14a49b499SJoy Latten /* 24a49b499SJoy Latten * CCM: Counter with CBC-MAC 34a49b499SJoy Latten * 44a49b499SJoy Latten * (C) Copyright IBM Corp. 2007 - Joy Latten <latten@us.ibm.com> 54a49b499SJoy Latten * 64a49b499SJoy Latten * This program is free software; you can redistribute it and/or modify it 74a49b499SJoy Latten * under the terms of the GNU General Public License as published by the Free 84a49b499SJoy Latten * Software Foundation; either version 2 of the License, or (at your option) 94a49b499SJoy Latten * any later version. 104a49b499SJoy Latten * 114a49b499SJoy Latten */ 124a49b499SJoy Latten 134a49b499SJoy Latten #include <crypto/internal/aead.h> 144a49b499SJoy Latten #include <crypto/internal/skcipher.h> 154a49b499SJoy Latten #include <crypto/scatterwalk.h> 164a49b499SJoy Latten #include <linux/err.h> 174a49b499SJoy Latten #include <linux/init.h> 184a49b499SJoy Latten #include <linux/kernel.h> 194a49b499SJoy Latten #include <linux/module.h> 204a49b499SJoy Latten #include <linux/slab.h> 214a49b499SJoy Latten 224a49b499SJoy Latten #include "internal.h" 234a49b499SJoy Latten 244a49b499SJoy Latten struct ccm_instance_ctx { 254a49b499SJoy Latten struct crypto_skcipher_spawn ctr; 264a49b499SJoy Latten struct crypto_spawn cipher; 274a49b499SJoy Latten }; 284a49b499SJoy Latten 294a49b499SJoy Latten struct crypto_ccm_ctx { 304a49b499SJoy Latten struct crypto_cipher *cipher; 314a49b499SJoy Latten struct crypto_ablkcipher *ctr; 324a49b499SJoy Latten }; 334a49b499SJoy Latten 344a49b499SJoy Latten struct crypto_rfc4309_ctx { 354a49b499SJoy Latten struct crypto_aead *child; 364a49b499SJoy Latten u8 nonce[3]; 374a49b499SJoy Latten }; 384a49b499SJoy Latten 394a49b499SJoy Latten struct crypto_ccm_req_priv_ctx { 404a49b499SJoy Latten u8 odata[16]; 414a49b499SJoy Latten u8 idata[16]; 424a49b499SJoy Latten u8 auth_tag[16]; 434a49b499SJoy Latten u32 ilen; 444a49b499SJoy Latten u32 flags; 454a49b499SJoy Latten struct scatterlist src[2]; 464a49b499SJoy Latten struct scatterlist dst[2]; 474a49b499SJoy Latten struct ablkcipher_request abreq; 484a49b499SJoy Latten }; 494a49b499SJoy Latten 504a49b499SJoy Latten static inline struct crypto_ccm_req_priv_ctx *crypto_ccm_reqctx( 514a49b499SJoy Latten struct aead_request *req) 524a49b499SJoy Latten { 534a49b499SJoy Latten unsigned long align = crypto_aead_alignmask(crypto_aead_reqtfm(req)); 544a49b499SJoy Latten 554a49b499SJoy Latten return (void *)PTR_ALIGN((u8 *)aead_request_ctx(req), align + 1); 564a49b499SJoy Latten } 574a49b499SJoy Latten 584a49b499SJoy Latten static int set_msg_len(u8 *block, unsigned int msglen, int csize) 594a49b499SJoy Latten { 604a49b499SJoy Latten __be32 data; 614a49b499SJoy Latten 624a49b499SJoy Latten memset(block, 0, csize); 634a49b499SJoy Latten block += csize; 644a49b499SJoy Latten 654a49b499SJoy Latten if (csize >= 4) 664a49b499SJoy Latten csize = 4; 674a49b499SJoy Latten else if (msglen > (1 << (8 * csize))) 684a49b499SJoy Latten return -EOVERFLOW; 694a49b499SJoy Latten 704a49b499SJoy Latten data = cpu_to_be32(msglen); 714a49b499SJoy Latten memcpy(block - csize, (u8 *)&data + 4 - csize, csize); 724a49b499SJoy Latten 734a49b499SJoy Latten return 0; 744a49b499SJoy Latten } 754a49b499SJoy Latten 764a49b499SJoy Latten static int crypto_ccm_setkey(struct crypto_aead *aead, const u8 *key, 774a49b499SJoy Latten unsigned int keylen) 784a49b499SJoy Latten { 794a49b499SJoy Latten struct crypto_ccm_ctx *ctx = crypto_aead_ctx(aead); 804a49b499SJoy Latten struct crypto_ablkcipher *ctr = ctx->ctr; 814a49b499SJoy Latten struct crypto_cipher *tfm = ctx->cipher; 824a49b499SJoy Latten int err = 0; 834a49b499SJoy Latten 844a49b499SJoy Latten crypto_ablkcipher_clear_flags(ctr, CRYPTO_TFM_REQ_MASK); 854a49b499SJoy Latten crypto_ablkcipher_set_flags(ctr, crypto_aead_get_flags(aead) & 864a49b499SJoy Latten CRYPTO_TFM_REQ_MASK); 874a49b499SJoy Latten err = crypto_ablkcipher_setkey(ctr, key, keylen); 884a49b499SJoy Latten crypto_aead_set_flags(aead, crypto_ablkcipher_get_flags(ctr) & 894a49b499SJoy Latten CRYPTO_TFM_RES_MASK); 904a49b499SJoy Latten if (err) 914a49b499SJoy Latten goto out; 924a49b499SJoy Latten 934a49b499SJoy Latten crypto_cipher_clear_flags(tfm, CRYPTO_TFM_REQ_MASK); 944a49b499SJoy Latten crypto_cipher_set_flags(tfm, crypto_aead_get_flags(aead) & 954a49b499SJoy Latten CRYPTO_TFM_REQ_MASK); 964a49b499SJoy Latten err = crypto_cipher_setkey(tfm, key, keylen); 974a49b499SJoy Latten crypto_aead_set_flags(aead, crypto_cipher_get_flags(tfm) & 984a49b499SJoy Latten CRYPTO_TFM_RES_MASK); 994a49b499SJoy Latten 1004a49b499SJoy Latten out: 1014a49b499SJoy Latten return err; 1024a49b499SJoy Latten } 1034a49b499SJoy Latten 1044a49b499SJoy Latten static int crypto_ccm_setauthsize(struct crypto_aead *tfm, 1054a49b499SJoy Latten unsigned int authsize) 1064a49b499SJoy Latten { 1074a49b499SJoy Latten switch (authsize) { 1084a49b499SJoy Latten case 4: 1094a49b499SJoy Latten case 6: 1104a49b499SJoy Latten case 8: 1114a49b499SJoy Latten case 10: 1124a49b499SJoy Latten case 12: 1134a49b499SJoy Latten case 14: 1144a49b499SJoy Latten case 16: 1154a49b499SJoy Latten break; 1164a49b499SJoy Latten default: 