[thirdparty/kernel/linux.git] / crypto / aead.c

/*
 * AEAD: Authenticated Encryption with Associated Data
 *
 * This file provides API support for AEAD algorithms.
 *
 * Copyright (c) 2007-2015 Herbert Xu <herbert@gondor.apana.org.au>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the Free
 * Software Foundation; either version 2 of the License, or (at your option)
 * any later version.
 *
 */

#include <crypto/internal/geniv.h>
#include <crypto/internal/rng.h>
#include <crypto/null.h>
#include <crypto/scatterwalk.h>
#include <linux/err.h>
#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/rtnetlink.h>
#include <linux/slab.h>
#include <linux/seq_file.h>
#include <linux/cryptouser.h>
#include <linux/compiler.h>
#include <net/netlink.h>

#include "internal.h"

static int setkey_unaligned(struct crypto_aead *tfm, const u8 *key,
			    unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);
	int ret;
	u8 *buffer, *alignbuffer;
	unsigned long absize;

	absize = keylen + alignmask;
	buffer = kmalloc(absize, GFP_ATOMIC);
	if (!buffer)
		return -ENOMEM;

	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	memcpy(alignbuffer, key, keylen);
	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
	memset(alignbuffer, 0, keylen);
	kfree(buffer);
	return ret;
}

int crypto_aead_setkey(struct crypto_aead *tfm,
		       const u8 *key, unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);
	int err;

	if ((unsigned long)key & alignmask)
		err = setkey_unaligned(tfm, key, keylen);
	else
		err = crypto_aead_alg(tfm)->setkey(tfm, key, keylen);

	if (unlikely(err)) {
		crypto_aead_set_flags(tfm, CRYPTO_TFM_NEED_KEY);
		return err;
	}

	crypto_aead_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
	return 0;
}
EXPORT_SYMBOL_GPL(crypto_aead_setkey);

int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
{
	int err;

	if (authsize > crypto_aead_maxauthsize(tfm))
		return -EINVAL;

	if (crypto_aead_alg(tfm)->setauthsize) {
		err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
		if (err)
			return err;
	}

	tfm->authsize = authsize;
	return 0;
}
EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);

static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	alg->exit(aead);
}

static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	crypto_aead_set_flags(aead, CRYPTO_TFM_NEED_KEY);

	aead->authsize = alg->maxauthsize;

	if (alg->exit)
		aead->base.exit = crypto_aead_exit_tfm;

	if (alg->init)
		return alg->init(aead);

	return 0;
}

#ifdef CONFIG_NET
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	struct crypto_report_aead raead;
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	memset(&raead, 0, sizeof(raead));

	strscpy(raead.type, "aead", sizeof(raead.type));
	strscpy(raead.geniv, "<none>", sizeof(raead.geniv));

	raead.blocksize = alg->cra_blocksize;
	raead.maxauthsize = aead->maxauthsize;
	raead.ivsize = aead->ivsize;

	return nla_put(skb, CRYPTOCFGA_REPORT_AEAD, sizeof(raead), &raead);
}
#else
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	return -ENOSYS;
}
#endif

static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
	__maybe_unused;
static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
{
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	seq_printf(m, "type         : aead\n");
	seq_printf(m, "async        : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
					     "yes" : "no");
	seq_printf(m, "blocksize    : %u\n", alg->cra_blocksize);
	seq_printf(m, "ivsize       : %u\n", aead->ivsize);
	seq_printf(m, "maxauthsize  : %u\n", aead->maxauthsize);
	seq_printf(m, "geniv        : <none>\n");
}

static void crypto_aead_free_instance(struct crypto_instance *inst)
{
	struct aead_instance *aead = aead_instance(inst);

	if (!aead->free) {
		inst->tmpl->free(inst);
		return;
	}

	aead->free(aead);
}

static const struct crypto_type crypto_aead_type = {
	.extsize = crypto_alg_extsize,
	.init_tfm = crypto_aead_init_tfm,
	.free = crypto_aead_free_instance,
#ifdef CONFIG_PROC_FS
	.show = crypto_aead_show,
#endif
	.report = crypto_aead_report,
	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	.maskset = CRYPTO_ALG_TYPE_MASK,
	.type = CRYPTO_ALG_TYPE_AEAD,
	.tfmsize = offsetof(struct crypto_aead, base),
};

static int aead_geniv_setkey(struct crypto_aead *tfm,
			     const u8 *key, unsigned int keylen)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int aead_geniv_setauthsize(struct crypto_aead *tfm,
				  unsigned int authsize)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

struct aead_instance *aead_geniv_alloc(struct crypto_template *tmpl,
				       struct rtattr **tb, u32 type, u32 mask)
{
	const char *name;
	struct crypto_aead_spawn *spawn;
	struct crypto_attr_type *algt;
	struct aead_instance *inst;
	struct aead_alg *alg;
	unsigned int ivsize;
	unsigned int maxauthsize;
	int err;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return ERR_CAST(algt);

