[linux.git] / crypto / pcrypt.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 * pcrypt - Parallel crypto wrapper.
 *
 * Copyright (C) 2009 secunet Security Networks AG
 * Copyright (C) 2009 Steffen Klassert <[email protected]>
 */

#include <crypto/algapi.h>
#include <crypto/internal/aead.h>
#include <linux/atomic.h>
#include <linux/err.h>
#include <linux/init.h>
#include <linux/module.h>
#include <linux/slab.h>
#include <linux/notifier.h>
#include <linux/kobject.h>
#include <linux/cpu.h>
#include <crypto/pcrypt.h>

struct padata_pcrypt {
	struct padata_instance *pinst;
	struct workqueue_struct *wq;

	/*
	 * Cpumask for callback CPUs. It should be
	 * equal to serial cpumask of corresponding padata instance,
	 * so it is updated when padata notifies us about serial
	 * cpumask change.
	 *
	 * cb_cpumask is protected by RCU. This fact prevents us from
	 * using cpumask_var_t directly because the actual type of
	 * cpumsak_var_t depends on kernel configuration(particularly on
	 * CONFIG_CPUMASK_OFFSTACK macro). Depending on the configuration
	 * cpumask_var_t may be either a pointer to the struct cpumask
	 * or a variable allocated on the stack. Thus we can not safely use
	 * cpumask_var_t with RCU operations such as rcu_assign_pointer or
	 * rcu_dereference. So cpumask_var_t is wrapped with struct
	 * pcrypt_cpumask which makes possible to use it with RCU.
	 */
	struct pcrypt_cpumask {
		cpumask_var_t mask;
	} *cb_cpumask;
	struct notifier_block nblock;
};

static struct padata_pcrypt pencrypt;
static struct padata_pcrypt pdecrypt;
static struct kset           *pcrypt_kset;

struct pcrypt_instance_ctx {
	struct crypto_aead_spawn spawn;
	atomic_t tfm_count;
};

struct pcrypt_aead_ctx {
	struct crypto_aead *child;
	unsigned int cb_cpu;
};

static int pcrypt_do_parallel(struct padata_priv *padata, unsigned int *cb_cpu,
			      struct padata_pcrypt *pcrypt)
{
	unsigned int cpu_index, cpu, i;
	struct pcrypt_cpumask *cpumask;

	cpu = *cb_cpu;

	rcu_read_lock_bh();
	cpumask = rcu_dereference_bh(pcrypt->cb_cpumask);
	if (cpumask_test_cpu(cpu, cpumask->mask))
			goto out;

	if (!cpumask_weight(cpumask->mask))
			goto out;

	cpu_index = cpu % cpumask_weight(cpumask->mask);

	cpu = cpumask_first(cpumask->mask);
	for (i = 0; i < cpu_index; i++)
		cpu = cpumask_next(cpu, cpumask->mask);

	*cb_cpu = cpu;

out:
	rcu_read_unlock_bh();
	return padata_do_parallel(pcrypt->pinst, padata, cpu);
}

static int pcrypt_aead_setkey(struct crypto_aead *parent,
			      const u8 *key, unsigned int keylen)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
				   unsigned int authsize)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

static void pcrypt_aead_serial(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	aead_request_complete(req->base.data, padata->info);
}

static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
{
	struct aead_request *req = areq->data;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct padata_priv *padata = pcrypt_request_padata(preq);

	padata->info = err;
	req->base.flags &= ~CRYPTO_TFM_REQ_MAY_SLEEP;

	padata_do_serial(padata);
}

static void pcrypt_aead_enc(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_encrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_encrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_enc;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
	aead_request_set_ad(creq, req->assoclen);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static void pcrypt_aead_dec(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_decrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_decrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_dec;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
	aead_request_set_ad(creq, req->assoclen);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pdecrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static int pcrypt_aead_init_tfm(struct crypto_aead *tfm)
{
	int cpu, cpu_index;
	struct aead_instance *inst = aead_alg_instance(tfm);
	struct pcrypt_instance_ctx *ictx = aead_instance_ctx(inst);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);
	struct crypto_aead *cipher;

	cpu_index = (unsigned int)atomic_inc_return(&ictx->tfm_count) %
		    cpumask_weight(cpu_online_mask);

	ctx->cb_cpu = cpumask_first(cpu_online_mask);
	for (cpu = 0; cpu < cpu_index; cpu++)
		ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);

