[linux-2.6-block.git] / crypto / pcrypt.c

/*
 * pcrypt - Parallel crypto wrapper.
 *
 * Copyright (C) 2009 secunet Security Networks AG
 * Copyright (C) 2009 Steffen Klassert <steffen.klassert@secunet.com>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
 */

#include <crypto/algapi.h>
#include <crypto/internal/aead.h>
#include <linux/err.h>
#include <linux/init.h>
#include <linux/module.h>
#include <linux/slab.h>
#include <linux/notifier.h>
#include <linux/kobject.h>
#include <linux/cpu.h>
#include <crypto/pcrypt.h>

struct padata_pcrypt {
	struct padata_instance *pinst;
	struct workqueue_struct *wq;

	/*
	 * Cpumask for callback CPUs. It should be
	 * equal to serial cpumask of corresponding padata instance,
	 * so it is updated when padata notifies us about serial
	 * cpumask change.
	 *
	 * cb_cpumask is protected by RCU. This fact prevents us from
	 * using cpumask_var_t directly because the actual type of
	 * cpumsak_var_t depends on kernel configuration(particularly on
	 * CONFIG_CPUMASK_OFFSTACK macro). Depending on the configuration
	 * cpumask_var_t may be either a pointer to the struct cpumask
	 * or a variable allocated on the stack. Thus we can not safely use
	 * cpumask_var_t with RCU operations such as rcu_assign_pointer or
	 * rcu_dereference. So cpumask_var_t is wrapped with struct
	 * pcrypt_cpumask which makes possible to use it with RCU.
	 */
	struct pcrypt_cpumask {
		cpumask_var_t mask;
	} *cb_cpumask;
	struct notifier_block nblock;
};

static struct padata_pcrypt pencrypt;
static struct padata_pcrypt pdecrypt;
static struct kset           *pcrypt_kset;

struct pcrypt_instance_ctx {
	struct crypto_spawn spawn;
	unsigned int tfm_count;
};

struct pcrypt_aead_ctx {
	struct crypto_aead *child;
	unsigned int cb_cpu;
};

static int pcrypt_do_parallel(struct padata_priv *padata, unsigned int *cb_cpu,
			      struct padata_pcrypt *pcrypt)
{
	unsigned int cpu_index, cpu, i;
	struct pcrypt_cpumask *cpumask;

	cpu = *cb_cpu;

	rcu_read_lock_bh();
	cpumask = rcu_dereference(pcrypt->cb_cpumask);
	if (cpumask_test_cpu(cpu, cpumask->mask))
			goto out;

	if (!cpumask_weight(cpumask->mask))
			goto out;

	cpu_index = cpu % cpumask_weight(cpumask->mask);

	cpu = cpumask_first(cpumask->mask);
	for (i = 0; i < cpu_index; i++)
		cpu = cpumask_next(cpu, cpumask->mask);

	*cb_cpu = cpu;

out:
	rcu_read_unlock_bh();
	return padata_do_parallel(pcrypt->pinst, padata, cpu);
}

static int pcrypt_aead_setkey(struct crypto_aead *parent,
			      const u8 *key, unsigned int keylen)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
				   unsigned int authsize)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

static void pcrypt_aead_serial(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	aead_request_complete(req->base.data, padata->info);
}

static void pcrypt_aead_giv_serial(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);

	aead_request_complete(req->areq.base.data, padata->info);
}

static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
{
	struct aead_request *req = areq->data;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct padata_priv *padata = pcrypt_request_padata(preq);

	padata->info = err;
	req->base.flags &= ~CRYPTO_TFM_REQ_MAY_SLEEP;

	padata_do_serial(padata);
}

static void pcrypt_aead_enc(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_encrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_encrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_enc;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
	aead_request_set_assoc(creq, req->assoc, req->assoclen);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static void pcrypt_aead_dec(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_decrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_decrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_dec;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
	aead_request_set_assoc(creq, req->assoc, req->assoclen);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pdecrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static void pcrypt_aead_givenc(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_givencrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_givencrypt(struct aead_givcrypt_request *req)
{
	int err;
	struct aead_request *areq = &req->areq;
	struct pcrypt_request *preq = aead_request_ctx(areq);
	struct aead_givcrypt_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = aead_givcrypt_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(areq);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_givenc;
	padata->serial = pcrypt_aead_giv_serial;

