ocryptodev.c revision 1.15
1/* $NetBSD: ocryptodev.c,v 1.15 2020/01/16 15:29:24 christos Exp $ */ 2/* $FreeBSD: src/sys/opencrypto/cryptodev.c,v 1.4.2.4 2003/06/03 00:09:02 sam Exp $ */ 3/* $OpenBSD: cryptodev.c,v 1.53 2002/07/10 22:21:30 mickey Exp $ */ 4 5/*- 6 * Copyright (c) 2008 The NetBSD Foundation, Inc. 7 * All rights reserved. 8 * 9 * This code is derived from software contributed to The NetBSD Foundation 10 * by Coyote Point Systems, Inc. 11 * 12 * Redistribution and use in source and binary forms, with or without 13 * modification, are permitted provided that the following conditions 14 * are met: 15 * 1. Redistributions of source code must retain the above copyright 16 * notice, this list of conditions and the following disclaimer. 17 * 2. Redistributions in binary form must reproduce the above copyright 18 * notice, this list of conditions and the following disclaimer in the 19 * documentation and/or other materials provided with the distribution. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 22 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 23 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 24 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 25 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 26 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 27 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 28 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 29 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 30 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 31 * POSSIBILITY OF SUCH DAMAGE. 32 */ 33 34/* 35 * Copyright (c) 2001 Theo de Raadt 36 * 37 * Redistribution and use in source and binary forms, with or without 38 * modification, are permitted provided that the following conditions 39 * are met: 40 * 41 * 1. Redistributions of source code must retain the above copyright 42 * notice, this list of conditions and the following disclaimer. 43 * 2. Redistributions in binary form must reproduce the above copyright 44 * notice, this list of conditions and the following disclaimer in the 45 * documentation and/or other materials provided with the distribution. 46 * 3. The name of the author may not be used to endorse or promote products 47 * derived from this software without specific prior written permission. 48 * 49 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 50 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 51 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 52 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 53 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 54 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 55 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 56 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 57 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 58 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 59 * 60 * Effort sponsored in part by the Defense Advanced Research Projects 61 * Agency (DARPA) and Air Force Research Laboratory, Air Force 62 * Materiel Command, USAF, under agreement number F30602-01-2-0537. 63 * 64 */ 65 66/* 67 * Implement backward compatibility IOCTLs in this module. 68 * 69 */ 70 71#include <sys/cdefs.h> 72__KERNEL_RCSID(0, "$NetBSD: ocryptodev.c,v 1.15 2020/01/16 15:29:24 christos Exp $"); 73 74#include <sys/param.h> 75#include <sys/systm.h> 76#include <sys/kmem.h> 77#include <sys/malloc.h> 78#include <sys/mbuf.h> 79#include <sys/pool.h> 80#include <sys/sysctl.h> 81#include <sys/file.h> 82#include <sys/filedesc.h> 83#include <sys/errno.h> 84#include <sys/md5.h> 85#include <sys/sha1.h> 86#include <sys/conf.h> 87#include <sys/device.h> 88#include <sys/kauth.h> 89#include <sys/select.h> 90#include <sys/poll.h> 91#include <sys/atomic.h> 92#include <sys/compat_stub.h> 93#include <sys/module.h> 94 95#ifdef _KERNEL_OPT 96#include "opt_ocf.h" 97#endif 98 99#include <opencrypto/cryptodev.h> 100#include <opencrypto/cryptodev_internal.h> 101#include <opencrypto/ocryptodev.h> 102#include <opencrypto/xform.h> 103 104static int ocryptodev_op(struct csession *, struct ocrypt_op *, 105 struct lwp *); 106static int ocryptodev_mop(struct fcrypt *, struct ocrypt_n_op *, int, 107 struct lwp *); 108static int ocryptodev_session(struct fcrypt *, struct osession_op *); 109static int ocryptodev_msession(struct fcrypt *, struct osession_n_op *, 110 int); 111 112int 113ocryptof_ioctl(struct file *fp, u_long cmd, void *data) 114{ 115 struct fcrypt *fcr = fp->f_fcrypt; 116 struct csession *cse; 117 struct osession_op *osop; 118 struct osession_n_op *osnop; 119 struct ocrypt_op *ocop; 120 struct ocrypt_mop *omop; 121 struct ocrypt_n_op *ocnop; 122 struct ocrypt_sgop *osgop; 123 124 