Lines Matching refs:cc
74 struct crypt_config *cc;
102 int (*ctr)(struct crypt_config *cc, struct dm_target *ti,
104 void (*dtr)(struct crypt_config *cc);
105 int (*init)(struct crypt_config *cc);
106 int (*wipe)(struct crypt_config *cc);
107 int (*generator)(struct crypt_config *cc, u8 *iv,
109 int (*post)(struct crypt_config *cc, u8 *iv,
244 static struct scatterlist *crypt_get_sg_data(struct crypt_config *cc,
247 static bool crypt_integrity_aead(struct crypt_config *cc);
252 static struct crypto_skcipher *any_tfm(struct crypt_config *cc)
254 return cc->cipher_tfm.tfms[0];
257 static struct crypto_aead *any_tfm_aead(struct crypt_config *cc)
259 return cc->cipher_tfm.tfms_aead[0];
318 static int crypt_iv_plain_gen(struct crypt_config *cc, u8 *iv,
321 memset(iv, 0, cc->iv_size);
327 static int crypt_iv_plain64_gen(struct crypt_config *cc, u8 *iv,
330 memset(iv, 0, cc->iv_size);
336 static int crypt_iv_plain64be_gen(struct crypt_config *cc, u8 *iv,
339 memset(iv, 0, cc->iv_size);
341 *(__be64 *)&iv[cc->iv_size - sizeof(u64)] = cpu_to_be64(dmreq->iv_sector);
346 static int crypt_iv_essiv_gen(struct crypt_config *cc, u8 *iv,
353 memset(iv, 0, cc->iv_size);
359 static int crypt_iv_benbi_ctr(struct crypt_config *cc, struct dm_target *ti,
365 if (crypt_integrity_aead(cc))
366 bs = crypto_aead_blocksize(any_tfm_aead(cc));
368 bs = crypto_skcipher_blocksize(any_tfm(cc));
385 cc->iv_gen_private.benbi.shift = 9 - log;
390 static void crypt_iv_benbi_dtr(struct crypt_config *cc)
394 static int crypt_iv_benbi_gen(struct crypt_config *cc, u8 *iv,
399 memset(iv, 0, cc->iv_size - sizeof(u64)); /* rest is cleared below */
401 val = cpu_to_be64(((u64)dmreq->iv_sector << cc->iv_gen_private.benbi.shift) + 1);
402 put_unaligned(val, (__be64 *)(iv + cc->iv_size - sizeof(u64)));
407 static int crypt_iv_null_gen(struct crypt_config *cc, u8 *iv,
410 memset(iv, 0, cc->iv_size);
415 static void crypt_iv_lmk_dtr(struct crypt_config *cc)
417 struct iv_lmk_private *lmk = &cc->iv_gen_private.lmk;
427 static int crypt_iv_lmk_ctr(struct crypt_config *cc, struct dm_target *ti,
430 struct iv_lmk_private *lmk = &cc->iv_gen_private.lmk;
432 if (cc->sector_size != (1 << SECTOR_SHIFT)) {
445 if (cc->key_parts == cc->tfms_count) {
452 crypt_iv_lmk_dtr(cc);
460 static int crypt_iv_lmk_init(struct crypt_config *cc)
462 struct iv_lmk_private *lmk = &cc->iv_gen_private.lmk;
463 int subkey_size = cc->key_size / cc->key_parts;
467 memcpy(lmk->seed, cc->key + (cc->tfms_count * subkey_size),
473 static int crypt_iv_lmk_wipe(struct crypt_config *cc)
475 struct iv_lmk_private *lmk = &cc->iv_gen_private.lmk;
483 static int crypt_iv_lmk_one(struct crypt_config *cc, u8 *iv,
487 struct iv_lmk_private *lmk = &cc->iv_gen_private.lmk;
526 memcpy(iv, &md5state.hash, cc->iv_size);
531 static int crypt_iv_lmk_gen(struct crypt_config *cc, u8 *iv,
539 sg = crypt_get_sg_data(cc, dmreq->sg_in);
541 r = crypt_iv_lmk_one(cc, iv, dmreq, src + sg->offset);
544 memset(iv, 0, cc->iv_size);
549 static int crypt_iv_lmk_post(struct crypt_config *cc, u8 *iv,
559 sg = crypt_get_sg_data(cc, dmreq->sg_out);
561 r = crypt_iv_lmk_one(cc, iv, dmreq, dst + sg->offset);
565 crypto_xor(dst + sg->offset, iv, cc->iv_size);
571 static void crypt_iv_tcw_dtr(struct crypt_config *cc)
573 struct iv_tcw_private *tcw = &cc->iv_gen_private.tcw;
585 static int crypt_iv_tcw_ctr(struct crypt_config *cc, struct dm_target *ti,
588 struct iv_tcw_private *tcw = &cc->iv_gen_private.tcw;
590 if (cc->sector_size != (1 << SECTOR_SHIFT)) {
595 if (cc->key_size <= (cc->iv_size + TCW_WHITENING_SIZE)) {
607 tcw->iv_seed = kzalloc(cc->iv_size, GFP_KERNEL);
610 crypt_iv_tcw_dtr(cc);
618 static int crypt_iv_tcw_init(struct crypt_config *cc)
620 struct iv_tcw_private *tcw = &cc->iv_gen_private.tcw;
621 int key_offset = cc->key_size - cc->iv_size - TCW_WHITENING_SIZE;
623 memcpy(tcw->iv_seed, &cc->key[key_offset], cc->iv_size);
624 memcpy(tcw->whitening, &cc->key[key_offset + cc->iv_size],
630 static int crypt_iv_tcw_wipe(struct crypt_config *cc)
632 struct iv_tcw_private *tcw = &cc->iv_gen_private.tcw;
634 memset(tcw->iv_seed, 0, cc->iv_size);
640 static int crypt_iv_tcw_whitening(struct crypt_config *cc,
644 struct iv_tcw_private *tcw = &cc->iv_gen_private.tcw;
672 static int crypt_iv_tcw_gen(struct crypt_config *cc, u8 *iv,
676 struct iv_tcw_private *tcw = &cc->iv_gen_private.tcw;
683 sg = crypt_get_sg_data(cc, dmreq->sg_in);
