  855. if ((targets->ap_id == card || targets->ap_id == AUTOSEL_AP) &&
  856. (targets->dom_id == dom || targets->dom_id == AUTOSEL_DOM))
  857. return true;
  858. targets++;
  859. }
  860. return false;
  861. }
  862. static long _zcrypt_send_ep11_cprb(bool userspace, struct ap_perms *perms,
  863. struct zcrypt_track *tr,
  864. struct ep11_urb *xcrb)
  865. {
  866. struct zcrypt_card *zc, *pref_zc;
  867. struct zcrypt_queue *zq, *pref_zq;
  868. struct ep11_target_dev *targets;
  869. unsigned short target_num;
  870. unsigned int wgt = 0, pref_wgt = 0;
  871. unsigned int func_code;
  872. struct ap_message ap_msg;
  873. int cpen, qpen, qid = 0, rc = -ENODEV;
  874. struct module *mod;
  875. trace_s390_zcrypt_req(xcrb, TP_ZSENDEP11CPRB);
  876. ap_init_message(&ap_msg);
  877. #ifdef CONFIG_ZCRYPT_DEBUG
  878. if (tr && tr->fi.cmd)
  879. ap_msg.fi.cmd = tr->fi.cmd;
  880. #endif
  881. target_num = (unsigned short) xcrb->targets_num;
  882. /* empty list indicates autoselect (all available targets) */
  883. targets = NULL;
  884. if (target_num != 0) {
  885. struct ep11_target_dev __user *uptr;
  886. targets = kcalloc(target_num, sizeof(*targets), GFP_KERNEL);
  887. if (!targets) {
  888. func_code = 0;
  889. rc = -ENOMEM;
  890. goto out;
  891. }
  892. uptr = (struct ep11_target_dev __force __user *) xcrb->targets;
  893. if (z_copy_from_user(userspace, targets, uptr,
  894. target_num * sizeof(*targets))) {
  895. func_code = 0;
  896. rc = -EFAULT;
  897. goto out_free;
  898. }
  899. }
  900. rc = get_ep11cprb_fc(userspace, xcrb, &ap_msg, &func_code);
  901. if (rc)
  902. goto out_free;
  903. pref_zc = NULL;
  904. pref_zq = NULL;
  905. spin_lock(&zcrypt_list_lock);
  906. for_each_zcrypt_card(zc) {
  907. /* Check for useable EP11 card */
  908. if (!zc->online || !zc->card->config ||
  909. !(zc->card->functions & 0x04000000))
  910. continue;
  911. /* Check for user selected EP11 card */
  912. if (targets &&
  913. !is_desired_ep11_card(zc->card->id, target_num, targets))
  914. continue;
  915. /* check if device node has admission for this card */
  916. if (!zcrypt_check_card(perms, zc->card->id))
  917. continue;
  918. /* get weight index of the card device */
  919. wgt = speed_idx_ep11(func_code) * zc->speed_rating[SECKEY];
  920. /* penalty if this msg was previously sent via this card */
  921. cpen = (tr && tr->again_counter && tr->last_qid &&
  922. AP_QID_CARD(tr->last_qid) == zc->card->id) ?
  923. TRACK_AGAIN_CARD_WEIGHT_PENALTY : 0;
  924. if (!zcrypt_card_compare(zc, pref_zc, wgt + cpen, pref_wgt))
  925. continue;
  926. for_each_zcrypt_queue(zq, zc) {
  927. /* check if device is useable and eligible */
  928. if (!zq->online ||
  929. !zq->ops->send_ep11_cprb ||
  930. !zq->queue->config ||
  931. (targets &&
  932. !is_desired_ep11_queue(zq->queue->qid,
  933. target_num, targets)))
  934. continue;
  935. /* check if device node has admission for this queue */
  936. if (!zcrypt_check_queue(perms,
  937. AP_QID_QUEUE(zq->queue->qid)))
  938. continue;
  939. /* penalty if the msg was previously sent at this qid */
  940. qpen = (tr && tr->again_counter && tr->last_qid &&
  941. tr->last_qid == zq->queue->qid) ?
  942. TRACK_AGAIN_QUEUE_WEIGHT_PENALTY : 0;
  943. if (!zcrypt_queue_compare(zq, pref_zq,
  944. wgt + cpen + qpen, pref_wgt))
  945. continue;
  946. pref_zc = zc;
  947. pref_zq = zq;
  948. pref_wgt = wgt + cpen + qpen;
  949. }
  950. }
  951. pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, &mod, wgt);
  952. spin_unlock(&zcrypt_list_lock);
  953. if (!pref_zq) {
  954. rc = -ENODEV;
  955. goto out_free;
  956. }
  957. qid = pref_zq->queue->qid;
  958. rc = pref_zq->ops->send_ep11_cprb(userspace, pref_zq, xcrb, &ap_msg);
  959. spin_lock(&zcrypt_list_lock);
  960. zcrypt_drop_queue(pref_zc, pref_zq, mod, wgt);
  961. spin_unlock(&zcrypt_list_lock);
  962. out_free:
  963. kfree(targets);
  964. out:
  965. ap_release_message(&ap_msg);
  966. if (tr) {
  967. tr->last_rc = rc;
  968. tr->last_qid = qid;
  969. }
  970. trace_s390_zcrypt_rep(xcrb, func_code, rc,
  971. AP_QID_CARD(qid), AP_QID_QUEUE(qid));
  972. return rc;
  973. }
  974. long zcrypt_send_ep11_cprb(struct ep11_urb *xcrb)
  975. {
  976. return _zcrypt_send_ep11_cprb(false, &ap_perms, NULL, xcrb);
  977. }
  978. EXPORT_SYMBOL(zcrypt_send_ep11_cprb);
  979. static long zcrypt_rng(char *buffer)
  980. {
  981. struct zcrypt_card *zc, *pref_zc;
