1 /* SPDX-License-Identifier: GPL-2.0-only */ 2 #ifndef __ASM_MEM_ENCRYPT_H 3 #define __ASM_MEM_ENCRYPT_H 4 5 #include <linux/arm-rsi-cmds.h> 6 #include <asm/hypervisor.h> 7 8 struct device; 9 10 struct arm64_mem_crypt_ops { 11 int (*encrypt)(unsigned long addr, int numpages); 12 int (*decrypt)(unsigned long addr, int numpages); 13 }; 14 15 int arm64_mem_crypt_ops_register(const struct arm64_mem_crypt_ops *ops); 16 17 int set_memory_encrypted(unsigned long addr, int numpages); 18 int set_memory_decrypted(unsigned long addr, int numpages); 19 int __set_memory_enc_dec(unsigned long addr, int numpages, bool encrypt); 20 21 static inline bool force_dma_unencrypted(struct device *dev) 22 { 23 return is_realm_world() || is_protected_kvm_guest(); 24 } 25 26 /* 27 * For Arm CCA guests, canonical addresses are "encrypted", so no changes 28 * required for dma_addr_encrypted(). 29 * The unencrypted DMA buffers must be accessed via the unprotected IPA, 30 * "top IPA bit" set. 31 */ 32 #define dma_addr_unencrypted(x) ((x) | PROT_NS_SHARED) 33 34 /* Clear the "top" IPA bit while converting back */ 35 #define dma_addr_canonical(x) ((x) & ~PROT_NS_SHARED) 36 37 #endif /* __ASM_MEM_ENCRYPT_H */ 38