crypto.h 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424
  1. /*
  2. * Scatterlist Cryptographic API.
  3. *
  4. * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
  5. * Copyright (c) 2002 David S. Miller (davem@redhat.com)
  6. *
  7. * Portions derived from Cryptoapi, by Alexander Kjeldaas <astor@fast.no>
  8. * and Nettle, by Niels Möller.
  9. *
  10. * This program is free software; you can redistribute it and/or modify it
  11. * under the terms of the GNU General Public License as published by the Free
  12. * Software Foundation; either version 2 of the License, or (at your option)
  13. * any later version.
  14. *
  15. */
  16. #ifndef _LINUX_CRYPTO_H
  17. #define _LINUX_CRYPTO_H
  18. #include <linux/config.h>
  19. #include <linux/module.h>
  20. #include <linux/kernel.h>
  21. #include <linux/types.h>
  22. #include <linux/list.h>
  23. #include <linux/string.h>
  24. #include <asm/page.h>
  25. /*
  26. * Algorithm masks and types.
  27. */
  28. #define CRYPTO_ALG_TYPE_MASK 0x000000ff
  29. #define CRYPTO_ALG_TYPE_CIPHER 0x00000001
  30. #define CRYPTO_ALG_TYPE_DIGEST 0x00000002
  31. #define CRYPTO_ALG_TYPE_COMPRESS 0x00000004
  32. /*
  33. * Transform masks and values (for crt_flags).
  34. */
  35. #define CRYPTO_TFM_MODE_MASK 0x000000ff
  36. #define CRYPTO_TFM_REQ_MASK 0x000fff00
  37. #define CRYPTO_TFM_RES_MASK 0xfff00000
  38. #define CRYPTO_TFM_MODE_ECB 0x00000001
  39. #define CRYPTO_TFM_MODE_CBC 0x00000002
  40. #define CRYPTO_TFM_MODE_CFB 0x00000004
  41. #define CRYPTO_TFM_MODE_CTR 0x00000008
  42. #define CRYPTO_TFM_REQ_WEAK_KEY 0x00000100
  43. #define CRYPTO_TFM_RES_WEAK_KEY 0x00100000
  44. #define CRYPTO_TFM_RES_BAD_KEY_LEN 0x00200000
  45. #define CRYPTO_TFM_RES_BAD_KEY_SCHED 0x00400000
  46. #define CRYPTO_TFM_RES_BAD_BLOCK_LEN 0x00800000
  47. #define CRYPTO_TFM_RES_BAD_FLAGS 0x01000000
  48. /*
  49. * Miscellaneous stuff.
  50. */
  51. #define CRYPTO_UNSPEC 0
  52. #define CRYPTO_MAX_ALG_NAME 64
  53. #define CRYPTO_DIR_ENCRYPT 1
  54. #define CRYPTO_DIR_DECRYPT 0
  55. struct scatterlist;
  56. struct crypto_tfm;
  57. struct cipher_desc {
  58. struct crypto_tfm *tfm;
  59. void (*crfn)(void *ctx, u8 *dst, const u8 *src);
  60. unsigned int (*prfn)(const struct cipher_desc *desc, u8 *dst,
  61. const u8 *src, unsigned int nbytes);
  62. void *info;
  63. };
  64. /*
  65. * Algorithms: modular crypto algorithm implementations, managed
  66. * via crypto_register_alg() and crypto_unregister_alg().
