123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526 |
- // SPDX-License-Identifier: GPL-2.0-or-later
- /*
- * Shared crypto simd helpers
- *
- * Copyright (c) 2012 Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
- * Copyright (c) 2016 Herbert Xu <herbert@gondor.apana.org.au>
- * Copyright (c) 2019 Google LLC
- *
- * Based on aesni-intel_glue.c by:
- * Copyright (C) 2008, Intel Corp.
- * Author: Huang Ying <ying.huang@intel.com>
- */
- /*
- * Shared crypto SIMD helpers. These functions dynamically create and register
- * an skcipher or AEAD algorithm that wraps another, internal algorithm. The
- * wrapper ensures that the internal algorithm is only executed in a context
- * where SIMD instructions are usable, i.e. where may_use_simd() returns true.
- * If SIMD is already usable, the wrapper directly calls the internal algorithm.
- * Otherwise it defers execution to a workqueue via cryptd.
- *
- * This is an alternative to the internal algorithm implementing a fallback for
- * the !may_use_simd() case itself.
- *
- * Note that the wrapper algorithm is asynchronous, i.e. it has the
- * CRYPTO_ALG_ASYNC flag set. Therefore it won't be found by users who
- * explicitly allocate a synchronous algorithm.
- */
- #include <crypto/cryptd.h>
- #include <crypto/internal/aead.h>
- #include <crypto/internal/simd.h>
- #include <crypto/internal/skcipher.h>
- #include <linux/kernel.h>
- #include <linux/module.h>
- #include <linux/preempt.h>
- #include <asm/simd.h>
- /* skcipher support */
- struct simd_skcipher_alg {
- const char *ialg_name;
- struct skcipher_alg alg;
- };
- struct simd_skcipher_ctx {
- struct cryptd_skcipher *cryptd_tfm;
- };
- static int simd_skcipher_setkey(struct crypto_skcipher *tfm, const u8 *key,
- unsigned int key_len)
- {
- struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
- struct crypto_skcipher *child = &ctx->cryptd_tfm->base;
- crypto_skcipher_clear_flags(child, CRYPTO_TFM_REQ_MASK);
- crypto_skcipher_set_flags(child, crypto_skcipher_get_flags(tfm) &
- CRYPTO_TFM_REQ_MASK);
- return crypto_skcipher_setkey(child, key, key_len);
- }
- static int simd_skcipher_encrypt(struct skcipher_request *req)
- {
- struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
- struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
- struct skcipher_request *subreq;
- struct crypto_skcipher *child;
- subreq = skcipher_request_ctx(req);
- *subreq = *req;
- if (!crypto_simd_usable() ||
- (in_atomic() && cryptd_skcipher_queued(ctx->cryptd_tfm)))
- child = &ctx->cryptd_tfm->base;
- else
- child = cryptd_skcipher_child(ctx->cryptd_tfm);
- skcipher_request_set_tfm(subreq, child);
- return crypto_skcipher_encrypt(subreq);
- }
- static int simd_skcipher_decrypt(struct skcipher_request *req)
- {
- struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
- struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
- struct skcipher_request *subreq;
- struct crypto_skcipher *child;
- subreq = skcipher_request_ctx(req);
- *subreq = *req;
- if (!crypto_simd_usable() ||
- (in_atomic() && cryptd_skcipher_queued(ctx->cryptd_tfm)))
- child = &ctx->cryptd_tfm->base;
- else
- child = cryptd_skcipher_child(ctx->cryptd_tfm);
- skcipher_request_set_tfm(subreq, child);
- return crypto_skcipher_decrypt(subreq);
- }
- static void simd_skcipher_exit(struct crypto_skcipher *tfm)
- {
- struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
- cryptd_free_skcipher(ctx->cryptd_tfm);
- }
- static int simd_skcipher_init(struct crypto_skcipher *tfm)
- {
