pcrypt.c 13.3 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
/*
 * pcrypt - Parallel crypto wrapper.
 *
 * Copyright (C) 2009 secunet Security Networks AG
 * Copyright (C) 2009 Steffen Klassert <steffen.klassert@secunet.com>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
 */

#include <crypto/algapi.h>
#include <crypto/internal/aead.h>
23
#include <linux/atomic.h>
24 25 26 27
#include <linux/err.h>
#include <linux/init.h>
#include <linux/module.h>
#include <linux/slab.h>
28
#include <linux/notifier.h>
29
#include <linux/kobject.h>
30
#include <linux/cpu.h>
31 32
#include <crypto/pcrypt.h>

33
struct padata_pcrypt {
34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58
	struct padata_instance *pinst;
	struct workqueue_struct *wq;

	/*
	 * Cpumask for callback CPUs. It should be
	 * equal to serial cpumask of corresponding padata instance,
	 * so it is updated when padata notifies us about serial
	 * cpumask change.
	 *
	 * cb_cpumask is protected by RCU. This fact prevents us from
	 * using cpumask_var_t directly because the actual type of
	 * cpumsak_var_t depends on kernel configuration(particularly on
	 * CONFIG_CPUMASK_OFFSTACK macro). Depending on the configuration
	 * cpumask_var_t may be either a pointer to the struct cpumask
	 * or a variable allocated on the stack. Thus we can not safely use
	 * cpumask_var_t with RCU operations such as rcu_assign_pointer or
	 * rcu_dereference. So cpumask_var_t is wrapped with struct
	 * pcrypt_cpumask which makes possible to use it with RCU.
	 */
	struct pcrypt_cpumask {
		cpumask_var_t mask;
	} *cb_cpumask;
	struct notifier_block nblock;
};

59 60
static struct padata_pcrypt pencrypt;
static struct padata_pcrypt pdecrypt;
61
static struct kset           *pcrypt_kset;
62 63

struct pcrypt_instance_ctx {
64
	struct crypto_aead_spawn spawn;
65
	atomic_t tfm_count;
66 67 68 69 70 71 72 73
};

struct pcrypt_aead_ctx {
	struct crypto_aead *child;
	unsigned int cb_cpu;
};

static int pcrypt_do_parallel(struct padata_priv *padata, unsigned int *cb_cpu,
74
			      struct padata_pcrypt *pcrypt)
75 76
{
	unsigned int cpu_index, cpu, i;
77
	struct pcrypt_cpumask *cpumask;
78 79 80

	cpu = *cb_cpu;

81
	rcu_read_lock_bh();
82
	cpumask = rcu_dereference_bh(pcrypt->cb_cpumask);
83
	if (cpumask_test_cpu(cpu, cpumask->mask))
84 85
			goto out;

86 87 88
	if (!cpumask_weight(cpumask->mask))
			goto out;

89
	cpu_index = cpu % cpumask_weight(cpumask->mask);
90

91
	cpu = cpumask_first(cpumask->mask);
92
	for (i = 0; i < cpu_index; i++)
93
		cpu = cpumask_next(cpu, cpumask->mask);
94 95 96 97

	*cb_cpu = cpu;

out:
98 99
	rcu_read_unlock_bh();
	return padata_do_parallel(pcrypt->pinst, padata, cpu);
100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144
}

static int pcrypt_aead_setkey(struct crypto_aead *parent,
			      const u8 *key, unsigned int keylen)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
				   unsigned int authsize)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

static void pcrypt_aead_serial(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	aead_request_complete(req->base.data, padata->info);
}

static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
{
	struct aead_request *req = areq->data;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct padata_priv *padata = pcrypt_request_padata(preq);

	padata->info = err;
	req->base.flags &= ~CRYPTO_TFM_REQ_MAY_SLEEP;

	padata_do_serial(padata);
}

static void pcrypt_aead_enc(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_encrypt(req);

145
	if (padata->info == -EINPROGRESS)
146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_encrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_enc;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
171
	aead_request_set_ad(creq, req->assoclen);
172

173
	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
174 175
	if (!err)
		return -EINPROGRESS;
176 177 178 179 180 181 182 183 184 185 186

	return err;
}

static void pcrypt_aead_dec(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_decrypt(req);

187
	if (padata->info == -EINPROGRESS)
188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_decrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_dec;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
213
	aead_request_set_ad(creq, req->assoclen);
214

215
	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pdecrypt);
216 217
	if (!err)
		return -EINPROGRESS;
218 219 220 221

	return err;
}

222
static int pcrypt_aead_init_tfm(struct crypto_aead *tfm)
223 224
{
	int cpu, cpu_index;
225 226 227
	struct aead_instance *inst = aead_alg_instance(tfm);
	struct pcrypt_instance_ctx *ictx = aead_instance_ctx(inst);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);
228 229
	struct crypto_aead *cipher;

230 231
	cpu_index = (unsigned int)atomic_inc_return(&ictx->tfm_count) %
		    cpumask_weight(cpu_online_mask);
232

