1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * Cryptographic API for algorithms (i.e., low-level API). 4 * 5 * Copyright (c) 2006 Herbert Xu <herbert@gondor.apana.org.au> 6 */ 7 8 #include <crypto/algapi.h> 9 #include <linux/err.h> 10 #include <linux/errno.h> 11 #include <linux/fips.h> 12 #include <linux/init.h> 13 #include <linux/kernel.h> 14 #include <linux/list.h> 15 #include <linux/module.h> 16 #include <linux/rtnetlink.h> 17 #include <linux/slab.h> 18 #include <linux/string.h> 19 #include <linux/workqueue.h> 20 21 #include "internal.h" 22 23 static LIST_HEAD(crypto_template_list); 24 25 static inline void crypto_check_module_sig(struct module *mod) 26 { 27 if (fips_enabled && mod && !module_sig_ok(mod)) 28 panic("Module %s signature verification failed in FIPS mode\n", 29 module_name(mod)); 30 } 31 32 static int crypto_check_alg(struct crypto_alg *alg) 33 { 34 crypto_check_module_sig(alg->cra_module); 35 36 if (!alg->cra_name[0] || !alg->cra_driver_name[0]) 37 return -EINVAL; 38 39 if (alg->cra_alignmask & (alg->cra_alignmask + 1)) 40 return -EINVAL; 41 42 /* General maximums for all algs. */ 43 if (alg->cra_alignmask > MAX_ALGAPI_ALIGNMASK) 44 return -EINVAL; 45 46 if (alg->cra_blocksize > MAX_ALGAPI_BLOCKSIZE) 47 return -EINVAL; 48 49 /* Lower maximums for specific alg types. */ 50 if (!alg->cra_type && (alg->cra_flags & CRYPTO_ALG_TYPE_MASK) == 51 CRYPTO_ALG_TYPE_CIPHER) { 52 if (alg->cra_alignmask > MAX_CIPHER_ALIGNMASK) 53 return -EINVAL; 54 55 if (alg->cra_blocksize > MAX_CIPHER_BLOCKSIZE) 56 return -EINVAL; 57 } 58 59 if (alg->cra_priority < 0) 60 return -EINVAL; 61 62 refcount_set(&alg->cra_refcnt, 1); 63 64 return 0; 65 } 66 67 static void crypto_free_instance(struct crypto_instance *inst) 68 { 69 inst->alg.cra_type->free(inst); 70 } 71 72 static void crypto_destroy_instance_workfn(struct work_struct *w) 73 { 74 struct crypto_instance *inst = container_of(w, struct crypto_instance, 75 free_work); 76 struct crypto_template *tmpl = inst->tmpl; 77 78 crypto_free_instance(inst); 79 crypto_tmpl_put(tmpl); 80 } 81 82 static void crypto_destroy_instance(struct crypto_alg *alg) 83 { 84 struct crypto_instance *inst = container_of(alg, 85 struct crypto_instance, 86 alg); 87 88 INIT_WORK(&inst->free_work, crypto_destroy_instance_workfn); 89 schedule_work(&inst->free_work); 90 } 91 92 /* 93 * This function adds a spawn to the list secondary_spawns which 94 * will be used at the end of crypto_remove_spawns to unregister 95 * instances, unless the spawn happens to be one that is depended 96 * on by the new algorithm (nalg in crypto_remove_spawns). 97 * 98 * This function is also responsible for resurrecting any algorithms 99 * in the dependency chain of nalg by unsetting n->dead. 100 */ 101 static struct list_head *crypto_more_spawns(struct crypto_alg *alg, 102 struct list_head *stack, 103 struct list_head *top, 104 struct list_head *secondary_spawns) 105 { 106 struct crypto_spawn *spawn, *n; 107 108 spawn = list_first_entry_or_null(stack, struct crypto_spawn, list); 109 if (!spawn) 110 return NULL; 111 112 n = list_prev_entry(spawn, list); 113 list_move(&spawn->list, secondary_spawns); 114 115 if (list_is_last(&n->list, stack)) 116 return top; 117 118 n = list_next_entry(n, list); 119 if (!spawn->dead) 120 n->dead = false; 121 122 return &n->inst->alg.cra_users; 123 } 124 125 static void crypto_remove_instance(struct