1/*
2 * Cryptographic API for algorithms (i.e., low-level API).
3 *
4 * Copyright (c) 2006 Herbert Xu <herbert@gondor.apana.org.au>
5 *
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the Free
8 * Software Foundation; either version 2 of the License, or (at your option)
9 * any later version.
10 *
11 */
12
13#include <crypto/algapi.h>
14#include <linux/err.h>
15#include <linux/errno.h>
16#include <linux/fips.h>
17#include <linux/init.h>
18#include <linux/kernel.h>
19#include <linux/list.h>
20#include <linux/module.h>
21#include <linux/rtnetlink.h>
22#include <linux/slab.h>
23#include <linux/string.h>
24
25#include "internal.h"
26
27static LIST_HEAD(crypto_template_list);
28
29static inline int crypto_set_driver_name(struct crypto_alg *alg)
30{
31 static const char suffix[] = "-generic";
32 char *driver_name = alg->cra_driver_name;
33 int len;
34
35 if (*driver_name)
36 return 0;
37
38 len = strlcpy(driver_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);
39 if (len + sizeof(suffix) > CRYPTO_MAX_ALG_NAME)
40 return -ENAMETOOLONG;
41
42 memcpy(driver_name + len, suffix, sizeof(suffix));
43 return 0;
44}
45
46static inline void crypto_check_module_sig(struct module *mod)
47{
48 if (fips_enabled && mod && !module_sig_ok(mod))
49 panic("Module %s signature verification failed in FIPS mode\n",
50 module_name(mod));
51}
52
53static int crypto_check_alg(struct crypto_alg *alg)
54{
55 crypto_check_module_sig(alg->cra_module);
56
57 if (alg->cra_alignmask & (alg->cra_alignmask + 1))
58 return -EINVAL;
59
60 /* General maximums for all algs. */
61 if (alg->cra_alignmask > MAX_ALGAPI_ALIGNMASK)
62 return -EINVAL;
63
64 if (alg->cra_blocksize > MAX_ALGAPI_BLOCKSIZE)
65 return -EINVAL;
66
67 /* Lower maximums for specific alg types. */
68 if (!alg->cra_type && (alg->cra_flags & CRYPTO_ALG_TYPE_MASK) ==
69 CRYPTO_ALG_TYPE_CIPHER) {
70 if (alg->cra_alignmask > MAX_CIPHER_ALIGNMASK)
71 return -EINVAL;
72
73 if (alg->cra_blocksize > MAX_CIPHER_BLOCKSIZE)
74 return -EINVAL;
75 }
76
77 if (alg->cra_priority < 0)
78 return -EINVAL;
79
80 refcount_set(&alg->cra_refcnt, 1);
81
82 return crypto_set_driver_name(alg);
83}
84
85static void crypto_free_instance(struct crypto_instance *inst)
86{
87 if (!inst->alg.cra_type->free) {
88 inst->tmpl->free(inst);
89 return;
90 }
91
92 inst->alg.cra_type->free(inst);
93}
94
95static void crypto_destroy_instance(struct crypto_alg *alg)
96{
97 struct crypto_instance *inst = (void *)alg;
98 struct crypto_template *tmpl = inst->tmpl;
99
100 crypto_free_instance(inst);
101 crypto_tmpl_put(tmpl);
102}
103
104static struct list_head *crypto_more_spawns(struct crypto_alg *alg,
105 struct list_head *stack,
106 struct list_head *top,
107 struct list_head *secondary_spawns)
108{
109 struct crypto_spawn *spawn, *n;
110
111 spawn = list_first_entry_or_null(stack, struct crypto_spawn, list);
112 if (!spawn)
113 return NULL;
114
115 n = list_next_entry(spawn, list);
116
117 if (spawn->alg && &n->list != stack && !n->alg)
118 n->alg = (n->list.next == stack) ? alg :
119 &list_next_entry(n, list)->inst->alg;
120
121 list_move(&spawn->list, secondary_spawns);
122
123 return &n->list == stack ? top : &n->inst->alg.cra_users;
124}
125
126static void crypto_remove_instance(struct crypto_instance *inst,
127 struct list_head *list)
128{
129 struct crypto_template *tmpl = inst->tmpl;
130
131 if (crypto_is_dead(&inst->alg))
132 return;
133
134 inst->alg.cra_flags |= CRYPTO_ALG_DEAD;
135 if (hlist_unhashed(&inst->list))
136 return;
137
138 if (!tmpl || !crypto_tmpl_get(tmpl))
139 return;
140
141 list_move(&inst->alg.cra_list, list);
142 hlist_del(&inst->list);
143 inst->alg.cra_destroy = crypto_destroy_instance;
144
145 BUG_ON(!list_empty(&inst->alg.cra_users));
146}
147
148void crypto_remove_spawns(struct crypto_alg *alg, struct list_head *list,
149 struct crypto_alg *nalg)
150{
151 u32 new_type = (nalg ?: alg)->cra_flags;
152 struct crypto_spawn *spawn, *n;
153 LIST_HEAD(secondary_spawns);
154 struct list_head *spawns;
155 LIST_HEAD(stack);
156 LIST_HEAD(top);
157
158 spawns = &alg->cra_users;
159 list_for_each_entry_safe(spawn, n, spawns, list) {
160 if ((spawn->alg->cra_flags ^ new_type) & spawn->mask)
161 continue;
162
163 list_move(&spawn->list, &top);
164 }
165
166 spawns = &top;
167 do {
168 while (!list_empty(spawns)) {
169 struct crypto_instance *inst;
170
171 spawn = list_first_entry(spawns, struct crypto_spawn,
172 list);
173 inst = spawn->inst;
174
175 BUG_ON(&inst->alg == alg);
176
177 list_move(&spawn->list, &stack);
178
179 if (&inst->alg == nalg)
180 break;
181
182 spawn->alg = NULL;
183 spawns = &inst->alg.cra_users;
184
185 /*
186 * We may encounter an unregistered instance here, since
187 * an instance's spawns are set up prior to the instance
188 * being registered. An unregistered instance will have
189 * NULL ->cra_users.next, since ->cra_users isn't
190 * properly initialized until registration. But an
191 * unregistered instance cannot have any users, so treat
192 * it the same as ->cra_users being empty.