685 r = crypt_iv_tcw_whitening(cc, dmreq, src + sg->offset);
691 if (cc->iv_size > 8)
693 cc->iv_size - 8);
698 static int crypt_iv_tcw_post(struct crypt_config *cc, u8 *iv,
709 sg = crypt_get_sg_data(cc, dmreq->sg_out);
711 r = crypt_iv_tcw_whitening(cc, dmreq, dst + sg->offset);
717 static int crypt_iv_random_gen(struct crypt_config *cc, u8 *iv,
721 get_random_bytes(iv, cc->iv_size);
725 static int crypt_iv_eboiv_ctr(struct crypt_config *cc, struct dm_target *ti,
728 if (crypt_integrity_aead(cc)) {
733 if (crypto_skcipher_blocksize(any_tfm(cc)) != cc->iv_size) {
741 static int crypt_iv_eboiv_gen(struct crypt_config *cc, u8 *iv,
744 struct crypto_skcipher *tfm = any_tfm(cc);
755 req = kmalloc(reqsize + cc->iv_size, GFP_NOIO);
762 memset(buf, 0, cc->iv_size);
763 *(__le64 *)buf = cpu_to_le64(dmreq->iv_sector * cc->sector_size);
765 sg_init_one(&src, page_address(ZERO_PAGE(0)), cc->iv_size);
766 sg_init_one(&dst, iv, cc->iv_size);
767 skcipher_request_set_crypt(req, &src, &dst, cc->iv_size, buf);
775 static void crypt_iv_elephant_dtr(struct crypt_config *cc)
777 struct iv_elephant_private *elephant = &cc->iv_gen_private.elephant;
783 static int crypt_iv_elephant_ctr(struct crypt_config *cc, struct dm_target *ti,
786 struct iv_elephant_private *elephant = &cc->iv_gen_private.elephant;
797 r = crypt_iv_eboiv_ctr(cc, ti, NULL);
799 crypt_iv_elephant_dtr(cc);
947 static int crypt_iv_elephant(struct crypt_config *cc, struct dm_crypt_request *dmreq)
949 struct iv_elephant_private *elephant = &cc->iv_gen_private.elephant;
965 *(__le64 *)es = cpu_to_le64(dmreq->iv_sector * cc->sector_size);
983 sg = crypt_get_sg_data(cc, dmreq->sg_out);
989 sg2 = crypt_get_sg_data(cc, dmreq->sg_in);
991 memcpy(data_offset, data2 + sg2->offset, cc->sector_size);
996 diffuser_disk_to_cpu((u32 *)data_offset, cc->sector_size / sizeof(u32));
997 diffuser_b_decrypt((u32 *)data_offset, cc->sector_size / sizeof(u32));
998 diffuser_a_decrypt((u32 *)data_offset, cc->sector_size / sizeof(u32));
999 diffuser_cpu_to_disk((__le32 *)data_offset, cc->sector_size / sizeof(u32));
1002 for (i = 0; i < (cc->sector_size / 32); i++)
1006 diffuser_disk_to_cpu((u32 *)data_offset, cc->sector_size / sizeof(u32));
1007 diffuser_a_encrypt((u32 *)data_offset, cc->sector_size / sizeof(u32));
1008 diffuser_b_encrypt((u32 *)data_offset, cc->sector_size / sizeof(u32));
1009 diffuser_cpu_to_disk((__le32 *)data_offset, cc->sector_size / sizeof(u32));
1020 static int crypt_iv_elephant_gen(struct crypt_config *cc, u8 *iv,
1026 r = crypt_iv_elephant(cc, dmreq);
1031 return crypt_iv_eboiv_gen(cc, iv, dmreq);
1034 static int crypt_iv_elephant_post(struct crypt_config *cc, u8 *iv,
1038 return crypt_iv_elephant(cc, dmreq);
1043 static int crypt_iv_elephant_init(struct crypt_config *cc)
1045 struct iv_elephant_private *elephant = &cc->iv_gen_private.elephant;
1046 int key_offset = cc->key_size - cc->key_extra_size;
1048 return crypto_skcipher_setkey(elephant->tfm, &cc->key[key_offset], cc->key_extra_size);
1051 static int crypt_iv_elephant_wipe(struct crypt_config *cc)
1053 struct iv_elephant_private *elephant = &cc->iv_gen_private.elephant;
1056 memset(key, 0, cc->key_extra_size);
1057 return crypto_skcipher_setkey(elephant->tfm, key, cc->key_extra_size);
1125 static bool crypt_integrity_aead(struct crypt_config *cc)
1127 return test_bit(CRYPT_MODE_INTEGRITY_AEAD, &cc->cipher_flags);
1130 static bool crypt_integrity_hmac(struct crypt_config *cc)
1132 return crypt_integrity_aead(cc) && cc->key_mac_size;
1136 static struct scatterlist *crypt_get_sg_data(struct crypt_config *cc,
1139 if (unlikely(crypt_integrity_aead(cc)))
1151 if (!bio_sectors(bio) || !io->cc->on_disk_tag_size)
1158 tag_len = io->cc->on_disk_tag_size * (bio_sectors(bio) >> io->cc->sector_shift);
1160 bip->bip_iter.bi_sector = io->cc->start + io->sector;
1170 static int crypt_integrity_ctr(struct crypt_config *cc, struct dm_target *ti)
1173 struct blk_integrity *bi = blk_get_integrity(cc->dev->bdev->bd_disk);
1182 if (bi->tag_size != cc->on_disk_tag_size ||
1183 bi->tuple_size != cc->on_disk_tag_size) {
1187 if (1 << bi->interval_exp != cc->sector_size) {
1192 if (crypt_integrity_aead(cc)) {
1193 cc->integrity_tag_size = cc->on_disk_tag_size - cc->integrity_iv_size;
1195 cc->integrity_tag_size, cc->integrity_iv_size);
1197 if (crypto_aead_setauthsize(any_tfm_aead(cc), cc->integrity_tag_size)) {