	aead_givcrypt_set_tfm(creq, ctx->child);
	aead_givcrypt_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				   pcrypt_aead_done, areq);
	aead_givcrypt_set_crypt(creq, areq->src, areq->dst,
				areq->cryptlen, areq->iv);
	aead_givcrypt_set_assoc(creq, areq->assoc, areq->assoclen);
	aead_givcrypt_set_giv(creq, req->giv, req->seq);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static int pcrypt_aead_init_tfm(struct crypto_tfm *tfm)
{
	int cpu, cpu_index;
	struct crypto_instance *inst = crypto_tfm_alg_instance(tfm);
	struct pcrypt_instance_ctx *ictx = crypto_instance_ctx(inst);
	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);
	struct crypto_aead *cipher;

	ictx->tfm_count++;

	cpu_index = ictx->tfm_count % cpumask_weight(cpu_online_mask);

	ctx->cb_cpu = cpumask_first(cpu_online_mask);
	for (cpu = 0; cpu < cpu_index; cpu++)
		ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);

	cipher = crypto_spawn_aead(crypto_instance_ctx(inst));

	if (IS_ERR(cipher))
		return PTR_ERR(cipher);

	ctx->child = cipher;
	tfm->crt_aead.reqsize = sizeof(struct pcrypt_request)
		+ sizeof(struct aead_givcrypt_request)
		+ crypto_aead_reqsize(cipher);

	return 0;
}

static void pcrypt_aead_exit_tfm(struct crypto_tfm *tfm)
{
	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);

	crypto_free_aead(ctx->child);
}

static struct crypto_instance *pcrypt_alloc_instance(struct crypto_alg *alg)
{
	struct crypto_instance *inst;
	struct pcrypt_instance_ctx *ctx;
	int err;

	inst = kzalloc(sizeof(*inst) + sizeof(*ctx), GFP_KERNEL);
	if (!inst) {
		inst = ERR_PTR(-ENOMEM);
		goto out;
	}

	err = -ENAMETOOLONG;
	if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
		goto out_free_inst;

	memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);

	ctx = crypto_instance_ctx(inst);
	err = crypto_init_spawn(&ctx->spawn, alg, inst,
				CRYPTO_ALG_TYPE_MASK);
	if (err)
		goto out_free_inst;

	inst->alg.cra_priority = alg->cra_priority + 100;
	inst->alg.cra_blocksize = alg->cra_blocksize;
	inst->alg.cra_alignmask = alg->cra_alignmask;

out:
	return inst;

out_free_inst:
	kfree(inst);
	inst = ERR_PTR(err);
	goto out;
}

static struct crypto_instance *pcrypt_alloc_aead(struct rtattr **tb,
						 u32 type, u32 mask)
{
	struct crypto_instance *inst;
	struct crypto_alg *alg;

	alg = crypto_get_attr_alg(tb, type, (mask & CRYPTO_ALG_TYPE_MASK));
	if (IS_ERR(alg))
		return ERR_CAST(alg);

	inst = pcrypt_alloc_instance(alg);
	if (IS_ERR(inst))
		goto out_put_alg;

	inst->alg.cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC;
	inst->alg.cra_type = &crypto_aead_type;

	inst->alg.cra_aead.ivsize = alg->cra_aead.ivsize;
	inst->alg.cra_aead.geniv = alg->cra_aead.geniv;
	inst->alg.cra_aead.maxauthsize = alg->cra_aead.maxauthsize;

	inst->alg.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);

	inst->alg.cra_init = pcrypt_aead_init_tfm;
	inst->alg.cra_exit = pcrypt_aead_exit_tfm;

	inst->alg.cra_aead.setkey = pcrypt_aead_setkey;
	inst->alg.cra_aead.setauthsize = pcrypt_aead_setauthsize;
	inst->alg.cra_aead.encrypt = pcrypt_aead_encrypt;
	inst->alg.cra_aead.decrypt = pcrypt_aead_decrypt;
	inst->alg.cra_aead.givencrypt = pcrypt_aead_givencrypt;

out_put_alg:
	crypto_mod_put(alg);
	return inst;
}

static struct crypto_instance *pcrypt_alloc(struct rtattr **tb)
{
	struct crypto_attr_type *algt;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return ERR_CAST(algt);

	switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
	case CRYPTO_ALG_TYPE_AEAD:
		return pcrypt_alloc_aead(tb, algt->type, algt->mask);
	}

	return ERR_PTR(-EINVAL);
}

static void pcrypt_free(struct crypto_instance *inst)
{
	struct pcrypt_instance_ctx *ctx = crypto_instance_ctx(inst);

	crypto_drop_spawn(&ctx->spawn);
	kfree(inst);
}

static int pcrypt_cpumask_change_notify(struct notifier_block *self,
					unsigned long val, void *data)
{
	struct padata_pcrypt *pcrypt;
	struct pcrypt_cpumask *new_mask, *old_mask;
	struct padata_cpumask *cpumask = (struct padata_cpumask *)data;

