]>
Commit | Line | Data |
---|---|---|
64470f1b RS |
1 | /* LRW: as defined by Cyril Guyot in |
2 | * http://grouper.ieee.org/groups/1619/email/pdf00017.pdf | |
3 | * | |
4 | * Copyright (c) 2006 Rik Snel <rsnel@cube.dyndns.org> | |
5 | * | |
6c2205b8 | 6 | * Based on ecb.c |
64470f1b RS |
7 | * Copyright (c) 2006 Herbert Xu <herbert@gondor.apana.org.au> |
8 | * | |
9 | * This program is free software; you can redistribute it and/or modify it | |
10 | * under the terms of the GNU General Public License as published by the Free | |
11 | * Software Foundation; either version 2 of the License, or (at your option) | |
12 | * any later version. | |
13 | */ | |
14 | /* This implementation is checked against the test vectors in the above | |
15 | * document and by a test vector provided by Ken Buchanan at | |
16 | * http://www.mail-archive.com/stds-p1619@listserv.ieee.org/msg00173.html | |
17 | * | |
18 | * The test vectors are included in the testing module tcrypt.[ch] */ | |
6c2205b8 | 19 | |
700cb3f5 HX |
20 | #include <crypto/internal/skcipher.h> |
21 | #include <crypto/scatterwalk.h> | |
64470f1b RS |
22 | #include <linux/err.h> |
23 | #include <linux/init.h> | |
24 | #include <linux/kernel.h> | |
25 | #include <linux/module.h> | |
26 | #include <linux/scatterlist.h> | |
27 | #include <linux/slab.h> | |
28 | ||
29 | #include <crypto/b128ops.h> | |
30 | #include <crypto/gf128mul.h> | |
6c2205b8 | 31 | #include <crypto/lrw.h> |
64470f1b | 32 | |
700cb3f5 HX |
33 | #define LRW_BUFFER_SIZE 128u |
34 | ||
171c0204 | 35 | struct priv { |
700cb3f5 | 36 | struct crypto_skcipher *child; |
171c0204 JK |
37 | struct lrw_table_ctx table; |
38 | }; | |
39 | ||
700cb3f5 HX |
40 | struct rctx { |
41 | be128 buf[LRW_BUFFER_SIZE / sizeof(be128)]; | |
42 | ||
43 | be128 t; | |
44 | ||
45 | be128 *ext; | |
46 | ||
47 | struct scatterlist srcbuf[2]; | |
48 | struct scatterlist dstbuf[2]; | |
49 | struct scatterlist *src; | |
50 | struct scatterlist *dst; | |
51 | ||
52 | unsigned int left; | |
53 | ||
54 | struct skcipher_request subreq; | |
55 | }; | |
56 | ||
64470f1b RS |
57 | static inline void setbit128_bbe(void *b, int bit) |
58 | { | |
8eb2dfac HX |
59 | __set_bit(bit ^ (0x80 - |
60 | #ifdef __BIG_ENDIAN | |
61 | BITS_PER_LONG | |
62 | #else | |
63 | BITS_PER_BYTE | |
64 | #endif | |
65 | ), b); | |
64470f1b RS |
66 | } |
67 | ||
6c2205b8 | 68 | int lrw_init_table(struct lrw_table_ctx *ctx, const u8 *tweak) |
64470f1b | 69 | { |
64470f1b | 70 | be128 tmp = { 0 }; |
171c0204 | 71 | int i; |
64470f1b RS |
72 | |
73 | if (ctx->table) | |
74 | gf128mul_free_64k(ctx->table); | |
75 | ||
76 | /* initialize multiplication table for Key2 */ | |
171c0204 | 77 | ctx->table = gf128mul_init_64k_bbe((be128 *)tweak); |
64470f1b RS |
78 | if (!ctx->table) |
79 | return -ENOMEM; | |
80 | ||
81 | /* initialize optimization table */ | |