1201 } else if (cc->integrity_iv_size)
1203 cc->integrity_iv_size);
1205 if ((cc->integrity_tag_size + cc->integrity_iv_size) != bi->tag_size) {
1217 static void crypt_convert_init(struct crypt_config *cc,
1228 ctx->cc_sector = sector + cc->iv_offset;
1232 static struct dm_crypt_request *dmreq_of_req(struct crypt_config *cc,
1235 return (struct dm_crypt_request *)((char *)req + cc->dmreq_start);
1238 static void *req_of_dmreq(struct crypt_config *cc, struct dm_crypt_request *dmreq)
1240 return (void *)((char *)dmreq - cc->dmreq_start);
1243 static u8 *iv_of_dmreq(struct crypt_config *cc,
1246 if (crypt_integrity_aead(cc))
1248 crypto_aead_alignmask(any_tfm_aead(cc)) + 1);
1251 crypto_skcipher_alignmask(any_tfm(cc)) + 1);
1254 static u8 *org_iv_of_dmreq(struct crypt_config *cc,
1257 return iv_of_dmreq(cc, dmreq) + cc->iv_size;
1260 static __le64 *org_sector_of_dmreq(struct crypt_config *cc,
1263 u8 *ptr = iv_of_dmreq(cc, dmreq) + cc->iv_size + cc->iv_size;
1268 static unsigned int *org_tag_of_dmreq(struct crypt_config *cc,
1271 u8 *ptr = iv_of_dmreq(cc, dmreq) + cc->iv_size +
1272 cc->iv_size + sizeof(uint64_t);
1277 static void *tag_from_dmreq(struct crypt_config *cc,
1283 return &io->integrity_metadata[*org_tag_of_dmreq(cc, dmreq) *
1284 cc->on_disk_tag_size];
1287 static void *iv_tag_from_dmreq(struct crypt_config *cc,
1290 return tag_from_dmreq(cc, dmreq) + cc->integrity_tag_size;
1293 static int crypt_convert_block_aead(struct crypt_config *cc,
1305 BUG_ON(cc->integrity_iv_size && cc->integrity_iv_size != cc->iv_size);
1308 if (unlikely(bv_in.bv_len & (cc->sector_size - 1)))
1311 dmreq = dmreq_of_req(cc, req);
1313 if (test_bit(CRYPT_IV_LARGE_SECTORS, &cc->cipher_flags))
1314 dmreq->iv_sector >>= cc->sector_shift;
1317 *org_tag_of_dmreq(cc, dmreq) = tag_offset;
1319 sector = org_sector_of_dmreq(cc, dmreq);
1320 *sector = cpu_to_le64(ctx->cc_sector - cc->iv_offset);
1322 iv = iv_of_dmreq(cc, dmreq);
1323 org_iv = org_iv_of_dmreq(cc, dmreq);
1324 tag = tag_from_dmreq(cc, dmreq);
1325 tag_iv = iv_tag_from_dmreq(cc, dmreq);
1334 sg_set_buf(&dmreq->sg_in[1], org_iv, cc->iv_size);
1335 sg_set_page(&dmreq->sg_in[2], bv_in.bv_page, cc->sector_size, bv_in.bv_offset);
1336 sg_set_buf(&dmreq->sg_in[3], tag, cc->integrity_tag_size);
1340 sg_set_buf(&dmreq->sg_out[1], org_iv, cc->iv_size);
1341 sg_set_page(&dmreq->sg_out[2], bv_out.bv_page, cc->sector_size, bv_out.bv_offset);
1342 sg_set_buf(&dmreq->sg_out[3], tag, cc->integrity_tag_size);
1344 if (cc->iv_gen_ops) {
1346 if (cc->integrity_iv_size && bio_data_dir(ctx->bio_in) != WRITE) {
1347 memcpy(org_iv, tag_iv, cc->iv_size);
1349 r = cc->iv_gen_ops->generator(cc, org_iv, dmreq);
1353 if (cc->integrity_iv_size)
1354 memcpy(tag_iv, org_iv, cc->iv_size);
1357 memcpy(iv, org_iv, cc->iv_size);
1360 aead_request_set_ad(req, sizeof(uint64_t) + cc->iv_size);
1363 cc->sector_size, iv);
1365 if (cc->integrity_tag_size + cc->integrity_iv_size != cc->on_disk_tag_size)
1366 memset(tag + cc->integrity_tag_size + cc->integrity_iv_size, 0,
1367 cc->on_disk_tag_size - (cc->integrity_tag_size + cc->integrity_iv_size));
1370 cc->sector_size + cc->integrity_tag_size, iv);
1386 if (!r && cc->iv_gen_ops && cc->iv_gen_ops->post)
1387 r = cc->iv_gen_ops->post(cc, org_iv, dmreq);
1389 bio_advance_iter(ctx->bio_in, &ctx->iter_in, cc->sector_size);
1390 bio_advance_iter(ctx->bio_out, &ctx->iter_out, cc->sector_size);
1395 static int crypt_convert_block_skcipher(struct crypt_config *cc,
1409 if (unlikely(bv_in.bv_len & (cc->sector_size - 1)))
1412 dmreq = dmreq_of_req(cc, req);
1414 if (test_bit(CRYPT_IV_LARGE_SECTORS, &cc->cipher_flags))
1415 dmreq->iv_sector >>= cc->sector_shift;
1418 *org_tag_of_dmreq(cc, dmreq) = tag_offset;
1420 iv = iv_of_dmreq(cc, dmreq);
1421 org_iv = org_iv_of_dmreq(cc, dmreq);
1422 tag_iv = iv_tag_from_dmreq(cc, dmreq);
1424 sector = org_sector_of_dmreq(cc, dmreq);
1425 *sector = cpu_to_le64(ctx->cc_sector - cc->iv_offset);
1432 sg_set_page(sg_in, bv_in.bv_page, cc->sector_size, bv_in.bv_offset);
1435 sg_set_page(sg_out, bv_out.bv_page, cc->sector_size, bv_out.bv_offset);
1437 if (cc->iv_gen_ops) {
1439 if (cc->integrity_iv_size && bio_data_dir(ctx->bio_in) != WRITE) {
1440 memcpy(org_iv, tag_iv, cc->integrity_iv_size);
1442 r = cc->iv_gen_ops->generator(cc, org_iv, dmreq);
1446 if (test_bit(CRYPT_ENCRYPT_PREPROCESS, &cc->cipher_flags))
