36ea3668b9
Extends the Opencrypto API to allow the destination buffer size to be specified when its not the same size as the input buffer (i.e. for operations like compress and decompress). The crypto_op and crypt_n_op structures gain a u_int dst_len field. The session_op structure gains a comp_alg field to specify a compression algorithm. Moved four ioctls to new ids; CIOCGSESSION, CIOCNGSESSION, CIOCCRYPT, and CIOCNCRYPTM. Added four backward compatible ioctls; OCIOCGSESSION, OCIOCNGSESSION, OCIOCCRYPT, and OCIOCNCRYPTM. Backward compatibility is maintained in ocryptodev.h and ocryptodev.c which implement the original ioctls and set dst_len and comp_alg to 0. Adds user-space access to compression features. Adds software gzip support (CRYPTO_GZIP_COMP). Adds the fast version of crc32 from zlib to libkern. This should be generally useful and provide a place to start normalizing the various crc32 routines in the kernel. The crc32 routine is used in this patch to support GZIP. With input and support from tls@NetBSD.org.
183 lines
6.8 KiB
C
183 lines
6.8 KiB
C
/* $NetBSD: ocryptodev.h,v 1.1 2009/03/25 01:26:13 darran Exp $ */
|
|
/* $FreeBSD: src/sys/opencrypto/cryptodev.h,v 1.2.2.6 2003/07/02 17:04:50 sam Exp $ */
|
|
/* $OpenBSD: cryptodev.h,v 1.33 2002/07/17 23:52:39 art Exp $ */
|
|
|
|
/*-
|
|
* Copyright (c) 2008 The NetBSD Foundation, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* This code is derived from software contributed to The NetBSD Foundation
|
|
* by Coyote Point Systems, Inc.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
|
|
* ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
|
|
* TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
|
|
* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
/*
|
|
* The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
|
|
*
|
|
* This code was written by Angelos D. Keromytis in Athens, Greece, in
|
|
* February 2000. Network Security Technologies Inc. (NSTI) kindly
|
|
* supported the development of this code.
|
|
*
|
|
* Copyright (c) 2000 Angelos D. Keromytis
|
|
*
|
|
* Permission to use, copy, and modify this software with or without fee
|
|
* is hereby granted, provided that this entire notice is included in
|
|
* all source code copies of any software which is or includes a copy or
|
|
* modification of this software.
|
|
*
|
|
* THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
|
|
* IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
|
|
* REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
|
|
* MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
|
|
* PURPOSE.
|
|
*
|
|
* Copyright (c) 2001 Theo de Raadt
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. The name of the author may not be used to endorse or promote products
|
|
* derived from this software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
* Effort sponsored in part by the Defense Advanced Research Projects
|
|
* Agency (DARPA) and Air Force Research Laboratory, Air Force
|
|
* Materiel Command, USAF, under agreement number F30602-01-2-0537.
|
|
*
|
|
*/
|
|
|
|
#ifndef _CRYPTO_OCRYPTODEV_H_
|
|
#define _CRYPTO_OCRYPTODEV_H_
|
|
|
|
struct osession_op { /* backwards compatible */
|
|
u_int32_t cipher; /* ie. CRYPTO_DES_CBC */
|
|
u_int32_t mac; /* ie. CRYPTO_MD5_HMAC */
|
|
u_int32_t keylen; /* cipher key */
|
|
void * key;
|
|
int mackeylen; /* mac key */
|
|
void * mackey;
|
|
|
|
u_int32_t ses; /* returns: session # */
|
|
};
|
|
|
|
struct osession_n_op {
|
|
u_int32_t cipher; /* ie. CRYPTO_DES_CBC */
|
|
u_int32_t mac; /* ie. CRYPTO_MD5_HMAC */
|
|
|
|
u_int32_t keylen; /* cipher key */
|
|
void * key;
|
|
int mackeylen; /* mac key */
|
|
void * mackey;
|
|
|
|
u_int32_t ses; /* returns: session # */
|
|
int status;
|
|
};
|
|
|
|
struct ocrypt_op {
|
|
u_int32_t ses;
|
|
u_int16_t op; /* i.e. COP_ENCRYPT */
|
|
u_int16_t flags;
|
|
u_int len;
|
|
void * src, *dst; /* become iov[] inside kernel */
|
|
void * mac; /* must be big enough for chosen MAC */
|
|
void * iv;
|
|
};
|
|
|
|
/* to support multiple session creation */
|
|
/*
|
|
*
|
|
* The reqid field is filled when the operation has
|
|
* been accepted and started, and can be used to later retrieve
|
|
* the operation results via CIOCNCRYPTRET or identify the
|
|
* request in the completion list returned by CIOCNCRYPTRETM.
|
|
*
|
|
* The opaque pointer can be set arbitrarily by the user
|
|
* and it is passed back in the crypt_result structure
|
|
* when the request completes. This field can be used for example
|
|
* to track context for the request and avoid lookups in the
|
|
* user application.
|
|
*/
|
|
|
|
struct ocrypt_n_op {
|
|
u_int32_t ses;
|
|
u_int16_t op; /* i.e. COP_ENCRYPT */
|
|
u_int16_t flags;
|
|
u_int len; /* src & dst len */
|
|
|
|
u_int32_t reqid; /* request id */
|
|
int status; /* status of request -accepted or not */
|
|
void *opaque; /* opaque pointer returned to user */
|
|
u_int32_t keylen; /* cipher key - optional */
|
|
void * key;
|
|
u_int32_t mackeylen; /* also optional */
|
|
void * mackey;
|
|
|
|
void * src, *dst; /* become iov[] inside kernel */
|
|
void * mac; /* must be big enough for chosen MAC */
|
|
void * iv;
|
|
};
|
|
|
|
struct ocrypt_sgop {
|
|
size_t count;
|
|
struct osession_n_op * sessions;
|
|
};
|
|
|
|
struct ocrypt_mop {
|
|
size_t count; /* how many */
|
|
struct ocrypt_n_op * reqs; /* where to get them */
|
|
};
|
|
|
|
struct csession;
|
|
struct fcrypt;
|
|
|
|
#define OCIOCGSESSION _IOWR('c', 101, struct osession_op)
|
|
#define OCIOCNGSESSION _IOWR('c', 106, struct ocrypt_sgop)
|
|
#define OCIOCCRYPT _IOWR('c', 103, struct ocrypt_op)
|
|
#define OCIOCNCRYPTM _IOWR('c', 107, struct ocrypt_mop)
|
|
|
|
int cryptodev_op(struct csession *, struct crypt_op *, struct lwp *);
|
|
int cryptodev_mop(struct fcrypt *, struct crypt_n_op *, int, struct lwp *);
|
|
int cryptodev_session(struct fcrypt *, struct session_op *);
|
|
int cryptodev_msession(struct fcrypt *, struct session_n_op *, int);
|
|
struct csession *cryptodev_csefind(struct fcrypt *fcr, u_int ses);
|
|
|
|
int ocryptof_ioctl(struct file *, u_long, void *);
|
|
|
|
#endif /* _CRYPTO_OCRYPTODEV_H_ */
|