1*29ce50e0SEric Biggers // SPDX-License-Identifier: GPL-2.0-only
2*29ce50e0SEric Biggers /*
3*29ce50e0SEric Biggers * Crypto user configuration API.
4*29ce50e0SEric Biggers *
5*29ce50e0SEric Biggers * Copyright (C) 2011 secunet Security Networks AG
6*29ce50e0SEric Biggers * Copyright (C) 2011 Steffen Klassert <steffen.klassert@secunet.com>
7*29ce50e0SEric Biggers */
8*29ce50e0SEric Biggers
9*29ce50e0SEric Biggers #include <linux/module.h>
10*29ce50e0SEric Biggers #include <linux/crypto.h>
11*29ce50e0SEric Biggers #include <linux/cryptouser.h>
12*29ce50e0SEric Biggers #include <linux/sched.h>
13*29ce50e0SEric Biggers #include <linux/security.h>
14*29ce50e0SEric Biggers #include <net/netlink.h>
15*29ce50e0SEric Biggers #include <net/net_namespace.h>
16*29ce50e0SEric Biggers #include <net/sock.h>
17*29ce50e0SEric Biggers #include <crypto/internal/skcipher.h>
18*29ce50e0SEric Biggers #include <crypto/internal/rng.h>
19*29ce50e0SEric Biggers #include <crypto/akcipher.h>
20*29ce50e0SEric Biggers #include <crypto/kpp.h>
21*29ce50e0SEric Biggers
22*29ce50e0SEric Biggers #include "internal.h"
23*29ce50e0SEric Biggers
24*29ce50e0SEric Biggers #define null_terminated(x) (strnlen(x, sizeof(x)) < sizeof(x))
25*29ce50e0SEric Biggers
26*29ce50e0SEric Biggers static DEFINE_MUTEX(crypto_cfg_mutex);
27*29ce50e0SEric Biggers
28*29ce50e0SEric Biggers struct crypto_dump_info {
29*29ce50e0SEric Biggers struct sk_buff *in_skb;
30*29ce50e0SEric Biggers struct sk_buff *out_skb;
31*29ce50e0SEric Biggers u32 nlmsg_seq;
32*29ce50e0SEric Biggers u16 nlmsg_flags;
33*29ce50e0SEric Biggers };
34*29ce50e0SEric Biggers
crypto_alg_match(struct crypto_user_alg * p,int exact)35*29ce50e0SEric Biggers static struct crypto_alg *crypto_alg_match(struct crypto_user_alg *p, int exact)
36*29ce50e0SEric Biggers {
37*29ce50e0SEric Biggers struct crypto_alg *q, *alg = NULL;
38*29ce50e0SEric Biggers
39*29ce50e0SEric Biggers down_read(&crypto_alg_sem);
40*29ce50e0SEric Biggers
41*29ce50e0SEric Biggers list_for_each_entry(q, &crypto_alg_list, cra_list) {
42*29ce50e0SEric Biggers int match = 0;
43*29ce50e0SEric Biggers
44*29ce50e0SEric Biggers if (crypto_is_larval(q))
45*29ce50e0SEric Biggers continue;
46*29ce50e0SEric Biggers
47*29ce50e0SEric Biggers if ((q->cra_flags ^ p->cru_type) & p->cru_mask)
48*29ce50e0SEric Biggers continue;
49*29ce50e0SEric Biggers
50*29ce50e0SEric Biggers if (strlen(p->cru_driver_name))
51*29ce50e0SEric Biggers match = !strcmp(q->cra_driver_name,
52*29ce50e0SEric Biggers p->cru_driver_name);
53*29ce50e0SEric Biggers else if (!exact)
54*29ce50e0SEric Biggers match = !strcmp(q->cra_name, p->cru_name);
55*29ce50e0SEric Biggers
56*29ce50e0SEric Biggers if (!match)
57*29ce50e0SEric Biggers continue;
58*29ce50e0SEric Biggers
59*29ce50e0SEric Biggers if (unlikely(!crypto_mod_get(q)))
60*29ce50e0SEric Biggers continue;
61*29ce50e0SEric Biggers
62*29ce50e0SEric Biggers alg = q;
63*29ce50e0SEric Biggers break;
64*29ce50e0SEric Biggers }
65*29ce50e0SEric Biggers
66*29ce50e0SEric Biggers up_read(&crypto_alg_sem);
67*29ce50e0SEric Biggers
68*29ce50e0SEric Biggers return alg;
69*29ce50e0SEric Biggers }
70*29ce50e0SEric Biggers
crypto_report_cipher(struct sk_buff * skb,struct crypto_alg * alg)71*29ce50e0SEric Biggers static int crypto_report_cipher(struct sk_buff *skb, struct crypto_alg *alg)
