Linux Audio

Check our new training course

Loading...
v5.9
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/*
  3 * Symmetric key cipher operations.
  4 *
  5 * Generic encrypt/decrypt wrapper for ciphers, handles operations across
  6 * multiple page boundaries by using temporary blocks.  In user context,
  7 * the kernel is given a chance to schedule us once per page.
  8 *
  9 * Copyright (c) 2015 Herbert Xu <herbert@gondor.apana.org.au>
 
 
 
 
 
 
 10 */
 11
 12#include <crypto/internal/aead.h>
 13#include <crypto/internal/skcipher.h>
 14#include <crypto/scatterwalk.h>
 15#include <linux/bug.h>
 16#include <linux/cryptouser.h>
 17#include <linux/compiler.h>
 18#include <linux/list.h>
 19#include <linux/module.h>
 20#include <linux/rtnetlink.h>
 21#include <linux/seq_file.h>
 22#include <net/netlink.h>
 23
 24#include "internal.h"
 25
 26enum {
 27	SKCIPHER_WALK_PHYS = 1 << 0,
 28	SKCIPHER_WALK_SLOW = 1 << 1,
 29	SKCIPHER_WALK_COPY = 1 << 2,
 30	SKCIPHER_WALK_DIFF = 1 << 3,
 31	SKCIPHER_WALK_SLEEP = 1 << 4,
 32};
 33
 34struct skcipher_walk_buffer {
 35	struct list_head entry;
 36	struct scatter_walk dst;
 37	unsigned int len;
 38	u8 *data;
 39	u8 buffer[];
 40};
 41
 42static int skcipher_walk_next(struct skcipher_walk *walk);
 43
 44static inline void skcipher_unmap(struct scatter_walk *walk, void *vaddr)
 45{
 46	if (PageHighMem(scatterwalk_page(walk)))
 47		kunmap_atomic(vaddr);
 48}
 49
 50static inline void *skcipher_map(struct scatter_walk *walk)
 51{
 52	struct page *page = scatterwalk_page(walk);
 53
 54	return (PageHighMem(page) ? kmap_atomic(page) : page_address(page)) +
 55	       offset_in_page(walk->offset);
 56}
 57
 58static inline void skcipher_map_src(struct skcipher_walk *walk)
 59{
 60	walk->src.virt.addr = skcipher_map(&walk->in);
 61}
 62
 63static inline void skcipher_map_dst(struct skcipher_walk *walk)
 64{
 65	walk->dst.virt.addr = skcipher_map(&walk->out);
 66}
 67
 68static inline void skcipher_unmap_src(struct skcipher_walk *walk)
 69{
 70	skcipher_unmap(&walk->in, walk->src.virt.addr);
 71}
 72
 73static inline void skcipher_unmap_dst(struct skcipher_walk *walk)
 74{
 75	skcipher_unmap(&walk->out, walk->dst.virt.addr);
 76}
 77
 78static inline gfp_t skcipher_walk_gfp(struct skcipher_walk *walk)
 79{
 80	return walk->flags & SKCIPHER_WALK_SLEEP ? GFP_KERNEL : GFP_ATOMIC;
 81}
 82
 83/* Get a spot of the specified length that does not straddle a page.
 84 * The caller needs to ensure that there is enough space for this operation.
 85 */
 86static inline u8 *skcipher_get_spot(u8 *start, unsigned int len)
 87{
 88	u8 *end_page = (u8 *)(((unsigned long)(start + len - 1)) & PAGE_MASK);
 89
 90	return max(start, end_page);
 91}
 92
 93static int skcipher_done_slow(struct skcipher_walk *walk, unsigned int bsize)
 94{
 95	u8 *addr;
 96
 97	addr = (u8 *)ALIGN((unsigned long)walk->buffer, walk->alignmask + 1);
 98	addr = skcipher_get_spot(addr, bsize);
 99	scatterwalk_copychunks(addr, &walk->out, bsize,
100			       (walk->flags & SKCIPHER_WALK_PHYS) ? 2 : 1);
101	return 0;
102}
103
104int skcipher_walk_done(struct skcipher_walk *walk, int err)
105{
106	unsigned int n = walk->nbytes;
107	unsigned int nbytes = 0;
108
109	if (!n)
110		goto finish;
111
112	if (likely(err >= 0)) {
113		n -= err;
114		nbytes = walk->total - n;
115	}
116
117	if (likely(!(walk->flags & (SKCIPHER_WALK_PHYS |
118				    SKCIPHER_WALK_SLOW |
119				    SKCIPHER_WALK_COPY |
120				    SKCIPHER_WALK_DIFF)))) {
121unmap_src:
122		skcipher_unmap_src(walk);
123	} else if (walk->flags & SKCIPHER_WALK_DIFF) {
124		skcipher_unmap_dst(walk);
125		goto unmap_src;
126	} else if (walk->flags & SKCIPHER_WALK_COPY) {
127		skcipher_map_dst(walk);
128		memcpy(walk->dst.virt.addr, walk->page, n);
129		skcipher_unmap_dst(walk);
130	} else if (unlikely(walk->flags & SKCIPHER_WALK_SLOW)) {
131		if (err > 0) {
132			/*
133			 * Didn't process all bytes.  Either the algorithm is
134			 * broken, or this was the last step and it turned out
135			 * the message wasn't evenly divisible into blocks but
136			 * the algorithm requires it.
137			 */
138			err = -EINVAL;
139			nbytes = 0;
140		} else
141			n = skcipher_done_slow(walk, n);
142	}
143
144	if (err > 0)
145		err = 0;
146
147	walk->total = nbytes;
148	walk->nbytes = 0;
149
150	scatterwalk_advance(&walk->in, n);
151	scatterwalk_advance(&walk->out, n);
152	scatterwalk_done(&walk->in, 0, nbytes);
153	scatterwalk_done(&walk->out, 1, nbytes);
154
155	if (nbytes) {
156		crypto_yield(walk->flags & SKCIPHER_WALK_SLEEP ?
157			     CRYPTO_TFM_REQ_MAY_SLEEP : 0);
158		return skcipher_walk_next(walk);
159	}
160
161finish:
162	/* Short-circuit for the common/fast path. */
163	if (!((unsigned long)walk->buffer | (unsigned long)walk->page))
164		goto out;
165
166	if (walk->flags & SKCIPHER_WALK_PHYS)
167		goto out;
168
169	if (walk->iv != walk->oiv)
170		memcpy(walk->oiv, walk->iv, walk->ivsize);
171	if (walk->buffer != walk->page)
172		kfree(walk->buffer);
173	if (walk->page)
174		free_page((unsigned long)walk->page);
175
176out:
177	return err;
178}
179EXPORT_SYMBOL_GPL(skcipher_walk_done);
180
181void skcipher_walk_complete(struct skcipher_walk *walk, int err)
182{
183	struct skcipher_walk_buffer *p, *tmp;
184
185	list_for_each_entry_safe(p, tmp, &walk->buffers, entry) {
186		u8 *data;
187
188		if (err)
189			goto done;
190
191		data = p->data;
192		if (!data) {
193			data = PTR_ALIGN(&p->buffer[0], walk->alignmask + 1);
194			data = skcipher_get_spot(data, walk->stride);
195		}
196
197		scatterwalk_copychunks(data, &p->dst, p->len, 1);
198
199		if (offset_in_page(p->data) + p->len + walk->stride >
200		    PAGE_SIZE)
201			free_page((unsigned long)p->data);
202
203done:
204		list_del(&p->entry);
205		kfree(p);
206	}
207
208	if (!err && walk->iv != walk->oiv)
209		memcpy(walk->oiv, walk->iv, walk->ivsize);
210	if (walk->buffer != walk->page)
211		kfree(walk->buffer);
212	if (walk->page)
213		free_page((unsigned long)walk->page);
214}
215EXPORT_SYMBOL_GPL(skcipher_walk_complete);
216
217static void skcipher_queue_write(struct skcipher_walk *walk,
218				 struct skcipher_walk_buffer *p)
219{
220	p->dst = walk->out;
221	list_add_tail(&p->entry, &walk->buffers);
222}
223
224static int skcipher_next_slow(struct skcipher_walk *walk, unsigned int bsize)
225{
226	bool phys = walk->flags & SKCIPHER_WALK_PHYS;
227	unsigned alignmask = walk->alignmask;
228	struct skcipher_walk_buffer *p;
229	unsigned a;
230	unsigned n;
231	u8 *buffer;
232	void *v;
233
234	if (!phys) {
235		if (!walk->buffer)
236			walk->buffer = walk->page;
237		buffer = walk->buffer;
238		if (buffer)
239			goto ok;
240	}
241
242	/* Start with the minimum alignment of kmalloc. */
243	a = crypto_tfm_ctx_alignment() - 1;
244	n = bsize;
245
246	if (phys) {
247		/* Calculate the minimum alignment of p->buffer. */
248		a &= (sizeof(*p) ^ (sizeof(*p) - 1)) >> 1;
249		n += sizeof(*p);
250	}
251
252	/* Minimum size to align p->buffer by alignmask. */
253	n += alignmask & ~a;
254
255	/* Minimum size to ensure p->buffer does not straddle a page. */
256	n += (bsize - 1) & ~(alignmask | a);
257
258	v = kzalloc(n, skcipher_walk_gfp(walk));
259	if (!v)
260		return skcipher_walk_done(walk, -ENOMEM);
261
262	if (phys) {
263		p = v;
264		p->len = bsize;
265		skcipher_queue_write(walk, p);
266		buffer = p->buffer;
267	} else {
268		walk->buffer = v;
269		buffer = v;
270	}
271
272ok:
273	walk->dst.virt.addr = PTR_ALIGN(buffer, alignmask + 1);
274	walk->dst.virt.addr = skcipher_get_spot(walk->dst.virt.addr, bsize);
275	walk->src.virt.addr = walk->dst.virt.addr;
276
277	scatterwalk_copychunks(walk->src.virt.addr, &walk->in, bsize, 0);
278
279	walk->nbytes = bsize;
280	walk->flags |= SKCIPHER_WALK_SLOW;
281
282	return 0;
283}
284
285static int skcipher_next_copy(struct skcipher_walk *walk)
286{
287	struct skcipher_walk_buffer *p;
288	u8 *tmp = walk->page;
289
290	skcipher_map_src(walk);
291	memcpy(tmp, walk->src.virt.addr, walk->nbytes);
292	skcipher_unmap_src(walk);
293
294	walk->src.virt.addr = tmp;
295	walk->dst.virt.addr = tmp;
296
297	if (!(walk->flags & SKCIPHER_WALK_PHYS))
298		return 0;
299
300	p = kmalloc(sizeof(*p), skcipher_walk_gfp(walk));
301	if (!p)
302		return -ENOMEM;
303
304	p->data = walk->page;
305	p->len = walk->nbytes;
306	skcipher_queue_write(walk, p);
307
308	if (offset_in_page(walk->page) + walk->nbytes + walk->stride >
309	    PAGE_SIZE)
310		walk->page = NULL;
311	else
312		walk->page += walk->nbytes;
313
314	return 0;
315}
316
317static int skcipher_next_fast(struct skcipher_walk *walk)
318{
319	unsigned long diff;
320
321	walk->src.phys.page = scatterwalk_page(&walk->in);
322	walk->src.phys.offset = offset_in_page(walk->in.offset);
323	walk->dst.phys.page = scatterwalk_page(&walk->out);
324	walk->dst.phys.offset = offset_in_page(walk->out.offset);
325
326	if (walk->flags & SKCIPHER_WALK_PHYS)
327		return 0;
328
329	diff = walk->src.phys.offset - walk->dst.phys.offset;
330	diff |= walk->src.virt.page - walk->dst.virt.page;
331
332	skcipher_map_src(walk);
333	walk->dst.virt.addr = walk->src.virt.addr;
334
335	if (diff) {
336		walk->flags |= SKCIPHER_WALK_DIFF;
337		skcipher_map_dst(walk);
338	}
339
340	return 0;
341}
342
343static int skcipher_walk_next(struct skcipher_walk *walk)
344{
345	unsigned int bsize;
346	unsigned int n;
347	int err;
348
349	walk->flags &= ~(SKCIPHER_WALK_SLOW | SKCIPHER_WALK_COPY |
350			 SKCIPHER_WALK_DIFF);
351
352	n = walk->total;
353	bsize = min(walk->stride, max(n, walk->blocksize));
354	n = scatterwalk_clamp(&walk->in, n);
355	n = scatterwalk_clamp(&walk->out, n);
356
357	if (unlikely(n < bsize)) {
358		if (unlikely(walk->total < walk->blocksize))
359			return skcipher_walk_done(walk, -EINVAL);
360
361slow_path:
362		err = skcipher_next_slow(walk, bsize);
363		goto set_phys_lowmem;
364	}
365
366	if (unlikely((walk->in.offset | walk->out.offset) & walk->alignmask)) {
367		if (!walk->page) {
368			gfp_t gfp = skcipher_walk_gfp(walk);
369
370			walk->page = (void *)__get_free_page(gfp);
371			if (!walk->page)
372				goto slow_path;
373		}
374
375		walk->nbytes = min_t(unsigned, n,
376				     PAGE_SIZE - offset_in_page(walk->page));
377		walk->flags |= SKCIPHER_WALK_COPY;
378		err = skcipher_next_copy(walk);
379		goto set_phys_lowmem;
380	}
381
382	walk->nbytes = n;
383
384	return skcipher_next_fast(walk);
385
386set_phys_lowmem:
387	if (!err && (walk->flags & SKCIPHER_WALK_PHYS)) {
388		walk->src.phys.page = virt_to_page(walk->src.virt.addr);
389		walk->dst.phys.page = virt_to_page(walk->dst.virt.addr);
390		walk->src.phys.offset &= PAGE_SIZE - 1;
391		walk->dst.phys.offset &= PAGE_SIZE - 1;
392	}
393	return err;
394}
 
