| /linux/drivers/nfc/microread/ |
| H A D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0-only 6 This module contains the main code for Inside Secure microread 11 tristate "Inside Secure Microread device support (I2C)" 16 Inside microread chipsets. Select this if your platform is using 23 tristate "Inside Secure Microread device support (MEI)" 28 Inside microread chipsets. Select this if your microread chipset
|
| H A D | mei.c | 1 // SPDX-License-Identifier: GPL-2.0 5 * HCI based Driver for Inside Secure microread NFC Chip 27 return -ENOMEM; in microread_mei_probe() 31 &phy->hdev); in microread_mei_probe() 45 microread_remove(phy->hdev); in microread_mei_remove()
|
| /linux/drivers/s390/crypto/ |
| H A D | zcrypt_ccamisc.h | 1 /* SPDX-License-Identifier: GPL-2.0+ */ 18 #define TOKTYPE_NON_CCA 0x00 /* Non-CCA key token */ 42 /* inside view of a CCA secure key token (only type 0x01 version 0x04) */ 58 /* inside view of a variable length symmetric cipher AES key token */ 82 /* AES-128 512 640 */ 83 /* AES-192 576 640 */ 84 /* AES-256 640 640 */ 98 /* inside view of an CCA secure ECC private key */ 108 u8 htype; /* hash method, 0x02 for SHA-256 */ 134 * Simple check if the token is a valid CCA secure AES data key [all …]
|
| /linux/Documentation/devicetree/bindings/arm/tegra/ |
| H A D | nvidia,tegra194-cbb.yaml | 1 # SPDX-License-Identifier: (GPL-2.0-only OR BSD-2-Clause) 3 --- 4 $id: http://devicetree.org/schemas/arm/tegra/nvidia,tegra194-cbb.yaml# 5 $schema: http://devicetree.org/meta-schemas/core.yaml# 10 - Sumit Gupta <sumitg@nvidia.com> 15 multiple hierarchical sub-NOCs (Network-on-Chip) and connects various 19 by the NOCs inside the CBB. NOCs reporting errors are cluster NOCs 20 "AON-NOC, SCE-NOC, RCE-NOC, BPMP-NOC, CV-NOC" and "CBB Central NOC" 28 - For CCPLEX (CPU Complex) initiator, the driver sets ERD bit. So, the 31 - For other initiators, the ERD is disabled. So, the access issuing [all …]
|
| /linux/Documentation/arch/arm/ |
| H A D | tcm.rst | 2 ARM TCM (Tightly-Coupled Memory) handling in Linux 7 Some ARM SoCs have a so-called TCM (Tightly-Coupled Memory). 8 This is usually just a few (4-64) KiB of RAM inside the ARM 11 Due to being embedded inside the CPU, the TCM has a 12 Harvard-architecture, so there is an ITCM (instruction TCM) 24 determine if ITCM (bits 1-0) and/or DTCM (bit 17-16) is present 47 be able to lock and hide one of the banks for use by the secure 52 - FIQ and other interrupt handlers that need deterministic 55 - Idle loops where all external RAM is set to self-refresh 56 retention mode, so only on-chip RAM is accessible by [all …]
|
| /linux/arch/s390/include/uapi/asm/ |
| H A D | pkey.h | 1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */ 23 #define SECKEYBLOBSIZE 64 /* secure key blob size is always 64 bytes */ 89 /* Struct to hold a CCA AES secure key blob */ 91 __u8 seckey[SECKEYBLOBSIZE]; /* the secure key blob */ 121 * Generate CCA AES secure key. 127 struct pkey_seckey seckey; /* out: the secure key blob */ 133 * Construct CCA AES secure key from clear key value 140 struct pkey_seckey seckey; /* out: the secure key blob */ 146 * Fabricate AES protected key from a CCA AES secure key 151 struct pkey_seckey seckey; /* in: the secure key blob */ [all …]
|
| /linux/Documentation/gpu/nova/core/ |
| H A D | falcon.rst | 1 .. SPDX-License-Identifier: GPL-2.0 10 interactions of nova-core driver with the Falcon. 12 NVIDIA GPUs embed small RISC-like microcontrollers called Falcon cores, which 13 handle secure firmware tasks, initialization, and power management. Modern 15 processor) and SEC2 (the security engine)) and also may integrate a RISC-V core. 16 This core is capable of running both RISC-V and Falcon code. 22 small DMA engine (via the FBIF - "Frame Buffer Interface") to load code from 23 system memory. The nova-core driver must reset and configure the Falcon, load 28 Falcons can run in Non-secure (NS), Light Secure (LS), or Heavy Secure (HS) 32 -------------------------------------------------------- [all …]
