1 /* SPDX-License-Identifier: GPL-2.0 */ 1 /* SPDX-License-Identifier: GPL-2.0 */
2 /* 2 /*
3 * Common values for AES algorithms 3 * Common values for AES algorithms
4 */ 4 */
5 5
6 #ifndef _CRYPTO_AES_H 6 #ifndef _CRYPTO_AES_H
7 #define _CRYPTO_AES_H 7 #define _CRYPTO_AES_H
8 8
9 #include <linux/types.h> 9 #include <linux/types.h>
10 #include <linux/crypto.h> 10 #include <linux/crypto.h>
11 11
12 #define AES_MIN_KEY_SIZE 16 12 #define AES_MIN_KEY_SIZE 16
13 #define AES_MAX_KEY_SIZE 32 13 #define AES_MAX_KEY_SIZE 32
14 #define AES_KEYSIZE_128 16 14 #define AES_KEYSIZE_128 16
15 #define AES_KEYSIZE_192 24 15 #define AES_KEYSIZE_192 24
16 #define AES_KEYSIZE_256 32 16 #define AES_KEYSIZE_256 32
17 #define AES_BLOCK_SIZE 16 17 #define AES_BLOCK_SIZE 16
18 #define AES_MAX_KEYLENGTH (15 * 16) 18 #define AES_MAX_KEYLENGTH (15 * 16)
19 #define AES_MAX_KEYLENGTH_U32 (AES_MAX_KEYLE 19 #define AES_MAX_KEYLENGTH_U32 (AES_MAX_KEYLENGTH / sizeof(u32))
20 20
21 /* 21 /*
22 * Please ensure that the first two fields are 22 * Please ensure that the first two fields are 16-byte aligned
23 * relative to the start of the structure, i.e 23 * relative to the start of the structure, i.e., don't move them!
24 */ 24 */
25 struct crypto_aes_ctx { 25 struct crypto_aes_ctx {
26 u32 key_enc[AES_MAX_KEYLENGTH_U32]; 26 u32 key_enc[AES_MAX_KEYLENGTH_U32];
27 u32 key_dec[AES_MAX_KEYLENGTH_U32]; 27 u32 key_dec[AES_MAX_KEYLENGTH_U32];
28 u32 key_length; 28 u32 key_length;
29 }; 29 };
30 30
31 extern const u32 crypto_ft_tab[4][256] ____cac 31 extern const u32 crypto_ft_tab[4][256] ____cacheline_aligned;
32 extern const u32 crypto_it_tab[4][256] ____cac 32 extern const u32 crypto_it_tab[4][256] ____cacheline_aligned;
33 33
34 /* 34 /*
35 * validate key length for AES algorithms 35 * validate key length for AES algorithms
36 */ 36 */
37 static inline int aes_check_keylen(unsigned in 37 static inline int aes_check_keylen(unsigned int keylen)
38 { 38 {
39 switch (keylen) { 39 switch (keylen) {
40 case AES_KEYSIZE_128: 40 case AES_KEYSIZE_128:
41 case AES_KEYSIZE_192: 41 case AES_KEYSIZE_192:
42 case AES_KEYSIZE_256: 42 case AES_KEYSIZE_256:
43 break; 43 break;
44 default: 44 default:
45 return -EINVAL; 45 return -EINVAL;
46 } 46 }
47 47
48 return 0; 48 return 0;
49 } 49 }
50 50
51 int crypto_aes_set_key(struct crypto_tfm *tfm, 51 int crypto_aes_set_key(struct crypto_tfm *tfm, const u8 *in_key,
52 unsigned int key_len); 52 unsigned int key_len);
53 53
54 /** 54 /**
55 * aes_expandkey - Expands the AES key as desc 55 * aes_expandkey - Expands the AES key as described in FIPS-197
56 * @ctx: The location where the compute 56 * @ctx: The location where the computed key will be stored.
57 * @in_key: The supplied key. 57 * @in_key: The supplied key.
58 * @key_len: The length of the supplied key 58 * @key_len: The length of the supplied key.
59 * 59 *
60 * Returns 0 on success. The function fails on 60 * Returns 0 on success. The function fails only if an invalid key size (or
61 * pointer) is supplied. 61 * pointer) is supplied.
62 * The expanded key size is 240 bytes (max of 62 * The expanded key size is 240 bytes (max of 14 rounds with a unique 16 bytes
63 * key schedule plus a 16 bytes key which is u 63 * key schedule plus a 16 bytes key which is used before the first round).
64 * The decryption key is prepared for the "Equ 64 * The decryption key is prepared for the "Equivalent Inverse Cipher" as
65 * described in FIPS-197. The first slot (16 b 65 * described in FIPS-197. The first slot (16 bytes) of each key (enc or dec) is
66 * for the initial combination, the second slo 66 * for the initial combination, the second slot for the first round and so on.
67 */ 67 */
68 int aes_expandkey(struct crypto_aes_ctx *ctx, 68 int aes_expandkey(struct crypto_aes_ctx *ctx, const u8 *in_key,
69 unsigned int key_len); 69 unsigned int key_len);
70 70
71 /** 71 /**
72 * aes_encrypt - Encrypt a single AES block 72 * aes_encrypt - Encrypt a single AES block
73 * @ctx: Context struct containing the 73 * @ctx: Context struct containing the key schedule
74 * @out: Buffer to store the ciphertext 74 * @out: Buffer to store the ciphertext
75 * @in: Buffer containing the plaintex 75 * @in: Buffer containing the plaintext
76 */ 76 */
77 void aes_encrypt(const struct crypto_aes_ctx * 77 void aes_encrypt(const struct crypto_aes_ctx *ctx, u8 *out, const u8 *in);
78 78
79 /** 79 /**
80 * aes_decrypt - Decrypt a single AES block 80 * aes_decrypt - Decrypt a single AES block
81 * @ctx: Context struct containing the 81 * @ctx: Context struct containing the key schedule
82 * @out: Buffer to store the plaintext 82 * @out: Buffer to store the plaintext
83 * @in: Buffer containing the cipherte 83 * @in: Buffer containing the ciphertext
84 */ 84 */
85 void aes_decrypt(const struct crypto_aes_ctx * 85 void aes_decrypt(const struct crypto_aes_ctx *ctx, u8 *out, const u8 *in);
86 86
87 extern const u8 crypto_aes_sbox[]; 87 extern const u8 crypto_aes_sbox[];
88 extern const u8 crypto_aes_inv_sbox[]; 88 extern const u8 crypto_aes_inv_sbox[];
89 89
90 void aescfb_encrypt(const struct crypto_aes_ct 90 void aescfb_encrypt(const struct crypto_aes_ctx *ctx, u8 *dst, const u8 *src,
91 int len, const u8 iv[AES_B 91 int len, const u8 iv[AES_BLOCK_SIZE]);
92 void aescfb_decrypt(const struct crypto_aes_ct 92 void aescfb_decrypt(const struct crypto_aes_ctx *ctx, u8 *dst, const u8 *src,
93 int len, const u8 iv[AES_B 93 int len, const u8 iv[AES_BLOCK_SIZE]);
94 94
95 #endif 95 #endif
96 96
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.