[linux.git] / crypto / aead.c

/*
 * AEAD: Authenticated Encryption with Associated Data
 *
 * This file provides API support for AEAD algorithms.
 *
 * Copyright (c) 2007-2015 Herbert Xu <[email protected]>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the Free
 * Software Foundation; either version 2 of the License, or (at your option)
 * any later version.
 *
 */

#include <crypto/internal/geniv.h>
#include <crypto/internal/rng.h>
#include <crypto/null.h>
#include <crypto/scatterwalk.h>
#include <linux/err.h>
#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/rtnetlink.h>
#include <linux/slab.h>
#include <linux/seq_file.h>
#include <linux/cryptouser.h>
#include <linux/compiler.h>
#include <net/netlink.h>

#include "internal.h"

static int setkey_unaligned(struct crypto_aead *tfm, const u8 *key,
			    unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);
	int ret;
	u8 *buffer, *alignbuffer;
	unsigned long absize;

	absize = keylen + alignmask;
	buffer = kmalloc(absize, GFP_ATOMIC);
	if (!buffer)
		return -ENOMEM;

	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	memcpy(alignbuffer, key, keylen);
	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
	memset(alignbuffer, 0, keylen);
	kfree(buffer);
	return ret;
}

int crypto_aead_setkey(struct crypto_aead *tfm,
		       const u8 *key, unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);
	int err;

	if ((unsigned long)key & alignmask)
		err = setkey_unaligned(tfm, key, keylen);
	else
		err = crypto_aead_alg(tfm)->setkey(tfm, key, keylen);

	if (err)
		return err;

	crypto_aead_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
	return 0;
}
EXPORT_SYMBOL_GPL(crypto_aead_setkey);

int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
{
	int err;

	if (authsize > crypto_aead_maxauthsize(tfm))
		return -EINVAL;

	if (crypto_aead_alg(tfm)->setauthsize) {
		err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
		if (err)
			return err;
	}

	tfm->authsize = authsize;
	return 0;
}
EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);

static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	alg->exit(aead);
}

static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	crypto_aead_set_flags(aead, CRYPTO_TFM_NEED_KEY);

	aead->authsize = alg->maxauthsize;

	if (alg->exit)
		aead->base.exit = crypto_aead_exit_tfm;

	if (alg->init)
		return alg->init(aead);

	return 0;
}

#ifdef CONFIG_NET
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	struct crypto_report_aead raead;
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	strncpy(raead.type, "aead", sizeof(raead.type));
	strncpy(raead.geniv, "<none>", sizeof(raead.geniv));

	raead.blocksize = alg->cra_blocksize;
	raead.maxauthsize = aead->maxauthsize;
	raead.ivsize = aead->ivsize;

	if (nla_put(skb, CRYPTOCFGA_REPORT_AEAD,
		    sizeof(struct crypto_report_aead), &raead))
		goto nla_put_failure;
	return 0;

nla_put_failure:
	return -EMSGSIZE;
}
#else
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	return -ENOSYS;
}
#endif

static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
	__maybe_unused;
static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
{
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	seq_printf(m, "type         : aead\n");
	seq_printf(m, "async        : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
					     "yes" : "no");
	seq_printf(m, "blocksize    : %u\n", alg->cra_blocksize);
	seq_printf(m, "ivsize       : %u\n", aead->ivsize);
	seq_printf(m, "maxauthsize  : %u\n", aead->maxauthsize);
	seq_printf(m, "geniv        : <none>\n");
}

static void crypto_aead_free_instance(struct crypto_instance *inst)
{
	struct aead_instance *aead = aead_instance(inst);

	if (!aead->free) {
		inst->tmpl->free(inst);
		return;
	}

	aead->free(aead);
}

static const struct crypto_type crypto_aead_type = {
	.extsize = crypto_alg_extsize,
	.init_tfm = crypto_aead_init_tfm,
	.free = crypto_aead_free_instance,
#ifdef CONFIG_PROC_FS
	.show = crypto_aead_show,
#endif
	.report = crypto_aead_report,
	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	.maskset = CRYPTO_ALG_TYPE_MASK,
	.type = CRYPTO_ALG_TYPE_AEAD,
	.tfmsize = offsetof(struct crypto_aead, base),
};

static int aead_geniv_setkey(struct crypto_aead *tfm,
			     const u8 *key, unsigned int keylen)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int aead_geniv_setauthsize(struct crypto_aead *tfm,
				  unsigned int authsize)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

struct aead_instance *aead_geniv_alloc(struct crypto_template *tmpl,
				       struct rtattr **tb, u32 type, u32 mask)
{
	const char *name;
	struct crypto_aead_spawn *spawn;
	struct crypto_attr_type *algt;
	struct aead_instance *inst;
	struct aead_alg *alg;
	unsigned int ivsize;
	unsigned int maxauthsize;
	int err;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return ERR_CAST(algt);