  982. struct zcrypt_queue *zq, *pref_zq;
  983. unsigned int wgt = 0, pref_wgt = 0;
  984. unsigned int func_code;
  985. struct ap_message ap_msg;
  986. unsigned int domain;
  987. int qid = 0, rc = -ENODEV;
  988. struct module *mod;
  989. trace_s390_zcrypt_req(buffer, TP_HWRNGCPRB);
  990. ap_init_message(&ap_msg);
  991. rc = get_rng_fc(&ap_msg, &func_code, &domain);
  992. if (rc)
  993. goto out;
  994. pref_zc = NULL;
  995. pref_zq = NULL;
  996. spin_lock(&zcrypt_list_lock);
  997. for_each_zcrypt_card(zc) {
  998. /* Check for useable CCA card */
  999. if (!zc->online || !zc->card->config ||
  1000. !(zc->card->functions & 0x10000000))
  1001. continue;
  1002. /* get weight index of the card device */
  1003. wgt = zc->speed_rating[func_code];
  1004. if (!zcrypt_card_compare(zc, pref_zc, wgt, pref_wgt))
  1005. continue;
  1006. for_each_zcrypt_queue(zq, zc) {
  1007. /* check if device is useable and eligible */
  1008. if (!zq->online || !zq->ops->rng ||
  1009. !zq->queue->config)
  1010. continue;
  1011. if (!zcrypt_queue_compare(zq, pref_zq, wgt, pref_wgt))
  1012. continue;
  1013. pref_zc = zc;
  1014. pref_zq = zq;
  1015. pref_wgt = wgt;
  1016. }
  1017. }
  1018. pref_zq = zcrypt_pick_queue(pref_zc, pref_zq, &mod, wgt);
  1019. spin_unlock(&zcrypt_list_lock);
  1020. if (!pref_zq) {
  1021. rc = -ENODEV;
  1022. goto out;
  1023. }
  1024. qid = pref_zq->queue->qid;
  1025. rc = pref_zq->ops->rng(pref_zq, buffer, &ap_msg);
  1026. spin_lock(&zcrypt_list_lock);
  1027. zcrypt_drop_queue(pref_zc, pref_zq, mod, wgt);
  1028. spin_unlock(&zcrypt_list_lock);
  1029. out:
  1030. ap_release_message(&ap_msg);
  1031. trace_s390_zcrypt_rep(buffer, func_code, rc,
  1032. AP_QID_CARD(qid), AP_QID_QUEUE(qid));
  1033. return rc;
  1034. }
  1035. static void zcrypt_device_status_mask(struct zcrypt_device_status *devstatus)
  1036. {
  1037. struct zcrypt_card *zc;
  1038. struct zcrypt_queue *zq;
  1039. struct zcrypt_device_status *stat;
  1040. int card, queue;
  1041. memset(devstatus, 0, MAX_ZDEV_ENTRIES
  1042. * sizeof(struct zcrypt_device_status));
  1043. spin_lock(&zcrypt_list_lock);
  1044. for_each_zcrypt_card(zc) {
  1045. for_each_zcrypt_queue(zq, zc) {
  1046. card = AP_QID_CARD(zq->queue->qid);
  1047. if (card >= MAX_ZDEV_CARDIDS)
  1048. continue;
  1049. queue = AP_QID_QUEUE(zq->queue->qid);
  1050. stat = &devstatus[card * AP_DOMAINS + queue];
  1051. stat->hwtype = zc->card->ap_dev.device_type;
  1052. stat->functions = zc->card->functions >> 26;
  1053. stat->qid = zq->queue->qid;
  1054. stat->online = zq->online ? 0x01 : 0x00;
  1055. }
  1056. }
  1057. spin_unlock(&zcrypt_list_lock);
  1058. }
  1059. void zcrypt_device_status_mask_ext(struct zcrypt_device_status_ext *devstatus)
  1060. {
  1061. struct zcrypt_card *zc;
  1062. struct zcrypt_queue *zq;
  1063. struct zcrypt_device_status_ext *stat;
  1064. int card, queue;
  1065. memset(devstatus, 0, MAX_ZDEV_ENTRIES_EXT
  1066. * sizeof(struct zcrypt_device_status_ext));
  1067. spin_lock(&zcrypt_list_lock);
  1068. for_each_zcrypt_card(zc) {
  1069. for_each_zcrypt_queue(zq, zc) {
  1070. card = AP_QID_CARD(zq->queue->qid);
  1071. queue = AP_QID_QUEUE(zq->queue->qid);
  1072. stat = &devstatus[card * AP_DOMAINS + queue];
  1073. stat->hwtype = zc->card->ap_dev.device_type;
  1074. stat->functions = zc->card->functions >> 26;
  1075. stat->qid = zq->queue->qid;
  1076. stat->online = zq->online ? 0x01 : 0x00;
  1077. }
  1078. }
  1079. spin_unlock(&zcrypt_list_lock);
  1080. }
  1081. EXPORT_SYMBOL(zcrypt_device_status_mask_ext);
  1082. int zcrypt_device_status_ext(int card, int queue,
  1083. struct zcrypt_device_status_ext *devstat)
  1084. {
  1085. struct zcrypt_card *zc;
  1086. struct zcrypt_queue *zq;
  1087. memset(devstat, 0, sizeof(*devstat));
  1088. spin_lock(&zcrypt_list_lock);
  1089. for_each_zcrypt_card(zc) {
  1090. for_each_zcrypt_queue(zq, zc) {
  1091. if (card == AP_QID_CARD(zq->queue->qid) &&
  1092. queue == AP_QID_QUEUE(zq->queue->qid)) {
  1093. devstat->hwtype = zc->card->ap_dev.device_type;
  1094. devstat->functions = zc->card->functions >> 26;
  1095. devstat->qid = zq->queue->qid;
  1096. devstat->online = zq->online ? 0x01 : 0x00;
  1097. spin_unlock(&zcrypt_list_lock);
  1098. return 0;
  1099. }
  1100. }
  1101. }
  1102. spin_unlock(&zcrypt_list_lock);
  1103. return -ENODEV;
  1104. }
  1105. EXPORT_SYMBOL(zcrypt_device_status_ext);
