AES Engine - Revision history

Winmaster: Undo revision 3998 by Lu (talk) SPAM/Vandalism

2011-07-15T11:25:21Z

Undo revision 3998 by Lu (talk) SPAM/Vandalism

Show changes

Lu at 01:40, 15 July 2011

2011-07-14T23:40:30Z

Show changes

Yellows8: /* REG_AESKEY0/1/2/3 */

2010-07-06T18:02:44Z

REG_AESKEY0/1/2/3

← Older revision		Revision as of 22:02, 6 July 2010
Line 129:		Line 129:


	Key gets updated when either the last word of the key data or the last word of "special key data y" is written. When writing to special key data the actual key is F((key data x) xor (key data y)) where F is some ~~unkown~~ function implemented in hardware.		Key gets updated when either the last word of the key data or the last word of "special key data y" is written. When writing to special key data the actual key is F((key data x) xor (key data y)) where F is some unknown function implemented in hardware.


	== AES CCM mode (Counter with CBC-MAC) ==		== AES CCM mode (Counter with CBC-MAC) ==

Svpe at 18:25, 5 February 2010

2010-02-05T17:25:36Z

← Older revision		Revision as of 20:25, 5 February 2010
Line 44:		Line 44:
	\| 0x040044D0		\| 0x040044D0
	\| 48		\| 48
	\|}


	\|}		\|}

Ludo6431: tables

2010-02-05T16:03:45Z

tables

← Older revision		Revision as of 19:03, 5 February 2010
Line 1:		Line 1:
	== Registers ==		== Registers ==
	{\| class="wikitable" border="1"		{\| class="wikitable" border="1"
	\|-
	! NAME		! NAME
	! ADDRESS		! ADDRESS
Line 48:		Line 47:


	~~(:tableend:)~~		\|}

	== REG_AESCNT ==		== REG_AESCNT ==
	~~(:table~~ border=1 ~~cellspacing=0 cellpadding=3 bgcolor=#F0F0F0 :)~~		{\| class="wikitable" border="1"
	~~(:cellnr~~ ~~bgcolor=#E0E0E0 :)'''~~BIT~~'''~~		! BIT
	~~(:cell~~ ~~bgcolor=#E0E0E0 :)'''~~DESCRIPTION~~'''~~		! DESCRIPTION
	~~(:cellnr:)~~4-0		\|-
	~~(:cell:)~~Write fifo count		\| 4-0
	~~(:cellnr:)~~9-5		\| Write fifo count
	~~(:cell:)~~Read fifo count		\|-
	~~(:cellnr:)~~10		\| 9-5
	~~(:cell:)~~Flush write fifo		\| Read fifo count
	~~(:cellnr:)~~11		\|-
	~~(:cell:)~~Flush read fifo		\| 10
	~~(:cellnr:)~~15-12		\| Flush write fifo
	~~(:cell:)~~?		\|-
	~~(:cellnr:)~~18-16		\| 11
	~~(:cell:)~~MAC size (size in bytes = s*2+2, e.g, 7 == 16 bytes)		\| Flush read fifo
	~~(:cellnr:)~~19		\|-
	~~(:cell:)~~?		\| 15-12
	~~(:cellnr:)~~20		\| ?
	~~(:cell:)~~MAC input control (0 = read MAC from FIFO, 1 = read MAC from REG_AESMAC)		\|-
	~~(:cellnr:)~~21		\| 18-16
	~~(:cell:)~~MAC status (0 = invalid, 1 = verified)		\| MAC size (size in bytes = s*2+2, e.g, 7 == 16 bytes)
	~~(:cellnr:)~~23-22		\|-
	~~(:cell:)~~?		\| 19
	~~(:cellnr:)~~24		\| ?
	~~(:cell:)~~Key select		\|-
	~~(:cellnr:)~~25		\| 20
	~~(:cell:)~~Key schedule busy		\| MAC input control (0 = read MAC from FIFO, 1 = read MAC from REG_AESMAC)
	~~(:cellnr:)~~27-26		\|-
	~~(:cell:)~~Key slot (0..3)		\| 21
	~~(:cellnr:)~~29-28		\| MAC status (0 = invalid, 1 = verified)
	~~(:cell:)~~Mode (0=AES CCM decrypt, 1=AES CCM encrypt, 2=AES CTR)		\|-
	~~(:cellnr:)~~30		\| 23-22
	~~(:cell:)~~Interrupt enable		\| ?
	~~(:cellnr:)~~31		\|-
	~~(:cell:)~~Enable		\| 24
	~~(:tableend:)~~		\| Key select
			\|-
			\| 25
			\| Key schedule busy
			\|-
			\| 27-26
			\| Key slot (0..3)
			\|-
			\| 29-28
			\| Mode (0=AES CCM decrypt, 1=AES CCM encrypt, 2=AES CTR)
			\|-
			\| 30
			\| Interrupt enable
			\|-
			\| 31
			\| Enable
			\|}