82 | for (i = 0; i < 128; i++) { | |
83 | setbit128_bbe(&tmp, i); | |
84 | ctx->mulinc[i] = tmp; | |
85 | gf128mul_64k_bbe(&ctx->mulinc[i], ctx->table); | |
86 | } | |
87 | ||
88 | return 0; | |
89 | } | |
6c2205b8 | 90 | EXPORT_SYMBOL_GPL(lrw_init_table); |
64470f1b | 91 | |
6c2205b8 | 92 | void lrw_free_table(struct lrw_table_ctx *ctx) |
171c0204 JK |
93 | { |
94 | if (ctx->table) | |
95 | gf128mul_free_64k(ctx->table); | |
96 | } | |
6c2205b8 | 97 | EXPORT_SYMBOL_GPL(lrw_free_table); |
171c0204 | 98 | |
700cb3f5 | 99 | static int setkey(struct crypto_skcipher *parent, const u8 *key, |
171c0204 JK |
100 | unsigned int keylen) |
101 | { | |
700cb3f5 HX |
102 | struct priv *ctx = crypto_skcipher_ctx(parent); |
103 | struct crypto_skcipher *child = ctx->child; | |
171c0204 JK |
104 | int err, bsize = LRW_BLOCK_SIZE; |
105 | const u8 *tweak = key + keylen - bsize; | |
106 | ||
700cb3f5 HX |
107 | crypto_skcipher_clear_flags(child, CRYPTO_TFM_REQ_MASK); |
108 | crypto_skcipher_set_flags(child, crypto_skcipher_get_flags(parent) & | |
109 | CRYPTO_TFM_REQ_MASK); | |
110 | err = crypto_skcipher_setkey(child, key, keylen - bsize); | |
111 | crypto_skcipher_set_flags(parent, crypto_skcipher_get_flags(child) & | |
112 | CRYPTO_TFM_RES_MASK); | |
171c0204 JK |
113 | if (err) |
114 | return err; | |
171c0204 JK |
115 | |
116 | return lrw_init_table(&ctx->table, tweak); | |
117 | } | |
118 | ||
64470f1b RS |
119 | static inline void inc(be128 *iv) |
120 | { | |
fd4609a8 MS |
121 | be64_add_cpu(&iv->b, 1); |
122 | if (!iv->b) | |
123 | be64_add_cpu(&iv->a, 1); | |
64470f1b RS |
124 | } |
125 | ||
64470f1b RS |
126 | /* this returns the number of consequative 1 bits starting |
127 | * from the right, get_index128(00 00 00 00 00 00 ... 00 00 10 FB) = 2 */ | |
128 | static inline int get_index128(be128 *block) | |
129 | { | |
130 | int x; | |
131 | __be32 *p = (__be32 *) block; | |
132 | ||
133 | for (p += 3, x = 0; x < 128; p--, x += 32) { | |
134 | u32 val = be32_to_cpup(p); | |
135 | ||
136 | if (!~val) | |
137 | continue; | |
138 | ||
139 | return x + ffz(val); | |
140 | } | |
141 | ||
19d2fffe OM |
142 | /* |
143 | * If we get here, then x == 128 and we are incrementing the counter | |
144 | * from all ones to all zeros. This means we must return index 127, i.e. | |
145 | * the one corresponding to key2*{ 1,...,1 }. | |
146 | */ | |
147 | return 127; | |
64470f1b RS |
148 | } |
149 | ||
700cb3f5 | 150 | static int post_crypt(struct skcipher_request *req) |
64470f1b | 151 | { |
700cb3f5 HX |
152 | struct rctx *rctx = skcipher_request_ctx(req); |
153 | be128 *buf = rctx->ext ?: rctx->buf; | |
154 | struct skcipher_request *subreq; | |
155 | const int bs = LRW_BLOCK_SIZE; | |
156 | struct skcipher_walk w; | |
157 | struct scatterlist *sg; | |
158 | unsigned offset; | |
