Deleted Added
sdiff udiff text old ( 159241 ) new ( 167755 )
full compact
cryptodev.h (159241) cryptodev.h (167755)
1/* $FreeBSD: head/sys/opencrypto/cryptodev.h 159241 2006-06-04 22:15:13Z pjd $ */
1/* $FreeBSD: head/sys/opencrypto/cryptodev.h 167755 2007-03-21 03:42:51Z sam $ */
2/* $OpenBSD: cryptodev.h,v 1.31 2002/06/11 11:14:29 beck Exp $ */
3
4/*-
5 * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
2/* $OpenBSD: cryptodev.h,v 1.31 2002/06/11 11:14:29 beck Exp $ */
3
4/*-
5 * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
6 * Copyright (c) 2002-2006 Sam Leffler, Errno Consulting
6 *
7 * This code was written by Angelos D. Keromytis in Athens, Greece, in
8 * February 2000. Network Security Technologies Inc. (NSTI) kindly
9 * supported the development of this code.
10 *
11 * Copyright (c) 2000 Angelos D. Keromytis
12 *
13 * Permission to use, copy, and modify this software with or without fee

--- 108 unchanged lines hidden (view full) ---

122#define CRYPTO_SHA2_512_HMAC 20
123#define CRYPTO_ALGORITHM_MAX 20 /* Keep updated - see below */
124
125/* Algorithm flags */
126#define CRYPTO_ALG_FLAG_SUPPORTED 0x01 /* Algorithm is supported */
127#define CRYPTO_ALG_FLAG_RNG_ENABLE 0x02 /* Has HW RNG for DH/DSA */
128#define CRYPTO_ALG_FLAG_DSA_SHA 0x04 /* Can do SHA on msg */
129
7 *
8 * This code was written by Angelos D. Keromytis in Athens, Greece, in
9 * February 2000. Network Security Technologies Inc. (NSTI) kindly
10 * supported the development of this code.
11 *
12 * Copyright (c) 2000 Angelos D. Keromytis
13 *
14 * Permission to use, copy, and modify this software with or without fee

