blob: 5a0470e361111fe4ac7c389ca8573c3cc99972d3 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * Scatterlist Cryptographic API.
3 *
4 * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
5 * Copyright (c) 2002 David S. Miller (davem@redhat.com)
Herbert Xu5cb14542005-11-05 16:58:14 +11006 * Copyright (c) 2005 Herbert Xu <herbert@gondor.apana.org.au>
Linus Torvalds1da177e2005-04-16 15:20:36 -07007 *
8 * Portions derived from Cryptoapi, by Alexander Kjeldaas <astor@fast.no>
9 * and Nettle, by Niels Möller.
10 *
11 * This program is free software; you can redistribute it and/or modify it
12 * under the terms of the GNU General Public License as published by the Free
13 * Software Foundation; either version 2 of the License, or (at your option)
14 * any later version.
15 *
16 */
17#ifndef _LINUX_CRYPTO_H
18#define _LINUX_CRYPTO_H
19
Linus Torvalds1da177e2005-04-16 15:20:36 -070020#include <linux/module.h>
21#include <linux/kernel.h>
22#include <linux/types.h>
23#include <linux/list.h>
24#include <linux/string.h>
25#include <asm/page.h>
26
27/*
28 * Algorithm masks and types.
29 */
30#define CRYPTO_ALG_TYPE_MASK 0x000000ff
31#define CRYPTO_ALG_TYPE_CIPHER 0x00000001
32#define CRYPTO_ALG_TYPE_DIGEST 0x00000002
33#define CRYPTO_ALG_TYPE_COMPRESS 0x00000004
34
35/*
36 * Transform masks and values (for crt_flags).
37 */
38#define CRYPTO_TFM_MODE_MASK 0x000000ff
39#define CRYPTO_TFM_REQ_MASK 0x000fff00
40#define CRYPTO_TFM_RES_MASK 0xfff00000
41
42#define CRYPTO_TFM_MODE_ECB 0x00000001
43#define CRYPTO_TFM_MODE_CBC 0x00000002
44#define CRYPTO_TFM_MODE_CFB 0x00000004
45#define CRYPTO_TFM_MODE_CTR 0x00000008
46
47#define CRYPTO_TFM_REQ_WEAK_KEY 0x00000100
Herbert Xu64baf3c2005-09-01 17:43:05 -070048#define CRYPTO_TFM_REQ_MAY_SLEEP 0x00000200
Linus Torvalds1da177e2005-04-16 15:20:36 -070049#define CRYPTO_TFM_RES_WEAK_KEY 0x00100000
50#define CRYPTO_TFM_RES_BAD_KEY_LEN 0x00200000
51#define CRYPTO_TFM_RES_BAD_KEY_SCHED 0x00400000
52#define CRYPTO_TFM_RES_BAD_BLOCK_LEN 0x00800000
53#define CRYPTO_TFM_RES_BAD_FLAGS 0x01000000
54
55/*
56 * Miscellaneous stuff.
57 */
58#define CRYPTO_UNSPEC 0
59#define CRYPTO_MAX_ALG_NAME 64
60
61#define CRYPTO_DIR_ENCRYPT 1
62#define CRYPTO_DIR_DECRYPT 0
63
64struct scatterlist;
Herbert Xu40725182005-07-06 13:51:52 -070065struct crypto_tfm;
66
67struct cipher_desc {
68 struct crypto_tfm *tfm;
69 void (*crfn)(void *ctx, u8 *dst, const u8 *src);
70 unsigned int (*prfn)(const struct cipher_desc *desc, u8 *dst,
71 const u8 *src, unsigned int nbytes);
72 void *info;
73};
Linus Torvalds1da177e2005-04-16 15:20:36 -070074
75/*
76 * Algorithms: modular crypto algorithm implementations, managed
77 * via crypto_register_alg() and crypto_unregister_alg().