	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
		return ERR_PTR(-EINVAL);

	name = crypto_attr_alg_name(tb[1]);
	if (IS_ERR(name))
		return ERR_CAST(name);

	inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL);
	if (!inst)
		return ERR_PTR(-ENOMEM);

	spawn = aead_instance_ctx(inst);

	/* Ignore async algorithms if necessary. */
	mask |= crypto_requires_sync(algt->type, algt->mask);

	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
	err = crypto_grab_aead(spawn, name, type, mask);
	if (err)
		goto err_free_inst;

	alg = crypto_spawn_aead_alg(spawn);

	ivsize = crypto_aead_alg_ivsize(alg);
	maxauthsize = crypto_aead_alg_maxauthsize(alg);

	err = -EINVAL;
	if (ivsize < sizeof(u64))
		goto err_drop_alg;

	err = -ENAMETOOLONG;
	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;
	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;

	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
	inst->alg.base.cra_priority = alg->base.cra_priority;
	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);

	inst->alg.setkey = aead_geniv_setkey;
	inst->alg.setauthsize = aead_geniv_setauthsize;

	inst->alg.ivsize = ivsize;
	inst->alg.maxauthsize = maxauthsize;

out:
	return inst;

err_drop_alg:
	crypto_drop_aead(spawn);
err_free_inst:
	kfree(inst);
	inst = ERR_PTR(err);
	goto out;
}
EXPORT_SYMBOL_GPL(aead_geniv_alloc);

void aead_geniv_free(struct aead_instance *inst)
{
	crypto_drop_aead(aead_instance_ctx(inst));
	kfree(inst);
}
EXPORT_SYMBOL_GPL(aead_geniv_free);

int aead_init_geniv(struct crypto_aead *aead)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	struct aead_instance *inst = aead_alg_instance(aead);
	struct crypto_aead *child;
	int err;

	spin_lock_init(&ctx->lock);

	err = crypto_get_default_rng();
	if (err)
		goto out;

	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
				   crypto_aead_ivsize(aead));
	crypto_put_default_rng();
	if (err)
		goto out;

	ctx->sknull = crypto_get_default_null_skcipher();
	err = PTR_ERR(ctx->sknull);
	if (IS_ERR(ctx->sknull))
		goto out;

	child = crypto_spawn_aead(aead_instance_ctx(inst));
	err = PTR_ERR(child);
	if (IS_ERR(child))
		goto drop_null;

	ctx->child = child;
	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
				      sizeof(struct aead_request));

	err = 0;

out:
	return err;

drop_null:
	crypto_put_default_null_skcipher();
	goto out;
}
EXPORT_SYMBOL_GPL(aead_init_geniv);

void aead_exit_geniv(struct crypto_aead *tfm)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	crypto_free_aead(ctx->child);
	crypto_put_default_null_skcipher();
}
EXPORT_SYMBOL_GPL(aead_exit_geniv);

int crypto_grab_aead(struct crypto_aead_spawn *spawn, const char *name,
		     u32 type, u32 mask)
{
	spawn->base.frontend = &crypto_aead_type;
	return crypto_grab_spawn(&spawn->base, name, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_grab_aead);

struct crypto_aead *crypto_alloc_aead(const char *alg_name, u32 type, u32 mask)
{
	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_alloc_aead);

static int aead_prepare_alg(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;