233
	ctx->cb_cpu = cpumask_first(cpu_online_mask);
234
	for (cpu = 0; cpu < cpu_index; cpu++)
235
		ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);
236

237
	cipher = crypto_spawn_aead(&ictx->spawn);
238 239 240 241 242

	if (IS_ERR(cipher))
		return PTR_ERR(cipher);

	ctx->child = cipher;
243 244 245
	crypto_aead_set_reqsize(tfm, sizeof(struct pcrypt_request) +
				     sizeof(struct aead_request) +
				     crypto_aead_reqsize(cipher));
246 247 248 249

	return 0;
}

250
static void pcrypt_aead_exit_tfm(struct crypto_aead *tfm)
251
{
252
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(tfm);
253 254 255 256

	crypto_free_aead(ctx->child);
}

257 258
static int pcrypt_init_instance(struct crypto_instance *inst,
				struct crypto_alg *alg)
259 260 261
{
	if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
262
		return -ENAMETOOLONG;
263 264 265 266 267 268 269

	memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);

	inst->alg.cra_priority = alg->cra_priority + 100;
	inst->alg.cra_blocksize = alg->cra_blocksize;
	inst->alg.cra_alignmask = alg->cra_alignmask;

270
	return 0;
271 272
}

273 274
static int pcrypt_create_aead(struct crypto_template *tmpl, struct rtattr **tb,
			      u32 type, u32 mask)
275
{
276
	struct pcrypt_instance_ctx *ctx;
277
	struct crypto_attr_type *algt;
278 279
	struct aead_instance *inst;
	struct aead_alg *alg;
280 281 282
	const char *name;
	int err;

283 284 285 286
	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return PTR_ERR(algt);

287 288
	name = crypto_attr_alg_name(tb[1]);
	if (IS_ERR(name))
289
		return PTR_ERR(name);
290 291 292

	inst = kzalloc(sizeof(*inst) + sizeof(*ctx), GFP_KERNEL);
	if (!inst)
293
		return -ENOMEM;
294

295 296
	ctx = aead_instance_ctx(inst);
	crypto_set_aead_spawn(&ctx->spawn, aead_crypto_instance(inst));
297

298 299 300
	err = crypto_grab_aead(&ctx->spawn, name,
			       algt->type & CRYPTO_ALG_AEAD_NEW,
			       algt->mask & CRYPTO_ALG_AEAD_NEW);
301 302
	if (err)
		goto out_free_inst;
303

304 305
	alg = crypto_spawn_aead_alg(&ctx->spawn);
	err = pcrypt_init_instance(aead_crypto_instance(inst), &alg->base);
306 307
	if (err)
		goto out_drop_aead;
308

309 310 311
	inst->alg.base.cra_flags = CRYPTO_ALG_ASYNC;
	inst->alg.base.cra_flags |= alg->base.cra_flags & CRYPTO_ALG_AEAD_NEW;

312 313
	inst->alg.ivsize = crypto_aead_alg_ivsize(alg);
	inst->alg.maxauthsize = crypto_aead_alg_maxauthsize(alg);
314

315
	inst->alg.base.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);
316

317 318
	inst->alg.init = pcrypt_aead_init_tfm;
	inst->alg.exit = pcrypt_aead_exit_tfm;
319

320 321 322 323
	inst->alg.setkey = pcrypt_aead_setkey;
	inst->alg.setauthsize = pcrypt_aead_setauthsize;
	inst->alg.encrypt = pcrypt_aead_encrypt;
	inst->alg.decrypt = pcrypt_aead_decrypt;
324

325 326 327
	err = aead_register_instance(tmpl, inst);
	if (err)
		goto out_drop_aead;
328

329
out:
330
	return err;
331 332 333 334 335 336

out_drop_aead:
	crypto_drop_aead(&ctx->spawn);
out_free_inst:
	kfree(inst);
	goto out;
337 338
}

339
static int pcrypt_create(struct crypto_template *tmpl, struct rtattr **tb)
340 341 342 343 344
{
	struct crypto_attr_type *algt;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
345
		return PTR_ERR(algt);
346 347 348

	switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
	case CRYPTO_ALG_TYPE_AEAD:
349
		return pcrypt_create_aead(tmpl, tb, algt->type, algt->mask);
350 351
	}

352
	return -EINVAL;
353 354 355 356 357 358
}

static void pcrypt_free(struct crypto_instance *inst)
{
	struct pcrypt_instance_ctx *ctx = crypto_instance_ctx(inst);

359
	crypto_drop_aead(&ctx->spawn);
360 361 362
	kfree(inst);
}

363 364 365
static int pcrypt_cpumask_change_notify(struct notifier_block *self,
					unsigned long val, void *data)
{
366
	struct padata_pcrypt *pcrypt;
367
	struct pcrypt_cpumask *new_mask, *old_mask;
368
	struct padata_cpumask *cpumask = (struct padata_cpumask *)data;
369 370 371 372

	if (!(val & PADATA_CPU_SERIAL))
		return 0;

