From 91f17dc7c4e79343b8fba924e7cea6380a0e6653 Mon Sep 17 00:00:00 2001 From: Damjan Marion Date: Mon, 18 Mar 2019 18:59:25 +0100 Subject: crypto: introduce crypto infra Change-Id: Ibf320b3e7b054b686f3af9a55afd5d5bda9b1048 Signed-off-by: Damjan Marion Signed-off-by: Filip Tehlar --- src/vnet/crypto/crypto.c | 127 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 127 insertions(+) create mode 100644 src/vnet/crypto/crypto.c (limited to 'src/vnet/crypto/crypto.c') diff --git a/src/vnet/crypto/crypto.c b/src/vnet/crypto/crypto.c new file mode 100644 index 00000000000..a6f45be053f --- /dev/null +++ b/src/vnet/crypto/crypto.c @@ -0,0 +1,127 @@ +/* + * Copyright (c) 2018 Cisco and/or its affiliates. + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at: + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +#include +#include +#include + +vnet_crypto_main_t crypto_main; + +u32 +vnet_crypto_process_ops (vlib_main_t * vm, vnet_crypto_op_t ops[], u32 n_ops) +{ + vnet_crypto_main_t *cm = &crypto_main; + u32 rv = 0, i; + + for (i = 0; i < n_ops; i++) + { + vnet_crypto_op_type_t opt = ops[i].op; + vnet_crypto_op_t *opp = &ops[i]; + + if (cm->ops_handlers[opt]) + rv += (cm->ops_handlers[opt]) (vm, &opp, 1); + else + ops[i].status = VNET_CRYPTO_OP_STATUS_FAIL_NO_HANDLER; + } + + return rv; +} + +u32 +vnet_crypto_register_engine (vlib_main_t * vm, char *name, int prio, + char *desc) +{ + vnet_crypto_main_t *cm = &crypto_main; + vnet_crypto_engine_t *p; + + vec_add2 (cm->engines, p, 1); + p->name = name; + p->desc = desc; + p->priority = prio; + + return p - cm->engines; +} + +vlib_error_t * +vnet_crypto_register_ops_handler (vlib_main_t * vm, u32 engine_index, + vnet_crypto_op_type_t opt, + vnet_crypto_ops_handler_t * fn) +{ + vnet_crypto_main_t *cm = &crypto_main; + vnet_crypto_engine_t *ae, *e = vec_elt_at_index (cm->engines, engine_index); + vnet_crypto_op_type_data_t *otd = cm->opt_data + opt; + vec_validate_aligned (cm->ops_handlers, VNET_CRYPTO_N_OP_TYPES - 1, + CLIB_CACHE_LINE_BYTES); + e->ops_handlers[opt] = fn; + + if (otd->active_engine_index == ~0) + { + otd->active_engine_index = engine_index; + cm->ops_handlers[opt] = fn; + return 0; + } + ae = vec_elt_at_index (cm->engines, otd->active_engine_index); + if (ae->priority < e->priority) + { + otd->active_engine_index = engine_index; + cm->ops_handlers[opt] = fn; + } + + return 0; +} + +clib_error_t * +vnet_crypto_init (vlib_main_t * vm) +{ + vnet_crypto_main_t *cm = &crypto_main; + vlib_thread_main_t *tm = vlib_get_thread_main (); + const char *enc = "encrypt"; + const char *dec = "decrypt"; + const char *hmac = "hmac"; + + vec_validate_aligned (cm->threads, tm->n_vlib_mains, CLIB_CACHE_LINE_BYTES); + vec_validate (cm->algs, VNET_CRYPTO_N_ALGS); + +#define _(n, s) \ + cm->algs[VNET_CRYPTO_ALG_##n].name = s; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_ENC].alg = VNET_CRYPTO_ALG_##n; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_DEC].alg = VNET_CRYPTO_ALG_##n; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_ENC].desc = enc; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_DEC].desc = dec; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_ENC].active_engine_index = ~0; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_DEC].active_engine_index = ~0; + foreach_crypto_alg; +#undef _ + +#define _(n, s) \ + cm->algs[VNET_CRYPTO_ALG_##n].name = s; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_HMAC].alg = VNET_CRYPTO_ALG_##n; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_HMAC].desc = hmac; \ + cm->opt_data[VNET_CRYPTO_OP_##n##_HMAC].active_engine_index = ~0; + foreach_hmac_alg; +#undef _ + + return 0; +} + +VLIB_INIT_FUNCTION (vnet_crypto_init); + +/* + * fd.io coding-style-patch-verification: ON + * + * Local Variables: + * eval: (c-set-style "gnu") + * End: + */ -- cgit 1.2.3-korg