Linux_SDK_V1.1.2Linux_SDK_V1.1.2

59 files changed, 799 insertions, 317 deletions

diff --git a/lib/sec_library/include/aes.h b/lib/sec_library/include/aes.h
index 04d8fd06..93c809d3 100644..100755
--- a/lib/sec_library/include/aes.h
+++ b/lib/sec_library/include/aes.h
@@ -21,12 +21,44 @@ extern "C" {
 #endif
 
 /*----- Encrypt & Decrypt: Config key length -----*/
+#define AES_KEY_LEN_BYTES_32  (32)
+#define AES_KEY_LEN_BYTES_24  (24)
+#define AES_KEY_LEN_BYTES_16  (16)
+
+#define AES_BLOCK_IV_SIZE     (16)
+#define AES_BLOCK_TAG_SIZE    (16)
+#define AES_BLOCK_CRYPTO_SIZE (16)
+
+#define AES_DIR_ENCRYPT       (1)
+#define AES_DIR_DECRYPT       (0)
+
+#define KEY_128_BITS          (0x08)
+#define KEY_192_BITS          (0x10)
+#define KEY_256_BITS          (0x18)
+
+#define AES_DMA_ENABLE        (1)
+#define AES_DMA_DISABLE       (0)
+
+/**
+\brief DES data transfer mode config
+*/
+typedef enum {
+    AES_SLAVE_MODE = 0U,         ///< slave mode
+    AES_DMA_MODE,                ///< dma mode
+} csi_aes_trans_mode_t;
+
+/**
+\brief AES Keylen type
+*/
 typedef enum {
     AES_KEY_LEN_BITS_128        = 0,       ///< 128 Data bits
     AES_KEY_LEN_BITS_192,                  ///< 192 Data bits
     AES_KEY_LEN_BITS_256                   ///< 256 Data bits
 } csi_aes_key_bits_t;
 
+/**
+\brief AES mode config
+*/
 typedef enum{
     AES_MODE_ECB = 0,
     AES_MODE_CBC = 0x20000020,
@@ -35,48 +67,19 @@ typedef enum{
     AES_MODE_GCM = 0x20030040,
     AES_MODE_CCM = 0x21D40040,
     AES_MODE_OFB = 0x24000000,
-} aes_mode_t;
-
-#define AES_KEY_LEN_BYTES_32 32
-#define AES_KEY_LEN_BYTES_24 24
-#define AES_KEY_LEN_BYTES_16 16
-
-#define AES_CRYPTO_CTRL_CBC_256 0x20000038
-#define AES_CRYPTO_CTRL_CBC_192 0x20000030
-#define AES_CRYPTO_CTRL_CBC_128 0x20000028
-#define AES_CRYPTO_CTRL_ECB_256 0x00000018
-#define AES_CRYPTO_CTRL_ECB_192 0x00000010
-#define AES_CRYPTO_CTRL_ECB_128 0x00000008
-
-#define AES_BLOCK_IV_SIZE  16
-#define AES_BLOCK_TAG_SIZE  16
-#define AES_BLOCK_CRYPTO_SIZE  16
-
-#define AES_DIR_ENCRYPT    1
-#define AES_DIR_DECRYPT    0
-
-#define KEY_128_BITS 0x8
-#define KEY_192_BITS 0x10
-#define KEY_256_BITS 0x18
-
-#define AES_DMA_ENABLE  1
-#define AES_DMA_DISABLE 0
-
-
-typedef enum{
-    AES_CRYPTO_ECB_256_MODE = 0,
-    AES_CRYPTO_ECB_192_MODE,
-    AES_CRYPTO_ECB_128_MODE,
-    AES_CRYPTO_CBC_256_MODE,
-    AES_CRYPTO_CBC_192_MODE,
-    AES_CRYPTO_CBC_128_MODE,
 } csi_aes_mode_t;
 
+/**
+\brief AES state
+*/
 typedef struct {
     uint32_t busy             : 1;        ///< Calculate busy flag
     uint32_t error            : 1;        ///< Calculate error flag
 } csi_aes_state_t;
 
+/**
+\brief AES Context
+*/
 typedef struct {
     uint32_t            key_len_byte;
     uint8_t             key[32];          ///< Data block being processed
@@ -343,11 +346,11 @@ csi_error_t csi_aes_enable_pm(csi_aes_t *aes);
 void csi_aes_disable_pm(csi_aes_t *aes);
 
 /**
-  \brief       Config AES mode dma or slave
-  \param[in]   dam_en    zero disable dma, not zero enable dma 
+  \brief       Config AES data transfer mode
+  \param[in]   mode    \ref csi_des_trans_mode_t 
   \return      None
 */
-void csi_aes_dma_enable(csi_aes_t *aes, uint8_t dma_en);
+void csi_aes_trans_config(csi_aes_t *aes, csi_aes_trans_mode_t mode);
 
 #ifdef __cplusplus
 }
diff --git a/lib/sec_library/include/common.h b/lib/sec_library/include/common.h
index 4cc1bd09..efd5b4a6 100644..100755
--- a/lib/sec_library/include/common.h
+++ b/lib/sec_library/include/common.h
@@ -68,11 +68,13 @@ extern "C" {
     } while (0);
 
 typedef enum {
-    CSI_OK          =  0,
-    CSI_ERROR       = -1,
-    CSI_BUSY        = -2,
-    CSI_TIMEOUT     = -3,
-    CSI_UNSUPPORTED = -4
+    CSI_OK            =  0,
+    CSI_ERROR         = -1,
+    CSI_BUSY          = -2,
+    CSI_TIMEOUT       = -3,
+    CSI_UNSUPPORTED   = -4,
+    CSI_INVALID_PARAM = -5,
+    CSI_CRYPT_FAIL    = -6,
 } csi_error_t;
 
 typedef struct {
@@ -132,9 +134,7 @@ typedef struct {
 
 csi_error_t target_get(csi_dev_tag_t dev_tag, uint32_t idx, csi_dev_t *dev);
 csi_error_t target_get_optimal_dma_channel(void *dma_list, uint32_t ctrl_num, csi_dev_t *parent_dev, void *ch_info);
-//void mdelay(uint32_t ms);
-//void udelay(uint32_t us);
-//void msleep(uint32_t ms);
+void msleep(uint32_t ms);
 
