]> git.proxmox.com Git - mirror_zfs.git/commit - include/sys/zfs_context.h
Illumos Crypto Port module added to enable native encryption in zfs
authorTom Caputi <tcaputi@datto.com>
Thu, 12 May 2016 14:51:24 +0000 (10:51 -0400)
committerBrian Behlendorf <behlendorf1@llnl.gov>
Wed, 20 Jul 2016 17:43:30 +0000 (10:43 -0700)
commit0b04990a5de594659d2cf20458965277dd6efeb1
tree74369a3236e03359f7276cb9b19687e28c7f6d59
parentbe88e733a634ad0d7f20350e1a17ede51922d3ff
Illumos Crypto Port module added to enable native encryption in zfs

A port of the Illumos Crypto Framework to a Linux kernel module (found
in module/icp). This is needed to do the actual encryption work. We cannot
use the Linux kernel's built in crypto api because it is only exported to
GPL-licensed modules. Having the ICP also means the crypto code can run on
any of the other kernels under OpenZFS. I ended up porting over most of the
internals of the framework, which means that porting over other API calls (if
we need them) should be fairly easy. Specifically, I have ported over the API
functions related to encryption, digests, macs, and crypto templates. The ICP
is able to use assembly-accelerated encryption on amd64 machines and AES-NI
instructions on Intel chips that support it. There are place-holder
directories for similar assembly optimizations for other architectures
(although they have not been written).

Signed-off-by: Tom Caputi <tcaputi@datto.com>
Signed-off-by: Tony Hutter <hutter2@llnl.gov>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Issue #4329
90 files changed:
.gitignore
config/always-arch.m4 [new file with mode: 0644]
config/user-arch.m4 [deleted file]
config/user.m4
config/zfs-build.m4
configure.ac
copy-builtin
include/sys/Makefile.am
include/sys/crypto/Makefile.am [new file with mode: 0644]
include/sys/crypto/api.h [new file with mode: 0644]
include/sys/crypto/common.h [new file with mode: 0644]
include/sys/crypto/icp.h [new file with mode: 0644]
include/sys/zfs_context.h
lib/Makefile.am
lib/libicp/Makefile.am [new file with mode: 0644]
lib/libspl/include/sys/byteorder.h
lib/libspl/include/sys/file.h
lib/libspl/include/sys/types.h
lib/libzpool/Makefile.am
lib/libzpool/kernel.c
lib/libzpool/taskq.c
module/Makefile.in
module/icp/Makefile.in [new file with mode: 0644]
module/icp/algs/aes/aes_impl.c [new file with mode: 0644]
module/icp/algs/aes/aes_modes.c [new file with mode: 0644]
module/icp/algs/modes/cbc.c [new file with mode: 0644]
module/icp/algs/modes/ccm.c [new file with mode: 0644]
module/icp/algs/modes/ctr.c [new file with mode: 0644]
module/icp/algs/modes/ecb.c [new file with mode: 0644]
module/icp/algs/modes/gcm.c [new file with mode: 0644]
module/icp/algs/modes/modes.c [new file with mode: 0644]
module/icp/algs/sha1/sha1.c [new file with mode: 0644]
module/icp/algs/sha2/sha2.c [new file with mode: 0644]
module/icp/api/kcf_cipher.c [new file with mode: 0644]
module/icp/api/kcf_ctxops.c [new file with mode: 0644]
module/icp/api/kcf_digest.c [new file with mode: 0644]
module/icp/api/kcf_mac.c [new file with mode: 0644]
module/icp/api/kcf_miscapi.c [new file with mode: 0644]
module/icp/asm-x86_64/aes/THIRDPARTYLICENSE.gladman [new file with mode: 0644]
module/icp/asm-x86_64/aes/THIRDPARTYLICENSE.gladman.descrip [new file with mode: 0644]
module/icp/asm-x86_64/aes/THIRDPARTYLICENSE.openssl [new file with mode: 0644]
module/icp/asm-x86_64/aes/THIRDPARTYLICENSE.openssl.descrip [new file with mode: 0644]
module/icp/asm-x86_64/aes/aes_amd64.S [new file with mode: 0644]
module/icp/asm-x86_64/aes/aes_intel.S [new file with mode: 0644]
module/icp/asm-x86_64/aes/aeskey.c [new file with mode: 0644]
module/icp/asm-x86_64/aes/aesopt.h [new file with mode: 0644]
module/icp/asm-x86_64/aes/aestab.h [new file with mode: 0644]
module/icp/asm-x86_64/aes/aestab2.h [new file with mode: 0644]
module/icp/asm-x86_64/modes/gcm_intel.S [new file with mode: 0644]
module/icp/asm-x86_64/sha1/sha1-x86_64.S [new file with mode: 0644]
module/icp/asm-x86_64/sha2/sha256_impl.S [new file with mode: 0644]
module/icp/core/kcf_callprov.c [new file with mode: 0644]
module/icp/core/kcf_mech_tabs.c [new file with mode: 0644]
module/icp/core/kcf_prov_lib.c [new file with mode: 0644]
module/icp/core/kcf_prov_tabs.c [new file with mode: 0644]
module/icp/core/kcf_sched.c [new file with mode: 0644]
module/icp/illumos-crypto.c [new file with mode: 0644]
module/icp/include/aes/aes_impl.h [new file with mode: 0644]
module/icp/include/modes/modes.h [new file with mode: 0644]
module/icp/include/sha1/sha1.h [new file with mode: 0644]
module/icp/include/sha1/sha1_consts.h [new file with mode: 0644]
module/icp/include/sha1/sha1_impl.h [new file with mode: 0644]
module/icp/include/sha2/sha2.h [new file with mode: 0644]
module/icp/include/sha2/sha2_consts.h [new file with mode: 0644]
module/icp/include/sha2/sha2_impl.h [new file with mode: 0644]
module/icp/include/sys/asm_linkage.h [new file with mode: 0644]
module/icp/include/sys/bitmap.h [new file with mode: 0644]
module/icp/include/sys/crypto/elfsign.h [new file with mode: 0644]
module/icp/include/sys/crypto/impl.h [new file with mode: 0644]
module/icp/include/sys/crypto/ioctl.h [new file with mode: 0644]
module/icp/include/sys/crypto/ioctladmin.h [new file with mode: 0644]
module/icp/include/sys/crypto/ops_impl.h [new file with mode: 0644]
module/icp/include/sys/crypto/sched_impl.h [new file with mode: 0644]
module/icp/include/sys/crypto/spi.h [new file with mode: 0644]
module/icp/include/sys/ia32/asm_linkage.h [new file with mode: 0644]
module/icp/include/sys/ia32/stack.h [new file with mode: 0644]
module/icp/include/sys/ia32/trap.h [new file with mode: 0644]
module/icp/include/sys/modctl.h [new file with mode: 0644]
module/icp/include/sys/modhash.h [new file with mode: 0644]
module/icp/include/sys/modhash_impl.h [new file with mode: 0644]
module/icp/include/sys/stack.h [new file with mode: 0644]
module/icp/include/sys/trap.h [new file with mode: 0644]
module/icp/io/aes.c [new file with mode: 0644]
module/icp/io/sha1_mod.c [new file with mode: 0644]
module/icp/io/sha2_mod.c [new file with mode: 0644]
module/icp/os/modconf.c [new file with mode: 0644]
module/icp/os/modhash.c [new file with mode: 0644]
module/icp/spi/kcf_spi.c [new file with mode: 0644]
scripts/common.sh.in
zfs-script-config.sh.in