Orange Pi5 kernel

^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   1) // SPDX-License-Identifier: GPL-2.0-or-later
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   3)  * Authenc: Simple AEAD wrapper for IPsec
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   4)  *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   5)  * Copyright (c) 2007-2015 Herbert Xu <herbert@gondor.apana.org.au>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   6)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   7) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   8) #include <crypto/internal/aead.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   9) #include <crypto/internal/hash.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  10) #include <crypto/internal/skcipher.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  11) #include <crypto/authenc.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  12) #include <crypto/null.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  13) #include <crypto/scatterwalk.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  14) #include <linux/err.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  15) #include <linux/init.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  16) #include <linux/kernel.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  17) #include <linux/module.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  18) #include <linux/rtnetlink.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  19) #include <linux/slab.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  20) #include <linux/spinlock.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  21) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  22) struct authenc_instance_ctx {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  23) 	struct crypto_ahash_spawn auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  24) 	struct crypto_skcipher_spawn enc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  25) 	unsigned int reqoff;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  26) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  27) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  28) struct crypto_authenc_ctx {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  29) 	struct crypto_ahash *auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  30) 	struct crypto_skcipher *enc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  31) 	struct crypto_sync_skcipher *null;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  32) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  33) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  34) struct authenc_request_ctx {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  35) 	struct scatterlist src[2];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  36) 	struct scatterlist dst[2];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  37) 	char tail[];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  38) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  39) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  40) static void authenc_request_complete(struct aead_request *req, int err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  41) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  42) 	if (err != -EINPROGRESS)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  43) 		aead_request_complete(req, err);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  44) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  45) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  46) int crypto_authenc_extractkeys(struct crypto_authenc_keys *keys, const u8 *key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  47) 			       unsigned int keylen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  48) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  49) 	struct rtattr *rta = (struct rtattr *)key;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  50) 	struct crypto_authenc_key_param *param;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  51) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  52) 	if (!RTA_OK(rta, keylen))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  53) 		return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  54) 	if (rta->rta_type != CRYPTO_AUTHENC_KEYA_PARAM)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  55) 		return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  56) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  57) 	/*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  58) 	 * RTA_OK() didn't align the rtattr's payload when validating that it
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  59) 	 * fits in the buffer.  Yet, the keys should start on the next 4-byte
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  60) 	 * aligned boundary.  To avoid confusion, require that the rtattr
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  61) 	 * payload be exactly the param struct, which has a 4-byte aligned size.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  62) 	 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  63) 	if (RTA_PAYLOAD(rta) != sizeof(*param))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  64) 		return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  65) 	BUILD_BUG_ON(sizeof(*param) % RTA_ALIGNTO);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  66) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  67) 	param = RTA_DATA(rta);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  68) 	keys->enckeylen = be32_to_cpu(param->enckeylen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  69) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  70) 	key += rta->rta_len;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  71) 	keylen -= rta->rta_len;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  72) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  73) 	if (keylen < keys->enckeylen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  74) 		return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  75) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  76) 	keys->authkeylen = keylen - keys->enckeylen;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  77) 	keys->authkey = key;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  78) 	keys->enckey = key + keys->authkeylen;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  79) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  80) 	return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  81) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  82) EXPORT_SYMBOL_GPL(crypto_authenc_extractkeys);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  83) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  84) static int crypto_authenc_setkey(struct crypto_aead *authenc, const u8 *key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  85) 				 unsigned int keylen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  86) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  87) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  88) 	struct crypto_ahash *auth = ctx->auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  89) 	struct crypto_skcipher *enc = ctx->enc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  90) 	struct crypto_authenc_keys keys;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  91) 	int err = -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  92) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  93) 	if (crypto_authenc_extractkeys(&keys, key, keylen) != 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  94) 		goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  95) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  96) 	crypto_ahash_clear_flags(auth, CRYPTO_TFM_REQ_MASK);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  97) 	crypto_ahash_set_flags(auth, crypto_aead_get_flags(authenc) &
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  98) 				    CRYPTO_TFM_REQ_MASK);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  99) 	err = crypto_ahash_setkey(auth, keys.authkey, keys.authkeylen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) 		goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) 	crypto_skcipher_clear_flags(enc, CRYPTO_TFM_REQ_MASK);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) 	crypto_skcipher_set_flags(enc, crypto_aead_get_flags(authenc) &
