blob: 17c05531dfd1752234eb9b6835f848b12ed07817 [file] [log] [blame]
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +03001/*
2 * Glue Code for assembler optimized version of Blowfish
3 *
Jussi Kivilinna3d387ef2013-06-08 12:17:42 +03004 * Copyright (c) 2011 Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +03005 *
Jussi Kivilinnaa071d062011-09-23 19:51:00 +03006 * CBC & ECB parts based on code (crypto/cbc.c,ecb.c) by:
7 * Copyright (c) 2006 Herbert Xu <herbert@gondor.apana.org.au>
8 * CTR part based on code (crypto/ctr.c) by:
9 * (C) Copyright IBM Corp. 2007 - Joy Latten <latten@us.ibm.com>
10 *
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +030011 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
15 *
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 * GNU General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
24 * USA
25 *
26 */
27
Jussi Kivilinna4c584642011-12-20 12:20:21 +020028#include <asm/processor.h>
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +030029#include <crypto/blowfish.h>
30#include <linux/crypto.h>
31#include <linux/init.h>
32#include <linux/module.h>
33#include <linux/types.h>
34#include <crypto/algapi.h>
35
36/* regular block cipher functions */
37asmlinkage void __blowfish_enc_blk(struct bf_ctx *ctx, u8 *dst, const u8 *src,
38 bool xor);
39asmlinkage void blowfish_dec_blk(struct bf_ctx *ctx, u8 *dst, const u8 *src);
40
41/* 4-way parallel cipher functions */
42asmlinkage void __blowfish_enc_blk_4way(struct bf_ctx *ctx, u8 *dst,
43 const u8 *src, bool xor);
44asmlinkage void blowfish_dec_blk_4way(struct bf_ctx *ctx, u8 *dst,
45 const u8 *src);
Jussi Kivilinna3d387ef2013-06-08 12:17:42 +030046
47static inline void blowfish_enc_blk(struct bf_ctx *ctx, u8 *dst, const u8 *src)
48{
49 __blowfish_enc_blk(ctx, dst, src, false);
50}
51
52static inline void blowfish_enc_blk_xor(struct bf_ctx *ctx, u8 *dst,
53 const u8 *src)
54{
55 __blowfish_enc_blk(ctx, dst, src, true);
56}
57
58static inline void blowfish_enc_blk_4way(struct bf_ctx *ctx, u8 *dst,
59 const u8 *src)
60{
61 __blowfish_enc_blk_4way(ctx, dst, src, false);
62}
63
64static inline void blowfish_enc_blk_xor_4way(struct bf_ctx *ctx, u8 *dst,
65 const u8 *src)
66{
67 __blowfish_enc_blk_4way(ctx, dst, src, true);
68}
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +030069
70static void blowfish_encrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
71{
72 blowfish_enc_blk(crypto_tfm_ctx(tfm), dst, src);
73}
74
75static void blowfish_decrypt(struct crypto_tfm *tfm, u8 *dst, const u8 *src)
76{
77 blowfish_dec_blk(crypto_tfm_ctx(tfm), dst, src);
78}
79
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +030080static int ecb_crypt(struct blkcipher_desc *desc, struct blkcipher_walk *walk,
81 void (*fn)(struct bf_ctx *, u8 *, const u8 *),
82 void (*fn_4way)(struct bf_ctx *, u8 *, const u8 *))
83{
84 struct bf_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
85 unsigned int bsize = BF_BLOCK_SIZE;
86 unsigned int nbytes;
87 int err;
88
89 err = blkcipher_walk_virt(desc, walk);
90
91 while ((nbytes = walk->nbytes)) {
92 u8 *wsrc = walk->src.virt.addr;
93 u8 *wdst = walk->dst.virt.addr;
94
95 /* Process four block batch */
96 if (nbytes >= bsize * 4) {
97 do {
98 fn_4way(ctx, wdst, wsrc);
99
100 wsrc += bsize * 4;
101 wdst += bsize * 4;
102 nbytes -= bsize * 4;
103 } while (nbytes >= bsize * 4);
104
105 if (nbytes < bsize)
106 goto done;
107 }
108
109 /* Handle leftovers */
110 do {
111 fn(ctx, wdst, wsrc);
112
113 wsrc += bsize;
114 wdst += bsize;
115 nbytes -= bsize;