1174a49b499SJoy Latten return -EINVAL; 1184a49b499SJoy Latten } 1194a49b499SJoy Latten 1204a49b499SJoy Latten return 0; 1214a49b499SJoy Latten } 1224a49b499SJoy Latten 1234a49b499SJoy Latten static int format_input(u8 *info, struct aead_request *req, 1244a49b499SJoy Latten unsigned int cryptlen) 1254a49b499SJoy Latten { 1264a49b499SJoy Latten struct crypto_aead *aead = crypto_aead_reqtfm(req); 1274a49b499SJoy Latten unsigned int lp = req->iv[0]; 1284a49b499SJoy Latten unsigned int l = lp + 1; 1294a49b499SJoy Latten unsigned int m; 1304a49b499SJoy Latten 1314a49b499SJoy Latten m = crypto_aead_authsize(aead); 1324a49b499SJoy Latten 1334a49b499SJoy Latten memcpy(info, req->iv, 16); 1344a49b499SJoy Latten 1354a49b499SJoy Latten /* format control info per RFC 3610 and 1364a49b499SJoy Latten * NIST Special Publication 800-38C 1374a49b499SJoy Latten */ 1384a49b499SJoy Latten *info |= (8 * ((m - 2) / 2)); 1394a49b499SJoy Latten if (req->assoclen) 1404a49b499SJoy Latten *info |= 64; 1414a49b499SJoy Latten 1424a49b499SJoy Latten return set_msg_len(info + 16 - l, cryptlen, l); 1434a49b499SJoy Latten } 1444a49b499SJoy Latten 1454a49b499SJoy Latten static int format_adata(u8 *adata, unsigned int a) 1464a49b499SJoy Latten { 1474a49b499SJoy Latten int len = 0; 1484a49b499SJoy Latten 1494a49b499SJoy Latten /* add control info for associated data 1504a49b499SJoy Latten * RFC 3610 and NIST Special Publication 800-38C 1514a49b499SJoy Latten */ 1524a49b499SJoy Latten if (a < 65280) { 1534a49b499SJoy Latten *(__be16 *)adata = cpu_to_be16(a); 1544a49b499SJoy Latten len = 2; 1554a49b499SJoy Latten } else { 1564a49b499SJoy Latten *(__be16 *)adata = cpu_to_be16(0xfffe); 1574a49b499SJoy Latten *(__be32 *)&adata[2] = cpu_to_be32(a); 1584a49b499SJoy Latten len = 6; 1594a49b499SJoy Latten } 1604a49b499SJoy Latten 1614a49b499SJoy Latten return len; 1624a49b499SJoy Latten } 1634a49b499SJoy Latten 1644a49b499SJoy Latten static void compute_mac(struct crypto_cipher *tfm, u8 *data, int n, 1654a49b499SJoy Latten struct crypto_ccm_req_priv_ctx *pctx) 1664a49b499SJoy Latten { 1674a49b499SJoy Latten unsigned int bs = 16; 1684a49b499SJoy Latten u8 *odata = pctx->odata; 1694a49b499SJoy Latten u8 *idata = pctx->idata; 1704a49b499SJoy Latten int datalen, getlen; 1714a49b499SJoy Latten 1724a49b499SJoy Latten datalen = n; 1734a49b499SJoy Latten 1744a49b499SJoy Latten /* first time in here, block may be partially filled. */ 1754a49b499SJoy Latten getlen = bs - pctx->ilen; 1764a49b499SJoy Latten if (datalen >= getlen) { 1774a49b499SJoy Latten memcpy(idata + pctx->ilen, data, getlen); 1784a49b499SJoy Latten crypto_xor(odata, idata, bs); 1794a49b499SJoy Latten crypto_cipher_encrypt_one(tfm, odata, odata); 1804a49b499SJoy Latten datalen -= getlen; 1814a49b499SJoy Latten data += getlen; 1824a49b499SJoy Latten pctx->ilen = 0; 1834a49b499SJoy Latten } 1844a49b499SJoy Latten 1854a49b499SJoy Latten /* now encrypt rest of data */ 1864a49b499SJoy Latten while (datalen >= bs) { 1874a49b499SJoy Latten crypto_xor(odata, data, bs); 1884a49b499SJoy Latten crypto_cipher_encrypt_one(tfm, odata, odata); 1894a49b499SJoy Latten 1904a49b499SJoy Latten datalen -= bs; 1914a49b499SJoy Latten data += bs; 1924a49b499SJoy Latten } 1934a49b499SJoy Latten 1944a49b499SJoy Latten /* check and see if there's leftover data that wasn't 1954a49b499SJoy Latten * enough to fill a block. 1964a49b499SJoy Latten */ 1974a49b499SJoy Latten if (datalen) { 1984a49b499SJoy Latten memcpy(idata + pctx->ilen, data, datalen); 1994a49b499SJoy Latten pctx->ilen += datalen; 2004a49b499SJoy Latten } 2014a49b499SJoy Latten } 2024a49b499SJoy Latten 2034a49b499SJoy Latten static void get_data_to_compute(struct crypto_cipher *tfm, 2044a49b499SJoy Latten struct crypto_ccm_req_priv_ctx *pctx, 2054a49b499SJoy Latten struct scatterlist *sg, unsigned int len) 2064a49b499SJoy Latten { 2074a49b499SJoy Latten struct scatter_walk walk; 2084a49b499SJoy Latten u8 *data_src; 2094a49b499SJoy Latten int n; 2104a49b499SJoy Latten 2114a49b499SJoy Latten scatterwalk_start(&walk, sg); 2124a49b499SJoy Latten 2134a49b499SJoy Latten while (len) { 2144a49b499SJoy Latten n = scatterwalk_clamp(&walk, len); 2154a49b499SJoy Latten if (!n) { 2164a49b499SJoy Latten scatterwalk_start(&walk, sg_next(walk.sg)); 2174a49b499SJoy Latten n = scatterwalk_clamp(&walk, len); 2184a49b499SJoy Latten } 219f0dfc0b0SCong Wang data_src = scatterwalk_map(&walk); 2204a49b499SJoy Latten 2214a49b499SJoy Latten compute_mac(tfm, data_src, n, pctx); 2224a49b499SJoy Latten len -= n; 2234a49b499SJoy Latten 224f0dfc0b0SCong Wang scatterwalk_unmap(data_src); 2254a49b499SJoy Latten scatterwalk_advance(&walk, n); 2264a49b499SJoy Latten scatterwalk_done(&walk, 0, len); 2274a49b499SJoy Latten if (len) 2284a49b499SJoy Latten crypto_yield(pctx->flags); 2294a49b499SJoy Latten } 2304a49b499SJoy Latten 2314a49b499SJoy Latten /* any leftover needs padding and then encrypted */ 2324a49b499SJoy Latten if (pctx->ilen) { 2334a49b499SJoy Latten int padlen; 2344a49b499SJoy Latten u8 *odata = pctx->odata; 2354a49b499SJoy Latten u8 *idata = pctx->idata; 2364a49b499SJoy Latten 2374a49b499SJoy Latten