[linux.git] / crypto / simd.c

// SPDX-License-Identifier: GPL-2.0-or-later
/*
 * Shared crypto simd helpers
 *
 * Copyright (c) 2012 Jussi Kivilinna <[email protected]>
 * Copyright (c) 2016 Herbert Xu <[email protected]>
 * Copyright (c) 2019 Google LLC
 *
 * Based on aesni-intel_glue.c by:
 *  Copyright (C) 2008, Intel Corp.
 *    Author: Huang Ying <[email protected]>
 */

/*
 * Shared crypto SIMD helpers.  These functions dynamically create and register
 * an skcipher or AEAD algorithm that wraps another, internal algorithm.  The
 * wrapper ensures that the internal algorithm is only executed in a context
 * where SIMD instructions are usable, i.e. where may_use_simd() returns true.
 * If SIMD is already usable, the wrapper directly calls the internal algorithm.
 * Otherwise it defers execution to a workqueue via cryptd.
 *
 * This is an alternative to the internal algorithm implementing a fallback for
 * the !may_use_simd() case itself.
 *
 * Note that the wrapper algorithm is asynchronous, i.e. it has the
 * CRYPTO_ALG_ASYNC flag set.  Therefore it won't be found by users who
 * explicitly allocate a synchronous algorithm.
 */

#include <crypto/cryptd.h>
#include <crypto/internal/aead.h>
#include <crypto/internal/simd.h>
#include <crypto/internal/skcipher.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/preempt.h>
#include <asm/simd.h>

/* skcipher support */

struct simd_skcipher_alg {
	const char *ialg_name;
	struct skcipher_alg alg;
};

struct simd_skcipher_ctx {
	struct cryptd_skcipher *cryptd_tfm;
};

static int simd_skcipher_setkey(struct crypto_skcipher *tfm, const u8 *key,
				unsigned int key_len)
{
	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	struct crypto_skcipher *child = &ctx->cryptd_tfm->base;
	int err;

	crypto_skcipher_clear_flags(child, CRYPTO_TFM_REQ_MASK);
	crypto_skcipher_set_flags(child, crypto_skcipher_get_flags(tfm) &
					 CRYPTO_TFM_REQ_MASK);
	err = crypto_skcipher_setkey(child, key, key_len);
	crypto_skcipher_set_flags(tfm, crypto_skcipher_get_flags(child) &
				       CRYPTO_TFM_RES_MASK);
	return err;
}

static int simd_skcipher_encrypt(struct skcipher_request *req)
{
	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	struct skcipher_request *subreq;
	struct crypto_skcipher *child;

	subreq = skcipher_request_ctx(req);
	*subreq = *req;

	if (!crypto_simd_usable() ||
	    (in_atomic() && cryptd_skcipher_queued(ctx->cryptd_tfm)))
		child = &ctx->cryptd_tfm->base;
	else
		child = cryptd_skcipher_child(ctx->cryptd_tfm);

	skcipher_request_set_tfm(subreq, child);

	return crypto_skcipher_encrypt(subreq);
}

static int simd_skcipher_decrypt(struct skcipher_request *req)
{
	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	struct skcipher_request *subreq;
	struct crypto_skcipher *child;

	subreq = skcipher_request_ctx(req);
	*subreq = *req;

	if (!crypto_simd_usable() ||
	    (in_atomic() && cryptd_skcipher_queued(ctx->cryptd_tfm)))
		child = &ctx->cryptd_tfm->base;
	else
		child = cryptd_skcipher_child(ctx->cryptd_tfm);

	skcipher_request_set_tfm(subreq, child);

	return crypto_skcipher_decrypt(subreq);
}

static void simd_skcipher_exit(struct crypto_skcipher *tfm)
{
	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);

	cryptd_free_skcipher(ctx->cryptd_tfm);
}

static int simd_skcipher_init(struct crypto_skcipher *tfm)
{
	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	struct cryptd_skcipher *cryptd_tfm;
	struct simd_skcipher_alg *salg;
	struct skcipher_alg *alg;
	unsigned reqsize;

	alg = crypto_skcipher_alg(tfm);
	salg = container_of(alg, struct simd_skcipher_alg, alg);

	cryptd_tfm = cryptd_alloc_skcipher(salg->ialg_name,
					   CRYPTO_ALG_INTERNAL,
					   CRYPTO_ALG_INTERNAL);
	if (IS_ERR(cryptd_tfm))
		return PTR_ERR(cryptd_tfm);

	ctx->cryptd_tfm = cryptd_tfm;

	reqsize = crypto_skcipher_reqsize(cryptd_skcipher_child(cryptd_tfm));
	reqsize = max(reqsize, crypto_skcipher_reqsize(&cryptd_tfm->base));
	reqsize += sizeof(struct skcipher_request);

	crypto_skcipher_set_reqsize(tfm, reqsize);

