Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 1 | // SPDX-License-Identifier: GPL-2.0 |
| 2 | |
| 3 | /* |
| 4 | * OFB: Output FeedBack mode |
| 5 | * |
| 6 | * Copyright (C) 2018 ARM Limited or its affiliates. |
| 7 | * All rights reserved. |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 8 | */ |
| 9 | |
| 10 | #include <crypto/algapi.h> |
| 11 | #include <crypto/internal/skcipher.h> |
| 12 | #include <linux/err.h> |
| 13 | #include <linux/init.h> |
| 14 | #include <linux/kernel.h> |
| 15 | #include <linux/module.h> |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 16 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 17 | static int crypto_ofb_crypt(struct skcipher_request *req) |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 18 | { |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 19 | struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req); |
Eric Biggers | 21f3ca6 | 2019-01-03 20:16:20 -0800 | [diff] [blame] | 20 | struct crypto_cipher *cipher = skcipher_cipher_simple(tfm); |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 21 | const unsigned int bsize = crypto_cipher_blocksize(cipher); |
| 22 | struct skcipher_walk walk; |
| 23 | int err; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 24 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 25 | err = skcipher_walk_virt(&walk, req, false); |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 26 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 27 | while (walk.nbytes >= bsize) { |
| 28 | const u8 *src = walk.src.virt.addr; |
| 29 | u8 *dst = walk.dst.virt.addr; |
| 30 | u8 * const iv = walk.iv; |
| 31 | unsigned int nbytes = walk.nbytes; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 32 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 33 | do { |
| 34 | crypto_cipher_encrypt_one(cipher, iv, iv); |
| 35 | crypto_xor_cpy(dst, src, iv, bsize); |
| 36 | dst += bsize; |
| 37 | src += bsize; |
| 38 | } while ((nbytes -= bsize) >= bsize); |
| 39 | |
| 40 | err = skcipher_walk_done(&walk, nbytes); |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 41 | } |
| 42 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 43 | if (walk.nbytes) { |
| 44 | crypto_cipher_encrypt_one(cipher, walk.iv, walk.iv); |
| 45 | crypto_xor_cpy(walk.dst.virt.addr, walk.src.virt.addr, walk.iv, |
| 46 | walk.nbytes); |
| 47 | err = skcipher_walk_done(&walk, 0); |
| 48 | } |
| 49 | return err; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 50 | } |
| 51 | |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 52 | static int crypto_ofb_create(struct crypto_template *tmpl, struct rtattr **tb) |
| 53 | { |
| 54 | struct skcipher_instance *inst; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 55 | struct crypto_alg *alg; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 56 | int err; |
| 57 | |
Herbert Xu | b3c16bf | 2019-12-20 13:29:40 +0800 | [diff] [blame^] | 58 | inst = skcipher_alloc_instance_simple(tmpl, tb); |
Eric Biggers | 21f3ca6 | 2019-01-03 20:16:20 -0800 | [diff] [blame] | 59 | if (IS_ERR(inst)) |
| 60 | return PTR_ERR(inst); |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 61 | |
Herbert Xu | b3c16bf | 2019-12-20 13:29:40 +0800 | [diff] [blame^] | 62 | alg = skcipher_ialg_simple(inst); |
| 63 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 64 | /* OFB mode is a stream cipher. */ |
| 65 | inst->alg.base.cra_blocksize = 1; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 66 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 67 | /* |
| 68 | * To simplify the implementation, configure the skcipher walk to only |
| 69 | * give a partial block at the very end, never earlier. |
| 70 | */ |
| 71 | inst->alg.chunksize = alg->cra_blocksize; |
| 72 | |
Eric Biggers | b3e3e2d | 2019-01-03 20:16:12 -0800 | [diff] [blame] | 73 | inst->alg.encrypt = crypto_ofb_crypt; |
| 74 | inst->alg.decrypt = crypto_ofb_crypt; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 75 | |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 76 | err = skcipher_register_instance(tmpl, inst); |
| 77 | if (err) |
Eric Biggers | 21f3ca6 | 2019-01-03 20:16:20 -0800 | [diff] [blame] | 78 | inst->free(inst); |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 79 | |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 80 | return err; |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 81 | } |
| 82 | |
| 83 | static struct crypto_template crypto_ofb_tmpl = { |
| 84 | .name = "ofb", |
| 85 | .create = crypto_ofb_create, |
| 86 | .module = THIS_MODULE, |
| 87 | }; |
| 88 | |
| 89 | static int __init crypto_ofb_module_init(void) |
| 90 | { |
| 91 | return crypto_register_template(&crypto_ofb_tmpl); |
| 92 | } |
| 93 | |
| 94 | static void __exit crypto_ofb_module_exit(void) |
| 95 | { |
| 96 | crypto_unregister_template(&crypto_ofb_tmpl); |
| 97 | } |
| 98 | |
Eric Biggers | c4741b2 | 2019-04-11 21:57:42 -0700 | [diff] [blame] | 99 | subsys_initcall(crypto_ofb_module_init); |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 100 | module_exit(crypto_ofb_module_exit); |
| 101 | |
| 102 | MODULE_LICENSE("GPL"); |
Eric Biggers | 21f3ca6 | 2019-01-03 20:16:20 -0800 | [diff] [blame] | 103 | MODULE_DESCRIPTION("OFB block cipher mode of operation"); |
Gilad Ben-Yossef | e497c51 | 2018-09-20 14:18:39 +0100 | [diff] [blame] | 104 | MODULE_ALIAS_CRYPTO("ofb"); |