Blame view

crypto/skcipher.c 24.8 KB
2874c5fd2   Thomas Gleixner   treewide: Replace...
1
  // SPDX-License-Identifier: GPL-2.0-or-later
7a7ffe65c   Herbert Xu   crypto: skcipher ...
2
3
4
5
6
7
8
9
  /*
   * Symmetric key cipher operations.
   *
   * Generic encrypt/decrypt wrapper for ciphers, handles operations across
   * multiple page boundaries by using temporary blocks.  In user context,
   * the kernel is given a chance to schedule us once per page.
   *
   * Copyright (c) 2015 Herbert Xu <herbert@gondor.apana.org.au>
7a7ffe65c   Herbert Xu   crypto: skcipher ...
10
   */
b286d8b1a   Herbert Xu   crypto: skcipher ...
11
  #include <crypto/internal/aead.h>
7a7ffe65c   Herbert Xu   crypto: skcipher ...
12
  #include <crypto/internal/skcipher.h>
b286d8b1a   Herbert Xu   crypto: skcipher ...
13
  #include <crypto/scatterwalk.h>
7a7ffe65c   Herbert Xu   crypto: skcipher ...
14
  #include <linux/bug.h>
4e6c3df4d   Herbert Xu   crypto: skcipher ...
15
  #include <linux/cryptouser.h>
d8c34b949   Gideon Israel Dsouza   crypto: Replaced ...
16
  #include <linux/compiler.h>
b286d8b1a   Herbert Xu   crypto: skcipher ...
17
  #include <linux/list.h>
7a7ffe65c   Herbert Xu   crypto: skcipher ...
18
  #include <linux/module.h>
4e6c3df4d   Herbert Xu   crypto: skcipher ...
19
20
21
  #include <linux/rtnetlink.h>
  #include <linux/seq_file.h>
  #include <net/netlink.h>
7a7ffe65c   Herbert Xu   crypto: skcipher ...
22
23
  
  #include "internal.h"
b286d8b1a   Herbert Xu   crypto: skcipher ...
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
  enum {
  	SKCIPHER_WALK_PHYS = 1 << 0,
  	SKCIPHER_WALK_SLOW = 1 << 1,
  	SKCIPHER_WALK_COPY = 1 << 2,
  	SKCIPHER_WALK_DIFF = 1 << 3,
  	SKCIPHER_WALK_SLEEP = 1 << 4,
  };
  
  struct skcipher_walk_buffer {
  	struct list_head entry;
  	struct scatter_walk dst;
  	unsigned int len;
  	u8 *data;
  	u8 buffer[];
  };
  
  static int skcipher_walk_next(struct skcipher_walk *walk);
  
  static inline void skcipher_unmap(struct scatter_walk *walk, void *vaddr)
  {
  	if (PageHighMem(scatterwalk_page(walk)))
  		kunmap_atomic(vaddr);
  }
  
  static inline void *skcipher_map(struct scatter_walk *walk)
  {
  	struct page *page = scatterwalk_page(walk);
  
  	return (PageHighMem(page) ? kmap_atomic(page) : page_address(page)) +
  	       offset_in_page(walk->offset);
  }
  
  static inline void skcipher_map_src(struct skcipher_walk *walk)
  {
  	walk->src.virt.addr = skcipher_map(&walk->in);
  }
  
  static inline void skcipher_map_dst(struct skcipher_walk *walk)
  {
  	walk->dst.virt.addr = skcipher_map(&walk->out);
  }
  
  static inline void skcipher_unmap_src(struct skcipher_walk *walk)
  {
  	skcipher_unmap(&walk->in, walk->src.virt.addr);
  }
  
  static inline void skcipher_unmap_dst(struct skcipher_walk *walk)
  {
  	skcipher_unmap(&walk->out, walk->dst.virt.addr);
  }
  
  static inline gfp_t skcipher_walk_gfp(struct skcipher_walk *walk)
  {
  	return walk->flags & SKCIPHER_WALK_SLEEP ? GFP_KERNEL : GFP_ATOMIC;
  }
  
  /* Get a spot of the specified length that does not straddle a page.
   * The caller needs to ensure that there is enough space for this operation.
   */
  static inline u8 *skcipher_get_spot(u8 *start, unsigned int len)
  {
  	u8 *end_page = (u8 *)(((unsigned long)(start + len - 1)) & PAGE_MASK);
  
  	return max(start, end_page);
  }
0ba3c026e   Herbert Xu   crypto: skcipher ...
90
  static int skcipher_done_slow(struct skcipher_walk *walk, unsigned int bsize)
b286d8b1a   Herbert Xu   crypto: skcipher ...
91
92
93
94
95
96
97
  {
  	u8 *addr;
  
  	addr = (u8 *)ALIGN((unsigned long)walk->buffer, walk->alignmask + 1);
  	addr = skcipher_get_spot(addr, bsize);
  	scatterwalk_copychunks(addr, &walk->out, bsize,
  			       (walk->flags & SKCIPHER_WALK_PHYS) ? 2 : 1);
0ba3c026e   Herbert Xu   crypto: skcipher ...
98
  	return 0;
b286d8b1a   Herbert Xu   crypto: skcipher ...
99
100
101
102
  }
  
  int skcipher_walk_done(struct skcipher_walk *walk, int err)
  {
0ba3c026e   Herbert Xu   crypto: skcipher ...
103
104
  	unsigned int n = walk->nbytes;
  	unsigned int nbytes = 0;
8088d3dd4   Eric Biggers   crypto: skcipher ...
105