	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
		return ERR_PTR(-EINVAL);

	name = crypto_attr_alg_name(tb[1]);
	if (IS_ERR(name))
		return ERR_CAST(name);

	inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL);
	if (!inst)
		return ERR_PTR(-ENOMEM);

	spawn = aead_instance_ctx(inst);

	/* Ignore async algorithms if necessary. */
	mask |= crypto_requires_sync(algt->type, algt->mask);

	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
	err = crypto_grab_aead(spawn, name, type, mask);
	if (err)
		goto err_free_inst;

	alg = crypto_spawn_aead_alg(spawn);

	ivsize = crypto_aead_alg_ivsize(alg);
	maxauthsize = crypto_aead_alg_maxauthsize(alg);

	err = -EINVAL;
	if (ivsize < sizeof(u64))
		goto err_drop_alg;

	err = -ENAMETOOLONG;
	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;
	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;

	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
	inst->alg.base.cra_priority = alg->base.cra_priority;
	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);

	inst->alg.setkey = aead_geniv_setkey;
	inst->alg.setauthsize = aead_geniv_setauthsize;

	inst->alg.ivsize = ivsize;
	inst->alg.maxauthsize = maxauthsize;

out:
	return inst;

err_drop_alg:
	crypto_drop_aead(spawn);
err_free_inst:
	kfree(inst);
	inst = ERR_PTR(err);
	goto out;
}
EXPORT_SYMBOL_GPL(aead_geniv_alloc);

void aead_geniv_free(struct aead_instance *inst)
{
	crypto_drop_aead(aead_instance_ctx(inst));
	kfree(inst);
}
EXPORT_SYMBOL_GPL(aead_geniv_free);

int aead_init_geniv(struct crypto_aead *aead)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	struct aead_instance *inst = aead_alg_instance(aead);
	struct crypto_aead *child;
	int err;

	spin_lock_init(&ctx->lock);

	err = crypto_get_default_rng();
	if (err)
		goto out;

	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
				   crypto_aead_ivsize(aead));
	crypto_put_default_rng();
	if (err)
		goto out;

	ctx->sknull = crypto_get_default_null_skcipher();
	err = PTR_ERR(ctx->sknull);
	if (IS_ERR(ctx->sknull))
		goto out;

	child = crypto_spawn_aead(aead_instance_ctx(inst));
	err = PTR_ERR(child);
	if (IS_ERR(child))
		goto drop_null;

	ctx->child = child;
	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
				      sizeof(struct aead_request));

	err = 0;

out:
	return err;

drop_null:
	crypto_put_default_null_skcipher();
	goto out;
}
EXPORT_SYMBOL_GPL(aead_init_geniv);

void aead_exit_geniv(struct crypto_aead *tfm)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	crypto_free_aead(ctx->child);
	crypto_put_default_null_skcipher();
}
EXPORT_SYMBOL_GPL(aead_exit_geniv);

int crypto_grab_aead(struct crypto_aead_spawn *spawn, const char *name,
		     u32 type, u32 mask)
{
	spawn->base.frontend = &crypto_aead_type;
	return crypto_grab_spawn(&spawn->base, name, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_grab_aead);

struct crypto_aead *crypto_alloc_aead(const char *alg_name, u32 type, u32 mask)
{
	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_alloc_aead);

static int aead_prepare_alg(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;

