mirror of
https://github.com/torvalds/linux.git
synced 2026-10-16 21:00:02 +02:00
fb98254a5e
Add support for Intel Key Protection Technology (KPT) on QAT GEN6 devices. KPT protects private keys from exposure by keeping them wrapped (encrypted) while in use, in-flight, and at rest. Keys remain in wrapped form and are not exposed in plaintext in host memory. This feature operates outside of the Linux crypto framework and kernel keyring. Extend the firmware admin interface to enable and configure KPT. During device initialisation, if KPT is enabled, the driver sends an admin message to firmware to enable KPT mode and configure parameters such as the maximum number of SWK (Symmetric Wrapping Key) slots and the SWK time-to-live (TTL). Expose KPT configuration via a new sysfs attribute group, "qat_kpt", and add ABI documentation. Co-developed-by: Nitesh Venkatesh <nitesh.venkatesh@intel.com> Signed-off-by: Nitesh Venkatesh <nitesh.venkatesh@intel.com> Signed-off-by: Junyuan Wang <junyuan.wang@intel.com> Reviewed-by: Giovanni Cabiddu <giovanni.cabiddu@intel.com> Reviewed-by: Ahsan Atta <ahsan.atta@intel.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
73 lines
1.6 KiB
Makefile
73 lines
1.6 KiB
Makefile
# SPDX-License-Identifier: GPL-2.0
|
|
obj-$(CONFIG_CRYPTO_DEV_QAT) += intel_qat.o
|
|
ccflags-y += -DDEFAULT_SYMBOL_NAMESPACE='"CRYPTO_QAT"'
|
|
intel_qat-y := adf_accel_engine.o \
|
|
adf_admin.o \
|
|
adf_aer.o \
|
|
adf_anti_rb.o \
|
|
adf_bank_state.o \
|
|
adf_cfg.o \
|
|
adf_cfg_services.o \
|
|
adf_clock.o \
|
|
adf_dc.o \
|
|
adf_dev_mgr.o \
|
|
adf_gen2_config.o \
|
|
adf_gen2_hw_csr_data.o \
|
|
adf_gen2_hw_data.o \
|
|
adf_gen4_config.o \
|
|
adf_gen4_hw_csr_data.o \
|
|
adf_gen4_hw_data.o \
|
|
adf_gen4_pm.o \
|
|
adf_gen4_ras.o \
|
|
adf_gen4_vf_mig.o \
|
|
adf_gen6_ras.o \
|
|
adf_gen6_shared.o \
|
|
adf_hw_arbiter.o \
|
|
adf_init.o \
|
|
adf_isr.o \
|
|
adf_kpt.o \
|
|
adf_module.o \
|
|
adf_mstate_mgr.o \
|
|
adf_rl_admin.o \
|
|
adf_rl.o \
|
|
adf_sysfs.o \
|
|
adf_sysfs_anti_rb.o \
|
|
adf_sysfs_kpt.o \
|
|
adf_sysfs_ras_counters.o \
|
|
adf_sysfs_rl.o \
|
|
adf_timer.o \
|
|
adf_transport.o \
|
|
qat_algs.o \
|
|
qat_algs_send.o \
|
|
qat_asym_algs.o \
|
|
qat_bl.o \
|
|
qat_comp_algs.o \
|
|
qat_compression.o \
|
|
qat_comp_zstd_utils.o \
|
|
qat_crypto.o \
|
|
qat_hal.o \
|
|
qat_mig_dev.o \
|
|
qat_uclo.o
|
|
|
|
intel_qat-$(CONFIG_DEBUG_FS) += adf_cnv_dbgfs.o \
|
|
adf_dbgfs.o \
|
|
adf_fw_counters.o \
|
|
adf_gen4_pm_debugfs.o \
|
|
adf_gen4_tl.o \
|
|
adf_gen6_pm_dbgfs.o \
|
|
adf_gen6_tl.o \
|
|
adf_heartbeat_dbgfs.o \
|
|
adf_heartbeat.o \
|
|
adf_pm_dbgfs.o \
|
|
adf_pm_dbgfs_utils.o \
|
|
adf_telemetry.o \
|
|
adf_tl_debugfs.o \
|
|
adf_transport_debug.o
|
|
|
|
intel_qat-$(CONFIG_PCI_IOV) += adf_gen2_pfvf.o adf_gen4_pfvf.o \
|
|
adf_pfvf_pf_msg.o adf_pfvf_pf_proto.o \
|
|
adf_pfvf_utils.o adf_pfvf_vf_msg.o \
|
|
adf_pfvf_vf_proto.o adf_sriov.o adf_vf_isr.o
|
|
|
|
intel_qat-$(CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION) += adf_heartbeat_inject.o
|