0ba3c026e   Herbert Xu   crypto: skcipher ...
106
  	if (!n)
8088d3dd4   Eric Biggers   crypto: skcipher ...
107
  		goto finish;
0ba3c026e   Herbert Xu   crypto: skcipher ...
108
109
110
111
  	if (likely(err >= 0)) {
  		n -= err;
  		nbytes = walk->total - n;
  	}
8088d3dd4   Eric Biggers   crypto: skcipher ...
112
113
114
115
116
  
  	if (likely(!(walk->flags & (SKCIPHER_WALK_PHYS |
  				    SKCIPHER_WALK_SLOW |
  				    SKCIPHER_WALK_COPY |
  				    SKCIPHER_WALK_DIFF)))) {
b286d8b1a   Herbert Xu   crypto: skcipher ...
117
118
119
120
121
122
123
124
125
126
  unmap_src:
  		skcipher_unmap_src(walk);
  	} else if (walk->flags & SKCIPHER_WALK_DIFF) {
  		skcipher_unmap_dst(walk);
  		goto unmap_src;
  	} else if (walk->flags & SKCIPHER_WALK_COPY) {
  		skcipher_map_dst(walk);
  		memcpy(walk->dst.virt.addr, walk->page, n);
  		skcipher_unmap_dst(walk);
  	} else if (unlikely(walk->flags & SKCIPHER_WALK_SLOW)) {
0ba3c026e   Herbert Xu   crypto: skcipher ...
127
  		if (err > 0) {
dcaca01a4   Eric Biggers   crypto: skcipher ...
128
129
130
131
132
133
  			/*
  			 * Didn't process all bytes.  Either the algorithm is
  			 * broken, or this was the last step and it turned out
  			 * the message wasn't evenly divisible into blocks but
  			 * the algorithm requires it.
  			 */
b286d8b1a   Herbert Xu   crypto: skcipher ...
134
  			err = -EINVAL;
0ba3c026e   Herbert Xu   crypto: skcipher ...
135
136
137
  			nbytes = 0;
  		} else
  			n = skcipher_done_slow(walk, n);
b286d8b1a   Herbert Xu   crypto: skcipher ...
138
  	}
0ba3c026e   Herbert Xu   crypto: skcipher ...
139
140
141
142
143
  	if (err > 0)
  		err = 0;
  
  	walk->total = nbytes;
  	walk->nbytes = 0;
b286d8b1a   Herbert Xu   crypto: skcipher ...
144
145
  	scatterwalk_advance(&walk->in, n);
  	scatterwalk_advance(&walk->out, n);
0ba3c026e   Herbert Xu   crypto: skcipher ...
146
147
  	scatterwalk_done(&walk->in, 0, nbytes);
  	scatterwalk_done(&walk->out, 1, nbytes);
b286d8b1a   Herbert Xu   crypto: skcipher ...
148

0ba3c026e   Herbert Xu   crypto: skcipher ...
149
  	if (nbytes) {
b286d8b1a   Herbert Xu   crypto: skcipher ...
150
151
152
153
  		crypto_yield(walk->flags & SKCIPHER_WALK_SLEEP ?
  			     CRYPTO_TFM_REQ_MAY_SLEEP : 0);
  		return skcipher_walk_next(walk);
  	}
0ba3c026e   Herbert Xu   crypto: skcipher ...
154
  finish:
b286d8b1a   Herbert Xu   crypto: skcipher ...
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
  	/* Short-circuit for the common/fast path. */
  	if (!((unsigned long)walk->buffer | (unsigned long)walk->page))
  		goto out;
  
  	if (walk->flags & SKCIPHER_WALK_PHYS)
  		goto out;
  
  	if (walk->iv != walk->oiv)
  		memcpy(walk->oiv, walk->iv, walk->ivsize);
  	if (walk->buffer != walk->page)
  		kfree(walk->buffer);
  	if (walk->page)
  		free_page((unsigned long)walk->page);
  
  out:
  	return err;
  }
  EXPORT_SYMBOL_GPL(skcipher_walk_done);
  
  void skcipher_walk_complete(struct skcipher_walk *walk, int err)
  {
  	struct skcipher_walk_buffer *p, *tmp;
  
  	list_for_each_entry_safe(p, tmp, &walk->buffers, entry) {
  		u8 *data;
  
  		if (err)
  			goto done;
  
  		data = p->data;
  		if (!data) {
  			data = PTR_ALIGN(&p->buffer[0], walk->alignmask + 1);
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
187
  			data = skcipher_get_spot(data, walk->stride);
b286d8b1a   Herbert Xu   crypto: skcipher ...
188
189
190
  		}
  
  		scatterwalk_copychunks(data, &p->dst, p->len, 1);
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
191
  		if (offset_in_page(p->data) + p->len + walk->stride >
b286d8b1a   Herbert Xu   crypto: skcipher ...
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
  		    PAGE_SIZE)
  			free_page((unsigned long)p->data);
  
  done:
  		list_del(&p->entry);
  		kfree(p);
  	}
  
  	if (!err && walk->iv != walk->oiv)
  		memcpy(walk->oiv, walk->iv, walk->ivsize);
  	if (walk->buffer != walk->page)
  		kfree(walk->buffer);
  	if (walk->page)
  		free_page((unsigned long)walk->page);
  }
  EXPORT_SYMBOL_GPL(skcipher_walk_complete);
  
  static void skcipher_queue_write(struct skcipher_walk *walk,
  				 struct skcipher_walk_buffer *p)
  {
  	p->dst = walk->out;
  	list_add_tail(&p->entry, &walk->buffers);
  }
  
  static int skcipher_next_slow(struct skcipher_walk *walk, unsigned int bsize)
  {
  	bool phys = walk->flags & SKCIPHER_WALK_PHYS;
  	unsigned alignmask = walk->alignmask;
  	struct skcipher_walk_buffer *p;
  	unsigned a;
  	unsigned n;
  	u8 *buffer;
  	void *v;
  
  	if (!phys) {
18e615ad8   Ard Biesheuvel   crypto: skcipher ...
227
228
229
  		if (!walk->buffer)
  			walk->buffer = walk->page;
  		buffer = walk->buffer;
b286d8b1a   Herbert Xu   crypto: skcipher ...
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
  		if (buffer)
  			goto ok;
  	}
  
  	/* Start with the minimum alignment of kmalloc. */
  	a = crypto_tfm_ctx_alignment() - 1;
  	n = bsize;
  
  	if (phys) {
  		/* Calculate the minimum alignment of p->buffer. */
  		a &= (sizeof(*p) ^ (sizeof(*p) - 1)) >> 1;
  		n += sizeof(*p);
  	}
  
  	/* Minimum size to align p->buffer by alignmask. */
  	n += alignmask & ~a;
  