116 } while (nbytes >= bsize);
117
118done:
119 err = blkcipher_walk_done(desc, walk, nbytes);
120 }
121
122 return err;
123}
124
125static int ecb_encrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
126 struct scatterlist *src, unsigned int nbytes)
127{
128 struct blkcipher_walk walk;
129
130 blkcipher_walk_init(&walk, dst, src, nbytes);
131 return ecb_crypt(desc, &walk, blowfish_enc_blk, blowfish_enc_blk_4way);
132}
133
134static int ecb_decrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
135 struct scatterlist *src, unsigned int nbytes)
136{
137 struct blkcipher_walk walk;
138
139 blkcipher_walk_init(&walk, dst, src, nbytes);
140 return ecb_crypt(desc, &walk, blowfish_dec_blk, blowfish_dec_blk_4way);
141}
142
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300143static unsigned int __cbc_encrypt(struct blkcipher_desc *desc,
144 struct blkcipher_walk *walk)
145{
146 struct bf_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
147 unsigned int bsize = BF_BLOCK_SIZE;
148 unsigned int nbytes = walk->nbytes;
149 u64 *src = (u64 *)walk->src.virt.addr;
150 u64 *dst = (u64 *)walk->dst.virt.addr;
151 u64 *iv = (u64 *)walk->iv;
152
153 do {
154 *dst = *src ^ *iv;
155 blowfish_enc_blk(ctx, (u8 *)dst, (u8 *)dst);
156 iv = dst;
157
158 src += 1;
159 dst += 1;
160 nbytes -= bsize;
161 } while (nbytes >= bsize);
162
163 *(u64 *)walk->iv = *iv;
164 return nbytes;
165}
166
167static int cbc_encrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
168 struct scatterlist *src, unsigned int nbytes)
169{
170 struct blkcipher_walk walk;
171 int err;
172
173 blkcipher_walk_init(&walk, dst, src, nbytes);
174 err = blkcipher_walk_virt(desc, &walk);
175
176 while ((nbytes = walk.nbytes)) {
177 nbytes = __cbc_encrypt(desc, &walk);
178 err = blkcipher_walk_done(desc, &walk, nbytes);
179 }
180
181 return err;
182}
183
184static unsigned int __cbc_decrypt(struct blkcipher_desc *desc,
185 struct blkcipher_walk *walk)
186{
187 struct bf_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
188 unsigned int bsize = BF_BLOCK_SIZE;
189 unsigned int nbytes = walk->nbytes;
190 u64 *src = (u64 *)walk->src.virt.addr;
191 u64 *dst = (u64 *)walk->dst.virt.addr;
192 u64 ivs[4 - 1];
193 u64 last_iv;
194
195 /* Start of the last block. */
196 src += nbytes / bsize - 1;
197 dst += nbytes / bsize - 1;
198
199 last_iv = *src;
200
201 /* Process four block batch */
202 if (nbytes >= bsize * 4) {
203 do {
204 nbytes -= bsize * 4 - bsize;
205 src -= 4 - 1;
206 dst -= 4 - 1;
207
208 ivs[0] = src[0];
209 ivs[1] = src[1];
210 ivs[2] = src[2];
211
212 blowfish_dec_blk_4way(ctx, (u8 *)dst, (u8 *)src);
213
214 dst[1] ^= ivs[0];
215 dst[2] ^= ivs[1];
216 dst[3] ^= ivs[2];
217
218 nbytes -= bsize;
219 if (nbytes < bsize)
220 goto done;
221
222 *dst ^= *(src - 1);
223 src -= 1;
224 dst -= 1;
225 } while (nbytes >= bsize * 4);
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300226 }
227
228 /* Handle leftovers */
229 for (;;) {
230 blowfish_dec_blk(ctx, (u8 *)dst, (u8 *)src);
231
232 nbytes -= bsize;
233 if (nbytes < bsize)
234 break;
235
236 *dst ^= *(src - 1);
237 src -= 1;
238 dst -= 1;
239 }
240
241done:
242 *dst ^= *(u64 *)walk->iv;
243 *(u64 *)walk->iv = last_iv;
244
245 return nbytes;
246}
247
248static int cbc_decrypt(struct blkcipher_desc *desc, struct scatterlist *dst,
249 struct scatterlist *src, unsigned int nbytes)
250{
251 struct blkcipher_walk walk;
252 int err;
253
254 blkcipher_walk_init(&walk, dst, src, nbytes);
255 err = blkcipher_walk_virt(desc, &walk);
256
