crypto.h 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480
  1. /*
  2. * Scatterlist Cryptographic API.
  3. *
  4. * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
  5. * Copyright (c) 2002 David S. Miller (davem@redhat.com)
  6. * Copyright (c) 2005 Herbert Xu <herbert@gondor.apana.org.au>
  7. *
  8. * Portions derived from Cryptoapi, by Alexander Kjeldaas <astor@fast.no>
  9. * and Nettle, by Niels Möller.
  10. *
  11. * This program is free software; you can redistribute it and/or modify it
  12. * under the terms of the GNU General Public License as published by the Free
  13. * Software Foundation; either version 2 of the License, or (at your option)
  14. * any later version.
  15. *
  16. */
  17. #ifndef _LINUX_CRYPTO_H
  18. #define _LINUX_CRYPTO_H
  19. #include <asm/atomic.h>
  20. #include <linux/module.h>
  21. #include <linux/kernel.h>
  22. #include <linux/types.h>
  23. #include <linux/list.h>
  24. #include <linux/slab.h>
  25. #include <linux/string.h>
  26. #include <linux/uaccess.h>
  27. /*
  28. * Algorithm masks and types.
  29. */
  30. #define CRYPTO_ALG_TYPE_MASK 0x0000000f
  31. #define CRYPTO_ALG_TYPE_CIPHER 0x00000001
  32. #define CRYPTO_ALG_TYPE_DIGEST 0x00000002
  33. #define CRYPTO_ALG_TYPE_COMPRESS 0x00000004
  34. #define CRYPTO_ALG_LARVAL 0x00000010
  35. /*
  36. * Transform masks and values (for crt_flags).
  37. */
  38. #define CRYPTO_TFM_MODE_MASK 0x000000ff
  39. #define CRYPTO_TFM_REQ_MASK 0x000fff00
  40. #define CRYPTO_TFM_RES_MASK 0xfff00000
  41. #define CRYPTO_TFM_MODE_ECB 0x00000001
  42. #define CRYPTO_TFM_MODE_CBC 0x00000002
  43. #define CRYPTO_TFM_MODE_CFB 0x00000004
  44. #define CRYPTO_TFM_MODE_CTR 0x00000008
  45. #define CRYPTO_TFM_REQ_WEAK_KEY 0x00000100
  46. #define CRYPTO_TFM_REQ_MAY_SLEEP 0x00000200
  47. #define CRYPTO_TFM_RES_WEAK_KEY 0x00100000
  48. #define CRYPTO_TFM_RES_BAD_KEY_LEN 0x00200000
  49. #define CRYPTO_TFM_RES_BAD_KEY_SCHED 0x00400000
  50. #define CRYPTO_TFM_RES_BAD_BLOCK_LEN 0x00800000
  51. #define CRYPTO_TFM_RES_BAD_FLAGS 0x01000000
  52. /*
  53. * Miscellaneous stuff.
  54. */
  55. #define CRYPTO_UNSPEC 0
  56. #define CRYPTO_MAX_ALG_NAME 64
  57. #define CRYPTO_DIR_ENCRYPT 1
  58. #define CRYPTO_DIR_DECRYPT 0
  59. /*
  60. * The macro CRYPTO_MINALIGN_ATTR (along with the void * type in the actual
  61. * declaration) is used to ensure that the crypto_tfm context structure is
  62. * aligned correctly for the given architecture so that there are no alignment
  63. * faults for C data types. In particular, this is required on platforms such
  64. * as arm where pointers are 32-bit aligned but there are data types such as
  65. * u64 which require 64-bit alignment.
