path: root/lib/cryptodev.c

/*
 * Copyright (C) 2009 Free Software Foundation
 *
 * Author: Nikos Mavrogiannopoulos
 *
 * This file is part of GNUTLS.
 *
 * The GNUTLS library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public License
 * as published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301,
 * USA
 *
 */

#include <gnutls_errors.h>
#include <gnutls_int.h>
#include <sys/ioctl.h>
#include <fcntl.h>
#include <gnutls/crypto.h>
#include <gnutls_cryptodev.h>

#ifdef ENABLE_CRYPTODEV

#include <crypto/cryptodev.h>

#ifndef CRYPTO_CIPHER_MAX_KEY_LEN
# define CRYPTO_CIPHER_MAX_KEY_LEN 64
#endif

#ifndef EALG_MAX_BLOCK_LEN
# define EALG_MAX_BLOCK_LEN 16
#endif


static int cryptodev_fd = -1;

struct cryptodev_ctx {
	struct session_op sess;
	struct crypt_op cryp;
	opaque iv[EALG_MAX_BLOCK_LEN];
	opaque key[CRYPTO_CIPHER_MAX_KEY_LEN];
	int cfd;
};

static const int gnutls_cipher_map[] = {
	[GNUTLS_CIPHER_AES_128_CBC] = CRYPTO_AES_CBC,
	[GNUTLS_CIPHER_AES_192_CBC] = CRYPTO_AES_CBC,
	[GNUTLS_CIPHER_AES_256_CBC] = CRYPTO_AES_CBC,
	[GNUTLS_CIPHER_3DES_CBC] = CRYPTO_3DES_CBC,
	[GNUTLS_CIPHER_CAMELLIA_128_CBC] = CRYPTO_CAMELLIA_CBC,
	[GNUTLS_CIPHER_CAMELLIA_256_CBC] = CRYPTO_CAMELLIA_CBC,
	[GNUTLS_CIPHER_DES_CBC] = CRYPTO_DES_CBC,
};
	
static int cryptodev_cipher_init(gnutls_cipher_algorithm_t algorithm, void** _ctx)
{
struct cryptodev_ctx* ctx;
int cipher = gnutls_cipher_map[algorithm];

	*_ctx = gnutls_calloc(1, sizeof(struct cryptodev_ctx));
	if (*_ctx == NULL) {
		gnutls_assert();
		return GNUTLS_E_MEMORY_ERROR;
	}

	ctx = *_ctx;

	if (ioctl(cryptodev_fd, CRIOGET, &ctx->cfd)) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_IOCTL_ERROR;
	}

	if (fcntl(ctx->cfd, F_SETFD, 1) == -1) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_IOCTL_ERROR;
	}

	ctx->sess.cipher = cipher;
	ctx->sess.key = ctx->key;
	ctx->cryp.iv = ctx->iv;

	return 0;
}

static int cryptodev_setkey( void* _ctx, const void *key, size_t keysize)
{
struct cryptodev_ctx* ctx = _ctx;

	ctx->sess.keylen = keysize;
	memcpy(ctx->key, key, keysize);
	
	if (ioctl(ctx->cfd, CIOCGSESSION, &ctx->sess)) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_IOCTL_ERROR;
	}
	ctx->cryp.ses = ctx->sess.ses;
	
	return 0;

}

static int cryptodev_setiv( void* _ctx, const void* iv, size_t iv_size)
{
struct cryptodev_ctx* ctx = _ctx;

	memcpy(ctx->iv, iv, iv_size);
	
	return 0;
}

static int cryptodev_encrypt(void* _ctx, const void* plain, size_t plainsize,
	void* encr, size_t encrsize)
{
struct cryptodev_ctx* ctx = _ctx;
	ctx->cryp.len = plainsize;
	ctx->cryp.src = (void*)plain;
	ctx->cryp.dst = encr;
	ctx->cryp.op = COP_ENCRYPT;
	if (ioctl(ctx->cfd, CIOCCRYPT, &ctx->cryp)) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_IOCTL_ERROR;
	}
	return 0;
}

static int cryptodev_decrypt(void* _ctx, const void* encr, size_t encrsize,
	void* plain, size_t plainsize)
{
struct cryptodev_ctx* ctx = _ctx;

	ctx->cryp.len = encrsize;
	ctx->cryp.src = (void*)encr;
	ctx->cryp.dst = plain;
	ctx->cryp.op = COP_DECRYPT;
	if (ioctl(ctx->cfd, CIOCCRYPT, &ctx->cryp)) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_IOCTL_ERROR;
	}
	return 0;
		
