[deliverable/linux.git] / net / xfrm / xfrm_algo.c

/*
 * xfrm algorithm interface
 *
 * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the Free
 * Software Foundation; either version 2 of the License, or (at your option)
 * any later version.
 */

#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/pfkeyv2.h>
#include <linux/crypto.h>
#include <linux/scatterlist.h>
#include <net/xfrm.h>
#if defined(CONFIG_INET_AH) || defined(CONFIG_INET_AH_MODULE) || defined(CONFIG_INET6_AH) || defined(CONFIG_INET6_AH_MODULE)
#include <net/ah.h>
#endif
#if defined(CONFIG_INET_ESP) || defined(CONFIG_INET_ESP_MODULE) || defined(CONFIG_INET6_ESP) || defined(CONFIG_INET6_ESP_MODULE)
#include <net/esp.h>
#endif

/*
 * Algorithms supported by IPsec.  These entries contain properties which
 * are used in key negotiation and xfrm processing, and are used to verify
 * that instantiated crypto transforms have correct parameters for IPsec
 * purposes.
 */
static struct xfrm_algo_desc aalg_list[] = {
{
	.name = "hmac(digest_null)",
	.compat = "digest_null",

	.uinfo = {
		.auth = {
			.icv_truncbits = 0,
			.icv_fullbits = 0,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_AALG_NULL,
		.sadb_alg_ivlen = 0,
		.sadb_alg_minbits = 0,
		.sadb_alg_maxbits = 0
	}
},
{
	.name = "hmac(md5)",
	.compat = "md5",

	.uinfo = {
		.auth = {
			.icv_truncbits = 96,
			.icv_fullbits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_AALG_MD5HMAC,
		.sadb_alg_ivlen = 0,
		.sadb_alg_minbits = 128,
		.sadb_alg_maxbits = 128
	}
},
{
	.name = "hmac(sha1)",
	.compat = "sha1",

	.uinfo = {
		.auth = {
			.icv_truncbits = 96,
			.icv_fullbits = 160,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_AALG_SHA1HMAC,
		.sadb_alg_ivlen = 0,
		.sadb_alg_minbits = 160,
		.sadb_alg_maxbits = 160
	}
},
{
	.name = "hmac(sha256)",
	.compat = "sha256",

	.uinfo = {
		.auth = {
			.icv_truncbits = 96,
			.icv_fullbits = 256,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_AALG_SHA2_256HMAC,
		.sadb_alg_ivlen = 0,
		.sadb_alg_minbits = 256,
		.sadb_alg_maxbits = 256
	}
},
{
	.name = "hmac(ripemd160)",
	.compat = "ripemd160",

	.uinfo = {
		.auth = {
			.icv_truncbits = 96,
			.icv_fullbits = 160,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_AALG_RIPEMD160HMAC,
		.sadb_alg_ivlen = 0,
		.sadb_alg_minbits = 160,
		.sadb_alg_maxbits = 160
	}
},
{
	.name = "xcbc(aes)",

	.uinfo = {
		.auth = {
			.icv_truncbits = 96,
			.icv_fullbits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_AALG_AES_XCBC_MAC,
		.sadb_alg_ivlen = 0,
		.sadb_alg_minbits = 128,
		.sadb_alg_maxbits = 128
	}
},
};

static struct xfrm_algo_desc ealg_list[] = {
{
	.name = "ecb(cipher_null)",
	.compat = "cipher_null",

	.uinfo = {
		.encr = {
			.blockbits = 8,
			.defkeybits = 0,
		}
	},

	.desc = {
		.sadb_alg_id =	SADB_EALG_NULL,
		.sadb_alg_ivlen = 0,
		.sadb_alg_minbits = 0,
		.sadb_alg_maxbits = 0
	}
},
{
	.name = "cbc(des)",
	.compat = "des",

	.uinfo = {
		.encr = {
			.blockbits = 64,
			.defkeybits = 64,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_EALG_DESCBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 64,
		.sadb_alg_maxbits = 64
	}
},
{
	.name = "cbc(des3_ede)",
	.compat = "des3_ede",

	.uinfo = {
		.encr = {
			.blockbits = 64,
			.defkeybits = 192,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_EALG_3DESCBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 192,
		.sadb_alg_maxbits = 192
	}
},
{
	.name = "cbc(cast128)",
	.compat = "cast128",

	.uinfo = {
		.encr = {
			.blockbits = 64,
			.defkeybits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_EALG_CASTCBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 40,
		.sadb_alg_maxbits = 128
	}
},
{
	.name = "cbc(blowfish)",
	.compat = "blowfish",

	.uinfo = {
		.encr = {
			.blockbits = 64,
			.defkeybits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_EALG_BLOWFISHCBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 40,
		.sadb_alg_maxbits = 448
	}
},
{
	.name = "cbc(aes)",
	.compat = "aes",

