1 /* $NetBSD: chacha_impl.c,v 1.3 2020/07/27 20:49:10 riastradh Exp $ */ 2 3 /*- 4 * Copyright (c) 2020 The NetBSD Foundation, Inc. 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 16 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 17 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 18 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 19 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 20 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 21 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 22 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 23 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 24 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 25 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 26 * POSSIBILITY OF SUCH DAMAGE. 27 */ 28 29 #include <sys/types.h> 30 #include <sys/cdefs.h> 31 #include <sys/errno.h> 32 #include <sys/module.h> 33 #include <sys/once.h> 34 #include <sys/sysctl.h> 35 36 #include <lib/libkern/libkern.h> 37 38 #include "chacha.h" 39 #include "chacha_ref.h" 40 41 static const struct chacha_impl *chacha_md_impl __read_mostly; 42 static const struct chacha_impl *chacha_impl __read_mostly = &chacha_ref_impl; 43 44 static int 45 sysctl_kern_crypto_chacha_selected(SYSCTLFN_ARGS) 46 { 47 struct sysctlnode node; 48 49 node = *rnode; 50 node.sysctl_data = __UNCONST(chacha_impl->ci_name); 51 node.sysctl_size = strlen(chacha_impl->ci_name) + 1; 52 return sysctl_lookup(SYSCTLFN_CALL(&node)); 53 } 54 55 SYSCTL_SETUP(sysctl_kern_crypto_chacha_setup, "sysctl kern.crypto.chacha setup") 56 { 57 const struct sysctlnode *cnode; 58 const struct sysctlnode *chacha_node; 59 60 sysctl_createv(clog, 0, NULL, &cnode, 0, CTLTYPE_NODE, "crypto", 61 SYSCTL_DESCR("Kernel cryptography"), 62 NULL, 0, NULL, 0, 63 CTL_KERN, CTL_CREATE, CTL_EOL); 64 sysctl_createv(clog, 0, &cnode, &chacha_node, 0, CTLTYPE_NODE, "chacha", 65 SYSCTL_DESCR("ChaCha"), 66 NULL, 0, NULL, 0, 67 CTL_CREATE, CTL_EOL); 68 sysctl_createv(clog, 0, &chacha_node, NULL, 69 CTLFLAG_PERMANENT|CTLFLAG_READONLY, CTLTYPE_STRING, "selected", 70 SYSCTL_DESCR("Selected ChaCha implementation"), 71 sysctl_kern_crypto_chacha_selected, 0, NULL, 0, 72 CTL_CREATE, CTL_EOL); 73 } 74 75 static int 76 chacha_select(void) 77 { 78 79 if (chacha_md_impl) { 80 if (chacha_selftest(chacha_md_impl)) 81 aprint_error("chacha: self-test failed: %s\n", 82 chacha_md_impl->ci_name); 83 else 84 chacha_impl = chacha_md_impl; 85 } 86 87 aprint_verbose("chacha: %s\n", chacha_impl->ci_name); 88 return 0; 89 } 90 91 MODULE(MODULE_CLASS_MISC, chacha, NULL); 92 93 static int 94 chacha_modcmd(modcmd_t cmd, void *opaque) 95 { 96 97 switch (cmd) { 98 case MODULE_CMD_INIT: 99 return chacha_select(); 100 case MODULE_CMD_FINI: 101 return 0; 102 default: 103 return ENOTTY; 104 } 105 } 106 107 void 108 chacha_md_init(const struct chacha_impl *impl) 109 { 110 111 KASSERT(cold); 112 KASSERTMSG(chacha_md_impl == NULL, 113 "ChaCha implementation `%s' already offered, can't offer `%s'", 114 chacha_md_impl->ci_name, impl->ci_name); 115 116 chacha_md_impl = impl; 117 } 118 119 void 120 chacha_core(uint8_t out[restrict static CHACHA_CORE_OUTBYTES], 121 const uint8_t in[static CHACHA_CORE_INBYTES], 122 const uint8_t k[static CHACHA_CORE_KEYBYTES], 123 const uint8_t c[static CHACHA_CORE_CONSTBYTES], 124 unsigned nr) 125 { 126 127 (*chacha_impl->ci_chacha_core)(out, in, k, c, nr); 128 } 129 130 void 131 hchacha(uint8_t out[restrict static HCHACHA_OUTBYTES], 132 const uint8_t in[static HCHACHA_INBYTES], 133 const uint8_t k[static HCHACHA_KEYBYTES], 134 const uint8_t c[static HCHACHA_CONSTBYTES], 135 unsigned nr) 136 { 137 138 (*chacha_impl->ci_hchacha)(out, in, k, c, nr); 139 } 140 141 void 142 chacha_stream(uint8_t *restrict s, size_t nbytes, uint32_t blkno, 143 const uint8_t nonce[static CHACHA_STREAM_NONCEBYTES], 144 const uint8_t key[static CHACHA_STREAM_KEYBYTES], 145 unsigned nr) 146 { 147 148 (*chacha_impl->ci_chacha_stream)(s, nbytes, blkno, nonce, key, nr); 149 } 150 151 void 152 chacha_stream_xor(uint8_t *c, const uint8_t *p, size_t nbytes, uint32_t blkno, 153 const uint8_t nonce[static CHACHA_STREAM_NONCEBYTES], 154 const uint8_t key[static CHACHA_STREAM_KEYBYTES], 155 unsigned nr) 156 { 157 158 (*chacha_impl->ci_chacha_stream_xor)(c, p, nbytes, blkno, nonce, key, 159 nr); 160 } 161 162 void 163 xchacha_stream(uint8_t *restrict s, size_t nbytes, uint32_t blkno, 164 const uint8_t nonce[static XCHACHA_STREAM_NONCEBYTES], 165 const uint8_t key[static XCHACHA_STREAM_KEYBYTES], 166 unsigned nr) 167 { 168 169 (*chacha_impl->ci_xchacha_stream)(s, nbytes, blkno, nonce, key, nr); 170 } 171 172 void 173 xchacha_stream_xor(uint8_t *c, const uint8_t *p, size_t nbytes, uint32_t blkno, 174 const uint8_t nonce[static XCHACHA_STREAM_NONCEBYTES], 175 const uint8_t key[static XCHACHA_STREAM_KEYBYTES], 176 unsigned nr) 177 { 178 179 (*chacha_impl->ci_xchacha_stream_xor)(c, p, nbytes, blkno, nonce, key, 180 nr); 181 } 182