257 while ((nbytes = walk.nbytes)) {
258 nbytes = __cbc_decrypt(desc, &walk);
259 err = blkcipher_walk_done(desc, &walk, nbytes);
260 }
261
262 return err;
263}
264
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300265static void ctr_crypt_final(struct bf_ctx *ctx, struct blkcipher_walk *walk)
266{
267 u8 *ctrblk = walk->iv;
268 u8 keystream[BF_BLOCK_SIZE];
269 u8 *src = walk->src.virt.addr;
270 u8 *dst = walk->dst.virt.addr;
271 unsigned int nbytes = walk->nbytes;
272
273 blowfish_enc_blk(ctx, keystream, ctrblk);
274 crypto_xor(keystream, src, nbytes);
275 memcpy(dst, keystream, nbytes);
276
277 crypto_inc(ctrblk, BF_BLOCK_SIZE);
278}
279
280static unsigned int __ctr_crypt(struct blkcipher_desc *desc,
281 struct blkcipher_walk *walk)
282{
283 struct bf_ctx *ctx = crypto_blkcipher_ctx(desc->tfm);
284 unsigned int bsize = BF_BLOCK_SIZE;
285 unsigned int nbytes = walk->nbytes;
286 u64 *src = (u64 *)walk->src.virt.addr;
287 u64 *dst = (u64 *)walk->dst.virt.addr;
288 u64 ctrblk = be64_to_cpu(*(__be64 *)walk->iv);
289 __be64 ctrblocks[4];
290
291 /* Process four block batch */
292 if (nbytes >= bsize * 4) {
293 do {
294 if (dst != src) {
295 dst[0] = src[0];
296 dst[1] = src[1];
297 dst[2] = src[2];
298 dst[3] = src[3];
299 }
300
301 /* create ctrblks for parallel encrypt */
302 ctrblocks[0] = cpu_to_be64(ctrblk++);
303 ctrblocks[1] = cpu_to_be64(ctrblk++);
304 ctrblocks[2] = cpu_to_be64(ctrblk++);
305 ctrblocks[3] = cpu_to_be64(ctrblk++);
306
307 blowfish_enc_blk_xor_4way(ctx, (u8 *)dst,
308 (u8 *)ctrblocks);
309
310 src += 4;
311 dst += 4;
312 } while ((nbytes -= bsize * 4) >= bsize * 4);
313
314 if (nbytes < bsize)
315 goto done;
316 }
317
318 /* Handle leftovers */
319 do {
320 if (dst != src)
321 *dst = *src;
322
323 ctrblocks[0] = cpu_to_be64(ctrblk++);
324
325 blowfish_enc_blk_xor(ctx, (u8 *)dst, (u8 *)ctrblocks);
326
327 src += 1;
328 dst += 1;
329 } while ((nbytes -= bsize) >= bsize);
330
331done:
332 *(__be64 *)walk->iv = cpu_to_be64(ctrblk);
333 return nbytes;
334}
335
336static int ctr_crypt(struct blkcipher_desc *desc, struct scatterlist *dst,
337 struct scatterlist *src, unsigned int nbytes)
338{
339 struct blkcipher_walk walk;
340 int err;
341
342 blkcipher_walk_init(&walk, dst, src, nbytes);
343 err = blkcipher_walk_virt_block(desc, &walk, BF_BLOCK_SIZE);
344
345 while ((nbytes = walk.nbytes) >= BF_BLOCK_SIZE) {
346 nbytes = __ctr_crypt(desc, &walk);
347 err = blkcipher_walk_done(desc, &walk, nbytes);
348 }
349
350 if (walk.nbytes) {
351 ctr_crypt_final(crypto_blkcipher_ctx(desc->tfm), &walk);
352 err = blkcipher_walk_done(desc, &walk, 0);
353 }
354
355 return err;
356}
357
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200358static struct crypto_alg bf_algs[4] = { {
359 .cra_name = "blowfish",
360 .cra_driver_name = "blowfish-asm",
361 .cra_priority = 200,
362 .cra_flags = CRYPTO_ALG_TYPE_CIPHER,
363 .cra_blocksize = BF_BLOCK_SIZE,
364 .cra_ctxsize = sizeof(struct bf_ctx),
Jussi Kivilinna919e2c32012-02-17 22:48:58 +0200365 .cra_alignmask = 0,
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200366 .cra_module = THIS_MODULE,
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200367 .cra_u = {
368 .cipher = {
369 .cia_min_keysize = BF_MIN_KEY_SIZE,
370 .cia_max_keysize = BF_MAX_KEY_SIZE,
371 .cia_setkey = blowfish_setkey,
372 .cia_encrypt = blowfish_encrypt,
373 .cia_decrypt = blowfish_decrypt,
374 }
375 }
376}, {
377 .cra_name = "ecb(blowfish)",
378 .cra_driver_name = "ecb-blowfish-asm",
379 .cra_priority = 300,
380 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
