shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-07 19:30:30 +09:00
Code Issues Packages Projects Releases Wiki Activity

unifykey: add secure node

Browse Source 
PD#168660: secure hdcp1.4 key

echo key_name > name
cat secure
to query whether a key is secure

Change-Id: If416fc8f2946176ecc956b73f1c9e77a55f7e57b
Signed-off-by: jiamin ma <jiamin.ma@amlogic.com>
Signed-off-by: yicheng shen <yicheng.shen@amlogic.com>
This commit is contained in:
jiamin ma
2018-06-22 19:04:40 +08:00
committed by Yixun Lan
parent b0f8ecf939
commit 244bb020db
1 changed files with 87 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

87
drivers/amlogic/unifykey/unifykey.c
View File

@@ -636,6 +636,56 @@ int key_unify_query(struct aml_unifykey_dev *ukdev, char *keyname,
}
EXPORT_SYMBOL(key_unify_query);
int key_unify_secure(struct aml_unifykey_dev *ukdev,
char *keyname, unsigned int *secure)
{
int ret = 0;
struct key_item_t *unifykey;
unsigned int keystate, keypermit;
unifykey = unifykey_find_item_by_name(&(ukdev->uk_header), keyname);
if (unifykey == NULL) {
pr_err("%s:%d,%s key name is not exist\n",
__func__,
__LINE__,
keyname);
return -EINVAL;
}
if (unifykey_item_verify_check(unifykey)) {
pr_err("%s:%d,%s key name is invalid\n",
__func__,
__LINE__,
keyname);
return -EINVAL;
}
/* check key burned or not */
ret = key_unify_query(ukdev, unifykey->name, &keystate, &keypermit);
if (ret < 0) {
pr_err("%s:%d, key_unify_query failed!\n",
__func__, __LINE__);
return -EINVAL;
}
*secure = 0;
/* if burned, ask bl31, else using dts */
if (keystate) {
ret = amlkey_issecure(unifykey->name);
if (ret < 0)
goto _out;
*secure = ret;
} else {
if (unifykey->dev == KEY_M_SECURE)
*secure = 1;
else
*secure = 0;
}
_out:
return ret;
}
EXPORT_SYMBOL(key_unify_secure);
/*
*function name: key_unify_encrypt
@@ -1077,6 +1127,42 @@ static ssize_t exist_show(struct class *cla,
return n;
}
static ssize_t secure_show(struct class *cla,
struct class_attribute *attr,
char *buf)
{
struct aml_unifykey_dev *ukdev;
struct key_item_t *curkey;
ssize_t n = 0;
int ret;
unsigned int secure = 0;
static const char * const state[] = {"false", "true", "error"};
ukdev = container_of(cla, struct aml_unifykey_dev, cls);
curkey = ukdev->curkey;
if (curkey == NULL) {
pr_err("please set key name first, %s:%d\n",
__func__, __LINE__);
return -EINVAL;
}
/* using current key*/
ret = key_unify_secure(ukdev, curkey->name, &secure);
if (ret < 0) {
pr_err("%s:%d, key_unify_secure failed!\n",
__func__, __LINE__);
secure = 2;
goto _out;
}
if (secure > 1)
secure = 1;
_out:
n += sprintf(&buf[n], "%s\n", state[secure]);
buf[n] = 0;
return n;
}
static ssize_t encrypt_show(struct class *cla,
struct class_attribute *attr,
char *buf)
@@ -1509,6 +1595,7 @@ static struct class_attribute unifykey_class_attrs[] = {
__ATTR_RO(list),
__ATTR_RO(exist),
__ATTR_RO(encrypt),
__ATTR_RO(secure),
__ATTR_RO(size),
__ATTR_RO(help),
__ATTR(name, KEY_RW_ATTR, name_show, name_store),