xref: /OK3568_Linux_fs/kernel/crypto/geniv.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-or-later
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun  * geniv: Shared IV generator code
4*4882a593Smuzhiyun  *
5*4882a593Smuzhiyun  * This file provides common code to IV generators such as seqiv.
6*4882a593Smuzhiyun  *
7*4882a593Smuzhiyun  * Copyright (c) 2007-2019 Herbert Xu <herbert@gondor.apana.org.au>
8*4882a593Smuzhiyun  */
9*4882a593Smuzhiyun 
10*4882a593Smuzhiyun #include <crypto/internal/geniv.h>
11*4882a593Smuzhiyun #include <crypto/internal/rng.h>
12*4882a593Smuzhiyun #include <crypto/null.h>
13*4882a593Smuzhiyun #include <linux/err.h>
14*4882a593Smuzhiyun #include <linux/kernel.h>
15*4882a593Smuzhiyun #include <linux/module.h>
16*4882a593Smuzhiyun #include <linux/rtnetlink.h>
17*4882a593Smuzhiyun #include <linux/slab.h>
18*4882a593Smuzhiyun 
aead_geniv_setkey(struct crypto_aead * tfm,const u8 * key,unsigned int keylen)19*4882a593Smuzhiyun static int aead_geniv_setkey(struct crypto_aead *tfm,
20*4882a593Smuzhiyun 			     const u8 *key, unsigned int keylen)
21*4882a593Smuzhiyun {
22*4882a593Smuzhiyun 	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
23*4882a593Smuzhiyun 
24*4882a593Smuzhiyun 	return crypto_aead_setkey(ctx->child, key, keylen);
25*4882a593Smuzhiyun }
26*4882a593Smuzhiyun 
aead_geniv_setauthsize(struct crypto_aead * tfm,unsigned int authsize)27*4882a593Smuzhiyun static int aead_geniv_setauthsize(struct crypto_aead *tfm,
28*4882a593Smuzhiyun 				  unsigned int authsize)
29*4882a593Smuzhiyun {
30*4882a593Smuzhiyun 	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
31*4882a593Smuzhiyun 
32*4882a593Smuzhiyun 	return crypto_aead_setauthsize(ctx->child, authsize);
33*4882a593Smuzhiyun }
34*4882a593Smuzhiyun 
aead_geniv_free(struct aead_instance * inst)35*4882a593Smuzhiyun static void aead_geniv_free(struct aead_instance *inst)
36*4882a593Smuzhiyun {
37*4882a593Smuzhiyun 	crypto_drop_aead(aead_instance_ctx(inst));
38*4882a593Smuzhiyun 	kfree(inst);
39*4882a593Smuzhiyun }
40*4882a593Smuzhiyun 
aead_geniv_alloc(struct crypto_template * tmpl,struct rtattr ** tb)41*4882a593Smuzhiyun struct aead_instance *aead_geniv_alloc(struct crypto_template *tmpl,
42*4882a593Smuzhiyun 				       struct rtattr **tb)
43*4882a593Smuzhiyun {
44*4882a593Smuzhiyun 	struct crypto_aead_spawn *spawn;
45*4882a593Smuzhiyun 	struct aead_instance *inst;
46*4882a593Smuzhiyun 	struct aead_alg *alg;
47*4882a593Smuzhiyun 	unsigned int ivsize;
48*4882a593Smuzhiyun 	unsigned int maxauthsize;
49*4882a593Smuzhiyun 	u32 mask;
50*4882a593Smuzhiyun 	int err;
51*4882a593Smuzhiyun 
52*4882a593Smuzhiyun 	err = crypto_check_attr_type(tb, CRYPTO_ALG_TYPE_AEAD, &mask);
53*4882a593Smuzhiyun 	if (err)
54*4882a593Smuzhiyun 		return ERR_PTR(err);
55*4882a593Smuzhiyun 
56*4882a593Smuzhiyun 	inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL);
57*4882a593Smuzhiyun 	if (!inst)
58*4882a593Smuzhiyun 		return ERR_PTR(-ENOMEM);
59*4882a593Smuzhiyun 
60*4882a593Smuzhiyun 	spawn = aead_instance_ctx(inst);
61*4882a593Smuzhiyun 
62*4882a593Smuzhiyun 	err = crypto_grab_aead(spawn, aead_crypto_instance(inst),
63*4882a593Smuzhiyun 			       crypto_attr_alg_name(tb[1]), 0, mask);
64*4882a593Smuzhiyun 	if (err)
65*4882a593Smuzhiyun 		goto err_free_inst;
66*4882a593Smuzhiyun 
67*4882a593Smuzhiyun 	alg = crypto_spawn_aead_alg(spawn);
68*4882a593Smuzhiyun 
69*4882a593Smuzhiyun 	ivsize = crypto_aead_alg_ivsize(alg);
70*4882a593Smuzhiyun 	maxauthsize = crypto_aead_alg_maxauthsize(alg);
71*4882a593Smuzhiyun 
72*4882a593Smuzhiyun 	err = -EINVAL;
73*4882a593Smuzhiyun 	if (ivsize < sizeof(u64))
74*4882a593Smuzhiyun 		goto err_free_inst;
75*4882a593Smuzhiyun 
76*4882a593Smuzhiyun 	err = -ENAMETOOLONG;
77*4882a593Smuzhiyun 	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
78*4882a593Smuzhiyun 		     "%s(%s)", tmpl->name, alg->base.cra_name) >=
79*4882a593Smuzhiyun 	    CRYPTO_MAX_ALG_NAME)
