]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/blame - crypto/ablkcipher.c
crypto: ctr - Use chainiv on raw counter mode
[mirror_ubuntu-zesty-kernel.git] / crypto / ablkcipher.c
CommitLineData
b5b7f088
HX
1/*
2 * Asynchronous block chaining cipher operations.
3 *
4 * This is the asynchronous version of blkcipher.c indicating completion
5 * via a callback.
6 *
7 * Copyright (c) 2006 Herbert Xu <herbert@gondor.apana.org.au>
8 *
9 * This program is free software; you can redistribute it and/or modify it
10 * under the terms of the GNU General Public License as published by the Free
11 * Software Foundation; either version 2 of the License, or (at your option)
12 * any later version.
13 *
14 */
15
378f4f51 16#include <crypto/internal/skcipher.h>
0b67fb65 17#include <linux/cpumask.h>
378f4f51 18#include <linux/err.h>
b5b7f088 19#include <linux/init.h>
791b4d5f 20#include <linux/kernel.h>
b5b7f088 21#include <linux/module.h>
b9c55aa4
HX
22#include <linux/rtnetlink.h>
23#include <linux/sched.h>
791b4d5f 24#include <linux/slab.h>
b5b7f088
HX
25#include <linux/seq_file.h>
26
378f4f51
HX
27#include "internal.h"
28
0b67fb65
HX
29static const char *skcipher_default_geniv __read_mostly;
30
791b4d5f
HX
31static int setkey_unaligned(struct crypto_ablkcipher *tfm, const u8 *key,
32 unsigned int keylen)
ca7c3938
SS
33{
34 struct ablkcipher_alg *cipher = crypto_ablkcipher_alg(tfm);
35 unsigned long alignmask = crypto_ablkcipher_alignmask(tfm);
36 int ret;
37 u8 *buffer, *alignbuffer;
38 unsigned long absize;
39
40 absize = keylen + alignmask;
41 buffer = kmalloc(absize, GFP_ATOMIC);
42 if (!buffer)
43 return -ENOMEM;
44
45 alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
46 memcpy(alignbuffer, key, keylen);
47 ret = cipher->setkey(tfm, alignbuffer, keylen);
06817176 48 memset(alignbuffer, 0, keylen);
ca7c3938
SS
49 kfree(buffer);
50 return ret;
51}
52
b5b7f088
HX
53static int setkey(struct crypto_ablkcipher *tfm, const u8 *key,
54 unsigned int keylen)
55{
56 struct ablkcipher_alg *cipher = crypto_ablkcipher_alg(tfm);
ca7c3938 57 unsigned long alignmask = crypto_ablkcipher_alignmask(tfm);
b5b7f088
HX
58
59 if (keylen < cipher->min_keysize || keylen > cipher->max_keysize) {
60 crypto_ablkcipher_set_flags(tfm, CRYPTO_TFM_RES_BAD_KEY_LEN);
61 return -EINVAL;
62 }
63
ca7c3938
SS
64 if ((unsigned long)key & alignmask)
65 return setkey_unaligned(tfm, key, keylen);
66
b5b7f088
HX
67 return cipher->setkey(tfm, key, keylen);
68}
69
70static unsigned int crypto_ablkcipher_ctxsize(struct crypto_alg *alg, u32 type,
71 u32 mask)
72{
73 return alg->cra_ctxsize;
74}
75
b9c55aa4
HX
76int skcipher_null_givencrypt(struct skcipher_givcrypt_request *req)
77{
78 return crypto_ablkcipher_encrypt(&req->creq);
79}
80
81int skcipher_null_givdecrypt(struct skcipher_givcrypt_request *req)
82{
83 return crypto_ablkcipher_decrypt(&req->creq);
84}
85
b5b7f088
HX
86static int crypto_init_ablkcipher_ops(struct crypto_tfm *tfm, u32 type,
87 u32 mask)
88{
89 struct ablkcipher_alg *alg = &tfm->__crt_alg->cra_ablkcipher;
90 struct ablkcipher_tfm *crt = &tfm->crt_ablkcipher;
91
92 if (alg->ivsize > PAGE_SIZE / 8)
93 return -EINVAL;
94
95 crt->setkey = setkey;
96 crt->encrypt = alg->encrypt;
97 crt->decrypt = alg->decrypt;
b9c55aa4
HX