64470f1b | 159 | int err; |
700cb3f5 HX |
160 | |
161 | subreq = &rctx->subreq; | |
162 | err = skcipher_walk_virt(&w, subreq, false); | |
163 | ||
164 | while (w.nbytes) { | |
165 | unsigned int avail = w.nbytes; | |
166 | be128 *wdst; | |
167 | ||
168 | wdst = w.dst.virt.addr; | |
169 | ||
170 | do { | |
171 | be128_xor(wdst, buf++, wdst); | |
172 | wdst++; | |
173 | } while ((avail -= bs) >= bs); | |
174 | ||
175 | err = skcipher_walk_done(&w, avail); | |
176 | } | |
177 | ||
178 | rctx->left -= subreq->cryptlen; | |
179 | ||
180 | if (err || !rctx->left) | |
181 | goto out; | |
182 | ||
183 | rctx->dst = rctx->dstbuf; | |
184 | ||
185 | scatterwalk_done(&w.out, 0, 1); | |
186 | sg = w.out.sg; | |
187 | offset = w.out.offset; | |
188 | ||
189 | if (rctx->dst != sg) { | |
190 | rctx->dst[0] = *sg; | |
191 | sg_unmark_end(rctx->dst); | |
192 | scatterwalk_crypto_chain(rctx->dst, sg_next(sg), 0, 2); | |
193 | } | |
194 | rctx->dst[0].length -= offset - sg->offset; | |
195 | rctx->dst[0].offset = offset; | |
196 | ||
197 | out: | |
198 | return err; | |
199 | } | |
200 | ||
201 | static int pre_crypt(struct skcipher_request *req) | |
202 | { | |
203 | struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req); | |
204 | struct rctx *rctx = skcipher_request_ctx(req); | |
205 | struct priv *ctx = crypto_skcipher_ctx(tfm); | |
206 | be128 *buf = rctx->ext ?: rctx->buf; | |
207 | struct skcipher_request *subreq; | |
4660720d | 208 | const int bs = LRW_BLOCK_SIZE; |
700cb3f5 HX |
209 | struct skcipher_walk w; |
210 | struct scatterlist *sg; | |
211 | unsigned cryptlen; | |
212 | unsigned offset; | |
64470f1b | 213 | be128 *iv; |
700cb3f5 HX |
214 | bool more; |
215 | int err; | |
64470f1b | 216 | |
700cb3f5 HX |
217 | subreq = &rctx->subreq; |
218 | skcipher_request_set_tfm(subreq, tfm); | |
64470f1b | 219 | |
700cb3f5 HX |
220 | cryptlen = subreq->cryptlen; |
221 | more = rctx->left > cryptlen; | |
222 | if (!more) | |
223 | cryptlen = rctx->left; | |
64470f1b | 224 | |
700cb3f5 HX |
225 | skcipher_request_set_crypt(subreq, rctx->src, rctx->dst, |
226 | cryptlen, req->iv); | |
64470f1b | 227 | |
700cb3f5 HX |
228 | err = skcipher_walk_virt(&w, subreq, false); |
229 | iv = w.iv; | |
64470f1b | 230 | |
700cb3f5 HX |
231 | while (w.nbytes) { |
232 | unsigned int avail = w.nbytes; | |
233 | be128 *wsrc; | |
234 | be128 *wdst; | |
235 | ||
236 | wsrc = w.src.virt.addr; | |
237 | wdst = w.dst.virt.addr; | |
64470f1b | 238 | |
64470f1b | 239 | do { |
700cb3f5 HX |
240 | *buf++ = rctx->t; |
241 | be128_xor(wdst++, &rctx->t, wsrc++); | |
242 | ||
64470f1b RS |
243 | /* T <- I*Key2, using the optimization |
244 | * discussed in the specification */ | |
700cb3f5 | 245 | be128_xor(&rctx->t, &rctx->t, |
171c0204 | 246 | &ctx->table.mulinc[get_index128(iv)]); |
64470f1b | 247 | inc(iv); |