  66. */
  67. #if defined(ARCH_KMALLOC_MINALIGN)
  68. #define CRYPTO_MINALIGN ARCH_KMALLOC_MINALIGN
  69. #elif defined(ARCH_SLAB_MINALIGN)
  70. #define CRYPTO_MINALIGN ARCH_SLAB_MINALIGN
  71. #endif
  72. #ifdef CRYPTO_MINALIGN
  73. #define CRYPTO_MINALIGN_ATTR __attribute__ ((__aligned__(CRYPTO_MINALIGN)))
  74. #else
  75. #define CRYPTO_MINALIGN_ATTR
  76. #endif
  77. struct scatterlist;
  78. struct crypto_tfm;
  79. struct cipher_desc {
  80. struct crypto_tfm *tfm;
  81. void (*crfn)(struct crypto_tfm *tfm, u8 *dst, const u8 *src);
  82. unsigned int (*prfn)(const struct cipher_desc *desc, u8 *dst,
  83. const u8 *src, unsigned int nbytes);
  84. void *info;
  85. };
  86. /*
  87. * Algorithms: modular crypto algorithm implementations, managed
  88. * via crypto_register_alg() and crypto_unregister_alg().
  89. */
  90. struct cipher_alg {
  91. unsigned int cia_min_keysize;
  92. unsigned int cia_max_keysize;
  93. int (*cia_setkey)(struct crypto_tfm *tfm, const u8 *key,
  94. unsigned int keylen, u32 *flags);
  95. void (*cia_encrypt)(struct crypto_tfm *tfm, u8 *dst, const u8 *src);
  96. void (*cia_decrypt)(struct crypto_tfm *tfm, u8 *dst, const u8 *src);
  97. unsigned int (*cia_encrypt_ecb)(const struct cipher_desc *desc,
  98. u8 *dst, const u8 *src,
  99. unsigned int nbytes);
  100. unsigned int (*cia_decrypt_ecb)(const struct cipher_desc *desc,
  101. u8 *dst, const u8 *src,
  102. unsigned int nbytes);
  103. unsigned int (*cia_encrypt_cbc)(const struct cipher_desc *desc,
  104. u8 *dst, const u8 *src,
  105. unsigned int nbytes);
  106. unsigned int (*cia_decrypt_cbc)(const struct cipher_desc *desc,
  107. u8 *dst, const u8 *src,
  108. unsigned int nbytes);
  109. };
  110. struct digest_alg {
  111. unsigned int dia_digestsize;
  112. void (*dia_init)(struct crypto_tfm *tfm);
  113. void (*dia_update)(struct crypto_tfm *tfm, const u8 *data,
  114. unsigned int len);
  115. void (*dia_final)(struct crypto_tfm *tfm, u8 *out);
  116. int (*dia_setkey)(struct crypto_tfm *tfm, const u8 *key,
  117. unsigned int keylen, u32 *flags);
  118. };
  119. struct compress_alg {
  120. int (*coa_compress)(struct crypto_tfm *tfm, const u8 *src,
  121. unsigned int slen, u8 *dst, unsigned int *dlen);
  122. int (*coa_decompress)(struct crypto_tfm *tfm, const u8 *src,
  123. unsigned int slen, u8 *dst, unsigned int *dlen);
  124. };
  125. #define cra_cipher cra_u.cipher
  126. #define cra_digest cra_u.digest
  127. #define cra_compress cra_u.compress
  128. struct crypto_alg {
  129. struct list_head cra_list;
  130. u32 cra_flags;
  131. unsigned int cra_blocksize;
  132. unsigned int cra_ctxsize;
  133. unsigned int cra_alignmask;
  134. int cra_priority;
  135. atomic_t cra_refcnt;
  136. char cra_name[CRYPTO_MAX_ALG_NAME];
  137. char cra_driver_name[CRYPTO_MAX_ALG_NAME];
  138. union {
  139. struct cipher_alg cipher;
  140. struct digest_alg digest;
  141. struct compress_alg compress;
  142. } cra_u;
  143. int (*cra_init)(struct crypto_tfm *tfm);
  144. void (*cra_exit)(struct crypto_tfm *tfm);
  145. void (*cra_destroy)(struct crypto_alg *alg);
  146. struct module *cra_module;
  147. };
  148. /*
  149. * Algorithm registration interface.