395
396static int skcipher_copy_iv(struct skcipher_walk *walk)
397{
398	unsigned a = crypto_tfm_ctx_alignment() - 1;
399	unsigned alignmask = walk->alignmask;
400	unsigned ivsize = walk->ivsize;
401	unsigned bs = walk->stride;
402	unsigned aligned_bs;
403	unsigned size;
404	u8 *iv;
405
406	aligned_bs = ALIGN(bs, alignmask + 1);
407
408	/* Minimum size to align buffer by alignmask. */
409	size = alignmask & ~a;
410
411	if (walk->flags & SKCIPHER_WALK_PHYS)
412		size += ivsize;
413	else {
414		size += aligned_bs + ivsize;
415
416		/* Minimum size to ensure buffer does not straddle a page. */
417		size += (bs - 1) & ~(alignmask | a);
418	}
419
420	walk->buffer = kmalloc(size, skcipher_walk_gfp(walk));
421	if (!walk->buffer)
422		return -ENOMEM;
423
424	iv = PTR_ALIGN(walk->buffer, alignmask + 1);
425	iv = skcipher_get_spot(iv, bs) + aligned_bs;
426
427	walk->iv = memcpy(iv, walk->iv, walk->ivsize);
428	return 0;
429}
430
431static int skcipher_walk_first(struct skcipher_walk *walk)
432{
433	if (WARN_ON_ONCE(in_irq()))
434		return -EDEADLK;
435
436	walk->buffer = NULL;
437	if (unlikely(((unsigned long)walk->iv & walk->alignmask))) {
438		int err = skcipher_copy_iv(walk);
439		if (err)
440			return err;
441	}
442
443	walk->page = NULL;
 
444
445	return skcipher_walk_next(walk);
446}
447
448static int skcipher_walk_skcipher(struct skcipher_walk *walk,
449				  struct skcipher_request *req)
450{
451	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
452
453	walk->total = req->cryptlen;
454	walk->nbytes = 0;
455	walk->iv = req->iv;
456	walk->oiv = req->iv;
457
458	if (unlikely(!walk->total))
459		return 0;
460
461	scatterwalk_start(&walk->in, req->src);
462	scatterwalk_start(&walk->out, req->dst);
463
464	walk->flags &= ~SKCIPHER_WALK_SLEEP;
465	walk->flags |= req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP ?
466		       SKCIPHER_WALK_SLEEP : 0;
467
468	walk->blocksize = crypto_skcipher_blocksize(tfm);
469	walk->stride = crypto_skcipher_walksize(tfm);
470	walk->ivsize = crypto_skcipher_ivsize(tfm);
471	walk->alignmask = crypto_skcipher_alignmask(tfm);
472
473	return skcipher_walk_first(walk);
474}
475
476int skcipher_walk_virt(struct skcipher_walk *walk,
477		       struct skcipher_request *req, bool atomic)
478{
479	int err;
480
481	might_sleep_if(req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP);
482
483	walk->flags &= ~SKCIPHER_WALK_PHYS;
484
485	err = skcipher_walk_skcipher(walk, req);
486
487	walk->flags &= atomic ? ~SKCIPHER_WALK_SLEEP : ~0;
488
489	return err;
490}
491EXPORT_SYMBOL_GPL(skcipher_walk_virt);
492
493void skcipher_walk_atomise(struct skcipher_walk *walk)
494{
495	walk->flags &= ~SKCIPHER_WALK_SLEEP;
496}
497EXPORT_SYMBOL_GPL(skcipher_walk_atomise);
498
499int skcipher_walk_async(struct skcipher_walk *walk,
500			struct skcipher_request *req)
501{
502	walk->flags |= SKCIPHER_WALK_PHYS;
503
504	INIT_LIST_HEAD(&walk->buffers);
505
506	return skcipher_walk_skcipher(walk, req);
507}
508EXPORT_SYMBOL_GPL(skcipher_walk_async);
509
510static int skcipher_walk_aead_common(struct skcipher_walk *walk,
511				     struct aead_request *req, bool atomic)
512{
513	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
514	int err;
515
516	walk->nbytes = 0;
517	walk->iv = req->iv;
518	walk->oiv = req->iv;
519
520	if (unlikely(!walk->total))
521		return 0;
522
523	walk->flags &= ~SKCIPHER_WALK_PHYS;
524
525	scatterwalk_start(&walk->in, req->src);
526	scatterwalk_start(&walk->out, req->dst);
527
528	scatterwalk_copychunks(NULL, &walk->in, req->assoclen, 2);
529	scatterwalk_copychunks(NULL, &walk->out, req->assoclen, 2);
530
531	scatterwalk_done(&walk->in, 0, walk->total);
532	scatterwalk_done(&walk->out, 0, walk->total);
533
534	if (req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP)
535		walk->flags |= SKCIPHER_WALK_SLEEP;
536	else
537		walk->flags &= ~SKCIPHER_WALK_SLEEP;
538
539	walk->blocksize = crypto_aead_blocksize(tfm);
540	walk->stride = crypto_aead_chunksize(tfm);
541	walk->ivsize = crypto_aead_ivsize(tfm);
542	walk->alignmask = crypto_aead_alignmask(tfm);
543
544	err = skcipher_walk_first(walk);
545
546	if (atomic)
547		walk->flags &= ~SKCIPHER_WALK_SLEEP;
548
549	return err;
550}
551
 
 
 
 
 
 
 
 
 
