rockchip-rng.c 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492
  1. // SPDX-License-Identifier: GPL-2.0
  2. /*
  3. * rockchip-rng.c True Random Number Generator driver for Rockchip SoCs
  4. *
  5. * Copyright (c) 2018, Fuzhou Rockchip Electronics Co., Ltd.
  6. * Copyright (c) 2022, Aurelien Jarno
  7. * Copyright (c) 2025, Collabora Ltd.
  8. * Authors:
  9. * Lin Jinhan <troy.lin@rock-chips.com>
  10. * Aurelien Jarno <aurelien@aurel32.net>
  11. * Nicolas Frattaroli <nicolas.frattaroli@collabora.com>
  12. */
  13. #include <linux/clk.h>
  14. #include <linux/hw_random.h>
  15. #include <linux/io.h>
  16. #include <linux/iopoll.h>
  17. #include <linux/kernel.h>
  18. #include <linux/module.h>
  19. #include <linux/of.h>
  20. #include <linux/platform_device.h>
  21. #include <linux/pm_runtime.h>
  22. #include <linux/reset.h>
  23. #include <linux/slab.h>
  24. #define RK_RNG_AUTOSUSPEND_DELAY 100
  25. #define RK_RNG_MAX_BYTE 32
  26. #define RK_RNG_POLL_PERIOD_US 100
  27. #define RK_RNG_POLL_TIMEOUT_US 10000
  28. /*
  29. * TRNG collects osc ring output bit every RK_RNG_SAMPLE_CNT time. The value is
  30. * a tradeoff between speed and quality and has been adjusted to get a quality
  31. * of ~900 (~87.5% of FIPS 140-2 successes).
  32. */
  33. #define RK_RNG_SAMPLE_CNT 1000
  34. /* after how many bytes of output TRNGv1 implementations should be reseeded */
  35. #define RK_TRNG_V1_AUTO_RESEED_CNT 16000
  36. /* TRNG registers from RK3568 TRM-Part2, section 5.4.1 */
  37. #define TRNG_RST_CTL 0x0004
  38. #define TRNG_RNG_CTL 0x0400
  39. #define TRNG_RNG_CTL_LEN_64_BIT (0x00 << 4)
  40. #define TRNG_RNG_CTL_LEN_128_BIT (0x01 << 4)
  41. #define TRNG_RNG_CTL_LEN_192_BIT (0x02 << 4)
  42. #define TRNG_RNG_CTL_LEN_256_BIT (0x03 << 4)
  43. #define TRNG_RNG_CTL_OSC_RING_SPEED_0 (0x00 << 2)
  44. #define TRNG_RNG_CTL_OSC_RING_SPEED_1 (0x01 << 2)
  45. #define TRNG_RNG_CTL_OSC_RING_SPEED_2 (0x02 << 2)
  46. #define TRNG_RNG_CTL_OSC_RING_SPEED_3 (0x03 << 2)
  47. #define TRNG_RNG_CTL_MASK GENMASK(15, 0)
  48. #define TRNG_RNG_CTL_ENABLE BIT(1)
  49. #define TRNG_RNG_CTL_START BIT(0)
  50. #define TRNG_RNG_SAMPLE_CNT 0x0404
  51. #define TRNG_RNG_DOUT 0x0410
  52. /*
  53. * TRNG V1 register definitions
  54. * The TRNG V1 IP is a stand-alone TRNG implementation (not part of a crypto IP)
  55. * and can be found in the Rockchip RK3588 SoC
  56. */
  57. #define TRNG_V1_CTRL 0x0000
  58. #define TRNG_V1_CTRL_NOP 0x00
  59. #define TRNG_V1_CTRL_RAND 0x01
  60. #define TRNG_V1_CTRL_SEED 0x02
  61. #define TRNG_V1_STAT 0x0004
  62. #define TRNG_V1_STAT_SEEDED BIT(9)
  63. #define TRNG_V1_STAT_GENERATING BIT(30)
  64. #define TRNG_V1_STAT_RESEEDING BIT(31)
  65. #define TRNG_V1_MODE 0x0008
  66. #define TRNG_V1_MODE_128_BIT (0x00 << 3)
  67. #define TRNG_V1_MODE_256_BIT (0x01 << 3)
  68. /* Interrupt Enable register; unused because polling is faster */
  69. #define TRNG_V1_IE 0x0010
  70. #define TRNG_V1_IE_GLBL_EN BIT(31)
  71. #define TRNG_V1_IE_SEED_DONE_EN BIT(1)
  72. #define TRNG_V1_IE_RAND_RDY_EN BIT(0)
  73. #define TRNG_V1_ISTAT 0x0014
  74. #define TRNG_V1_ISTAT_RAND_RDY BIT(0)
  75. /* RAND0 ~ RAND7 */
  76. #define TRNG_V1_RAND0 0x0020
  77. #define TRNG_V1_RAND7 0x003C
  78. /* Auto Reseed Register */
  79. #define TRNG_V1_AUTO_RQSTS 0x0060
  80. #define TRNG_V1_VERSION 0x00F0
  81. #define TRNG_v1_VERSION_CODE 0x46bc
  82. /* end of TRNG_V1 register definitions */
  83. /*
  84. * RKRNG register definitions
  85. * The RKRNG IP is a stand-alone TRNG implementation (not part of a crypto IP)
  86. * and can be found in the Rockchip RK3576, Rockchip RK3562 and Rockchip RK3528
  87. * SoCs. It can either output true randomness (TRNG) or "deterministic"
  88. * randomness derived from hashing the true entropy (DRNG). This driver
  89. * implementation uses just the true entropy, and leaves stretching the entropy
  90. * up to Linux.