1449 if (cc->integrity_iv_size)
1450 memcpy(tag_iv, org_iv, cc->integrity_iv_size);
1453 memcpy(iv, org_iv, cc->iv_size);
1456 skcipher_request_set_crypt(req, sg_in, sg_out, cc->sector_size, iv);
1463 if (!r && cc->iv_gen_ops && cc->iv_gen_ops->post)
1464 r = cc->iv_gen_ops->post(cc, org_iv, dmreq);
1466 bio_advance_iter(ctx->bio_in, &ctx->iter_in, cc->sector_size);
1467 bio_advance_iter(ctx->bio_out, &ctx->iter_out, cc->sector_size);
1474 static int crypt_alloc_req_skcipher(struct crypt_config *cc,
1477 unsigned int key_index = ctx->cc_sector & (cc->tfms_count - 1);
1480 ctx->r.req = mempool_alloc(&cc->req_pool, in_interrupt() ? GFP_ATOMIC : GFP_NOIO);
1485 skcipher_request_set_tfm(ctx->r.req, cc->cipher_tfm.tfms[key_index]);
1493 kcryptd_async_done, dmreq_of_req(cc, ctx->r.req));
1498 static int crypt_alloc_req_aead(struct crypt_config *cc,
1502 ctx->r.req_aead = mempool_alloc(&cc->req_pool, in_interrupt() ? GFP_ATOMIC : GFP_NOIO);
1507 aead_request_set_tfm(ctx->r.req_aead, cc->cipher_tfm.tfms_aead[0]);
1515 kcryptd_async_done, dmreq_of_req(cc, ctx->r.req_aead));
1520 static int crypt_alloc_req(struct crypt_config *cc,
1523 if (crypt_integrity_aead(cc))
1524 return crypt_alloc_req_aead(cc, ctx);
1526 return crypt_alloc_req_skcipher(cc, ctx);
1529 static void crypt_free_req_skcipher(struct crypt_config *cc,
1532 struct dm_crypt_io *io = dm_per_bio_data(base_bio, cc->per_bio_data_size);
1535 mempool_free(req, &cc->req_pool);
1538 static void crypt_free_req_aead(struct crypt_config *cc,
1541 struct dm_crypt_io *io = dm_per_bio_data(base_bio, cc->per_bio_data_size);
1544 mempool_free(req, &cc->req_pool);
1547 static void crypt_free_req(struct crypt_config *cc, void *req, struct bio *base_bio)
1549 if (crypt_integrity_aead(cc))
1550 crypt_free_req_aead(cc, req, base_bio);
1552 crypt_free_req_skcipher(cc, req, base_bio);
1558 static blk_status_t crypt_convert(struct crypt_config *cc,
1562 unsigned int sector_step = cc->sector_size >> SECTOR_SHIFT;
1575 r = crypt_alloc_req(cc, ctx);
1583 if (crypt_integrity_aead(cc))
1584 r = crypt_convert_block_aead(cc, ctx, ctx->r.req_aead, tag_offset);
1586 r = crypt_convert_block_skcipher(cc, ctx, ctx->r.req, tag_offset);
1652 static void crypt_free_buffer_pages(struct crypt_config *cc, struct bio *clone);
1676 struct crypt_config *cc = io->cc;
1685 mutex_lock(&cc->bio_alloc_lock);
1687 clone = bio_alloc_bioset(cc->dev->bdev, nr_iovecs, io->base_bio->bi_opf,
1688 GFP_NOIO, &cc->bs);
1702 if (unlikely(percpu_counter_read_positive(&cc->n_allocated_pages) +
1709 percpu_counter_add(&cc->n_allocated_pages, 1 << order);
1716 pages = mempool_alloc(&cc->page_pool, gfp_mask);
1718 crypt_free_buffer_pages(cc, clone);
1733 crypt_free_buffer_pages(cc, clone);
1739 mutex_unlock(&cc->bio_alloc_lock);
1744 static void crypt_free_buffer_pages(struct crypt_config *cc, struct bio *clone)
1751 percpu_counter_sub(&cc->n_allocated_pages,
1755 mempool_free(&fi.folio->page, &cc->page_pool);
1761 static void crypt_io_init(struct dm_crypt_io *io, struct crypt_config *cc,
1764 io->cc = cc;
1789 struct crypt_config *cc = io->cc;
1797 cc->on_disk_tag_size && bio_data_dir(base_bio) == READ) {
1806 crypt_free_req(cc, io->ctx.r.req, base_bio);
1809 mempool_free(io->integrity_metadata, &io->cc->tag_pool);
1838 struct crypt_config *cc = io->cc;
1851 crypt_free_buffer_pages(cc, clone);
1870 struct crypt_config *cc = io->cc;
1882 clone->bi_iter.bi_sector = cc->start + io->sector;
1883 crypt_convert_init(cc, &io->ctx, clone, clone, io->sector);
1895 clone = bio_alloc_clone(cc->dev->bdev, io->base_bio, gfp, &cc->bs);
1903 clone->bi_iter.bi_sector = cc->start + io->sector;
1927 struct crypt_config *cc = io->cc;
1930 queue_work(cc->io_queue, &io->work);
1944 struct crypt_config *cc = data;
1951 spin_lock_irq(&cc->write_thread_lock);
1954 if (!RB_EMPTY_ROOT(&cc->write_tree))
1959 spin_unlock_irq(&cc->write_thread_lock);
1968 spin_lock_irq(&cc->write_thread_lock);
1972 write_tree = cc->write_tree;
1973 cc->write_tree = RB_ROOT;
1974 spin_unlock_irq(&cc->write_thread_lock);
1997 struct crypt_config *cc = io->cc;
2003 crypt_free_buffer_pages(cc, clone);
2012 clone->bi_iter.bi_sector = cc->start + io->sector;
2014 if ((likely(!async) && test_bit(DM_CRYPT_NO_OFFLOAD, &cc->flags)) ||
2015 test_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags)) {
2020 spin_lock_irqsave(&cc->write_thread_lock, flags);
2021 if (RB_EMPTY_ROOT(&cc->write_tree))