552int skcipher_walk_aead_encrypt(struct skcipher_walk *walk,
553			       struct aead_request *req, bool atomic)
554{
555	walk->total = req->cryptlen;
556
557	return skcipher_walk_aead_common(walk, req, atomic);
558}
559EXPORT_SYMBOL_GPL(skcipher_walk_aead_encrypt);
560
561int skcipher_walk_aead_decrypt(struct skcipher_walk *walk,
562			       struct aead_request *req, bool atomic)
563{
564	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
565
566	walk->total = req->cryptlen - crypto_aead_authsize(tfm);
567
568	return skcipher_walk_aead_common(walk, req, atomic);
569}
570EXPORT_SYMBOL_GPL(skcipher_walk_aead_decrypt);
571
572static void skcipher_set_needkey(struct crypto_skcipher *tfm)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
573{
574	if (crypto_skcipher_max_keysize(tfm) != 0)
575		crypto_skcipher_set_flags(tfm, CRYPTO_TFM_NEED_KEY);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
576}
577
578static int skcipher_setkey_unaligned(struct crypto_skcipher *tfm,
579				     const u8 *key, unsigned int keylen)
580{
581	unsigned long alignmask = crypto_skcipher_alignmask(tfm);
582	struct skcipher_alg *cipher = crypto_skcipher_alg(tfm);
583	u8 *buffer, *alignbuffer;
584	unsigned long absize;
585	int ret;
586
587	absize = keylen + alignmask;
588	buffer = kmalloc(absize, GFP_ATOMIC);
589	if (!buffer)
590		return -ENOMEM;
591
592	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
593	memcpy(alignbuffer, key, keylen);
594	ret = cipher->setkey(tfm, alignbuffer, keylen);
595	kfree_sensitive(buffer);
596	return ret;
597}
598
599int crypto_skcipher_setkey(struct crypto_skcipher *tfm, const u8 *key,
600			   unsigned int keylen)
601{
602	struct skcipher_alg *cipher = crypto_skcipher_alg(tfm);
603	unsigned long alignmask = crypto_skcipher_alignmask(tfm);
604	int err;
605
606	if (keylen < cipher->min_keysize || keylen > cipher->max_keysize)
 
607		return -EINVAL;
 
608
609	if ((unsigned long)key & alignmask)
610		err = skcipher_setkey_unaligned(tfm, key, keylen);
611	else
612		err = cipher->setkey(tfm, key, keylen);
613
614	if (unlikely(err)) {
615		skcipher_set_needkey(tfm);
616		return err;
617	}
618
619	crypto_skcipher_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
620	return 0;
621}
622EXPORT_SYMBOL_GPL(crypto_skcipher_setkey);
623
624int crypto_skcipher_encrypt(struct skcipher_request *req)
625{
626	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
627	struct crypto_alg *alg = tfm->base.__crt_alg;
628	unsigned int cryptlen = req->cryptlen;
629	int ret;
630
631	crypto_stats_get(alg);
632	if (crypto_skcipher_get_flags(tfm) & CRYPTO_TFM_NEED_KEY)
633		ret = -ENOKEY;
634	else
635		ret = crypto_skcipher_alg(tfm)->encrypt(req);
636	crypto_stats_skcipher_encrypt(cryptlen, ret, alg);
637	return ret;
638}
639EXPORT_SYMBOL_GPL(crypto_skcipher_encrypt);
640
641int crypto_skcipher_decrypt(struct skcipher_request *req)
642{
643	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
644	struct crypto_alg *alg = tfm->base.__crt_alg;
645	unsigned int cryptlen = req->cryptlen;
646	int ret;
647
648	crypto_stats_get(alg);
649	if (crypto_skcipher_get_flags(tfm) & CRYPTO_TFM_NEED_KEY)
650		ret = -ENOKEY;
651	else
652		ret = crypto_skcipher_alg(tfm)->decrypt(req);
653	crypto_stats_skcipher_decrypt(cryptlen, ret, alg);
654	return ret;
655}
656EXPORT_SYMBOL_GPL(crypto_skcipher_decrypt);
657
658static void crypto_skcipher_exit_tfm(struct crypto_tfm *tfm)
659{
660	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
661	struct skcipher_alg *alg = crypto_skcipher_alg(skcipher);
662
663	alg->exit(skcipher);
664}
665
666static int crypto_skcipher_init_tfm(struct crypto_tfm *tfm)
667{
668	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
669	struct skcipher_alg *alg = crypto_skcipher_alg(skcipher);
670
671	skcipher_set_needkey(skcipher);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
672
673	if (alg->exit)
674		skcipher->base.exit = crypto_skcipher_exit_tfm;
675
676	if (alg->init)
677		return alg->init(skcipher);
678
679	return 0;
680}
681
682static void crypto_skcipher_free_instance(struct crypto_instance *inst)
683{
684	struct skcipher_instance *skcipher =
685		container_of(inst, struct skcipher_instance, s.base);
686
687	skcipher->free(skcipher);
688}
689
690static void crypto_skcipher_show(struct seq_file *m, struct crypto_alg *alg)
691	__maybe_unused;
692static void crypto_skcipher_show(struct seq_file *m, struct crypto_alg *alg)
693{
694	struct skcipher_alg *skcipher = container_of(alg, struct skcipher_alg,
695						     base);
696
697	seq_printf(m, "type         : skcipher\n");
698	seq_printf(m, "async        : %s\n",
699		   alg->cra_flags & CRYPTO_ALG_ASYNC ?  "yes" : "no");
700	seq_printf(m, "blocksize    : %u\n", alg->cra_blocksize);
701	seq_printf(m, "min keysize  : %u\n", skcipher->min_keysize);
702	seq_printf(m, "max keysize  : %u\n", skcipher->max_keysize);
703	seq_printf(m, "ivsize       : %u\n", skcipher->ivsize);
704	seq_printf(m, "chunksize    : %u\n", skcipher->chunksize);
705	seq_printf(m, "walksize     : %u\n", skcipher->walksize);
706}
707
708#ifdef CONFIG_NET
709static int crypto_skcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
710{
711	struct crypto_report_blkcipher rblkcipher;
712	struct skcipher_alg *skcipher = container_of(alg, struct skcipher_alg,
713						     base);
714
715	memset(&rblkcipher, 0, sizeof(rblkcipher));
716
717	strscpy(rblkcipher.type, "skcipher", sizeof(rblkcipher.type));
718	strscpy(rblkcipher.geniv, "<none>", sizeof(rblkcipher.geniv));
719
720	rblkcipher.blocksize = alg->cra_blocksize;
721	rblkcipher.min_keysize = skcipher->min_keysize;
722	rblkcipher.max_keysize = skcipher->max_keysize;
723	rblkcipher.ivsize = skcipher->ivsize;
724
725	return nla_put(skb, CRYPTOCFGA_REPORT_BLKCIPHER,
726		       sizeof(rblkcipher), &rblkcipher);
 
 
 
 
 