 #ifdef __cplusplus
 }
diff --git a/lib/sec_library/include/core/README.txt b/lib/sec_library/include/core/README.txt
index bb1bf4a3..bb1bf4a3 100644..100755
--- a/lib/sec_library/include/core/README.txt
+++ b/lib/sec_library/include/core/README.txt
diff --git a/lib/sec_library/include/core/cmsis/ARMCM0.h b/lib/sec_library/include/core/cmsis/ARMCM0.h
index 93881d5e..93881d5e 100644..100755
--- a/lib/sec_library/include/core/cmsis/ARMCM0.h
+++ b/lib/sec_library/include/core/cmsis/ARMCM0.h
diff --git a/lib/sec_library/include/core/cmsis/cmsis_compiler.h b/lib/sec_library/include/core/cmsis/cmsis_compiler.h
index fdb1a971..fdb1a971 100644..100755
--- a/lib/sec_library/include/core/cmsis/cmsis_compiler.h
+++ b/lib/sec_library/include/core/cmsis/cmsis_compiler.h
diff --git a/lib/sec_library/include/core/cmsis/cmsis_gcc.h b/lib/sec_library/include/core/cmsis/cmsis_gcc.h
index d86b0a2d..d86b0a2d 100644..100755
--- a/lib/sec_library/include/core/cmsis/cmsis_gcc.h
+++ b/lib/sec_library/include/core/cmsis/cmsis_gcc.h
diff --git a/lib/sec_library/include/core/cmsis/cmsis_version.h b/lib/sec_library/include/core/cmsis/cmsis_version.h
index 660f612a..660f612a 100644..100755
--- a/lib/sec_library/include/core/cmsis/cmsis_version.h
+++ b/lib/sec_library/include/core/cmsis/cmsis_version.h
diff --git a/lib/sec_library/include/core/cmsis/core_cm0.h b/lib/sec_library/include/core/cmsis/core_cm0.h
index fcf27578..fcf27578 100644..100755
--- a/lib/sec_library/include/core/cmsis/core_cm0.h
+++ b/lib/sec_library/include/core/cmsis/core_cm0.h
diff --git a/lib/sec_library/include/core/cmsis/csi_core.h b/lib/sec_library/include/core/cmsis/csi_core.h
index 9082bdf0..9082bdf0 100644..100755
--- a/lib/sec_library/include/core/cmsis/csi_core.h
+++ b/lib/sec_library/include/core/cmsis/csi_core.h
diff --git a/lib/sec_library/include/core/cmsis/system_ARMCM0.h b/lib/sec_library/include/core/cmsis/system_ARMCM0.h
index 7fe7e914..7fe7e914 100644..100755
--- a/lib/sec_library/include/core/cmsis/system_ARMCM0.h
+++ b/lib/sec_library/include/core/cmsis/system_ARMCM0.h
diff --git a/lib/sec_library/include/core/core_801.h b/lib/sec_library/include/core/core_801.h
index 5c55f991..5c55f991 100644..100755
--- a/lib/sec_library/include/core/core_801.h
+++ b/lib/sec_library/include/core/core_801.h
diff --git a/lib/sec_library/include/core/core_802.h b/lib/sec_library/include/core/core_802.h
index 5465ac79..5465ac79 100644..100755
--- a/lib/sec_library/include/core/core_802.h
+++ b/lib/sec_library/include/core/core_802.h
diff --git a/lib/sec_library/include/core/core_803.h b/lib/sec_library/include/core/core_803.h
index c178e14d..c178e14d 100644..100755
--- a/lib/sec_library/include/core/core_803.h
+++ b/lib/sec_library/include/core/core_803.h
diff --git a/lib/sec_library/include/core/core_804.h b/lib/sec_library/include/core/core_804.h
index 4562309c..4562309c 100644..100755
--- a/lib/sec_library/include/core/core_804.h
+++ b/lib/sec_library/include/core/core_804.h
diff --git a/lib/sec_library/include/core/core_805.h b/lib/sec_library/include/core/core_805.h
index 5811da39..5811da39 100644..100755
--- a/lib/sec_library/include/core/core_805.h
+++ b/lib/sec_library/include/core/core_805.h
diff --git a/lib/sec_library/include/core/core_807.h b/lib/sec_library/include/core/core_807.h
index 54010d6c..54010d6c 100644..100755
--- a/lib/sec_library/include/core/core_807.h
+++ b/lib/sec_library/include/core/core_807.h
diff --git a/lib/sec_library/include/core/core_810.h b/lib/sec_library/include/core/core_810.h
index fa4c25e4..fa4c25e4 100644..100755
--- a/lib/sec_library/include/core/core_810.h
+++ b/lib/sec_library/include/core/core_810.h
diff --git a/lib/sec_library/include/core/core_ck610.h b/lib/sec_library/include/core/core_ck610.h
index f6b68dd3..f6b68dd3 100644..100755
--- a/lib/sec_library/include/core/core_ck610.h
+++ b/lib/sec_library/include/core/core_ck610.h
diff --git a/lib/sec_library/include/core/core_ck801.h b/lib/sec_library/include/core/core_ck801.h
index debb17a0..debb17a0 100644..100755
--- a/lib/sec_library/include/core/core_ck801.h
+++ b/lib/sec_library/include/core/core_ck801.h
diff --git a/lib/sec_library/include/core/core_ck802.h b/lib/sec_library/include/core/core_ck802.h
index 7db01a63..7db01a63 100644..100755
--- a/lib/sec_library/include/core/core_ck802.h
+++ b/lib/sec_library/include/core/core_ck802.h
diff --git a/lib/sec_library/include/core/core_ck803.h b/lib/sec_library/include/core/core_ck803.h
index 58352228..58352228 100644..100755
--- a/lib/sec_library/include/core/core_ck803.h
+++ b/lib/sec_library/include/core/core_ck803.h
diff --git a/lib/sec_library/include/core/core_ck807.h b/lib/sec_library/include/core/core_ck807.h
index 98205535..98205535 100644..100755
--- a/lib/sec_library/include/core/core_ck807.h
+++ b/lib/sec_library/include/core/core_ck807.h
diff --git a/lib/sec_library/include/core/core_ck810.h b/lib/sec_library/include/core/core_ck810.h
index 69cdd0d1..69cdd0d1 100644..100755
--- a/lib/sec_library/include/core/core_ck810.h
+++ b/lib/sec_library/include/core/core_ck810.h
diff --git a/lib/sec_library/include/core/core_rv32.h b/lib/sec_library/include/core/core_rv32.h
index a9a0bbf7..a9a0bbf7 100644..100755
--- a/lib/sec_library/include/core/core_rv32.h
+++ b/lib/sec_library/include/core/core_rv32.h
diff --git a/lib/sec_library/include/core/core_rv64.h b/lib/sec_library/include/core/core_rv64.h
index 2facecd3..2facecd3 100644..100755
--- a/lib/sec_library/include/core/core_rv64.h
+++ b/lib/sec_library/include/core/core_rv64.h
diff --git a/lib/sec_library/include/core/csi_gcc.h b/lib/sec_library/include/core/csi_gcc.h
index 5cccffa6..5cccffa6 100644..100755
--- a/lib/sec_library/include/core/csi_gcc.h
+++ b/lib/sec_library/include/core/csi_gcc.h
diff --git a/lib/sec_library/include/core/csi_rv32_gcc.h b/lib/sec_library/include/core/csi_rv32_gcc.h
index 7f38d0d1..7f38d0d1 100644..100755
--- a/lib/sec_library/include/core/csi_rv32_gcc.h
+++ b/lib/sec_library/include/core/csi_rv32_gcc.h
diff --git a/lib/sec_library/include/core/csi_rv64_gcc.h b/lib/sec_library/include/core/csi_rv64_gcc.h
index 0341b768..0341b768 100644..100755
--- a/lib/sec_library/include/core/csi_rv64_gcc.h
+++ b/lib/sec_library/include/core/csi_rv64_gcc.h
diff --git a/lib/sec_library/include/csi_core.h b/lib/sec_library/include/csi_core.h
index b9347a12..b9347a12 100644..100755
--- a/lib/sec_library/include/csi_core.h
+++ b/lib/sec_library/include/csi_core.h
diff --git a/lib/sec_library/include/csi_efuse_api.h b/lib/sec_library/include/csi_efuse_api.h
index 082f9138..082f9138 100644..100755
--- a/lib/sec_library/include/csi_efuse_api.h
+++ b/lib/sec_library/include/csi_efuse_api.h
diff --git a/lib/sec_library/include/csi_sec_img_verify.h b/lib/sec_library/include/csi_sec_img_verify.h
index 9ca97cf6..9ca97cf6 100644..100755
--- a/lib/sec_library/include/csi_sec_img_verify.h
+++ b/lib/sec_library/include/csi_sec_img_verify.h
diff --git a/lib/sec_library/include/des.h b/lib/sec_library/include/des.h
new file mode 100755
index 00000000..feb87959
--- /dev/null
+++ b/lib/sec_library/include/des.h
@@ -0,0 +1,221 @@
+/*
+ * Copyright (C) 2017-2020 Alibaba Group Holding Limited
+ */
+
+/******************************************************************************
+ * @file       drv/des.h
+ * @brief      Header File for DES Driver
+ * @version    V1.0
+ * @date       24. Oct 2022
+ * @model      des
+ ******************************************************************************/
+
+#ifndef _DRV_DES_H_
+#define _DRV_DES_H_
+
+#include <stdint.h>
+#include "common.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*----- Encrypt & Decrypt: Config key length -----*/
+/**
+\brief DES data transfer mode config
+*/
+typedef enum {
+    DES_SLAVE_MODE = 0U,         ///< slave mode
+    DES_DMA_MODE,                ///< dma mode
+} csi_des_trans_mode_t;
+
+/**
+\brief DES key-len-bits type
+*/
+typedef enum {
+    DES_KEY_LEN_BITS_64        = 0,        ///< 64 Data bits
+    DES_KEY_LEN_BITS_128,                  ///< 128 Data bits
+    DES_KEY_LEN_BITS_192,                  ///< 192 Data bits
+} csi_des_key_bits_t;
+
+typedef enum{
+    DES_MODE_ECB    = 0x00000000,
+    DES_MODE_CBC    = 0x20000020,
+    TDES_MODE_ECB   = 0x00000008,
+    TDES_MODE_CBC   = 0x20000028,
+} des_mode_t;
+
+
+#define DES_KEY_LEN_BYTES_32    (32)
+#define DES_KEY_LEN_BYTES_16    (16)
+#define DES_KEY_LEN_BYTES_24    (24)
+#define DES_KEY_LEN_BYTES_8     (8)
+
+#define DES_BLOCK_IV_SIZE       (16)
+#define DES_BLOCK_CRYPTO_SIZE   (8)
+#define TDES_BLOCK_CRYPTO_SIZE  (16)
+
+#define DES_DIR_ENCRYPT         (1)
+#define DES_DIR_DECRYPT         (0)
+
+#define DES_KEY_128_BITS        (0x8)
+#define DES_KEY_192_BITS        (0x10)
+
+/**
+\brief DES State
+*/
+typedef struct {
+    uint32_t busy             : 1;        ///< Calculate busy flag
+    uint32_t error            : 1;        ///< Calculate error flag
+} csi_des_state_t;
+
+/**
+\brief DES Context
+*/
+typedef struct {
+    uint32_t            key_len_byte;
+    uint8_t             key[32];          ///< Data block being processed
+    uint32_t            sca;
+    uint32_t            is_kdf;
+    uint32_t            is_dma;
+} csi_des_context_t;
+
+/**
+\brief DES Ctrl Block
+*/
+typedef struct {
+    csi_des_state_t         state;
+    csi_des_context_t       context;
+    csi_dev_t               dev;
+    void                    *priv;
+} csi_des_t;
+
+/**
+  \brief       Initialize DES interface. Initializes the resources needed for the DES interface
+  \param[in]   des    Handle to operate
+  \param[in]   idx    Device id
+  \return      Error code \ref csi_error_t
+*/
+csi_error_t csi_des_init(csi_des_t *des, uint32_t idx);
+
+/**
+  \brief       De-initialize DES interface. Stops operation and releases the software resources used by the interface
+  \param[in]   des    Dandle to operate
+  \return      None
+*/
+void csi_des_uninit(csi_des_t *des);
+
+/**
+  \brief       Set encrypt key
+  \param[in]   des        Handle to operate
+  \param[in]   key        Pointer to the key buf
+  \param[in]   key_len    Pointer to \ref csi_des_key_bits_t
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_des_set_encrypt_key(csi_des_t *des, void *key, csi_des_key_bits_t key_len);
+
+/**
+  \brief       Set decrypt key
+  \param[in]   des        Handle to operate
+  \param[in]   key        Pointer to the key buf
+  \param[in]   key_len    Pointer to \ref csi_des_key_bits_t
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_des_set_decrypt_key(csi_des_t *des, void *key, csi_des_key_bits_t key_len);
+
+/**
+  \brief       DES ecb encrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_des_ecb_encrypt(csi_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       DES ecb decrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_des_ecb_decrypt(csi_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       DES cbc encrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \param[in]   iv      Init vector
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_des_cbc_encrypt(csi_des_t *des, void *in, void *out, uint32_t size, void *iv) ;
+
+/**
+  \brief       DES cbc decrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \param[in]   iv      Init vector
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_des_cbc_decrypt(csi_des_t *des, void *in, void *out, uint32_t size, void *iv);
+
+/**
+  \brief       TDES ecb encrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_tdes_ecb_encrypt(csi_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       TDES ecb decrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_tdes_ecb_decrypt(csi_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       TDES cbc encrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \param[in]   iv      Init vector
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_tdes_cbc_encrypt(csi_des_t *des, void *in, void *out, uint32_t size, void *iv) ;
+
+/**
+  \brief       TDES cbc decrypt
+  \param[in]   des     Handle to operate
+  \param[in]   in      Pointer to the source data
+  \param[out]  out     Pointer to the result data
+  \param[in]   size    The source data size
+  \param[in]   iv      Init vector
+  \return      Error code \ref Csi_error_t
+*/
+csi_error_t csi_tdes_cbc_decrypt(csi_des_t *des, void *in, void *out, uint32_t size, void *iv);
+
+/**
+  \brief       Config DES mode dma or slave
+  \param[in]   mode    \ref csi_des_trans_mode_t 
+  \return      None
+*/
+void csi_des_trans_config(csi_des_t *des, csi_des_trans_mode_t mode);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _DRV_AES_H_ */
diff --git a/lib/sec_library/include/dev_tag.h b/lib/sec_library/include/dev_tag.h
index aa8b642e..aa8b642e 100644..100755
--- a/lib/sec_library/include/dev_tag.h
+++ b/lib/sec_library/include/dev_tag.h
diff --git a/lib/sec_library/include/device_types.h b/lib/sec_library/include/device_types.h
index 7fd33918..7fd33918 100644..100755
--- a/lib/sec_library/include/device_types.h
+++ b/lib/sec_library/include/device_types.h
diff --git a/lib/sec_library/include/ecc.h b/lib/sec_library/include/ecc.h
index 4c0d3ebc..58540647 100644..100755
--- a/lib/sec_library/include/ecc.h
+++ b/lib/sec_library/include/ecc.h
@@ -20,8 +20,15 @@
 extern "C" {
 #endif
 