	cipher = crypto_spawn_aead(&ictx->spawn);

	if (IS_ERR(cipher))
		return PTR_ERR(cipher);

	ctx->child = cipher;
	crypto_aead_set_reqsize(tfm, sizeof(struct pcrypt_request) +
				     sizeof(struct aead_request) +
				     crypto_aead_reqsize(cipher));

	return 0;
}

static void pcrypt_aead_exit_tfm(struct crypto_aead *tfm)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);

	crypto_free_aead(ctx->child);
}

static void pcrypt_free(struct aead_instance *inst)
{
	struct pcrypt_instance_ctx *ctx = aead_instance_ctx(inst);

	crypto_drop_aead(&ctx->spawn);
	kfree(inst);
}

static int pcrypt_init_instance(struct crypto_instance *inst,
				struct crypto_alg *alg)
{
	if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
		return -ENAMETOOLONG;

	memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);

	inst->alg.cra_priority = alg->cra_priority + 100;
	inst->alg.cra_blocksize = alg->cra_blocksize;
	inst->alg.cra_alignmask = alg->cra_alignmask;

	return 0;
}

static int pcrypt_create_aead(struct crypto_template *tmpl, struct rtattr **tb,
			      u32 type, u32 mask)
{
	struct pcrypt_instance_ctx *ctx;
	struct crypto_attr_type *algt;
	struct aead_instance *inst;
	struct aead_alg *alg;
	const char *name;
	int err;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return PTR_ERR(algt);

	name = crypto_attr_alg_name(tb[1]);
	if (IS_ERR(name))
		return PTR_ERR(name);

	inst = kzalloc(sizeof(*inst) + sizeof(*ctx), GFP_KERNEL);
	if (!inst)
		return -ENOMEM;

	ctx = aead_instance_ctx(inst);
	crypto_set_aead_spawn(&ctx->spawn, aead_crypto_instance(inst));

	err = crypto_grab_aead(&ctx->spawn, name, 0, 0);
	if (err)
		goto out_free_inst;

	alg = crypto_spawn_aead_alg(&ctx->spawn);
	err = pcrypt_init_instance(aead_crypto_instance(inst), &alg->base);
	if (err)
		goto out_drop_aead;

	inst->alg.base.cra_flags = CRYPTO_ALG_ASYNC;

	inst->alg.ivsize = crypto_aead_alg_ivsize(alg);
	inst->alg.maxauthsize = crypto_aead_alg_maxauthsize(alg);

	inst->alg.base.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);

	inst->alg.init = pcrypt_aead_init_tfm;
	inst->alg.exit = pcrypt_aead_exit_tfm;

	inst->alg.setkey = pcrypt_aead_setkey;
	inst->alg.setauthsize = pcrypt_aead_setauthsize;
	inst->alg.encrypt = pcrypt_aead_encrypt;
	inst->alg.decrypt = pcrypt_aead_decrypt;

	inst->free = pcrypt_free;

	err = aead_register_instance(tmpl, inst);
	if (err)
		goto out_drop_aead;

out:
	return err;

out_drop_aead:
	crypto_drop_aead(&ctx->spawn);
out_free_inst:
	kfree(inst);
	goto out;
}

static int pcrypt_create(struct crypto_template *tmpl, struct rtattr **tb)
{
	struct crypto_attr_type *algt;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return PTR_ERR(algt);

	switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
	case CRYPTO_ALG_TYPE_AEAD:
		return pcrypt_create_aead(tmpl, tb, algt->type, algt->mask);
	}

	return -EINVAL;
}

static int pcrypt_cpumask_change_notify(struct notifier_block *self,
					unsigned long val, void *data)
{
	struct padata_pcrypt *pcrypt;
	struct pcrypt_cpumask *new_mask, *old_mask;
	struct padata_cpumask *cpumask = (struct padata_cpumask *)data;

	if (!(val & PADATA_CPU_SERIAL))
		return 0;

	pcrypt = container_of(self, struct padata_pcrypt, nblock);
	new_mask = kmalloc(sizeof(*new_mask), GFP_KERNEL);
	if (!new_mask)
		return -ENOMEM;
	if (!alloc_cpumask_var(&new_mask->mask, GFP_KERNEL)) {
		kfree(new_mask);
		return -ENOMEM;
	}

	old_mask = pcrypt->cb_cpumask;

