[linux-2.6-block.git] / crypto / pcrypt.c

/*
 * pcrypt - Parallel crypto wrapper.
 *
 * Copyright (C) 2009 secunet Security Networks AG
 * Copyright (C) 2009 Steffen Klassert <steffen.klassert@secunet.com>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
 */

#include <crypto/algapi.h>
#include <crypto/internal/aead.h>
#include <linux/atomic.h>
#include <linux/err.h>
#include <linux/init.h>
#include <linux/module.h>
#include <linux/slab.h>
#include <linux/notifier.h>
#include <linux/kobject.h>
#include <linux/cpu.h>
#include <crypto/pcrypt.h>

struct padata_pcrypt {
	struct padata_instance *pinst;
	struct workqueue_struct *wq;

	/*
	 * Cpumask for callback CPUs. It should be
	 * equal to serial cpumask of corresponding padata instance,
	 * so it is updated when padata notifies us about serial
	 * cpumask change.
	 *
	 * cb_cpumask is protected by RCU. This fact prevents us from
	 * using cpumask_var_t directly because the actual type of
	 * cpumsak_var_t depends on kernel configuration(particularly on
	 * CONFIG_CPUMASK_OFFSTACK macro). Depending on the configuration
	 * cpumask_var_t may be either a pointer to the struct cpumask
	 * or a variable allocated on the stack. Thus we can not safely use
	 * cpumask_var_t with RCU operations such as rcu_assign_pointer or
	 * rcu_dereference. So cpumask_var_t is wrapped with struct
	 * pcrypt_cpumask which makes possible to use it with RCU.
	 */
	struct pcrypt_cpumask {
		cpumask_var_t mask;
	} *cb_cpumask;
	struct notifier_block nblock;
};

static struct padata_pcrypt pencrypt;
static struct padata_pcrypt pdecrypt;
static struct kset           *pcrypt_kset;

struct pcrypt_instance_ctx {
	struct crypto_aead_spawn spawn;
	atomic_t tfm_count;
};

struct pcrypt_aead_ctx {
	struct crypto_aead *child;
	unsigned int cb_cpu;
};

static int pcrypt_do_parallel(struct padata_priv *padata, unsigned int *cb_cpu,
			      struct padata_pcrypt *pcrypt)
{
	unsigned int cpu_index, cpu, i;
	struct pcrypt_cpumask *cpumask;

	cpu = *cb_cpu;

	rcu_read_lock_bh();
	cpumask = rcu_dereference_bh(pcrypt->cb_cpumask);
	if (cpumask_test_cpu(cpu, cpumask->mask))
			goto out;

	if (!cpumask_weight(cpumask->mask))
			goto out;

	cpu_index = cpu % cpumask_weight(cpumask->mask);

	cpu = cpumask_first(cpumask->mask);
	for (i = 0; i < cpu_index; i++)
		cpu = cpumask_next(cpu, cpumask->mask);

	*cb_cpu = cpu;

out:
	rcu_read_unlock_bh();
	return padata_do_parallel(pcrypt->pinst, padata, cpu);
}

static int pcrypt_aead_setkey(struct crypto_aead *parent,
			      const u8 *key, unsigned int keylen)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setkey(ctx->child, key, keylen);
}

static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
				   unsigned int authsize)
{
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);

	return crypto_aead_setauthsize(ctx->child, authsize);
}

static void pcrypt_aead_serial(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	aead_request_complete(req->base.data, padata->info);
}

static void pcrypt_aead_giv_serial(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);

	aead_request_complete(req->areq.base.data, padata->info);
}

static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
{
	struct aead_request *req = areq->data;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct padata_priv *padata = pcrypt_request_padata(preq);

	padata->info = err;
	req->base.flags &= ~CRYPTO_TFM_REQ_MAY_SLEEP;

	padata_do_serial(padata);
}

static void pcrypt_aead_enc(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_encrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_encrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_enc;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
	aead_request_set_assoc(creq, req->assoc, req->assoclen);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static void pcrypt_aead_dec(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_decrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_decrypt(struct aead_request *req)
{
	int err;
	struct pcrypt_request *preq = aead_request_ctx(req);
	struct aead_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(req);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_dec;
	padata->serial = pcrypt_aead_serial;

	aead_request_set_tfm(creq, ctx->child);
	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				  pcrypt_aead_done, req);
	aead_request_set_crypt(creq, req->src, req->dst,
			       req->cryptlen, req->iv);
	aead_request_set_assoc(creq, req->assoc, req->assoclen);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pdecrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static void pcrypt_aead_givenc(struct padata_priv *padata)
{
	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);

	padata->info = crypto_aead_givencrypt(req);

	if (padata->info == -EINPROGRESS)
		return;

	padata_do_serial(padata);
}

static int pcrypt_aead_givencrypt(struct aead_givcrypt_request *req)
{
	int err;
	struct aead_request *areq = &req->areq;
	struct pcrypt_request *preq = aead_request_ctx(areq);
	struct aead_givcrypt_request *creq = pcrypt_request_ctx(preq);
	struct padata_priv *padata = pcrypt_request_padata(preq);
	struct crypto_aead *aead = aead_givcrypt_reqtfm(req);
	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	u32 flags = aead_request_flags(areq);

