23 Jun, 2015
1 commit
-
Pull crypto update from Herbert Xu:
"Here is the crypto update for 4.2:API:
- Convert RNG interface to new style.
- New AEAD interface with one SG list for AD and plain/cipher text.
All external AEAD users have been converted.- New asymmetric key interface (akcipher).
Algorithms:
- Chacha20, Poly1305 and RFC7539 support.
- New RSA implementation.
- Jitter RNG.
- DRBG is now seeded with both /dev/random and Jitter RNG. If kernel
pool isn't ready then DRBG will be reseeded when it is.- DRBG is now the default crypto API RNG, replacing krng.
- 842 compression (previously part of powerpc nx driver).
Drivers:
- Accelerated SHA-512 for arm64.
- New Marvell CESA driver that supports DMA and more algorithms.
- Updated powerpc nx 842 support.
- Added support for SEC1 hardware to talitos"
* git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (292 commits)
crypto: marvell/cesa - remove COMPILE_TEST dependency
crypto: algif_aead - Temporarily disable all AEAD algorithms
crypto: af_alg - Forbid the use internal algorithms
crypto: echainiv - Only hold RNG during initialisation
crypto: seqiv - Add compatibility support without RNG
crypto: eseqiv - Offer normal cipher functionality without RNG
crypto: chainiv - Offer normal cipher functionality without RNG
crypto: user - Add CRYPTO_MSG_DELRNG
crypto: user - Move cryptouser.h to uapi
crypto: rng - Do not free default RNG when it becomes unused
crypto: skcipher - Allow givencrypt to be NULL
crypto: sahara - propagate the error on clk_disable_unprepare() failure
crypto: rsa - fix invalid select for AKCIPHER
crypto: picoxcell - Update to the current clk API
crypto: nx - Check for bogus firmware properties
crypto: marvell/cesa - add DT bindings documentation
crypto: marvell/cesa - add support for Kirkwood and Dove SoCs
crypto: marvell/cesa - add support for Orion SoCs
crypto: marvell/cesa - add allhwsupport module parameter
crypto: marvell/cesa - add support for all armada SoCs
...
16 Jun, 2015
1 commit
-
Added a mpi_read_buf() helper function to export MPI to a buf provided by
the user, and a mpi_get_size() helper, that tells the user how big the buf is.
Changed mpi_free to use kzfree instead of kfree because it is used to free
crypto keys.Signed-off-by: Tadeusz Struk
Signed-off-by: Herbert Xu
13 Jun, 2015
1 commit
-
This patch fixes mips compilation error:
lib/mpi/generic_mpih-mul1.c: In function 'mpihelp_mul_1':
lib/mpi/longlong.h:651:2: error: impossible constraint in 'asm'Signed-off-by: Jaedon Shin
Cc: Linux-MIPS
Patchwork: https://patchwork.linux-mips.org/patch/10546/
Signed-off-by: Ralf Baechle
15 Jan, 2015
1 commit
-
If u and v both represent negative integers and their limb counts
happen to differ, mpi_cmp will always return a positive value - this
is obviously bogus. u is smaller than v if and only if it is larger in
absolute value.Signed-off-by: Rasmus Villemoes
Signed-off-by: David Howells
Acked-by: Dmitry Kasatkin
14 Jan, 2015
2 commits
-
The macro MPN_COPY_INCR this occurs in isn't used anywhere.
Signed-off-by: Rasmus Villemoes
Signed-off-by: David Howells -
The condition preceding 'return 1;' makes my head hurt. At this point,
we know that u and v have the same sign; if they are negative, they
compare opposite to how their absolute values compare (which
mpihelp_cmp found for us), otherwise cmp itself is the
answer. Negating cmp is ok since mpihelp_cmp returns {-1,0,1};
-INT_MIN==INT_MIN won't bite us.Signed-off-by: Rasmus Villemoes
Signed-off-by: David Howells
Acked-by: Dmitry Kasatkin
26 Sep, 2013
1 commit
-
This patch fixes lack of license, otherwise mpi.ko taints kernel.
Signed-off-by: Konstantin Khlebnikov
Signed-off-by: David Howells
20 Jul, 2013
1 commit
-
Remove the compile warning for __udiv_qrnnd not having a prototype.