	cpumask_copy(new_mask->mask, cpumask->cbcpu);
	rcu_assign_pointer(pcrypt->cb_cpumask, new_mask);
	synchronize_rcu();

	free_cpumask_var(old_mask->mask);
	kfree(old_mask);
	return 0;
}

static int pcrypt_sysfs_add(struct padata_instance *pinst, const char *name)
{
	int ret;

	pinst->kobj.kset = pcrypt_kset;
	ret = kobject_add(&pinst->kobj, NULL, "%s", name);
	if (!ret)
		kobject_uevent(&pinst->kobj, KOBJ_ADD);

	return ret;
}

static int pcrypt_init_padata(struct padata_pcrypt *pcrypt,
			      const char *name)
{
	int ret = -ENOMEM;
	struct pcrypt_cpumask *mask;

	get_online_cpus();

	pcrypt->wq = alloc_workqueue("%s", WQ_MEM_RECLAIM | WQ_CPU_INTENSIVE,
				     1, name);
	if (!pcrypt->wq)
		goto err;

	pcrypt->pinst = padata_alloc_possible(pcrypt->wq);
	if (!pcrypt->pinst)
		goto err_destroy_workqueue;

	mask = kmalloc(sizeof(*mask), GFP_KERNEL);
	if (!mask)
		goto err_free_padata;
	if (!alloc_cpumask_var(&mask->mask, GFP_KERNEL)) {
		kfree(mask);
		goto err_free_padata;
	}

	cpumask_and(mask->mask, cpu_possible_mask, cpu_online_mask);
	rcu_assign_pointer(pcrypt->cb_cpumask, mask);

	pcrypt->nblock.notifier_call = pcrypt_cpumask_change_notify;
	ret = padata_register_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	if (ret)
		goto err_free_cpumask;

	ret = pcrypt_sysfs_add(pcrypt->pinst, name);
	if (ret)
		goto err_unregister_notifier;

	put_online_cpus();

	return ret;

err_unregister_notifier:
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
err_free_cpumask:
	free_cpumask_var(mask->mask);
	kfree(mask);
err_free_padata:
	padata_free(pcrypt->pinst);
err_destroy_workqueue:
	destroy_workqueue(pcrypt->wq);
err:
	put_online_cpus();

	return ret;
}

static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)
{
	free_cpumask_var(pcrypt->cb_cpumask->mask);
	kfree(pcrypt->cb_cpumask);

	padata_stop(pcrypt->pinst);
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	destroy_workqueue(pcrypt->wq);
	padata_free(pcrypt->pinst);
}

static struct crypto_template pcrypt_tmpl = {
	.name = "pcrypt",
	.create = pcrypt_create,
	.module = THIS_MODULE,
};

static int __init pcrypt_init(void)
{
	int err = -ENOMEM;

	pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
	if (!pcrypt_kset)
		goto err;

	err = pcrypt_init_padata(&pencrypt, "pencrypt");
	if (err)
		goto err_unreg_kset;

	err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
	if (err)
		goto err_deinit_pencrypt;

	padata_start(pencrypt.pinst);
	padata_start(pdecrypt.pinst);

	return crypto_register_template(&pcrypt_tmpl);

err_deinit_pencrypt:
	pcrypt_fini_padata(&pencrypt);
err_unreg_kset:
	kset_unregister(pcrypt_kset);
err:
	return err;
}

static void __exit pcrypt_exit(void)
{
	pcrypt_fini_padata(&pencrypt);
	pcrypt_fini_padata(&pdecrypt);

	kset_unregister(pcrypt_kset);
	crypto_unregister_template(&pcrypt_tmpl);
}

subsys_initcall(pcrypt_init);
module_exit(pcrypt_exit);