  	/* Minimum size to ensure p->buffer does not straddle a page. */
  	n += (bsize - 1) & ~(alignmask | a);
  
  	v = kzalloc(n, skcipher_walk_gfp(walk));
  	if (!v)
  		return skcipher_walk_done(walk, -ENOMEM);
  
  	if (phys) {
  		p = v;
  		p->len = bsize;
  		skcipher_queue_write(walk, p);
  		buffer = p->buffer;
  	} else {
  		walk->buffer = v;
  		buffer = v;
  	}
  
  ok:
  	walk->dst.virt.addr = PTR_ALIGN(buffer, alignmask + 1);
  	walk->dst.virt.addr = skcipher_get_spot(walk->dst.virt.addr, bsize);
  	walk->src.virt.addr = walk->dst.virt.addr;
  
  	scatterwalk_copychunks(walk->src.virt.addr, &walk->in, bsize, 0);
  
  	walk->nbytes = bsize;
  	walk->flags |= SKCIPHER_WALK_SLOW;
  
  	return 0;
  }
  
  static int skcipher_next_copy(struct skcipher_walk *walk)
  {
  	struct skcipher_walk_buffer *p;
  	u8 *tmp = walk->page;
  
  	skcipher_map_src(walk);
  	memcpy(tmp, walk->src.virt.addr, walk->nbytes);
  	skcipher_unmap_src(walk);
  
  	walk->src.virt.addr = tmp;
  	walk->dst.virt.addr = tmp;
  
  	if (!(walk->flags & SKCIPHER_WALK_PHYS))
  		return 0;
  
  	p = kmalloc(sizeof(*p), skcipher_walk_gfp(walk));
  	if (!p)
  		return -ENOMEM;
  
  	p->data = walk->page;
  	p->len = walk->nbytes;
  	skcipher_queue_write(walk, p);
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
299
  	if (offset_in_page(walk->page) + walk->nbytes + walk->stride >
b286d8b1a   Herbert Xu   crypto: skcipher ...
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
  	    PAGE_SIZE)
  		walk->page = NULL;
  	else
  		walk->page += walk->nbytes;
  
  	return 0;
  }
  
  static int skcipher_next_fast(struct skcipher_walk *walk)
  {
  	unsigned long diff;
  
  	walk->src.phys.page = scatterwalk_page(&walk->in);
  	walk->src.phys.offset = offset_in_page(walk->in.offset);
  	walk->dst.phys.page = scatterwalk_page(&walk->out);
  	walk->dst.phys.offset = offset_in_page(walk->out.offset);
  
  	if (walk->flags & SKCIPHER_WALK_PHYS)
  		return 0;
  
  	diff = walk->src.phys.offset - walk->dst.phys.offset;
  	diff |= walk->src.virt.page - walk->dst.virt.page;
  
  	skcipher_map_src(walk);
  	walk->dst.virt.addr = walk->src.virt.addr;
  
  	if (diff) {
  		walk->flags |= SKCIPHER_WALK_DIFF;
  		skcipher_map_dst(walk);
  	}
  
  	return 0;
  }
  
  static int skcipher_walk_next(struct skcipher_walk *walk)
  {
  	unsigned int bsize;
  	unsigned int n;
  	int err;
  
  	walk->flags &= ~(SKCIPHER_WALK_SLOW | SKCIPHER_WALK_COPY |
  			 SKCIPHER_WALK_DIFF);
  
  	n = walk->total;
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
344
  	bsize = min(walk->stride, max(n, walk->blocksize));
b286d8b1a   Herbert Xu   crypto: skcipher ...
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
  	n = scatterwalk_clamp(&walk->in, n);
  	n = scatterwalk_clamp(&walk->out, n);
  
  	if (unlikely(n < bsize)) {
  		if (unlikely(walk->total < walk->blocksize))
  			return skcipher_walk_done(walk, -EINVAL);
  
  slow_path:
  		err = skcipher_next_slow(walk, bsize);
  		goto set_phys_lowmem;
  	}
  
  	if (unlikely((walk->in.offset | walk->out.offset) & walk->alignmask)) {
  		if (!walk->page) {
  			gfp_t gfp = skcipher_walk_gfp(walk);
  
  			walk->page = (void *)__get_free_page(gfp);
  			if (!walk->page)
  				goto slow_path;
  		}
  
  		walk->nbytes = min_t(unsigned, n,
  				     PAGE_SIZE - offset_in_page(walk->page));
  		walk->flags |= SKCIPHER_WALK_COPY;
  		err = skcipher_next_copy(walk);
  		goto set_phys_lowmem;
  	}
  
  	walk->nbytes = n;
  
  	return skcipher_next_fast(walk);
  
  set_phys_lowmem:
  	if (!err && (walk->flags & SKCIPHER_WALK_PHYS)) {
  		walk->src.phys.page = virt_to_page(walk->src.virt.addr);
  		walk->dst.phys.page = virt_to_page(walk->dst.virt.addr);
  		walk->src.phys.offset &= PAGE_SIZE - 1;
  		walk->dst.phys.offset &= PAGE_SIZE - 1;
  	}
  	return err;
  }
b286d8b1a   Herbert Xu   crypto: skcipher ...
386
387
388
389
390
391
  
  static int skcipher_copy_iv(struct skcipher_walk *walk)
  {
  	unsigned a = crypto_tfm_ctx_alignment() - 1;
  	unsigned alignmask = walk->alignmask;
  	unsigned ivsize = walk->ivsize;
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
392
  	unsigned bs = walk->stride;
b286d8b1a   Herbert Xu   crypto: skcipher ...
393
394
395
  	unsigned aligned_bs;
  	unsigned size;
  	u8 *iv;
0567fc9e9   Eric Biggers   crypto: skcipher ...
396
  	aligned_bs = ALIGN(bs, alignmask + 1);
b286d8b1a   Herbert Xu   crypto: skcipher ...
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
  
  	/* Minimum size to align buffer by alignmask. */
  	size = alignmask & ~a;
  
  	if (walk->flags & SKCIPHER_WALK_PHYS)
  		size += ivsize;
  	else {
  		size += aligned_bs + ivsize;
  