700cb3f5 | 248 | } while ((avail -= bs) >= bs); |
64470f1b | 249 | |
700cb3f5 HX |
250 | err = skcipher_walk_done(&w, avail); |
251 | } | |
64470f1b | 252 | |
700cb3f5 HX |
253 | skcipher_request_set_tfm(subreq, ctx->child); |
254 | skcipher_request_set_crypt(subreq, rctx->dst, rctx->dst, | |
255 | cryptlen, NULL); | |
64470f1b | 256 | |
700cb3f5 HX |
257 | if (err || !more) |
258 | goto out; | |
259 | ||
260 | rctx->src = rctx->srcbuf; | |
261 | ||
262 | scatterwalk_done(&w.in, 0, 1); | |
263 | sg = w.in.sg; | |
264 | offset = w.in.offset; | |
265 | ||
266 | if (rctx->src != sg) { | |
267 | rctx->src[0] = *sg; | |
268 | sg_unmark_end(rctx->src); | |
269 | scatterwalk_crypto_chain(rctx->src, sg_next(sg), 0, 2); | |
270 | } | |
271 | rctx->src[0].length -= offset - sg->offset; | |
272 | rctx->src[0].offset = offset; | |
273 | ||
274 | out: | |
275 | return err; | |
276 | } | |
277 | ||
278 | static int init_crypt(struct skcipher_request *req, crypto_completion_t done) | |
279 | { | |
280 | struct priv *ctx = crypto_skcipher_ctx(crypto_skcipher_reqtfm(req)); | |
281 | struct rctx *rctx = skcipher_request_ctx(req); | |
282 | struct skcipher_request *subreq; | |
283 | gfp_t gfp; | |
284 | ||
285 | subreq = &rctx->subreq; | |
286 | skcipher_request_set_callback(subreq, req->base.flags, done, req); | |
287 | ||
288 | gfp = req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP ? GFP_KERNEL : | |
289 | GFP_ATOMIC; | |
290 | rctx->ext = NULL; | |
291 | ||
292 | subreq->cryptlen = LRW_BUFFER_SIZE; | |
293 | if (req->cryptlen > LRW_BUFFER_SIZE) { | |
9df0eb18 EB |
294 | unsigned int n = min(req->cryptlen, (unsigned int)PAGE_SIZE); |
295 | ||
296 | rctx->ext = kmalloc(n, gfp); | |
297 | if (rctx->ext) | |
298 | subreq->cryptlen = n; | |
700cb3f5 HX |
299 | } |
300 | ||
301 | rctx->src = req->src; | |
302 | rctx->dst = req->dst; | |
303 | rctx->left = req->cryptlen; | |
304 | ||
305 | /* calculate first value of T */ | |
306 | memcpy(&rctx->t, req->iv, sizeof(rctx->t)); | |
307 | ||
308 | /* T <- I*Key2 */ | |
309 | gf128mul_64k_bbe(&rctx->t, ctx->table.table); | |
64470f1b | 310 | |
700cb3f5 HX |
311 | return 0; |
312 | } | |
313 | ||
314 | static void exit_crypt(struct skcipher_request *req) | |
315 | { | |
316 | struct rctx *rctx = skcipher_request_ctx(req); | |
317 | ||
318 | rctx->left = 0; | |
319 | ||
320 | if (rctx->ext) | |
67152419 | 321 | kzfree(rctx->ext); |
700cb3f5 HX |
322 | } |
323 | ||
324 | static int do_encrypt(struct skcipher_request *req, int err) | |
325 | { | |
326 | struct rctx *rctx = skcipher_request_ctx(req); | |
327 | struct skcipher_request *subreq; | |
328 | ||
329 | subreq = &rctx->subreq; | |
330 | ||
331 | while (!err && rctx->left) { | |
332 | err = pre_crypt(req) ?: | |
333 | crypto_skcipher_encrypt(subreq) ?: | |
334 | post_crypt(req); | |
335 | ||
