[linux.git] / crypto / aead.c

/*
 * AEAD: Authenticated Encryption with Associated Data
 *
 * This file provides API support for AEAD algorithms.
 *
 * Copyright (c) 2007-2015 Herbert Xu <[email protected]>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the Free
 * Software Foundation; either version 2 of the License, or (at your option)
 * any later version.
 *
 */

#include <crypto/internal/geniv.h>
#include <crypto/internal/rng.h>
#include <crypto/null.h>
#include <crypto/scatterwalk.h>
#include <linux/err.h>
#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/rtnetlink.h>
#include <linux/slab.h>
#include <linux/seq_file.h>
#include <linux/cryptouser.h>
#include <linux/compiler.h>
#include <net/netlink.h>

#include "internal.h"

static int setkey_unaligned(struct crypto_aead *tfm, const u8 *key,
			    unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);
	int ret;
	u8 *buffer, *alignbuffer;
	unsigned long absize;

	absize = keylen + alignmask;
	buffer = kmalloc(absize, GFP_ATOMIC);
	if (!buffer)
		return -ENOMEM;

	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	memcpy(alignbuffer, key, keylen);
	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
	memset(alignbuffer, 0, keylen);
	kfree(buffer);
	return ret;
}

int crypto_aead_setkey(struct crypto_aead *tfm,
		       const u8 *key, unsigned int keylen)
{
	unsigned long alignmask = crypto_aead_alignmask(tfm);
	int err;

	if ((unsigned long)key & alignmask)
		err = setkey_unaligned(tfm, key, keylen);
	else
		err = crypto_aead_alg(tfm)->setkey(tfm, key, keylen);

	if (err)
		return err;

	crypto_aead_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
	return 0;
}
EXPORT_SYMBOL_GPL(crypto_aead_setkey);

int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
{
	int err;

	if (authsize > crypto_aead_maxauthsize(tfm))
		return -EINVAL;

	if (crypto_aead_alg(tfm)->setauthsize) {
		err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
		if (err)
			return err;
	}

	tfm->authsize = authsize;
	return 0;
}
EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);

static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	alg->exit(aead);
}

static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
{
	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	struct aead_alg *alg = crypto_aead_alg(aead);

	crypto_aead_set_flags(aead, CRYPTO_TFM_NEED_KEY);

	aead->authsize = alg->maxauthsize;

	if (alg->exit)
		aead->base.exit = crypto_aead_exit_tfm;

	if (alg->init)
		return alg->init(aead);

	return 0;
}

#ifdef CONFIG_NET
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	struct crypto_report_aead raead;
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	memset(&raead, 0, sizeof(raead));

	strscpy(raead.type, "aead", sizeof(raead.type));
	strscpy(raead.geniv, "<none>", sizeof(raead.geniv));

	raead.blocksize = alg->cra_blocksize;
	raead.maxauthsize = aead->maxauthsize;
	raead.ivsize = aead->ivsize;

	return nla_put(skb, CRYPTOCFGA_REPORT_AEAD, sizeof(raead), &raead);
}
#else
static int crypto_aead_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	return -ENOSYS;
}
#endif

static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
	__maybe_unused;
static void crypto_aead_show(struct seq_file *m, struct crypto_alg *alg)
{
	struct aead_alg *aead = container_of(alg, struct aead_alg, base);

	seq_printf(m, "type         : aead\n");
	seq_printf(m, "async        : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
					     "yes" : "no");
	seq_printf(m, "blocksize    : %u\n", alg->cra_blocksize);
	seq_printf(m, "ivsize       : %u\n", aead->ivsize);
	seq_printf(m, "maxauthsize  : %u\n", aead->maxauthsize);
	seq_printf(m, "geniv        : <none>\n");
}

static void crypto_aead_free_instance(struct crypto_instance *inst)
{
	struct aead_instance *aead = aead_instance(inst);