  		/* Minimum size to ensure buffer does not straddle a page. */
  		size += (bs - 1) & ~(alignmask | a);
  	}
  
  	walk->buffer = kmalloc(size, skcipher_walk_gfp(walk));
  	if (!walk->buffer)
  		return -ENOMEM;
  
  	iv = PTR_ALIGN(walk->buffer, alignmask + 1);
  	iv = skcipher_get_spot(iv, bs) + aligned_bs;
  
  	walk->iv = memcpy(iv, walk->iv, walk->ivsize);
  	return 0;
  }
  
  static int skcipher_walk_first(struct skcipher_walk *walk)
  {
b286d8b1a   Herbert Xu   crypto: skcipher ...
423
424
  	if (WARN_ON_ONCE(in_irq()))
  		return -EDEADLK;
b286d8b1a   Herbert Xu   crypto: skcipher ...
425
426
427
428
429
430
431
432
  	walk->buffer = NULL;
  	if (unlikely(((unsigned long)walk->iv & walk->alignmask))) {
  		int err = skcipher_copy_iv(walk);
  		if (err)
  			return err;
  	}
  
  	walk->page = NULL;
b286d8b1a   Herbert Xu   crypto: skcipher ...
433
434
435
436
437
438
439
440
  
  	return skcipher_walk_next(walk);
  }
  
  static int skcipher_walk_skcipher(struct skcipher_walk *walk,
  				  struct skcipher_request *req)
  {
  	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
0cabf2af6   Herbert Xu   crypto: skcipher ...
441
442
  	walk->total = req->cryptlen;
  	walk->nbytes = 0;
2b4f27c36   Eric Biggers   crypto: skcipher ...
443
444
  	walk->iv = req->iv;
  	walk->oiv = req->iv;
0cabf2af6   Herbert Xu   crypto: skcipher ...
445
446
447
  
  	if (unlikely(!walk->total))
  		return 0;
b286d8b1a   Herbert Xu   crypto: skcipher ...
448
449
  	scatterwalk_start(&walk->in, req->src);
  	scatterwalk_start(&walk->out, req->dst);
b286d8b1a   Herbert Xu   crypto: skcipher ...
450
451
452
453
454
  	walk->flags &= ~SKCIPHER_WALK_SLEEP;
  	walk->flags |= req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP ?
  		       SKCIPHER_WALK_SLEEP : 0;
  
  	walk->blocksize = crypto_skcipher_blocksize(tfm);
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
455
  	walk->stride = crypto_skcipher_walksize(tfm);
b286d8b1a   Herbert Xu   crypto: skcipher ...
456
457
458
459
460
461
462
463
464
465
  	walk->ivsize = crypto_skcipher_ivsize(tfm);
  	walk->alignmask = crypto_skcipher_alignmask(tfm);
  
  	return skcipher_walk_first(walk);
  }
  
  int skcipher_walk_virt(struct skcipher_walk *walk,
  		       struct skcipher_request *req, bool atomic)
  {
  	int err;
bb648291f   Eric Biggers   crypto: skcipher ...
466
  	might_sleep_if(req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP);
b286d8b1a   Herbert Xu   crypto: skcipher ...
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
  	walk->flags &= ~SKCIPHER_WALK_PHYS;
  
  	err = skcipher_walk_skcipher(walk, req);
  
  	walk->flags &= atomic ? ~SKCIPHER_WALK_SLEEP : ~0;
  
  	return err;
  }
  EXPORT_SYMBOL_GPL(skcipher_walk_virt);
  
  void skcipher_walk_atomise(struct skcipher_walk *walk)
  {
  	walk->flags &= ~SKCIPHER_WALK_SLEEP;
  }
  EXPORT_SYMBOL_GPL(skcipher_walk_atomise);
  
  int skcipher_walk_async(struct skcipher_walk *walk,
  			struct skcipher_request *req)
  {
  	walk->flags |= SKCIPHER_WALK_PHYS;
  
  	INIT_LIST_HEAD(&walk->buffers);
  
  	return skcipher_walk_skcipher(walk, req);
  }
  EXPORT_SYMBOL_GPL(skcipher_walk_async);
34bc085c8   Herbert Xu   crypto: skcipher ...
493
494
  static int skcipher_walk_aead_common(struct skcipher_walk *walk,
  				     struct aead_request *req, bool atomic)
b286d8b1a   Herbert Xu   crypto: skcipher ...
495
496
497
  {
  	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
  	int err;
0cabf2af6   Herbert Xu   crypto: skcipher ...
498
  	walk->nbytes = 0;
2b4f27c36   Eric Biggers   crypto: skcipher ...
499
500
  	walk->iv = req->iv;
  	walk->oiv = req->iv;
0cabf2af6   Herbert Xu   crypto: skcipher ...
501
502
503
  
  	if (unlikely(!walk->total))
  		return 0;
3cbf61fb9   Ard Biesheuvel   crypto: skcipher ...
504
  	walk->flags &= ~SKCIPHER_WALK_PHYS;
b286d8b1a   Herbert Xu   crypto: skcipher ...
505
506
507
508
509
  	scatterwalk_start(&walk->in, req->src);
  	scatterwalk_start(&walk->out, req->dst);
  
  	scatterwalk_copychunks(NULL, &walk->in, req->assoclen, 2);
  	scatterwalk_copychunks(NULL, &walk->out, req->assoclen, 2);
c14ca8386   Ondrej Mosnáček   crypto: skcipher ...
510
511
  	scatterwalk_done(&walk->in, 0, walk->total);
  	scatterwalk_done(&walk->out, 0, walk->total);
b286d8b1a   Herbert Xu   crypto: skcipher ...
512
513
514
515
516
517
  	if (req->base.flags & CRYPTO_TFM_REQ_MAY_SLEEP)
  		walk->flags |= SKCIPHER_WALK_SLEEP;
  	else
  		walk->flags &= ~SKCIPHER_WALK_SLEEP;
  
  	walk->blocksize = crypto_aead_blocksize(tfm);
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
518
  	walk->stride = crypto_aead_chunksize(tfm);
b286d8b1a   Herbert Xu   crypto: skcipher ...
519
520
521
522
523
524
525
526
527
528
  	walk->ivsize = crypto_aead_ivsize(tfm);
  	walk->alignmask = crypto_aead_alignmask(tfm);
  
  	err = skcipher_walk_first(walk);
  
  	if (atomic)
  		walk->flags &= ~SKCIPHER_WALK_SLEEP;
  
  	return err;
  }
34bc085c8   Herbert Xu   crypto: skcipher ...
529

34bc085c8   Herbert Xu   crypto: skcipher ...
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
  int skcipher_walk_aead_encrypt(struct skcipher_walk *walk,
  			       struct aead_request *req, bool atomic)
  {
  	walk->total = req->cryptlen;
  
