1c58794deSPawel Jakub Dawidek /*- 22bd4ade6SPawel Jakub Dawidek * Copyright (c) 2005-2006 Pawel Jakub Dawidek <pjd@FreeBSD.org> 3c58794deSPawel Jakub Dawidek * All rights reserved. 4c58794deSPawel Jakub Dawidek * 5c58794deSPawel Jakub Dawidek * Redistribution and use in source and binary forms, with or without 6c58794deSPawel Jakub Dawidek * modification, are permitted provided that the following conditions 7c58794deSPawel Jakub Dawidek * are met: 8c58794deSPawel Jakub Dawidek * 1. Redistributions of source code must retain the above copyright 9c58794deSPawel Jakub Dawidek * notice, this list of conditions and the following disclaimer. 10c58794deSPawel Jakub Dawidek * 2. Redistributions in binary form must reproduce the above copyright 11c58794deSPawel Jakub Dawidek * notice, this list of conditions and the following disclaimer in the 12c58794deSPawel Jakub Dawidek * documentation and/or other materials provided with the distribution. 13c58794deSPawel Jakub Dawidek * 14c58794deSPawel Jakub Dawidek * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND 15c58794deSPawel Jakub Dawidek * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16c58794deSPawel Jakub Dawidek * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17c58794deSPawel Jakub Dawidek * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE 18c58794deSPawel Jakub Dawidek * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19c58794deSPawel Jakub Dawidek * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20c58794deSPawel Jakub Dawidek * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21c58794deSPawel Jakub Dawidek * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22c58794deSPawel Jakub Dawidek * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23c58794deSPawel Jakub Dawidek * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24c58794deSPawel Jakub Dawidek * SUCH DAMAGE. 25c58794deSPawel Jakub Dawidek * 26c58794deSPawel Jakub Dawidek * $FreeBSD$ 27c58794deSPawel Jakub Dawidek */ 28c58794deSPawel Jakub Dawidek 29c58794deSPawel Jakub Dawidek #ifndef _G_ELI_H_ 30c58794deSPawel Jakub Dawidek #define _G_ELI_H_ 31c58794deSPawel Jakub Dawidek 32c58794deSPawel Jakub Dawidek #include <sys/endian.h> 33c58794deSPawel Jakub Dawidek #include <sys/errno.h> 34c58794deSPawel Jakub Dawidek #include <sys/malloc.h> 35c58794deSPawel Jakub Dawidek #include <crypto/sha2/sha2.h> 36c58794deSPawel Jakub Dawidek #include <opencrypto/cryptodev.h> 37c58794deSPawel Jakub Dawidek #ifdef _KERNEL 38c58794deSPawel Jakub Dawidek #include <sys/bio.h> 39c58794deSPawel Jakub Dawidek #include <sys/libkern.h> 40c58794deSPawel Jakub Dawidek #include <geom/geom.h> 41c58794deSPawel Jakub Dawidek #else 42c58794deSPawel Jakub Dawidek #include <stdio.h> 43c58794deSPawel Jakub Dawidek #include <string.h> 446eb1d21fSPawel Jakub Dawidek #include <strings.h> 45c58794deSPawel Jakub Dawidek #endif 46c58794deSPawel Jakub Dawidek #ifndef _OpenSSL_ 47c58794deSPawel Jakub Dawidek #include <sys/md5.h> 48c58794deSPawel Jakub Dawidek #endif 49c58794deSPawel Jakub Dawidek 50c58794deSPawel Jakub Dawidek #define G_ELI_CLASS_NAME "ELI" 51c58794deSPawel Jakub Dawidek #define G_ELI_MAGIC "GEOM::ELI" 52c58794deSPawel Jakub Dawidek #define G_ELI_SUFFIX ".eli" 53c58794deSPawel Jakub Dawidek 54c58794deSPawel Jakub Dawidek /* 55c58794deSPawel Jakub Dawidek * Version history: 56c58794deSPawel Jakub Dawidek * 0 - Initial version number. 57eaa3b919SPawel Jakub Dawidek * 1 - Added data authentication support (md_aalgo field and 58eaa3b919SPawel Jakub Dawidek * G_ELI_FLAG_AUTH flag). 59d04c304dSPawel Jakub Dawidek * 2 - Added G_ELI_FLAG_READONLY. 