72*29ce50e0SEric Biggers {
73*29ce50e0SEric Biggers struct crypto_report_cipher rcipher;
74*29ce50e0SEric Biggers
75*29ce50e0SEric Biggers memset(&rcipher, 0, sizeof(rcipher));
76*29ce50e0SEric Biggers
77*29ce50e0SEric Biggers strscpy(rcipher.type, "cipher", sizeof(rcipher.type));
78*29ce50e0SEric Biggers
79*29ce50e0SEric Biggers rcipher.blocksize = alg->cra_blocksize;
80*29ce50e0SEric Biggers rcipher.min_keysize = alg->cra_cipher.cia_min_keysize;
81*29ce50e0SEric Biggers rcipher.max_keysize = alg->cra_cipher.cia_max_keysize;
82*29ce50e0SEric Biggers
83*29ce50e0SEric Biggers return nla_put(skb, CRYPTOCFGA_REPORT_CIPHER,
84*29ce50e0SEric Biggers sizeof(rcipher), &rcipher);
85*29ce50e0SEric Biggers }
86*29ce50e0SEric Biggers
crypto_report_comp(struct sk_buff * skb,struct crypto_alg * alg)87*29ce50e0SEric Biggers static int crypto_report_comp(struct sk_buff *skb, struct crypto_alg *alg)
88*29ce50e0SEric Biggers {
89*29ce50e0SEric Biggers struct crypto_report_comp rcomp;
90*29ce50e0SEric Biggers
91*29ce50e0SEric Biggers memset(&rcomp, 0, sizeof(rcomp));
92*29ce50e0SEric Biggers
93*29ce50e0SEric Biggers strscpy(rcomp.type, "compression", sizeof(rcomp.type));
94*29ce50e0SEric Biggers
95*29ce50e0SEric Biggers return nla_put(skb, CRYPTOCFGA_REPORT_COMPRESS, sizeof(rcomp), &rcomp);
96*29ce50e0SEric Biggers }
97*29ce50e0SEric Biggers
crypto_report_one(struct crypto_alg * alg,struct crypto_user_alg * ualg,struct sk_buff * skb)98*29ce50e0SEric Biggers static int crypto_report_one(struct crypto_alg *alg,
99*29ce50e0SEric Biggers struct crypto_user_alg *ualg, struct sk_buff *skb)
100*29ce50e0SEric Biggers {
101*29ce50e0SEric Biggers memset(ualg, 0, sizeof(*ualg));
102*29ce50e0SEric Biggers
103*29ce50e0SEric Biggers strscpy(ualg->cru_name, alg->cra_name, sizeof(ualg->cru_name));
104*29ce50e0SEric Biggers strscpy(ualg->cru_driver_name, alg->cra_driver_name,
105*29ce50e0SEric Biggers sizeof(ualg->cru_driver_name));
106*29ce50e0SEric Biggers strscpy(ualg->cru_module_name, module_name(alg->cra_module),
107*29ce50e0SEric Biggers sizeof(ualg->cru_module_name));
108*29ce50e0SEric Biggers
109*29ce50e0SEric Biggers ualg->cru_type = 0;
110*29ce50e0SEric Biggers ualg->cru_mask = 0;
111*29ce50e0SEric Biggers ualg->cru_flags = alg->cra_flags;
112*29ce50e0SEric Biggers ualg->cru_refcnt = refcount_read(&alg->cra_refcnt);
113*29ce50e0SEric Biggers
114*29ce50e0SEric Biggers if (nla_put_u32(skb, CRYPTOCFGA_PRIORITY_VAL, alg->cra_priority))
115*29ce50e0SEric Biggers goto nla_put_failure;
116*29ce50e0SEric Biggers if (alg->cra_flags & CRYPTO_ALG_LARVAL) {
117*29ce50e0SEric Biggers struct crypto_report_larval rl;
118*29ce50e0SEric Biggers
119*29ce50e0SEric Biggers memset(&rl, 0, sizeof(rl));
120*29ce50e0SEric Biggers strscpy(rl.type, "larval", sizeof(rl.type));
121*29ce50e0SEric Biggers if (nla_put(skb, CRYPTOCFGA_REPORT_LARVAL, sizeof(rl), &rl))
122*29ce50e0SEric Biggers goto nla_put_failure;
123*29ce50e0SEric Biggers goto out;
124*29ce50e0SEric Biggers }
125*29ce50e0SEric Biggers
126*29ce50e0SEric Biggers if (alg->cra_type && alg->cra_type->report) {
127*29ce50e0SEric Biggers if (alg->cra_type->report(skb, alg))
128*29ce50e0SEric Biggers goto nla_put_failure;
129*29ce50e0SEric Biggers
130*29ce50e0SEric Biggers goto out;
131*29ce50e0SEric Biggers }
132*29ce50e0SEric Biggers