4e5b0ad5 | 336 | if (err == -EINPROGRESS || err == -EBUSY) |
700cb3f5 | 337 | return err; |
64470f1b RS |
338 | } |
339 | ||
700cb3f5 | 340 | exit_crypt(req); |
64470f1b RS |
341 | return err; |
342 | } | |
343 | ||
700cb3f5 HX |
344 | static void encrypt_done(struct crypto_async_request *areq, int err) |
345 | { | |
346 | struct skcipher_request *req = areq->data; | |
347 | struct skcipher_request *subreq; | |
348 | struct rctx *rctx; | |
349 | ||
350 | rctx = skcipher_request_ctx(req); | |
4702bbee HX |
351 | |
352 | if (err == -EINPROGRESS) { | |
353 | if (rctx->left != req->cryptlen) | |
354 | return; | |
355 | goto out; | |
356 | } | |
357 | ||
700cb3f5 HX |
358 | subreq = &rctx->subreq; |
359 | subreq->base.flags &= CRYPTO_TFM_REQ_MAY_BACKLOG; | |
360 | ||
361 | err = do_encrypt(req, err ?: post_crypt(req)); | |
362 | if (rctx->left) | |
363 | return; | |
364 | ||
4702bbee | 365 | out: |
700cb3f5 HX |
366 | skcipher_request_complete(req, err); |
367 | } | |
368 | ||
369 | static int encrypt(struct skcipher_request *req) | |
370 | { | |
371 | return do_encrypt(req, init_crypt(req, encrypt_done)); | |
372 | } | |
373 | ||
374 | static int do_decrypt(struct skcipher_request *req, int err) | |
64470f1b | 375 | { |
700cb3f5 HX |
376 | struct rctx *rctx = skcipher_request_ctx(req); |
377 | struct skcipher_request *subreq; | |
378 | ||
379 | subreq = &rctx->subreq; | |
380 | ||
381 | while (!err && rctx->left) { | |
382 | err = pre_crypt(req) ?: | |
383 | crypto_skcipher_decrypt(subreq) ?: | |
384 | post_crypt(req); | |
385 | ||
4e5b0ad5 | 386 | if (err == -EINPROGRESS || err == -EBUSY) |
700cb3f5 HX |
387 | return err; |
388 | } | |
64470f1b | 389 | |
700cb3f5 HX |
390 | exit_crypt(req); |
391 | return err; | |
64470f1b RS |
392 | } |
393 | ||
700cb3f5 | 394 | static void decrypt_done(struct crypto_async_request *areq, int err) |
64470f1b | 395 | { |
700cb3f5 HX |
396 | struct skcipher_request *req = areq->data; |
397 | struct skcipher_request *subreq; | |
398 | struct rctx *rctx; | |
399 | ||
400 | rctx = skcipher_request_ctx(req); | |
4702bbee HX |
401 | |
402 | if (err == -EINPROGRESS) { | |
403 | if (rctx->left != req->cryptlen) | |
404 | return; | |
405 | goto out; | |
406 | } | |
407 | ||
700cb3f5 HX |
408 | subreq = &rctx->subreq; |
409 | subreq->base.flags &= CRYPTO_TFM_REQ_MAY_BACKLOG; | |
410 | ||
411 | err = do_decrypt(req, err ?: post_crypt(req)); | |
412 | if (rctx->left) | |
413 | return; | |
64470f1b | 414 | |
4702bbee | 415 | out: |
700cb3f5 HX |
416 | skcipher_request_complete(req, err); |
417 | } | |
418 | ||
419 | static int decrypt(struct skcipher_request *req) | |
420 | { | |
421 | return do_decrypt(req, init_crypt(req, decrypt_done)); | |
64470f1b RS |
422 | } |
423 | ||
6c2205b8 JK |
424 | int lrw_crypt(struct blkcipher_desc *desc, struct scatterlist *sdst, |