98 if (!alg->ivsize) {
99 crt->givencrypt = skcipher_null_givencrypt;
100 crt->givdecrypt = skcipher_null_givdecrypt;
101 }
ecfc4329 102 crt->base = __crypto_ablkcipher_cast(tfm);
b5b7f088
HX
103 crt->ivsize = alg->ivsize;
104
105 return 0;
106}
107
108static void crypto_ablkcipher_show(struct seq_file *m, struct crypto_alg *alg)
109 __attribute__ ((unused));
110static void crypto_ablkcipher_show(struct seq_file *m, struct crypto_alg *alg)
111{
112 struct ablkcipher_alg *ablkcipher = &alg->cra_ablkcipher;
113
114 seq_printf(m, "type : ablkcipher\n");
189ed66e
HX
115 seq_printf(m, "async : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
116 "yes" : "no");
b5b7f088
HX
117 seq_printf(m, "blocksize : %u\n", alg->cra_blocksize);
118 seq_printf(m, "min keysize : %u\n", ablkcipher->min_keysize);
119 seq_printf(m, "max keysize : %u\n", ablkcipher->max_keysize);
120 seq_printf(m, "ivsize : %u\n", ablkcipher->ivsize);
23508e11 121 seq_printf(m, "geniv : %s\n", ablkcipher->geniv ?: "<default>");
b5b7f088
HX
122}
123
124const struct crypto_type crypto_ablkcipher_type = {
125 .ctxsize = crypto_ablkcipher_ctxsize,
126 .init = crypto_init_ablkcipher_ops,
127#ifdef CONFIG_PROC_FS
128 .show = crypto_ablkcipher_show,
129#endif
130};
131EXPORT_SYMBOL_GPL(crypto_ablkcipher_type);
132
61da88e2
HX
133static int no_givdecrypt(struct skcipher_givcrypt_request *req)
134{
135 return -ENOSYS;
136}
137
138static int crypto_init_givcipher_ops(struct crypto_tfm *tfm, u32 type,
139 u32 mask)
140{
141 struct ablkcipher_alg *alg = &tfm->__crt_alg->cra_ablkcipher;
142 struct ablkcipher_tfm *crt = &tfm->crt_ablkcipher;
143
144 if (alg->ivsize > PAGE_SIZE / 8)
145 return -EINVAL;
146
ecfc4329
HX
147 crt->setkey = tfm->__crt_alg->cra_flags & CRYPTO_ALG_GENIV ?
148 alg->setkey : setkey;
61da88e2
HX
149 crt->encrypt = alg->encrypt;
150 crt->decrypt = alg->decrypt;
151 crt->givencrypt = alg->givencrypt;
152 crt->givdecrypt = alg->givdecrypt ?: no_givdecrypt;
ecfc4329 153 crt->base = __crypto_ablkcipher_cast(tfm);
61da88e2
HX
154 crt->ivsize = alg->ivsize;
155
156 return 0;
157}
158
159static void crypto_givcipher_show(struct seq_file *m, struct crypto_alg *alg)
160 __attribute__ ((unused));
161static void crypto_givcipher_show(struct seq_file *m, struct crypto_alg *alg)
162{
163 struct ablkcipher_alg *ablkcipher = &alg->cra_ablkcipher;
164
165 seq_printf(m, "type : givcipher\n");
189ed66e
HX
166 seq_printf(m, "async : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
167 "yes" : "no");
61da88e2
HX
168 seq_printf(m, "blocksize : %u\n", alg->cra_blocksize);
169 seq_printf(m, "min keysize : %u\n", ablkcipher->min_keysize);
170 seq_printf(m, "max keysize : %u\n", ablkcipher->max_keysize);
171 seq_printf(m, "ivsize : %u\n", ablkcipher->ivsize);
23508e11 172 seq_printf(m, "geniv : %s\n", ablkcipher->geniv ?: "<built-in>");
61da88e2
HX
173}
174
175const struct crypto_type crypto_givcipher_type = {
176 .ctxsize = crypto_ablkcipher_ctxsize,
177 .init = crypto_init_givcipher_ops,
178#ifdef CONFIG_PROC_FS
179 .show = crypto_givcipher_show,
180#endif
181};
182EXPORT_SYMBOL_GPL(crypto_givcipher_type);
183
ecfc4329
HX
184const char *crypto_default_geniv(const struct crypto_alg *alg)
185{
0b67fb65
HX
186 return alg->cra_flags & CRYPTO_ALG_ASYNC ?