padlen = 16 - pctx->ilen; 2384a49b499SJoy Latten memset(idata + pctx->ilen, 0, padlen); 2394a49b499SJoy Latten crypto_xor(odata, idata, 16); 2404a49b499SJoy Latten crypto_cipher_encrypt_one(tfm, odata, odata); 2414a49b499SJoy Latten pctx->ilen = 0; 2424a49b499SJoy Latten } 2434a49b499SJoy Latten } 2444a49b499SJoy Latten 2454a49b499SJoy Latten static int crypto_ccm_auth(struct aead_request *req, struct scatterlist *plain, 2464a49b499SJoy Latten unsigned int cryptlen) 2474a49b499SJoy Latten { 2484a49b499SJoy Latten struct crypto_aead *aead = crypto_aead_reqtfm(req); 2494a49b499SJoy Latten struct crypto_ccm_ctx *ctx = crypto_aead_ctx(aead); 2504a49b499SJoy Latten struct crypto_ccm_req_priv_ctx *pctx = crypto_ccm_reqctx(req); 2514a49b499SJoy Latten struct crypto_cipher *cipher = ctx->cipher; 2524a49b499SJoy Latten unsigned int assoclen = req->assoclen; 2534a49b499SJoy Latten u8 *odata = pctx->odata; 2544a49b499SJoy Latten u8 *idata = pctx->idata; 2554a49b499SJoy Latten int err; 2564a49b499SJoy Latten 2574a49b499SJoy Latten /* format control data for input */ 2584a49b499SJoy Latten err = format_input(odata, req, cryptlen); 2594a49b499SJoy Latten if (err) 2604a49b499SJoy Latten goto out; 2614a49b499SJoy Latten 2624a49b499SJoy Latten /* encrypt first block to use as start in computing mac */ 2634a49b499SJoy Latten crypto_cipher_encrypt_one(cipher, odata, odata); 2644a49b499SJoy Latten 2654a49b499SJoy Latten /* format associated data and compute into mac */ 2664a49b499SJoy Latten if (assoclen) { 2674a49b499SJoy Latten pctx->ilen = format_adata(idata, assoclen); 2684a49b499SJoy Latten get_data_to_compute(cipher, pctx, req->assoc, req->assoclen); 269516280e7SJarod Wilson } else { 270516280e7SJarod Wilson pctx->ilen = 0; 2714a49b499SJoy Latten } 2724a49b499SJoy Latten 2734a49b499SJoy Latten /* compute plaintext into mac */ 2745638cabfSHoria Geanta if (cryptlen) 2754a49b499SJoy Latten get_data_to_compute(cipher, pctx, plain, cryptlen); 2764a49b499SJoy Latten 2774a49b499SJoy Latten out: 2784a49b499SJoy Latten return err; 2794a49b499SJoy Latten } 2804a49b499SJoy Latten 2814a49b499SJoy Latten static void crypto_ccm_encrypt_done(struct crypto_async_request *areq, int err) 2824a49b499SJoy Latten { 2834a49b499SJoy Latten struct aead_request *req = areq->data; 2844a49b499SJoy Latten struct crypto_aead *aead = crypto_aead_reqtfm(req); 2854a49b499SJoy Latten struct crypto_ccm_req_priv_ctx *pctx = crypto_ccm_reqctx(req); 2864a49b499SJoy Latten u8 *odata = pctx->odata; 2874a49b499SJoy Latten 2884a49b499SJoy Latten if (!err) 2894a49b499SJoy Latten scatterwalk_map_and_copy(odata, req->dst, req->cryptlen, 2904a49b499SJoy Latten crypto_aead_authsize(aead), 1); 2914a49b499SJoy Latten aead_request_complete(req, err); 2924a49b499SJoy Latten } 2934a49b499SJoy Latten 2944a49b499SJoy Latten static inline int crypto_ccm_check_iv(const u8 *iv) 2954a49b499SJoy Latten { 2964a49b499SJoy Latten /* 2 <= L <= 8, so 1 <= L' <= 7. */ 2974a49b499SJoy Latten if (1 > iv[0] || iv[0] > 7) 2984a49b499SJoy Latten return -EINVAL; 2994a49b499SJoy Latten 3004a49b499SJoy Latten return 0; 3014a49b499SJoy Latten } 3024a49b499SJoy Latten 3034a49b499SJoy Latten static int crypto_ccm_encrypt(struct aead_request *req) 3044a49b499SJoy Latten { 3054a49b499SJoy Latten struct crypto_aead *aead = crypto_aead_reqtfm(req); 3064a49b499SJoy Latten struct crypto_ccm_ctx *ctx = crypto_aead_ctx(aead); 3074a49b499SJoy Latten struct crypto_ccm_req_priv_ctx *pctx = crypto_ccm_reqctx(req); 3084a49b499SJoy Latten struct ablkcipher_request *abreq = &pctx->abreq; 3094a49b499SJoy Latten struct scatterlist *dst; 3104a49b499SJoy Latten unsigned int cryptlen = req->cryptlen; 3114a49b499SJoy Latten u8 *odata = pctx->odata; 3124a49b499SJoy Latten u8 *iv = req->iv; 3134a49b499SJoy Latten int err; 3144a49b499SJoy Latten 3154a49b499SJoy Latten err = crypto_ccm_check_iv(iv); 3164a49b499SJoy Latten if (err) 3174a49b499SJoy Latten return err; 3184a49b499SJoy Latten 3194a49b499SJoy Latten pctx->flags = aead_request_flags(req); 3204a49b499SJoy Latten 3214a49b499SJoy Latten err = crypto_ccm_auth(req, req->src, cryptlen); 3224a49b499SJoy Latten if (err) 3234a49b499SJoy Latten return err; 3244a49b499SJoy Latten 3254a49b499SJoy Latten /* Note: rfc 3610 and NIST 800-38C require counter of 3264a49b499SJoy Latten * zero to encrypt auth tag. 3274a49b499SJoy Latten */ 3284a49b499SJoy Latten memset(iv + 15 - iv[0], 0, iv[0] + 1); 3294a49b499SJoy Latten 3304a49b499SJoy Latten sg_init_table(pctx->src, 2); 3314a49b499SJoy Latten sg_set_buf(pctx->src, odata, 16); 3324a49b499SJoy Latten scatterwalk_sg_chain(pctx->src, 2, req->src); 3334a49b499SJoy Latten 3344a49b499SJoy Latten dst = pctx->src; 3354a49b499SJoy Latten if (req->src != req->dst) { 3364a49b499SJoy Latten sg_init_table(pctx->dst, 2); 3374a49b499SJoy Latten sg_set_buf(pctx->dst, odata, 16); 3384a49b499SJoy Latten scatterwalk_sg_chain(pctx->dst, 2, req->dst); 3394a49b499SJoy Latten dst = pctx->dst; 3404a49b499SJoy Latten } 3414a49b499SJoy Latten 3424a49b499SJoy Latten ablkcipher_request_set_tfm(abreq, ctx->ctr); 3434a49b499SJoy Latten ablkcipher_request_set_callback(abreq, pctx->flags, 