  	return skcipher_walk_aead_common(walk, req, atomic);
  }
  EXPORT_SYMBOL_GPL(skcipher_walk_aead_encrypt);
  
  int skcipher_walk_aead_decrypt(struct skcipher_walk *walk,
  			       struct aead_request *req, bool atomic)
  {
  	struct crypto_aead *tfm = crypto_aead_reqtfm(req);
  
  	walk->total = req->cryptlen - crypto_aead_authsize(tfm);
  
  	return skcipher_walk_aead_common(walk, req, atomic);
  }
  EXPORT_SYMBOL_GPL(skcipher_walk_aead_decrypt);
b1f6b4bf4   Eric Biggers   crypto: skcipher ...
549
550
  static void skcipher_set_needkey(struct crypto_skcipher *tfm)
  {
9ac0d1369   Eric Biggers   crypto: skcipher ...
551
  	if (crypto_skcipher_max_keysize(tfm) != 0)
b1f6b4bf4   Eric Biggers   crypto: skcipher ...
552
553
  		crypto_skcipher_set_flags(tfm, CRYPTO_TFM_NEED_KEY);
  }
9933e113c   Herbert Xu   crypto: skcipher ...
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
  static int skcipher_setkey_unaligned(struct crypto_skcipher *tfm,
  				     const u8 *key, unsigned int keylen)
  {
  	unsigned long alignmask = crypto_skcipher_alignmask(tfm);
  	struct skcipher_alg *cipher = crypto_skcipher_alg(tfm);
  	u8 *buffer, *alignbuffer;
  	unsigned long absize;
  	int ret;
  
  	absize = keylen + alignmask;
  	buffer = kmalloc(absize, GFP_ATOMIC);
  	if (!buffer)
  		return -ENOMEM;
  
  	alignbuffer = (u8 *)ALIGN((unsigned long)buffer, alignmask + 1);
  	memcpy(alignbuffer, key, keylen);
  	ret = cipher->setkey(tfm, alignbuffer, keylen);
453431a54   Waiman Long   mm, treewide: ren...
571
  	kfree_sensitive(buffer);
9933e113c   Herbert Xu   crypto: skcipher ...
572
573
  	return ret;
  }
15252d942   Eric Biggers   crypto: skcipher ...
574
  int crypto_skcipher_setkey(struct crypto_skcipher *tfm, const u8 *key,
9933e113c   Herbert Xu   crypto: skcipher ...
575
576
577
578
  			   unsigned int keylen)
  {
  	struct skcipher_alg *cipher = crypto_skcipher_alg(tfm);
  	unsigned long alignmask = crypto_skcipher_alignmask(tfm);
f8d33fac8   Eric Biggers   crypto: skcipher ...
579
  	int err;
9933e113c   Herbert Xu   crypto: skcipher ...
580

674f368a9   Eric Biggers   crypto: remove CR...
581
  	if (keylen < cipher->min_keysize || keylen > cipher->max_keysize)
9933e113c   Herbert Xu   crypto: skcipher ...
582
  		return -EINVAL;
9933e113c   Herbert Xu   crypto: skcipher ...
583
584
  
  	if ((unsigned long)key & alignmask)
f8d33fac8   Eric Biggers   crypto: skcipher ...
585
586
587
  		err = skcipher_setkey_unaligned(tfm, key, keylen);
  	else
  		err = cipher->setkey(tfm, key, keylen);
b1f6b4bf4   Eric Biggers   crypto: skcipher ...
588
589
  	if (unlikely(err)) {
  		skcipher_set_needkey(tfm);
f8d33fac8   Eric Biggers   crypto: skcipher ...
590
  		return err;
b1f6b4bf4   Eric Biggers   crypto: skcipher ...
591
  	}
9933e113c   Herbert Xu   crypto: skcipher ...
592

f8d33fac8   Eric Biggers   crypto: skcipher ...
593
594
  	crypto_skcipher_clear_flags(tfm, CRYPTO_TFM_NEED_KEY);
  	return 0;
9933e113c   Herbert Xu   crypto: skcipher ...
595
  }
15252d942   Eric Biggers   crypto: skcipher ...
596
  EXPORT_SYMBOL_GPL(crypto_skcipher_setkey);
9933e113c   Herbert Xu   crypto: skcipher ...
597

81bcbb1ee   Eric Biggers   crypto: skcipher ...
598
599
600
601
602
603
604
605
606
607
608
  int crypto_skcipher_encrypt(struct skcipher_request *req)
  {
  	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
  	struct crypto_alg *alg = tfm->base.__crt_alg;
  	unsigned int cryptlen = req->cryptlen;
  	int ret;
  
  	crypto_stats_get(alg);
  	if (crypto_skcipher_get_flags(tfm) & CRYPTO_TFM_NEED_KEY)
  		ret = -ENOKEY;
  	else
848755e31   Eric Biggers   crypto: skcipher ...
609
  		ret = crypto_skcipher_alg(tfm)->encrypt(req);
81bcbb1ee   Eric Biggers   crypto: skcipher ...
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
  	crypto_stats_skcipher_encrypt(cryptlen, ret, alg);
  	return ret;
  }
  EXPORT_SYMBOL_GPL(crypto_skcipher_encrypt);
  
  int crypto_skcipher_decrypt(struct skcipher_request *req)
  {
  	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
  	struct crypto_alg *alg = tfm->base.__crt_alg;
  	unsigned int cryptlen = req->cryptlen;
  	int ret;
  
  	crypto_stats_get(alg);
  	if (crypto_skcipher_get_flags(tfm) & CRYPTO_TFM_NEED_KEY)
  		ret = -ENOKEY;
  	else
7e1c10991   Eric Biggers   crypto: skcipher ...
626
  		ret = crypto_skcipher_alg(tfm)->decrypt(req);
81bcbb1ee   Eric Biggers   crypto: skcipher ...
627
628
629
630
  	crypto_stats_skcipher_decrypt(cryptlen, ret, alg);
  	return ret;
  }
  EXPORT_SYMBOL_GPL(crypto_skcipher_decrypt);
4e6c3df4d   Herbert Xu   crypto: skcipher ...
631
632
633
634
635
636
637
  static void crypto_skcipher_exit_tfm(struct crypto_tfm *tfm)
  {
  	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
  	struct skcipher_alg *alg = crypto_skcipher_alg(skcipher);
  
  	alg->exit(skcipher);
  }
7a7ffe65c   Herbert Xu   crypto: skcipher ...
638
639
  static int crypto_skcipher_init_tfm(struct crypto_tfm *tfm)
  {
4e6c3df4d   Herbert Xu   crypto: skcipher ...
640
641
  	struct crypto_skcipher *skcipher = __crypto_skcipher_cast(tfm);
  	struct skcipher_alg *alg = crypto_skcipher_alg(skcipher);
b1f6b4bf4   Eric Biggers   crypto: skcipher ...
642
  	skcipher_set_needkey(skcipher);
f8d33fac8   Eric Biggers   crypto: skcipher ...
643

