domenico/openwrt_NSS_ACW
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel: enable inside secure driver for MediaTek platforms

Browse Source 
Older MT7623 ARMv7 SoC as well as new Filogic platforms come with
inside-secure,safexcel-eip97 units. Enable them in DTS and select the
driver kernel module by default on those platforms.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle
2022-08-11 17:03:43 +02:00
parent a1c5ca82ff
commit 06c4fc6d5e
5 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
package/kernel/linux/modules/crypto.mk
View File

@@ -407,8 +407,9 @@ $(eval $(call KernelPackage,crypto-hw-padlock))
define KernelPackage/crypto-hw-safexcel define KernelPackage/crypto-hw-safexcel
TITLE:= MVEBU SafeXcel Crypto Engine module TITLE:= MVEBU SafeXcel Crypto Engine module
DEPENDS:=@(TARGET_mvebu_cortexa53||TARGET_mvebu_cortexa72) +eip197-mini-firmware \ DEPENDS:=@(TARGET_mvebu_cortexa53||TARGET_mvebu_cortexa72||TARGET_mediatek_filogic||TARGET_mediatek_mt7623) \
+kmod-crypto-authenc +kmod-crypto-md5 +kmod-crypto-hmac +kmod-crypto-sha256 +kmod-crypto-sha512 +eip197-mini-firmware +kmod-crypto-authenc +kmod-crypto-des +kmod-crypto-md5 +kmod-crypto-hmac \
+kmod-crypto-sha1 +kmod-crypto-sha256 +kmod-crypto-sha512
KCONFIG:= \ KCONFIG:= \
CONFIG_CRYPTO_HW=y \ CONFIG_CRYPTO_HW=y \
CONFIG_CRYPTO_DEV_SAFEXCEL CONFIG_CRYPTO_DEV_SAFEXCEL

2
target/linux/mediatek/files-5.15/arch/arm64/boot/dts/mediatek/mt7986a.dtsi
View File

@@ -196,7 +196,7 @@
clock-names = "infra_eip97_ck"; clock-names = "infra_eip97_ck";
assigned-clocks = <&topckgen CLK_TOP_EIP_B_SEL>; assigned-clocks = <&topckgen CLK_TOP_EIP_B_SEL>;
assigned-clock-parents = <&apmixedsys CLK_APMIXED_NET2PLL>; assigned-clock-parents = <&apmixedsys CLK_APMIXED_NET2PLL>;
status = "disabled"; status = "okay";
}; };
uart0: serial@11002000 { uart0: serial@11002000 {

2
target/linux/mediatek/filogic/target.mk
View File

@@ -2,7 +2,7 @@ ARCH:=aarch64
SUBTARGET:=filogic SUBTARGET:=filogic
BOARDNAME:=Filogic 830 (MT7986) BOARDNAME:=Filogic 830 (MT7986)
CPU_TYPE:=cortex-a53 CPU_TYPE:=cortex-a53
DEFAULT_PACKAGES += kmod-mt7915e kmod-mt7986-firmware wpad-basic-wolfssl uboot-envtools DEFAULT_PACKAGES += kmod-crypto-hw-safexcel kmod-mt7915e kmod-mt7986-firmware wpad-basic-wolfssl uboot-envtools
KERNELNAME:=Image dtbs KERNELNAME:=Image dtbs
define Target/Description define Target/Description

2
target/linux/mediatek/mt7623/target.mk
View File

@@ -9,7 +9,7 @@ CPU_TYPE:=cortex-a7
CPU_SUBTYPE:=neon-vfpv4 CPU_SUBTYPE:=neon-vfpv4
KERNELNAME:=Image dtbs zImage KERNELNAME:=Image dtbs zImage
FEATURES+=display usbgadget FEATURES+=display usbgadget
DEFAULT_PACKAGES+=uboot-envtools DEFAULT_PACKAGES+=kmod-crypto-hw-safexcel uboot-envtools
define Target/Description define Target/Description
Build firmware images for MediaTek mt7623 ARM based boards. Build firmware images for MediaTek mt7623 ARM based boards.

3
target/linux/mediatek/patches-5.15/150-dts-mt7623-eip97-inside-secure-support.patch
View File

@@ -1,6 +1,6 @@
--- a/arch/arm/boot/dts/mt7623.dtsi --- a/arch/arm/boot/dts/mt7623.dtsi
+++ b/arch/arm/boot/dts/mt7623.dtsi +++ b/arch/arm/boot/dts/mt7623.dtsi
@@ -951,17 +951,14 @@ @@ -951,17 +951,15 @@
}; };
crypto: crypto@1b240000 { crypto: crypto@1b240000 {
@@ -18,6 +18,7 @@
- clock-names = "cryp"; - clock-names = "cryp";
- power-domains = <&scpsys MT2701_POWER_DOMAIN_ETH>; - power-domains = <&scpsys MT2701_POWER_DOMAIN_ETH>;
- status = "disabled"; - status = "disabled";
+ status = "okay";
}; };
bdpsys: syscon@1c000000 { bdpsys: syscon@1c000000 {