80*4882a593Smuzhiyun 		goto err_free_inst;
81*4882a593Smuzhiyun 	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
82*4882a593Smuzhiyun 		     "%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
83*4882a593Smuzhiyun 	    CRYPTO_MAX_ALG_NAME)
84*4882a593Smuzhiyun 		goto err_free_inst;
85*4882a593Smuzhiyun 
86*4882a593Smuzhiyun 	inst->alg.base.cra_priority = alg->base.cra_priority;
87*4882a593Smuzhiyun 	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
88*4882a593Smuzhiyun 	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
89*4882a593Smuzhiyun 	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);
90*4882a593Smuzhiyun 
91*4882a593Smuzhiyun 	inst->alg.setkey = aead_geniv_setkey;
92*4882a593Smuzhiyun 	inst->alg.setauthsize = aead_geniv_setauthsize;
93*4882a593Smuzhiyun 
94*4882a593Smuzhiyun 	inst->alg.ivsize = ivsize;
95*4882a593Smuzhiyun 	inst->alg.maxauthsize = maxauthsize;
96*4882a593Smuzhiyun 
97*4882a593Smuzhiyun 	inst->free = aead_geniv_free;
98*4882a593Smuzhiyun 
99*4882a593Smuzhiyun out:
100*4882a593Smuzhiyun 	return inst;
101*4882a593Smuzhiyun 
102*4882a593Smuzhiyun err_free_inst:
103*4882a593Smuzhiyun 	aead_geniv_free(inst);
104*4882a593Smuzhiyun 	inst = ERR_PTR(err);
105*4882a593Smuzhiyun 	goto out;
106*4882a593Smuzhiyun }
107*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(aead_geniv_alloc);
108*4882a593Smuzhiyun 
aead_init_geniv(struct crypto_aead * aead)109*4882a593Smuzhiyun int aead_init_geniv(struct crypto_aead *aead)
110*4882a593Smuzhiyun {
111*4882a593Smuzhiyun 	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
112*4882a593Smuzhiyun 	struct aead_instance *inst = aead_alg_instance(aead);
113*4882a593Smuzhiyun 	struct crypto_aead *child;
114*4882a593Smuzhiyun 	int err;
115*4882a593Smuzhiyun 
116*4882a593Smuzhiyun 	spin_lock_init(&ctx->lock);
117*4882a593Smuzhiyun 
118*4882a593Smuzhiyun 	err = crypto_get_default_rng();
119*4882a593Smuzhiyun 	if (err)
120*4882a593Smuzhiyun 		goto out;
121*4882a593Smuzhiyun 
122*4882a593Smuzhiyun 	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
123*4882a593Smuzhiyun 				   crypto_aead_ivsize(aead));
124*4882a593Smuzhiyun 	crypto_put_default_rng();
125*4882a593Smuzhiyun 	if (err)
126*4882a593Smuzhiyun 		goto out;
127*4882a593Smuzhiyun 
128*4882a593Smuzhiyun 	ctx->sknull = crypto_get_default_null_skcipher();
129*4882a593Smuzhiyun 	err = PTR_ERR(ctx->sknull);
130*4882a593Smuzhiyun 	if (IS_ERR(ctx->sknull))
131*4882a593Smuzhiyun 		goto out;
132*4882a593Smuzhiyun 
133*4882a593Smuzhiyun 	child = crypto_spawn_aead(aead_instance_ctx(inst));
134*4882a593Smuzhiyun 	err = PTR_ERR(child);
135*4882a593Smuzhiyun 	if (IS_ERR(child))
136*4882a593Smuzhiyun 		goto drop_null;
137*4882a593Smuzhiyun 
138*4882a593Smuzhiyun 	ctx->child = child;
139*4882a593Smuzhiyun 	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
140*4882a593Smuzhiyun 				      sizeof(struct aead_request));
141*4882a593Smuzhiyun 
142*4882a593Smuzhiyun 	err = 0;
143*4882a593Smuzhiyun 
144*4882a593Smuzhiyun out:
145*4882a593Smuzhiyun 	return err;
146*4882a593Smuzhiyun 
147*4882a593Smuzhiyun drop_null:
148*4882a593Smuzhiyun 	crypto_put_default_null_skcipher();
149*4882a593Smuzhiyun 	goto out;
150*4882a593Smuzhiyun }
151*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(aead_init_geniv);
152*4882a593Smuzhiyun 
aead_exit_geniv(struct crypto_aead * tfm)153*4882a593Smuzhiyun void aead_exit_geniv(struct crypto_aead *tfm)
154*4882a593Smuzhiyun {
155*4882a593Smuzhiyun 	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
156*4882a593Smuzhiyun 
157*4882a593Smuzhiyun 	crypto_free_aead(ctx->child);
158*4882a593Smuzhiyun 	crypto_put_default_null_skcipher();
159*4882a593Smuzhiyun }
160*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(aead_exit_geniv);
161*4882a593Smuzhiyun 
162*4882a593Smuzhiyun MODULE_LICENSE("GPL");
163*4882a593Smuzhiyun MODULE_DESCRIPTION("Shared IV generator code");
164