193 */
194 if (spawns->next == NULL)
195 break;
196 }
197 } while ((spawns = crypto_more_spawns(alg, &stack, &top,
198 &secondary_spawns)));
199
200 list_for_each_entry_safe(spawn, n, &secondary_spawns, list) {
201 if (spawn->alg)
202 list_move(&spawn->list, &spawn->alg->cra_users);
203 else
204 crypto_remove_instance(spawn->inst, list);
205 }
206}
207EXPORT_SYMBOL_GPL(crypto_remove_spawns);
208
209static struct crypto_larval *__crypto_register_alg(struct crypto_alg *alg)
210{
211 struct crypto_alg *q;
212 struct crypto_larval *larval;
213 int ret = -EAGAIN;
214
215 if (crypto_is_dead(alg))
216 goto err;
217
218 INIT_LIST_HEAD(&alg->cra_users);
219
220 /* No cheating! */
221 alg->cra_flags &= ~CRYPTO_ALG_TESTED;
222
223 ret = -EEXIST;
224
225 list_for_each_entry(q, &crypto_alg_list, cra_list) {
226 if (q == alg)
227 goto err;
228
229 if (crypto_is_moribund(q))
230 continue;
231
232 if (crypto_is_larval(q)) {
233 if (!strcmp(alg->cra_driver_name, q->cra_driver_name))
234 goto err;
235 continue;
236 }
237
238 if (!strcmp(q->cra_driver_name, alg->cra_name) ||
239 !strcmp(q->cra_name, alg->cra_driver_name))
240 goto err;
241 }
242
243 larval = crypto_larval_alloc(alg->cra_name,
244 alg->cra_flags | CRYPTO_ALG_TESTED, 0);
245 if (IS_ERR(larval))
246 goto out;
247
248 ret = -ENOENT;
249 larval->adult = crypto_mod_get(alg);
250 if (!larval->adult)
251 goto free_larval;
252
253 refcount_set(&larval->alg.cra_refcnt, 1);
254 memcpy(larval->alg.cra_driver_name, alg->cra_driver_name,
255 CRYPTO_MAX_ALG_NAME);
256 larval->alg.cra_priority = alg->cra_priority;
257
258 list_add(&alg->cra_list, &crypto_alg_list);
259 list_add(&larval->alg.cra_list, &crypto_alg_list);
260
261 crypto_stats_init(alg);
262
263out:
264 return larval;
265
266free_larval:
267 kfree(larval);
268err:
269 larval = ERR_PTR(ret);
270 goto out;
271}
272
273void crypto_alg_tested(const char *name, int err)
274{
275 struct crypto_larval *test;
276 struct crypto_alg *alg;
277 struct crypto_alg *q;
278 LIST_HEAD(list);
279
280 down_write(&crypto_alg_sem);
281 list_for_each_entry(q, &crypto_alg_list, cra_list) {
282 if (crypto_is_moribund(q) || !crypto_is_larval(q))
283 continue;
284
285 test = (struct crypto_larval *)q;
286
287 if (!strcmp(q->cra_driver_name, name))
288 goto found;
289 }
290
291 pr_err("alg: Unexpected test result for %s: %d\n", name, err);
292 goto unlock;
293
294found:
295 q->cra_flags |= CRYPTO_ALG_DEAD;
296 alg = test->adult;
297 if (err || list_empty(&alg->cra_list))
298 goto complete;
299
300 alg->cra_flags |= CRYPTO_ALG_TESTED;
301
302 list_for_each_entry(q, &crypto_alg_list, cra_list) {
303 if (q == alg)
304 continue;
305
306 if (crypto_is_moribund(q))
307 continue;
308
309 if (crypto_is_larval(q)) {
310 struct crypto_larval *larval = (void *)q;
311
312 /*
313 * Check to see if either our generic name or
314 * specific name can satisfy the name requested
315 * by the larval entry q.