  150. */
  151. int crypto_register_alg(struct crypto_alg *alg);
  152. int crypto_unregister_alg(struct crypto_alg *alg);
  153. /*
  154. * Algorithm query interface.
  155. */
  156. #ifdef CONFIG_CRYPTO
  157. int crypto_alg_available(const char *name, u32 flags);
  158. #else
  159. static inline int crypto_alg_available(const char *name, u32 flags)
  160. {
  161. return 0;
  162. }
  163. #endif
  164. /*
  165. * Transforms: user-instantiated objects which encapsulate algorithms
  166. * and core processing logic. Managed via crypto_alloc_tfm() and
  167. * crypto_free_tfm(), as well as the various helpers below.
  168. */
  169. struct cipher_tfm {
  170. void *cit_iv;
  171. unsigned int cit_ivsize;
  172. u32 cit_mode;
  173. int (*cit_setkey)(struct crypto_tfm *tfm,
  174. const u8 *key, unsigned int keylen);
  175. int (*cit_encrypt)(struct crypto_tfm *tfm,
  176. struct scatterlist *dst,
  177. struct scatterlist *src,
  178. unsigned int nbytes);
  179. int (*cit_encrypt_iv)(struct crypto_tfm *tfm,
  180. struct scatterlist *dst,
  181. struct scatterlist *src,
  182. unsigned int nbytes, u8 *iv);
  183. int (*cit_decrypt)(struct crypto_tfm *tfm,
  184. struct scatterlist *dst,
  185. struct scatterlist *src,
  186. unsigned int nbytes);
  187. int (*cit_decrypt_iv)(struct crypto_tfm *tfm,
  188. struct scatterlist *dst,
  189. struct scatterlist *src,
  190. unsigned int nbytes, u8 *iv);
  191. void (*cit_xor_block)(u8 *dst, const u8 *src);
  192. };
  193. struct digest_tfm {
  194. void (*dit_init)(struct crypto_tfm *tfm);
  195. void (*dit_update)(struct crypto_tfm *tfm,
  196. struct scatterlist *sg, unsigned int nsg);
  197. void (*dit_final)(struct crypto_tfm *tfm, u8 *out);
  198. void (*dit_digest)(struct crypto_tfm *tfm, struct scatterlist *sg,
  199. unsigned int nsg, u8 *out);
  200. int (*dit_setkey)(struct crypto_tfm *tfm,
  201. const u8 *key, unsigned int keylen);
  202. #ifdef CONFIG_CRYPTO_HMAC
  203. void *dit_hmac_block;
  204. #endif
  205. };
  206. struct compress_tfm {
  207. int (*cot_compress)(struct crypto_tfm *tfm,
  208. const u8 *src, unsigned int slen,
  209. u8 *dst, unsigned int *dlen);
  210. int (*cot_decompress)(struct crypto_tfm *tfm,
  211. const u8 *src, unsigned int slen,
  212. u8 *dst, unsigned int *dlen);
  213. };
  214. #define crt_cipher crt_u.cipher
  215. #define crt_digest crt_u.digest
  216. #define crt_compress crt_u.compress
  217. struct crypto_tfm {
  218. u32 crt_flags;
  219. union {
  220. struct cipher_tfm cipher;
  221. struct digest_tfm digest;
  222. struct compress_tfm compress;
  223. } crt_u;
  224. struct crypto_alg *__crt_alg;
  225. void *__crt_ctx[] CRYPTO_MINALIGN_ATTR;
  226. };
  227. enum {
  228. CRYPTOA_UNSPEC,
  229. CRYPTOA_ALG,
  230. };
  231. struct crypto_attr_alg {
  232. char name[CRYPTO_MAX_ALG_NAME];
  233. };
  234. /*
  235. * Transform user interface.
  236. */
  237. /*
  238. * crypto_alloc_tfm() will first attempt to locate an already loaded algorithm.
