xref: /freebsd/sys/geom/eli/g_eli.h (revision 2bd4ade694a476ef357be933ab401b54382069fe)
1c58794deSPawel Jakub Dawidek /*-
22bd4ade6SPawel Jakub Dawidek  * Copyright (c) 2005-2006 Pawel Jakub Dawidek <pjd@FreeBSD.org>
3c58794deSPawel Jakub Dawidek  * All rights reserved.
4c58794deSPawel Jakub Dawidek  *
5c58794deSPawel Jakub Dawidek  * Redistribution and use in source and binary forms, with or without
6c58794deSPawel Jakub Dawidek  * modification, are permitted provided that the following conditions
7c58794deSPawel Jakub Dawidek  * are met:
8c58794deSPawel Jakub Dawidek  * 1. Redistributions of source code must retain the above copyright
9c58794deSPawel Jakub Dawidek  *    notice, this list of conditions and the following disclaimer.
10c58794deSPawel Jakub Dawidek  * 2. Redistributions in binary form must reproduce the above copyright
11c58794deSPawel Jakub Dawidek  *    notice, this list of conditions and the following disclaimer in the
12c58794deSPawel Jakub Dawidek  *    documentation and/or other materials provided with the distribution.
13c58794deSPawel Jakub Dawidek  *
14c58794deSPawel Jakub Dawidek  * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
15c58794deSPawel Jakub Dawidek  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16c58794deSPawel Jakub Dawidek  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17c58794deSPawel Jakub Dawidek  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
18c58794deSPawel Jakub Dawidek  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19c58794deSPawel Jakub Dawidek  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20c58794deSPawel Jakub Dawidek  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21c58794deSPawel Jakub Dawidek  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22c58794deSPawel Jakub Dawidek  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23c58794deSPawel Jakub Dawidek  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24c58794deSPawel Jakub Dawidek  * SUCH DAMAGE.
25c58794deSPawel Jakub Dawidek  *
26c58794deSPawel Jakub Dawidek  * $FreeBSD$
27c58794deSPawel Jakub Dawidek  */
28c58794deSPawel Jakub Dawidek 
29c58794deSPawel Jakub Dawidek #ifndef	_G_ELI_H_
30c58794deSPawel Jakub Dawidek #define	_G_ELI_H_
31c58794deSPawel Jakub Dawidek 
32c58794deSPawel Jakub Dawidek #include <sys/endian.h>
33c58794deSPawel Jakub Dawidek #include <sys/errno.h>
34c58794deSPawel Jakub Dawidek #include <sys/malloc.h>
35c58794deSPawel Jakub Dawidek #include <crypto/sha2/sha2.h>
36c58794deSPawel Jakub Dawidek #include <opencrypto/cryptodev.h>
37c58794deSPawel Jakub Dawidek #ifdef _KERNEL
38c58794deSPawel Jakub Dawidek #include <sys/bio.h>
39c58794deSPawel Jakub Dawidek #include <sys/libkern.h>
40c58794deSPawel Jakub Dawidek #include <geom/geom.h>
41c58794deSPawel Jakub Dawidek #else
42c58794deSPawel Jakub Dawidek #include <stdio.h>
43c58794deSPawel Jakub Dawidek #include <string.h>
446eb1d21fSPawel Jakub Dawidek #include <strings.h>
45c58794deSPawel Jakub Dawidek #endif
46c58794deSPawel Jakub Dawidek #ifndef _OpenSSL_
47c58794deSPawel Jakub Dawidek #include <sys/md5.h>
48c58794deSPawel Jakub Dawidek #endif
49c58794deSPawel Jakub Dawidek 
50c58794deSPawel Jakub Dawidek #define	G_ELI_CLASS_NAME	"ELI"
51c58794deSPawel Jakub Dawidek #define	G_ELI_MAGIC		"GEOM::ELI"
52c58794deSPawel Jakub Dawidek #define	G_ELI_SUFFIX		".eli"
53c58794deSPawel Jakub Dawidek 
54c58794deSPawel Jakub Dawidek /*
55c58794deSPawel Jakub Dawidek  * Version history:
56c58794deSPawel Jakub Dawidek  * 0 - Initial version number.
57eaa3b919SPawel Jakub Dawidek  * 1 - Added data authentication support (md_aalgo field and
58eaa3b919SPawel Jakub Dawidek  *     G_ELI_FLAG_AUTH flag).
59d04c304dSPawel Jakub Dawidek  * 2 - Added G_ELI_FLAG_READONLY.
602bd4ade6SPawel Jakub Dawidek  *   - IV is generated from offset converted to little-endian
612bd4ade6SPawel Jakub Dawidek  *     (flag G_ELI_FLAG_NATIVE_BYTE_ORDER will be set for older versions).
