]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * xfrm algorithm interface | |
3 | * | |
4 | * Copyright (c) 2002 James Morris <jmorris@intercode.com.au> | |
5 | * | |
6 | * This program is free software; you can redistribute it and/or modify it | |
7 | * under the terms of the GNU General Public License as published by the Free | |
8 | * Software Foundation; either version 2 of the License, or (at your option) | |
9 | * any later version. | |
10 | */ | |
11 | ||
12 | #include <linux/module.h> | |
13 | #include <linux/kernel.h> | |
14 | #include <linux/pfkeyv2.h> | |
15 | #include <linux/crypto.h> | |
16 | #include <linux/scatterlist.h> | |
17 | #include <net/xfrm.h> | |
18 | #if defined(CONFIG_INET_ESP) || defined(CONFIG_INET_ESP_MODULE) || defined(CONFIG_INET6_ESP) || defined(CONFIG_INET6_ESP_MODULE) | |
19 | #include <net/esp.h> | |
20 | #endif | |
21 | ||
22 | /* | |
23 | * Algorithms supported by IPsec. These entries contain properties which | |
24 | * are used in key negotiation and xfrm processing, and are used to verify | |
25 | * that instantiated crypto transforms have correct parameters for IPsec | |
26 | * purposes. | |
27 | */ | |
28 | static struct xfrm_algo_desc aead_list[] = { | |
29 | { | |
30 | .name = "rfc4106(gcm(aes))", | |
31 | ||
32 | .uinfo = { | |
33 | .aead = { | |
34 | .icv_truncbits = 64, | |
35 | } | |
36 | }, | |
37 | ||
38 | .pfkey_supported = 1, | |
39 | ||
40 | .desc = { | |
41 | .sadb_alg_id = SADB_X_EALG_AES_GCM_ICV8, | |
42 | .sadb_alg_ivlen = 8, | |
43 | .sadb_alg_minbits = 128, | |
44 | .sadb_alg_maxbits = 256 | |
45 | } | |
46 | }, | |
47 | { | |
48 | .name = "rfc4106(gcm(aes))", | |
49 | ||
50 | .uinfo = { | |
51 | .aead = { | |
52 | .icv_truncbits = 96, | |
53 | } | |
54 | }, | |
55 | ||
56 | .pfkey_supported = 1, | |
57 | ||
58 | .desc = { | |
59 | .sadb_alg_id = SADB_X_EALG_AES_GCM_ICV12, | |
60 | .sadb_alg_ivlen = 8, | |
61 | .sadb_alg_minbits = 128, | |
62 | .sadb_alg_maxbits = 256 | |
63 | } | |
64 | }, | |
65 | { | |
66 | .name = "rfc4106(gcm(aes))", | |
67 | ||
68 | .uinfo = { | |
69 | .aead = { | |
70 | .icv_truncbits = 128, | |
71 | } | |
72 | }, | |
73 | ||
74 | .pfkey_supported = 1, | |
75 | ||
76 | .desc = { | |
77 | .sadb_alg_id = SADB_X_EALG_AES_GCM_ICV16, | |
78 | .sadb_alg_ivlen = 8, | |
79 | .sadb_alg_minbits = 128, | |
80 | .sadb_alg_maxbits = 256 | |
81 | } | |
82 | }, | |
83 | { | |
84 | .name = "rfc4309(ccm(aes))", | |
85 | ||
86 | .uinfo = { | |
87 | .aead = { | |
88 | .icv_truncbits = 64, | |
89 | } | |
90 | }, | |
91 | ||
92 | .pfkey_supported = 1, | |
93 | ||
94 | .desc = { | |
95 | .sadb_alg_id = SADB_X_EALG_AES_CCM_ICV8, | |
96 | .sadb_alg_ivlen = 8, | |
97 | .sadb_alg_minbits = 128, | |
98 | .sadb_alg_maxbits = 256 | |
99 | } | |
100 | }, | |
101 | { | |
102 | .name = "rfc4309(ccm(aes))", | |
103 | ||
104 | .uinfo = { | |
105 | .aead = { | |
106 | .icv_truncbits = 96, | |
107 | } | |
108 | }, | |
109 | ||
110 | .pfkey_supported = 1, | |
111 | ||