-#define ECC_PRIME_CURVE_G_BYTES 64
-#define ECC_PRIME_CURVE_P_BYTES 70
+#define CSI_ECC_PUBKEY_LEN      (65-1)
+#define CSI_ECC_PRIVKEY_LEN     (32)
+#define CSI_ECC_PUBKEYTMP_LEN   (65)
+#define CSI_ECC_RK_LEN          (24) //random
+#define CSI_ECC_SIGNATURE_LEN   (64)
+#define CSI_ECC_DIGEST_LEN      (32)
+
+#define ECC_PRIME_CURVE_G_BYTES (64)
+#define ECC_PRIME_CURVE_P_BYTES (70)
 
 typedef struct {
     uint32_t ecc_curve : 1; ///< supports 256bits curve
@@ -35,11 +42,17 @@ typedef enum {
     ECC_C1C2C3,
 } ecc_cipher_order_e;
 
+/**
+\brief ECC endian mode
+*/
 typedef enum {
     ECC_ENDIAN_LITTLE = 0, ///< Little Endian
     ECC_ENDIAN_BIG         ///< Big Endian
 } ecc_endian_mode_e;
 
+/**
+\brief ECC prime curve type
+*/
 typedef enum {
     ECC_PRIME256V1 = 0,
 } ecc_prime_curve_type;
@@ -59,11 +72,17 @@ typedef enum {
     ECC_EVENT_EXCHANGE_KEY_COMPLETE, ///< Exchange key completed
 } ecc_event_e;
 
+/**
+\brief ECC prime curve param
+*/
 typedef struct {
     ecc_prime_curve_type type;
     uint32_t *p;
 } csi_ecc_prime_curve_t;
 
+/**
+\brief ECC curve type g param
+*/
 typedef struct {
     ecc_prime_curve_type type;
     uint8_t *G;
@@ -77,6 +96,9 @@ typedef struct {
     uint32_t busy : 1; ///< Calculate busy flag
 } csi_ecc_state_t;
 
+/**
+\brief ECC handle
+*/
 typedef struct {
     csi_dev_t       dev;
     void *          cb;
@@ -90,9 +112,8 @@ typedef void (*csi_ecc_callback_t)(ecc_event_e event);
 
 /**
   \brief       Initialize ECC.
-  \param[in]   ecc  ecc handle to operate.
   \param[in]   idx  device id
-  \return      \ref uint32_t
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_init(csi_ecc_t *ecc, uint32_t idx);
 
@@ -106,111 +127,111 @@ void csi_ecc_uninit(csi_ecc_t *ecc);
 /**
   \brief       ecc get capability.
   \param[in]   ecc  Operate handle.
-  \return      \ref uint32_t
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_ecc_config(csi_ecc_t *ecc, ecc_cipher_order_e co,
-                           ecc_endian_mode_e endian);
+csi_error_t csi_ecc_config(csi_ecc_t *ecc, ecc_cipher_order_e co, ecc_endian_mode_e endian);
 
 /**
   \brief       Attach the callback handler to ECC
   \param[in]   ecc  Operate handle.
   \param[in]   cb    Callback function
   \param[in]   arg   User can define it by himself as callback's param
-  \return      Error code \ref csi_error_t
+  \return      Error code Error code \ref csi_error_t
 */
-csi_error_t csi_ecc_attach_callback(csi_ecc_t *ecc, csi_ecc_callback_t cb,
-                                    void *arg);
+csi_error_t csi_ecc_attach_callback(csi_ecc_t *ecc, csi_ecc_callback_t cb, void *arg);
 
 /**
   \brief       Detach the callback handler
   \param[in]   ecc  Operate handle.
+  \return      Error code Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_detach_callback(csi_ecc_t *ecc);
 
 /**
   \brief       ecc get capability.
   \param[in]   ecc  Operate handle.
-  \param[out]   cap  Pointer of ecc_capabilities_t.
-  \return      \ref uint32_t
+  \param[out]  cap  Pointer of ecc_capabilities_t.
+  \return      Error code Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_get_capabilities(csi_ecc_t *ecc, ecc_capabilities_t *cap);
 
+/**
+  \brief       check whether the public key and private key are a pair.
+  \param[in]   ecc       ecc handle to operate.
+  \param[in]   private   Pointer to the ecc private key, alloc by caller.
+  \param[in]   public    Pointer to the ecc public key, alloc by caller.
+  \return      Error code \ref csi_error_t
+*/
 csi_error_t csi_ecc_check_keypair(csi_ecc_t *ecc, uint8_t pubkey[65], uint8_t prikey[32]);
 
 /**
   \brief       generate ecc key.
   \param[in]   ecc       ecc handle to operate.
   \param[out]  private   Pointer to the ecc private key, alloc by caller.
-  \param[out]  public   Pointer to the ecc public key, alloc by caller.
-  \return      \ref uint32_t
+  \param[out]  public    Pointer to the ecc public key, alloc by caller.
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_ecc_gen_key(csi_ecc_t *ecc, uint8_t pubkey[65],
-                            uint8_t prikey[32]);
+csi_error_t csi_ecc_gen_key(csi_ecc_t *ecc, uint8_t pubkey[65], uint8_t prikey[32]);
 
 /**
-  \brief       generate ecc pubkey by privkey.
+  \brief       generate ecc public key by private key.
   \param[in]   ecc       ecc handle to operate.
-  \param[in]   private   Pointer to the ecc private key, alloc by caller.
-  \param[out]  public   Pointer to the ecc public key, alloc by caller.
-  \return      \ref uint32_t
+  \param[out]  private   Pointer to the ecc private key, alloc by caller.
+  \param[out]  public    Pointer to the ecc public key, alloc by caller.
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_ecc_gen_pubkey(csi_ecc_t *ecc, uint8_t pubkey[65],
-                            uint8_t prikey[32]);
+csi_error_t csi_ecc_gen_pubkey(csi_ecc_t *ecc, uint8_t pubkey[65], uint8_t prikey[32]);
 
 /**
   \brief       ecc sign
-  \param[in]   ecc       ecc handle to operate.
-  \param[in]   d       Pointer to the digest.
-  \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
-  \return      \ref uint32_t
+  \param[in]   ecc      ecc handle to operate.
+  \param[in]   d        Pointer to the digest.
+  \param[out]  privkey  Pointer to the private key
+  \param[out]  s        Pointer to the signature
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_ecc_sign(csi_ecc_t *ecc, uint8_t d[32], uint8_t prikey[32],
-                         uint8_t s[64]);
+csi_error_t csi_ecc_sign(csi_ecc_t *ecc, uint8_t d[32], uint8_t prikey[32], uint8_t s[64]);
 
 /**
-  \brief       ecc sign
-  \param[in]   ecc       ecc handle to operate.
-  \param[in]   d       Pointer to the digest.
-  \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
-  \return      \ref uint32_t
+  \brief       ecc sign asybnc
+  \param[in]   ecc      ecc handle to operate.
+  \param[in]   d        Pointer to the digest.
+  \param[out]  privkey  Pointer to the private key
+  \param[out]  s        Pointer to the signature
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_ecc_sign_async(csi_ecc_t *ecc, uint8_t d[32],
-                               uint8_t prikey[32], uint8_t s[64]);
+csi_error_t csi_ecc_sign_async(csi_ecc_t *ecc, uint8_t d[32], uint8_t prikey[32], uint8_t s[64]);
 
 /* TODO */
 /**
   \brief       ecc verify
-  \param[in]   ecc       ecc handle to operate.
-  \param[in]   d       Pointer to the digest.
-  \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
-  \return      verify result
+  \param[in]   ecc      ecc handle to operate.
+  \param[in]   d        Pointer to the digest.
+  \param[out]  privkey  Pointer to the private key
+  \param[out]  s        Pointer to the signature
+  \return      verify result 
 */
-bool csi_ecc_verify(csi_ecc_t *ecc, uint8_t d[32], uint8_t pubkey[65],
-                    uint8_t s[64]);
+bool csi_ecc_verify(csi_ecc_t *ecc, uint8_t d[32], uint8_t pubkey[65], uint8_t s[64]);
 
 /**
   \brief       ecc verify
-  \param[in]   ecc       ecc handle to operate.
-  \param[in]   d       Pointer to the digest.
-  \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
+  \param[in]   ecc      ecc handle to operate.
+  \param[in]   d        Pointer to the digest.
+  \param[out]  privkey  Pointer to the private key
+  \param[out]  s        Pointer to the signature
   \return      verify result
 */
-bool csi_ecc_verify_async(csi_ecc_t *ecc, uint8_t d[32], uint8_t pubkey[65],
-                          uint8_t s[64]);
+bool csi_ecc_verify_async(csi_ecc_t *ecc, uint8_t d[32], uint8_t pubkey[65], uint8_t s[64]);
 
 /**
   \brief       ecc encrypto
-  \param[in]   ecc       ecc handle to operate.
-  \param[in]   Plain       Pointer to the plaintext.
-  \param[in]  PlainByteLen plaintext len
-  \param[in]  pubKey public key.
-  \param[out]  Cipher Pointer to the chipher
-  \param[out]  CipherByteLen Pointer to the chipher len.
-  \return      uint32_t
+  \param[in]   ecc              ecc handle to operate.
+  \param[in]   Plain            Pointer to the plaintext.
+  \param[in]   PlainByteLen     plaintext len
+  \param[in]   pubKey           public key.
+  \param[out]  Cipher           Pointer to the chipher
+  \param[out]  CipherByteLen    Pointer to the chipher len.
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_encrypt(csi_ecc_t *ecc, uint8_t *Plain,
                             uint32_t PlainByteLen, uint8_t pubKey[65],
@@ -218,13 +239,13 @@ csi_error_t csi_ecc_encrypt(csi_ecc_t *ecc, uint8_t *Plain,
 
