[mirror_ubuntu-bionic-kernel.git] / arch / x86 / include / asm / mem_encrypt.h

/*
 * AMD Memory Encryption Support
 *
 * Copyright (C) 2016 Advanced Micro Devices, Inc.
 *
 * Author: Tom Lendacky <thomas.lendacky@amd.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#ifndef __X86_MEM_ENCRYPT_H__
#define __X86_MEM_ENCRYPT_H__

#ifndef __ASSEMBLY__

#include <linux/init.h>

#include <asm/bootparam.h>

#ifdef CONFIG_AMD_MEM_ENCRYPT

extern u64 sme_me_mask;

void sme_encrypt_execute(unsigned long encrypted_kernel_vaddr,
			 unsigned long decrypted_kernel_vaddr,
			 unsigned long kernel_len,
			 unsigned long encryption_wa,
			 unsigned long encryption_pgd);

void __init sme_early_encrypt(resource_size_t paddr,
			      unsigned long size);
void __init sme_early_decrypt(resource_size_t paddr,
			      unsigned long size);

void __init sme_map_bootdata(char *real_mode_data);
void __init sme_unmap_bootdata(char *real_mode_data);

void __init sme_early_init(void);

void __init sme_encrypt_kernel(void);
void __init sme_enable(struct boot_params *bp);

int __init early_set_memory_decrypted(unsigned long vaddr, unsigned long size);
int __init early_set_memory_encrypted(unsigned long vaddr, unsigned long size);

/* Architecture __weak replacement functions */
void __init mem_encrypt_init(void);

void swiotlb_set_mem_attributes(void *vaddr, unsigned long size);

bool sme_active(void);
bool sev_active(void);

#else	/* !CONFIG_AMD_MEM_ENCRYPT */

#define sme_me_mask	0ULL

static inline void __init sme_early_encrypt(resource_size_t paddr,
					    unsigned long size) { }
static inline void __init sme_early_decrypt(resource_size_t paddr,
					    unsigned long size) { }

static inline void __init sme_map_bootdata(char *real_mode_data) { }
static inline void __init sme_unmap_bootdata(char *real_mode_data) { }

static inline void __init sme_early_init(void) { }

static inline void __init sme_encrypt_kernel(void) { }
static inline void __init sme_enable(struct boot_params *bp) { }

static inline bool sme_active(void) { return false; }
static inline bool sev_active(void) { return false; }

static inline int __init
early_set_memory_decrypted(unsigned long vaddr, unsigned long size) { return 0; }
static inline int __init
early_set_memory_encrypted(unsigned long vaddr, unsigned long size) { return 0; }

#endif	/* CONFIG_AMD_MEM_ENCRYPT */

/*
 * The __sme_pa() and __sme_pa_nodebug() macros are meant for use when
 * writing to or comparing values from the cr3 register.  Having the
 * encryption mask set in cr3 enables the PGD entry to be encrypted and
 * avoid special case handling of PGD allocations.
 */
#define __sme_pa(x)		(__pa(x) | sme_me_mask)
#define __sme_pa_nodebug(x)	(__pa_nodebug(x) | sme_me_mask)

