2 * Software multibuffer async crypto daemon.
4 * Copyright (c) 2014 Tim Chen <tim.c.chen@linux.intel.com>
6 * Adapted from crypto daemon.
8 * This program is free software; you can redistribute it and/or modify it
9 * under the terms of the GNU General Public License as published by the Free
10 * Software Foundation; either version 2 of the License, or (at your option)
15 #include <crypto/algapi.h>
16 #include <crypto/internal/hash.h>
17 #include <crypto/internal/aead.h>
18 #include <crypto/mcryptd.h>
19 #include <crypto/crypto_wq.h>
20 #include <linux/err.h>
21 #include <linux/init.h>
22 #include <linux/kernel.h>
23 #include <linux/list.h>
24 #include <linux/module.h>
25 #include <linux/scatterlist.h>
26 #include <linux/sched.h>
27 #include <linux/slab.h>
28 #include <linux/hardirq.h>
30 #define MCRYPTD_MAX_CPU_QLEN 100
31 #define MCRYPTD_BATCH 9
33 static void *mcryptd_alloc_instance(struct crypto_alg *alg, unsigned int head,
36 struct mcryptd_flush_list {
37 struct list_head list;
41 static struct mcryptd_flush_list __percpu *mcryptd_flist;
43 struct hashd_instance_ctx {
44 struct crypto_shash_spawn spawn;
45 struct mcryptd_queue *queue;
48 static void mcryptd_queue_worker(struct work_struct *work);
50 void mcryptd_arm_flusher(struct mcryptd_alg_cstate *cstate, unsigned long delay)
52 struct mcryptd_flush_list *flist;
54 if (!cstate->flusher_engaged) {
55 /* put the flusher on the flush list */
56 flist = per_cpu_ptr(mcryptd_flist, smp_processor_id());
57 mutex_lock(&flist->lock);
58 list_add_tail(&cstate->flush_list, &flist->list);
59 cstate->flusher_engaged = true;
60 cstate->next_flush = jiffies + delay;
61 queue_delayed_work_on(smp_processor_id(), kcrypto_wq,
62 &cstate->flush, delay);
63 mutex_unlock(&flist->lock);
66 EXPORT_SYMBOL(mcryptd_arm_flusher);
68 static int mcryptd_init_queue(struct mcryptd_queue *queue,
69 unsigned int max_cpu_qlen)
72 struct mcryptd_cpu_queue *cpu_queue;
74 queue->cpu_queue = alloc_percpu(struct mcryptd_cpu_queue);
75 pr_debug("mqueue:%p mcryptd_cpu_queue %p\n", queue, queue->cpu_queue);
76 if (!queue->cpu_queue)
78 for_each_possible_cpu(cpu) {
79 cpu_queue = per_cpu_ptr(queue->cpu_queue, cpu);
80 pr_debug("cpu_queue #%d %p\n", cpu, queue->cpu_queue);
81 crypto_init_queue(&cpu_queue->queue, max_cpu_qlen);
82 INIT_WORK(&cpu_queue->work, mcryptd_queue_worker);
87 static void mcryptd_fini_queue(struct mcryptd_queue *queue)
90 struct mcryptd_cpu_queue *cpu_queue;
92 for_each_possible_cpu(cpu) {
93 cpu_queue = per_cpu_ptr(queue->cpu_queue, cpu);
94 BUG_ON(cpu_queue->queue.qlen);
96 free_percpu(queue->cpu_queue);
99 static int mcryptd_enqueue_request(struct mcryptd_queue *queue,
100 struct crypto_async_request *request,
101 struct mcryptd_hash_request_ctx *rctx)
104 struct mcryptd_cpu_queue *cpu_queue;
107 cpu_queue = this_cpu_ptr(queue->cpu_queue);
110 err = crypto_enqueue_request(&cpu_queue->queue, request);
111 pr_debug("enqueue request: cpu %d cpu_queue %p request %p\n",
112 cpu, cpu_queue, request);
113 queue_work_on(cpu, kcrypto_wq, &cpu_queue->work);
120 * Try to opportunisticlly flush the partially completed jobs if
121 * crypto daemon is the only task running.