3444a49b499SJoy Latten crypto_ccm_encrypt_done, req); 3454a49b499SJoy Latten ablkcipher_request_set_crypt(abreq, pctx->src, dst, cryptlen + 16, iv); 3464a49b499SJoy Latten err = crypto_ablkcipher_encrypt(abreq); 3474a49b499SJoy Latten if (err) 3484a49b499SJoy Latten return err; 3494a49b499SJoy Latten 3504a49b499SJoy Latten /* copy authtag to end of dst */ 3514a49b499SJoy Latten scatterwalk_map_and_copy(odata, req->dst, cryptlen, 3524a49b499SJoy Latten crypto_aead_authsize(aead), 1); 3534a49b499SJoy Latten return err; 3544a49b499SJoy Latten } 3554a49b499SJoy Latten 3564a49b499SJoy Latten static void crypto_ccm_decrypt_done(struct crypto_async_request *areq, 3574a49b499SJoy Latten int err) 3584a49b499SJoy Latten { 3594a49b499SJoy Latten struct aead_request *req = areq->data; 3604a49b499SJoy Latten struct crypto_ccm_req_priv_ctx *pctx = crypto_ccm_reqctx(req); 3614a49b499SJoy Latten struct crypto_aead *aead = crypto_aead_reqtfm(req); 3624a49b499SJoy Latten unsigned int authsize = crypto_aead_authsize(aead); 3634a49b499SJoy Latten unsigned int cryptlen = req->cryptlen - authsize; 3644a49b499SJoy Latten 3654a49b499SJoy Latten if (!err) { 3664a49b499SJoy Latten err = crypto_ccm_auth(req, req->dst, cryptlen); 3676bf37e5aSJames Yonan if (!err && crypto_memneq(pctx->auth_tag, pctx->odata, authsize)) 3684a49b499SJoy Latten err = -EBADMSG; 3694a49b499SJoy Latten } 3704a49b499SJoy Latten aead_request_complete(req, err); 3714a49b499SJoy Latten } 3724a49b499SJoy Latten 3734a49b499SJoy Latten static int crypto_ccm_decrypt(struct aead_request *req) 3744a49b499SJoy Latten { 3754a49b499SJoy Latten struct crypto_aead *aead = crypto_aead_reqtfm(req); 3764a49b499SJoy Latten struct crypto_ccm_ctx *ctx = crypto_aead_ctx(aead); 3774a49b499SJoy Latten struct crypto_ccm_req_priv_ctx *pctx = crypto_ccm_reqctx(req); 3784a49b499SJoy Latten struct ablkcipher_request *abreq = &pctx->abreq; 3794a49b499SJoy Latten struct scatterlist *dst; 3804a49b499SJoy Latten unsigned int authsize = crypto_aead_authsize(aead); 3814a49b499SJoy Latten unsigned int cryptlen = req->cryptlen; 3824a49b499SJoy Latten u8 *authtag = pctx->auth_tag; 3834a49b499SJoy Latten u8 *odata = pctx->odata; 3844a49b499SJoy Latten u8 *iv = req->iv; 3854a49b499SJoy Latten int err; 3864a49b499SJoy Latten 3874a49b499SJoy Latten if (cryptlen < authsize) 3884a49b499SJoy Latten return -EINVAL; 3894a49b499SJoy Latten cryptlen -= authsize; 3904a49b499SJoy Latten 3914a49b499SJoy Latten err = crypto_ccm_check_iv(iv); 3924a49b499SJoy Latten if (err) 3934a49b499SJoy Latten return err; 3944a49b499SJoy Latten 3954a49b499SJoy Latten pctx->flags = aead_request_flags(req); 3964a49b499SJoy Latten 3974a49b499SJoy Latten scatterwalk_map_and_copy(authtag, req->src, cryptlen, authsize, 0); 3984a49b499SJoy Latten 3994a49b499SJoy Latten memset(iv + 15 - iv[0], 0, iv[0] + 1); 4004a49b499SJoy Latten 4014a49b499SJoy Latten sg_init_table(pctx->src, 2); 4024a49b499SJoy Latten sg_set_buf(pctx->src, authtag, 16); 4034a49b499SJoy Latten scatterwalk_sg_chain(pctx->src, 2, req->src); 4044a49b499SJoy Latten 4054a49b499SJoy Latten dst = pctx->src; 4064a49b499SJoy Latten if (req->src != req->dst) { 4074a49b499SJoy Latten sg_init_table(pctx->dst, 2); 4084a49b499SJoy Latten sg_set_buf(pctx->dst, authtag, 16); 4094a49b499SJoy Latten scatterwalk_sg_chain(pctx->dst, 2, req->dst); 4104a49b499SJoy Latten dst = pctx->dst; 4114a49b499SJoy Latten } 4124a49b499SJoy Latten 4134a49b499SJoy Latten ablkcipher_request_set_tfm(abreq, ctx->ctr); 4144a49b499SJoy Latten ablkcipher_request_set_callback(abreq, pctx->flags, 4154a49b499SJoy Latten crypto_ccm_decrypt_done, req); 4164a49b499SJoy Latten ablkcipher_request_set_crypt(abreq, pctx->src, dst, cryptlen + 16, iv); 4174a49b499SJoy Latten err = crypto_ablkcipher_decrypt(abreq); 4184a49b499SJoy Latten if (err) 4194a49b499SJoy Latten return err; 4204a49b499SJoy Latten 4214a49b499SJoy Latten err = crypto_ccm_auth(req, req->dst, cryptlen); 4224a49b499SJoy Latten if (err) 4234a49b499SJoy Latten return err; 4244a49b499SJoy Latten 4254a49b499SJoy Latten /* verify */ 4266bf37e5aSJames Yonan if (crypto_memneq(authtag, odata, authsize)) 4274a49b499SJoy Latten return -EBADMSG; 4284a49b499SJoy Latten 4294a49b499SJoy Latten return err; 4304a49b499SJoy Latten } 4314a49b499SJoy Latten 4324a49b499SJoy Latten static int crypto_ccm_init_tfm(struct crypto_tfm *tfm) 4334a49b499SJoy Latten { 4344a49b499SJoy Latten struct crypto_instance *inst = (void *)tfm->__crt_alg; 4354a49b499SJoy Latten struct ccm_instance_ctx *ictx = crypto_instance_ctx(inst); 4364a49b499SJoy Latten struct crypto_ccm_ctx *ctx = crypto_tfm_ctx(tfm); 4374a49b499SJoy Latten struct crypto_cipher *cipher; 4384a49b499SJoy Latten struct crypto_ablkcipher *ctr; 4394a49b499SJoy Latten unsigned long align; 4404a49b499SJoy Latten int err; 4414a49b499SJoy Latten 4424a49b499SJoy Latten cipher = crypto_spawn_cipher(&ictx->cipher); 4434a49b499SJoy Latten if (IS_ERR(cipher)) 4444a49b499SJoy Latten return PTR_ERR(cipher); 4454a49b499SJoy Latten 4464a49b499SJoy Latten ctr = crypto_spawn_skcipher(&ictx->ctr); 4474a49b499SJoy Latten err = PTR_ERR(ctr); 4484a49b499SJoy