133*29ce50e0SEric Biggers switch (alg->cra_flags & (CRYPTO_ALG_TYPE_MASK | CRYPTO_ALG_LARVAL)) {
134*29ce50e0SEric Biggers case CRYPTO_ALG_TYPE_CIPHER:
135*29ce50e0SEric Biggers if (crypto_report_cipher(skb, alg))
136*29ce50e0SEric Biggers goto nla_put_failure;
137*29ce50e0SEric Biggers
138*29ce50e0SEric Biggers break;
139*29ce50e0SEric Biggers case CRYPTO_ALG_TYPE_COMPRESS:
140*29ce50e0SEric Biggers if (crypto_report_comp(skb, alg))
141*29ce50e0SEric Biggers goto nla_put_failure;
142*29ce50e0SEric Biggers
143*29ce50e0SEric Biggers break;
144*29ce50e0SEric Biggers }
145*29ce50e0SEric Biggers
146*29ce50e0SEric Biggers out:
147*29ce50e0SEric Biggers return 0;
148*29ce50e0SEric Biggers
149*29ce50e0SEric Biggers nla_put_failure:
150*29ce50e0SEric Biggers return -EMSGSIZE;
151*29ce50e0SEric Biggers }
152*29ce50e0SEric Biggers
crypto_report_alg(struct crypto_alg * alg,struct crypto_dump_info * info)153*29ce50e0SEric Biggers static int crypto_report_alg(struct crypto_alg *alg,
154*29ce50e0SEric Biggers struct crypto_dump_info *info)
155*29ce50e0SEric Biggers {
156*29ce50e0SEric Biggers struct sk_buff *in_skb = info->in_skb;
157*29ce50e0SEric Biggers struct sk_buff *skb = info->out_skb;
158*29ce50e0SEric Biggers struct nlmsghdr *nlh;
159*29ce50e0SEric Biggers struct crypto_user_alg *ualg;
160*29ce50e0SEric Biggers int err = 0;
161*29ce50e0SEric Biggers
162*29ce50e0SEric Biggers nlh = nlmsg_put(skb, NETLINK_CB(in_skb).portid, info->nlmsg_seq,
163*29ce50e0SEric Biggers CRYPTO_MSG_GETALG, sizeof(*ualg), info->nlmsg_flags);
164*29ce50e0SEric Biggers if (!nlh) {
165*29ce50e0SEric Biggers err = -EMSGSIZE;
166*29ce50e0SEric Biggers goto out;
167*29ce50e0SEric Biggers }
168*29ce50e0SEric Biggers
169*29ce50e0SEric Biggers ualg = nlmsg_data(nlh);
170*29ce50e0SEric Biggers
171*29ce50e0SEric Biggers err = crypto_report_one(alg, ualg, skb);
172*29ce50e0SEric Biggers if (err) {
173*29ce50e0SEric Biggers nlmsg_cancel(skb, nlh);
174*29ce50e0SEric Biggers goto out;
175*29ce50e0SEric Biggers }
176*29ce50e0SEric Biggers
177*29ce50e0SEric Biggers nlmsg_end(skb, nlh);
178*29ce50e0SEric Biggers
179*29ce50e0SEric Biggers out:
180*29ce50e0SEric Biggers return err;
181*29ce50e0SEric Biggers }
182*29ce50e0SEric Biggers
crypto_report(struct sk_buff * in_skb,struct nlmsghdr * in_nlh,struct nlattr ** attrs)183*29ce50e0SEric Biggers static int crypto_report(struct sk_buff *in_skb, struct nlmsghdr *in_nlh,
184*29ce50e0SEric Biggers struct nlattr **attrs)
185*29ce50e0SEric Biggers {
186*29ce50e0SEric Biggers struct net *net = sock_net(in_skb->sk);
187*29ce50e0SEric Biggers struct crypto_user_alg *p = nlmsg_data(in_nlh);
188*29ce50e0SEric Biggers struct crypto_alg *alg;
189*29ce50e0SEric Biggers struct sk_buff *skb;
190*29ce50e0SEric Biggers struct crypto_dump_info info;
191*29ce50e0SEric Biggers int err;
192*29ce50e0SEric Biggers
193*29ce50e0SEric Biggers if (!null_terminated(p->cru_name) || !null_terminated(p->cru_driver_name))
194*29ce50e0SEric Biggers return -EINVAL;
195*29ce50e0SEric Biggers
196*29ce50e0SEric Biggers alg = crypto_alg_match(p, 0);
197*29ce50e0SEric Biggers if (!alg)
198*29ce50e0SEric Biggers return -ENOENT;
199*29ce50e0SEric Biggers
200*29ce50e0SEric Biggers err = -ENOMEM;
201*29ce50e0SEric Biggers skb = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