	.uinfo = {
		.encr = {
			.blockbits = 128,
			.defkeybits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_EALG_AESCBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 128,
		.sadb_alg_maxbits = 256
	}
},
{
	.name = "cbc(serpent)",
	.compat = "serpent",

	.uinfo = {
		.encr = {
			.blockbits = 128,
			.defkeybits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_EALG_SERPENTCBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 128,
		.sadb_alg_maxbits = 256,
	}
},
{
	.name = "cbc(camellia)",

	.uinfo = {
		.encr = {
			.blockbits = 128,
			.defkeybits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_EALG_CAMELLIACBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 128,
		.sadb_alg_maxbits = 256
	}
},
{
	.name = "cbc(twofish)",
	.compat = "twofish",

	.uinfo = {
		.encr = {
			.blockbits = 128,
			.defkeybits = 128,
		}
	},

	.desc = {
		.sadb_alg_id = SADB_X_EALG_TWOFISHCBC,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 128,
		.sadb_alg_maxbits = 256
	}
},
};

static struct xfrm_algo_desc calg_list[] = {
{
	.name = "deflate",
	.uinfo = {
		.comp = {
			.threshold = 90,
		}
	},
	.desc = { .sadb_alg_id = SADB_X_CALG_DEFLATE }
},
{
	.name = "lzs",
	.uinfo = {
		.comp = {
			.threshold = 90,
		}
	},
	.desc = { .sadb_alg_id = SADB_X_CALG_LZS }
},
{
	.name = "lzjh",
	.uinfo = {
		.comp = {
			.threshold = 50,
		}
	},
	.desc = { .sadb_alg_id = SADB_X_CALG_LZJH }
},
};

static inline int aalg_entries(void)
{
	return ARRAY_SIZE(aalg_list);
}

static inline int ealg_entries(void)
{
	return ARRAY_SIZE(ealg_list);
}

static inline int calg_entries(void)
{
	return ARRAY_SIZE(calg_list);
}

struct xfrm_algo_list {
	struct xfrm_algo_desc *algs;
	int entries;
	u32 type;
	u32 mask;
};

static const struct xfrm_algo_list xfrm_aalg_list = {
	.algs = aalg_list,
	.entries = ARRAY_SIZE(aalg_list),
	.type = CRYPTO_ALG_TYPE_HASH,
	.mask = CRYPTO_ALG_TYPE_HASH_MASK | CRYPTO_ALG_ASYNC,
};

static const struct xfrm_algo_list xfrm_ealg_list = {
	.algs = ealg_list,
	.entries = ARRAY_SIZE(ealg_list),
	.type = CRYPTO_ALG_TYPE_BLKCIPHER,
	.mask = CRYPTO_ALG_TYPE_MASK | CRYPTO_ALG_ASYNC,
};

static const struct xfrm_algo_list xfrm_calg_list = {
	.algs = calg_list,
	.entries = ARRAY_SIZE(calg_list),
	.type = CRYPTO_ALG_TYPE_COMPRESS,
	.mask = CRYPTO_ALG_TYPE_MASK | CRYPTO_ALG_ASYNC,
};

static struct xfrm_algo_desc *xfrm_find_algo(
	const struct xfrm_algo_list *algo_list,
	int match(const struct xfrm_algo_desc *entry, const void *data),
	const void *data, int probe)
{
	struct xfrm_algo_desc *list = algo_list->algs;
	int i, status;

	for (i = 0; i < algo_list->entries; i++) {
		if (!match(list + i, data))
			continue;

		if (list[i].available)
			return &list[i];

		if (!probe)
			break;

		status = crypto_has_alg(list[i].name, algo_list->type,
					algo_list->mask);
		if (!status)
			break;

		list[i].available = status;
		return &list[i];
	}
	return NULL;
}

static int xfrm_alg_id_match(const struct xfrm_algo_desc *entry,
			     const void *data)
{
	return entry->desc.sadb_alg_id == (unsigned long)data;
}

struct xfrm_algo_desc *xfrm_aalg_get_byid(int alg_id)
{
	return xfrm_find_algo(&xfrm_aalg_list, xfrm_alg_id_match,
			      (void *)(unsigned long)alg_id, 1);
}
EXPORT_SYMBOL_GPL(xfrm_aalg_get_byid);

struct xfrm_algo_desc *xfrm_ealg_get_byid(int alg_id)
{
	return xfrm_find_algo(&xfrm_ealg_list, xfrm_alg_id_match,
			      (void *)(unsigned long)alg_id, 1);
}
EXPORT_SYMBOL_GPL(xfrm_ealg_get_byid);

struct xfrm_algo_desc *xfrm_calg_get_byid(int alg_id)
{
	return xfrm_find_algo(&xfrm_calg_list, xfrm_alg_id_match,
			      (void *)(unsigned long)alg_id, 1);
}
EXPORT_SYMBOL_GPL(xfrm_calg_get_byid);

static int xfrm_alg_name_match(const struct xfrm_algo_desc *entry,
			       const void *data)
{
	const char *name = data;

