Skip to content

plat-versal: add support for the Versal Net variant #6738

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 12 commits into
base: master
Choose a base branch
from
+4,283 −677
Open

plat-versal: add support for the Versal Net variant #6738

Show file tree
Hide file tree
Changes from 10 commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
d7d4604
plat-versal: add support for Versal Net variant
jcorbier Jun 30, 2023
5418d26
drivers: versal: rework mbox driver
jcorbier Oct 20, 2023
7a66bd9
drivers: versal: use PLM for generic RNG operations
jcorbier Dec 8, 2023
eb080d7
drivers: versal: PKI engine driver for Versal Net
jcorbier Oct 25, 2023
2bf5807
drivers: versal: use HKDF to derive the HUK
jcorbier Dec 11, 2023
5b342be
core: pta: add Versal FPGA PTA
jcorbier Dec 14, 2023
ebed430
drivers: versal: update to support more recent versions of the PLM
jcorbier Jan 24, 2024
f590540
drivers: versal: NVM driver for Versal Net
jcorbier Jan 30, 2024
3b41a04
drivers: versal: fix RSA driver
jcorbier Feb 14, 2024
f3da005
drivers: versal: add support for new TRNG IP
jcorbier Jan 31, 2025
4d93445
Fix trngv2 kat test
huynhdanvo Aug 4, 2025
0ce02fb
Merge pull request #1 from huynhdanvo/versal_net_port_upstreaming
jcorbier Aug 22, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
55 changes: 52 additions & 3 deletions core/arch/arm/plat-versal/conf.mk
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,11 @@ CFG_MMAP_REGIONS ?= 24

$(call force,CFG_SECURE_TIME_SOURCE_CNTPCT,y)
$(call force,CFG_WITH_ARM_TRUSTED_FW,y)
ifeq ($(PLATFORM_FLAVOR),net)
$(call force,CFG_TEE_CORE_NB_CORE,16)
else
$(call force,CFG_TEE_CORE_NB_CORE,2)
endif
$(call force,CFG_ARM_GICV3,y)
$(call force,CFG_PL011,y)
$(call force,CFG_GIC,y)
Expand All @@ -23,17 +27,31 @@ CFG_CORE_DYN_SHM ?= y
CFG_WITH_STATS ?= y
CFG_ARM64_core ?= y

# Default memory allocation
ifeq ($(PLATFORM_FLAVOR),net)
CFG_TZDRAM_START ?= 0x22200000
CFG_TZDRAM_SIZE ?= 0x2700000
CFG_SHMEM_START ?= 0x24900000
CFG_SHMEM_SIZE ?= 0x1800000
else
CFG_TZDRAM_START ?= 0x60000000
CFG_TZDRAM_SIZE ?= 0x10000000
CFG_SHMEM_START ?= 0x70000000
CFG_SHMEM_SIZE ?= 0x10000000
endif

ifeq ($(CFG_ARM64_core),y)
$(call force,CFG_CORE_ARM64_PA_BITS,43)
else
$(call force,CFG_ARM32_core,y)
endif

ifeq ($(PLATFORM_FLAVOR),net)
CFG_RPMB_FS ?= n
CFG_RPMB_TESTKEY ?= y
CFG_RPMB_WRITE_KEY ?= $(CFG_RPMB_TESTKEY)
endif

# GPIO
CFG_VERSAL_GPIO ?= y

Expand All @@ -44,36 +62,63 @@ CFG_VERSAL_TRACE_PLM ?= n
$(call force, CFG_VERSAL_MBOX,y)