202*29ce50e0SEric Biggers if (!skb)
203*29ce50e0SEric Biggers goto drop_alg;
204*29ce50e0SEric Biggers
205*29ce50e0SEric Biggers info.in_skb = in_skb;
206*29ce50e0SEric Biggers info.out_skb = skb;
207*29ce50e0SEric Biggers info.nlmsg_seq = in_nlh->nlmsg_seq;
208*29ce50e0SEric Biggers info.nlmsg_flags = 0;
209*29ce50e0SEric Biggers
210*29ce50e0SEric Biggers err = crypto_report_alg(alg, &info);
211*29ce50e0SEric Biggers
212*29ce50e0SEric Biggers drop_alg:
213*29ce50e0SEric Biggers crypto_mod_put(alg);
214*29ce50e0SEric Biggers
215*29ce50e0SEric Biggers if (err) {
216*29ce50e0SEric Biggers kfree_skb(skb);
217*29ce50e0SEric Biggers return err;
218*29ce50e0SEric Biggers }
219*29ce50e0SEric Biggers
220*29ce50e0SEric Biggers return nlmsg_unicast(net->crypto_nlsk, skb, NETLINK_CB(in_skb).portid);
221*29ce50e0SEric Biggers }
222*29ce50e0SEric Biggers
crypto_dump_report(struct sk_buff * skb,struct netlink_callback * cb)223*29ce50e0SEric Biggers static int crypto_dump_report(struct sk_buff *skb, struct netlink_callback *cb)
224*29ce50e0SEric Biggers {
225*29ce50e0SEric Biggers const size_t start_pos = cb->args[0];
226*29ce50e0SEric Biggers size_t pos = 0;
227*29ce50e0SEric Biggers struct crypto_dump_info info;
228*29ce50e0SEric Biggers struct crypto_alg *alg;
229*29ce50e0SEric Biggers int res;
230*29ce50e0SEric Biggers
231*29ce50e0SEric Biggers info.in_skb = cb->skb;
232*29ce50e0SEric Biggers info.out_skb = skb;
233*29ce50e0SEric Biggers info.nlmsg_seq = cb->nlh->nlmsg_seq;
234*29ce50e0SEric Biggers info.nlmsg_flags = NLM_F_MULTI;
235*29ce50e0SEric Biggers
236*29ce50e0SEric Biggers down_read(&crypto_alg_sem);
237*29ce50e0SEric Biggers list_for_each_entry(alg, &crypto_alg_list, cra_list) {
238*29ce50e0SEric Biggers if (pos >= start_pos) {
239*29ce50e0SEric Biggers res = crypto_report_alg(alg, &info);
240*29ce50e0SEric Biggers if (res == -EMSGSIZE)
241*29ce50e0SEric Biggers break;
242*29ce50e0SEric Biggers if (res)
243*29ce50e0SEric Biggers goto out;
244*29ce50e0SEric Biggers }
245*29ce50e0SEric Biggers pos++;
246*29ce50e0SEric Biggers }
247*29ce50e0SEric Biggers cb->args[0] = pos;
248*29ce50e0SEric Biggers res = skb->len;
249*29ce50e0SEric Biggers out:
250*29ce50e0SEric Biggers up_read(&crypto_alg_sem);
251*29ce50e0SEric Biggers return res;
252*29ce50e0SEric Biggers }
253*29ce50e0SEric Biggers
crypto_dump_report_done(struct netlink_callback * cb)254*29ce50e0SEric Biggers static int crypto_dump_report_done(struct netlink_callback *cb)
255*29ce50e0SEric Biggers {
256*29ce50e0SEric Biggers return 0;
257*29ce50e0SEric Biggers }
258*29ce50e0SEric Biggers
crypto_update_alg(struct sk_buff * skb,struct nlmsghdr * nlh,struct nlattr ** attrs)259*29ce50e0SEric Biggers static int crypto_update_alg(struct sk_buff *skb, struct nlmsghdr *nlh,
260*29ce50e0SEric Biggers struct nlattr **attrs)
261*29ce50e0SEric Biggers {
262*29ce50e0SEric Biggers struct crypto_alg *alg;
263*29ce50e0SEric Biggers struct crypto_user_alg *p = nlmsg_data(nlh);
264*29ce50e0SEric Biggers struct nlattr *priority = attrs[CRYPTOCFGA_PRIORITY_VAL];
265*29ce50e0SEric Biggers LIST_HEAD(list);
266*29ce50e0SEric Biggers
267*29ce50e0SEric Biggers if (!netlink_capable(skb, CAP_NET_ADMIN))
268*29ce50e0SEric Biggers return -EPERM;
269*29ce50e0SEric Biggers
270*29ce50e0SEric Biggers if (!null_terminated(p->cru_name) || !null_terminated(p->cru_driver_name))