316 */
317 if (strcmp(alg->cra_name, q->cra_name) &&
318 strcmp(alg->cra_driver_name, q->cra_name))
319 continue;
320
321 if (larval->adult)
322 continue;
323 if ((q->cra_flags ^ alg->cra_flags) & larval->mask)
324 continue;
325 if (!crypto_mod_get(alg))
326 continue;
327
328 larval->adult = alg;
329 continue;
330 }
331
332 if (strcmp(alg->cra_name, q->cra_name))
333 continue;
334
335 if (strcmp(alg->cra_driver_name, q->cra_driver_name) &&
336 q->cra_priority > alg->cra_priority)
337 continue;
338
339 crypto_remove_spawns(q, &list, alg);
340 }
341
342complete:
343 complete_all(&test->completion);
344
345unlock:
346 up_write(&crypto_alg_sem);
347
348 crypto_remove_final(&list);
349}
350EXPORT_SYMBOL_GPL(crypto_alg_tested);
351
352void crypto_remove_final(struct list_head *list)
353{
354 struct crypto_alg *alg;
355 struct crypto_alg *n;
356
357 list_for_each_entry_safe(alg, n, list, cra_list) {
358 list_del_init(&alg->cra_list);
359 crypto_alg_put(alg);
360 }
361}
362EXPORT_SYMBOL_GPL(crypto_remove_final);
363
364static void crypto_wait_for_test(struct crypto_larval *larval)
365{
366 int err;
367
368 err = crypto_probing_notify(CRYPTO_MSG_ALG_REGISTER, larval->adult);
369 if (err != NOTIFY_STOP) {
370 if (WARN_ON(err != NOTIFY_DONE))
371 goto out;
372 crypto_alg_tested(larval->alg.cra_driver_name, 0);
373 }
374
375 err = wait_for_completion_killable(&larval->completion);
376 WARN_ON(err);
377 if (!err)
378 crypto_probing_notify(CRYPTO_MSG_ALG_LOADED, larval);
379
380out:
381 crypto_larval_kill(&larval->alg);
382}
383
384int crypto_register_alg(struct crypto_alg *alg)
385{
386 struct crypto_larval *larval;
387 int err;
388
389 alg->cra_flags &= ~CRYPTO_ALG_DEAD;
390 err = crypto_check_alg(alg);
391 if (err)
392 return err;
393
394 down_write(&crypto_alg_sem);
395 larval = __crypto_register_alg(alg);
396 up_write(&crypto_alg_sem);
397
398 if (IS_ERR(larval))
399 return PTR_ERR(larval);
400
401 crypto_wait_for_test(larval);
402 return 0;
403}
404EXPORT_SYMBOL_GPL(crypto_register_alg);
405
406static int crypto_remove_alg(struct crypto_alg *alg, struct list_head *list)
407{
408 if (unlikely(list_empty(&alg->cra_list)))
409 return -ENOENT;
410
411 alg->cra_flags |= CRYPTO_ALG_DEAD;
412
413 list_del_init(&alg->cra_list);
414 crypto_remove_spawns(alg, list, NULL);
415
416 return 0;
417}
418
419int crypto_unregister_alg(struct crypto_alg *alg)
420{
421 int ret;
422 LIST_HEAD(list);
423
424 down_write(&crypto_alg_sem);
425 ret = crypto_remove_alg(alg, &list);
426 up_write(&crypto_alg_sem);
427
428 if (ret)
429 return ret;
430
431 BUG_ON(refcount_read(&alg->cra_refcnt) != 1);
432 if (alg->cra_destroy)
433 alg->cra_destroy(alg);
434
435 crypto_remove_final(&list);
436 return 0;
437}
438EXPORT_SYMBOL_GPL(crypto_unregister_alg);
439
440int crypto_register_algs(struct crypto_alg *algs, int count)
441{
442 int i, ret;
443
444 for (i = 0; i < count; i++) {
445 ret = crypto_register_alg(&algs[i]);
446 if (ret)
447 goto err;
448 }
449
450 return 0;
451
452err:
453 for (--i; i >= 0; --i)
454 crypto_unregister_alg(&algs[i]);
455
456 return ret;
457}
458EXPORT_SYMBOL_GPL(crypto_register_algs);
459
460int crypto_unregister_algs(struct crypto_alg *algs, int count)
461{
462 int i, ret;
463
464 for (i = 0; i < count; i++) {
465 ret = crypto_unregister_alg(&algs[i]);
466 if (ret)
467 pr_err("Failed to unregister %s %s: %d\n",
468 algs[i].cra_driver_name, algs[i].cra_name, ret);
469 }
470
471 return 0;
472}
473EXPORT_SYMBOL_GPL(crypto_unregister_algs);
474
475int crypto_register_template(struct crypto_template *tmpl)
476{
477 struct crypto_template *q;
478 int err = -EEXIST;
479
480 down_write(&crypto_alg_sem);
481
482 crypto_check_module_sig(tmpl->module);
483
484 list_for_each_entry(q, &crypto_template_list, list) {
485 if (q == tmpl)
486 goto out;
487 }
488
489 list_add(&tmpl->list, &crypto_template_list);
490 err = 0;
491out:
492 up_write(&crypto_alg_sem);
493 return err;
494}
495EXPORT_SYMBOL_GPL(crypto_register_template);
496
497int crypto_register_templates(struct crypto_template *tmpls, int count)
498{
499 int i, err;
500
501 for (i = 0; i < count; i++) {
502 err = crypto_register_template(&tmpls[i]);
503 if (err)
504 goto out;
505 }
506 return 0;
507
508out:
509 for (--i; i >= 0; --i)
510 crypto_unregister_template(&tmpls[i]);