# MBOX configuration
ifeq ($(PLATFORM_FLAVOR),net)
CFG_VERSAL_MBOX_IPI_ID ?= 1
else
CFG_VERSAL_MBOX_IPI_ID ?= 3
endif

# IPI timeout in microseconds
CFG_VERSAL_MBOX_TIMEOUT ?= 100000

# PM driver
CFG_VERSAL_PM ?= y

# TRNG driver
$(call force, CFG_VERSAL_RNG_DRV,y)
$(call force, CFG_VERSAL_RNG_DRV_V2,y)
$(call force, CFG_WITH_SOFTWARE_PRNG,n)

ifeq ($(PLATFORM_FLAVOR),net)
$(call force,CFG_VERSAL_RNG_PLM,y)
endif

# TRNG configuration
CFG_VERSAL_TRNG_SEED_LIFE ?= 3
CFG_VERSAL_TRNG_DF_MUL ?= 2

# eFuse and BBRAM driver
ifeq ($(PLATFORM_FLAVOR),net)
$(call force, CFG_VERSAL_NET_NVM,y)
else
$(call force, CFG_VERSAL_NVM,y)
endif

# Crypto driver
CFG_VERSAL_CRYPTO_DRIVER ?= y
ifeq ($(CFG_VERSAL_CRYPTO_DRIVER),y)
# Disable Fault Mitigation: triggers false positives due to
# the driver's software fallback operations - need further work
CFG_FAULT_MITIGATION ?= n

ifeq ($(PLATFORM_FLAVOR),net)
CFG_VERSAL_PKI_DRIVER ?= y

ifeq ($(CFG_VERSAL_PKI_DRIVER),y)
CFG_VERSAL_PKI_COUNTER_MEASURES ?= n
CFG_VERSAL_PKI_PWCT ?= y
endif
endif # PLATFORM_FLAVOR is net
endif

# SHA3-384 crypto engine
CFG_VERSAL_SHA3_384 ?= y

# PM driver
CFG_VERSAL_PM ?= y

# Physical Unclonable Function
CFG_VERSAL_PUF ?= y

# Enable Hardware Unique Key driver
CFG_VERSAL_DUMMY_DNA ?= n
Copy link
Contributor

@etienne-lms etienne-lms Feb 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe force n also if CFG_INSECURE is disabled.

CFG_VERSAL_HUK ?= y
# AES-GCM supported key sources for HUK:
# 6 : eFUSE USR 0
Expand All @@ -85,4 +130,8 @@ ifneq ($(CFG_VERSAL_HUK_KEY),$(filter 6 7 11 12,$(firstword $(CFG_VERSAL_HUK_KEY
$(error Invalid value: CFG_VERSAL_HUK_KEY=$(CFG_VERSAL_HUK_KEY))
endif

ifeq ($(PLATFORM_FLAVOR),net)
CFG_VERSAL_FPGA_LOADER_PTA ?= y
endif

CFG_CORE_HEAP_SIZE ?= 262144
2 changes: 1 addition & 1 deletion core/arch/arm/plat-versal/main.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,7 +87,7 @@ static TEE_Result platform_banner(void)
return TEE_SUCCESS;
}

#if defined(CFG_RPMB_FS)
#if defined(CFG_RPMB_FS) && !defined(CFG_RPMB_TESTKEY)
Copy link
Contributor

@etienne-lms etienne-lms Mar 20, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this change deserves a specific commit.

Copy link
Author

@jcorbier jcorbier Apr 2, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok, noted.

bool plat_rpmb_key_is_ready(void)
{
vaddr_t plm_rtca = (vaddr_t)phys_to_virt(PLM_RTCA, MEM_AREA_IO_SEC,
Expand Down
33 changes: 31 additions & 2 deletions core/arch/arm/plat-versal/platform_config.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,11 +12,11 @@
#define CACHELINE_LEN 64
#define STACK_ALIGNMENT CACHELINE_LEN

#if defined(PLATFORM_FLAVOR_generic)

#define PLM_RTCA 0xF2014000
#define PLM_RTCA_LEN 0x1000

#if defined(PLATFORM_FLAVOR_generic)

#define GIC_BASE 0xF9000000
#define UART0_BASE 0xFF000000
#define UART1_BASE 0xFF010000
Expand Down Expand Up @@ -44,6 +44,35 @@
#define GICD_OFFSET 0
#define GICC_OFFSET 0x40000