	return 0;
}

struct simd_skcipher_alg *simd_skcipher_create_compat(const char *algname,
						      const char *drvname,
						      const char *basename)
{
	struct simd_skcipher_alg *salg;
	struct crypto_skcipher *tfm;
	struct skcipher_alg *ialg;
	struct skcipher_alg *alg;
	int err;

	tfm = crypto_alloc_skcipher(basename, CRYPTO_ALG_INTERNAL,
				    CRYPTO_ALG_INTERNAL | CRYPTO_ALG_ASYNC);
	if (IS_ERR(tfm))
		return ERR_CAST(tfm);

	ialg = crypto_skcipher_alg(tfm);

	salg = kzalloc(sizeof(*salg), GFP_KERNEL);
	if (!salg) {
		salg = ERR_PTR(-ENOMEM);
		goto out_put_tfm;
	}

	salg->ialg_name = basename;
	alg = &salg->alg;

	err = -ENAMETOOLONG;
	if (snprintf(alg->base.cra_name, CRYPTO_MAX_ALG_NAME, "%s", algname) >=
	    CRYPTO_MAX_ALG_NAME)
		goto out_free_salg;

	if (snprintf(alg->base.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s",
		     drvname) >= CRYPTO_MAX_ALG_NAME)
		goto out_free_salg;

	alg->base.cra_flags = CRYPTO_ALG_ASYNC;
	alg->base.cra_priority = ialg->base.cra_priority;
	alg->base.cra_blocksize = ialg->base.cra_blocksize;
	alg->base.cra_alignmask = ialg->base.cra_alignmask;
	alg->base.cra_module = ialg->base.cra_module;
	alg->base.cra_ctxsize = sizeof(struct simd_skcipher_ctx);

	alg->ivsize = ialg->ivsize;
	alg->chunksize = ialg->chunksize;
	alg->min_keysize = ialg->min_keysize;
	alg->max_keysize = ialg->max_keysize;

	alg->init = simd_skcipher_init;
	alg->exit = simd_skcipher_exit;

	alg->setkey = simd_skcipher_setkey;
	alg->encrypt = simd_skcipher_encrypt;
	alg->decrypt = simd_skcipher_decrypt;

	err = crypto_register_skcipher(alg);
	if (err)
		goto out_free_salg;

out_put_tfm:
	crypto_free_skcipher(tfm);
	return salg;

out_free_salg:
	kfree(salg);
	salg = ERR_PTR(err);
	goto out_put_tfm;
}
EXPORT_SYMBOL_GPL(simd_skcipher_create_compat);

struct simd_skcipher_alg *simd_skcipher_create(const char *algname,
					       const char *basename)
{
	char drvname[CRYPTO_MAX_ALG_NAME];

	if (snprintf(drvname, CRYPTO_MAX_ALG_NAME, "simd-%s", basename) >=
	    CRYPTO_MAX_ALG_NAME)
		return ERR_PTR(-ENAMETOOLONG);

	return simd_skcipher_create_compat(algname, drvname, basename);
}
EXPORT_SYMBOL_GPL(simd_skcipher_create);

void simd_skcipher_free(struct simd_skcipher_alg *salg)
{
	crypto_unregister_skcipher(&salg->alg);
	kfree(salg);
}
EXPORT_SYMBOL_GPL(simd_skcipher_free);

int simd_register_skciphers_compat(struct skcipher_alg *algs, int count,
				   struct simd_skcipher_alg **simd_algs)
{
	int err;
	int i;
	const char *algname;
	const char *drvname;
	const char *basename;
	struct simd_skcipher_alg *simd;

	err = crypto_register_skciphers(algs, count);
	if (err)
		return err;

	for (i = 0; i < count; i++) {
		WARN_ON(strncmp(algs[i].base.cra_name, "__", 2));
		WARN_ON(strncmp(algs[i].base.cra_driver_name, "__", 2));
		algname = algs[i].base.cra_name + 2;
		drvname = algs[i].base.cra_driver_name + 2;
		basename = algs[i].base.cra_driver_name;
		simd = simd_skcipher_create_compat(algname, drvname, basename);
		err = PTR_ERR(simd);
		if (IS_ERR(simd))
			goto err_unregister;
		simd_algs[i] = simd;
	}
	return 0;

err_unregister:
	simd_unregister_skciphers(algs, count, simd_algs);
	return err;
}
EXPORT_SYMBOL_GPL(simd_register_skciphers_compat);

void simd_unregister_skciphers(struct skcipher_alg *algs, int count,
			       struct simd_skcipher_alg **simd_algs)
{
	int i;

	crypto_unregister_skciphers(algs, count);

	for (i = 0; i < count; i++) {
		if (simd_algs[i]) {
			simd_skcipher_free(simd_algs[i]);
			simd_algs[i] = NULL;
		}
	}
}
EXPORT_SYMBOL_GPL(simd_unregister_skciphers);