	return name && (!strcmp(name, entry->name) ||
			(entry->compat && !strcmp(name, entry->compat)));
}

struct xfrm_algo_desc *xfrm_aalg_get_byname(char *name, int probe)
{
	return xfrm_find_algo(&xfrm_aalg_list, xfrm_alg_name_match, name,
			      probe);
}
EXPORT_SYMBOL_GPL(xfrm_aalg_get_byname);

struct xfrm_algo_desc *xfrm_ealg_get_byname(char *name, int probe)
{
	return xfrm_find_algo(&xfrm_ealg_list, xfrm_alg_name_match, name,
			      probe);
}
EXPORT_SYMBOL_GPL(xfrm_ealg_get_byname);

struct xfrm_algo_desc *xfrm_calg_get_byname(char *name, int probe)
{
	return xfrm_find_algo(&xfrm_calg_list, xfrm_alg_name_match, name,
			      probe);
}
EXPORT_SYMBOL_GPL(xfrm_calg_get_byname);

struct xfrm_algo_desc *xfrm_aalg_get_byidx(unsigned int idx)
{
	if (idx >= aalg_entries())
		return NULL;

	return &aalg_list[idx];
}
EXPORT_SYMBOL_GPL(xfrm_aalg_get_byidx);

struct xfrm_algo_desc *xfrm_ealg_get_byidx(unsigned int idx)
{
	if (idx >= ealg_entries())
		return NULL;

	return &ealg_list[idx];
}
EXPORT_SYMBOL_GPL(xfrm_ealg_get_byidx);

/*
 * Probe for the availability of crypto algorithms, and set the available
 * flag for any algorithms found on the system.  This is typically called by
 * pfkey during userspace SA add, update or register.
 */
void xfrm_probe_algs(void)
{
#ifdef CONFIG_CRYPTO
	int i, status;

	BUG_ON(in_softirq());

	for (i = 0; i < aalg_entries(); i++) {
		status = crypto_has_hash(aalg_list[i].name, 0,
					 CRYPTO_ALG_ASYNC);
		if (aalg_list[i].available != status)
			aalg_list[i].available = status;
	}

	for (i = 0; i < ealg_entries(); i++) {
		status = crypto_has_blkcipher(ealg_list[i].name, 0,
					      CRYPTO_ALG_ASYNC);
		if (ealg_list[i].available != status)
			ealg_list[i].available = status;
	}

	for (i = 0; i < calg_entries(); i++) {
		status = crypto_has_comp(calg_list[i].name, 0,
					 CRYPTO_ALG_ASYNC);
		if (calg_list[i].available != status)
			calg_list[i].available = status;
	}
#endif
}
EXPORT_SYMBOL_GPL(xfrm_probe_algs);

int xfrm_count_auth_supported(void)
{
	int i, n;

	for (i = 0, n = 0; i < aalg_entries(); i++)
		if (aalg_list[i].available)
			n++;
	return n;
}
EXPORT_SYMBOL_GPL(xfrm_count_auth_supported);

int xfrm_count_enc_supported(void)
{
	int i, n;

	for (i = 0, n = 0; i < ealg_entries(); i++)
		if (ealg_list[i].available)
			n++;
	return n;
}
EXPORT_SYMBOL_GPL(xfrm_count_enc_supported);

/* Move to common area: it is shared with AH. */

int skb_icv_walk(const struct sk_buff *skb, struct hash_desc *desc,
		 int offset, int len, icv_update_fn_t icv_update)
{
	int start = skb_headlen(skb);
	int i, copy = start - offset;
	int err;
	struct scatterlist sg;

	/* Checksum header. */
	if (copy > 0) {
		if (copy > len)
			copy = len;

		sg_init_one(&sg, skb->data + offset, copy);

		err = icv_update(desc, &sg, copy);
		if (unlikely(err))
			return err;

		if ((len -= copy) == 0)
			return 0;
		offset += copy;
	}

	for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
		int end;

		BUG_TRAP(start <= offset + len);

		end = start + skb_shinfo(skb)->frags[i].size;
		if ((copy = end - offset) > 0) {
			skb_frag_t *frag = &skb_shinfo(skb)->frags[i];

			if (copy > len)
				copy = len;

			sg_init_table(&sg, 1);
			sg_set_page(&sg, frag->page, copy,
				    frag->page_offset + offset-start);

			err = icv_update(desc, &sg, copy);
			if (unlikely(err))
				return err;

			if (!(len -= copy))
				return 0;
			offset += copy;
		}
		start = end;
	}

	if (skb_shinfo(skb)->frag_list) {
		struct sk_buff *list = skb_shinfo(skb)->frag_list;

		for (; list; list = list->next) {
			int end;

			BUG_TRAP(start <= offset + len);

			end = start + list->len;
			if ((copy = end - offset) > 0) {
				if (copy > len)
					copy = len;
				err = skb_icv_walk(list, desc, offset-start,
						   copy, icv_update);
				if (unlikely(err))
					return err;
				if ((len -= copy) == 0)
					return 0;
				offset += copy;
			}
			start = end;
		}
	}
	BUG_ON(len);
	return 0;
}
EXPORT_SYMBOL_GPL(skb_icv_walk);

