linux-kernel - Re: [PATCH] ARM: dts: lan966x: disable aes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4c0ae8be-dbfd-8149-7ef0-da198e96ea60@microchip.com>
Date:   Tue, 13 Sep 2022 07:18:04 +0000
From:   <Claudiu.Beznea@...rochip.com>
To:     <Horatiu.Vultur@...rochip.com>, <devicetree@...r.kernel.org>,
        <linux-kernel@...r.kernel.org>
CC:     <Nicolas.Ferre@...rochip.com>, <UNGLinuxDriver@...rochip.com>
Subject: Re: [PATCH] ARM: dts: lan966x: disable aes

On 08.09.2022 10:04, Horatiu Vultur wrote:
> Disable AES node on lan966x pcb8290, pcb891 and pcb8309 because these
> boards have lan966x that uses secure OS which reserves the AES block.
> Therefore it can't be exposed to non-secure world.
> 
> Signed-off-by: Horatiu Vultur <horatiu.vultur@...rochip.com>

Applied to at91-dt, thanks!

> ---
>  arch/arm/boot/dts/lan966x-pcb8290.dts | 4 ++++
>  arch/arm/boot/dts/lan966x-pcb8291.dts | 4 ++++
>  arch/arm/boot/dts/lan966x-pcb8309.dts | 4 ++++
>  3 files changed, 12 insertions(+)
> 
> diff --git a/arch/arm/boot/dts/lan966x-pcb8290.dts b/arch/arm/boot/dts/lan966x-pcb8290.dts
> index 8a304210653a..2ed53da914ac 100644
> --- a/arch/arm/boot/dts/lan966x-pcb8290.dts
> +++ b/arch/arm/boot/dts/lan966x-pcb8290.dts
> @@ -27,6 +27,10 @@ phy_external_reset: phy_external_reset {
>  	};
>  };
>  
> +&aes {
> +	status = "disabled"; /* Reserved by secure OS */
> +};
> +
>  &gpio {
>  	miim_a_pins: mdio-pins {
>  		/* MDC, MDIO */
> diff --git a/arch/arm/boot/dts/lan966x-pcb8291.dts b/arch/arm/boot/dts/lan966x-pcb8291.dts
> index 289a31649422..f4f054cdf2a8 100644
> --- a/arch/arm/boot/dts/lan966x-pcb8291.dts
> +++ b/arch/arm/boot/dts/lan966x-pcb8291.dts
> @@ -53,6 +53,10 @@ led-s1-green {
>  	};
>  };
>  
> +&aes {
> +	status = "disabled"; /* Reserved by secure OS */
> +};
> +
>  &gpio {
>  	fc3_b_pins: fc3-b-pins {
>  		/* RX, TX */
> diff --git a/arch/arm/boot/dts/lan966x-pcb8309.dts b/arch/arm/boot/dts/lan966x-pcb8309.dts
> index cfd7c8933703..c436cd20d4b4 100644
> --- a/arch/arm/boot/dts/lan966x-pcb8309.dts
> +++ b/arch/arm/boot/dts/lan966x-pcb8309.dts
> @@ -97,6 +97,10 @@ sfp3: sfp3 {
>  	};
>  };
>  
> +&aes {
> +	status = "disabled"; /* Reserved by secure OS */
> +};
> +
>  &flx3 {
>  	atmel,flexcom-mode = <ATMEL_FLEXCOM_MODE_USART>;
>  	status = "okay";