511 return err;
512}
513EXPORT_SYMBOL_GPL(crypto_register_templates);
514
515void crypto_unregister_template(struct crypto_template *tmpl)
516{
517 struct crypto_instance *inst;
518 struct hlist_node *n;
519 struct hlist_head *list;
520 LIST_HEAD(users);
521
522 down_write(&crypto_alg_sem);
523
524 BUG_ON(list_empty(&tmpl->list));
525 list_del_init(&tmpl->list);
526
527 list = &tmpl->instances;
528 hlist_for_each_entry(inst, list, list) {
529 int err = crypto_remove_alg(&inst->alg, &users);
530
531 BUG_ON(err);
532 }
533
534 up_write(&crypto_alg_sem);
535
536 hlist_for_each_entry_safe(inst, n, list, list) {
537 BUG_ON(refcount_read(&inst->alg.cra_refcnt) != 1);
538 crypto_free_instance(inst);
539 }
540 crypto_remove_final(&users);
541}
542EXPORT_SYMBOL_GPL(crypto_unregister_template);
543
544void crypto_unregister_templates(struct crypto_template *tmpls, int count)
545{
546 int i;
547
548 for (i = count - 1; i >= 0; --i)
549 crypto_unregister_template(&tmpls[i]);
550}
551EXPORT_SYMBOL_GPL(crypto_unregister_templates);
552
553static struct crypto_template *__crypto_lookup_template(const char *name)
554{
555 struct crypto_template *q, *tmpl = NULL;
556
557 down_read(&crypto_alg_sem);
558 list_for_each_entry(q, &crypto_template_list, list) {
559 if (strcmp(q->name, name))
560 continue;
561 if (unlikely(!crypto_tmpl_get(q)))
562 continue;
563
564 tmpl = q;
565 break;
566 }
567 up_read(&crypto_alg_sem);
568
569 return tmpl;
570}
571
572struct crypto_template *crypto_lookup_template(const char *name)
573{
574 return try_then_request_module(__crypto_lookup_template(name),
575 "crypto-%s", name);
576}
577EXPORT_SYMBOL_GPL(crypto_lookup_template);
578
579int crypto_register_instance(struct crypto_template *tmpl,
580 struct crypto_instance *inst)
581{
582 struct crypto_larval *larval;
583 int err;
584
585 err = crypto_check_alg(&inst->alg);
586 if (err)
587 return err;
588
589 inst->alg.cra_module = tmpl->module;
590 inst->alg.cra_flags |= CRYPTO_ALG_INSTANCE;
591
592 down_write(&crypto_alg_sem);
593
594 larval = __crypto_register_alg(&inst->alg);
595 if (IS_ERR(larval))
596 goto unlock;
597
598 hlist_add_head(&inst->list, &tmpl->instances);
599 inst->tmpl = tmpl;
600
601unlock:
602 up_write(&crypto_alg_sem);
603
604 err = PTR_ERR(larval);
605 if (IS_ERR(larval))
606 goto err;
607
608 crypto_wait_for_test(larval);
609 err = 0;
610
611err:
612 return err;
613}
614EXPORT_SYMBOL_GPL(crypto_register_instance);
615
616int crypto_unregister_instance(struct crypto_instance *inst)
617{
618 LIST_HEAD(list);
619
620 down_write(&crypto_alg_sem);
621
622 crypto_remove_spawns(&inst->alg, &list, NULL);
623 crypto_remove_instance(inst, &list);
624
625 up_write(&crypto_alg_sem);
626
627 crypto_remove_final(&list);
628
629 return 0;
630}
631EXPORT_SYMBOL_GPL(crypto_unregister_instance);
632
633int crypto_init_spawn(struct crypto_spawn *spawn, struct crypto_alg *alg,
634 struct crypto_instance *inst, u32 mask)
635{
636 int err = -EAGAIN;
637
638 if (WARN_ON_ONCE(inst == NULL))
639 return -EINVAL;
640
641 spawn->inst = inst;
642 spawn->mask = mask;
643
644 down_write(&crypto_alg_sem);
645 if (!crypto_is_moribund(alg)) {
646 list_add(&spawn->list, &alg->cra_users);
647 spawn->alg = alg;
648 err = 0;
649 }
650 up_write(&crypto_alg_sem);
651
652 return err;
653}
654EXPORT_SYMBOL_GPL(crypto_init_spawn);
655
656int crypto_init_spawn2(struct crypto_spawn *spawn, struct crypto_alg *alg,
657 struct crypto_instance *inst,
658 const struct crypto_type *frontend)
659{
660 int err = -EINVAL;
661
662 if ((alg->cra_flags ^ frontend->type) & frontend->maskset)
663 goto out;
664
665 spawn->frontend = frontend;
666 err = crypto_init_spawn(spawn, alg, inst, frontend->maskset);
667
668out:
669 return err;
670}
671EXPORT_SYMBOL_GPL(crypto_init_spawn2);
672
673int crypto_grab_spawn(struct crypto_spawn *spawn, const char *name,
674 u32 type, u32 mask)
675{
676 struct crypto_alg *alg;
677 int err;
678
679 alg = crypto_find_alg(name, spawn->frontend, type, mask);
680 if (IS_ERR(alg))
681 return PTR_ERR(alg);
682
683 err = crypto_init_spawn(spawn, alg, spawn->inst, mask);
684 crypto_mod_put(alg);
685 return err;
686}
687EXPORT_SYMBOL_GPL(crypto_grab_spawn);
688
689void crypto_drop_spawn(struct crypto_spawn *spawn)
690{
691 if (!spawn->alg)
692 return;