381 .cra_blocksize = BF_BLOCK_SIZE,
382 .cra_ctxsize = sizeof(struct bf_ctx),
383 .cra_alignmask = 0,
384 .cra_type = &crypto_blkcipher_type,
385 .cra_module = THIS_MODULE,
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200386 .cra_u = {
387 .blkcipher = {
388 .min_keysize = BF_MIN_KEY_SIZE,
389 .max_keysize = BF_MAX_KEY_SIZE,
390 .setkey = blowfish_setkey,
391 .encrypt = ecb_encrypt,
392 .decrypt = ecb_decrypt,
393 },
394 },
395}, {
396 .cra_name = "cbc(blowfish)",
397 .cra_driver_name = "cbc-blowfish-asm",
398 .cra_priority = 300,
399 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
400 .cra_blocksize = BF_BLOCK_SIZE,
401 .cra_ctxsize = sizeof(struct bf_ctx),
402 .cra_alignmask = 0,
403 .cra_type = &crypto_blkcipher_type,
404 .cra_module = THIS_MODULE,
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200405 .cra_u = {
406 .blkcipher = {
407 .min_keysize = BF_MIN_KEY_SIZE,
408 .max_keysize = BF_MAX_KEY_SIZE,
409 .ivsize = BF_BLOCK_SIZE,
410 .setkey = blowfish_setkey,
411 .encrypt = cbc_encrypt,
412 .decrypt = cbc_decrypt,
413 },
414 },
415}, {
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300416 .cra_name = "ctr(blowfish)",
417 .cra_driver_name = "ctr-blowfish-asm",
418 .cra_priority = 300,
419 .cra_flags = CRYPTO_ALG_TYPE_BLKCIPHER,
Jussi Kivilinnaa516eba2011-10-10 12:32:15 +0300420 .cra_blocksize = 1,
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300421 .cra_ctxsize = sizeof(struct bf_ctx),
422 .cra_alignmask = 0,
423 .cra_type = &crypto_blkcipher_type,
424 .cra_module = THIS_MODULE,
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300425 .cra_u = {
426 .blkcipher = {
427 .min_keysize = BF_MIN_KEY_SIZE,
428 .max_keysize = BF_MAX_KEY_SIZE,
429 .ivsize = BF_BLOCK_SIZE,
430 .setkey = blowfish_setkey,
431 .encrypt = ctr_crypt,
432 .decrypt = ctr_crypt,
433 },
434 },
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200435} };
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300436
Jussi Kivilinna4c584642011-12-20 12:20:21 +0200437static bool is_blacklisted_cpu(void)
438{
439 if (boot_cpu_data.x86_vendor != X86_VENDOR_INTEL)
440 return false;
441
442 if (boot_cpu_data.x86 == 0x0f) {
443 /*
444 * On Pentium 4, blowfish-x86_64 is slower than generic C
445 * implementation because use of 64bit rotates (which are really
446 * slow on P4). Therefore blacklist P4s.
447 */
448 return true;
449 }
450
451 return false;
452}
453
454static int force;
455module_param(force, int, 0);
456MODULE_PARM_DESC(force, "Force module load, ignore CPU blacklist");
457
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300458static int __init init(void)
459{
Jussi Kivilinna4c584642011-12-20 12:20:21 +0200460 if (!force && is_blacklisted_cpu()) {
461 printk(KERN_INFO
462 "blowfish-x86_64: performance on this CPU "
463 "would be suboptimal: disabling "
464 "blowfish-x86_64.\n");
465 return -ENODEV;
466 }
467
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200468 return crypto_register_algs(bf_algs, ARRAY_SIZE(bf_algs));
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300469}
470
471static void __exit fini(void)
472{
Jussi Kivilinnad4332082012-02-17 22:48:48 +0200473 crypto_unregister_algs(bf_algs, ARRAY_SIZE(bf_algs));
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300474}
475
476module_init(init);
477module_exit(fini);
478
479MODULE_LICENSE("GPL");
480MODULE_DESCRIPTION("Blowfish Cipher Algorithm, asm optimized");
Kees Cook5d26a102014-11-20 17:05:53 -0800481MODULE_ALIAS_CRYPTO("blowfish");
482MODULE_ALIAS_CRYPTO("blowfish-asm");