  67. */
  68. struct cipher_alg {
  69. unsigned int cia_min_keysize;
  70. unsigned int cia_max_keysize;
  71. int (*cia_setkey)(void *ctx, const u8 *key,
  72. unsigned int keylen, u32 *flags);
  73. void (*cia_encrypt)(void *ctx, u8 *dst, const u8 *src);
  74. void (*cia_decrypt)(void *ctx, u8 *dst, const u8 *src);
  75. unsigned int (*cia_encrypt_ecb)(const struct cipher_desc *desc,
  76. u8 *dst, const u8 *src,
  77. unsigned int nbytes);
  78. unsigned int (*cia_decrypt_ecb)(const struct cipher_desc *desc,
  79. u8 *dst, const u8 *src,
  80. unsigned int nbytes);
  81. unsigned int (*cia_encrypt_cbc)(const struct cipher_desc *desc,
  82. u8 *dst, const u8 *src,
  83. unsigned int nbytes);
  84. unsigned int (*cia_decrypt_cbc)(const struct cipher_desc *desc,
  85. u8 *dst, const u8 *src,
  86. unsigned int nbytes);
  87. };
  88. struct digest_alg {
  89. unsigned int dia_digestsize;
  90. void (*dia_init)(void *ctx);
  91. void (*dia_update)(void *ctx, const u8 *data, unsigned int len);
  92. void (*dia_final)(void *ctx, u8 *out);
  93. int (*dia_setkey)(void *ctx, const u8 *key,
  94. unsigned int keylen, u32 *flags);
  95. };
  96. struct compress_alg {
  97. int (*coa_init)(void *ctx);
  98. void (*coa_exit)(void *ctx);
  99. int (*coa_compress)(void *ctx, const u8 *src, unsigned int slen,
  100. u8 *dst, unsigned int *dlen);
  101. int (*coa_decompress)(void *ctx, const u8 *src, unsigned int slen,
  102. u8 *dst, unsigned int *dlen);
  103. };
  104. #define cra_cipher cra_u.cipher
  105. #define cra_digest cra_u.digest
  106. #define cra_compress cra_u.compress
  107. struct crypto_alg {
  108. struct list_head cra_list;
  109. u32 cra_flags;
  110. unsigned int cra_blocksize;
  111. unsigned int cra_ctxsize;
  112. const char cra_name[CRYPTO_MAX_ALG_NAME];
  113. union {
  114. struct cipher_alg cipher;
  115. struct digest_alg digest;
  116. struct compress_alg compress;
  117. } cra_u;
  118. struct module *cra_module;
  119. };
  120. /*
  121. * Algorithm registration interface.
  122. */
  123. int crypto_register_alg(struct crypto_alg *alg);
  124. int crypto_unregister_alg(struct crypto_alg *alg);
  125. /*
  126. * Algorithm query interface.
  127. */
  128. #ifdef CONFIG_CRYPTO
  129. int crypto_alg_available(const char *name, u32 flags);
  130. #else
  131. static inline int crypto_alg_available(const char *name, u32 flags)
  132. {
  133. return 0;
  134. }
  135. #endif
  136. /*
  137. * Transforms: user-instantiated objects which encapsulate algorithms
  138. * and core processing logic. Managed via crypto_alloc_tfm() and
  139. * crypto_free_tfm(), as well as the various helpers below.
  140. */
  141. struct cipher_tfm {
  142. void *cit_iv;
  143. unsigned int cit_ivsize;
  144. u32 cit_mode;
  145. int (*cit_setkey)(struct crypto_tfm *tfm,
  146. const u8 *key, unsigned int keylen);
  147. int (*cit_encrypt)(struct crypto_tfm *tfm,
  148. struct scatterlist *dst,
  149. struct scatterlist *src,
  150. unsigned int nbytes);
  151. int (*cit_encrypt_iv)(struct crypto_tfm *tfm,
  152. struct scatterlist *dst,
  153. struct scatterlist *src,
  154. unsigned int nbytes, u8 *iv);
  155. int (*cit_decrypt)(struct crypto_tfm *tfm,
  156. struct scatterlist *dst,
  157. struct scatterlist *src,
  158. unsigned int nbytes);
  159. int (*cit_decrypt_iv)(struct crypto_tfm *tfm,
  160. struct scatterlist *dst,
  161. struct scatterlist *src,
  162. unsigned int nbytes, u8 *iv);
  163. void (*cit_xor_block)(u8 *dst, const u8 *src);
  164. };
  165. struct digest_tfm {
  166. void (*dit_init)(struct crypto_tfm *tfm);
  167. void (*dit_update)(struct crypto_tfm *tfm,
  168. struct scatterlist *sg, unsigned int nsg);
  169. void (*dit_final)(struct crypto_tfm *tfm, u8 *out);
  170. void (*dit_digest)(struct crypto_tfm *tfm, struct scatterlist *sg,
  171. unsigned int nsg, u8 *out);
  172. int (*dit_setkey)(struct crypto_tfm *tfm,
  173. const u8 *key, unsigned int keylen);
  174. #ifdef CONFIG_CRYPTO_HMAC
  175. void *dit_hmac_block;
  176. #endif
  177. };
  178. struct compress_tfm {
  179. int (*cot_compress)(struct crypto_tfm *tfm,
  180. const u8 *src, unsigned int slen,
  181. u8 *dst, unsigned int *dlen);
  182. int (*cot_decompress)(struct crypto_tfm *tfm,
  183. const u8 *src, unsigned int slen,
  184. u8 *dst, unsigned int *dlen);
  185. };
  186. #define crt_cipher crt_u.cipher
  187. #define crt_digest crt_u.digest
  188. #define crt_compress crt_u.compress
  189. struct crypto_tfm {
  190. u32 crt_flags;
  191. union {
  192. struct cipher_tfm cipher;
  193. struct digest_tfm digest;
  194. struct compress_tfm compress;
  195. } crt_u;
  196. struct crypto_alg *__crt_alg;
  197. };
  198. /*
  199. * Transform user interface.