	memset(padata, 0, sizeof(struct padata_priv));

	padata->parallel = pcrypt_aead_givenc;
	padata->serial = pcrypt_aead_giv_serial;

	aead_givcrypt_set_tfm(creq, ctx->child);
	aead_givcrypt_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
				   pcrypt_aead_done, areq);
	aead_givcrypt_set_crypt(creq, areq->src, areq->dst,
				areq->cryptlen, areq->iv);
	aead_givcrypt_set_assoc(creq, areq->assoc, areq->assoclen);
	aead_givcrypt_set_giv(creq, req->giv, req->seq);

	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
	if (!err)
		return -EINPROGRESS;

	return err;
}

static int pcrypt_aead_init_tfm(struct crypto_tfm *tfm)
{
	int cpu, cpu_index;
	struct crypto_instance *inst = crypto_tfm_alg_instance(tfm);
	struct pcrypt_instance_ctx *ictx = crypto_instance_ctx(inst);
	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);
	struct crypto_aead *cipher;

	cpu_index = (unsigned int)atomic_inc_return(&ictx->tfm_count) %
		    cpumask_weight(cpu_online_mask);

	ctx->cb_cpu = cpumask_first(cpu_online_mask);
	for (cpu = 0; cpu < cpu_index; cpu++)
		ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);

	cipher = crypto_spawn_aead(crypto_instance_ctx(inst));

	if (IS_ERR(cipher))
		return PTR_ERR(cipher);

	ctx->child = cipher;
	crypto_aead_set_reqsize(__crypto_aead_cast(tfm),
		sizeof(struct pcrypt_request) +
		sizeof(struct aead_givcrypt_request) +
		crypto_aead_reqsize(cipher));

	return 0;
}

static void pcrypt_aead_exit_tfm(struct crypto_tfm *tfm)
{
	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);

	crypto_free_aead(ctx->child);
}

static int pcrypt_init_instance(struct crypto_instance *inst,
				struct crypto_alg *alg)
{
	if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
		     "pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
		return -ENAMETOOLONG;

	memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);

	inst->alg.cra_priority = alg->cra_priority + 100;
	inst->alg.cra_blocksize = alg->cra_blocksize;
	inst->alg.cra_alignmask = alg->cra_alignmask;

	return 0;
}

static struct crypto_instance *pcrypt_alloc_aead(struct rtattr **tb,
						 u32 type, u32 mask)
{
	struct pcrypt_instance_ctx *ctx;
	struct crypto_instance *inst;
	struct crypto_alg *alg;
	const char *name;
	int err;

	name = crypto_attr_alg_name(tb[1]);
	if (IS_ERR(name))
		return ERR_CAST(name);

	inst = kzalloc(sizeof(*inst) + sizeof(*ctx), GFP_KERNEL);
	if (!inst)
		return ERR_PTR(-ENOMEM);

	ctx = crypto_instance_ctx(inst);
	crypto_set_aead_spawn(&ctx->spawn, inst);

	err = crypto_grab_aead(&ctx->spawn, name, 0, 0);
	if (err)
		goto out_free_inst;

	alg = crypto_aead_spawn_alg(&ctx->spawn);
	err = pcrypt_init_instance(inst, alg);
	if (err)
		goto out_drop_aead;

	inst->alg.cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC;
	inst->alg.cra_type = &crypto_aead_type;

	inst->alg.cra_aead.ivsize = alg->cra_aead.ivsize;
	inst->alg.cra_aead.geniv = alg->cra_aead.geniv;
	inst->alg.cra_aead.maxauthsize = alg->cra_aead.maxauthsize;

	inst->alg.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);

	inst->alg.cra_init = pcrypt_aead_init_tfm;
	inst->alg.cra_exit = pcrypt_aead_exit_tfm;

	inst->alg.cra_aead.setkey = pcrypt_aead_setkey;
	inst->alg.cra_aead.setauthsize = pcrypt_aead_setauthsize;
	inst->alg.cra_aead.encrypt = pcrypt_aead_encrypt;
	inst->alg.cra_aead.decrypt = pcrypt_aead_decrypt;
	inst->alg.cra_aead.givencrypt = pcrypt_aead_givencrypt;

out:
	return inst;

out_drop_aead:
	crypto_drop_aead(&ctx->spawn);
out_free_inst:
	kfree(inst);
	inst = ERR_PTR(err);
	goto out;
}

static struct crypto_instance *pcrypt_alloc(struct rtattr **tb)
{
	struct crypto_attr_type *algt;

	algt = crypto_get_attr_type(tb);
	if (IS_ERR(algt))
		return ERR_CAST(algt);

	switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
	case CRYPTO_ALG_TYPE_AEAD:
		return pcrypt_alloc_aead(tb, algt->type, algt->mask);
	}