/* AEAD support */

struct simd_aead_alg {
	const char *ialg_name;
	struct aead_alg alg;
};

struct simd_aead_ctx {
	struct cryptd_aead *cryptd_tfm;
};

static int simd_aead_setkey(struct crypto_aead *tfm, const u8 *key,
				unsigned int key_len)
{
	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	struct crypto_aead *child = &ctx->cryptd_tfm->base;
	int err;

	crypto_aead_clear_flags(child, CRYPTO_TFM_REQ_MASK);
	crypto_aead_set_flags(child, crypto_aead_get_flags(tfm) &
				     CRYPTO_TFM_REQ_MASK);
	err = crypto_aead_setkey(child, key, key_len);
	crypto_aead_set_flags(tfm, crypto_aead_get_flags(child) &
				   CRYPTO_TFM_RES_MASK);
	return err;
}

static int simd_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
{
	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	struct crypto_aead *child = &ctx->cryptd_tfm->base;

	return crypto_aead_setauthsize(child, authsize);
}

static int simd_aead_encrypt(struct aead_request *req)
{
	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	struct aead_request *subreq;
	struct crypto_aead *child;

	subreq = aead_request_ctx(req);
	*subreq = *req;

	if (!crypto_simd_usable() ||
	    (in_atomic() && cryptd_aead_queued(ctx->cryptd_tfm)))
		child = &ctx->cryptd_tfm->base;
	else
		child = cryptd_aead_child(ctx->cryptd_tfm);

	aead_request_set_tfm(subreq, child);

	return crypto_aead_encrypt(subreq);
}

static int simd_aead_decrypt(struct aead_request *req)
{
	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	struct aead_request *subreq;
	struct crypto_aead *child;

	subreq = aead_request_ctx(req);
	*subreq = *req;

	if (!crypto_simd_usable() ||
	    (in_atomic() && cryptd_aead_queued(ctx->cryptd_tfm)))
		child = &ctx->cryptd_tfm->base;
	else
		child = cryptd_aead_child(ctx->cryptd_tfm);

	aead_request_set_tfm(subreq, child);

	return crypto_aead_decrypt(subreq);
}

static void simd_aead_exit(struct crypto_aead *tfm)
{
	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);

	cryptd_free_aead(ctx->cryptd_tfm);
}

static int simd_aead_init(struct crypto_aead *tfm)
{
	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	struct cryptd_aead *cryptd_tfm;
	struct simd_aead_alg *salg;
	struct aead_alg *alg;
	unsigned reqsize;

	alg = crypto_aead_alg(tfm);
	salg = container_of(alg, struct simd_aead_alg, alg);

	cryptd_tfm = cryptd_alloc_aead(salg->ialg_name, CRYPTO_ALG_INTERNAL,
				       CRYPTO_ALG_INTERNAL);
	if (IS_ERR(cryptd_tfm))
		return PTR_ERR(cryptd_tfm);

	ctx->cryptd_tfm = cryptd_tfm;

	reqsize = crypto_aead_reqsize(cryptd_aead_child(cryptd_tfm));
	reqsize = max(reqsize, crypto_aead_reqsize(&cryptd_tfm->base));
	reqsize += sizeof(struct aead_request);

	crypto_aead_set_reqsize(tfm, reqsize);

	return 0;
}

struct simd_aead_alg *simd_aead_create_compat(const char *algname,
					      const char *drvname,
					      const char *basename)
{
	struct simd_aead_alg *salg;
	struct crypto_aead *tfm;
	struct aead_alg *ialg;
	struct aead_alg *alg;
	int err;

	tfm = crypto_alloc_aead(basename, CRYPTO_ALG_INTERNAL,
				CRYPTO_ALG_INTERNAL | CRYPTO_ALG_ASYNC);
	if (IS_ERR(tfm))
		return ERR_CAST(tfm);

	ialg = crypto_aead_alg(tfm);

	salg = kzalloc(sizeof(*salg), GFP_KERNEL);
	if (!salg) {
		salg = ERR_PTR(-ENOMEM);
		goto out_put_tfm;
	}

	salg->ialg_name = basename;
	alg = &salg->alg;

	err = -ENAMETOOLONG;
	if (snprintf(alg->base.cra_name, CRYPTO_MAX_ALG_NAME, "%s", algname) >=
	    CRYPTO_MAX_ALG_NAME)
		goto out_free_salg;

	if (snprintf(alg->base.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s",
		     drvname) >= CRYPTO_MAX_ALG_NAME)
		goto out_free_salg;

	alg->base.cra_flags = CRYPTO_ALG_ASYNC;
	alg->base.cra_priority = ialg->base.cra_priority;
	alg->base.cra_blocksize = ialg->base.cra_blocksize;
	alg->base.cra_alignmask = ialg->base.cra_alignmask;
	alg->base.cra_module = ialg->base.cra_module;
	alg->base.cra_ctxsize = sizeof(struct simd_aead_ctx);

