blob: 9e4179f5717e6c4acc4c5e3b022be69937ddfb09 [file] [log] [blame]
b.liue9582032025-04-17 19:18:16 +08001// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * pcrypt - Parallel crypto wrapper.
4 *
5 * Copyright (C) 2009 secunet Security Networks AG
6 * Copyright (C) 2009 Steffen Klassert <steffen.klassert@secunet.com>
7 */
8
9#include <crypto/algapi.h>
10#include <crypto/internal/aead.h>
11#include <linux/atomic.h>
12#include <linux/err.h>
13#include <linux/init.h>
14#include <linux/module.h>
15#include <linux/slab.h>
16#include <linux/notifier.h>
17#include <linux/kobject.h>
18#include <linux/cpu.h>
19#include <crypto/pcrypt.h>
20
21static struct padata_instance *pencrypt;
22static struct padata_instance *pdecrypt;
23static struct kset *pcrypt_kset;
24
25struct pcrypt_instance_ctx {
26 struct crypto_aead_spawn spawn;
27 struct padata_shell *psenc;
28 struct padata_shell *psdec;
29 atomic_t tfm_count;
30};
31
32struct pcrypt_aead_ctx {
33 struct crypto_aead *child;
34 unsigned int cb_cpu;
35};
36
37static inline struct pcrypt_instance_ctx *pcrypt_tfm_ictx(
38 struct crypto_aead *tfm)
39{
40 return aead_instance_ctx(aead_alg_instance(tfm));
41}
42
43static int pcrypt_aead_setkey(struct crypto_aead *parent,
44 const u8 *key, unsigned int keylen)
45{
46 struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
47
48 return crypto_aead_setkey(ctx->child, key, keylen);
49}
50
51static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
52 unsigned int authsize)
53{
54 struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
55
56 return crypto_aead_setauthsize(ctx->child, authsize);
57}
58
59static void pcrypt_aead_serial(struct padata_priv *padata)
60{
61 struct pcrypt_request *preq = pcrypt_padata_request(padata);
62 struct aead_request *req = pcrypt_request_ctx(preq);
63
64 aead_request_complete(req->base.data, padata->info);
65}
66
67static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
68{
69 struct aead_request *req = areq->data;
70 struct pcrypt_request *preq = aead_request_ctx(req);
71 struct padata_priv *padata = pcrypt_request_padata(preq);
72
73 padata->info = err;
74
75 padata_do_serial(padata);
76}
77
78static void pcrypt_aead_enc(struct padata_priv *padata)
79{
80 struct pcrypt_request *preq = pcrypt_padata_request(padata);
81 struct aead_request *req = pcrypt_request_ctx(preq);
82 int ret;
83
84 ret = crypto_aead_encrypt(req);
85
86 if (ret == -EINPROGRESS)
87 return;
88
89 padata->info = ret;
90 padata_do_serial(padata);
91}
92
93static int pcrypt_aead_encrypt(struct aead_request *req)
94{
95 int err;
96 struct pcrypt_request *preq = aead_request_ctx(req);
97 struct aead_request *creq = pcrypt_request_ctx(preq);
98 struct padata_priv *padata = pcrypt_request_padata(preq);
99 struct crypto_aead *aead = crypto_aead_reqtfm(req);
100 struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
101 u32 flags = aead_request_flags(req);
102 struct pcrypt_instance_ctx *ictx;
103
104 ictx = pcrypt_tfm_ictx(aead);
105
106 memset(padata, 0, sizeof(struct padata_priv));
107
108 padata->parallel = pcrypt_aead_enc;
109 padata->serial = pcrypt_aead_serial;
110
111 aead_request_set_tfm(creq, ctx->child);
112 aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
113 pcrypt_aead_done, req);
114 aead_request_set_crypt(creq, req->src, req->dst,
115 req->cryptlen, req->iv);
116 aead_request_set_ad(creq, req->assoclen);
117
118 err = padata_do_parallel(ictx->psenc, padata, &ctx->cb_cpu);
119 if (!err)
120 return -EINPROGRESS;
121 if (err == -EBUSY) {
122 /* try non-parallel mode */
123 return crypto_aead_encrypt(creq);
124 }
125
126 return err;
127}
128
129static void pcrypt_aead_dec(struct padata_priv *padata)
130{
131 struct pcrypt_request *preq = pcrypt_padata_request(padata);