112 | .desc = { | |
113 | .sadb_alg_id = SADB_X_EALG_AES_CCM_ICV12, | |
114 | .sadb_alg_ivlen = 8, | |
115 | .sadb_alg_minbits = 128, | |
116 | .sadb_alg_maxbits = 256 | |
117 | } | |
118 | }, | |
119 | { | |
120 | .name = "rfc4309(ccm(aes))", | |
121 | ||
122 | .uinfo = { | |
123 | .aead = { | |
124 | .icv_truncbits = 128, | |
125 | } | |
126 | }, | |
127 | ||
128 | .pfkey_supported = 1, | |
129 | ||
130 | .desc = { | |
131 | .sadb_alg_id = SADB_X_EALG_AES_CCM_ICV16, | |
132 | .sadb_alg_ivlen = 8, | |
133 | .sadb_alg_minbits = 128, | |
134 | .sadb_alg_maxbits = 256 | |
135 | } | |
136 | }, | |
137 | { | |
138 | .name = "rfc4543(gcm(aes))", | |
139 | ||
140 | .uinfo = { | |
141 | .aead = { | |
142 | .icv_truncbits = 128, | |
143 | } | |
144 | }, | |
145 | ||
146 | .pfkey_supported = 1, | |
147 | ||
148 | .desc = { | |
149 | .sadb_alg_id = SADB_X_EALG_NULL_AES_GMAC, | |
150 | .sadb_alg_ivlen = 8, | |
151 | .sadb_alg_minbits = 128, | |
152 | .sadb_alg_maxbits = 256 | |
153 | } | |
154 | }, | |
155 | }; | |
156 | ||
157 | static struct xfrm_algo_desc aalg_list[] = { | |
158 | { | |
159 | .name = "digest_null", | |
160 | ||
161 | .uinfo = { | |
162 | .auth = { | |
163 | .icv_truncbits = 0, | |
164 | .icv_fullbits = 0, | |
165 | } | |
166 | }, | |
167 | ||
168 | .pfkey_supported = 1, | |
169 | ||
170 | .desc = { | |
171 | .sadb_alg_id = SADB_X_AALG_NULL, | |
172 | .sadb_alg_ivlen = 0, | |
173 | .sadb_alg_minbits = 0, | |
174 | .sadb_alg_maxbits = 0 | |
175 | } | |
176 | }, | |
177 | { | |
178 | .name = "hmac(md5)", | |
179 | .compat = "md5", | |
180 | ||
181 | .uinfo = { | |
182 | .auth = { | |
183 | .icv_truncbits = 96, | |
184 | .icv_fullbits = 128, | |
185 | } | |
186 | }, | |
187 | ||
188 | .pfkey_supported = 1, | |
189 | ||
190 | .desc = { | |
191 | .sadb_alg_id = SADB_AALG_MD5HMAC, | |
192 | .sadb_alg_ivlen = 0, | |
193 | .sadb_alg_minbits = 128, | |
194 | .sadb_alg_maxbits = 128 | |
195 | } | |
196 | }, | |
197 | { | |
198 | .name = "hmac(sha1)", | |
199 | .compat = "sha1", | |
200 | ||
201 | .uinfo = { | |
202 | .auth = { | |
203 | .icv_truncbits = 96, | |
204 | .icv_fullbits = 160, | |
205 | } | |
206 | }, | |
207 | ||
208 | .pfkey_supported = 1, | |
209 | ||
210 | .desc = { | |
211 | .sadb_alg_id = SADB_AALG_SHA1HMAC, | |
212 | .sadb_alg_ivlen = 0, | |
213 | .sadb_alg_minbits = 160, | |
214 | .sadb_alg_maxbits = 160 | |
215 | } | |
216 | }, | |
217 | { | |
218 | .name = "hmac(sha256)", | |
219 | .compat = "sha256", | |
220 | ||
221 | .uinfo = { | |
222 | .auth = { | |
223 | .icv_truncbits = 96, | |
224 | .icv_fullbits = 256, | |
225 | } | |
226 | }, | |
227 | ||
228 | .pfkey_supported = 1, | |
229 | ||
230 | .desc = { | |
231 | .sadb_alg_id = SADB_X_AALG_SHA2_256HMAC, | |
232 | .sadb_alg_ivlen = 0, | |
233 | .sadb_alg_minbits = 256, | |
234 | .sadb_alg_maxbits = 256 | |
235 | } | |
236 | }, | |
237 | { | |
238 | .name = "hmac(sha384)", | |
239 | ||
240 | .uinfo = { | |
241 | .auth = { | |
242 | .icv_truncbits = 192, | |