	alg->ivsize = ialg->ivsize;
	alg->maxauthsize = ialg->maxauthsize;
	alg->chunksize = ialg->chunksize;

	alg->init = simd_aead_init;
	alg->exit = simd_aead_exit;

	alg->setkey = simd_aead_setkey;
	alg->setauthsize = simd_aead_setauthsize;
	alg->encrypt = simd_aead_encrypt;
	alg->decrypt = simd_aead_decrypt;

	err = crypto_register_aead(alg);
	if (err)
		goto out_free_salg;

out_put_tfm:
	crypto_free_aead(tfm);
	return salg;

out_free_salg:
	kfree(salg);
	salg = ERR_PTR(err);
	goto out_put_tfm;
}
EXPORT_SYMBOL_GPL(simd_aead_create_compat);

struct simd_aead_alg *simd_aead_create(const char *algname,
				       const char *basename)
{
	char drvname[CRYPTO_MAX_ALG_NAME];

	if (snprintf(drvname, CRYPTO_MAX_ALG_NAME, "simd-%s", basename) >=
	    CRYPTO_MAX_ALG_NAME)
		return ERR_PTR(-ENAMETOOLONG);

	return simd_aead_create_compat(algname, drvname, basename);
}
EXPORT_SYMBOL_GPL(simd_aead_create);

void simd_aead_free(struct simd_aead_alg *salg)
{
	crypto_unregister_aead(&salg->alg);
	kfree(salg);
}
EXPORT_SYMBOL_GPL(simd_aead_free);

int simd_register_aeads_compat(struct aead_alg *algs, int count,
			       struct simd_aead_alg **simd_algs)
{
	int err;
	int i;
	const char *algname;
	const char *drvname;
	const char *basename;
	struct simd_aead_alg *simd;

	err = crypto_register_aeads(algs, count);
	if (err)
		return err;

	for (i = 0; i < count; i++) {
		WARN_ON(strncmp(algs[i].base.cra_name, "__", 2));
		WARN_ON(strncmp(algs[i].base.cra_driver_name, "__", 2));
		algname = algs[i].base.cra_name + 2;
		drvname = algs[i].base.cra_driver_name + 2;
		basename = algs[i].base.cra_driver_name;
		simd = simd_aead_create_compat(algname, drvname, basename);
		err = PTR_ERR(simd);
		if (IS_ERR(simd))
			goto err_unregister;
		simd_algs[i] = simd;
	}
	return 0;

err_unregister:
	simd_unregister_aeads(algs, count, simd_algs);
	return err;
}
EXPORT_SYMBOL_GPL(simd_register_aeads_compat);

void simd_unregister_aeads(struct aead_alg *algs, int count,
			   struct simd_aead_alg **simd_algs)
{
	int i;

	crypto_unregister_aeads(algs, count);

	for (i = 0; i < count; i++) {
		if (simd_algs[i]) {
			simd_aead_free(simd_algs[i]);
			simd_algs[i] = NULL;
		}
	}
}
EXPORT_SYMBOL_GPL(simd_unregister_aeads);