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Steffen Klassert <[email protected]>");
MODULE_DESCRIPTION("Parallel crypto wrapper");
MODULE_ALIAS_CRYPTO("pcrypt");
Commit	Line	Data
a61127c2	1	// SPDX-License-Identifier: GPL-2.0-only
5068c7a8 SK	2	/*
	3	* pcrypt - Parallel crypto wrapper.
	4	*
	5	* Copyright (C) 2009 secunet Security Networks AG
	6	* Copyright (C) 2009 Steffen Klassert <[email protected]>
5068c7a8 SK	7	*/
	8
	9	#include <crypto/algapi.h>
	10	#include <crypto/internal/aead.h>
a5a22e57	11	#include <linux/atomic.h>
5068c7a8 SK	12	#include <linux/err.h>
	13	#include <linux/init.h>
	14	#include <linux/module.h>
	15	#include <linux/slab.h>
e15bacbe	16	#include <linux/notifier.h>
a3fb1e33	17	#include <linux/kobject.h>
d3f64e46	18	#include <linux/cpu.h>
5068c7a8 SK	19	#include <crypto/pcrypt.h>
5068c7a8 SK	20
c57e842e	21	struct padata_pcrypt {
e15bacbe DK	22	struct padata_instance *pinst;
	23	struct workqueue_struct *wq;
	24
	25	/*
	26	* Cpumask for callback CPUs. It should be
	27	* equal to serial cpumask of corresponding padata instance,
	28	* so it is updated when padata notifies us about serial
	29	* cpumask change.
	30	*
	31	* cb_cpumask is protected by RCU. This fact prevents us from
	32	* using cpumask_var_t directly because the actual type of
	33	* cpumsak_var_t depends on kernel configuration(particularly on
	34	* CONFIG_CPUMASK_OFFSTACK macro). Depending on the configuration
	35	* cpumask_var_t may be either a pointer to the struct cpumask
	36	* or a variable allocated on the stack. Thus we can not safely use
	37	* cpumask_var_t with RCU operations such as rcu_assign_pointer or
	38	* rcu_dereference. So cpumask_var_t is wrapped with struct
	39	* pcrypt_cpumask which makes possible to use it with RCU.
	40	*/
	41	struct pcrypt_cpumask {
	42	cpumask_var_t mask;
	43	} *cb_cpumask;
	44	struct notifier_block nblock;
	45	};
	46
c57e842e SK	47	static struct padata_pcrypt pencrypt;
c57e842e SK	48	static struct padata_pcrypt pdecrypt;
a3fb1e33	49	static struct kset *pcrypt_kset;
5068c7a8 SK	50
5068c7a8 SK	51	struct pcrypt_instance_ctx {
66d948e7	52	struct crypto_aead_spawn spawn;
a5a22e57	53	atomic_t tfm_count;
5068c7a8 SK	54	};
	55
	56	struct pcrypt_aead_ctx {
	57	struct crypto_aead *child;
	58	unsigned int cb_cpu;
	59	};
	60
	61	static int pcrypt_do_parallel(struct padata_priv padata, unsigned int cb_cpu,
c57e842e	62	struct padata_pcrypt *pcrypt)
5068c7a8 SK	63	{
5068c7a8 SK	64	unsigned int cpu_index, cpu, i;
e15bacbe	65	struct pcrypt_cpumask *cpumask;
5068c7a8 SK	66
	67	cpu = *cb_cpu;
	68
e15bacbe	69	rcu_read_lock_bh();
3110e400	70	cpumask = rcu_dereference_bh(pcrypt->cb_cpumask);
e15bacbe	71	if (cpumask_test_cpu(cpu, cpumask->mask))
5068c7a8 SK	72	goto out;
5068c7a8 SK	73
cc74f4bc SK	74	if (!cpumask_weight(cpumask->mask))
	75	goto out;
	76
e15bacbe	77	cpu_index = cpu % cpumask_weight(cpumask->mask);
5068c7a8	78
e15bacbe	79	cpu = cpumask_first(cpumask->mask);
5068c7a8	80	for (i = 0; i < cpu_index; i++)
e15bacbe	81	cpu = cpumask_next(cpu, cpumask->mask);
5068c7a8 SK	82
	83	*cb_cpu = cpu;
	84
	85	out:
e15bacbe DK	86	rcu_read_unlock_bh();
e15bacbe DK	87	return padata_do_parallel(pcrypt->pinst, padata, cpu);
5068c7a8 SK	88	}
	89
	90	static int pcrypt_aead_setkey(struct crypto_aead *parent,
	91	const u8 *key, unsigned int keylen)
	92	{
	93	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
	94