  91. */
  92. #define RKRNG_CFG 0x0000
  93. #define RKRNG_CTRL 0x0010
  94. #define RKRNG_CTRL_REQ_TRNG BIT(4)
  95. #define RKRNG_STATE 0x0014
  96. #define RKRNG_STATE_TRNG_RDY BIT(4)
  97. #define RKRNG_TRNG_DATA0 0x0050
  98. #define RKRNG_TRNG_DATA1 0x0054
  99. #define RKRNG_TRNG_DATA2 0x0058
  100. #define RKRNG_TRNG_DATA3 0x005C
  101. #define RKRNG_TRNG_DATA4 0x0060
  102. #define RKRNG_TRNG_DATA5 0x0064
  103. #define RKRNG_TRNG_DATA6 0x0068
  104. #define RKRNG_TRNG_DATA7 0x006C
  105. #define RKRNG_READ_LEN 32
  106. /* Before removing this assert, give rk3588_rng_read an upper bound of 32 */
  107. static_assert(RK_RNG_MAX_BYTE <= (TRNG_V1_RAND7 + 4 - TRNG_V1_RAND0),
  108. "You raised RK_RNG_MAX_BYTE and broke rk3588-rng, congrats.");
  109. struct rk_rng {
  110. struct hwrng rng;
  111. void __iomem *base;
  112. int clk_num;
  113. struct clk_bulk_data *clk_bulks;
  114. const struct rk_rng_soc_data *soc_data;
  115. struct device *dev;
  116. };
  117. struct rk_rng_soc_data {
  118. int (*rk_rng_init)(struct hwrng *rng);
  119. int (*rk_rng_read)(struct hwrng *rng, void *buf, size_t max, bool wait);
  120. void (*rk_rng_cleanup)(struct hwrng *rng);
  121. unsigned short quality;
  122. bool reset_optional;
  123. };
  124. /* The mask in the upper 16 bits determines the bits that are updated */
  125. static void rk_rng_write_ctl(struct rk_rng *rng, u32 val, u32 mask)
  126. {
  127. writel((mask << 16) | val, rng->base + TRNG_RNG_CTL);
  128. }
  129. static inline void rk_rng_writel(struct rk_rng *rng, u32 val, u32 offset)
  130. {
  131. writel(val, rng->base + offset);
  132. }
  133. static inline u32 rk_rng_readl(struct rk_rng *rng, u32 offset)
  134. {
  135. return readl(rng->base + offset);
  136. }
  137. static int rk_rng_enable_clks(struct rk_rng *rk_rng)
  138. {
  139. int ret;
  140. /* start clocks */
  141. ret = clk_bulk_prepare_enable(rk_rng->clk_num, rk_rng->clk_bulks);
  142. if (ret < 0) {
  143. dev_err(rk_rng->dev, "Failed to enable clocks: %d\n", ret);
  144. return ret;
  145. }
  146. return 0;
  147. }
  148. static int rk3568_rng_init(struct hwrng *rng)
  149. {
  150. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  151. int ret;
  152. ret = rk_rng_enable_clks(rk_rng);
  153. if (ret < 0)
  154. return ret;
  155. /* set the sample period */
  156. writel(RK_RNG_SAMPLE_CNT, rk_rng->base + TRNG_RNG_SAMPLE_CNT);
  157. /* set osc ring speed and enable it */
  158. rk_rng_write_ctl(rk_rng, TRNG_RNG_CTL_LEN_256_BIT |
  159. TRNG_RNG_CTL_OSC_RING_SPEED_0 |
  160. TRNG_RNG_CTL_ENABLE,
  161. TRNG_RNG_CTL_MASK);
  162. return 0;
  163. }
  164. static void rk3568_rng_cleanup(struct hwrng *rng)
  165. {
  166. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  167. /* stop TRNG */
  168. rk_rng_write_ctl(rk_rng, 0, TRNG_RNG_CTL_MASK);
  169. /* stop clocks */
  170. clk_bulk_disable_unprepare(rk_rng->clk_num, rk_rng->clk_bulks);
  171. }
  172. static int rk3568_rng_read(struct hwrng *rng, void *buf, size_t max, bool wait)
  173. {