	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
	    PAGE_SIZE / 8)
		return -EINVAL;

	if (!alg->chunksize)
		alg->chunksize = base->cra_blocksize;

	base->cra_type = &crypto_aead_type;
	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	base->cra_flags |= CRYPTO_ALG_TYPE_AEAD;

	return 0;
}

int crypto_register_aead(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;
	int err;

	err = aead_prepare_alg(alg);
	if (err)
		return err;

	return crypto_register_alg(base);
}
EXPORT_SYMBOL_GPL(crypto_register_aead);

void crypto_unregister_aead(struct aead_alg *alg)
{
	crypto_unregister_alg(&alg->base);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aead);

int crypto_register_aeads(struct aead_alg *algs, int count)
{
	int i, ret;

	for (i = 0; i < count; i++) {
		ret = crypto_register_aead(&algs[i]);
		if (ret)
			goto err;
	}

	return 0;

err:
	for (--i; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);

	return ret;
}
EXPORT_SYMBOL_GPL(crypto_register_aeads);

void crypto_unregister_aeads(struct aead_alg *algs, int count)
{
	int i;

	for (i = count - 1; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aeads);

int aead_register_instance(struct crypto_template *tmpl,
			   struct aead_instance *inst)
{
	int err;

	err = aead_prepare_alg(&inst->alg);
	if (err)
		return err;

	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
}
EXPORT_SYMBOL_GPL(aead_register_instance);

MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");
Commit	Line	Data
1ae97820 HX	1	/*
1ae97820 HX	2	* AEAD: Authenticated Encryption with Associated Data
3922538f	3	*
1ae97820 HX	4	* This file provides API support for AEAD algorithms.
1ae97820 HX	5	*
b0d955ba	6	* Copyright (c) 2007-2015 Herbert Xu <[email protected]>
1ae97820 HX	7	*
	8	* This program is free software; you can redistribute it and/or modify it
	9	* under the terms of the GNU General Public License as published by the Free
3922538f	10	* Software Foundation; either version 2 of the License, or (at your option)
1ae97820 HX	11	* any later version.
	12	*
	13	*/
	14
6350449f	15	#include <crypto/internal/geniv.h>
149a3971 HX	16	#include <crypto/internal/rng.h>
149a3971 HX	17	#include <crypto/null.h>
996d98d8	18	#include <crypto/scatterwalk.h>
5b6d2d7f	19	#include <linux/err.h>
1ae97820 HX	20	#include <linux/init.h>
	21	#include <linux/kernel.h>
	22	#include <linux/module.h>
d29ce988	23	#include <linux/rtnetlink.h>
1ae97820 HX	24	#include <linux/slab.h>
1ae97820 HX	25	#include <linux/seq_file.h>
6ad414fe	26	#include <linux/cryptouser.h>
d8c34b94	27	#include <linux/compiler.h>
6ad414fe	28	#include <net/netlink.h>
1ae97820	29
5b6d2d7f HX	30	#include "internal.h"
5b6d2d7f HX	31
1ae97820 HX	32	static int setkey_unaligned(struct crypto_aead tfm, const u8 key,
	33	unsigned int keylen)
	34	{
1ae97820 HX	35	unsigned long alignmask = crypto_aead_alignmask(tfm);
	36	int ret;
	37	u8 buffer, alignbuffer;
	38	unsigned long absize;
	39
	40	absize = keylen + alignmask;
	41	buffer = kmalloc(absize, GFP_ATOMIC);
	42	if (!buffer)
	43	return -ENOMEM;
	44
	45	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	46	memcpy(alignbuffer, key, keylen);
b0d955ba	47	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
1ae97820 HX	48	memset(alignbuffer, 0, keylen);
	49	kfree(buffer);
	50	return ret;
	51	}
	52
5d1d65f8 HX	53	int crypto_aead_setkey(struct crypto_aead *tfm,
5d1d65f8 HX	54	const u8 *key, unsigned int keylen)
1ae97820	55	{
1ae97820	56	unsigned long alignmask = crypto_aead_alignmask(tfm);
dc26c17f	57	int err;
1ae97820 HX	58
1ae97820 HX	59	if ((unsigned long)key & alignmask)
dc26c17f EB	60	err = setkey_unaligned(tfm, key, keylen);
	61	else
	62	err = crypto_aead_alg(tfm)->setkey(tfm, key, keylen);
	63
	64	if (err)
	65	return err;
1ae97820	66
dc26c17f EB	67	crypto_aead_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
dc26c17f EB	68	return 0;
1ae97820	69	}
5d1d65f8	70	EXPORT_SYMBOL_GPL(crypto_aead_setkey);
1ae97820	71
7ba683a6 HX	72	int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
	73	{
	74	int err;
	75
30e4c010	76	if (authsize > crypto_aead_maxauthsize(tfm))
7ba683a6 HX	77	return -EINVAL;
7ba683a6 HX	78
b0d955ba HX	79	if (crypto_aead_alg(tfm)->setauthsize) {
b0d955ba HX	80	err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
7ba683a6 HX	81	if (err)
	82	return err;
	83	}
	84
5d1d65f8	85	tfm->authsize = authsize;
7ba683a6 HX	86	return 0;
	87	}
	88	EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);
	89
5eb8ec6d HX	90	static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
	91	{
	92	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	93	struct aead_alg *alg = crypto_aead_alg(aead);
	94
	95	alg->exit(aead);
	96	}
	97
63293c61 HX	98	static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
	99	{
	100	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	101	struct aead_alg *alg = crypto_aead_alg(aead);
	102
dc26c17f EB	103	crypto_aead_set_flags(aead, CRYPTO_TFM_NEED_KEY);
dc26c17f EB	104
63293c61 HX	105	aead->authsize = alg->maxauthsize;
63293c61 HX	106
5eb8ec6d HX	107	if (alg->exit)
	108	aead->base.exit = crypto_aead_exit_tfm;
	109
	110	if (alg->init)
	111	return alg->init(aead);
	112
63293c61 HX	113	return 0;
	114	}
	115
63293c61 HX	116	#ifdef CONFIG_NET
	117	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	118	{
	119	struct crypto_report_aead raead;
	120	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	121
	122	strncpy(raead.type, "aead", sizeof(raead.type));
	123	strncpy(raead.geniv, "<none>", sizeof(raead.geniv));
	124
	125	raead.blocksize = alg->cra_blocksize;
	126	raead.maxauthsize = aead->maxauthsize;
	127	raead.ivsize = aead->ivsize;
	128
	129	if (nla_put(skb, CRYPTOCFGA_REPORT_AEAD,
	130	sizeof(struct crypto_report_aead), &raead))
	131	goto nla_put_failure;
	132	return 0;
	133
	134	nla_put_failure:
	135	return -EMSGSIZE;
	136	}
	137	#else
	138	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	139	{