  1106. static void zcrypt_status_mask(char status[], size_t max_adapters)
  1107. {
  1108. struct zcrypt_card *zc;
  1109. struct zcrypt_queue *zq;
  1110. int card;
  1111. memset(status, 0, max_adapters);
  1112. spin_lock(&zcrypt_list_lock);
  1113. for_each_zcrypt_card(zc) {
  1114. for_each_zcrypt_queue(zq, zc) {
  1115. card = AP_QID_CARD(zq->queue->qid);
  1116. if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index
  1117. || card >= max_adapters)
  1118. continue;
  1119. status[card] = zc->online ? zc->user_space_type : 0x0d;
  1120. }
  1121. }
  1122. spin_unlock(&zcrypt_list_lock);
  1123. }
  1124. static void zcrypt_qdepth_mask(char qdepth[], size_t max_adapters)
  1125. {
  1126. struct zcrypt_card *zc;
  1127. struct zcrypt_queue *zq;
  1128. int card;
  1129. memset(qdepth, 0, max_adapters);
  1130. spin_lock(&zcrypt_list_lock);
  1131. local_bh_disable();
  1132. for_each_zcrypt_card(zc) {
  1133. for_each_zcrypt_queue(zq, zc) {
  1134. card = AP_QID_CARD(zq->queue->qid);
  1135. if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index
  1136. || card >= max_adapters)
  1137. continue;
  1138. spin_lock(&zq->queue->lock);
  1139. qdepth[card] =
  1140. zq->queue->pendingq_count +
  1141. zq->queue->requestq_count;
  1142. spin_unlock(&zq->queue->lock);
  1143. }
  1144. }
  1145. local_bh_enable();
  1146. spin_unlock(&zcrypt_list_lock);
  1147. }
  1148. static void zcrypt_perdev_reqcnt(u32 reqcnt[], size_t max_adapters)
  1149. {
  1150. struct zcrypt_card *zc;
  1151. struct zcrypt_queue *zq;
  1152. int card;
  1153. u64 cnt;
  1154. memset(reqcnt, 0, sizeof(int) * max_adapters);
  1155. spin_lock(&zcrypt_list_lock);
  1156. local_bh_disable();
  1157. for_each_zcrypt_card(zc) {
  1158. for_each_zcrypt_queue(zq, zc) {
  1159. card = AP_QID_CARD(zq->queue->qid);
  1160. if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index
  1161. || card >= max_adapters)
  1162. continue;
  1163. spin_lock(&zq->queue->lock);
  1164. cnt = zq->queue->total_request_count;
  1165. spin_unlock(&zq->queue->lock);
  1166. reqcnt[card] = (cnt < UINT_MAX) ? (u32) cnt : UINT_MAX;
  1167. }
  1168. }
  1169. local_bh_enable();
  1170. spin_unlock(&zcrypt_list_lock);
  1171. }
  1172. static int zcrypt_pendingq_count(void)
  1173. {
  1174. struct zcrypt_card *zc;
  1175. struct zcrypt_queue *zq;
  1176. int pendingq_count;
  1177. pendingq_count = 0;
  1178. spin_lock(&zcrypt_list_lock);
  1179. local_bh_disable();
  1180. for_each_zcrypt_card(zc) {
  1181. for_each_zcrypt_queue(zq, zc) {
  1182. if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index)
  1183. continue;
  1184. spin_lock(&zq->queue->lock);
  1185. pendingq_count += zq->queue->pendingq_count;
  1186. spin_unlock(&zq->queue->lock);
  1187. }
  1188. }
  1189. local_bh_enable();
  1190. spin_unlock(&zcrypt_list_lock);
  1191. return pendingq_count;
  1192. }
  1193. static int zcrypt_requestq_count(void)
  1194. {
  1195. struct zcrypt_card *zc;
  1196. struct zcrypt_queue *zq;
  1197. int requestq_count;
  1198. requestq_count = 0;
  1199. spin_lock(&zcrypt_list_lock);
  1200. local_bh_disable();
  1201. for_each_zcrypt_card(zc) {
  1202. for_each_zcrypt_queue(zq, zc) {
  1203. if (AP_QID_QUEUE(zq->queue->qid) != ap_domain_index)
  1204. continue;
  1205. spin_lock(&zq->queue->lock);
  1206. requestq_count += zq->queue->requestq_count;
  1207. spin_unlock(&zq->queue->lock);
  1208. }
  1209. }
  1210. local_bh_enable();
  1211. spin_unlock(&zcrypt_list_lock);
  1212. return requestq_count;
  1213. }
  1214. static int icarsamodexpo_ioctl(struct ap_perms *perms, unsigned long arg)
  1215. {
  1216. int rc;
  1217. struct zcrypt_track tr;
  1218. struct ica_rsa_modexpo mex;
  1219. struct ica_rsa_modexpo __user *umex = (void __user *) arg;
  1220. memset(&tr, 0, sizeof(tr));
  1221. if (copy_from_user(&mex, umex, sizeof(mex)))
  1222. return -EFAULT;
  1223. #ifdef CONFIG_ZCRYPT_DEBUG
  1224. if (mex.inputdatalength & (1U << 31)) {
  1225. if (!capable(CAP_SYS_ADMIN))
  1226. return -EPERM;
  1227. tr.fi.cmd = (u16)(mex.inputdatalength >> 16);
  1228. }
  1229. mex.inputdatalength &= 0x0000FFFF;
  1230. #endif
  1231. do {
  1232. rc = zcrypt_rsa_modexpo(perms, &tr, &mex);
  1233. if (rc == -EAGAIN)
  1234. tr.again_counter++;
  1235. #ifdef CONFIG_ZCRYPT_DEBUG
  1236. if (rc == -EAGAIN && (tr.fi.flags & AP_FI_FLAG_NO_RETRY))
  1237. break;
  1238. #endif
