11da177e4SLinus Torvalds #ifndef _NET_ESP_H 21da177e4SLinus Torvalds #define _NET_ESP_H 31da177e4SLinus Torvalds 49409f38aSHerbert Xu #include <linux/crypto.h> 51da177e4SLinus Torvalds #include <net/xfrm.h> 61da177e4SLinus Torvalds #include <asm/scatterlist.h> 71da177e4SLinus Torvalds 81da177e4SLinus Torvalds #define ESP_NUM_FAST_SG 4 91da177e4SLinus Torvalds 101da177e4SLinus Torvalds struct esp_data 111da177e4SLinus Torvalds { 121da177e4SLinus Torvalds struct scatterlist sgbuf[ESP_NUM_FAST_SG]; 131da177e4SLinus Torvalds 141da177e4SLinus Torvalds /* Confidentiality */ 151da177e4SLinus Torvalds struct { 16e4bec827SDavid S. Miller int padlen; /* 0..255 */ 171da177e4SLinus Torvalds /* ivlen is offset from enc_data, where encrypted data start. 181da177e4SLinus Torvalds * It is logically different of crypto_tfm_alg_ivsize(tfm). 191da177e4SLinus Torvalds * We assume that it is either zero (no ivec), or 201da177e4SLinus Torvalds * >= crypto_tfm_alg_ivsize(tfm). */ 211da177e4SLinus Torvalds int ivlen; 22e4bec827SDavid S. Miller int ivinitted; 23e4bec827SDavid S. Miller u8 *ivec; /* ivec buffer */ 246b7326c8SHerbert Xu struct crypto_blkcipher *tfm; /* crypto handle */ 251da177e4SLinus Torvalds } conf; 261da177e4SLinus Torvalds 271da177e4SLinus Torvalds /* Integrity. It is active when icv_full_len != 0 */ 281da177e4SLinus Torvalds struct { 291da177e4SLinus Torvalds u8 *work_icv; 301da177e4SLinus Torvalds int icv_full_len; 311da177e4SLinus Torvalds int icv_trunc_len; 3207d4ee58SHerbert Xu struct crypto_hash *tfm; 331da177e4SLinus Torvalds } auth; 341da177e4SLinus Torvalds }; 351da177e4SLinus Torvalds 361da177e4SLinus Torvalds extern void *pskb_put(struct sk_buff *skb, struct sk_buff *tail, int len); 371da177e4SLinus Torvalds 3807d4ee58SHerbert Xu static inline int esp_mac_digest(struct esp_data *esp, struct sk_buff *skb, 3907d4ee58SHerbert Xu int offset, int len) 401da177e4SLinus Torvalds { 4107d4ee58SHerbert Xu struct hash_desc desc; 4207d4ee58SHerbert Xu int err; 431da177e4SLinus Torvalds 4407d4ee58SHerbert Xu desc.tfm = esp->auth.tfm; 4507d4ee58SHerbert Xu desc.flags = 0; 4607d4ee58SHerbert Xu 4707d4ee58SHerbert Xu err = crypto_hash_init(&desc); 4807d4ee58SHerbert Xu if (unlikely(err)) 4907d4ee58SHerbert Xu return err; 5007d4ee58SHerbert Xu err = skb_icv_walk(skb, &desc, offset, len, crypto_hash_update); 5107d4ee58SHerbert Xu if (unlikely(err)) 5207d4ee58SHerbert Xu return err; 5307d4ee58SHerbert Xu return crypto_hash_final(&desc, esp->auth.work_icv); 541da177e4SLinus Torvalds } 551da177e4SLinus Torvalds 5687bdc48dSHerbert Xu struct ip_esp_hdr; 5787bdc48dSHerbert Xu 5887bdc48dSHerbert Xu static inline struct ip_esp_hdr *ip_esp_hdr(const struct sk_buff *skb) 5987bdc48dSHerbert Xu { 6087bdc48dSHerbert Xu return (struct ip_esp_hdr *)skb_transport_header(skb); 6187bdc48dSHerbert Xu } 6287bdc48dSHerbert Xu 631da177e4SLinus Torvalds #endif 64