Latten if (IS_ERR(ctr)) 4494a49b499SJoy Latten goto err_free_cipher; 4504a49b499SJoy Latten 4514a49b499SJoy Latten ctx->cipher = cipher; 4524a49b499SJoy Latten ctx->ctr = ctr; 4534a49b499SJoy Latten 4544a49b499SJoy Latten align = crypto_tfm_alg_alignmask(tfm); 4554a49b499SJoy Latten align &= ~(crypto_tfm_ctx_alignment() - 1); 4564a49b499SJoy Latten tfm->crt_aead.reqsize = align + 4574a49b499SJoy Latten sizeof(struct crypto_ccm_req_priv_ctx) + 4584a49b499SJoy Latten crypto_ablkcipher_reqsize(ctr); 4594a49b499SJoy Latten 4604a49b499SJoy Latten return 0; 4614a49b499SJoy Latten 4624a49b499SJoy Latten err_free_cipher: 4634a49b499SJoy Latten crypto_free_cipher(cipher); 4644a49b499SJoy Latten return err; 4654a49b499SJoy Latten } 4664a49b499SJoy Latten 4674a49b499SJoy Latten static void crypto_ccm_exit_tfm(struct crypto_tfm *tfm) 4684a49b499SJoy Latten { 4694a49b499SJoy Latten struct crypto_ccm_ctx *ctx = crypto_tfm_ctx(tfm); 4704a49b499SJoy Latten 4714a49b499SJoy Latten crypto_free_cipher(ctx->cipher); 4724a49b499SJoy Latten crypto_free_ablkcipher(ctx->ctr); 4734a49b499SJoy Latten } 4744a49b499SJoy Latten 4754a49b499SJoy Latten static struct crypto_instance *crypto_ccm_alloc_common(struct rtattr **tb, 4764a49b499SJoy Latten const char *full_name, 4774a49b499SJoy Latten const char *ctr_name, 4784a49b499SJoy Latten const char *cipher_name) 4794a49b499SJoy Latten { 4804a49b499SJoy Latten struct crypto_attr_type *algt; 4814a49b499SJoy Latten struct crypto_instance *inst; 4824a49b499SJoy Latten struct crypto_alg *ctr; 4834a49b499SJoy Latten struct crypto_alg *cipher; 4844a49b499SJoy Latten struct ccm_instance_ctx *ictx; 4854a49b499SJoy Latten int err; 4864a49b499SJoy Latten 4874a49b499SJoy Latten algt = crypto_get_attr_type(tb); 4884a49b499SJoy Latten if (IS_ERR(algt)) 4893e8afe35SJulia Lawall return ERR_CAST(algt); 4904a49b499SJoy Latten 4914a49b499SJoy Latten if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask) 4924a49b499SJoy Latten return ERR_PTR(-EINVAL); 4934a49b499SJoy Latten 4944a49b499SJoy Latten cipher = crypto_alg_mod_lookup(cipher_name, CRYPTO_ALG_TYPE_CIPHER, 4954a49b499SJoy Latten CRYPTO_ALG_TYPE_MASK); 4964a49b499SJoy Latten if (IS_ERR(cipher)) 4973e8afe35SJulia Lawall return ERR_CAST(cipher); 4984a49b499SJoy Latten 4994a49b499SJoy Latten err = -EINVAL; 5004a49b499SJoy Latten if (cipher->cra_blocksize != 16) 5014a49b499SJoy Latten goto out_put_cipher; 5024a49b499SJoy Latten 5034a49b499SJoy Latten inst = kzalloc(sizeof(*inst) + sizeof(*ictx), GFP_KERNEL); 5044a49b499SJoy Latten err = -ENOMEM; 5054a49b499SJoy Latten if (!inst) 5064a49b499SJoy Latten goto out_put_cipher; 5074a49b499SJoy Latten 5084a49b499SJoy Latten ictx = crypto_instance_ctx(inst); 5094a49b499SJoy Latten 5104a49b499SJoy Latten err = crypto_init_spawn(&ictx->cipher, cipher, inst, 5114a49b499SJoy Latten CRYPTO_ALG_TYPE_MASK); 5124a49b499SJoy Latten if (err) 5134a49b499SJoy Latten goto err_free_inst; 5144a49b499SJoy Latten 5154a49b499SJoy Latten crypto_set_skcipher_spawn(&ictx->ctr, inst); 5164a49b499SJoy Latten err = crypto_grab_skcipher(&ictx->ctr, ctr_name, 0, 5174a49b499SJoy Latten crypto_requires_sync(algt->type, 5184a49b499SJoy Latten algt->mask)); 5194a49b499SJoy Latten if (err) 5204a49b499SJoy Latten goto err_drop_cipher; 5214a49b499SJoy Latten 5224a49b499SJoy Latten ctr = crypto_skcipher_spawn_alg(&ictx->ctr); 5234a49b499SJoy Latten 5244a49b499SJoy Latten /* Not a stream cipher? */ 5254a49b499SJoy Latten err = -EINVAL; 5264a49b499SJoy Latten if (ctr->cra_blocksize != 1) 5274a49b499SJoy Latten goto err_drop_ctr; 5284a49b499SJoy Latten 5294a49b499SJoy Latten /* We want the real thing! */ 5304a49b499SJoy Latten if (ctr->cra_ablkcipher.ivsize != 16) 5314a49b499SJoy Latten goto err_drop_ctr; 5324a49b499SJoy Latten 5334a49b499SJoy Latten err = -ENAMETOOLONG; 5344a49b499SJoy Latten if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME, 5354a49b499SJoy Latten "ccm_base(%s,%s)", ctr->cra_driver_name, 5364a49b499SJoy Latten cipher->cra_driver_name) >= CRYPTO_MAX_ALG_NAME) 5374a49b499SJoy Latten goto err_drop_ctr; 5384a49b499SJoy Latten 5394a49b499SJoy Latten memcpy(inst->alg.cra_name, full_name, CRYPTO_MAX_ALG_NAME); 5404a49b499SJoy Latten 5414a49b499SJoy Latten inst->alg.cra_flags = CRYPTO_ALG_TYPE_AEAD; 5424a49b499SJoy Latten inst->alg.cra_flags |= ctr->cra_flags & CRYPTO_ALG_ASYNC; 5434a49b499SJoy Latten inst->alg.cra_priority = cipher->cra_priority + ctr->cra_priority; 5444a49b499SJoy Latten inst->alg.cra_blocksize = 1; 5454a49b499SJoy Latten inst->alg.cra_alignmask = cipher->cra_alignmask | ctr->cra_alignmask | 5464a49b499SJoy Latten (__alignof__(u32) - 1); 5474a49b499SJoy Latten inst->alg.cra_type = &crypto_aead_type; 5484a49b499SJoy Latten inst->alg.cra_aead.ivsize = 16; 5494a49b499SJoy Latten inst->alg.cra_aead.maxauthsize = 16; 5504a49b499SJoy Latten inst->alg.cra_ctxsize = sizeof(struct crypto_ccm_ctx); 5514a49b499SJoy Latten inst->alg.cra_init = crypto_ccm_init_tfm; 5524a49b499SJoy Latten inst->alg.cra_exit = crypto_ccm_exit_tfm; 5534a49b499SJoy Latten inst->alg.cra_aead.setkey = crypto_ccm_setkey; 5544a49b499SJoy Latten inst->alg.cra_aead.setauthsize = crypto_ccm_setauthsize; 5554a49b499SJoy Latten inst->alg.cra_aead.encrypt = crypto_ccm_encrypt; 5564a49b499SJoy Latten inst->alg.cra_aead.decrypt = crypto_ccm_decrypt; 5574a49b499SJoy Latten 5584a49b499SJoy Latten out: 5594a49b499SJoy Latten crypto_mod_put(cipher); 5604a49b499SJoy Latten return inst; 5614a49b499SJoy Latten 5624a49b499SJoy Latten err_drop_ctr: 5634a49b499SJoy Latten crypto_drop_skcipher(&ictx->ctr); 5644a49b499SJoy Latten err_drop_cipher: 5654a49b499SJoy Latten crypto_drop_spawn(&ictx->cipher); 5664a49b499SJoy Latten err_free_inst: 5674a49b499SJoy Latten kfree(inst); 5684a49b499SJoy Latten out_put_cipher: 5694a49b499SJoy Latten inst = ERR_PTR(err); 5704a49b499SJoy Latten goto out; 5714a49b499SJoy Latten } 5724a49b499SJoy Latten 5734a49b499SJoy Latten static struct crypto_instance *crypto_ccm_alloc(struct rtattr **tb) 5744a49b499SJoy Latten { 5754a49b499SJoy Latten const char *cipher_name; 5764a49b499SJoy Latten char ctr_name[CRYPTO_MAX_ALG_NAME]; 5774a49b499SJoy Latten char full_name[CRYPTO_MAX_ALG_NAME]; 5784a49b499SJoy Latten 5794a49b499SJoy Latten cipher_name = crypto_attr_alg_name(tb[1]); 5804a49b499SJoy Latten if (IS_ERR(cipher_name)) 5813e8afe35SJulia Lawall return ERR_CAST(cipher_name); 5824a49b499SJoy Latten 5834a49b499SJoy Latten if (snprintf(ctr_name, CRYPTO_MAX_ALG_NAME, "ctr(%s)", 5844a49b499SJoy Latten cipher_name) >= CRYPTO_MAX_ALG_NAME) 5854a49b499SJoy Latten return ERR_PTR(-ENAMETOOLONG); 5864a49b499SJoy Latten 5874a49b499SJoy Latten if (snprintf(full_name, CRYPTO_MAX_ALG_NAME, "ccm(%s)", cipher_name) >= 5884a49b499SJoy Latten CRYPTO_MAX_ALG_NAME) 5894a49b499SJoy Latten return ERR_PTR(-ENAMETOOLONG); 5904a49b499SJoy Latten 5914a49b499SJoy Latten return crypto_ccm_alloc_common(tb, full_name, ctr_name, cipher_name); 5924a49b499SJoy Latten } 5934a49b499SJoy Latten 5944a49b499SJoy Latten static void crypto_ccm_free(struct crypto_instance *inst) 5954a49b499SJoy Latten { 5964a49b499SJoy Latten struct ccm_instance_ctx *ctx = crypto_instance_ctx(inst); 5974a49b499SJoy Latten 5984a49b499SJoy Latten crypto_drop_spawn(&ctx->cipher); 5994a49b499SJoy Latten crypto_drop_skcipher(&ctx->ctr); 6004a49b499SJoy Latten kfree(inst); 6014a49b499SJoy Latten } 6024a49b499SJoy Latten 6034a49b499SJoy Latten static struct crypto_template crypto_ccm_tmpl = { 6044a49b499SJoy Latten .name = "ccm", 6054a49b499SJoy Latten .alloc = crypto_ccm_alloc, 6064a49b499SJoy Latten .free = crypto_ccm_free, 6074a49b499SJoy Latten .module = THIS_MODULE, 6084a49b499SJoy Latten }; 6094a49b499SJoy Latten 6104a49b499SJoy Latten static struct crypto_instance *crypto_ccm_base_alloc(struct rtattr **tb) 6114a49b499SJoy Latten { 6124a49b499SJoy Latten const char *ctr_name; 6134a49b499SJoy Latten const char *cipher_name; 6144a49b499SJoy Latten char full_name[CRYPTO_MAX_ALG_NAME]; 6154a49b499SJoy Latten 6164a49b499SJoy Latten ctr_name = crypto_attr_alg_name(tb[1]); 6174a49b499SJoy Latten if (IS_ERR(ctr_name)) 6183e8afe35SJulia Lawall return ERR_CAST(ctr_name); 6194a49b499SJoy Latten 6204a49b499SJoy Latten cipher_name = crypto_attr_alg_name(tb[2]); 6214a49b499SJoy Latten if (IS_ERR(cipher_name)) 6223e8afe35SJulia Lawall return ERR_CAST(cipher_name); 6234a49b499SJoy Latten 6244a49b499SJoy Latten if (snprintf(full_name, CRYPTO_MAX_ALG_NAME, "ccm_base(%s,%s)", 6254a49b499SJoy Latten ctr_name, cipher_name) >= CRYPTO_MAX_ALG_NAME) 6264a49b499SJoy Latten return ERR_PTR(-ENAMETOOLONG); 6274a49b499SJoy Latten 6284a49b499SJoy Latten return crypto_ccm_alloc_common(tb, full_name, ctr_name, cipher_name); 6294a49b499SJoy Latten } 6304a49b499SJoy Latten 6314a49b499SJoy Latten static struct crypto_template crypto_ccm_base_tmpl = { 6324a49b499SJoy Latten .name = "ccm_base", 6334a49b499SJoy Latten .alloc = crypto_ccm_base_alloc, 6344a49b499SJoy Latten .free = crypto_ccm_free, 6354a49b499SJoy Latten .module = THIS_MODULE, 6364a49b499SJoy Latten }; 6374a49b499SJoy Latten 6384a49b499SJoy Latten static int crypto_rfc4309_setkey(struct crypto_aead *parent, const u8 *key, 6394a49b499SJoy Latten unsigned int keylen) 6404a49b499SJoy Latten { 6414a49b499SJoy Latten struct crypto_rfc4309_ctx *ctx = crypto_aead_ctx(parent); 6424a49b499SJoy Latten struct crypto_aead *child = ctx->child; 6434a49b499SJoy Latten int err; 6444a49b499SJoy Latten 6454a49b499SJoy Latten if (keylen < 3) 6464a49b499SJoy Latten return -EINVAL; 6474a49b499SJoy Latten 6484a49b499SJoy Latten keylen -= 3; 6494a49b499SJoy Latten memcpy(ctx->nonce, key + keylen, 3); 6504a49b499SJoy Latten 6514a49b499SJoy Latten crypto_aead_clear_flags(child, CRYPTO_TFM_REQ_MASK); 6524a49b499SJoy Latten crypto_aead_set_flags(child, crypto_aead_get_flags(parent) & 6534a49b499SJoy Latten CRYPTO_TFM_REQ_MASK); 6544a49b499SJoy Latten err = crypto_aead_setkey(child, key, keylen); 6554a49b499SJoy Latten crypto_aead_set_flags(parent, crypto_aead_get_flags(child) & 6564a49b499SJoy Latten CRYPTO_TFM_RES_MASK); 6574a49b499SJoy Latten 6584a49b499SJoy Latten return err; 6594a49b499SJoy Latten } 6604a49b499SJoy Latten 6614a49b499SJoy Latten static int crypto_rfc4309_setauthsize(struct crypto_aead *parent, 6624a49b499SJoy Latten