	if (!aead->free) {
		inst->tmpl->free(inst);
		return;
	}

	aead->free(aead);
}

static const struct crypto_type crypto_aead_type = {
	.extsize = crypto_alg_extsize,
	.init_tfm = crypto_aead_init_tfm,
	.free = crypto_aead_free_instance,
#ifdef CONFIG_PROC_FS
	.show = crypto_aead_show,
#endif
	.report = crypto_aead_report,
	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	.maskset = CRYPTO_ALG_TYPE_MASK,
	.type = CRYPTO_ALG_TYPE_AEAD,
	.tfmsize = offsetof(struct crypto_aead, base),
};

static int aead_geniv_setkey(struct crypto_aead *tfm,
			     const u8 *key, unsigned int keylen)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int aead_geniv_setauthsize(struct crypto_aead *tfm,
				  unsigned int authsize)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

struct aead_instance *aead_geniv_alloc(struct crypto_template *tmpl,
				       struct rtattr **tb, u32 type, u32 mask)
{
	const char *name;
	struct crypto_aead_spawn *spawn;
	struct crypto_attr_type *algt;
	struct aead_instance *inst;
	struct aead_alg *alg;
	unsigned int ivsize;
	unsigned int maxauthsize;
	int err;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return ERR_CAST(algt);

	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
		return ERR_PTR(-EINVAL);

	name = crypto_attr_alg_name(tb[1]);
	if (IS_ERR(name))
		return ERR_CAST(name);

	inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL);
	if (!inst)
		return ERR_PTR(-ENOMEM);

	spawn = aead_instance_ctx(inst);

	/* Ignore async algorithms if necessary. */
	mask |= crypto_requires_sync(algt->type, algt->mask);

	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
	err = crypto_grab_aead(spawn, name, type, mask);
	if (err)
		goto err_free_inst;

	alg = crypto_spawn_aead_alg(spawn);

	ivsize = crypto_aead_alg_ivsize(alg);
	maxauthsize = crypto_aead_alg_maxauthsize(alg);

	err = -EINVAL;
	if (ivsize < sizeof(u64))
		goto err_drop_alg;

	err = -ENAMETOOLONG;
	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;
	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	    CRYPTO_MAX_ALG_NAME)
		goto err_drop_alg;

	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
	inst->alg.base.cra_priority = alg->base.cra_priority;
	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);

	inst->alg.setkey = aead_geniv_setkey;
	inst->alg.setauthsize = aead_geniv_setauthsize;

	inst->alg.ivsize = ivsize;
	inst->alg.maxauthsize = maxauthsize;

out:
	return inst;

err_drop_alg:
	crypto_drop_aead(spawn);
err_free_inst:
	kfree(inst);
	inst = ERR_PTR(err);
	goto out;
}
EXPORT_SYMBOL_GPL(aead_geniv_alloc);

void aead_geniv_free(struct aead_instance *inst)
{
	crypto_drop_aead(aead_instance_ctx(inst));
	kfree(inst);
}
EXPORT_SYMBOL_GPL(aead_geniv_free);

int aead_init_geniv(struct crypto_aead *aead)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	struct aead_instance *inst = aead_alg_instance(aead);
	struct crypto_aead *child;
	int err;

	spin_lock_init(&ctx->lock);

	err = crypto_get_default_rng();
	if (err)
		goto out;

	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
				   crypto_aead_ivsize(aead));
	crypto_put_default_rng();
	if (err)
		goto out;

	ctx->sknull = crypto_get_default_null_skcipher();
	err = PTR_ERR(ctx->sknull);
	if (IS_ERR(ctx->sknull))
		goto out;

	child = crypto_spawn_aead(aead_instance_ctx(inst));
	err = PTR_ERR(child);
	if (IS_ERR(child))
		goto drop_null;

	ctx->child = child;
	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
				      sizeof(struct aead_request));

	err = 0;

out:
	return err;

drop_null:
	crypto_put_default_null_skcipher();
	goto out;
}
EXPORT_SYMBOL_GPL(aead_init_geniv);

void aead_exit_geniv(struct crypto_aead *tfm)
{
	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);

	crypto_free_aead(ctx->child);
	crypto_put_default_null_skcipher();
}
EXPORT_SYMBOL_GPL(aead_exit_geniv);

int crypto_grab_aead(struct crypto_aead_spawn *spawn, const char *name,
		     u32 type, u32 mask)
{
	spawn->base.frontend = &crypto_aead_type;
	return crypto_grab_spawn(&spawn->base, name, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_grab_aead);

struct crypto_aead *crypto_alloc_aead(const char *alg_name, u32 type, u32 mask)
{
	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_alloc_aead);

static int aead_prepare_alg(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;