132 struct aead_request *req = pcrypt_request_ctx(preq);
133 int ret;
134
135 ret = crypto_aead_decrypt(req);
136
137 if (ret == -EINPROGRESS)
138 return;
139
140 padata->info = ret;
141 padata_do_serial(padata);
142}
143
144static int pcrypt_aead_decrypt(struct aead_request *req)
145{
146 int err;
147 struct pcrypt_request *preq = aead_request_ctx(req);
148 struct aead_request *creq = pcrypt_request_ctx(preq);
149 struct padata_priv *padata = pcrypt_request_padata(preq);
150 struct crypto_aead *aead = crypto_aead_reqtfm(req);
151 struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
152 u32 flags = aead_request_flags(req);
153 struct pcrypt_instance_ctx *ictx;
154
155 ictx = pcrypt_tfm_ictx(aead);
156
157 memset(padata, 0, sizeof(struct padata_priv));
158
159 padata->parallel = pcrypt_aead_dec;
160 padata->serial = pcrypt_aead_serial;
161
162 aead_request_set_tfm(creq, ctx->child);
163 aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
164 pcrypt_aead_done, req);
165 aead_request_set_crypt(creq, req->src, req->dst,
166 req->cryptlen, req->iv);
167 aead_request_set_ad(creq, req->assoclen);
168
169 err = padata_do_parallel(ictx->psdec, padata, &ctx->cb_cpu);
170 if (!err)
171 return -EINPROGRESS;
172 if (err == -EBUSY) {
173 /* try non-parallel mode */
174 return crypto_aead_decrypt(creq);
175 }
176
177 return err;
178}
179
180static int pcrypt_aead_init_tfm(struct crypto_aead *tfm)
181{
182 int cpu, cpu_index;
183 struct aead_instance *inst = aead_alg_instance(tfm);
184 struct pcrypt_instance_ctx *ictx = aead_instance_ctx(inst);
185 struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);
186 struct crypto_aead *cipher;
187
188 cpu_index = (unsigned int)atomic_inc_return(&ictx->tfm_count) %
189 cpumask_weight(cpu_online_mask);
190
191 ctx->cb_cpu = cpumask_first(cpu_online_mask);
192 for (cpu = 0; cpu < cpu_index; cpu++)
193 ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);
194
195 cipher = crypto_spawn_aead(&ictx->spawn);
196
197 if (IS_ERR(cipher))
198 return PTR_ERR(cipher);
199
200 ctx->child = cipher;
201 crypto_aead_set_reqsize(tfm, sizeof(struct pcrypt_request) +
202 sizeof(struct aead_request) +
203 crypto_aead_reqsize(cipher));
204
205 return 0;
206}
207
208static void pcrypt_aead_exit_tfm(struct crypto_aead *tfm)
209{
210 struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);
211
212 crypto_free_aead(ctx->child);
213}
214
215static void pcrypt_free(struct aead_instance *inst)
216{
217 struct pcrypt_instance_ctx *ctx = aead_instance_ctx(inst);
218
219 crypto_drop_aead(&ctx->spawn);
220 padata_free_shell(ctx->psdec);
221 padata_free_shell(ctx->psenc);
222 kfree(inst);
223}
224
225static int pcrypt_init_instance(struct crypto_instance *inst,
226 struct crypto_alg *alg)
227{
228 if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
229 "pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
230 return -ENAMETOOLONG;
231
232 memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);
233
234 inst->alg.cra_priority = alg->cra_priority + 100;
235 inst->alg.cra_blocksize = alg->cra_blocksize;
236 inst->alg.cra_alignmask = alg->cra_alignmask;
237
238 return 0;
239}
240
241static int pcrypt_create_aead(struct crypto_template *tmpl, struct rtattr **tb,
242 u32 type, u32 mask)
243{
244 struct pcrypt_instance_ctx *ctx;
245 struct crypto_attr_type *algt;
246 struct aead_instance *inst;
247 struct aead_alg *alg;
248 const char *name;
249 int err;
250
251 algt = crypto_get_attr_type(tb);
252 if (IS_ERR(algt))
253 return PTR_ERR(algt);
254
255 name = crypto_attr_alg_name(tb[1]);
256 if (IS_ERR(name))
257 return PTR_ERR(name);
258
259 inst = kzalloc(sizeof(*inst) + sizeof(*ctx), GFP_KERNEL);
260 if (!inst)
261 return -ENOMEM;
262
263 err = -ENOMEM;
264
265 ctx = aead_instance_ctx(inst);
