interface/include/tfm_crypto_defs.h

/*
 * Copyright (c) 2018-2019, Arm Limited. All rights reserved.
 *
 * SPDX-License-Identifier: BSD-3-Clause
 *
 */

#ifndef __TFM_CRYPTO_DEFS_H__
#define __TFM_CRYPTO_DEFS_H__

#ifdef __cplusplus
extern "C" {
#endif

#include <stdint.h>
#include <limits.h>
#include "tfm_api.h"
#include "psa_crypto.h"

/**
 * \brief This type is used to overcome a limitation in the number of maximum
 *        IOVECs that can be used especially in psa_aead_encrypt and
 *        psa_aead_decrypt. To be removed in case the AEAD APIs number of
 *        parameters passed gets restructured
 */
#define TFM_CRYPTO_MAX_NONCE_LENGTH (16u)
struct tfm_crypto_aead_pack_input {
    uint8_t nonce[TFM_CRYPTO_MAX_NONCE_LENGTH];
    uint32_t nonce_length;
};

/**
 * \brief Structure used to pack non-pointer types in a call
 *
 */
struct tfm_crypto_pack_iovec {
    uint32_t sfn_id;             /*!< Secure function ID used to dispatch the
                                  *   request
                                  */
    psa_key_handle_t key_handle; /*!< Key handle */
    psa_key_type_t type;         /*!< Key type */
    psa_key_usage_t usage;       /*!< Usage policy for a key */
    psa_algorithm_t alg;         /*!< Algorithm */
    psa_key_lifetime_t lifetime; /*!< Lifetime policy for a key */
    uint32_t op_handle;          /*!< Frontend context handle associated to a
                                  *   multipart operation
                                  */
    size_t capacity;             /*!< Generator capacity */

    struct tfm_crypto_aead_pack_input aead_in; /*!< FixMe: Temporarily used for
                                                *   AEAD until the API is
                                                *   restructured
                                                */
};

/**
 * \brief Define a progressive numerical value for each SFID which can be used
 *        when dispatching the requests to the service
 */
enum {
    TFM_CRYPTO_ALLOCATE_KEY_SFID = (0u),
    TFM_CRYPTO_IMPORT_KEY_SFID,
    TFM_CRYPTO_DESTROY_KEY_SFID,
    TFM_CRYPTO_GET_KEY_INFORMATION_SFID,
    TFM_CRYPTO_EXPORT_KEY_SFID,
    TFM_CRYPTO_EXPORT_PUBLIC_KEY_SFID,
    TFM_CRYPTO_COPY_KEY_SFID,
    TFM_CRYPTO_SET_KEY_POLICY_SFID,
    TFM_CRYPTO_GET_KEY_POLICY_SFID,
    TFM_CRYPTO_GET_KEY_LIFETIME_SFID,
    TFM_CRYPTO_CIPHER_GENERATE_IV_SFID,
    TFM_CRYPTO_CIPHER_SET_IV_SFID,
    TFM_CRYPTO_CIPHER_ENCRYPT_SETUP_SFID,
    TFM_CRYPTO_CIPHER_DECRYPT_SETUP_SFID,
    TFM_CRYPTO_CIPHER_UPDATE_SFID,
    TFM_CRYPTO_CIPHER_ABORT_SFID,
    TFM_CRYPTO_CIPHER_FINISH_SFID,
    TFM_CRYPTO_HASH_SETUP_SFID,
    TFM_CRYPTO_HASH_UPDATE_SFID,
    TFM_CRYPTO_HASH_FINISH_SFID,
    TFM_CRYPTO_HASH_VERIFY_SFID,
    TFM_CRYPTO_HASH_ABORT_SFID,
    TFM_CRYPTO_HASH_CLONE_SFID,
    TFM_CRYPTO_MAC_SIGN_SETUP_SFID,
    TFM_CRYPTO_MAC_VERIFY_SETUP_SFID,
    TFM_CRYPTO_MAC_UPDATE_SFID,
    TFM_CRYPTO_MAC_SIGN_FINISH_SFID,
    TFM_CRYPTO_MAC_VERIFY_FINISH_SFID,
    TFM_CRYPTO_MAC_ABORT_SFID,
    TFM_CRYPTO_AEAD_ENCRYPT_SFID,
    TFM_CRYPTO_AEAD_DECRYPT_SFID,
    TFM_CRYPTO_ASYMMETRIC_SIGN_SFID,
    TFM_CRYPTO_ASYMMETRIC_VERIFY_SFID,
    TFM_CRYPTO_ASYMMETRIC_ENCRYPT_SFID,
    TFM_CRYPTO_ASYMMETRIC_DECRYPT_SFID,
    TFM_CRYPTO_GET_GENERATOR_CAPACITY_SFID,
    TFM_CRYPTO_GENERATOR_READ_SFID,
    TFM_CRYPTO_GENERATOR_IMPORT_KEY_SFID,
    TFM_CRYPTO_GENERATOR_ABORT_SFID,
    TFM_CRYPTO_KEY_DERIVATION_SFID,
    TFM_CRYPTO_KEY_AGREEMENT_SFID,
    TFM_CRYPTO_GENERATE_RANDOM_SFID,
    TFM_CRYPTO_GENERATE_KEY_SFID,
    TFM_CRYPTO_SFID_MAX,
};

/**
 * \brief Define the SID values and minor versions to match the ones defined in
 *        the service manifest files
 */
#define TFM_CRYPTO_SID     (0x00004000u)
#define TFM_CRYPTO_MIN_VER (0x0001)

/**
 * \brief Define an invalid value for an SFID
 *
 */
#define TFM_CRYPTO_SFID_INVALID (~0x0u)

/**
 * \brief This value is used to mark an handle as invalid.
 *
 */
#define TFM_CRYPTO_INVALID_HANDLE (~0x0u)

/**
 * \brief Define miscellaneous literal constants that are used in the service
 *
 */
enum {
    TFM_CRYPTO_NOT_IN_USE = 0,
    TFM_CRYPTO_IN_USE = 1
};

#ifdef __cplusplus
}
#endif

#endif /* __TFM_CRYPTO_DEFS_H__ */