MODULE_LICENSE("GPL");
Commit	Line	Data
1ccea77e	1	// SPDX-License-Identifier: GPL-2.0-or-later
266d0516 HX	2	/*
	3	* Shared crypto simd helpers
	4	*
	5	* Copyright (c) 2012 Jussi Kivilinna <[email protected]>
	6	* Copyright (c) 2016 Herbert Xu <[email protected]>
1661131a	7	* Copyright (c) 2019 Google LLC
266d0516 HX	8	*
	9	* Based on aesni-intel_glue.c by:
	10	* Copyright (C) 2008, Intel Corp.
	11	* Author: Huang Ying <[email protected]>
1661131a EB	12	*/
	13
	14	/*
	15	* Shared crypto SIMD helpers. These functions dynamically create and register
	16	* an skcipher or AEAD algorithm that wraps another, internal algorithm. The
	17	* wrapper ensures that the internal algorithm is only executed in a context
	18	* where SIMD instructions are usable, i.e. where may_use_simd() returns true.
	19	* If SIMD is already usable, the wrapper directly calls the internal algorithm.
	20	* Otherwise it defers execution to a workqueue via cryptd.
266d0516	21	*
1661131a EB	22	* This is an alternative to the internal algorithm implementing a fallback for
	23	* the !may_use_simd() case itself.
	24	*
	25	* Note that the wrapper algorithm is asynchronous, i.e. it has the
	26	* CRYPTO_ALG_ASYNC flag set. Therefore it won't be found by users who
	27	* explicitly allocate a synchronous algorithm.
266d0516 HX	28	*/
	29
	30	#include <crypto/cryptd.h>
1661131a	31	#include <crypto/internal/aead.h>
266d0516 HX	32	#include <crypto/internal/simd.h>
	33	#include <crypto/internal/skcipher.h>
	34	#include <linux/kernel.h>
	35	#include <linux/module.h>
	36	#include <linux/preempt.h>
	37	#include <asm/simd.h>
	38
1661131a EB	39	/* skcipher support */
1661131a EB	40
266d0516 HX	41	struct simd_skcipher_alg {
	42	const char *ialg_name;
	43	struct skcipher_alg alg;
	44	};
	45
	46	struct simd_skcipher_ctx {
	47	struct cryptd_skcipher *cryptd_tfm;
	48	};
	49
	50	static int simd_skcipher_setkey(struct crypto_skcipher tfm, const u8 key,
	51	unsigned int key_len)
	52	{
	53	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	54	struct crypto_skcipher *child = &ctx->cryptd_tfm->base;
	55	int err;
	56
	57	crypto_skcipher_clear_flags(child, CRYPTO_TFM_REQ_MASK);
	58	crypto_skcipher_set_flags(child, crypto_skcipher_get_flags(tfm) &
	59	CRYPTO_TFM_REQ_MASK);
	60	err = crypto_skcipher_setkey(child, key, key_len);
	61	crypto_skcipher_set_flags(tfm, crypto_skcipher_get_flags(child) &
	62	CRYPTO_TFM_RES_MASK);
	63	return err;
	64	}
	65
	66	static int simd_skcipher_encrypt(struct skcipher_request *req)
	67	{
	68	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
	69	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	70	struct skcipher_request *subreq;
	71	struct crypto_skcipher *child;
	72
	73	subreq = skcipher_request_ctx(req);
	74	subreq = req;
	75
8b8d91d4	76	if (!crypto_simd_usable() \|\|
266d0516 HX	77	(in_atomic() && cryptd_skcipher_queued(ctx->cryptd_tfm)))
	78	child = &ctx->cryptd_tfm->base;
	79	else
	80	child = cryptd_skcipher_child(ctx->cryptd_tfm);
	81
	82	skcipher_request_set_tfm(subreq, child);
	83
	84	return crypto_skcipher_encrypt(subreq);
	85	}
	86
	87	static int simd_skcipher_decrypt(struct skcipher_request *req)
	88	{
	89	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
	90	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	91	struct skcipher_request *subreq;
	92	struct crypto_skcipher *child;
	93
	94	subreq = skcipher_request_ctx(req);
	95	subreq = req;
	96
8b8d91d4	97	if (!crypto_simd_usable() \|\|
266d0516 HX	98	(in_atomic() && cryptd_skcipher_queued(ctx->cryptd_tfm)))
	99	child = &ctx->cryptd_tfm->base;
	100	else
	101	child = cryptd_skcipher_child(ctx->cryptd_tfm);
	102
	103	skcipher_request_set_tfm(subreq, child);
	104
	105	return crypto_skcipher_decrypt(subreq);
	106	}
	107
	108	static void simd_skcipher_exit(struct crypto_skcipher *tfm)
	109	{
	110	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	111
	112	cryptd_free_skcipher(ctx->cryptd_tfm);
	113	}
	114
	115	static int simd_skcipher_init(struct crypto_skcipher *tfm)