187 "eseqiv" : skcipher_default_geniv;
ecfc4329
HX
188}
189
b9c55aa4
HX
190static int crypto_givcipher_default(struct crypto_alg *alg, u32 type, u32 mask)
191{
192 struct rtattr *tb[3];
193 struct {
194 struct rtattr attr;
195 struct crypto_attr_type data;
196 } ptype;
197 struct {
198 struct rtattr attr;
199 struct crypto_attr_alg data;
200 } palg;
201 struct crypto_template *tmpl;
202 struct crypto_instance *inst;
203 struct crypto_alg *larval;
204 const char *geniv;
205 int err;
206
207 larval = crypto_larval_lookup(alg->cra_driver_name,
435578ae 208 (type & ~CRYPTO_ALG_TYPE_MASK) |
b9c55aa4 209 CRYPTO_ALG_TYPE_GIVCIPHER,
435578ae 210 mask | CRYPTO_ALG_TYPE_MASK);
b9c55aa4
HX
211 err = PTR_ERR(larval);
212 if (IS_ERR(larval))
213 goto out;
214
215 err = -EAGAIN;
216 if (!crypto_is_larval(larval))
217 goto drop_larval;
218
219 ptype.attr.rta_len = sizeof(ptype);
220 ptype.attr.rta_type = CRYPTOA_TYPE;
221 ptype.data.type = type | CRYPTO_ALG_GENIV;
222 /* GENIV tells the template that we're making a default geniv. */
223 ptype.data.mask = mask | CRYPTO_ALG_GENIV;
224 tb[0] = &ptype.attr;
225
226 palg.attr.rta_len = sizeof(palg);
227 palg.attr.rta_type = CRYPTOA_ALG;
228 /* Must use the exact name to locate ourselves. */
229 memcpy(palg.data.name, alg->cra_driver_name, CRYPTO_MAX_ALG_NAME);
230 tb[1] = &palg.attr;
231
232 tb[2] = NULL;
233
234 if ((alg->cra_flags & CRYPTO_ALG_TYPE_MASK) ==
235 CRYPTO_ALG_TYPE_BLKCIPHER)
236 geniv = alg->cra_blkcipher.geniv;
237 else
238 geniv = alg->cra_ablkcipher.geniv;
239
240 if (!geniv)
241 geniv = crypto_default_geniv(alg);
242
243 tmpl = crypto_lookup_template(geniv);
244 err = -ENOENT;
245 if (!tmpl)
246 goto kill_larval;
247
248 inst = tmpl->alloc(tb);
249 err = PTR_ERR(inst);
250 if (IS_ERR(inst))
251 goto put_tmpl;
252
253 if ((err = crypto_register_instance(tmpl, inst))) {
254 tmpl->free(inst);
255 goto put_tmpl;
256 }
257
258 /* Redo the lookup to use the instance we just registered. */
259 err = -EAGAIN;
260
261put_tmpl:
262 crypto_tmpl_put(tmpl);
263kill_larval:
264 crypto_larval_kill(larval);
265drop_larval:
266 crypto_mod_put(larval);
267out:
268 crypto_mod_put(alg);
269 return err;
270}
271
272static struct crypto_alg *crypto_lookup_skcipher(const char *name, u32 type,
273 u32 mask)
274{
275 struct crypto_alg *alg;
276
277 alg = crypto_alg_mod_lookup(name, type, mask);
278 if (IS_ERR(alg))
279 return alg;
280
281 if ((alg->cra_flags & CRYPTO_ALG_TYPE_MASK) ==
282 CRYPTO_ALG_TYPE_GIVCIPHER)
