[mirror_ubuntu-bionic-kernel.git] / crypto / aead.c

/*
 * AEAD: Authenticated Encryption with Associated Data
 *
 * This file provides API support for AEAD algorithms.
 *
 * Copyright (c) 2007-2015 Herbert Xu <herbert@gondor.apana.org.au>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the Free
 * Software Foundation; either version 2 of the License, or (at your option)
 * any later version.
 *
 */

#include <crypto/internal/geniv.h>
#include <crypto/internal/rng.h>
#include <crypto/null.h>
#include <crypto/scatterwalk.h>
#include <linux/err.h>
#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/rtnetlink.h>
#include <linux/slab.h>
#include <linux/seq_file.h>
#include <linux/cryptouser.h>
#include <linux/compiler.h>
#include <net/netlink.h>

#include "internal.h"

static int setkey_unaligned(struct crypto_aead *tfm, const u8 *key,
			    unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);
	int ret;
	u8 *buffer, *alignbuffer;
	unsigned long absize;

	absize = keylen + alignmask;
	buffer = kmalloc(absize, GFP_ATOMIC);
	if (!buffer)
		return -ENOMEM;

	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	memcpy(alignbuffer, key, keylen);
	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
	memset(alignbuffer, 0, keylen);
	kfree(buffer);
	return ret;
}

int crypto_aead_setkey(struct crypto_aead *tfm,
		       const u8 *key, unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);

	if ((unsigned long)key & alignmask)
		return setkey_unaligned(tfm, key, keylen);

	return crypto_aead_alg(tfm)->setkey(tfm, key, keylen);
}
EXPORT_SYMBOL_GPL(crypto_aead_setkey);

int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
{
	int err;

	if (authsize > crypto_aead_maxauthsize(tfm))
		return -EINVAL;

	if (crypto_aead_alg(tfm)->setauthsize) {
		err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
		if (err)
			return err;
	}

	tfm->authsize = authsize;
	return 0;
}
EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);

static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	alg->exit(aead);
}

static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	aead->authsize = alg->maxauthsize;

	if (alg->exit)
		aead->base.exit = crypto_aead_exit_tfm;

	if (alg->init)
		return alg->init(aead);

	return 0;
}

#ifdef CONFIG_NET
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	struct crypto_report_aead raead;
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	strncpy(raead.type, "aead", sizeof(raead.type));
	strncpy(raead.geniv, "<none>", sizeof(raead.geniv));

	raead.blocksize = alg->cra_blocksize;
	raead.maxauthsize = aead->maxauthsize;
	raead.ivsize = aead->ivsize;

	if (nla_put(skb, CRYPTOCFGA_REPORT_AEAD,
		    sizeof(struct crypto_report_aead), &raead))
		goto nla_put_failure;
	return 0;

nla_put_failure:
	return -EMSGSIZE;
}
#else
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	return -ENOSYS;
}
#endif

static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
	__maybe_unused;
static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
{
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	seq_printf(m, "type         : aead\n");
	seq_printf(m, "async        : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
					     "yes" : "no");
	seq_printf(m, "blocksize    : %u\n", alg->cra_blocksize);
	seq_printf(m, "ivsize       : %u\n", aead->ivsize);
	seq_printf(m, "maxauthsize  : %u\n", aead->maxauthsize);
	seq_printf(m, "geniv        : <none>\n");
}

static void crypto_aead_free_instance(struct crypto_instance *inst)
{
	struct aead_instance *aead = aead_instance(inst);

	if (!aead->free) {
		inst->tmpl->free(inst);
		return;
	}

	aead->free(aead);
}

static const struct crypto_type crypto_aead_type = {
	.extsize = crypto_alg_extsize,
	.init_tfm = crypto_aead_init_tfm,
	.free = crypto_aead_free_instance,
#ifdef CONFIG_PROC_FS
	.show = crypto_aead_show,
#endif
	.report = crypto_aead_report,
	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	.maskset = CRYPTO_ALG_TYPE_MASK,
	.type = CRYPTO_ALG_TYPE_AEAD,
	.tfmsize = offsetof(struct crypto_aead, base),
};

static int aead_geniv_setkey(struct crypto_aead *tfm,
			     const u8 *key, unsigned int keylen)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int aead_geniv_setauthsize(struct crypto_aead *tfm,
				  unsigned int authsize)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

struct aead_instance *aead_geniv_alloc(struct crypto_template *tmpl,
				       struct rtattr **tb, u32 type, u32 mask)
{
	const char *name;
	struct crypto_aead_spawn *spawn;
	struct crypto_attr_type *algt;
	struct aead_instance *inst;
	struct aead_alg *alg;
	unsigned int ivsize;
	unsigned int maxauthsize;
	int err;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return ERR_CAST(algt);