  174. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  175. size_t to_read = min_t(size_t, max, RK_RNG_MAX_BYTE);
  176. u32 reg;
  177. int ret = 0;
  178. ret = pm_runtime_resume_and_get(rk_rng->dev);
  179. if (ret < 0)
  180. return ret;
  181. /* Start collecting random data */
  182. rk_rng_write_ctl(rk_rng, TRNG_RNG_CTL_START, TRNG_RNG_CTL_START);
  183. ret = readl_poll_timeout(rk_rng->base + TRNG_RNG_CTL, reg,
  184. !(reg & TRNG_RNG_CTL_START),
  185. RK_RNG_POLL_PERIOD_US,
  186. RK_RNG_POLL_TIMEOUT_US);
  187. if (ret < 0)
  188. goto out;
  189. /* Read random data stored in the registers */
  190. memcpy_fromio(buf, rk_rng->base + TRNG_RNG_DOUT, to_read);
  191. out:
  192. pm_runtime_put_sync_autosuspend(rk_rng->dev);
  193. return (ret < 0) ? ret : to_read;
  194. }
  195. static int rk3576_rng_init(struct hwrng *rng)
  196. {
  197. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  198. return rk_rng_enable_clks(rk_rng);
  199. }
  200. static int rk3576_rng_read(struct hwrng *rng, void *buf, size_t max, bool wait)
  201. {
  202. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  203. size_t to_read = min_t(size_t, max, RKRNG_READ_LEN);
  204. int ret = 0;
  205. u32 val;
  206. ret = pm_runtime_resume_and_get(rk_rng->dev);
  207. if (ret < 0)
  208. return ret;
  209. rk_rng_writel(rk_rng, RKRNG_CTRL_REQ_TRNG | (RKRNG_CTRL_REQ_TRNG << 16),
  210. RKRNG_CTRL);
  211. if (readl_poll_timeout(rk_rng->base + RKRNG_STATE, val,
  212. (val & RKRNG_STATE_TRNG_RDY), RK_RNG_POLL_PERIOD_US,
  213. RK_RNG_POLL_TIMEOUT_US)) {
  214. dev_err(rk_rng->dev, "timed out waiting for data\n");
  215. ret = -ETIMEDOUT;
  216. goto out;
  217. }
  218. rk_rng_writel(rk_rng, RKRNG_STATE_TRNG_RDY, RKRNG_STATE);
  219. memcpy_fromio(buf, rk_rng->base + RKRNG_TRNG_DATA0, to_read);
  220. out:
  221. pm_runtime_put_sync_autosuspend(rk_rng->dev);
  222. return (ret < 0) ? ret : to_read;
  223. }
  224. static int rk3588_rng_init(struct hwrng *rng)
  225. {
  226. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  227. u32 version, status, mask, istat;
  228. int ret;
  229. ret = rk_rng_enable_clks(rk_rng);
  230. if (ret < 0)
  231. return ret;
  232. version = rk_rng_readl(rk_rng, TRNG_V1_VERSION);
  233. if (version != TRNG_v1_VERSION_CODE) {
  234. dev_err(rk_rng->dev,
  235. "wrong trng version, expected = %08x, actual = %08x\n",
  236. TRNG_V1_VERSION, version);
  237. ret = -EFAULT;
  238. goto err_disable_clk;
  239. }
  240. mask = TRNG_V1_STAT_SEEDED | TRNG_V1_STAT_GENERATING |
  241. TRNG_V1_STAT_RESEEDING;
  242. if (readl_poll_timeout(rk_rng->base + TRNG_V1_STAT, status,
  243. (status & mask) == TRNG_V1_STAT_SEEDED,
  244. RK_RNG_POLL_PERIOD_US, RK_RNG_POLL_TIMEOUT_US) < 0) {
  245. dev_err(rk_rng->dev, "timed out waiting for hwrng to reseed\n");
  246. ret = -ETIMEDOUT;
  247. goto err_disable_clk;
  248. }
  249. /*
  250. * clear ISTAT flag, downstream advises to do this to avoid
  251. * auto-reseeding "on power on"
  252. */
  253. istat = rk_rng_readl(rk_rng, TRNG_V1_ISTAT);
  254. rk_rng_writel(rk_rng, istat, TRNG_V1_ISTAT);
  255. /* auto reseed after RK_TRNG_V1_AUTO_RESEED_CNT bytes */