4e6c3df4d   Herbert Xu   crypto: skcipher ...
644
645
  	if (alg->exit)
  		skcipher->base.exit = crypto_skcipher_exit_tfm;
7a7ffe65c   Herbert Xu   crypto: skcipher ...
646

4e6c3df4d   Herbert Xu   crypto: skcipher ...
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
  	if (alg->init)
  		return alg->init(skcipher);
  
  	return 0;
  }
  
  static void crypto_skcipher_free_instance(struct crypto_instance *inst)
  {
  	struct skcipher_instance *skcipher =
  		container_of(inst, struct skcipher_instance, s.base);
  
  	skcipher->free(skcipher);
  }
  
  static void crypto_skcipher_show(struct seq_file *m, struct crypto_alg *alg)
d8c34b949   Gideon Israel Dsouza   crypto: Replaced ...
662
  	__maybe_unused;
4e6c3df4d   Herbert Xu   crypto: skcipher ...
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
  static void crypto_skcipher_show(struct seq_file *m, struct crypto_alg *alg)
  {
  	struct skcipher_alg *skcipher = container_of(alg, struct skcipher_alg,
  						     base);
  
  	seq_printf(m, "type         : skcipher
  ");
  	seq_printf(m, "async        : %s
  ",
  		   alg->cra_flags & CRYPTO_ALG_ASYNC ?  "yes" : "no");
  	seq_printf(m, "blocksize    : %u
  ", alg->cra_blocksize);
  	seq_printf(m, "min keysize  : %u
  ", skcipher->min_keysize);
  	seq_printf(m, "max keysize  : %u
  ", skcipher->max_keysize);
  	seq_printf(m, "ivsize       : %u
  ", skcipher->ivsize);
  	seq_printf(m, "chunksize    : %u
  ", skcipher->chunksize);
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
683
684
  	seq_printf(m, "walksize     : %u
  ", skcipher->walksize);
7a7ffe65c   Herbert Xu   crypto: skcipher ...
685
  }
4e6c3df4d   Herbert Xu   crypto: skcipher ...
686
687
688
689
690
691
  #ifdef CONFIG_NET
  static int crypto_skcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
  {
  	struct crypto_report_blkcipher rblkcipher;
  	struct skcipher_alg *skcipher = container_of(alg, struct skcipher_alg,
  						     base);
37db69e0b   Eric Biggers   crypto: user - cl...
692
693
694
695
  	memset(&rblkcipher, 0, sizeof(rblkcipher));
  
  	strscpy(rblkcipher.type, "skcipher", sizeof(rblkcipher.type));
  	strscpy(rblkcipher.geniv, "<none>", sizeof(rblkcipher.geniv));
4e6c3df4d   Herbert Xu   crypto: skcipher ...
696
697
698
699
700
  
  	rblkcipher.blocksize = alg->cra_blocksize;
  	rblkcipher.min_keysize = skcipher->min_keysize;
  	rblkcipher.max_keysize = skcipher->max_keysize;
  	rblkcipher.ivsize = skcipher->ivsize;
37db69e0b   Eric Biggers   crypto: user - cl...
701
702
  	return nla_put(skb, CRYPTOCFGA_REPORT_BLKCIPHER,
  		       sizeof(rblkcipher), &rblkcipher);
4e6c3df4d   Herbert Xu   crypto: skcipher ...
703
704
705
706
707
708
709
  }
  #else
  static int crypto_skcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
  {
  	return -ENOSYS;
  }
  #endif
53253064a   Eric Biggers   crypto: skcipher ...
710
  static const struct crypto_type crypto_skcipher_type = {
89873b441   Eric Biggers   crypto: skcipher ...
711
  	.extsize = crypto_alg_extsize,
7a7ffe65c   Herbert Xu   crypto: skcipher ...
712
  	.init_tfm = crypto_skcipher_init_tfm,
4e6c3df4d   Herbert Xu   crypto: skcipher ...
713
714
715
716
717
  	.free = crypto_skcipher_free_instance,
  #ifdef CONFIG_PROC_FS
  	.show = crypto_skcipher_show,
  #endif
  	.report = crypto_skcipher_report,
7a7ffe65c   Herbert Xu   crypto: skcipher ...
718
  	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
c65058b75   Eric Biggers   crypto: skcipher ...
719
  	.maskset = CRYPTO_ALG_TYPE_MASK,
4e6c3df4d   Herbert Xu   crypto: skcipher ...
720
  	.type = CRYPTO_ALG_TYPE_SKCIPHER,
7a7ffe65c   Herbert Xu   crypto: skcipher ...
721
722
  	.tfmsize = offsetof(struct crypto_skcipher, base),
  };
3a01d0ee2   Herbert Xu   crypto: skcipher ...
723
  int crypto_grab_skcipher(struct crypto_skcipher_spawn *spawn,
b9f76dddb   Eric Biggers   crypto: skcipher ...
724
725
  			 struct crypto_instance *inst,
  			 const char *name, u32 type, u32 mask)
4e6c3df4d   Herbert Xu   crypto: skcipher ...
726
  {
53253064a   Eric Biggers   crypto: skcipher ...
727
  	spawn->base.frontend = &crypto_skcipher_type;
de95c9574   Eric Biggers   crypto: algapi - ...
728
  	return crypto_grab_spawn(&spawn->base, inst, name, type, mask);
4e6c3df4d   Herbert Xu   crypto: skcipher ...
729
  }
3a01d0ee2   Herbert Xu   crypto: skcipher ...
730
  EXPORT_SYMBOL_GPL(crypto_grab_skcipher);
4e6c3df4d   Herbert Xu   crypto: skcipher ...
731