123 static void mcryptd_opportunistic_flush(void)
125 struct mcryptd_flush_list *flist;
126 struct mcryptd_alg_cstate *cstate;
128 flist = per_cpu_ptr(mcryptd_flist, smp_processor_id());
129 while (single_task_running()) {
130 mutex_lock(&flist->lock);
131 if (list_empty(&flist->list)) {
132 mutex_unlock(&flist->lock);
135 cstate = list_entry(flist->list.next,
136 struct mcryptd_alg_cstate, flush_list);
137 if (!cstate->flusher_engaged) {
138 mutex_unlock(&flist->lock);
141 list_del(&cstate->flush_list);
142 cstate->flusher_engaged = false;
143 mutex_unlock(&flist->lock);
144 cstate->alg_state->flusher(cstate);
149 * Called in workqueue context, do one real cryption work (via
150 * req->complete) and reschedule itself if there are more work to
153 static void mcryptd_queue_worker(struct work_struct *work)
155 struct mcryptd_cpu_queue *cpu_queue;
156 struct crypto_async_request *req, *backlog;
160 * Need to loop through more than once for multi-buffer to
164 cpu_queue = container_of(work, struct mcryptd_cpu_queue, work);
166 while (i < MCRYPTD_BATCH || single_task_running()) {
168 * preempt_disable/enable is used to prevent
169 * being preempted by mcryptd_enqueue_request()
173 backlog = crypto_get_backlog(&cpu_queue->queue);
174 req = crypto_dequeue_request(&cpu_queue->queue);
179 mcryptd_opportunistic_flush();
184 backlog->complete(backlog, -EINPROGRESS);
185 req->complete(req, 0);
186 if (!cpu_queue->queue.qlen)
190 if (cpu_queue->queue.qlen)
191 queue_work(kcrypto_wq, &cpu_queue->work);
194 void mcryptd_flusher(struct work_struct *__work)
196 struct mcryptd_alg_cstate *alg_cpu_state;
197 struct mcryptd_alg_state *alg_state;
198 struct mcryptd_flush_list *flist;
201 cpu = smp_processor_id();
202 alg_cpu_state = container_of(to_delayed_work(__work),
203 struct mcryptd_alg_cstate, flush);
204 alg_state = alg_cpu_state->alg_state;
205 if (alg_cpu_state->cpu != cpu)
206 pr_debug("mcryptd error: work on cpu %d, should be cpu %d\n",
207 cpu, alg_cpu_state->cpu);
209 if (alg_cpu_state->flusher_engaged) {
210 flist = per_cpu_ptr(mcryptd_flist, cpu);
211 mutex_lock(&flist->lock);
212 list_del(&alg_cpu_state->flush_list);
213 alg_cpu_state->flusher_engaged = false;
214 mutex_unlock(&flist->lock);
215 alg_state->flusher(alg_cpu_state);
218 EXPORT_SYMBOL_GPL(mcryptd_flusher);
220 static inline struct mcryptd_queue *mcryptd_get_queue(struct crypto_tfm *tfm)
222 struct crypto_instance *inst = crypto_tfm_alg_instance(tfm);
223 struct mcryptd_instance_ctx *ictx = crypto_instance_ctx(inst);
228 static void *mcryptd_alloc_instance(struct crypto_alg *alg, unsigned int head,
232 struct crypto_instance *inst;
235 p = kzalloc(head + sizeof(*inst) + tail, GFP_KERNEL);
237 return ERR_PTR(-ENOMEM);
239 inst = (void *)(p + head);
242 if (snprintf(inst->alg.cra_driver_name, CRYPTO_MAX_ALG_NAME,
243 "mcryptd(%s)", alg->cra_driver_name) >= CRYPTO_MAX_ALG_NAME)
246 memcpy(inst->alg.cra_name, alg->cra_name, CRYPTO_MAX_ALG_NAME);
248 inst->alg.cra_priority = alg->cra_priority + 50;
249 inst->alg.cra_blocksize = alg->cra_blocksize;
250 inst->alg.cra_alignmask = alg->cra_alignmask;
261 static int mcryptd_hash_init_tfm(struct crypto_tfm *tfm)
263 struct crypto_instance *inst = crypto_tfm_alg_instance(tfm);
264 struct hashd_instance_ctx *ictx = crypto_instance_ctx(inst);
265 struct crypto_shash_spawn *spawn = &ictx->spawn;