283 return alg;
284
285 if (!((alg->cra_flags & CRYPTO_ALG_TYPE_MASK) ==
286 CRYPTO_ALG_TYPE_BLKCIPHER ? alg->cra_blkcipher.ivsize :
287 alg->cra_ablkcipher.ivsize))
288 return alg;
289
b170a137
HX
290 crypto_mod_put(alg);
291 alg = crypto_alg_mod_lookup(name, type | CRYPTO_ALG_TESTED,
292 mask & ~CRYPTO_ALG_TESTED);
293 if (IS_ERR(alg))
294 return alg;
295
296 if ((alg->cra_flags & CRYPTO_ALG_TYPE_MASK) ==
297 CRYPTO_ALG_TYPE_GIVCIPHER) {
298 if ((alg->cra_flags ^ type ^ ~mask) & CRYPTO_ALG_TESTED) {
299 crypto_mod_put(alg);
300 alg = ERR_PTR(-ENOENT);
301 }
302 return alg;
303 }
304
305 BUG_ON(!((alg->cra_flags & CRYPTO_ALG_TYPE_MASK) ==
306 CRYPTO_ALG_TYPE_BLKCIPHER ? alg->cra_blkcipher.ivsize :
307 alg->cra_ablkcipher.ivsize));
308
b9c55aa4
HX
309 return ERR_PTR(crypto_givcipher_default(alg, type, mask));
310}
311
378f4f51
HX
312int crypto_grab_skcipher(struct crypto_skcipher_spawn *spawn, const char *name,
313 u32 type, u32 mask)
314{
315 struct crypto_alg *alg;
316 int err;
317
318 type = crypto_skcipher_type(type);
319 mask = crypto_skcipher_mask(mask);
320
b9c55aa4 321 alg = crypto_lookup_skcipher(name, type, mask);
378f4f51
HX
322 if (IS_ERR(alg))
323 return PTR_ERR(alg);
324
325 err = crypto_init_spawn(&spawn->base, alg, spawn->base.inst, mask);
326 crypto_mod_put(alg);
327 return err;
328}
329EXPORT_SYMBOL_GPL(crypto_grab_skcipher);
330
b9c55aa4
HX
331struct crypto_ablkcipher *crypto_alloc_ablkcipher(const char *alg_name,
332 u32 type, u32 mask)
333{
334 struct crypto_tfm *tfm;
335 int err;
336
337 type = crypto_skcipher_type(type);
338 mask = crypto_skcipher_mask(mask);
339
340 for (;;) {
341 struct crypto_alg *alg;
342
343 alg = crypto_lookup_skcipher(alg_name, type, mask);
344 if (IS_ERR(alg)) {
345 err = PTR_ERR(alg);
346 goto err;
347 }
348
349 tfm = __crypto_alloc_tfm(alg, type, mask);
350 if (!IS_ERR(tfm))
351 return __crypto_ablkcipher_cast(tfm);
352
353 crypto_mod_put(alg);
354 err = PTR_ERR(tfm);
355
356err:
357 if (err != -EAGAIN)
358 break;
359 if (signal_pending(current)) {
360 err = -EINTR;
361 break;
362 }
363 }
364
365 return ERR_PTR(err);
366}
367EXPORT_SYMBOL_GPL(crypto_alloc_ablkcipher);
0b67fb65
HX
368
369static int __init skcipher_module_init(void)
370{
371 skcipher_default_geniv = num_possible_cpus() > 1 ?
372 "eseqiv" : "chainiv";
373 return 0;
374}
375
376static void skcipher_module_exit(void)
377{
378}
379
380module_init(skcipher_module_init);
381module_exit(skcipher_module_exit);