11da177e4SLinus Torvalds #ifndef _NET_ESP_H 21da177e4SLinus Torvalds #define _NET_ESP_H 31da177e4SLinus Torvalds 49409f38aSHerbert Xu #include <linux/crypto.h> 51da177e4SLinus Torvalds #include <net/xfrm.h> 61da177e4SLinus Torvalds #include <asm/scatterlist.h> 71da177e4SLinus Torvalds 81da177e4SLinus Torvalds #define ESP_NUM_FAST_SG 4 91da177e4SLinus Torvalds 101da177e4SLinus Torvalds struct esp_data 111da177e4SLinus Torvalds { 121da177e4SLinus Torvalds struct scatterlist sgbuf[ESP_NUM_FAST_SG]; 131da177e4SLinus Torvalds 141da177e4SLinus Torvalds /* Confidentiality */ 151da177e4SLinus Torvalds struct { 161da177e4SLinus Torvalds u8 *key; /* Key */ 171da177e4SLinus Torvalds int key_len; /* Key length */ 18e4bec827SDavid S. Miller int padlen; /* 0..255 */ 191da177e4SLinus Torvalds /* ivlen is offset from enc_data, where encrypted data start. 201da177e4SLinus Torvalds * It is logically different of crypto_tfm_alg_ivsize(tfm). 211da177e4SLinus Torvalds * We assume that it is either zero (no ivec), or 221da177e4SLinus Torvalds * >= crypto_tfm_alg_ivsize(tfm). */ 231da177e4SLinus Torvalds int ivlen; 24e4bec827SDavid S. Miller int ivinitted; 25e4bec827SDavid S. Miller u8 *ivec; /* ivec buffer */ 266b7326c8SHerbert Xu struct crypto_blkcipher *tfm; /* crypto handle */ 271da177e4SLinus Torvalds } conf; 281da177e4SLinus Torvalds 291da177e4SLinus Torvalds /* Integrity. It is active when icv_full_len != 0 */ 301da177e4SLinus Torvalds struct { 311da177e4SLinus Torvalds u8 *key; /* Key */ 321da177e4SLinus Torvalds int key_len; /* Length of the key */ 331da177e4SLinus Torvalds u8 *work_icv; 341da177e4SLinus Torvalds int icv_full_len; 351da177e4SLinus Torvalds int icv_trunc_len; 361da177e4SLinus Torvalds void (*icv)(struct esp_data*, 371da177e4SLinus Torvalds struct sk_buff *skb, 381da177e4SLinus Torvalds int offset, int len, u8 *icv); 3907d4ee58SHerbert Xu struct crypto_hash *tfm; 401da177e4SLinus Torvalds } auth; 411da177e4SLinus Torvalds }; 421da177e4SLinus Torvalds 431da177e4SLinus Torvalds extern int skb_to_sgvec(struct sk_buff *skb, struct scatterlist *sg, int offset, int len); 441da177e4SLinus Torvalds extern int skb_cow_data(struct sk_buff *skb, int tailbits, struct sk_buff **trailer); 451da177e4SLinus Torvalds extern void *pskb_put(struct sk_buff *skb, struct sk_buff *tail, int len); 461da177e4SLinus Torvalds 4707d4ee58SHerbert Xu static inline int esp_mac_digest(struct esp_data *esp, struct sk_buff *skb, 4807d4ee58SHerbert Xu int offset, int len) 491da177e4SLinus Torvalds { 5007d4ee58SHerbert Xu struct hash_desc desc; 5107d4ee58SHerbert Xu int err; 521da177e4SLinus Torvalds 5307d4ee58SHerbert Xu desc.tfm = esp->auth.tfm; 5407d4ee58SHerbert Xu desc.flags = 0; 5507d4ee58SHerbert Xu 5607d4ee58SHerbert Xu err = crypto_hash_init(&desc); 5707d4ee58SHerbert Xu if (unlikely(err)) 5807d4ee58SHerbert Xu return err; 5907d4ee58SHerbert Xu err = skb_icv_walk(skb, &desc, offset, len, crypto_hash_update); 6007d4ee58SHerbert Xu if (unlikely(err)) 6107d4ee58SHerbert Xu return err; 6207d4ee58SHerbert Xu return crypto_hash_final(&desc, esp->auth.work_icv); 631da177e4SLinus Torvalds } 641da177e4SLinus Torvalds 651da177e4SLinus Torvalds #endif 66