16 #ifndef included_vnet_crypto_crypto_h 17 #define included_vnet_crypto_crypto_h 21 #define VNET_CRYPTO_FRAME_SIZE 32 24 #define foreach_crypto_cipher_alg \ 25 _(DES_CBC, "des-cbc", 7) \ 26 _(3DES_CBC, "3des-cbc", 24) \ 27 _(AES_128_CBC, "aes-128-cbc", 16) \ 28 _(AES_192_CBC, "aes-192-cbc", 24) \ 29 _(AES_256_CBC, "aes-256-cbc", 32) \ 30 _(AES_128_CTR, "aes-128-ctr", 16) \ 31 _(AES_192_CTR, "aes-192-ctr", 24) \ 32 _(AES_256_CTR, "aes-256-ctr", 32) 35 #define foreach_crypto_aead_alg \ 36 _(AES_128_GCM, "aes-128-gcm", 16) \ 37 _(AES_192_GCM, "aes-192-gcm", 24) \ 38 _(AES_256_GCM, "aes-256-gcm", 32) 40 #define foreach_crypto_hmac_alg \ 43 _(SHA224, "sha-224") \ 44 _(SHA256, "sha-256") \ 45 _(SHA384, "sha-384") \ 48 #define foreach_crypto_op_type \ 49 _(ENCRYPT, "encrypt") \ 50 _(DECRYPT, "decrypt") \ 51 _(AEAD_ENCRYPT, "aead-encrypt") \ 52 _(AEAD_DECRYPT, "aead-decrypt") \ 57 #define _(n, s) VNET_CRYPTO_OP_TYPE_##n, 63 #define foreach_crypto_op_status \ 65 _(PENDING, "pending") \ 66 _(WORK_IN_PROGRESS, "work-in-progress") \ 67 _(COMPLETED, "completed") \ 68 _(FAIL_NO_HANDLER, "no-handler") \ 69 _(FAIL_BAD_HMAC, "bad-hmac") \ 70 _(FAIL_ENGINE_ERR, "engine-error") 75 #define foreach_crypto_aead_async_alg \ 76 _(AES_128_GCM, "aes-128-gcm-aad8", 16, 16, 8) \ 77 _(AES_128_GCM, "aes-128-gcm-aad12", 16, 16, 12) \ 78 _(AES_192_GCM, "aes-192-gcm-aad8", 24, 16, 8) \ 79 _(AES_192_GCM, "aes-192-gcm-aad12", 24, 16, 12) \ 80 _(AES_256_GCM, "aes-256-gcm-aad8", 32, 16, 8) \ 81 _(AES_256_GCM, "aes-256-gcm-aad12", 32, 16, 12) 84 #define foreach_crypto_link_async_alg \ 85 _ (AES_128_CBC, SHA1, "aes-128-cbc-hmac-sha-1", 16, 12) \ 86 _ (AES_192_CBC, SHA1, "aes-192-cbc-hmac-sha-1", 24, 12) \ 87 _ (AES_256_CBC, SHA1, "aes-256-cbc-hmac-sha-1", 32, 12) \ 88 _ (AES_128_CBC, SHA224, "aes-128-cbc-hmac-sha-224", 16, 14) \ 89 _ (AES_192_CBC, SHA224, "aes-192-cbc-hmac-sha-224", 24, 14) \ 90 _ (AES_256_CBC, SHA224, "aes-256-cbc-hmac-sha-224", 32, 14) \ 91 _ (AES_128_CBC, SHA256, "aes-128-cbc-hmac-sha-256", 16, 16) \ 92 _ (AES_192_CBC, SHA256, "aes-192-cbc-hmac-sha-256", 24, 16) \ 93 _ (AES_256_CBC, SHA256, "aes-256-cbc-hmac-sha-256", 32, 16) \ 94 _ (AES_128_CBC, SHA384, "aes-128-cbc-hmac-sha-384", 16, 24) \ 95 _ (AES_192_CBC, SHA384, "aes-192-cbc-hmac-sha-384", 24, 24) \ 96 _ (AES_256_CBC, SHA384, "aes-256-cbc-hmac-sha-384", 32, 24) \ 97 _ (AES_128_CBC, SHA512, "aes-128-cbc-hmac-sha-512", 16, 32) \ 98 _ (AES_192_CBC, SHA512, "aes-192-cbc-hmac-sha-512", 24, 32) \ 