243 | .icv_fullbits = 384, | |
244 | } | |
245 | }, | |
246 | ||
247 | .pfkey_supported = 1, | |
248 | ||
249 | .desc = { | |
250 | .sadb_alg_id = SADB_X_AALG_SHA2_384HMAC, | |
251 | .sadb_alg_ivlen = 0, | |
252 | .sadb_alg_minbits = 384, | |
253 | .sadb_alg_maxbits = 384 | |
254 | } | |
255 | }, | |
256 | { | |
257 | .name = "hmac(sha512)", | |
258 | ||
259 | .uinfo = { | |
260 | .auth = { | |
261 | .icv_truncbits = 256, | |
262 | .icv_fullbits = 512, | |
263 | } | |
264 | }, | |
265 | ||
266 | .pfkey_supported = 1, | |
267 | ||
268 | .desc = { | |
269 | .sadb_alg_id = SADB_X_AALG_SHA2_512HMAC, | |
270 | .sadb_alg_ivlen = 0, | |
271 | .sadb_alg_minbits = 512, | |
272 | .sadb_alg_maxbits = 512 | |
273 | } | |
274 | }, | |
275 | { | |
276 | .name = "hmac(rmd160)", | |
277 | .compat = "rmd160", | |
278 | ||
279 | .uinfo = { | |
280 | .auth = { | |
281 | .icv_truncbits = 96, | |
282 | .icv_fullbits = 160, | |
283 | } | |
284 | }, | |
285 | ||
286 | .pfkey_supported = 1, | |
287 | ||
288 | .desc = { | |
289 | .sadb_alg_id = SADB_X_AALG_RIPEMD160HMAC, | |
290 | .sadb_alg_ivlen = 0, | |
291 | .sadb_alg_minbits = 160, | |
292 | .sadb_alg_maxbits = 160 | |
293 | } | |
294 | }, | |
295 | { | |
296 | .name = "xcbc(aes)", | |
297 | ||
298 | .uinfo = { | |
299 | .auth = { | |
300 | .icv_truncbits = 96, | |
301 | .icv_fullbits = 128, | |
302 | } | |
303 | }, | |
304 | ||
305 | .pfkey_supported = 1, | |
306 | ||
307 | .desc = { | |
308 | .sadb_alg_id = SADB_X_AALG_AES_XCBC_MAC, | |
309 | .sadb_alg_ivlen = 0, | |
310 | .sadb_alg_minbits = 128, | |
311 | .sadb_alg_maxbits = 128 | |
312 | } | |
313 | }, | |
314 | { | |
315 | /* rfc4494 */ | |
316 | .name = "cmac(aes)", | |
317 | ||
318 | .uinfo = { | |
319 | .auth = { | |
320 | .icv_truncbits = 96, | |
321 | .icv_fullbits = 128, | |
322 | } | |
323 | }, | |
324 | ||
325 | .pfkey_supported = 0, | |
326 | }, | |
327 | }; | |
328 | ||
329 | static struct xfrm_algo_desc ealg_list[] = { | |
330 | { | |
331 | .name = "ecb(cipher_null)", | |
332 | .compat = "cipher_null", | |
333 | ||
334 | .uinfo = { | |
335 | .encr = { | |
336 | .blockbits = 8, | |
337 | .defkeybits = 0, | |
338 | } | |
339 | }, | |
340 | ||
341 | .pfkey_supported = 1, | |
342 | ||
343 | .desc = { | |
344 | .sadb_alg_id = SADB_EALG_NULL, | |
345 | .sadb_alg_ivlen = 0, | |
346 | .sadb_alg_minbits = 0, | |
347 | .sadb_alg_maxbits = 0 | |
348 | } | |
349 | }, | |
350 | { | |
351 | .name = "cbc(des)", | |
352 | .compat = "des", | |
353 | ||
354 | .uinfo = { | |
355 | .encr = { | |
356 | .blockbits = 64, | |
357 | .defkeybits = 64, | |
358 | } | |
359 | }, | |
360 | ||
361 | .pfkey_supported = 1, | |
362 | ||
363 | .desc = { | |
364 | .sadb_alg_id = SADB_EALG_DESCBC, | |
365 | .sadb_alg_ivlen = 8, | |
366 | .sadb_alg_minbits = 64, | |
367 | .sadb_alg_maxbits = 64 | |
368 | } | |
369 | }, | |
370 | { | |
371 | .name = "cbc(des3_ede)", | |
372 | .compat = "des3_ede", | |
373 | ||
374 | .uinfo = { | |
375 | .encr = { | |