	return ERR_PTR(-EINVAL);
}

static void pcrypt_free(struct crypto_instance *inst)
{
	struct pcrypt_instance_ctx *ctx = crypto_instance_ctx(inst);

	crypto_drop_aead(&ctx->spawn);
	kfree(inst);
}

static int pcrypt_cpumask_change_notify(struct notifier_block *self,
					unsigned long val, void *data)
{
	struct padata_pcrypt *pcrypt;
	struct pcrypt_cpumask *new_mask, *old_mask;
	struct padata_cpumask *cpumask = (struct padata_cpumask *)data;

	if (!(val & PADATA_CPU_SERIAL))
		return 0;

	pcrypt = container_of(self, struct padata_pcrypt, nblock);
	new_mask = kmalloc(sizeof(*new_mask), GFP_KERNEL);
	if (!new_mask)
		return -ENOMEM;
	if (!alloc_cpumask_var(&new_mask->mask, GFP_KERNEL)) {
		kfree(new_mask);
		return -ENOMEM;
	}

	old_mask = pcrypt->cb_cpumask;

	cpumask_copy(new_mask->mask, cpumask->cbcpu);
	rcu_assign_pointer(pcrypt->cb_cpumask, new_mask);
	synchronize_rcu_bh();

	free_cpumask_var(old_mask->mask);
	kfree(old_mask);
	return 0;
}

static int pcrypt_sysfs_add(struct padata_instance *pinst, const char *name)
{
	int ret;

	pinst->kobj.kset = pcrypt_kset;
	ret = kobject_add(&pinst->kobj, NULL, name);
	if (!ret)
		kobject_uevent(&pinst->kobj, KOBJ_ADD);

	return ret;
}

static int pcrypt_init_padata(struct padata_pcrypt *pcrypt,
			      const char *name)
{
	int ret = -ENOMEM;
	struct pcrypt_cpumask *mask;

	get_online_cpus();

	pcrypt->wq = alloc_workqueue("%s", WQ_MEM_RECLAIM | WQ_CPU_INTENSIVE,
				     1, name);
	if (!pcrypt->wq)
		goto err;

	pcrypt->pinst = padata_alloc_possible(pcrypt->wq);
	if (!pcrypt->pinst)
		goto err_destroy_workqueue;

	mask = kmalloc(sizeof(*mask), GFP_KERNEL);
	if (!mask)
		goto err_free_padata;
	if (!alloc_cpumask_var(&mask->mask, GFP_KERNEL)) {
		kfree(mask);
		goto err_free_padata;
	}

	cpumask_and(mask->mask, cpu_possible_mask, cpu_online_mask);
	rcu_assign_pointer(pcrypt->cb_cpumask, mask);

	pcrypt->nblock.notifier_call = pcrypt_cpumask_change_notify;
	ret = padata_register_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	if (ret)
		goto err_free_cpumask;

	ret = pcrypt_sysfs_add(pcrypt->pinst, name);
	if (ret)
		goto err_unregister_notifier;

	put_online_cpus();

	return ret;

err_unregister_notifier:
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
err_free_cpumask:
	free_cpumask_var(mask->mask);
	kfree(mask);
err_free_padata:
	padata_free(pcrypt->pinst);
err_destroy_workqueue:
	destroy_workqueue(pcrypt->wq);
err:
	put_online_cpus();

	return ret;
}

static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)
{
	free_cpumask_var(pcrypt->cb_cpumask->mask);
	kfree(pcrypt->cb_cpumask);

	padata_stop(pcrypt->pinst);
	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	destroy_workqueue(pcrypt->wq);
	padata_free(pcrypt->pinst);
}

static struct crypto_template pcrypt_tmpl = {
	.name = "pcrypt",
	.alloc = pcrypt_alloc,
	.free = pcrypt_free,
	.module = THIS_MODULE,
};

static int __init pcrypt_init(void)
{
	int err = -ENOMEM;

	pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
	if (!pcrypt_kset)
		goto err;

	err = pcrypt_init_padata(&pencrypt, "pencrypt");
	if (err)
		goto err_unreg_kset;

	err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
	if (err)
		goto err_deinit_pencrypt;

	padata_start(pencrypt.pinst);
	padata_start(pdecrypt.pinst);

	return crypto_register_template(&pcrypt_tmpl);

err_deinit_pencrypt:
	pcrypt_fini_padata(&pencrypt);
err_unreg_kset:
	kset_unregister(pcrypt_kset);
err:
	return err;
}

static void __exit pcrypt_exit(void)
{
	pcrypt_fini_padata(&pencrypt);
	pcrypt_fini_padata(&pdecrypt);

	kset_unregister(pcrypt_kset);
	crypto_unregister_template(&pcrypt_tmpl);
}

module_init(pcrypt_init);
module_exit(pcrypt_exit);