	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
	    PAGE_SIZE / 8)
		return -EINVAL;

	if (!alg->chunksize)
		alg->chunksize = base->cra_blocksize;

	base->cra_type = &crypto_aead_type;
	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	base->cra_flags |= CRYPTO_ALG_TYPE_AEAD;

	return 0;
}

int crypto_register_aead(struct aead_alg *alg)
{
	struct crypto_alg *base = &alg->base;
	int err;

	err = aead_prepare_alg(alg);
	if (err)
		return err;

	return crypto_register_alg(base);
}
EXPORT_SYMBOL_GPL(crypto_register_aead);

void crypto_unregister_aead(struct aead_alg *alg)
{
	crypto_unregister_alg(&alg->base);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aead);

int crypto_register_aeads(struct aead_alg *algs, int count)
{
	int i, ret;

	for (i = 0; i < count; i++) {
		ret = crypto_register_aead(&algs[i]);
		if (ret)
			goto err;
	}

	return 0;

err:
	for (--i; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);

	return ret;
}
EXPORT_SYMBOL_GPL(crypto_register_aeads);

void crypto_unregister_aeads(struct aead_alg *algs, int count)
{
	int i;

	for (i = count - 1; i >= 0; --i)
		crypto_unregister_aead(&algs[i]);
}
EXPORT_SYMBOL_GPL(crypto_unregister_aeads);

int aead_register_instance(struct crypto_template *tmpl,
			   struct aead_instance *inst)
{
	int err;

	err = aead_prepare_alg(&inst->alg);
	if (err)
		return err;

	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
}
EXPORT_SYMBOL_GPL(aead_register_instance);

MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");
Commit	Line	Data
1ae97820 HX	1	/*
1ae97820 HX	2	* AEAD: Authenticated Encryption with Associated Data
3922538f	3	*
1ae97820 HX	4	* This file provides API support for AEAD algorithms.
1ae97820 HX	5	*
b0d955ba	6	* Copyright (c) 2007-2015 Herbert Xu <[email protected]>
1ae97820 HX	7	*
	8	* This program is free software; you can redistribute it and/or modify it
	9	* under the terms of the GNU General Public License as published by the Free
3922538f	10	* Software Foundation; either version 2 of the License, or (at your option)
1ae97820 HX	11	* any later version.
	12	*
	13	*/
	14
6350449f	15	#include <crypto/internal/geniv.h>
149a3971 HX	16	#include <crypto/internal/rng.h>
149a3971 HX	17	#include <crypto/null.h>
996d98d8	18	#include <crypto/scatterwalk.h>
5b6d2d7f	19	#include <linux/err.h>
1ae97820 HX	20	#include <linux/init.h>
	21	#include <linux/kernel.h>
	22	#include <linux/module.h>
d29ce988	23	#include <linux/rtnetlink.h>
1ae97820 HX	24	#include <linux/slab.h>
1ae97820 HX	25	#include <linux/seq_file.h>
6ad414fe	26	#include <linux/cryptouser.h>
d8c34b94	27	#include <linux/compiler.h>
6ad414fe	28	#include <net/netlink.h>
1ae97820	29
5b6d2d7f HX	30	#include "internal.h"
5b6d2d7f HX	31
1ae97820 HX	32	static int setkey_unaligned(struct crypto_aead tfm, const u8 key,
	33	unsigned int keylen)
	34	{
1ae97820 HX	35	unsigned long alignmask = crypto_aead_alignmask(tfm);
	36	int ret;
	37	u8 buffer, alignbuffer;
	38	unsigned long absize;
	39
	40	absize = keylen + alignmask;
	41	buffer = kmalloc(absize, GFP_ATOMIC);
	42	if (!buffer)
	43	return -ENOMEM;
	44
	45	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
	46	memcpy(alignbuffer, key, keylen);
b0d955ba	47	ret = crypto_aead_alg(tfm)->setkey(tfm, alignbuffer, keylen);
1ae97820 HX	48	memset(alignbuffer, 0, keylen);
	49	kfree(buffer);
	50	return ret;
	51	}
	52
5d1d65f8 HX	53	int crypto_aead_setkey(struct crypto_aead *tfm,
5d1d65f8 HX	54	const u8 *key, unsigned int keylen)
1ae97820	55	{
1ae97820	56	unsigned long alignmask = crypto_aead_alignmask(tfm);
dc26c17f	57	int err;
1ae97820 HX	58
1ae97820 HX	59	if ((unsigned long)key & alignmask)
dc26c17f EB	60	err = setkey_unaligned(tfm, key, keylen);
	61	else
	62	err = crypto_aead_alg(tfm)->setkey(tfm, key, keylen);
	63
	64	if (err)
	65	return err;
1ae97820	66
dc26c17f EB	67	crypto_aead_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
dc26c17f EB	68	return 0;
1ae97820	69	}
5d1d65f8	70	EXPORT_SYMBOL_GPL(crypto_aead_setkey);
1ae97820	71
7ba683a6 HX	72	int crypto_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
	73	{
	74	int err;
	75
30e4c010	76	if (authsize > crypto_aead_maxauthsize(tfm))
7ba683a6 HX	77	return -EINVAL;
7ba683a6 HX	78
b0d955ba HX	79	if (crypto_aead_alg(tfm)->setauthsize) {
b0d955ba HX	80	err = crypto_aead_alg(tfm)->setauthsize(tfm, authsize);
7ba683a6 HX	81	if (err)
	82	return err;
	83	}
	84
5d1d65f8	85	tfm->authsize = authsize;
7ba683a6 HX	86	return 0;
	87	}
	88	EXPORT_SYMBOL_GPL(crypto_aead_setauthsize);
	89
5eb8ec6d HX	90	static void crypto_aead_exit_tfm(struct crypto_tfm *tfm)
	91	{
	92	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	93	struct aead_alg *alg = crypto_aead_alg(aead);
	94
	95	alg->exit(aead);
	96	}
	97
63293c61 HX	98	static int crypto_aead_init_tfm(struct crypto_tfm *tfm)
	99	{
	100	struct crypto_aead *aead = __crypto_aead_cast(tfm);