376 | .blockbits = 64, | |
377 | .defkeybits = 192, | |
378 | } | |
379 | }, | |
380 | ||
381 | .pfkey_supported = 1, | |
382 | ||
383 | .desc = { | |
384 | .sadb_alg_id = SADB_EALG_3DESCBC, | |
385 | .sadb_alg_ivlen = 8, | |
386 | .sadb_alg_minbits = 192, | |
387 | .sadb_alg_maxbits = 192 | |
388 | } | |
389 | }, | |
390 | { | |
391 | .name = "cbc(cast5)", | |
392 | .compat = "cast5", | |
393 | ||
394 | .uinfo = { | |
395 | .encr = { | |
396 | .blockbits = 64, | |
397 | .defkeybits = 128, | |
398 | } | |
399 | }, | |
400 | ||
401 | .pfkey_supported = 1, | |
402 | ||
403 | .desc = { | |
404 | .sadb_alg_id = SADB_X_EALG_CASTCBC, | |
405 | .sadb_alg_ivlen = 8, | |
406 | .sadb_alg_minbits = 40, | |
407 | .sadb_alg_maxbits = 128 | |
408 | } | |
409 | }, | |
410 | { | |
411 | .name = "cbc(blowfish)", | |
412 | .compat = "blowfish", | |
413 | ||
414 | .uinfo = { | |
415 | .encr = { | |
416 | .blockbits = 64, | |
417 | .defkeybits = 128, | |
418 | } | |
419 | }, | |
420 | ||
421 | .pfkey_supported = 1, | |
422 | ||
423 | .desc = { | |
424 | .sadb_alg_id = SADB_X_EALG_BLOWFISHCBC, | |
425 | .sadb_alg_ivlen = 8, | |
426 | .sadb_alg_minbits = 40, | |
427 | .sadb_alg_maxbits = 448 | |
428 | } | |
429 | }, | |
430 | { | |
431 | .name = "cbc(aes)", | |
432 | .compat = "aes", | |
433 | ||
434 | .uinfo = { | |
435 | .encr = { | |
436 | .blockbits = 128, | |
437 | .defkeybits = 128, | |
438 | } | |
439 | }, | |
440 | ||
441 | .pfkey_supported = 1, | |
442 | ||
443 | .desc = { | |
444 | .sadb_alg_id = SADB_X_EALG_AESCBC, | |
445 | .sadb_alg_ivlen = 8, | |
446 | .sadb_alg_minbits = 128, | |
447 | .sadb_alg_maxbits = 256 | |
448 | } | |
449 | }, | |
450 | { | |
451 | .name = "cbc(serpent)", | |
452 | .compat = "serpent", | |
453 | ||
454 | .uinfo = { | |
455 | .encr = { | |
456 | .blockbits = 128, | |
457 | .defkeybits = 128, | |
458 | } | |
459 | }, | |
460 | ||
461 | .pfkey_supported = 1, | |
462 | ||
463 | .desc = { | |
464 | .sadb_alg_id = SADB_X_EALG_SERPENTCBC, | |
465 | .sadb_alg_ivlen = 8, | |
466 | .sadb_alg_minbits = 128, | |
467 | .sadb_alg_maxbits = 256, | |
468 | } | |
469 | }, | |
470 | { | |
471 | .name = "cbc(camellia)", | |
472 | .compat = "camellia", | |
473 | ||
474 | .uinfo = { | |
475 | .encr = { | |
476 | .blockbits = 128, | |
477 | .defkeybits = 128, | |
478 | } | |
479 | }, | |
480 | ||
481 | .pfkey_supported = 1, | |
482 | ||
483 | .desc = { | |
484 | .sadb_alg_id = SADB_X_EALG_CAMELLIACBC, | |
485 | .sadb_alg_ivlen = 8, | |
486 | .sadb_alg_minbits = 128, | |
487 | .sadb_alg_maxbits = 256 | |
488 | } | |
489 | }, | |
490 | { | |
491 | .name = "cbc(twofish)", | |
492 | .compat = "twofish", | |
493 | ||
494 | .uinfo = { | |
495 | .encr = { | |
496 | .blockbits = 128, | |
497 | .defkeybits = 128, | |
498 | } | |
499 | }, | |
500 | ||
501 | .pfkey_supported = 1, | |
502 | ||
503 | .desc = { | |
504 | .sadb_alg_id = SADB_X_EALG_TWOFISHCBC, | |
505 | .sadb_alg_ivlen = 8, | |
506 | .sadb_alg_minbits = 128, | |