271*29ce50e0SEric Biggers return -EINVAL;
272*29ce50e0SEric Biggers
273*29ce50e0SEric Biggers if (priority && !strlen(p->cru_driver_name))
274*29ce50e0SEric Biggers return -EINVAL;
275*29ce50e0SEric Biggers
276*29ce50e0SEric Biggers alg = crypto_alg_match(p, 1);
277*29ce50e0SEric Biggers if (!alg)
278*29ce50e0SEric Biggers return -ENOENT;
279*29ce50e0SEric Biggers
280*29ce50e0SEric Biggers down_write(&crypto_alg_sem);
281*29ce50e0SEric Biggers
282*29ce50e0SEric Biggers crypto_remove_spawns(alg, &list, NULL);
283*29ce50e0SEric Biggers
284*29ce50e0SEric Biggers if (priority)
285*29ce50e0SEric Biggers alg->cra_priority = nla_get_u32(priority);
286*29ce50e0SEric Biggers
287*29ce50e0SEric Biggers up_write(&crypto_alg_sem);
288*29ce50e0SEric Biggers
289*29ce50e0SEric Biggers crypto_mod_put(alg);
290*29ce50e0SEric Biggers crypto_remove_final(&list);
291*29ce50e0SEric Biggers
292*29ce50e0SEric Biggers return 0;
293*29ce50e0SEric Biggers }
294*29ce50e0SEric Biggers
crypto_del_alg(struct sk_buff * skb,struct nlmsghdr * nlh,struct nlattr ** attrs)295*29ce50e0SEric Biggers static int crypto_del_alg(struct sk_buff *skb, struct nlmsghdr *nlh,
296*29ce50e0SEric Biggers struct nlattr **attrs)
297*29ce50e0SEric Biggers {
298*29ce50e0SEric Biggers struct crypto_alg *alg;
299*29ce50e0SEric Biggers struct crypto_user_alg *p = nlmsg_data(nlh);
300*29ce50e0SEric Biggers int err;
301*29ce50e0SEric Biggers
302*29ce50e0SEric Biggers if (!netlink_capable(skb, CAP_NET_ADMIN))
303*29ce50e0SEric Biggers return -EPERM;
304*29ce50e0SEric Biggers
305*29ce50e0SEric Biggers if (!null_terminated(p->cru_name) || !null_terminated(p->cru_driver_name))
306*29ce50e0SEric Biggers return -EINVAL;
307*29ce50e0SEric Biggers
308*29ce50e0SEric Biggers alg = crypto_alg_match(p, 1);
309*29ce50e0SEric Biggers if (!alg)
310*29ce50e0SEric Biggers return -ENOENT;
311*29ce50e0SEric Biggers
312*29ce50e0SEric Biggers /* We can not unregister core algorithms such as aes-generic.
313*29ce50e0SEric Biggers * We would loose the reference in the crypto_alg_list to this algorithm
314*29ce50e0SEric Biggers * if we try to unregister. Unregistering such an algorithm without
315*29ce50e0SEric Biggers * removing the module is not possible, so we restrict to crypto
316*29ce50e0SEric Biggers * instances that are build from templates. */
317*29ce50e0SEric Biggers err = -EINVAL;
318*29ce50e0SEric Biggers if (!(alg->cra_flags & CRYPTO_ALG_INSTANCE))
319*29ce50e0SEric Biggers goto drop_alg;
320*29ce50e0SEric Biggers
321*29ce50e0SEric Biggers err = -EBUSY;
322*29ce50e0SEric Biggers if (refcount_read(&alg->cra_refcnt) > 2)
323*29ce50e0SEric Biggers goto drop_alg;
324*29ce50e0SEric Biggers
325*29ce50e0SEric Biggers crypto_unregister_instance((struct crypto_instance *)alg);
326*29ce50e0SEric Biggers err = 0;
327*29ce50e0SEric Biggers
328*29ce50e0SEric Biggers drop_alg:
329*29ce50e0SEric Biggers crypto_mod_put(alg);
330*29ce50e0SEric Biggers return err;
331*29ce50e0SEric Biggers }
332*29ce50e0SEric Biggers
crypto_add_alg(struct sk_buff * skb,struct nlmsghdr * nlh,struct nlattr ** attrs)333*29ce50e0SEric Biggers static int crypto_add_alg(struct sk_buff *skb, struct nlmsghdr *nlh,
334*29ce50e0SEric Biggers struct nlattr **attrs)
335*29ce50e0SEric Biggers {
336*29ce50e0SEric Biggers int exact = 0;