	101	struct aead_alg *alg = crypto_aead_alg(aead);
	102
dc26c17f EB	103	crypto_aead_set_flags(aead, CRYPTO_TFM_NEED_KEY);
dc26c17f EB	104
63293c61 HX	105	aead->authsize = alg->maxauthsize;
63293c61 HX	106
5eb8ec6d HX	107	if (alg->exit)
	108	aead->base.exit = crypto_aead_exit_tfm;
	109
	110	if (alg->init)
	111	return alg->init(aead);
	112
63293c61 HX	113	return 0;
	114	}
	115
63293c61 HX	116	#ifdef CONFIG_NET
	117	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	118	{
	119	struct crypto_report_aead raead;
	120	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	121
37db69e0 EB	122	memset(&raead, 0, sizeof(raead));
	123
	124	strscpy(raead.type, "aead", sizeof(raead.type));
	125	strscpy(raead.geniv, "<none>", sizeof(raead.geniv));
63293c61 HX	126
	127	raead.blocksize = alg->cra_blocksize;
	128	raead.maxauthsize = aead->maxauthsize;
	129	raead.ivsize = aead->ivsize;
	130
37db69e0	131	return nla_put(skb, CRYPTOCFGA_REPORT_AEAD, sizeof(raead), &raead);
63293c61 HX	132	}
	133	#else
	134	static int crypto_aead_report(struct sk_buff skb, struct crypto_alg alg)
	135	{
	136	return -ENOSYS;
	137	}
	138	#endif
	139
	140	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
d8c34b94	141	__maybe_unused;
63293c61 HX	142	static void crypto_aead_show(struct seq_file m, struct crypto_alg alg)
	143	{
	144	struct aead_alg *aead = container_of(alg, struct aead_alg, base);
	145
	146	seq_printf(m, "type : aead\n");
	147	seq_printf(m, "async : %s\n", alg->cra_flags & CRYPTO_ALG_ASYNC ?
	148	"yes" : "no");
	149	seq_printf(m, "blocksize : %u\n", alg->cra_blocksize);
	150	seq_printf(m, "ivsize : %u\n", aead->ivsize);
	151	seq_printf(m, "maxauthsize : %u\n", aead->maxauthsize);
	152	seq_printf(m, "geniv : <none>\n");
	153	}
	154
ba75e15f HX	155	static void crypto_aead_free_instance(struct crypto_instance *inst)
	156	{
	157	struct aead_instance *aead = aead_instance(inst);
	158
	159	if (!aead->free) {
	160	inst->tmpl->free(inst);
	161	return;
	162	}
	163
	164	aead->free(aead);
	165	}
	166
b0d955ba	167	static const struct crypto_type crypto_aead_type = {
63293c61 HX	168	.extsize = crypto_alg_extsize,
63293c61 HX	169	.init_tfm = crypto_aead_init_tfm,
ba75e15f	170	.free = crypto_aead_free_instance,
63293c61 HX	171	#ifdef CONFIG_PROC_FS
	172	.show = crypto_aead_show,
	173	#endif
	174	.report = crypto_aead_report,
	175	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	176	.maskset = CRYPTO_ALG_TYPE_MASK,
	177	.type = CRYPTO_ALG_TYPE_AEAD,
	178	.tfmsize = offsetof(struct crypto_aead, base),
	179	};
	180
6350449f HX	181	static int aead_geniv_setkey(struct crypto_aead *tfm,
	182	const u8 *key, unsigned int keylen)
	183	{
	184	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	185
	186	return crypto_aead_setkey(ctx->child, key, keylen);
	187	}
	188
	189	static int aead_geniv_setauthsize(struct crypto_aead *tfm,
	190	unsigned int authsize)
	191	{
	192	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	193
	194	return crypto_aead_setauthsize(ctx->child, authsize);
	195	}
	196
856e3f40 HX	197	struct aead_instance aead_geniv_alloc(struct crypto_template tmpl,
856e3f40 HX	198	struct rtattr **tb, u32 type, u32 mask)
5b6d2d7f HX	199	{
	200	const char *name;
	201	struct crypto_aead_spawn *spawn;
	202	struct crypto_attr_type *algt;
856e3f40 HX	203	struct aead_instance *inst;
	204	struct aead_alg *alg;
