1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
/* SPDX-License-Identifier: Apache-2.0
* Copyright (c) 2024 Cisco Systems, Inc.
*/
#include <vlib/vlib.h>
#include <vnet/plugin/plugin.h>
#include <vnet/crypto/crypto.h>
#include <vnet/crypto/engine.h>
#include <native/crypto_native.h>
crypto_native_main_t crypto_native_main;
vnet_crypto_engine_op_handlers_t op_handlers[24], *ophp = op_handlers;
static void
crypto_native_key_handler (vnet_crypto_key_op_t kop,
vnet_crypto_key_index_t idx)
{
vnet_crypto_key_t *key = vnet_crypto_get_key (idx);
crypto_native_main_t *cm = &crypto_native_main;
/** TODO: add linked alg support **/
if (key->is_link)
return;
if (cm->key_fn[key->alg] == 0)
return;
if (kop == VNET_CRYPTO_KEY_OP_DEL)
{
if (idx >= vec_len (cm->key_data))
return;
if (cm->key_data[idx] == 0)
return;
clib_mem_free_s (cm->key_data[idx]);
cm->key_data[idx] = 0;
return;
}
vec_validate_aligned (cm->key_data, idx, CLIB_CACHE_LINE_BYTES);
if (kop == VNET_CRYPTO_KEY_OP_MODIFY && cm->key_data[idx])
{
clib_mem_free_s (cm->key_data[idx]);
}
cm->key_data[idx] = cm->key_fn[key->alg] (key);
}
static char *
crypto_native_init (vnet_crypto_engine_registration_t *r)
{
crypto_native_main_t *cm = &crypto_native_main;
if (cm->op_handlers == 0)
return 0;
crypto_native_op_handler_t *oh = cm->op_handlers;
crypto_native_key_handler_t *kh = cm->key_handlers;
crypto_native_op_handler_t **best_by_op_id = 0;
crypto_native_key_handler_t **best_by_alg_id = 0;
while (oh)
{
vec_validate (best_by_op_id, oh->op_id);
if (best_by_op_id[oh->op_id] == 0 ||
best_by_op_id[oh->op_id]->priority < oh->priority)
best_by_op_id[oh->op_id] = oh;
oh = oh->next;
}
while (kh)
{
vec_validate (best_by_alg_id, kh->alg_id);
if (best_by_alg_id[kh->alg_id] == 0 ||
best_by_alg_id[kh->alg_id]->priority < kh->priority)
best_by_alg_id[kh->alg_id] = kh;
kh = kh->next;
}
vec_foreach_pointer (oh, best_by_op_id)
if (oh)
{
*ophp = (vnet_crypto_engine_op_handlers_t){ .opt = oh->op_id,
.fn = oh->fn,
.cfn = oh->cfn };
ophp++;
ASSERT ((ophp - op_handlers) < ARRAY_LEN (op_handlers));
}
vec_foreach_pointer (kh, best_by_alg_id)
if (kh)
cm->key_fn[kh->alg_id] = kh->key_fn;
vec_free (best_by_op_id);
vec_free (best_by_alg_id);
return 0;
}
VNET_CRYPTO_ENGINE_REGISTRATION () = {
.name = "native",
.desc = "Native ISA Optimized Crypto",
.prio = 100,
.init_fn = crypto_native_init,
.key_handler = crypto_native_key_handler,
.op_handlers = op_handlers,
};
|