- struct simd_skcipher_ctx *ctx = crypto_skcipher_ctx(tfm);
- struct cryptd_skcipher *cryptd_tfm;
- struct simd_skcipher_alg *salg;
- struct skcipher_alg *alg;
- unsigned reqsize;
- alg = crypto_skcipher_alg(tfm);
- salg = container_of(alg, struct simd_skcipher_alg, alg);
- cryptd_tfm = cryptd_alloc_skcipher(salg->ialg_name,
- CRYPTO_ALG_INTERNAL,
- CRYPTO_ALG_INTERNAL);
- if (IS_ERR(cryptd_tfm))
- return PTR_ERR(cryptd_tfm);
- ctx->cryptd_tfm = cryptd_tfm;
- reqsize = crypto_skcipher_reqsize(cryptd_skcipher_child(cryptd_tfm));
- reqsize = max(reqsize, crypto_skcipher_reqsize(&cryptd_tfm->base));
- reqsize += sizeof(struct skcipher_request);
- crypto_skcipher_set_reqsize(tfm, reqsize);
- return 0;
- }
- struct simd_skcipher_alg *simd_skcipher_create_compat(const char *algname,
- const char *drvname,
- const char *basename)
- {
- struct simd_skcipher_alg *salg;
- struct crypto_skcipher *tfm;
- struct skcipher_alg *ialg;
- struct skcipher_alg *alg;
- int err;
- tfm = crypto_alloc_skcipher(basename, CRYPTO_ALG_INTERNAL,
- CRYPTO_ALG_INTERNAL | CRYPTO_ALG_ASYNC);
- if (IS_ERR(tfm))
- return ERR_CAST(tfm);
- ialg = crypto_skcipher_alg(tfm);
- salg = kzalloc(sizeof(*salg), GFP_KERNEL);
- if (!salg) {
- salg = ERR_PTR(-ENOMEM);
- goto out_put_tfm;
- }
- salg->ialg_name = basename;
- alg = &salg->alg;
- err = -ENAMETOOLONG;
- if (snprintf(alg->base.cra_name, CRYPTO_MAX_ALG_NAME, "%s", algname) >=
- CRYPTO_MAX_ALG_NAME)
- goto out_free_salg;
- if (snprintf(alg->base.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s",
- drvname) >= CRYPTO_MAX_ALG_NAME)
- goto out_free_salg;
- alg->base.cra_flags = CRYPTO_ALG_ASYNC |
- (ialg->base.cra_flags & CRYPTO_ALG_INHERITED_FLAGS);
- alg->base.cra_priority = ialg->base.cra_priority;
- alg->base.cra_blocksize = ialg->base.cra_blocksize;
- alg->base.cra_alignmask = ialg->base.cra_alignmask;
- alg->base.cra_module = ialg->base.cra_module;
- alg->base.cra_ctxsize = sizeof(struct simd_skcipher_ctx);
- alg->ivsize = ialg->ivsize;
- alg->chunksize = ialg->chunksize;
- alg->min_keysize = ialg->min_keysize;
- alg->max_keysize = ialg->max_keysize;
- alg->init = simd_skcipher_init;
- alg->exit = simd_skcipher_exit;
- alg->setkey = simd_skcipher_setkey;
- alg->encrypt = simd_skcipher_encrypt;
- alg->decrypt = simd_skcipher_decrypt;
- err = crypto_register_skcipher(alg);
- if (err)
- goto out_free_salg;
- out_put_tfm:
- crypto_free_skcipher(tfm);
- return salg;
- out_free_salg:
- kfree(salg);
- salg = ERR_PTR(err);
- goto out_put_tfm;
- }
- EXPORT_SYMBOL_GPL(simd_skcipher_create_compat);
- struct simd_skcipher_alg *simd_skcipher_create(const char *algname,
- const char *basename)
- {
- char drvname[CRYPTO_MAX_ALG_NAME];
- if (snprintf(drvname, CRYPTO_MAX_ALG_NAME, "simd-%s", basename) >=
- CRYPTO_MAX_ALG_NAME)
- return ERR_PTR(-ENAMETOOLONG);
- return simd_skcipher_create_compat(algname, drvname, basename);
- }
- EXPORT_SYMBOL_GPL(simd_skcipher_create);
- void simd_skcipher_free(struct simd_skcipher_alg *salg)
- {
- crypto_unregister_skcipher(&salg->alg);
- kfree(salg);
- }
- EXPORT_SYMBOL_GPL(simd_skcipher_free);
- int simd_register_skciphers_compat(struct skcipher_alg *algs, int count,
- struct simd_skcipher_alg **simd_algs)
- {
- int err;
- int i;
- const char *algname;
- const char *drvname;
- const char *basename;
- struct simd_skcipher_alg *simd;
- err = crypto_register_skciphers(algs, count);
- if (err)
- return err;
- for (i = 0; i < count; i++) {
- WARN_ON(strncmp(algs[i].base.cra_name, "__", 2));
- WARN_ON(strncmp(algs[i].base.cra_driver_name, "__", 2));