	205	unsigned int ivsize;
	206	unsigned int maxauthsize;
5b6d2d7f HX	207	int err;
	208
	209	algt = crypto_get_attr_type(tb);
5b6d2d7f	210	if (IS_ERR(algt))
3e8afe35	211	return ERR_CAST(algt);
5b6d2d7f	212
5e4b8c1f	213	if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask)
5b6d2d7f HX	214	return ERR_PTR(-EINVAL);
	215
	216	name = crypto_attr_alg_name(tb[1]);
5b6d2d7f	217	if (IS_ERR(name))
3e8afe35	218	return ERR_CAST(name);
5b6d2d7f HX	219
	220	inst = kzalloc(sizeof(inst) + sizeof(spawn), GFP_KERNEL);
	221	if (!inst)
	222	return ERR_PTR(-ENOMEM);
	223
856e3f40	224	spawn = aead_instance_ctx(inst);
5b6d2d7f HX	225
	226	/* Ignore async algorithms if necessary. */
	227	mask \|= crypto_requires_sync(algt->type, algt->mask);
	228
856e3f40	229	crypto_set_aead_spawn(spawn, aead_crypto_instance(inst));
b0d955ba	230	err = crypto_grab_aead(spawn, name, type, mask);
5b6d2d7f HX	231	if (err)
	232	goto err_free_inst;
	233
856e3f40 HX	234	alg = crypto_spawn_aead_alg(spawn);
856e3f40 HX	235
30e4c010 HX	236	ivsize = crypto_aead_alg_ivsize(alg);
30e4c010 HX	237	maxauthsize = crypto_aead_alg_maxauthsize(alg);
5b6d2d7f HX	238
5b6d2d7f HX	239	err = -EINVAL;
6350449f	240	if (ivsize < sizeof(u64))
5b6d2d7f HX	241	goto err_drop_alg;
5b6d2d7f HX	242
856e3f40 HX	243	err = -ENAMETOOLONG;
	244	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
	245	"%s(%s)", tmpl->name, alg->base.cra_name) >=
	246	CRYPTO_MAX_ALG_NAME)
	247	goto err_drop_alg;
	248	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
	249	"%s(%s)", tmpl->name, alg->base.cra_driver_name) >=
	250	CRYPTO_MAX_ALG_NAME)
	251	goto err_drop_alg;
5b6d2d7f	252
5e4b8c1f	253	inst->alg.base.cra_flags = alg->base.cra_flags & CRYPTO_ALG_ASYNC;
856e3f40 HX	254	inst->alg.base.cra_priority = alg->base.cra_priority;
	255	inst->alg.base.cra_blocksize = alg->base.cra_blocksize;
	256	inst->alg.base.cra_alignmask = alg->base.cra_alignmask;
6350449f HX	257	inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);
	258
	259	inst->alg.setkey = aead_geniv_setkey;
	260	inst->alg.setauthsize = aead_geniv_setauthsize;
5b6d2d7f	261
856e3f40 HX	262	inst->alg.ivsize = ivsize;
856e3f40 HX	263	inst->alg.maxauthsize = maxauthsize;
5b6d2d7f HX	264
	265	out:
	266	return inst;
	267
	268	err_drop_alg:
	269	crypto_drop_aead(spawn);
	270	err_free_inst:
	271	kfree(inst);
	272	inst = ERR_PTR(err);
	273	goto out;
	274	}
	275	EXPORT_SYMBOL_GPL(aead_geniv_alloc);
	276
856e3f40	277	void aead_geniv_free(struct aead_instance *inst)
5b6d2d7f	278	{
856e3f40	279	crypto_drop_aead(aead_instance_ctx(inst));
5b6d2d7f HX	280	kfree(inst);
	281	}
	282	EXPORT_SYMBOL_GPL(aead_geniv_free);
	283
149a3971 HX	284	int aead_init_geniv(struct crypto_aead *aead)
	285	{
	286	struct aead_geniv_ctx *ctx = crypto_aead_ctx(aead);
	287	struct aead_instance *inst = aead_alg_instance(aead);
	288	struct crypto_aead *child;
	289	int err;
	290
	291	spin_lock_init(&ctx->lock);
	292
	293	err = crypto_get_default_rng();
	294	if (err)
	295	goto out;
	296
	297	err = crypto_rng_get_bytes(crypto_default_rng, ctx->salt,
	298	crypto_aead_ivsize(aead));
	299	crypto_put_default_rng();
	300	if (err)
	301	goto out;
	302
3a2d4fb5	303	ctx->sknull = crypto_get_default_null_skcipher();
ca0494c0 HX	304	err = PTR_ERR(ctx->sknull);
	305	if (IS_ERR(ctx->sknull))
	306	goto out;
	307
149a3971 HX	308	child = crypto_spawn_aead(aead_instance_ctx(inst));