	116	{
	117	struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
	118	struct cryptd_skcipher *cryptd_tfm;
	119	struct simd_skcipher_alg *salg;
	120	struct skcipher_alg *alg;
	121	unsigned reqsize;
	122
	123	alg = crypto_skcipher_alg(tfm);
	124	salg = container_of(alg, struct simd_skcipher_alg, alg);
	125
	126	cryptd_tfm = cryptd_alloc_skcipher(salg->ialg_name,
	127	CRYPTO_ALG_INTERNAL,
	128	CRYPTO_ALG_INTERNAL);
	129	if (IS_ERR(cryptd_tfm))
	130	return PTR_ERR(cryptd_tfm);
	131
	132	ctx->cryptd_tfm = cryptd_tfm;
	133
508a1c4d AB	134	reqsize = crypto_skcipher_reqsize(cryptd_skcipher_child(cryptd_tfm));
	135	reqsize = max(reqsize, crypto_skcipher_reqsize(&cryptd_tfm->base));
	136	reqsize += sizeof(struct skcipher_request);
266d0516 HX	137
	138	crypto_skcipher_set_reqsize(tfm, reqsize);
	139
	140	return 0;
	141	}
	142
	143	struct simd_skcipher_alg simd_skcipher_create_compat(const char algname,
	144	const char *drvname,
	145	const char *basename)
	146	{
	147	struct simd_skcipher_alg *salg;
	148	struct crypto_skcipher *tfm;
	149	struct skcipher_alg *ialg;
	150	struct skcipher_alg *alg;
	151	int err;
	152
	153	tfm = crypto_alloc_skcipher(basename, CRYPTO_ALG_INTERNAL,
	154	CRYPTO_ALG_INTERNAL \| CRYPTO_ALG_ASYNC);
	155	if (IS_ERR(tfm))
	156	return ERR_CAST(tfm);
	157
	158	ialg = crypto_skcipher_alg(tfm);
	159
	160	salg = kzalloc(sizeof(*salg), GFP_KERNEL);
	161	if (!salg) {
	162	salg = ERR_PTR(-ENOMEM);
	163	goto out_put_tfm;
	164	}
	165
	166	salg->ialg_name = basename;
	167	alg = &salg->alg;
	168
	169	err = -ENAMETOOLONG;
	170	if (snprintf(alg->base.cra_name, CRYPTO_MAX_ALG_NAME, "%s", algname) >=
	171	CRYPTO_MAX_ALG_NAME)
	172	goto out_free_salg;
	173
	174	if (snprintf(alg->base.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s",
	175	drvname) >= CRYPTO_MAX_ALG_NAME)
	176	goto out_free_salg;
	177
	178	alg->base.cra_flags = CRYPTO_ALG_ASYNC;
	179	alg->base.cra_priority = ialg->base.cra_priority;
	180	alg->base.cra_blocksize = ialg->base.cra_blocksize;
	181	alg->base.cra_alignmask = ialg->base.cra_alignmask;
	182	alg->base.cra_module = ialg->base.cra_module;
	183	alg->base.cra_ctxsize = sizeof(struct simd_skcipher_ctx);
	184
	185	alg->ivsize = ialg->ivsize;
	186	alg->chunksize = ialg->chunksize;
	187	alg->min_keysize = ialg->min_keysize;
	188	alg->max_keysize = ialg->max_keysize;
	189
	190	alg->init = simd_skcipher_init;
	191	alg->exit = simd_skcipher_exit;
	192
	193	alg->setkey = simd_skcipher_setkey;
	194	alg->encrypt = simd_skcipher_encrypt;
	195	alg->decrypt = simd_skcipher_decrypt;
	196
	197	err = crypto_register_skcipher(alg);
	198	if (err)
	199	goto out_free_salg;
	200
201	out_put_tfm:
202	crypto_free_skcipher(tfm);
203	return salg;
204
205	out_free_salg:
206	kfree(salg);
207	salg = ERR_PTR(err);
208	goto out_put_tfm;
209	}
210	EXPORT_SYMBOL_GPL(simd_skcipher_create_compat);
211
212	struct simd_skcipher_alg simd_skcipher_create(const char algname,
213	const char *basename)
214	{
215	char drvname[CRYPTO_MAX_ALG_NAME];
216
217	if (snprintf(drvname, CRYPTO_MAX_ALG_NAME, "simd-%s", basename) >=
218	CRYPTO_MAX_ALG_NAME)
219	return ERR_PTR(-ENAMETOOLONG);
220
221	return simd_skcipher_create_compat(algname, drvname, basename);
222	}
223	EXPORT_SYMBOL_GPL(simd_skcipher_create);
224
225	void simd_skcipher_free(struct simd_skcipher_alg *salg)
226	{
227	crypto_unregister_skcipher(&salg->alg);
228	kfree(salg);
229	}
230	EXPORT_SYMBOL_GPL(simd_skcipher_free);
231
d14f0a1f EB	232	int simd_register_skciphers_compat(struct skcipher_alg *algs, int count,
	233	struct simd_skcipher_alg **simd_algs)
	234	{
	235	int err;
	236	int i;
	237	const char *algname;
	238	const char *drvname;
	239	const char *basename;
	240	struct simd_skcipher_alg *simd;
	241
	242	err = crypto_register_skciphers(algs, count);
	243	if (err)
	244	return err;
	245
	246	for (i = 0; i < count; i++) {
	247	WARN_ON(strncmp(algs[i].base.cra_name, "__", 2));
	248	WARN_ON(strncmp(algs[i].base.cra_driver_name, "__", 2));
	249	algname = algs[i].base.cra_name + 2;