507 | .sadb_alg_maxbits = 256 | |
508 | } | |
509 | }, | |
510 | { | |
511 | .name = "rfc3686(ctr(aes))", | |
512 | ||
513 | .uinfo = { | |
514 | .encr = { | |
515 | .blockbits = 128, | |
516 | .defkeybits = 160, /* 128-bit key + 32-bit nonce */ | |
517 | } | |
518 | }, | |
519 | ||
520 | .pfkey_supported = 1, | |
521 | ||
522 | .desc = { | |
523 | .sadb_alg_id = SADB_X_EALG_AESCTR, | |
524 | .sadb_alg_ivlen = 8, | |
525 | .sadb_alg_minbits = 160, | |
526 | .sadb_alg_maxbits = 288 | |
527 | } | |
528 | }, | |
529 | }; | |
530 | ||
531 | static struct xfrm_algo_desc calg_list[] = { | |
532 | { | |
533 | .name = "deflate", | |
534 | .uinfo = { | |
535 | .comp = { | |
536 | .threshold = 90, | |
537 | } | |
538 | }, | |
539 | .pfkey_supported = 1, | |
540 | .desc = { .sadb_alg_id = SADB_X_CALG_DEFLATE } | |
541 | }, | |
542 | { | |
543 | .name = "lzs", | |
544 | .uinfo = { | |
545 | .comp = { | |
546 | .threshold = 90, | |
547 | } | |
548 | }, | |
549 | .pfkey_supported = 1, | |
550 | .desc = { .sadb_alg_id = SADB_X_CALG_LZS } | |
551 | }, | |
552 | { | |
553 | .name = "lzjh", | |
554 | .uinfo = { | |
555 | .comp = { | |
556 | .threshold = 50, | |
557 | } | |
558 | }, | |
559 | .pfkey_supported = 1, | |
560 | .desc = { .sadb_alg_id = SADB_X_CALG_LZJH } | |
561 | }, | |
562 | }; | |
563 | ||
564 | static inline int aalg_entries(void) | |
565 | { | |
566 | return ARRAY_SIZE(aalg_list); | |
567 | } | |
568 | ||
569 | static inline int ealg_entries(void) | |
570 | { | |
571 | return ARRAY_SIZE(ealg_list); | |
572 | } | |
573 | ||
574 | static inline int calg_entries(void) | |
575 | { | |
576 | return ARRAY_SIZE(calg_list); | |
577 | } | |
578 | ||
579 | struct xfrm_algo_list { | |
580 | struct xfrm_algo_desc *algs; | |
581 | int entries; | |
582 | u32 type; | |
583 | u32 mask; | |
584 | }; | |
585 | ||
586 | static const struct xfrm_algo_list xfrm_aead_list = { | |
587 | .algs = aead_list, | |
588 | .entries = ARRAY_SIZE(aead_list), | |
589 | .type = CRYPTO_ALG_TYPE_AEAD, | |
590 | .mask = CRYPTO_ALG_TYPE_MASK, | |
591 | }; | |
592 | ||
593 | static const struct xfrm_algo_list xfrm_aalg_list = { | |
594 | .algs = aalg_list, | |
595 | .entries = ARRAY_SIZE(aalg_list), | |
596 | .type = CRYPTO_ALG_TYPE_HASH, | |
597 | .mask = CRYPTO_ALG_TYPE_HASH_MASK, | |
598 | }; | |
599 | ||
600 | static const struct xfrm_algo_list xfrm_ealg_list = { | |
601 | .algs = ealg_list, | |
602 | .entries = ARRAY_SIZE(ealg_list), | |
603 | .type = CRYPTO_ALG_TYPE_BLKCIPHER, | |
604 | .mask = CRYPTO_ALG_TYPE_BLKCIPHER_MASK, | |
605 | }; | |
606 | ||
607 | static const struct xfrm_algo_list xfrm_calg_list = { | |
608 | .algs = calg_list, | |
609 | .entries = ARRAY_SIZE(calg_list), | |
610 | .type = CRYPTO_ALG_TYPE_COMPRESS, | |
611 | .mask = CRYPTO_ALG_TYPE_MASK, | |
612 | }; | |
613 | ||
614 | static struct xfrm_algo_desc *xfrm_find_algo( | |
615 | const struct xfrm_algo_list *algo_list, | |
616 | int match(const struct xfrm_algo_desc *entry, const void *data), | |