	if (!(val & PADATA_CPU_SERIAL))
		return 0;

	pcrypt = container_of(self, struct padata_pcrypt, nblock);
	new_mask = kmalloc(sizeof(*new_mask), GFP_KERNEL);
	if (!new_mask)
		return -ENOMEM;
	if (!alloc_cpumask_var(&new_mask->mask, GFP_KERNEL)) {
		kfree(new_mask);
		return -ENOMEM;
	}

	old_mask = pcrypt->cb_cpumask;

	cpumask_copy(new_mask->mask, cpumask->cbcpu);
	rcu_assign_pointer(pcrypt->cb_cpumask, new_mask);
	synchronize_rcu_bh();

	free_cpumask_var(old_mask->mask);
	kfree(old_mask);
	return 0;
}

static int pcrypt_sysfs_add(struct padata_instance *pinst, const char *name)
{
	int ret;

	pinst->kobj.kset = pcrypt_kset;
	ret = kobject_add(&pinst->kobj, NULL, name);
	if (!ret)
		kobject_uevent(&pinst->kobj, KOBJ_ADD);

	return ret;
}

static int pcrypt_init_padata(struct padata_pcrypt *pcrypt,
			      const char *name)
{
	int ret = -ENOMEM;
	struct pcrypt_cpumask *mask;

	get_online_cpus();

	pcrypt->wq = alloc_workqueue("%s", WQ_MEM_RECLAIM | WQ_CPU_INTENSIVE,
				     1, name);
	if (!pcrypt->wq)
		goto err;

	pcrypt->pinst = padata_alloc_possible(pcrypt->wq);
	if (!pcrypt->pinst)
		goto err_destroy_workqueue;

	mask = kmalloc(sizeof(*mask), GFP_KERNEL);
	if (!mask)
		goto err_free_padata;
	if (!alloc_cpumask_var(&mask->mask, GFP_KERNEL)) {
		kfree(mask);
		goto err_free_padata;
	}

	cpumask_and(mask->mask, cpu_possible_mask, cpu_online_mask);
	rcu_assign_pointer(pcrypt->cb_cpumask, mask);

	pcrypt->nblock.notifier_call = pcrypt_cpumask_change_notify;
	ret = padata_register_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	if (ret)
		goto err_free_cpumask;

	ret = pcrypt_sysfs_add(pcrypt->pinst, name);
	if (ret)
		goto err_unregister_notifier;

	put_online_cpus();

	return ret;

err_unregister_notifier:
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
err_free_cpumask:
	free_cpumask_var(mask->mask);
	kfree(mask);
err_free_padata:
	padata_free(pcrypt->pinst);
err_destroy_workqueue:
	destroy_workqueue(pcrypt->wq);
err:
	put_online_cpus();

	return ret;
}

static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)
{
	free_cpumask_var(pcrypt->cb_cpumask->mask);
	kfree(pcrypt->cb_cpumask);

	padata_stop(pcrypt->pinst);
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	destroy_workqueue(pcrypt->wq);
	padata_free(pcrypt->pinst);
}

static struct crypto_template pcrypt_tmpl = {
	.name = "pcrypt",
	.alloc = pcrypt_alloc,
	.free = pcrypt_free,
	.module = THIS_MODULE,
};

static int __init pcrypt_init(void)
{
	int err = -ENOMEM;

	pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
	if (!pcrypt_kset)
		goto err;

	err = pcrypt_init_padata(&pencrypt, "pencrypt");
	if (err)
		goto err_unreg_kset;

	err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
	if (err)
		goto err_deinit_pencrypt;

	padata_start(pencrypt.pinst);
	padata_start(pdecrypt.pinst);

	return crypto_register_template(&pcrypt_tmpl);

err_deinit_pencrypt:
	pcrypt_fini_padata(&pencrypt);
err_unreg_kset:
	kset_unregister(pcrypt_kset);
err:
	return err;
}

static void __exit pcrypt_exit(void)
{
	pcrypt_fini_padata(&pencrypt);
	pcrypt_fini_padata(&pdecrypt);

	kset_unregister(pcrypt_kset);
	crypto_unregister_template(&pcrypt_tmpl);
}

module_init(pcrypt_init);
module_exit(pcrypt_exit);