266 struct mcryptd_hash_ctx *ctx = crypto_tfm_ctx(tfm);
267 struct crypto_shash *hash;
269 hash = crypto_spawn_shash(spawn);
271 return PTR_ERR(hash);
274 crypto_ahash_set_reqsize(__crypto_ahash_cast(tfm),
275 sizeof(struct mcryptd_hash_request_ctx) +
276 crypto_shash_descsize(hash));
280 static void mcryptd_hash_exit_tfm(struct crypto_tfm *tfm)
282 struct mcryptd_hash_ctx *ctx = crypto_tfm_ctx(tfm);
284 crypto_free_shash(ctx->child);
287 static int mcryptd_hash_setkey(struct crypto_ahash *parent,
288 const u8 *key, unsigned int keylen)
290 struct mcryptd_hash_ctx *ctx = crypto_ahash_ctx(parent);
291 struct crypto_shash *child = ctx->child;
294 crypto_shash_clear_flags(child, CRYPTO_TFM_REQ_MASK);
295 crypto_shash_set_flags(child, crypto_ahash_get_flags(parent) &
296 CRYPTO_TFM_REQ_MASK);
297 err = crypto_shash_setkey(child, key, keylen);
298 crypto_ahash_set_flags(parent, crypto_shash_get_flags(child) &
299 CRYPTO_TFM_RES_MASK);
303 static int mcryptd_hash_enqueue(struct ahash_request *req,
304 crypto_completion_t complete)
308 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
309 struct crypto_ahash *tfm = crypto_ahash_reqtfm(req);
310 struct mcryptd_queue *queue =
311 mcryptd_get_queue(crypto_ahash_tfm(tfm));
313 rctx->complete = req->base.complete;
314 req->base.complete = complete;
316 ret = mcryptd_enqueue_request(queue, &req->base, rctx);
321 static void mcryptd_hash_init(struct crypto_async_request *req_async, int err)
323 struct mcryptd_hash_ctx *ctx = crypto_tfm_ctx(req_async->tfm);
324 struct crypto_shash *child = ctx->child;
325 struct ahash_request *req = ahash_request_cast(req_async);
326 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
327 struct shash_desc *desc = &rctx->desc;
329 if (unlikely(err == -EINPROGRESS))
333 desc->flags = CRYPTO_TFM_REQ_MAY_SLEEP;
335 err = crypto_shash_init(desc);
337 req->base.complete = rctx->complete;
341 rctx->complete(&req->base, err);
345 static int mcryptd_hash_init_enqueue(struct ahash_request *req)
347 return mcryptd_hash_enqueue(req, mcryptd_hash_init);
350 static void mcryptd_hash_update(struct crypto_async_request *req_async, int err)
352 struct ahash_request *req = ahash_request_cast(req_async);
353 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
355 if (unlikely(err == -EINPROGRESS))
358 err = shash_ahash_mcryptd_update(req, &rctx->desc);
360 req->base.complete = rctx->complete;
367 rctx->complete(&req->base, err);
371 static int mcryptd_hash_update_enqueue(struct ahash_request *req)
373 return mcryptd_hash_enqueue(req, mcryptd_hash_update);
376 static void mcryptd_hash_final(struct crypto_async_request *req_async, int err)
378 struct ahash_request *req = ahash_request_cast(req_async);
379 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
381 if (unlikely(err == -EINPROGRESS))
384 err = shash_ahash_mcryptd_final(req, &rctx->desc);
386 req->base.complete = rctx->complete;
393 rctx->complete(&req->base, err);
397 static int mcryptd_hash_final_enqueue(struct ahash_request *req)
399 return mcryptd_hash_enqueue(req, mcryptd_hash_final);
402 static void mcryptd_hash_finup(struct crypto_async_request *req_async, int err)
404 struct ahash_request *req = ahash_request_cast(req_async);
405 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
407 if (unlikely(err == -EINPROGRESS))
410 err = shash_ahash_mcryptd_finup(req, &rctx->desc);