crypto_instance *inst, 126 struct list_head *list) 127 { 128 struct crypto_template *tmpl = inst->tmpl; 129 130 if (crypto_is_dead(&inst->alg)) 131 return; 132 133 inst->alg.cra_flags |= CRYPTO_ALG_DEAD; 134 135 if (!tmpl || !crypto_tmpl_get(tmpl)) 136 return; 137 138 list_move(&inst->alg.cra_list, list); 139 hlist_del(&inst->list); 140 inst->alg.cra_destroy = crypto_destroy_instance; 141 142 BUG_ON(!list_empty(&inst->alg.cra_users)); 143 } 144 145 /* 146 * Given an algorithm alg, remove all algorithms that depend on it 147 * through spawns. If nalg is not null, then exempt any algorithms 148 * that is depended on by nalg. This is useful when nalg itself 149 * depends on alg. 150 */ 151 void crypto_remove_spawns(struct crypto_alg *alg, struct list_head *list, 152 struct crypto_alg *nalg) 153 { 154 u32 new_type = (nalg ?: alg)->cra_flags; 155 struct crypto_spawn *spawn, *n; 156 LIST_HEAD(secondary_spawns); 157 struct list_head *spawns; 158 LIST_HEAD(stack); 159 LIST_HEAD(top); 160 161 spawns = &alg->cra_users; 162 list_for_each_entry_safe(spawn, n, spawns, list) { 163 if ((spawn->alg->cra_flags ^ new_type) & spawn->mask) 164 continue; 165 166 list_move(&spawn->list, &top); 167 } 168 169 /* 170 * Perform a depth-first walk starting from alg through 171 * the cra_users tree. The list stack records the path 172 * from alg to the current spawn. 173 */ 174 spawns = ⊤ 175 do { 176 while (!list_empty(spawns)) { 177 struct crypto_instance *inst; 178 179 spawn = list_first_entry(spawns, struct crypto_spawn, 180 list); 181 inst = spawn->inst; 182 183 list_move(&spawn->list, &stack); 184 spawn->dead = !spawn->registered || &inst->alg != nalg; 185 186 if (!spawn->registered) 187 break; 188 189 BUG_ON(&inst->alg == alg); 190 191 if (&inst->alg == nalg) 192 break; 193 194 spawns = &inst->alg.cra_users; 195 196 /* 197 * Even if spawn->registered is true, the 198 * instance itself may still be unregistered. 199 * This is because it may have failed during 200 * registration. Therefore we still need to 201 * make the following test. 202 * 203 * We may encounter an unregistered instance here, since 204 * an instance's spawns are set up prior to the instance 205 * being registered. An unregistered instance will have 206 * NULL ->cra_users.next, since ->cra_users isn't 207 * properly initialized until registration. But an 208 * unregistered instance cannot have any users, so treat 209 * it the same as ->cra_users being empty. 210 */ 211 if (spawns->next == NULL) 212 break; 213 } 214 } while ((spawns = crypto_more_spawns(alg, &stack, &top, 215 &secondary_spawns))); 216 217 /* 218 * Remove all instances that are marked as dead. Also 219 * complete the resurrection of the others by moving them 220 * back to the cra_users list. 221 */ 222 list_for_each_entry_safe(spawn, n, &secondary_spawns, list) { 223 if (!spawn->dead) 224 list_move(&spawn->list, &spawn->alg->cra_users); 225 else if (spawn->registered) 226 crypto_remove_instance(spawn->inst, list); 227 } 228 } 229 EXPORT_SYMBOL_GPL(crypto_remove_spawns); 230 231 static void crypto_alg_finish_registration(struct crypto_alg *alg, 232 struct list_head *algs_to_put) 233 { 234 struct crypto_alg *q; 235 236 list_for_each_entry(q, &crypto_alg_list, cra_list) { 237 if (q == alg) 238 continue; 239 240 if (crypto_is_moribund(q)) 241 continue; 242 243 if (crypto_is_larval(q)) 244 continue; 245 