99 _ (AES_256_CBC, SHA512, "aes-256-cbc-hmac-sha-512", 32, 32) 101 #define foreach_crypto_async_op_type \ 102 _(ENCRYPT, "async-encrypt") \ 103 _(DECRYPT, "async-decrypt") 114 #define _(n, s) VNET_CRYPTO_OP_STATUS_##n, 124 #define _(n, s, l) VNET_CRYPTO_ALG_##n, 128 #define _(n, s) VNET_CRYPTO_ALG_HMAC_##n, 136 #define _(n, s) VNET_CRYPTO_ASYNC_OP_TYPE_##n, 145 #define _(n, s, k, t, a) \ 146 VNET_CRYPTO_ALG_##n##_TAG##t##_AAD##a, 149 #define _(c, h, s, k ,d) \ 150 VNET_CRYPTO_ALG_##c##_##h##_TAG##d, 159 #define _(n, s, k, t, a) \ 160 VNET_CRYPTO_OP_##n##_TAG##t##_AAD##a##_ENC, \ 161 VNET_CRYPTO_OP_##n##_TAG##t##_AAD##a##_DEC, 164 #define _(c, h, s, k ,d) \ 165 VNET_CRYPTO_OP_##c##_##h##_TAG##d##_ENC, \ 166 VNET_CRYPTO_OP_##c##_##h##_TAG##d##_DEC, 188 #define VNET_CRYPTO_KEY_TYPE_DATA 0 189 #define VNET_CRYPTO_KEY_TYPE_LINK 1 196 #define _(n, s, l) VNET_CRYPTO_OP_##n##_ENC, VNET_CRYPTO_OP_##n##_DEC, 200 #define _(n, s) VNET_CRYPTO_OP_##n##_HMAC, 232 vnet_crypto_op_id_t
op:16;
235 #define VNET_CRYPTO_OP_FLAG_INIT_IV (1 << 0) 236 #define VNET_CRYPTO_OP_FLAG_HMAC_CHECK (1 << 1) 237 #define VNET_CRYPTO_OP_FLAG_CHAINED_BUFFERS (1 << 2) 288 vnet_crypto_async_op_type_t
type;
289 vnet_crypto_async_alg_t
alg;
321 #define VNET_CRYPTO_FRAME_STATE_NOT_PROCESSED 0 322 #define VNET_CRYPTO_FRAME_STATE_WORK_IN_PROGRESS 1 323 #define VNET_CRYPTO_FRAME_STATE_SUCCESS 2 324 #define VNET_CRYPTO_FRAME_STATE_ELT_ERROR 3 326 vnet_crypto_async_op_id_t
op:8;
353 vnet_crypto_key_op_t kop,
354 vnet_crypto_key_index_t idx);
366 vnet_crypto_op_id_t opt,
371 vnet_crypto_op_id_t opt,
376 vnet_crypto_op_id_t opt,
388 vnet_crypto_async_op_id_t opt,
443 crypto_op_class_type_t oct);
455 vnet_crypto_key_index_t index_crypto,
456 vnet_crypto_key_index_t index_integ);
467 vnet_crypto_alg_t integ_alg);
552 vnet_crypto_async_op_id_t opt = frame->
op;
574 u32 crypto_len,
i16 integ_len_adj,
575 i16 crypto_start_offset,
576 u16 integ_start_offset,
587 vnet_crypto_async_op_id_t opt = f->
op;
597 fe = &f->
elts[index];
617 vnet_crypto_async_op_id_t opt;
int() vnet_crypto_frame_enqueue_t(vlib_main_t *vm, vnet_crypto_async_frame_t *frame)
async crypto function handlers
#define foreach_crypto_op_status
format_function_t format_vnet_crypto_op_type
static_always_inline int vnet_crypto_async_add_to_frame(vlib_main_t *vm, vnet_crypto_async_frame_t **frame, u32 key_index, u32 crypto_len, i16 integ_len_adj, i16 crypto_start_offset, u16 integ_start_offset, u32 buffer_index, u16 next_node, u8 *iv, u8 *tag, u8 *aad, u8 flags)
