via-rng.c 6.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232
  1. /*
  2. * RNG driver for VIA RNGs
  3. *
  4. * Copyright 2005 (c) MontaVista Software, Inc.
  5. *
  6. * with the majority of the code coming from:
  7. *
  8. * Hardware driver for the Intel/AMD/VIA Random Number Generators (RNG)
  9. * (c) Copyright 2003 Red Hat Inc <jgarzik@redhat.com>
  10. *
  11. * derived from
  12. *
  13. * Hardware driver for the AMD 768 Random Number Generator (RNG)
  14. * (c) Copyright 2001 Red Hat Inc
  15. *
  16. * derived from
  17. *
  18. * Hardware driver for Intel i810 Random Number Generator (RNG)
  19. * Copyright 2000,2001 Jeff Garzik <jgarzik@pobox.com>
  20. * Copyright 2000,2001 Philipp Rumpf <prumpf@mandrakesoft.com>
  21. *
  22. * This file is licensed under the terms of the GNU General Public
  23. * License version 2. This program is licensed "as is" without any
  24. * warranty of any kind, whether express or implied.
  25. */
  26. #include <crypto/padlock.h>
  27. #include <linux/module.h>
  28. #include <linux/kernel.h>
  29. #include <linux/hw_random.h>
  30. #include <linux/delay.h>
  31. #include <asm/cpu_device_id.h>
  32. #include <asm/io.h>
  33. #include <asm/msr.h>
  34. #include <asm/cpufeature.h>
  35. #include <asm/fpu/api.h>
  36. enum {
  37. VIA_STRFILT_CNT_SHIFT = 16,
  38. VIA_STRFILT_FAIL = (1 << 15),
  39. VIA_STRFILT_ENABLE = (1 << 14),
  40. VIA_RAWBITS_ENABLE = (1 << 13),
  41. VIA_RNG_ENABLE = (1 << 6),
  42. VIA_NOISESRC1 = (1 << 8),
  43. VIA_NOISESRC2 = (1 << 9),
  44. VIA_XSTORE_CNT_MASK = 0x0F,
  45. VIA_RNG_CHUNK_8 = 0x00, /* 64 rand bits, 64 stored bits */
  46. VIA_RNG_CHUNK_4 = 0x01, /* 32 rand bits, 32 stored bits */
  47. VIA_RNG_CHUNK_4_MASK = 0xFFFFFFFF,
  48. VIA_RNG_CHUNK_2 = 0x02, /* 16 rand bits, 32 stored bits */
  49. VIA_RNG_CHUNK_2_MASK = 0xFFFF,
  50. VIA_RNG_CHUNK_1 = 0x03, /* 8 rand bits, 32 stored bits */
  51. VIA_RNG_CHUNK_1_MASK = 0xFF,
  52. };
  53. /*
  54. * Investigate using the 'rep' prefix to obtain 32 bits of random data
  55. * in one insn. The upside is potentially better performance. The
  56. * downside is that the instruction becomes no longer atomic. Due to
  57. * this, just like familiar issues with /dev/random itself, the worst
  58. * case of a 'rep xstore' could potentially pause a cpu for an
  59. * unreasonably long time. In practice, this condition would likely
  60. * only occur when the hardware is failing. (or so we hope :))
  61. *
  62. * Another possible performance boost may come from simply buffering
  63. * until we have 4 bytes, thus returning a u32 at a time,
  64. * instead of the current u8-at-a-time.
  65. *
  66. * Padlock instructions can generate a spurious DNA fault, so
  67. * we have to call them in the context of irq_ts_save/restore()
  68. */
  69. static inline u32 xstore(u32 *addr, u32 edx_in)
  70. {
  71. u32 eax_out;
  72. int ts_state;
  73. ts_state = irq_ts_save();
  74. asm(".byte 0x0F,0xA7,0xC0 /* xstore %%edi (addr=%0) */"
  75. : "=m" (*addr), "=a" (eax_out), "+d" (edx_in), "+D" (addr));
  76. irq_ts_restore(ts_state);
  77. return eax_out;
  78. }
  79. static int via_rng_data_present(struct hwrng *rng, int wait)
  80. {
  81. char buf[16 + PADLOCK_ALIGNMENT - STACK_ALIGN] __attribute__
  82. ((aligned(STACK_ALIGN)));
  83. u32 *via_rng_datum = (u32 *)PTR_ALIGN(&buf[0], PADLOCK_ALIGNMENT);
  84. u32 bytes_out;
  85. int i;
  86. /* We choose the recommended 1-byte-per-instruction RNG rate,
  87. * for greater randomness at the expense of speed. Larger
  88. * values 2, 4, or 8 bytes-per-instruction yield greater
  89. * speed at lesser randomness.