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Steffen Klassert <steffen.klassert@secunet.com>");
MODULE_DESCRIPTION("Parallel crypto wrapper");
Commit	Line	Data
5068c7a8 SK	1	/*
	2	* pcrypt - Parallel crypto wrapper.
	3	*
	4	* Copyright (C) 2009 secunet Security Networks AG
	5	* Copyright (C) 2009 Steffen Klassert <steffen.klassert@secunet.com>
	6	*
	7	* This program is free software; you can redistribute it and/or modify it
	8	* under the terms and conditions of the GNU General Public License,
	9	* version 2, as published by the Free Software Foundation.
	10	*
	11	* This program is distributed in the hope it will be useful, but WITHOUT
	12	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	13	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
	14	* more details.
	15	*
	16	* You should have received a copy of the GNU General Public License along with
	17	* this program; if not, write to the Free Software Foundation, Inc.,
	18	* 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
	19	*/
	20
	21	#include <crypto/algapi.h>
	22	#include <crypto/internal/aead.h>
	23	#include <linux/err.h>
	24	#include <linux/init.h>
	25	#include <linux/module.h>
	26	#include <linux/slab.h>
e15bacbe	27	#include <linux/notifier.h>
a3fb1e33	28	#include <linux/kobject.h>
d3f64e46	29	#include <linux/cpu.h>
5068c7a8 SK	30	#include <crypto/pcrypt.h>
5068c7a8 SK	31
c57e842e	32	struct padata_pcrypt {
e15bacbe DK	33	struct padata_instance *pinst;
	34	struct workqueue_struct *wq;
	35
	36	/*
	37	* Cpumask for callback CPUs. It should be
	38	* equal to serial cpumask of corresponding padata instance,
	39	* so it is updated when padata notifies us about serial
	40	* cpumask change.
	41	*
	42	* cb_cpumask is protected by RCU. This fact prevents us from
	43	* using cpumask_var_t directly because the actual type of
	44	* cpumsak_var_t depends on kernel configuration(particularly on
	45	* CONFIG_CPUMASK_OFFSTACK macro). Depending on the configuration
	46	* cpumask_var_t may be either a pointer to the struct cpumask
	47	* or a variable allocated on the stack. Thus we can not safely use
	48	* cpumask_var_t with RCU operations such as rcu_assign_pointer or
	49	* rcu_dereference. So cpumask_var_t is wrapped with struct
	50	* pcrypt_cpumask which makes possible to use it with RCU.
	51	*/
	52	struct pcrypt_cpumask {
	53	cpumask_var_t mask;
	54	} *cb_cpumask;
	55	struct notifier_block nblock;
	56	};
	57
c57e842e SK	58	static struct padata_pcrypt pencrypt;
c57e842e SK	59	static struct padata_pcrypt pdecrypt;
a3fb1e33	60	static struct kset *pcrypt_kset;
5068c7a8 SK	61
	62	struct pcrypt_instance_ctx {
	63	struct crypto_spawn spawn;
	64	unsigned int tfm_count;
	65	};
	66
	67	struct pcrypt_aead_ctx {
	68	struct crypto_aead *child;
	69	unsigned int cb_cpu;
	70	};
	71
	72	static int pcrypt_do_parallel(struct padata_priv padata, unsigned int cb_cpu,
c57e842e	73	struct padata_pcrypt *pcrypt)
5068c7a8 SK	74	{
5068c7a8 SK	75	unsigned int cpu_index, cpu, i;
e15bacbe	76	struct pcrypt_cpumask *cpumask;
5068c7a8 SK	77
	78	cpu = *cb_cpu;
	79
e15bacbe DK	80	rcu_read_lock_bh();
	81	cpumask = rcu_dereference(pcrypt->cb_cpumask);
	82	if (cpumask_test_cpu(cpu, cpumask->mask))
5068c7a8 SK	83	goto out;
5068c7a8 SK	84
cc74f4bc SK	85	if (!cpumask_weight(cpumask->mask))
	86	goto out;
	87
e15bacbe	88	cpu_index = cpu % cpumask_weight(cpumask->mask);
5068c7a8	89
e15bacbe	90	cpu = cpumask_first(cpumask->mask);
5068c7a8	91	for (i = 0; i < cpu_index; i++)
e15bacbe	92	cpu = cpumask_next(cpu, cpumask->mask);
5068c7a8 SK	93
	94	*cb_cpu = cpu;
	95
	96	out:
e15bacbe DK	97	rcu_read_unlock_bh();
e15bacbe DK	98	return padata_do_parallel(pcrypt->pinst, padata, cpu);