2022 wake_up_process(cc->write_thread);
2023 rbp = &cc->write_tree.rb_node;
2034 rb_insert_color(&io->rb_node, &cc->write_tree);
2035 spin_unlock_irqrestore(&cc->write_thread_lock, flags);
2038 static bool kcryptd_crypt_write_inline(struct crypt_config *cc,
2042 if (!test_bit(DM_CRYPT_WRITE_INLINE, &cc->flags))
2062 struct crypt_config *cc = io->cc;
2071 r = crypt_convert(cc, &io->ctx, true, false);
2075 if (!crypt_finished && kcryptd_crypt_write_inline(cc, ctx)) {
2092 struct crypt_config *cc = io->cc;
2103 crypt_convert_init(cc, ctx, NULL, io->base_bio, sector);
2114 if (crypt_integrity_aead(cc)) {
2123 r = crypt_convert(cc, ctx,
2124 test_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags), true);
2132 queue_work(cc->crypt_queue, &io->work);
2138 if (!crypt_finished && kcryptd_crypt_write_inline(cc, ctx)) {
2161 crypt_free_buffer_pages(io->cc, io->ctx.bio_in);
2170 struct crypt_config *cc = io->cc;
2176 r = crypt_convert(cc, &io->ctx, true, false);
2188 struct crypt_config *cc = io->cc;
2194 io->ctx.cc_sector = io->sector + cc->iv_offset;
2195 r = crypt_convert(cc, &io->ctx,
2196 test_bit(DM_CRYPT_NO_READ_WORKQUEUE, &cc->flags), true);
2198 crypt_convert_init(cc, &io->ctx, io->base_bio, io->base_bio,
2201 r = crypt_convert(cc, &io->ctx,
2202 test_bit(DM_CRYPT_NO_READ_WORKQUEUE, &cc->flags), true);
2210 queue_work(cc->crypt_queue, &io->work);
2227 struct crypt_config *cc = io->cc;
2239 if (!error && cc->iv_gen_ops && cc->iv_gen_ops->post)
2240 error = cc->iv_gen_ops->post(cc, org_iv_of_dmreq(cc, dmreq), dmreq);
2243 sector_t s = le64_to_cpu(*org_sector_of_dmreq(cc, dmreq));
2256 crypt_free_req(cc, req_of_dmreq(cc, dmreq), io->base_bio);
2270 if (kcryptd_crypt_write_inline(cc, ctx)) {
2290 struct crypt_config *cc = io->cc;
2292 if ((bio_data_dir(io->base_bio) == READ && test_bit(DM_CRYPT_NO_READ_WORKQUEUE, &cc->flags)) ||
2293 (bio_data_dir(io->base_bio) == WRITE && test_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags))) {
2310 queue_work(cc->crypt_queue, &io->work);
2313 static void crypt_free_tfms_aead(struct crypt_config *cc)
2315 if (!cc->cipher_tfm.tfms_aead)
2318 if (cc->cipher_tfm.tfms_aead[0] && !IS_ERR(cc->cipher_tfm.tfms_aead[0])) {
2319 crypto_free_aead(cc->cipher_tfm.tfms_aead[0]);
2320 cc->cipher_tfm.tfms_aead[0] = NULL;
2323 kfree(cc->cipher_tfm.tfms_aead);
2324 cc->cipher_tfm.tfms_aead = NULL;
2327 static void crypt_free_tfms_skcipher(struct crypt_config *cc)
2331 if (!cc->cipher_tfm.tfms)
2334 for (i = 0; i < cc->tfms_count; i++)
2335 if (cc->cipher_tfm.tfms[i] && !IS_ERR(cc->cipher_tfm.tfms[i])) {
2336 crypto_free_skcipher(cc->cipher_tfm.tfms[i]);
2337 cc->cipher_tfm.tfms[i] = NULL;
2340 kfree(cc->cipher_tfm.tfms);
2341 cc->cipher_tfm.tfms = NULL;
2344 static void crypt_free_tfms(struct crypt_config *cc)
2346 if (crypt_integrity_aead(cc))
2347 crypt_free_tfms_aead(cc);
2349 crypt_free_tfms_skcipher(cc);
2352 static int crypt_alloc_tfms_skcipher(struct crypt_config *cc, char *ciphermode)
2357 cc->cipher_tfm.tfms = kcalloc(cc->tfms_count,
2360 if (!cc->cipher_tfm.tfms)
2363 for (i = 0; i < cc->tfms_count; i++) {
2364 cc->cipher_tfm.tfms[i] = crypto_alloc_skcipher(ciphermode, 0,
2366 if (IS_ERR(cc->cipher_tfm.tfms[i])) {
2367 err = PTR_ERR(cc->cipher_tfm.tfms[i]);
2368 crypt_free_tfms(cc);
2379 crypto_skcipher_alg(any_tfm(cc))->base.cra_driver_name);
2383 static int crypt_alloc_tfms_aead(struct crypt_config *cc, char *ciphermode)
2387 cc->cipher_tfm.tfms = kmalloc(sizeof(struct crypto_aead *), GFP_KERNEL);
2388 if (!cc->cipher_tfm.tfms)
2391 cc->cipher_tfm.tfms_aead[0] = crypto_alloc_aead(ciphermode, 0,
2393 if (IS_ERR(cc->cipher_tfm.tfms_aead[0])) {
2394 err = PTR_ERR(cc->cipher_tfm.tfms_aead[0]);
2395 crypt_free_tfms(cc);
2400 crypto_aead_alg(any_tfm_aead(cc))->base.cra_driver_name);
2404 static int crypt_alloc_tfms(struct crypt_config *cc, char *ciphermode)
2406 if (crypt_integrity_aead(cc))
2407 return crypt_alloc_tfms_aead(cc, ciphermode);
2409 return crypt_alloc_tfms_skcipher(cc, ciphermode);
2412 static unsigned int crypt_subkey_size(struct crypt_config *cc)
2414 return (cc->key_size - cc->key_extra_size) >> ilog2(cc->tfms_count);
2417 static unsigned int crypt_authenckey_size(struct crypt_config *cc)
2419 return crypt_subkey_size(cc) + RTA_SPACE(sizeof(struct crypto_authenc_key_param));
2425 * This funcion converts cc->key to this special format.