	309	err = PTR_ERR(child);
	310	if (IS_ERR(child))
	311	goto drop_null;
	312
	313	ctx->child = child;
	314	crypto_aead_set_reqsize(aead, crypto_aead_reqsize(child) +
	315	sizeof(struct aead_request));
	316
	317	err = 0;
	318
	319	out:
	320	return err;
	321
	322	drop_null:
3a2d4fb5	323	crypto_put_default_null_skcipher();
149a3971 HX	324	goto out;
	325	}
	326	EXPORT_SYMBOL_GPL(aead_init_geniv);
	327
	328	void aead_exit_geniv(struct crypto_aead *tfm)
	329	{
	330	struct aead_geniv_ctx *ctx = crypto_aead_ctx(tfm);
	331
	332	crypto_free_aead(ctx->child);
3a2d4fb5	333	crypto_put_default_null_skcipher();
149a3971 HX	334	}
	335	EXPORT_SYMBOL_GPL(aead_exit_geniv);
	336
d29ce988 HX	337	int crypto_grab_aead(struct crypto_aead_spawn spawn, const char name,
	338	u32 type, u32 mask)
	339	{
5d1d65f8 HX	340	spawn->base.frontend = &crypto_aead_type;
5d1d65f8 HX	341	return crypto_grab_spawn(&spawn->base, name, type, mask);
d29ce988 HX	342	}
	343	EXPORT_SYMBOL_GPL(crypto_grab_aead);
	344
	345	struct crypto_aead crypto_alloc_aead(const char alg_name, u32 type, u32 mask)
	346	{
5d1d65f8	347	return crypto_alloc_tfm(alg_name, &crypto_aead_type, type, mask);
d29ce988 HX	348	}
	349	EXPORT_SYMBOL_GPL(crypto_alloc_aead);
	350
63293c61 HX	351	static int aead_prepare_alg(struct aead_alg *alg)
	352	{
	353	struct crypto_alg *base = &alg->base;
	354
7a530aa9 HX	355	if (max3(alg->maxauthsize, alg->ivsize, alg->chunksize) >
7a530aa9 HX	356	PAGE_SIZE / 8)
63293c61 HX	357	return -EINVAL;
63293c61 HX	358
7a530aa9 HX	359	if (!alg->chunksize)
	360	alg->chunksize = base->cra_blocksize;
	361
b0d955ba	362	base->cra_type = &crypto_aead_type;
63293c61 HX	363	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	364	base->cra_flags \|= CRYPTO_ALG_TYPE_AEAD;
	365
	366	return 0;
	367	}
	368
	369	int crypto_register_aead(struct aead_alg *alg)
	370	{
	371	struct crypto_alg *base = &alg->base;
	372	int err;
	373
	374	err = aead_prepare_alg(alg);
	375	if (err)
	376	return err;
	377
	378	return crypto_register_alg(base);
	379	}
	380	EXPORT_SYMBOL_GPL(crypto_register_aead);
	381
43615369	382	void crypto_unregister_aead(struct aead_alg *alg)
63293c61	383	{
43615369	384	crypto_unregister_alg(&alg->base);
63293c61 HX	385	}
	386	EXPORT_SYMBOL_GPL(crypto_unregister_aead);
	387
caab9461 HX	388	int crypto_register_aeads(struct aead_alg *algs, int count)
	389	{
	390	int i, ret;
	391
	392	for (i = 0; i < count; i++) {
	393	ret = crypto_register_aead(&algs[i]);
	394	if (ret)
	395	goto err;
	396	}
	397
	398	return 0;
	399
	400	err:
	401	for (--i; i >= 0; --i)
	402	crypto_unregister_aead(&algs[i]);
	403
	404	return ret;
	405	}
	406	EXPORT_SYMBOL_GPL(crypto_register_aeads);
	407
	408	void crypto_unregister_aeads(struct aead_alg *algs, int count)
	409	{
	410	int i;
	411
	412	for (i = count - 1; i >= 0; --i)
	413	crypto_unregister_aead(&algs[i]);
	414	}
	415	EXPORT_SYMBOL_GPL(crypto_unregister_aeads);
	416
63293c61 HX	417	int aead_register_instance(struct crypto_template *tmpl,
	418	struct aead_instance *inst)
	419	{
	420	int err;
	421
	422	err = aead_prepare_alg(&inst->alg);
	423	if (err)
	424	return err;
	425
	426	return crypto_register_instance(tmpl, aead_crypto_instance(inst));
	427	}
	428	EXPORT_SYMBOL_GPL(aead_register_instance);
	429
1ae97820 HX	430	MODULE_LICENSE("GPL");
1ae97820 HX	431	MODULE_DESCRIPTION("Authenticated Encryption with Associated Data (AEAD)");