	250	drvname = algs[i].base.cra_driver_name + 2;
	251	basename = algs[i].base.cra_driver_name;
	252	simd = simd_skcipher_create_compat(algname, drvname, basename);
	253	err = PTR_ERR(simd);
	254	if (IS_ERR(simd))
	255	goto err_unregister;
	256	simd_algs[i] = simd;
	257	}
	258	return 0;
	259
	260	err_unregister:
	261	simd_unregister_skciphers(algs, count, simd_algs);
	262	return err;
	263	}
	264	EXPORT_SYMBOL_GPL(simd_register_skciphers_compat);
	265
	266	void simd_unregister_skciphers(struct skcipher_alg *algs, int count,
	267	struct simd_skcipher_alg **simd_algs)
	268	{
	269	int i;
	270
	271	crypto_unregister_skciphers(algs, count);
	272
	273	for (i = 0; i < count; i++) {
	274	if (simd_algs[i]) {
	275	simd_skcipher_free(simd_algs[i]);
	276	simd_algs[i] = NULL;
	277	}
	278	}
	279	}
	280	EXPORT_SYMBOL_GPL(simd_unregister_skciphers);
	281
1661131a EB	282	/* AEAD support */
	283
	284	struct simd_aead_alg {
	285	const char *ialg_name;
	286	struct aead_alg alg;
	287	};
	288
	289	struct simd_aead_ctx {
	290	struct cryptd_aead *cryptd_tfm;
	291	};
	292
	293	static int simd_aead_setkey(struct crypto_aead tfm, const u8 key,
	294	unsigned int key_len)
	295	{
	296	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	297	struct crypto_aead *child = &ctx->cryptd_tfm->base;
	298	int err;
	299
	300	crypto_aead_clear_flags(child, CRYPTO_TFM_REQ_MASK);
	301	crypto_aead_set_flags(child, crypto_aead_get_flags(tfm) &
	302	CRYPTO_TFM_REQ_MASK);
	303	err = crypto_aead_setkey(child, key, key_len);
	304	crypto_aead_set_flags(tfm, crypto_aead_get_flags(child) &
	305	CRYPTO_TFM_RES_MASK);
	306	return err;
	307	}
	308
	309	static int simd_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
	310	{
	311	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	312	struct crypto_aead *child = &ctx->cryptd_tfm->base;
	313
	314	return crypto_aead_setauthsize(child, authsize);
	315	}
	316
	317	static int simd_aead_encrypt(struct aead_request *req)
	318	{
	319	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
	320	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	321	struct aead_request *subreq;
	322	struct crypto_aead *child;
	323
	324	subreq = aead_request_ctx(req);
	325	subreq = req;
	326
8b8d91d4	327	if (!crypto_simd_usable() \|\|
1661131a EB	328	(in_atomic() && cryptd_aead_queued(ctx->cryptd_tfm)))
	329	child = &ctx->cryptd_tfm->base;
	330	else
	331	child = cryptd_aead_child(ctx->cryptd_tfm);
	332
	333	aead_request_set_tfm(subreq, child);
	334
	335	return crypto_aead_encrypt(subreq);
	336	}
	337
	338	static int simd_aead_decrypt(struct aead_request *req)
	339	{
	340	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
	341	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	342	struct aead_request *subreq;
	343	struct crypto_aead *child;
	344
	345	subreq = aead_request_ctx(req);
	346	subreq = req;
	347
8b8d91d4	348	if (!crypto_simd_usable() \|\|
1661131a EB	349	(in_atomic() && cryptd_aead_queued(ctx->cryptd_tfm)))
	350	child = &ctx->cryptd_tfm->base;
	351	else
	352	child = cryptd_aead_child(ctx->cryptd_tfm);
	353
	354	aead_request_set_tfm(subreq, child);
	355
	356	return crypto_aead_decrypt(subreq);
	357	}
	358
	359	static void simd_aead_exit(struct crypto_aead *tfm)
	360	{
	361	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	362
	363	cryptd_free_aead(ctx->cryptd_tfm);
	364	}
	365
	366	static int simd_aead_init(struct crypto_aead *tfm)
	367	{
	368	struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
	369	struct cryptd_aead *cryptd_tfm;
	370	struct simd_aead_alg *salg;
	371	struct aead_alg *alg;
	372	unsigned reqsize;
	373
	374	alg = crypto_aead_alg(tfm);
	375	salg = container_of(alg, struct simd_aead_alg, alg);
	376
	377	cryptd_tfm = cryptd_alloc_aead(salg->ialg_name, CRYPTO_ALG_INTERNAL,
	378	CRYPTO_ALG_INTERNAL);
	379	if (IS_ERR(cryptd_tfm))
	380	return PTR_ERR(cryptd_tfm);
	381
	382	ctx->cryptd_tfm = cryptd_tfm;
	383
	384	reqsize = crypto_aead_reqsize(cryptd_aead_child(cryptd_tfm));