693
694 down_write(&crypto_alg_sem);
695 list_del(&spawn->list);
696 up_write(&crypto_alg_sem);
697}
698EXPORT_SYMBOL_GPL(crypto_drop_spawn);
699
700static struct crypto_alg *crypto_spawn_alg(struct crypto_spawn *spawn)
701{
702 struct crypto_alg *alg;
703 struct crypto_alg *alg2;
704
705 down_read(&crypto_alg_sem);
706 alg = spawn->alg;
707 alg2 = alg;
708 if (alg2)
709 alg2 = crypto_mod_get(alg2);
710 up_read(&crypto_alg_sem);
711
712 if (!alg2) {
713 if (alg)
714 crypto_shoot_alg(alg);
715 return ERR_PTR(-EAGAIN);
716 }
717
718 return alg;
719}
720
721struct crypto_tfm *crypto_spawn_tfm(struct crypto_spawn *spawn, u32 type,
722 u32 mask)
723{
724 struct crypto_alg *alg;
725 struct crypto_tfm *tfm;
726
727 alg = crypto_spawn_alg(spawn);
728 if (IS_ERR(alg))
729 return ERR_CAST(alg);
730
731 tfm = ERR_PTR(-EINVAL);
732 if (unlikely((alg->cra_flags ^ type) & mask))
733 goto out_put_alg;
734
735 tfm = __crypto_alloc_tfm(alg, type, mask);
736 if (IS_ERR(tfm))
737 goto out_put_alg;
738
739 return tfm;
740
741out_put_alg:
742 crypto_mod_put(alg);
743 return tfm;
744}
745EXPORT_SYMBOL_GPL(crypto_spawn_tfm);
746
747void *crypto_spawn_tfm2(struct crypto_spawn *spawn)
748{
749 struct crypto_alg *alg;
750 struct crypto_tfm *tfm;
751
752 alg = crypto_spawn_alg(spawn);
753 if (IS_ERR(alg))
754 return ERR_CAST(alg);
755
756 tfm = crypto_create_tfm(alg, spawn->frontend);
757 if (IS_ERR(tfm))
758 goto out_put_alg;
759
760 return tfm;
761
762out_put_alg:
763 crypto_mod_put(alg);
764 return tfm;
765}
766EXPORT_SYMBOL_GPL(crypto_spawn_tfm2);
767
768int crypto_register_notifier(struct notifier_block *nb)
769{
770 return blocking_notifier_chain_register(&crypto_chain, nb);
771}
772EXPORT_SYMBOL_GPL(crypto_register_notifier);
773
774int crypto_unregister_notifier(struct notifier_block *nb)
775{
776 return blocking_notifier_chain_unregister(&crypto_chain, nb);
777}
778EXPORT_SYMBOL_GPL(crypto_unregister_notifier);
779
780struct crypto_attr_type *crypto_get_attr_type(struct rtattr **tb)
781{
782 struct rtattr *rta = tb[0];
783 struct crypto_attr_type *algt;
784
785 if (!rta)
786 return ERR_PTR(-ENOENT);
787 if (RTA_PAYLOAD(rta) < sizeof(*algt))
788 return ERR_PTR(-EINVAL);
789 if (rta->rta_type != CRYPTOA_TYPE)
790 return ERR_PTR(-EINVAL);
791
792 algt = RTA_DATA(rta);
793
794 return algt;
795}
796EXPORT_SYMBOL_GPL(crypto_get_attr_type);
797
798int crypto_check_attr_type(struct rtattr **tb, u32 type)
799{
800 struct crypto_attr_type *algt;
801
802 algt = crypto_get_attr_type(tb);
803 if (IS_ERR(algt))
804 return PTR_ERR(algt);
805
806 if ((algt->type ^ type) & algt->mask)
807 return -EINVAL;
808
809 return 0;
810}
811EXPORT_SYMBOL_GPL(crypto_check_attr_type);
812
813const char *crypto_attr_alg_name(struct rtattr *rta)
814{
815 struct crypto_attr_alg *alga;
816
817 if (!rta)
818 return ERR_PTR(-ENOENT);
819 if (RTA_PAYLOAD(rta) < sizeof(*alga))
820 return ERR_PTR(-EINVAL);
821 if (rta->rta_type != CRYPTOA_ALG)
822 return ERR_PTR(-EINVAL);
823
824 alga = RTA_DATA(rta);
825 alga->name[CRYPTO_MAX_ALG_NAME - 1] = 0;
826
827 return alga->name;
828}
829EXPORT_SYMBOL_GPL(crypto_attr_alg_name);
830
831struct crypto_alg *crypto_attr_alg2(struct rtattr *rta,
832 const struct crypto_type *frontend,
833 u32 type, u32 mask)
834{
835 const char *name;
836
837 name = crypto_attr_alg_name(rta);
838 if (IS_ERR(name))
839 return ERR_CAST(name);
840
841 return crypto_find_alg(name, frontend, type, mask);
842}
843EXPORT_SYMBOL_GPL(crypto_attr_alg2);
844
845int crypto_attr_u32(struct rtattr *rta, u32 *num)
846{
847 struct crypto_attr_u32 *nu32;
848
849 if (!rta)
850 return -ENOENT;
851 if (RTA_PAYLOAD(rta) < sizeof(*nu32))
852 return -EINVAL;
853 if (rta->rta_type != CRYPTOA_U32)
854 return -EINVAL;
855
856 nu32 = RTA_DATA(rta);
857 *num = nu32->num;
858
859 return 0;
860}
861EXPORT_SYMBOL_GPL(crypto_attr_u32);
862
863int crypto_inst_setname(struct crypto_instance *inst, const char *name,
864 struct crypto_alg *alg)
865{
866 if (snprintf(inst->alg.cra_name, CRYPTO_MAX_ALG_NAME, "%s(%s)", name,
867 alg->cra_name) >= CRYPTO_MAX_ALG_NAME)
868 return -ENAMETOOLONG;
869
870 if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s(%s)",
871 name, alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
872 return -ENAMETOOLONG;
873
874 return 0;