2444 static int crypt_setkey(struct crypt_config *cc)
2450 subkey_size = crypt_subkey_size(cc);
2452 if (crypt_integrity_hmac(cc)) {
2453 if (subkey_size < cc->key_mac_size)
2456 crypt_copy_authenckey(cc->authenc_key, cc->key,
2457 subkey_size - cc->key_mac_size,
2458 cc->key_mac_size);
2461 for (i = 0; i < cc->tfms_count; i++) {
2462 if (crypt_integrity_hmac(cc))
2463 r = crypto_aead_setkey(cc->cipher_tfm.tfms_aead[i],
2464 cc->authenc_key, crypt_authenckey_size(cc));
2465 else if (crypt_integrity_aead(cc))
2466 r = crypto_aead_setkey(cc->cipher_tfm.tfms_aead[i],
2467 cc->key + (i * subkey_size),
2470 r = crypto_skcipher_setkey(cc->cipher_tfm.tfms[i],
2471 cc->key + (i * subkey_size),
2477 if (crypt_integrity_hmac(cc))
2478 memzero_explicit(cc->authenc_key, crypt_authenckey_size(cc));
2493 static int set_key_user(struct crypt_config *cc, struct key *key)
2501 if (cc->key_size != ukp->datalen)
2504 memcpy(cc->key, ukp->data, cc->key_size);
2509 static int set_key_encrypted(struct crypt_config *cc, struct key *key)
2517 if (cc->key_size != ekp->decrypted_datalen)
2520 memcpy(cc->key, ekp->decrypted_data, cc->key_size);
2525 static int set_key_trusted(struct crypt_config *cc, struct key *key)
2533 if (cc->key_size != tkp->key_len)
2536 memcpy(cc->key, tkp->key, cc->key_size);
2541 static int crypt_set_keyring_key(struct crypt_config *cc, const char *key_string)
2547 int (*set_key)(struct crypt_config *cc, struct key *key);
2593 ret = set_key(cc, key);
2605 clear_bit(DM_CRYPT_KEY_VALID, &cc->flags);
2607 ret = crypt_setkey(cc);
2610 set_bit(DM_CRYPT_KEY_VALID, &cc->flags);
2611 kfree_sensitive(cc->key_string);
2612 cc->key_string = new_key_string;
2644 static int crypt_set_keyring_key(struct crypt_config *cc, const char *key_string)
2656 static int crypt_set_key(struct crypt_config *cc, char *key)
2662 if (!cc->key_size && strcmp(key, "-"))
2667 r = crypt_set_keyring_key(cc, key + 1);
2672 clear_bit(DM_CRYPT_KEY_VALID, &cc->flags);
2675 kfree_sensitive(cc->key_string);
2676 cc->key_string = NULL;
2679 if (cc->key_size && hex2bin(cc->key, key, cc->key_size) < 0)
2682 r = crypt_setkey(cc);
2684 set_bit(DM_CRYPT_KEY_VALID, &cc->flags);
2693 static int crypt_wipe_key(struct crypt_config *cc)
2697 clear_bit(DM_CRYPT_KEY_VALID, &cc->flags);
2698 get_random_bytes(&cc->key, cc->key_size);
2701 if (cc->iv_gen_ops && cc->iv_gen_ops->wipe) {
2702 r = cc->iv_gen_ops->wipe(cc);
2707 kfree_sensitive(cc->key_string);
2708 cc->key_string = NULL;
2709 r = crypt_setkey(cc);
2710 memset(&cc->key, 0, cc->key_size * sizeof(u8));
2730 struct crypt_config *cc = pool_data;
2738 if (unlikely(percpu_counter_read_positive(&cc->n_allocated_pages) >= dm_crypt_pages_per_client) &&
2744 percpu_counter_add(&cc->n_allocated_pages, 1);
2751 struct crypt_config *cc = pool_data;
2754 percpu_counter_sub(&cc->n_allocated_pages, 1);
2759 struct crypt_config *cc = ti->private;
2763 if (!cc)
2766 if (cc->write_thread)
2767 kthread_stop(cc->write_thread);
2769 if (cc->io_queue)
2770 destroy_workqueue(cc->io_queue);
2771 if (cc->crypt_queue)
2772 destroy_workqueue(cc->crypt_queue);
2774 crypt_free_tfms(cc);
2776 bioset_exit(&cc->bs);
2778 mempool_exit(&cc->page_pool);
2779 mempool_exit(&cc->req_pool);
2780 mempool_exit(&cc->tag_pool);
2782 WARN_ON(percpu_counter_sum(&cc->n_allocated_pages) != 0);
2783 percpu_counter_destroy(&cc->n_allocated_pages);
2785 if (cc->iv_gen_ops && cc->iv_gen_ops->dtr)
2786 cc->iv_gen_ops->dtr(cc);
2788 if (cc->dev)
2789 dm_put_device(ti, cc->dev);
2791 kfree_sensitive(cc->cipher_string);
2792 kfree_sensitive(cc->key_string);
2793 kfree_sensitive(cc->cipher_auth);
2794 kfree_sensitive(cc->authenc_key);
2796 mutex_destroy(&cc->bio_alloc_lock);
2799 kfree_sensitive(cc);
2812 struct crypt_config *cc = ti->private;
2814 if (crypt_integrity_aead(cc))
2815 cc->iv_size = crypto_aead_ivsize(any_tfm_aead(cc));
2817 cc->iv_size = crypto_skcipher_ivsize(any_tfm(cc));
2819 if (cc->iv_size)
2821 cc->iv_size = max(cc->iv_size,
2830 cc->iv_gen_ops = NULL;
2832 cc->iv_gen_ops = &crypt_iv_plain_ops;
2834 cc->iv_gen_ops = &crypt_iv_plain64_ops;
2836 cc->iv_gen_ops = &crypt_iv_plain64be_ops;
2838 cc->iv_gen_ops = &crypt_iv_essiv_ops;
2840 cc->iv_gen_ops = &crypt_iv_benbi_ops;
2842 cc->iv_gen_ops = &crypt_iv_null_ops;
2844 cc->iv_gen_ops = &crypt_iv_eboiv_ops;
2846 cc->iv_gen_ops = &crypt_iv_elephant_ops;
2847 cc->key_parts = 2;
2848 cc->key_extra_size = cc->key_size / 2;
2849 if (cc->key_extra_size > ELEPHANT_MAX_KEY_SIZE)
2851 set_bit(CRYPT_ENCRYPT_PREPROCESS, &cc->cipher_flags);
2853 cc->iv_gen_ops = &crypt_iv_lmk_ops;
2860 if (cc->key_size % cc->key_parts) {
2861 cc->key_parts++;
2862 cc->key_extra_size = cc->key_size / cc->key_parts;
2865 cc->iv_gen_ops = &crypt_iv_tcw_ops;