  1239. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1240. /* on failure: retry once again after a requested rescan */
  1241. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1242. do {
  1243. rc = zcrypt_rsa_modexpo(perms, &tr, &mex);
  1244. if (rc == -EAGAIN)
  1245. tr.again_counter++;
  1246. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1247. if (rc == -EAGAIN && tr.again_counter >= TRACK_AGAIN_MAX)
  1248. rc = -EIO;
  1249. if (rc) {
  1250. ZCRYPT_DBF(DBF_DEBUG, "ioctl ICARSAMODEXPO rc=%d\n", rc);
  1251. return rc;
  1252. }
  1253. return put_user(mex.outputdatalength, &umex->outputdatalength);
  1254. }
  1255. static int icarsacrt_ioctl(struct ap_perms *perms, unsigned long arg)
  1256. {
  1257. int rc;
  1258. struct zcrypt_track tr;
  1259. struct ica_rsa_modexpo_crt crt;
  1260. struct ica_rsa_modexpo_crt __user *ucrt = (void __user *) arg;
  1261. memset(&tr, 0, sizeof(tr));
  1262. if (copy_from_user(&crt, ucrt, sizeof(crt)))
  1263. return -EFAULT;
  1264. #ifdef CONFIG_ZCRYPT_DEBUG
  1265. if (crt.inputdatalength & (1U << 31)) {
  1266. if (!capable(CAP_SYS_ADMIN))
  1267. return -EPERM;
  1268. tr.fi.cmd = (u16)(crt.inputdatalength >> 16);
  1269. }
  1270. crt.inputdatalength &= 0x0000FFFF;
  1271. #endif
  1272. do {
  1273. rc = zcrypt_rsa_crt(perms, &tr, &crt);
  1274. if (rc == -EAGAIN)
  1275. tr.again_counter++;
  1276. #ifdef CONFIG_ZCRYPT_DEBUG
  1277. if (rc == -EAGAIN && (tr.fi.flags & AP_FI_FLAG_NO_RETRY))
  1278. break;
  1279. #endif
  1280. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1281. /* on failure: retry once again after a requested rescan */
  1282. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1283. do {
  1284. rc = zcrypt_rsa_crt(perms, &tr, &crt);
  1285. if (rc == -EAGAIN)
  1286. tr.again_counter++;
  1287. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1288. if (rc == -EAGAIN && tr.again_counter >= TRACK_AGAIN_MAX)
  1289. rc = -EIO;
  1290. if (rc) {
  1291. ZCRYPT_DBF(DBF_DEBUG, "ioctl ICARSACRT rc=%d\n", rc);
  1292. return rc;
  1293. }
  1294. return put_user(crt.outputdatalength, &ucrt->outputdatalength);
  1295. }
  1296. static int zsecsendcprb_ioctl(struct ap_perms *perms, unsigned long arg)
  1297. {
  1298. int rc;
  1299. struct ica_xcRB xcRB;
  1300. struct zcrypt_track tr;
  1301. struct ica_xcRB __user *uxcRB = (void __user *) arg;
  1302. memset(&tr, 0, sizeof(tr));
  1303. if (copy_from_user(&xcRB, uxcRB, sizeof(xcRB)))
  1304. return -EFAULT;
  1305. #ifdef CONFIG_ZCRYPT_DEBUG
  1306. if (xcRB.status & (1U << 31)) {
  1307. if (!capable(CAP_SYS_ADMIN))
  1308. return -EPERM;
  1309. tr.fi.cmd = (u16)(xcRB.status >> 16);
  1310. }
  1311. xcRB.status &= 0x0000FFFF;
  1312. #endif
  1313. do {
  1314. rc = _zcrypt_send_cprb(true, perms, &tr, &xcRB);
  1315. if (rc == -EAGAIN)
  1316. tr.again_counter++;
  1317. #ifdef CONFIG_ZCRYPT_DEBUG
  1318. if (rc == -EAGAIN && (tr.fi.flags & AP_FI_FLAG_NO_RETRY))
  1319. break;
  1320. #endif
  1321. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1322. /* on failure: retry once again after a requested rescan */
  1323. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1324. do {
  1325. rc = _zcrypt_send_cprb(true, perms, &tr, &xcRB);
  1326. if (rc == -EAGAIN)
  1327. tr.again_counter++;
  1328. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1329. if (rc == -EAGAIN && tr.again_counter >= TRACK_AGAIN_MAX)
  1330. rc = -EIO;
  1331. if (rc)
  1332. ZCRYPT_DBF(DBF_DEBUG, "ioctl ZSENDCPRB rc=%d status=0x%x\n",
  1333. rc, xcRB.status);
  1334. if (copy_to_user(uxcRB, &xcRB, sizeof(xcRB)))
  1335. return -EFAULT;
  1336. return rc;
  1337. }
  1338. static int zsendep11cprb_ioctl(struct ap_perms *perms, unsigned long arg)
  1339. {
  1340. int rc;
  1341. struct ep11_urb xcrb;
  1342. struct zcrypt_track tr;
  1343. struct ep11_urb __user *uxcrb = (void __user *)arg;
  1344. memset(&tr, 0, sizeof(tr));
  1345. if (copy_from_user(&xcrb, uxcrb, sizeof(xcrb)))
  1346. return -EFAULT;
  1347. #ifdef CONFIG_ZCRYPT_DEBUG
  1348. if (xcrb.req_len & (1ULL << 63)) {
  1349. if (!capable(CAP_SYS_ADMIN))
  1350. return -EPERM;
  1351. tr.fi.cmd = (u16)(xcrb.req_len >> 48);
  1352. }
  1353. xcrb.req_len &= 0x0000FFFFFFFFFFFFULL;
  1354. #endif
  1355. do {
  1356. rc = _zcrypt_send_ep11_cprb(true, perms, &tr, &xcrb);
  1357. if (rc == -EAGAIN)
  1358. tr.again_counter++;
  1359. #ifdef CONFIG_ZCRYPT_DEBUG