875}
876EXPORT_SYMBOL_GPL(crypto_inst_setname);
877
878void *crypto_alloc_instance(const char *name, struct crypto_alg *alg,
879 unsigned int head)
880{
881 struct crypto_instance *inst;
882 char *p;
883 int err;
884
885 p = kzalloc(head + sizeof(*inst) + sizeof(struct crypto_spawn),
886 GFP_KERNEL);
887 if (!p)
888 return ERR_PTR(-ENOMEM);
889
890 inst = (void *)(p + head);
891
892 err = crypto_inst_setname(inst, name, alg);
893 if (err)
894 goto err_free_inst;
895
896 return p;
897
898err_free_inst:
899 kfree(p);
900 return ERR_PTR(err);
901}
902EXPORT_SYMBOL_GPL(crypto_alloc_instance);
903
904void crypto_init_queue(struct crypto_queue *queue, unsigned int max_qlen)
905{
906 INIT_LIST_HEAD(&queue->list);
907 queue->backlog = &queue->list;
908 queue->qlen = 0;
909 queue->max_qlen = max_qlen;
910}
911EXPORT_SYMBOL_GPL(crypto_init_queue);
912
913int crypto_enqueue_request(struct crypto_queue *queue,
914 struct crypto_async_request *request)
915{
916 int err = -EINPROGRESS;
917
918 if (unlikely(queue->qlen >= queue->max_qlen)) {
919 if (!(request->flags & CRYPTO_TFM_REQ_MAY_BACKLOG)) {
920 err = -ENOSPC;
921 goto out;
922 }
923 err = -EBUSY;
924 if (queue->backlog == &queue->list)
925 queue->backlog = &request->list;
926 }
927
928 queue->qlen++;
929 list_add_tail(&request->list, &queue->list);
930
931out:
932 return err;
933}
934EXPORT_SYMBOL_GPL(crypto_enqueue_request);
935
936struct crypto_async_request *crypto_dequeue_request(struct crypto_queue *queue)
937{
938 struct list_head *request;
939
940 if (unlikely(!queue->qlen))
941 return NULL;
942
943 queue->qlen--;
944
945 if (queue->backlog != &queue->list)
946 queue->backlog = queue->backlog->next;
947
948 request = queue->list.next;
949 list_del(request);
950
951 return list_entry(request, struct crypto_async_request, list);
952}
953EXPORT_SYMBOL_GPL(crypto_dequeue_request);
954
955int crypto_tfm_in_queue(struct crypto_queue *queue, struct crypto_tfm *tfm)
956{
957 struct crypto_async_request *req;
958
959 list_for_each_entry(req, &queue->list, list) {
960 if (req->tfm == tfm)
961 return 1;
962 }
963
964 return 0;
965}
966EXPORT_SYMBOL_GPL(crypto_tfm_in_queue);
967
968static inline void crypto_inc_byte(u8 *a, unsigned int size)
969{
970 u8 *b = (a + size);
971 u8 c;
972
973 for (; size; size--) {
974 c = *--b + 1;
975 *b = c;
976 if (c)
977 break;
978 }
979}
980
981void crypto_inc(u8 *a, unsigned int size)
982{
983 __be32 *b = (__be32 *)(a + size);
984 u32 c;
985
986 if (IS_ENABLED(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) ||
987 IS_ALIGNED((unsigned long)b, __alignof__(*b)))
988 for (; size >= 4; size -= 4) {
989 c = be32_to_cpu(*--b) + 1;
990 *b = cpu_to_be32(c);
991 if (likely(c))
992 return;
993 }
994
995 crypto_inc_byte(a, size);
996}
997EXPORT_SYMBOL_GPL(crypto_inc);
998
999void __crypto_xor(u8 *dst, const u8 *src1, const u8 *src2, unsigned int len)
1000{
1001 int relalign = 0;
1002
1003 if (!IS_ENABLED(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS)) {
1004 int size = sizeof(unsigned long);
1005 int d = (((unsigned long)dst ^ (unsigned long)src1) |
1006 ((unsigned long)dst ^ (unsigned long)src2)) &
1007 (size - 1);
1008
1009 relalign = d ? 1 << __ffs(d) : size;
1010
1011 /*
1012 * If we care about alignment, process as many bytes as
1013 * needed to advance dst and src to values whose alignments
1014 * equal their relative alignment. This will allow us to
1015 * process the remainder of the input using optimal strides.
1016 */
1017 while (((unsigned long)dst & (relalign - 1)) && len > 0) {
1018 *dst++ = *src1++ ^ *src2++;
1019 len--;
1020 }
1021 }
1022
1023 while (IS_ENABLED(CONFIG_64BIT) && len >= 8 && !(relalign & 7)) {
1024 *(u64 *)dst = *(u64 *)src1 ^ *(u64 *)src2;
1025 dst += 8;
1026 src1 += 8;
1027 src2 += 8;
1028 len -= 8;
1029 }
1030
1031 while (len >= 4 && !(relalign & 3)) {
1032 *(u32 *)dst = *(u32 *)src1 ^ *(u32 *)src2;
1033 dst += 4;
1034 src1 += 4;
1035 src2 += 4;
1036 len -= 4;
1037 }
1038
1039 while (len >= 2 && !(relalign & 1)) {
1040 *(u16 *)dst = *(u16 *)src1 ^ *(u16 *)src2;
1041 dst += 2;
1042 src1 += 2;
1043 src2 += 2;
1044 len -= 2;
1045 }
1046
1047 while (len--)
1048 *dst++ = *src1++ ^ *src2++;
1049}
1050EXPORT_SYMBOL_GPL(__crypto_xor);
1051
1052unsigned int crypto_alg_extsize(struct crypto_alg *alg)