246 if (strcmp(alg->cra_name, q->cra_name)) 247 continue; 248 249 if (strcmp(alg->cra_driver_name, q->cra_driver_name) && 250 q->cra_priority > alg->cra_priority) 251 continue; 252 253 crypto_remove_spawns(q, algs_to_put, alg); 254 } 255 256 crypto_notify(CRYPTO_MSG_ALG_LOADED, alg); 257 } 258 259 static struct crypto_larval *crypto_alloc_test_larval(struct crypto_alg *alg) 260 { 261 struct crypto_larval *larval; 262 263 if (!IS_ENABLED(CONFIG_CRYPTO_MANAGER) || 264 IS_ENABLED(CONFIG_CRYPTO_MANAGER_DISABLE_TESTS) || 265 (alg->cra_flags & CRYPTO_ALG_INTERNAL)) 266 return NULL; /* No self-test needed */ 267 268 larval = crypto_larval_alloc(alg->cra_name, 269 alg->cra_flags | CRYPTO_ALG_TESTED, 0); 270 if (IS_ERR(larval)) 271 return larval; 272 273 larval->adult = crypto_mod_get(alg); 274 if (!larval->adult) { 275 kfree(larval); 276 return ERR_PTR(-ENOENT); 277 } 278 279 refcount_set(&larval->alg.cra_refcnt, 1); 280 memcpy(larval->alg.cra_driver_name, alg->cra_driver_name, 281 CRYPTO_MAX_ALG_NAME); 282 larval->alg.cra_priority = alg->cra_priority; 283 284 return larval; 285 } 286 287 static struct crypto_larval * 288 __crypto_register_alg(struct crypto_alg *alg, struct list_head *algs_to_put) 289 { 290 struct crypto_alg *q; 291 struct crypto_larval *larval; 292 int ret = -EAGAIN; 293 294 if (crypto_is_dead(alg)) 295 goto err; 296 297 INIT_LIST_HEAD(&alg->cra_users); 298 299 ret = -EEXIST; 300 301 list_for_each_entry(q, &crypto_alg_list, cra_list) { 302 if (q == alg) 303 goto err; 304 305 if (crypto_is_moribund(q)) 306 continue; 307 308 if (crypto_is_larval(q)) { 309 if (!strcmp(alg->cra_driver_name, q->cra_driver_name)) 310 goto err; 311 continue; 312 } 313 314 if (!strcmp(q->cra_driver_name, alg->cra_name) || 315 !strcmp(q->cra_driver_name, alg->cra_driver_name) || 316 !strcmp(q->cra_name, alg->cra_driver_name)) 317 goto err; 318 } 319 320 larval = crypto_alloc_test_larval(alg); 321 if (IS_ERR(larval)) 322 goto out; 323 324 list_add(&alg->cra_list, &crypto_alg_list); 325 326 if (larval) { 327 /* No cheating! */ 328 alg->cra_flags &= ~CRYPTO_ALG_TESTED; 329 330 list_add(&larval->alg.cra_list, &crypto_alg_list); 331 } else { 332 alg->cra_flags |= CRYPTO_ALG_TESTED; 333 crypto_alg_finish_registration(alg, algs_to_put); 334 } 335 336 out: 337 return larval; 338 339 err: 340 larval = ERR_PTR(ret); 341 goto out; 342 } 343 344 void crypto_alg_tested(const char *name, int err) 345 { 346 struct crypto_larval *test; 347 struct crypto_alg *alg; 348 struct crypto_alg *q; 349 LIST_HEAD(list); 350 351 down_write(&crypto_alg_sem); 352 list_for_each_entry(q, &crypto_alg_list, cra_list) { 353 if (crypto_is_moribund(q) || !crypto_is_larval(q)) 354 continue; 355 356 test = (struct crypto_larval *)q; 357 358 if (!strcmp(q->cra_driver_name, name)) 359 goto found; 360 } 361 362 pr_err("alg: Unexpected test result for %s: %d\n", name, err); 363 up_write(&crypto_alg_sem); 364 return; 365 366 found: 367 q->cra_flags |= CRYPTO_ALG_DEAD; 368 alg = test->adult; 369 370 if (crypto_is_dead(alg)) 371 goto complete; 372 373 if (err == -ECANCELED) 374 alg->cra_flags |= CRYPTO_ALG_FIPS_INTERNAL; 375 else if (err) 376 goto complete; 377 else 378 alg->cra_flags &= ~CRYPTO_ALG_FIPS_INTERNAL; 379 380 alg->cra_flags |= CRYPTO_ALG_TESTED; 381 382 crypto_alg_finish_registration(alg, &list); 383 384 complete: 385 list_del_init(&test->alg.cra_list); 386 