	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
		return ERR_PTR(-EINVAL);

	name = crypto_attr_alg_name(tb[1]);
	if (IS_ERR(name))
		return ERR_CAST(name);

	inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL);
	if (!inst)
		return ERR_PTR(-ENOMEM);

	spawn = aead_instance_ctx(inst);

	/* Ignore async algorithms if necessary. */
	mask |= crypto_requires_sync(algt->type, algt->mask);

	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
	err = crypto_grab_aead(spawn, name, type, mask);
	if (err)
		goto err_free_inst;

	alg = crypto_spawn_aead_alg(spawn);

	ivsize = crypto_aead_alg_ivsize(alg);
	maxauthsize = crypto_aead_alg_maxauthsize(alg);

	err = -EINVAL;
	if (ivsize < sizeof(u64))
		goto err_drop_alg;

	err = -ENAMETOOLONG;
	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;
	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;

	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
	inst->alg.base.cra_priority = alg->base.cra_priority;
	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);

	inst->alg.setkey = aead_geniv_setkey;
	inst->alg.setauthsize = aead_geniv_setauthsize;

	inst->alg.ivsize = ivsize;
	inst->alg.maxauthsize = maxauthsize;

out:
	return inst;

err_drop_alg:
	crypto_drop_aead(spawn);
err_free_inst:
	kfree(inst);
	inst = ERR_PTR(err);
	goto out;
}
EXPORT_SYMBOL_GPL(aead_geniv_alloc);

void aead_geniv_free(struct aead_instance *inst)
{
	crypto_drop_aead(aead_instance_ctx(inst));
	kfree(inst);
}
EXPORT_SYMBOL_GPL(aead_geniv_free);

int aead_init_geniv(struct crypto_aead *aead)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	struct aead_instance *inst = aead_alg_instance(aead);
	struct crypto_aead *child;
	int err;

	spin_lock_init(&ctx->lock);

	err = crypto_get_default_rng();
	if (err)
		goto out;

	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
				   crypto_aead_ivsize(aead));
	crypto_put_default_rng();
	if (err)
		goto out;

	ctx->sknull = crypto_get_default_null_skcipher2();
	err = PTR_ERR(ctx->sknull);
	if (IS_ERR(ctx->sknull))
		goto out;

	child = crypto_spawn_aead(aead_instance_ctx(inst));
	err = PTR_ERR(child);
	if (IS_ERR(child))
		goto drop_null;

	ctx->child = child;
	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
				      sizeof(struct aead_request));

	err = 0;

out:
	return err;

drop_null:
	crypto_put_default_null_skcipher2();
	goto out;
}
EXPORT_SYMBOL_GPL(aead_init_geniv);

void aead_exit_geniv(struct crypto_aead *tfm)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	crypto_free_aead(ctx->child);
	crypto_put_default_null_skcipher2();
}
EXPORT_SYMBOL_GPL(aead_exit_geniv);

int crypto_grab_aead(struct crypto_aead_spawn *spawn, const char *name,
		     u32 type, u32 mask)
{
	spawn->base.frontend = &crypto_aead_type;
	return crypto_grab_spawn(&spawn->base, name, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_grab_aead);

struct crypto_aead *crypto_alloc_aead(const char *alg_name, u32 type, u32 mask)
{
	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_alloc_aead);

static int aead_prepare_alg(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;

