linux.git/drivers/crypto/talitos.c, branch v3.10

Revert "crypto: talitos - add IPsec ESN support"

2013-03-21T09:36:02+00:00

This reverts commit e763eb699be723fb41af818118068c6b3afdaf8d.

Current IPsec ESN implementation for authencesn(cbc(aes), hmac(sha))
(separate encryption and integrity algorithms) does not conform
to RFC4303.

ICV is generated by hashing the sequence
SPI, SeqNum-High, SeqNum-Low, IV, Payload
instead of
SPI, SeqNum-Low, IV, Payload, SeqNum-High.

Cc:  # 3.8, 3.7
Reported-by: Chaoxing Lin 
Signed-off-by: Horia Geanta 
Reviewed-by: Kim Phillips 
Signed-off-by: Herbert Xu

crypto: talitos - convert to use be16_add_cpu()

2012-10-15T14:18:26+00:00

Convert cpu_to_be16(be16_to_cpu(E1) + E2) to use be16_add_cpu().

dpatch engine is used to auto generate this patch.
(https://github.com/weiyj/dpatch)

Signed-off-by: Wei Yongjun 
Signed-off-by: Herbert Xu

crypto: talitos - add IPsec ESN support

2012-08-28T15:56:30+00:00

Support for ESNs (extended sequence numbers).
Tested with strongswan on a P2020RDB back-to-back setup.
Extracted from /etc/ipsec.conf:
esp=aes-sha1-esn-modp4096!

Signed-off-by: Horia Geanta 
Signed-off-by: Herbert Xu

crypto: talitos - support for assoc data provided as scatterlist

2012-08-28T15:56:27+00:00

Generate a link table in case assoc data is a scatterlist.
While at it, add support for handling non-contiguous assoc data and iv.

Signed-off-by: Horia Geanta 
Signed-off-by: Herbert Xu

crypto: talitos - change type and name for [src|dst]_is_chained

2012-08-28T15:56:26+00:00

It's more natural to think of these vars as bool rather than int.

Signed-off-by: Horia Geanta 
Signed-off-by: Herbert Xu

crypto: talitos - prune unneeded descriptor allocation param

2012-08-28T15:56:26+00:00

talitos_edesc_alloc does not need hash_result param.
Checking whether dst scatterlist is NULL or not is all that is required.

Signed-off-by: Horia Geanta 
Signed-off-by: Herbert Xu

crypto: talitos - fix icv management on outbound direction

2012-08-28T15:56:26+00:00

For IPsec encryption, in the case when:
-the input buffer is fragmented (edesc->src_nents > 0)
-the output buffer is not fragmented (edesc->dst_nents = 0)
the ICV is not output in the link table, but after the encrypted payload.

Copying the ICV must be avoided in this case; consequently the condition
edesc->dma_len > 0 must be more specific, i.e. must depend on the type
of the output buffer - fragmented or not.

Testing was performed by modifying testmgr to support src != dst,
since currently native kernel IPsec does in-place encryption
(src == dst).

Signed-off-by: Horia Geanta 
Signed-off-by: Herbert Xu

crypto: talitos - consolidate common cra_* assignments

2012-08-28T15:53:53+00:00

the entry points and geniv definitions for all aead,
ablkcipher, and hash algorithms are all common; move them to a
single assignment in talitos_alg_alloc().

This assumes it's ok to assign a setkey() on non-hmac algs.

Signed-off-by: Kim Phillips 
Signed-off-by: Herbert Xu

crypto: talitos - consolidate cra_type assignments

2012-08-28T15:53:53+00:00

lighten driver_algs[] by moving them to talitos_alg_alloc().

Signed-off-by: Kim Phillips 
Signed-off-by: Herbert Xu

crypto: talitos - add sha224, sha384 and sha512 to existing AEAD algorithms

2012-07-11T03:08:29+00:00

With this, now all combinations of
CBC: AES, 3DES-EDE
with
HMAC: SHA-1, SHA-224, SHA-256, SHA-384, SHA-512
are supported.

Signed-off-by: Horia Geanta 
Signed-off-by: Herbert Xu