complete_all(&test->completion); 387 388 up_write(&crypto_alg_sem); 389 390 crypto_alg_put(&test->alg); 391 crypto_remove_final(&list); 392 } 393 EXPORT_SYMBOL_GPL(crypto_alg_tested); 394 395 void crypto_remove_final(struct list_head *list) 396 { 397 struct crypto_alg *alg; 398 struct crypto_alg *n; 399 400 list_for_each_entry_safe(alg, n, list, cra_list) { 401 list_del_init(&alg->cra_list); 402 crypto_alg_put(alg); 403 } 404 } 405 EXPORT_SYMBOL_GPL(crypto_remove_final); 406 407 int crypto_register_alg(struct crypto_alg *alg) 408 { 409 struct crypto_larval *larval; 410 bool test_started = false; 411 LIST_HEAD(algs_to_put); 412 int err; 413 414 alg->cra_flags &= ~CRYPTO_ALG_DEAD; 415 err = crypto_check_alg(alg); 416 if (err) 417 return err; 418 419 down_write(&crypto_alg_sem); 420 larval = __crypto_register_alg(alg, &algs_to_put); 421 if (!IS_ERR_OR_NULL(larval)) { 422 test_started = crypto_boot_test_finished(); 423 larval->test_started = test_started; 424 } 425 up_write(&crypto_alg_sem); 426 427 if (IS_ERR(larval)) 428 return PTR_ERR(larval); 429 430 if (test_started) 431 crypto_schedule_test(larval); 432 else 433 crypto_remove_final(&algs_to_put); 434 435 return 0; 436 } 437 EXPORT_SYMBOL_GPL(crypto_register_alg); 438 439 static int crypto_remove_alg(struct crypto_alg *alg, struct list_head *list) 440 { 441 if (unlikely(list_empty(&alg->cra_list))) 442 return -ENOENT; 443 444 alg->cra_flags |= CRYPTO_ALG_DEAD; 445 446 list_del_init(&alg->cra_list); 447 crypto_remove_spawns(alg, list, NULL); 448 449 return 0; 450 } 451 452 void crypto_unregister_alg(struct crypto_alg *alg) 453 { 454 int ret; 455 LIST_HEAD(list); 456 457 down_write(&crypto_alg_sem); 458 ret = crypto_remove_alg(alg, &list); 459 up_write(&crypto_alg_sem); 460 461 if (WARN(ret, "Algorithm %s is not registered", alg->cra_driver_name)) 462 return; 463 464 if (WARN_ON(refcount_read(&alg->cra_refcnt) != 1)) 465 return; 466 467 crypto_alg_put(alg); 468 469 crypto_remove_final(&list); 470 } 471 EXPORT_SYMBOL_GPL(crypto_unregister_alg); 472 473 int crypto_register_algs(struct crypto_alg *algs, int count) 474 { 475 int i, ret; 476 477 for (i = 0; i < count; i++) { 478 ret = crypto_register_alg(&algs[i]); 479 if (ret) 480 goto err; 481 } 482 483 return 0; 484 485 err: 486 for (--i; i >= 0; --i) 487 crypto_unregister_alg(&algs[i]); 488 489 return ret; 490 } 491 EXPORT_SYMBOL_GPL(crypto_register_algs); 492 493 void crypto_unregister_algs(struct crypto_alg *algs, int count) 494 { 495 int i; 496 497 for (i = 0; i < count; i++) 498 crypto_unregister_alg(&algs[i]); 499 } 500 EXPORT_SYMBOL_GPL(crypto_unregister_algs); 501 502 int crypto_register_template(struct crypto_template *tmpl) 503 { 504 struct crypto_template *q; 505 int err = -EEXIST; 506 507 down_write(&crypto_alg_sem); 508 509 crypto_check_module_sig(tmpl->module); 510 511 list_for_each_entry(q, &crypto_template_list, list) { 512 if (q == tmpl) 513 goto out; 514 } 515 516 list_add(&tmpl->list, &crypto_template_list); 517 err = 0; 518 out: 519 up_write(&crypto_alg_sem); 520 return err; 521 } 522 EXPORT_SYMBOL_GPL(crypto_register_template); 523 524 int crypto_register_templates(struct crypto_template *tmpls, int count) 525 { 526 int i, err; 527 528 for (i = 0; i < count; i++) { 529 err = crypto_register_template(&tmpls[i]); 530 if (err) 531 goto out; 532 } 533 return 0; 534 535 out: 536 for (--i; i >= 0; --i) 537 