373
	pcrypt = container_of(self, struct padata_pcrypt, nblock);
374 375 376 377 378 379 380 381 382 383
	new_mask = kmalloc(sizeof(*new_mask), GFP_KERNEL);
	if (!new_mask)
		return -ENOMEM;
	if (!alloc_cpumask_var(&new_mask->mask, GFP_KERNEL)) {
		kfree(new_mask);
		return -ENOMEM;
	}

	old_mask = pcrypt->cb_cpumask;

384
	cpumask_copy(new_mask->mask, cpumask->cbcpu);
385 386 387 388 389 390 391 392
	rcu_assign_pointer(pcrypt->cb_cpumask, new_mask);
	synchronize_rcu_bh();

	free_cpumask_var(old_mask->mask);
	kfree(old_mask);
	return 0;
}

393 394 395 396 397 398 399 400 401 402 403 404
static int pcrypt_sysfs_add(struct padata_instance *pinst, const char *name)
{
	int ret;

	pinst->kobj.kset = pcrypt_kset;
	ret = kobject_add(&pinst->kobj, NULL, name);
	if (!ret)
		kobject_uevent(&pinst->kobj, KOBJ_ADD);

	return ret;
}

405 406
static int pcrypt_init_padata(struct padata_pcrypt *pcrypt,
			      const char *name)
407 408 409 410
{
	int ret = -ENOMEM;
	struct pcrypt_cpumask *mask;

411 412
	get_online_cpus();

413 414
	pcrypt->wq = alloc_workqueue("%s", WQ_MEM_RECLAIM | WQ_CPU_INTENSIVE,
				     1, name);
415 416 417
	if (!pcrypt->wq)
		goto err;

418
	pcrypt->pinst = padata_alloc_possible(pcrypt->wq);
419 420 421 422 423 424 425 426 427 428 429
	if (!pcrypt->pinst)
		goto err_destroy_workqueue;

	mask = kmalloc(sizeof(*mask), GFP_KERNEL);
	if (!mask)
		goto err_free_padata;
	if (!alloc_cpumask_var(&mask->mask, GFP_KERNEL)) {
		kfree(mask);
		goto err_free_padata;
	}

430
	cpumask_and(mask->mask, cpu_possible_mask, cpu_online_mask);
431 432 433 434 435 436 437
	rcu_assign_pointer(pcrypt->cb_cpumask, mask);

	pcrypt->nblock.notifier_call = pcrypt_cpumask_change_notify;
	ret = padata_register_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	if (ret)
		goto err_free_cpumask;

438 439 440 441
	ret = pcrypt_sysfs_add(pcrypt->pinst, name);
	if (ret)
		goto err_unregister_notifier;

442 443
	put_online_cpus();

444
	return ret;
445

446 447
err_unregister_notifier:
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
448 449 450 451 452 453 454 455
err_free_cpumask:
	free_cpumask_var(mask->mask);
	kfree(mask);
err_free_padata:
	padata_free(pcrypt->pinst);
err_destroy_workqueue:
	destroy_workqueue(pcrypt->wq);
err:
456 457
	put_online_cpus();

458 459 460
	return ret;
}

461
static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)
462 463 464 465 466 467 468 469 470 471
{
	free_cpumask_var(pcrypt->cb_cpumask->mask);
	kfree(pcrypt->cb_cpumask);

	padata_stop(pcrypt->pinst);
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	destroy_workqueue(pcrypt->wq);
	padata_free(pcrypt->pinst);
}

472 473
static struct crypto_template pcrypt_tmpl = {
	.name = "pcrypt",
474
	.create = pcrypt_create,
475 476 477 478 479 480
	.free = pcrypt_free,
	.module = THIS_MODULE,
};

static int __init pcrypt_init(void)
{
481 482 483 484 485
	int err = -ENOMEM;

	pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
	if (!pcrypt_kset)
		goto err;
486

487
	err = pcrypt_init_padata(&pencrypt, "pencrypt");
488
	if (err)
489
		goto err_unreg_kset;
490

491
	err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
492
	if (err)
493
		goto err_deinit_pencrypt;
494

495 496
	padata_start(pencrypt.pinst);
	padata_start(pdecrypt.pinst);
497

498
	return crypto_register_template(&pcrypt_tmpl);
499

500
err_deinit_pencrypt:
501
	pcrypt_fini_padata(&pencrypt);
502 503
err_unreg_kset:
	kset_unregister(pcrypt_kset);
504
err:
505
	return err;
506 507 508 509
}

static void __exit pcrypt_exit(void)
{
510 511
	pcrypt_fini_padata(&pencrypt);
	pcrypt_fini_padata(&pdecrypt);
512

513
	kset_unregister(pcrypt_kset);
514 515 516 517 518 519 520 521 522
	crypto_unregister_template(&pcrypt_tmpl);
}

module_init(pcrypt_init);
module_exit(pcrypt_exit);

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Steffen Klassert <steffen.klassert@secunet.com>");
MODULE_DESCRIPTION("Parallel crypto wrapper");
523
MODULE_ALIAS_CRYPTO("pcrypt");