cryptodev.h

   1 /* This is a source compatible implementation with the original API of
   2  * cryptodev by Angelos D. Keromytis, found at openbsd cryptodev.h.
   3  * Placed under public domain */
   4
   5 #ifndef L_CRYPTODEV_H
   6 #define L_CRYPTODEV_H
   7
   8 #include <linux/types.h>
   9 #ifndef __KERNEL__
  10 #define __user
  11 #endif
  12
  13 /* API extensions for linux */
  14 #define CRYPTO_HMAC_MAX_KEY_LEN         512
  15 #define CRYPTO_CIPHER_MAX_KEY_LEN       64
  16
  17 /* All the supported algorithms
  18  */
  19 enum cryptodev_crypto_op_t {
  20         CRYPTO_DES_CBC = 1,
  21         CRYPTO_3DES_CBC = 2,
  22         CRYPTO_BLF_CBC = 3,
  23         CRYPTO_CAST_CBC = 4,
  24         CRYPTO_SKIPJACK_CBC = 5,
  25         CRYPTO_MD5_HMAC = 6,
  26         CRYPTO_SHA1_HMAC = 7,
  27         CRYPTO_RIPEMD160_HMAC = 8,
  28         CRYPTO_MD5_KPDK = 9,
  29         CRYPTO_SHA1_KPDK = 10,
  30         CRYPTO_RIJNDAEL128_CBC = 11,
  31         CRYPTO_AES_CBC = CRYPTO_RIJNDAEL128_CBC,
  32         CRYPTO_ARC4 = 12,
  33         CRYPTO_MD5 = 13,
  34         CRYPTO_SHA1 = 14,
  35         CRYPTO_DEFLATE_COMP = 15,
  36         CRYPTO_NULL = 16,
  37         CRYPTO_LZS_COMP = 17,
  38         CRYPTO_SHA2_256_HMAC = 18,
  39         CRYPTO_SHA2_384_HMAC = 19,
  40         CRYPTO_SHA2_512_HMAC = 20,
  41         CRYPTO_AES_CTR = 21,
  42         CRYPTO_AES_XTS = 22,
  43         CRYPTO_AES_ECB = 23,
  44
  45         CRYPTO_CAMELLIA_CBC = 101,
  46         CRYPTO_RIPEMD160,
  47         CRYPTO_SHA2_256,
  48         CRYPTO_SHA2_384,
  49         CRYPTO_SHA2_512,
  50         CRYPTO_ALGORITHM_ALL, /* Keep updated - see below */
  51 };
  52
  53 #define CRYPTO_ALGORITHM_MAX    (CRYPTO_ALGORITHM_ALL - 1)
  54
  55 /* Values for ciphers */
  56 #define DES_BLOCK_LEN           8
  57 #define DES3_BLOCK_LEN          8
  58 #define RIJNDAEL128_BLOCK_LEN   16
  59 #define AES_BLOCK_LEN           RIJNDAEL128_BLOCK_LEN
  60 #define CAMELLIA_BLOCK_LEN
  61 #define BLOWFISH_BLOCK_LEN      8
  62 #define SKIPJACK_BLOCK_LEN      8
  63 #define CAST128_BLOCK_LEN       8
  64
  65 /* the maximum of the above */
  66 #define EALG_MAX_BLOCK_LEN      16
  67
  68 /* Values for hashes/MAC */
  69 #define AALG_MAX_RESULT_LEN             64
  70
  71 /* input of CIOCGSESSION */
  72 struct session_op {
  73         /* Specify either cipher or mac
  74          */
  75         __u32   cipher;         /* cryptodev_crypto_op_t */
  76         __u32   mac;            /* cryptodev_crypto_op_t */
  77
  78         __u32   keylen;
  79         __u8    __user *key;
  80         __u32   mackeylen;
  81         __u8    __user *mackey;
  82
  83         __u32   ses;            /* session identifier */
  84
  85         __u16   alignmask;      /* alignment constraints */
  86 };
  87
  88 #define COP_ENCRYPT     0
  89 #define COP_DECRYPT     1
  90
  91 /* input of CIOCCRYPT */
  92  struct crypt_op {
  93         __u32   ses;            /* session identifier */
  94         __u16   op;             /* COP_ENCRYPT or COP_DECRYPT */
  95         __u16   flags;          /* no usage so far, use 0 */
  96         __u32   len;            /* length of source data */
  97         __u8    __user *src;    /* source data */
  98         __u8    __user *dst;    /* pointer to output data */
  99         /* pointer to output data for hash/MAC operations */
 100         __u8    __user *mac;
 101         /* initialization vector for encryption operations */
 102         __u8    __user *iv;
 103 };
 104
 105 /* struct crypt_op flags */
 106
 107 #define COP_FLAG_NONE           (0 << 0) /* totally no flag */
 108 #define COP_FLAG_UPDATE         (1 << 0) /* multi-update hash mode */
 109 #define COP_FLAG_FINAL          (1 << 1) /* multi-update final hash mode */
 110
 111 /* Stuff for bignum arithmetic and public key
 112  * cryptography - not supported yet by linux
 113  * cryptodev.