1053{
1054 return alg->cra_ctxsize +
1055 (alg->cra_alignmask & ~(crypto_tfm_ctx_alignment() - 1));
1056}
1057EXPORT_SYMBOL_GPL(crypto_alg_extsize);
1058
1059int crypto_type_has_alg(const char *name, const struct crypto_type *frontend,
1060 u32 type, u32 mask)
1061{
1062 int ret = 0;
1063 struct crypto_alg *alg = crypto_find_alg(name, frontend, type, mask);
1064
1065 if (!IS_ERR(alg)) {
1066 crypto_mod_put(alg);
1067 ret = 1;
1068 }
1069
1070 return ret;
1071}
1072EXPORT_SYMBOL_GPL(crypto_type_has_alg);
1073
1074#ifdef CONFIG_CRYPTO_STATS
1075void crypto_stats_init(struct crypto_alg *alg)
1076{
1077 memset(&alg->stats, 0, sizeof(alg->stats));
1078}
1079EXPORT_SYMBOL_GPL(crypto_stats_init);
1080
1081void crypto_stats_get(struct crypto_alg *alg)
1082{
1083 crypto_alg_get(alg);
1084}
1085EXPORT_SYMBOL_GPL(crypto_stats_get);
1086
1087void crypto_stats_ablkcipher_encrypt(unsigned int nbytes, int ret,
1088 struct crypto_alg *alg)
1089{
1090 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1091 atomic64_inc(&alg->stats.cipher.err_cnt);
1092 } else {
1093 atomic64_inc(&alg->stats.cipher.encrypt_cnt);
1094 atomic64_add(nbytes, &alg->stats.cipher.encrypt_tlen);
1095 }
1096 crypto_alg_put(alg);
1097}
1098EXPORT_SYMBOL_GPL(crypto_stats_ablkcipher_encrypt);
1099
1100void crypto_stats_ablkcipher_decrypt(unsigned int nbytes, int ret,
1101 struct crypto_alg *alg)
1102{
1103 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1104 atomic64_inc(&alg->stats.cipher.err_cnt);
1105 } else {
1106 atomic64_inc(&alg->stats.cipher.decrypt_cnt);
1107 atomic64_add(nbytes, &alg->stats.cipher.decrypt_tlen);
1108 }
1109 crypto_alg_put(alg);
1110}
1111EXPORT_SYMBOL_GPL(crypto_stats_ablkcipher_decrypt);
1112
1113void crypto_stats_aead_encrypt(unsigned int cryptlen, struct crypto_alg *alg,
1114 int ret)
1115{
1116 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1117 atomic64_inc(&alg->stats.aead.err_cnt);
1118 } else {
1119 atomic64_inc(&alg->stats.aead.encrypt_cnt);
1120 atomic64_add(cryptlen, &alg->stats.aead.encrypt_tlen);
1121 }
1122 crypto_alg_put(alg);
1123}
1124EXPORT_SYMBOL_GPL(crypto_stats_aead_encrypt);
1125
1126void crypto_stats_aead_decrypt(unsigned int cryptlen, struct crypto_alg *alg,
1127 int ret)
1128{
1129 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1130 atomic64_inc(&alg->stats.aead.err_cnt);
1131 } else {
1132 atomic64_inc(&alg->stats.aead.decrypt_cnt);
1133 atomic64_add(cryptlen, &alg->stats.aead.decrypt_tlen);
1134 }
1135 crypto_alg_put(alg);
1136}
1137EXPORT_SYMBOL_GPL(crypto_stats_aead_decrypt);
1138
1139void crypto_stats_akcipher_encrypt(unsigned int src_len, int ret,
1140 struct crypto_alg *alg)
1141{
1142 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1143 atomic64_inc(&alg->stats.akcipher.err_cnt);
1144 } else {
1145 atomic64_inc(&alg->stats.akcipher.encrypt_cnt);
1146 atomic64_add(src_len, &alg->stats.akcipher.encrypt_tlen);
1147 }
1148 crypto_alg_put(alg);
1149}
1150EXPORT_SYMBOL_GPL(crypto_stats_akcipher_encrypt);
1151
1152void crypto_stats_akcipher_decrypt(unsigned int src_len, int ret,
1153 struct crypto_alg *alg)
1154{
1155 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1156 atomic64_inc(&alg->stats.akcipher.err_cnt);
1157 } else {
1158 atomic64_inc(&alg->stats.akcipher.decrypt_cnt);
1159 atomic64_add(src_len, &alg->stats.akcipher.decrypt_tlen);
1160 }
1161 crypto_alg_put(alg);
1162}
1163EXPORT_SYMBOL_GPL(crypto_stats_akcipher_decrypt);
1164
1165void crypto_stats_akcipher_sign(int ret, struct crypto_alg *alg)
1166{
1167 if (ret && ret != -EINPROGRESS && ret != -EBUSY)
1168 atomic64_inc(&alg->stats.akcipher.err_cnt);
1169 else
1170 atomic64_inc(&alg->stats.akcipher.sign_cnt);
1171 crypto_alg_put(alg);
1172}
1173EXPORT_SYMBOL_GPL(crypto_stats_akcipher_sign);
1174
1175void crypto_stats_akcipher_verify(int ret, struct crypto_alg *alg)
1176{
1177 if (ret && ret != -EINPROGRESS && ret != -EBUSY)
1178 atomic64_inc(&alg->stats.akcipher.err_cnt);
1179 else
1180 atomic64_inc(&alg->stats.akcipher.verify_cnt);
1181 crypto_alg_put(alg);
1182}
1183EXPORT_SYMBOL_GPL(crypto_stats_akcipher_verify);
1184
1185void crypto_stats_compress(unsigned int slen, int ret, struct crypto_alg *alg)
1186{
1187 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1188 atomic64_inc(&alg->stats.compress.err_cnt);
