linux-toradex.git/drivers/crypto/omap-aes.h, branch v6.4-rc3

crypto: omap-aes - permit asynchronous skcipher as fallback

2020-07-16T11:49:02+00:00

Even though the omap-aes driver implements asynchronous versions of
ecb(aes), cbc(aes) and ctr(aes), the fallbacks it allocates are required
to be synchronous. Given that SIMD based software implementations are
usually asynchronous as well, even though they rarely complete
asynchronously (this typically only happens in cases where the request was
made from softirq context, while SIMD was already in use in the task
context that it interrupted), these implementations are disregarded, and
either the generic C version or another table based version implemented in
assembler is selected instead.

Since falling back to synchronous AES is not only a performance issue, but
potentially a security issue as well (due to the fact that table based AES
is not time invariant), let's fix this, by allocating an ordinary skcipher
as the fallback, and invoke it with the completion routine that was given
to the outer request.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: omap-aes-gcm - convert to use crypto engine

2019-12-11T08:37:00+00:00

Currently omap-aes-gcm algorithms are using local implementation for
crypto request queuing logic. Instead, implement this via usage of
crypto engine which is used already for rest of the omap aes algorithms.
This avoids some random conflicts / crashes also which can happen if
both aes and aes-gcm are attempted to be used simultaneously.

Signed-off-by: Tero Kristo 
Signed-off-by: Herbert Xu

crypto: omap-aes-gcm - use the AES library to encrypt the tag

2019-12-11T08:36:59+00:00

The OMAP AES-GCM implementation uses a fallback ecb(aes) skcipher to
produce the keystream to encrypt the output tag. Let's use the new
AES library instead - this is much simpler, and shouldn't affect
performance given that it only involves a single block.

Signed-off-by: Ard Biesheuvel 
Reviewed-by: Tero Kristo 
Tested-by: Tero Kristo 
Signed-off-by: Herbert Xu

crypto: omap-aes-gcm - add missing .setauthsize hooks

2019-12-11T08:36:59+00:00

GCM only permits certain tag lengths, so populate the .setauthsize
hooks which ensure that only permitted sizes are accepted by the
implementation.

Signed-off-by: Ard Biesheuvel 
Reviewed-by: Tero Kristo 
Tested-by: Tero Kristo 
Signed-off-by: Herbert Xu

crypto: omap - switch to skcipher API

2019-11-17T01:02:45+00:00

Commit 7a7ffe65c8c5 ("crypto: skcipher - Add top-level skcipher interface")
dated 20 august 2015 introduced the new skcipher API which is supposed to
replace both blkcipher and ablkcipher. While all consumers of the API have
been converted long ago, some producers of the ablkcipher remain, forcing
us to keep the ablkcipher support routines alive, along with the matching
code to expose [a]blkciphers via the skcipher API.

So switch this driver to the skcipher API, allowing us to finally drop the
ablkcipher code in the near future.

Cc: Tony Lindgren 
Cc: linux-omap@vger.kernel.org
Reviewed-by: Tero Kristo 
Tested-by: Tero Kristo 
Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19T15:09:55+00:00

Based on 2 normalized pattern(s):

  this program is free software you can redistribute it and or modify
  it under the terms of the gnu general public license version 2 as
  published by the free software foundation

  this program is free software you can redistribute it and or modify
  it under the terms of the gnu general public license version 2 as
  published by the free software foundation #

extracted by the scancode license scanner the SPDX license identifier

  GPL-2.0-only

has been chosen to replace the boilerplate/reference in 4122 file(s).

Signed-off-by: Thomas Gleixner 
Reviewed-by: Enrico Weigelt 
Reviewed-by: Kate Stewart 
Reviewed-by: Allison Randal 
Cc: linux-spdx@vger.kernel.org
Link: https://lkml.kernel.org/r/20190604081206.933168790@linutronix.de
Signed-off-by: Greg Kroah-Hartman

crypto: omap-aes - Remove VLA usage of skcipher

2018-09-28T04:46:09+00:00

In the quest to remove all stack VLA usage from the kernel[1], this
replaces struct crypto_skcipher and SKCIPHER_REQUEST_ON_STACK() usage
with struct crypto_sync_skcipher and SYNC_SKCIPHER_REQUEST_ON_STACK(),
which uses a fixed stack size.

[1] https://lkml.kernel.org/r/CA+55aFzCG-zNmZwX4A2FQpadafLfEzK6CC=qPXydAacU1RqZWA@mail.gmail.com

Signed-off-by: Kees Cook 
Signed-off-by: Herbert Xu

crypto: omap - convert to new crypto engine API

2018-02-15T15:26:51+00:00

This patch convert the driver to the new crypto engine API.

Signed-off-by: Corentin Labbe 
Signed-off-by: Herbert Xu

crypto: omap-aes - Add support for GCM mode

2017-06-10T04:04:19+00:00

OMAP AES hw supports AES-GCM mode. This patch adds support for GCM and
RFC4106 GCM mode in omap-aes driver. The GCM implementation is mostly
written into its own source file, which gets built into the same driver
binary as the existing AES support.

Signed-off-by: Lokesh Vutla 
[t-kristo@ti.com: forward port to latest upstream kernel, conversion to use
 omap-crypto lib and some additional fixes]
Signed-off-by: Tero Kristo 
Signed-off-by: Herbert Xu

crypto: omap-aes - export some AES driver functionality locally

2017-06-10T04:04:18+00:00

These are going to be required by the addition of the GCM support.

Signed-off-by: Tero Kristo 
Signed-off-by: Herbert Xu