602bd4ade6SPawel Jakub Dawidek * - IV is generated from offset converted to little-endian 612bd4ade6SPawel Jakub Dawidek * (flag G_ELI_FLAG_NATIVE_BYTE_ORDER will be set for older versions). 62c58794deSPawel Jakub Dawidek */ 63d04c304dSPawel Jakub Dawidek #define G_ELI_VERSION 2 64c58794deSPawel Jakub Dawidek 6585059016SPawel Jakub Dawidek /* ON DISK FLAGS. */ 66c58794deSPawel Jakub Dawidek /* Use random, onetime keys. */ 67c58794deSPawel Jakub Dawidek #define G_ELI_FLAG_ONETIME 0x00000001 68c58794deSPawel Jakub Dawidek /* Ask for the passphrase from the kernel, before mounting root. */ 69c58794deSPawel Jakub Dawidek #define G_ELI_FLAG_BOOT 0x00000002 70c58794deSPawel Jakub Dawidek /* Detach on last close, if we were open for writing. */ 71c58794deSPawel Jakub Dawidek #define G_ELI_FLAG_WO_DETACH 0x00000004 72c58794deSPawel Jakub Dawidek /* Detach on last close. */ 73c58794deSPawel Jakub Dawidek #define G_ELI_FLAG_RW_DETACH 0x00000008 74eaa3b919SPawel Jakub Dawidek /* Provide data authentication. */ 75eaa3b919SPawel Jakub Dawidek #define G_ELI_FLAG_AUTH 0x00000010 7685059016SPawel Jakub Dawidek /* Provider is read-only, we should deny all write attempts. */ 7785059016SPawel Jakub Dawidek #define G_ELI_FLAG_RO 0x00000020 7885059016SPawel Jakub Dawidek /* RUNTIME FLAGS. */ 79c58794deSPawel Jakub Dawidek /* Provider was open for writing. */ 80c58794deSPawel Jakub Dawidek #define G_ELI_FLAG_WOPEN 0x00010000 81c58794deSPawel Jakub Dawidek /* Destroy device. */ 82c58794deSPawel Jakub Dawidek #define G_ELI_FLAG_DESTROY 0x00020000 832bd4ade6SPawel Jakub Dawidek /* Provider uses native byte-order for IV generation. */ 842bd4ade6SPawel Jakub Dawidek #define G_ELI_FLAG_NATIVE_BYTE_ORDER 0x00040000 85c58794deSPawel Jakub Dawidek 86c58794deSPawel Jakub Dawidek #define SHA512_MDLEN 64 87eaa3b919SPawel Jakub Dawidek #define G_ELI_AUTH_SECKEYLEN SHA256_DIGEST_LENGTH 88c58794deSPawel Jakub Dawidek 89c58794deSPawel Jakub Dawidek #define G_ELI_MAXMKEYS 2 90c58794deSPawel Jakub Dawidek #define G_ELI_MAXKEYLEN 64 91c58794deSPawel Jakub Dawidek #define G_ELI_USERKEYLEN G_ELI_MAXKEYLEN 92c58794deSPawel Jakub Dawidek #define G_ELI_DATAKEYLEN G_ELI_MAXKEYLEN 93eaa3b919SPawel Jakub Dawidek #define G_ELI_AUTHKEYLEN G_ELI_MAXKEYLEN 94c58794deSPawel Jakub Dawidek #define G_ELI_IVKEYLEN G_ELI_MAXKEYLEN 95c58794deSPawel Jakub Dawidek #define G_ELI_SALTLEN 64 96c58794deSPawel Jakub Dawidek #define G_ELI_DATAIVKEYLEN (G_ELI_DATAKEYLEN + G_ELI_IVKEYLEN) 97c58794deSPawel Jakub Dawidek /* Data-Key, IV-Key, HMAC_SHA512(Derived-Key, Data-Key+IV-Key) */ 98c58794deSPawel Jakub Dawidek #define G_ELI_MKEYLEN (G_ELI_DATAIVKEYLEN + SHA512_MDLEN) 99c58794deSPawel Jakub Dawidek 100c58794deSPawel Jakub Dawidek #ifdef _KERNEL 101c58794deSPawel Jakub Dawidek extern u_int g_eli_debug; 102c58794deSPawel Jakub Dawidek extern u_int g_eli_overwrites; 103eaa3b919SPawel Jakub Dawidek extern u_int g_eli_batch; 104c58794deSPawel Jakub Dawidek 105c58794deSPawel Jakub Dawidek #define G_ELI_CRYPTO_HW 1 106c58794deSPawel Jakub Dawidek #define G_ELI_CRYPTO_SW 2 107c58794deSPawel Jakub Dawidek 108c58794deSPawel Jakub Dawidek #define G_ELI_DEBUG(lvl, ...) do { \ 109c58794deSPawel Jakub Dawidek if (g_eli_debug >= (lvl)) { \ 110c58794deSPawel Jakub Dawidek printf("GEOM_ELI"); \ 111c58794deSPawel Jakub Dawidek if (g_eli_debug > 0) \ 112c58794deSPawel Jakub Dawidek printf("[%u]", lvl); \ 113c58794deSPawel Jakub Dawidek printf(": "); \ 114c58794deSPawel Jakub Dawidek printf(__VA_ARGS__); \ 115c58794deSPawel Jakub Dawidek printf("\n"); \ 116c58794deSPawel Jakub Dawidek } \ 117c58794deSPawel Jakub Dawidek } while (0) 118c58794deSPawel Jakub Dawidek #define G_ELI_LOGREQ(lvl, bp, ...) do { \ 119c58794deSPawel Jakub Dawidek if (g_eli_debug >= (lvl)) { \ 120c58794deSPawel Jakub Dawidek