	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
	    PAGE_SIZE / 8)
		return -EINVAL;

	if (!alg->chunksize)
		alg->chunksize = base->cra_blocksize;

	base->cra_type = &crypto_aead_type;
	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	base->cra_flags |= CRYPTO_ALG_TYPE_AEAD;

	return 0;
}

int crypto_register_aead(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;
	int err;

	err = aead_prepare_alg(alg);
	if (err)
		return err;

	return crypto_register_alg(base);
}
EXPORT_SYMBOL_GPL(crypto_register_aead);

void crypto_unregister_aead(struct aead_alg *alg)
{
	crypto_unregister_alg(&alg->base);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aead);

int crypto_register_aeads(struct aead_alg *algs, int count)
{
	int i, ret;

	for (i = 0; i < count; i++) {
		ret = crypto_register_aead(&algs[i]);
		if (ret)
			goto err;
	}

	return 0;

err:
	for (--i; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);

	return ret;
}
EXPORT_SYMBOL_GPL(crypto_register_aeads);

void crypto_unregister_aeads(struct aead_alg *algs, int count)
{
	int i;

	for (i = count - 1; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aeads);

int aead_register_instance(struct crypto_template *tmpl,
			   struct aead_instance *inst)
{
	int err;

	err = aead_prepare_alg(&inst->alg);
	if (err)
		return err;

	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
}
EXPORT_SYMBOL_GPL(aead_register_instance);

MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");
Commit	Line	Data
1ae97820 HX	1	/*
1ae97820 HX	2	* AEAD: Authenticated Encryption with Associated Data
3922538f	3	*
1ae97820 HX	4	* This file provides API support for AEAD algorithms.
1ae97820 HX	5	*
b0d955ba	6	* Copyright (c) 2007-2015 Herbert Xu <herbert@gondor.apana.org.au>
1ae97820 HX	7	*
	8	* This program is free software; you can redistribute it and/or modify it
	9	* under the terms of the GNU General Public License as published by the Free
3922538f	10	* Software Foundation; either version 2 of the License, or (at your option)
1ae97820 HX	11	* any later version.
	12	*
	13	*/
	14
6350449f	15	#include <crypto/internal/geniv.h>
149a3971 HX	16	#include <crypto/internal/rng.h>
149a3971 HX	17	#include <crypto/null.h>
996d98d8	18	#include <crypto/scatterwalk.h>
5b6d2d7f	19	#include <linux/err.h>
1ae97820 HX	20	#include <linux/init.h>
	21	#include <linux/kernel.h>
	22	#include <linux/module.h>
d29ce988	23	#include <linux/rtnetlink.h>
1ae97820 HX	24	#include <linux/slab.h>
1ae97820 HX	25	#include <linux/seq_file.h>
6ad414fe	26	#include <linux/cryptouser.h>
d8c34b94	27	#include <linux/compiler.h>
6ad414fe	28	#include <net/netlink.h>
1ae97820	29
5b6d2d7f HX	30	#include "internal.h"
5b6d2d7f HX	31
1ae97820 HX	32	static int setkey_unaligned(struct crypto_aead tfm, const u8 key,
	33	unsigned int keylen)
	34	{
1ae97820 HX	35	unsigned long alignmask = crypto_aead_alignmask(tfm);
	36	int ret;
	37	u8 buffer, alignbuffer;
	38	unsigned long absize;
	39
	40	absize = keylen + alignmask;
	41	buffer = kmalloc(absize, GFP_ATOMIC);
	42	if (!buffer)
	43	return -ENOMEM;
	44
	45	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	46	memcpy(alignbuffer, key, keylen);
b0d955ba	47	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
1ae97820 HX	48	memset(alignbuffer, 0, keylen);
	49	kfree(buffer);
	50	return ret;
	51	}
	52
5d1d65f8 HX	53	int crypto_aead_setkey(struct crypto_aead *tfm,
5d1d65f8 HX	54	const u8 *key, unsigned int keylen)
1ae97820	55	{
1ae97820 HX	56	unsigned long alignmask = crypto_aead_alignmask(tfm);
	57
	58	if ((unsigned long)key & alignmask)
	59	return setkey_unaligned(tfm, key, keylen);
	60
b0d955ba	61	return crypto_aead_alg(tfm)->setkey(tfm, key, keylen);
1ae97820	62	}
5d1d65f8	63	EXPORT_SYMBOL_GPL(crypto_aead_setkey);
1ae97820	64
7ba683a6 HX	65	int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
	66	{
	67	int err;
	68
30e4c010	69	if (authsize > crypto_aead_maxauthsize(tfm))
7ba683a6 HX	70	return -EINVAL;
7ba683a6 HX	71
b0d955ba HX	72	if (crypto_aead_alg(tfm)->setauthsize) {
b0d955ba HX	73	err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
7ba683a6 HX	74	if (err)
	75	return err;
	76	}
	77
5d1d65f8	78	tfm->authsize = authsize;
7ba683a6 HX	79	return 0;
	80	}
	81	EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);
	82
5eb8ec6d HX	83	static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
	84	{
	85	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	86	struct aead_alg *alg = crypto_aead_alg(aead);
	87
	88	alg->exit(aead);
	89	}
	90
63293c61 HX	91	static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
	92	{
	93	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	94	struct aead_alg *alg = crypto_aead_alg(aead);
	95
63293c61 HX	96	aead->authsize = alg->maxauthsize;
63293c61 HX	97
5eb8ec6d HX	98	if (alg->exit)
	99	aead->base.exit = crypto_aead_exit_tfm;
	100
	101	if (alg->init)
	102	return alg->init(aead);
	103
63293c61 HX	104	return 0;
	105	}
	106
63293c61 HX	107	#ifdef CONFIG_NET
	108	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	109	{
	110	struct crypto_report_aead raead;
	111	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	112
	113	strncpy(raead.type, "aead", sizeof(raead.type));
	114	strncpy(raead.geniv, "<none>", sizeof(raead.geniv));
	115
	116	raead.blocksize = alg->cra_blocksize;
	117	raead.maxauthsize = aead->maxauthsize;
	118	raead.ivsize = aead->ivsize;
	119
	120	if (nla_put(skb, CRYPTOCFGA_REPORT_AEAD,
	121	sizeof(struct crypto_report_aead), &raead))
	122	goto nla_put_failure;
	123	return 0;
	124
	125	nla_put_failure:
	126	return -EMSGSIZE;
	127	}
	128	#else
	129	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	130	{
	131	return -ENOSYS;
	132	}
	133	#endif
	134
	135	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
d8c34b94	136	__maybe_unused;
