mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2026-05-22 02:27:36 +03:00
Illumos Crypto Port module added to enable native encryption in zfs
A port of the Illumos Crypto Framework to a Linux kernel module (found in module/icp). This is needed to do the actual encryption work. We cannot use the Linux kernel's built in crypto api because it is only exported to GPL-licensed modules. Having the ICP also means the crypto code can run on any of the other kernels under OpenZFS. I ended up porting over most of the internals of the framework, which means that porting over other API calls (if we need them) should be fairly easy. Specifically, I have ported over the API functions related to encryption, digests, macs, and crypto templates. The ICP is able to use assembly-accelerated encryption on amd64 machines and AES-NI instructions on Intel chips that support it. There are place-holder directories for similar assembly optimizations for other architectures (although they have not been written). Signed-off-by: Tom Caputi <tcaputi@datto.com> Signed-off-by: Tony Hutter <hutter2@llnl.gov> Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov> Issue #4329
This commit is contained in:
Tom Caputi
committed by
Brian Behlendorf
Brian Behlendorf
parent
be88e733a6
commit
0b04990a5d
@@ -0,0 +1,61 @@
|
||||
/*
|
||||
* CDDL HEADER START
|
||||
*
|
||||
* The contents of this file are subject to the terms of the
|
||||
* Common Development and Distribution License (the "License").
|
||||
* You may not use this file except in compliance with the License.
|
||||
*
|
||||
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
|
||||
* or http://www.opensolaris.org/os/licensing.
|
||||
* See the License for the specific language governing permissions
|
||||
* and limitations under the License.
|
||||
*
|
||||
* When distributing Covered Code, include this CDDL HEADER in each
|
||||
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
|
||||
* If applicable, add the following below this CDDL HEADER, with the
|
||||
* fields enclosed by brackets "[]" replaced with your own identifying
|
||||
* information: Portions Copyright [yyyy] [name of copyright owner]
|
||||
*
|
||||
* CDDL HEADER END
|
||||
*/
|
||||
/*
|
||||
* Copyright 2007 Sun Microsystems, Inc. All rights reserved.
|
||||
* Use is subject to license terms.
|
||||
*/
|
||||
|
||||
#ifndef _SYS_SHA1_H
|
||||
#define _SYS_SHA1_H
|
||||
|
||||
#include <sys/types.h> /* for uint_* */
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif
|
||||
|
||||
/*
|
||||
* NOTE: n2rng (Niagara2 RNG driver) accesses the state field of
|
||||
* SHA1_CTX directly. NEVER change this structure without verifying
|
||||
* compatiblity with n2rng. The important thing is that the state
|
||||
* must be in a field declared as uint32_t state[5].
|
||||
*/
|
||||
/* SHA-1 context. */
|
||||
typedef struct {
|
||||
uint32_t state[5]; /* state (ABCDE) */
|
||||
uint32_t count[2]; /* number of bits, modulo 2^64 (msb first) */
|
||||
union {
|
||||
uint8_t buf8[64]; /* undigested input */
|
||||
uint32_t buf32[16]; /* realigned input */
|
||||
} buf_un;
|
||||
} SHA1_CTX;
|
||||
|
||||
#define SHA1_DIGEST_LENGTH 20
|
||||
|
||||
void SHA1Init(SHA1_CTX *);
|
||||
void SHA1Update(SHA1_CTX *, const void *, size_t);
|
||||
void SHA1Final(void *, SHA1_CTX *);
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif
|
||||
|
||||
#endif /* _SYS_SHA1_H */
|
||||
@@ -0,0 +1,65 @@
|
||||
/*
|
||||
* CDDL HEADER START
|
||||
*
|
||||
* The contents of this file are subject to the terms of the
|
||||
* Common Development and Distribution License, Version 1.0 only
|
||||
* (the "License"). You may not use this file except in compliance
|
||||
* with the License.
|
||||
*
|
||||
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
|
||||
* or http://www.opensolaris.org/os/licensing.
|
||||
* See the License for the specific language governing permissions
|
||||
* and limitations under the License.
|
||||
*
|
||||
* When distributing Covered Code, include this CDDL HEADER in each
|
||||
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
|
||||
* If applicable, add the following below this CDDL HEADER, with the
|
||||
* fields enclosed by brackets "[]" replaced with your own identifying
|
||||
* information: Portions Copyright [yyyy] [name of copyright owner]
|
||||
*
|
||||
* CDDL HEADER END
|
||||
*/
|
||||
/*
|
||||
* Copyright (c) 1998, by Sun Microsystems, Inc.
|
||||
* All rights reserved.