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Steffen Klassert <steffen.klassert@secunet.com>");
MODULE_DESCRIPTION("Parallel crypto wrapper");
MODULE_ALIAS_CRYPTO("pcrypt");
Commit	Line	Data
5068c7a8 SK	1	/*
	2	* pcrypt - Parallel crypto wrapper.
	3	*
	4	* Copyright (C) 2009 secunet Security Networks AG
	5	* Copyright (C) 2009 Steffen Klassert <steffen.klassert@secunet.com>
	6	*
	7	* This program is free software; you can redistribute it and/or modify it
	8	* under the terms and conditions of the GNU General Public License,
	9	* version 2, as published by the Free Software Foundation.
	10	*
	11	* This program is distributed in the hope it will be useful, but WITHOUT
	12	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	13	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
	14	* more details.
	15	*
	16	* You should have received a copy of the GNU General Public License along with
	17	* this program; if not, write to the Free Software Foundation, Inc.,
	18	* 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
	19	*/
	20
	21	#include <crypto/algapi.h>
	22	#include <crypto/internal/aead.h>
a5a22e57	23	#include <linux/atomic.h>
5068c7a8 SK	24	#include <linux/err.h>
	25	#include <linux/init.h>
	26	#include <linux/module.h>
	27	#include <linux/slab.h>
e15bacbe	28	#include <linux/notifier.h>
a3fb1e33	29	#include <linux/kobject.h>
d3f64e46	30	#include <linux/cpu.h>
5068c7a8 SK	31	#include <crypto/pcrypt.h>
5068c7a8 SK	32
c57e842e	33	struct padata_pcrypt {
e15bacbe DK	34	struct padata_instance *pinst;
	35	struct workqueue_struct *wq;
	36
	37	/*
	38	* Cpumask for callback CPUs. It should be
	39	* equal to serial cpumask of corresponding padata instance,
	40	* so it is updated when padata notifies us about serial
	41	* cpumask change.
	42	*
	43	* cb_cpumask is protected by RCU. This fact prevents us from
	44	* using cpumask_var_t directly because the actual type of
	45	* cpumsak_var_t depends on kernel configuration(particularly on
	46	* CONFIG_CPUMASK_OFFSTACK macro). Depending on the configuration
	47	* cpumask_var_t may be either a pointer to the struct cpumask
	48	* or a variable allocated on the stack. Thus we can not safely use
	49	* cpumask_var_t with RCU operations such as rcu_assign_pointer or
	50	* rcu_dereference. So cpumask_var_t is wrapped with struct
	51	* pcrypt_cpumask which makes possible to use it with RCU.
	52	*/
	53	struct pcrypt_cpumask {
	54	cpumask_var_t mask;
	55	} *cb_cpumask;
	56	struct notifier_block nblock;
	57	};
	58
c57e842e SK	59	static struct padata_pcrypt pencrypt;
c57e842e SK	60	static struct padata_pcrypt pdecrypt;
a3fb1e33	61	static struct kset *pcrypt_kset;
5068c7a8 SK	62
5068c7a8 SK	63	struct pcrypt_instance_ctx {
66d948e7	64	struct crypto_aead_spawn spawn;
a5a22e57	65	atomic_t tfm_count;
5068c7a8 SK	66	};
	67
	68	struct pcrypt_aead_ctx {
	69	struct crypto_aead *child;
	70	unsigned int cb_cpu;
	71	};
	72
	73	static int pcrypt_do_parallel(struct padata_priv padata, unsigned int cb_cpu,
c57e842e	74	struct padata_pcrypt *pcrypt)
5068c7a8 SK	75	{
5068c7a8 SK	76	unsigned int cpu_index, cpu, i;
e15bacbe	77	struct pcrypt_cpumask *cpumask;
5068c7a8 SK	78
	79	cpu = *cb_cpu;
	80
e15bacbe	81	rcu_read_lock_bh();
3110e400	82	cpumask = rcu_dereference_bh(pcrypt->cb_cpumask);
e15bacbe	83	if (cpumask_test_cpu(cpu, cpumask->mask))
5068c7a8 SK	84	goto out;
5068c7a8 SK	85
cc74f4bc SK	86	if (!cpumask_weight(cpumask->mask))
	87	goto out;
	88
e15bacbe	89	cpu_index = cpu % cpumask_weight(cpumask->mask);
5068c7a8	90
e15bacbe	91	cpu = cpumask_first(cpumask->mask);
5068c7a8	92	for (i = 0; i < cpu_index; i++)
e15bacbe	93	cpu = cpumask_next(cpu, cpumask->mask);
5068c7a8 SK	94
	95	*cb_cpu = cpu;
	96
	97	out:
e15bacbe DK	98	rcu_read_unlock_bh();
e15bacbe DK	99	return padata_do_parallel(pcrypt->pinst, padata, cpu);