	140	return -ENOSYS;
	141	}
	142	#endif
	143
	144	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
d8c34b94	145	__maybe_unused;
63293c61 HX	146	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
	147	{
	148	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	149
	150	seq_printf(m, "type : aead\n");
	151	seq_printf(m, "async : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
	152	"yes" : "no");
	153	seq_printf(m, "blocksize : %u\n", alg->cra_blocksize);
	154	seq_printf(m, "ivsize : %u\n", aead->ivsize);
	155	seq_printf(m, "maxauthsize : %u\n", aead->maxauthsize);
	156	seq_printf(m, "geniv : <none>\n");
	157	}
	158
ba75e15f HX	159	static void crypto_aead_free_instance(struct crypto_instance *inst)
	160	{
	161	struct aead_instance *aead = aead_instance(inst);
	162
	163	if (!aead->free) {
	164	inst->tmpl->free(inst);
	165	return;
	166	}
	167
	168	aead->free(aead);
	169	}
	170
b0d955ba	171	static const struct crypto_type crypto_aead_type = {
63293c61 HX	172	.extsize = crypto_alg_extsize,
63293c61 HX	173	.init_tfm = crypto_aead_init_tfm,
ba75e15f	174	.free = crypto_aead_free_instance,
63293c61 HX	175	#ifdef CONFIG_PROC_FS
	176	.show = crypto_aead_show,
	177	#endif
	178	.report = crypto_aead_report,
	179	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	180	.maskset = CRYPTO_ALG_TYPE_MASK,
	181	.type = CRYPTO_ALG_TYPE_AEAD,
	182	.tfmsize = offsetof(struct crypto_aead, base),
	183	};
	184
6350449f HX	185	static int aead_geniv_setkey(struct crypto_aead *tfm,
	186	const u8 *key, unsigned int keylen)
	187	{
	188	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	189
	190	return crypto_aead_setkey(ctx->child, key, keylen);
	191	}
	192
	193	static int aead_geniv_setauthsize(struct crypto_aead *tfm,
	194	unsigned int authsize)
	195	{
	196	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	197
	198	return crypto_aead_setauthsize(ctx->child, authsize);
	199	}
	200
856e3f40 HX	201	struct aead_instance aead_geniv_alloc(struct crypto_template tmpl,
856e3f40 HX	202	struct rtattr **tb, u32 type, u32 mask)
5b6d2d7f HX	203	{
	204	const char *name;
	205	struct crypto_aead_spawn *spawn;
	206	struct crypto_attr_type *algt;
856e3f40 HX	207	struct aead_instance *inst;
	208	struct aead_alg *alg;
	209	unsigned int ivsize;
	210	unsigned int maxauthsize;
5b6d2d7f HX	211	int err;
	212
	213	algt = crypto_get_attr_type(tb);
5b6d2d7f	214	if (IS_ERR(algt))
3e8afe35	215	return ERR_CAST(algt);
5b6d2d7f	216
5e4b8c1f	217	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
5b6d2d7f HX	218	return ERR_PTR(-EINVAL);
	219
	220	name = crypto_attr_alg_name(tb[1]);
5b6d2d7f	221	if (IS_ERR(name))
3e8afe35	222	return ERR_CAST(name);
5b6d2d7f HX	223
	224	inst = kzalloc(sizeof(inst) + sizeof(spawn), GFP_KERNEL);
	225	if (!inst)
	226	return ERR_PTR(-ENOMEM);
	227
856e3f40	228	spawn = aead_instance_ctx(inst);
5b6d2d7f HX	229
	230	/* Ignore async algorithms if necessary. */
	231	mask \|= crypto_requires_sync(algt->type, algt->mask);
	232
856e3f40	233	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
b0d955ba	234	err = crypto_grab_aead(spawn, name, type, mask);
5b6d2d7f HX	235	if (err)
	236	goto err_free_inst;
	237
856e3f40 HX	238	alg = crypto_spawn_aead_alg(spawn);
856e3f40 HX	239
30e4c010 HX	240	ivsize = crypto_aead_alg_ivsize(alg);
30e4c010 HX	241	maxauthsize = crypto_aead_alg_maxauthsize(alg);
5b6d2d7f HX	242
5b6d2d7f HX	243	err = -EINVAL;
6350449f	244	if (ivsize < sizeof(u64))
5b6d2d7f HX	245	goto err_drop_alg;
5b6d2d7f HX	246
856e3f40 HX	247	err = -ENAMETOOLONG;
	248	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
	249	"%s(%s)", tmpl->name, alg->base.cra_name) >=
	250	CRYPTO_MAX_ALG_NAME)
	251	goto err_drop_alg;
	252	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
	253	"%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	254	CRYPTO_MAX_ALG_NAME)
	255	goto err_drop_alg;
5b6d2d7f	256
5e4b8c1f	257	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
856e3f40 HX	258	inst->alg.base.cra_priority = alg->base.cra_priority;
	259	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	260	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
6350449f HX	261	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);
	262
	263	inst->alg.setkey = aead_geniv_setkey;
	264	inst->alg.setauthsize = aead_geniv_setauthsize;
5b6d2d7f	265
856e3f40 HX	266	inst->alg.ivsize = ivsize;
856e3f40 HX	267	inst->alg.maxauthsize = maxauthsize;
5b6d2d7f HX	268
	269	out:
	270	return inst;