|
| /linux/arch/powerpc/platforms/pseries/ |
| H A D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0 4 bool "IBM pSeries & new (POWER5-based) iSeries" 41 bool "Support for shared-processor logical partitions" 48 on logically-partitioned pSeries systems which use shared 81 to return information about hardware error and non-error events 111 bool "Support for shared-memory logical partitions" 164 the total time spent inside the KVM guest. This config enables code 190 # This option is selected by in-kernel consumers that require 196 # This option is selected by in-kernel consumers that require 206 bool "Secure virtual machine (SVM) support for POWER" [all …]
|
| /linux/Documentation/devicetree/bindings/mfd/ |
| H A D | nxp,bbnsm.yaml | 1 # SPDX-License-Identifier: (GPL-2.0-only OR BSD-2-Clause) 3 --- 5 $schema: http://devicetree.org/meta-schemas/core.yaml# 7 title: NXP Battery-Backed Non-Secure Module 10 - Jacky Bai <ping.bai@nxp.com> 13 NXP BBNSM serves as non-volatile logic and storage for the system. 17 significant 32 bits of the real-time counter match the value in the 19 The ON/OFF logic inside the BBNSM allows for connecting directly to 26 - enum: 27 - nxp,imx93-bbnsm [all …]
|
| /linux/arch/nios2/include/asm/ |
| H A D | thread_info.h | 2 * NiosII low-level thread information 31 * - this struct should fit entirely inside of one cache line 32 * - this struct shares the supervisor stack pages 33 * - if the contents of this structure are changed, the assembly constants 62 return (struct thread_info *)(sp & ~(THREAD_SIZE - 1)); in current_thread_info() 68 * - these are process state flags that various assembly files may need to 70 * - pending work-to-be-done flags are in LSW 71 * - other flags in MSW 78 #define TIF_SECCOMP 5 /* secure computing */
|
| /linux/arch/microblaze/include/asm/ |
| H A D | thread_info.h | 1 /* SPDX-License-Identifier: GPL-2.0 */ 22 * - this struct should fit entirely inside of one cache line 23 * - this struct shares the supervisor stack pages 24 * - if the contents of this structure are changed, the assembly constants 38 /* non-volatile registers */ 62 unsigned long status; /* thread-synchronous flags */ 85 return (struct thread_info *)(sp & ~(THREAD_SIZE-1)); in current_thread_info() 93 * - these are process state flags that various assembly files may 95 * - pending work-to-be-done flags are in LSW 96 * - other flags in MSW [all …]
|
| /linux/arch/xtensa/include/asm/ |
| H A D | thread_info.h | 2 * include/asm-xtensa/thread_info.h 8 * Copyright (C) 2001 - 2005 Tensilica Inc. 25 * - this struct should fit entirely inside of one cache line 26 * - this struct shares the supervisor stack pages 27 * - if the contents of this structure are changed, the assembly constants 51 unsigned long status; /* thread-synchronous flags */ 65 * If i-th bit is set then coprocessor state is loaded into the 113 * - these are process state flags that various assembly files may need to access 125 #define TIF_SECCOMP 10 /* secure computing */ 143 #define THREAD_SIZE_ORDER (KERNEL_STACK_SHIFT - PAGE_SHIFT)
|
| /linux/security/integrity/ima/ |
| H A D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0-only 26 an aggregate integrity value over this list inside the 75 limited to 255 characters. The 'ima-ng' measurement list 81 bool "ima-ng (default)" 83 bool "ima-sig" 88 default "ima-ng" if IMA_NG_TEMPLATE 89 default "ima-sig" if IMA_SIG_TEMPLATE 159 <http://linux-ima.sourceforge.net> 169 based on run time secure boot flags. 217 Kernel module signatures can only be verified by IMA-appraisal, [all …]