337*29ce50e0SEric Biggers const char *name;
338*29ce50e0SEric Biggers struct crypto_alg *alg;
339*29ce50e0SEric Biggers struct crypto_user_alg *p = nlmsg_data(nlh);
340*29ce50e0SEric Biggers struct nlattr *priority = attrs[CRYPTOCFGA_PRIORITY_VAL];
341*29ce50e0SEric Biggers
342*29ce50e0SEric Biggers if (!netlink_capable(skb, CAP_NET_ADMIN))
343*29ce50e0SEric Biggers return -EPERM;
344*29ce50e0SEric Biggers
345*29ce50e0SEric Biggers if (!null_terminated(p->cru_name) || !null_terminated(p->cru_driver_name))
346*29ce50e0SEric Biggers return -EINVAL;
347*29ce50e0SEric Biggers
348*29ce50e0SEric Biggers if (strlen(p->cru_driver_name))
349*29ce50e0SEric Biggers exact = 1;
350*29ce50e0SEric Biggers
351*29ce50e0SEric Biggers if (priority && !exact)
352*29ce50e0SEric Biggers return -EINVAL;
353*29ce50e0SEric Biggers
354*29ce50e0SEric Biggers alg = crypto_alg_match(p, exact);
355*29ce50e0SEric Biggers if (alg) {
356*29ce50e0SEric Biggers crypto_mod_put(alg);
357*29ce50e0SEric Biggers return -EEXIST;
358*29ce50e0SEric Biggers }
359*29ce50e0SEric Biggers
360*29ce50e0SEric Biggers if (strlen(p->cru_driver_name))
361*29ce50e0SEric Biggers name = p->cru_driver_name;
362*29ce50e0SEric Biggers else
363*29ce50e0SEric Biggers name = p->cru_name;
364*29ce50e0SEric Biggers
365*29ce50e0SEric Biggers alg = crypto_alg_mod_lookup(name, p->cru_type, p->cru_mask);
366*29ce50e0SEric Biggers if (IS_ERR(alg))
367*29ce50e0SEric Biggers return PTR_ERR(alg);
368*29ce50e0SEric Biggers
369*29ce50e0SEric Biggers down_write(&crypto_alg_sem);
370*29ce50e0SEric Biggers
371*29ce50e0SEric Biggers if (priority)
372*29ce50e0SEric Biggers alg->cra_priority = nla_get_u32(priority);
373*29ce50e0SEric Biggers
374*29ce50e0SEric Biggers up_write(&crypto_alg_sem);
375*29ce50e0SEric Biggers
376*29ce50e0SEric Biggers crypto_mod_put(alg);
377*29ce50e0SEric Biggers
378*29ce50e0SEric Biggers return 0;
379*29ce50e0SEric Biggers }
380*29ce50e0SEric Biggers
crypto_del_rng(struct sk_buff * skb,struct nlmsghdr * nlh,struct nlattr ** attrs)381*29ce50e0SEric Biggers static int crypto_del_rng(struct sk_buff *skb, struct nlmsghdr *nlh,
382*29ce50e0SEric Biggers struct nlattr **attrs)
383*29ce50e0SEric Biggers {
384*29ce50e0SEric Biggers if (!netlink_capable(skb, CAP_NET_ADMIN))
385*29ce50e0SEric Biggers return -EPERM;
386*29ce50e0SEric Biggers return crypto_del_default_rng();
387*29ce50e0SEric Biggers }
388*29ce50e0SEric Biggers
crypto_reportstat(struct sk_buff * in_skb,struct nlmsghdr * in_nlh,struct nlattr ** attrs)389*29ce50e0SEric Biggers static int crypto_reportstat(struct sk_buff *in_skb, struct nlmsghdr *in_nlh,
390*29ce50e0SEric Biggers struct nlattr **attrs)
391*29ce50e0SEric Biggers {
392*29ce50e0SEric Biggers /* No longer supported */
393*29ce50e0SEric Biggers return -ENOTSUPP;
394*29ce50e0SEric Biggers }
395*29ce50e0SEric Biggers
396*29ce50e0SEric Biggers #define MSGSIZE(type) sizeof(struct type)
397*29ce50e0SEric Biggers
398*29ce50e0SEric Biggers static const int crypto_msg_min[CRYPTO_NR_MSGTYPES] = {
399*29ce50e0SEric Biggers [CRYPTO_MSG_NEWALG - CRYPTO_MSG_BASE] = MSGSIZE(crypto_user_alg),
400*29ce50e0SEric Biggers [CRYPTO_MSG_DELALG - CRYPTO_MSG_BASE] = MSGSIZE(crypto_user_alg),
401*29ce50e0SEric Biggers [CRYPTO_MSG_UPDATEALG - CRYPTO_MSG_BASE] = MSGSIZE(crypto_user_alg),