	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
	    PAGE_SIZE / 8)
		return -EINVAL;

	if (!alg->chunksize)
		alg->chunksize = base->cra_blocksize;

	base->cra_type = &crypto_aead_type;
	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	base->cra_flags |= CRYPTO_ALG_TYPE_AEAD;

	return 0;
}

int crypto_register_aead(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;
	int err;

	err = aead_prepare_alg(alg);
	if (err)
		return err;

	return crypto_register_alg(base);
}
EXPORT_SYMBOL_GPL(crypto_register_aead);

void crypto_unregister_aead(struct aead_alg *alg)
{
	crypto_unregister_alg(&alg->base);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aead);

int crypto_register_aeads(struct aead_alg *algs, int count)
{
	int i, ret;

	for (i = 0; i < count; i++) {
		ret = crypto_register_aead(&algs[i]);
		if (ret)
			goto err;
	}

	return 0;

err:
	for (--i; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);

	return ret;
}
EXPORT_SYMBOL_GPL(crypto_register_aeads);

void crypto_unregister_aeads(struct aead_alg *algs, int count)
{
	int i;

	for (i = count - 1; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aeads);

int aead_register_instance(struct crypto_template *tmpl,
			   struct aead_instance *inst)
{
	int err;

	err = aead_prepare_alg(&inst->alg);
	if (err)
		return err;

	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
}
EXPORT_SYMBOL_GPL(aead_register_instance);

MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");
Commit	Line	Data
1ae97820 HX	1	/*
1ae97820 HX	2	* AEAD: Authenticated Encryption with Associated Data
3922538f	3	*
1ae97820 HX	4	* This file provides API support for AEAD algorithms.
1ae97820 HX	5	*
b0d955ba	6	* Copyright (c) 2007-2015 Herbert Xu <herbert@gondor.apana.org.au>
1ae97820 HX	7	*
	8	* This program is free software; you can redistribute it and/or modify it
	9	* under the terms of the GNU General Public License as published by the Free
3922538f	10	* Software Foundation; either version 2 of the License, or (at your option)
1ae97820 HX	11	* any later version.
	12	*
	13	*/
	14
6350449f	15	#include <crypto/internal/geniv.h>
149a3971 HX	16	#include <crypto/internal/rng.h>
149a3971 HX	17	#include <crypto/null.h>
996d98d8	18	#include <crypto/scatterwalk.h>
5b6d2d7f	19	#include <linux/err.h>
1ae97820 HX	20	#include <linux/init.h>
	21	#include <linux/kernel.h>
	22	#include <linux/module.h>
d29ce988	23	#include <linux/rtnetlink.h>
1ae97820 HX	24	#include <linux/slab.h>
1ae97820 HX	25	#include <linux/seq_file.h>
6ad414fe	26	#include <linux/cryptouser.h>
d8c34b94	27	#include <linux/compiler.h>
6ad414fe	28	#include <net/netlink.h>
1ae97820	29
5b6d2d7f HX	30	#include "internal.h"
5b6d2d7f HX	31
1ae97820 HX	32	static int setkey_unaligned(struct crypto_aead tfm, const u8 key,
	33	unsigned int keylen)
	34	{
1ae97820 HX	35	unsigned long alignmask = crypto_aead_alignmask(tfm);
	36	int ret;
	37	u8 buffer, alignbuffer;
	38	unsigned long absize;
	39
	40	absize = keylen + alignmask;
	41	buffer = kmalloc(absize, GFP_ATOMIC);
	42	if (!buffer)
	43	return -ENOMEM;
	44
	45	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	46	memcpy(alignbuffer, key, keylen);
b0d955ba	47	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
1ae97820 HX	48	memset(alignbuffer, 0, keylen);
	49	kfree(buffer);
	50	return ret;
	51	}
	52
5d1d65f8 HX	53	int crypto_aead_setkey(struct crypto_aead *tfm,
5d1d65f8 HX	54	const u8 *key, unsigned int keylen)
1ae97820	55	{
1ae97820	56	unsigned long alignmask = crypto_aead_alignmask(tfm);
dc26c17f	57	int err;
1ae97820 HX	58
1ae97820 HX	59	if ((unsigned long)key & alignmask)
dc26c17f EB	60	err = setkey_unaligned(tfm, key, keylen);
	61	else
	62	err = crypto_aead_alg(tfm)->setkey(tfm, key, keylen);
	63
6ebc9700 EB	64	if (unlikely(err)) {
6ebc9700 EB	65	crypto_aead_set_flags(tfm, CRYPTO_TFM_NEED_KEY);
dc26c17f	66	return err;
6ebc9700	67	}
1ae97820	68
dc26c17f EB	69	crypto_aead_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
dc26c17f EB	70	return 0;
1ae97820	71	}
5d1d65f8	72	EXPORT_SYMBOL_GPL(crypto_aead_setkey);
1ae97820	73
7ba683a6 HX	74	int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
	75	{
	76	int err;
	77
30e4c010	78	if (authsize > crypto_aead_maxauthsize(tfm))
7ba683a6 HX	79	return -EINVAL;
7ba683a6 HX	80
b0d955ba HX	81	if (crypto_aead_alg(tfm)->setauthsize) {
b0d955ba HX	82	err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
7ba683a6 HX	83	if (err)
	84	return err;
	85	}
	86
5d1d65f8	87	tfm->authsize = authsize;
7ba683a6 HX	88	return 0;
	89	}
	90	EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);
	91
5eb8ec6d HX	92	static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
	93	{
	94	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	95	struct aead_alg *alg = crypto_aead_alg(aead);
	96
	97	alg->exit(aead);
	98	}
	99
63293c61 HX	100	static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
	101	{
	102	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	103	struct aead_alg *alg = crypto_aead_alg(aead);
	104
dc26c17f EB	105	crypto_aead_set_flags(aead, CRYPTO_TFM_NEED_KEY);
dc26c17f EB	106
63293c61 HX	107	aead->authsize = alg->maxauthsize;
63293c61 HX	108
5eb8ec6d HX	109	if (alg->exit)
	110	aead->base.exit = crypto_aead_exit_tfm;
	111
	112	if (alg->init)
	113	return alg->init(aead);
	114
63293c61 HX	115	return 0;
	116	}
	117
63293c61 HX	118	#ifdef CONFIG_NET
	119	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	120	{
	121	struct crypto_report_aead raead;
	122	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	123
37db69e0 EB	124	memset(&raead, 0, sizeof(raead));
	125
	126	strscpy(raead.type, "aead", sizeof(raead.type));
	127	strscpy(raead.geniv, "<none>", sizeof(raead.geniv));
63293c61 HX	128
	129	raead.blocksize = alg->cra_blocksize;
	130	raead.maxauthsize = aead->maxauthsize;
	131	raead.ivsize = aead->ivsize;
	132
37db69e0	133	return nla_put(skb, CRYPTOCFGA_REPORT_AEAD, sizeof(raead), &raead);