  256. rk_rng_writel(rk_rng, RK_TRNG_V1_AUTO_RESEED_CNT / 16, TRNG_V1_AUTO_RQSTS);
  257. return 0;
  258. err_disable_clk:
  259. clk_bulk_disable_unprepare(rk_rng->clk_num, rk_rng->clk_bulks);
  260. return ret;
  261. }
  262. static void rk3588_rng_cleanup(struct hwrng *rng)
  263. {
  264. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  265. clk_bulk_disable_unprepare(rk_rng->clk_num, rk_rng->clk_bulks);
  266. }
  267. static int rk3588_rng_read(struct hwrng *rng, void *buf, size_t max, bool wait)
  268. {
  269. struct rk_rng *rk_rng = container_of(rng, struct rk_rng, rng);
  270. size_t to_read = min_t(size_t, max, RK_RNG_MAX_BYTE);
  271. int ret = 0;
  272. u32 reg;
  273. ret = pm_runtime_resume_and_get(rk_rng->dev);
  274. if (ret < 0)
  275. return ret;
  276. /* Clear ISTAT, even without interrupts enabled, this will be updated */
  277. reg = rk_rng_readl(rk_rng, TRNG_V1_ISTAT);
  278. rk_rng_writel(rk_rng, reg, TRNG_V1_ISTAT);
  279. /* generate 256 bits of random data */
  280. rk_rng_writel(rk_rng, TRNG_V1_MODE_256_BIT, TRNG_V1_MODE);
  281. rk_rng_writel(rk_rng, TRNG_V1_CTRL_RAND, TRNG_V1_CTRL);
  282. ret = readl_poll_timeout_atomic(rk_rng->base + TRNG_V1_ISTAT, reg,
  283. (reg & TRNG_V1_ISTAT_RAND_RDY), 0,
  284. RK_RNG_POLL_TIMEOUT_US);
  285. if (ret < 0)
  286. goto out;
  287. /* Read random data that's in registers TRNG_V1_RAND0 through RAND7 */
  288. memcpy_fromio(buf, rk_rng->base + TRNG_V1_RAND0, to_read);
  289. out:
  290. /* Clear ISTAT */
  291. rk_rng_writel(rk_rng, reg, TRNG_V1_ISTAT);
  292. /* close the TRNG */
  293. rk_rng_writel(rk_rng, TRNG_V1_CTRL_NOP, TRNG_V1_CTRL);
  294. pm_runtime_put_sync_autosuspend(rk_rng->dev);
  295. return (ret < 0) ? ret : to_read;
  296. }
  297. static const struct rk_rng_soc_data rk3568_soc_data = {
  298. .rk_rng_init = rk3568_rng_init,
  299. .rk_rng_read = rk3568_rng_read,
  300. .rk_rng_cleanup = rk3568_rng_cleanup,
  301. .quality = 900,
  302. .reset_optional = false,
  303. };
  304. static const struct rk_rng_soc_data rk3576_soc_data = {
  305. .rk_rng_init = rk3576_rng_init,
  306. .rk_rng_read = rk3576_rng_read,
  307. .rk_rng_cleanup = rk3588_rng_cleanup,
  308. .quality = 999, /* as determined by actual testing */
  309. .reset_optional = true,
  310. };
  311. static const struct rk_rng_soc_data rk3588_soc_data = {
  312. .rk_rng_init = rk3588_rng_init,
  313. .rk_rng_read = rk3588_rng_read,
  314. .rk_rng_cleanup = rk3588_rng_cleanup,
  315. .quality = 999, /* as determined by actual testing */
  316. .reset_optional = true,
  317. };
  318. static int rk_rng_probe(struct platform_device *pdev)
  319. {
  320. struct device *dev = &pdev->dev;
  321. struct reset_control *rst;
  322. struct rk_rng *rk_rng;
  323. int ret;
  324. rk_rng = devm_kzalloc(dev, sizeof(*rk_rng), GFP_KERNEL);
  325. if (!rk_rng)
  326. return -ENOMEM;
  327. rk_rng->soc_data = of_device_get_match_data(dev);
  328. rk_rng->base = devm_platform_ioremap_resource(pdev, 0);
  329. if (IS_ERR(rk_rng->base))
  330. return PTR_ERR(rk_rng->base);