62c58794deSPawel Jakub Dawidek  */
63d04c304dSPawel Jakub Dawidek #define	G_ELI_VERSION		2
64c58794deSPawel Jakub Dawidek 
6585059016SPawel Jakub Dawidek /* ON DISK FLAGS. */
66c58794deSPawel Jakub Dawidek /* Use random, onetime keys. */
67c58794deSPawel Jakub Dawidek #define	G_ELI_FLAG_ONETIME		0x00000001
68c58794deSPawel Jakub Dawidek /* Ask for the passphrase from the kernel, before mounting root. */
69c58794deSPawel Jakub Dawidek #define	G_ELI_FLAG_BOOT			0x00000002
70c58794deSPawel Jakub Dawidek /* Detach on last close, if we were open for writing. */
71c58794deSPawel Jakub Dawidek #define	G_ELI_FLAG_WO_DETACH		0x00000004
72c58794deSPawel Jakub Dawidek /* Detach on last close. */
73c58794deSPawel Jakub Dawidek #define	G_ELI_FLAG_RW_DETACH		0x00000008
74eaa3b919SPawel Jakub Dawidek /* Provide data authentication. */
75eaa3b919SPawel Jakub Dawidek #define	G_ELI_FLAG_AUTH			0x00000010
7685059016SPawel Jakub Dawidek /* Provider is read-only, we should deny all write attempts. */
7785059016SPawel Jakub Dawidek #define	G_ELI_FLAG_RO			0x00000020
7885059016SPawel Jakub Dawidek /* RUNTIME FLAGS. */
79c58794deSPawel Jakub Dawidek /* Provider was open for writing. */
80c58794deSPawel Jakub Dawidek #define	G_ELI_FLAG_WOPEN		0x00010000
81c58794deSPawel Jakub Dawidek /* Destroy device. */
82c58794deSPawel Jakub Dawidek #define	G_ELI_FLAG_DESTROY		0x00020000
832bd4ade6SPawel Jakub Dawidek /* Provider uses native byte-order for IV generation. */
842bd4ade6SPawel Jakub Dawidek #define	G_ELI_FLAG_NATIVE_BYTE_ORDER	0x00040000
85c58794deSPawel Jakub Dawidek 
86c58794deSPawel Jakub Dawidek #define	SHA512_MDLEN		64
87eaa3b919SPawel Jakub Dawidek #define	G_ELI_AUTH_SECKEYLEN	SHA256_DIGEST_LENGTH
88c58794deSPawel Jakub Dawidek 
89c58794deSPawel Jakub Dawidek #define	G_ELI_MAXMKEYS		2
90c58794deSPawel Jakub Dawidek #define	G_ELI_MAXKEYLEN		64
91c58794deSPawel Jakub Dawidek #define	G_ELI_USERKEYLEN	G_ELI_MAXKEYLEN
92c58794deSPawel Jakub Dawidek #define	G_ELI_DATAKEYLEN	G_ELI_MAXKEYLEN
93eaa3b919SPawel Jakub Dawidek #define	G_ELI_AUTHKEYLEN	G_ELI_MAXKEYLEN
94c58794deSPawel Jakub Dawidek #define	G_ELI_IVKEYLEN		G_ELI_MAXKEYLEN
95c58794deSPawel Jakub Dawidek #define	G_ELI_SALTLEN		64
96c58794deSPawel Jakub Dawidek #define	G_ELI_DATAIVKEYLEN	(G_ELI_DATAKEYLEN + G_ELI_IVKEYLEN)
97c58794deSPawel Jakub Dawidek /* Data-Key, IV-Key, HMAC_SHA512(Derived-Key, Data-Key+IV-Key) */
98c58794deSPawel Jakub Dawidek #define	G_ELI_MKEYLEN		(G_ELI_DATAIVKEYLEN + SHA512_MDLEN)
99c58794deSPawel Jakub Dawidek 
100c58794deSPawel Jakub Dawidek #ifdef _KERNEL
101c58794deSPawel Jakub Dawidek extern u_int g_eli_debug;
102c58794deSPawel Jakub Dawidek extern u_int g_eli_overwrites;
103eaa3b919SPawel Jakub Dawidek extern u_int g_eli_batch;
104c58794deSPawel Jakub Dawidek 
105c58794deSPawel Jakub Dawidek #define	G_ELI_CRYPTO_HW		1
106c58794deSPawel Jakub Dawidek #define	G_ELI_CRYPTO_SW		2
107c58794deSPawel Jakub Dawidek 
108c58794deSPawel Jakub Dawidek #define	G_ELI_DEBUG(lvl, ...)	do {					\
109c58794deSPawel Jakub Dawidek 	if (g_eli_debug >= (lvl)) {					\
110c58794deSPawel Jakub Dawidek 		printf("GEOM_ELI");					\
111c58794deSPawel Jakub Dawidek 		if (g_eli_debug > 0)					\
112c58794deSPawel Jakub Dawidek 			printf("[%u]", lvl);				\
113c58794deSPawel Jakub Dawidek 		printf(": ");						\
114c58794deSPawel Jakub Dawidek 		printf(__VA_ARGS__);					\
115c58794deSPawel Jakub Dawidek 		printf("\n");						\
116c58794deSPawel Jakub Dawidek 	}								\
117c58794deSPawel Jakub Dawidek } while (0)
118c58794deSPawel Jakub Dawidek #define	G_ELI_LOGREQ(lvl, bp, ...)	do {				\
119c58794deSPawel Jakub Dawidek 	if (g_eli_debug >= (lvl)) {					\
120c58794deSPawel Jakub Dawidek 		printf("GEOM_ELI");					\
121c58794deSPawel Jakub Dawidek 		if (g_eli_debug > 0)					\