  1360. if (rc == -EAGAIN && (tr.fi.flags & AP_FI_FLAG_NO_RETRY))
  1361. break;
  1362. #endif
  1363. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1364. /* on failure: retry once again after a requested rescan */
  1365. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1366. do {
  1367. rc = _zcrypt_send_ep11_cprb(true, perms, &tr, &xcrb);
  1368. if (rc == -EAGAIN)
  1369. tr.again_counter++;
  1370. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1371. if (rc == -EAGAIN && tr.again_counter >= TRACK_AGAIN_MAX)
  1372. rc = -EIO;
  1373. if (rc)
  1374. ZCRYPT_DBF(DBF_DEBUG, "ioctl ZSENDEP11CPRB rc=%d\n", rc);
  1375. if (copy_to_user(uxcrb, &xcrb, sizeof(xcrb)))
  1376. return -EFAULT;
  1377. return rc;
  1378. }
  1379. static long zcrypt_unlocked_ioctl(struct file *filp, unsigned int cmd,
  1380. unsigned long arg)
  1381. {
  1382. int rc;
  1383. struct ap_perms *perms =
  1384. (struct ap_perms *) filp->private_data;
  1385. rc = zcrypt_check_ioctl(perms, cmd);
  1386. if (rc)
  1387. return rc;
  1388. switch (cmd) {
  1389. case ICARSAMODEXPO:
  1390. return icarsamodexpo_ioctl(perms, arg);
  1391. case ICARSACRT:
  1392. return icarsacrt_ioctl(perms, arg);
  1393. case ZSECSENDCPRB:
  1394. return zsecsendcprb_ioctl(perms, arg);
  1395. case ZSENDEP11CPRB:
  1396. return zsendep11cprb_ioctl(perms, arg);
  1397. case ZCRYPT_DEVICE_STATUS: {
  1398. struct zcrypt_device_status_ext *device_status;
  1399. size_t total_size = MAX_ZDEV_ENTRIES_EXT
  1400. * sizeof(struct zcrypt_device_status_ext);
  1401. device_status = kzalloc(total_size, GFP_KERNEL);
  1402. if (!device_status)
  1403. return -ENOMEM;
  1404. zcrypt_device_status_mask_ext(device_status);
  1405. if (copy_to_user((char __user *) arg, device_status,
  1406. total_size))
  1407. rc = -EFAULT;
  1408. kfree(device_status);
  1409. return rc;
  1410. }
  1411. case ZCRYPT_STATUS_MASK: {
  1412. char status[AP_DEVICES];
  1413. zcrypt_status_mask(status, AP_DEVICES);
  1414. if (copy_to_user((char __user *) arg, status, sizeof(status)))
  1415. return -EFAULT;
  1416. return 0;
  1417. }
  1418. case ZCRYPT_QDEPTH_MASK: {
  1419. char qdepth[AP_DEVICES];
  1420. zcrypt_qdepth_mask(qdepth, AP_DEVICES);
  1421. if (copy_to_user((char __user *) arg, qdepth, sizeof(qdepth)))
  1422. return -EFAULT;
  1423. return 0;
  1424. }
  1425. case ZCRYPT_PERDEV_REQCNT: {
  1426. u32 *reqcnt;
  1427. reqcnt = kcalloc(AP_DEVICES, sizeof(u32), GFP_KERNEL);
  1428. if (!reqcnt)
  1429. return -ENOMEM;
  1430. zcrypt_perdev_reqcnt(reqcnt, AP_DEVICES);
  1431. if (copy_to_user((int __user *) arg, reqcnt,
  1432. sizeof(u32) * AP_DEVICES))
  1433. rc = -EFAULT;
  1434. kfree(reqcnt);
  1435. return rc;
  1436. }
  1437. case Z90STAT_REQUESTQ_COUNT:
  1438. return put_user(zcrypt_requestq_count(), (int __user *) arg);
  1439. case Z90STAT_PENDINGQ_COUNT:
  1440. return put_user(zcrypt_pendingq_count(), (int __user *) arg);
  1441. case Z90STAT_TOTALOPEN_COUNT:
  1442. return put_user(atomic_read(&zcrypt_open_count),
  1443. (int __user *) arg);
  1444. case Z90STAT_DOMAIN_INDEX:
  1445. return put_user(ap_domain_index, (int __user *) arg);
  1446. /*
  1447. * Deprecated ioctls
  1448. */
  1449. case ZDEVICESTATUS: {
  1450. /* the old ioctl supports only 64 adapters */
  1451. struct zcrypt_device_status *device_status;
  1452. size_t total_size = MAX_ZDEV_ENTRIES
  1453. * sizeof(struct zcrypt_device_status);
  1454. device_status = kzalloc(total_size, GFP_KERNEL);
  1455. if (!device_status)
  1456. return -ENOMEM;
  1457. zcrypt_device_status_mask(device_status);
  1458. if (copy_to_user((char __user *) arg, device_status,
  1459. total_size))
  1460. rc = -EFAULT;
  1461. kfree(device_status);
  1462. return rc;
  1463. }
  1464. case Z90STAT_STATUS_MASK: {
  1465. /* the old ioctl supports only 64 adapters */
  1466. char status[MAX_ZDEV_CARDIDS];
  1467. zcrypt_status_mask(status, MAX_ZDEV_CARDIDS);
  1468. if (copy_to_user((char __user *) arg, status, sizeof(status)))
  1469. return -EFAULT;
  1470. return 0;
  1471. }
  1472. case Z90STAT_QDEPTH_MASK: {
  1473. /* the old ioctl supports only 64 adapters */
  1474. char qdepth[MAX_ZDEV_CARDIDS];
  1475. zcrypt_qdepth_mask(qdepth, MAX_ZDEV_CARDIDS);
  1476. if (copy_to_user((char __user *) arg, qdepth, sizeof(qdepth)))
  1477. return -EFAULT;
  1478. return 0;
  1479. }
  1480. case Z90STAT_PERDEV_REQCNT: {
  1481. /* the old ioctl supports only 64 adapters */
