crypto: caam - add PDB (Protocol Descriptor Block) definitions

#define NFIFOENTRY_PLEN_SHIFT	0

#define NFIFOENTRY_PLEN_MASK	(0xFF << NFIFOENTRY_PLEN_SHIFT)

/*

 * PDB internal definitions

 */

/* IPSec ESP CBC Encap/Decap Options */

#define PDBOPTS_ESPCBC_ARSNONE	0x00	/* no antireplay window	*/

#define PDBOPTS_ESPCBC_ARS32	0x40	/* 32-entry antireplay window */

#define PDBOPTS_ESPCBC_ARS64	0xc0	/* 64-entry antireplay window */

#define PDBOPTS_ESPCBC_IVSRC	0x20	/* IV comes from internal random gen */

#define PDBOPTS_ESPCBC_ESN	0x10	/* extended sequence included */

#define PDBOPTS_ESPCBC_OUTFMT	0x08	/* output only decapsulation (decap) */

#define PDBOPTS_ESPCBC_IPHDRSRC 0x08	/* IP header comes from PDB (encap) */

#define PDBOPTS_ESPCBC_INCIPHDR 0x04	/* Prepend IP header to output frame */

#define PDBOPTS_ESPCBC_IPVSN	0x02	/* process IPv6 header */

#define PDBOPTS_ESPCBC_TUNNEL	0x01	/* tunnel mode next-header byte */

#endif /* DESC_H */

/*

 * CAAM Protocol Data Block (PDB) definition header file

 *

 * Copyright 2008-2012 Freescale Semiconductor, Inc.

 *

 */

#ifndef CAAM_PDB_H

#define CAAM_PDB_H

/*

 * PDB- IPSec ESP Header Modification Options

 */

#define PDBHMO_ESP_DECAP_SHIFT	12

#define PDBHMO_ESP_ENCAP_SHIFT	4

/*

 * Encap and Decap - Decrement TTL (Hop Limit) - Based on the value of the

 * Options Byte IP version (IPvsn) field:

 * if IPv4, decrement the inner IP header TTL field (byte 8);

 * if IPv6 decrement the inner IP header Hop Limit field (byte 7).

*/

#define PDBHMO_ESP_DECAP_DEC_TTL	(0x02 << PDBHMO_ESP_DECAP_SHIFT)

#define PDBHMO_ESP_ENCAP_DEC_TTL	(0x02 << PDBHMO_ESP_ENCAP_SHIFT)

/*

 * Decap - DiffServ Copy - Copy the IPv4 TOS or IPv6 Traffic Class byte

 * from the outer IP header to the inner IP header.

 */

#define PDBHMO_ESP_DIFFSERV		(0x01 << PDBHMO_ESP_DECAP_SHIFT)

/*

 * Encap- Copy DF bit -if an IPv4 tunnel mode outer IP header is coming from

 * the PDB, copy the DF bit from the inner IP header to the outer IP header.

 */

#define PDBHMO_ESP_DFBIT		(0x04 << PDBHMO_ESP_ENCAP_SHIFT)

/*

 * PDB - IPSec ESP Encap/Decap Options

 */

#define PDBOPTS_ESP_ARSNONE	0x00 /* no antireplay window */

#define PDBOPTS_ESP_ARS32	0x40 /* 32-entry antireplay window */

#define PDBOPTS_ESP_ARS64	0xc0 /* 64-entry antireplay window */

#define PDBOPTS_ESP_IVSRC	0x20 /* IV comes from internal random gen */

#define PDBOPTS_ESP_ESN		0x10 /* extended sequence included */

#define PDBOPTS_ESP_OUTFMT	0x08 /* output only decapsulation (decap) */

#define PDBOPTS_ESP_IPHDRSRC	0x08 /* IP header comes from PDB (encap) */

#define PDBOPTS_ESP_INCIPHDR	0x04 /* Prepend IP header to output frame */

#define PDBOPTS_ESP_IPVSN	0x02 /* process IPv6 header */

#define PDBOPTS_ESP_TUNNEL	0x01 /* tunnel mode next-header byte */

#define PDBOPTS_ESP_IPV6	0x02 /* ip header version is V6 */

#define PDBOPTS_ESP_DIFFSERV	0x40 /* copy TOS/TC from inner iphdr */

#define PDBOPTS_ESP_UPDATE_CSUM 0x80 /* encap-update ip header checksum */

#define PDBOPTS_ESP_VERIFY_CSUM 0x20 /* decap-validate ip header checksum */

/*

 * General IPSec encap/decap PDB definitions

 */

struct ipsec_encap_cbc {

	u32 iv[4];

