Home | History | Annotate | Line # | Download | only in chacha
      1  1.4  jmcneill /*	$NetBSD: chacha_impl.c,v 1.4 2022/11/05 17:36:33 jmcneill Exp $	*/
      2  1.1  riastrad 
      3  1.1  riastrad /*-
      4  1.1  riastrad  * Copyright (c) 2020 The NetBSD Foundation, Inc.
      5  1.1  riastrad  * All rights reserved.
      6  1.1  riastrad  *
      7  1.1  riastrad  * Redistribution and use in source and binary forms, with or without
      8  1.1  riastrad  * modification, are permitted provided that the following conditions
      9  1.1  riastrad  * are met:
     10  1.1  riastrad  * 1. Redistributions of source code must retain the above copyright
     11  1.1  riastrad  *    notice, this list of conditions and the following disclaimer.
     12  1.1  riastrad  * 2. Redistributions in binary form must reproduce the above copyright
     13  1.1  riastrad  *    notice, this list of conditions and the following disclaimer in the
     14  1.1  riastrad  *    documentation and/or other materials provided with the distribution.
     15  1.1  riastrad  *
     16  1.1  riastrad  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     17  1.1  riastrad  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     18  1.1  riastrad  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     19  1.1  riastrad  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     20  1.1  riastrad  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     21  1.1  riastrad  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     22  1.1  riastrad  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     23  1.1  riastrad  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     24  1.1  riastrad  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     25  1.1  riastrad  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     26  1.1  riastrad  * POSSIBILITY OF SUCH DAMAGE.
     27  1.1  riastrad  */
     28  1.1  riastrad 
     29  1.1  riastrad #include <sys/types.h>
     30  1.1  riastrad #include <sys/cdefs.h>
     31  1.1  riastrad #include <sys/errno.h>
     32  1.1  riastrad #include <sys/module.h>
     33  1.1  riastrad #include <sys/once.h>
     34  1.1  riastrad #include <sys/sysctl.h>
     35  1.1  riastrad 
     36  1.1  riastrad #include <lib/libkern/libkern.h>
     37  1.1  riastrad 
     38  1.1  riastrad #include "chacha.h"
     39  1.1  riastrad #include "chacha_ref.h"
     40  1.1  riastrad 
     41  1.3  riastrad static const struct chacha_impl	*chacha_md_impl __read_mostly;
     42  1.3  riastrad static const struct chacha_impl	*chacha_impl __read_mostly = &chacha_ref_impl;
     43  1.1  riastrad 
     44  1.1  riastrad static int
     45  1.2  riastrad sysctl_kern_crypto_chacha_selected(SYSCTLFN_ARGS)
     46  1.1  riastrad {
     47  1.1  riastrad 	struct sysctlnode node;
     48  1.1  riastrad 
     49  1.1  riastrad 	node = *rnode;
     50  1.1  riastrad 	node.sysctl_data = __UNCONST(chacha_impl->ci_name);
     51  1.1  riastrad 	node.sysctl_size = strlen(chacha_impl->ci_name) + 1;
     52  1.1  riastrad 	return sysctl_lookup(SYSCTLFN_CALL(&node));