  1482. u32 reqcnt[MAX_ZDEV_CARDIDS];
  1483. zcrypt_perdev_reqcnt(reqcnt, MAX_ZDEV_CARDIDS);
  1484. if (copy_to_user((int __user *) arg, reqcnt, sizeof(reqcnt)))
  1485. return -EFAULT;
  1486. return 0;
  1487. }
  1488. /* unknown ioctl number */
  1489. default:
  1490. ZCRYPT_DBF(DBF_DEBUG, "unknown ioctl 0x%08x\n", cmd);
  1491. return -ENOIOCTLCMD;
  1492. }
  1493. }
  1494. #ifdef CONFIG_COMPAT
  1495. /*
  1496. * ioctl32 conversion routines
  1497. */
  1498. struct compat_ica_rsa_modexpo {
  1499. compat_uptr_t inputdata;
  1500. unsigned int inputdatalength;
  1501. compat_uptr_t outputdata;
  1502. unsigned int outputdatalength;
  1503. compat_uptr_t b_key;
  1504. compat_uptr_t n_modulus;
  1505. };
  1506. static long trans_modexpo32(struct ap_perms *perms, struct file *filp,
  1507. unsigned int cmd, unsigned long arg)
  1508. {
  1509. struct compat_ica_rsa_modexpo __user *umex32 = compat_ptr(arg);
  1510. struct compat_ica_rsa_modexpo mex32;
  1511. struct ica_rsa_modexpo mex64;
  1512. struct zcrypt_track tr;
  1513. long rc;
  1514. memset(&tr, 0, sizeof(tr));
  1515. if (copy_from_user(&mex32, umex32, sizeof(mex32)))
  1516. return -EFAULT;
  1517. mex64.inputdata = compat_ptr(mex32.inputdata);
  1518. mex64.inputdatalength = mex32.inputdatalength;
  1519. mex64.outputdata = compat_ptr(mex32.outputdata);
  1520. mex64.outputdatalength = mex32.outputdatalength;
  1521. mex64.b_key = compat_ptr(mex32.b_key);
  1522. mex64.n_modulus = compat_ptr(mex32.n_modulus);
  1523. do {
  1524. rc = zcrypt_rsa_modexpo(perms, &tr, &mex64);
  1525. if (rc == -EAGAIN)
  1526. tr.again_counter++;
  1527. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1528. /* on failure: retry once again after a requested rescan */
  1529. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1530. do {
  1531. rc = zcrypt_rsa_modexpo(perms, &tr, &mex64);
  1532. if (rc == -EAGAIN)
  1533. tr.again_counter++;
  1534. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1535. if (rc == -EAGAIN && tr.again_counter >= TRACK_AGAIN_MAX)
  1536. rc = -EIO;
  1537. if (rc)
  1538. return rc;
  1539. return put_user(mex64.outputdatalength,
  1540. &umex32->outputdatalength);
  1541. }
  1542. struct compat_ica_rsa_modexpo_crt {
  1543. compat_uptr_t inputdata;
  1544. unsigned int inputdatalength;
  1545. compat_uptr_t outputdata;
  1546. unsigned int outputdatalength;
  1547. compat_uptr_t bp_key;
  1548. compat_uptr_t bq_key;
  1549. compat_uptr_t np_prime;
  1550. compat_uptr_t nq_prime;
  1551. compat_uptr_t u_mult_inv;
  1552. };
  1553. static long trans_modexpo_crt32(struct ap_perms *perms, struct file *filp,
  1554. unsigned int cmd, unsigned long arg)
  1555. {
  1556. struct compat_ica_rsa_modexpo_crt __user *ucrt32 = compat_ptr(arg);
  1557. struct compat_ica_rsa_modexpo_crt crt32;
  1558. struct ica_rsa_modexpo_crt crt64;
  1559. struct zcrypt_track tr;
  1560. long rc;
  1561. memset(&tr, 0, sizeof(tr));
  1562. if (copy_from_user(&crt32, ucrt32, sizeof(crt32)))
  1563. return -EFAULT;
  1564. crt64.inputdata = compat_ptr(crt32.inputdata);
  1565. crt64.inputdatalength = crt32.inputdatalength;
  1566. crt64.outputdata = compat_ptr(crt32.outputdata);
  1567. crt64.outputdatalength = crt32.outputdatalength;
  1568. crt64.bp_key = compat_ptr(crt32.bp_key);
  1569. crt64.bq_key = compat_ptr(crt32.bq_key);
  1570. crt64.np_prime = compat_ptr(crt32.np_prime);
  1571. crt64.nq_prime = compat_ptr(crt32.nq_prime);
  1572. crt64.u_mult_inv = compat_ptr(crt32.u_mult_inv);
  1573. do {
  1574. rc = zcrypt_rsa_crt(perms, &tr, &crt64);
  1575. if (rc == -EAGAIN)
  1576. tr.again_counter++;
  1577. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1578. /* on failure: retry once again after a requested rescan */
  1579. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1580. do {
  1581. rc = zcrypt_rsa_crt(perms, &tr, &crt64);
  1582. if (rc == -EAGAIN)
  1583. tr.again_counter++;
  1584. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1585. if (rc == -EAGAIN && tr.again_counter >= TRACK_AGAIN_MAX)
  1586. rc = -EIO;
  1587. if (rc)
  1588. return rc;
  1589. return put_user(crt64.outputdatalength,
  1590. &ucrt32->outputdatalength);
  1591. }
  1592. struct compat_ica_xcRB {
  1593. unsigned short agent_ID;
  1594. unsigned int user_defined;
  1595. unsigned short request_ID;
  1596. unsigned int request_control_blk_length;
  1597. unsigned char padding1[16 - sizeof(compat_uptr_t)];