--- 108 unchanged lines hidden (view full) ---

123#define CRYPTO_SHA2_512_HMAC 20
124#define CRYPTO_ALGORITHM_MAX 20 /* Keep updated - see below */
125
126/* Algorithm flags */
127#define CRYPTO_ALG_FLAG_SUPPORTED 0x01 /* Algorithm is supported */
128#define CRYPTO_ALG_FLAG_RNG_ENABLE 0x02 /* Has HW RNG for DH/DSA */
129#define CRYPTO_ALG_FLAG_DSA_SHA 0x04 /* Can do SHA on msg */
130
131/*
132 * Crypto driver/device flags. They can set in the crid
133 * parameter when creating a session or submitting a key
134 * op to affect the device/driver assigned. If neither
135 * of these are specified then the crid is assumed to hold
136 * the driver id of an existing (and suitable) device that
137 * must be used to satisfy the request.
138 */
139#define CRYPTO_FLAG_HARDWARE 0x01000000 /* hardware accelerated */
140#define CRYPTO_FLAG_SOFTWARE 0x02000000 /* software implementation */
141
142/* NB: deprecated */
130struct session_op {
131 u_int32_t cipher; /* ie. CRYPTO_DES_CBC */
132 u_int32_t mac; /* ie. CRYPTO_MD5_HMAC */
133
134 u_int32_t keylen; /* cipher key */
135 caddr_t key;
136 int mackeylen; /* mac key */
137 caddr_t mackey;
138
139 u_int32_t ses; /* returns: session # */
140};
141
143struct session_op {
144 u_int32_t cipher; /* ie. CRYPTO_DES_CBC */
145 u_int32_t mac; /* ie. CRYPTO_MD5_HMAC */
146
147 u_int32_t keylen; /* cipher key */
148 caddr_t key;
149 int mackeylen; /* mac key */
150 caddr_t mackey;
151
152 u_int32_t ses; /* returns: session # */
153};
154
155struct session2_op {
156 u_int32_t cipher; /* ie. CRYPTO_DES_CBC */
157 u_int32_t mac; /* ie. CRYPTO_MD5_HMAC */
158
159 u_int32_t keylen; /* cipher key */
160 caddr_t key;
161 int mackeylen; /* mac key */
162 caddr_t mackey;
163
164 u_int32_t ses; /* returns: session # */
165 int crid; /* driver id + flags (rw) */
166 int pad[4]; /* for future expansion */
167};
168
142struct crypt_op {
143 u_int32_t ses;
144 u_int16_t op; /* i.e. COP_ENCRYPT */
145#define COP_ENCRYPT 1
146#define COP_DECRYPT 2
147 u_int16_t flags;
148#define COP_F_BATCH 0x0008 /* Batch op if possible */
149 u_int len;
150 caddr_t src, dst; /* become iov[] inside kernel */
151 caddr_t mac; /* must be big enough for chosen MAC */
152 caddr_t iv;
153};
154
169struct crypt_op {
170 u_int32_t ses;
171 u_int16_t op; /* i.e. COP_ENCRYPT */
172#define COP_ENCRYPT 1
173#define COP_DECRYPT 2
174 u_int16_t flags;
175#define COP_F_BATCH 0x0008 /* Batch op if possible */
176 u_int len;
177 caddr_t src, dst; /* become iov[] inside kernel */
178 caddr_t mac; /* must be big enough for chosen MAC */
179 caddr_t iv;
180};
181
182/*
183 * Parameters for looking up a crypto driver/device by
184 * device name or by id. The latter are returned for
185 * created sessions (crid) and completed key operations.
186 */
187struct crypt_find_op {
188 int crid; /* driver id + flags */
189 char name[32]; /* device/driver name */
190};
191
155/* bignum parameter, in packed bytes, ... */
156struct crparam {
157 caddr_t crp_p;
158 u_int crp_nbits;
159};
160
161#define CRK_MAXPARAM 8
162
163struct crypt_kop {
164 u_int crk_op; /* ie. CRK_MOD_EXP or other */
165 u_int crk_status; /* return status */
166 u_short crk_iparams; /* # of input parameters */
167 u_short crk_oparams; /* # of output parameters */
192/* bignum parameter, in packed bytes, ... */
193struct crparam {
194 caddr_t crp_p;
195 u_int crp_nbits;
196};
197
198#define CRK_MAXPARAM 8
199
200struct crypt_kop {
201 u_int crk_op; /* ie. CRK_MOD_EXP or other */
202 u_int crk_status; /* return status */
203 u_short crk_iparams; /* # of input parameters */
204 u_short crk_oparams; /* # of output parameters */
168 u_int crk_pad1;
205 u_int crk_crid; /* NB: only used by CIOCKEY2 (rw) */
169 struct crparam crk_param[CRK_MAXPARAM];
170};
171#define CRK_ALGORITM_MIN 0
172#define CRK_MOD_EXP 0
173#define CRK_MOD_EXP_CRT 1
174#define CRK_DSA_SIGN 2
175#define CRK_DSA_VERIFY 3
176#define CRK_DH_COMPUTE_KEY 4

--- 5 unchanged lines hidden (view full) ---

182#define CRF_DSA_VERIFY (1 << CRK_DSA_VERIFY)
183#define CRF_DH_COMPUTE_KEY (1 << CRK_DH_COMPUTE_KEY)
184
185/*
186 * done against open of /dev/crypto, to get a cloned descriptor.
187 * Please use F_SETFD against the cloned descriptor.
188 */
189#define CRIOGET _IOWR('c', 100, u_int32_t)
206 struct crparam crk_param[CRK_MAXPARAM];
207};
208#define CRK_ALGORITM_MIN 0
209#define CRK_MOD_EXP 0
210#define CRK_MOD_EXP_CRT 1
211#define CRK_DSA_SIGN 2
212#define CRK_DSA_VERIFY 3
213#define CRK_DH_COMPUTE_KEY 4