727}
728#else
729static int crypto_skcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
730{
731	return -ENOSYS;
732}
733#endif
734
735static const struct crypto_type crypto_skcipher_type = {
736	.extsize = crypto_alg_extsize,
737	.init_tfm = crypto_skcipher_init_tfm,
738	.free = crypto_skcipher_free_instance,
739#ifdef CONFIG_PROC_FS
740	.show = crypto_skcipher_show,
741#endif
742	.report = crypto_skcipher_report,
743	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
744	.maskset = CRYPTO_ALG_TYPE_MASK,
745	.type = CRYPTO_ALG_TYPE_SKCIPHER,
746	.tfmsize = offsetof(struct crypto_skcipher, base),
747};
748
749int crypto_grab_skcipher(struct crypto_skcipher_spawn *spawn,
750			 struct crypto_instance *inst,
751			 const char *name, u32 type, u32 mask)
752{
753	spawn->base.frontend = &crypto_skcipher_type;
754	return crypto_grab_spawn(&spawn->base, inst, name, type, mask);
755}
756EXPORT_SYMBOL_GPL(crypto_grab_skcipher);
757
758struct crypto_skcipher *crypto_alloc_skcipher(const char *alg_name,
759					      u32 type, u32 mask)
760{
761	return crypto_alloc_tfm(alg_name, &crypto_skcipher_type, type, mask);
762}
763EXPORT_SYMBOL_GPL(crypto_alloc_skcipher);
764
765struct crypto_sync_skcipher *crypto_alloc_sync_skcipher(
766				const char *alg_name, u32 type, u32 mask)
767{
768	struct crypto_skcipher *tfm;
769
770	/* Only sync algorithms allowed. */
771	mask |= CRYPTO_ALG_ASYNC;
772
773	tfm = crypto_alloc_tfm(alg_name, &crypto_skcipher_type, type, mask);
774
775	/*
776	 * Make sure we do not allocate something that might get used with
777	 * an on-stack request: check the request size.
778	 */
779	if (!IS_ERR(tfm) && WARN_ON(crypto_skcipher_reqsize(tfm) >
780				    MAX_SYNC_SKCIPHER_REQSIZE)) {
781		crypto_free_skcipher(tfm);
782		return ERR_PTR(-EINVAL);
783	}
784
785	return (struct crypto_sync_skcipher *)tfm;
786}
787EXPORT_SYMBOL_GPL(crypto_alloc_sync_skcipher);
788
789int crypto_has_skcipher(const char *alg_name, u32 type, u32 mask)
790{
791	return crypto_type_has_alg(alg_name, &crypto_skcipher_type, type, mask);
792}
793EXPORT_SYMBOL_GPL(crypto_has_skcipher);
794
795static int skcipher_prepare_alg(struct skcipher_alg *alg)
796{
797	struct crypto_alg *base = &alg->base;
798
799	if (alg->ivsize > PAGE_SIZE / 8 || alg->chunksize > PAGE_SIZE / 8 ||
800	    alg->walksize > PAGE_SIZE / 8)
801		return -EINVAL;
802
803	if (!alg->chunksize)
804		alg->chunksize = base->cra_blocksize;
805	if (!alg->walksize)
806		alg->walksize = alg->chunksize;
807
808	base->cra_type = &crypto_skcipher_type;
809	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
810	base->cra_flags |= CRYPTO_ALG_TYPE_SKCIPHER;
811
812	return 0;
813}
814
815int crypto_register_skcipher(struct skcipher_alg *alg)
816{
817	struct crypto_alg *base = &alg->base;
818	int err;
819
820	err = skcipher_prepare_alg(alg);
821	if (err)
822		return err;
823
824	return crypto_register_alg(base);
825}
826EXPORT_SYMBOL_GPL(crypto_register_skcipher);
827
828void crypto_unregister_skcipher(struct skcipher_alg *alg)
829{
830	crypto_unregister_alg(&alg->base);
831}
832EXPORT_SYMBOL_GPL(crypto_unregister_skcipher);
833
834int crypto_register_skciphers(struct skcipher_alg *algs, int count)
835{
836	int i, ret;
837
838	for (i = 0; i < count; i++) {
839		ret = crypto_register_skcipher(&algs[i]);
840		if (ret)
841			goto err;
842	}
843
844	return 0;
845
846err:
847	for (--i; i >= 0; --i)
848		crypto_unregister_skcipher(&algs[i]);
849
850	return ret;
851}
852EXPORT_SYMBOL_GPL(crypto_register_skciphers);
853
854void crypto_unregister_skciphers(struct skcipher_alg *algs, int count)
855{
856	int i;
857
858	for (i = count - 1; i >= 0; --i)
859		crypto_unregister_skcipher(&algs[i]);
860}
861EXPORT_SYMBOL_GPL(crypto_unregister_skciphers);
862
863int skcipher_register_instance(struct crypto_template *tmpl,
864			   struct skcipher_instance *inst)
865{
866	int err;
867
868	if (WARN_ON(!inst->free))
869		return -EINVAL;
870
871	err = skcipher_prepare_alg(&inst->alg);
872	if (err)
873		return err;
874
875	return crypto_register_instance(tmpl, skcipher_crypto_instance(inst));
876}
877EXPORT_SYMBOL_GPL(skcipher_register_instance);
878
879static int skcipher_setkey_simple(struct crypto_skcipher *tfm, const u8 *key,
880				  unsigned int keylen)
881{
882	struct crypto_cipher *cipher = skcipher_cipher_simple(tfm);
883
884	crypto_cipher_clear_flags(cipher, CRYPTO_TFM_REQ_MASK);
885	crypto_cipher_set_flags(cipher, crypto_skcipher_get_flags(tfm) &
886				CRYPTO_TFM_REQ_MASK);
887	return crypto_cipher_setkey(cipher, key, keylen);
888}
889
890static int skcipher_init_tfm_simple(struct crypto_skcipher *tfm)
891{
892	struct skcipher_instance *inst = skcipher_alg_instance(tfm);
893	struct crypto_cipher_spawn *spawn = skcipher_instance_ctx(inst);
894	struct skcipher_ctx_simple *ctx = crypto_skcipher_ctx(tfm);
895	struct crypto_cipher *cipher;
896
897	cipher = crypto_spawn_cipher(spawn);
898	if (IS_ERR(cipher))
899		return PTR_ERR(cipher);
900
901	ctx->cipher = cipher;
902	return 0;
903}
904
905static void skcipher_exit_tfm_simple(struct crypto_skcipher *tfm)
906{
907	struct skcipher_ctx_simple *ctx = crypto_skcipher_ctx(tfm);
908
909	crypto_free_cipher(ctx->cipher);
910}
911
912static void skcipher_free_instance_simple(struct skcipher_instance *inst)
913{
914	crypto_drop_cipher(skcipher_instance_ctx(inst));
915	kfree(inst);
916}
917
918/**
919 * skcipher_alloc_instance_simple - allocate instance of simple block cipher mode
920 *
921 * Allocate an skcipher_instance for a simple block cipher mode of operation,
922 * e.g. cbc or ecb.  The instance context will have just a single crypto_spawn,
923 * that for the underlying cipher.  The {min,max}_keysize, ivsize, blocksize,
924 * alignmask, and priority are set from the underlying cipher but can be
925 * overridden if needed.  The tfm context defaults to skcipher_ctx_simple, and
926 * default ->setkey(), ->init(), and ->exit() methods are installed.
927 *
928 * @tmpl: the template being instantiated
929 * @tb: the template parameters
930 *
931 * Return: a pointer to the new instance, or an ERR_PTR().  The caller still
932 *	   needs to register the instance.
933 */
934struct skcipher_instance *skcipher_alloc_instance_simple(
935	struct crypto_template *tmpl, struct rtattr **tb)
936{
937	u32 mask;
938	struct skcipher_instance *inst;
939	struct crypto_cipher_spawn *spawn;
940	struct crypto_alg *cipher_alg;
941	int err;
942
943	err = crypto_check_attr_type(tb, CRYPTO_ALG_TYPE_SKCIPHER, &mask);
944	if (err)
945		return ERR_PTR(err);
946
947	inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL);
948	if (!inst)
949		return ERR_PTR(-ENOMEM);
950	spawn = skcipher_instance_ctx(inst);
951
952	err = crypto_grab_cipher(spawn, skcipher_crypto_instance(inst),
953				 crypto_attr_alg_name(tb[1]), 0, mask);
954	if (err)
955		goto err_free_inst;
956	cipher_alg = crypto_spawn_cipher_alg(spawn);
957
958	err = crypto_inst_setname(skcipher_crypto_instance(inst), tmpl->name,
959				  cipher_alg);
960	if (err)
961		goto err_free_inst;
962
963	inst->free = skcipher_free_instance_simple;
964
965	/* Default algorithm properties, can be overridden */
966	inst->alg.base.cra_blocksize = cipher_alg->cra_blocksize;
967	inst->alg.base.cra_alignmask = cipher_alg->cra_alignmask;
968	inst->alg.base.cra_priority = cipher_alg->cra_priority;
969	inst->alg.min_keysize = cipher_alg->cra_cipher.cia_min_keysize;
970	inst->alg.max_keysize = cipher_alg->cra_cipher.cia_max_keysize;
971	inst->alg.ivsize = cipher_alg->cra_blocksize;
972
973	/* Use skcipher_ctx_simple by default, can be overridden */
974	inst->alg.base.cra_ctxsize = sizeof(struct skcipher_ctx_simple);
975	inst->alg.setkey = skcipher_setkey_simple;
976	inst->alg.init = skcipher_init_tfm_simple;
977	inst->alg.exit = skcipher_exit_tfm_simple;
978
979	return inst;
980
981err_free_inst:
982	skcipher_free_instance_simple(inst);
983	return ERR_PTR(err);
984}
985EXPORT_SYMBOL_GPL(skcipher_alloc_instance_simple);
986
987MODULE_LICENSE("GPL");
988MODULE_DESCRIPTION("Symmetric key cipher type");
v4.17
 
   1/*
   2 * Symmetric key cipher operations.
   3 *
   4 * Generic encrypt/decrypt wrapper for ciphers, handles operations across
   5 * multiple page boundaries by using temporary blocks.  In user context,
   6 * the kernel is given a chance to schedule us once per page.
   7 *
   8 * Copyright (c) 2015 Herbert Xu <herbert@gondor.apana.org.au>
   9 *
  10 * This program is free software; you can redistribute it and/or modify it
  11 * under the terms of the GNU General Public License as published by the Free
  12 * Software Foundation; either version 2 of the License, or (at your option)
  13 * any later version.
  14 *
  15 */
  16
  17#include <crypto/internal/aead.h>
  18#include <crypto/internal/skcipher.h>
  19#include <crypto/scatterwalk.h>
  20#include <linux/bug.h>
  21#include <linux/cryptouser.h>
  22#include <linux/compiler.h>
  23#include <linux/list.h>
  24#include <linux/module.h>
  25#include <linux/rtnetlink.h>
  26#include <linux/seq_file.h>
  27#include <net/netlink.h>
  28
  29#include "internal.h"
  30
  31enum {
  32	SKCIPHER_WALK_PHYS = 1 << 0,
  33	SKCIPHER_WALK_SLOW = 1 << 1,
  34	SKCIPHER_WALK_COPY = 1 << 2,
  35	SKCIPHER_WALK_DIFF = 1 << 3,
  36	SKCIPHER_WALK_SLEEP = 1 << 4,
  37};
  38
  39struct skcipher_walk_buffer {
  40	struct list_head entry;
  41	struct scatter_walk dst;
  42	unsigned int len;
  43	u8 *data;
  44	u8 buffer[];
  45};
  46
  47static int skcipher_walk_next(struct skcipher_walk *walk);
  48
  49static inline void skcipher_unmap(struct scatter_walk *walk, void *vaddr)
  50{
  51	if (PageHighMem(scatterwalk_page(walk)))
  52		kunmap_atomic(vaddr);
  53}
  54
  55static inline void *skcipher_map(struct scatter_walk *walk)
  56{
  57	struct page *page = scatterwalk_page(walk);
  58
  59	return (PageHighMem(page) ? kmap_atomic(page) : page_address(page)) +
  60	       offset_in_page(walk->offset);
  61}
  62
  63static inline void skcipher_map_src(struct skcipher_walk *walk)
  64{
  65	walk->src.virt.addr = skcipher_map(&walk->in);
  66}
  67
  68static inline void skcipher_map_dst(struct skcipher_walk *walk)
  69{
  70	walk->dst.virt.addr = skcipher_map(&walk->out);
  71}
  72
  73static inline void skcipher_unmap_src(struct skcipher_walk *walk)
  74{
  75	skcipher_unmap(&walk->in, walk->src.virt.addr);
  76}
  77
  78static inline void skcipher_unmap_dst(struct skcipher_walk *walk)
  79{
  80	skcipher_unmap(&walk->out, walk->dst.virt.addr);
  81}
  82
  83static inline gfp_t skcipher_walk_gfp(struct skcipher_walk *walk)
  84{
  85	return walk->flags & SKCIPHER_WALK_SLEEP ? GFP_KERNEL : GFP_ATOMIC;
  86}
  87
  88/* Get a spot of the specified length that does not straddle a page.
  89 * The caller needs to ensure that there is enough space for this operation.
  90 */
  91static inline u8 *skcipher_get_spot(u8 *start, unsigned int len)
  92{
  93	u8 *end_page = (u8 *)(((unsigned long)(start + len - 1)) & PAGE_MASK);
  94
  95	return max(start, end_page);
  96}
  97
  98static int skcipher_done_slow(struct skcipher_walk *walk, unsigned int bsize)
  99{
 100	u8 *addr;
 101
 102	addr = (u8 *)ALIGN((unsigned long)walk->buffer, walk->alignmask + 1);
 103	addr = skcipher_get_spot(addr, bsize);
 104	scatterwalk_copychunks(addr, &walk->out, bsize,
 105			       (walk->flags & SKCIPHER_WALK_PHYS) ? 2 : 1);
 106	return 0;
 107}
 108
 109int skcipher_walk_done(struct skcipher_walk *walk, int err)
 110{
 111	unsigned int n = walk->nbytes - err;
 112	unsigned int nbytes;
 113
 114	nbytes = walk->total - n;
 