#endif	/* __ASSEMBLY__ */

#endif	/* __X86_MEM_ENCRYPT_H__ */
Commit	Line	Data
7744ccdb TL	1	/*
	2	* AMD Memory Encryption Support
	3	*
	4	* Copyright (C) 2016 Advanced Micro Devices, Inc.
	5	*
	6	* Author: Tom Lendacky <thomas.lendacky@amd.com>
	7	*
	8	* This program is free software; you can redistribute it and/or modify
	9	* it under the terms of the GNU General Public License version 2 as
	10	* published by the Free Software Foundation.
	11	*/
	12
	13	#ifndef __X86_MEM_ENCRYPT_H__
	14	#define __X86_MEM_ENCRYPT_H__
	15
	16	#ifndef __ASSEMBLY__
	17
5868f365 TL	18	#include <linux/init.h>
5868f365 TL	19
aca20d54 TL	20	#include <asm/bootparam.h>
aca20d54 TL	21
7744ccdb TL	22	#ifdef CONFIG_AMD_MEM_ENCRYPT
7744ccdb TL	23
21d9bb4a	24	extern u64 sme_me_mask;
7744ccdb	25
6ebcb060 TL	26	void sme_encrypt_execute(unsigned long encrypted_kernel_vaddr,
	27	unsigned long decrypted_kernel_vaddr,
	28	unsigned long kernel_len,
	29	unsigned long encryption_wa,
	30	unsigned long encryption_pgd);
	31
7f8b7e7f TL	32	void __init sme_early_encrypt(resource_size_t paddr,
	33	unsigned long size);
	34	void __init sme_early_decrypt(resource_size_t paddr,
	35	unsigned long size);
	36
b9d05200 TL	37	void __init sme_map_bootdata(char *real_mode_data);
	38	void __init sme_unmap_bootdata(char *real_mode_data);
	39
21729f81 TL	40	void __init sme_early_init(void);
21729f81 TL	41
5868f365	42	void __init sme_encrypt_kernel(void);
aca20d54	43	void __init sme_enable(struct boot_params *bp);
5868f365	44
dfaaec90 BS	45	int __init early_set_memory_decrypted(unsigned long vaddr, unsigned long size);
	46	int __init early_set_memory_encrypted(unsigned long vaddr, unsigned long size);
	47
c7753208 TL	48	/* Architecture __weak replacement functions */
	49	void __init mem_encrypt_init(void);
	50
	51	void swiotlb_set_mem_attributes(void *vaddr, unsigned long size);
	52
d8aa7eea TL	53	bool sme_active(void);
	54	bool sev_active(void);
	55
7744ccdb TL	56	#else /* !CONFIG_AMD_MEM_ENCRYPT */
7744ccdb TL	57
21d9bb4a	58	#define sme_me_mask 0ULL
7744ccdb	59
7f8b7e7f TL	60	static inline void __init sme_early_encrypt(resource_size_t paddr,
	61	unsigned long size) { }
	62	static inline void __init sme_early_decrypt(resource_size_t paddr,
	63	unsigned long size) { }
	64
b9d05200 TL	65	static inline void __init sme_map_bootdata(char *real_mode_data) { }
	66	static inline void __init sme_unmap_bootdata(char *real_mode_data) { }
	67
21729f81 TL	68	static inline void __init sme_early_init(void) { }
21729f81 TL	69
5868f365	70	static inline void __init sme_encrypt_kernel(void) { }
aca20d54	71	static inline void __init sme_enable(struct boot_params *bp) { }
5868f365	72
d8aa7eea TL	73	static inline bool sme_active(void) { return false; }
	74	static inline bool sev_active(void) { return false; }
	75
dfaaec90 BS	76	static inline int __init
	77	early_set_memory_decrypted(unsigned long vaddr, unsigned long size) { return 0; }
	78	static inline int __init
	79	early_set_memory_encrypted(unsigned long vaddr, unsigned long size) { return 0; }
	80
7744ccdb TL	81	#endif /* CONFIG_AMD_MEM_ENCRYPT */
7744ccdb TL	82
21729f81 TL	83	/*
	84	* The __sme_pa() and __sme_pa_nodebug() macros are meant for use when
	85	* writing to or comparing values from the cr3 register. Having the
	86	* encryption mask set in cr3 enables the PGD entry to be encrypted and
	87	* avoid special case handling of PGD allocations.
	88	*/
	89	#define __sme_pa(x) (__pa(x) \| sme_me_mask)
	90	#define __sme_pa_nodebug(x) (__pa_nodebug(x) \| sme_me_mask)
	91
7744ccdb TL	92	#endif /* __ASSEMBLY__ */
	93
	94	#endif /* __X86_MEM_ENCRYPT_H__ */