 /**
   \brief       ecc encrypto
-  \param[in]   ecc       ecc handle to operate.
-  \param[in]  Cipher Pointer to the chipher
-  \param[in]  CipherByteLen chipher len.
-  \param[in]  prikey private key.
-  \param[out]   Plain       Pointer to the plaintext.
-  \param[out]  PlainByteLen plaintext len
-  \return      uint32_t
+  \param[in]   ecc              ecc handle to operate.
+  \param[in]   Cipher           Pointer to the chipher
+  \param[in]   CipherByteLen    chipher len.
+  \param[in]   prikey           private key.
+  \param[out]  Plain            Pointer to the plaintext.
+  \param[out]  PlainByteLen     plaintext len
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_decrypt(csi_ecc_t *ecc, uint8_t *Cipher,
                             uint32_t CipherByteLen, uint8_t prikey[32],
@@ -233,7 +254,7 @@ csi_error_t csi_ecc_decrypt(csi_ecc_t *ecc, uint8_t *Cipher,
 /**
   \brief       ecc key exchange
   \param[in]   ecc       ecc handle to operate.
-  \return      uint32_t
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_exchangekey(csi_ecc_t *ecc, ecc_exchange_role_e role,
                                 uint8_t *dA, uint8_t *PB, uint8_t *rA,
@@ -244,7 +265,7 @@ csi_error_t csi_ecc_exchangekey(csi_ecc_t *ecc, ecc_exchange_role_e role,
 /**
   \brief       ecc key exchange get Z.
   \param[in]   ecc       ecc handle to operate.
-  \return      uint32_t
+  \return      Error code Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_getZ(csi_ecc_t *ecc, uint8_t *ID, uint32_t byteLenofID,
                          uint8_t pubKey[65], uint8_t Z[32]);
@@ -252,7 +273,7 @@ csi_error_t csi_ecc_getZ(csi_ecc_t *ecc, uint8_t *ID, uint32_t byteLenofID,
 /**
   \brief       ecc key exchange get E
   \param[in]   ecc       ecc handle to operate.
-  \return      uint32_t
+  \return      Error code Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_getE(csi_ecc_t *ecc, uint8_t *M, uint32_t byteLen,
                          uint8_t Z[32], uint8_t E[32]);
@@ -261,14 +282,14 @@ csi_error_t csi_ecc_getE(csi_ecc_t *ecc, uint8_t *M, uint32_t byteLen,
   \brief       Get ECC state.
   \param[in]   ecc      ECC handle to operate.
   \param[out]  state    ECC state \ref csi_ecc_state_t.
-  \return      Error code \ref csi_error_t
+  \return      Error code Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_get_state(csi_ecc_t *ecc, csi_ecc_state_t *state);
 
 /**
   \brief       Enable ecc power manage
   \param[in]   ecc  ECC handle to operate.
-  \return      Error code \ref csi_error_t
+  \return      Error code Error code \ref csi_error_t
 */
 csi_error_t csi_ecc_enable_pm(csi_ecc_t *ecc);
 
diff --git a/lib/sec_library/include/ecdh.h b/lib/sec_library/include/ecdh.h
index 06258ca1..cf1db702 100644..100755
--- a/lib/sec_library/include/ecdh.h
+++ b/lib/sec_library/include/ecdh.h
@@ -20,19 +20,21 @@
 extern "C" {
 #endif
 
+#define CSI_ECDH_PUBKEY_LEN   (65-1)
+#define CSI_ECDH_PRIVKEY_LEN  (32)
+#define CSI_ECDH_SHARE_LEN    (64)
+#define CSI_ECDH_SHAREKEY_LEN (32)
 
 /**
   \brief       ecdh cacl share secret
-  \param[in]  ecc ecc handle to operate.
-  \param[in]  pubkey Pointer to the A public key.
-  \param[in]  privkey Pointer to the B private key.
-  \param[out] shareKey Pointer to the share secret.
-  \param[out] len length of the share secret.
-  \return     \ref uint32_t
+  \param[in]  ecc       ecc handle to operate.
+  \param[in]  pubkey    Pointer to the A public key.
+  \param[in]  prikey    Pointer to the B private key.
+  \param[out] shareKey  Pointer to the share secret.
+  \param[out] len       length of the share secret.
+  \return     Error code \ref csi_error_t
 */
-csi_error_t csi_ecdh_calc_secret(csi_ecc_t *ecc, uint8_t privkey[32],
-                            uint8_t pubkey[65], uint8_t shareKey[32], 
-                            uint32_t *len);
+csi_error_t csi_ecdh_calc_secret(csi_ecc_t *ecc, uint8_t privkey[32], uint8_t pubkey[65], uint8_t shareKey[32], uint32_t *len);
 
 #ifdef __cplusplus
 extern "C" {
diff --git a/lib/sec_library/include/kdf.h b/lib/sec_library/include/kdf.h
index 7f8f5964..7f8f5964 100644..100755
--- a/lib/sec_library/include/kdf.h
+++ b/lib/sec_library/include/kdf.h
diff --git a/lib/sec_library/include/keyram.h b/lib/sec_library/include/keyram.h
index f8127417..f8127417 100644..100755
--- a/lib/sec_library/include/keyram.h
+++ b/lib/sec_library/include/keyram.h
diff --git a/lib/sec_library/include/list.h b/lib/sec_library/include/list.h
index 80028214..80028214 100644..100755
--- a/lib/sec_library/include/list.h
+++ b/lib/sec_library/include/list.h
diff --git a/lib/sec_library/include/rambus.h b/lib/sec_library/include/rambus.h
index 780d774b..780d774b 100644..100755
--- a/lib/sec_library/include/rambus.h
+++ b/lib/sec_library/include/rambus.h
diff --git a/lib/sec_library/include/rng.h b/lib/sec_library/include/rng.h
index 1b9a911b..1b9a911b 100644..100755
--- a/lib/sec_library/include/rng.h
+++ b/lib/sec_library/include/rng.h
diff --git a/lib/sec_library/include/rsa.h b/lib/sec_library/include/rsa.h
index bbb67315..7c842663 100644..100755
--- a/lib/sec_library/include/rsa.h
+++ b/lib/sec_library/include/rsa.h
@@ -18,17 +18,17 @@ extern "C" {
 #include <stdint.h>
 #include "common.h"
 
-#define RSA_PRIME_256_BIT_LEN        128
-#define RSA_PRIME_512_BIT_LEN        256
-#define RSA_PRIME_1024_BIT_LEN       512
-#define RSA_PRIME_2048_BIT_LEN       1024
-#define RSA_PRIME_4096_BIT_LEN       2048
-
-#define RSA_256_BYTE_LEN        32
-#define RSA_512_BYTE_LEN        64
-#define RSA_1024_BYTE_LEN       128
-#define RSA_2048_BYTE_LEN       256
-#define RSA_4096_BYTE_LEN       512
+#define RSA_PRIME_256_BIT_LEN   (128)
+#define RSA_PRIME_512_BIT_LEN   (256)
+#define RSA_PRIME_1024_BIT_LEN  (512)
+#define RSA_PRIME_2048_BIT_LEN  (1024)
+#define RSA_PRIME_4096_BIT_LEN  (2048)
+
+#define RSA_256_BYTE_LEN        (32)
+#define RSA_512_BYTE_LEN        (64)
+#define RSA_1024_BYTE_LEN       (128)
+#define RSA_2048_BYTE_LEN       (256)
+#define RSA_4096_BYTE_LEN       (512)
 #define RSA_EM_BYTE_LEN         RSA_4096_BYTE_LEN
 
 #define SHA256_DIGEST_BYTE_LEN  32
@@ -301,7 +301,7 @@ csi_error_t csi_rsa_get_publickey(csi_rsa_t *rsa, void *p, uint32_t p_byte_len,
 /**
   \brief       Generation rsa keyparis 
   \param[in]   rsa          rsa handle to operate.
-  \param[in]   context   Pointer to the rsa context
+  \param[in]   context      Pointer to the rsa context
   \param[in]   keybits_len  Pointer to the publickey bits length
   \return      \ref csi_error_t
 */
diff --git a/lib/sec_library/include/sec_crypto_aes.h b/lib/sec_library/include/sec_crypto_aes.h
index 51ccebcd..0e5714b1 100755
--- a/lib/sec_library/include/sec_crypto_aes.h
+++ b/lib/sec_library/include/sec_crypto_aes.h
@@ -31,6 +31,17 @@
 extern "C" {
 #endif
 
+/**
+\brief AES data transfer mode config
+*/
+typedef enum {
+    SC_AES_SLAVE_MODE = 0U,         ///< slave mode
+    SC_AES_DMA_MODE,                ///< dma mode
+} sc_aes_trans_mode_t;
+
+/**
+\brief AES key-len-bits type
+*/
 typedef enum {
     SC_AES_KEY_LEN_BITS_128 = 0U, ///< 128 Data bits
     SC_AES_KEY_LEN_BITS_192,      ///< 192 Data bits
@@ -297,7 +308,10 @@ uint32_t sc_aes_ccm_encrypt(sc_aes_t *aes, void *in, void *out,uint32_t size, ui
 */
 uint32_t sc_aes_ccm_decrypt(sc_aes_t *aes, void *in, void *out,uint32_t size, uint32_t add_len, void *iv, uint8_t* tag_out);
 
-void sc_aes_dma_enable(sc_aes_t *aes, uint8_t en);
+/**
+  \brief       Aes data transfer config
+*/
+void sc_aes_trans_config(sc_aes_t *aes, sc_aes_trans_mode_t mode) ;
 