uword * async_alg_index_by_name
vnet_crypto_engine_t * engines
#define CLIB_CACHE_LINE_ALIGN_MARK(mark)
uword * alg_index_by_name
vnet_crypto_thread_t * threads
#define foreach_crypto_link_async_alg
static_always_inline void vnet_crypto_async_reset_frame(vnet_crypto_async_frame_t *f)
#define VNET_CRYPTO_FRAME_STATE_NOT_PROCESSED
static_always_inline int vnet_crypto_set_handler(char *alg_name, char *engine)
vnet_crypto_op_data_t opt_data[VNET_CRYPTO_N_OP_IDS]
u32() vnet_crypto_chained_ops_handler_t(vlib_main_t *vm, vnet_crypto_op_t *ops[], vnet_crypto_op_chunk_t *chunks, u32 n_ops)
vnet_crypto_alg_data_t * algs
vnet_crypto_frame_enqueue_t ** enqueue_handlers
format_function_t format_vnet_crypto_op
clib_memset(h->entries, 0, sizeof(h->entries[0]) *entries)
vnet_crypto_async_alg_data_t * async_algs
format_function_t format_vnet_crypto_alg
vnet_crypto_async_op_type_t type
u32 vnet_crypto_process_chained_ops(vlib_main_t *vm, vnet_crypto_op_t ops[], vnet_crypto_op_chunk_t *chunks, u32 n_ops)
int vnet_crypto_is_set_handler(vnet_crypto_alg_t alg)
void vnet_crypto_register_key_handler(vlib_main_t *vm, u32 engine_index, vnet_crypto_key_handler_t *keyh)
void vnet_crypto_register_ops_handler(vlib_main_t *vm, u32 engine_index, vnet_crypto_op_id_t opt, vnet_crypto_ops_handler_t *oph)
#define foreach_crypto_async_op_type
void vnet_crypto_register_ops_handlers(vlib_main_t *vm, u32 engine_index, vnet_crypto_op_id_t opt, vnet_crypto_ops_handler_t *fn, vnet_crypto_chained_ops_handler_t *cfn)
void vnet_crypto_request_async_mode(int is_enable)
format_function_t format_vnet_crypto_async_op
static uword clib_bitmap_set_no_check(uword *a, uword i, uword new_value)
Sets the ith bit of a bitmap to new_value.
u32 vnet_crypto_key_add(vlib_main_t *vm, vnet_crypto_alg_t alg, u8 *data, u16 length)
#define static_always_inline
void vnet_crypto_key_del(vlib_main_t *vm, vnet_crypto_key_index_t index)
#define foreach_crypto_aead_alg
vnet_crypto_async_frame_t *() vnet_crypto_frame_dequeue_t(vlib_main_t *vm)
u32 active_engine_index_chained
int vnet_crypto_set_async_handler2(char *alg_name, char *engine)
static_always_inline void vnet_crypto_op_init(vnet_crypto_op_t *op, vnet_crypto_op_id_t type)
void vnet_crypto_register_chained_ops_handler(vlib_main_t *vm, u32 engine_index, vnet_crypto_op_id_t opt, vnet_crypto_chained_ops_handler_t *oph)
#define vec_elt_at_index(v, i)
Get vector value at index i checking that i is in bounds.