crypto_unregister_template(&tmpls[i]); 538 return err; 539 } 540 EXPORT_SYMBOL_GPL(crypto_register_templates); 541 542 void crypto_unregister_template(struct crypto_template *tmpl) 543 { 544 struct crypto_instance *inst; 545 struct hlist_node *n; 546 struct hlist_head *list; 547 LIST_HEAD(users); 548 549 down_write(&crypto_alg_sem); 550 551 BUG_ON(list_empty(&tmpl->list)); 552 list_del_init(&tmpl->list); 553 554 list = &tmpl->instances; 555 hlist_for_each_entry(inst, list, list) { 556 int err = crypto_remove_alg(&inst->alg, &users); 557 558 BUG_ON(err); 559 } 560 561 up_write(&crypto_alg_sem); 562 563 hlist_for_each_entry_safe(inst, n, list, list) { 564 BUG_ON(refcount_read(&inst->alg.cra_refcnt) != 1); 565 crypto_free_instance(inst); 566 } 567 crypto_remove_final(&users); 568 } 569 EXPORT_SYMBOL_GPL(crypto_unregister_template); 570 571 void crypto_unregister_templates(struct crypto_template *tmpls, int count) 572 { 573 int i; 574 575 for (i = count - 1; i >= 0; --i) 576 crypto_unregister_template(&tmpls[i]); 577 } 578 EXPORT_SYMBOL_GPL(crypto_unregister_templates); 579 580 static struct crypto_template *__crypto_lookup_template(const char *name) 581 { 582 struct crypto_template *q, *tmpl = NULL; 583 584 down_read(&crypto_alg_sem); 585 list_for_each_entry(q, &crypto_template_list, list) { 586 if (strcmp(q->name, name)) 587 continue; 588 if (unlikely(!crypto_tmpl_get(q))) 589 continue; 590 591 tmpl = q; 592 break; 593 } 594 up_read(&crypto_alg_sem); 595 596 return tmpl; 597 } 598 599 struct crypto_template *crypto_lookup_template(const char *name) 600 { 601 return try_then_request_module(__crypto_lookup_template(name), 602 "crypto-%s", name); 603 } 604 EXPORT_SYMBOL_GPL(crypto_lookup_template); 605 606 int crypto_register_instance(struct crypto_template *tmpl, 607 struct crypto_instance *inst) 608 { 609 struct crypto_larval *larval; 610 struct crypto_spawn *spawn; 611 u32 fips_internal = 0; 612 LIST_HEAD(algs_to_put); 613 int err; 614 615 err = crypto_check_alg(&inst->alg); 616 if (err) 617 return err; 618 619 inst->alg.cra_module = tmpl->module; 620 inst->alg.cra_flags |= CRYPTO_ALG_INSTANCE; 621 622 down_write(&crypto_alg_sem); 623 624 larval = ERR_PTR(-EAGAIN); 625 for (spawn = inst->spawns; spawn;) { 626 struct crypto_spawn *next; 627 628 if (spawn->dead) 629 goto unlock; 630 631 next = spawn->next; 632 spawn->inst = inst; 633 spawn->registered = true; 634 635 fips_internal |= spawn->alg->cra_flags; 636 637 crypto_mod_put(spawn->alg); 638 639 spawn = next; 640 } 641 642 inst->alg.cra_flags |= (fips_internal & CRYPTO_ALG_FIPS_INTERNAL); 643 644 larval = __crypto_register_alg(&inst->alg, &algs_to_put); 645 if (IS_ERR(larval)) 646 goto unlock; 647 else if (larval) 648 larval->test_started = true; 649 650 hlist_add_head(&inst->list, &tmpl->instances); 651 inst->tmpl = tmpl; 652 653 unlock: 654 up_write(&crypto_alg_sem); 655 656 if (IS_ERR(larval)) 657 return PTR_ERR(larval); 658 659 if (larval) 660 crypto_schedule_test(larval); 661 else 662 crypto_remove_final(&algs_to_put); 663 664 return 0; 665 } 666 EXPORT_SYMBOL_GPL(crypto_register_instance); 667 668 void crypto_unregister_instance(struct crypto_instance *inst) 669 { 670 LIST_HEAD(list); 671 672 down_write(&crypto_alg_sem); 673 674 crypto_remove_spawns(&inst->alg, &list, NULL); 675 crypto_remove_instance(inst, &list); 676 677 up_write(&crypto_alg_sem); 678 679 