}

static void cryptodev_deinit(void* _ctx)
{
struct cryptodev_ctx* ctx = _ctx;

	close(ctx->cfd);
	gnutls_free(ctx);
}

static const gnutls_crypto_cipher_st cipher_struct = {
	.init = cryptodev_cipher_init,
	.setkey = cryptodev_setkey,
	.setiv = cryptodev_setiv,
	.encrypt = cryptodev_encrypt,
	.decrypt = cryptodev_decrypt,
	.deinit = cryptodev_deinit,
};

struct cipher_map {
	gnutls_cipher_algorithm_t gnutls_cipher;
	int cryptodev_cipher;
	int keylen;
};

static const struct cipher_map cipher_map[] = {
	{GNUTLS_CIPHER_3DES_CBC, CRYPTO_3DES_CBC, 21},
	{GNUTLS_CIPHER_AES_128_CBC, CRYPTO_AES_CBC, 16},
	{GNUTLS_CIPHER_AES_192_CBC, CRYPTO_AES_CBC, 24},
	{GNUTLS_CIPHER_AES_256_CBC, CRYPTO_AES_CBC, 32},
	{GNUTLS_CIPHER_CAMELLIA_128_CBC, CRYPTO_CAMELLIA_CBC, 16},
	{GNUTLS_CIPHER_CAMELLIA_256_CBC, CRYPTO_CAMELLIA_CBC, 24},
	{GNUTLS_CIPHER_DES_CBC, CRYPTO_DES_CBC, 8},
	{GNUTLS_CIPHER_UNKNOWN, 0}
};

static int register_crypto(int cfd)
{
	struct session_op sess;
	char fake_key[CRYPTO_CIPHER_MAX_KEY_LEN];
	int i=0, ret;
	
	memset(&sess, 0, sizeof(sess));
	do {
		/* test if a cipher is support it and if yes register it */
		sess.cipher = cipher_map[i].cryptodev_cipher;
		sess.keylen = cipher_map[i].keylen;
		sess.key = fake_key;

		if (ioctl(cfd, CIOCGSESSION, &sess)) {
			continue;
		}

		ret = gnutls_crypto_single_cipher_register(cipher_map[i].gnutls_cipher, 90, &cipher_struct);
		if (ret < 0) {
			gnutls_assert();
			return ret;
		}
		
	} while(cipher_map[i++].gnutls_cipher != GNUTLS_CIPHER_UNKNOWN);

	return 0;
}

int _gnutls_cryptodev_init(void)
{
	int cfd = -1, ret;

	/* Open the crypto device */
	cryptodev_fd = open("/dev/crypto", O_RDWR, 0);
	if (cryptodev_fd < 0) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_DEVICE_ERROR;
	}

	/* Clone file descriptor */
	if (ioctl(cryptodev_fd, CRIOGET, &cfd)) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_IOCTL_ERROR;
	}

	/* Set close-on-exec (not really neede here) */
	if (fcntl(cfd, F_SETFD, 1) == -1) {
		gnutls_assert();
		return GNUTLS_E_CRYPTODEV_IOCTL_ERROR;
	}

	/* Run the test itself */
	ret = register_crypto(cfd);
	
	close(cfd);
	return ret;
}

void _gnutls_cryptodev_deinit()
{
	close(cryptodev_fd);
}

#else
int _gnutls_cryptodev_init()
{
	return 0;
}

void _gnutls_cryptodev_deinit()
{
	return;
}
#endif /* ENABLE_CRYPTODEV */