- algname = algs[i].base.cra_name + 2;
- drvname = algs[i].base.cra_driver_name + 2;
- basename = algs[i].base.cra_driver_name;
- simd = simd_skcipher_create_compat(algname, drvname, basename);
- err = PTR_ERR(simd);
- if (IS_ERR(simd))
- goto err_unregister;
- simd_algs[i] = simd;
- }
- return 0;
- err_unregister:
- simd_unregister_skciphers(algs, count, simd_algs);
- return err;
- }
- EXPORT_SYMBOL_GPL(simd_register_skciphers_compat);
- void simd_unregister_skciphers(struct skcipher_alg *algs, int count,
- struct simd_skcipher_alg **simd_algs)
- {
- int i;
- crypto_unregister_skciphers(algs, count);
- for (i = 0; i < count; i++) {
- if (simd_algs[i]) {
- simd_skcipher_free(simd_algs[i]);
- simd_algs[i] = NULL;
- }
- }
- }
- EXPORT_SYMBOL_GPL(simd_unregister_skciphers);
- /* AEAD support */
- struct simd_aead_alg {
- const char *ialg_name;
- struct aead_alg alg;
- };
- struct simd_aead_ctx {
- struct cryptd_aead *cryptd_tfm;
- };
- static int simd_aead_setkey(struct crypto_aead *tfm, const u8 *key,
- unsigned int key_len)
- {
- struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
- struct crypto_aead *child = &ctx->cryptd_tfm->base;
- crypto_aead_clear_flags(child, CRYPTO_TFM_REQ_MASK);
- crypto_aead_set_flags(child, crypto_aead_get_flags(tfm) &
- CRYPTO_TFM_REQ_MASK);
- return crypto_aead_setkey(child, key, key_len);
- }
- static int simd_aead_setauthsize(struct crypto_aead *tfm, unsigned int authsize)
- {
- struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
- struct crypto_aead *child = &ctx->cryptd_tfm->base;
- return crypto_aead_setauthsize(child, authsize);
- }
- static int simd_aead_encrypt(struct aead_request *req)
- {
- struct crypto_aead *tfm = crypto_aead_reqtfm(req);
- struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
- struct aead_request *subreq;
- struct crypto_aead *child;
- subreq = aead_request_ctx(req);
- *subreq = *req;
- if (!crypto_simd_usable() ||
- (in_atomic() && cryptd_aead_queued(ctx->cryptd_tfm)))
- child = &ctx->cryptd_tfm->base;
- else
- child = cryptd_aead_child(ctx->cryptd_tfm);
- aead_request_set_tfm(subreq, child);
- return crypto_aead_encrypt(subreq);
- }
- static int simd_aead_decrypt(struct aead_request *req)
- {
- struct crypto_aead *tfm = crypto_aead_reqtfm(req);
- struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
- struct aead_request *subreq;
- struct crypto_aead *child;
- subreq = aead_request_ctx(req);
- *subreq = *req;
- if (!crypto_simd_usable() ||
- (in_atomic() && cryptd_aead_queued(ctx->cryptd_tfm)))
- child = &ctx->cryptd_tfm->base;
- else
- child = cryptd_aead_child(ctx->cryptd_tfm);
- aead_request_set_tfm(subreq, child);
- return crypto_aead_decrypt(subreq);
- }
- static void simd_aead_exit(struct crypto_aead *tfm)
- {
- struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
- cryptd_free_aead(ctx->cryptd_tfm);
- }
- static int simd_aead_init(struct crypto_aead *tfm)
- {
- struct simd_aead_ctx *ctx = crypto_aead_ctx(tfm);
- struct cryptd_aead *cryptd_tfm;
- struct simd_aead_alg *salg;
- struct aead_alg *alg;
- unsigned reqsize;
- alg = crypto_aead_alg(tfm);
- salg = container_of(alg, struct simd_aead_alg, alg);
- cryptd_tfm = cryptd_alloc_aead(salg->ialg_name, CRYPTO_ALG_INTERNAL,
- CRYPTO_ALG_INTERNAL);
- if (IS_ERR(cryptd_tfm))
- return PTR_ERR(cryptd_tfm);
- ctx->cryptd_tfm = cryptd_tfm;
- reqsize = crypto_aead_reqsize(cryptd_aead_child(cryptd_tfm));
- reqsize = max(reqsize, crypto_aead_reqsize(&cryptd_tfm->base));
- reqsize += sizeof(struct aead_request);
- crypto_aead_set_reqsize(tfm, reqsize);