 #ifdef __cplusplus
 }
diff --git a/lib/sec_library/include/sec_crypto_common.h b/lib/sec_library/include/sec_crypto_common.h
index f95322fd..f95322fd 100644..100755
--- a/lib/sec_library/include/sec_crypto_common.h
+++ b/lib/sec_library/include/sec_crypto_common.h
diff --git a/lib/sec_library/include/sec_crypto_des.h b/lib/sec_library/include/sec_crypto_des.h
new file mode 100755
index 00000000..0b077412
--- /dev/null
+++ b/lib/sec_library/include/sec_crypto_des.h
@@ -0,0 +1,205 @@
+/*
+ * Copyright (C) 2017-2022 Alibaba Group Holding Limited
+ */
+/******************************************************************************
+ * @file     sec_crypt0_des.h
+ * @brief    Header File for DES
+ * @version  V1.0
+ * @date     24. Oct 2022
+ * @model    des
+ ******************************************************************************/
+#ifndef _SC_DES_H_
+#define _SC_DES_H_
+
+#include "sec_include_config.h"
+#include <stdint.h>
+#include "sec_crypto_errcode.h"
+
+#ifdef CONFIG_SYSTEM_SECURE
+#ifdef SEC_LIB_VERSION
+#include <drv/des.h>
+#else
+#include "des.h"
+#endif
+#endif
+
+#ifdef CONFIG_SEC_CRYPTO_DES_SW
+#include "crypto_des.h"
+#endif
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/**
+\brief DES data transfer mode config
+*/
+typedef enum {
+    SC_DES_SLAVE_MODE = 0U,         ///< slave mode
+    SC_DES_DMA_MODE,                ///< dma mode
+} sc_des_trans_mode_t;
+
+/**
+\brief DES key-len-bits type
+*/
+typedef enum {
+    SC_DES_KEY_LEN_BITS_64 = 0U,    ///< 64 Data bits
+    SC_DES_KEY_LEN_BITS_128,        ///< 128 Data bits
+    SC_TDES_KEY_LEN_BITS_192,       ///< 192 Data bits
+} sc_des_key_bits_t;
+
+/**
+\brief DES Ctrl Block
+*/
+typedef struct {
+#ifdef CONFIG_SYSTEM_SECURE
+#ifdef CONFIG_CSI_V1
+    des_handle_t  handle;
+    unsigned char key[32];
+    unsigned int  key_len;
+#endif
+#ifdef CONFIG_CSI_V2
+    csi_des_t     csi_des;
+    //unsigned char sc_ctx[SC_DES_CTX_SIZE];
+#endif
+#endif
+#if defined(CONFIG_TEE_CA)
+    unsigned char key[32];
+    unsigned int  key_len;
+#endif
+#if defined(CONFIG_SEC_CRYPTO_DES_SW)
+    sc_mbedtls_des_context des_ctx;
+#endif
+    //void *ctx;
+} sc_des_t;
+
+// Function documentation
+/**
+  \brief       Initialize DES Interface. Initializes the resources needed for the DES interface
+  \param[in]   des    operate handle
+  \param[in]   idx    device id
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_des_init(sc_des_t *des, uint32_t idx);
+
+/**
+  \brief       De-initialize DES Interface. stops operation and releases the software resources used by the interface
+  \param[in]   des    handle to operate
+  \return      None
+*/
+void sc_des_uninit(sc_des_t *des);
+
+/**
+  \brief       Set encrypt key
+  \param[in]   des        handle to operate
+  \param[in]   key        Pointer to the key buf
+  \param[in]   key_len    Pointer to \ref sc_des_key_bits_t
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_des_set_encrypt_key(sc_des_t *des, void *key, sc_des_key_bits_t key_len);
+
+/**
+  \brief       Set decrypt key
+  \param[in]   des        handle to operate
+  \param[in]   key        Pointer to the key buf
+  \param[in]   key_len    Pointer to \ref sc_des_key_bits_t
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_des_set_decrypt_key(sc_des_t *des, void *key, sc_des_key_bits_t key_len);
+
+/**
+  \brief       Des ecb encrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_des_ecb_encrypt(sc_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       Des ecb decrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_des_ecb_decrypt(sc_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       Des cbc encrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \param[in]   iv      init vector
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_des_cbc_encrypt(sc_des_t *des, void *in, void *out, uint32_t size, void *iv);
+
+/**
+  \brief       Des cbc decrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \param[in]   iv      init vector
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_des_cbc_decrypt(sc_des_t *des, void *in, void *out, uint32_t size, void *iv);
+
+/**
+  \brief       TDes ecb encrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_tdes_ecb_encrypt(sc_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       TDes ecb decrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_tdes_ecb_decrypt(sc_des_t *des, void *in, void *out, uint32_t size);
+
+/**
+  \brief       TDes cbc encrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \param[in]   iv      init vector
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_tdes_cbc_encrypt(sc_des_t *des, void *in, void *out, uint32_t size, void *iv);
+
+/**
+  \brief       TDes cbc decrypt
+  \param[in]   des     handle to operate
+  \param[in]   in      Pointer to the Source data
+  \param[out]  out     Pointer to the Result data
+  \param[in]   size    the Source data size
+  \param[in]   iv      init vector
+  \return      error code \ref uint32_t
+*/
+uint32_t sc_tdes_cbc_decrypt(sc_des_t *des, void *in, void *out, uint32_t size, void *iv);
+
+/**
+  \brief       Config DES mode dma or slave
+  \param[in]   mode    \ref sc_des_trans_mode_t 
+  \return      None
+*/
+void sc_des_trans_config(sc_des_t *des, sc_des_trans_mode_t mode) ;
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _SC_DES_H_ */
diff --git a/lib/sec_library/include/sec_crypto_ecc.h b/lib/sec_library/include/sec_crypto_ecc.h
index 04fae214..04fae214 100644..100755
--- a/lib/sec_library/include/sec_crypto_ecc.h
+++ b/lib/sec_library/include/sec_crypto_ecc.h
diff --git a/lib/sec_library/include/sec_crypto_ecdh.h b/lib/sec_library/include/sec_crypto_ecdh.h
index 83f52f8c..83f52f8c 100644..100755
--- a/lib/sec_library/include/sec_crypto_ecdh.h
+++ b/lib/sec_library/include/sec_crypto_ecdh.h
diff --git a/lib/sec_library/include/sec_crypto_kdf.h b/lib/sec_library/include/sec_crypto_kdf.h
index 1f08fd3a..1f08fd3a 100644..100755
--- a/lib/sec_library/include/sec_crypto_kdf.h
+++ b/lib/sec_library/include/sec_crypto_kdf.h
diff --git a/lib/sec_library/include/sec_crypto_mac.h b/lib/sec_library/include/sec_crypto_mac.h
index 233ebdc4..dd82105f 100644..100755
--- a/lib/sec_library/include/sec_crypto_mac.h
+++ b/lib/sec_library/include/sec_crypto_mac.h
@@ -15,15 +15,15 @@
 #include "sec_crypto_errcode.h"
 #include "sec_crypto_sha.h"
 
-#define SC_MAC_KEY_LEN_MAX 64
-#define HMAC_SHA1_BLOCK_SIZE 64
-#define HMAC_SHA224_BLOCK_SIZE 64
-#define HMAC_SM3_BLOCK_SIZE 64
-#define HMAC_SHA256_BLOCK_SIZE 64
-#define HMAC_MD5_BLOCK_SIZE 64
-#define HMAC_SHA384_BLOCK_SIZE 128
-#define HMAC_SHA512_BLOCK_SIZE 128
-#define HMAC_MAX_BLOCK_SIZE 128
+#define SC_MAC_KEY_LEN_MAX      (64)
+#define HMAC_SHA1_BLOCK_SIZE    (64)
+#define HMAC_SHA224_BLOCK_SIZE  (64)
+#define HMAC_SM3_BLOCK_SIZE     (64)
+#define HMAC_SHA256_BLOCK_SIZE  (64)
+#define HMAC_MD5_BLOCK_SIZE     (64)
+#define HMAC_SHA384_BLOCK_SIZE  (128)
+#define HMAC_SHA512_BLOCK_SIZE  (128)
+#define HMAC_MAX_BLOCK_SIZE     (128)
 
 #ifdef __cplusplus
 extern "C" {
@@ -44,7 +44,7 @@ typedef struct {
 /**
   \brief       Initialize MAC Interface. Initializes the resources needed for the MAC interface
   \param[in]   mac  operate handle.
-  \param[in]   idx index of mac
+  \param[in]   idx  index of mac
   \return      error code \ref uint32_t
 */
 uint32_t sc_mac_init(sc_mac_t *mac, uint32_t idx);
@@ -57,23 +57,22 @@ uint32_t sc_mac_init(sc_mac_t *mac, uint32_t idx);
 void sc_mac_uninit(sc_mac_t *mac);
 
 /**
-  \brief       MAC set key function.
-  \param[in]   mac mac handle to operate.
-  \param[in]   key Pointer to the mac key.
-  \param[in]   key_len Length of key.
+  \brief       MAC      set key function.
+  \param[in]   mac      mac handle to operate.
+  \param[in]   key      Pointer to the mac key.
+  \param[in]   key_len  Length of key.
   \return      error code
 */
 uint32_t sc_mac_set_key(sc_mac_t *mac, uint8_t *key, uint32_t key_len);
 
 /**
   \brief       MAC operation function.
-  \param[in]   mac mac handle to operate.
-  \param[in]   mode sc_sha_mode_t.
-  \param[in]   msg Pointer to the mac input message.
-  \param[in]   msg_len Length of msg.
-  \param[out]  out mac buffer, malloc by caller.
-  \param[out]  out_len, out mac length,
-	should 32 bytes if HMAC_SHA256 mode.
+  \param[in]   mac      mac handle to operate.
+  \param[in]   mode     sc_sha_mode_t.
+  \param[in]   msg      Pointer to the mac input message.
+  \param[in]   msg_len  Length of msg.
+  \param[out]  out      mac buffer, malloc by caller.
+  \param[out]  out_len  out mac length, should 32 bytes if HMAC_SHA256 mode.
   \return      error code
 */
 uint32_t sc_mac_calc(sc_mac_t *mac, sc_sha_mode_t mode, uint8_t *msg,
@@ -81,35 +80,32 @@ uint32_t sc_mac_calc(sc_mac_t *mac, sc_sha_mode_t mode, uint8_t *msg,
 
 /**
   \brief       MAC start operation function.
-  \param[in]   mac mac handle to operate.
-  \param[in]   context mac context pointer.
-  \param[in]   mode sc_sha_mode_t.
+  \param[in]   mac 		  mac handle to operate.
+  \param[in]   context 	mac context pointer.
+  \param[in]   mode 	  sc_sha_mode_t.
   \return      error code
 */
-uint32_t sc_mac_start(sc_mac_t *mac, sc_mac_context_t *context,
-		      sc_sha_mode_t mode);
+uint32_t sc_mac_start(sc_mac_t *mac, sc_mac_context_t *context, sc_sha_mode_t mode);
 
 /**
   \brief       MAC start operation function.
-  \param[in]   mac mac handle to operate.
-  \param[in]   context mac context pointer.
-  \param[in]   msg Pointer to the mac input message.
-  \param[in]   msg_len Length of msg.
+  \param[in]   mac      mac handle to operate.
+  \param[in]   context  mac context pointer.
+  \param[in]   msg      Pointer to the mac input message.
+  \param[in]   msg_len  Length of msg.
   \return      error code
 */
-uint32_t sc_mac_update(sc_mac_t *mac, sc_mac_context_t *context, uint8_t *msg,
-		       uint32_t msg_len);
+uint32_t sc_mac_update(sc_mac_t *mac, sc_mac_context_t *context, uint8_t *msg, uint32_t msg_len);
 