	== REG_AESBLKCNT ==		== REG_AESBLKCNT ==
	~~(:table~~ border=1 ~~cellspacing=0 cellpadding=3 bgcolor=#F0F0F0 :)~~		{\| class="wikitable" border="1"
	~~(:cellnr~~ ~~bgcolor=#E0E0E0 :)'''~~BIT~~'''~~		! BIT
	~~(:cell~~ ~~bgcolor=#E0E0E0 :)'''~~DESCRIPTION~~'''~~		! DESCRIPTION
	~~(:cellnr:)~~15-0		\|-
	~~(:cell:)~~CBC-MAC associated data blocks to process (1 block = 4 words)		\| 15-0
	~~(:cellnr:)~~31-16		\| CBC-MAC associated data blocks to process (1 block = 4 words)
	~~(:cell:)~~CTR or payload data blocks to process (1 block = 4 words)		\|-
	~~(:tableend:)~~		\| 31-16
			\| CTR or payload data blocks to process (1 block = 4 words)
			\|}

	== REG_AESKEY0/1/2/3 ==		== REG_AESKEY0/1/2/3 ==
	~~(:table~~ border=1 ~~cellspacing=0 cellpadding=3 bgcolor=#F0F0F0 :)~~		{\| class="wikitable" border="1"
	~~(:cellnr~~ ~~bgcolor=#E0E0E0 :)'''~~BYTE~~'''~~		! BYTE
	~~(:cell~~ ~~bgcolor=#E0E0E0 :)'''~~DESCRIPTION~~'''~~		! DESCRIPTION
	~~(:cellnr:)~~0-15		\|-
	~~(:cell:)~~Key data		\| 0-15
	~~(:cellnr:)~~16-31		\| Key data
	~~(:cell:)~~Special key data X		\|-
	~~(:cellnr:)~~32-47		\| 16-31
	~~(:cell:)~~Special key data Y		\| Special key data X
	~~(:tableend:)~~		\|-
			\| 32-47
			\| Special key data Y
			\|}

Svpe: mostly courtesy of neimod. someone needs to wikify those tables a bit :P

2010-02-05T09:51:19Z

mostly courtesy of neimod. someone needs to wikify those tables a bit :P

New page

== Registers ==
{| class="wikitable" border="1"
|-
! NAME
! ADDRESS
! WIDTH
|-
| REG_AESCNT
| 0x04004400
| 4
|-
| REG_AESBLKCNT
| 0x04004404
| 4
|-
| REG_AESWRFIFO
| 0x04004408
| 4
|-
| REG_AESRDFIFO
| 0x0400440C
| 4
|-
| REG_AESCTR
| 0x04004420
| 16
|-
| REG_AESMAC
| 0x04004430
| 16
|-
| REG_AESKEY0
| 0x04004440
| 48
|-
| REG_AESKEY1
| 0x04004470
| 48
|-
| REG_AESKEY2
| 0x040044A0
| 48
|-
| REG_AESKEY3
| 0x040044D0
| 48
|}

(:tableend:)