5068c7a8 SK	99	}
	100
	101	static int pcrypt_aead_setkey(struct crypto_aead *parent,
	102	const u8 *key, unsigned int keylen)
	103	{
	104	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
	105
	106	return crypto_aead_setkey(ctx->child, key, keylen);
	107	}
	108
	109	static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
	110	unsigned int authsize)
	111	{
	112	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
	113
	114	return crypto_aead_setauthsize(ctx->child, authsize);
	115	}
	116
	117	static void pcrypt_aead_serial(struct padata_priv *padata)
	118	{
	119	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	120	struct aead_request *req = pcrypt_request_ctx(preq);
	121
	122	aead_request_complete(req->base.data, padata->info);
	123	}
	124
	125	static void pcrypt_aead_giv_serial(struct padata_priv *padata)
	126	{
	127	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	128	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);
	129
	130	aead_request_complete(req->areq.base.data, padata->info);
	131	}
	132
	133	static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
	134	{
	135	struct aead_request *req = areq->data;
	136	struct pcrypt_request *preq = aead_request_ctx(req);
	137	struct padata_priv *padata = pcrypt_request_padata(preq);
	138
	139	padata->info = err;
	140	req->base.flags &= ~CRYPTO_TFM_REQ_MAY_SLEEP;
	141
	142	padata_do_serial(padata);
	143	}
	144
	145	static void pcrypt_aead_enc(struct padata_priv *padata)
	146	{
	147	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	148	struct aead_request *req = pcrypt_request_ctx(preq);
	149
	150	padata->info = crypto_aead_encrypt(req);
	151
5a1436be	152	if (padata->info == -EINPROGRESS)
5068c7a8 SK	153	return;
	154
	155	padata_do_serial(padata);
	156	}
	157
	158	static int pcrypt_aead_encrypt(struct aead_request *req)
	159	{
	160	int err;
	161	struct pcrypt_request *preq = aead_request_ctx(req);
	162	struct aead_request *creq = pcrypt_request_ctx(preq);
	163	struct padata_priv *padata = pcrypt_request_padata(preq);
	164	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	165	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	166	u32 flags = aead_request_flags(req);
	167
	168	memset(padata, 0, sizeof(struct padata_priv));
	169
	170	padata->parallel = pcrypt_aead_enc;
	171	padata->serial = pcrypt_aead_serial;
	172
	173	aead_request_set_tfm(creq, ctx->child);
	174	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	175	pcrypt_aead_done, req);
	176	aead_request_set_crypt(creq, req->src, req->dst,
	177	req->cryptlen, req->iv);
	178	aead_request_set_assoc(creq, req->assoc, req->assoclen);
	179
e15bacbe	180	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
83f619f3 SK	181	if (!err)
83f619f3 SK	182	return -EINPROGRESS;
5068c7a8 SK	183
	184	return err;
	185	}
	186
	187	static void pcrypt_aead_dec(struct padata_priv *padata)
	188	{
	189	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	190	struct aead_request *req = pcrypt_request_ctx(preq);
	191
	192	padata->info = crypto_aead_decrypt(req);
	193
5a1436be	194	if (padata->info == -EINPROGRESS)
5068c7a8 SK	195	return;
	196
	197	padata_do_serial(padata);
	198	}
	199
	200	static int pcrypt_aead_decrypt(struct aead_request *req)
	201	{
	202	int err;
	203	struct pcrypt_request *preq = aead_request_ctx(req);
	204	struct aead_request *creq = pcrypt_request_ctx(preq);
	205	struct padata_priv *padata = pcrypt_request_padata(preq);
	206	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	207	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	208	u32 flags = aead_request_flags(req);
	209
	210	memset(padata, 0, sizeof(struct padata_priv));
	211
	212	padata->parallel = pcrypt_aead_dec;