5068c7a8 SK	100	}
	101
	102	static int pcrypt_aead_setkey(struct crypto_aead *parent,
	103	const u8 *key, unsigned int keylen)
	104	{
	105	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
	106
	107	return crypto_aead_setkey(ctx->child, key, keylen);
	108	}
	109
	110	static int pcrypt_aead_setauthsize(struct crypto_aead *parent,
	111	unsigned int authsize)
	112	{
	113	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(parent);
	114
	115	return crypto_aead_setauthsize(ctx->child, authsize);
	116	}
	117
	118	static void pcrypt_aead_serial(struct padata_priv *padata)
	119	{
	120	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	121	struct aead_request *req = pcrypt_request_ctx(preq);
	122
	123	aead_request_complete(req->base.data, padata->info);
	124	}
	125
	126	static void pcrypt_aead_giv_serial(struct padata_priv *padata)
	127	{
	128	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	129	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);
	130
	131	aead_request_complete(req->areq.base.data, padata->info);
	132	}
	133
	134	static void pcrypt_aead_done(struct crypto_async_request *areq, int err)
	135	{
	136	struct aead_request *req = areq->data;
	137	struct pcrypt_request *preq = aead_request_ctx(req);
	138	struct padata_priv *padata = pcrypt_request_padata(preq);
	139
	140	padata->info = err;
	141	req->base.flags &= ~CRYPTO_TFM_REQ_MAY_SLEEP;
	142
	143	padata_do_serial(padata);
	144	}
	145
	146	static void pcrypt_aead_enc(struct padata_priv *padata)
	147	{
	148	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	149	struct aead_request *req = pcrypt_request_ctx(preq);
	150
	151	padata->info = crypto_aead_encrypt(req);
	152
5a1436be	153	if (padata->info == -EINPROGRESS)
5068c7a8 SK	154	return;
	155
	156	padata_do_serial(padata);
	157	}
	158
	159	static int pcrypt_aead_encrypt(struct aead_request *req)
	160	{
	161	int err;
	162	struct pcrypt_request *preq = aead_request_ctx(req);
	163	struct aead_request *creq = pcrypt_request_ctx(preq);
	164	struct padata_priv *padata = pcrypt_request_padata(preq);
	165	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	166	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	167	u32 flags = aead_request_flags(req);
	168
	169	memset(padata, 0, sizeof(struct padata_priv));
	170
	171	padata->parallel = pcrypt_aead_enc;
	172	padata->serial = pcrypt_aead_serial;
	173
	174	aead_request_set_tfm(creq, ctx->child);
	175	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	176	pcrypt_aead_done, req);
	177	aead_request_set_crypt(creq, req->src, req->dst,
	178	req->cryptlen, req->iv);
	179	aead_request_set_assoc(creq, req->assoc, req->assoclen);
	180
e15bacbe	181	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
83f619f3 SK	182	if (!err)
83f619f3 SK	183	return -EINPROGRESS;
5068c7a8 SK	184
	185	return err;
	186	}
	187
	188	static void pcrypt_aead_dec(struct padata_priv *padata)
	189	{
	190	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	191	struct aead_request *req = pcrypt_request_ctx(preq);
	192
	193	padata->info = crypto_aead_decrypt(req);
	194
5a1436be	195	if (padata->info == -EINPROGRESS)
5068c7a8 SK	196	return;
	197
	198	padata_do_serial(padata);
	199	}
	200
	201	static int pcrypt_aead_decrypt(struct aead_request *req)
	202	{
	203	int err;
	204	struct pcrypt_request *preq = aead_request_ctx(req);
	205	struct aead_request *creq = pcrypt_request_ctx(preq);
	206	struct padata_priv *padata = pcrypt_request_padata(preq);
	207	struct crypto_aead *aead = crypto_aead_reqtfm(req);
	208	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	209	u32 flags = aead_request_flags(req);
	210
	211	memset(padata, 0, sizeof(struct padata_priv));
	212
	213	padata->parallel = pcrypt_aead_dec;
	214	padata->serial = pcrypt_aead_serial;
	215