	95	return crypto_aead_setkey(ctx->child, key, keylen);
	96	}
	97
	98	static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
	99	unsigned int authsize)
	100	{
	101	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
	102
	103	return crypto_aead_setauthsize(ctx->child, authsize);
	104	}
	105
	106	static void pcrypt_aead_serial(struct padata_priv *padata)
	107	{
	108	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	109	struct aead_request *req = pcrypt_request_ctx(preq);
	110
	111	aead_request_complete(req->base.data, padata->info);
	112	}
	113
5068c7a8 SK	114	static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
	115	{
	116	struct aead_request *req = areq->data;
	117	struct pcrypt_request *preq = aead_request_ctx(req);
	118	struct padata_priv *padata = pcrypt_request_padata(preq);
	119
	120	padata->info = err;
	121	req->base.flags &= ~CRYPTO_TFM_REQ_MAY_SLEEP;
	122
	123	padata_do_serial(padata);
	124	}
	125
	126	static void pcrypt_aead_enc(struct padata_priv *padata)
	127	{
	128	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	129	struct aead_request *req = pcrypt_request_ctx(preq);
	130
	131	padata->info = crypto_aead_encrypt(req);
	132
5a1436be	133	if (padata->info == -EINPROGRESS)
5068c7a8 SK	134	return;
	135
	136	padata_do_serial(padata);
	137	}
	138
	139	static int pcrypt_aead_encrypt(struct aead_request *req)
	140	{
	141	int err;
	142	struct pcrypt_request *preq = aead_request_ctx(req);
	143	struct aead_request *creq = pcrypt_request_ctx(preq);
	144	struct padata_priv *padata = pcrypt_request_padata(preq);
	145	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	146	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	147	u32 flags = aead_request_flags(req);
	148
	149	memset(padata, 0, sizeof(struct padata_priv));
	150
	151	padata->parallel = pcrypt_aead_enc;
	152	padata->serial = pcrypt_aead_serial;
	153
	154	aead_request_set_tfm(creq, ctx->child);
	155	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	156	pcrypt_aead_done, req);
	157	aead_request_set_crypt(creq, req->src, req->dst,
	158	req->cryptlen, req->iv);
0496f560	159	aead_request_set_ad(creq, req->assoclen);
5068c7a8	160
e15bacbe	161	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
83f619f3 SK	162	if (!err)
83f619f3 SK	163	return -EINPROGRESS;
5068c7a8 SK	164
	165	return err;
	166	}
	167
	168	static void pcrypt_aead_dec(struct padata_priv *padata)
	169	{
	170	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	171	struct aead_request *req = pcrypt_request_ctx(preq);
	172
	173	padata->info = crypto_aead_decrypt(req);
	174
5a1436be	175	if (padata->info == -EINPROGRESS)
5068c7a8 SK	176	return;
	177
	178	padata_do_serial(padata);
	179	}
	180
	181	static int pcrypt_aead_decrypt(struct aead_request *req)
	182	{
	183	int err;
	184	struct pcrypt_request *preq = aead_request_ctx(req);
	185	struct aead_request *creq = pcrypt_request_ctx(preq);
	186	struct padata_priv *padata = pcrypt_request_padata(preq);
	187	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	188	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	189	u32 flags = aead_request_flags(req);
	190
	191	memset(padata, 0, sizeof(struct padata_priv));
	192
	193	padata->parallel = pcrypt_aead_dec;
	194	padata->serial = pcrypt_aead_serial;
	195
	196	aead_request_set_tfm(creq, ctx->child);
	197	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	198	pcrypt_aead_done, req);