617 | const void *data, int probe) | |
618 | { | |
619 | struct xfrm_algo_desc *list = algo_list->algs; | |
620 | int i, status; | |
621 | ||
622 | for (i = 0; i < algo_list->entries; i++) { | |
623 | if (!match(list + i, data)) | |
624 | continue; | |
625 | ||
626 | if (list[i].available) | |
627 | return &list[i]; | |
628 | ||
629 | if (!probe) | |
630 | break; | |
631 | ||
632 | status = crypto_has_alg(list[i].name, algo_list->type, | |
633 | algo_list->mask); | |
634 | if (!status) | |
635 | break; | |
636 | ||
637 | list[i].available = status; | |
638 | return &list[i]; | |
639 | } | |
640 | return NULL; | |
641 | } | |
642 | ||
643 | static int xfrm_alg_id_match(const struct xfrm_algo_desc *entry, | |
644 | const void *data) | |
645 | { | |
646 | return entry->desc.sadb_alg_id == (unsigned long)data; | |
647 | } | |
648 | ||
649 | struct xfrm_algo_desc *xfrm_aalg_get_byid(int alg_id) | |
650 | { | |
651 | return xfrm_find_algo(&xfrm_aalg_list, xfrm_alg_id_match, | |
652 | (void *)(unsigned long)alg_id, 1); | |
653 | } | |
654 | EXPORT_SYMBOL_GPL(xfrm_aalg_get_byid); | |
655 | ||
656 | struct xfrm_algo_desc *xfrm_ealg_get_byid(int alg_id) | |
657 | { | |
658 | return xfrm_find_algo(&xfrm_ealg_list, xfrm_alg_id_match, | |
659 | (void *)(unsigned long)alg_id, 1); | |
660 | } | |
661 | EXPORT_SYMBOL_GPL(xfrm_ealg_get_byid); | |
662 | ||
663 | struct xfrm_algo_desc *xfrm_calg_get_byid(int alg_id) | |
664 | { | |
665 | return xfrm_find_algo(&xfrm_calg_list, xfrm_alg_id_match, | |
666 | (void *)(unsigned long)alg_id, 1); | |
667 | } | |
668 | EXPORT_SYMBOL_GPL(xfrm_calg_get_byid); | |
669 | ||
670 | static int xfrm_alg_name_match(const struct xfrm_algo_desc *entry, | |
671 | const void *data) | |
672 | { | |
673 | const char *name = data; | |
674 | ||
675 | return name && (!strcmp(name, entry->name) || | |
676 | (entry->compat && !strcmp(name, entry->compat))); | |
677 | } | |
678 | ||
679 | struct xfrm_algo_desc *xfrm_aalg_get_byname(const char *name, int probe) | |
680 | { | |
681 | return xfrm_find_algo(&xfrm_aalg_list, xfrm_alg_name_match, name, | |
682 | probe); | |
683 | } | |
684 | EXPORT_SYMBOL_GPL(xfrm_aalg_get_byname); | |
685 | ||
686 | struct xfrm_algo_desc *xfrm_ealg_get_byname(const char *name, int probe) | |
687 | { | |
688 | return xfrm_find_algo(&xfrm_ealg_list, xfrm_alg_name_match, name, | |
689 | probe); | |
690 | } | |
691 | EXPORT_SYMBOL_GPL(xfrm_ealg_get_byname); | |
692 | ||
693 | struct xfrm_algo_desc *xfrm_calg_get_byname(const char *name, int probe) | |
694 | { | |
695 | return xfrm_find_algo(&xfrm_calg_list, xfrm_alg_name_match, name, | |
696 | probe); | |
697 | } | |
698 | EXPORT_SYMBOL_GPL(xfrm_calg_get_byname); | |
699 | ||
700 | struct xfrm_aead_name { | |
701 | const char *name; | |
702 | int icvbits; | |
703 | }; | |
704 | ||
705 | static int xfrm_aead_name_match(const struct xfrm_algo_desc *entry, | |
706 | const void *data) | |
707 | { | |
708 | const struct xfrm_aead_name *aead = data; | |