7a7ffe65c   Herbert Xu   crypto: skcipher ...
732
733
734
  struct crypto_skcipher *crypto_alloc_skcipher(const char *alg_name,
  					      u32 type, u32 mask)
  {
53253064a   Eric Biggers   crypto: skcipher ...
735
  	return crypto_alloc_tfm(alg_name, &crypto_skcipher_type, type, mask);
7a7ffe65c   Herbert Xu   crypto: skcipher ...
736
737
  }
  EXPORT_SYMBOL_GPL(crypto_alloc_skcipher);
b350bee5e   Kees Cook   crypto: skcipher ...
738
739
740
741
742
743
744
  struct crypto_sync_skcipher *crypto_alloc_sync_skcipher(
  				const char *alg_name, u32 type, u32 mask)
  {
  	struct crypto_skcipher *tfm;
  
  	/* Only sync algorithms allowed. */
  	mask |= CRYPTO_ALG_ASYNC;
53253064a   Eric Biggers   crypto: skcipher ...
745
  	tfm = crypto_alloc_tfm(alg_name, &crypto_skcipher_type, type, mask);
b350bee5e   Kees Cook   crypto: skcipher ...
746
747
748
749
750
751
752
753
754
755
756
757
758
759
  
  	/*
  	 * Make sure we do not allocate something that might get used with
  	 * an on-stack request: check the request size.
  	 */
  	if (!IS_ERR(tfm) && WARN_ON(crypto_skcipher_reqsize(tfm) >
  				    MAX_SYNC_SKCIPHER_REQSIZE)) {
  		crypto_free_skcipher(tfm);
  		return ERR_PTR(-EINVAL);
  	}
  
  	return (struct crypto_sync_skcipher *)tfm;
  }
  EXPORT_SYMBOL_GPL(crypto_alloc_sync_skcipher);
d3ca75a8b   Eric Biggers   crypto: skcipher ...
760
  int crypto_has_skcipher(const char *alg_name, u32 type, u32 mask)
4e6c3df4d   Herbert Xu   crypto: skcipher ...
761
  {
53253064a   Eric Biggers   crypto: skcipher ...
762
  	return crypto_type_has_alg(alg_name, &crypto_skcipher_type, type, mask);
4e6c3df4d   Herbert Xu   crypto: skcipher ...
763
  }
d3ca75a8b   Eric Biggers   crypto: skcipher ...
764
  EXPORT_SYMBOL_GPL(crypto_has_skcipher);
4e6c3df4d   Herbert Xu   crypto: skcipher ...
765
766
767
768
  
  static int skcipher_prepare_alg(struct skcipher_alg *alg)
  {
  	struct crypto_alg *base = &alg->base;
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
769
770
  	if (alg->ivsize > PAGE_SIZE / 8 || alg->chunksize > PAGE_SIZE / 8 ||
  	    alg->walksize > PAGE_SIZE / 8)
4e6c3df4d   Herbert Xu   crypto: skcipher ...
771
772
773
774
  		return -EINVAL;
  
  	if (!alg->chunksize)
  		alg->chunksize = base->cra_blocksize;
c821f6ab2   Ard Biesheuvel   crypto: skcipher ...
775
776
  	if (!alg->walksize)
  		alg->walksize = alg->chunksize;
4e6c3df4d   Herbert Xu   crypto: skcipher ...
777

53253064a   Eric Biggers   crypto: skcipher ...
778
  	base->cra_type = &crypto_skcipher_type;
4e6c3df4d   Herbert Xu   crypto: skcipher ...
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
  	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
  	base->cra_flags |= CRYPTO_ALG_TYPE_SKCIPHER;
  
  	return 0;
  }
  
  int crypto_register_skcipher(struct skcipher_alg *alg)
  {
  	struct crypto_alg *base = &alg->base;
  	int err;
  
  	err = skcipher_prepare_alg(alg);
  	if (err)
  		return err;
  
  	return crypto_register_alg(base);
  }
  EXPORT_SYMBOL_GPL(crypto_register_skcipher);
  
  void crypto_unregister_skcipher(struct skcipher_alg *alg)
  {
  	crypto_unregister_alg(&alg->base);
  }
  EXPORT_SYMBOL_GPL(crypto_unregister_skcipher);
  
  int crypto_register_skciphers(struct skcipher_alg *algs, int count)
  {
  	int i, ret;
  
  	for (i = 0; i < count; i++) {
  		ret = crypto_register_skcipher(&algs[i]);
  		if (ret)
  			goto err;
  	}
  
  	return 0;
  
  err:
  	for (--i; i >= 0; --i)
  		crypto_unregister_skcipher(&algs[i]);
  
  	return ret;
  }
  EXPORT_SYMBOL_GPL(crypto_register_skciphers);
  
  void crypto_unregister_skciphers(struct skcipher_alg *algs, int count)
  {
  	int i;
  
  	for (i = count - 1; i >= 0; --i)
  		crypto_unregister_skcipher(&algs[i]);
  }
  EXPORT_SYMBOL_GPL(crypto_unregister_skciphers);
  
  int skcipher_register_instance(struct crypto_template *tmpl,
  			   struct skcipher_instance *inst)
  {
  	int err;
d4fdc2dfa   Eric Biggers   crypto: algapi - ...
837
838
  	if (WARN_ON(!inst->free))
  		return -EINVAL;
4e6c3df4d   Herbert Xu   crypto: skcipher ...
839
840
841
842
843
844
845
  	err = skcipher_prepare_alg(&inst->alg);
  	if (err)
  		return err;
  
  	return crypto_register_instance(tmpl, skcipher_crypto_instance(inst));
  }
  EXPORT_SYMBOL_GPL(skcipher_register_instance);
0872da16d   Eric Biggers   crypto: skcipher ...
846
847
848
849
  static int skcipher_setkey_simple(struct crypto_skcipher *tfm, const u8 *key,
  				  unsigned int keylen)
  {
  	struct crypto_cipher *cipher = skcipher_cipher_simple(tfm);
0872da16d   Eric Biggers   crypto: skcipher ...
850
851
852
853
  
  	crypto_cipher_clear_flags(cipher, CRYPTO_TFM_REQ_MASK);
  	crypto_cipher_set_flags(cipher, crypto_skcipher_get_flags(tfm) &
  				CRYPTO_TFM_REQ_MASK);
af5034e8e   Eric Biggers   crypto: remove pr...
854
  	return crypto_cipher_setkey(cipher, key, keylen);
0872da16d   Eric Biggers   crypto: skcipher ...
855
856
857
858
859
  }
  