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) 				       CRYPTO_TFM_REQ_MASK);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) 	err = crypto_skcipher_setkey(enc, keys.enckey, keys.enckeylen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) out:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) 	memzero_explicit(&keys, sizeof(keys));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) 	return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) static void authenc_geniv_ahash_done(struct crypto_async_request *areq, int err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) 	struct aead_request *req = areq->data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) 	struct crypto_aead *authenc = crypto_aead_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) 	struct aead_instance *inst = aead_alg_instance(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) 	struct authenc_instance_ctx *ictx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) 	struct authenc_request_ctx *areq_ctx = aead_request_ctx(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) 	struct ahash_request *ahreq = (void *)(areq_ctx->tail + ictx->reqoff);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) 		goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) 	scatterwalk_map_and_copy(ahreq->result, req->dst,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) 				 req->assoclen + req->cryptlen,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) 				 crypto_aead_authsize(authenc), 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) out:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) 	aead_request_complete(req, err);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) static int crypto_authenc_genicv(struct aead_request *req, unsigned int flags)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) 	struct crypto_aead *authenc = crypto_aead_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) 	struct aead_instance *inst = aead_alg_instance(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) 	struct authenc_instance_ctx *ictx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) 	struct crypto_ahash *auth = ctx->auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) 	struct authenc_request_ctx *areq_ctx = aead_request_ctx(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140) 	struct ahash_request *ahreq = (void *)(areq_ctx->tail + ictx->reqoff);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) 	u8 *hash = areq_ctx->tail;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) 	int err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) 	hash = (u8 *)ALIGN((unsigned long)hash + crypto_ahash_alignmask(auth),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) 			   crypto_ahash_alignmask(auth) + 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) 	ahash_request_set_tfm(ahreq, auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) 	ahash_request_set_crypt(ahreq, req->dst, hash,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) 				req->assoclen + req->cryptlen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) 	ahash_request_set_callback(ahreq, flags,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) 				   authenc_geniv_ahash_done, req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) 	err = crypto_ahash_digest(ahreq);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) 		return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) 	scatterwalk_map_and_copy(hash, req->dst, req->assoclen + req->cryptlen,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) 				 crypto_aead_authsize(authenc), 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) 	return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) static void crypto_authenc_encrypt_done(struct crypto_async_request *req,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) 					int err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) 	struct aead_request *areq = req->data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) 		goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) 	err = crypto_authenc_genicv(areq, 0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) out:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) 	authenc_request_complete(areq, err);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) static int crypto_authenc_copy_assoc(struct aead_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) 	struct crypto_aead *authenc = crypto_aead_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) 	SYNC_SKCIPHER_REQUEST_ON_STACK(skreq, ctx->null);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) 	skcipher_request_set_sync_tfm(skreq, ctx->null);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) 	skcipher_request_set_callback(skreq, aead_request_flags(req),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) 				      NULL, NULL);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) 	skcipher_request_set_crypt(skreq, req->src, req->dst, req->assoclen,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) 				   NULL);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) 	return crypto_skcipher_encrypt(skreq);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) static int crypto_authenc_encrypt(struct aead_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194) 	struct crypto_aead *authenc = crypto_aead_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) 	struct aead_instance *inst = aead_alg_instance(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) 	struct authenc_instance_ctx *ictx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) 	struct authenc_request_ctx *areq_ctx = aead_request_ctx(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199) 	struct crypto_skcipher *enc = ctx->enc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) 	unsigned int cryptlen = req->cryptlen;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) 	struct skcipher_request *skreq = (void *)(areq_ctx->tail +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) 						  ictx->reqoff);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) 	struct scatterlist *src, *dst;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) 	int err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206) 	src = scatterwalk_ffwd(areq_ctx->src, req->src, req->assoclen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207) 	dst = src;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) 	if (req->src != req->dst) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) 		err = crypto_authenc_copy_assoc(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211) 		if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) 			return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) 		dst = scatterwalk_ffwd(areq_ctx->dst, req->dst, req->assoclen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) 	skcipher_request_set_tfm(skreq, enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) 	skcipher_request_set_callback(skreq, aead_request_flags(req),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) 				      crypto_authenc_encrypt_done, req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) 	skcipher_request_set_crypt(skreq, src, dst, cryptlen, req->iv);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222) 	err = crypto_skcipher_encrypt(skreq);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) 		return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) 	return crypto_authenc_genicv(req, aead_request_flags(req));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229) static int crypto_authenc_decrypt_tail(struct aead_request *req,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230) 				       unsigned int flags)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) 	struct crypto_aead *authenc = crypto_aead_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233) 	struct aead_instance *inst = aead_alg_instance(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) 	struct authenc_instance_ctx *ictx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) 	struct authenc_request_ctx *areq_ctx = aead_request_ctx(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) 	struct ahash_request *ahreq = (void *)(areq_ctx->tail + ictx->reqoff);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238) 	struct skcipher_request *skreq = (void *)(areq_ctx->tail +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) 						  ictx->reqoff);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240) 	unsigned int authsize = crypto_aead_authsize(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241) 	u8 *ihash = ahreq->result + authsize;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) 	struct scatterlist *src, *dst;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244) 	scatterwalk_map_and_copy(ihash, req->src, ahreq->nbytes, authsize, 0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) 	if (crypto_memneq(ihash, ahreq->result, authsize))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) 		return -EBADMSG;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) 	src = scatterwalk_ffwd(areq_ctx->src, req->src, req->assoclen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) 	dst = src;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) 	if (req->src != req->dst)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) 		dst = scatterwalk_ffwd(areq_ctx->dst, req->dst, req->assoclen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255) 	skcipher_request_set_tfm(skreq, ctx->enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) 	skcipher_request_set_callback(skreq, flags,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257) 				      req->base.complete, req->base.data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) 	skcipher_request_set_crypt(skreq, src, dst,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259) 				   req->cryptlen - authsize, req->iv);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 260) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 261) 	return crypto_skcipher_decrypt(skreq);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 262) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 263) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 264) static void authenc_verify_ahash_done(struct crypto_async_request *areq,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 265) 				      int err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 266) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 267) 	struct aead_request *req = areq->data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 268) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 269) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 270) 		goto out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 271) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 272) 	err = crypto_authenc_decrypt_tail(req, 0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 273) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 274) out:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 275) 	authenc_request_complete(req, err);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 276) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 277) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 278) static int crypto_authenc_decrypt(struct aead_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 279) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 280) 	struct crypto_aead *authenc = crypto_aead_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 281) 	unsigned int authsize = crypto_aead_authsize(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 282) 	struct aead_instance *inst = aead_alg_instance(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 283) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(authenc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 284) 	struct authenc_instance_ctx *ictx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 285) 	struct crypto_ahash *auth = ctx->auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 286) 	struct authenc_request_ctx *areq_ctx = aead_request_ctx(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 287) 	struct ahash_request *ahreq = (void *)(areq_ctx->tail + ictx->reqoff);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 288) 	u8 *hash = areq_ctx->tail;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 289) 	int err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 290) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 291) 	hash = (u8 *)ALIGN((unsigned long)hash + crypto_ahash_alignmask(auth),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 292) 			   crypto_ahash_alignmask(auth) + 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 293) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 294) 	ahash_request_set_tfm(ahreq, auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 295) 	ahash_request_set_crypt(ahreq, req->src, hash,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 296) 				req->assoclen + req->cryptlen - authsize);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 297) 	ahash_request_set_callback(ahreq, aead_request_flags(req),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 298) 				   authenc_verify_ahash_done, req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 299) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 300) 	err = crypto_ahash_digest(ahreq);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 301) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 302) 		return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 303) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 304) 	return crypto_authenc_decrypt_tail(req, aead_request_flags(req));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 305) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 306) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 307) static int crypto_authenc_init_tfm(struct crypto_aead *tfm)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 308) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 309) 	struct aead_instance *inst = aead_alg_instance(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 310) 	struct authenc_instance_ctx *ictx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 311) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 312) 	struct crypto_ahash *auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 313) 	struct crypto_skcipher *enc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 314) 	struct crypto_sync_skcipher *null;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 315) 	int err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 316) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 317) 	auth = crypto_spawn_ahash(&ictx->auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 318) 	if (IS_ERR(auth))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 319) 		return PTR_ERR(auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 320) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 321) 	enc = crypto_spawn_skcipher(&ictx->enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 322) 	err = PTR_ERR(enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 323) 	if (IS_ERR(enc))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 324) 		goto err_free_ahash;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 325) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 326) 	null = crypto_get_default_null_skcipher();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 327) 	err = PTR_ERR(null);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 328) 	if (IS_ERR(null))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 329) 		goto err_free_skcipher;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 330) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 331) 	ctx->auth = auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 332) 	ctx->enc = enc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 333) 	ctx->null = null;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 334) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 335) 	crypto_aead_set_reqsize(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 336) 		tfm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 337) 		sizeof(struct authenc_request_ctx) +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 338) 		ictx->reqoff +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 339) 		max_t(unsigned int,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 340) 		      crypto_ahash_reqsize(auth) +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 341) 		      sizeof(struct ahash_request),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 342) 		      sizeof(struct skcipher_request) +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 343) 		      crypto_skcipher_reqsize(enc)));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 344) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 345) 	return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 346) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 347) err_free_skcipher:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 348) 	crypto_free_skcipher(enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 349) err_free_ahash:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 350) 	crypto_free_ahash(auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 351) 	return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 352) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 353) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 354) static void crypto_authenc_exit_tfm(struct crypto_aead *tfm)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 355) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 356) 	struct crypto_authenc_ctx *ctx = crypto_aead_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 357) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 358) 	crypto_free_ahash(ctx->auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 359) 	crypto_free_skcipher(ctx->enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 360) 	crypto_put_default_null_skcipher();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 361) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 362) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 363) static void