unsigned int authsize) 6634a49b499SJoy Latten { 6644a49b499SJoy Latten struct crypto_rfc4309_ctx *ctx = crypto_aead_ctx(parent); 6654a49b499SJoy Latten 6664a49b499SJoy Latten switch (authsize) { 6674a49b499SJoy Latten case 8: 6684a49b499SJoy Latten case 12: 6694a49b499SJoy Latten case 16: 6704a49b499SJoy Latten break; 6714a49b499SJoy Latten default: 6724a49b499SJoy Latten return -EINVAL; 6734a49b499SJoy Latten } 6744a49b499SJoy Latten 6754a49b499SJoy Latten return crypto_aead_setauthsize(ctx->child, authsize); 6764a49b499SJoy Latten } 6774a49b499SJoy Latten 6784a49b499SJoy Latten static struct aead_request *crypto_rfc4309_crypt(struct aead_request *req) 6794a49b499SJoy Latten { 6804a49b499SJoy Latten struct aead_request *subreq = aead_request_ctx(req); 6814a49b499SJoy Latten struct crypto_aead *aead = crypto_aead_reqtfm(req); 6824a49b499SJoy Latten struct crypto_rfc4309_ctx *ctx = crypto_aead_ctx(aead); 6834a49b499SJoy Latten struct crypto_aead *child = ctx->child; 6844a49b499SJoy Latten u8 *iv = PTR_ALIGN((u8 *)(subreq + 1) + crypto_aead_reqsize(child), 6854a49b499SJoy Latten crypto_aead_alignmask(child) + 1); 6864a49b499SJoy Latten 6874a49b499SJoy Latten /* L' */ 6884a49b499SJoy Latten iv[0] = 3; 6894a49b499SJoy Latten 6904a49b499SJoy Latten memcpy(iv + 1, ctx->nonce, 3); 6914a49b499SJoy Latten memcpy(iv + 4, req->iv, 8); 6924a49b499SJoy Latten 6934a49b499SJoy Latten aead_request_set_tfm(subreq, child); 6944a49b499SJoy Latten aead_request_set_callback(subreq, req->base.flags, req->base.complete, 6954a49b499SJoy Latten req->base.data); 6964a49b499SJoy Latten aead_request_set_crypt(subreq, req->src, req->dst, req->cryptlen, iv); 6974a49b499SJoy Latten aead_request_set_assoc(subreq, req->assoc, req->assoclen); 6984a49b499SJoy Latten 6994a49b499SJoy Latten return subreq; 7004a49b499SJoy Latten } 7014a49b499SJoy Latten 7024a49b499SJoy Latten static int crypto_rfc4309_encrypt(struct aead_request *req) 7034a49b499SJoy Latten { 7044a49b499SJoy Latten req = crypto_rfc4309_crypt(req); 7054a49b499SJoy Latten 7064a49b499SJoy Latten return crypto_aead_encrypt(req); 7074a49b499SJoy Latten } 7084a49b499SJoy Latten 7094a49b499SJoy Latten static int crypto_rfc4309_decrypt(struct aead_request *req) 7104a49b499SJoy Latten { 7114a49b499SJoy Latten req = crypto_rfc4309_crypt(req); 7124a49b499SJoy Latten 7134a49b499SJoy Latten return crypto_aead_decrypt(req); 7144a49b499SJoy Latten } 7154a49b499SJoy Latten 7164a49b499SJoy Latten static int crypto_rfc4309_init_tfm(struct crypto_tfm *tfm) 7174a49b499SJoy Latten { 7184a49b499SJoy Latten struct crypto_instance *inst = (void *)tfm->__crt_alg; 7194a49b499SJoy Latten struct crypto_aead_spawn *spawn = crypto_instance_ctx(inst); 7204a49b499SJoy Latten struct crypto_rfc4309_ctx *ctx = crypto_tfm_ctx(tfm); 7214a49b499SJoy Latten struct crypto_aead *aead; 7224a49b499SJoy Latten unsigned long align; 7234a49b499SJoy Latten 7244a49b499SJoy Latten aead = crypto_spawn_aead(spawn); 7254a49b499SJoy Latten if (IS_ERR(aead)) 7264a49b499SJoy Latten return PTR_ERR(aead); 7274a49b499SJoy Latten 7284a49b499SJoy Latten ctx->child = aead; 7294a49b499SJoy Latten 7304a49b499SJoy Latten align = crypto_aead_alignmask(aead); 7314a49b499SJoy Latten align &= ~(crypto_tfm_ctx_alignment() - 1); 7324a49b499SJoy Latten tfm->crt_aead.reqsize = sizeof(struct aead_request) + 7334a49b499SJoy Latten ALIGN(crypto_aead_reqsize(aead), 7344a49b499SJoy Latten crypto_tfm_ctx_alignment()) + 7354a49b499SJoy Latten align + 16; 7364a49b499SJoy Latten 7374a49b499SJoy Latten return 0; 7384a49b499SJoy Latten } 7394a49b499SJoy Latten 7404a49b499SJoy Latten static void crypto_rfc4309_exit_tfm(struct crypto_tfm *tfm) 7414a49b499SJoy Latten { 7424a49b499SJoy Latten struct crypto_rfc4309_ctx *ctx = crypto_tfm_ctx(tfm); 7434a49b499SJoy Latten 7444a49b499SJoy Latten crypto_free_aead(ctx->child); 7454a49b499SJoy Latten } 7464a49b499SJoy Latten 7474a49b499SJoy Latten static struct crypto_instance *crypto_rfc4309_alloc(struct rtattr **tb) 7484a49b499SJoy Latten { 7494a49b499SJoy Latten struct crypto_attr_type *algt; 7504a49b499SJoy Latten struct crypto_instance *inst; 7514a49b499SJoy Latten struct crypto_aead_spawn *spawn; 7524a49b499SJoy Latten struct crypto_alg *alg; 7534a49b499SJoy Latten const char *ccm_name; 7544a49b499SJoy Latten int err; 7554a49b499SJoy Latten 7564a49b499SJoy Latten algt = crypto_get_attr_type(tb); 7574a49b499SJoy Latten if (IS_ERR(algt)) 7583e8afe35SJulia Lawall return ERR_CAST(algt); 7594a49b499SJoy Latten 7604a49b499SJoy Latten if ((algt->type ^ CRYPTO_ALG_TYPE_AEAD) & algt->mask) 7614a49b499SJoy Latten return ERR_PTR(-EINVAL); 7624a49b499SJoy Latten 7634a49b499SJoy Latten ccm_name = crypto_attr_alg_name(tb[1]); 7644a49b499SJoy Latten if (IS_ERR(ccm_name)) 7653e8afe35SJulia Lawall return ERR_CAST(ccm_name); 7664a49b499SJoy Latten 7674a49b499SJoy Latten inst = kzalloc(sizeof(*inst) + sizeof(*spawn), GFP_KERNEL); 7684a49b499SJoy Latten if (!inst) 7694a49b499SJoy Latten return ERR_PTR(-ENOMEM); 7704a49b499SJoy Latten 7714a49b499SJoy Latten spawn = crypto_instance_ctx(inst); 7724a49b499SJoy Latten crypto_set_aead_spawn(spawn, inst); 7734a49b499SJoy