 /**
   \brief       MAC start operation function.
-  \param[in]   mac mac handle to operate.
-  \param[in]   context mac context pointer.
-  \param[out]  out mac buffer, malloc by caller.
-  \param[out]  out_len, out mac length,
+  \param[in]   mac 		mac handle to operate.
+  \param[in]   context 	mac context.
+  \param[out]  out 		mac buffer, malloc by caller.
+  \param[out]  out_len  out mac length,
   \return      error code
 */
-uint32_t sc_mac_finish(sc_mac_t *mac, sc_mac_context_t *context, uint8_t *out,
-		       uint32_t *out_len);
+uint32_t sc_mac_finish(sc_mac_t *mac, sc_mac_context_t *context, uint8_t *out, uint32_t *out_len);
 #ifdef __cplusplus
 }
 #endif
diff --git a/lib/sec_library/include/sec_crypto_sha.h b/lib/sec_library/include/sec_crypto_sha.h
index 09d71a08..3d45103c 100755
--- a/lib/sec_library/include/sec_crypto_sha.h
+++ b/lib/sec_library/include/sec_crypto_sha.h
@@ -44,13 +44,13 @@ extern "C" {
 /*----- SHA Control Codes: Mode -----*/
 typedef enum {
     SC_SHA_MODE_SHA1 = 1U,  ///< SHA_1 mode
-    SC_SHA_MODE_256,     ///< SHA_256 mode
-    SC_SHA_MODE_224,     ///< SHA_224 mode
-    SC_SHA_MODE_512,     ///< SHA_512 mode
-    SC_SHA_MODE_384,     ///< SHA_384 mode
-    SC_SHA_MODE_512_256, ///< SHA_512_256 mode
-    SC_SHA_MODE_512_224, ///< SHA_512_224 mode
-    SC_SHA_MODE_MD5,     ///< MD5 mode
+    SC_SHA_MODE_256,        ///< SHA_256 mode
+    SC_SHA_MODE_224,        ///< SHA_224 mode
+    SC_SHA_MODE_512,        ///< SHA_512 mode
+    SC_SHA_MODE_384,        ///< SHA_384 mode
+    SC_SHA_MODE_512_256,    ///< SHA_512_256 mode
+    SC_SHA_MODE_512_224,    ///< SHA_512_224 mode
+    SC_SHA_MODE_MD5,        ///< MD5 mode
     SC_SM3_MODE,
 } sc_sha_mode_t;
 
@@ -125,7 +125,7 @@ void sc_sha_uninit(sc_sha_t *sha);
 
 /**
   \brief       attach the callback handler to SHA
-  \param[in]   sha  operate handle.
+  \param[in]   sha      operate handle.
   \param[in]   callback callback function
   \param[in]   arg      callback's param
   \return      error code
@@ -165,8 +165,7 @@ uint32_t sc_sha_update(sc_sha_t *sha, sc_sha_context_t *context, const void *inp
   \param[in]   size    the data size
   \return      error code \ref uint32_t
 */
-uint32_t sc_sha_update_async(sc_sha_t *sha, sc_sha_context_t *context, const void *input,
-                             uint32_t size);
+uint32_t sc_sha_update_async(sc_sha_t *sha, sc_sha_context_t *context, const void *input, uint32_t size);
 
 /**
   \brief       finish the engine
diff --git a/lib/sec_library/include/sec_crypto_sm2.h b/lib/sec_library/include/sec_crypto_sm2.h
index 17be90b3..db04880b 100755
--- a/lib/sec_library/include/sec_crypto_sm2.h
+++ b/lib/sec_library/include/sec_crypto_sm2.h
@@ -77,7 +77,7 @@ typedef void (*sc_sm2_callback_t)(sc_sm2_event_e event);
   \brief       Initialize SM2.
   \param[in]   sm2  sm2 handle to operate.
   \param[in]   idx  device id
-  \return      \ref uint32_t
+  \return      Error code \ref uint32_t
 */
 uint32_t sc_sm2_init(sc_sm2_t *sm2, uint32_t idx);
 
@@ -91,14 +91,13 @@ void sc_sm2_uninit(sc_sm2_t *sm2);
 /**
   \brief       sm2 get capability.
   \param[in]   sm2  Operate handle.
-  \return      \ref uint32_t
+  \return      Error code \ref uint32_t
 */
-uint32_t sc_sm2_config(sc_sm2_t *sm2, sc_sm2_cipher_order_e co,
-                       sc_sm2_endian_mode_e endian);
+uint32_t sc_sm2_config(sc_sm2_t *sm2, sc_sm2_cipher_order_e co, sc_sm2_endian_mode_e endian);
 
 /**
   \brief       Attach the callback handler to SM2
-  \param[in]   sm2  Operate handle.
+  \param[in]   sm2   Operate handle.
   \param[in]   cb    Callback function
   \param[in]   arg   User can define it by himself as callback's param
   \return      Error code \ref uint32_t
@@ -114,91 +113,92 @@ void sc_sm2_detach_callback(sc_sm2_t *sm2);
 /**
   \brief       sm2 get capability.
   \param[in]   sm2  Operate handle.
-  \param[out]   cap  Pointer of sc_sm2_capabilities_t.
-  \return      \ref uint32_t
+  \param[out]  cap  Pointer of sc_sm2_capabilities_t.
+  \return      Error code \ref uint32_t
 */
 uint32_t sc_sm2_get_capabilities(sc_sm2_t *sm2, sc_sm2_capabilities_t *cap);
 
-uint32_t sc_sm2_check_keypair(sc_sm2_t *sm2, uint8_t pubkey[65],
-                              uint8_t prikey[32]);
+/**
+  \brief       check whether the public key and private key are a pair.
+  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   private   Pointer to the sm2 private key, alloc by caller.
+  \param[in]   public    Pointer to the sm2 public key, alloc by caller.
+  \return      Error code \ref uint32_t
+*/
+uint32_t sc_sm2_check_keypair(sc_sm2_t *sm2, uint8_t pubkey[65], uint8_t prikey[32]);
 
 /**
   \brief       generate sm2 key.
   \param[in]   sm2       sm2 handle to operate.
   \param[out]  private   Pointer to the sm2 private key, alloc by caller.
-  \param[out]  public   Pointer to the sm2 public key, alloc by caller.
-  \return      \ref uint32_t
+  \param[out]  public    Pointer to the sm2 public key, alloc by caller.
+  \return      Error code \ref uint32_t
 */
 uint32_t sc_sm2_gen_key(sc_sm2_t *sm2, uint8_t pubkey[65], uint8_t prikey[32]);
 
 /**
   \brief       sm2 sign
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
-  \return      \ref uint32_t
+  \param[out]  s       Pointer to the signature
+  \return      Error code \ref uint32_t
 */
-uint32_t sc_sm2_sign(sc_sm2_t *sm2, uint8_t d[32], uint8_t prikey[32],
-                     uint8_t s[64]);
+uint32_t sc_sm2_sign(sc_sm2_t *sm2, uint8_t d[32], uint8_t prikey[32], uint8_t s[64]);
 
 /**
   \brief       sm2 sign
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
-  \return      \ref uint32_t
+  \param[out]  s       Pointer to the signature
+  \return      Error code \ref uint32_t
 */
-uint32_t sc_sm2_sign_async(sc_sm2_t *sm2, uint8_t d[32], uint8_t prikey[32],
-                           uint8_t s[64]);
+uint32_t sc_sm2_sign_async(sc_sm2_t *sm2, uint8_t d[32], uint8_t prikey[32], uint8_t s[64]);
 
 /* TODO */
 /**
   \brief       sm2 verify
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
+  \param[out]  s       Pointer to the signature
   \return      verify result
 */
-bool sc_sm2_verify(sc_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65],
-                   uint8_t s[64]);
+bool sc_sm2_verify(sc_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65], uint8_t s[64]);
 
 /**
   \brief       sm2 verify
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
+  \param[out]  s       Pointer to the signature
   \return      verify result
 */
-bool sc_sm2_verify_async(sc_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65],
-                         uint8_t s[64]);
+bool sc_sm2_verify_async(sc_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65], uint8_t s[64]);
 
 /**
   \brief       sm2 encrypto
-  \param[in]   sm2       sm2 handle to operate.
-  \param[in]   plain       Pointer to the plaintext.
-  \param[in]  PlainByteLen plaintext len
-  \param[in]  pubKey public key.
-  \param[out]  cipher Pointer to the chipher
-  \param[out]  cipher_byte_len Pointer to the chipher len.
-  \return      uint32_t
+  \param[in]   sm2              sm2 handle to operate.
+  \param[in]   plain            Pointer to the plaintext.
+  \param[in]   PlainByteLen     plaintext len
+  \param[in]   pubKey           public key.
+  \param[out]  cipher           Pointer to the chipher
+  \param[out]  cipher_byte_len  Pointer to the chipher len.
+  \return      Error code \ref uint32_t
 */
 uint32_t sc_sm2_encrypt(sc_sm2_t *sm2, uint8_t *plain, uint32_t plain_len,
-                        uint8_t pubKey[65], uint8_t *cipher,
-                        uint32_t *cipher_len);
+                        uint8_t pubKey[65], uint8_t *cipher, uint32_t *cipher_len);
 