printf("GEOM_ELI"); \ 121c58794deSPawel Jakub Dawidek if (g_eli_debug > 0) \ 122c58794deSPawel Jakub Dawidek printf("[%u]", lvl); \ 123c58794deSPawel Jakub Dawidek printf(": "); \ 124c58794deSPawel Jakub Dawidek printf(__VA_ARGS__); \ 125c58794deSPawel Jakub Dawidek printf(" "); \ 126c58794deSPawel Jakub Dawidek g_print_bio(bp); \ 127c58794deSPawel Jakub Dawidek printf("\n"); \ 128c58794deSPawel Jakub Dawidek } \ 129c58794deSPawel Jakub Dawidek } while (0) 130c58794deSPawel Jakub Dawidek 131c58794deSPawel Jakub Dawidek struct g_eli_worker { 132c58794deSPawel Jakub Dawidek struct g_eli_softc *w_softc; 133c58794deSPawel Jakub Dawidek struct proc *w_proc; 134c58794deSPawel Jakub Dawidek u_int w_number; 135c58794deSPawel Jakub Dawidek uint64_t w_sid; 136c58794deSPawel Jakub Dawidek LIST_ENTRY(g_eli_worker) w_next; 137c58794deSPawel Jakub Dawidek }; 138c58794deSPawel Jakub Dawidek 139c58794deSPawel Jakub Dawidek struct g_eli_softc { 140c58794deSPawel Jakub Dawidek struct g_geom *sc_geom; 141c58794deSPawel Jakub Dawidek u_int sc_crypto; 142eaa3b919SPawel Jakub Dawidek uint8_t sc_mkey[G_ELI_DATAIVKEYLEN]; 143eaa3b919SPawel Jakub Dawidek uint8_t sc_ekey[G_ELI_DATAKEYLEN]; 144eaa3b919SPawel Jakub Dawidek u_int sc_ealgo; 145eaa3b919SPawel Jakub Dawidek u_int sc_ekeylen; 146eaa3b919SPawel Jakub Dawidek uint8_t sc_akey[G_ELI_AUTHKEYLEN]; 147eaa3b919SPawel Jakub Dawidek u_int sc_aalgo; 148eaa3b919SPawel Jakub Dawidek u_int sc_akeylen; 149eaa3b919SPawel Jakub Dawidek u_int sc_alen; 150eaa3b919SPawel Jakub Dawidek SHA256_CTX sc_akeyctx; 151c58794deSPawel Jakub Dawidek uint8_t sc_ivkey[G_ELI_IVKEYLEN]; 152c58794deSPawel Jakub Dawidek SHA256_CTX sc_ivctx; 153c58794deSPawel Jakub Dawidek int sc_nkey; 154c58794deSPawel Jakub Dawidek uint32_t sc_flags; 155eaa3b919SPawel Jakub Dawidek u_int sc_bytes_per_sector; 156eaa3b919SPawel Jakub Dawidek u_int sc_data_per_sector; 157c58794deSPawel Jakub Dawidek 158c58794deSPawel Jakub Dawidek /* Only for software cryptography. */ 159c58794deSPawel Jakub Dawidek struct bio_queue_head sc_queue; 160c58794deSPawel Jakub Dawidek struct mtx sc_queue_mtx; 161c58794deSPawel Jakub Dawidek LIST_HEAD(, g_eli_worker) sc_workers; 162c58794deSPawel Jakub Dawidek }; 163c58794deSPawel Jakub Dawidek #define sc_name sc_geom->name 164c58794deSPawel Jakub Dawidek #endif /* _KERNEL */ 165c58794deSPawel Jakub Dawidek 166c58794deSPawel Jakub Dawidek struct g_eli_metadata { 167c58794deSPawel Jakub Dawidek char md_magic[16]; /* Magic value. */ 168c58794deSPawel Jakub Dawidek uint32_t md_version; /* Version number. */ 169c58794deSPawel Jakub Dawidek uint32_t md_flags; /* Additional flags. */ 170eaa3b919SPawel Jakub Dawidek uint16_t md_ealgo; /* Encryption algorithm. */ 171c58794deSPawel Jakub Dawidek uint16_t md_keylen; /* Key length. */ 172eaa3b919SPawel Jakub Dawidek uint16_t md_aalgo; /* Authentication algorithm. */ 173c58794deSPawel Jakub Dawidek uint64_t md_provsize; /* Provider's size. */ 174c58794deSPawel Jakub Dawidek uint32_t md_sectorsize; /* Sector size. */ 175c58794deSPawel Jakub Dawidek uint8_t md_keys; /* Available keys. */ 176fcd46203SPawel Jakub Dawidek int32_t md_iterations; /* Number of iterations for PKCS#5v2. */ 177c58794deSPawel Jakub Dawidek uint8_t md_salt[G_ELI_SALTLEN]; /* Salt. */ 178c58794deSPawel Jakub Dawidek /* Encrypted master key (IV-key, Data-key, HMAC). */ 179c58794deSPawel Jakub Dawidek uint8_t md_mkeys[G_ELI_MAXMKEYS * G_ELI_MKEYLEN]; 180c58794deSPawel Jakub Dawidek u_char md_hash[16]; /* MD5 hash. */ 181efd9ac0dSPawel Jakub Dawidek } __packed; 182c58794deSPawel Jakub Dawidek #ifndef _OpenSSL_ 183c58794deSPawel Jakub Dawidek static __inline void 184c58794deSPawel Jakub Dawidek eli_metadata_encode(struct g_eli_metadata *md, u_char *data) 185c58794deSPawel Jakub Dawidek { 186c58794deSPawel Jakub Dawidek MD5_CTX ctx; 187c58794deSPawel Jakub Dawidek u_char *p; 188c58794deSPawel Jakub Dawidek 189c58794deSPawel Jakub Dawidek p = data; 190c58794deSPawel Jakub Dawidek bcopy(md->md_magic, p, sizeof(md->md_magic)); p += sizeof(md->md_magic); 191c58794deSPawel Jakub Dawidek le32enc(p, md->md_version); p += sizeof(md->md_version); 192c58794deSPawel Jakub Dawidek le32enc(p, md->md_flags); p += sizeof(md->md_flags); 193eaa3b919SPawel Jakub Dawidek le16enc(p, md->md_ealgo); p += sizeof(md->md_ealgo); 194c58794deSPawel Jakub Dawidek le16enc(p, md->md_keylen); p += sizeof(md->md_keylen); 195eaa3b919SPawel Jakub Dawidek le16enc(p, md->md_aalgo); p += sizeof(md->md_aalgo); 196c58794deSPawel Jakub Dawidek le64enc(p, md->md_provsize); p += sizeof(md->md_provsize); 197c58794deSPawel Jakub Dawidek le32enc(p, md->md_sectorsize); p += sizeof(md->md_sectorsize); 198c58794deSPawel Jakub Dawidek *p = md->md_keys; p += sizeof(md->md_keys); 199c58794deSPawel Jakub Dawidek le32enc(p, md->md_iterations); p += sizeof(md->md_iterations); 200c58794deSPawel Jakub Dawidek bcopy(md->md_salt, p, sizeof(md->md_salt)); p += sizeof(md->md_salt); 201c58794deSPawel Jakub Dawidek bcopy(md->md_mkeys, p, sizeof(md->md_mkeys)); p += sizeof(md->md_mkeys); 202c58794deSPawel Jakub Dawidek MD5Init(&ctx); 203c58794deSPawel Jakub Dawidek MD5Update(&ctx, data, p - data); 204700e04d9SPawel Jakub Dawidek MD5Final(md->md_hash, &ctx); 205c58794deSPawel Jakub Dawidek bcopy(md->md_hash, p, sizeof(md->md_hash)); 206c58794deSPawel Jakub Dawidek } 207c58794deSPawel Jakub Dawidek static __inline int 208c58794deSPawel Jakub Dawidek eli_metadata_decode_v0(const u_char *data, struct g_eli_metadata *md) 209c58794deSPawel Jakub Dawidek { 210c58794deSPawel Jakub Dawidek MD5_CTX ctx; 211c58794deSPawel Jakub Dawidek const u_char *p; 212c58794deSPawel Jakub Dawidek 213c58794deSPawel Jakub Dawidek p = data + sizeof(md->md_magic) + sizeof(md->md_version); 214c58794deSPawel Jakub Dawidek md->md_flags = le32dec(p); p += sizeof(md->md_flags); 215eaa3b919SPawel Jakub Dawidek md->md_ealgo = le16dec(p); p += sizeof(md->md_ealgo); 216c58794deSPawel Jakub Dawidek md->md_keylen = le16dec(p); p += sizeof(md->md_keylen); 217c58794deSPawel Jakub Dawidek md->md_provsize = le64dec(p); p += sizeof(md->md_provsize); 218c58794deSPawel Jakub Dawidek md->md_sectorsize = le32dec(p); p += sizeof(md->md_sectorsize); 219c58794deSPawel Jakub Dawidek md->md_keys = *p; p += sizeof(md->md_keys); 220c58794deSPawel Jakub Dawidek md->md_iterations = le32dec(p); p += sizeof(md->md_iterations); 221c58794deSPawel Jakub Dawidek bcopy(p, md->md_salt, sizeof(md->md_salt)); p += sizeof(md->md_salt); 222c58794deSPawel Jakub Dawidek bcopy(p, md->md_mkeys, sizeof(md->md_mkeys)); p += sizeof(md->md_mkeys); 223c58794deSPawel Jakub Dawidek MD5Init(&ctx); 224c58794deSPawel Jakub Dawidek MD5Update(&ctx, data, p - data); 225700e04d9SPawel Jakub Dawidek MD5Final(md->md_hash, &ctx); 226c58794deSPawel Jakub Dawidek if (bcmp(md->md_hash, p, 16) != 0) 227c58794deSPawel Jakub Dawidek return (EINVAL); 228c58794deSPawel Jakub Dawidek return (0); 229c58794deSPawel Jakub Dawidek } 230c58794deSPawel Jakub Dawidek static __inline int 231d04c304dSPawel Jakub Dawidek eli_metadata_decode_v1v2(const u_char *data, struct g_eli_metadata *md) 232eaa3b919SPawel Jakub Dawidek { 233eaa3b919SPawel Jakub Dawidek MD5_CTX ctx; 234eaa3b919SPawel Jakub Dawidek const u_char *p; 235eaa3b919SPawel Jakub Dawidek 236eaa3b919SPawel Jakub Dawidek p = data + sizeof(md->md_magic) + sizeof(md->md_version); 237eaa3b919SPawel Jakub Dawidek md->md_flags = le32dec(p); p += sizeof(md->md_flags); 238eaa3b919SPawel