  200. */
  201. /*
  202. * crypto_alloc_tfm() will first attempt to locate an already loaded algorithm.
  203. * If that fails and the kernel supports dynamically loadable modules, it
  204. * will then attempt to load a module of the same name or alias. A refcount
  205. * is grabbed on the algorithm which is then associated with the new transform.
  206. *
  207. * crypto_free_tfm() frees up the transform and any associated resources,
  208. * then drops the refcount on the associated algorithm.
  209. */
  210. struct crypto_tfm *crypto_alloc_tfm(const char *alg_name, u32 tfm_flags);
  211. void crypto_free_tfm(struct crypto_tfm *tfm);
  212. /*
  213. * Transform helpers which query the underlying algorithm.
  214. */
  215. static inline const char *crypto_tfm_alg_name(struct crypto_tfm *tfm)
  216. {
  217. return tfm->__crt_alg->cra_name;
  218. }
  219. static inline const char *crypto_tfm_alg_modname(struct crypto_tfm *tfm)
  220. {
  221. return module_name(tfm->__crt_alg->cra_module);
  222. }
  223. static inline u32 crypto_tfm_alg_type(struct crypto_tfm *tfm)
  224. {
  225. return tfm->__crt_alg->cra_flags & CRYPTO_ALG_TYPE_MASK;
  226. }
  227. static inline unsigned int crypto_tfm_alg_min_keysize(struct crypto_tfm *tfm)
  228. {
  229. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  230. return tfm->__crt_alg->cra_cipher.cia_min_keysize;
  231. }
  232. static inline unsigned int crypto_tfm_alg_max_keysize(struct crypto_tfm *tfm)
  233. {
  234. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  235. return tfm->__crt_alg->cra_cipher.cia_max_keysize;
  236. }
  237. static inline unsigned int crypto_tfm_alg_ivsize(struct crypto_tfm *tfm)
  238. {
  239. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  240. return tfm->crt_cipher.cit_ivsize;
  241. }
  242. static inline unsigned int crypto_tfm_alg_blocksize(struct crypto_tfm *tfm)
  243. {
  244. return tfm->__crt_alg->cra_blocksize;
  245. }
  246. static inline unsigned int crypto_tfm_alg_digestsize(struct crypto_tfm *tfm)
  247. {
  248. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  249. return tfm->__crt_alg->cra_digest.dia_digestsize;
  250. }
  251. static inline void *crypto_tfm_ctx(struct crypto_tfm *tfm)
  252. {
  253. return (void *)&tfm[1];
  254. }
  255. /*
  256. * API wrappers.