};

struct ipsec_encap_ctr {

	u32 ctr_nonce;

	u32 ctr_initial;

	u32 iv[2];

};

struct ipsec_encap_ccm {

	u32 salt; /* lower 24 bits */

	u8 b0_flags;

	u8 ctr_flags;

	u16 ctr_initial;

	u32 iv[2];

};

struct ipsec_encap_gcm {

	u32 salt; /* lower 24 bits */

	u32 rsvd1;

	u32 iv[2];

};

struct ipsec_encap_pdb {

	u8 hmo_rsvd;

	u8 ip_nh;

	u8 ip_nh_offset;

	u8 options;

	u32 seq_num_ext_hi;

	u32 seq_num;

	union {

		struct ipsec_encap_cbc cbc;

		struct ipsec_encap_ctr ctr;

		struct ipsec_encap_ccm ccm;

		struct ipsec_encap_gcm gcm;

	};

	u32 spi;

	u16 rsvd1;

	u16 ip_hdr_len;

	u32 ip_hdr[0]; /* optional IP Header content */

};

struct ipsec_decap_cbc {

	u32 rsvd[2];

};

struct ipsec_decap_ctr {

	u32 salt;

	u32 ctr_initial;

};

struct ipsec_decap_ccm {

	u32 salt;

	u8 iv_flags;

	u8 ctr_flags;

	u16 ctr_initial;

};

struct ipsec_decap_gcm {

	u32 salt;

	u32 resvd;

};

struct ipsec_decap_pdb {

	u16 hmo_ip_hdr_len;

	u8 ip_nh_offset;

	u8 options;

	union {

		struct ipsec_decap_cbc cbc;

		struct ipsec_decap_ctr ctr;

		struct ipsec_decap_ccm ccm;

		struct ipsec_decap_gcm gcm;

	};

	u32 seq_num_ext_hi;

	u32 seq_num;

	u32 anti_replay[2];

	u32 end_index[0];

};

/*

 * IPSec ESP Datapath Protocol Override Register (DPOVRD)

 */

struct ipsec_deco_dpovrd {

#define IPSEC_ENCAP_DECO_DPOVRD_USE 0x80

	u8 ovrd_ecn;

	u8 ip_hdr_len;

	u8 nh_offset;

	u8 next_header; /* reserved if decap */

};

/*

 * IEEE 802.11i WiFi Protocol Data Block

 */

#define WIFI_PDBOPTS_FCS	0x01

#define WIFI_PDBOPTS_AR		0x40

struct wifi_encap_pdb {

	u16 mac_hdr_len;

	u8 rsvd;

	u8 options;

	u8 iv_flags;

	u8 pri;

	u16 pn1;

	u32 pn2;

	u16 frm_ctrl_mask;

	u16 seq_ctrl_mask;

	u8 rsvd1[2];

	u8 cnst;

	u8 key_id;

	u8 ctr_flags;

	u8 rsvd2;

	u16 ctr_init;

};

struct wifi_decap_pdb {

	u16 mac_hdr_len;

	u8 rsvd;

	u8 options;

	u8 iv_flags;

	u8 pri;

	u16 pn1;

	u32 pn2;

	u16 frm_ctrl_mask;

	u16 seq_ctrl_mask;

	u8 rsvd1[4];

	u8 ctr_flags;

	u8 rsvd2;

	u16 ctr_init;

};

/*

 * IEEE 802.16 WiMAX Protocol Data Block

 */

#define WIMAX_PDBOPTS_FCS	0x01

#define WIMAX_PDBOPTS_AR	0x40 /* decap only */

struct wimax_encap_pdb {

	u8 rsvd[3];

	u8 options;

	u32 nonce;

	u8 b0_flags;

	u8 ctr_flags;

	u16 ctr_init;

	/* begin DECO writeback region */

	u32 pn;

	/* end DECO writeback region */

};

struct wimax_decap_pdb {

	u8 rsvd[3];

	u8 options;

	u32 nonce;

	u8 iv_flags;

	u8 ctr_flags;

	u16 ctr_init;

	/* begin DECO writeback region */

	u32 pn;

	u8 rsvd1[2];

	u16 antireplay_len;

	u64 antireplay_scorecard;

	/* end DECO writeback region */

};

/*

 * IEEE 801.AE MacSEC Protocol Data Block

 */

#define MACSEC_PDBOPTS_FCS	0x01

#define MACSEC_PDBOPTS_AR	0x40 /* used in decap only */

struct macsec_encap_pdb {

	u16 aad_len;

	u8 rsvd;

	u8 options;

	u64 sci;

	u16 ethertype;

	u8 tci_an;

	u8 rsvd1;