|
| /linux/arch/arm/mach-omap2/ |
| H A D | pm34xx.c | 1 // SPDX-License-Identifier: GPL-2.0-only 5 * Copyright (C) 2006-2008 Nokia Corporation 13 * Richard Woodruff <r-woodruff2@ti.com> 42 #include "cm-regbits-34xx.h" 43 #include "prm-regbits-34xx.h" 47 #include "omap-secure.h" 97 * FIXME: This function should be called before entering off-mode after 98 * OMAP3 secure services have been accessed. Currently it is only called 99 * once during boot sequence, but this works as we are not using secure 110 * otherwise the WFI executed inside the ROM code in omap3_save_secure_ram_context() [all …]
|
| H A D | omap4-common.c | 1 // SPDX-License-Identifier: GPL-2.0-only 19 #include <linux/irqchip/arm-gic.h> 24 #include <asm/hardware/cache-l2x0.h> 29 #include "omap-wakeupgen.h" 35 #include "omap4-sar-layout.h" 36 #include "omap-secure.h" 63 * We need to be careful about re-ordering which can happen as a result 74 * The mb() and wmb() barriers only operate only on the MPU->MA->EMIF 87 * OMAP4 Errata i688 - asynchronous bridge corruption when entering WFI. 89 * If a data is stalled inside asynchronous bridge because of back [all …]
|
| /linux/arch/mips/include/asm/ |
| H A D | thread_info.h | 1 /* SPDX-License-Identifier: GPL-2.0 */ 2 /* thread_info.h: MIPS low-level thread information 5 * - Incorporating suggestions made by Linus Torvalds and Dave Miller 20 * - this struct should fit entirely inside of one cache line 21 * - this struct shares the supervisor stack pages 22 * - if the contents of this structure are changed, the assembly constants 99 #define THREAD_MASK (THREAD_SIZE - 1UL) 105 * - these are process state flags that various assembly files may need to 107 * - pending work-to-be-done flags are in LSW 108 * - other flags in MSW [all …]
|
| /linux/drivers/net/ethernet/freescale/dpaa2/ |
| H A D | dpsw.h | 1 /* SPDX-License-Identifier: GPL-2.0 */ 3 * Copyright 2014-2016 Freescale Semiconductor Inc. 4 * Copyright 2017-2021 NXP 11 /* Data Path L2-Switch API 32 * DPSW_OPT_FLOODING_DIS - Flooding was disabled at device create 36 * DPSW_OPT_MULTICAST_DIS - Multicast was disabled at device create 40 * DPSW_OPT_CTRL_IF_DIS - Control interface support is disabled 45 * enum dpsw_component_type - component type of a bridge 46 * @DPSW_COMPONENT_TYPE_C_VLAN: A C-VLAN component of an 48 * to process C-tagged frames [all …]
|
| /linux/Documentation/virt/kvm/x86/ |
| H A D | running-nested-guests.rst | 1 .. SPDX-License-Identifier: GPL-2.0 7 A nested guest is the ability to run a guest inside another guest (it 8 can be KVM-based or a different hypervisor). The straightforward 12 .----------------. .----------------. 17 |----------------'--'----------------| 22 .------------------------------------------------------. 25 |------------------------------------------------------| 27 '------------------------------------------------------' 31 - L0 – level-0; the bare metal host, running KVM 33 - L1 – level-1 guest; a VM running on L0; also called the "guest [all …]
|
| H A D | amd-memory-encryption.rst | 1 .. SPDX-License-Identifier: GPL-2.0 4 Secure Encrypted Virtualization (SEV) 10 Secure Encrypted Virtualization (SEV) is a feature found on AMD processors. 12 SEV is an extension to the AMD-V architecture which supports running 46 Hence, the ASID for the SEV-enabled guests must be from 1 to a maximum value 57 of zero if SEV is enabled). If non-NULL, the argument to 74 are defined in ``<linux/psp-dev.h>``. 80 ---------------- 91 Returns: 0 on success, -negative on error 127 ``debug_swap`` parameter of ``kvm-amd.ko``. [all …]
|
| /linux/Documentation/security/tpm/ |