#if defined(CONFIG_INET_ESP) || defined(CONFIG_INET_ESP_MODULE) || defined(CONFIG_INET6_ESP) || defined(CONFIG_INET6_ESP_MODULE)

void *pskb_put(struct sk_buff *skb, struct sk_buff *tail, int len)
{
	if (tail != skb) {
		skb->data_len += len;
		skb->len += len;
	}
	return skb_put(tail, len);
}
EXPORT_SYMBOL_GPL(pskb_put);
#endif
Commit	Line	Data
a716c119	1	/*
1da177e4 LT	2	* xfrm algorithm interface
	3	*
	4	* Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
	5	*
	6	* This program is free software; you can redistribute it and/or modify it
	7	* under the terms of the GNU General Public License as published by the Free
a716c119	8	* Software Foundation; either version 2 of the License, or (at your option)
1da177e4 LT	9	* any later version.
	10	*/
	11
1da177e4 LT	12	#include <linux/module.h>
	13	#include <linux/kernel.h>
	14	#include <linux/pfkeyv2.h>
	15	#include <linux/crypto.h>
b3b724f4	16	#include <linux/scatterlist.h>
1da177e4 LT	17	#include <net/xfrm.h>
	18	#if defined(CONFIG_INET_AH) \|\| defined(CONFIG_INET_AH_MODULE) \|\| defined(CONFIG_INET6_AH) \|\| defined(CONFIG_INET6_AH_MODULE)
	19	#include <net/ah.h>
	20	#endif
	21	#if defined(CONFIG_INET_ESP) \|\| defined(CONFIG_INET_ESP_MODULE) \|\| defined(CONFIG_INET6_ESP) \|\| defined(CONFIG_INET6_ESP_MODULE)
	22	#include <net/esp.h>
	23	#endif
1da177e4 LT	24
	25	/*
	26	* Algorithms supported by IPsec. These entries contain properties which
	27	* are used in key negotiation and xfrm processing, and are used to verify
	28	* that instantiated crypto transforms have correct parameters for IPsec
	29	* purposes.
	30	*/
	31	static struct xfrm_algo_desc aalg_list[] = {
	32	{
07d4ee58 HX	33	.name = "hmac(digest_null)",
07d4ee58 HX	34	.compat = "digest_null",
a716c119	35
1da177e4 LT	36	.uinfo = {
	37	.auth = {
	38	.icv_truncbits = 0,
	39	.icv_fullbits = 0,
	40	}
	41	},
a716c119	42
1da177e4 LT	43	.desc = {
	44	.sadb_alg_id = SADB_X_AALG_NULL,
	45	.sadb_alg_ivlen = 0,
	46	.sadb_alg_minbits = 0,
	47	.sadb_alg_maxbits = 0
	48	}
	49	},
	50	{
07d4ee58 HX	51	.name = "hmac(md5)",
07d4ee58 HX	52	.compat = "md5",
1da177e4 LT	53
	54	.uinfo = {
	55	.auth = {
	56	.icv_truncbits = 96,
	57	.icv_fullbits = 128,
	58	}
	59	},
a716c119	60
1da177e4 LT	61	.desc = {
	62	.sadb_alg_id = SADB_AALG_MD5HMAC,
	63	.sadb_alg_ivlen = 0,
	64	.sadb_alg_minbits = 128,
	65	.sadb_alg_maxbits = 128
	66	}
	67	},
	68	{
07d4ee58 HX	69	.name = "hmac(sha1)",
07d4ee58 HX	70	.compat = "sha1",
1da177e4 LT	71
	72	.uinfo = {
	73	.auth = {
	74	.icv_truncbits = 96,
	75	.icv_fullbits = 160,
	76	}
	77	},
	78
	79	.desc = {
	80	.sadb_alg_id = SADB_AALG_SHA1HMAC,
	81	.sadb_alg_ivlen = 0,
	82	.sadb_alg_minbits = 160,
	83	.sadb_alg_maxbits = 160
	84	}
	85	},
	86	{
07d4ee58 HX	87	.name = "hmac(sha256)",
07d4ee58 HX	88	.compat = "sha256",
1da177e4 LT	89
	90	.uinfo = {
	91	.auth = {
	92	.icv_truncbits = 96,
	93	.icv_fullbits = 256,
	94	}
	95	},
	96
	97	.desc = {
	98	.sadb_alg_id = SADB_X_AALG_SHA2_256HMAC,
	99	.sadb_alg_ivlen = 0,
	100	.sadb_alg_minbits = 256,
	101	.sadb_alg_maxbits = 256
	102	}
	103	},
	104	{
07d4ee58 HX	105	.name = "hmac(ripemd160)",
07d4ee58 HX	106	.compat = "ripemd160",
1da177e4 LT	107
	108	.uinfo = {
	109	.auth = {
	110	.icv_truncbits = 96,
	111	.icv_fullbits = 160,
	112	}