  1598. compat_uptr_t request_control_blk_addr;
  1599. unsigned int request_data_length;
  1600. char padding2[16 - sizeof(compat_uptr_t)];
  1601. compat_uptr_t request_data_address;
  1602. unsigned int reply_control_blk_length;
  1603. char padding3[16 - sizeof(compat_uptr_t)];
  1604. compat_uptr_t reply_control_blk_addr;
  1605. unsigned int reply_data_length;
  1606. char padding4[16 - sizeof(compat_uptr_t)];
  1607. compat_uptr_t reply_data_addr;
  1608. unsigned short priority_window;
  1609. unsigned int status;
  1610. } __packed;
  1611. static long trans_xcRB32(struct ap_perms *perms, struct file *filp,
  1612. unsigned int cmd, unsigned long arg)
  1613. {
  1614. struct compat_ica_xcRB __user *uxcRB32 = compat_ptr(arg);
  1615. struct compat_ica_xcRB xcRB32;
  1616. struct zcrypt_track tr;
  1617. struct ica_xcRB xcRB64;
  1618. long rc;
  1619. memset(&tr, 0, sizeof(tr));
  1620. if (copy_from_user(&xcRB32, uxcRB32, sizeof(xcRB32)))
  1621. return -EFAULT;
  1622. xcRB64.agent_ID = xcRB32.agent_ID;
  1623. xcRB64.user_defined = xcRB32.user_defined;
  1624. xcRB64.request_ID = xcRB32.request_ID;
  1625. xcRB64.request_control_blk_length =
  1626. xcRB32.request_control_blk_length;
  1627. xcRB64.request_control_blk_addr =
  1628. compat_ptr(xcRB32.request_control_blk_addr);
  1629. xcRB64.request_data_length =
  1630. xcRB32.request_data_length;
  1631. xcRB64.request_data_address =
  1632. compat_ptr(xcRB32.request_data_address);
  1633. xcRB64.reply_control_blk_length =
  1634. xcRB32.reply_control_blk_length;
  1635. xcRB64.reply_control_blk_addr =
  1636. compat_ptr(xcRB32.reply_control_blk_addr);
  1637. xcRB64.reply_data_length = xcRB32.reply_data_length;
  1638. xcRB64.reply_data_addr =
  1639. compat_ptr(xcRB32.reply_data_addr);
  1640. xcRB64.priority_window = xcRB32.priority_window;
  1641. xcRB64.status = xcRB32.status;
  1642. do {
  1643. rc = _zcrypt_send_cprb(true, perms, &tr, &xcRB64);
  1644. if (rc == -EAGAIN)
  1645. tr.again_counter++;
  1646. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1647. /* on failure: retry once again after a requested rescan */
  1648. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1649. do {
  1650. rc = _zcrypt_send_cprb(true, perms, &tr, &xcRB64);
  1651. if (rc == -EAGAIN)
  1652. tr.again_counter++;
  1653. } while (rc == -EAGAIN && tr.again_counter < TRACK_AGAIN_MAX);
  1654. if (rc == -EAGAIN && tr.again_counter >= TRACK_AGAIN_MAX)
  1655. rc = -EIO;
  1656. xcRB32.reply_control_blk_length = xcRB64.reply_control_blk_length;
  1657. xcRB32.reply_data_length = xcRB64.reply_data_length;
  1658. xcRB32.status = xcRB64.status;
  1659. if (copy_to_user(uxcRB32, &xcRB32, sizeof(xcRB32)))
  1660. return -EFAULT;
  1661. return rc;
  1662. }
  1663. static long zcrypt_compat_ioctl(struct file *filp, unsigned int cmd,
  1664. unsigned long arg)
  1665. {
  1666. int rc;
  1667. struct ap_perms *perms =
  1668. (struct ap_perms *) filp->private_data;
  1669. rc = zcrypt_check_ioctl(perms, cmd);
  1670. if (rc)
  1671. return rc;
  1672. if (cmd == ICARSAMODEXPO)
  1673. return trans_modexpo32(perms, filp, cmd, arg);
  1674. if (cmd == ICARSACRT)
  1675. return trans_modexpo_crt32(perms, filp, cmd, arg);
  1676. if (cmd == ZSECSENDCPRB)
  1677. return trans_xcRB32(perms, filp, cmd, arg);
  1678. return zcrypt_unlocked_ioctl(filp, cmd, arg);
  1679. }
  1680. #endif
  1681. /*
  1682. * Misc device file operations.
  1683. */
  1684. static const struct file_operations zcrypt_fops = {
  1685. .owner = THIS_MODULE,
  1686. .read = zcrypt_read,
  1687. .write = zcrypt_write,
  1688. .unlocked_ioctl = zcrypt_unlocked_ioctl,
  1689. #ifdef CONFIG_COMPAT
  1690. .compat_ioctl = zcrypt_compat_ioctl,
  1691. #endif
  1692. .open = zcrypt_open,
  1693. .release = zcrypt_release,
  1694. .llseek = no_llseek,
  1695. };
  1696. /*
  1697. * Misc device.
  1698. */
  1699. static struct miscdevice zcrypt_misc_device = {
  1700. .minor = MISC_DYNAMIC_MINOR,
  1701. .name = "z90crypt",
  1702. .fops = &zcrypt_fops,
  1703. };
  1704. static int zcrypt_rng_device_count;
  1705. static u32 *zcrypt_rng_buffer;
  1706. static int zcrypt_rng_buffer_index;
  1707. static DEFINE_MUTEX(zcrypt_rng_mutex);
  1708. static int zcrypt_rng_data_read(struct hwrng *rng, u32 *data)
  1709. {
  1710. int rc;
  1711. /*
  1712. * We don't need locking here because the RNG API guarantees serialized
  1713. * read method calls.
