Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932687AbaKPCtX (ORCPT ); Sat, 15 Nov 2014 21:49:23 -0500 Received: from mail.eperm.de ([89.247.134.16]:54616 "EHLO mail.eperm.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932613AbaKPCtU (ORCPT ); Sat, 15 Nov 2014 21:49:20 -0500 X-AuthUser: sm@eperm.de From: Stephan Mueller To: Herbert Xu Cc: Daniel Borkmann , quentin.gouchet@gmail.com, LKML , linux-crypto@vger.kernel.org, ABI/API Subject: [PATCH v2 00/10] crypto: AF_ALG: add AEAD and RNG support Date: Sun, 16 Nov 2014 03:23:11 +0100 Message-ID: <5365136.g8vbXlhRyC@tachyon.chronox.de> User-Agent: KMail/4.14.2 (Linux/3.17.2-300.fc21.x86_64; KDE/4.14.2; x86_64; ; ) MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi, This patch set adds AEAD and RNG support to the AF_ALG interface exported by the kernel crypto API. By extending AF_ALG with AEAD and RNG support, all cipher types the kernel crypto API allows access to are now accessible from userspace. The RNG support is stand-alone. The AEAD implementation is added to algif_skcipher.c to prevent re-implementation of the memory moving logic. The extension for the AEAD support can be summarized with the following types of changes: * select the correct crypto API functions (either the ablkcipher or the aead functions) * apply the additional data needed for AEAD at the right time (associated data, authentication tag) -- this includes the addition of user space interfaces to allow setting this data. * add the calculation for the memory size needed for encryption and decryption. In addition, the patch set adds a getsockopt implementation to skcipher to allow user space to inquire about properties of the ciphers (IV size, block size, authentication data size). This extension would be needed for a generic user space usage of these ciphers. The new AEAD and RNG interfaces are fully tested with the test application provided at [1]. That test application exercises all newly added user space interfaces. The patch set was tested on x86_64 and i386. [1] http://www.chronox.de/libkcapi.html Changes v2: * rebase to current cryptodev-2.6 tree * use memzero_explicit to zeroize AEAD associated data * use sizeof for determining length of AEAD associated data * update algif_rng.c covering all suggestions from Daniel Borkmann * addition of patch 9: add digestsize interface for hashes * addition of patch to update documentation covering the userspace interface * change numbers of getsockopt options: separate them from sendmsg interface definitions Stephan Mueller (10): crypto: AF_ALG: add user space interface for AEAD crypto: AF_ALG: user space interface for cipher info crypto: AF_ALG: extend data structuers for AEAD crypto: AF_ALG: crypto API calls to inline functions crypto: AF_ALG: add AEAD support crypto: AF_ALG: make setkey optional crypto: AF_ALG: add random number generator support crypto: AF_ALG: enable RNG interface compilation crypto: AF_ALG: user space interface for hash info crypto: AF_ALG: document the user space interface Documentation/crypto/crypto-API-userspace.txt | 95 ++++++- crypto/Kconfig | 9 + crypto/Makefile | 1 + crypto/af_alg.c | 20 ++ crypto/algif_hash.c | 35 ++- crypto/algif_rng.c | 186 ++++++++++++++ crypto/algif_skcipher.c | 352 +++++++++++++++++++++++--- include/crypto/if_alg.h | 2 + include/uapi/linux/if_alg.h | 15 ++ 9 files changed, 683 insertions(+), 32 deletions(-) create mode 100644 crypto/algif_rng.c -- 2.1.0 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/