122c58794deSPawel Jakub Dawidek 			printf("[%u]", lvl);				\
123c58794deSPawel Jakub Dawidek 		printf(": ");						\
124c58794deSPawel Jakub Dawidek 		printf(__VA_ARGS__);					\
125c58794deSPawel Jakub Dawidek 		printf(" ");						\
126c58794deSPawel Jakub Dawidek 		g_print_bio(bp);					\
127c58794deSPawel Jakub Dawidek 		printf("\n");						\
128c58794deSPawel Jakub Dawidek 	}								\
129c58794deSPawel Jakub Dawidek } while (0)
130c58794deSPawel Jakub Dawidek 
131c58794deSPawel Jakub Dawidek struct g_eli_worker {
132c58794deSPawel Jakub Dawidek 	struct g_eli_softc	*w_softc;
133c58794deSPawel Jakub Dawidek 	struct proc		*w_proc;
134c58794deSPawel Jakub Dawidek 	u_int			 w_number;
135c58794deSPawel Jakub Dawidek 	uint64_t		 w_sid;
136c58794deSPawel Jakub Dawidek 	LIST_ENTRY(g_eli_worker) w_next;
137c58794deSPawel Jakub Dawidek };
138c58794deSPawel Jakub Dawidek 
139c58794deSPawel Jakub Dawidek struct g_eli_softc {
140c58794deSPawel Jakub Dawidek 	struct g_geom	*sc_geom;
141c58794deSPawel Jakub Dawidek 	u_int		 sc_crypto;
142eaa3b919SPawel Jakub Dawidek 	uint8_t		 sc_mkey[G_ELI_DATAIVKEYLEN];
143eaa3b919SPawel Jakub Dawidek 	uint8_t		 sc_ekey[G_ELI_DATAKEYLEN];
144eaa3b919SPawel Jakub Dawidek 	u_int		 sc_ealgo;
145eaa3b919SPawel Jakub Dawidek 	u_int		 sc_ekeylen;
146eaa3b919SPawel Jakub Dawidek 	uint8_t		 sc_akey[G_ELI_AUTHKEYLEN];
147eaa3b919SPawel Jakub Dawidek 	u_int		 sc_aalgo;
148eaa3b919SPawel Jakub Dawidek 	u_int		 sc_akeylen;
149eaa3b919SPawel Jakub Dawidek 	u_int		 sc_alen;
150eaa3b919SPawel Jakub Dawidek 	SHA256_CTX	 sc_akeyctx;
151c58794deSPawel Jakub Dawidek 	uint8_t		 sc_ivkey[G_ELI_IVKEYLEN];
152c58794deSPawel Jakub Dawidek 	SHA256_CTX	 sc_ivctx;
153c58794deSPawel Jakub Dawidek 	int		 sc_nkey;
154c58794deSPawel Jakub Dawidek 	uint32_t	 sc_flags;
155eaa3b919SPawel Jakub Dawidek 	u_int		 sc_bytes_per_sector;
156eaa3b919SPawel Jakub Dawidek 	u_int		 sc_data_per_sector;
157c58794deSPawel Jakub Dawidek 
158c58794deSPawel Jakub Dawidek 	/* Only for software cryptography. */
159c58794deSPawel Jakub Dawidek 	struct bio_queue_head sc_queue;
160c58794deSPawel Jakub Dawidek 	struct mtx	 sc_queue_mtx;
161c58794deSPawel Jakub Dawidek 	LIST_HEAD(, g_eli_worker) sc_workers;
162c58794deSPawel Jakub Dawidek };
163c58794deSPawel Jakub Dawidek #define	sc_name		 sc_geom->name
164c58794deSPawel Jakub Dawidek #endif	/* _KERNEL */
165c58794deSPawel Jakub Dawidek 
166c58794deSPawel Jakub Dawidek struct g_eli_metadata {
167c58794deSPawel Jakub Dawidek 	char		md_magic[16];	/* Magic value. */
168c58794deSPawel Jakub Dawidek 	uint32_t	md_version;	/* Version number. */
169c58794deSPawel Jakub Dawidek 	uint32_t	md_flags;	/* Additional flags. */
170eaa3b919SPawel Jakub Dawidek 	uint16_t	md_ealgo;	/* Encryption algorithm. */
171c58794deSPawel Jakub Dawidek 	uint16_t	md_keylen;	/* Key length. */
172eaa3b919SPawel Jakub Dawidek 	uint16_t	md_aalgo;	/* Authentication algorithm. */
173c58794deSPawel Jakub Dawidek 	uint64_t	md_provsize;	/* Provider's size. */
174c58794deSPawel Jakub Dawidek 	uint32_t	md_sectorsize;	/* Sector size. */
175c58794deSPawel Jakub Dawidek 	uint8_t		md_keys;	/* Available keys. */
176fcd46203SPawel Jakub Dawidek 	int32_t		md_iterations;	/* Number of iterations for PKCS#5v2. */
177c58794deSPawel Jakub Dawidek 	uint8_t		md_salt[G_ELI_SALTLEN]; /* Salt. */
178c58794deSPawel Jakub Dawidek 			/* Encrypted master key (IV-key, Data-key, HMAC). */
179c58794deSPawel Jakub Dawidek 	uint8_t		md_mkeys[G_ELI_MAXMKEYS * G_ELI_MKEYLEN];
180c58794deSPawel Jakub Dawidek 	u_char		md_hash[16];	/* MD5 hash. */
181efd9ac0dSPawel Jakub Dawidek } __packed;
182c58794deSPawel Jakub Dawidek #ifndef _OpenSSL_
183c58794deSPawel Jakub Dawidek static __inline void
184c58794deSPawel Jakub Dawidek eli_metadata_encode(struct g_eli_metadata *md, u_char *data)
