xref: /freebsd/sys/opencrypto/xform_enc.h (revision 3332f1b444d4a73238e9f59cca27bfc95fe936bd)
1 /*	$FreeBSD$	*/
2 /*	$OpenBSD: xform.h,v 1.8 2001/08/28 12:20:43 ben Exp $	*/
3 
4 /*-
5  * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
6  *
7  * This code was written by Angelos D. Keromytis in Athens, Greece, in
8  * February 2000. Network Security Technologies Inc. (NSTI) kindly
9  * supported the development of this code.
10  *
11  * Copyright (c) 2000 Angelos D. Keromytis
12  * Copyright (c) 2014 The FreeBSD Foundation
13  * All rights reserved.
14  *
15  * Portions of this software were developed by John-Mark Gurney
16  * under sponsorship of the FreeBSD Foundation and
17  * Rubicon Communications, LLC (Netgate).
18  *
19  * Permission to use, copy, and modify this software without fee
20  * is hereby granted, provided that this entire notice is included in
21  * all source code copies of any software which is or includes a copy or
22  * modification of this software.
23  *
24  * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
25  * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
26  * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
27  * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
28  * PURPOSE.
29  */
30 
31 #ifndef _CRYPTO_XFORM_ENC_H_
32 #define _CRYPTO_XFORM_ENC_H_
33 
34 #include <sys/malloc.h>
35 #include <sys/errno.h>
36 #include <crypto/rijndael/rijndael.h>
37 #include <crypto/camellia/camellia.h>
38 #include <opencrypto/cryptodev.h>
39 #ifdef _STANDALONE
40 #include <stand.h>
41 #endif
42 
43 #define AESICM_BLOCKSIZE	AES_BLOCK_LEN
44 #define	AES_XTS_BLOCKSIZE	16
45 #define	AES_XTS_IVSIZE		8
46 #define	AES_XTS_ALPHA		0x87	/* GF(2^128) generator polynomial */
47 
48 /* Declarations */
49 struct enc_xform {
50 	int type;
51 	const char *name;
52 	size_t ctxsize;
53 	uint16_t blocksize;	/* Required input block size -- 1 for stream ciphers. */
54 	uint16_t native_blocksize;	/* Used for stream ciphers. */
55 	uint16_t ivsize;
56 	uint16_t minkey, maxkey;
57 
58 	/*
59 	 * Encrypt/decrypt a single block.  For stream ciphers this
60 	 * encrypts/decrypts a single "native" block.
61 	 */
62 	void (*encrypt) (void *, const uint8_t *, uint8_t *);
63 	void (*decrypt) (void *, const uint8_t *, uint8_t *);
64 	int (*setkey) (void *, const uint8_t *, int len);
65 	void (*reinit) (void *, const uint8_t *, size_t);
66 
67 	/*
68 	 * For stream ciphers, encrypt/decrypt the final partial block
69 	 * of 'len' bytes.
70 	 */
71 	void (*encrypt_last) (void *, const uint8_t *, uint8_t *, size_t len);
72 	void (*decrypt_last) (void *, const uint8_t *, uint8_t *, size_t len);
73 };
74 
75 
76 extern const struct enc_xform enc_xform_null;
77 extern const struct enc_xform enc_xform_rijndael128;
78 extern const struct enc_xform enc_xform_aes_icm;
79 extern const struct enc_xform enc_xform_aes_nist_gcm;
80 extern const struct enc_xform enc_xform_aes_nist_gmac;
81 extern const struct enc_xform enc_xform_aes_xts;
82 extern const struct enc_xform enc_xform_camellia;
83 extern const struct enc_xform enc_xform_chacha20;
84 extern const struct enc_xform enc_xform_chacha20_poly1305;
85 extern const struct enc_xform enc_xform_ccm;
86 
87 struct aes_icm_ctx {
88 	uint32_t	ac_ek[4*(RIJNDAEL_MAXNR + 1)];
89 	/* ac_block is initialized to IV */
90 	uint8_t		ac_block[AESICM_BLOCKSIZE];
91 	int		ac_nr;
92 };
93 
94 struct aes_xts_ctx {
95 	rijndael_ctx key1;
96 	rijndael_ctx key2;
97 	uint8_t tweak[AES_XTS_BLOCKSIZE];
98 };
99 
100 #endif /* _CRYPTO_XFORM_ENC_H_ */
101