266 ctx->psenc = padata_alloc_shell(pencrypt);
267 if (!ctx->psenc)
268 goto out_free_inst;
269
270 ctx->psdec = padata_alloc_shell(pdecrypt);
271 if (!ctx->psdec)
272 goto out_free_psenc;
273
274 crypto_set_aead_spawn(&ctx->spawn, aead_crypto_instance(inst));
275
276 err = crypto_grab_aead(&ctx->spawn, name, 0, 0);
277 if (err)
278 goto out_free_psdec;
279
280 alg = crypto_spawn_aead_alg(&ctx->spawn);
281 err = pcrypt_init_instance(aead_crypto_instance(inst), &alg->base);
282 if (err)
283 goto out_drop_aead;
284
285 inst->alg.base.cra_flags = CRYPTO_ALG_ASYNC;
286
287 inst->alg.ivsize = crypto_aead_alg_ivsize(alg);
288 inst->alg.maxauthsize = crypto_aead_alg_maxauthsize(alg);
289
290 inst->alg.base.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);
291
292 inst->alg.init = pcrypt_aead_init_tfm;
293 inst->alg.exit = pcrypt_aead_exit_tfm;
294
295 inst->alg.setkey = pcrypt_aead_setkey;
296 inst->alg.setauthsize = pcrypt_aead_setauthsize;
297 inst->alg.encrypt = pcrypt_aead_encrypt;
298 inst->alg.decrypt = pcrypt_aead_decrypt;
299
300 inst->free = pcrypt_free;
301
302 err = aead_register_instance(tmpl, inst);
303 if (err)
304 goto out_drop_aead;
305
306out:
307 return err;
308
309out_drop_aead:
310 crypto_drop_aead(&ctx->spawn);
311out_free_psdec:
312 padata_free_shell(ctx->psdec);
313out_free_psenc:
314 padata_free_shell(ctx->psenc);
315out_free_inst:
316 kfree(inst);
317 goto out;
318}
319
320static int pcrypt_create(struct crypto_template *tmpl, struct rtattr **tb)
321{
322 struct crypto_attr_type *algt;
323
324 algt = crypto_get_attr_type(tb);
325 if (IS_ERR(algt))
326 return PTR_ERR(algt);
327
328 switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
329 case CRYPTO_ALG_TYPE_AEAD:
330 return pcrypt_create_aead(tmpl, tb, algt->type, algt->mask);
331 }
332
333 return -EINVAL;
334}
335
336static int pcrypt_sysfs_add(struct padata_instance *pinst, const char *name)
337{
338 int ret;
339
340 pinst->kobj.kset = pcrypt_kset;
341 ret = kobject_add(&pinst->kobj, NULL, "%s", name);
342 if (!ret)
343 kobject_uevent(&pinst->kobj, KOBJ_ADD);
344
345 return ret;
346}
347
348static int pcrypt_init_padata(struct padata_instance **pinst, const char *name)
349{
350 int ret = -ENOMEM;
351
352 *pinst = padata_alloc_possible(name);
353 if (!*pinst)
354 return ret;
355
356 ret = pcrypt_sysfs_add(*pinst, name);
357 if (ret)
358 padata_free(*pinst);
359
360 return ret;
361}
362
363static void pcrypt_fini_padata(struct padata_instance *pinst)
364{
365 padata_stop(pinst);
366 padata_free(pinst);
367}
368
369static struct crypto_template pcrypt_tmpl = {
370 .name = "pcrypt",
371 .create = pcrypt_create,
372 .module = THIS_MODULE,
373};
374
375static int __init pcrypt_init(void)
376{
377 int err = -ENOMEM;
378
379 pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
380 if (!pcrypt_kset)
381 goto err;
382
383 err = pcrypt_init_padata(&pencrypt, "pencrypt");
384 if (err)
385 goto err_unreg_kset;
386
387 err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
388 if (err)
389 goto err_deinit_pencrypt;
390
391 padata_start(pencrypt);
392 padata_start(pdecrypt);
393
394 return crypto_register_template(&pcrypt_tmpl);
395
396err_deinit_pencrypt:
397 pcrypt_fini_padata(pencrypt);
398err_unreg_kset:
399 kset_unregister(pcrypt_kset);
400err:
401 return err;
402}
403
404static void __exit pcrypt_exit(void)
405{
406 crypto_unregister_template(&pcrypt_tmpl);
407
408 pcrypt_fini_padata(pencrypt);
409 pcrypt_fini_padata(pdecrypt);
410
411 kset_unregister(pcrypt_kset);
412}
413
414subsys_initcall(pcrypt_init);
415module_exit(pcrypt_exit);
416
417MODULE_LICENSE("GPL");
418MODULE_AUTHOR("Steffen Klassert <steffen.klassert@secunet.com>");
419MODULE_DESCRIPTION("Parallel crypto wrapper");
420MODULE_ALIAS_CRYPTO("pcrypt");