185c58794deSPawel Jakub Dawidek {
186c58794deSPawel Jakub Dawidek 	MD5_CTX ctx;
187c58794deSPawel Jakub Dawidek 	u_char *p;
188c58794deSPawel Jakub Dawidek 
189c58794deSPawel Jakub Dawidek 	p = data;
190c58794deSPawel Jakub Dawidek 	bcopy(md->md_magic, p, sizeof(md->md_magic)); p += sizeof(md->md_magic);
191c58794deSPawel Jakub Dawidek 	le32enc(p, md->md_version);	p += sizeof(md->md_version);
192c58794deSPawel Jakub Dawidek 	le32enc(p, md->md_flags);	p += sizeof(md->md_flags);
193eaa3b919SPawel Jakub Dawidek 	le16enc(p, md->md_ealgo);	p += sizeof(md->md_ealgo);
194c58794deSPawel Jakub Dawidek 	le16enc(p, md->md_keylen);	p += sizeof(md->md_keylen);
195eaa3b919SPawel Jakub Dawidek 	le16enc(p, md->md_aalgo);	p += sizeof(md->md_aalgo);
196c58794deSPawel Jakub Dawidek 	le64enc(p, md->md_provsize);	p += sizeof(md->md_provsize);
197c58794deSPawel Jakub Dawidek 	le32enc(p, md->md_sectorsize);	p += sizeof(md->md_sectorsize);
198c58794deSPawel Jakub Dawidek 	*p = md->md_keys;		p += sizeof(md->md_keys);
199c58794deSPawel Jakub Dawidek 	le32enc(p, md->md_iterations);	p += sizeof(md->md_iterations);
200c58794deSPawel Jakub Dawidek 	bcopy(md->md_salt, p, sizeof(md->md_salt)); p += sizeof(md->md_salt);
201c58794deSPawel Jakub Dawidek 	bcopy(md->md_mkeys, p, sizeof(md->md_mkeys)); p += sizeof(md->md_mkeys);
202c58794deSPawel Jakub Dawidek 	MD5Init(&ctx);
203c58794deSPawel Jakub Dawidek 	MD5Update(&ctx, data, p - data);
204700e04d9SPawel Jakub Dawidek 	MD5Final(md->md_hash, &ctx);
205c58794deSPawel Jakub Dawidek 	bcopy(md->md_hash, p, sizeof(md->md_hash));
206c58794deSPawel Jakub Dawidek }
207c58794deSPawel Jakub Dawidek static __inline int
208c58794deSPawel Jakub Dawidek eli_metadata_decode_v0(const u_char *data, struct g_eli_metadata *md)
209c58794deSPawel Jakub Dawidek {
210c58794deSPawel Jakub Dawidek 	MD5_CTX ctx;
211c58794deSPawel Jakub Dawidek 	const u_char *p;
212c58794deSPawel Jakub Dawidek 
213c58794deSPawel Jakub Dawidek 	p = data + sizeof(md->md_magic) + sizeof(md->md_version);
214c58794deSPawel Jakub Dawidek 	md->md_flags = le32dec(p);	p += sizeof(md->md_flags);
215eaa3b919SPawel Jakub Dawidek 	md->md_ealgo = le16dec(p);	p += sizeof(md->md_ealgo);
216c58794deSPawel Jakub Dawidek 	md->md_keylen = le16dec(p);	p += sizeof(md->md_keylen);
217c58794deSPawel Jakub Dawidek 	md->md_provsize = le64dec(p);	p += sizeof(md->md_provsize);
218c58794deSPawel Jakub Dawidek 	md->md_sectorsize = le32dec(p);	p += sizeof(md->md_sectorsize);
219c58794deSPawel Jakub Dawidek 	md->md_keys = *p;		p += sizeof(md->md_keys);
220c58794deSPawel Jakub Dawidek 	md->md_iterations = le32dec(p);	p += sizeof(md->md_iterations);
221c58794deSPawel Jakub Dawidek 	bcopy(p, md->md_salt, sizeof(md->md_salt)); p += sizeof(md->md_salt);
222c58794deSPawel Jakub Dawidek 	bcopy(p, md->md_mkeys, sizeof(md->md_mkeys)); p += sizeof(md->md_mkeys);
223c58794deSPawel Jakub Dawidek 	MD5Init(&ctx);
224c58794deSPawel Jakub Dawidek 	MD5Update(&ctx, data, p - data);
225700e04d9SPawel Jakub Dawidek 	MD5Final(md->md_hash, &ctx);
226c58794deSPawel Jakub Dawidek 	if (bcmp(md->md_hash, p, 16) != 0)
227c58794deSPawel Jakub Dawidek 		return (EINVAL);
228c58794deSPawel Jakub Dawidek 	return (0);
229c58794deSPawel Jakub Dawidek }
230c58794deSPawel Jakub Dawidek static __inline int
231d04c304dSPawel Jakub Dawidek eli_metadata_decode_v1v2(const u_char *data, struct g_eli_metadata *md)
232eaa3b919SPawel Jakub Dawidek {
233eaa3b919SPawel Jakub Dawidek 	MD5_CTX ctx;
234eaa3b919SPawel Jakub Dawidek 	const u_char *p;
235eaa3b919SPawel Jakub Dawidek 
236eaa3b919SPawel Jakub Dawidek 	p = data + sizeof(md->md_magic) + sizeof(md->md_version);
237eaa3b919SPawel Jakub Dawidek 	md->md_flags = le32dec(p);	p += sizeof(md->md_flags);
238eaa3b919SPawel Jakub Dawidek 	md->md_ealgo = le16dec(p);	p += sizeof(md->md_ealgo);