Jakub Dawidek md->md_ealgo = le16dec(p); p += sizeof(md->md_ealgo); 239eaa3b919SPawel Jakub Dawidek md->md_keylen = le16dec(p); p += sizeof(md->md_keylen); 240eaa3b919SPawel Jakub Dawidek md->md_aalgo = le16dec(p); p += sizeof(md->md_aalgo); 241eaa3b919SPawel Jakub Dawidek md->md_provsize = le64dec(p); p += sizeof(md->md_provsize); 242eaa3b919SPawel Jakub Dawidek md->md_sectorsize = le32dec(p); p += sizeof(md->md_sectorsize); 243eaa3b919SPawel Jakub Dawidek md->md_keys = *p; p += sizeof(md->md_keys); 244eaa3b919SPawel Jakub Dawidek md->md_iterations = le32dec(p); p += sizeof(md->md_iterations); 245eaa3b919SPawel Jakub Dawidek bcopy(p, md->md_salt, sizeof(md->md_salt)); p += sizeof(md->md_salt); 246eaa3b919SPawel Jakub Dawidek bcopy(p, md->md_mkeys, sizeof(md->md_mkeys)); p += sizeof(md->md_mkeys); 247eaa3b919SPawel Jakub Dawidek MD5Init(&ctx); 248eaa3b919SPawel Jakub Dawidek MD5Update(&ctx, data, p - data); 249eaa3b919SPawel Jakub Dawidek MD5Final(md->md_hash, &ctx); 250eaa3b919SPawel Jakub Dawidek if (bcmp(md->md_hash, p, 16) != 0) 251eaa3b919SPawel Jakub Dawidek return (EINVAL); 252eaa3b919SPawel Jakub Dawidek return (0); 253eaa3b919SPawel Jakub Dawidek } 254eaa3b919SPawel Jakub Dawidek static __inline int 255c58794deSPawel Jakub Dawidek eli_metadata_decode(const u_char *data, struct g_eli_metadata *md) 256c58794deSPawel Jakub Dawidek { 257c58794deSPawel Jakub Dawidek int error; 258c58794deSPawel Jakub Dawidek 259c58794deSPawel Jakub Dawidek bcopy(data, md->md_magic, sizeof(md->md_magic)); 260c58794deSPawel Jakub Dawidek md->md_version = le32dec(data + sizeof(md->md_magic)); 261c58794deSPawel Jakub Dawidek switch (md->md_version) { 262c58794deSPawel Jakub Dawidek case 0: 263c58794deSPawel Jakub Dawidek error = eli_metadata_decode_v0(data, md); 264c58794deSPawel Jakub Dawidek break; 265eaa3b919SPawel Jakub Dawidek case 1: 266d04c304dSPawel Jakub Dawidek case 2: 267d04c304dSPawel Jakub Dawidek error = eli_metadata_decode_v1v2(data, md); 268eaa3b919SPawel Jakub Dawidek break; 269c58794deSPawel Jakub Dawidek default: 270c58794deSPawel Jakub Dawidek error = EINVAL; 271c58794deSPawel Jakub Dawidek break; 272c58794deSPawel Jakub Dawidek } 273c58794deSPawel Jakub Dawidek return (error); 274c58794deSPawel Jakub Dawidek } 275c58794deSPawel Jakub Dawidek #endif /* !_OpenSSL */ 276c58794deSPawel Jakub Dawidek 277c58794deSPawel Jakub Dawidek static __inline u_int 278eaa3b919SPawel Jakub Dawidek g_eli_str2ealgo(const char *name) 279c58794deSPawel Jakub Dawidek { 280c58794deSPawel Jakub Dawidek 2816eb1d21fSPawel Jakub Dawidek if (strcasecmp("null", name) == 0) 282c58794deSPawel Jakub Dawidek return (CRYPTO_NULL_CBC); 2836eb1d21fSPawel Jakub Dawidek else if (strcasecmp("aes", name) == 0) 284c58794deSPawel Jakub Dawidek return (CRYPTO_AES_CBC); 2856eb1d21fSPawel Jakub Dawidek else if (strcasecmp("blowfish", name) == 0) 286c58794deSPawel Jakub Dawidek return (CRYPTO_BLF_CBC); 2876eb1d21fSPawel Jakub Dawidek else if (strcasecmp("3des", name) == 0) 288c58794deSPawel Jakub Dawidek return (CRYPTO_3DES_CBC); 289c58794deSPawel Jakub Dawidek return (CRYPTO_ALGORITHM_MIN - 1); 290c58794deSPawel Jakub Dawidek } 291c58794deSPawel Jakub Dawidek 292eaa3b919SPawel Jakub Dawidek static __inline u_int 293eaa3b919SPawel Jakub Dawidek g_eli_str2aalgo(const char *name) 294eaa3b919SPawel Jakub Dawidek { 295eaa3b919SPawel Jakub Dawidek 296eaa3b919SPawel Jakub Dawidek if (strcasecmp("hmac/md5", name) == 0) 297eaa3b919SPawel Jakub Dawidek return (CRYPTO_MD5_HMAC); 298eaa3b919SPawel Jakub Dawidek else if (strcasecmp("hmac/sha1", name) == 0) 299eaa3b919SPawel Jakub Dawidek return (CRYPTO_SHA1_HMAC); 300eaa3b919SPawel Jakub Dawidek else if (strcasecmp("hmac/ripemd160", name) == 