	271
	272	err_drop_alg:
	273	crypto_drop_aead(spawn);
	274	err_free_inst:
	275	kfree(inst);
	276	inst = ERR_PTR(err);
	277	goto out;
	278	}
	279	EXPORT_SYMBOL_GPL(aead_geniv_alloc);
	280
856e3f40	281	void aead_geniv_free(struct aead_instance *inst)
5b6d2d7f	282	{
856e3f40	283	crypto_drop_aead(aead_instance_ctx(inst));
5b6d2d7f HX	284	kfree(inst);
	285	}
	286	EXPORT_SYMBOL_GPL(aead_geniv_free);
	287
149a3971 HX	288	int aead_init_geniv(struct crypto_aead *aead)
	289	{
	290	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	291	struct aead_instance *inst = aead_alg_instance(aead);
	292	struct crypto_aead *child;
	293	int err;
	294
	295	spin_lock_init(&ctx->lock);
	296
	297	err = crypto_get_default_rng();
	298	if (err)
	299	goto out;
	300
	301	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
	302	crypto_aead_ivsize(aead));
	303	crypto_put_default_rng();
	304	if (err)
	305	goto out;
	306
3a2d4fb5	307	ctx->sknull = crypto_get_default_null_skcipher();
ca0494c0 HX	308	err = PTR_ERR(ctx->sknull);
	309	if (IS_ERR(ctx->sknull))
	310	goto out;
	311
149a3971 HX	312	child = crypto_spawn_aead(aead_instance_ctx(inst));
	313	err = PTR_ERR(child);
	314	if (IS_ERR(child))
	315	goto drop_null;
	316
	317	ctx->child = child;
	318	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
	319	sizeof(struct aead_request));
	320
	321	err = 0;
	322
	323	out:
	324	return err;
	325
	326	drop_null:
3a2d4fb5	327	crypto_put_default_null_skcipher();
149a3971 HX	328	goto out;
	329	}
	330	EXPORT_SYMBOL_GPL(aead_init_geniv);
	331
	332	void aead_exit_geniv(struct crypto_aead *tfm)
	333	{
	334	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	335
	336	crypto_free_aead(ctx->child);
3a2d4fb5	337	crypto_put_default_null_skcipher();
149a3971 HX	338	}
	339	EXPORT_SYMBOL_GPL(aead_exit_geniv);
	340
d29ce988 HX	341	int crypto_grab_aead(struct crypto_aead_spawn spawn, const char name,
	342	u32 type, u32 mask)
	343	{
5d1d65f8 HX	344	spawn->base.frontend = &crypto_aead_type;
5d1d65f8 HX	345	return crypto_grab_spawn(&spawn->base, name, type, mask);
d29ce988 HX	346	}
	347	EXPORT_SYMBOL_GPL(crypto_grab_aead);
	348
	349	struct crypto_aead crypto_alloc_aead(const char alg_name, u32 type, u32 mask)
	350	{
5d1d65f8	351	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
d29ce988 HX	352	}
	353	EXPORT_SYMBOL_GPL(crypto_alloc_aead);
	354
63293c61 HX	355	static int aead_prepare_alg(struct aead_alg *alg)
	356	{
	357	struct crypto_alg *base = &alg->base;
	358
7a530aa9 HX	359	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
7a530aa9 HX	360	PAGE_SIZE / 8)
63293c61 HX	361	return -EINVAL;
63293c61 HX	362
7a530aa9 HX	363	if (!alg->chunksize)
	364	alg->chunksize = base->cra_blocksize;
	365
b0d955ba	366	base->cra_type = &crypto_aead_type;
63293c61 HX	367	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	368	base->cra_flags \|= CRYPTO_ALG_TYPE_AEAD;
	369
	370	return 0;
	371	}
	372
	373	int crypto_register_aead(struct aead_alg *alg)
	374	{
	375	struct crypto_alg *base = &alg->base;
	376	int err;
	377
	378	err = aead_prepare_alg(alg);
	379	if (err)
	380	return err;
	381
	382	return crypto_register_alg(base);
	383	}
	384	EXPORT_SYMBOL_GPL(crypto_register_aead);
	385
43615369	386	void crypto_unregister_aead(struct aead_alg *alg)
63293c61	387	{
43615369	388	crypto_unregister_alg(&alg->base);
63293c61 HX	389	}
	390	EXPORT_SYMBOL_GPL(crypto_unregister_aead);
	391
caab9461 HX	392	int crypto_register_aeads(struct aead_alg *algs, int count)
	393	{
	394	int i, ret;
	395
	396	for (i = 0; i < count; i++) {
	397	ret = crypto_register_aead(&algs[i]);
	398	if (ret)
	399	goto err;
	400	}
	401
	402	return 0;
	403
	404	err:
	405	for (--i; i >= 0; --i)
	406	crypto_unregister_aead(&algs[i]);
	407
	408	return ret;
	409	}
	410	EXPORT_SYMBOL_GPL(crypto_register_aeads);
	411
	412	void crypto_unregister_aeads(struct aead_alg *algs, int count)
	413	{
	414	int i;
	415
	416	for (i = count - 1; i >= 0; --i)
	417	crypto_unregister_aead(&algs[i]);
	418	}
	419	EXPORT_SYMBOL_GPL(crypto_unregister_aeads);
	420
63293c61 HX	421	int aead_register_instance(struct crypto_template *tmpl,
	422	struct aead_instance *inst)
	423	{
	424	int err;
	425
	426	err = aead_prepare_alg(&inst->alg);
	427	if (err)
	428	return err;
	429
	430	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
	431	}
	432	EXPORT_SYMBOL_GPL(aead_register_instance);
	433
1ae97820 HX	434	MODULE_LICENSE("GPL");
1ae97820 HX	435	MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");