--- 5 unchanged lines hidden (view full) ---

219#define CRF_DSA_VERIFY (1 << CRK_DSA_VERIFY)
220#define CRF_DH_COMPUTE_KEY (1 << CRK_DH_COMPUTE_KEY)
221
222/*
223 * done against open of /dev/crypto, to get a cloned descriptor.
224 * Please use F_SETFD against the cloned descriptor.
225 */
226#define CRIOGET _IOWR('c', 100, u_int32_t)
227#define CRIOASYMFEAT CIOCASYMFEAT
228#define CRIOFINDDEV CIOCFINDDEV
190
191/* the following are done against the cloned descriptor */
192#define CIOCGSESSION _IOWR('c', 101, struct session_op)
193#define CIOCFSESSION _IOW('c', 102, u_int32_t)
194#define CIOCCRYPT _IOWR('c', 103, struct crypt_op)
195#define CIOCKEY _IOWR('c', 104, struct crypt_kop)
229
230/* the following are done against the cloned descriptor */
231#define CIOCGSESSION _IOWR('c', 101, struct session_op)
232#define CIOCFSESSION _IOW('c', 102, u_int32_t)
233#define CIOCCRYPT _IOWR('c', 103, struct crypt_op)
234#define CIOCKEY _IOWR('c', 104, struct crypt_kop)
196
197#define CIOCASYMFEAT _IOR('c', 105, u_int32_t)
235#define CIOCASYMFEAT _IOR('c', 105, u_int32_t)
236#define CIOCGSESSION2 _IOWR('c', 106, struct session2_op)
237#define CIOCKEY2 _IOWR('c', 107, struct crypt_kop)
238#define CIOCFINDDEV _IOWR('c', 108, struct crypt_find_op)
198
199struct cryptotstat {
200 struct timespec acc; /* total accumulated time */
201 struct timespec min; /* min time */
202 struct timespec max; /* max time */
203 u_int32_t count; /* number of observations */
204};
205

--- 105 unchanged lines hidden (view full) ---

311
312struct cryptkop {
313 TAILQ_ENTRY(cryptkop) krp_next;
314
315 u_int krp_op; /* ie. CRK_MOD_EXP or other */
316 u_int krp_status; /* return status */
317 u_short krp_iparams; /* # of input parameters */
318 u_short krp_oparams; /* # of output parameters */
239
240struct cryptotstat {
241 struct timespec acc; /* total accumulated time */
242 struct timespec min; /* min time */
243 struct timespec max; /* max time */
244 u_int32_t count; /* number of observations */
245};
246