78 */
79struct cipher_alg {
80 unsigned int cia_min_keysize;
81 unsigned int cia_max_keysize;
82 int (*cia_setkey)(void *ctx, const u8 *key,
83 unsigned int keylen, u32 *flags);
84 void (*cia_encrypt)(void *ctx, u8 *dst, const u8 *src);
85 void (*cia_decrypt)(void *ctx, u8 *dst, const u8 *src);
Herbert Xu40725182005-07-06 13:51:52 -070086
87 unsigned int (*cia_encrypt_ecb)(const struct cipher_desc *desc,
88 u8 *dst, const u8 *src,
89 unsigned int nbytes);
90 unsigned int (*cia_decrypt_ecb)(const struct cipher_desc *desc,
91 u8 *dst, const u8 *src,
92 unsigned int nbytes);
93 unsigned int (*cia_encrypt_cbc)(const struct cipher_desc *desc,
94 u8 *dst, const u8 *src,
95 unsigned int nbytes);
96 unsigned int (*cia_decrypt_cbc)(const struct cipher_desc *desc,
97 u8 *dst, const u8 *src,
98 unsigned int nbytes);
Linus Torvalds1da177e2005-04-16 15:20:36 -070099};
100
101struct digest_alg {
102 unsigned int dia_digestsize;
103 void (*dia_init)(void *ctx);
104 void (*dia_update)(void *ctx, const u8 *data, unsigned int len);
105 void (*dia_final)(void *ctx, u8 *out);
106 int (*dia_setkey)(void *ctx, const u8 *key,
107 unsigned int keylen, u32 *flags);
108};
109
110struct compress_alg {
111 int (*coa_init)(void *ctx);
112 void (*coa_exit)(void *ctx);
113 int (*coa_compress)(void *ctx, const u8 *src, unsigned int slen,
114 u8 *dst, unsigned int *dlen);
115 int (*coa_decompress)(void *ctx, const u8 *src, unsigned int slen,
116 u8 *dst, unsigned int *dlen);
117};
118
119#define cra_cipher cra_u.cipher
120#define cra_digest cra_u.digest
121#define cra_compress cra_u.compress
122
123struct crypto_alg {
124 struct list_head cra_list;
125 u32 cra_flags;
126 unsigned int cra_blocksize;
127 unsigned int cra_ctxsize;
Herbert Xu95477372005-07-06 13:52:09 -0700128 unsigned int cra_alignmask;
Herbert Xu5cb14542005-11-05 16:58:14 +1100129
130 int cra_priority;
131
Linus Torvalds1da177e2005-04-16 15:20:36 -0700132 const char cra_name[CRYPTO_MAX_ALG_NAME];
Herbert Xu5cb14542005-11-05 16:58:14 +1100133 const char cra_driver_name[CRYPTO_MAX_ALG_NAME];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700134
135 union {
136 struct cipher_alg cipher;
137 struct digest_alg digest;
138 struct compress_alg compress;
139 } cra_u;
140
141 struct module *cra_module;
142};
143
144/*
145 * Algorithm registration interface.
146 */
147int crypto_register_alg(struct crypto_alg *alg);
148int crypto_unregister_alg(struct crypto_alg *alg);
149
150/*
151 * Algorithm query interface.
152 */
153#ifdef CONFIG_CRYPTO
154int crypto_alg_available(const char *name, u32 flags);
155#else
156static inline int crypto_alg_available(const char *name, u32 flags)
157{
158 return 0;
159}
160#endif
161
162/*
163 * Transforms: user-instantiated objects which encapsulate algorithms
164 * and core processing logic. Managed via crypto_alloc_tfm() and
165 * crypto_free_tfm(), as well as the various helpers below.
166 */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700167
168struct cipher_tfm {
169 void *cit_iv;
170 unsigned int cit_ivsize;
171 u32 cit_mode;
172 int (*cit_setkey)(struct crypto_tfm *tfm,
173 const u8 *key, unsigned int keylen);
174 int (*cit_encrypt)(struct crypto_tfm *tfm,
175 struct scatterlist *dst,
176 struct scatterlist *src,
177 unsigned int nbytes);
178 int (*cit_encrypt_iv)(struct crypto_tfm *tfm,
179 struct scatterlist *dst,
180 struct scatterlist *src,
181 unsigned int nbytes, u8 *iv);
182 int (*cit_decrypt)(struct crypto_tfm *tfm,
183 struct scatterlist *dst,
184 struct scatterlist *src,
185 unsigned int nbytes);
186 int (*cit_decrypt_iv)(struct crypto_tfm *tfm,
187 struct scatterlist *dst,
188 struct scatterlist *src,
189 unsigned int nbytes, u8 *iv);
190 void (*cit_xor_block)(u8 *dst, const u8 *src);
191};
192
193struct digest_tfm {
194 void (*dit_init)(struct crypto_tfm *tfm);
195 void (*dit_update)(struct crypto_tfm *tfm,
196 struct scatterlist *sg, unsigned int nsg);
197 void (*dit_final)(struct crypto_tfm *tfm, u8 *out);
198 void (*dit_digest)(struct crypto_tfm *tfm, struct scatterlist *sg,
199 unsigned int nsg, u8 *out);
200 int (*dit_setkey)(struct crypto_tfm *tfm,
201 const u8 *key, unsigned int keylen);
202#ifdef CONFIG_CRYPTO_HMAC
203 void *dit_hmac_block;
204#endif
205};
206
207struct compress_tfm {
208 int (*cot_compress)(struct crypto_tfm *tfm,
209 const u8 *src, unsigned int slen,
210 u8 *dst, unsigned int *dlen);
211 int (*cot_decompress)(struct crypto_tfm *tfm,
212 const u8 *src, unsigned int slen,
213 u8 *dst, unsigned int *dlen);
214};
215
216#define crt_cipher crt_u.cipher
217#define crt_digest crt_u.digest
218#define crt_compress crt_u.compress
219
220struct crypto_tfm {
221
222 u32 crt_flags;
223
224 union {
225 struct cipher_tfm cipher;
226 struct digest_tfm digest;
227 struct compress_tfm compress;
228 } crt_u;
229
230 struct crypto_alg *__crt_alg;
Herbert Xuf10b7892006-01-25 22:34:01 +1100231
232 char __crt_ctx[] __attribute__ ((__aligned__));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700233};
234
235/*
236 * Transform user interface.