	199	aead_request_set_crypt(creq, req->src, req->dst,
	200	req->cryptlen, req->iv);
0496f560	201	aead_request_set_ad(creq, req->assoclen);
5068c7a8	202
e15bacbe	203	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pdecrypt);
83f619f3 SK	204	if (!err)
83f619f3 SK	205	return -EINPROGRESS;
5068c7a8 SK	206
	207	return err;
	208	}
	209
0496f560	210	static int pcrypt_aead_init_tfm(struct crypto_aead *tfm)
5068c7a8 SK	211	{
5068c7a8 SK	212	int cpu, cpu_index;
0496f560 HX	213	struct aead_instance *inst = aead_alg_instance(tfm);
	214	struct pcrypt_instance_ctx *ictx = aead_instance_ctx(inst);
	215	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);
5068c7a8 SK	216	struct crypto_aead *cipher;
5068c7a8 SK	217
a5a22e57 HX	218	cpu_index = (unsigned int)atomic_inc_return(&ictx->tfm_count) %
a5a22e57 HX	219	cpumask_weight(cpu_online_mask);
5068c7a8	220
fbf0ca1b	221	ctx->cb_cpu = cpumask_first(cpu_online_mask);
5068c7a8	222	for (cpu = 0; cpu < cpu_index; cpu++)
fbf0ca1b	223	ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);
5068c7a8	224
0496f560	225	cipher = crypto_spawn_aead(&ictx->spawn);
5068c7a8 SK	226
	227	if (IS_ERR(cipher))
	228	return PTR_ERR(cipher);
	229
	230	ctx->child = cipher;
0496f560 HX	231	crypto_aead_set_reqsize(tfm, sizeof(struct pcrypt_request) +
	232	sizeof(struct aead_request) +
	233	crypto_aead_reqsize(cipher));
5068c7a8 SK	234
	235	return 0;
	236	}
	237
0496f560	238	static void pcrypt_aead_exit_tfm(struct crypto_aead *tfm)
5068c7a8	239	{
0496f560	240	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);
5068c7a8 SK	241
	242	crypto_free_aead(ctx->child);
	243	}
	244
d76c6810 EB	245	static void pcrypt_free(struct aead_instance *inst)
	246	{
	247	struct pcrypt_instance_ctx *ctx = aead_instance_ctx(inst);
	248
	249	crypto_drop_aead(&ctx->spawn);
	250	kfree(inst);
	251	}
	252
66d948e7 HX	253	static int pcrypt_init_instance(struct crypto_instance *inst,
66d948e7 HX	254	struct crypto_alg *alg)
5068c7a8	255	{
5068c7a8 SK	256	if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
5068c7a8 SK	257	"pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
66d948e7	258	return -ENAMETOOLONG;
5068c7a8 SK	259
	260	memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);
	261
5068c7a8 SK	262	inst->alg.cra_priority = alg->cra_priority + 100;
	263	inst->alg.cra_blocksize = alg->cra_blocksize;
	264	inst->alg.cra_alignmask = alg->cra_alignmask;
	265
66d948e7	266	return 0;
5068c7a8 SK	267	}
5068c7a8 SK	268
0496f560 HX	269	static int pcrypt_create_aead(struct crypto_template tmpl, struct rtattr *tb,
0496f560 HX	270	u32 type, u32 mask)
5068c7a8	271	{
66d948e7	272	struct pcrypt_instance_ctx *ctx;
846f97df	273	struct crypto_attr_type *algt;
0496f560 HX	274	struct aead_instance *inst;
0496f560 HX	275	struct aead_alg *alg;
66d948e7 HX	276	const char *name;
	277	int err;
	278
846f97df HX	279	algt = crypto_get_attr_type(tb);
	280	if (IS_ERR(algt))
	281	return PTR_ERR(algt);
	282
66d948e7 HX	283	name = crypto_attr_alg_name(tb[1]);
66d948e7 HX	284	if (IS_ERR(name))
0496f560	285	return PTR_ERR(name);
66d948e7 HX	286
	287	inst = kzalloc(sizeof(inst) + sizeof(ctx), GFP_KERNEL);
	288	if (!inst)
0496f560	289	return -ENOMEM;
66d948e7	290
0496f560 HX	291	ctx = aead_instance_ctx(inst);
0496f560 HX	292	crypto_set_aead_spawn(&ctx->spawn, aead_crypto_instance(inst));
5068c7a8	293
5e4b8c1f	294	err = crypto_grab_aead(&ctx->spawn, name, 0, 0);
66d948e7 HX	295	if (err)