	113	},
	114
	115	.desc = {
	116	.sadb_alg_id = SADB_X_AALG_RIPEMD160HMAC,
	117	.sadb_alg_ivlen = 0,
	118	.sadb_alg_minbits = 160,
	119	.sadb_alg_maxbits = 160
	120	}
	121	},
7cf4c1a5 KM	122	{
	123	.name = "xcbc(aes)",
	124
	125	.uinfo = {
	126	.auth = {
	127	.icv_truncbits = 96,
	128	.icv_fullbits = 128,
	129	}
	130	},
	131
	132	.desc = {
	133	.sadb_alg_id = SADB_X_AALG_AES_XCBC_MAC,
	134	.sadb_alg_ivlen = 0,
	135	.sadb_alg_minbits = 128,
	136	.sadb_alg_maxbits = 128
	137	}
	138	},
1da177e4 LT	139	};
	140
	141	static struct xfrm_algo_desc ealg_list[] = {
	142	{
6b7326c8 HX	143	.name = "ecb(cipher_null)",
6b7326c8 HX	144	.compat = "cipher_null",
a716c119	145
1da177e4 LT	146	.uinfo = {
	147	.encr = {
	148	.blockbits = 8,
	149	.defkeybits = 0,
	150	}
	151	},
a716c119	152
1da177e4 LT	153	.desc = {
	154	.sadb_alg_id = SADB_EALG_NULL,
	155	.sadb_alg_ivlen = 0,
	156	.sadb_alg_minbits = 0,
	157	.sadb_alg_maxbits = 0
	158	}
	159	},
	160	{
6b7326c8 HX	161	.name = "cbc(des)",
6b7326c8 HX	162	.compat = "des",
1da177e4 LT	163
	164	.uinfo = {
	165	.encr = {
	166	.blockbits = 64,
	167	.defkeybits = 64,
	168	}
	169	},
	170
	171	.desc = {
	172	.sadb_alg_id = SADB_EALG_DESCBC,
	173	.sadb_alg_ivlen = 8,
	174	.sadb_alg_minbits = 64,
	175	.sadb_alg_maxbits = 64
	176	}
	177	},
	178	{
6b7326c8 HX	179	.name = "cbc(des3_ede)",
6b7326c8 HX	180	.compat = "des3_ede",
1da177e4 LT	181
	182	.uinfo = {
	183	.encr = {
	184	.blockbits = 64,
	185	.defkeybits = 192,
	186	}
	187	},
	188
	189	.desc = {
	190	.sadb_alg_id = SADB_EALG_3DESCBC,
	191	.sadb_alg_ivlen = 8,
	192	.sadb_alg_minbits = 192,
	193	.sadb_alg_maxbits = 192
	194	}
	195	},
	196	{
6b7326c8 HX	197	.name = "cbc(cast128)",
6b7326c8 HX	198	.compat = "cast128",
1da177e4 LT	199
	200	.uinfo = {
	201	.encr = {
	202	.blockbits = 64,
	203	.defkeybits = 128,
	204	}
	205	},
	206
	207	.desc = {
	208	.sadb_alg_id = SADB_X_EALG_CASTCBC,
	209	.sadb_alg_ivlen = 8,
	210	.sadb_alg_minbits = 40,
	211	.sadb_alg_maxbits = 128
	212	}
	213	},
	214	{
6b7326c8 HX	215	.name = "cbc(blowfish)",
6b7326c8 HX	216	.compat = "blowfish",
1da177e4 LT	217
	218	.uinfo = {
	219	.encr = {
	220	.blockbits = 64,
	221	.defkeybits = 128,
	222	}
	223	},
	224
	225	.desc = {
	226	.sadb_alg_id = SADB_X_EALG_BLOWFISHCBC,
	227	.sadb_alg_ivlen = 8,
	228	.sadb_alg_minbits = 40,
	229	.sadb_alg_maxbits = 448
	230	}
	231	},
	232	{
6b7326c8 HX	233	.name = "cbc(aes)",
6b7326c8 HX	234	.compat = "aes",
1da177e4 LT	235
	236	.uinfo = {
	237	.encr = {
	238	.blockbits = 128,
	239	.defkeybits = 128,
	240	}
	241	},
	242
	243	.desc = {
	244	.sadb_alg_id = SADB_X_EALG_AESCBC,
	245	.sadb_alg_ivlen = 8,
	246	.sadb_alg_minbits = 128,
	247	.sadb_alg_maxbits = 256
	248	}
	249	},
	250	{
a716c119 YH	251	.name = "cbc(serpent)",
	252	.compat = "serpent",
	253
	254	.uinfo = {
	255	.encr = {
	256	.blockbits = 128,
	257	.defkeybits = 128,
	258	}
	259	},
	260
	261	.desc = {
	262	.sadb_alg_id = SADB_X_EALG_SERPENTCBC,
	263	.sadb_alg_ivlen = 8,
	264	.sadb_alg_minbits = 128,
	265	.sadb_alg_maxbits = 256,
	266	}
1da177e4	267	},
6a0dc8d7 NT	268	{
	269	.name = "cbc(camellia)",
	270
	271	.uinfo = {
	272	.encr = {
	273	.blockbits = 128,
	274	.defkeybits = 128,
	275	}
	276	},
	277
	278	.desc = {
	279	.sadb_alg_id = SADB_X_EALG_CAMELLIACBC,