63293c61 HX	137	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
	138	{
	139	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	140
	141	seq_printf(m, "type : aead\n");
	142	seq_printf(m, "async : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
	143	"yes" : "no");
	144	seq_printf(m, "blocksize : %u\n", alg->cra_blocksize);
	145	seq_printf(m, "ivsize : %u\n", aead->ivsize);
	146	seq_printf(m, "maxauthsize : %u\n", aead->maxauthsize);
	147	seq_printf(m, "geniv : <none>\n");
	148	}
	149
ba75e15f HX	150	static void crypto_aead_free_instance(struct crypto_instance *inst)
	151	{
	152	struct aead_instance *aead = aead_instance(inst);
	153
	154	if (!aead->free) {
	155	inst->tmpl->free(inst);
	156	return;
	157	}
	158
	159	aead->free(aead);
	160	}
	161
b0d955ba	162	static const struct crypto_type crypto_aead_type = {
63293c61 HX	163	.extsize = crypto_alg_extsize,
63293c61 HX	164	.init_tfm = crypto_aead_init_tfm,
ba75e15f	165	.free = crypto_aead_free_instance,
63293c61 HX	166	#ifdef CONFIG_PROC_FS
	167	.show = crypto_aead_show,
	168	#endif
	169	.report = crypto_aead_report,
	170	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	171	.maskset = CRYPTO_ALG_TYPE_MASK,
	172	.type = CRYPTO_ALG_TYPE_AEAD,
	173	.tfmsize = offsetof(struct crypto_aead, base),
	174	};
	175
6350449f HX	176	static int aead_geniv_setkey(struct crypto_aead *tfm,
	177	const u8 *key, unsigned int keylen)
	178	{
	179	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	180
	181	return crypto_aead_setkey(ctx->child, key, keylen);
	182	}
	183
	184	static int aead_geniv_setauthsize(struct crypto_aead *tfm,
	185	unsigned int authsize)
	186	{
	187	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	188
	189	return crypto_aead_setauthsize(ctx->child, authsize);
	190	}
	191
856e3f40 HX	192	struct aead_instance aead_geniv_alloc(struct crypto_template tmpl,
856e3f40 HX	193	struct rtattr **tb, u32 type, u32 mask)
5b6d2d7f HX	194	{
	195	const char *name;
	196	struct crypto_aead_spawn *spawn;
	197	struct crypto_attr_type *algt;
856e3f40 HX	198	struct aead_instance *inst;
	199	struct aead_alg *alg;
	200	unsigned int ivsize;
	201	unsigned int maxauthsize;
5b6d2d7f HX	202	int err;
	203
	204	algt = crypto_get_attr_type(tb);
5b6d2d7f	205	if (IS_ERR(algt))
3e8afe35	206	return ERR_CAST(algt);
5b6d2d7f	207
5e4b8c1f	208	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
5b6d2d7f HX	209	return ERR_PTR(-EINVAL);
	210
	211	name = crypto_attr_alg_name(tb[1]);
5b6d2d7f	212	if (IS_ERR(name))
3e8afe35	213	return ERR_CAST(name);
5b6d2d7f HX	214
	215	inst = kzalloc(sizeof(inst) + sizeof(spawn), GFP_KERNEL);
	216	if (!inst)
	217	return ERR_PTR(-ENOMEM);
	218
856e3f40	219	spawn = aead_instance_ctx(inst);
5b6d2d7f HX	220
	221	/* Ignore async algorithms if necessary. */
	222	mask \|= crypto_requires_sync(algt->type, algt->mask);
	223
856e3f40	224	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
b0d955ba	225	err = crypto_grab_aead(spawn, name, type, mask);
5b6d2d7f HX	226	if (err)
	227	goto err_free_inst;
	228
856e3f40 HX	229	alg = crypto_spawn_aead_alg(spawn);
856e3f40 HX	230
30e4c010 HX	231	ivsize = crypto_aead_alg_ivsize(alg);
30e4c010 HX	232	maxauthsize = crypto_aead_alg_maxauthsize(alg);
5b6d2d7f HX	233
5b6d2d7f HX	234	err = -EINVAL;
6350449f	235	if (ivsize < sizeof(u64))
5b6d2d7f HX	236	goto err_drop_alg;
5b6d2d7f HX	237
856e3f40 HX	238	err = -ENAMETOOLONG;
	239	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
	240	"%s(%s)", tmpl->name, alg->base.cra_name) >=
	241	CRYPTO_MAX_ALG_NAME)
	242	goto err_drop_alg;
	243	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
	244	"%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	245	CRYPTO_MAX_ALG_NAME)
	246	goto err_drop_alg;
5b6d2d7f	247
5e4b8c1f	248	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
856e3f40 HX	249	inst->alg.base.cra_priority = alg->base.cra_priority;
	250	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	251	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
6350449f HX	252	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);
	253
	254	inst->alg.setkey = aead_geniv_setkey;
	255	inst->alg.setauthsize = aead_geniv_setauthsize;
5b6d2d7f	256
856e3f40 HX	257	inst->alg.ivsize = ivsize;
856e3f40 HX	258	inst->alg.maxauthsize = maxauthsize;
5b6d2d7f HX	259
	260	out:
	261	return inst;
	262
	263	err_drop_alg:
	264	crypto_drop_aead(spawn);
	265	err_free_inst:
	266	kfree(inst);
	267	inst = ERR_PTR(err);
	268	goto out;
	269	}
	270	EXPORT_SYMBOL_GPL(aead_geniv_alloc);
	271
856e3f40	272	void aead_geniv_free(struct aead_instance *inst)
5b6d2d7f	273	{
856e3f40	274	crypto_drop_aead(aead_instance_ctx(inst));
5b6d2d7f HX	275	kfree(inst);
	276	}
	277	EXPORT_SYMBOL_GPL(aead_geniv_free);
	278
149a3971 HX	279	int aead_init_geniv(struct crypto_aead *aead)
	280	{
	281	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	282	struct aead_instance *inst = aead_alg_instance(aead);
	283	struct crypto_aead *child;
	284	int err;
	285
	286	spin_lock_init(&ctx->lock);
	287
	288	err = crypto_get_default_rng();
	289	if (err)
	290	goto out;
	291
	292	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
	293	crypto_aead_ivsize(aead));
	294	crypto_put_default_rng();
	295	if (err)
	296	goto out;
	297
ca0494c0 HX	298	ctx->sknull = crypto_get_default_null_skcipher2();
	299	err = PTR_ERR(ctx->sknull);
	300	if (IS_ERR(ctx->sknull))
	301	goto out;
	302
149a3971 HX	303	child = crypto_spawn_aead(aead_instance_ctx(inst));
	304	err = PTR_ERR(child);
	305	if (IS_ERR(child))
	306	goto drop_null;
	307
	308	ctx->child = child;
	309	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
	310	sizeof(struct aead_request));
	311
	312	err = 0;
	313
	314	out:
	315	return err;
	316
	317	drop_null:
ca0494c0	318	crypto_put_default_null_skcipher2();
149a3971 HX	319	goto out;
	320	}
	321	EXPORT_SYMBOL_GPL(aead_init_geniv);
	322
	323	void aead_exit_geniv(struct crypto_aead *tfm)
	324	{
	325	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	326
	327	crypto_free_aead(ctx->child);
ca0494c0	328	crypto_put_default_null_skcipher2();
149a3971 HX	329	}
	330	EXPORT_SYMBOL_GPL(aead_exit_geniv);
	331
d29ce988 HX	332	int crypto_grab_aead(struct crypto_aead_spawn spawn, const char name,
	333	u32 type, u32 mask)
	334	{
5d1d65f8 HX	335	spawn->base.frontend = &crypto_aead_type;
5d1d65f8 HX	336	return crypto_grab_spawn(&spawn->base, name, type, mask);
d29ce988 HX	337	}
	338	EXPORT_SYMBOL_GPL(crypto_grab_aead);
	339
	340	struct crypto_aead crypto_alloc_aead(const char alg_name, u32 type, u32 mask)
	341	{
5d1d65f8	342	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
d29ce988 HX	343	}
	344	EXPORT_SYMBOL_GPL(crypto_alloc_aead);
	345
63293c61 HX	346	static int aead_prepare_alg(struct aead_alg *alg)
	347	{
	348	struct crypto_alg *base = &alg->base;
	349
7a530aa9 HX	350	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
7a530aa9 HX	351	PAGE_SIZE / 8)
63293c61 HX	352	return -EINVAL;
63293c61 HX	353
7a530aa9 HX	354	if (!alg->chunksize)
	355	alg->chunksize = base->cra_blocksize;
	356
b0d955ba	357	base->cra_type = &crypto_aead_type;
63293c61 HX	358	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	359	base->cra_flags \|= CRYPTO_ALG_TYPE_AEAD;
	360
	361	return 0;
	362	}
	363
	364	int crypto_register_aead(struct aead_alg *alg)
	365	{
	366	struct crypto_alg *base = &alg->base;
	367	int err;
	368
	369	err = aead_prepare_alg(alg);
	370	if (err)
	371	return err;
	372
	373	return crypto_register_alg(base);
	374	}
	375	EXPORT_SYMBOL_GPL(crypto_register_aead);
	376
43615369	377	void crypto_unregister_aead(struct aead_alg *alg)
63293c61	378	{
43615369	379	crypto_unregister_alg(&alg->base);
63293c61 HX	380	}
	381	EXPORT_SYMBOL_GPL(crypto_unregister_aead);
	382
caab9461 HX	383	int crypto_register_aeads(struct aead_alg *algs, int count)
	384	{
	385	int i, ret;
	386
	387	for (i = 0; i < count; i++) {
	388	ret = crypto_register_aead(&algs[i]);
	389	if (ret)
	390	goto err;
	391	}
	392
	393	return 0;
	394
	395	err:
	396	for (--i; i >= 0; --i)
	397	crypto_unregister_aead(&algs[i]);
	398
	399	return ret;
	400	}
	401	EXPORT_SYMBOL_GPL(crypto_register_aeads);
	402
	403	void crypto_unregister_aeads(struct aead_alg *algs, int count)
	404	{
	405	int i;
	406
	407	for (i = count - 1; i >= 0; --i)
	408	crypto_unregister_aead(&algs[i]);
	409	}
	410	EXPORT_SYMBOL_GPL(crypto_unregister_aeads);
	411
63293c61 HX	412	int aead_register_instance(struct crypto_template *tmpl,
	413	struct aead_instance *inst)
	414	{
	415	int err;
	416
	417	err = aead_prepare_alg(&inst->alg);
	418	if (err)
	419	return err;
	420
	421	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
	422	}
	423	EXPORT_SYMBOL_GPL(aead_register_instance);
	424
1ae97820 HX	425	MODULE_LICENSE("GPL");
1ae97820 HX	426	MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");