 /**
   \brief       sm2 encrypto
-  \param[in]   sm2       sm2 handle to operate.
-  \param[in]  cipher Pointer to the chipher
-  \param[in]  CipherByteLen chipher len.
-  \param[in]  prikey private key.
-  \param[out]   plain       Pointer to the plaintext.
-  \param[out]  PlainByteLen plaintext len
-  \return      uint32_t
+  \param[in]   sm2              sm2 handle to operate.
+  \param[in]   cipher           Pointer to the chipher
+  \param[in]   CipherByteLen    chipher len.
+  \param[in]   prikey           private key.
+  \param[out]  plain            Pointer to the plaintext.
+  \param[out]  PlainByteLen     plaintext len
+  \return      Error code \ref uint32_t
 */
 uint32_t sc_sm2_decrypt(sc_sm2_t *sm2, uint8_t *cipher, uint32_t cipher_len,
                         uint8_t prikey[32], uint8_t *plain,
@@ -207,7 +207,7 @@ uint32_t sc_sm2_decrypt(sc_sm2_t *sm2, uint8_t *cipher, uint32_t cipher_len,
 /**
   \brief       sm2 key exchange
   \param[in]   sm2       sm2 handle to operate.
-  \return      uint32_t
+  \return      Error code \ref uint32_t
 */
 uint32_t sc_sm2_exchangekey(sc_sm2_t *sm2, sc_sm2_exchange_role_e role,
                             uint8_t *da, uint8_t *pb, uint8_t *ra1, uint8_t *ra,
@@ -218,7 +218,7 @@ uint32_t sc_sm2_exchangekey(sc_sm2_t *sm2, sc_sm2_exchange_role_e role,
 /**
   \brief       sm2 key exchange get Z.
   \param[in]   sm2       sm2 handle to operate.
-  \return      uint32_t
+  \return      Error code \ref uint32_t
 */
 uint32_t sc_sm2_getZ(sc_sm2_t *sm2, uint8_t *id, uint32_t id_len,
                      uint8_t pubkey[65], uint8_t z[32]);
@@ -226,10 +226,9 @@ uint32_t sc_sm2_getZ(sc_sm2_t *sm2, uint8_t *id, uint32_t id_len,
 /**
   \brief       sm2 key exchange get E
   \param[in]   sm2       sm2 handle to operate.
-  \return      uint32_t
+  \return      Error code \ref uint32_t
 */
-uint32_t sc_sm2_getE(sc_sm2_t *sm2, uint8_t *m, uint32_t len, uint8_t z[32],
-                     uint8_t e[32]);
+uint32_t sc_sm2_getE(sc_sm2_t *sm2, uint8_t *m, uint32_t len, uint8_t z[32], uint8_t e[32]);
 
 /**
   \brief       Get SM2 state.
diff --git a/lib/sec_library/include/sec_include_config.h b/lib/sec_library/include/sec_include_config.h
index c5976ba4..c5976ba4 100644..100755
--- a/lib/sec_library/include/sec_include_config.h
+++ b/lib/sec_library/include/sec_include_config.h
diff --git a/lib/sec_library/include/sha.h b/lib/sec_library/include/sha.h
index c5216a40..33e8baad 100644..100755
--- a/lib/sec_library/include/sha.h
+++ b/lib/sec_library/include/sha.h
@@ -19,14 +19,28 @@
 extern "C" {
 #endif
 
-#define HASH_DATAIN_BLOCK_SIZE   64
-
-#define SHA1_DIGEST_OUT_SIZE     20
-#define SHA224_DIGEST_OUT_SIZE   28
-#define SHA256_DIGEST_OUT_SIZE   32
-#define SHA384_DIGEST_OUT_SIZE   48
-#define SHA512_DIGEST_OUT_SIZE   64
-#define MD5_DIGEST_OUT_SIZE      16
+#define HASH_DATAIN_BLOCK_SIZE  (64)
+
+#define SHA1_DIGEST_OUT_SIZE    (20)
+#define SHA224_DIGEST_OUT_SIZE  (28)
+#define SHA256_DIGEST_OUT_SIZE  (32)
+#define SHA384_DIGEST_OUT_SIZE  (48)
+#define SHA512_DIGEST_OUT_SIZE  (64)
+#define MD5_DIGEST_OUT_SIZE     (16)
+
+#define CSI_SHA256_MODE         (0x00000008)
+#define CSI_SHA224_MODE         (0x00000010)
+#define CSI_SHA384_MODE         (0x00000040)
+#define CSI_SHA512_MODE         (0x00000020)
+#define CSI_MD5_MODE            (0x00000002)
+#define CSI_SHA1_MODE           (0x00000004)
+
+#define CSI_SHA256_NEW_MODE     (0x00000009)
+#define CSI_SHA224_MEW_MODE     (0x00000011)
+#define CSI_SHA384_NEW_MODE     (0x00000041)
+#define CSI_SHA512_NEW_MODE     (0x00000021)
+#define CSI_MD5_NEW_MODE        (0x00000003)
+#define CSI_SHA1_NEW_MODE       (0x00000005)
 
 /****** SHA mode ******/
 typedef enum {
diff --git a/lib/sec_library/include/sm2.h b/lib/sec_library/include/sm2.h
index dd5c4d50..f5a6834c 100644..100755
--- a/lib/sec_library/include/sm2.h
+++ b/lib/sec_library/include/sm2.h
@@ -20,6 +20,16 @@
 extern "C" {
 #endif
 
+#define CSI_SM2_PUBKEY_LEN      (65-1)
+#define CSI_SM2_PRIVKEY_LEN     (32)
+#define CSI_SM2_PUBKEYTMP_LEN   (65)
+#define CSI_SM2_RK_LEN          (32) //random
+#define CSI_SM2_SIGNATURE_LEN   (64)
+#define CSI_SM2_DIGEST_LEN      (32)
+
+#define SM2_PRIME_CURVE_G_BYTES (64)
+#define SM2_PRIME_CURVE_N_BYTES (32)
+
 typedef struct {
         uint32_t sm2_curve : 1; ///< supports 256bits curve
 } sm2_capabilities_t;
@@ -95,95 +105,96 @@ csi_error_t csi_sm2_config(csi_sm2_t *sm2, sm2_cipher_order_e co,
 
 /**
   \brief       Attach the callback handler to SM2
-  \param[in]   sm2  Operate handle.
+  \param[in]   sm2   Operate handle.
   \param[in]   cb    Callback function
   \param[in]   arg   User can define it by himself as callback's param
   \return      Error code \ref csi_error_t
 */
-csi_error_t csi_sm2_attach_callback(csi_sm2_t *sm2, csi_sm2_callback_t cb,
-                                    void *arg);
+csi_error_t csi_sm2_attach_callback(csi_sm2_t *sm2, csi_sm2_callback_t cb, void *arg);
 
 /**
   \brief       Detach the callback handler
   \param[in]   sm2  Operate handle.
+  \return      none
 */
 void csi_sm2_detach_callback(csi_sm2_t *sm2);
 
 /**
   \brief       sm2 get capability.
   \param[in]   sm2  Operate handle.
-  \param[out]   cap  Pointer of sm2_capabilities_t.
-  \return      \ref uint32_t
+  \param[out]  cap  Pointer of sm2_capabilities_t.
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_sm2_get_capabilities(csi_sm2_t *sm2, sm2_capabilities_t *cap);
 
-csi_error_t csi_sm2_check_keypair(csi_sm2_t *sm2, uint8_t pubkey[65],
-                                  uint8_t prikey[32]);
+/**
+  \brief       check whether the public key and private key are a pair.
+  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   private   Pointer to the sm2 private key, alloc by caller.
+  \param[in]   public    Pointer to the sm2 public key, alloc by caller.
+  \return      Error code \ref csi_error_t
+*/
+csi_error_t csi_sm2_check_keypair(csi_sm2_t *sm2, uint8_t pubkey[65], uint8_t prikey[32]);
 
 /**
   \brief       generate sm2 key.
   \param[in]   sm2       sm2 handle to operate.
   \param[out]  private   Pointer to the sm2 private key, alloc by caller.
-  \param[out]  public   Pointer to the sm2 public key, alloc by caller.
-  \return      \ref uint32_t
+  \param[out]  public    Pointer to the sm2 public key, alloc by caller.
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_sm2_gen_key(csi_sm2_t *sm2, uint8_t pubkey[65],
-                            uint8_t prikey[32]);
+csi_error_t csi_sm2_gen_key(csi_sm2_t *sm2, uint8_t pubkey[65], uint8_t prikey[32]);
 
 /**
   \brief       sm2 sign
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
-  \return      \ref uint32_t
+  \param[out]  s       Pointer to the signature
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_sm2_sign(csi_sm2_t *sm2, uint8_t d[32], uint8_t prikey[32],
-                         uint8_t s[64]);
+csi_error_t csi_sm2_sign(csi_sm2_t *sm2, uint8_t d[32], uint8_t prikey[32], uint8_t s[64]);
 
 /**
   \brief       sm2 sign
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
-  \return      \ref uint32_t
+  \param[out]  s       Pointer to the signature
+  \return      Error code \ref csi_error_t
 */
-csi_error_t csi_sm2_sign_async(csi_sm2_t *sm2, uint8_t d[32],
-                               uint8_t prikey[32], uint8_t s[64]);
+csi_error_t csi_sm2_sign_async(csi_sm2_t *sm2, uint8_t d[32], uint8_t prikey[32], uint8_t s[64]);
 
 /* TODO */
 /**
   \brief       sm2 verify
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
+  \param[out]  s       Pointer to the signature
   \return      verify result
 */
-bool csi_sm2_verify(csi_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65],
-                    uint8_t s[64]);
+bool csi_sm2_verify(csi_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65], uint8_t s[64]);
 
 /**
   \brief       sm2 verify
-  \param[in]   sm2       sm2 handle to operate.
+  \param[in]   sm2     sm2 handle to operate.
   \param[in]   d       Pointer to the digest.
   \param[out]  privkey Pointer to the private key
-  \param[out]  s Pointer to the signature
+  \param[out]  s       Pointer to the signature
   \return      verify result
 */
-bool csi_sm2_verify_async(csi_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65],
-                          uint8_t s[64]);
+bool csi_sm2_verify_async(csi_sm2_t *sm2, uint8_t d[32], uint8_t pubkey[65], uint8_t s[64]);
 
 /**
   \brief       sm2 encrypto
-  \param[in]   sm2       sm2 handle to operate.
-  \param[in]   Plain       Pointer to the plaintext.
-  \param[in]  PlainByteLen plaintext len
-  \param[in]  pubKey public key.
-  \param[out]  Cipher Pointer to the chipher
+  \param[in]   sm2           sm2 handle to operate.
+  \param[in]   Plain         Pointer to the plaintext.
+  \param[in]   PlainByteLen  plaintext len
+  \param[in]   pubKey        public key.
+  \param[out]  Cipher        Pointer to the chipher
   \param[out]  CipherByteLen Pointer to the chipher len.
-  \return      uint32_t
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_sm2_encrypt(csi_sm2_t *sm2, uint8_t *Plain,
                             uint32_t PlainByteLen, uint8_t pubKey[65],
@@ -191,13 +202,13 @@ csi_error_t csi_sm2_encrypt(csi_sm2_t *sm2, uint8_t *Plain,
 
