1 /* $FreeBSD$ */ 2 /* $OpenBSD: xform.h,v 1.8 2001/08/28 12:20:43 ben Exp $ */ 3 4 /*- 5 * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu) 6 * 7 * This code was written by Angelos D. Keromytis in Athens, Greece, in 8 * February 2000. Network Security Technologies Inc. (NSTI) kindly 9 * supported the development of this code. 10 * 11 * Copyright (c) 2000 Angelos D. Keromytis 12 * Copyright (c) 2014 The FreeBSD Foundation 13 * All rights reserved. 14 * 15 * Portions of this software were developed by John-Mark Gurney 16 * under sponsorship of the FreeBSD Foundation and 17 * Rubicon Communications, LLC (Netgate). 18 * 19 * Permission to use, copy, and modify this software without fee 20 * is hereby granted, provided that this entire notice is included in 21 * all source code copies of any software which is or includes a copy or 22 * modification of this software. 23 * 24 * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR 25 * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY 26 * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE 27 * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR 28 * PURPOSE. 29 */ 30 31 #ifndef _CRYPTO_XFORM_ENC_H_ 32 #define _CRYPTO_XFORM_ENC_H_ 33 34 #include <sys/malloc.h> 35 #include <sys/errno.h> 36 #include <crypto/des/des.h> 37 #include <crypto/rijndael/rijndael.h> 38 #include <crypto/camellia/camellia.h> 39 #include <opencrypto/cryptodev.h> 40 #include <opencrypto/xform_userland.h> 41 42 #define AESICM_BLOCKSIZE AES_BLOCK_LEN 43 #define AES_XTS_BLOCKSIZE 16 44 #define AES_XTS_IVSIZE 8 45 #define AES_XTS_ALPHA 0x87 /* GF(2^128) generator polynomial */ 46 47 /* Declarations */ 48 struct enc_xform { 49 int type; 50 char *name; 51 u_int16_t blocksize; /* Required input block size -- 1 for stream ciphers. */ 52 u_int16_t ivsize; 53 u_int16_t minkey, maxkey; 54 void (*encrypt) (caddr_t, u_int8_t *); 55 void (*decrypt) (caddr_t, u_int8_t *); 56 int (*setkey) (u_int8_t **, const u_int8_t *, int len); 57 void (*zerokey) (u_int8_t **); 58 void (*reinit) (caddr_t, const u_int8_t *); 59 /* 60 * Encrypt/decrypt 1+ blocks of input -- total size is 'len' bytes. 61 * Len is guaranteed to be a multiple of the defined 'blocksize'. 62 * Optional interface -- most useful for stream ciphers with a small 63 * blocksize (1). 64 */ 65 void (*encrypt_multi) (void *, uint8_t *, size_t len); 66 void (*decrypt_multi) (void *, uint8_t *, size_t len); 67 }; 68 69 70 extern struct enc_xform enc_xform_null; 71 extern struct enc_xform enc_xform_des; 72 extern struct enc_xform enc_xform_3des; 73 extern struct enc_xform enc_xform_blf; 74 extern struct enc_xform enc_xform_rijndael128; 75 extern struct enc_xform enc_xform_aes_icm; 76 extern struct enc_xform enc_xform_aes_nist_gcm; 77 extern struct enc_xform enc_xform_aes_nist_gmac; 78 extern struct enc_xform enc_xform_aes_xts; 79 extern struct enc_xform enc_xform_camellia; 80 extern struct enc_xform enc_xform_chacha20; 81 extern struct enc_xform enc_xform_ccm; 82 83 struct aes_icm_ctx { 84 u_int32_t ac_ek[4*(RIJNDAEL_MAXNR + 1)]; 85 /* ac_block is initialized to IV */ 86 u_int8_t ac_block[AESICM_BLOCKSIZE]; 87 int ac_nr; 88 }; 89 90 struct aes_xts_ctx { 91 rijndael_ctx key1; 92 rijndael_ctx key2; 93 u_int8_t tweak[AES_XTS_BLOCKSIZE]; 94 }; 95 96 #endif /* _CRYPTO_XFORM_ENC_H_ */ 97