0) 301eaa3b919SPawel Jakub Dawidek return (CRYPTO_RIPEMD160_HMAC); 302eaa3b919SPawel Jakub Dawidek else if (strcasecmp("hmac/sha256", name) == 0) 303eaa3b919SPawel Jakub Dawidek return (CRYPTO_SHA2_256_HMAC); 304eaa3b919SPawel Jakub Dawidek else if (strcasecmp("hmac/sha384", name) == 0) 305eaa3b919SPawel Jakub Dawidek return (CRYPTO_SHA2_384_HMAC); 306eaa3b919SPawel Jakub Dawidek else if (strcasecmp("hmac/sha512", name) == 0) 307eaa3b919SPawel Jakub Dawidek return (CRYPTO_SHA2_512_HMAC); 308eaa3b919SPawel Jakub Dawidek return (CRYPTO_ALGORITHM_MIN - 1); 309eaa3b919SPawel Jakub Dawidek } 310eaa3b919SPawel Jakub Dawidek 311c58794deSPawel Jakub Dawidek static __inline const char * 312c58794deSPawel Jakub Dawidek g_eli_algo2str(u_int algo) 313c58794deSPawel Jakub Dawidek { 314c58794deSPawel Jakub Dawidek 315c58794deSPawel Jakub Dawidek switch (algo) { 316c58794deSPawel Jakub Dawidek case CRYPTO_NULL_CBC: 317c58794deSPawel Jakub Dawidek return ("NULL"); 318c58794deSPawel Jakub Dawidek case CRYPTO_AES_CBC: 319eaa3b919SPawel Jakub Dawidek return ("AES-CBC"); 320c58794deSPawel Jakub Dawidek case CRYPTO_BLF_CBC: 321eaa3b919SPawel Jakub Dawidek return ("Blowfish-CBC"); 322c58794deSPawel Jakub Dawidek case CRYPTO_3DES_CBC: 323eaa3b919SPawel Jakub Dawidek return ("3DES-CBC"); 324eaa3b919SPawel Jakub Dawidek case CRYPTO_MD5_HMAC: 325eaa3b919SPawel Jakub Dawidek return ("HMAC/MD5"); 326eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA1_HMAC: 327eaa3b919SPawel Jakub Dawidek return ("HMAC/SHA1"); 328eaa3b919SPawel Jakub Dawidek case CRYPTO_RIPEMD160_HMAC: 329eaa3b919SPawel Jakub Dawidek return ("HMAC/RIPEMD160"); 330eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA2_256_HMAC: 331eaa3b919SPawel Jakub Dawidek return ("HMAC/SHA256"); 332eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA2_384_HMAC: 333eaa3b919SPawel Jakub Dawidek return ("HMAC/SHA384"); 334eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA2_512_HMAC: 335eaa3b919SPawel Jakub Dawidek return ("HMAC/SHA512"); 336c58794deSPawel Jakub Dawidek } 337c58794deSPawel Jakub Dawidek return ("unknown"); 338c58794deSPawel Jakub Dawidek } 339c58794deSPawel Jakub Dawidek 340c58794deSPawel Jakub Dawidek static __inline void 341c58794deSPawel Jakub Dawidek eli_metadata_dump(const struct g_eli_metadata *md) 342c58794deSPawel Jakub Dawidek { 343c58794deSPawel Jakub Dawidek static const char hex[] = "0123456789abcdef"; 344c58794deSPawel Jakub Dawidek char str[sizeof(md->md_mkeys) * 2 + 1]; 345c58794deSPawel Jakub Dawidek u_int i; 346c58794deSPawel Jakub Dawidek 347c58794deSPawel Jakub Dawidek printf(" magic: %s\n", md->md_magic); 348c58794deSPawel Jakub Dawidek printf(" version: %u\n", (u_int)md->md_version); 349c58794deSPawel Jakub Dawidek printf(" flags: 0x%x\n", (u_int)md->md_flags); 350eaa3b919SPawel Jakub Dawidek printf(" ealgo: %s\n", g_eli_algo2str(md->md_ealgo)); 351c58794deSPawel Jakub Dawidek printf(" keylen: %u\n", (u_int)md->md_keylen); 352eaa3b919SPawel Jakub Dawidek if (md->md_flags & G_ELI_FLAG_AUTH) 353eaa3b919SPawel Jakub Dawidek printf(" aalgo: %s\n", g_eli_algo2str(md->md_aalgo)); 354c58794deSPawel Jakub Dawidek printf(" provsize: %ju\n", (uintmax_t)md->md_provsize); 355c58794deSPawel Jakub Dawidek printf("sectorsize: %u\n", (u_int)md->md_sectorsize); 356c58794deSPawel Jakub Dawidek printf(" keys: 0x%02x\n", (u_int)md->md_keys); 357c58794deSPawel Jakub Dawidek printf("iterations: %u\n", (u_int)md->md_iterations); 358c58794deSPawel Jakub Dawidek bzero(str, sizeof(str)); 359c58794deSPawel Jakub Dawidek for (i = 0; i < sizeof(md->md_salt); i++) { 360c58794deSPawel Jakub Dawidek str[i * 2] = hex[md->md_salt[i] >> 4]; 361c58794deSPawel Jakub Dawidek str[i * 2 + 