-
Notifications
You must be signed in to change notification settings - Fork 128
/
qat_hw_ciphers.h
207 lines (181 loc) · 7.96 KB
/
qat_hw_ciphers.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
/* ====================================================================
*
*
* BSD LICENSE
*
* Copyright(c) 2016-2024 Intel Corporation.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* * Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* * Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
* * Neither the name of Intel Corporation nor the names of its
* contributors may be used to endorse or promote products derived
* from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*
*
* ====================================================================
*/
/*****************************************************************************
* @file qat_hw_ciphers.h
*
* This file provides an interface for engine cipher operations
*
*****************************************************************************/
#ifndef QAT_HW_CIPHERS_H
# define QAT_HW_CIPHERS_H
# ifdef QAT_HW
# ifndef QAT_OPENSSL_PROVIDER
# include <openssl/engine.h>
# endif
# include <openssl/ssl.h>
# include <openssl/crypto.h>
# include <openssl/aes.h>
# include "cpa.h"
# include "cpa_types.h"
# include "cpa_cy_sym.h"
#ifdef QAT_OPENSSL_PROVIDER
#include "qat_prov_cbc.h"
#endif
# define AES_IV_LEN 16
# define AES_KEY_SIZE_256 32
# define AES_KEY_SIZE_128 16
# define QAT_BYTE_SHIFT 8
# define HMAC_KEY_SIZE 64
# define TLS_VIRT_HDR_SIZE 13
# define TLS_MAX_PADDING_LENGTH 255
/* QAT max supported pipelines may be different from
* SSL max supported ones.
*/
# define QAT_MAX_PIPELINES SSL_MAX_PIPELINES
/* Use these flags to mark stages in the
* initialisation sequence for pipes.
*/
# define INIT_SEQ_QAT_CTX_INIT 0x0001
# define INIT_SEQ_HMAC_KEY_SET 0x0002
# define INIT_SEQ_QAT_SESSION_INIT 0x0004
# define INIT_SEQ_TLS_HDR_SET 0x0008
# define INIT_SEQ_PPL_IBUF_SET 0x0100
# define INIT_SEQ_PPL_OBUF_SET 0x0200
# define INIT_SEQ_PPL_BUF_LEN_SET 0x0400
# define INIT_SEQ_PPL_AADCTR_SET 0x0800
# define INIT_SEQ_PPL_USED 0x1000
# define qat_chained_data(ctx) \
((qat_chained_ctx *)EVP_CIPHER_CTX_get_cipher_data(ctx))
# define QAT_COMMON_CIPHER_FLAG EVP_CIPH_FLAG_DEFAULT_ASN1
# define QAT_CBC_FLAGS (QAT_COMMON_CIPHER_FLAG | \
EVP_CIPH_CBC_MODE | \
EVP_CIPH_CUSTOM_IV)
# define QAT_CHAINED_FLAG (QAT_CBC_FLAGS | \
EVP_CIPH_FLAG_CUSTOM_CIPHER | \
EVP_CIPH_FLAG_AEAD_CIPHER | \
EVP_CIPH_FLAG_PIPELINE)
# define INIT_SEQ_PPL_INIT_COMPLETE (INIT_SEQ_PPL_IBUF_SET | \
INIT_SEQ_PPL_OBUF_SET | \
INIT_SEQ_PPL_AADCTR_SET | \
INIT_SEQ_PPL_BUF_LEN_SET)
# define INIT_SEQ_CLEAR_ALL_FLAGS(qctx) ((qctx)->init_flags = 0)
# define INIT_SEQ_SET_FLAG(qctx, f) ((qctx)->init_flags |= (f))
# define INIT_SEQ_CLEAR_FLAG(qctx, f) ((qctx)->init_flags &= ~(f))
# define INIT_SEQ_IS_FLAG_SET(qctx,f) ((qctx)->init_flags & (f))
# define TLS_HDR_SET(qctx) ((qctx)->init_flags & INIT_SEQ_TLS_HDR_SET)
# define PIPELINE_SET(qctx) \
(((qctx)->init_flags & INIT_SEQ_PPL_INIT_COMPLETE) \