  static int skcipher_init_tfm_simple(struct crypto_skcipher *tfm)
  {
  	struct skcipher_instance *inst = skcipher_alg_instance(tfm);
d5ed3b65f   Eric Biggers   crypto: cipher - ...
860
  	struct crypto_cipher_spawn *spawn = skcipher_instance_ctx(inst);
0872da16d   Eric Biggers   crypto: skcipher ...
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
  	struct skcipher_ctx_simple *ctx = crypto_skcipher_ctx(tfm);
  	struct crypto_cipher *cipher;
  
  	cipher = crypto_spawn_cipher(spawn);
  	if (IS_ERR(cipher))
  		return PTR_ERR(cipher);
  
  	ctx->cipher = cipher;
  	return 0;
  }
  
  static void skcipher_exit_tfm_simple(struct crypto_skcipher *tfm)
  {
  	struct skcipher_ctx_simple *ctx = crypto_skcipher_ctx(tfm);
  
  	crypto_free_cipher(ctx->cipher);
  }
  
  static void skcipher_free_instance_simple(struct skcipher_instance *inst)
  {
aacd5b4cf   Eric Biggers   crypto: skcipher ...
881
  	crypto_drop_cipher(skcipher_instance_ctx(inst));
0872da16d   Eric Biggers   crypto: skcipher ...
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
  	kfree(inst);
  }
  
  /**
   * skcipher_alloc_instance_simple - allocate instance of simple block cipher mode
   *
   * Allocate an skcipher_instance for a simple block cipher mode of operation,
   * e.g. cbc or ecb.  The instance context will have just a single crypto_spawn,
   * that for the underlying cipher.  The {min,max}_keysize, ivsize, blocksize,
   * alignmask, and priority are set from the underlying cipher but can be
   * overridden if needed.  The tfm context defaults to skcipher_ctx_simple, and
   * default ->setkey(), ->init(), and ->exit() methods are installed.
   *
   * @tmpl: the template being instantiated
   * @tb: the template parameters
0872da16d   Eric Biggers   crypto: skcipher ...
897
898
899
900
   *
   * Return: a pointer to the new instance, or an ERR_PTR().  The caller still
   *	   needs to register the instance.
   */
b3c16bfc6   Herbert Xu   crypto: skcipher ...
901
902
  struct skcipher_instance *skcipher_alloc_instance_simple(
  	struct crypto_template *tmpl, struct rtattr **tb)
0872da16d   Eric Biggers   crypto: skcipher ...
903
  {
0872da16d   Eric Biggers   crypto: skcipher ...
904
  	u32 mask;
aacd5b4cf   Eric Biggers   crypto: skcipher ...
905
906
907
  	struct skcipher_instance *inst;
  	struct crypto_cipher_spawn *spawn;
  	struct crypto_alg *cipher_alg;
0872da16d   Eric Biggers   crypto: skcipher ...
908
  	int err;
7bcb2c99f   Eric Biggers   crypto: algapi - ...
909
910
911
  	err = crypto_check_attr_type(tb, CRYPTO_ALG_TYPE_SKCIPHER, &mask);
  	if (err)
  		return ERR_PTR(err);
0872da16d   Eric Biggers   crypto: skcipher ...
912
913
  
  	inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL);
aacd5b4cf   Eric Biggers   crypto: skcipher ...
914
915
  	if (!inst)
  		return ERR_PTR(-ENOMEM);
0872da16d   Eric Biggers   crypto: skcipher ...
916
  	spawn = skcipher_instance_ctx(inst);
aacd5b4cf   Eric Biggers   crypto: skcipher ...
917
918
  	err = crypto_grab_cipher(spawn, skcipher_crypto_instance(inst),
  				 crypto_attr_alg_name(tb[1]), 0, mask);
0872da16d   Eric Biggers   crypto: skcipher ...
919
920
  	if (err)
  		goto err_free_inst;
aacd5b4cf   Eric Biggers   crypto: skcipher ...
921
  	cipher_alg = crypto_spawn_cipher_alg(spawn);
0872da16d   Eric Biggers   crypto: skcipher ...
922

aacd5b4cf   Eric Biggers   crypto: skcipher ...
923
924
  	err = crypto_inst_setname(skcipher_crypto_instance(inst), tmpl->name,
  				  cipher_alg);
0872da16d   Eric Biggers   crypto: skcipher ...
925
926
  	if (err)
  		goto err_free_inst;
aacd5b4cf   Eric Biggers   crypto: skcipher ...
927

0872da16d   Eric Biggers   crypto: skcipher ...
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
  	inst->free = skcipher_free_instance_simple;
  
  	/* Default algorithm properties, can be overridden */
  	inst->alg.base.cra_blocksize = cipher_alg->cra_blocksize;
  	inst->alg.base.cra_alignmask = cipher_alg->cra_alignmask;
  	inst->alg.base.cra_priority = cipher_alg->cra_priority;
  	inst->alg.min_keysize = cipher_alg->cra_cipher.cia_min_keysize;
  	inst->alg.max_keysize = cipher_alg->cra_cipher.cia_max_keysize;
  	inst->alg.ivsize = cipher_alg->cra_blocksize;
  
  	/* Use skcipher_ctx_simple by default, can be overridden */
  	inst->alg.base.cra_ctxsize = sizeof(struct skcipher_ctx_simple);
  	inst->alg.setkey = skcipher_setkey_simple;
  	inst->alg.init = skcipher_init_tfm_simple;
  	inst->alg.exit = skcipher_exit_tfm_simple;
0872da16d   Eric Biggers   crypto: skcipher ...
943
944
945
  	return inst;
  
  err_free_inst:
aacd5b4cf   Eric Biggers   crypto: skcipher ...
946
  	skcipher_free_instance_simple(inst);
0872da16d   Eric Biggers   crypto: skcipher ...
947
948
949
  	return ERR_PTR(err);
  }
  EXPORT_SYMBOL_GPL(skcipher_alloc_instance_simple);
7a7ffe65c   Herbert Xu   crypto: skcipher ...
950
951
  MODULE_LICENSE("GPL");
  MODULE_DESCRIPTION("Symmetric key cipher type");