 115
 116	if (unlikely(err < 0)) {
 117		nbytes = 0;
 118		n = 0;
 119	} else if (likely(!(walk->flags & (SKCIPHER_WALK_PHYS |
 120					   SKCIPHER_WALK_SLOW |
 121					   SKCIPHER_WALK_COPY |
 122					   SKCIPHER_WALK_DIFF)))) {
 
 
 123unmap_src:
 124		skcipher_unmap_src(walk);
 125	} else if (walk->flags & SKCIPHER_WALK_DIFF) {
 126		skcipher_unmap_dst(walk);
 127		goto unmap_src;
 128	} else if (walk->flags & SKCIPHER_WALK_COPY) {
 129		skcipher_map_dst(walk);
 130		memcpy(walk->dst.virt.addr, walk->page, n);
 131		skcipher_unmap_dst(walk);
 132	} else if (unlikely(walk->flags & SKCIPHER_WALK_SLOW)) {
 133		if (WARN_ON(err)) {
 
 
 
 
 
 
 134			err = -EINVAL;
 135			nbytes = 0;
 136		} else
 137			n = skcipher_done_slow(walk, n);
 138	}
 139
 140	if (err > 0)
 141		err = 0;
 142
 143	walk->total = nbytes;
 144	walk->nbytes = nbytes;
 145
 146	scatterwalk_advance(&walk->in, n);
 147	scatterwalk_advance(&walk->out, n);
 148	scatterwalk_done(&walk->in, 0, nbytes);
 149	scatterwalk_done(&walk->out, 1, nbytes);
 150
 151	if (nbytes) {
 152		crypto_yield(walk->flags & SKCIPHER_WALK_SLEEP ?
 153			     CRYPTO_TFM_REQ_MAY_SLEEP : 0);
 154		return skcipher_walk_next(walk);
 155	}
 156
 
 157	/* Short-circuit for the common/fast path. */
 158	if (!((unsigned long)walk->buffer | (unsigned long)walk->page))
 159		goto out;
 160
 161	if (walk->flags & SKCIPHER_WALK_PHYS)
 162		goto out;
 163
 164	if (walk->iv != walk->oiv)
 165		memcpy(walk->oiv, walk->iv, walk->ivsize);
 166	if (walk->buffer != walk->page)
 167		kfree(walk->buffer);
 168	if (walk->page)
 169		free_page((unsigned long)walk->page);
 170
 171out:
 172	return err;
 173}
 174EXPORT_SYMBOL_GPL(skcipher_walk_done);
 175
 176void skcipher_walk_complete(struct skcipher_walk *walk, int err)
 177{
 178	struct skcipher_walk_buffer *p, *tmp;
 179
 180	list_for_each_entry_safe(p, tmp, &walk->buffers, entry) {
 181		u8 *data;
 182
 183		if (err)
 184			goto done;
 185
 186		data = p->data;
 187		if (!data) {
 188			data = PTR_ALIGN(&p->buffer[0], walk->alignmask + 1);
 189			data = skcipher_get_spot(data, walk->stride);
 190		}
 191
 192		scatterwalk_copychunks(data, &p->dst, p->len, 1);
 193
 194		if (offset_in_page(p->data) + p->len + walk->stride >
 195		    PAGE_SIZE)
 196			free_page((unsigned long)p->data);
 197
 198done:
 199		list_del(&p->entry);
 200		kfree(p);
 201	}
 202
 203	if (!err && walk->iv != walk->oiv)
 204		memcpy(walk->oiv, walk->iv, walk->ivsize);
 205	if (walk->buffer != walk->page)
 206		kfree(walk->buffer);
 207	if (walk->page)
 208		free_page((unsigned long)walk->page);
 209}
 210EXPORT_SYMBOL_GPL(skcipher_walk_complete);
 211
 212static void skcipher_queue_write(struct skcipher_walk *walk,
 213				 struct skcipher_walk_buffer *p)
 214{
 215	p->dst = walk->out;
 216	list_add_tail(&p->entry, &walk->buffers);
 217}
 218
 219static int skcipher_next_slow(struct skcipher_walk *walk, unsigned int bsize)
 220{
 221	bool phys = walk->flags & SKCIPHER_WALK_PHYS;
 222	unsigned alignmask = walk->alignmask;
 223	struct skcipher_walk_buffer *p;
 224	unsigned a;
 225	unsigned n;
 226	u8 *buffer;
 227	void *v;
 228
 229	if (!phys) {
 230		if (!walk->buffer)
 231			walk->buffer = walk->page;
 232		buffer = walk->buffer;
 233		if (buffer)
 234			goto ok;
 235	}
 236
 237	/* Start with the minimum alignment of kmalloc. */
 238	a = crypto_tfm_ctx_alignment() - 1;
 239	n = bsize;
 240
 241	if (phys) {
 242		/* Calculate the minimum alignment of p->buffer. */
 243		a &= (sizeof(*p) ^ (sizeof(*p) - 1)) >> 1;
 244		n += sizeof(*p);
 245	}
 246
 247	/* Minimum size to align p->buffer by alignmask. */
 248	n += alignmask & ~a;
 249
 250	/* Minimum size to ensure p->buffer does not straddle a page. */
 251	n += (bsize - 1) & ~(alignmask | a);
 252
 253	v = kzalloc(n, skcipher_walk_gfp(walk));
 254	if (!v)
 255		return skcipher_walk_done(walk, -ENOMEM);
 256
 257	if (phys) {
 258		p = v;
 259		p->len = bsize;
 260		skcipher_queue_write(walk, p);
 261		buffer = p->buffer;
 262	} else {
 263		walk->buffer = v;
 264		buffer = v;
 265	}
 266
 267ok:
 268	walk->dst.virt.addr = PTR_ALIGN(buffer, alignmask + 1);
 269	walk->dst.virt.addr = skcipher_get_spot(walk->dst.virt.addr, bsize);
 270	walk->src.virt.addr = walk->dst.virt.addr;
 271
 272	scatterwalk_copychunks(walk->src.virt.addr, &walk->in, bsize, 0);
 273
 274	walk->nbytes = bsize;
 275	walk->flags |= SKCIPHER_WALK_SLOW;
 276
 277	return 0;
 278}
 279
 280static int skcipher_next_copy(struct skcipher_walk *walk)
 281{
 282	struct skcipher_walk_buffer *p;
 283	u8 *tmp = walk->page;
 284
 285	skcipher_map_src(walk);
 286	memcpy(tmp, walk->src.virt.addr, walk->nbytes);
 287	skcipher_unmap_src(walk);
 288
 289	walk->src.virt.addr = tmp;
 290	walk->dst.virt.addr = tmp;
 291
 292	if (!(walk->flags & SKCIPHER_WALK_PHYS))
 293		return 0;
 294
 295	p = kmalloc(sizeof(*p), skcipher_walk_gfp(walk));
 296	if (!p)
 297		return -ENOMEM;
 298
 299	p->data = walk->page;
 300	p->len = walk->nbytes;
 301	skcipher_queue_write(walk, p);
 302
 303	if (offset_in_page(walk->page) + walk->nbytes + walk->stride >
 304	    PAGE_SIZE)
 305		walk->page = NULL;
 306	else
 307		walk->page += walk->nbytes;
 308
 309	return 0;
 310}
 311
 312static int skcipher_next_fast(struct skcipher_walk *walk)
 313{
 314	unsigned long diff;
 315
 316	walk->src.phys.page = scatterwalk_page(&walk->in);
 317	walk->src.phys.offset = offset_in_page(walk->in.offset);
 318	walk->dst.phys.page = scatterwalk_page(&walk->out);
 319	walk->dst.phys.offset = offset_in_page(walk->out.offset);
 320
 321	if (walk->flags & SKCIPHER_WALK_PHYS)
 322		return 0;
 323
 324	diff = walk->src.phys.offset - walk->dst.phys.offset;
 325	diff |= walk->src.virt.page - walk->dst.virt.page;
 326
 327	skcipher_map_src(walk);
 328	walk->dst.virt.addr = walk->src.virt.addr;
 329
 330	if (diff) {
 331		walk->flags |= SKCIPHER_WALK_DIFF;
 332		skcipher_map_dst(walk);
 333	}
 334
 335	return 0;
 336}
 337
 338static int skcipher_walk_next(struct skcipher_walk *walk)
 339{
 340	unsigned int bsize;
 341	unsigned int n;
 342	int err;
 343
 344	walk->flags &= ~(SKCIPHER_WALK_SLOW | SKCIPHER_WALK_COPY |
 345			 SKCIPHER_WALK_DIFF);
 346
 347	n = walk->total;
 348	bsize = min(walk->stride, max(n, walk->blocksize));
 349	n = scatterwalk_clamp(&walk->in, n);
 350	n = scatterwalk_clamp(&walk->out, n);
 351
 352	if (unlikely(n < bsize)) {
 353		if (unlikely(walk->total < walk->blocksize))
 354			return skcipher_walk_done(walk, -EINVAL);
 355
 356slow_path:
 357		err = skcipher_next_slow(walk, bsize);
 358		goto set_phys_lowmem;
 359	}
 360
 361	if (unlikely((walk->in.offset | walk->out.offset) & walk->alignmask)) {
 362		if (!walk->page) {
 363			gfp_t gfp = skcipher_walk_gfp(walk);
 364
 365			walk->page = (void *)__get_free_page(gfp);
 366			if (!walk->page)
 367				goto slow_path;
 368		}
 369
 370		walk->nbytes = min_t(unsigned, n,
 371				     PAGE_SIZE - offset_in_page(walk->page));
 372		walk->flags |= SKCIPHER_WALK_COPY;
 373		err = skcipher_next_copy(walk);
 374		goto set_phys_lowmem;
 375	}
 376
 377	walk->nbytes = n;
 378
 379	return skcipher_next_fast(walk);
 380
 381set_phys_lowmem:
 382	if (!err && (walk->flags & SKCIPHER_WALK_PHYS)) {
 383		walk->src.phys.page = virt_to_page(walk->src.virt.addr);
 384		walk->dst.phys.page = virt_to_page(walk->dst.virt.addr);
 385		walk->src.phys.offset &= PAGE_SIZE - 1;
 386		walk->dst.phys.offset &= PAGE_SIZE - 1;
 387	}
 388	return err;
 389}
 390EXPORT_SYMBOL_GPL(skcipher_walk_next);
 391
 392static int skcipher_copy_iv(struct skcipher_walk *walk)
 393{
 394	unsigned a = crypto_tfm_ctx_alignment() - 1;
 395	unsigned alignmask = walk->alignmask;
 396	unsigned ivsize = walk->ivsize;
 397	unsigned bs = walk->stride;
 398	unsigned aligned_bs;
 399	unsigned size;
 400	u8 *iv;
 401
 402	aligned_bs = ALIGN(bs, alignmask);
 403
 404	/* Minimum size to align buffer by alignmask. */
 405	size = alignmask & ~a;
 406
 407	if (walk->flags & SKCIPHER_WALK_PHYS)
 408		size += ivsize;
 409	else {
 410		size += aligned_bs + ivsize;
 411
 412		/* Minimum size to ensure buffer does not straddle a page. */
 413		size += (bs - 1) & ~(alignmask | a);
 414	}
 415
 416	walk->buffer = kmalloc(size, skcipher_walk_gfp(walk));
 417	if (!walk->buffer)
 418		return -ENOMEM;
 419
 420	iv = PTR_ALIGN(walk->buffer, alignmask + 1);
 421	iv = skcipher_get_spot(iv, bs) + aligned_bs;
 422
 423	walk->iv = memcpy(iv, walk->iv, walk->ivsize);
 424	return 0;
 425}
 426
 427static int skcipher_walk_first(struct skcipher_walk *walk)
 428{
 429	if (WARN_ON_ONCE(in_irq()))
 430		return -EDEADLK;
 431
 432	walk->buffer = NULL;
 433	if (unlikely(((unsigned long)walk->iv & walk->alignmask))) {
 434		int err = skcipher_copy_iv(walk);
 435		if (err)
 436			return err;
 437	}
 438
 439	walk->page = NULL;
 440	walk->nbytes = walk->total;
 441
 442	return skcipher_walk_next(walk);
 443}
 444
 445static int skcipher_walk_skcipher(struct skcipher_walk *walk,
 446				  struct skcipher_request *req)
 447{
 448	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
 449
 450	walk->total = req->cryptlen;
 451	walk->nbytes = 0;
 452	walk->iv = req->iv;
 453	walk->oiv = req->iv;
 454
 455	if (unlikely(!walk->total))
 456		return 0;
 457
 458	scatterwalk_start(&walk->in, req->src);
 459	scatterwalk_start(&walk->out, req->dst);
 460
 461	walk->flags &= ~SKCIPHER_WALK_SLEEP;
 462	walk->flags |= req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP ?
 463		       SKCIPHER_WALK_SLEEP : 0;
 464
 465	walk->blocksize = crypto_skcipher_blocksize(tfm);
 466	walk->stride = crypto_skcipher_walksize(tfm);
 467	walk->ivsize = crypto_skcipher_ivsize(tfm);
 468	walk->alignmask = crypto_skcipher_alignmask(tfm);
 469
 470	return skcipher_walk_first(walk);
 471}
 472
 473int skcipher_walk_virt(struct skcipher_walk *walk,
 474		       struct skcipher_request *req, bool atomic)
 475{
 476	int err;
 477
 