2866 cc->key_parts += 2; /* IV + whitening */
2867 cc->key_extra_size = cc->iv_size + TCW_WHITENING_SIZE;
2869 cc->iv_gen_ops = &crypt_iv_random_ops;
2871 cc->integrity_iv_size = cc->iv_size;
2885 static int crypt_ctr_auth_cipher(struct crypt_config *cc, char *cipher_api)
2908 cc->key_mac_size = crypto_ahash_digestsize(mac);
2911 cc->authenc_key = kmalloc(crypt_authenckey_size(cc), GFP_KERNEL);
2912 if (!cc->authenc_key)
2921 struct crypt_config *cc = ti->private;
2925 cc->tfms_count = 1;
2949 if (crypt_integrity_aead(cc)) {
2950 ret = crypt_ctr_auth_cipher(cc, cipher_api);
2958 cc->tfms_count = 64;
2974 cc->key_parts = cc->tfms_count;
2977 ret = crypt_alloc_tfms(cc, cipher_api);
2983 if (crypt_integrity_aead(cc))
2984 cc->iv_size = crypto_aead_ivsize(any_tfm_aead(cc));
2986 cc->iv_size = crypto_skcipher_ivsize(any_tfm(cc));
2994 struct crypt_config *cc = ti->private;
3000 if (strchr(cipher_in, '(') || crypt_integrity_aead(cc)) {
3014 cc->tfms_count = 1;
3015 else if (sscanf(keycount, "%u%c", &cc->tfms_count, &dummy) != 1 ||
3016 !is_power_of_2(cc->tfms_count)) {
3020 cc->key_parts = cc->tfms_count;
3062 ret = crypt_alloc_tfms(cc, cipher_api);
3078 struct crypt_config *cc = ti->private;
3082 cc->cipher_string = kstrdup(cipher_in, GFP_KERNEL);
3083 if (!cc->cipher_string) {
3101 ret = crypt_set_key(cc, key);
3108 if (cc->iv_gen_ops && cc->iv_gen_ops->ctr) {
3109 ret = cc->iv_gen_ops->ctr(cc, ti, ivopts);
3117 if (cc->iv_gen_ops && cc->iv_gen_ops->init) {
3118 ret = cc->iv_gen_ops->init(cc);
3126 if (cc->key_string)
3127 memset(cc->key, 0, cc->key_size * sizeof(u8));
3134 struct crypt_config *cc = ti->private;
3163 set_bit(DM_CRYPT_SAME_CPU, &cc->flags);
3166 set_bit(DM_CRYPT_NO_OFFLOAD, &cc->flags);
3168 set_bit(DM_CRYPT_NO_READ_WORKQUEUE, &cc->flags);
3170 set_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags);
3176 cc->on_disk_tag_size = val;
3179 set_bit(CRYPT_MODE_INTEGRITY_AEAD, &cc->cipher_flags);
3185 cc->cipher_auth = kstrdup(sval, GFP_KERNEL);
3186 if (!cc->cipher_auth)
3188 } else if (sscanf(opt_string, "sector_size:%hu%c", &cc->sector_size, &dummy) == 1) {
3189 if (cc->sector_size < (1 << SECTOR_SHIFT) ||
3190 cc->sector_size > 4096 ||
3191 (cc->sector_size & (cc->sector_size - 1))) {
3195 if (ti->len & ((cc->sector_size >> SECTOR_SHIFT) - 1)) {
3199 cc->sector_shift = __ffs(cc->sector_size) - SECTOR_SHIFT;
3201 set_bit(CRYPT_IV_LARGE_SECTORS, &cc->cipher_flags);
3215 struct crypt_config *cc = ti->private;
3217 return dm_report_zones(cc->dev->bdev, cc->start,
3218 cc->start + dm_target_offset(ti, args->next_sector),
3231 struct crypt_config *cc;
3251 cc = kzalloc(struct_size(cc, key, key_size), GFP_KERNEL);
3252 if (!cc) {
3256 cc->key_size = key_size;
3257 cc->sector_size = (1 << SECTOR_SHIFT);
3258 cc->sector_shift = 0;
3260 ti->private = cc;
3267 ret = percpu_counter_init(&cc->n_allocated_pages, 0, GFP_KERNEL);
3282 if (crypt_integrity_aead(cc)) {
3283 cc->dmreq_start = sizeof(struct aead_request);
3284 cc->dmreq_start += crypto_aead_reqsize(any_tfm_aead(cc));
3285 align_mask = crypto_aead_alignmask(any_tfm_aead(cc));
3287 cc->dmreq_start = sizeof(struct skcipher_request);
3288 cc->dmreq_start += crypto_skcipher_reqsize(any_tfm(cc));
3289 align_mask = crypto_skcipher_alignmask(any_tfm(cc));
3291 cc->dmreq_start = ALIGN(cc->dmreq_start, __alignof__(struct dm_crypt_request));
3295 iv_size_padding = -(cc->dmreq_start + sizeof(struct dm_crypt_request))
3308 iv_size_padding + cc->iv_size +
3309 cc->iv_size +
3313 ret = mempool_init_kmalloc_pool(&cc->req_pool, MIN_IOS, cc->dmreq_start + additional_req_size);
3319 cc->per_bio_data_size = ti->per_io_data_size =
3320 ALIGN(sizeof(struct dm_crypt_io) + cc->dmreq_start + additional_req_size,
3323 ret = mempool_init(&cc->page_pool, BIO_MAX_VECS, crypt_page_alloc, crypt_page_free, cc);
3329 ret = bioset_init(&cc->bs, MIN_IOS, 0, BIOSET_NEED_BVECS);
3335 mutex_init(&cc->bio_alloc_lock);
3339 (tmpll & ((cc->sector_size >> SECTOR_SHIFT) - 1))) {
3343 cc->iv_offset = tmpll;
3345 ret = dm_get_device(ti, argv[3], dm_table_get_mode(ti->table), &cc->dev);
3356 cc->start = tmpll;
3358 if (bdev_is_zoned(cc->dev->bdev)) {
3364 set_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags);
3365 set_bit(DM_CRYPT_WRITE_INLINE, &cc->flags);
3382 if (crypt_integrity_aead(cc) || cc->integrity_iv_size) {
3383 ret = crypt_integrity_ctr(cc, ti);
3387 cc->tag_pool_max_sectors = POOL_ENTRY_SIZE / cc->on_disk_tag_size;
3388 if (!cc->tag_pool_max_sectors)
3389 cc->tag_pool_max_sectors = 1;
3391 ret = mempool_init_kmalloc_pool(&cc->tag_pool, MIN_IOS,
3392 cc->tag_pool_max_sectors * cc->on_disk_tag_size);
3398 cc->tag_pool_max_sectors <<= cc->sector_shift;