#elif defined(PLATFORM_FLAVOR_net)

#define GIC_BASE 0xE2000000
#define UART0_BASE 0xF1920000
#define UART1_BASE 0xF1930000

#define IT_UART0 57
#define IT_UART1 58

#define UART0_CLK_IN_HZ 100000000
#define UART1_CLK_IN_HZ 100000000
#define CONSOLE_UART_BASE UART0_BASE
#define IT_CONSOLE_UART IT_UART0
#define CONSOLE_UART_CLK_IN_HZ UART0_CLK_IN_HZ

#define DRAM0_BASE 0
#define DRAM0_SIZE 0x7FF00000

#ifdef ARM64
/* DDR High area base is only available when compiling for 64 bits */
#define DRAM1_BASE 0x800000000
#define DRAM1_SIZE 0x800000000
#define DRAM2_BASE 0xC000000000
#define DRAM2_SIZE 0x4000000000
#endif

#define GICD_OFFSET 0
#define GICC_OFFSET 0x40000

#else
#error "Unknown platform flavor"
#endif
Expand Down
69 changes: 44 additions & 25 deletions core/drivers/crypto/versal/authenc.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -343,7 +343,9 @@ static TEE_Result do_init(struct drvcrypt_authenc_init *dinit)
}

/* Write the key */
versal_mbox_alloc(dinit->key.length, dinit->key.data, &key);
ret = versal_mbox_alloc(dinit->key.length, dinit->key.data, &key);
if (ret)
return ret;

arg.data[arg.dlen++] = key_len;
arg.data[arg.dlen++] = engine.key_src;
Expand All @@ -358,8 +360,12 @@ static TEE_Result do_init(struct drvcrypt_authenc_init *dinit)
memset(&arg, 0, sizeof(arg));

/* Send the initialization structure */
versal_mbox_alloc(sizeof(*init), NULL, &init_buf);
versal_mbox_alloc(dinit->nonce.length, dinit->nonce.data, &nonce);
ret = versal_mbox_alloc(sizeof(*init), NULL, &init_buf);
if (ret)
goto error;
ret = versal_mbox_alloc(dinit->nonce.length, dinit->nonce.data, &nonce);
if (ret)
goto error;

init = init_buf.buf;
init->iv_addr = virt_to_phys(nonce.buf);
Expand Down Expand Up @@ -400,9 +406,9 @@ static TEE_Result do_init(struct drvcrypt_authenc_init *dinit)

return TEE_SUCCESS;
error:
free(key.buf);
free(init_buf.buf);
free(nonce.buf);
versal_mbox_free(&nonce);
versal_mbox_free(&init_buf);
versal_mbox_free(&key);

return ret;
}
Expand All @@ -427,7 +433,9 @@ static TEE_Result do_update_aad(struct drvcrypt_authenc_update_aad *dupdate)
if (engine.state == FINALIZED)
do_replay();

versal_mbox_alloc(dupdate->aad.length, dupdate->aad.data, &p);
ret = versal_mbox_alloc(dupdate->aad.length, dupdate->aad.data, &p);
if (ret)
return ret;

arg.data[arg.dlen++] = p.len % 16 ? p.alloc_len : p.len;
arg.ibuf[0].mem = p;
Expand Down Expand Up @@ -455,7 +463,7 @@ static TEE_Result do_update_aad(struct drvcrypt_authenc_update_aad *dupdate)

return TEE_SUCCESS;
error:
free(p.buf);
versal_mbox_free(&p);
return ret;
}

Expand All @@ -481,9 +489,15 @@ update_payload(struct drvcrypt_authenc_update_payload *dupdate, bool is_last)
return TEE_ERROR_BAD_PARAMETERS;
}