425 | struct scatterlist *ssrc, unsigned int nbytes, | |
426 | struct lrw_crypt_req *req) | |
427 | { | |
428 | const unsigned int bsize = LRW_BLOCK_SIZE; | |
429 | const unsigned int max_blks = req->tbuflen / bsize; | |
430 | struct lrw_table_ctx *ctx = req->table_ctx; | |
431 | struct blkcipher_walk walk; | |
432 | unsigned int nblocks; | |
433 | be128 *iv, *src, *dst, *t; | |
434 | be128 *t_buf = req->tbuf; | |
435 | int err, i; | |
436 | ||
437 | BUG_ON(max_blks < 1); | |
438 | ||
439 | blkcipher_walk_init(&walk, sdst, ssrc, nbytes); | |
440 | ||
441 | err = blkcipher_walk_virt(desc, &walk); | |
442 | nbytes = walk.nbytes; | |
443 | if (!nbytes) | |
444 | return err; | |
445 | ||
446 | nblocks = min(walk.nbytes / bsize, max_blks); | |
447 | src = (be128 *)walk.src.virt.addr; | |
448 | dst = (be128 *)walk.dst.virt.addr; | |
449 | ||
450 | /* calculate first value of T */ | |
451 | iv = (be128 *)walk.iv; | |
452 | t_buf[0] = *iv; | |
453 | ||
454 | /* T <- I*Key2 */ | |
455 | gf128mul_64k_bbe(&t_buf[0], ctx->table); | |
456 | ||
457 | i = 0; | |
458 | goto first; | |
459 | ||
460 | for (;;) { | |
461 | do { | |
462 | for (i = 0; i < nblocks; i++) { | |
463 | /* T <- I*Key2, using the optimization | |
464 | * discussed in the specification */ | |
465 | be128_xor(&t_buf[i], t, | |
466 | &ctx->mulinc[get_index128(iv)]); | |
467 | inc(iv); | |
468 | first: | |
469 | t = &t_buf[i]; | |
470 | ||
471 | /* PP <- T xor P */ | |
472 | be128_xor(dst + i, t, src + i); | |
473 | } | |
474 | ||
475 | /* CC <- E(Key2,PP) */ | |
476 | req->crypt_fn(req->crypt_ctx, (u8 *)dst, | |
477 | nblocks * bsize); | |
478 | ||
479 | /* C <- T xor CC */ | |
480 | for (i = 0; i < nblocks; i++) | |
481 | be128_xor(dst + i, dst + i, &t_buf[i]); | |
482 | ||
483 | src += nblocks; | |
484 | dst += nblocks; | |
485 | nbytes -= nblocks * bsize; | |
486 | nblocks = min(nbytes / bsize, max_blks); | |
487 | } while (nblocks > 0); | |
488 | ||
489 | err = blkcipher_walk_done(desc, &walk, nbytes); | |
490 | nbytes = walk.nbytes; | |
491 | if (!nbytes) | |
492 | break; | |
493 | ||
494 | nblocks = min(nbytes / bsize, max_blks); | |
495 | src = (be128 *)walk.src.virt.addr; | |
496 | dst = (be128 *)walk.dst.virt.addr; | |
497 | } | |
498 | ||
499 | return err; | |
500 | } | |
501 | EXPORT_SYMBOL_GPL(lrw_crypt); | |
502 | ||
700cb3f5 | 503 | static int init_tfm(struct crypto_skcipher *tfm) |
64470f1b | 504 | { |
700cb3f5 HX |
505 | struct skcipher_instance *inst = skcipher_alg_instance(tfm); |
506 | struct crypto_skcipher_spawn *spawn = skcipher_instance_ctx(inst); | |
507 | struct priv *ctx = crypto_skcipher_ctx(tfm); | |
508 | struct crypto_skcipher *cipher; | |
64470f1b | 509 | |
700cb3f5 | 510 | cipher = crypto_spawn_skcipher(spawn); |
2e306ee0 HX |
511 | if (IS_ERR(cipher)) |
512 | return PTR_ERR(cipher); | |
64470f1b | 513 | |