Latten err = crypto_grab_aead(spawn, ccm_name, 0, 7744a49b499SJoy Latten crypto_requires_sync(algt->type, algt->mask)); 7754a49b499SJoy Latten if (err) 7764a49b499SJoy Latten goto out_free_inst; 7774a49b499SJoy Latten 7784a49b499SJoy Latten alg = crypto_aead_spawn_alg(spawn); 7794a49b499SJoy Latten 7804a49b499SJoy Latten err = -EINVAL; 7814a49b499SJoy Latten 7824a49b499SJoy Latten /* We only support 16-byte blocks. */ 7834a49b499SJoy Latten if (alg->cra_aead.ivsize != 16) 7844a49b499SJoy Latten goto out_drop_alg; 7854a49b499SJoy Latten 7864a49b499SJoy Latten /* Not a stream cipher? */ 7874a49b499SJoy Latten if (alg->cra_blocksize != 1) 7884a49b499SJoy Latten goto out_drop_alg; 7894a49b499SJoy Latten 7904a49b499SJoy Latten err = -ENAMETOOLONG; 7914a49b499SJoy Latten if (snprintf(inst->alg.cra_name, CRYPTO_MAX_ALG_NAME, 7924a49b499SJoy Latten "rfc4309(%s)", alg->cra_name) >= CRYPTO_MAX_ALG_NAME || 7934a49b499SJoy Latten snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME, 7944a49b499SJoy Latten "rfc4309(%s)", alg->cra_driver_name) >= 7954a49b499SJoy Latten CRYPTO_MAX_ALG_NAME) 7964a49b499SJoy Latten goto out_drop_alg; 7974a49b499SJoy Latten 7984a49b499SJoy Latten inst->alg.cra_flags = CRYPTO_ALG_TYPE_AEAD; 7994a49b499SJoy Latten inst->alg.cra_flags |= alg->cra_flags & CRYPTO_ALG_ASYNC; 8004a49b499SJoy Latten inst->alg.cra_priority = alg->cra_priority; 8014a49b499SJoy Latten inst->alg.cra_blocksize = 1; 8024a49b499SJoy Latten inst->alg.cra_alignmask = alg->cra_alignmask; 8034a49b499SJoy Latten inst->alg.cra_type = &crypto_nivaead_type; 8044a49b499SJoy Latten 8054a49b499SJoy Latten inst->alg.cra_aead.ivsize = 8; 8064a49b499SJoy Latten inst->alg.cra_aead.maxauthsize = 16; 8074a49b499SJoy Latten 8084a49b499SJoy Latten inst->alg.cra_ctxsize = sizeof(struct crypto_rfc4309_ctx); 8094a49b499SJoy Latten 8104a49b499SJoy Latten inst->alg.cra_init = crypto_rfc4309_init_tfm; 8114a49b499SJoy Latten inst->alg.cra_exit = crypto_rfc4309_exit_tfm; 8124a49b499SJoy Latten 8134a49b499SJoy Latten inst->alg.cra_aead.setkey = crypto_rfc4309_setkey; 8144a49b499SJoy Latten inst->alg.cra_aead.setauthsize = crypto_rfc4309_setauthsize; 8154a49b499SJoy Latten inst->alg.cra_aead.encrypt = crypto_rfc4309_encrypt; 8164a49b499SJoy Latten inst->alg.cra_aead.decrypt = crypto_rfc4309_decrypt; 8174a49b499SJoy Latten 8184a49b499SJoy Latten inst->alg.cra_aead.geniv = "seqiv"; 8194a49b499SJoy Latten 8204a49b499SJoy Latten out: 8214a49b499SJoy Latten return inst; 8224a49b499SJoy Latten 8234a49b499SJoy Latten out_drop_alg: 8244a49b499SJoy Latten crypto_drop_aead(spawn); 8254a49b499SJoy Latten out_free_inst: 8264a49b499SJoy Latten kfree(inst); 8274a49b499SJoy Latten inst = ERR_PTR(err); 8284a49b499SJoy Latten goto out; 8294a49b499SJoy Latten } 8304a49b499SJoy Latten 8314a49b499SJoy Latten static void crypto_rfc4309_free(struct crypto_instance *inst) 8324a49b499SJoy Latten { 8334a49b499SJoy Latten crypto_drop_spawn(crypto_instance_ctx(inst)); 8344a49b499SJoy Latten kfree(inst); 8354a49b499SJoy Latten } 8364a49b499SJoy Latten 8374a49b499SJoy Latten static struct crypto_template crypto_rfc4309_tmpl = { 8384a49b499SJoy Latten .name = "rfc4309", 8394a49b499SJoy Latten .alloc = crypto_rfc4309_alloc, 8404a49b499SJoy Latten .free = crypto_rfc4309_free, 8414a49b499SJoy Latten .module = THIS_MODULE, 8424a49b499SJoy Latten }; 8434a49b499SJoy Latten 8444a49b499SJoy Latten static int __init crypto_ccm_module_init(void) 8454a49b499SJoy Latten { 8464a49b499SJoy Latten int err; 8474a49b499SJoy Latten 8484a49b499SJoy Latten err = crypto_register_template(&crypto_ccm_base_tmpl); 8494a49b499SJoy Latten if (err) 8504a49b499SJoy Latten goto out; 8514a49b499SJoy Latten 8524a49b499SJoy Latten err = crypto_register_template(&crypto_ccm_tmpl); 8534a49b499SJoy Latten if (err) 8544a49b499SJoy Latten goto out_undo_base; 8554a49b499SJoy Latten 8564a49b499SJoy Latten err = crypto_register_template(&crypto_rfc4309_tmpl); 8574a49b499SJoy Latten if (err) 8584a49b499SJoy Latten goto out_undo_ccm; 8594a49b499SJoy Latten 8604a49b499SJoy Latten out: 8614a49b499SJoy Latten return err; 8624a49b499SJoy Latten 8634a49b499SJoy Latten out_undo_ccm: 8644a49b499SJoy Latten crypto_unregister_template(&crypto_ccm_tmpl); 8654a49b499SJoy Latten out_undo_base: 8664a49b499SJoy Latten crypto_unregister_template(&crypto_ccm_base_tmpl); 8674a49b499SJoy Latten goto out; 8684a49b499SJoy Latten } 8694a49b499SJoy Latten 8704a49b499SJoy Latten static void __exit crypto_ccm_module_exit(void) 8714a49b499SJoy Latten { 8724a49b499SJoy Latten crypto_unregister_template(&crypto_rfc4309_tmpl); 8734a49b499SJoy Latten crypto_unregister_template(&crypto_ccm_tmpl); 8744a49b499SJoy Latten crypto_unregister_template(&crypto_ccm_base_tmpl); 8754a49b499SJoy Latten } 8764a49b499SJoy Latten 8774a49b499SJoy Latten module_init(crypto_ccm_module_init); 8784a49b499SJoy Latten module_exit(crypto_ccm_module_exit); 8794a49b499SJoy Latten 8804a49b499SJoy Latten MODULE_LICENSE("GPL"); 8814a49b499SJoy Latten MODULE_DESCRIPTION("Counter with CBC MAC"); 8824a49b499SJoy Latten MODULE_ALIAS("ccm_base"); 8834a49b499SJoy Latten MODULE_ALIAS("rfc4309"); 884