Use the __builtin_alpha_umulh introduced in gcc 4.0.Reviewed-and-Tested-by: Matt Turner
Signed-off-by: Matt Turner
Signed-off-by: Richard Henderson
13 Jun, 2013
1 commit
-
For 'while' looping, need stop when 'nbytes == 0', or will cause issue.
('nbytes' is size_t which is always bigger or equal than zero).The related warning: (with EXTRA_CFLAGS=-W)
lib/mpi/mpicoder.c:40:2: warning: comparison of unsigned expression >= 0 is always true [-Wtype-limits]
Signed-off-by: Chen Gang
Cc: Rusty Russell
Cc: David Howells
Cc: James Morris
Cc: Andy Shevchenko
Acked-by: David Howells
Signed-off-by: Andrew Morton
Signed-off-by: Linus Torvalds
25 May, 2013
1 commit
-
The umul_ppmm() macro for parisc uses the xmpyu assembler statement
which does calculation via a floating point register.But usage of floating point registers inside the Linux kernel are not
allowed and gcc will stop compilation due to the -mdisable-fpregs
compiler option.Fix this by disabling the umul_ppmm() and udiv_qrnnd() macros. The
mpilib will then use the generic built-in implementations instead.Signed-off-by: Helge Deller
01 Feb, 2013
1 commit
-
Remove MIN, MAX and ABS macros that are duplicates kernel's native
implementation.Signed-off-by: Andy Shevchenko
Signed-off-by: James Morris
24 Nov, 2012
1 commit
-
Since 4.4 GCC on MIPS no longer recognizes the "h" constraint,
leading to this build failure:CC lib/mpi/generic_mpih-mul1.o
lib/mpi/generic_mpih-mul1.c: In function 'mpihelp_mul_1':
lib/mpi/generic_mpih-mul1.c:50:3: error: impossible constraint in 'asm'This patch updates MPI with the latest umul_ppm implementations for MIPS.
Signed-off-by: Manuel Lauss
Cc: Linux-MIPS
Cc: Dmitry Kasatkin
Cc: James Morris
Patchwork: https://patchwork.linux-mips.org/patch/4612/
Signed-off-by: Ralf Baechle
08 Oct, 2012
3 commits
-
Provide a function to read raw data of a predetermined size into an MPI rather
than expecting the size to be encoded within the data. The data is assumed to
represent an unsigned integer, and the resulting MPI will be positive.The function looks like this:
MPI mpi_read_raw_data(const void *, size_t);
This is useful for reading ASN.1 integer primitives where the length is encoded
in the ASN.1 metadata.Signed-off-by: David Howells
Signed-off-by: Rusty Russell -
Reinstate and export mpi_cmp() and mpi_cmp_ui() from the MPI library for use by
RSA signature verification as per RFC3447 section 5.2.2 step 1.Signed-off-by: David Howells
Signed-off-by: Rusty Russell -
Provide count_leading/trailing_zeros() macros based on extant arch bit scanning
functions rather than reimplementing from scratch in MPILIB.Whilst we're at it, turn count_foo_zeros(n, x) into n = count_foo_zeros(x).
Also move the definition to asm-generic as other people may be interested in
using it.Signed-off-by: David Howells
Cc: David S. Miller
Cc: Dmitry Kasatkin
Cc: Arnd Bergmann
Signed-off-by: Rusty Russell
26 May, 2012
2 commits
-
MPI library is used by RSA verification implementation.
Few files contains functions which are never called.James Morris has asked to remove all of them.
Signed-off-by: Dmitry Kasatkin
Requested-by: James Morris
Signed-off-by: James Morris -
This reverts commit 7e8dec918ef8e0f68b4937c3c50fa57002077a4d.
RSA verification implementation does not use this code.
James Morris has asked to remove that.Signed-off-by: Dmitry Kasatkin
Requested-by: James Morris
Signed-off-by: James Morris
18 Apr, 2012
1 commit
-
At the start of the function we assign 'a->d' to 'ap'. Then we use the
RESIZE_IF_NEEDED macro on 'a' - this may free 'a->d' and replace it
with newly allocaetd storage. In that case, we'll be operating on
freed memory further down in the function when we index into 'ap[]'.