402*29ce50e0SEric Biggers [CRYPTO_MSG_GETALG - CRYPTO_MSG_BASE] = MSGSIZE(crypto_user_alg),
403*29ce50e0SEric Biggers [CRYPTO_MSG_DELRNG - CRYPTO_MSG_BASE] = 0,
404*29ce50e0SEric Biggers [CRYPTO_MSG_GETSTAT - CRYPTO_MSG_BASE] = MSGSIZE(crypto_user_alg),
405*29ce50e0SEric Biggers };
406*29ce50e0SEric Biggers
407*29ce50e0SEric Biggers static const struct nla_policy crypto_policy[CRYPTOCFGA_MAX+1] = {
408*29ce50e0SEric Biggers [CRYPTOCFGA_PRIORITY_VAL] = { .type = NLA_U32},
409*29ce50e0SEric Biggers };
410*29ce50e0SEric Biggers
411*29ce50e0SEric Biggers #undef MSGSIZE
412*29ce50e0SEric Biggers
413*29ce50e0SEric Biggers static const struct crypto_link {
414*29ce50e0SEric Biggers int (*doit)(struct sk_buff *, struct nlmsghdr *, struct nlattr **);
415*29ce50e0SEric Biggers int (*dump)(struct sk_buff *, struct netlink_callback *);
416*29ce50e0SEric Biggers int (*done)(struct netlink_callback *);
417*29ce50e0SEric Biggers } crypto_dispatch[CRYPTO_NR_MSGTYPES] = {
418*29ce50e0SEric Biggers [CRYPTO_MSG_NEWALG - CRYPTO_MSG_BASE] = { .doit = crypto_add_alg},
419*29ce50e0SEric Biggers [CRYPTO_MSG_DELALG - CRYPTO_MSG_BASE] = { .doit = crypto_del_alg},
420*29ce50e0SEric Biggers [CRYPTO_MSG_UPDATEALG - CRYPTO_MSG_BASE] = { .doit = crypto_update_alg},
421*29ce50e0SEric Biggers [CRYPTO_MSG_GETALG - CRYPTO_MSG_BASE] = { .doit = crypto_report,
422*29ce50e0SEric Biggers .dump = crypto_dump_report,
423*29ce50e0SEric Biggers .done = crypto_dump_report_done},
424*29ce50e0SEric Biggers [CRYPTO_MSG_DELRNG - CRYPTO_MSG_BASE] = { .doit = crypto_del_rng },
425*29ce50e0SEric Biggers [CRYPTO_MSG_GETSTAT - CRYPTO_MSG_BASE] = { .doit = crypto_reportstat},
426*29ce50e0SEric Biggers };
427*29ce50e0SEric Biggers
crypto_user_rcv_msg(struct sk_buff * skb,struct nlmsghdr * nlh,struct netlink_ext_ack * extack)428*29ce50e0SEric Biggers static int crypto_user_rcv_msg(struct sk_buff *skb, struct nlmsghdr *nlh,
429*29ce50e0SEric Biggers struct netlink_ext_ack *extack)
430*29ce50e0SEric Biggers {
431*29ce50e0SEric Biggers struct net *net = sock_net(skb->sk);
432*29ce50e0SEric Biggers struct nlattr *attrs[CRYPTOCFGA_MAX+1];
433*29ce50e0SEric Biggers const struct crypto_link *link;
434*29ce50e0SEric Biggers int type, err;
435*29ce50e0SEric Biggers
436*29ce50e0SEric Biggers type = nlh->nlmsg_type;
437*29ce50e0SEric Biggers if (type > CRYPTO_MSG_MAX)
438*29ce50e0SEric Biggers return -EINVAL;
439*29ce50e0SEric Biggers
440*29ce50e0SEric Biggers type -= CRYPTO_MSG_BASE;
441*29ce50e0SEric Biggers link = &crypto_dispatch[type];
442*29ce50e0SEric Biggers
443*29ce50e0SEric Biggers if ((type == (CRYPTO_MSG_GETALG - CRYPTO_MSG_BASE) &&
444*29ce50e0SEric Biggers (nlh->nlmsg_flags & NLM_F_DUMP))) {
445*29ce50e0SEric Biggers struct crypto_alg *alg;
446*29ce50e0SEric Biggers unsigned long dump_alloc = 0;
447*29ce50e0SEric Biggers
448*29ce50e0SEric Biggers if (link->dump == NULL)
449*29ce50e0SEric Biggers return -EINVAL;
450*29ce50e0SEric Biggers
451*29ce50e0SEric Biggers down_read(&crypto_alg_sem);
452*29ce50e0SEric Biggers list_for_each_entry(alg, &crypto_alg_list, cra_list)
453*29ce50e0SEric Biggers dump_alloc += CRYPTO_REPORT_MAXSIZE;
454*29ce50e0SEric Biggers up_read(&crypto_alg_sem);
455*29ce50e0SEric Biggers
456*29ce50e0SEric Biggers {
457*29ce50e0SEric Biggers struct netlink_dump_control c = {