== REG_AESCNT ==
(:table border=1 cellspacing=0 cellpadding=3 bgcolor=#F0F0F0 :)
(:cellnr bgcolor=#E0E0E0 :)'''BIT'''
(:cell bgcolor=#E0E0E0 :)'''DESCRIPTION'''
(:cellnr:)4-0
(:cell:)Write fifo count
(:cellnr:)9-5
(:cell:)Read fifo count
(:cellnr:)10
(:cell:)Flush write fifo
(:cellnr:)11
(:cell:)Flush read fifo
(:cellnr:)15-12
(:cell:)?
(:cellnr:)18-16
(:cell:)MAC size (size in bytes = s*2+2, e.g, 7 == 16 bytes)
(:cellnr:)19
(:cell:)?
(:cellnr:)20
(:cell:)MAC input control (0 = read MAC from FIFO, 1 = read MAC from REG_AESMAC)
(:cellnr:)21
(:cell:)MAC status (0 = invalid, 1 = verified)
(:cellnr:)23-22
(:cell:)?
(:cellnr:)24
(:cell:)Key select
(:cellnr:)25
(:cell:)Key schedule busy
(:cellnr:)27-26
(:cell:)Key slot (0..3)
(:cellnr:)29-28
(:cell:)Mode (0=AES CCM decrypt, 1=AES CCM encrypt, 2=AES CTR)
(:cellnr:)30
(:cell:)Interrupt enable
(:cellnr:)31
(:cell:)Enable
(:tableend:)

== REG_AESBLKCNT ==
(:table border=1 cellspacing=0 cellpadding=3 bgcolor=#F0F0F0 :)
(:cellnr bgcolor=#E0E0E0 :)'''BIT'''
(:cell bgcolor=#E0E0E0 :)'''DESCRIPTION'''
(:cellnr:)15-0
(:cell:)CBC-MAC associated data blocks to process (1 block = 4 words)
(:cellnr:)31-16
(:cell:)CTR or payload data blocks to process (1 block = 4 words)
(:tableend:)

== REG_AESKEY0/1/2/3 ==
(:table border=1 cellspacing=0 cellpadding=3 bgcolor=#F0F0F0 :)
(:cellnr bgcolor=#E0E0E0 :)'''BYTE'''
(:cell bgcolor=#E0E0E0 :)'''DESCRIPTION'''
(:cellnr:)0-15
(:cell:)Key data
(:cellnr:)16-31
(:cell:)Special key data X
(:cellnr:)32-47
(:cell:)Special key data Y
(:tableend:)

Key gets updated when either the last word of the key data or the last word of "special key data y" is written. When writing to special key data the actual key is F((key data x) xor (key data y)) where F is some unkown function implemented in hardware.

== AES CCM mode (Counter with CBC-MAC) ==
AES CCM mode combines AES CTR with AES CBC-MAC, to provide confidentiality and authenticity of a message.

The message contains optional associated data and an actual payload. The payload is XORed with an AES CTR generated stream, while AES CBC-MAC is used to generate a MAC based on both the associated data and the payload. The MAC can be used to verify integrity of the message. In addition, a nonce is used to initialize the AES CTR and CBC-MAC modes of operation.

More information can be found in NIST 800-38C or RFC 3610.

The used MAC size can be adjusted in hardware, but usually a MAC size of 16 bytes is used. The hardware has a hardcoded maximum payload size of 24 bits for CCM, and this automatically means the nonce is 12 bytes.

When encrypting or decrypting, the first 12 bytes of REG_AESCTR are used for the nonce. The actual counter used is defined in NIST 800-38C, and looks like this: (02 <nonce> 00 00 00). The last 3 bytes are the counter and is incremented for each subsequent AES CTR operation. The first block for AES CBC-MAC is also defined in NIST 800-38C, and looks like this: (<flags> <nonce> <payloadsize>), where flags is (0 <adata> <m> <q>), where adata is 1 or 0 if associated data is used, m the encoded mac size, and q the sizebytes (always 2).

== CCM hardware encryption ==
First, the optional associated data is written to the write fifo. During this time, the hardware will internally update the MAC with the associated data. If no associated data is used, this step can be skipped.
Then, the actual payload is written to the write fifo. The crypted payload will appear in the read fifo, and during this time the MAC will be internally updated with the payload data.
Once all blocks are done, the MAC can be read from the read fifo. The hardware knows when this is because the number of associated blocks and payload blocks are specified in REG_AESBLKCNT.

== CCM hardware decryption ==
It is possible to let the hardware use the dedicated MAC slot in REG_AESMAC or from the write fifo for verification. This option depends on bit 20 of REG_AESCNT.
Like encryption, first the optional associated data is written to the write fifo. Then the actual payload is written to the write fifo, and the crypted payload will appear in the read fifo. If using the dedicated MAC slot, the hardware will now verify whether the MAC matches. Otherwise, the MAC must be supplied into the write fifo for verification.