66d948e7 HX	296	goto out_free_inst;
5068c7a8	297
0496f560 HX	298	alg = crypto_spawn_aead_alg(&ctx->spawn);
0496f560 HX	299	err = pcrypt_init_instance(aead_crypto_instance(inst), &alg->base);
66d948e7 HX	300	if (err)
66d948e7 HX	301	goto out_drop_aead;
5068c7a8	302
846f97df	303	inst->alg.base.cra_flags = CRYPTO_ALG_ASYNC;
846f97df	304
0496f560 HX	305	inst->alg.ivsize = crypto_aead_alg_ivsize(alg);
0496f560 HX	306	inst->alg.maxauthsize = crypto_aead_alg_maxauthsize(alg);
5068c7a8	307
0496f560	308	inst->alg.base.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);
5068c7a8	309
0496f560 HX	310	inst->alg.init = pcrypt_aead_init_tfm;
0496f560 HX	311	inst->alg.exit = pcrypt_aead_exit_tfm;
5068c7a8	312
0496f560 HX	313	inst->alg.setkey = pcrypt_aead_setkey;
	314	inst->alg.setauthsize = pcrypt_aead_setauthsize;
	315	inst->alg.encrypt = pcrypt_aead_encrypt;
	316	inst->alg.decrypt = pcrypt_aead_decrypt;
5068c7a8	317
d76c6810 EB	318	inst->free = pcrypt_free;
d76c6810 EB	319
0496f560 HX	320	err = aead_register_instance(tmpl, inst);
	321	if (err)
	322	goto out_drop_aead;
5068c7a8	323
66d948e7	324	out:
0496f560	325	return err;
66d948e7 HX	326
	327	out_drop_aead:
	328	crypto_drop_aead(&ctx->spawn);
	329	out_free_inst:
	330	kfree(inst);
66d948e7	331	goto out;
5068c7a8 SK	332	}
5068c7a8 SK	333
0496f560	334	static int pcrypt_create(struct crypto_template tmpl, struct rtattr *tb)
5068c7a8 SK	335	{
	336	struct crypto_attr_type *algt;
	337
	338	algt = crypto_get_attr_type(tb);
	339	if (IS_ERR(algt))
0496f560	340	return PTR_ERR(algt);
5068c7a8 SK	341
	342	switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
	343	case CRYPTO_ALG_TYPE_AEAD:
0496f560	344	return pcrypt_create_aead(tmpl, tb, algt->type, algt->mask);
5068c7a8 SK	345	}
5068c7a8 SK	346
0496f560	347	return -EINVAL;
5068c7a8 SK	348	}
5068c7a8 SK	349
e15bacbe DK	350	static int pcrypt_cpumask_change_notify(struct notifier_block *self,
	351	unsigned long val, void *data)
	352	{
c57e842e	353	struct padata_pcrypt *pcrypt;
e15bacbe	354	struct pcrypt_cpumask new_mask, old_mask;
d3f64e46	355	struct padata_cpumask cpumask = (struct padata_cpumask )data;
e15bacbe DK	356
	357	if (!(val & PADATA_CPU_SERIAL))
	358	return 0;
	359
c57e842e	360	pcrypt = container_of(self, struct padata_pcrypt, nblock);
e15bacbe DK	361	new_mask = kmalloc(sizeof(*new_mask), GFP_KERNEL);
	362	if (!new_mask)
	363	return -ENOMEM;
	364	if (!alloc_cpumask_var(&new_mask->mask, GFP_KERNEL)) {
	365	kfree(new_mask);
	366	return -ENOMEM;
	367	}
	368
	369	old_mask = pcrypt->cb_cpumask;
	370
d3f64e46	371	cpumask_copy(new_mask->mask, cpumask->cbcpu);
e15bacbe	372	rcu_assign_pointer(pcrypt->cb_cpumask, new_mask);
a0076e17	373	synchronize_rcu();
e15bacbe DK	374
	375	free_cpumask_var(old_mask->mask);
	376	kfree(old_mask);
	377	return 0;
	378	}
	379
a3fb1e33 DK	380	static int pcrypt_sysfs_add(struct padata_instance pinst, const char name)
	381	{
	382	int ret;
	383
	384	pinst->kobj.kset = pcrypt_kset;
b1e3874c	385	ret = kobject_add(&pinst->kobj, NULL, "%s", name);
a3fb1e33 DK	386	if (!ret)
	387	kobject_uevent(&pinst->kobj, KOBJ_ADD);
	388
	389	return ret;
	390	}
	391
c57e842e SK	392	static int pcrypt_init_padata(struct padata_pcrypt *pcrypt,
c57e842e SK	393	const char *name)
e15bacbe DK	394	{
	395	int ret = -ENOMEM;
	396	struct pcrypt_cpumask *mask;
	397
d3f64e46 SK	398	get_online_cpus();
d3f64e46 SK	399