63293c61 HX	134	}
	135	#else
	136	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	137	{
	138	return -ENOSYS;
	139	}
	140	#endif
	141
	142	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
d8c34b94	143	__maybe_unused;
63293c61 HX	144	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
	145	{
	146	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	147
	148	seq_printf(m, "type : aead\n");
	149	seq_printf(m, "async : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
	150	"yes" : "no");
	151	seq_printf(m, "blocksize : %u\n", alg->cra_blocksize);
	152	seq_printf(m, "ivsize : %u\n", aead->ivsize);
	153	seq_printf(m, "maxauthsize : %u\n", aead->maxauthsize);
	154	seq_printf(m, "geniv : <none>\n");
	155	}
	156
ba75e15f HX	157	static void crypto_aead_free_instance(struct crypto_instance *inst)
	158	{
	159	struct aead_instance *aead = aead_instance(inst);
	160
	161	if (!aead->free) {
	162	inst->tmpl->free(inst);
	163	return;
	164	}
	165
	166	aead->free(aead);
	167	}
	168
b0d955ba	169	static const struct crypto_type crypto_aead_type = {
63293c61 HX	170	.extsize = crypto_alg_extsize,
63293c61 HX	171	.init_tfm = crypto_aead_init_tfm,
ba75e15f	172	.free = crypto_aead_free_instance,
63293c61 HX	173	#ifdef CONFIG_PROC_FS
	174	.show = crypto_aead_show,
	175	#endif
	176	.report = crypto_aead_report,
	177	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	178	.maskset = CRYPTO_ALG_TYPE_MASK,
	179	.type = CRYPTO_ALG_TYPE_AEAD,
	180	.tfmsize = offsetof(struct crypto_aead, base),
	181	};
	182
6350449f HX	183	static int aead_geniv_setkey(struct crypto_aead *tfm,
	184	const u8 *key, unsigned int keylen)
	185	{
	186	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	187
	188	return crypto_aead_setkey(ctx->child, key, keylen);
	189	}
	190
	191	static int aead_geniv_setauthsize(struct crypto_aead *tfm,
	192	unsigned int authsize)
	193	{
	194	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	195
	196	return crypto_aead_setauthsize(ctx->child, authsize);
	197	}
	198
856e3f40 HX	199	struct aead_instance aead_geniv_alloc(struct crypto_template tmpl,
856e3f40 HX	200	struct rtattr **tb, u32 type, u32 mask)
5b6d2d7f HX	201	{
	202	const char *name;
	203	struct crypto_aead_spawn *spawn;
	204	struct crypto_attr_type *algt;
856e3f40 HX	205	struct aead_instance *inst;
	206	struct aead_alg *alg;
	207	unsigned int ivsize;
	208	unsigned int maxauthsize;
5b6d2d7f HX	209	int err;
	210
	211	algt = crypto_get_attr_type(tb);
5b6d2d7f	212	if (IS_ERR(algt))
3e8afe35	213	return ERR_CAST(algt);
5b6d2d7f	214
5e4b8c1f	215	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
5b6d2d7f HX	216	return ERR_PTR(-EINVAL);
	217
	218	name = crypto_attr_alg_name(tb[1]);
5b6d2d7f	219	if (IS_ERR(name))
3e8afe35	220	return ERR_CAST(name);
5b6d2d7f HX	221
	222	inst = kzalloc(sizeof(inst) + sizeof(spawn), GFP_KERNEL);
	223	if (!inst)
	224	return ERR_PTR(-ENOMEM);
	225
856e3f40	226	spawn = aead_instance_ctx(inst);
5b6d2d7f HX	227
	228	/* Ignore async algorithms if necessary. */
	229	mask \|= crypto_requires_sync(algt->type, algt->mask);
	230
856e3f40	231	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
b0d955ba	232	err = crypto_grab_aead(spawn, name, type, mask);
5b6d2d7f HX	233	if (err)
	234	goto err_free_inst;
	235
856e3f40 HX	236	alg = crypto_spawn_aead_alg(spawn);
856e3f40 HX	237
30e4c010 HX	238	ivsize = crypto_aead_alg_ivsize(alg);
30e4c010 HX	239	maxauthsize = crypto_aead_alg_maxauthsize(alg);
5b6d2d7f HX	240
5b6d2d7f HX	241	err = -EINVAL;
6350449f	242	if (ivsize < sizeof(u64))
5b6d2d7f HX	243	goto err_drop_alg;
5b6d2d7f HX	244
856e3f40 HX	245	err = -ENAMETOOLONG;
	246	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
	247	"%s(%s)", tmpl->name, alg->base.cra_name) >=
	248	CRYPTO_MAX_ALG_NAME)
	249	goto err_drop_alg;
	250	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
	251	"%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	252	CRYPTO_MAX_ALG_NAME)
	253	goto err_drop_alg;
5b6d2d7f	254
5e4b8c1f	255	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
856e3f40 HX	256	inst->alg.base.cra_priority = alg->base.cra_priority;
	257	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	258	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
6350449f HX	259	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);
	260
	261	inst->alg.setkey = aead_geniv_setkey;
	262	inst->alg.setauthsize = aead_geniv_setauthsize;
5b6d2d7f	263
856e3f40 HX	264	inst->alg.ivsize = ivsize;
856e3f40 HX	265	inst->alg.maxauthsize = maxauthsize;