versal_mbox_alloc(dupdate->src.length, dupdate->src.data, &p);
versal_mbox_alloc(dupdate->dst.length, NULL, &q);
versal_mbox_alloc(sizeof(*input), NULL, &input_cmd);
ret = versal_mbox_alloc(dupdate->src.length, dupdate->src.data, &p);
if (ret)
return ret;
ret = versal_mbox_alloc(dupdate->dst.length, NULL, &q);
if (ret)
goto out;
ret = versal_mbox_alloc(sizeof(*input), NULL, &input_cmd);
if (ret)
goto out;

input = input_cmd.buf;
input->input_addr = virt_to_phys(p.buf);
Expand Down Expand Up @@ -528,9 +542,9 @@ update_payload(struct drvcrypt_authenc_update_payload *dupdate, bool is_last)
return TEE_SUCCESS;
}
out:
free(p.buf);
free(q.buf);
free(input_cmd.buf);
versal_mbox_free(&input_cmd);
versal_mbox_free(&q);
versal_mbox_free(&p);

return ret;
}
Expand Down Expand Up @@ -594,7 +608,9 @@ static TEE_Result do_enc_final(struct drvcrypt_authenc_final *dfinal)

memcpy(dfinal->dst.data, last.dst.data, dfinal->dst.length);

versal_mbox_alloc(GCM_TAG_LEN, NULL, &p);
ret = versal_mbox_alloc(GCM_TAG_LEN, NULL, &p);
if (ret)
return ret;

arg.ibuf[0].mem = p;
if (versal_crypto_request(VERSAL_AES_ENCRYPT_FINAL, &arg, &err)) {
Expand All @@ -606,7 +622,7 @@ static TEE_Result do_enc_final(struct drvcrypt_authenc_final *dfinal)
memcpy(dfinal->tag.data, p.buf, GCM_TAG_LEN);
dfinal->tag.length = GCM_TAG_LEN;
out:
free(p.buf);
versal_mbox_free(&p);

if (refcount_val(&engine.refc) > 1)
engine.state = FINALIZED;
Expand Down Expand Up @@ -646,7 +662,10 @@ static TEE_Result do_dec_final(struct drvcrypt_authenc_final *dfinal)
if (ret)
return ret;

versal_mbox_alloc(dfinal->tag.length, dfinal->tag.data, &p);
ret = versal_mbox_alloc(dfinal->tag.length, dfinal->tag.data, &p);
if (ret)
return ret;

arg.ibuf[0].mem = p;

if (versal_crypto_request(VERSAL_AES_DECRYPT_FINAL, &arg, &err)) {
Expand All @@ -659,7 +678,7 @@ static TEE_Result do_dec_final(struct drvcrypt_authenc_final *dfinal)
memcpy(dfinal->tag.data, p.buf, GCM_TAG_LEN);
dfinal->tag.length = GCM_TAG_LEN;
out:
free(p.buf);
versal_mbox_free(&p);

if (refcount_val(&engine.refc) > 1)
engine.state = FINALIZED;
Expand Down Expand Up @@ -687,19 +706,19 @@ static void do_free(void *ctx)
release = true;
refcount_set(&engine.refc, 1);
engine.state = READY;
free(engine.init.init_buf.buf);
free(engine.init.nonce.buf);
free(engine.init.key.buf);
versal_mbox_free(&engine.init.init_buf);
versal_mbox_free(&engine.init.nonce);
versal_mbox_free(&engine.init.key);
memset(&engine.init, 0, sizeof(engine.init));
STAILQ_FOREACH_SAFE(node, &engine.replay_list, link, next) {
STAILQ_REMOVE(&engine.replay_list, node,
versal_node, link);
if (node->is_aad) {
free(node->aad.mem.buf);
versal_mbox_free(&node->aad.mem);
} else {
free(node->payload.dst.buf);
free(node->payload.src.buf);
free(node->payload.input_cmd.buf);
versal_mbox_free(&node->payload.dst);
versal_mbox_free(&node->payload.src);
versal_mbox_free(&node->payload.input_cmd);
}
free(node);
}
Expand Down
Loading
Loading