	280	.sadb_alg_ivlen = 8,
	281	.sadb_alg_minbits = 128,
	282	.sadb_alg_maxbits = 256
	283	}
	284	},
1da177e4	285	{
a716c119 YH	286	.name = "cbc(twofish)",
	287	.compat = "twofish",
	288
	289	.uinfo = {
	290	.encr = {
	291	.blockbits = 128,
	292	.defkeybits = 128,
	293	}
	294	},
	295
	296	.desc = {
	297	.sadb_alg_id = SADB_X_EALG_TWOFISHCBC,
	298	.sadb_alg_ivlen = 8,
	299	.sadb_alg_minbits = 128,
	300	.sadb_alg_maxbits = 256
	301	}
1da177e4 LT	302	},
	303	};
	304
	305	static struct xfrm_algo_desc calg_list[] = {
	306	{
	307	.name = "deflate",
	308	.uinfo = {
	309	.comp = {
	310	.threshold = 90,
	311	}
	312	},
	313	.desc = { .sadb_alg_id = SADB_X_CALG_DEFLATE }
	314	},
	315	{
	316	.name = "lzs",
	317	.uinfo = {
	318	.comp = {
	319	.threshold = 90,
	320	}
	321	},
	322	.desc = { .sadb_alg_id = SADB_X_CALG_LZS }
	323	},
	324	{
	325	.name = "lzjh",
	326	.uinfo = {
	327	.comp = {
	328	.threshold = 50,
	329	}
	330	},
	331	.desc = { .sadb_alg_id = SADB_X_CALG_LZJH }
	332	},
	333	};
	334
	335	static inline int aalg_entries(void)
	336	{
	337	return ARRAY_SIZE(aalg_list);
	338	}
	339
	340	static inline int ealg_entries(void)
	341	{
	342	return ARRAY_SIZE(ealg_list);
	343	}
	344
	345	static inline int calg_entries(void)
	346	{
	347	return ARRAY_SIZE(calg_list);
	348	}
	349
c92b3a2f HX	350	struct xfrm_algo_list {
	351	struct xfrm_algo_desc *algs;
	352	int entries;
	353	u32 type;
	354	u32 mask;
	355	};
1da177e4	356
c92b3a2f HX	357	static const struct xfrm_algo_list xfrm_aalg_list = {
	358	.algs = aalg_list,
	359	.entries = ARRAY_SIZE(aalg_list),
	360	.type = CRYPTO_ALG_TYPE_HASH,
	361	.mask = CRYPTO_ALG_TYPE_HASH_MASK \| CRYPTO_ALG_ASYNC,
	362	};
1da177e4	363
c92b3a2f HX	364	static const struct xfrm_algo_list xfrm_ealg_list = {
	365	.algs = ealg_list,
	366	.entries = ARRAY_SIZE(ealg_list),
	367	.type = CRYPTO_ALG_TYPE_BLKCIPHER,
	368	.mask = CRYPTO_ALG_TYPE_MASK \| CRYPTO_ALG_ASYNC,
	369	};
1da177e4	370
c92b3a2f HX	371	static const struct xfrm_algo_list xfrm_calg_list = {
	372	.algs = calg_list,
	373	.entries = ARRAY_SIZE(calg_list),
	374	.type = CRYPTO_ALG_TYPE_COMPRESS,
	375	.mask = CRYPTO_ALG_TYPE_MASK \| CRYPTO_ALG_ASYNC,
	376	};
1da177e4	377
c92b3a2f HX	378	static struct xfrm_algo_desc *xfrm_find_algo(
	379	const struct xfrm_algo_list *algo_list,
	380	int match(const struct xfrm_algo_desc entry, const void data),
	381	const void *data, int probe)
1da177e4	382	{
c92b3a2f	383	struct xfrm_algo_desc *list = algo_list->algs;
1da177e4 LT	384	int i, status;
1da177e4 LT	385
c92b3a2f HX	386	for (i = 0; i < algo_list->entries; i++) {
c92b3a2f HX	387	if (!match(list + i, data))
1da177e4 LT	388	continue;
	389
	390	if (list[i].available)
	391	return &list[i];
	392
	393	if (!probe)
	394	break;
	395
c92b3a2f HX	396	status = crypto_has_alg(list[i].name, algo_list->type,
c92b3a2f HX	397	algo_list->mask);
1da177e4 LT	398	if (!status)
	399	break;
	400
	401	list[i].available = status;
	402	return &list[i];
	403	}
	404	return NULL;
	405	}
	406
c92b3a2f HX	407	static int xfrm_alg_id_match(const struct xfrm_algo_desc *entry,
	408	const void *data)
	409	{
26b8e51e	410	return entry->desc.sadb_alg_id == (unsigned long)data;
c92b3a2f HX	411	}
	412
	413	struct xfrm_algo_desc *xfrm_aalg_get_byid(int alg_id)
	414	{