int error = 0; 125 126 switch (cmd) { 127 case OCIOCGSESSION: 128 osop = (struct osession_op *)data; 129 error = ocryptodev_session(fcr, osop); 130 break; 131 case CIOCNGSESSION: 132 osgop = (struct ocrypt_sgop *)data; 133 if ((osgop->count <= 0) || 134 (SIZE_MAX/sizeof(struct osession_n_op) < osgop->count)) { 135 error = EINVAL; 136 break; 137 } 138 osnop = kmem_alloc((osgop->count * 139 sizeof(struct osession_n_op)), KM_SLEEP); 140 error = copyin(osgop->sessions, osnop, osgop->count * 141 sizeof(struct osession_n_op)); 142 if (error) { 143 goto mbail; 144 } 145 146 error = ocryptodev_msession(fcr, osnop, osgop->count); 147 if (error) { 148 goto mbail; 149 } 150 151 error = copyout(osnop, osgop->sessions, osgop->count * 152 sizeof(struct osession_n_op)); 153mbail: 154 kmem_free(osnop, osgop->count * sizeof(struct osession_n_op)); 155 break; 156 case OCIOCCRYPT: 157 mutex_enter(&cryptodev_mtx); 158 ocop = (struct ocrypt_op *)data; 159 cse = cryptodev_csefind(fcr, ocop->ses); 160 mutex_exit(&cryptodev_mtx); 161 if (cse == NULL) { 162 DPRINTF("csefind failed\n"); 163 return EINVAL; 164 } 165 error = ocryptodev_op(cse, ocop, curlwp); 166 DPRINTF("ocryptodev_op error = %d\n", error); 167 break; 168 case OCIOCNCRYPTM: 169 omop = (struct ocrypt_mop *)data; 170 if ((omop->count <= 0) || 171 (SIZE_MAX/sizeof(struct ocrypt_n_op) <= omop->count)) { 172 error = EINVAL; 173 break; 174 } 175 ocnop = kmem_alloc((omop->count * sizeof(struct ocrypt_n_op)), 176 KM_SLEEP); 177 error = copyin(omop->reqs, ocnop, 178 (omop->count * sizeof(struct ocrypt_n_op))); 179 if(!error) { 180 error = ocryptodev_mop(fcr, ocnop, omop->count, 181 curlwp); 182 if (!error) { 183 error = copyout(ocnop, omop->reqs, 184 (omop->count * sizeof(struct ocrypt_n_op))); 185 } 186 } 187 kmem_free(ocnop, (omop->count * sizeof(struct ocrypt_n_op))); 188 break; 189 default: 190 DPRINTF("invalid ioctl cmd 0x%lx\n", cmd); 191 return EINVAL; 192 } 193 return error; 194} 195 196 197static int 198ocryptodev_op(struct csession *cse, struct ocrypt_op *ocop, struct lwp *l) 199{ 200 struct crypt_op cop; 201 202 cop.ses = ocop->ses; 203 cop.op = ocop->op; 204 cop.flags = ocop->flags; 205 cop.len = ocop->len; 206 cop.src = ocop->src; 207 cop.dst = ocop->dst; 208 cop.mac = ocop->mac; 209 cop.iv = ocop->iv; 210 cop.dst_len = 0; 211 212 return cryptodev_op(cse, &cop, l); 213}; 214 215static int 216ocryptodev_mop(struct fcrypt *fcr, struct ocrypt_n_op *ocnop, int count, 217 struct lwp *l) 218{ 219 int res; 220 221 struct crypt_n_op cnop; 222 223 cnop.ses = ocnop->ses; 224 cnop.op = ocnop->op; 225 cnop.flags = ocnop->flags; 226 cnop.len = ocnop->len; 227 cnop.reqid = ocnop->reqid; 228 cnop.status = ocnop->status; 229 cnop.opaque = ocnop->opaque; 230 cnop.keylen = ocnop->keylen; 231 cnop.key = ocnop->key; 232 cnop.mackeylen = ocnop->mackeylen; 233 cnop.mackey = ocnop->mackey; 234 cnop.src = ocnop->src; 235 cnop.dst = ocnop->dst; 236 cnop.mac = ocnop->mac; 237 cnop.iv = ocnop->iv; 238 cnop.dst_len = 0; 239 res = cryptodev_mop(fcr, &cnop, count, l); 240 ocnop->reqid = cnop.reqid; 241 ocnop->status = cnop.status; 242 243 return res; 244}; 245 246 247static int 248ocryptodev_session(struct fcrypt *fcr, struct osession_op *osop) 249{ 250 struct session_op sop; 251 int res; 252 253 sop.cipher = osop->cipher; 254 sop.mac = osop->mac; 255 sop.comp_alg = 0; 256 sop.keylen = osop->keylen; 257 sop.key = osop->key; 258 sop.mackeylen = osop->mackeylen; 259 sop.mackey = osop->mackey; 260 res = cryptodev_session(fcr, &sop); 261 if (res) 262 return res; 263 osop->ses = sop.ses; 264 return 0; 265 266} 267 268static int 269ocryptodev_msession(struct fcrypt *fcr, struct osession_n_op *osn_ops, 270 int count) 271{ 272 int i; 273 274 for (i = 0; i < count; i++, osn_ops++) { 275 struct osession_op os_op; 276 os_op.cipher = osn_ops->cipher; 277 os_op.mac = osn_ops->mac; 278 os_op.keylen = osn_ops->keylen; 279 os_op.key = osn_ops->key; 280 os_op.mackeylen = osn_ops->mackeylen; 281 os_op.mackey = osn_ops->mackey; 282 os_op.ses = ~0; 283 284 osn_ops->status = ocryptodev_session(fcr, &os_op); 285 osn_ops->ses = os_op.ses; 286 } 287 288 return 0; 289} 290 291static void 292crypto_50_init(void) 293{ 294 295 MODULE_HOOK_SET(ocryptof_50_hook, ocryptof_ioctl); 296} 297 298static void 299crypto_50_fini(void) 300{ 301 302 MODULE_HOOK_UNSET(ocryptof_50_hook); 303} 304 305MODULE(MODULE_CLASS_EXEC, compat_crypto_50, "crypto,compat_50"); 306 307static int 308compat_crypto_50_modcmd(modcmd_t cmd, void *arg) 309{ 310 311 switch (cmd) { 312 case MODULE_CMD_INIT: 313 crypto_50_init(); 314 return 0; 315 case MODULE_CMD_FINI: 316 crypto_50_fini(); 317 return 0; 318 default: 319 return ENOTTY; 320 } 321} 322 323