5b6d2d7f HX	266
	267	out:
	268	return inst;
	269
	270	err_drop_alg:
	271	crypto_drop_aead(spawn);
	272	err_free_inst:
	273	kfree(inst);
	274	inst = ERR_PTR(err);
	275	goto out;
	276	}
	277	EXPORT_SYMBOL_GPL(aead_geniv_alloc);
	278
856e3f40	279	void aead_geniv_free(struct aead_instance *inst)
5b6d2d7f	280	{
856e3f40	281	crypto_drop_aead(aead_instance_ctx(inst));
5b6d2d7f HX	282	kfree(inst);
	283	}
	284	EXPORT_SYMBOL_GPL(aead_geniv_free);
	285
149a3971 HX	286	int aead_init_geniv(struct crypto_aead *aead)
	287	{
	288	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	289	struct aead_instance *inst = aead_alg_instance(aead);
	290	struct crypto_aead *child;
	291	int err;
	292
	293	spin_lock_init(&ctx->lock);
	294
	295	err = crypto_get_default_rng();
	296	if (err)
	297	goto out;
	298
	299	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
	300	crypto_aead_ivsize(aead));
	301	crypto_put_default_rng();
	302	if (err)
	303	goto out;
	304
3a2d4fb5	305	ctx->sknull = crypto_get_default_null_skcipher();
ca0494c0 HX	306	err = PTR_ERR(ctx->sknull);
	307	if (IS_ERR(ctx->sknull))
	308	goto out;
	309
149a3971 HX	310	child = crypto_spawn_aead(aead_instance_ctx(inst));
	311	err = PTR_ERR(child);
	312	if (IS_ERR(child))
	313	goto drop_null;
	314
	315	ctx->child = child;
	316	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
	317	sizeof(struct aead_request));
	318
	319	err = 0;
	320
	321	out:
	322	return err;
	323
	324	drop_null:
3a2d4fb5	325	crypto_put_default_null_skcipher();
149a3971 HX	326	goto out;
	327	}
	328	EXPORT_SYMBOL_GPL(aead_init_geniv);
	329
	330	void aead_exit_geniv(struct crypto_aead *tfm)
	331	{
	332	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	333
	334	crypto_free_aead(ctx->child);
3a2d4fb5	335	crypto_put_default_null_skcipher();
149a3971 HX	336	}
	337	EXPORT_SYMBOL_GPL(aead_exit_geniv);
	338
d29ce988 HX	339	int crypto_grab_aead(struct crypto_aead_spawn spawn, const char name,
	340	u32 type, u32 mask)
	341	{
5d1d65f8 HX	342	spawn->base.frontend = &crypto_aead_type;
5d1d65f8 HX	343	return crypto_grab_spawn(&spawn->base, name, type, mask);
d29ce988 HX	344	}
	345	EXPORT_SYMBOL_GPL(crypto_grab_aead);
	346
	347	struct crypto_aead crypto_alloc_aead(const char alg_name, u32 type, u32 mask)
	348	{
5d1d65f8	349	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
d29ce988 HX	350	}
	351	EXPORT_SYMBOL_GPL(crypto_alloc_aead);
	352
63293c61 HX	353	static int aead_prepare_alg(struct aead_alg *alg)
	354	{
	355	struct crypto_alg *base = &alg->base;
	356
7a530aa9 HX	357	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
7a530aa9 HX	358	PAGE_SIZE / 8)
63293c61 HX	359	return -EINVAL;
63293c61 HX	360
7a530aa9 HX	361	if (!alg->chunksize)
	362	alg->chunksize = base->cra_blocksize;
	363
b0d955ba	364	base->cra_type = &crypto_aead_type;
63293c61 HX	365	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	366	base->cra_flags \|= CRYPTO_ALG_TYPE_AEAD;
	367
	368	return 0;
	369	}
	370
	371	int crypto_register_aead(struct aead_alg *alg)
	372	{
	373	struct crypto_alg *base = &alg->base;
	374	int err;
	375
	376	err = aead_prepare_alg(alg);
	377	if (err)
	378	return err;
	379
	380	return crypto_register_alg(base);
	381	}
	382	EXPORT_SYMBOL_GPL(crypto_register_aead);
	383
43615369	384	void crypto_unregister_aead(struct aead_alg *alg)
63293c61	385	{
43615369	386	crypto_unregister_alg(&alg->base);
63293c61 HX	387	}
	388	EXPORT_SYMBOL_GPL(crypto_unregister_aead);
	389
caab9461 HX	390	int crypto_register_aeads(struct aead_alg *algs, int count)
	391	{
	392	int i, ret;
	393
	394	for (i = 0; i < count; i++) {
	395	ret = crypto_register_aead(&algs[i]);
	396	if (ret)
	397	goto err;
	398	}
	399
	400	return 0;
	401
	402	err:
	403	for (--i; i >= 0; --i)
	404	crypto_unregister_aead(&algs[i]);
	405
	406	return ret;
	407	}
	408	EXPORT_SYMBOL_GPL(crypto_register_aeads);
	409
	410	void crypto_unregister_aeads(struct aead_alg *algs, int count)
	411	{
	412	int i;
	413
	414	for (i = count - 1; i >= 0; --i)
	415	crypto_unregister_aead(&algs[i]);
	416	}
	417	EXPORT_SYMBOL_GPL(crypto_unregister_aeads);
	418
63293c61 HX	419	int aead_register_instance(struct crypto_template *tmpl,
	420	struct aead_instance *inst)
	421	{
	422	int err;
	423
	424	err = aead_prepare_alg(&inst->alg);
	425	if (err)
	426	return err;
	427
	428	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
	429	}
	430	EXPORT_SYMBOL_GPL(aead_register_instance);
	431
1ae97820 HX	432	MODULE_LICENSE("GPL");
1ae97820 HX	433	MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");