|
||||
*/
|
||||
|
||||
#ifndef _SYS_SHA1_CONSTS_H
|
||||
#define _SYS_SHA1_CONSTS_H
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif
|
||||
|
||||
/*
|
||||
* as explained in sha1.c, loading 32-bit constants on a sparc is expensive
|
||||
* since it involves both a `sethi' and an `or'. thus, we instead use `ld'
|
||||
* to load the constants from an array called `sha1_consts'. however, on
|
||||
* intel (and perhaps other processors), it is cheaper to load the constant
|
||||
* directly. thus, the c code in SHA1Transform() uses the macro SHA1_CONST()
|
||||
* which either expands to a constant or an array reference, depending on
|
||||
* the architecture the code is being compiled for.
|
||||
*/
|
||||
|
||||
#include <sys/types.h> /* uint32_t */
|
||||
|
||||
extern const uint32_t sha1_consts[];
|
||||
|
||||
#if defined(__sparc)
|
||||
#define SHA1_CONST(x) (sha1_consts[x])
|
||||
#else
|
||||
#define SHA1_CONST(x) (SHA1_CONST_ ## x)
|
||||
#endif
|
||||
|
||||
/* constants, as provided in FIPS 180-1 */
|
||||
|
||||
#define SHA1_CONST_0 0x5a827999U
|
||||
#define SHA1_CONST_1 0x6ed9eba1U
|
||||
#define SHA1_CONST_2 0x8f1bbcdcU
|
||||
#define SHA1_CONST_3 0xca62c1d6U
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif
|
||||
|
||||
#endif /* _SYS_SHA1_CONSTS_H */
|
||||
@@ -0,0 +1,73 @@
|
||||
/*
|
||||
* CDDL HEADER START
|
||||
*
|
||||
* The contents of this file are subject to the terms of the
|
||||
* Common Development and Distribution License (the "License").
|
||||
* You may not use this file except in compliance with the License.
|
||||
*
|
||||
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
|
||||
* or http://www.opensolaris.org/os/licensing.
|
||||
* See the License for the specific language governing permissions
|
||||
* and limitations under the License.
|
||||
*
|
||||
* When distributing Covered Code, include this CDDL HEADER in each
|
||||
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
|
||||
* If applicable, add the following below this CDDL HEADER, with the
|
||||
* fields enclosed by brackets "[]" replaced with your own identifying
|
||||
* information: Portions Copyright [yyyy] [name of copyright owner]
|
||||
*
|
||||
* CDDL HEADER END
|
||||
*/
|
||||
/*
|
||||
* Copyright 2009 Sun Microsystems, Inc. All rights reserved.
|
||||
* Use is subject to license terms.
|
||||
*/
|
||||
|
||||
#ifndef _SHA1_IMPL_H
|
||||
#define _SHA1_IMPL_H
|
||||
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
#endif
|
||||
|
||||
#define SHA1_HASH_SIZE 20 /* SHA_1 digest length in bytes */
|
||||
#define SHA1_DIGEST_LENGTH 20 /* SHA1 digest length in bytes */
|
||||
#define SHA1_HMAC_BLOCK_SIZE 64 /* SHA1-HMAC block size */
|
||||
#define SHA1_HMAC_MIN_KEY_LEN 1 /* SHA1-HMAC min key length in bytes */
|
||||
#define SHA1_HMAC_MAX_KEY_LEN INT_MAX /* SHA1-HMAC max key length in bytes */
|
||||
#define SHA1_HMAC_INTS_PER_BLOCK (SHA1_HMAC_BLOCK_SIZE/sizeof (uint32_t))
|
||||
|
||||
/*
|
||||
* CSPI information (entry points, provider info, etc.)
|
||||
*/
|
||||
typedef enum sha1_mech_type {
|
||||
SHA1_MECH_INFO_TYPE, /* SUN_CKM_SHA1 */
|
||||
SHA1_HMAC_MECH_INFO_TYPE, /* SUN_CKM_SHA1_HMAC */
|
||||
SHA1_HMAC_GEN_MECH_INFO_TYPE /* SUN_CKM_SHA1_HMAC_GENERAL */
|
||||
} sha1_mech_type_t;
|
||||
|
||||
/*
|
||||
* Context for SHA1 mechanism.
|
||||
*/
|
||||
typedef struct sha1_ctx {
|
||||
sha1_mech_type_t sc_mech_type; /* type of context */
|
||||
SHA1_CTX sc_sha1_ctx; /* SHA1 context */
|
||||
} sha1_ctx_t;
|
||||
|
||||
/*
|
||||
* Context for SHA1-HMAC and SHA1-HMAC-GENERAL mechanisms.
|
||||
*/
|
||||
typedef struct sha1_hmac_ctx {
|
||||
sha1_mech_type_t hc_mech_type; /* type of context */
|
||||
uint32_t hc_digest_len; /* digest len in bytes */
|
||||
SHA1_CTX hc_icontext; /* inner SHA1 context */
|
||||
SHA1_CTX hc_ocontext; /* outer SHA1 context */
|
||||
} sha1_hmac_ctx_t;
|
||||
|
||||
|
||||
#ifdef __cplusplus
|
||||
}
|
||||
#endif
|
||||
|
||||
#endif /* _SHA1_IMPL_H */
|
||||
Reference in New Issue
Block a user