 114  */
 115
 116 #define CRYPTO_ALG_FLAG_SUPPORTED       1
 117 #define CRYPTO_ALG_FLAG_RNG_ENABLE      2
 118 #define CRYPTO_ALG_FLAG_DSA_SHA         4
 119
 120 struct crparam {
 121         __u8    *crp_p;
 122         __u32   crp_nbits;
 123 };
 124
 125 #define CRK_MAXPARAM    8
 126
 127 /* input of CIOCKEY */
 128 struct crypt_kop {
 129         __u32   crk_op;         /* cryptodev_crk_ot_t */
 130         __u32   crk_status;
 131         __u16   crk_iparams;
 132         __u16   crk_oparams;
 133         __u32   crk_pad1;
 134         struct crparam  crk_param[CRK_MAXPARAM];
 135 };
 136
 137 enum cryptodev_crk_op_t {
 138         CRK_MOD_EXP = 0,
 139         CRK_MOD_EXP_CRT = 1,
 140         CRK_DSA_SIGN = 2,
 141         CRK_DSA_VERIFY = 3,
 142         CRK_DH_COMPUTE_KEY = 4,
 143         CRK_ALGORITHM_ALL
 144 };
 145
 146 #define CRK_ALGORITHM_MAX       (CRK_ALGORITHM_ALL-1)
 147
 148 /* features to be queried with CIOCASYMFEAT ioctl
 149  */
 150 #define CRF_MOD_EXP             (1 << CRK_MOD_EXP)
 151 #define CRF_MOD_EXP_CRT         (1 << CRK_MOD_EXP_CRT)
 152 #define CRF_DSA_SIGN            (1 << CRK_DSA_SIGN)
 153 #define CRF_DSA_VERIFY          (1 << CRK_DSA_VERIFY)
 154 #define CRF_DH_COMPUTE_KEY      (1 << CRK_DH_COMPUTE_KEY)
 155
 156
 157 /* ioctl's. Compatible with old linux cryptodev.h
 158  */
 159 #define CRIOGET         _IOWR('c', 101, __u32)
 160 #define CIOCGSESSION    _IOWR('c', 102, struct session_op)
 161 #define CIOCFSESSION    _IOW('c', 103, __u32)
 162 #define CIOCCRYPT       _IOWR('c', 104, struct crypt_op)
 163 #define CIOCKEY         _IOWR('c', 105, struct crypt_kop)
 164 #define CIOCASYMFEAT    _IOR('c', 106, __u32)
 165
 166 /* to indicate that CRIOGET is not required in linux
 167  */
 168 #define CRIOGET_NOT_NEEDED 1
 169
 170 /* additional ioctls for asynchronous  operation */
 171 #define CIOCASYNCCRYPT    _IOW('c', 107, struct crypt_op)
 172 #define CIOCASYNCFETCH    _IOR('c', 108, struct crypt_op)
 173
 174 #endif /* L_CRYPTODEV_H */