	213	padata->serial = pcrypt_aead_serial;
	214
	215	aead_request_set_tfm(creq, ctx->child);
	216	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	217	pcrypt_aead_done, req);
	218	aead_request_set_crypt(creq, req->src, req->dst,
	219	req->cryptlen, req->iv);
	220	aead_request_set_assoc(creq, req->assoc, req->assoclen);
	221
e15bacbe	222	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pdecrypt);
83f619f3 SK	223	if (!err)
83f619f3 SK	224	return -EINPROGRESS;
5068c7a8 SK	225
	226	return err;
	227	}
	228
	229	static void pcrypt_aead_givenc(struct padata_priv *padata)
	230	{
	231	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	232	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);
	233
	234	padata->info = crypto_aead_givencrypt(req);
	235
5a1436be	236	if (padata->info == -EINPROGRESS)
5068c7a8 SK	237	return;
	238
	239	padata_do_serial(padata);
	240	}
	241
	242	static int pcrypt_aead_givencrypt(struct aead_givcrypt_request *req)
	243	{
	244	int err;
	245	struct aead_request *areq = &req->areq;
	246	struct pcrypt_request *preq = aead_request_ctx(areq);
	247	struct aead_givcrypt_request *creq = pcrypt_request_ctx(preq);
	248	struct padata_priv *padata = pcrypt_request_padata(preq);
	249	struct crypto_aead *aead = aead_givcrypt_reqtfm(req);
	250	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	251	u32 flags = aead_request_flags(areq);
	252
	253	memset(padata, 0, sizeof(struct padata_priv));
	254
	255	padata->parallel = pcrypt_aead_givenc;
	256	padata->serial = pcrypt_aead_giv_serial;
	257
	258	aead_givcrypt_set_tfm(creq, ctx->child);
	259	aead_givcrypt_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	260	pcrypt_aead_done, areq);
	261	aead_givcrypt_set_crypt(creq, areq->src, areq->dst,
	262	areq->cryptlen, areq->iv);
	263	aead_givcrypt_set_assoc(creq, areq->assoc, areq->assoclen);
	264	aead_givcrypt_set_giv(creq, req->giv, req->seq);
	265
e15bacbe	266	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
83f619f3 SK	267	if (!err)
83f619f3 SK	268	return -EINPROGRESS;
5068c7a8 SK	269
	270	return err;
	271	}
	272
	273	static int pcrypt_aead_init_tfm(struct crypto_tfm *tfm)
	274	{
	275	int cpu, cpu_index;
	276	struct crypto_instance *inst = crypto_tfm_alg_instance(tfm);
	277	struct pcrypt_instance_ctx *ictx = crypto_instance_ctx(inst);
	278	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);
	279	struct crypto_aead *cipher;
	280
	281	ictx->tfm_count++;
	282
fbf0ca1b	283	cpu_index = ictx->tfm_count % cpumask_weight(cpu_online_mask);
5068c7a8	284
fbf0ca1b	285	ctx->cb_cpu = cpumask_first(cpu_online_mask);
5068c7a8	286	for (cpu = 0; cpu < cpu_index; cpu++)
fbf0ca1b	287	ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);
5068c7a8 SK	288
	289	cipher = crypto_spawn_aead(crypto_instance_ctx(inst));
	290
	291	if (IS_ERR(cipher))
	292	return PTR_ERR(cipher);
	293
	294	ctx->child = cipher;
	295	tfm->crt_aead.reqsize = sizeof(struct pcrypt_request)
	296	+ sizeof(struct aead_givcrypt_request)
	297	+ crypto_aead_reqsize(cipher);
	298
	299	return 0;
	300	}
	301
	302	static void pcrypt_aead_exit_tfm(struct crypto_tfm *tfm)
	303	{
	304	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);
	305
	306	crypto_free_aead(ctx->child);
	307	}
	308
	309	static struct crypto_instance pcrypt_alloc_instance(struct crypto_alg alg)
	310	{
	311	struct crypto_instance *inst;
	312	struct pcrypt_instance_ctx *ctx;
	313	int err;
	314
	315	inst = kzalloc(sizeof(inst) + sizeof(ctx), GFP_KERNEL);
	316	if (!inst) {
	317	inst = ERR_PTR(-ENOMEM);
	318	goto out;
	319	}
	320
	321	err = -ENAMETOOLONG;
	322	if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
	323	"pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