  239. * If that fails and the kernel supports dynamically loadable modules, it
  240. * will then attempt to load a module of the same name or alias. A refcount
  241. * is grabbed on the algorithm which is then associated with the new transform.
  242. *
  243. * crypto_free_tfm() frees up the transform and any associated resources,
  244. * then drops the refcount on the associated algorithm.
  245. */
  246. struct crypto_tfm *crypto_alloc_tfm(const char *alg_name, u32 tfm_flags);
  247. void crypto_free_tfm(struct crypto_tfm *tfm);
  248. /*
  249. * Transform helpers which query the underlying algorithm.
  250. */
  251. static inline const char *crypto_tfm_alg_name(struct crypto_tfm *tfm)
  252. {
  253. return tfm->__crt_alg->cra_name;
  254. }
  255. static inline const char *crypto_tfm_alg_modname(struct crypto_tfm *tfm)
  256. {
  257. return module_name(tfm->__crt_alg->cra_module);
  258. }
  259. static inline u32 crypto_tfm_alg_type(struct crypto_tfm *tfm)
  260. {
  261. return tfm->__crt_alg->cra_flags & CRYPTO_ALG_TYPE_MASK;
  262. }
  263. static inline unsigned int crypto_tfm_alg_min_keysize(struct crypto_tfm *tfm)
  264. {
  265. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  266. return tfm->__crt_alg->cra_cipher.cia_min_keysize;
  267. }
  268. static inline unsigned int crypto_tfm_alg_max_keysize(struct crypto_tfm *tfm)
  269. {
  270. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  271. return tfm->__crt_alg->cra_cipher.cia_max_keysize;
  272. }
  273. static inline unsigned int crypto_tfm_alg_ivsize(struct crypto_tfm *tfm)
  274. {
  275. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  276. return tfm->crt_cipher.cit_ivsize;
  277. }
  278. static inline unsigned int crypto_tfm_alg_blocksize(struct crypto_tfm *tfm)
  279. {
  280. return tfm->__crt_alg->cra_blocksize;
  281. }
  282. static inline unsigned int crypto_tfm_alg_digestsize(struct crypto_tfm *tfm)
  283. {
  284. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  285. return tfm->__crt_alg->cra_digest.dia_digestsize;
  286. }
  287. static inline unsigned int crypto_tfm_alg_alignmask(struct crypto_tfm *tfm)
  288. {
  289. return tfm->__crt_alg->cra_alignmask;
  290. }
  291. static inline void *crypto_tfm_ctx(struct crypto_tfm *tfm)
  292. {
  293. return tfm->__crt_ctx;
  294. }
  295. static inline unsigned int crypto_tfm_ctx_alignment(void)
  296. {
  297. struct crypto_tfm *tfm;
  298. return __alignof__(tfm->__crt_ctx);
  299. }
  300. /*
  301. * API wrappers.