u32 vnet_crypto_process_ops(vlib_main_t *vm, vnet_crypto_op_t ops[], u32 n_ops)
int vnet_crypto_is_set_async_handler(vnet_crypto_async_op_id_t opt)
#define foreach_crypto_hmac_alg
vnet_crypto_async_frame_t * frames[VNET_CRYPTO_ASYNC_OP_N_IDS]
vnet_crypto_chained_ops_handler_t ** chained_ops_handlers
#define VNET_CRYPTO_FRAME_SIZE
vl_api_fib_path_type_t type
vnet_crypto_async_alg_t vnet_crypto_link_algs(vnet_crypto_alg_t crypto_alg, vnet_crypto_alg_t integ_alg)
u32 active_engine_index_async
void() vnet_crypto_key_handler_t(vlib_main_t *vm, vnet_crypto_key_op_t kop, vnet_crypto_key_index_t idx)
vnet_crypto_key_handler_t * key_op_handler
vnet_crypto_async_next_node_t * next_nodes
void vnet_crypto_register_async_handler(vlib_main_t *vm, u32 engine_index, vnet_crypto_async_op_id_t opt, vnet_crypto_frame_enqueue_t *enq_fn, vnet_crypto_frame_dequeue_t *deq_fn)
u16 next_node_index[VNET_CRYPTO_FRAME_SIZE]
#define pool_put(P, E)
Free an object E in pool P.
u32 active_engine_index_simple
static_always_inline void vnet_crypto_async_free_frame(vlib_main_t *vm, vnet_crypto_async_frame_t *frame)
vnet_crypto_async_frame_t * frame_pool
static_always_inline vnet_crypto_async_frame_t * vnet_crypto_async_get_frame(vlib_main_t *vm, vnet_crypto_async_op_id_t opt)
async crypto inline functions
vnet_crypto_async_alg_t async_alg
#define pool_get_aligned(P, E, A)
Allocate an object E from a pool P with alignment A.
u32 buffer_indices[VNET_CRYPTO_FRAME_SIZE]
format_function_t format_vnet_crypto_async_op_type
format_function_t format_vnet_crypto_async_alg
vnet_crypto_frame_dequeue_t ** dequeue_handlers
vnet_crypto_async_op_type_t
clib_error_t * crypto_dispatch_enable_disable(int is_enable)
unformat_function_t unformat_vnet_crypto_alg
u32() vnet_crypto_ops_handler_t(vlib_main_t *vm, vnet_crypto_op_t *ops[], u32 n_ops)
vnet_crypto_async_alg_t alg
format_function_t format_vnet_crypto_op_status
uword * engine_index_by_name
#define VNET_CRYPTO_FRAME_STATE_WORK_IN_PROGRESS
static_always_inline vnet_crypto_op_type_t vnet_crypto_get_op_type(vnet_crypto_op_id_t id)
clib_bitmap_t * async_active_ids
u8 flags
share same VNET_CRYPTO_OP_FLAG_* values
u32 vnet_crypto_key_index_t
#define foreach_crypto_aead_async_alg
async crypto
vnet_crypto_async_op_id_t
static_always_inline int vnet_crypto_async_submit_open_frame(vlib_main_t *vm, vnet_crypto_async_frame_t *frame)
vnet_crypto_async_op_id_t op
static_always_inline vnet_crypto_key_t * vnet_crypto_get_key(vnet_crypto_key_index_t index)
format_function_t format_vnet_crypto_engine
u32 vnet_crypto_register_engine(vlib_main_t *vm, char *name, int prio, char *desc)
#define foreach_crypto_op_type
vnet_crypto_op_type_t type
vnet_crypto_op_status_t status
vlib_main_t vlib_node_runtime_t vlib_frame_t * frame
STATIC_ASSERT_SIZEOF(vnet_crypto_op_t, CLIB_CACHE_LINE_BYTES)
u32 vnet_crypto_key_add_linked(vlib_main_t *vm, vnet_crypto_key_index_t index_crypto, vnet_crypto_key_index_t index_integ)
Use 2 created keys to generate new key for linked algs (cipher + integ) The returned key index is to ...
vnet_crypto_main_t crypto_main
int vnet_crypto_set_handler2(char *ops_handler_name, char *engine, crypto_op_class_type_t oct)
vnet_crypto_ops_handler_t ** ops_handlers
#define CLIB_CACHE_LINE_BYTES
u32 vnet_crypto_register_post_node(vlib_main_t *vm, char *post_node_name)
async crypto register functions
#define foreach_crypto_cipher_alg
vnet_crypto_op_status_t status
vnet_crypto_async_frame_elt_t elts[VNET_CRYPTO_FRAME_SIZE]