239eaa3b919SPawel Jakub Dawidek 	md->md_keylen = le16dec(p);	p += sizeof(md->md_keylen);
240eaa3b919SPawel Jakub Dawidek 	md->md_aalgo = le16dec(p);	p += sizeof(md->md_aalgo);
241eaa3b919SPawel Jakub Dawidek 	md->md_provsize = le64dec(p);	p += sizeof(md->md_provsize);
242eaa3b919SPawel Jakub Dawidek 	md->md_sectorsize = le32dec(p);	p += sizeof(md->md_sectorsize);
243eaa3b919SPawel Jakub Dawidek 	md->md_keys = *p;		p += sizeof(md->md_keys);
244eaa3b919SPawel Jakub Dawidek 	md->md_iterations = le32dec(p);	p += sizeof(md->md_iterations);
245eaa3b919SPawel Jakub Dawidek 	bcopy(p, md->md_salt, sizeof(md->md_salt)); p += sizeof(md->md_salt);
246eaa3b919SPawel Jakub Dawidek 	bcopy(p, md->md_mkeys, sizeof(md->md_mkeys)); p += sizeof(md->md_mkeys);
247eaa3b919SPawel Jakub Dawidek 	MD5Init(&ctx);
248eaa3b919SPawel Jakub Dawidek 	MD5Update(&ctx, data, p - data);
249eaa3b919SPawel Jakub Dawidek 	MD5Final(md->md_hash, &ctx);
250eaa3b919SPawel Jakub Dawidek 	if (bcmp(md->md_hash, p, 16) != 0)
251eaa3b919SPawel Jakub Dawidek 		return (EINVAL);
252eaa3b919SPawel Jakub Dawidek 	return (0);
253eaa3b919SPawel Jakub Dawidek }
254eaa3b919SPawel Jakub Dawidek static __inline int
255c58794deSPawel Jakub Dawidek eli_metadata_decode(const u_char *data, struct g_eli_metadata *md)
256c58794deSPawel Jakub Dawidek {
257c58794deSPawel Jakub Dawidek 	int error;
258c58794deSPawel Jakub Dawidek 
259c58794deSPawel Jakub Dawidek 	bcopy(data, md->md_magic, sizeof(md->md_magic));
260c58794deSPawel Jakub Dawidek 	md->md_version = le32dec(data + sizeof(md->md_magic));
261c58794deSPawel Jakub Dawidek 	switch (md->md_version) {
262c58794deSPawel Jakub Dawidek 	case 0:
263c58794deSPawel Jakub Dawidek 		error = eli_metadata_decode_v0(data, md);
264c58794deSPawel Jakub Dawidek 		break;
265eaa3b919SPawel Jakub Dawidek 	case 1:
266d04c304dSPawel Jakub Dawidek 	case 2:
267d04c304dSPawel Jakub Dawidek 		error = eli_metadata_decode_v1v2(data, md);
268eaa3b919SPawel Jakub Dawidek 		break;
269c58794deSPawel Jakub Dawidek 	default:
270c58794deSPawel Jakub Dawidek 		error = EINVAL;
271c58794deSPawel Jakub Dawidek 		break;
272c58794deSPawel Jakub Dawidek 	}
273c58794deSPawel Jakub Dawidek 	return (error);
274c58794deSPawel Jakub Dawidek }
275c58794deSPawel Jakub Dawidek #endif	/* !_OpenSSL */
276c58794deSPawel Jakub Dawidek 
277c58794deSPawel Jakub Dawidek static __inline u_int
278eaa3b919SPawel Jakub Dawidek g_eli_str2ealgo(const char *name)
279c58794deSPawel Jakub Dawidek {
280c58794deSPawel Jakub Dawidek 
2816eb1d21fSPawel Jakub Dawidek 	if (strcasecmp("null", name) == 0)
282c58794deSPawel Jakub Dawidek 		return (CRYPTO_NULL_CBC);
2836eb1d21fSPawel Jakub Dawidek 	else if (strcasecmp("aes", name) == 0)
284c58794deSPawel Jakub Dawidek 		return (CRYPTO_AES_CBC);
2856eb1d21fSPawel Jakub Dawidek 	else if (strcasecmp("blowfish", name) == 0)
286c58794deSPawel Jakub Dawidek 		return (CRYPTO_BLF_CBC);
2876eb1d21fSPawel Jakub Dawidek 	else if (strcasecmp("3des", name) == 0)
288c58794deSPawel Jakub Dawidek 		return (CRYPTO_3DES_CBC);
289c58794deSPawel Jakub Dawidek 	return (CRYPTO_ALGORITHM_MIN - 1);
290c58794deSPawel Jakub Dawidek }
291c58794deSPawel Jakub Dawidek 
292eaa3b919SPawel Jakub Dawidek static __inline u_int
293eaa3b919SPawel Jakub Dawidek g_eli_str2aalgo(const char *name)
294eaa3b919SPawel Jakub Dawidek {
295eaa3b919SPawel Jakub Dawidek 
296eaa3b919SPawel Jakub Dawidek 	if (strcasecmp("hmac/md5", name) == 0)
297eaa3b919SPawel Jakub Dawidek 		return (CRYPTO_MD5_HMAC);
298eaa3b919SPawel Jakub Dawidek 	else if (strcasecmp("hmac/sha1", name) == 0)
299eaa3b919SPawel Jakub Dawidek 		return (CRYPTO_SHA1_HMAC);
300eaa3b919SPawel Jakub Dawidek 	else if (strcasecmp("hmac/ripemd160", name) == 0)
301eaa3b919SPawel Jakub Dawidek 		return (CRYPTO_RIPEMD160_HMAC);