 
 478	walk->flags &= ~SKCIPHER_WALK_PHYS;
 479
 480	err = skcipher_walk_skcipher(walk, req);
 481
 482	walk->flags &= atomic ? ~SKCIPHER_WALK_SLEEP : ~0;
 483
 484	return err;
 485}
 486EXPORT_SYMBOL_GPL(skcipher_walk_virt);
 487
 488void skcipher_walk_atomise(struct skcipher_walk *walk)
 489{
 490	walk->flags &= ~SKCIPHER_WALK_SLEEP;
 491}
 492EXPORT_SYMBOL_GPL(skcipher_walk_atomise);
 493
 494int skcipher_walk_async(struct skcipher_walk *walk,
 495			struct skcipher_request *req)
 496{
 497	walk->flags |= SKCIPHER_WALK_PHYS;
 498
 499	INIT_LIST_HEAD(&walk->buffers);
 500
 501	return skcipher_walk_skcipher(walk, req);
 502}
 503EXPORT_SYMBOL_GPL(skcipher_walk_async);
 504
 505static int skcipher_walk_aead_common(struct skcipher_walk *walk,
 506				     struct aead_request *req, bool atomic)
 507{
 508	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
 509	int err;
 510
 511	walk->nbytes = 0;
 512	walk->iv = req->iv;
 513	walk->oiv = req->iv;
 514
 515	if (unlikely(!walk->total))
 516		return 0;
 517
 518	walk->flags &= ~SKCIPHER_WALK_PHYS;
 519
 520	scatterwalk_start(&walk->in, req->src);
 521	scatterwalk_start(&walk->out, req->dst);
 522
 523	scatterwalk_copychunks(NULL, &walk->in, req->assoclen, 2);
 524	scatterwalk_copychunks(NULL, &walk->out, req->assoclen, 2);
 525
 526	scatterwalk_done(&walk->in, 0, walk->total);
 527	scatterwalk_done(&walk->out, 0, walk->total);
 528
 529	if (req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP)
 530		walk->flags |= SKCIPHER_WALK_SLEEP;
 531	else
 532		walk->flags &= ~SKCIPHER_WALK_SLEEP;
 533
 534	walk->blocksize = crypto_aead_blocksize(tfm);
 535	walk->stride = crypto_aead_chunksize(tfm);
 536	walk->ivsize = crypto_aead_ivsize(tfm);
 537	walk->alignmask = crypto_aead_alignmask(tfm);
 538
 539	err = skcipher_walk_first(walk);
 540
 541	if (atomic)
 542		walk->flags &= ~SKCIPHER_WALK_SLEEP;
 543
 544	return err;
 545}
 546
 547int skcipher_walk_aead(struct skcipher_walk *walk, struct aead_request *req,
 548		       bool atomic)
 549{
 550	walk->total = req->cryptlen;
 551
 552	return skcipher_walk_aead_common(walk, req, atomic);
 553}
 554EXPORT_SYMBOL_GPL(skcipher_walk_aead);
 555
 556int skcipher_walk_aead_encrypt(struct skcipher_walk *walk,
 557			       struct aead_request *req, bool atomic)
 558{
 559	walk->total = req->cryptlen;
 560
 561	return skcipher_walk_aead_common(walk, req, atomic);
 562}
 563EXPORT_SYMBOL_GPL(skcipher_walk_aead_encrypt);
 564
 565int skcipher_walk_aead_decrypt(struct skcipher_walk *walk,
 566			       struct aead_request *req, bool atomic)
 567{
 568	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
 569
 570	walk->total = req->cryptlen - crypto_aead_authsize(tfm);
 571
 572	return skcipher_walk_aead_common(walk, req, atomic);
 573}
 574EXPORT_SYMBOL_GPL(skcipher_walk_aead_decrypt);
 575
 576static unsigned int crypto_skcipher_extsize(struct crypto_alg *alg)
 577{
 578	if (alg->cra_type == &crypto_blkcipher_type)
 579		return sizeof(struct crypto_blkcipher *);
 580
 581	if (alg->cra_type == &crypto_ablkcipher_type ||
 582	    alg->cra_type == &crypto_givcipher_type)
 583		return sizeof(struct crypto_ablkcipher *);
 584
 585	return crypto_alg_extsize(alg);
 586}
 587
 588static int skcipher_setkey_blkcipher(struct crypto_skcipher *tfm,
 589				     const u8 *key, unsigned int keylen)
 590{
 591	struct crypto_blkcipher **ctx = crypto_skcipher_ctx(tfm);
 592	struct crypto_blkcipher *blkcipher = *ctx;
 593	int err;
 594
 595	crypto_blkcipher_clear_flags(blkcipher, ~0);
 596	crypto_blkcipher_set_flags(blkcipher, crypto_skcipher_get_flags(tfm) &
 597					      CRYPTO_TFM_REQ_MASK);
 598	err = crypto_blkcipher_setkey(blkcipher, key, keylen);
 599	crypto_skcipher_set_flags(tfm, crypto_blkcipher_get_flags(blkcipher) &
 600				       CRYPTO_TFM_RES_MASK);
 601	if (err)
 602		return err;
 603
 604	crypto_skcipher_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
 605	return 0;
 606}
 607
 608static int skcipher_crypt_blkcipher(struct skcipher_request *req,
 609				    int (*crypt)(struct blkcipher_desc *,
 610						 struct scatterlist *,
 611						 struct scatterlist *,
 612						 unsigned int))
 613{
 614	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
 615	struct crypto_blkcipher **ctx = crypto_skcipher_ctx(tfm);
 616	struct blkcipher_desc desc = {
 617		.tfm = *ctx,
 618		.info = req->iv,
 619		.flags = req->base.flags,
 620	};
 621
 622
 623	return crypt(&desc, req->dst, req->src, req->cryptlen);
 624}
 625
 626static int skcipher_encrypt_blkcipher(struct skcipher_request *req)
 627{
 628	struct crypto_skcipher *skcipher = crypto_skcipher_reqtfm(req);
 629	struct crypto_tfm *tfm = crypto_skcipher_tfm(skcipher);
 630	struct blkcipher_alg *alg = &tfm->__crt_alg->cra_blkcipher;
 631
 632	return skcipher_crypt_blkcipher(req, alg->encrypt);
 633}
 634
 635static int skcipher_decrypt_blkcipher(struct skcipher_request *req)
 636{
 637	struct crypto_skcipher *skcipher = crypto_skcipher_reqtfm(req);
 638	struct crypto_tfm *tfm = crypto_skcipher_tfm(skcipher);
 639	struct blkcipher_alg *alg = &tfm->__crt_alg->cra_blkcipher;
 640
 641	return skcipher_crypt_blkcipher(req, alg->decrypt);
 642}
 643
 644static void crypto_exit_skcipher_ops_blkcipher(struct crypto_tfm *tfm)
 645{
 646	struct crypto_blkcipher **ctx = crypto_tfm_ctx(tfm);
 647
 648	crypto_free_blkcipher(*ctx);
 649}
 650
 651static int crypto_init_skcipher_ops_blkcipher(struct crypto_tfm *tfm)
 652{
 653	struct crypto_alg *calg = tfm->__crt_alg;
 654	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
 655	struct crypto_blkcipher **ctx = crypto_tfm_ctx(tfm);