1] = hex[md->md_salt[i] & 0x0f]; 362c58794deSPawel Jakub Dawidek } 363c58794deSPawel Jakub Dawidek printf(" Salt: %s\n", str); 364c58794deSPawel Jakub Dawidek bzero(str, sizeof(str)); 365c58794deSPawel Jakub Dawidek for (i = 0; i < sizeof(md->md_mkeys); i++) { 366c58794deSPawel Jakub Dawidek str[i * 2] = hex[md->md_mkeys[i] >> 4]; 367c58794deSPawel Jakub Dawidek str[i * 2 + 1] = hex[md->md_mkeys[i] & 0x0f]; 368c58794deSPawel Jakub Dawidek } 369c58794deSPawel Jakub Dawidek printf("Master Key: %s\n", str); 370c58794deSPawel Jakub Dawidek bzero(str, sizeof(str)); 371c58794deSPawel Jakub Dawidek for (i = 0; i < 16; i++) { 372c58794deSPawel Jakub Dawidek str[i * 2] = hex[md->md_hash[i] >> 4]; 373c58794deSPawel Jakub Dawidek str[i * 2 + 1] = hex[md->md_hash[i] & 0x0f]; 374c58794deSPawel Jakub Dawidek } 375c58794deSPawel Jakub Dawidek printf(" MD5 hash: %s\n", str); 376c58794deSPawel Jakub Dawidek } 377c58794deSPawel Jakub Dawidek 378c58794deSPawel Jakub Dawidek static __inline u_int 379c58794deSPawel Jakub Dawidek g_eli_keylen(u_int algo, u_int keylen) 380c58794deSPawel Jakub Dawidek { 381c58794deSPawel Jakub Dawidek 382c58794deSPawel Jakub Dawidek switch (algo) { 383c58794deSPawel Jakub Dawidek case CRYPTO_NULL_CBC: 384c58794deSPawel Jakub Dawidek if (keylen == 0) 385c58794deSPawel Jakub Dawidek keylen = 64 * 8; 386c58794deSPawel Jakub Dawidek else { 387c58794deSPawel Jakub Dawidek if (keylen > 64 * 8) 388c58794deSPawel Jakub Dawidek keylen = 0; 389c58794deSPawel Jakub Dawidek } 390c58794deSPawel Jakub Dawidek return (keylen); 391c58794deSPawel Jakub Dawidek case CRYPTO_AES_CBC: 392c58794deSPawel Jakub Dawidek switch (keylen) { 393c58794deSPawel Jakub Dawidek case 0: 394c58794deSPawel Jakub Dawidek return (128); 395c58794deSPawel Jakub Dawidek case 128: 396c58794deSPawel Jakub Dawidek case 192: 397c58794deSPawel Jakub Dawidek case 256: 398c58794deSPawel Jakub Dawidek return (keylen); 399c58794deSPawel Jakub Dawidek default: 400c58794deSPawel Jakub Dawidek return (0); 401c58794deSPawel Jakub Dawidek } 402c58794deSPawel Jakub Dawidek case CRYPTO_BLF_CBC: 403c58794deSPawel Jakub Dawidek if (keylen == 0) 404c58794deSPawel Jakub Dawidek return (128); 405c58794deSPawel Jakub Dawidek if (keylen < 128 || keylen > 448) 406c58794deSPawel Jakub Dawidek return (0); 407c58794deSPawel Jakub Dawidek if ((keylen % 32) != 0) 408c58794deSPawel Jakub Dawidek return (0); 409c58794deSPawel Jakub Dawidek return (keylen); 410c58794deSPawel Jakub Dawidek case CRYPTO_3DES_CBC: 411c58794deSPawel Jakub Dawidek if (keylen == 0 || keylen == 192) 412c58794deSPawel Jakub Dawidek return (192); 413c58794deSPawel Jakub Dawidek return (0); 414c58794deSPawel Jakub Dawidek default: 415c58794deSPawel Jakub Dawidek return (0); 416c58794deSPawel Jakub Dawidek } 417c58794deSPawel Jakub Dawidek } 418c58794deSPawel Jakub Dawidek 419eaa3b919SPawel Jakub Dawidek static __inline u_int 420eaa3b919SPawel Jakub Dawidek g_eli_hashlen(u_int algo) 421eaa3b919SPawel Jakub Dawidek { 422eaa3b919SPawel Jakub Dawidek 423eaa3b919SPawel Jakub Dawidek switch (algo) { 424eaa3b919SPawel Jakub Dawidek case CRYPTO_MD5_HMAC: 425eaa3b919SPawel Jakub Dawidek return (16); 426eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA1_HMAC: 427eaa3b919SPawel Jakub Dawidek return (20); 428eaa3b919SPawel Jakub Dawidek case CRYPTO_RIPEMD160_HMAC: 429eaa3b919SPawel Jakub Dawidek return (20); 430eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA2_256_HMAC: 431eaa3b919SPawel Jakub Dawidek return (32); 432eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA2_384_HMAC: 433eaa3b919SPawel Jakub Dawidek return (48); 434eaa3b919SPawel Jakub Dawidek case CRYPTO_SHA2_512_HMAC: 435eaa3b919SPawel Jakub Dawidek return (64); 