302eaa3b919SPawel Jakub Dawidek 	else if (strcasecmp("hmac/sha256", name) == 0)
303eaa3b919SPawel Jakub Dawidek 		return (CRYPTO_SHA2_256_HMAC);
304eaa3b919SPawel Jakub Dawidek 	else if (strcasecmp("hmac/sha384", name) == 0)
305eaa3b919SPawel Jakub Dawidek 		return (CRYPTO_SHA2_384_HMAC);
306eaa3b919SPawel Jakub Dawidek 	else if (strcasecmp("hmac/sha512", name) == 0)
307eaa3b919SPawel Jakub Dawidek 		return (CRYPTO_SHA2_512_HMAC);
308eaa3b919SPawel Jakub Dawidek 	return (CRYPTO_ALGORITHM_MIN - 1);
309eaa3b919SPawel Jakub Dawidek }
310eaa3b919SPawel Jakub Dawidek 
311c58794deSPawel Jakub Dawidek static __inline const char *
312c58794deSPawel Jakub Dawidek g_eli_algo2str(u_int algo)
313c58794deSPawel Jakub Dawidek {
314c58794deSPawel Jakub Dawidek 
315c58794deSPawel Jakub Dawidek 	switch (algo) {
316c58794deSPawel Jakub Dawidek 	case CRYPTO_NULL_CBC:
317c58794deSPawel Jakub Dawidek 		return ("NULL");
318c58794deSPawel Jakub Dawidek 	case CRYPTO_AES_CBC:
319eaa3b919SPawel Jakub Dawidek 		return ("AES-CBC");
320c58794deSPawel Jakub Dawidek 	case CRYPTO_BLF_CBC:
321eaa3b919SPawel Jakub Dawidek 		return ("Blowfish-CBC");
322c58794deSPawel Jakub Dawidek 	case CRYPTO_3DES_CBC:
323eaa3b919SPawel Jakub Dawidek 		return ("3DES-CBC");
324eaa3b919SPawel Jakub Dawidek 	case CRYPTO_MD5_HMAC:
325eaa3b919SPawel Jakub Dawidek 		return ("HMAC/MD5");
326eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA1_HMAC:
327eaa3b919SPawel Jakub Dawidek 		return ("HMAC/SHA1");
328eaa3b919SPawel Jakub Dawidek 	case CRYPTO_RIPEMD160_HMAC:
329eaa3b919SPawel Jakub Dawidek 		return ("HMAC/RIPEMD160");
330eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA2_256_HMAC:
331eaa3b919SPawel Jakub Dawidek 		return ("HMAC/SHA256");
332eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA2_384_HMAC:
333eaa3b919SPawel Jakub Dawidek 		return ("HMAC/SHA384");
334eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA2_512_HMAC:
335eaa3b919SPawel Jakub Dawidek 		return ("HMAC/SHA512");
336c58794deSPawel Jakub Dawidek 	}
337c58794deSPawel Jakub Dawidek 	return ("unknown");
338c58794deSPawel Jakub Dawidek }
339c58794deSPawel Jakub Dawidek 
340c58794deSPawel Jakub Dawidek static __inline void
341c58794deSPawel Jakub Dawidek eli_metadata_dump(const struct g_eli_metadata *md)
342c58794deSPawel Jakub Dawidek {
343c58794deSPawel Jakub Dawidek 	static const char hex[] = "0123456789abcdef";
344c58794deSPawel Jakub Dawidek 	char str[sizeof(md->md_mkeys) * 2 + 1];
345c58794deSPawel Jakub Dawidek 	u_int i;
346c58794deSPawel Jakub Dawidek 
347c58794deSPawel Jakub Dawidek 	printf("     magic: %s\n", md->md_magic);
348c58794deSPawel Jakub Dawidek 	printf("   version: %u\n", (u_int)md->md_version);
349c58794deSPawel Jakub Dawidek 	printf("     flags: 0x%x\n", (u_int)md->md_flags);
350eaa3b919SPawel Jakub Dawidek 	printf("     ealgo: %s\n", g_eli_algo2str(md->md_ealgo));
351c58794deSPawel Jakub Dawidek 	printf("    keylen: %u\n", (u_int)md->md_keylen);
352eaa3b919SPawel Jakub Dawidek 	if (md->md_flags & G_ELI_FLAG_AUTH)
353eaa3b919SPawel Jakub Dawidek 		printf("     aalgo: %s\n", g_eli_algo2str(md->md_aalgo));
354c58794deSPawel Jakub Dawidek 	printf("  provsize: %ju\n", (uintmax_t)md->md_provsize);
355c58794deSPawel Jakub Dawidek 	printf("sectorsize: %u\n", (u_int)md->md_sectorsize);
356c58794deSPawel Jakub Dawidek 	printf("      keys: 0x%02x\n", (u_int)md->md_keys);
357c58794deSPawel Jakub Dawidek 	printf("iterations: %u\n", (u_int)md->md_iterations);
358c58794deSPawel Jakub Dawidek 	bzero(str, sizeof(str));
359c58794deSPawel Jakub Dawidek 	for (i = 0; i < sizeof(md->md_salt); i++) {
360c58794deSPawel Jakub Dawidek 		str[i * 2] = hex[md->md_salt[i] >> 4];
361c58794deSPawel Jakub Dawidek 		str[i * 2 + 1] = hex[md->md_salt[i] & 0x0f];