 656	struct crypto_blkcipher *blkcipher;
 657	struct crypto_tfm *btfm;
 658
 659	if (!crypto_mod_get(calg))
 660		return -EAGAIN;
 661
 662	btfm = __crypto_alloc_tfm(calg, CRYPTO_ALG_TYPE_BLKCIPHER,
 663					CRYPTO_ALG_TYPE_MASK);
 664	if (IS_ERR(btfm)) {
 665		crypto_mod_put(calg);
 666		return PTR_ERR(btfm);
 667	}
 668
 669	blkcipher = __crypto_blkcipher_cast(btfm);
 670	*ctx = blkcipher;
 671	tfm->exit = crypto_exit_skcipher_ops_blkcipher;
 672
 673	skcipher->setkey = skcipher_setkey_blkcipher;
 674	skcipher->encrypt = skcipher_encrypt_blkcipher;
 675	skcipher->decrypt = skcipher_decrypt_blkcipher;
 676
 677	skcipher->ivsize = crypto_blkcipher_ivsize(blkcipher);
 678	skcipher->keysize = calg->cra_blkcipher.max_keysize;
 679
 680	if (skcipher->keysize)
 681		crypto_skcipher_set_flags(skcipher, CRYPTO_TFM_NEED_KEY);
 682
 683	return 0;
 684}
 685
 686static int skcipher_setkey_ablkcipher(struct crypto_skcipher *tfm,
 687				      const u8 *key, unsigned int keylen)
 688{
 689	struct crypto_ablkcipher **ctx = crypto_skcipher_ctx(tfm);
 690	struct crypto_ablkcipher *ablkcipher = *ctx;
 691	int err;
 692
 693	crypto_ablkcipher_clear_flags(ablkcipher, ~0);
 694	crypto_ablkcipher_set_flags(ablkcipher,
 695				    crypto_skcipher_get_flags(tfm) &
 696				    CRYPTO_TFM_REQ_MASK);
 697	err = crypto_ablkcipher_setkey(ablkcipher, key, keylen);
 698	crypto_skcipher_set_flags(tfm,
 699				  crypto_ablkcipher_get_flags(ablkcipher) &
 700				  CRYPTO_TFM_RES_MASK);
 701	if (err)
 702		return err;
 703
 704	crypto_skcipher_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
 705	return 0;
 706}
 707
 708static int skcipher_crypt_ablkcipher(struct skcipher_request *req,
 709				     int (*crypt)(struct ablkcipher_request *))
 710{
 711	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
 712	struct crypto_ablkcipher **ctx = crypto_skcipher_ctx(tfm);
 713	struct ablkcipher_request *subreq = skcipher_request_ctx(req);
 714
 715	ablkcipher_request_set_tfm(subreq, *ctx);
 716	ablkcipher_request_set_callback(subreq, skcipher_request_flags(req),
 717					req->base.complete, req->base.data);
 718	ablkcipher_request_set_crypt(subreq, req->src, req->dst, req->cryptlen,
 719				     req->iv);
 720
 721	return crypt(subreq);
 722}
 723
 724static int skcipher_encrypt_ablkcipher(struct skcipher_request *req)
 725{
 726	struct crypto_skcipher *skcipher = crypto_skcipher_reqtfm(req);
 727	struct crypto_tfm *tfm = crypto_skcipher_tfm(skcipher);
 728	struct ablkcipher_alg *alg = &tfm->__crt_alg->cra_ablkcipher;
 729
 730	return skcipher_crypt_ablkcipher(req, alg->encrypt);
 731}
 732
 733static int skcipher_decrypt_ablkcipher(struct skcipher_request *req)
 734{
 735	struct crypto_skcipher *skcipher = crypto_skcipher_reqtfm(req);
 736	struct crypto_tfm *tfm = crypto_skcipher_tfm(skcipher);
 737	struct ablkcipher_alg *alg = &tfm->__crt_alg->cra_ablkcipher;
 738
 739	return skcipher_crypt_ablkcipher(req, alg->decrypt);
 740}
 741
 742static void crypto_exit_skcipher_ops_ablkcipher(struct crypto_tfm *tfm)
 743{
 744	struct crypto_ablkcipher **ctx = crypto_tfm_ctx(tfm);
 745
 746	crypto_free_ablkcipher(*ctx);
 747}
 748
 749static int crypto_init_skcipher_ops_ablkcipher(struct crypto_tfm *tfm)
 750{
 751	struct crypto_alg *calg = tfm->__crt_alg;
 752	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
 753	struct crypto_ablkcipher **ctx = crypto_tfm_ctx(tfm);
 754	struct crypto_ablkcipher *ablkcipher;
 755	struct crypto_tfm *abtfm;
 756
 757	if (!crypto_mod_get(calg))
 758		return -EAGAIN;
 759
 760	abtfm = __crypto_alloc_tfm(calg, 0, 0);
 761	if (IS_ERR(abtfm)) {
 762		crypto_mod_put(calg);
 763		return PTR_ERR(abtfm);
 764	}
 765
 766	ablkcipher = __crypto_ablkcipher_cast(abtfm);
 767	*ctx = ablkcipher;
 768	tfm->exit = crypto_exit_skcipher_ops_ablkcipher;
 769
 770	skcipher->setkey = skcipher_setkey_ablkcipher;
 771	skcipher->encrypt = skcipher_encrypt_ablkcipher;
 772	skcipher->decrypt = skcipher_decrypt_ablkcipher;
 773
 774	skcipher->ivsize = crypto_ablkcipher_ivsize(ablkcipher);
 775	skcipher->reqsize = crypto_ablkcipher_reqsize(ablkcipher) +
 776			    sizeof(struct ablkcipher_request);
 777	skcipher->keysize = calg->cra_ablkcipher.max_keysize;
 778
 779	if (skcipher->keysize)
 780		crypto_skcipher_set_flags(skcipher, CRYPTO_TFM_NEED_KEY);
 781
 782	return 0;
 783}
 784
 785static int skcipher_setkey_unaligned(struct crypto_skcipher *tfm,
 786				     const u8 *key, unsigned int keylen)
 787{
 788	unsigned long alignmask = crypto_skcipher_alignmask(tfm);
 789	struct skcipher_alg *cipher = crypto_skcipher_alg(tfm);
 790	u8 *buffer, *alignbuffer;
 791	unsigned long absize;
 792	int ret;
 793
 794	absize = keylen + alignmask;
 795	buffer = kmalloc(absize, GFP_ATOMIC);
 796	if (!buffer)
 797		return -ENOMEM;
 798
 799	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
 800	memcpy(alignbuffer, key, keylen);
 801	ret = cipher->setkey(tfm, alignbuffer, keylen);
 802	kzfree(buffer);
 803	return ret;
 804}
 805
 806static int skcipher_setkey(struct crypto_skcipher *tfm, const u8 *key,
 807			   unsigned int keylen)
 808{
 809	struct skcipher_alg *cipher = crypto_skcipher_alg(tfm);
 810	unsigned long alignmask = crypto_skcipher_alignmask(tfm);
 811	int err;
 812
 813	if (keylen < cipher->min_keysize || keylen > cipher->max_keysize) {
 814		crypto_skcipher_set_flags(tfm, CRYPTO_TFM_RES_BAD_KEY_LEN);
 815		return -EINVAL;
 816	}
 817
 818	if ((unsigned long)key & alignmask)
 819		err = skcipher_setkey_unaligned(tfm, key, keylen);
 820	else
 821		err = cipher->setkey(tfm, key, keylen);
 822
 823	if (err)
 