3402 cc->io_queue = alloc_workqueue("kcryptd_io/%s", WQ_MEM_RECLAIM, 1, devname);
3403 if (!cc->io_queue) {
3408 if (test_bit(DM_CRYPT_SAME_CPU, &cc->flags))
3409 cc->crypt_queue = alloc_workqueue("kcryptd/%s", WQ_CPU_INTENSIVE | WQ_MEM_RECLAIM,
3412 cc->crypt_queue = alloc_workqueue("kcryptd/%s",
3415 if (!cc->crypt_queue) {
3420 spin_lock_init(&cc->write_thread_lock);
3421 cc->write_tree = RB_ROOT;
3423 cc->write_thread = kthread_run(dmcrypt_write, cc, "dmcrypt_write/%s", devname);
3424 if (IS_ERR(cc->write_thread)) {
3425 ret = PTR_ERR(cc->write_thread);
3426 cc->write_thread = NULL;
3447 struct crypt_config *cc = ti->private;
3456 bio_set_dev(bio, cc->dev->bdev);
3458 bio->bi_iter.bi_sector = cc->start +
3467 (bio_data_dir(bio) == WRITE || cc->on_disk_tag_size))
3474 if (unlikely((bio->bi_iter.bi_sector & ((cc->sector_size >> SECTOR_SHIFT) - 1)) != 0))
3477 if (unlikely(bio->bi_iter.bi_size & (cc->sector_size - 1)))
3480 io = dm_per_bio_data(bio, cc->per_bio_data_size);
3481 crypt_io_init(io, cc, bio, dm_target_offset(ti, bio->bi_iter.bi_sector));
3483 if (cc->on_disk_tag_size) {
3484 unsigned int tag_len = cc->on_disk_tag_size * (bio_sectors(bio) >> cc->sector_shift);
3492 if (bio_sectors(bio) > cc->tag_pool_max_sectors)
3493 dm_accept_partial_bio(bio, cc->tag_pool_max_sectors);
3494 io->integrity_metadata = mempool_alloc(&cc->tag_pool, GFP_NOIO);
3499 if (crypt_integrity_aead(cc))
3521 struct crypt_config *cc = ti->private;
3531 DMEMIT("%s ", cc->cipher_string);
3533 if (cc->key_size > 0) {
3534 if (cc->key_string)
3535 DMEMIT(":%u:%s", cc->key_size, cc->key_string);
3537 for (i = 0; i < cc->key_size; i++) {
3538 DMEMIT("%c%c", hex2asc(cc->key[i] >> 4),
3539 hex2asc(cc->key[i] & 0xf));
3545 DMEMIT(" %llu %s %llu", (unsigned long long)cc->iv_offset,
3546 cc->dev->name, (unsigned long long)cc->start);
3549 num_feature_args += test_bit(DM_CRYPT_SAME_CPU, &cc->flags);
3550 num_feature_args += test_bit(DM_CRYPT_NO_OFFLOAD, &cc->flags);
3551 num_feature_args += test_bit(DM_CRYPT_NO_READ_WORKQUEUE, &cc->flags);
3552 num_feature_args += test_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags);
3553 num_feature_args += cc->sector_size != (1 << SECTOR_SHIFT);
3554 num_feature_args += test_bit(CRYPT_IV_LARGE_SECTORS, &cc->cipher_flags);
3555 if (cc->on_disk_tag_size)
3561 if (test_bit(DM_CRYPT_SAME_CPU, &cc->flags))
3563 if (test_bit(DM_CRYPT_NO_OFFLOAD, &cc->flags))
3565 if (test_bit(DM_CRYPT_NO_READ_WORKQUEUE, &cc->flags))
3567 if (test_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags))
3569 if (cc->on_disk_tag_size)
3570 DMEMIT(" integrity:%u:%s", cc->on_disk_tag_size, cc->cipher_auth);
3571 if (cc->sector_size != (1 << SECTOR_SHIFT))
3572 DMEMIT(" sector_size:%d", cc->sector_size);
3573 if (test_bit(CRYPT_IV_LARGE_SECTORS, &cc->cipher_flags))
3581 DMEMIT(",same_cpu_crypt=%c", test_bit(DM_CRYPT_SAME_CPU, &cc->flags) ? 'y' : 'n');
3582 DMEMIT(",submit_from_crypt_cpus=%c", test_bit(DM_CRYPT_NO_OFFLOAD, &cc->flags) ?
3584 DMEMIT(",no_read_workqueue=%c", test_bit(DM_CRYPT_NO_READ_WORKQUEUE, &cc->flags) ?
3586 DMEMIT(",no_write_workqueue=%c", test_bit(DM_CRYPT_NO_WRITE_WORKQUEUE, &cc->flags) ?
3588 DMEMIT(",iv_large_sectors=%c", test_bit(CRYPT_IV_LARGE_SECTORS, &cc->cipher_flags) ?
3591 if (cc->on_disk_tag_size)
3593 cc->on_disk_tag_size, cc->cipher_auth);
3594 if (cc->sector_size != (1 << SECTOR_SHIFT))
3595 DMEMIT(",sector_size=%d", cc->sector_size);
3596 if (cc->cipher_string)
3597 DMEMIT(",cipher_string=%s", cc->cipher_string);
3599 DMEMIT(",key_size=%u", cc->key_size);
3600 DMEMIT(",key_parts=%u", cc->key_parts);
3601 DMEMIT(",key_extra_size=%u", cc->key_extra_size);
3602 DMEMIT(",key_mac_size=%u", cc->key_mac_size);
3610 struct crypt_config *cc = ti->private;
3612 set_bit(DM_CRYPT_SUSPENDED, &cc->flags);
3617 struct crypt_config *cc = ti->private;
3619 if (!test_bit(DM_CRYPT_KEY_VALID, &cc->flags)) {
3629 struct crypt_config *cc = ti->private;
3631 clear_bit(DM_CRYPT_SUSPENDED, &cc->flags);
3641 struct crypt_config *cc = ti->private;
3648 if (!test_bit(DM_CRYPT_SUSPENDED, &cc->flags)) {
3655 if (key_size < 0 || cc->key_size != key_size) {
3660 ret = crypt_set_key(cc, argv[2]);
3663 if (cc->iv_gen_ops && cc->iv_gen_ops->init)
3664 ret = cc->iv_gen_ops->init(cc);
3666 if (cc->key_string)
3667 memset(cc->key, 0, cc->key_size * sizeof(u8));
3671 return crypt_wipe_key(cc);
3682 struct crypt_config *cc = ti->private;
3684 return fn(ti, cc->dev, cc->start, ti->len, data);
3689 struct crypt_config *cc = ti->private;
3700 max_t(unsigned int, limits->logical_block_size, cc->sector_size);
3702 max_t(unsigned int, limits->physical_block_size, cc->sector_size);
3703 limits->io_min = max_t(unsigned int, limits->io_min, cc->sector_size);