	216	aead_request_set_tfm(creq, ctx->child);
	217	aead_request_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	218	pcrypt_aead_done, req);
	219	aead_request_set_crypt(creq, req->src, req->dst,
	220	req->cryptlen, req->iv);
	221	aead_request_set_assoc(creq, req->assoc, req->assoclen);
	222
e15bacbe	223	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pdecrypt);
83f619f3 SK	224	if (!err)
83f619f3 SK	225	return -EINPROGRESS;
5068c7a8 SK	226
	227	return err;
	228	}
	229
	230	static void pcrypt_aead_givenc(struct padata_priv *padata)
	231	{
	232	struct pcrypt_request *preq = pcrypt_padata_request(padata);
	233	struct aead_givcrypt_request *req = pcrypt_request_ctx(preq);
	234
	235	padata->info = crypto_aead_givencrypt(req);
	236
5a1436be	237	if (padata->info == -EINPROGRESS)
5068c7a8 SK	238	return;
	239
	240	padata_do_serial(padata);
	241	}
	242
	243	static int pcrypt_aead_givencrypt(struct aead_givcrypt_request *req)
	244	{
	245	int err;
	246	struct aead_request *areq = &req->areq;
	247	struct pcrypt_request *preq = aead_request_ctx(areq);
	248	struct aead_givcrypt_request *creq = pcrypt_request_ctx(preq);
	249	struct padata_priv *padata = pcrypt_request_padata(preq);
	250	struct crypto_aead *aead = aead_givcrypt_reqtfm(req);
	251	struct pcrypt_aead_ctx *ctx = crypto_aead_ctx(aead);
	252	u32 flags = aead_request_flags(areq);
	253
	254	memset(padata, 0, sizeof(struct padata_priv));
	255
	256	padata->parallel = pcrypt_aead_givenc;
	257	padata->serial = pcrypt_aead_giv_serial;
	258
	259	aead_givcrypt_set_tfm(creq, ctx->child);
	260	aead_givcrypt_set_callback(creq, flags & ~CRYPTO_TFM_REQ_MAY_SLEEP,
	261	pcrypt_aead_done, areq);
	262	aead_givcrypt_set_crypt(creq, areq->src, areq->dst,
	263	areq->cryptlen, areq->iv);
	264	aead_givcrypt_set_assoc(creq, areq->assoc, areq->assoclen);
	265	aead_givcrypt_set_giv(creq, req->giv, req->seq);
	266
e15bacbe	267	err = pcrypt_do_parallel(padata, &ctx->cb_cpu, &pencrypt);
83f619f3 SK	268	if (!err)
83f619f3 SK	269	return -EINPROGRESS;
5068c7a8 SK	270
	271	return err;
	272	}
	273
	274	static int pcrypt_aead_init_tfm(struct crypto_tfm *tfm)
	275	{
	276	int cpu, cpu_index;
	277	struct crypto_instance *inst = crypto_tfm_alg_instance(tfm);
	278	struct pcrypt_instance_ctx *ictx = crypto_instance_ctx(inst);
	279	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);
	280	struct crypto_aead *cipher;
	281
a5a22e57 HX	282	cpu_index = (unsigned int)atomic_inc_return(&ictx->tfm_count) %
a5a22e57 HX	283	cpumask_weight(cpu_online_mask);
5068c7a8	284
fbf0ca1b	285	ctx->cb_cpu = cpumask_first(cpu_online_mask);
5068c7a8	286	for (cpu = 0; cpu < cpu_index; cpu++)
fbf0ca1b	287	ctx->cb_cpu = cpumask_next(ctx->cb_cpu, cpu_online_mask);
5068c7a8 SK	288
	289	cipher = crypto_spawn_aead(crypto_instance_ctx(inst));
	290
	291	if (IS_ERR(cipher))
	292	return PTR_ERR(cipher);
	293
	294	ctx->child = cipher;
fd0de978 HX	295	crypto_aead_set_reqsize(__crypto_aead_cast(tfm),
	296	sizeof(struct pcrypt_request) +
	297	sizeof(struct aead_givcrypt_request) +
	298	crypto_aead_reqsize(cipher));
5068c7a8 SK	299
	300	return 0;
	301	}
	302
	303	static void pcrypt_aead_exit_tfm(struct crypto_tfm *tfm)
	304	{
	305	struct pcrypt_aead_ctx *ctx = crypto_tfm_ctx(tfm);
	306
	307	crypto_free_aead(ctx->child);
	308	}
	309
66d948e7 HX	310	static int pcrypt_init_instance(struct crypto_instance *inst,
66d948e7 HX	311	struct crypto_alg *alg)
5068c7a8	312	{
5068c7a8 SK	313	if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
5068c7a8 SK	314	"pcrypt(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
66d948e7	315	return -ENAMETOOLONG;
5068c7a8 SK	316
	317	memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);
	318
5068c7a8 SK	319	inst->alg.cra_priority = alg->cra_priority + 100;
	320	inst->alg.cra_blocksize = alg->cra_blocksize;