436eaa3b919SPawel Jakub Dawidek } 437eaa3b919SPawel Jakub Dawidek return (0); 438eaa3b919SPawel Jakub Dawidek } 439eaa3b919SPawel Jakub Dawidek 440c58794deSPawel Jakub Dawidek #ifdef _KERNEL 441c58794deSPawel Jakub Dawidek int g_eli_read_metadata(struct g_class *mp, struct g_provider *pp, 442c58794deSPawel Jakub Dawidek struct g_eli_metadata *md); 443c58794deSPawel Jakub Dawidek struct g_geom *g_eli_create(struct gctl_req *req, struct g_class *mp, 444c58794deSPawel Jakub Dawidek struct g_provider *bpp, const struct g_eli_metadata *md, 445c58794deSPawel Jakub Dawidek const u_char *mkey, int nkey); 446c58794deSPawel Jakub Dawidek int g_eli_destroy(struct g_eli_softc *sc, boolean_t force); 447c58794deSPawel Jakub Dawidek 448c58794deSPawel Jakub Dawidek int g_eli_access(struct g_provider *pp, int dr, int dw, int de); 449c58794deSPawel Jakub Dawidek void g_eli_config(struct gctl_req *req, struct g_class *mp, const char *verb); 450eaa3b919SPawel Jakub Dawidek 451eaa3b919SPawel Jakub Dawidek void g_eli_read_done(struct bio *bp); 452eaa3b919SPawel Jakub Dawidek void g_eli_write_done(struct bio *bp); 453eaa3b919SPawel Jakub Dawidek int g_eli_crypto_rerun(struct cryptop *crp); 454eaa3b919SPawel Jakub Dawidek void g_eli_crypto_ivgen(struct g_eli_softc *sc, off_t offset, u_char *iv, 455eaa3b919SPawel Jakub Dawidek size_t size); 456eaa3b919SPawel Jakub Dawidek 457eaa3b919SPawel Jakub Dawidek void g_eli_crypto_run(struct g_eli_worker *wr, struct bio *bp); 458eaa3b919SPawel Jakub Dawidek 459eaa3b919SPawel Jakub Dawidek void g_eli_auth_read(struct g_eli_softc *sc, struct bio *bp); 460eaa3b919SPawel Jakub Dawidek void g_eli_auth_run(struct g_eli_worker *wr, struct bio *bp); 461c58794deSPawel Jakub Dawidek #endif 462c58794deSPawel Jakub Dawidek 463c58794deSPawel Jakub Dawidek void g_eli_mkey_hmac(unsigned char *mkey, const unsigned char *key); 464c58794deSPawel Jakub Dawidek int g_eli_mkey_decrypt(const struct g_eli_metadata *md, 465c58794deSPawel Jakub Dawidek const unsigned char *key, unsigned char *mkey, unsigned *nkeyp); 466c58794deSPawel Jakub Dawidek int g_eli_mkey_encrypt(unsigned algo, const unsigned char *key, unsigned keylen, 467c58794deSPawel Jakub Dawidek unsigned char *mkey); 468eaa3b919SPawel Jakub Dawidek #ifdef _KERNEL 469eaa3b919SPawel Jakub Dawidek void g_eli_mkey_propagate(struct g_eli_softc *sc, const unsigned char *mkey); 470eaa3b919SPawel Jakub Dawidek #endif 471c58794deSPawel Jakub Dawidek 472c58794deSPawel Jakub Dawidek int g_eli_crypto_encrypt(u_int algo, u_char *data, size_t datasize, 473c58794deSPawel Jakub Dawidek const u_char *key, size_t keysize); 474c58794deSPawel Jakub Dawidek int g_eli_crypto_decrypt(u_int algo, u_char *data, size_t datasize, 475c58794deSPawel Jakub Dawidek const u_char *key, size_t keysize); 476c58794deSPawel Jakub Dawidek 477c58794deSPawel Jakub Dawidek struct hmac_ctx { 478c58794deSPawel Jakub Dawidek SHA512_CTX shactx; 479c58794deSPawel Jakub Dawidek u_char k_opad[128]; 480c58794deSPawel Jakub Dawidek }; 481c58794deSPawel Jakub Dawidek 482c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac_init(struct hmac_ctx *ctx, const uint8_t *hkey, 483c58794deSPawel Jakub Dawidek size_t hkeylen); 484c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac_update(struct hmac_ctx *ctx, const uint8_t *data, 485c58794deSPawel Jakub Dawidek size_t datasize); 486c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac_final(struct hmac_ctx *ctx, uint8_t *md, size_t mdsize); 487c58794deSPawel Jakub Dawidek void g_eli_crypto_hmac(const uint8_t *hkey, size_t hkeysize, 488c58794deSPawel Jakub Dawidek const uint8_t *data, size_t datasize, uint8_t *md, size_t mdsize); 489c58794deSPawel Jakub Dawidek #endif /* !_G_ELI_H_ */ 490