/* $OpenBSD: ubsecreg.h,v 1.10 2001/02/02 01:00:07 jason Exp $ */ /* * Copyright (c) 2000 Theo de Raadt * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. The name of the author may not be used to endorse or promote products * derived from this software without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* * Register definitions for 5601 BlueSteel Networks Ubiquitous Broadband * Security "uBSec" chip. Definitions from revision 2.8 of the product * datasheet. */ #define BS_BAR 0x10 /* DMA and status base address register */ /* * DMA Control & Status Registers (offset from BS_BAR) */ #define BS_MCR1 0x00 /* DMA Master Command Record 1 */ #define BS_CTRL 0x04 /* DMA Control */ #define BS_STAT 0x08 /* DMA Status */ #define BS_ERR 0x0c /* DMA Error Address */ #define BS_MCR2 0x10 /* DMA Master Command Record 2 */ /* BS_CTRL - DMA Control */ #define BS_CTRL_MCR2INT 0x40000000 /* enable intr MCR for MCR2 */ #define BS_CTRL_MCR1INT 0x20000000 /* enable intr MCR for MCR1 */ #define BS_CTRL_OFM 0x10000000 /* Output fragment mode */ #define BS_CTRL_BE32 0x08000000 /* big-endian, 32bit bytes */ #define BS_CTRL_BE64 0x04000000 /* big-endian, 64bit bytes */ #define BS_CTRL_DMAERR 0x02000000 /* enable intr DMA error */ #define BS_CTRL_RNG_M 0x01800000 /* RND mode */ #define BS_CTRL_RNG_1 0x00000000 /* 1bit rn/one slow clock */ #define BS_CTRL_RNG_4 0x00800000 /* 1bit rn/four slow clocks */ #define BS_CTRL_RNG_8 0x01000000 /* 1bit rn/eight slow clocks */ #define BS_CTRL_RNG_16 0x01800000 /* 1bit rn/16 slow clocks */ #define BS_CTRL_FRAG_M 0x0000ffff /* output fragment size mask */ /* BS_STAT - DMA Status */ #define BS_STAT_MCR1_BUSY 0x80000000 /* MCR1 is busy */ #define BS_STAT_MCR1_FULL 0x40000000 /* MCR1 is full */ #define BS_STAT_MCR1_DONE 0x20000000 /* MCR1 is done */ #define BS_STAT_DMAERR 0x10000000 /* DMA error */ #define BS_STAT_MCR2_FULL 0x08000000 /* MCR2 is full */ #define BS_STAT_MCR2_DONE 0x04000000 /* MCR2 is done */ /* BS_ERR - DMA Error Address */ #define BS_ERR_ADDR 0xfffffffc /* error address mask */ #define BS_ERR_READ 0x00000002 /* fault was on read */ #define UBSEC_CARD(sid) (((sid) & 0xf0000000) >> 28) #define UBSEC_SESSION(sid) ( (sid) & 0x0fffffff) #define UBSEC_SID(crd, sesn) (((crd) << 28) | ((sesn) & 0x0fffffff)) #define MAX_SCATTER 64 struct ubsec_pktctx { u_int32_t pc_deskey[6]; /* 3DES key */ u_int32_t pc_hminner[5]; /* hmac inner state */ u_int32_t pc_hmouter[5]; /* hmac outer state */ u_int32_t pc_iv[2]; /* [3]DES iv */ u_int16_t pc_flags; /* flags, below */ u_int16_t pc_offset; /* crypto offset */ u_int32_t pc_paddr; u_int8_t pad[16]; }; #define UBS_PKTCTX_ENC_3DES 0x8000 /* use 3des */ #define UBS_PKTCTX_ENC_NONE 0x0000 /* no encryption */ #define UBS_PKTCTX_INBOUND 0x4000 /* inbound packet */ #define UBS_PKTCTX_AUTH 0x3000 /* authentication mask */ #define UBS_PKTCTX_AUTH_NONE 0x0000 /* no authentication */ #define UBS_PKTCTX_AUTH_MD5 0x1000 /* use hmac-md5 */ #define UBS_PKTCTX_AUTH_SHA1 0x2000 /* use hmac-sha1 */ struct ubsec_pktbuf { volatile u_int32_t pb_addr; /* address of buffer start */ volatile u_int32_t pb_next; /* pointer to next pktbuf */ volatile u_int32_t pb_len; /* packet length */ }; #define UBS_PKTBUF_LEN 0x0000ffff /* length mask */ struct ubsec_mcr { volatile u_int16_t mcr_pkts; /* #pkts in this mcr */ volatile u_int16_t mcr_flags; /* mcr flags (below) */ volatile u_int32_t mcr_cmdctxp; /* command ctx pointer */ struct ubsec_pktbuf mcr_ipktbuf; /* input chain header */ volatile u_int16_t mcr_reserved; volatile u_int16_t mcr_pktlen; struct ubsec_pktbuf mcr_opktbuf; /* output chain header */ }; struct ubsec_mcr_add { volatile u_int32_t mcr_cmdctxp; /* command ctx pointer */ struct ubsec_pktbuf mcr_ipktbuf; /* input chain header */ volatile u_int16_t mcr_reserved; volatile u_int16_t mcr_pktlen; struct ubsec_pktbuf mcr_opktbuf; /* output chain header */ }; #define UBS_MCR_DONE 0x0001 /* mcr has been processed */ #define UBS_MCR_ERROR 0x0002 /* error in processing */ #define UBS_MCR_ERRORCODE 0xff00 /* error type */ struct ubsec_keyctx { volatile u_int16_t ctx_len; /* command length */ volatile u_int16_t ctx_op; /* operation code */ volatile u_int8_t ctx_pad[60]; /* padding */ }; #define UBS_CTXOP_DHPKGEN 0x01 /* dh public key generation */ #define UBS_CTXOP_DHSSGEN 0x02 /* dh shared secret gen. */ #define UBS_CTXOP_RSAPUB 0x03 /* rsa public key op */ #define UBS_CTXOP_RSAPRIV 0x04 /* rsa private key op */ #define UBS_CTXOP_DSASIGN 0x05 /* dsa signing op */ #define UBS_CTXOP_DSAVRFY 0x06 /* dsa verification */ #define UBS_CTXOP_RNGBYPASS 0x41 /* rng direct test mode */ #define UBS_CTXOP_RNGSHA1 0x42 /* rng sha1 test mode */ #define UBS_CTXOP_MODADD 0x43 /* modular addition */ #define UBS_CTXOP_MODSUB 0x44 /* modular subtraction */ #define UBS_CTXOP_MODMUL 0x45 /* modular multiplication */ #define UBS_CTXOP_MODRED 0x46 /* modular reduction */ #define UBS_CTXOP_MODEXP 0x47 /* modular exponentiation */ #define UBS_CTXOP_MODINV 0x48 /* modular inverse */ struct ubsec_rngbypass_ctx { volatile u_int16_t rbp_len; /* command length, 64 */ volatile u_int16_t rbp_op; /* rng bypass, 0x41 */ volatile u_int8_t rbp_pad[60]; /* padding */ }; #define UBS_RNGBUFSZ 16 struct ubsec_rng { struct ubsec_mcr rng_mcr; struct ubsec_rngbypass_ctx rng_ctx; volatile u_int32_t rng_buf[UBS_RNGBUFSZ]; };