	324	goto out_free_inst;
	325
	326	memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);
	327
	328	ctx = crypto_instance_ctx(inst);
	329	err = crypto_init_spawn(&ctx->spawn, alg, inst,
	330	CRYPTO_ALG_TYPE_MASK);
	331	if (err)
	332	goto out_free_inst;
	333
	334	inst->alg.cra_priority = alg->cra_priority + 100;
	335	inst->alg.cra_blocksize = alg->cra_blocksize;
	336	inst->alg.cra_alignmask = alg->cra_alignmask;
	337
	338	out:
	339	return inst;
	340
	341	out_free_inst:
	342	kfree(inst);
	343	inst = ERR_PTR(err);
	344	goto out;
	345	}
	346
80a6d7db DC	347	static struct crypto_instance pcrypt_alloc_aead(struct rtattr *tb,
80a6d7db DC	348	u32 type, u32 mask)
5068c7a8 SK	349	{
	350	struct crypto_instance *inst;
	351	struct crypto_alg *alg;
5068c7a8	352
80a6d7db	353	alg = crypto_get_attr_alg(tb, type, (mask & CRYPTO_ALG_TYPE_MASK));
5068c7a8 SK	354	if (IS_ERR(alg))
	355	return ERR_CAST(alg);
	356
	357	inst = pcrypt_alloc_instance(alg);
	358	if (IS_ERR(inst))
	359	goto out_put_alg;
	360
	361	inst->alg.cra_flags = CRYPTO_ALG_TYPE_AEAD \| CRYPTO_ALG_ASYNC;
	362	inst->alg.cra_type = &crypto_aead_type;
	363
	364	inst->alg.cra_aead.ivsize = alg->cra_aead.ivsize;
	365	inst->alg.cra_aead.geniv = alg->cra_aead.geniv;
	366	inst->alg.cra_aead.maxauthsize = alg->cra_aead.maxauthsize;
	367
	368	inst->alg.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);
	369
	370	inst->alg.cra_init = pcrypt_aead_init_tfm;
	371	inst->alg.cra_exit = pcrypt_aead_exit_tfm;
	372
	373	inst->alg.cra_aead.setkey = pcrypt_aead_setkey;
	374	inst->alg.cra_aead.setauthsize = pcrypt_aead_setauthsize;
	375	inst->alg.cra_aead.encrypt = pcrypt_aead_encrypt;
	376	inst->alg.cra_aead.decrypt = pcrypt_aead_decrypt;
	377	inst->alg.cra_aead.givencrypt = pcrypt_aead_givencrypt;
	378
	379	out_put_alg:
	380	crypto_mod_put(alg);
	381	return inst;
	382	}
	383
	384	static struct crypto_instance pcrypt_alloc(struct rtattr *tb)
	385	{
	386	struct crypto_attr_type *algt;
	387
	388	algt = crypto_get_attr_type(tb);
	389	if (IS_ERR(algt))
	390	return ERR_CAST(algt);
	391
	392	switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
	393	case CRYPTO_ALG_TYPE_AEAD:
80a6d7db	394	return pcrypt_alloc_aead(tb, algt->type, algt->mask);
5068c7a8 SK	395	}
	396
	397	return ERR_PTR(-EINVAL);
	398	}
	399
	400	static void pcrypt_free(struct crypto_instance *inst)
	401	{
	402	struct pcrypt_instance_ctx *ctx = crypto_instance_ctx(inst);
	403
	404	crypto_drop_spawn(&ctx->spawn);
	405	kfree(inst);
	406	}
	407
e15bacbe DK	408	static int pcrypt_cpumask_change_notify(struct notifier_block *self,
	409	unsigned long val, void *data)
	410	{
c57e842e	411	struct padata_pcrypt *pcrypt;
e15bacbe	412	struct pcrypt_cpumask new_mask, old_mask;
d3f64e46	413	struct padata_cpumask cpumask = (struct padata_cpumask )data;
e15bacbe DK	414
	415	if (!(val & PADATA_CPU_SERIAL))
	416	return 0;
	417
c57e842e	418	pcrypt = container_of(self, struct padata_pcrypt, nblock);
e15bacbe DK	419	new_mask = kmalloc(sizeof(*new_mask), GFP_KERNEL);
	420	if (!new_mask)
	421	return -ENOMEM;
	422	if (!alloc_cpumask_var(&new_mask->mask, GFP_KERNEL)) {
	423	kfree(new_mask);
	424	return -ENOMEM;
	425	}
	426
	427	old_mask = pcrypt->cb_cpumask;
	428
d3f64e46	429	cpumask_copy(new_mask->mask, cpumask->cbcpu);
e15bacbe DK	430	rcu_assign_pointer(pcrypt->cb_cpumask, new_mask);
	431	synchronize_rcu_bh();
	432
	433	free_cpumask_var(old_mask->mask);
	434	kfree(old_mask);
	435	return 0;
	436	}
	437
a3fb1e33 DK	438	static int pcrypt_sysfs_add(struct padata_instance pinst, const char name)
	439	{
	440	int ret;
	441
	442	pinst->kobj.kset = pcrypt_kset;
	443	ret = kobject_add(&pinst->kobj, NULL, name);
	444	if (!ret)