--- 105 unchanged lines hidden (view full) ---

352
353struct cryptkop {
354 TAILQ_ENTRY(cryptkop) krp_next;
355
356 u_int krp_op; /* ie. CRK_MOD_EXP or other */
357 u_int krp_status; /* return status */
358 u_short krp_iparams; /* # of input parameters */
359 u_short krp_oparams; /* # of output parameters */
360 u_int krp_crid; /* desired device, etc. */
319 u_int32_t krp_hid;
320 struct crparam krp_param[CRK_MAXPARAM]; /* kvm */
321 int (*krp_callback)(struct cryptkop *);
322};
323
324/*
361 u_int32_t krp_hid;
362 struct crparam krp_param[CRK_MAXPARAM]; /* kvm */
363 int (*krp_callback)(struct cryptkop *);
364};
365
366/*
325 * Crypto capabilities structure.
326 *
327 * Synchronization:
328 * (d) - protected by CRYPTO_DRIVER_LOCK()
329 * (q) - protected by CRYPTO_Q_LOCK()
330 * Not tagged fields are read-only.
331 */
332struct cryptocap {
333 u_int32_t cc_sessions; /* (d) number of sessions */
334 u_int32_t cc_koperations; /* (d) number os asym operations */
335
336 /*
337 * Largest possible operator length (in bits) for each type of
338 * encryption algorithm.
339 */
340 u_int16_t cc_max_op_len[CRYPTO_ALGORITHM_MAX + 1];
341
342 u_int8_t cc_alg[CRYPTO_ALGORITHM_MAX + 1];
343
344 u_int8_t cc_kalg[CRK_ALGORITHM_MAX + 1];
345
346 u_int8_t cc_flags; /* (d) flags */
347#define CRYPTOCAP_F_CLEANUP 0x01 /* needs resource cleanup */
348#define CRYPTOCAP_F_SOFTWARE 0x02 /* software implementation */
349#define CRYPTOCAP_F_SYNC 0x04 /* operates synchronously */
350 u_int8_t cc_qblocked; /* (q) symmetric q blocked */
351 u_int8_t cc_kqblocked; /* (q) asymmetric q blocked */
352
353 void *cc_arg; /* callback argument */
354 int (*cc_newsession)(void*, u_int32_t*, struct cryptoini*);
355 int (*cc_process)(void*, struct cryptop *, int);
356 int (*cc_freesession)(void*, u_int64_t);
357 void *cc_karg; /* callback argument */
358 int (*cc_kprocess) (void*, struct cryptkop *, int);
359};
360
361/*
362 * Session ids are 64 bits. The lower 32 bits contain a "local id" which
363 * is a driver-private session identifier. The upper 32 bits contain a
364 * "hardware id" used by the core crypto code to identify the driver and
365 * a copy of the driver's capabilities that can be used by client code to
366 * optimize operation.
367 */
367 * Session ids are 64 bits. The lower 32 bits contain a "local id" which
368 * is a driver-private session identifier. The upper 32 bits contain a
369 * "hardware id" used by the core crypto code to identify the driver and
370 * a copy of the driver's capabilities that can be used by client code to
371 * optimize operation.
372 */
368#define CRYPTO_SESID2HID(_sid) (((_sid) >> 32) & 0xffffff)
369#define CRYPTO_SESID2CAPS(_sid) (((_sid) >> 56) & 0xff)
373#define CRYPTO_SESID2HID(_sid) (((_sid) >> 32) & 0x00ffffff)
374#define CRYPTO_SESID2CAPS(_sid) (((_sid) >> 32) & 0xff000000)
370#define CRYPTO_SESID2LID(_sid) (((u_int32_t) (_sid)) & 0xffffffff)
371
372MALLOC_DECLARE(M_CRYPTO_DATA);
373
374extern int crypto_newsession(u_int64_t *sid, struct cryptoini *cri, int hard);
375extern int crypto_freesession(u_int64_t sid);
375#define CRYPTO_SESID2LID(_sid) (((u_int32_t) (_sid)) & 0xffffffff)
376
377MALLOC_DECLARE(M_CRYPTO_DATA);
378
379extern int crypto_newsession(u_int64_t *sid, struct cryptoini *cri, int hard);
380extern int crypto_freesession(u_int64_t sid);
376extern int32_t crypto_get_driverid(u_int32_t flags);
381#define CRYPTOCAP_F_HARDWARE CRYPTO_FLAG_HARDWARE
382#define CRYPTOCAP_F_SOFTWARE CRYPTO_FLAG_SOFTWARE
383#define CRYPTOCAP_F_SYNC 0x04000000 /* operates synchronously */
384extern int32_t crypto_get_driverid(device_t dev, int flags);
385extern int crypto_find_driver(const char *);
386extern device_t crypto_find_device_byhid(int hid);
387extern int crypto_getcaps(int hid);
377extern int crypto_register(u_int32_t driverid, int alg, u_int16_t maxoplen,
388extern int crypto_register(u_int32_t driverid, int alg, u_int16_t maxoplen,
378 u_int32_t flags,
379 int (*newses)(void*, u_int32_t*, struct cryptoini*),
380 int (*freeses)(void*, u_int64_t),
381 int (*process)(void*, struct cryptop *, int),
382 void *arg);
383extern int crypto_kregister(u_int32_t, int, u_int32_t,
384 int (*)(void*, struct cryptkop *, int),
385 void *arg);
389 u_int32_t flags);
390extern int crypto_kregister(u_int32_t, int, u_int32_t);
386extern int crypto_unregister(u_int32_t driverid, int alg);
387extern int crypto_unregister_all(u_int32_t driverid);
388extern int crypto_dispatch(struct cryptop *crp);
389extern int crypto_kdispatch(struct cryptkop *);
390#define CRYPTO_SYMQ 0x1
391#define CRYPTO_ASYMQ 0x2
392extern int crypto_unblock(u_int32_t, int);
393extern void crypto_done(struct cryptop *crp);

--- 31 unchanged lines hidden --- 		391extern int crypto_unregister(u_int32_t driverid, int alg);
392extern int crypto_unregister_all(u_int32_t driverid);
393extern int crypto_dispatch(struct cryptop *crp);
394extern int crypto_kdispatch(struct cryptkop *);
395#define CRYPTO_SYMQ 0x1
396#define CRYPTO_ASYMQ 0x2
397extern int crypto_unblock(u_int32_t, int);
398extern void crypto_done(struct cryptop *crp);

--- 31 unchanged lines hidden ---