  257. */
  258. static inline void crypto_digest_init(struct crypto_tfm *tfm)
  259. {
  260. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  261. tfm->crt_digest.dit_init(tfm);
  262. }
  263. static inline void crypto_digest_update(struct crypto_tfm *tfm,
  264. struct scatterlist *sg,
  265. unsigned int nsg)
  266. {
  267. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  268. tfm->crt_digest.dit_update(tfm, sg, nsg);
  269. }
  270. static inline void crypto_digest_final(struct crypto_tfm *tfm, u8 *out)
  271. {
  272. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  273. tfm->crt_digest.dit_final(tfm, out);
  274. }
  275. static inline void crypto_digest_digest(struct crypto_tfm *tfm,
  276. struct scatterlist *sg,
  277. unsigned int nsg, u8 *out)
  278. {
  279. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  280. tfm->crt_digest.dit_digest(tfm, sg, nsg, out);
  281. }
  282. static inline int crypto_digest_setkey(struct crypto_tfm *tfm,
  283. const u8 *key, unsigned int keylen)
  284. {
  285. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
  286. if (tfm->crt_digest.dit_setkey == NULL)
  287. return -ENOSYS;
  288. return tfm->crt_digest.dit_setkey(tfm, key, keylen);
  289. }
  290. static inline int crypto_cipher_setkey(struct crypto_tfm *tfm,
  291. const u8 *key, unsigned int keylen)
  292. {
  293. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  294. return tfm->crt_cipher.cit_setkey(tfm, key, keylen);
  295. }
  296. static inline int crypto_cipher_encrypt(struct crypto_tfm *tfm,
  297. struct scatterlist *dst,
  298. struct scatterlist *src,
  299. unsigned int nbytes)
  300. {
  301. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  302. return tfm->crt_cipher.cit_encrypt(tfm, dst, src, nbytes);
  303. }
  304. static inline int crypto_cipher_encrypt_iv(struct crypto_tfm *tfm,
  305. struct scatterlist *dst,
  306. struct scatterlist *src,
  307. unsigned int nbytes, u8 *iv)
  308. {
  309. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  310. BUG_ON(tfm->crt_cipher.cit_mode == CRYPTO_TFM_MODE_ECB);
  311. return tfm->crt_cipher.cit_encrypt_iv(tfm, dst, src, nbytes, iv);
  312. }
  313. static inline int crypto_cipher_decrypt(struct crypto_tfm *tfm,
  314. struct scatterlist *dst,
  315. struct scatterlist *src,
  316. unsigned int nbytes)
  317. {
  318. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  319. return tfm->crt_cipher.cit_decrypt(tfm, dst, src, nbytes);
  320. }
  321. static inline int crypto_cipher_decrypt_iv(struct crypto_tfm *tfm,
  322. struct scatterlist *dst,
  323. struct scatterlist *src,
  324. unsigned int nbytes, u8 *iv)
  325. {
  326. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  327. BUG_ON(tfm->crt_cipher.cit_mode == CRYPTO_TFM_MODE_ECB);
  328. return tfm->crt_cipher.cit_decrypt_iv(tfm, dst, src, nbytes, iv);
  329. }
  330. static inline void crypto_cipher_set_iv(struct crypto_tfm *tfm,
  331. const u8 *src, unsigned int len)
  332. {
  333. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  334. memcpy(tfm->crt_cipher.cit_iv, src, len);
  335. }
  336. static inline void crypto_cipher_get_iv(struct crypto_tfm *tfm,
  337. u8 *dst, unsigned int len)
  338. {
  339. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
  340. memcpy(dst, tfm->crt_cipher.cit_iv, len);
  341. }
  342. static inline int crypto_comp_compress(struct crypto_tfm *tfm,
  343. const u8 *src, unsigned int slen,
  344. u8 *dst, unsigned int *dlen)
  345. {
  346. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_COMPRESS);
  347. return tfm->crt_compress.cot_compress(tfm, src, slen, dst, dlen);
  348. }
  349. static inline int crypto_comp_decompress(struct crypto_tfm *tfm,
  350. const u8 *src, unsigned int slen,
  351. u8 *dst, unsigned int *dlen)
  352. {
  353. BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_COMPRESS);
  354. return tfm->crt_compress.cot_decompress(tfm, src, slen, dst, dlen);
  355. }
  356. /*
  357. * HMAC support.
  358. */
  359. #ifdef CONFIG_CRYPTO_HMAC
  360. void crypto_hmac_init(struct crypto_tfm *tfm, u8 *key, unsigned int *keylen);
  361. void crypto_hmac_update(struct crypto_tfm *tfm,
  362. struct scatterlist *sg, unsigned int nsg);
  363. void crypto_hmac_final(struct crypto_tfm *tfm, u8 *key,
  364. unsigned int *keylen, u8 *out);
  365. void crypto_hmac(struct crypto_tfm *tfm, u8 *key, unsigned int *keylen,
  366. struct scatterlist *sg, unsigned int nsg, u8 *out);
  367. #endif /* CONFIG_CRYPTO_HMAC */
  368. #endif /* _LINUX_CRYPTO_H */