crypto_remove_final(&list); 680 } 681 EXPORT_SYMBOL_GPL(crypto_unregister_instance); 682 683 int crypto_grab_spawn(struct crypto_spawn *spawn, struct crypto_instance *inst, 684 const char *name, u32 type, u32 mask) 685 { 686 struct crypto_alg *alg; 687 int err = -EAGAIN; 688 689 if (WARN_ON_ONCE(inst == NULL)) 690 return -EINVAL; 691 692 /* Allow the result of crypto_attr_alg_name() to be passed directly */ 693 if (IS_ERR(name)) 694 return PTR_ERR(name); 695 696 alg = crypto_find_alg(name, spawn->frontend, 697 type | CRYPTO_ALG_FIPS_INTERNAL, mask); 698 if (IS_ERR(alg)) 699 return PTR_ERR(alg); 700 701 down_write(&crypto_alg_sem); 702 if (!crypto_is_moribund(alg)) { 703 list_add(&spawn->list, &alg->cra_users); 704 spawn->alg = alg; 705 spawn->mask = mask; 706 spawn->next = inst->spawns; 707 inst->spawns = spawn; 708 inst->alg.cra_flags |= 709 (alg->cra_flags & CRYPTO_ALG_INHERITED_FLAGS); 710 err = 0; 711 } 712 up_write(&crypto_alg_sem); 713 if (err) 714 crypto_mod_put(alg); 715 return err; 716 } 717 EXPORT_SYMBOL_GPL(crypto_grab_spawn); 718 719 void crypto_drop_spawn(struct crypto_spawn *spawn) 720 { 721 if (!spawn->alg) /* not yet initialized? */ 722 return; 723 724 down_write(&crypto_alg_sem); 725 if (!spawn->dead) 726 list_del(&spawn->list); 727 up_write(&crypto_alg_sem); 728 729 if (!spawn->registered) 730 crypto_mod_put(spawn->alg); 731 } 732 EXPORT_SYMBOL_GPL(crypto_drop_spawn); 733 734 static struct crypto_alg *crypto_spawn_alg(struct crypto_spawn *spawn) 735 { 736 struct crypto_alg *alg = ERR_PTR(-EAGAIN); 737 struct crypto_alg *target; 738 bool shoot = false; 739 740 down_read(&crypto_alg_sem); 741 if (!spawn->dead) { 742 alg = spawn->alg; 743 if (!crypto_mod_get(alg)) { 744 target = crypto_alg_get(alg); 745 shoot = true; 746 alg = ERR_PTR(-EAGAIN); 747 } 748 } 749 up_read(&crypto_alg_sem); 750 751 if (shoot) { 752 crypto_shoot_alg(target); 753 crypto_alg_put(target); 754 } 755 756 return alg; 757 } 758 759 struct crypto_tfm *crypto_spawn_tfm(struct crypto_spawn *spawn, u32 type, 760 u32 mask) 761 { 762 struct crypto_alg *alg; 763 struct crypto_tfm *tfm; 764 765 alg = crypto_spawn_alg(spawn); 766 if (IS_ERR(alg)) 767 return ERR_CAST(alg); 768 769 tfm = ERR_PTR(-EINVAL); 770 if (unlikely((alg->cra_flags ^ type) & mask)) 771 goto out_put_alg; 772 773 tfm = __crypto_alloc_tfm(alg, type, mask); 774 if (IS_ERR(tfm)) 775 goto out_put_alg; 776 777 return tfm; 778 779 out_put_alg: 780 crypto_mod_put(alg); 781 return tfm; 782 } 783 EXPORT_SYMBOL_GPL(crypto_spawn_tfm); 784 785 void *crypto_spawn_tfm2(struct crypto_spawn *spawn) 786 { 787 struct crypto_alg *alg; 788 struct crypto_tfm *tfm; 789 790 alg = crypto_spawn_alg(spawn); 791 if (IS_ERR(alg)) 792 return ERR_CAST(alg); 793 794 tfm = crypto_create_tfm(alg, spawn->frontend); 795 if (IS_ERR(tfm)) 796 goto out_put_alg; 797 798 return tfm; 799 800 out_put_alg: 801 crypto_mod_put(alg); 802 return tfm; 803 } 804 EXPORT_SYMBOL_GPL(crypto_spawn_tfm2); 805 806 int crypto_register_notifier(struct notifier_block *nb) 807 { 808 return blocking_notifier_chain_register(&crypto_chain, nb); 809 } 810 EXPORT_SYMBOL_GPL(crypto_register_notifier); 811 812 int crypto_unregister_notifier(struct notifier_block *nb) 813 { 814 return blocking_notifier_chain_unregister(&crypto_chain, nb); 815 } 816 EXPORT_SYMBOL_GPL(crypto_unregister_notifier); 817 818 struct crypto_attr_type *crypto_get_attr_type(struct