709 | const char *name = aead->name; | |
710 | ||
711 | return aead->icvbits == entry->uinfo.aead.icv_truncbits && name && | |
712 | !strcmp(name, entry->name); | |
713 | } | |
714 | ||
715 | struct xfrm_algo_desc *xfrm_aead_get_byname(const char *name, int icv_len, int probe) | |
716 | { | |
717 | struct xfrm_aead_name data = { | |
718 | .name = name, | |
719 | .icvbits = icv_len, | |
720 | }; | |
721 | ||
722 | return xfrm_find_algo(&xfrm_aead_list, xfrm_aead_name_match, &data, | |
723 | probe); | |
724 | } | |
725 | EXPORT_SYMBOL_GPL(xfrm_aead_get_byname); | |
726 | ||
727 | struct xfrm_algo_desc *xfrm_aalg_get_byidx(unsigned int idx) | |
728 | { | |
729 | if (idx >= aalg_entries()) | |
730 | return NULL; | |
731 | ||
732 | return &aalg_list[idx]; | |
733 | } | |
734 | EXPORT_SYMBOL_GPL(xfrm_aalg_get_byidx); | |
735 | ||
736 | struct xfrm_algo_desc *xfrm_ealg_get_byidx(unsigned int idx) | |
737 | { | |
738 | if (idx >= ealg_entries()) | |
739 | return NULL; | |
740 | ||
741 | return &ealg_list[idx]; | |
742 | } | |
743 | EXPORT_SYMBOL_GPL(xfrm_ealg_get_byidx); | |
744 | ||
745 | /* | |
746 | * Probe for the availability of crypto algorithms, and set the available | |
747 | * flag for any algorithms found on the system. This is typically called by | |
748 | * pfkey during userspace SA add, update or register. | |
749 | */ | |
750 | void xfrm_probe_algs(void) | |
751 | { | |
752 | int i, status; | |
753 | ||
754 | BUG_ON(in_softirq()); | |
755 | ||
756 | for (i = 0; i < aalg_entries(); i++) { | |
757 | status = crypto_has_hash(aalg_list[i].name, 0, | |
758 | CRYPTO_ALG_ASYNC); | |
759 | if (aalg_list[i].available != status) | |
760 | aalg_list[i].available = status; | |
761 | } | |
762 | ||
763 | for (i = 0; i < ealg_entries(); i++) { | |
764 | status = crypto_has_ablkcipher(ealg_list[i].name, 0, 0); | |
765 | if (ealg_list[i].available != status) | |
766 | ealg_list[i].available = status; | |
767 | } | |
768 | ||
769 | for (i = 0; i < calg_entries(); i++) { | |
770 | status = crypto_has_comp(calg_list[i].name, 0, | |
771 | CRYPTO_ALG_ASYNC); | |
772 | if (calg_list[i].available != status) | |
773 | calg_list[i].available = status; | |
774 | } | |
775 | } | |
776 | EXPORT_SYMBOL_GPL(xfrm_probe_algs); | |
777 | ||
778 | int xfrm_count_pfkey_auth_supported(void) | |
779 | { | |
780 | int i, n; | |
781 | ||
782 | for (i = 0, n = 0; i < aalg_entries(); i++) | |
783 | if (aalg_list[i].available && aalg_list[i].pfkey_supported) | |
784 | n++; | |
785 | return n; | |
786 | } | |
787 | EXPORT_SYMBOL_GPL(xfrm_count_pfkey_auth_supported); | |
788 | ||
789 | int xfrm_count_pfkey_enc_supported(void) | |
790 | { | |
791 | int i, n; | |
792 | ||
793 | for (i = 0, n = 0; i < ealg_entries(); i++) | |
794 | if (ealg_list[i].available && ealg_list[i].pfkey_supported) | |
795 | n++; | |
796 | return n; | |
797 | } | |
798 | EXPORT_SYMBOL_GPL(xfrm_count_pfkey_enc_supported); | |
799 | ||
800 | MODULE_LICENSE("GPL"); |