237 */
238
239/*
240 * crypto_alloc_tfm() will first attempt to locate an already loaded algorithm.
241 * If that fails and the kernel supports dynamically loadable modules, it
242 * will then attempt to load a module of the same name or alias. A refcount
243 * is grabbed on the algorithm which is then associated with the new transform.
244 *
245 * crypto_free_tfm() frees up the transform and any associated resources,
246 * then drops the refcount on the associated algorithm.
247 */
248struct crypto_tfm *crypto_alloc_tfm(const char *alg_name, u32 tfm_flags);
249void crypto_free_tfm(struct crypto_tfm *tfm);
250
251/*
252 * Transform helpers which query the underlying algorithm.
253 */
254static inline const char *crypto_tfm_alg_name(struct crypto_tfm *tfm)
255{
256 return tfm->__crt_alg->cra_name;
257}
258
259static inline const char *crypto_tfm_alg_modname(struct crypto_tfm *tfm)
260{
261 return module_name(tfm->__crt_alg->cra_module);
262}
263
264static inline u32 crypto_tfm_alg_type(struct crypto_tfm *tfm)
265{
266 return tfm->__crt_alg->cra_flags & CRYPTO_ALG_TYPE_MASK;
267}
268
269static inline unsigned int crypto_tfm_alg_min_keysize(struct crypto_tfm *tfm)
270{
271 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
272 return tfm->__crt_alg->cra_cipher.cia_min_keysize;
273}
274
275static inline unsigned int crypto_tfm_alg_max_keysize(struct crypto_tfm *tfm)
276{
277 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
278 return tfm->__crt_alg->cra_cipher.cia_max_keysize;
279}
280
281static inline unsigned int crypto_tfm_alg_ivsize(struct crypto_tfm *tfm)
282{
283 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
284 return tfm->crt_cipher.cit_ivsize;
285}
286
287static inline unsigned int crypto_tfm_alg_blocksize(struct crypto_tfm *tfm)
288{
289 return tfm->__crt_alg->cra_blocksize;
290}
291
292static inline unsigned int crypto_tfm_alg_digestsize(struct crypto_tfm *tfm)
293{
294 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
295 return tfm->__crt_alg->cra_digest.dia_digestsize;
296}
297
Herbert Xufbdae9f2005-07-06 13:53:29 -0700298static inline unsigned int crypto_tfm_alg_alignmask(struct crypto_tfm *tfm)
299{
300 return tfm->__crt_alg->cra_alignmask;
301}
302
Herbert Xu40725182005-07-06 13:51:52 -0700303static inline void *crypto_tfm_ctx(struct crypto_tfm *tfm)
304{
Herbert Xuf10b7892006-01-25 22:34:01 +1100305 return tfm->__crt_ctx;
306}
307
308static inline unsigned int crypto_tfm_ctx_alignment(void)
309{
310 struct crypto_tfm *tfm;
311 return __alignof__(tfm->__crt_ctx);
Herbert Xu40725182005-07-06 13:51:52 -0700312}
313
Linus Torvalds1da177e2005-04-16 15:20:36 -0700314/*
315 * API wrappers.