	321	inst->alg.cra_alignmask = alg->cra_alignmask;
	322
66d948e7	323	return 0;
5068c7a8 SK	324	}
5068c7a8 SK	325
80a6d7db DC	326	static struct crypto_instance pcrypt_alloc_aead(struct rtattr *tb,
80a6d7db DC	327	u32 type, u32 mask)
5068c7a8	328	{
66d948e7	329	struct pcrypt_instance_ctx *ctx;
5068c7a8 SK	330	struct crypto_instance *inst;
5068c7a8 SK	331	struct crypto_alg *alg;
66d948e7 HX	332	const char *name;
	333	int err;
	334
	335	name = crypto_attr_alg_name(tb[1]);
	336	if (IS_ERR(name))
	337	return ERR_CAST(name);
	338
	339	inst = kzalloc(sizeof(inst) + sizeof(ctx), GFP_KERNEL);
	340	if (!inst)
	341	return ERR_PTR(-ENOMEM);
	342
	343	ctx = crypto_instance_ctx(inst);
	344	crypto_set_aead_spawn(&ctx->spawn, inst);
5068c7a8	345
66d948e7 HX	346	err = crypto_grab_aead(&ctx->spawn, name, 0, 0);
	347	if (err)
	348	goto out_free_inst;
5068c7a8	349
66d948e7 HX	350	alg = crypto_aead_spawn_alg(&ctx->spawn);
	351	err = pcrypt_init_instance(inst, alg);
	352	if (err)
	353	goto out_drop_aead;
5068c7a8 SK	354
	355	inst->alg.cra_flags = CRYPTO_ALG_TYPE_AEAD \| CRYPTO_ALG_ASYNC;
	356	inst->alg.cra_type = &crypto_aead_type;
	357
	358	inst->alg.cra_aead.ivsize = alg->cra_aead.ivsize;
	359	inst->alg.cra_aead.geniv = alg->cra_aead.geniv;
	360	inst->alg.cra_aead.maxauthsize = alg->cra_aead.maxauthsize;
	361
	362	inst->alg.cra_ctxsize = sizeof(struct pcrypt_aead_ctx);
	363
	364	inst->alg.cra_init = pcrypt_aead_init_tfm;
	365	inst->alg.cra_exit = pcrypt_aead_exit_tfm;
	366
	367	inst->alg.cra_aead.setkey = pcrypt_aead_setkey;
	368	inst->alg.cra_aead.setauthsize = pcrypt_aead_setauthsize;
	369	inst->alg.cra_aead.encrypt = pcrypt_aead_encrypt;
	370	inst->alg.cra_aead.decrypt = pcrypt_aead_decrypt;
	371	inst->alg.cra_aead.givencrypt = pcrypt_aead_givencrypt;
	372
66d948e7	373	out:
5068c7a8	374	return inst;
66d948e7 HX	375
	376	out_drop_aead:
	377	crypto_drop_aead(&ctx->spawn);
	378	out_free_inst:
	379	kfree(inst);
	380	inst = ERR_PTR(err);
	381	goto out;
5068c7a8 SK	382	}
	383
	384	static struct crypto_instance pcrypt_alloc(struct rtattr *tb)
	385	{
	386	struct crypto_attr_type *algt;
	387
	388	algt = crypto_get_attr_type(tb);
	389	if (IS_ERR(algt))
	390	return ERR_CAST(algt);
	391
	392	switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
	393	case CRYPTO_ALG_TYPE_AEAD:
80a6d7db	394	return pcrypt_alloc_aead(tb, algt->type, algt->mask);
5068c7a8 SK	395	}
	396
	397	return ERR_PTR(-EINVAL);
	398	}
	399
	400	static void pcrypt_free(struct crypto_instance *inst)
	401	{
	402	struct pcrypt_instance_ctx *ctx = crypto_instance_ctx(inst);
	403
66d948e7	404	crypto_drop_aead(&ctx->spawn);
5068c7a8 SK	405	kfree(inst);
	406	}
	407
e15bacbe DK	408	static int pcrypt_cpumask_change_notify(struct notifier_block *self,
	409	unsigned long val, void *data)
	410	{
c57e842e	411	struct padata_pcrypt *pcrypt;
e15bacbe	412	struct pcrypt_cpumask new_mask, old_mask;
d3f64e46	413	struct padata_cpumask cpumask = (struct padata_cpumask )data;
e15bacbe DK	414
	415	if (!(val & PADATA_CPU_SERIAL))
	416	return 0;
	417
c57e842e	418	pcrypt = container_of(self, struct padata_pcrypt, nblock);
e15bacbe DK	419	new_mask = kmalloc(sizeof(*new_mask), GFP_KERNEL);
	420	if (!new_mask)
	421	return -ENOMEM;
	422	if (!alloc_cpumask_var(&new_mask->mask, GFP_KERNEL)) {
	423	kfree(new_mask);
	424	return -ENOMEM;
	425	}
	426
	427	old_mask = pcrypt->cb_cpumask;
	428
d3f64e46	429	cpumask_copy(new_mask->mask, cpumask->cbcpu);
e15bacbe DK	430	rcu_assign_pointer(pcrypt->cb_cpumask, new_mask);
	431	synchronize_rcu_bh();
	432
	433	free_cpumask_var(old_mask->mask);
	434	kfree(old_mask);
	435	return 0;
	436	}
	437
a3fb1e33 DK	438	static int pcrypt_sysfs_add(struct padata_instance pinst, const char name)
	439	{
	440	int ret;
	441
	442	pinst->kobj.kset = pcrypt_kset;