 /**
   \brief       sm2 encrypto
-  \param[in]   sm2       sm2 handle to operate.
-  \param[in]  Cipher Pointer to the chipher
-  \param[in]  CipherByteLen chipher len.
-  \param[in]  prikey private key.
-  \param[out]   Plain       Pointer to the plaintext.
-  \param[out]  PlainByteLen plaintext len
-  \return      uint32_t
+  \param[in]   sm2           sm2 handle to operate.
+  \param[in]   Cipher        Pointer to the chipher
+  \param[in]   CipherByteLen chipher len.
+  \param[in]   prikey        private key.
+  \param[out]  Plain         Pointer to the plaintext.
+  \param[out]  PlainByteLen  plaintext len
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_sm2_decrypt(csi_sm2_t *sm2, uint8_t *Cipher,
                             uint32_t CipherByteLen, uint8_t prikey[32],
@@ -206,7 +217,7 @@ csi_error_t csi_sm2_decrypt(csi_sm2_t *sm2, uint8_t *Cipher,
 /**
   \brief       sm2 key exchange
   \param[in]   sm2       sm2 handle to operate.
-  \return      uint32_t
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_sm2_exchangekey(csi_sm2_t *sm2, sm2_exchange_role_e role,
                                 uint8_t *dA, uint8_t *PB, uint8_t *rA,
@@ -217,7 +228,7 @@ csi_error_t csi_sm2_exchangekey(csi_sm2_t *sm2, sm2_exchange_role_e role,
 /**
   \brief       sm2 key exchange get Z.
   \param[in]   sm2       sm2 handle to operate.
-  \return      uint32_t
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_sm2_getZ(csi_sm2_t *sm2, uint8_t *ID, uint32_t byteLenofID,
                          uint8_t pubKey[65], uint8_t Z[32]);
@@ -225,7 +236,7 @@ csi_error_t csi_sm2_getZ(csi_sm2_t *sm2, uint8_t *ID, uint32_t byteLenofID,
 /**
   \brief       sm2 key exchange get E
   \param[in]   sm2       sm2 handle to operate.
-  \return      uint32_t
+  \return      Error code \ref csi_error_t
 */
 csi_error_t csi_sm2_getE(csi_sm2_t *sm2, uint8_t *M, uint32_t byteLen,
                          uint8_t Z[32], uint8_t E[32]);
diff --git a/lib/sec_library/include/sm3.h b/lib/sec_library/include/sm3.h
index 1f63f15e..e86ee261 100644..100755
--- a/lib/sec_library/include/sm3.h
+++ b/lib/sec_library/include/sm3.h
@@ -20,39 +20,39 @@
 extern "C" {
 #endif
 
-#define SM3_DATAIN_BLOCK_SIZE 64
-#define SM3_DIGEST_OUT_SIZE   32
+#define SM3_DATAIN_BLOCK_SIZE (64)
+#define SM3_DIGEST_OUT_SIZE   (32)
 
 typedef struct {
-    uint32_t total[2];   ///< Number of bytes processed
-    uint32_t state[16];  ///< Intermediate digest state
+    uint32_t total[2];                      ///< Number of bytes processed
+    uint32_t state[16];                     ///< Intermediate digest state
     uint8_t  buffer[SM3_DATAIN_BLOCK_SIZE]; ///< Data block  beingprocessed
-    uint8_t  result[SM3_DIGEST_OUT_SIZE]; ///< Data block has processed
+    uint8_t  result[SM3_DIGEST_OUT_SIZE];   ///< Data block has processed
 } csi_sm3_context_t;
 
 /****** SM3 State ******/
 typedef struct {
-    uint32_t busy             : 1;        ///< Calculate busy flag
-    uint32_t error            : 1;        ///< Calculate error flag
+    uint32_t busy             : 1;          ///< Calculate busy flag
+    uint32_t error            : 1;          ///< Calculate error flag
 } csi_sm3_state_t;
 
 
 /****** SM3 Event ******/
 typedef enum {
-    SM3_EVENT_COMPLETE = 0U, ///< Calculate completed
+    SM3_EVENT_COMPLETE = 0U,        ///< Calculate completed
     SM3_EVENT_UPDATE,
     SM3_EVENT_START,
-    SM3_EVENT_ERROR          ///< Calculate error
+    SM3_EVENT_ERROR                 ///< Calculate error
 } csi_sm3_event_t;
 
 typedef struct csi_sm3_t csi_sm3_t;
 
 struct csi_sm3_t {
-    csi_dev_t dev; ///< SM3 hw-device info
+    csi_dev_t dev;                  ///< SM3 hw-device info
     void (*callback)(csi_sm3_t *sm3, csi_sm3_event_t event,
                         void *arg); ///< SM3 event callback for user
-    void *          arg;    ///< SM3 custom designed param passed to evt_cb
-    csi_sm3_state_t state;  ///< SM3 state
+    void *          arg;            ///< SM3 custom designed param passed to evt_cb
+    csi_sm3_state_t state;          ///< SM3 state
     void *          priv;
 };
 
@@ -62,7 +62,7 @@ struct csi_sm3_t {
   \brief       Initialize SM3 Interface. Initializes the resources needed for the SM3 interface
   \param[in]   sm3  operate handle.
   \param[in]   idx index of sm3
-  \return      error code \ref uint32_t
+  \return      error code \ref csi_error_t
 */
 csi_error_t csi_sm3_init(csi_sm3_t *sm3, uint32_t idx);
 
@@ -93,7 +93,7 @@ void csi_sm3_detach_callback(csi_sm3_t *sm3);
   \brief       start the engine
   \param[in]   sm3     sm3 handle to .operate
   \param[in]   context Pointer to the sm3 context \ref csi_sm3_context_t
-  \return      error code \ref uint32_t
+  \return      error code \ref csi_error_t
 */
 csi_error_t csi_sm3_start(csi_sm3_t *sm3, csi_sm3_context_t *context);
 
@@ -103,10 +103,9 @@ csi_error_t csi_sm3_start(csi_sm3_t *sm3, csi_sm3_context_t *context);
   \param[in]   context Pointer to the sm3 context \ref csi_sm3_context_t
   \param[in]   input   Pointer to the Source data
   \param[in]   size    the data size
-  \return      error code \ref uint32_t
+  \return      error code \ref csi_error_t
 */
-csi_error_t csi_sm3_update(csi_sm3_t *sm3, csi_sm3_context_t *context,
-                           const uint8_t *input, uint32_t size);
+csi_error_t csi_sm3_update(csi_sm3_t *sm3, csi_sm3_context_t *context, const uint8_t *input, uint32_t size);
 
 /**
   \brief       Accumulate the engine (async mode)
@@ -116,8 +115,7 @@ csi_error_t csi_sm3_update(csi_sm3_t *sm3, csi_sm3_context_t *context,
   \param[in]   size       The data size
   \return      Error code \ref csi_error_t
 */
-csi_error_t csi_sm3_update_async(csi_sm3_t *sm3, csi_sm3_context_t *context,
-                                 const uint8_t *input, uint32_t size);
+csi_error_t csi_sm3_update_async(csi_sm3_t *sm3, csi_sm3_context_t *context, const uint8_t *input, uint32_t size);
 
 /**
   \brief       finish the engine
@@ -125,10 +123,9 @@ csi_error_t csi_sm3_update_async(csi_sm3_t *sm3, csi_sm3_context_t *context,
   \param[in]   context  Pointer to the sm3 context \ref csi_sm3_context_t
   \param[out]  output   Pointer to the result data
   \param[out]  out_size Pointer to the result data size(bytes)
-  \return      error code \ref uint32_t
+  \return      error code \ref csi_error_t
 */
-csi_error_t csi_sm3_finish(csi_sm3_t *sm3, csi_sm3_context_t *context,
-                           uint8_t *output, uint32_t *out_size);
+csi_error_t csi_sm3_finish(csi_sm3_t *sm3, csi_sm3_context_t *context, uint8_t *output, uint32_t *out_size);
 
 /**
   \brief       Get SM3 state
diff --git a/lib/sec_library/include/sm4.h b/lib/sec_library/include/sm4.h
index 0d66cb88..ae7b15a3 100644..100755
--- a/lib/sec_library/include/sm4.h
+++ b/lib/sec_library/include/sm4.h
@@ -20,9 +20,11 @@
 extern "C" {
 #endif
 
-#define SM4_KEY_LEN_BYTES_32 32
-#define SM4_KEY_LEN_BYTES_24 24
-#define SM4_KEY_LEN_BYTES_16 16
+#define SM4_KEY_LEN_BYTES_32 (32)
+#define SM4_KEY_LEN_BYTES_24 (24)
+#define SM4_KEY_LEN_BYTES_16 (16)
+
+#define SM4_IV_LEN_BYTES_16  (16)
 
 typedef enum {
     SM4_KEY_LEN_BITS_128        = 0,       /*128 Data bits*/
@@ -91,8 +93,7 @@ csi_error_t csi_sm4_set_decrypt_key(csi_sm4_t *sm4, uint8_t *key, csi_sm4_key_bi
   \param[in]   size    the Source data size
   \return      error code \ref uint32_t
 */
-csi_error_t csi_sm4_ecb_encrypt(csi_sm4_t *sm4, uint8_t *in, uint8_t *out,
-                                uint32_t size);
+csi_error_t csi_sm4_ecb_encrypt(csi_sm4_t *sm4, uint8_t *in, uint8_t *out, uint32_t size);
 
 /**
   \brief       sm4 ecb decrypt
@@ -102,8 +103,7 @@ csi_error_t csi_sm4_ecb_encrypt(csi_sm4_t *sm4, uint8_t *in, uint8_t *out,
   \param[in]   size    the Source data size
   \return      error code \ref uint32_t
 */
-csi_error_t csi_sm4_ecb_decrypt(csi_sm4_t *sm4, uint8_t *in, uint8_t *out,
-                                uint32_t size);
+csi_error_t csi_sm4_ecb_decrypt(csi_sm4_t *sm4, uint8_t *in, uint8_t *out, uint32_t size);
 
 /**
   \brief       sm4 cbc encrypt
diff --git a/lib/sec_library/include/soc.h b/lib/sec_library/include/soc.h
index 99a35f48..99a35f48 100644..100755
--- a/lib/sec_library/include/soc.h
+++ b/lib/sec_library/include/soc.h
diff --git a/lib/sec_library/include/sys_clk.h b/lib/sec_library/include/sys_clk.h
index c04c26e8..c04c26e8 100644..100755
--- a/lib/sec_library/include/sys_clk.h
+++ b/lib/sec_library/include/sys_clk.h
diff --git a/lib/sec_library/libsec_library.a b/lib/sec_library/libsec_library.a
index cbaca386..c61537c0 100644..100755
--- a/lib/sec_library/libsec_library.a
+++ b/lib/sec_library/libsec_library.a