Browse Source

kernel: enable inside secure driver for MediaTek platforms

Older MT7623 ARMv7 SoC as well as new Filogic platforms come with
inside-secure,safexcel-eip97 units. Enable them in DTS and select the
driver kernel module by default on those platforms.

Signed-off-by: Daniel Golle <[email protected]>
Daniel Golle 3 years ago
parent
commit
06c4fc6d5e

+ 3 - 2
package/kernel/linux/modules/crypto.mk

@@ -407,8 +407,9 @@ $(eval $(call KernelPackage,crypto-hw-padlock))
 
 
 define KernelPackage/crypto-hw-safexcel
 define KernelPackage/crypto-hw-safexcel
   TITLE:= MVEBU SafeXcel Crypto Engine module
   TITLE:= MVEBU SafeXcel Crypto Engine module
-  DEPENDS:=@(TARGET_mvebu_cortexa53||TARGET_mvebu_cortexa72) +eip197-mini-firmware \
-	+kmod-crypto-authenc +kmod-crypto-md5 +kmod-crypto-hmac +kmod-crypto-sha256 +kmod-crypto-sha512
+  DEPENDS:=@(TARGET_mvebu_cortexa53||TARGET_mvebu_cortexa72||TARGET_mediatek_filogic||TARGET_mediatek_mt7623) \
+	+eip197-mini-firmware +kmod-crypto-authenc +kmod-crypto-des +kmod-crypto-md5 +kmod-crypto-hmac \
+	+kmod-crypto-sha1 +kmod-crypto-sha256 +kmod-crypto-sha512
   KCONFIG:= \
   KCONFIG:= \
 	CONFIG_CRYPTO_HW=y \
 	CONFIG_CRYPTO_HW=y \
 	CONFIG_CRYPTO_DEV_SAFEXCEL
 	CONFIG_CRYPTO_DEV_SAFEXCEL

+ 1 - 1
target/linux/mediatek/files-5.15/arch/arm64/boot/dts/mediatek/mt7986a.dtsi

@@ -196,7 +196,7 @@
 			clock-names = "infra_eip97_ck";
 			clock-names = "infra_eip97_ck";
 			assigned-clocks = <&topckgen CLK_TOP_EIP_B_SEL>;
 			assigned-clocks = <&topckgen CLK_TOP_EIP_B_SEL>;
 			assigned-clock-parents = <&apmixedsys CLK_APMIXED_NET2PLL>;
 			assigned-clock-parents = <&apmixedsys CLK_APMIXED_NET2PLL>;
-			status = "disabled";
+			status = "okay";
 		};
 		};
 
 
 		uart0: serial@11002000 {
 		uart0: serial@11002000 {

+ 1 - 1
target/linux/mediatek/filogic/target.mk

@@ -2,7 +2,7 @@ ARCH:=aarch64
 SUBTARGET:=filogic
 SUBTARGET:=filogic
 BOARDNAME:=Filogic 830 (MT7986)
 BOARDNAME:=Filogic 830 (MT7986)
 CPU_TYPE:=cortex-a53
 CPU_TYPE:=cortex-a53
-DEFAULT_PACKAGES += kmod-mt7915e kmod-mt7986-firmware wpad-basic-wolfssl uboot-envtools
+DEFAULT_PACKAGES += kmod-crypto-hw-safexcel kmod-mt7915e kmod-mt7986-firmware wpad-basic-wolfssl uboot-envtools
 KERNELNAME:=Image dtbs
 KERNELNAME:=Image dtbs
 
 
 define Target/Description
 define Target/Description

+ 1 - 1
target/linux/mediatek/mt7623/target.mk

@@ -9,7 +9,7 @@ CPU_TYPE:=cortex-a7
 CPU_SUBTYPE:=neon-vfpv4
 CPU_SUBTYPE:=neon-vfpv4
 KERNELNAME:=Image dtbs zImage
 KERNELNAME:=Image dtbs zImage
 FEATURES+=display usbgadget
 FEATURES+=display usbgadget
-DEFAULT_PACKAGES+=uboot-envtools
+DEFAULT_PACKAGES+=kmod-crypto-hw-safexcel uboot-envtools
 
 
 define Target/Description
 define Target/Description
 	Build firmware images for MediaTek mt7623 ARM based boards.
 	Build firmware images for MediaTek mt7623 ARM based boards.

+ 2 - 1
target/linux/mediatek/patches-5.15/150-dts-mt7623-eip97-inside-secure-support.patch

@@ -1,6 +1,6 @@
 --- a/arch/arm/boot/dts/mt7623.dtsi
 --- a/arch/arm/boot/dts/mt7623.dtsi
 +++ b/arch/arm/boot/dts/mt7623.dtsi
 +++ b/arch/arm/boot/dts/mt7623.dtsi
-@@ -951,17 +951,14 @@
+@@ -951,17 +951,15 @@
  	};
  	};
  
  
  	crypto: crypto@1b240000 {
  	crypto: crypto@1b240000 {
@@ -18,6 +18,7 @@
 -		clock-names = "cryp";
 -		clock-names = "cryp";
 -		power-domains = <&scpsys MT2701_POWER_DOMAIN_ETH>;
 -		power-domains = <&scpsys MT2701_POWER_DOMAIN_ETH>;
 -		status = "disabled";
 -		status = "disabled";
++		status = "okay";
  	};
  	};
  
  
  	bdpsys: syscon@1c000000 {
  	bdpsys: syscon@1c000000 {