2e306ee0 | 514 | ctx->child = cipher; |
700cb3f5 HX |
515 | |
516 | crypto_skcipher_set_reqsize(tfm, crypto_skcipher_reqsize(cipher) + | |
517 | sizeof(struct rctx)); | |
518 | ||
64470f1b RS |
519 | return 0; |
520 | } | |
521 | ||
700cb3f5 | 522 | static void exit_tfm(struct crypto_skcipher *tfm) |
64470f1b | 523 | { |
700cb3f5 | 524 | struct priv *ctx = crypto_skcipher_ctx(tfm); |
171c0204 JK |
525 | |
526 | lrw_free_table(&ctx->table); | |
700cb3f5 HX |
527 | crypto_free_skcipher(ctx->child); |
528 | } | |
529 | ||
530 | static void free(struct skcipher_instance *inst) | |
531 | { | |
532 | crypto_drop_skcipher(skcipher_instance_ctx(inst)); | |
533 | kfree(inst); | |
64470f1b RS |
534 | } |
535 | ||
700cb3f5 | 536 | static int create(struct crypto_template *tmpl, struct rtattr **tb) |
64470f1b | 537 | { |
700cb3f5 HX |
538 | struct crypto_skcipher_spawn *spawn; |
539 | struct skcipher_instance *inst; | |
540 | struct crypto_attr_type *algt; | |
541 | struct skcipher_alg *alg; | |
542 | const char *cipher_name; | |
543 | char ecb_name[CRYPTO_MAX_ALG_NAME]; | |
ebc610e5 HX |
544 | int err; |
545 | ||
700cb3f5 HX |
546 | algt = crypto_get_attr_type(tb); |
547 | if (IS_ERR(algt)) | |
548 | return PTR_ERR(algt); | |
549 | ||
550 | if ((algt->type ^ CRYPTO_ALG_TYPE_SKCIPHER) & algt->mask) | |
551 | return -EINVAL; | |
552 | ||
553 | cipher_name = crypto_attr_alg_name(tb[1]); | |
554 | if (IS_ERR(cipher_name)) | |
555 | return PTR_ERR(cipher_name); | |
556 | ||
557 | inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL); | |
558 | if (!inst) | |
559 | return -ENOMEM; | |
560 | ||
561 | spawn = skcipher_instance_ctx(inst); | |
562 | ||
563 | crypto_set_skcipher_spawn(spawn, skcipher_crypto_instance(inst)); | |
564 | err = crypto_grab_skcipher(spawn, cipher_name, 0, | |
565 | crypto_requires_sync(algt->type, | |
566 | algt->mask)); | |
567 | if (err == -ENOENT) { | |
568 | err = -ENAMETOOLONG; | |
569 | if (snprintf(ecb_name, CRYPTO_MAX_ALG_NAME, "ecb(%s)", | |
570 | cipher_name) >= CRYPTO_MAX_ALG_NAME) | |
571 | goto err_free_inst; | |
572 | ||
573 | err = crypto_grab_skcipher(spawn, ecb_name, 0, | |
574 | crypto_requires_sync(algt->type, | |
575 | algt->mask)); | |
576 | } | |
577 | ||
ebc610e5 | 578 | if (err) |
700cb3f5 | 579 | goto err_free_inst; |
64470f1b | 580 | |
700cb3f5 | 581 | alg = crypto_skcipher_spawn_alg(spawn); |
64470f1b | 582 | |
700cb3f5 HX |
583 | err = -EINVAL; |
584 | if (alg->base.cra_blocksize != LRW_BLOCK_SIZE) | |
585 | goto err_drop_spawn; | |
64470f1b | 586 | |
700cb3f5 HX |
587 | if (crypto_skcipher_alg_ivsize(alg)) |
588 | goto err_drop_spawn; | |
64470f1b | 589 | |
700cb3f5 HX |
590 | err = crypto_inst_setname(skcipher_crypto_instance(inst), "lrw", |
591 | &alg->base); | |
592 | if (err) | |
593 | goto err_drop_spawn; | |
64470f1b | 594 | |
700cb3f5 HX |
595 | err = -EINVAL; |