1189 } else {
1190 atomic64_inc(&alg->stats.compress.compress_cnt);
1191 atomic64_add(slen, &alg->stats.compress.compress_tlen);
1192 }
1193 crypto_alg_put(alg);
1194}
1195EXPORT_SYMBOL_GPL(crypto_stats_compress);
1196
1197void crypto_stats_decompress(unsigned int slen, int ret, struct crypto_alg *alg)
1198{
1199 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1200 atomic64_inc(&alg->stats.compress.err_cnt);
1201 } else {
1202 atomic64_inc(&alg->stats.compress.decompress_cnt);
1203 atomic64_add(slen, &alg->stats.compress.decompress_tlen);
1204 }
1205 crypto_alg_put(alg);
1206}
1207EXPORT_SYMBOL_GPL(crypto_stats_decompress);
1208
1209void crypto_stats_ahash_update(unsigned int nbytes, int ret,
1210 struct crypto_alg *alg)
1211{
1212 if (ret && ret != -EINPROGRESS && ret != -EBUSY)
1213 atomic64_inc(&alg->stats.hash.err_cnt);
1214 else
1215 atomic64_add(nbytes, &alg->stats.hash.hash_tlen);
1216 crypto_alg_put(alg);
1217}
1218EXPORT_SYMBOL_GPL(crypto_stats_ahash_update);
1219
1220void crypto_stats_ahash_final(unsigned int nbytes, int ret,
1221 struct crypto_alg *alg)
1222{
1223 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1224 atomic64_inc(&alg->stats.hash.err_cnt);
1225 } else {
1226 atomic64_inc(&alg->stats.hash.hash_cnt);
1227 atomic64_add(nbytes, &alg->stats.hash.hash_tlen);
1228 }
1229 crypto_alg_put(alg);
1230}
1231EXPORT_SYMBOL_GPL(crypto_stats_ahash_final);
1232
1233void crypto_stats_kpp_set_secret(struct crypto_alg *alg, int ret)
1234{
1235 if (ret)
1236 atomic64_inc(&alg->stats.kpp.err_cnt);
1237 else
1238 atomic64_inc(&alg->stats.kpp.setsecret_cnt);
1239 crypto_alg_put(alg);
1240}
1241EXPORT_SYMBOL_GPL(crypto_stats_kpp_set_secret);
1242
1243void crypto_stats_kpp_generate_public_key(struct crypto_alg *alg, int ret)
1244{
1245 if (ret)
1246 atomic64_inc(&alg->stats.kpp.err_cnt);
1247 else
1248 atomic64_inc(&alg->stats.kpp.generate_public_key_cnt);
1249 crypto_alg_put(alg);
1250}
1251EXPORT_SYMBOL_GPL(crypto_stats_kpp_generate_public_key);
1252
1253void crypto_stats_kpp_compute_shared_secret(struct crypto_alg *alg, int ret)
1254{
1255 if (ret)
1256 atomic64_inc(&alg->stats.kpp.err_cnt);
1257 else
1258 atomic64_inc(&alg->stats.kpp.compute_shared_secret_cnt);
1259 crypto_alg_put(alg);
1260}
1261EXPORT_SYMBOL_GPL(crypto_stats_kpp_compute_shared_secret);
1262
1263void crypto_stats_rng_seed(struct crypto_alg *alg, int ret)
1264{
1265 if (ret && ret != -EINPROGRESS && ret != -EBUSY)
1266 atomic64_inc(&alg->stats.rng.err_cnt);
1267 else
1268 atomic64_inc(&alg->stats.rng.seed_cnt);
1269 crypto_alg_put(alg);
1270}
1271EXPORT_SYMBOL_GPL(crypto_stats_rng_seed);
1272
1273void crypto_stats_rng_generate(struct crypto_alg *alg, unsigned int dlen,
1274 int ret)
1275{
1276 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1277 atomic64_inc(&alg->stats.rng.err_cnt);
1278 } else {
1279 atomic64_inc(&alg->stats.rng.generate_cnt);
1280 atomic64_add(dlen, &alg->stats.rng.generate_tlen);
1281 }
1282 crypto_alg_put(alg);
1283}
1284EXPORT_SYMBOL_GPL(crypto_stats_rng_generate);
1285
1286void crypto_stats_skcipher_encrypt(unsigned int cryptlen, int ret,
1287 struct crypto_alg *alg)
1288{
1289 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1290 atomic64_inc(&alg->stats.cipher.err_cnt);
1291 } else {
1292 atomic64_inc(&alg->stats.cipher.encrypt_cnt);
1293 atomic64_add(cryptlen, &alg->stats.cipher.encrypt_tlen);
1294 }
1295 crypto_alg_put(alg);
1296}
1297EXPORT_SYMBOL_GPL(crypto_stats_skcipher_encrypt);
1298
1299void crypto_stats_skcipher_decrypt(unsigned int cryptlen, int ret,
1300 struct crypto_alg *alg)
1301{
1302 if (ret && ret != -EINPROGRESS && ret != -EBUSY) {
1303 atomic64_inc(&alg->stats.cipher.err_cnt);
1304 } else {
1305 atomic64_inc(&alg->stats.cipher.decrypt_cnt);
1306 atomic64_add(cryptlen, &alg->stats.cipher.decrypt_tlen);
1307 }
1308 crypto_alg_put(alg);
1309}
1310EXPORT_SYMBOL_GPL(crypto_stats_skcipher_decrypt);
1311#endif
1312
1313static int __init crypto_algapi_init(void)
1314{
1315 crypto_init_proc();
1316 return 0;
1317}
1318
1319static void __exit crypto_algapi_exit(void)
1320{
1321 crypto_exit_proc();
1322}
1323
1324module_init(crypto_algapi_init);
1325module_exit(crypto_algapi_exit);
1326
1327MODULE_LICENSE("GPL");
1328MODULE_DESCRIPTION("Cryptographic algorithms API");
1329