1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39#ifndef _DRBG_H
40#define _DRBG_H
41
42
43#include <linux/random.h>
44#include <linux/scatterlist.h>
45#include <crypto/hash.h>
46#include <crypto/skcipher.h>
47#include <linux/module.h>
48#include <linux/crypto.h>
49#include <linux/slab.h>
50#include <crypto/internal/rng.h>
51#include <crypto/rng.h>
52#include <linux/fips.h>
53#include <linux/mutex.h>
54#include <linux/list.h>
55#include <linux/workqueue.h>
56
57
58
59
60
61
62
63
64
65
66
67struct drbg_string {
68 const unsigned char *buf;
69 size_t len;
70 struct list_head list;
71};
72
73static inline void drbg_string_fill(struct drbg_string *string,
74 const unsigned char *buf, size_t len)
75{
76 string->buf = buf;
77 string->len = len;
78 INIT_LIST_HEAD(&string->list);
79}
80
81struct drbg_state;
82typedef uint32_t drbg_flag_t;
83
84struct drbg_core {
85 drbg_flag_t flags;
86 __u8 statelen;
87 __u8 blocklen_bytes;
88 char cra_name[CRYPTO_MAX_ALG_NAME];
89
90 char backend_cra_name[CRYPTO_MAX_ALG_NAME];
91};
92
93struct drbg_state_ops {
94 int (*update)(struct drbg_state *drbg, struct list_head *seed,
95 int reseed);
96 int (*generate)(struct drbg_state *drbg,
97 unsigned char *buf, unsigned int buflen,
98 struct list_head *addtl);
99 int (*crypto_init)(struct drbg_state *drbg);
100 int (*crypto_fini)(struct drbg_state *drbg);
101
102};
103
104struct drbg_test_data {
105 struct drbg_string *testentropy;
106};
107
108struct drbg_state {
109 struct mutex drbg_mutex;
110 unsigned char *V;
111 unsigned char *Vbuf;
112
113 unsigned char *C;
114 unsigned char *Cbuf;
115
116 size_t reseed_ctr;
117 size_t reseed_threshold;
118
119 unsigned char *scratchpad;
120 unsigned char *scratchpadbuf;
121 void *priv_data;
122
123 struct crypto_skcipher *ctr_handle;
124 struct skcipher_request *ctr_req;
125 __u8 *ctr_null_value_buf;
126 __u8 *ctr_null_value;
127 __u8 *outscratchpadbuf;
128 __u8 *outscratchpad;
129 struct crypto_wait ctr_wait;
130
131 bool seeded;
132 bool pr;
133 struct work_struct seed_work;
134 struct crypto_rng *jent;
135 const struct drbg_state_ops *d_ops;
136 const struct drbg_core *core;
137 struct drbg_string test_data;
138 struct random_ready_callback random_ready;
139};
140
141static inline __u8 drbg_statelen(struct drbg_state *drbg)
142{
143 if (drbg && drbg->core)
144 return drbg->core->statelen;
145 return 0;
146}
147
148static inline __u8 drbg_blocklen(struct drbg_state *drbg)
149{
150 if (drbg && drbg->core)
151 return drbg->core->blocklen_bytes;
152 return 0;
153}
154
155static inline __u8 drbg_keylen(struct drbg_state *drbg)
156{
157 if (drbg && drbg->core)
158 return (drbg->core->statelen - drbg->core->blocklen_bytes);
159 return 0;
160}
161
162static inline size_t drbg_max_request_bytes(struct drbg_state *drbg)
163{
164
165 return (1 << 16);
166}
167
168static inline size_t drbg_max_addtl(struct drbg_state *drbg)
169{
170
171#if (__BITS_PER_LONG == 32)
172
173
174
175
176
177 return (SIZE_MAX - 1);
178#else
179 return (1UL<<35);
180#endif
181}
182
183static inline size_t drbg_max_requests(struct drbg_state *drbg)
184{
185
186#if (__BITS_PER_LONG == 32)
187 return SIZE_MAX;
188#else
189 return (1UL<<48);
190#endif
191}
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206static inline int crypto_drbg_get_bytes_addtl(struct crypto_rng *drng,
207 unsigned char *outbuf, unsigned int outlen,
208 struct drbg_string *addtl)
209{
210 return crypto_rng_generate(drng, addtl->buf, addtl->len,
211 outbuf, outlen);
212}
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231static inline int crypto_drbg_get_bytes_addtl_test(struct crypto_rng *drng,
232 unsigned char *outbuf, unsigned int outlen,
233 struct drbg_string *addtl,
234 struct drbg_test_data *test_data)
235{
236 crypto_rng_set_entropy(drng, test_data->testentropy->buf,
237 test_data->testentropy->len);
238 return crypto_rng_generate(drng, addtl->buf, addtl->len,
239 outbuf, outlen);
240}
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256static inline int crypto_drbg_reset_test(struct crypto_rng *drng,
257 struct drbg_string *pers,
258 struct drbg_test_data *test_data)
259{
260 crypto_rng_set_entropy(drng, test_data->testentropy->buf,
261 test_data->testentropy->len);
262 return crypto_rng_reset(drng, pers->buf, pers->len);
263}
264
265
266#define DRBG_CTR ((drbg_flag_t)1<<0)
267#define DRBG_HMAC ((drbg_flag_t)1<<1)
268#define DRBG_HASH ((drbg_flag_t)1<<2)
269#define DRBG_TYPE_MASK (DRBG_CTR | DRBG_HMAC | DRBG_HASH)
270
271#define DRBG_STRENGTH128 ((drbg_flag_t)1<<3)
272#define DRBG_STRENGTH192 ((drbg_flag_t)1<<4)
273#define DRBG_STRENGTH256 ((drbg_flag_t)1<<5)
274#define DRBG_STRENGTH_MASK (DRBG_STRENGTH128 | DRBG_STRENGTH192 | \
275 DRBG_STRENGTH256)
276
277enum drbg_prefixes {
278 DRBG_PREFIX0 = 0x00,
279 DRBG_PREFIX1,
280 DRBG_PREFIX2,
281 DRBG_PREFIX3
282};
283
284#endif
285