316 */
317static inline void crypto_digest_init(struct crypto_tfm *tfm)
318{
319 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
320 tfm->crt_digest.dit_init(tfm);
321}
322
323static inline void crypto_digest_update(struct crypto_tfm *tfm,
324 struct scatterlist *sg,
325 unsigned int nsg)
326{
327 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
328 tfm->crt_digest.dit_update(tfm, sg, nsg);
329}
330
331static inline void crypto_digest_final(struct crypto_tfm *tfm, u8 *out)
332{
333 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
334 tfm->crt_digest.dit_final(tfm, out);
335}
336
337static inline void crypto_digest_digest(struct crypto_tfm *tfm,
338 struct scatterlist *sg,
339 unsigned int nsg, u8 *out)
340{
341 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
342 tfm->crt_digest.dit_digest(tfm, sg, nsg, out);
343}
344
345static inline int crypto_digest_setkey(struct crypto_tfm *tfm,
346 const u8 *key, unsigned int keylen)
347{
348 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_DIGEST);
349 if (tfm->crt_digest.dit_setkey == NULL)
350 return -ENOSYS;
351 return tfm->crt_digest.dit_setkey(tfm, key, keylen);
352}
353
354static inline int crypto_cipher_setkey(struct crypto_tfm *tfm,
355 const u8 *key, unsigned int keylen)
356{
357 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
358 return tfm->crt_cipher.cit_setkey(tfm, key, keylen);
359}
360
361static inline int crypto_cipher_encrypt(struct crypto_tfm *tfm,
362 struct scatterlist *dst,
363 struct scatterlist *src,
364 unsigned int nbytes)
365{
366 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
367 return tfm->crt_cipher.cit_encrypt(tfm, dst, src, nbytes);
368}
369
370static inline int crypto_cipher_encrypt_iv(struct crypto_tfm *tfm,
371 struct scatterlist *dst,
372 struct scatterlist *src,
373 unsigned int nbytes, u8 *iv)
374{
375 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
376 BUG_ON(tfm->crt_cipher.cit_mode == CRYPTO_TFM_MODE_ECB);
377 return tfm->crt_cipher.cit_encrypt_iv(tfm, dst, src, nbytes, iv);
378}
379
380static inline int crypto_cipher_decrypt(struct crypto_tfm *tfm,
381 struct scatterlist *dst,
382 struct scatterlist *src,
383 unsigned int nbytes)
384{
385 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
386 return tfm->crt_cipher.cit_decrypt(tfm, dst, src, nbytes);
387}
388
389static inline int crypto_cipher_decrypt_iv(struct crypto_tfm *tfm,
390 struct scatterlist *dst,
391 struct scatterlist *src,
392 unsigned int nbytes, u8 *iv)
393{
394 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
395 BUG_ON(tfm->crt_cipher.cit_mode == CRYPTO_TFM_MODE_ECB);
396 return tfm->crt_cipher.cit_decrypt_iv(tfm, dst, src, nbytes, iv);
397}
398
399static inline void crypto_cipher_set_iv(struct crypto_tfm *tfm,
400 const u8 *src, unsigned int len)
401{
402 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
403 memcpy(tfm->crt_cipher.cit_iv, src, len);
404}
405
406static inline void crypto_cipher_get_iv(struct crypto_tfm *tfm,
407 u8 *dst, unsigned int len)
408{
409 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_CIPHER);
410 memcpy(dst, tfm->crt_cipher.cit_iv, len);
411}
412
413static inline int crypto_comp_compress(struct crypto_tfm *tfm,
414 const u8 *src, unsigned int slen,
415 u8 *dst, unsigned int *dlen)
416{
417 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_COMPRESS);
418 return tfm->crt_compress.cot_compress(tfm, src, slen, dst, dlen);
419}
420
421static inline int crypto_comp_decompress(struct crypto_tfm *tfm,
422 const u8 *src, unsigned int slen,
423 u8 *dst, unsigned int *dlen)
424{
425 BUG_ON(crypto_tfm_alg_type(tfm) != CRYPTO_ALG_TYPE_COMPRESS);
426 return tfm->crt_compress.cot_decompress(tfm, src, slen, dst, dlen);
427}
428
429/*
430 * HMAC support.
431 */
432#ifdef CONFIG_CRYPTO_HMAC
433void crypto_hmac_init(struct crypto_tfm *tfm, u8 *key, unsigned int *keylen);
434void crypto_hmac_update(struct crypto_tfm *tfm,
435 struct scatterlist *sg, unsigned int nsg);
436void crypto_hmac_final(struct crypto_tfm *tfm, u8 *key,
437 unsigned int *keylen, u8 *out);
438void crypto_hmac(struct crypto_tfm *tfm, u8 *key, unsigned int *keylen,
439 struct scatterlist *sg, unsigned int nsg, u8 *out);
440#endif /* CONFIG_CRYPTO_HMAC */
441
442#endif /* _LINUX_CRYPTO_H */
443