| H A D | tpm-security.rst | 1 .. SPDX-License-Identifier: GPL-2.0-only 12 ------------ 16 PTT, which is a software TPM running inside a software environment 22 ----------------------------------------------- 42 --------------------------- 68 ---------------- 77 --------------------------------------- 104 name, which is what is exported via sysfs so user-space can run the 107 TPM transactions since start of day were secure and if it doesn't, you 112 -------------- [all …]
|
| /linux/Documentation/security/ |
| H A D | snp-tdx-threat-model.rst | 17 the kernel through various networking or limited HW-specific exposed 28 solutions provide a Trusted Execution Environment (TEE), where secure data 33 Machines (VM) inside TEE. From now on in this document will be referring 39 inside a CoCo VM. Namely, confidential computing allows its users to 48 additional mechanisms to control guest-host page mapping. More details on 49 the x86-specific solutions can be found in 51 …https://www.amd.com/system/files/techdocs/sev-snp-strengthening-vm-isolation-with-integrity-protec… 56 that acts as a security manager. The host-side virtual machine monitor 63 In the following diagram, the "<--->" lines represent bi-directional 67 +-------------------+ +-----------------------+ [all …]
|
| /linux/drivers/usb/serial/ |
| H A D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0 14 Please read <file:Documentation/usb/usb-serial.rst> for more 50 read <file:Documentation/usb/usb-serial.rst> for more information on 61 - Suunto ANT+ USB device. 62 - Medtronic CareLink USB device 63 - Fundamental Software dongle. 64 - Google USB serial devices 65 - HP4x calculators 66 - Libtransistor USB console 67 - a number of Motorola phones [all …]
|
| /linux/Documentation/virt/coco/ |
| H A D | sev-guest.rst | 1 .. SPDX-License-Identifier: GPL-2.0 14 - Hypervisor ioctls: These query and set global attributes which affect the 17 - Guest ioctls: These query and set attributes of the SEV virtual machine. 27 which SEV technology provides this ioctl. SEV, SEV-ES, SEV-SNP or all. 30 hypervisor or guest. The ioctl can be used inside the guest or the 37 the return value. General error numbers (-ENOMEM, -EINVAL) 40 The guest ioctl should be issued on a file descriptor of the /dev/sev-guest 44 the fw_error code will be set, otherwise fw_error will be set to -1. 48 counter (e.g. counter overflow), then -EIO will be returned. 60 /* bits[63:32]: VMM error code, bits[31:0] firmware error code (see psp-sev.h) */ [all …]
|
| /linux/drivers/firmware/efi/ |
| H A D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0-only 42 resource, and set aside for direct-access (device-dax) by 45 device-dax kmem facility. Say N to have the kernel treat this 83 memory before executing it. For compatibility with non-EFI loaders, 129 bool "Add support for Quark capsules with non-standard headers" 204 firmware can't guarantee that the OS is IOMMU-aware, it will tear 233 See Documentation/admin-guide/acpi/ssdt-overlays.rst for more 247 an issue for Real-Time kernels. 262 for usage inside the kernel. This will allow the 271 (edk2-stable202508 + newer) can write their debug log to a memory [all …]
|
| /linux/arch/arm/ |
| H A D | Kconfig | 1 # SPDX-License-Identifier: GPL-2.0 50 # https://github.com/llvm/llvm-project/commit/d130f402642fba3d065aacb506cb061c899558de 168 The ARM series is a line of low-power-consumption RISC chip designs 170 handhelds such as the Compaq IPAQ. ARM-based PCs are no longer 171 manufactured, but legacy ARM-based PC hardware remains popular in 179 relocations. The combined range is -/+ 256 MiB, which is usually 272 Patch phys-to-virt and virt-to-phys translation functions at 276 This can only be used with non-XIP MMU kernels where the base 322 bool "MMU-based Paged Memory Management Support" 325 Select if you want MMU-based virtualised addressing space [all …]
|