	415	return xfrm_find_algo(&xfrm_aalg_list, xfrm_alg_id_match,
26b8e51e	416	(void *)(unsigned long)alg_id, 1);
c92b3a2f HX	417	}
	418	EXPORT_SYMBOL_GPL(xfrm_aalg_get_byid);
	419
	420	struct xfrm_algo_desc *xfrm_ealg_get_byid(int alg_id)
	421	{
	422	return xfrm_find_algo(&xfrm_ealg_list, xfrm_alg_id_match,
26b8e51e	423	(void *)(unsigned long)alg_id, 1);
c92b3a2f HX	424	}
	425	EXPORT_SYMBOL_GPL(xfrm_ealg_get_byid);
	426
	427	struct xfrm_algo_desc *xfrm_calg_get_byid(int alg_id)
	428	{
	429	return xfrm_find_algo(&xfrm_calg_list, xfrm_alg_id_match,
26b8e51e	430	(void *)(unsigned long)alg_id, 1);
c92b3a2f HX	431	}
	432	EXPORT_SYMBOL_GPL(xfrm_calg_get_byid);
	433
	434	static int xfrm_alg_name_match(const struct xfrm_algo_desc *entry,
	435	const void *data)
	436	{
	437	const char *name = data;
	438
	439	return name && (!strcmp(name, entry->name) \|\|
	440	(entry->compat && !strcmp(name, entry->compat)));
	441	}
	442
1da177e4 LT	443	struct xfrm_algo_desc xfrm_aalg_get_byname(char name, int probe)
1da177e4 LT	444	{
c92b3a2f HX	445	return xfrm_find_algo(&xfrm_aalg_list, xfrm_alg_name_match, name,
c92b3a2f HX	446	probe);
1da177e4 LT	447	}
	448	EXPORT_SYMBOL_GPL(xfrm_aalg_get_byname);
	449
	450	struct xfrm_algo_desc xfrm_ealg_get_byname(char name, int probe)
	451	{
c92b3a2f HX	452	return xfrm_find_algo(&xfrm_ealg_list, xfrm_alg_name_match, name,
c92b3a2f HX	453	probe);
1da177e4 LT	454	}
	455	EXPORT_SYMBOL_GPL(xfrm_ealg_get_byname);
	456
	457	struct xfrm_algo_desc xfrm_calg_get_byname(char name, int probe)
	458	{
c92b3a2f HX	459	return xfrm_find_algo(&xfrm_calg_list, xfrm_alg_name_match, name,
c92b3a2f HX	460	probe);
1da177e4 LT	461	}
	462	EXPORT_SYMBOL_GPL(xfrm_calg_get_byname);
	463
	464	struct xfrm_algo_desc *xfrm_aalg_get_byidx(unsigned int idx)
	465	{
	466	if (idx >= aalg_entries())
	467	return NULL;
	468
	469	return &aalg_list[idx];
	470	}
	471	EXPORT_SYMBOL_GPL(xfrm_aalg_get_byidx);
	472
	473	struct xfrm_algo_desc *xfrm_ealg_get_byidx(unsigned int idx)
	474	{
	475	if (idx >= ealg_entries())
	476	return NULL;
	477
	478	return &ealg_list[idx];
	479	}
	480	EXPORT_SYMBOL_GPL(xfrm_ealg_get_byidx);
	481
	482	/*
	483	* Probe for the availability of crypto algorithms, and set the available
	484	* flag for any algorithms found on the system. This is typically called by
	485	* pfkey during userspace SA add, update or register.
	486	*/
	487	void xfrm_probe_algs(void)
	488	{
	489	#ifdef CONFIG_CRYPTO
	490	int i, status;
a716c119	491
1da177e4 LT	492	BUG_ON(in_softirq());
	493
	494	for (i = 0; i < aalg_entries(); i++) {
e4d5b79c HX	495	status = crypto_has_hash(aalg_list[i].name, 0,
e4d5b79c HX	496	CRYPTO_ALG_ASYNC);
1da177e4 LT	497	if (aalg_list[i].available != status)
	498	aalg_list[i].available = status;
	499	}
a716c119	500
1da177e4	501	for (i = 0; i < ealg_entries(); i++) {
e4d5b79c HX	502	status = crypto_has_blkcipher(ealg_list[i].name, 0,
e4d5b79c HX	503	CRYPTO_ALG_ASYNC);
1da177e4 LT	504	if (ealg_list[i].available != status)
	505	ealg_list[i].available = status;
	506	}
a716c119	507
1da177e4	508	for (i = 0; i < calg_entries(); i++) {
e4d5b79c HX	509	status = crypto_has_comp(calg_list[i].name, 0,
e4d5b79c HX	510	CRYPTO_ALG_ASYNC);
1da177e4 LT	511	if (calg_list[i].available != status)
	512	calg_list[i].available = status;