  302. */
  303. static inline void crypto_digest_init(struct crypto_tfm *tfm)
  304. {
  305. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  306. tfm->crt_digest.dit_init(tfm);
  307. }
  308. static inline void crypto_digest_update(struct crypto_tfm *tfm,
  309. struct scatterlist *sg,
  310. unsigned int nsg)
  311. {
  312. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  313. tfm->crt_digest.dit_update(tfm, sg, nsg);
  314. }
  315. static inline void crypto_digest_final(struct crypto_tfm *tfm, u8 *out)
  316. {
  317. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  318. tfm->crt_digest.dit_final(tfm, out);
  319. }
  320. static inline void crypto_digest_digest(struct crypto_tfm *tfm,
  321. struct scatterlist *sg,
  322. unsigned int nsg, u8 *out)
  323. {
  324. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  325. tfm->crt_digest.dit_digest(tfm, sg, nsg, out);
  326. }
  327. static inline int crypto_digest_setkey(struct crypto_tfm *tfm,
  328. const u8 *key, unsigned int keylen)
  329. {
  330. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  331. if (tfm->crt_digest.dit_setkey == NULL)
  332. return -ENOSYS;
  333. return tfm->crt_digest.dit_setkey(tfm, key, keylen);
  334. }
  335. static inline int crypto_cipher_setkey(struct crypto_tfm *tfm,
  336. const u8 *key, unsigned int keylen)
  337. {
  338. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  339. return tfm->crt_cipher.cit_setkey(tfm, key, keylen);
  340. }
  341. static inline int crypto_cipher_encrypt(struct crypto_tfm *tfm,
  342. struct scatterlist *dst,
  343. struct scatterlist *src,
  344. unsigned int nbytes)
  345. {
  346. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  347. return tfm->crt_cipher.cit_encrypt(tfm, dst, src, nbytes);
  348. }
  349. static inline int crypto_cipher_encrypt_iv(struct crypto_tfm *tfm,
  350. struct scatterlist *dst,
  351. struct scatterlist *src,
  352. unsigned int nbytes, u8 *iv)
  353. {
  354. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  355. BUG_ON(tfm->crt_cipher.cit_mode == CRYPTO_TFM_MODE_ECB);
  356. return tfm->crt_cipher.cit_encrypt_iv(tfm, dst, src, nbytes, iv);
  357. }
  358. static inline int crypto_cipher_decrypt(struct crypto_tfm *tfm,
  359. struct scatterlist *dst,
  360. struct scatterlist *src,
  361. unsigned int nbytes)
  362. {
  363. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  364. return tfm->crt_cipher.cit_decrypt(tfm, dst, src, nbytes);
  365. }
  366. static inline int crypto_cipher_decrypt_iv(struct crypto_tfm *tfm,
  367. struct scatterlist *dst,
  368. struct scatterlist *src,
  369. unsigned int nbytes, u8 *iv)
  370. {
  371. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  372. BUG_ON(tfm->crt_cipher.cit_mode == CRYPTO_TFM_MODE_ECB);
  373. return tfm->crt_cipher.cit_decrypt_iv(tfm, dst, src, nbytes, iv);
  374. }
  375. static inline void crypto_cipher_set_iv(struct crypto_tfm *tfm,
  376. const u8 *src, unsigned int len)
  377. {
  378. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  379. memcpy(tfm->crt_cipher.cit_iv, src, len);
  380. }
  381. static inline void crypto_cipher_get_iv(struct crypto_tfm *tfm,
  382. u8 *dst, unsigned int len)
  383. {
  384. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  385. memcpy(dst, tfm->crt_cipher.cit_iv, len);
  386. }
  387. static inline int crypto_comp_compress(struct crypto_tfm *tfm,
  388. const u8 *src, unsigned int slen,
  389. u8 *dst, unsigned int *dlen)
  390. {
  391. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_COMPRESS);
  392. return tfm->crt_compress.cot_compress(tfm, src, slen, dst, dlen);
  393. }
  394. static inline int crypto_comp_decompress(struct crypto_tfm *tfm,
  395. const u8 *src, unsigned int slen,
  396. u8 *dst, unsigned int *dlen)
  397. {
  398. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_COMPRESS);
  399. return tfm->crt_compress.cot_decompress(tfm, src, slen, dst, dlen);
  400. }
  401. /*
  402. * HMAC support.
  403. */
  404. #ifdef CONFIG_CRYPTO_HMAC
  405. void crypto_hmac_init(struct crypto_tfm *tfm, u8 *key, unsigned int *keylen);
  406. void crypto_hmac_update(struct crypto_tfm *tfm,
  407. struct scatterlist *sg, unsigned int nsg);
  408. void crypto_hmac_final(struct crypto_tfm *tfm, u8 *key,
  409. unsigned int *keylen, u8 *out);
  410. void crypto_hmac(struct crypto_tfm *tfm, u8 *key, unsigned int *keylen,
  411. struct scatterlist *sg, unsigned int nsg, u8 *out);
  412. #endif /* CONFIG_CRYPTO_HMAC */
  413. #endif /* _LINUX_CRYPTO_H */