rtattr **tb) 819 { 820 struct rtattr *rta = tb[0]; 821 struct crypto_attr_type *algt; 822 823 if (!rta) 824 return ERR_PTR(-ENOENT); 825 if (RTA_PAYLOAD(rta) < sizeof(*algt)) 826 return ERR_PTR(-EINVAL); 827 if (rta->rta_type != CRYPTOA_TYPE) 828 return ERR_PTR(-EINVAL); 829 830 algt = RTA_DATA(rta); 831 832 return algt; 833 } 834 EXPORT_SYMBOL_GPL(crypto_get_attr_type); 835 836 /** 837 * crypto_check_attr_type() - check algorithm type and compute inherited mask 838 * @tb: the template parameters 839 * @type: the algorithm type the template would be instantiated as 840 * @mask_ret: (output) the mask that should be passed to crypto_grab_*() 841 * to restrict the flags of any inner algorithms 842 * 843 * Validate that the algorithm type the user requested is compatible with the 844 * one the template would actually be instantiated as. E.g., if the user is 845 * doing crypto_alloc_shash("cbc(aes)", ...), this would return an error because 846 * the "cbc" template creates an "skcipher" algorithm, not an "shash" algorithm. 847 * 848 * Also compute the mask to use to restrict the flags of any inner algorithms. 849 * 850 * Return: 0 on success; -errno on failure 851 */ 852 int crypto_check_attr_type(struct rtattr **tb, u32 type, u32 *mask_ret) 853 { 854 struct crypto_attr_type *algt; 855 856 algt = crypto_get_attr_type(tb); 857 if (IS_ERR(algt)) 858 return PTR_ERR(algt); 859 860 if ((algt->type ^ type) & algt->mask) 861 return -EINVAL; 862 863 *mask_ret = crypto_algt_inherited_mask(algt); 864 return 0; 865 } 866 EXPORT_SYMBOL_GPL(crypto_check_attr_type); 867 868 const char *crypto_attr_alg_name(struct rtattr *rta) 869 { 870 struct crypto_attr_alg *alga; 871 872 if (!rta) 873 return ERR_PTR(-ENOENT); 874 if (RTA_PAYLOAD(rta) < sizeof(*alga)) 875 return ERR_PTR(-EINVAL); 876 if (rta->rta_type != CRYPTOA_ALG) 877 return ERR_PTR(-EINVAL); 878 879 alga = RTA_DATA(rta); 880 alga->name[CRYPTO_MAX_ALG_NAME - 1] = 0; 881 882 return alga->name; 883 } 884 EXPORT_SYMBOL_GPL(crypto_attr_alg_name); 885 886 int crypto_inst_setname(struct crypto_instance *inst, const char *name, 887 struct crypto_alg *alg) 888 { 889 if (snprintf(inst->alg.cra_name, CRYPTO_MAX_ALG_NAME, "%s(%s)", name, 890 alg->cra_name) >= CRYPTO_MAX_ALG_NAME) 891 return -ENAMETOOLONG; 892 893 if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s(%s)", 894 name, alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME) 895 return -ENAMETOOLONG; 896 897 return 0; 898 } 899 EXPORT_SYMBOL_GPL(crypto_inst_setname); 900 901 void crypto_init_queue(struct crypto_queue *queue, unsigned int max_qlen) 902 { 903 INIT_LIST_HEAD(&queue->list); 904 queue->backlog = &queue->list; 905 queue->qlen = 0; 906 queue->max_qlen = max_qlen; 907 } 908 EXPORT_SYMBOL_GPL(crypto_init_queue); 909 910 int crypto_enqueue_request(struct crypto_queue *queue, 911 struct crypto_async_request *request) 912 { 913 int err = -EINPROGRESS; 914 915 if (unlikely(queue->qlen >= queue->max_qlen)) { 916 if (!