crypto_authenc_free(struct aead_instance *inst)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 364) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 365) 	struct authenc_instance_ctx *ctx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 366) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 367) 	crypto_drop_skcipher(&ctx->enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 368) 	crypto_drop_ahash(&ctx->auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 369) 	kfree(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 370) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 371) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 372) static int crypto_authenc_create(struct crypto_template *tmpl,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 373) 				 struct rtattr **tb)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 374) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 375) 	u32 mask;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 376) 	struct aead_instance *inst;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 377) 	struct authenc_instance_ctx *ctx;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 378) 	struct hash_alg_common *auth;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 379) 	struct crypto_alg *auth_base;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 380) 	struct skcipher_alg *enc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 381) 	int err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 382) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 383) 	err = crypto_check_attr_type(tb, CRYPTO_ALG_TYPE_AEAD, &mask);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 384) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 385) 		return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 386) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 387) 	inst = kzalloc(sizeof(*inst) + sizeof(*ctx), GFP_KERNEL);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 388) 	if (!inst)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 389) 		return -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 390) 	ctx = aead_instance_ctx(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 391) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 392) 	err = crypto_grab_ahash(&ctx->auth, aead_crypto_instance(inst),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 393) 				crypto_attr_alg_name(tb[1]), 0, mask);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 394) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 395) 		goto err_free_inst;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 396) 	auth = crypto_spawn_ahash_alg(&ctx->auth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 397) 	auth_base = &auth->base;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 398) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 399) 	err = crypto_grab_skcipher(&ctx->enc, aead_crypto_instance(inst),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 400) 				   crypto_attr_alg_name(tb[2]), 0, mask);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 401) 	if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 402) 		goto err_free_inst;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 403) 	enc = crypto_spawn_skcipher_alg(&ctx->enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 404) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 405) 	ctx->reqoff = ALIGN(2 * auth->digestsize + auth_base->cra_alignmask,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 406) 			    auth_base->cra_alignmask + 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 407) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 408) 	err = -ENAMETOOLONG;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 409) 	if (snprintf(inst->alg.base.cra_name, CRYPTO_MAX_ALG_NAME,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 410) 		     "authenc(%s,%s)", auth_base->cra_name,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 411) 		     enc->base.cra_name) >=
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 412) 	    CRYPTO_MAX_ALG_NAME)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 413) 		goto err_free_inst;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 414) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 415) 	if (snprintf(inst->alg.base.cra_driver_name, CRYPTO_MAX_ALG_NAME,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 416) 		     "authenc(%s,%s)", auth_base->cra_driver_name,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 417) 		     enc->base.cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 418) 		goto err_free_inst;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 419) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 420) 	inst->alg.base.cra_priority = enc->base.cra_priority * 10 +
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 421) 				      auth_base->cra_priority;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 422) 	inst->alg.base.cra_blocksize = enc->base.cra_blocksize;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 423) 	inst->alg.base.cra_alignmask = auth_base->cra_alignmask |
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 424) 				       enc->base.cra_alignmask;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 425) 	inst->alg.base.cra_ctxsize = sizeof(struct crypto_authenc_ctx);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 426) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 427) 	inst->alg.ivsize = crypto_skcipher_alg_ivsize(enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 428) 	inst->alg.chunksize = crypto_skcipher_alg_chunksize(enc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 429) 	inst->alg.maxauthsize = auth->digestsize;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 430) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 431) 	inst->alg.init = crypto_authenc_init_tfm;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 432) 	inst->alg.exit = crypto_authenc_exit_tfm;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 433) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 434) 	inst->alg.setkey = crypto_authenc_setkey;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 435) 	inst->alg.encrypt = crypto_authenc_encrypt;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 436) 	inst->alg.decrypt = crypto_authenc_decrypt;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 437) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 438) 	inst->free = crypto_authenc_free;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 439) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 440) 	err = aead_register_instance(tmpl, inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 441) 	if (err) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 442) err_free_inst:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 443) 		crypto_authenc_free(inst);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 444) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 445) 	return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 446) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 447) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 448) static struct crypto_template crypto_authenc_tmpl = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 449) 	.name = "authenc",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 450) 	.create = crypto_authenc_create,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 451) 	.module = THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 452) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 453) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 454) static int __init crypto_authenc_module_init(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 455) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 456) 	return crypto_register_template(&crypto_authenc_tmpl);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 457) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 458) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 459) static void __exit crypto_authenc_module_exit(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 460) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 461) 	crypto_unregister_template(&crypto_authenc_tmpl);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 462) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 463) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 464) subsys_initcall(crypto_authenc_module_init);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 465) module_exit(crypto_authenc_module_exit);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 466) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 467) MODULE_LICENSE("GPL");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 468) MODULE_DESCRIPTION("Simple AEAD wrapper for IPsec");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 469) MODULE_ALIAS_CRYPTO("authenc");