	443	ret = kobject_add(&pinst->kobj, NULL, name);
	444	if (!ret)
	445	kobject_uevent(&pinst->kobj, KOBJ_ADD);
	446
	447	return ret;
	448	}
	449
c57e842e SK	450	static int pcrypt_init_padata(struct padata_pcrypt *pcrypt,
c57e842e SK	451	const char *name)
e15bacbe DK	452	{
	453	int ret = -ENOMEM;
	454	struct pcrypt_cpumask *mask;
	455
d3f64e46 SK	456	get_online_cpus();
d3f64e46 SK	457
d8537548 KC	458	pcrypt->wq = alloc_workqueue("%s", WQ_MEM_RECLAIM \| WQ_CPU_INTENSIVE,
d8537548 KC	459	1, name);
e15bacbe DK	460	if (!pcrypt->wq)
	461	goto err;
	462
e6cc1170	463	pcrypt->pinst = padata_alloc_possible(pcrypt->wq);
e15bacbe DK	464	if (!pcrypt->pinst)
	465	goto err_destroy_workqueue;
	466
	467	mask = kmalloc(sizeof(*mask), GFP_KERNEL);
	468	if (!mask)
	469	goto err_free_padata;
	470	if (!alloc_cpumask_var(&mask->mask, GFP_KERNEL)) {
	471	kfree(mask);
	472	goto err_free_padata;
	473	}
	474
fbf0ca1b	475	cpumask_and(mask->mask, cpu_possible_mask, cpu_online_mask);
e15bacbe DK	476	rcu_assign_pointer(pcrypt->cb_cpumask, mask);
	477
	478	pcrypt->nblock.notifier_call = pcrypt_cpumask_change_notify;
	479	ret = padata_register_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	480	if (ret)
	481	goto err_free_cpumask;
	482
a3fb1e33 DK	483	ret = pcrypt_sysfs_add(pcrypt->pinst, name);
	484	if (ret)
	485	goto err_unregister_notifier;
	486
d3f64e46 SK	487	put_online_cpus();
d3f64e46 SK	488
e15bacbe	489	return ret;
d3f64e46	490
a3fb1e33 DK	491	err_unregister_notifier:
a3fb1e33 DK	492	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
e15bacbe DK	493	err_free_cpumask:
	494	free_cpumask_var(mask->mask);
	495	kfree(mask);
	496	err_free_padata:
	497	padata_free(pcrypt->pinst);
	498	err_destroy_workqueue:
	499	destroy_workqueue(pcrypt->wq);
	500	err:
d3f64e46 SK	501	put_online_cpus();
d3f64e46 SK	502
e15bacbe DK	503	return ret;
	504	}
	505
c57e842e	506	static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)
e15bacbe DK	507	{
	508	free_cpumask_var(pcrypt->cb_cpumask->mask);
	509	kfree(pcrypt->cb_cpumask);
	510
	511	padata_stop(pcrypt->pinst);
	512	padata_unregister_cpumask_notifier(pcrypt->pinst, &pcrypt->nblock);
	513	destroy_workqueue(pcrypt->wq);
	514	padata_free(pcrypt->pinst);
	515	}
	516
5068c7a8 SK	517	static struct crypto_template pcrypt_tmpl = {
	518	.name = "pcrypt",
	519	.alloc = pcrypt_alloc,
	520	.free = pcrypt_free,
	521	.module = THIS_MODULE,
	522	};
	523
	524	static int __init pcrypt_init(void)
	525	{
a3fb1e33 DK	526	int err = -ENOMEM;
	527
	528	pcrypt_kset = kset_create_and_add("pcrypt", NULL, kernel_kobj);
	529	if (!pcrypt_kset)
	530	goto err;
5068c7a8	531
c57e842e	532	err = pcrypt_init_padata(&pencrypt, "pencrypt");
4c879170	533	if (err)
a3fb1e33	534	goto err_unreg_kset;
4c879170	535
c57e842e	536	err = pcrypt_init_padata(&pdecrypt, "pdecrypt");
4c879170	537	if (err)
e15bacbe	538	goto err_deinit_pencrypt;
4c879170	539
e15bacbe DK	540	padata_start(pencrypt.pinst);
e15bacbe DK	541	padata_start(pdecrypt.pinst);
5068c7a8	542
e15bacbe	543	return crypto_register_template(&pcrypt_tmpl);
5068c7a8	544
e15bacbe	545	err_deinit_pencrypt:
c57e842e	546	pcrypt_fini_padata(&pencrypt);
a3fb1e33 DK	547	err_unreg_kset:
a3fb1e33 DK	548	kset_unregister(pcrypt_kset);
5068c7a8	549	err:
4c879170	550	return err;
5068c7a8 SK	551	}
	552
	553	static void __exit pcrypt_exit(void)
	554	{
c57e842e SK	555	pcrypt_fini_padata(&pencrypt);
c57e842e SK	556	pcrypt_fini_padata(&pdecrypt);
5068c7a8	557
a3fb1e33	558	kset_unregister(pcrypt_kset);
5068c7a8 SK	559	crypto_unregister_template(&pcrypt_tmpl);
	560	}
	561
	562	module_init(pcrypt_init);
	563	module_exit(pcrypt_exit);
	564
	565	MODULE_LICENSE("GPL");
	566	MODULE_AUTHOR("Steffen Klassert <steffen.klassert@secunet.com>");
	567	MODULE_DESCRIPTION("Parallel crypto wrapper");
4943ba16	568	MODULE_ALIAS_CRYPTO("pcrypt");