== INIT_SEQ_PPL_INIT_COMPLETE)
# define PIPELINE_NOT_SET(qctx) \
(((qctx)->init_flags & INIT_SEQ_PPL_INIT_COMPLETE) \
== 0)
# define PIPELINE_USED(qctx) ((qctx)->init_flags & INIT_SEQ_PPL_USED)
# define PIPELINE_INCOMPLETE_INIT(qctx) \
(!PIPELINE_SET(qctx) && !PIPELINE_NOT_SET(qctx) \
&& !PIPELINE_USED(qctx))
# define CLEAR_PIPELINE(qctx) \
do { \
(qctx)->init_flags &= ~(INIT_SEQ_PPL_INIT_COMPLETE); \
(qctx)->numpipes = 1; \
} while(0)
typedef struct prov_cipher_ctx_st PROV_CIPHER_CTX;
typedef struct prov_aes_hmac_sha_ctx_st PROV_AES_HMAC_SHA_CTX;
/* These are QAT API operation parameters */
typedef struct qat_op_params_t {
CpaCySymOpData op_data;
CpaBufferList src_sgl;
CpaBufferList dst_sgl;
CpaFlatBuffer src_fbuf[2];
CpaFlatBuffer dst_fbuf[2];
} qat_op_params;
typedef struct qat_chained_ctx_t {
/* Crypto */
unsigned char *hmac_key;
/* Pointer to context cipher data (ctx->cipher_data) that will be used by
* Small packet offload feature and the s/w fallback feature. */
void *sw_ctx_cipher_data;
/* QAT Session Params */
int inst_num;
int qat_svm;
CpaCySymSessionSetupData *session_data;
CpaCySymSessionCtx session_ctx;
int init_flags;
unsigned int aad_ctr;
char aad[QAT_MAX_PIPELINES][TLS_VIRT_HDR_SIZE];
/* QAT Operation Params are required per pipe in the pipeline.
* Hence this is a pointer to a dynamically allocated array with
* length equal to QAT_MAX_PIPELINES if pipes are used else 1.
*/
qat_op_params *qop;
unsigned int qop_len;
/* Pipeline related Data */
unsigned char **p_in;
unsigned char **p_out;
size_t *p_inlen;
unsigned int numpipes;
unsigned int npipes_last_used;
unsigned long total_op;
unsigned int fallback;
} qat_chained_ctx;
CpaStatus qat_sym_perform_op(int inst_num,
void *pCallbackTag,
const CpaCySymOpData * pOpData,
const CpaBufferList * pSrcBuffer,
CpaBufferList * pDstBuffer,
CpaBoolean * pVerifyResult);
const EVP_CIPHER *qat_create_cipher_meth(int nid, int keylen);
# ifdef QAT_OPENSSL_PROVIDER
int qat_chained_ciphers_init(PROV_CIPHER_CTX *ctx,
const unsigned char *inkey, size_t keylen,
const unsigned char *iv, size_t ivlen, int enc);
int qat_chained_ciphers_cleanup(PROV_CIPHER_CTX *ctx);
int qat_chained_ciphers_do_cipher(PROV_CIPHER_CTX *ctx, unsigned char *out,
size_t *outl, size_t outsize,
const unsigned char *in, size_t len);
int qat_chained_ciphers_ctrl(PROV_AES_HMAC_SHA_CTX *ctx, int type, int arg, void *ptr);
# else
int qat_chained_ciphers_init(EVP_CIPHER_CTX *ctx,
const unsigned char *inkey,
const unsigned char *iv, int enc);
int qat_chained_ciphers_cleanup(EVP_CIPHER_CTX *ctx);
int qat_chained_ciphers_do_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
const unsigned char *in, size_t len);
int qat_chained_ciphers_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr);
# endif
#endif /* QAT_HW */
#endif /* QAT_HW_CIPHERS_H */