596 | cipher_name = alg->base.cra_name; | |
64470f1b | 597 | |
700cb3f5 HX |
598 | /* Alas we screwed up the naming so we have to mangle the |
599 | * cipher name. | |
600 | */ | |
601 | if (!strncmp(cipher_name, "ecb(", 4)) { | |
602 | unsigned len; | |
64470f1b | 603 | |
700cb3f5 HX |
604 | len = strlcpy(ecb_name, cipher_name + 4, sizeof(ecb_name)); |
605 | if (len < 2 || len >= sizeof(ecb_name)) | |
606 | goto err_drop_spawn; | |
64470f1b | 607 | |
700cb3f5 HX |
608 | if (ecb_name[len - 1] != ')') |
609 | goto err_drop_spawn; | |
64470f1b | 610 | |
700cb3f5 | 611 | ecb_name[len - 1] = 0; |
64470f1b | 612 | |
700cb3f5 | 613 | if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME, |
616129cc CJ |
614 | "lrw(%s)", ecb_name) >= CRYPTO_MAX_ALG_NAME) { |
615 | err = -ENAMETOOLONG; | |
616 | goto err_drop_spawn; | |
617 | } | |
d38efad2 CJ |
618 | } else |
619 | goto err_drop_spawn; | |
700cb3f5 HX |
620 | |
621 | inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC; | |
622 | inst->alg.base.cra_priority = alg->base.cra_priority; | |
623 | inst->alg.base.cra_blocksize = LRW_BLOCK_SIZE; | |
624 | inst->alg.base.cra_alignmask = alg->base.cra_alignmask | | |
625 | (__alignof__(u64) - 1); | |
626 | ||
627 | inst->alg.ivsize = LRW_BLOCK_SIZE; | |
628 | inst->alg.min_keysize = crypto_skcipher_alg_min_keysize(alg) + | |
629 | LRW_BLOCK_SIZE; | |
630 | inst->alg.max_keysize = crypto_skcipher_alg_max_keysize(alg) + | |
631 | LRW_BLOCK_SIZE; | |
632 | ||
633 | inst->alg.base.cra_ctxsize = sizeof(struct priv); | |
634 | ||
635 | inst->alg.init = init_tfm; | |
636 | inst->alg.exit = exit_tfm; | |
637 | ||
638 | inst->alg.setkey = setkey; | |
639 | inst->alg.encrypt = encrypt; | |
640 | inst->alg.decrypt = decrypt; | |
641 | ||
642 | inst->free = free; | |
643 | ||
644 | err = skcipher_register_instance(tmpl, inst); | |
645 | if (err) | |
646 | goto err_drop_spawn; | |
647 | ||
648 | out: | |
649 | return err; | |
650 | ||
651 | err_drop_spawn: | |
652 | crypto_drop_skcipher(spawn); | |
653 | err_free_inst: | |
64470f1b | 654 | kfree(inst); |
700cb3f5 | 655 | goto out; |
64470f1b RS |
656 | } |
657 | ||
658 | static struct crypto_template crypto_tmpl = { | |
659 | .name = "lrw", | |
700cb3f5 | 660 | .create = create, |
64470f1b RS |
661 | .module = THIS_MODULE, |
662 | }; | |
663 | ||
664 | static int __init crypto_module_init(void) | |
665 | { | |
666 | return crypto_register_template(&crypto_tmpl); | |
667 | } | |
668 | ||
669 | static void __exit crypto_module_exit(void) | |
670 | { | |
671 | crypto_unregister_template(&crypto_tmpl); | |
672 | } | |
673 | ||
674 | module_init(crypto_module_init); | |
675 | module_exit(crypto_module_exit); | |
676 | ||
677 | MODULE_LICENSE("GPL"); | |
678 | MODULE_DESCRIPTION("LRW block cipher mode"); | |
4943ba16 | 679 | MODULE_ALIAS_CRYPTO("lrw"); |