362c58794deSPawel Jakub Dawidek 	}
363c58794deSPawel Jakub Dawidek 	printf("      Salt: %s\n", str);
364c58794deSPawel Jakub Dawidek 	bzero(str, sizeof(str));
365c58794deSPawel Jakub Dawidek 	for (i = 0; i < sizeof(md->md_mkeys); i++) {
366c58794deSPawel Jakub Dawidek 		str[i * 2] = hex[md->md_mkeys[i] >> 4];
367c58794deSPawel Jakub Dawidek 		str[i * 2 + 1] = hex[md->md_mkeys[i] & 0x0f];
368c58794deSPawel Jakub Dawidek 	}
369c58794deSPawel Jakub Dawidek 	printf("Master Key: %s\n", str);
370c58794deSPawel Jakub Dawidek 	bzero(str, sizeof(str));
371c58794deSPawel Jakub Dawidek 	for (i = 0; i < 16; i++) {
372c58794deSPawel Jakub Dawidek 		str[i * 2] = hex[md->md_hash[i] >> 4];
373c58794deSPawel Jakub Dawidek 		str[i * 2 + 1] = hex[md->md_hash[i] & 0x0f];
374c58794deSPawel Jakub Dawidek 	}
375c58794deSPawel Jakub Dawidek 	printf("  MD5 hash: %s\n", str);
376c58794deSPawel Jakub Dawidek }
377c58794deSPawel Jakub Dawidek 
378c58794deSPawel Jakub Dawidek static __inline u_int
379c58794deSPawel Jakub Dawidek g_eli_keylen(u_int algo, u_int keylen)
380c58794deSPawel Jakub Dawidek {
381c58794deSPawel Jakub Dawidek 
382c58794deSPawel Jakub Dawidek 	switch (algo) {
383c58794deSPawel Jakub Dawidek 	case CRYPTO_NULL_CBC:
384c58794deSPawel Jakub Dawidek 		if (keylen == 0)
385c58794deSPawel Jakub Dawidek 			keylen = 64 * 8;
386c58794deSPawel Jakub Dawidek 		else {
387c58794deSPawel Jakub Dawidek 			if (keylen > 64 * 8)
388c58794deSPawel Jakub Dawidek 				keylen = 0;
389c58794deSPawel Jakub Dawidek 		}
390c58794deSPawel Jakub Dawidek 		return (keylen);
391c58794deSPawel Jakub Dawidek 	case CRYPTO_AES_CBC:
392c58794deSPawel Jakub Dawidek 		switch (keylen) {
393c58794deSPawel Jakub Dawidek 		case 0:
394c58794deSPawel Jakub Dawidek 			return (128);
395c58794deSPawel Jakub Dawidek 		case 128:
396c58794deSPawel Jakub Dawidek 		case 192:
397c58794deSPawel Jakub Dawidek 		case 256:
398c58794deSPawel Jakub Dawidek 			return (keylen);
399c58794deSPawel Jakub Dawidek 		default:
400c58794deSPawel Jakub Dawidek 			return (0);
401c58794deSPawel Jakub Dawidek 		}
402c58794deSPawel Jakub Dawidek 	case CRYPTO_BLF_CBC:
403c58794deSPawel Jakub Dawidek 		if (keylen == 0)
404c58794deSPawel Jakub Dawidek 			return (128);
405c58794deSPawel Jakub Dawidek 		if (keylen < 128 || keylen > 448)
406c58794deSPawel Jakub Dawidek 			return (0);
407c58794deSPawel Jakub Dawidek 		if ((keylen % 32) != 0)
408c58794deSPawel Jakub Dawidek 			return (0);
409c58794deSPawel Jakub Dawidek 		return (keylen);
410c58794deSPawel Jakub Dawidek 	case CRYPTO_3DES_CBC:
411c58794deSPawel Jakub Dawidek 		if (keylen == 0 || keylen == 192)
412c58794deSPawel Jakub Dawidek 			return (192);
413c58794deSPawel Jakub Dawidek 		return (0);
414c58794deSPawel Jakub Dawidek 	default:
415c58794deSPawel Jakub Dawidek 		return (0);
416c58794deSPawel Jakub Dawidek 	}
417c58794deSPawel Jakub Dawidek }
418c58794deSPawel Jakub Dawidek 
419eaa3b919SPawel Jakub Dawidek static __inline u_int
420eaa3b919SPawel Jakub Dawidek g_eli_hashlen(u_int algo)
421eaa3b919SPawel Jakub Dawidek {
422eaa3b919SPawel Jakub Dawidek 
423eaa3b919SPawel Jakub Dawidek 	switch (algo) {
424eaa3b919SPawel Jakub Dawidek 	case CRYPTO_MD5_HMAC:
425eaa3b919SPawel Jakub Dawidek 		return (16);
426eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA1_HMAC:
427eaa3b919SPawel Jakub Dawidek 		return (20);
428eaa3b919SPawel Jakub Dawidek 	case CRYPTO_RIPEMD160_HMAC:
429eaa3b919SPawel Jakub Dawidek 		return (20);
430eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA2_256_HMAC:
431eaa3b919SPawel Jakub Dawidek 		return (32);
432eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA2_384_HMAC:
433eaa3b919SPawel Jakub Dawidek 		return (48);
434eaa3b919SPawel Jakub Dawidek 	case CRYPTO_SHA2_512_HMAC:
435eaa3b919SPawel Jakub Dawidek 		return (64);