 824		return err;
 
 825
 826	crypto_skcipher_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
 827	return 0;
 828}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 829
 830static void crypto_skcipher_exit_tfm(struct crypto_tfm *tfm)
 831{
 832	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
 833	struct skcipher_alg *alg = crypto_skcipher_alg(skcipher);
 834
 835	alg->exit(skcipher);
 836}
 837
 838static int crypto_skcipher_init_tfm(struct crypto_tfm *tfm)
 839{
 840	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
 841	struct skcipher_alg *alg = crypto_skcipher_alg(skcipher);
 842
 843	if (tfm->__crt_alg->cra_type == &crypto_blkcipher_type)
 844		return crypto_init_skcipher_ops_blkcipher(tfm);
 845
 846	if (tfm->__crt_alg->cra_type == &crypto_ablkcipher_type ||
 847	    tfm->__crt_alg->cra_type == &crypto_givcipher_type)
 848		return crypto_init_skcipher_ops_ablkcipher(tfm);
 849
 850	skcipher->setkey = skcipher_setkey;
 851	skcipher->encrypt = alg->encrypt;
 852	skcipher->decrypt = alg->decrypt;
 853	skcipher->ivsize = alg->ivsize;
 854	skcipher->keysize = alg->max_keysize;
 855
 856	if (skcipher->keysize)
 857		crypto_skcipher_set_flags(skcipher, CRYPTO_TFM_NEED_KEY);
 858
 859	if (alg->exit)
 860		skcipher->base.exit = crypto_skcipher_exit_tfm;
 861
 862	if (alg->init)
 863		return alg->init(skcipher);
 864
 865	return 0;
 866}
 867
 868static void crypto_skcipher_free_instance(struct crypto_instance *inst)
 869{
 870	struct skcipher_instance *skcipher =
 871		container_of(inst, struct skcipher_instance, s.base);
 872
 873	skcipher->free(skcipher);
 874}
 875
 876static void crypto_skcipher_show(struct seq_file *m, struct crypto_alg *alg)
 877	__maybe_unused;
 878static void crypto_skcipher_show(struct seq_file *m, struct crypto_alg *alg)
 879{
 880	struct skcipher_alg *skcipher = container_of(alg, struct skcipher_alg,
 881						     base);
 882
 883	seq_printf(m, "type         : skcipher\n");
 884	seq_printf(m, "async        : %s\n",
 885		   alg->cra_flags & CRYPTO_ALG_ASYNC ?  "yes" : "no");
 886	seq_printf(m, "blocksize    : %u\n", alg->cra_blocksize);
 887	seq_printf(m, "min keysize  : %u\n", skcipher->min_keysize);
 888	seq_printf(m, "max keysize  : %u\n", skcipher->max_keysize);
 889	seq_printf(m, "ivsize       : %u\n", skcipher->ivsize);
 890	seq_printf(m, "chunksize    : %u\n", skcipher->chunksize);
 891	seq_printf(m, "walksize     : %u\n", skcipher->walksize);
 892}
 893
 894#ifdef CONFIG_NET
 895static int crypto_skcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
 896{
 897	struct crypto_report_blkcipher rblkcipher;
 898	struct skcipher_alg *skcipher = container_of(alg, struct skcipher_alg,
 899						     base);
 900
 901	strncpy(rblkcipher.type, "skcipher", sizeof(rblkcipher.type));
 902	strncpy(rblkcipher.geniv, "<none>", sizeof(rblkcipher.geniv));
 
 
 903
 904	rblkcipher.blocksize = alg->cra_blocksize;
 905	rblkcipher.min_keysize = skcipher->min_keysize;
 906	rblkcipher.max_keysize = skcipher->max_keysize;
 907	rblkcipher.ivsize = skcipher->ivsize;
 908
 909	if (nla_put(skb, CRYPTOCFGA_REPORT_BLKCIPHER,
 910		    sizeof(struct crypto_report_blkcipher), &rblkcipher))
 911		goto nla_put_failure;
 912	return 0;
 913
 914nla_put_failure:
 915	return -EMSGSIZE;
 916}
 917#else
 918static int crypto_skcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
 919{
 920	return -ENOSYS;
 921}
 922#endif
 923
 924static const struct crypto_type crypto_skcipher_type2 = {
 925	.extsize = crypto_skcipher_extsize,
 926	.init_tfm = crypto_skcipher_init_tfm,
 927	.free = crypto_skcipher_free_instance,
 928#ifdef CONFIG_PROC_FS
 929	.show = crypto_skcipher_show,
 930#endif
 931	.report = crypto_skcipher_report,
 932	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
 933	.maskset = CRYPTO_ALG_TYPE_BLKCIPHER_MASK,
 934	.type = CRYPTO_ALG_TYPE_SKCIPHER,
 935	.tfmsize = offsetof(struct crypto_skcipher, base),
 936};
 937
 938int crypto_grab_skcipher(struct crypto_skcipher_spawn *spawn,
 939			  const char *name, u32 type, u32 mask)
 
 940{
 941	spawn->base.frontend = &crypto_skcipher_type2;
 942	return crypto_grab_spawn(&spawn->base, name, type, mask);
 943}
 944EXPORT_SYMBOL_GPL(crypto_grab_skcipher);
 945
 946struct crypto_skcipher *crypto_alloc_skcipher(const char *alg_name,
 947					      u32 type, u32 mask)
 948{
 949	return crypto_alloc_tfm(alg_name, &crypto_skcipher_type2, type, mask);
 950}
 951EXPORT_SYMBOL_GPL(crypto_alloc_skcipher);
 952
 953int crypto_has_skcipher2(const char *alg_name, u32 type, u32 mask)
 
 954{
 955	return crypto_type_has_alg(alg_name, &crypto_skcipher_type2,
 956				   type, mask);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 957}
 958EXPORT_SYMBOL_GPL(crypto_has_skcipher2);
 
 
 
 
 
 
 959
 960static int skcipher_prepare_alg(struct skcipher_alg *alg)
 961{
 962	struct crypto_alg *base = &alg->base;
 963
 964	if (alg->ivsize > PAGE_SIZE / 8 || alg->chunksize > PAGE_SIZE / 8 ||
 965	    alg->walksize > PAGE_SIZE / 8)
 966		return -EINVAL;
 967
 968	if (!alg->chunksize)
 969		alg->chunksize = base->cra_blocksize;
 970	if (!alg->walksize)
 971		alg->walksize = alg->chunksize;
 972
 973	base->cra_type = &crypto_skcipher_type2;
 974	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
 975	base->cra_flags |= CRYPTO_ALG_TYPE_SKCIPHER;
 976
 977	return 0;
 978}
 979
 980int crypto_register_skcipher(struct skcipher_alg *alg)
 981{
 982	struct crypto_alg *base = &alg->base;
 983	int err;
 984
 985	err = skcipher_prepare_alg(alg);
 986	if (err)
 987		return err;
 988
 989	return crypto_register_alg(base);
 990}
 991EXPORT_SYMBOL_GPL(crypto_register_skcipher);
 992
 993void crypto_unregister_skcipher(struct skcipher_alg *alg)
 994{
 995	crypto_unregister_alg(&alg->base);
 996}
 997EXPORT_SYMBOL_GPL(crypto_unregister_skcipher);
 998
 999int crypto_register_skciphers(struct skcipher_alg *algs, int count)
1000{
1001	int i, ret;
1002
1003	for (i = 0; i < count; i++) {
1004		ret = crypto_register_skcipher(&algs[i]);
1005		if (ret)
1006			goto err;
1007	}
1008
1009	return 0;
1010
1011err:
1012	for (--i; i >= 0; --i)
1013		crypto_unregister_skcipher(&algs[i]);
1014
1015	return ret;
1016}
1017EXPORT_SYMBOL_GPL(crypto_register_skciphers);
1018
1019void crypto_unregister_skciphers(struct skcipher_alg *algs, int count)
1020{
1021	int i;
1022
1023	for (i = count - 1; i >= 0; --i)
1024		crypto_unregister_skcipher(&algs[i]);
1025}
1026EXPORT_SYMBOL_GPL(crypto_unregister_skciphers);
1027
1028int skcipher_register_instance(struct crypto_template *tmpl,
1029			   struct skcipher_instance *inst)
1030{
1031	int err;
1032
 
 
 
1033	err = skcipher_prepare_alg(&inst->alg);
1034	if (err)
1035		return err;
1036
1037	return crypto_register_instance(tmpl, skcipher_crypto_instance(inst));
1038}
1039EXPORT_SYMBOL_GPL(skcipher_register_instance);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1040
1041MODULE_LICENSE("GPL");
1042MODULE_DESCRIPTION("Symmetric key cipher type");