  90. *
  91. * If you change this to another VIA_CHUNK_n, you must also
  92. * change the ->n_bytes values in rng_vendor_ops[] tables.
  93. * VIA_CHUNK_8 requires further code changes.
  94. *
  95. * A copy of MSR_VIA_RNG is placed in eax_out when xstore
  96. * completes.
  97. */
  98. for (i = 0; i < 20; i++) {
  99. *via_rng_datum = 0; /* paranoia, not really necessary */
  100. bytes_out = xstore(via_rng_datum, VIA_RNG_CHUNK_1);
  101. bytes_out &= VIA_XSTORE_CNT_MASK;
  102. if (bytes_out || !wait)
  103. break;
  104. udelay(10);
  105. }
  106. rng->priv = *via_rng_datum;
  107. return bytes_out ? 1 : 0;
  108. }
  109. static int via_rng_data_read(struct hwrng *rng, u32 *data)
  110. {
  111. u32 via_rng_datum = (u32)rng->priv;
  112. *data = via_rng_datum;
  113. return 1;
  114. }
  115. static int via_rng_init(struct hwrng *rng)
  116. {
  117. struct cpuinfo_x86 *c = &cpu_data(0);
  118. u32 lo, hi, old_lo;
  119. /* VIA Nano CPUs don't have the MSR_VIA_RNG anymore. The RNG
  120. * is always enabled if CPUID rng_en is set. There is no
  121. * RNG configuration like it used to be the case in this
  122. * register */
  123. if ((c->x86 == 6) && (c->x86_model >= 0x0f)) {
  124. if (!cpu_has_xstore_enabled) {
  125. pr_err(PFX "can't enable hardware RNG "
  126. "if XSTORE is not enabled\n");
  127. return -ENODEV;
  128. }
  129. return 0;
  130. }
  131. /* Control the RNG via MSR. Tread lightly and pay very close
  132. * close attention to values written, as the reserved fields
  133. * are documented to be "undefined and unpredictable"; but it
  134. * does not say to write them as zero, so I make a guess that
  135. * we restore the values we find in the register.
  136. */
  137. rdmsr(MSR_VIA_RNG, lo, hi);
  138. old_lo = lo;
  139. lo &= ~(0x7f << VIA_STRFILT_CNT_SHIFT);
  140. lo &= ~VIA_XSTORE_CNT_MASK;
  141. lo &= ~(VIA_STRFILT_ENABLE | VIA_STRFILT_FAIL | VIA_RAWBITS_ENABLE);
  142. lo |= VIA_RNG_ENABLE;
  143. lo |= VIA_NOISESRC1;
  144. /* Enable secondary noise source on CPUs where it is present. */
  145. /* Nehemiah stepping 8 and higher */
  146. if ((c->x86_model == 9) && (c->x86_mask > 7))
  147. lo |= VIA_NOISESRC2;
  148. /* Esther */
  149. if (c->x86_model >= 10)
  150. lo |= VIA_NOISESRC2;
  151. if (lo != old_lo)
  152. wrmsr(MSR_VIA_RNG, lo, hi);
  153. /* perhaps-unnecessary sanity check; remove after testing if
  154. unneeded */
  155. rdmsr(MSR_VIA_RNG, lo, hi);
  156. if ((lo & VIA_RNG_ENABLE) == 0) {
  157. pr_err(PFX "cannot enable VIA C3 RNG, aborting\n");
  158. return -ENODEV;
  159. }
  160. return 0;
  161. }
  162. static struct hwrng via_rng = {
  163. .name = "via",
  164. .init = via_rng_init,
  165. .data_present = via_rng_data_present,
  166. .data_read = via_rng_data_read,
  167. };
  168. static int __init mod_init(void)
  169. {
  170. int err;
  171. if (!cpu_has_xstore)
  172. return -ENODEV;
  173. pr_info("VIA RNG detected\n");
  174. err = hwrng_register(&via_rng);
  175. if (err) {
  176. pr_err(PFX "RNG registering failed (%d)\n",
  177. err);
  178. goto out;
  179. }
  180. out:
  181. return err;
  182. }
  183. static void __exit mod_exit(void)
  184. {
  185. hwrng_unregister(&via_rng);
  186. }
  187. module_init(mod_init);
  188. module_exit(mod_exit);
  189. static struct x86_cpu_id __maybe_unused via_rng_cpu_id[] = {
  190. X86_FEATURE_MATCH(X86_FEATURE_XSTORE),
  191. {}
  192. };
  193. MODULE_DESCRIPTION("H/W RNG driver for VIA CPU with PadLock");
  194. MODULE_LICENSE("GPL");
  195. MODULE_DEVICE_TABLE(x86cpu, via_rng_cpu_id);