436eaa3b919SPawel Jakub Dawidek 	}
437eaa3b919SPawel Jakub Dawidek 	return (0);
438eaa3b919SPawel Jakub Dawidek }
439eaa3b919SPawel Jakub Dawidek 
440c58794deSPawel Jakub Dawidek #ifdef _KERNEL
441c58794deSPawel Jakub Dawidek int g_eli_read_metadata(struct g_class *mp, struct g_provider *pp,
442c58794deSPawel Jakub Dawidek     struct g_eli_metadata *md);
443c58794deSPawel Jakub Dawidek struct g_geom *g_eli_create(struct gctl_req *req, struct g_class *mp,
444c58794deSPawel Jakub Dawidek     struct g_provider *bpp, const struct g_eli_metadata *md,
445c58794deSPawel Jakub Dawidek     const u_char *mkey, int nkey);
446c58794deSPawel Jakub Dawidek int g_eli_destroy(struct g_eli_softc *sc, boolean_t force);
447c58794deSPawel Jakub Dawidek 
448c58794deSPawel Jakub Dawidek int g_eli_access(struct g_provider *pp, int dr, int dw, int de);
449c58794deSPawel Jakub Dawidek void g_eli_config(struct gctl_req *req, struct g_class *mp, const char *verb);
450eaa3b919SPawel Jakub Dawidek 
451eaa3b919SPawel Jakub Dawidek void g_eli_read_done(struct bio *bp);
452eaa3b919SPawel Jakub Dawidek void g_eli_write_done(struct bio *bp);
453eaa3b919SPawel Jakub Dawidek int g_eli_crypto_rerun(struct cryptop *crp);
454eaa3b919SPawel Jakub Dawidek void g_eli_crypto_ivgen(struct g_eli_softc *sc, off_t offset, u_char *iv,
455eaa3b919SPawel Jakub Dawidek     size_t size);
456eaa3b919SPawel Jakub Dawidek 
457eaa3b919SPawel Jakub Dawidek void g_eli_crypto_run(struct g_eli_worker *wr, struct bio *bp);
458eaa3b919SPawel Jakub Dawidek 
459eaa3b919SPawel Jakub Dawidek void g_eli_auth_read(struct g_eli_softc *sc, struct bio *bp);
460eaa3b919SPawel Jakub Dawidek void g_eli_auth_run(struct g_eli_worker *wr, struct bio *bp);
461c58794deSPawel Jakub Dawidek #endif
462c58794deSPawel Jakub Dawidek 
463c58794deSPawel Jakub Dawidek void g_eli_mkey_hmac(unsigned char *mkey, const unsigned char *key);
464c58794deSPawel Jakub Dawidek int g_eli_mkey_decrypt(const struct g_eli_metadata *md,
465c58794deSPawel Jakub Dawidek     const unsigned char *key, unsigned char *mkey, unsigned *nkeyp);
466c58794deSPawel Jakub Dawidek int g_eli_mkey_encrypt(unsigned algo, const unsigned char *key, unsigned keylen,
467c58794deSPawel Jakub Dawidek     unsigned char *mkey);
468eaa3b919SPawel Jakub Dawidek #ifdef _KERNEL
469eaa3b919SPawel Jakub Dawidek void g_eli_mkey_propagate(struct g_eli_softc *sc, const unsigned char *mkey);
470eaa3b919SPawel Jakub Dawidek #endif
471c58794deSPawel Jakub Dawidek 
472c58794deSPawel Jakub Dawidek int g_eli_crypto_encrypt(u_int algo, u_char *data, size_t datasize,
473c58794deSPawel Jakub Dawidek     const u_char *key, size_t keysize);
474c58794deSPawel Jakub Dawidek int g_eli_crypto_decrypt(u_int algo, u_char *data, size_t datasize,
475c58794deSPawel Jakub Dawidek     const u_char *key, size_t keysize);
476c58794deSPawel Jakub Dawidek 
477c58794deSPawel Jakub Dawidek struct hmac_ctx {
478c58794deSPawel Jakub Dawidek 	SHA512_CTX	shactx;
479c58794deSPawel Jakub Dawidek 	u_char		k_opad[128];
480c58794deSPawel Jakub Dawidek };
481c58794deSPawel Jakub Dawidek 
482c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac_init(struct hmac_ctx *ctx, const uint8_t *hkey,
483c58794deSPawel Jakub Dawidek     size_t hkeylen);
484c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac_update(struct hmac_ctx *ctx, const uint8_t *data,
485c58794deSPawel Jakub Dawidek     size_t datasize);
486c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac_final(struct hmac_ctx *ctx, uint8_t *md, size_t mdsize);
487c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac(const uint8_t *hkey, size_t hkeysize,
488c58794deSPawel Jakub Dawidek     const uint8_t *data, size_t datasize, uint8_t *md, size_t mdsize);
489c58794deSPawel Jakub Dawidek #endif	/* !_G_ELI_H_ */
490