CFB mode encryption of N blocks of plaintext into N blocks of ciphertext without CPU interaction is achieved through the use of two DMA channels (referred to as DMA_A, DMA_B). To implement CFB encryption follow these steps:
- Configure the AESACTL0 register for block cipher encryption mode using OFB:
- Reset AES module to clear the internal state memory (set SWRST in the AESACTL0 register)
- Set CMEN to enable block cipher mode
- Set CMx to CFB mode (0x3)
- Set OPx to encryption mode (0x0)
- Load key as described in Section 23.2.2
- Load initialization vector (IV) into AESAXIN
- Loading to AESAXIN does not start any encryption
- The STATE must be reset (step 1a above) so that the IV is XORed with zeros when loaded
- Configure the DMA_A channel for loading plaintext:
- Set the DMA channel trigger selection to AES0 trigger
- Set the DMA channel source address to the location where plaintext is stored (for example, SRAM)
- Set the DMA channel destination address to AESAXIN
- Set the DMA channel transfer size to N∗4 words
- Set the DMA channel mode to single transfer mode
- Configure the DMA_B channel for reading ciphertext:
- Set the DMA channel trigger selection for AES1 trigger
- Set the DMA channel source address to AESADOUT
- Set the DMA channel destination address to the location where ciphertext is to be stored (for example, SRAM)
- Set the DMA channel transfer size to N∗4 words
- Set the DMA channel mode to single transfer mode
- In the AES event registers, unmask DMA1 in the IMASK register of DMA_TRIG
1
- Configure and enable the DMA interrupt for the DMA_B channel in the DMA controller
- Start encryption by writing the block count N to BLKCNTx in the AESACTL1 register and setting the DINWR bit in the AESASTAT register
- Wait for the DMA_B channel interrupt which indicates completion of the operation. The ciphertext output will be stored in the location configured in step 5c.