linux-kernel - [PATCH V3 0/8] Add new driver for WCSS secure PIL loading

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250107101647.2087358-1-quic_gokulsri@quicinc.com>
Date: Tue, 7 Jan 2025 15:46:39 +0530
From: Gokul Sriram Palanisamy <quic_gokulsri@...cinc.com>
To: <jassisinghbrar@...il.com>, <robh@...nel.org>, <krzk+dt@...nel.org>,
        <conor+dt@...nel.org>, <andersson@...nel.org>,
        <mathieu.poirier@...aro.org>, <konradybcio@...nel.org>,
        <quic_mmanikan@...cinc.com>, <linux-arm-msm@...r.kernel.org>,
        <linux-kernel@...r.kernel.org>, <devicetree@...r.kernel.org>,
        <linux-remoteproc@...r.kernel.org>, <dmitry.baryshkov@...aro.org>
CC: <quic_gokulsri@...cinc.com>, <quic_viswanat@...cinc.com>,
        <quic_srichara@...cinc.com>
Subject: [PATCH V3 0/8] Add new driver for WCSS secure PIL loading

This series depends on Sricharan's tmel-qmp mailbox driver series v2 [1].

- Secure PIL is signed, split firmware images which only TrustZone (TZ)
  can authenticate and load. Linux kernel will send a request to TZ to
  authenticate and load the PIL images.

- When secure PIL support was added to the existing wcss PIL driver
  earlier in [2], Bjorn suggested not to overload the existing WCSS
  rproc driver, instead post a new driver for PAS based IPQ WCSS driver.
  This series adds a new secure PIL driver for the same.

- Also adds changes to scm to pass metadata size as required for IPQ5332,
  reposted from [3].

[1]
https://patchwork.kernel.org/project/linux-arm-msm/cover/20241231054900.2144961-1-quic_srichara@quicinc.com/

[2]
https://patchwork.kernel.org/project/linux-arm-msm/patch/1611984013-10201-3-git-send-email-gokulsri@codeaurora.org/

[3]
https://patchwork.kernel.org/project/linux-arm-msm/patch/20240820055618.267554-6-quic_gokulsri@quicinc.com/

changes in v3:
	- fixed copyright years and markings based on Jeff's comments.
	- replaced devm_ioremap_wc() with ioremap_wc() in
	  wcss_sec_copy_segment().
	- replaced rproc_alloc() and rproc_add() with their devres
	  counterparts.
	- added mailbox call to tmelcom for secure image authentication
	  as required for IPQ5424. Added ipq5424 APCS comatible required. 
	- added changes to scm call to pass metadata size as equired for
	  IPQ5332.

changes in v2:
	- Removed dependency of this series to q6 clock removal series
	  as recommended by Krzysztof

Gokul Sriram Palanisamy (3):
  dt-bindings: mailbox: qcom: Add IPQ5424 APCS compatible
  mailbox: qcom: Add support for IPQ5424 APCS IPC
  arm64: dts: qcom: ipq5424: add nodes to bring up q6

Manikanta Mylavarapu (4):
  firmware: qcom_scm: ipq5332: add support to pass metadata size
  dt-bindings: remoteproc: qcom: document hexagon based WCSS secure PIL
  arm64: dts: qcom: ipq5332: add nodes to bringup q6
  arm64: dts: qcom: ipq9574: add nodes to bring up q6

Vignesh Viswanathan (1):
  remoteproc: qcom: add hexagon based WCSS secure PIL driver

 .../mailbox/qcom,apcs-kpss-global.yaml        |   1 +
 .../remoteproc/qcom,wcss-sec-pil.yaml         | 131 ++++++
 arch/arm64/boot/dts/qcom/ipq5332.dtsi         |  64 ++-
 arch/arm64/boot/dts/qcom/ipq5424.dtsi         |  80 +++-
 arch/arm64/boot/dts/qcom/ipq9574.dtsi         |  60 ++-
 drivers/firmware/qcom/qcom_scm.c              |  13 +-
 drivers/firmware/qcom/qcom_scm.h              |   1 +
 drivers/mailbox/qcom-apcs-ipc-mailbox.c       |   1 +
 drivers/remoteproc/Kconfig                    |  22 +
 drivers/remoteproc/Makefile                   |   1 +
 drivers/remoteproc/qcom_q6v5_wcss_sec.c       | 406 ++++++++++++++++++
 11 files changed, 775 insertions(+), 5 deletions(-)
 create mode 100644 Documentation/devicetree/bindings/remoteproc/qcom,wcss-sec-pil.yaml
 create mode 100644 drivers/remoteproc/qcom_q6v5_wcss_sec.c

-- 
2.34.1