  1714. */
  1715. if (zcrypt_rng_buffer_index == 0) {
  1716. rc = zcrypt_rng((char *) zcrypt_rng_buffer);
  1717. /* on failure: retry once again after a requested rescan */
  1718. if ((rc == -ENODEV) && (zcrypt_process_rescan()))
  1719. rc = zcrypt_rng((char *) zcrypt_rng_buffer);
  1720. if (rc < 0)
  1721. return -EIO;
  1722. zcrypt_rng_buffer_index = rc / sizeof(*data);
  1723. }
  1724. *data = zcrypt_rng_buffer[--zcrypt_rng_buffer_index];
  1725. return sizeof(*data);
  1726. }
  1727. static struct hwrng zcrypt_rng_dev = {
  1728. .name = "zcrypt",
  1729. .data_read = zcrypt_rng_data_read,
  1730. .quality = 990,
  1731. };
  1732. int zcrypt_rng_device_add(void)
  1733. {
  1734. int rc = 0;
  1735. mutex_lock(&zcrypt_rng_mutex);
  1736. if (zcrypt_rng_device_count == 0) {
  1737. zcrypt_rng_buffer = (u32 *) get_zeroed_page(GFP_KERNEL);
  1738. if (!zcrypt_rng_buffer) {
  1739. rc = -ENOMEM;
  1740. goto out;
  1741. }
  1742. zcrypt_rng_buffer_index = 0;
  1743. if (!zcrypt_hwrng_seed)
  1744. zcrypt_rng_dev.quality = 0;
  1745. rc = hwrng_register(&zcrypt_rng_dev);
  1746. if (rc)
  1747. goto out_free;
  1748. zcrypt_rng_device_count = 1;
  1749. } else
  1750. zcrypt_rng_device_count++;
  1751. mutex_unlock(&zcrypt_rng_mutex);
  1752. return 0;
  1753. out_free:
  1754. free_page((unsigned long) zcrypt_rng_buffer);
  1755. out:
  1756. mutex_unlock(&zcrypt_rng_mutex);
  1757. return rc;
  1758. }
  1759. void zcrypt_rng_device_remove(void)
  1760. {
  1761. mutex_lock(&zcrypt_rng_mutex);
  1762. zcrypt_rng_device_count--;
  1763. if (zcrypt_rng_device_count == 0) {
  1764. hwrng_unregister(&zcrypt_rng_dev);
  1765. free_page((unsigned long) zcrypt_rng_buffer);
  1766. }
  1767. mutex_unlock(&zcrypt_rng_mutex);
  1768. }
  1769. int __init zcrypt_debug_init(void)
  1770. {
  1771. zcrypt_dbf_info = debug_register("zcrypt", 1, 1,
  1772. DBF_MAX_SPRINTF_ARGS * sizeof(long));
  1773. debug_register_view(zcrypt_dbf_info, &debug_sprintf_view);
  1774. debug_set_level(zcrypt_dbf_info, DBF_ERR);
  1775. return 0;
  1776. }
  1777. void zcrypt_debug_exit(void)
  1778. {
  1779. debug_unregister(zcrypt_dbf_info);
  1780. }
  1781. #ifdef CONFIG_ZCRYPT_MULTIDEVNODES
  1782. static int __init zcdn_init(void)
  1783. {
  1784. int rc;
  1785. /* create a new class 'zcrypt' */
  1786. zcrypt_class = class_create(THIS_MODULE, ZCRYPT_NAME);
  1787. if (IS_ERR(zcrypt_class)) {
  1788. rc = PTR_ERR(zcrypt_class);
  1789. goto out_class_create_failed;
  1790. }
  1791. zcrypt_class->dev_release = zcdn_device_release;
  1792. /* alloc device minor range */
  1793. rc = alloc_chrdev_region(&zcrypt_devt,
  1794. 0, ZCRYPT_MAX_MINOR_NODES,
  1795. ZCRYPT_NAME);
  1796. if (rc)
  1797. goto out_alloc_chrdev_failed;
  1798. cdev_init(&zcrypt_cdev, &zcrypt_fops);
  1799. zcrypt_cdev.owner = THIS_MODULE;
  1800. rc = cdev_add(&zcrypt_cdev, zcrypt_devt, ZCRYPT_MAX_MINOR_NODES);
  1801. if (rc)
  1802. goto out_cdev_add_failed;
  1803. /* need some class specific sysfs attributes */
  1804. rc = class_create_file(zcrypt_class, &class_attr_zcdn_create);
  1805. if (rc)
  1806. goto out_class_create_file_1_failed;
  1807. rc = class_create_file(zcrypt_class, &class_attr_zcdn_destroy);
  1808. if (rc)
  1809. goto out_class_create_file_2_failed;
  1810. return 0;
  1811. out_class_create_file_2_failed:
  1812. class_remove_file(zcrypt_class, &class_attr_zcdn_create);
  1813. out_class_create_file_1_failed:
  1814. cdev_del(&zcrypt_cdev);
  1815. out_cdev_add_failed:
  1816. unregister_chrdev_region(zcrypt_devt, ZCRYPT_MAX_MINOR_NODES);
  1817. out_alloc_chrdev_failed:
  1818. class_destroy(zcrypt_class);
  1819. out_class_create_failed:
  1820. return rc;
  1821. }
  1822. static void zcdn_exit(void)
  1823. {
  1824. class_remove_file(zcrypt_class, &class_attr_zcdn_create);
  1825. class_remove_file(zcrypt_class, &class_attr_zcdn_destroy);
  1826. zcdn_destroy_all();
  1827. cdev_del(&zcrypt_cdev);
  1828. unregister_chrdev_region(zcrypt_devt, ZCRYPT_MAX_MINOR_NODES);
  1829. class_destroy(zcrypt_class);
  1830. }
  1831. #endif
  1832. /**
  1833. * zcrypt_api_init(): Module initialization.
  1834. *
  1835. * The module initialization code.
  1836. */
  1837. int __init zcrypt_api_init(void)
  1838. {
  1839. int rc;
  1840. rc = zcrypt_debug_init();
  1841. if (rc)
  1842. goto out;
  1843. #ifdef CONFIG_ZCRYPT_MULTIDEVNODES
  1844. rc = zcdn_init();
  1845. if (rc)
  1846. goto out;
  1847. #endif
  1848. /* Register the request sprayer. */
  1849. rc = misc_register(&zcrypt_misc_device);
  1850. if (rc < 0)
  1851. goto out_misc_register_failed;
  1852. zcrypt_msgtype6_init();
  1853. zcrypt_msgtype50_init();
  1854. return 0;
  1855. out_misc_register_failed:
  1856. #ifdef CONFIG_ZCRYPT_MULTIDEVNODES
  1857. zcdn_exit();
  1858. #endif
  1859. zcrypt_debug_exit();
  1860. out:
  1861. return rc;
  1862. }
  1863. /**
  1864. * zcrypt_api_exit(): Module termination.
  1865. *
  1866. * The module termination code.
  1867. */
  1868. void __exit zcrypt_api_exit(void)
  1869. {
  1870. #ifdef CONFIG_ZCRYPT_MULTIDEVNODES
  1871. zcdn_exit();
  1872. #endif
  1873. misc_deregister(&zcrypt_misc_device);
  1874. zcrypt_msgtype6_exit();
  1875. zcrypt_msgtype50_exit();
  1876. zcrypt_ccamisc_exit();
  1877. zcrypt_ep11misc_exit();
  1878. zcrypt_debug_exit();
  1879. }
  1880. module_init(zcrypt_api_init);
  1881. module_exit(zcrypt_api_exit);