     53  1.1  riastrad }
     54  1.1  riastrad 
     55  1.2  riastrad SYSCTL_SETUP(sysctl_kern_crypto_chacha_setup, "sysctl kern.crypto.chacha setup")
     56  1.1  riastrad {
     57  1.2  riastrad 	const struct sysctlnode *cnode;
     58  1.2  riastrad 	const struct sysctlnode *chacha_node;
     59  1.1  riastrad 
     60  1.2  riastrad 	sysctl_createv(clog, 0, NULL, &cnode, 0, CTLTYPE_NODE, "crypto",
     61  1.2  riastrad 	    SYSCTL_DESCR("Kernel cryptography"),
     62  1.2  riastrad 	    NULL, 0, NULL, 0,
     63  1.2  riastrad 	    CTL_KERN, CTL_CREATE, CTL_EOL);
     64  1.2  riastrad 	sysctl_createv(clog, 0, &cnode, &chacha_node, 0, CTLTYPE_NODE, "chacha",
     65  1.2  riastrad 	    SYSCTL_DESCR("ChaCha"),
     66  1.2  riastrad 	    NULL, 0, NULL, 0,
     67  1.2  riastrad 	    CTL_CREATE, CTL_EOL);
     68  1.2  riastrad 	sysctl_createv(clog, 0, &chacha_node, NULL,
     69  1.2  riastrad 	    CTLFLAG_PERMANENT|CTLFLAG_READONLY, CTLTYPE_STRING, "selected",
     70  1.1  riastrad 	    SYSCTL_DESCR("Selected ChaCha implementation"),
     71  1.2  riastrad 	    sysctl_kern_crypto_chacha_selected, 0, NULL, 0,
     72  1.2  riastrad 	    CTL_CREATE, CTL_EOL);
     73  1.1  riastrad }
     74  1.1  riastrad 
     75  1.1  riastrad static int
     76  1.1  riastrad chacha_select(void)
     77  1.1  riastrad {
     78  1.1  riastrad 
     79  1.1  riastrad 	if (chacha_md_impl) {
     80  1.1  riastrad 		if (chacha_selftest(chacha_md_impl))
     81  1.1  riastrad 			aprint_error("chacha: self-test failed: %s\n",
     82  1.1  riastrad 			    chacha_md_impl->ci_name);
     83  1.1  riastrad 		else
     84  1.1  riastrad 			chacha_impl = chacha_md_impl;
     85  1.1  riastrad 	}
     86  1.1  riastrad 
     87  1.4  jmcneill 	aprint_debug("chacha: %s\n", chacha_impl->ci_name);
     88  1.1  riastrad 	return 0;
     89  1.1  riastrad }
     90  1.1  riastrad 
     91  1.1  riastrad MODULE(MODULE_CLASS_MISC, chacha, NULL);
     92  1.1  riastrad 
     93  1.1  riastrad static int
     94  1.1  riastrad chacha_modcmd(modcmd_t cmd, void *opaque)
     95  1.1  riastrad {
     96  1.1  riastrad 
     97  1.1  riastrad 	switch (cmd) {
     98  1.1  riastrad 	case MODULE_CMD_INIT:
     99  1.1  riastrad 		return chacha_select();
    100  1.1  riastrad 	case MODULE_CMD_FINI:
    101  1.1  riastrad 		return 0;
    102  1.1  riastrad 	default:
    103  1.1  riastrad 		return ENOTTY;
    104  1.1  riastrad 	}
    105  1.1  riastrad }
    106  1.1  riastrad 
    107  1.1  riastrad void
    108  1.1  riastrad chacha_md_init(const struct chacha_impl *impl)
    109  1.1  riastrad {
    110  1.1  riastrad 
    111  1.1  riastrad 	KASSERT(cold);
    112  1.1  riastrad 	KASSERTMSG(chacha_md_impl == NULL,
    113  1.1  riastrad 	    "ChaCha implementation `%s' already offered, can't offer `%s'",
    114  1.1  riastrad 	    chacha_md_impl->ci_name, impl->ci_name);
    115  1.1  riastrad 
    116  1.1  riastrad 	chacha_md_impl = impl;
    117  1.1  riastrad }
    118  1.1  riastrad 
    119  1.1  riastrad void
    120  1.1  riastrad chacha_core(uint8_t out[restrict static CHACHA_CORE_OUTBYTES],
