^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) // SPDX-License-Identifier: GPL-2.0-or-later
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) /* RSA asymmetric public-key algorithm [RFC3447]
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) * Copyright (c) 2015, Intel Corporation
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * Authors: Tadeusz Struk <tadeusz.struk@intel.com>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) #include <linux/module.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) #include <linux/mpi.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) #include <crypto/internal/rsa.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) #include <crypto/internal/akcipher.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) #include <crypto/akcipher.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #include <crypto/algapi.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) struct rsa_mpi_key {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) MPI n;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) MPI e;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) MPI d;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) * RSAEP function [RFC3447 sec 5.1.1]
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) * c = m^e mod n;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) static int _rsa_enc(const struct rsa_mpi_key *key, MPI c, MPI m)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) /* (1) Validate 0 <= m < n */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) if (mpi_cmp_ui(m, 0) < 0 || mpi_cmp(m, key->n) >= 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) /* (2) c = m^e mod n */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) return mpi_powm(c, m, key->e, key->n);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) * RSADP function [RFC3447 sec 5.1.2]
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) * m = c^d mod n;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) static int _rsa_dec(const struct rsa_mpi_key *key, MPI m, MPI c)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) /* (1) Validate 0 <= c < n */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) if (mpi_cmp_ui(c, 0) < 0 || mpi_cmp(c, key->n) >= 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) /* (2) m = c^d mod n */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) return mpi_powm(m, c, key->d, key->n);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) static inline struct rsa_mpi_key *rsa_get_key(struct crypto_akcipher *tfm)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) return akcipher_tfm_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) static int rsa_enc(struct akcipher_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) struct crypto_akcipher *tfm = crypto_akcipher_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) const struct rsa_mpi_key *pkey = rsa_get_key(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) MPI m, c = mpi_alloc(0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) int ret = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) int sign;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) if (!c)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) return -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) if (unlikely(!pkey->n || !pkey->e)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) ret = -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) goto err_free_c;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) ret = -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) m = mpi_read_raw_from_sgl(req->src, req->src_len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) if (!m)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) goto err_free_c;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) ret = _rsa_enc(pkey, c, m);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) if (ret)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) goto err_free_m;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) ret = mpi_write_to_sgl(c, req->dst, req->dst_len, &sign);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) if (ret)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) goto err_free_m;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) if (sign < 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) ret = -EBADMSG;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) err_free_m:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) mpi_free(m);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) err_free_c:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) mpi_free(c);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) return ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) static int rsa_dec(struct akcipher_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) struct crypto_akcipher *tfm = crypto_akcipher_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) const struct rsa_mpi_key *pkey = rsa_get_key(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97) MPI c, m = mpi_alloc(0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98) int ret = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) int sign;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) if (!m)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) return -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) if (unlikely(!pkey->n || !pkey->d)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) ret = -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) goto err_free_m;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) ret = -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) c = mpi_read_raw_from_sgl(req->src, req->src_len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) if (!c)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) goto err_free_m;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) ret = _rsa_dec(pkey, m, c);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) if (ret)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) goto err_free_c;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) ret = mpi_write_to_sgl(m, req->dst, req->dst_len, &sign);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) if (ret)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) goto err_free_c;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) if (sign < 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) ret = -EBADMSG;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) err_free_c:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) mpi_free(c);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) err_free_m:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) mpi_free(m);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) return ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) static void rsa_free_mpi_key(struct rsa_mpi_key *key)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) mpi_free(key->d);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) mpi_free(key->e);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) mpi_free(key->n);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) key->d = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) key->e = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) key->n = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) static int rsa_check_key_length(unsigned int len)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) switch (len) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) case 512:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) case 1024:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) case 1536:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) case 2048:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) case 3072:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) case 4096:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) static int rsa_set_pub_key(struct crypto_akcipher *tfm, const void *key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) unsigned int keylen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) struct rsa_mpi_key *mpi_key = akcipher_tfm_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) struct rsa_key raw_key = {0};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) int ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) /* Free the old MPI key if any */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) rsa_free_mpi_key(mpi_key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) ret = rsa_parse_pub_key(&raw_key, key, keylen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) if (ret)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) return ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) mpi_key->e = mpi_read_raw_data(raw_key.e, raw_key.e_sz);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) if (!mpi_key->e)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) goto err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) mpi_key->n = mpi_read_raw_data(raw_key.n, raw_key.n_sz);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) if (!mpi_key->n)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) goto err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) if (rsa_check_key_length(mpi_get_size(mpi_key->n) << 3)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) rsa_free_mpi_key(mpi_key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) err:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) rsa_free_mpi_key(mpi_key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) return -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) static int rsa_set_priv_key(struct crypto_akcipher *tfm, const void *key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) unsigned int keylen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) struct rsa_mpi_key *mpi_key = akcipher_tfm_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194) struct rsa_key raw_key = {0};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) int ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) /* Free the old MPI key if any */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) rsa_free_mpi_key(mpi_key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) ret = rsa_parse_priv_key(&raw_key, key, keylen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) if (ret)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) return ret;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) mpi_key->d = mpi_read_raw_data(raw_key.d, raw_key.d_sz);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205) if (!mpi_key->d)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206) goto err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) mpi_key->e = mpi_read_raw_data(raw_key.e, raw_key.e_sz);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) if (!mpi_key->e)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) goto err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) mpi_key->n = mpi_read_raw_data(raw_key.n, raw_key.n_sz);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) if (!mpi_key->n)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) goto err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) if (rsa_check_key_length(mpi_get_size(mpi_key->n) << 3)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) rsa_free_mpi_key(mpi_key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) return -EINVAL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) err:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) rsa_free_mpi_key(mpi_key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) return -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) static unsigned int rsa_max_size(struct crypto_akcipher *tfm)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230) struct rsa_mpi_key *pkey = akcipher_tfm_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) return mpi_get_size(pkey->n);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) static void rsa_exit_tfm(struct crypto_akcipher *tfm)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) struct rsa_mpi_key *pkey = akcipher_tfm_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) rsa_free_mpi_key(pkey);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) static struct akcipher_alg rsa = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) .encrypt = rsa_enc,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244) .decrypt = rsa_dec,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) .set_priv_key = rsa_set_priv_key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) .set_pub_key = rsa_set_pub_key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) .max_size = rsa_max_size,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248) .exit = rsa_exit_tfm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) .base = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) .cra_name = "rsa",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) .cra_driver_name = "rsa-generic",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) .cra_priority = 100,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) .cra_module = THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254) .cra_ctxsize = sizeof(struct rsa_mpi_key),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255) },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) static int rsa_init(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 260) int err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 261)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 262) err = crypto_register_akcipher(&rsa);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 263) if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 264) return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 265)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 266) err = crypto_register_template(&rsa_pkcs1pad_tmpl);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 267) if (err) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 268) crypto_unregister_akcipher(&rsa);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 269) return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 270) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 271)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 272) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 273) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 274)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 275) static void rsa_exit(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 276) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 277) crypto_unregister_template(&rsa_pkcs1pad_tmpl);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 278) crypto_unregister_akcipher(&rsa);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 279) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 280)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 281) subsys_initcall(rsa_init);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 282) module_exit(rsa_exit);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 283) MODULE_ALIAS_CRYPTO("rsa");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 284) MODULE_LICENSE("GPL");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 285) MODULE_DESCRIPTION("RSA generic algorithm");