458*29ce50e0SEric Biggers .dump = link->dump,
459*29ce50e0SEric Biggers .done = link->done,
460*29ce50e0SEric Biggers .min_dump_alloc = min(dump_alloc, 65535UL),
461*29ce50e0SEric Biggers };
462*29ce50e0SEric Biggers err = netlink_dump_start(net->crypto_nlsk, skb, nlh, &c);
463*29ce50e0SEric Biggers }
464*29ce50e0SEric Biggers
465*29ce50e0SEric Biggers return err;
466*29ce50e0SEric Biggers }
467*29ce50e0SEric Biggers
468*29ce50e0SEric Biggers err = nlmsg_parse_deprecated(nlh, crypto_msg_min[type], attrs,
469*29ce50e0SEric Biggers CRYPTOCFGA_MAX, crypto_policy, extack);
470*29ce50e0SEric Biggers if (err < 0)
471*29ce50e0SEric Biggers return err;
472*29ce50e0SEric Biggers
473*29ce50e0SEric Biggers if (link->doit == NULL)
474*29ce50e0SEric Biggers return -EINVAL;
475*29ce50e0SEric Biggers
476*29ce50e0SEric Biggers return link->doit(skb, nlh, attrs);
477*29ce50e0SEric Biggers }
478*29ce50e0SEric Biggers
crypto_netlink_rcv(struct sk_buff * skb)479*29ce50e0SEric Biggers static void crypto_netlink_rcv(struct sk_buff *skb)
480*29ce50e0SEric Biggers {
481*29ce50e0SEric Biggers mutex_lock(&crypto_cfg_mutex);
482*29ce50e0SEric Biggers netlink_rcv_skb(skb, &crypto_user_rcv_msg);
483*29ce50e0SEric Biggers mutex_unlock(&crypto_cfg_mutex);
484*29ce50e0SEric Biggers }
485*29ce50e0SEric Biggers
crypto_netlink_init(struct net * net)486*29ce50e0SEric Biggers static int __net_init crypto_netlink_init(struct net *net)
487*29ce50e0SEric Biggers {
488*29ce50e0SEric Biggers struct netlink_kernel_cfg cfg = {
489*29ce50e0SEric Biggers .input = crypto_netlink_rcv,
490*29ce50e0SEric Biggers };
491*29ce50e0SEric Biggers
492*29ce50e0SEric Biggers net->crypto_nlsk = netlink_kernel_create(net, NETLINK_CRYPTO, &cfg);
493*29ce50e0SEric Biggers return net->crypto_nlsk == NULL ? -ENOMEM : 0;
494*29ce50e0SEric Biggers }
495*29ce50e0SEric Biggers
crypto_netlink_exit(struct net * net)496*29ce50e0SEric Biggers static void __net_exit crypto_netlink_exit(struct net *net)
497*29ce50e0SEric Biggers {
498*29ce50e0SEric Biggers netlink_kernel_release(net->crypto_nlsk);
499*29ce50e0SEric Biggers net->crypto_nlsk = NULL;
500*29ce50e0SEric Biggers }
501*29ce50e0SEric Biggers
502*29ce50e0SEric Biggers static struct pernet_operations crypto_netlink_net_ops = {
503*29ce50e0SEric Biggers .init = crypto_netlink_init,
504*29ce50e0SEric Biggers .exit = crypto_netlink_exit,
505*29ce50e0SEric Biggers };
506*29ce50e0SEric Biggers
crypto_user_init(void)507*29ce50e0SEric Biggers static int __init crypto_user_init(void)
508*29ce50e0SEric Biggers {
509*29ce50e0SEric Biggers return register_pernet_subsys(&crypto_netlink_net_ops);
510*29ce50e0SEric Biggers }
511*29ce50e0SEric Biggers
crypto_user_exit(void)512*29ce50e0SEric Biggers static void __exit crypto_user_exit(void)
513*29ce50e0SEric Biggers {
514*29ce50e0SEric Biggers unregister_pernet_subsys(&crypto_netlink_net_ops);
515*29ce50e0SEric Biggers }
516*29ce50e0SEric Biggers
517*29ce50e0SEric Biggers module_init(crypto_user_init);
518*29ce50e0SEric Biggers module_exit(crypto_user_exit);
519*29ce50e0SEric Biggers MODULE_LICENSE("GPL");
520*29ce50e0SEric Biggers MODULE_AUTHOR("Steffen Klassert <steffen.klassert@secunet.com>");
521*29ce50e0SEric Biggers MODULE_DESCRIPTION("Crypto userspace configuration API");
522*29ce50e0SEric Biggers MODULE_ALIAS("net-pf-16-proto-21");
523