d8537548 KC	400	pcrypt->wq = alloc_workqueue("%s", WQ_MEM_RECLAIM \| WQ_CPU_INTENSIVE,
d8537548 KC	401	1, name);
e15bacbe DK	402	if (!pcrypt->wq)
	403	goto err;
	404
e6cc1170	405	pcrypt->pinst = padata_alloc_possible(pcrypt->wq);
e15bacbe DK	406	if (!pcrypt->pinst)
	407	goto err_destroy_workqueue;
	408
	409	mask = kmalloc(sizeof(*mask), GFP_KERNEL);
	410	if (!mask)
	411	goto err_free_padata;
	412	if (!alloc_cpumask_var(&mask->mask, GFP_KERNEL)) {
	413	kfree(mask);
	414	goto err_free_padata;
	415	}
	416
fbf0ca1b	417	cpumask_and(mask->mask, cpu_possible_mask, cpu_online_mask);
e15bacbe DK	418	rcu_assign_pointer(pcrypt->cb_cpumask, mask);
	419
	420	pcrypt->nblock.notifier_call = pcrypt_cpumask_change_notify;
	421	ret = padata_register_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	422	if (ret)
	423	goto err_free_cpumask;
	424
a3fb1e33 DK	425	ret = pcrypt_sysfs_add(pcrypt->pinst, name);
	426	if (ret)
	427	goto err_unregister_notifier;
	428
d3f64e46 SK	429	put_online_cpus();
d3f64e46 SK	430
e15bacbe	431	return ret;
d3f64e46	432
a3fb1e33 DK	433	err_unregister_notifier:
a3fb1e33 DK	434	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
e15bacbe DK	435	err_free_cpumask:
	436	free_cpumask_var(mask->mask);
	437	kfree(mask);
	438	err_free_padata:
	439	padata_free(pcrypt->pinst);
	440	err_destroy_workqueue:
	441	destroy_workqueue(pcrypt->wq);
	442	err:
d3f64e46 SK	443	put_online_cpus();
d3f64e46 SK	444
e15bacbe DK	445	return ret;
	446	}
	447
c57e842e	448	static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)
e15bacbe DK	449	{
	450	free_cpumask_var(pcrypt->cb_cpumask->mask);
	451	kfree(pcrypt->cb_cpumask);
	452
	453	padata_stop(pcrypt->pinst);
	454	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	455	destroy_workqueue(pcrypt->wq);
	456	padata_free(pcrypt->pinst);
	457	}
	458
5068c7a8 SK	459	static struct crypto_template pcrypt_tmpl = {
5068c7a8 SK	460	.name = "pcrypt",
0496f560	461	.create = pcrypt_create,
5068c7a8 SK	462	.module = THIS_MODULE,
	463	};
	464
	465	static int __init pcrypt_init(void)
	466	{
a3fb1e33 DK	467	int err = -ENOMEM;
	468
	469	pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
	470	if (!pcrypt_kset)
	471	goto err;
5068c7a8	472
c57e842e	473	err = pcrypt_init_padata(&pencrypt, "pencrypt");
4c879170	474	if (err)
a3fb1e33	475	goto err_unreg_kset;
4c879170	476
c57e842e	477	err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
4c879170	478	if (err)
e15bacbe	479	goto err_deinit_pencrypt;
4c879170	480
e15bacbe DK	481	padata_start(pencrypt.pinst);
e15bacbe DK	482	padata_start(pdecrypt.pinst);
5068c7a8	483
e15bacbe	484	return crypto_register_template(&pcrypt_tmpl);
5068c7a8	485
e15bacbe	486	err_deinit_pencrypt:
c57e842e	487	pcrypt_fini_padata(&pencrypt);
a3fb1e33 DK	488	err_unreg_kset:
a3fb1e33 DK	489	kset_unregister(pcrypt_kset);
5068c7a8	490	err:
4c879170	491	return err;
5068c7a8 SK	492	}
	493
	494	static void __exit pcrypt_exit(void)
	495	{
c57e842e SK	496	pcrypt_fini_padata(&pencrypt);
c57e842e SK	497	pcrypt_fini_padata(&pdecrypt);
5068c7a8	498
a3fb1e33	499	kset_unregister(pcrypt_kset);
5068c7a8 SK	500	crypto_unregister_template(&pcrypt_tmpl);
	501	}
	502
c4741b23	503	subsys_initcall(pcrypt_init);
5068c7a8 SK	504	module_exit(pcrypt_exit);
	505
	506	MODULE_LICENSE("GPL");
	507	MODULE_AUTHOR("Steffen Klassert <[email protected]>");
	508	MODULE_DESCRIPTION("Parallel crypto wrapper");
4943ba16	509	MODULE_ALIAS_CRYPTO("pcrypt");