	/* begin DECO writeback region */

	u32 pn;

	/* end DECO writeback region */

};

struct macsec_decap_pdb {

	u16 aad_len;

	u8 rsvd;

	u8 options;

	u64 sci;

	u8 rsvd1[3];

	/* begin DECO writeback region */

	u8 antireplay_len;

	u32 pn;

	u64 antireplay_scorecard;

	/* end DECO writeback region */

};

/*

 * SSL/TLS/DTLS Protocol Data Blocks

 */

#define TLS_PDBOPTS_ARS32	0x40

#define TLS_PDBOPTS_ARS64	0xc0

#define TLS_PDBOPTS_OUTFMT	0x08

#define TLS_PDBOPTS_IV_WRTBK	0x02 /* 1.1/1.2/DTLS only */

#define TLS_PDBOPTS_EXP_RND_IV	0x01 /* 1.1/1.2/DTLS only */

struct tls_block_encap_pdb {

	u8 type;

	u8 version[2];

	u8 options;

	u64 seq_num;

	u32 iv[4];

};

struct tls_stream_encap_pdb {

	u8 type;

	u8 version[2];

	u8 options;

	u64 seq_num;

	u8 i;

	u8 j;

	u8 rsvd1[2];

};

struct dtls_block_encap_pdb {

	u8 type;

	u8 version[2];

	u8 options;

	u16 epoch;

	u16 seq_num[3];

	u32 iv[4];

};

struct tls_block_decap_pdb {

	u8 rsvd[3];

	u8 options;

	u64 seq_num;

	u32 iv[4];

};

struct tls_stream_decap_pdb {

	u8 rsvd[3];

	u8 options;

	u64 seq_num;

	u8 i;

	u8 j;

	u8 rsvd1[2];

};

struct dtls_block_decap_pdb {

	u8 rsvd[3];

	u8 options;

	u16 epoch;

	u16 seq_num[3];

	u32 iv[4];

	u64 antireplay_scorecard;

};

/*

 * SRTP Protocol Data Blocks

 */

#define SRTP_PDBOPTS_MKI	0x08

#define SRTP_PDBOPTS_AR		0x40

struct srtp_encap_pdb {

	u8 x_len;

	u8 mki_len;

	u8 n_tag;

	u8 options;

	u32 cnst0;

	u8 rsvd[2];

	u16 cnst1;

	u16 salt[7];

	u16 cnst2;

	u32 rsvd1;

	u32 roc;

	u32 opt_mki;

};

struct srtp_decap_pdb {

	u8 x_len;

	u8 mki_len;

	u8 n_tag;

	u8 options;

	u32 cnst0;

	u8 rsvd[2];

	u16 cnst1;

	u16 salt[7];

	u16 cnst2;

	u16 rsvd1;

	u16 seq_num;

	u32 roc;

	u64 antireplay_scorecard;

};

/*

 * DSA/ECDSA Protocol Data Blocks

 * Two of these exist: DSA-SIGN, and DSA-VERIFY. They are similar

 * except for the treatment of "w" for verify, "s" for sign,

 * and the placement of "a,b".

 */

#define DSA_PDB_SGF_SHIFT	24

#define DSA_PDB_SGF_MASK	(0xff << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_Q		(0x80 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_R		(0x40 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_G		(0x20 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_W		(0x10 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_S		(0x10 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_F		(0x08 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_C		(0x04 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_D		(0x02 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_AB_SIGN	(0x02 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_SGF_AB_VERIFY	(0x01 << DSA_PDB_SGF_SHIFT)

#define DSA_PDB_L_SHIFT		7

#define DSA_PDB_L_MASK		(0x3ff << DSA_PDB_L_SHIFT)

#define DSA_PDB_N_MASK		0x7f

struct dsa_sign_pdb {

	u32 sgf_ln; /* Use DSA_PDB_ defintions per above */

	u8 *q;

	u8 *r;

	u8 *g;	/* or Gx,y */

	u8 *s;

	u8 *f;

	u8 *c;

	u8 *d;

	u8 *ab; /* ECC only */

	u8 *u;

};

struct dsa_verify_pdb {

	u32 sgf_ln;

	u8 *q;

	u8 *r;

	u8 *g;	/* or Gx,y */

	u8 *w; /* or Wx,y */

	u8 *f;

	u8 *c;

	u8 *d;

	u8 *tmp; /* temporary data block */

	u8 *ab; /* only used if ECC processing */

};

#endif