Since we don't actually need 'ap' until after the use of the
RESIZE_IF_NEEDED macro we can just delay the assignment to it until
after we've potentially resized, thus avoiding the issue.While I was there anyway I also changed the integer variable 'n' to be
const. It might as well be since we only assign to it once and use it
as a constant, and then the compiler will tell us if we ever assign to
it in the future.Signed-off-by: Jesper Juhl
Acked-by: Dmitry Kasatkin
Signed-off-by: James Morris
02 Feb, 2012
2 commits
-
This copy of longlong.h is extremely dated and results in compile
errors on sparc32 when MPILIB is enabled, copy over the more uptodate
implementation from arch/sparc/math/sfp-util_32.hReported-by: Al Viro
Signed-off-by: David S. Miller
Signed-off-by: James Morris -
Both sparc 32-bit's software divide assembler and MPILIB provide
clz_tab[] with identical contents.Break it out into a seperate object file and select it when
SPARC32 or MPILIB is set.Reported-by: Al Viro
Signed-off-by: David S. Miller
Signed-off-by: James Morris
01 Feb, 2012
8 commits
-
Added missing NULL check after mpi_alloc_limb_space().
Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris -
Comment explains that existing clients do not call this function
with dsize == 0, which means that 1/0 should not happen.Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris -
Buggy client might pass zero nlimbs which is meaningless.
Added check for zero length.Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris -
do_encode_md() and mpi_get_keyid() are not parts of mpi library.
They were used early versions of gnupg and in digsig project,
but they are not used neither here nor there anymore.Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris -
Divisor length should not be 0.
Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris -
Definitely better to return error code than to divide by zero.
Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris -
MPI_NULL is replaced with normal NULL.
Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris -
Added missing NULL check after mpi_alloc().
Signed-off-by: Dmitry Kasatkin
Reviewed-by: Tetsuo Handa
Signed-off-by: James Morris
19 Jan, 2012
1 commit
-
Add a missing ENOMEM check.
Signed-off-by: David Howells
Acked-by: Mimi Zohar
Signed-off-by: James Morris
07 Dec, 2011
1 commit
-
We can't call mpi_free() on the elements if the first kzalloc() fails.
Signed-off-by: Dan Carpenter
Signed-off-by: Dmitry Kasatkin
Signed-off-by: James Morris
09 Nov, 2011
4 commits
-
Adds the multi-precision-integer maths library which was originally taken
from GnuPG and ported to the kernel by (among others) David Howells.
This version is taken from Fedora kernel 2.6.32-71.14.1.el6.
The difference is that checkpatch reported errors and warnings have been fixed.This library is used to implemenet RSA digital signature verification
used in IMA/EVM integrity protection subsystem.Due to patch size limitation, the patch is divided into 4 parts.
This code is unnecessary for RSA digital signature verification,
but for completeness it is included here and can be compiled,
if CONFIG_MPILIB_EXTRA is enabled.Signed-off-by: Dmitry Kasatkin
-
Adds the multi-precision-integer maths library which was originally taken
from GnuPG and ported to the kernel by (among others) David Howells.
This version is taken from Fedora kernel 2.6.32-71.14.1.el6.
The difference is that checkpatch reported errors and warnings have been fixed.This library is used to implemenet RSA digital signature verification
used in IMA/EVM integrity protection subsystem.Due to patch size limitation, the patch is divided into 4 parts.
Signed-off-by: Dmitry Kasatkin
-
Adds the multi-precision-integer maths library which was originally taken
from GnuPG and ported to the kernel by (among others) David Howells.
This version is taken from Fedora kernel 2.6.32-71.14.1.el6.
The difference is that checkpatch reported errors and warnings have been fixed.This library is used to implemenet RSA digital signature verification
used in IMA/EVM integrity protection subsystem.Due to patch size limitation, the patch is divided into 4 parts.
Signed-off-by: Dmitry Kasatkin
-
Adds the multi-precision-integer maths library which was originally taken
from GnuPG and ported to the kernel by (among others) David Howells.
This version is taken from Fedora kernel 2.6.32-71.14.1.el6.
The difference is that checkpatch reported errors and warnings have been fixed.This library is used to implemenet RSA digital signature verification
used in IMA/EVM integrity protection subsystem.Due to patch size limitation, the patch is divided into 4 parts.
Signed-off-by: Dmitry Kasatkin