Add Antoine correct e-mail.
On 01.02.2021 19:52, Maciej Pijanowski wrote:
> Hello,
>
> I am interested in using the EIP197 crypto accelerator. I am aware
> that it requires an NDA
> to obtain the firmware for it, but I found out that there is some kind
> of "minifw" as well
> in the linux-firmware tree [3]. I found no description of it - I would
> like to learn what
> are the features and limitations of this "minifw".
>
> I started with using it on the Debian image from board vendor [2]. The
> kernel here is
> 5.1.0. The firmware is loaded, but the ALG tests are all failing:
>
> [14785.750246] crypto-safexcel f2800000.crypto: firmware:
> direct-loading firmware inside-secure/eip197b/ifpp.bin
> [14785.762765] crypto-safexcel f2800000.crypto: firmware:
> direct-loading firmware inside-secure/eip197b/ipue.bin
> [14785.777978] alg: skcipher: safexcel-cbc-des encryption test failed
> (wrong output IV) on test vector 0, cfg="in-place"
> [14785.788661] 00000000: fe dc ba 98 76 54 32 10
> [14785.800606] alg: skcipher: safexcel-cbc-des3_ede encryption test
> failed (wrong output IV) on test vector 0, cfg="in-place"
> [14785.811720] 00000000: 7d 33 88 93 0f 93 b2 42
> [14785.823734] alg: skcipher: safexcel-cbc-aes encryption test failed
> (wrong output IV) on test vector 0, cfg="in-place"
> [14785.834439] 00000000: 3d af ba 42 9d 9e b4 30 b4 22 da 80 2c 9f ac 41
> [14785.884568] alg: hash: safexcel-hmac-sha224 test failed (wrong
> result) on test vector 3, cfg="init+update+update+final two even splits"
> [14785.901836] alg: hash: safexcel-hmac-sha256 test failed (wrong
> result) on test vector 2, cfg="import/export"
> [14785.926693] alg: aead: safexcel-authenc-hmac-sha1-cbc-aes
> encryption test failed (wrong result) on test vector 0,
> cfg="misaligned splits crossing pages, inplace"
> [14785.944430] alg: No test for authenc(hmac(sha224),cbc(aes))
> (safexcel-authenc-hmac-sha224-cbc-aes)
> [14785.956978] alg: aead: safexcel-authenc-hmac-sha256-cbc-aes
> encryption test failed (wrong result) on test vector 0, cfg="two even
> aligned splits"
> [14785.973472] alg: No test for authenc(hmac(sha384),cbc(aes))
> (safexcel-authenc-hmac-sha384-cbc-aes)
> [14785.986103] alg: aead: safexcel-authenc-hmac-sha512-cbc-aes
> encryption test failed (wrong result) on test vector 0, cfg="two even
> aligned splits"
>
>
> I am going to test it with more recent, mainline kernel as well, but
> it would be still nice to learn
> a little bit more about this "minifw", it's features, and what could
> be possibly achieved on this
> board without proprietary (and behind NDA) crypto firmware.
>
> Thank you,
>
>
> [1]
> https://www.solid-run.com/embedded-networking/marvell-armada-family/clearfog-gt-8k/
> [2] https://images.solid-build.xyz/8040/Debian/
> [3]
> https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/inside-secure/eip197_minifw/ifpp.bin?id=eefb5f7410150c00d0ab5c41c5d817ae9bf449b3
>
--
Maciej Pijanowski
Embedded Systems Engineer
GPG: 9963C36AAC3B2B46
https://3mdeb.com | @3mdeb_com