linux-kernel - Re: [PATCH v2] soc: qcom: ice: Add HWKM v1 support for wrapped keys

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <76dbc148-84e0-0376-ada7-49dd5db19327@oss.qualcomm.com>
Date: Thu, 30 Oct 2025 21:10:49 +0530
From: Neeraj Soni <neeraj.soni@....qualcomm.com>
To: Konrad Dybcio <konrad.dybcio@....qualcomm.com>, andersson@...nel.org,
        konradybcio@...nel.org
Cc: linux-arm-msm@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH v2] soc: qcom: ice: Add HWKM v1 support for wrapped keys

Hi Konrad,

On 10/30/2025 3:51 PM, Konrad Dybcio wrote:
> On 10/28/25 6:56 PM, Neeraj Soni wrote:
>> HWKM v1 and v2 differ slightly in wrapped key size and the bit fields for
>> certain status registers and operating mode (legacy or standard).
>>
>> Add support to select HWKM version based on the major and minor revisions.
>> Use this HWKM version to select wrapped key size and to configure the bit
>> fields in registers for operating modes and hardware status.
>>
>> Support for SCM calls for wrapped keys is being added in the TrustZone for
>> few SoCs with HWKM v1. Existing check of qcom_scm_has_wrapped_key_support()
>> API ensures that HWKM is used only if these SCM calls are supported in
>> TrustZone for that SoC.
>>
>> Signed-off-by: Neeraj Soni <neeraj.soni@....qualcomm.com>
>> ---
> 
> [...]
> 
>> +	/* HWKM version v2 is present from ICE 3.2.1 onwards while version v1
>> +	 * is present only in ICE 3.2.0. Earlier ICE version don't have HWKM.
>> +	 */
>> +	if (major > 3 ||
>> +	   (major == 3 && (minor >= 3 || (minor == 2 && step >= 1))))
>> +		ice->hwkm_version = QCOM_ICE_HWKM_V2;
>> +	else if ((major == 3) && (minor == 2))
>> +		ice->hwkm_version = QCOM_ICE_HWKM_V1;
>> +	else
>> +		ice->hwkm_version = 0;
>> +
>>  	dev_info(dev, "Found QC Inline Crypto Engine (ICE) v%d.%d.%d\n",
>>  		 major, minor, step);
>>  
>> +	if (!ice->hwkm_version)
>> +		dev_info(dev, "QC Hardware Key Manager (HWKM) not supported\n");
> 
> This isn't an error condition (ICE vers 3.0.0..<3.2.0 simply don't have it),
> so I think it's fair not to print this possibly somewhat concerning message
Okay i will remove it in next revision.
> 
> [...]
> 
>>  static unsigned int translate_hwkm_slot(struct qcom_ice *ice, unsigned int slot)
>>  {
>> -	return slot * 2;
>> +	/* The slot offset depends upon HWKM version */
> 
> This comment doesn't provide any additional context (e.g. what is the
> underlying reason for V2 requiring a wider stride) - please provide
> some or remove it, as otherwise it reiterates the single LoC below
Okay i think it is better to remove it. I will do so in next revision.
> 
> Looks good otherwise
Thanks.
> 
> Konrad
> 
Regards
Neeraj