	513	}
	514	#endif
	515	}
	516	EXPORT_SYMBOL_GPL(xfrm_probe_algs);
	517
	518	int xfrm_count_auth_supported(void)
	519	{
	520	int i, n;
	521
	522	for (i = 0, n = 0; i < aalg_entries(); i++)
	523	if (aalg_list[i].available)
	524	n++;
	525	return n;
	526	}
	527	EXPORT_SYMBOL_GPL(xfrm_count_auth_supported);
	528
	529	int xfrm_count_enc_supported(void)
	530	{
	531	int i, n;
	532
	533	for (i = 0, n = 0; i < ealg_entries(); i++)
	534	if (ealg_list[i].available)
	535	n++;
	536	return n;
	537	}
	538	EXPORT_SYMBOL_GPL(xfrm_count_enc_supported);
	539
	540	/* Move to common area: it is shared with AH. */
	541
07d4ee58 HX	542	int skb_icv_walk(const struct sk_buff skb, struct hash_desc desc,
07d4ee58 HX	543	int offset, int len, icv_update_fn_t icv_update)
1da177e4	544	{
1a028e50 DM	545	int start = skb_headlen(skb);
1a028e50 DM	546	int i, copy = start - offset;
07d4ee58	547	int err;
1da177e4 LT	548	struct scatterlist sg;
	549
	550	/* Checksum header. */
	551	if (copy > 0) {
	552	if (copy > len)
	553	copy = len;
a716c119	554
0e0940d4	555	sg_init_one(&sg, skb->data + offset, copy);
a716c119	556
07d4ee58 HX	557	err = icv_update(desc, &sg, copy);
	558	if (unlikely(err))
	559	return err;
a716c119	560
1da177e4	561	if ((len -= copy) == 0)
07d4ee58	562	return 0;
1da177e4 LT	563	offset += copy;
	564	}
	565
	566	for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
1a028e50	567	int end;
1da177e4	568
1a028e50 DM	569	BUG_TRAP(start <= offset + len);
	570
	571	end = start + skb_shinfo(skb)->frags[i].size;
1da177e4 LT	572	if ((copy = end - offset) > 0) {
	573	skb_frag_t *frag = &skb_shinfo(skb)->frags[i];
	574
	575	if (copy > len)
	576	copy = len;
a716c119	577
0e0940d4	578	sg_init_table(&sg, 1);
642f1490	579	sg_set_page(&sg, frag->page, copy,
0e0940d4	580	frag->page_offset + offset-start);
a716c119	581
07d4ee58 HX	582	err = icv_update(desc, &sg, copy);
	583	if (unlikely(err))
	584	return err;
1da177e4 LT	585
1da177e4 LT	586	if (!(len -= copy))
07d4ee58	587	return 0;
1da177e4 LT	588	offset += copy;
1da177e4 LT	589	}
1a028e50	590	start = end;
1da177e4 LT	591	}
	592
	593	if (skb_shinfo(skb)->frag_list) {
	594	struct sk_buff *list = skb_shinfo(skb)->frag_list;
	595
	596	for (; list; list = list->next) {
1a028e50 DM	597	int end;
	598
	599	BUG_TRAP(start <= offset + len);
1da177e4	600
1a028e50	601	end = start + list->len;
1da177e4 LT	602	if ((copy = end - offset) > 0) {
	603	if (copy > len)
	604	copy = len;
1a028e50	605	err = skb_icv_walk(list, desc, offset-start,
07d4ee58 HX	606	copy, icv_update);
	607	if (unlikely(err))
	608	return err;
1da177e4	609	if ((len -= copy) == 0)
07d4ee58	610	return 0;
1da177e4 LT	611	offset += copy;
1da177e4 LT	612	}
1a028e50	613	start = end;
1da177e4 LT	614	}
1da177e4 LT	615	}
09a62660	616	BUG_ON(len);
07d4ee58	617	return 0;
1da177e4 LT	618	}
	619	EXPORT_SYMBOL_GPL(skb_icv_walk);
	620
	621	#if defined(CONFIG_INET_ESP) \|\| defined(CONFIG_INET_ESP_MODULE) \|\| defined(CONFIG_INET6_ESP) \|\| defined(CONFIG_INET6_ESP_MODULE)
	622
1da177e4 LT	623	void pskb_put(struct sk_buff skb, struct sk_buff *tail, int len)
	624	{
	625	if (tail != skb) {
	626	skb->data_len += len;
	627	skb->len += len;
	628	}
	629	return skb_put(tail, len);
	630	}
	631	EXPORT_SYMBOL_GPL(pskb_put);
	632	#endif