	445	kobject_uevent(&pinst->kobj, KOBJ_ADD);
	446
	447	return ret;
	448	}
	449
c57e842e SK	450	static int pcrypt_init_padata(struct padata_pcrypt *pcrypt,
c57e842e SK	451	const char *name)
e15bacbe DK	452	{
	453	int ret = -ENOMEM;
	454	struct pcrypt_cpumask *mask;
	455
d3f64e46 SK	456	get_online_cpus();
d3f64e46 SK	457
d8537548 KC	458	pcrypt->wq = alloc_workqueue("%s", WQ_MEM_RECLAIM \| WQ_CPU_INTENSIVE,
d8537548 KC	459	1, name);
e15bacbe DK	460	if (!pcrypt->wq)
	461	goto err;
	462
e6cc1170	463	pcrypt->pinst = padata_alloc_possible(pcrypt->wq);
e15bacbe DK	464	if (!pcrypt->pinst)
	465	goto err_destroy_workqueue;
	466
	467	mask = kmalloc(sizeof(*mask), GFP_KERNEL);
	468	if (!mask)
	469	goto err_free_padata;
	470	if (!alloc_cpumask_var(&mask->mask, GFP_KERNEL)) {
	471	kfree(mask);
	472	goto err_free_padata;
	473	}
	474
fbf0ca1b	475	cpumask_and(mask->mask, cpu_possible_mask, cpu_online_mask);
e15bacbe DK	476	rcu_assign_pointer(pcrypt->cb_cpumask, mask);
	477
	478	pcrypt->nblock.notifier_call = pcrypt_cpumask_change_notify;
	479	ret = padata_register_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	480	if (ret)
	481	goto err_free_cpumask;
	482
a3fb1e33 DK	483	ret = pcrypt_sysfs_add(pcrypt->pinst, name);
	484	if (ret)
	485	goto err_unregister_notifier;
	486
d3f64e46 SK	487	put_online_cpus();
d3f64e46 SK	488
e15bacbe	489	return ret;
d3f64e46	490
a3fb1e33 DK	491	err_unregister_notifier:
a3fb1e33 DK	492	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
e15bacbe DK	493	err_free_cpumask:
	494	free_cpumask_var(mask->mask);
	495	kfree(mask);
	496	err_free_padata:
	497	padata_free(pcrypt->pinst);
	498	err_destroy_workqueue:
	499	destroy_workqueue(pcrypt->wq);
	500	err:
d3f64e46 SK	501	put_online_cpus();
d3f64e46 SK	502
e15bacbe DK	503	return ret;
	504	}
	505
c57e842e	506	static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)
e15bacbe DK	507	{
	508	free_cpumask_var(pcrypt->cb_cpumask->mask);
	509	kfree(pcrypt->cb_cpumask);
	510
	511	padata_stop(pcrypt->pinst);
	512	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	513	destroy_workqueue(pcrypt->wq);
	514	padata_free(pcrypt->pinst);
	515	}
	516
5068c7a8 SK	517	static struct crypto_template pcrypt_tmpl = {
	518	.name = "pcrypt",
	519	.alloc = pcrypt_alloc,
	520	.free = pcrypt_free,
	521	.module = THIS_MODULE,
	522	};
	523
	524	static int __init pcrypt_init(void)
	525	{
a3fb1e33 DK	526	int err = -ENOMEM;
	527
	528	pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
	529	if (!pcrypt_kset)
	530	goto err;
5068c7a8	531
c57e842e	532	err = pcrypt_init_padata(&pencrypt, "pencrypt");
4c879170	533	if (err)
a3fb1e33	534	goto err_unreg_kset;
4c879170	535
c57e842e	536	err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
4c879170	537	if (err)
e15bacbe	538	goto err_deinit_pencrypt;
4c879170	539
e15bacbe DK	540	padata_start(pencrypt.pinst);
e15bacbe DK	541	padata_start(pdecrypt.pinst);
5068c7a8	542
e15bacbe	543	return crypto_register_template(&pcrypt_tmpl);
5068c7a8	544
e15bacbe	545	err_deinit_pencrypt:
c57e842e	546	pcrypt_fini_padata(&pencrypt);
a3fb1e33 DK	547	err_unreg_kset:
a3fb1e33 DK	548	kset_unregister(pcrypt_kset);
5068c7a8	549	err:
4c879170	550	return err;
5068c7a8 SK	551	}
	552
	553	static void __exit pcrypt_exit(void)
	554	{
c57e842e SK	555	pcrypt_fini_padata(&pencrypt);
c57e842e SK	556	pcrypt_fini_padata(&pdecrypt);
5068c7a8	557
a3fb1e33	558	kset_unregister(pcrypt_kset);
5068c7a8 SK	559	crypto_unregister_template(&pcrypt_tmpl);
	560	}
	561
	562	module_init(pcrypt_init);
	563	module_exit(pcrypt_exit);
	564
	565	MODULE_LICENSE("GPL");
	566	MODULE_AUTHOR("Steffen Klassert <steffen.klassert@secunet.com>");
	567	MODULE_DESCRIPTION("Parallel crypto wrapper");