    121  1.1  riastrad     const uint8_t in[static CHACHA_CORE_INBYTES],
    122  1.1  riastrad     const uint8_t k[static CHACHA_CORE_KEYBYTES],
    123  1.1  riastrad     const uint8_t c[static CHACHA_CORE_CONSTBYTES],
    124  1.1  riastrad     unsigned nr)
    125  1.1  riastrad {
    126  1.1  riastrad 
    127  1.1  riastrad 	(*chacha_impl->ci_chacha_core)(out, in, k, c, nr);
    128  1.1  riastrad }
    129  1.1  riastrad 
    130  1.1  riastrad void
    131  1.1  riastrad hchacha(uint8_t out[restrict static HCHACHA_OUTBYTES],
    132  1.1  riastrad     const uint8_t in[static HCHACHA_INBYTES],
    133  1.1  riastrad     const uint8_t k[static HCHACHA_KEYBYTES],
    134  1.1  riastrad     const uint8_t c[static HCHACHA_CONSTBYTES],
    135  1.1  riastrad     unsigned nr)
    136  1.1  riastrad {
    137  1.1  riastrad 
    138  1.1  riastrad 	(*chacha_impl->ci_hchacha)(out, in, k, c, nr);
    139  1.1  riastrad }
    140  1.1  riastrad 
    141  1.1  riastrad void
    142  1.1  riastrad chacha_stream(uint8_t *restrict s, size_t nbytes, uint32_t blkno,
    143  1.1  riastrad     const uint8_t nonce[static CHACHA_STREAM_NONCEBYTES],
    144  1.1  riastrad     const uint8_t key[static CHACHA_STREAM_KEYBYTES],
    145  1.1  riastrad     unsigned nr)
    146  1.1  riastrad {
    147  1.1  riastrad 
    148  1.1  riastrad 	(*chacha_impl->ci_chacha_stream)(s, nbytes, blkno, nonce, key, nr);
    149  1.1  riastrad }
    150  1.1  riastrad 
    151  1.1  riastrad void
    152  1.1  riastrad chacha_stream_xor(uint8_t *c, const uint8_t *p, size_t nbytes, uint32_t blkno,
    153  1.1  riastrad     const uint8_t nonce[static CHACHA_STREAM_NONCEBYTES],
    154  1.1  riastrad     const uint8_t key[static CHACHA_STREAM_KEYBYTES],
    155  1.1  riastrad     unsigned nr)
    156  1.1  riastrad {
    157  1.1  riastrad 
    158  1.1  riastrad 	(*chacha_impl->ci_chacha_stream_xor)(c, p, nbytes, blkno, nonce, key,
    159  1.1  riastrad 	    nr);
    160  1.1  riastrad }
    161  1.1  riastrad 
    162  1.1  riastrad void
    163  1.1  riastrad xchacha_stream(uint8_t *restrict s, size_t nbytes, uint32_t blkno,
    164  1.1  riastrad     const uint8_t nonce[static XCHACHA_STREAM_NONCEBYTES],
    165  1.1  riastrad     const uint8_t key[static XCHACHA_STREAM_KEYBYTES],
    166  1.1  riastrad     unsigned nr)
    167  1.1  riastrad {
    168  1.1  riastrad 
    169  1.1  riastrad 	(*chacha_impl->ci_xchacha_stream)(s, nbytes, blkno, nonce, key, nr);
    170  1.1  riastrad }
    171  1.1  riastrad 
    172  1.1  riastrad void
    173  1.1  riastrad xchacha_stream_xor(uint8_t *c, const uint8_t *p, size_t nbytes, uint32_t blkno,
    174  1.1  riastrad     const uint8_t nonce[static XCHACHA_STREAM_NONCEBYTES],
    175  1.1  riastrad     const uint8_t key[static XCHACHA_STREAM_KEYBYTES],
    176  1.1  riastrad     unsigned nr)
    177  1.1  riastrad {
    178  1.1  riastrad 
    179  1.1  riastrad 	(*chacha_impl->ci_xchacha_stream_xor)(c, p, nbytes, blkno, nonce, key,
    180  1.1  riastrad 	    nr);
    181  1.1  riastrad }
    182