(request->flags & CRYPTO_TFM_REQ_MAY_BACKLOG)) { 917 err = -ENOSPC; 918 goto out; 919 } 920 err = -EBUSY; 921 if (queue->backlog == &queue->list) 922 queue->backlog = &request->list; 923 } 924 925 queue->qlen++; 926 list_add_tail(&request->list, &queue->list); 927 928 out: 929 return err; 930 } 931 EXPORT_SYMBOL_GPL(crypto_enqueue_request); 932 933 void crypto_enqueue_request_head(struct crypto_queue *queue, 934 struct crypto_async_request *request) 935 { 936 if (unlikely(queue->qlen >= queue->max_qlen)) 937 queue->backlog = queue->backlog->prev; 938 939 queue->qlen++; 940 list_add(&request->list, &queue->list); 941 } 942 EXPORT_SYMBOL_GPL(crypto_enqueue_request_head); 943 944 struct crypto_async_request *crypto_dequeue_request(struct crypto_queue *queue) 945 { 946 struct list_head *request; 947 948 if (unlikely(!queue->qlen)) 949 return NULL; 950 951 queue->qlen--; 952 953 if (queue->backlog != &queue->list) 954 queue->backlog = queue->backlog->next; 955 956 request = queue->list.next; 957 list_del_init(request); 958 959 return list_entry(request, struct crypto_async_request, list); 960 } 961 EXPORT_SYMBOL_GPL(crypto_dequeue_request); 962 963 static inline void crypto_inc_byte(u8 *a, unsigned int size) 964 { 965 u8 *b = (a + size); 966 u8 c; 967 968 for (; size; size--) { 969 c = *--b + 1; 970 *b = c; 971 if (c) 972 break; 973 } 974 } 975 976 void crypto_inc(u8 *a, unsigned int size) 977 { 978 __be32 *b = (__be32 *)(a + size); 979 u32 c; 980 981 if (IS_ENABLED(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) || 982 IS_ALIGNED((unsigned long)b, __alignof__(*b))) 983 for (; size >= 4; size -= 4) { 984 c = be32_to_cpu(*--b) + 1; 985 *b = cpu_to_be32(c); 986 if (likely(c)) 987 return; 988 } 989 990 crypto_inc_byte(a, size); 991 } 992 EXPORT_SYMBOL_GPL(crypto_inc); 993 994 unsigned int crypto_alg_extsize(struct crypto_alg *alg) 995 { 996 return alg->cra_ctxsize + 997 (alg->cra_alignmask & ~(crypto_tfm_ctx_alignment() - 1)); 998 } 999 EXPORT_SYMBOL_GPL(crypto_alg_extsize); 1000 1001 int crypto_type_has_alg(const char *name, const struct crypto_type *frontend, 1002 u32 type, u32 mask) 1003 { 1004 int ret = 0; 1005 struct crypto_alg *alg = crypto_find_alg(name, frontend, type, mask); 1006 1007 if (!IS_ERR(alg)) { 1008 crypto_mod_put(alg); 1009 ret = 1; 1010 } 1011 1012 return ret; 1013 } 1014 EXPORT_SYMBOL_GPL(crypto_type_has_alg); 1015 1016 static void __init crypto_start_tests(void) 1017 { 1018 if (!IS_BUILTIN(CONFIG_CRYPTO_ALGAPI)) 1019 return; 1020 1021 if (IS_ENABLED(CONFIG_CRYPTO_MANAGER_DISABLE_TESTS)) 1022 return; 1023 1024 set_crypto_boot_test_finished(); 1025 1026 for (;;) { 1027 struct crypto_larval *larval = NULL; 1028 struct crypto_alg *q; 1029 1030 down_write(&crypto_alg_sem); 1031 1032 list_for_each_entry(q, &crypto_alg_list, cra_list) { 1033 struct crypto_larval *l; 1034 1035 if (!crypto_is_larval(q)) 1036 continue; 1037 1038 l = (void *)q; 1039 1040 if (!crypto_is_test_larval(l)) 1041 continue; 1042 1043 if (l->test_started) 1044 continue; 1045 1046 l->test_started = true; 1047 larval = l; 1048 break; 1049 } 1050 1051 up_write(&crypto_alg_sem); 1052 1053 if (!larval) 1054 break; 1055 1056 crypto_schedule_test(larval); 1057 } 1058 } 1059 1060 static int __init crypto_algapi_init(void) 1061 { 1062 crypto_init_proc(); 1063 crypto_start_tests(); 1064 return 0; 1065 } 1066 1067 static void __exit crypto_algapi_exit(void) 1068 { 1069 crypto_exit_proc(); 1070 } 1071 1072 /* 1073 * We run this at late_initcall so that all the built-in algorithms 1074 * have had a chance to register themselves first. 1075 */ 1076 late_initcall(crypto_algapi_init); 1077 module_exit(crypto_algapi_exit); 1078 1079 MODULE_LICENSE("GPL"); 1080 MODULE_DESCRIPTION("Cryptographic algorithms API"); 1081 MODULE_SOFTDEP("pre: cryptomgr"); 1082