- return 0;
- }
- struct simd_aead_alg *simd_aead_create_compat(const char *algname,
- const char *drvname,
- const char *basename)
- {
- struct simd_aead_alg *salg;
- struct crypto_aead *tfm;
- struct aead_alg *ialg;
- struct aead_alg *alg;
- int err;
- tfm = crypto_alloc_aead(basename, CRYPTO_ALG_INTERNAL,
- CRYPTO_ALG_INTERNAL | CRYPTO_ALG_ASYNC);
- if (IS_ERR(tfm))
- return ERR_CAST(tfm);
- ialg = crypto_aead_alg(tfm);
- salg = kzalloc(sizeof(*salg), GFP_KERNEL);
- if (!salg) {
- salg = ERR_PTR(-ENOMEM);
- goto out_put_tfm;
- }
- salg->ialg_name = basename;
- alg = &salg->alg;
- err = -ENAMETOOLONG;
- if (snprintf(alg->base.cra_name, CRYPTO_MAX_ALG_NAME, "%s", algname) >=
- CRYPTO_MAX_ALG_NAME)
- goto out_free_salg;
- if (snprintf(alg->base.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s",
- drvname) >= CRYPTO_MAX_ALG_NAME)
- goto out_free_salg;
- alg->base.cra_flags = CRYPTO_ALG_ASYNC |
- (ialg->base.cra_flags & CRYPTO_ALG_INHERITED_FLAGS);
- alg->base.cra_priority = ialg->base.cra_priority;
- alg->base.cra_blocksize = ialg->base.cra_blocksize;
- alg->base.cra_alignmask = ialg->base.cra_alignmask;
- alg->base.cra_module = ialg->base.cra_module;
- alg->base.cra_ctxsize = sizeof(struct simd_aead_ctx);
- alg->ivsize = ialg->ivsize;
- alg->maxauthsize = ialg->maxauthsize;
- alg->chunksize = ialg->chunksize;
- alg->init = simd_aead_init;
- alg->exit = simd_aead_exit;
- alg->setkey = simd_aead_setkey;
- alg->setauthsize = simd_aead_setauthsize;
- alg->encrypt = simd_aead_encrypt;
- alg->decrypt = simd_aead_decrypt;
- err = crypto_register_aead(alg);
- if (err)
- goto out_free_salg;
- out_put_tfm:
- crypto_free_aead(tfm);
- return salg;
- out_free_salg:
- kfree(salg);
- salg = ERR_PTR(err);
- goto out_put_tfm;
- }
- EXPORT_SYMBOL_GPL(simd_aead_create_compat);
- struct simd_aead_alg *simd_aead_create(const char *algname,
- const char *basename)
- {
- char drvname[CRYPTO_MAX_ALG_NAME];
- if (snprintf(drvname, CRYPTO_MAX_ALG_NAME, "simd-%s", basename) >=
- CRYPTO_MAX_ALG_NAME)
- return ERR_PTR(-ENAMETOOLONG);
- return simd_aead_create_compat(algname, drvname, basename);
- }
- EXPORT_SYMBOL_GPL(simd_aead_create);
- void simd_aead_free(struct simd_aead_alg *salg)
- {
- crypto_unregister_aead(&salg->alg);
- kfree(salg);
- }
- EXPORT_SYMBOL_GPL(simd_aead_free);
- int simd_register_aeads_compat(struct aead_alg *algs, int count,
- struct simd_aead_alg **simd_algs)
- {
- int err;
- int i;
- const char *algname;
- const char *drvname;
- const char *basename;
- struct simd_aead_alg *simd;
- err = crypto_register_aeads(algs, count);
- if (err)
- return err;
- for (i = 0; i < count; i++) {
- WARN_ON(strncmp(algs[i].base.cra_name, "__", 2));
- WARN_ON(strncmp(algs[i].base.cra_driver_name, "__", 2));
- algname = algs[i].base.cra_name + 2;
- drvname = algs[i].base.cra_driver_name + 2;
- basename = algs[i].base.cra_driver_name;
- simd = simd_aead_create_compat(algname, drvname, basename);
- err = PTR_ERR(simd);
- if (IS_ERR(simd))
- goto err_unregister;
- simd_algs[i] = simd;
- }
- return 0;
- err_unregister:
- simd_unregister_aeads(algs, count, simd_algs);
- return err;
- }
- EXPORT_SYMBOL_GPL(simd_register_aeads_compat);
- void simd_unregister_aeads(struct aead_alg *algs, int count,
- struct simd_aead_alg **simd_algs)
- {
- int i;
- crypto_unregister_aeads(algs, count);
- for (i = 0; i < count; i++) {
- if (simd_algs[i]) {
- simd_aead_free(simd_algs[i]);
- simd_algs[i] = NULL;
- }
- }
- }
- EXPORT_SYMBOL_GPL(simd_unregister_aeads);
- MODULE_LICENSE("GPL");
|