  331. rk_rng->clk_num = devm_clk_bulk_get_all(dev, &rk_rng->clk_bulks);
  332. if (rk_rng->clk_num < 0)
  333. return dev_err_probe(dev, rk_rng->clk_num,
  334. "Failed to get clks property\n");
  335. if (rk_rng->soc_data->reset_optional)
  336. rst = devm_reset_control_array_get_optional_exclusive(dev);
  337. else
  338. rst = devm_reset_control_array_get_exclusive(dev);
  339. if (rst) {
  340. if (IS_ERR(rst))
  341. return dev_err_probe(dev, PTR_ERR(rst), "Failed to get reset property\n");
  342. reset_control_assert(rst);
  343. udelay(2);
  344. reset_control_deassert(rst);
  345. }
  346. platform_set_drvdata(pdev, rk_rng);
  347. rk_rng->rng.name = dev_driver_string(dev);
  348. if (!IS_ENABLED(CONFIG_PM)) {
  349. rk_rng->rng.init = rk_rng->soc_data->rk_rng_init;
  350. rk_rng->rng.cleanup = rk_rng->soc_data->rk_rng_cleanup;
  351. }
  352. rk_rng->rng.read = rk_rng->soc_data->rk_rng_read;
  353. rk_rng->dev = dev;
  354. rk_rng->rng.quality = rk_rng->soc_data->quality;
  355. pm_runtime_set_autosuspend_delay(dev, RK_RNG_AUTOSUSPEND_DELAY);
  356. pm_runtime_use_autosuspend(dev);
  357. ret = devm_pm_runtime_enable(dev);
  358. if (ret)
  359. return dev_err_probe(dev, ret, "Runtime pm activation failed.\n");
  360. ret = devm_hwrng_register(dev, &rk_rng->rng);
  361. if (ret)
  362. return dev_err_probe(dev, ret, "Failed to register Rockchip hwrng\n");
  363. return 0;
  364. }
  365. static int __maybe_unused rk_rng_runtime_suspend(struct device *dev)
  366. {
  367. struct rk_rng *rk_rng = dev_get_drvdata(dev);
  368. rk_rng->soc_data->rk_rng_cleanup(&rk_rng->rng);
  369. return 0;
  370. }
  371. static int __maybe_unused rk_rng_runtime_resume(struct device *dev)
  372. {
  373. struct rk_rng *rk_rng = dev_get_drvdata(dev);
  374. return rk_rng->soc_data->rk_rng_init(&rk_rng->rng);
  375. }
  376. static const struct dev_pm_ops rk_rng_pm_ops = {
  377. SET_RUNTIME_PM_OPS(rk_rng_runtime_suspend,
  378. rk_rng_runtime_resume, NULL)
  379. SET_SYSTEM_SLEEP_PM_OPS(pm_runtime_force_suspend,
  380. pm_runtime_force_resume)
  381. };
  382. static const struct of_device_id rk_rng_dt_match[] = {
  383. { .compatible = "rockchip,rk3568-rng", .data = (void *)&rk3568_soc_data },
  384. { .compatible = "rockchip,rk3576-rng", .data = (void *)&rk3576_soc_data },
  385. { .compatible = "rockchip,rk3588-rng", .data = (void *)&rk3588_soc_data },
  386. { /* sentinel */ },
  387. };
  388. MODULE_DEVICE_TABLE(of, rk_rng_dt_match);
  389. static struct platform_driver rk_rng_driver = {
  390. .driver = {
  391. .name = "rockchip-rng",
  392. .pm = &rk_rng_pm_ops,
  393. .of_match_table = rk_rng_dt_match,
  394. },
  395. .probe = rk_rng_probe,
  396. };
  397. module_platform_driver(rk_rng_driver);
  398. MODULE_DESCRIPTION("Rockchip True Random Number Generator driver");
  399. MODULE_AUTHOR("Lin Jinhan <troy.lin@rock-chips.com>");
  400. MODULE_AUTHOR("Aurelien Jarno <aurelien@aurel32.net>");
  401. MODULE_AUTHOR("Daniel Golle <daniel@makrotopia.org>");
  402. MODULE_AUTHOR("Nicolas Frattaroli <nicolas.frattaroli@collabora.com>");
  403. MODULE_LICENSE("GPL");