	385	reqsize = max(reqsize, crypto_aead_reqsize(&cryptd_tfm->base));
	386	reqsize += sizeof(struct aead_request);
	387
	388	crypto_aead_set_reqsize(tfm, reqsize);
	389
	390	return 0;
	391	}
	392
	393	struct simd_aead_alg simd_aead_create_compat(const char algname,
	394	const char *drvname,
	395	const char *basename)
	396	{
	397	struct simd_aead_alg *salg;
	398	struct crypto_aead *tfm;
	399	struct aead_alg *ialg;
	400	struct aead_alg *alg;
	401	int err;
	402
	403	tfm = crypto_alloc_aead(basename, CRYPTO_ALG_INTERNAL,
	404	CRYPTO_ALG_INTERNAL \| CRYPTO_ALG_ASYNC);
	405	if (IS_ERR(tfm))
	406	return ERR_CAST(tfm);
	407
	408	ialg = crypto_aead_alg(tfm);
	409
	410	salg = kzalloc(sizeof(*salg), GFP_KERNEL);
	411	if (!salg) {
	412	salg = ERR_PTR(-ENOMEM);
413	goto out_put_tfm;
414	}
415
416	salg->ialg_name = basename;
417	alg = &salg->alg;
418
419	err = -ENAMETOOLONG;
420	if (snprintf(alg->base.cra_name, CRYPTO_MAX_ALG_NAME, "%s", algname) >=
421	CRYPTO_MAX_ALG_NAME)
422	goto out_free_salg;
423
424	if (snprintf(alg->base.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s",
425	drvname) >= CRYPTO_MAX_ALG_NAME)
426	goto out_free_salg;
427
428	alg->base.cra_flags = CRYPTO_ALG_ASYNC;
429	alg->base.cra_priority = ialg->base.cra_priority;
430	alg->base.cra_blocksize = ialg->base.cra_blocksize;
431	alg->base.cra_alignmask = ialg->base.cra_alignmask;
432	alg->base.cra_module = ialg->base.cra_module;
433	alg->base.cra_ctxsize = sizeof(struct simd_aead_ctx);
434
435	alg->ivsize = ialg->ivsize;
436	alg->maxauthsize = ialg->maxauthsize;
437	alg->chunksize = ialg->chunksize;
438
439	alg->init = simd_aead_init;
440	alg->exit = simd_aead_exit;
441
442	alg->setkey = simd_aead_setkey;
443	alg->setauthsize = simd_aead_setauthsize;
444	alg->encrypt = simd_aead_encrypt;
445	alg->decrypt = simd_aead_decrypt;
446
447	err = crypto_register_aead(alg);
448	if (err)
449	goto out_free_salg;
450
451	out_put_tfm:
452	crypto_free_aead(tfm);
453	return salg;
454
455	out_free_salg:
456	kfree(salg);
457	salg = ERR_PTR(err);
458	goto out_put_tfm;
459	}
460	EXPORT_SYMBOL_GPL(simd_aead_create_compat);
461
462	struct simd_aead_alg simd_aead_create(const char algname,
463	const char *basename)
464	{
465	char drvname[CRYPTO_MAX_ALG_NAME];
466
467	if (snprintf(drvname, CRYPTO_MAX_ALG_NAME, "simd-%s", basename) >=
468	CRYPTO_MAX_ALG_NAME)
469	return ERR_PTR(-ENAMETOOLONG);
470
471	return simd_aead_create_compat(algname, drvname, basename);
472	}
473	EXPORT_SYMBOL_GPL(simd_aead_create);
474
475	void simd_aead_free(struct simd_aead_alg *salg)
476	{
477	crypto_unregister_aead(&salg->alg);
478	kfree(salg);
479	}
480	EXPORT_SYMBOL_GPL(simd_aead_free);
481
482	int simd_register_aeads_compat(struct aead_alg *algs, int count,
483	struct simd_aead_alg **simd_algs)
484	{
485	int err;
486	int i;
487	const char *algname;
488	const char *drvname;
489	const char *basename;
490	struct simd_aead_alg *simd;
491
492	err = crypto_register_aeads(algs, count);
493	if (err)
494	return err;
495
496	for (i = 0; i < count; i++) {
497	WARN_ON(strncmp(algs[i].base.cra_name, "__", 2));
498	WARN_ON(strncmp(algs[i].base.cra_driver_name, "__", 2));
499	algname = algs[i].base.cra_name + 2;
500	drvname = algs[i].base.cra_driver_name + 2;
501	basename = algs[i].base.cra_driver_name;
502	simd = simd_aead_create_compat(algname, drvname, basename);
503	err = PTR_ERR(simd);
504	if (IS_ERR(simd))
505	goto err_unregister;
506	simd_algs[i] = simd;
507	}
508	return 0;
509
510	err_unregister:
511	simd_unregister_aeads(algs, count, simd_algs);
512	return err;
513	}
514	EXPORT_SYMBOL_GPL(simd_register_aeads_compat);
515
516	void simd_unregister_aeads(struct aead_alg *algs, int count,
517	struct simd_aead_alg **simd_algs)
518	{
519	int i;
520
521	crypto_unregister_aeads(algs, count);
522
523	for (i = 0; i < count; i++) {
524	if (simd_algs[i]) {
525	simd_aead_free(simd_algs[i]);
526	simd_algs[i] = NULL;
527	}
528	}
529	}
530	EXPORT_SYMBOL_GPL(simd_unregister_aeads);
531
266d0516	532	MODULE_LICENSE("GPL");