413 req->base.complete = rctx->complete;
420 rctx->complete(&req->base, err);
424 static int mcryptd_hash_finup_enqueue(struct ahash_request *req)
426 return mcryptd_hash_enqueue(req, mcryptd_hash_finup);
429 static void mcryptd_hash_digest(struct crypto_async_request *req_async, int err)
431 struct mcryptd_hash_ctx *ctx = crypto_tfm_ctx(req_async->tfm);
432 struct crypto_shash *child = ctx->child;
433 struct ahash_request *req = ahash_request_cast(req_async);
434 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
435 struct shash_desc *desc = &rctx->desc;
437 if (unlikely(err == -EINPROGRESS))
441 desc->flags = CRYPTO_TFM_REQ_MAY_SLEEP; /* check this again */
443 err = shash_ahash_mcryptd_digest(req, desc);
446 req->base.complete = rctx->complete;
453 rctx->complete(&req->base, err);
457 static int mcryptd_hash_digest_enqueue(struct ahash_request *req)
459 return mcryptd_hash_enqueue(req, mcryptd_hash_digest);
462 static int mcryptd_hash_export(struct ahash_request *req, void *out)
464 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
466 return crypto_shash_export(&rctx->desc, out);
469 static int mcryptd_hash_import(struct ahash_request *req, const void *in)
471 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
473 return crypto_shash_import(&rctx->desc, in);
476 static int mcryptd_create_hash(struct crypto_template *tmpl, struct rtattr **tb,
477 struct mcryptd_queue *queue)
479 struct hashd_instance_ctx *ctx;
480 struct ahash_instance *inst;
481 struct shash_alg *salg;
482 struct crypto_alg *alg;
485 salg = shash_attr_alg(tb[1], 0, 0);
487 return PTR_ERR(salg);
490 pr_debug("crypto: mcryptd hash alg: %s\n", alg->cra_name);
491 inst = mcryptd_alloc_instance(alg, ahash_instance_headroom(),
497 ctx = ahash_instance_ctx(inst);
500 err = crypto_init_shash_spawn(&ctx->spawn, salg,
501 ahash_crypto_instance(inst));
505 inst->alg.halg.base.cra_flags = CRYPTO_ALG_ASYNC;
507 inst->alg.halg.digestsize = salg->digestsize;
508 inst->alg.halg.base.cra_ctxsize = sizeof(struct mcryptd_hash_ctx);
510 inst->alg.halg.base.cra_init = mcryptd_hash_init_tfm;
511 inst->alg.halg.base.cra_exit = mcryptd_hash_exit_tfm;
513 inst->alg.init = mcryptd_hash_init_enqueue;
514 inst->alg.update = mcryptd_hash_update_enqueue;
515 inst->alg.final = mcryptd_hash_final_enqueue;
516 inst->alg.finup = mcryptd_hash_finup_enqueue;
517 inst->alg.export = mcryptd_hash_export;
518 inst->alg.import = mcryptd_hash_import;
519 inst->alg.setkey = mcryptd_hash_setkey;
520 inst->alg.digest = mcryptd_hash_digest_enqueue;
522 err = ahash_register_instance(tmpl, inst);
524 crypto_drop_shash(&ctx->spawn);
534 static struct mcryptd_queue mqueue;
536 static int mcryptd_create(struct crypto_template *tmpl, struct rtattr **tb)
538 struct crypto_attr_type *algt;
540 algt = crypto_get_attr_type(tb);
542 return PTR_ERR(algt);
544 switch (algt->type & algt->mask & CRYPTO_ALG_TYPE_MASK) {
545 case CRYPTO_ALG_TYPE_DIGEST:
546 return mcryptd_create_hash(tmpl, tb, &mqueue);
553 static void mcryptd_free(struct crypto_instance *inst)
555 struct mcryptd_instance_ctx *ctx = crypto_instance_ctx(inst);
556 struct hashd_instance_ctx *hctx = crypto_instance_ctx(inst);
558 switch (inst->alg.cra_flags & CRYPTO_ALG_TYPE_MASK) {
559 case CRYPTO_ALG_TYPE_AHASH:
560 crypto_drop_shash(&hctx->spawn);
561 kfree(ahash_instance(inst));
564 crypto_drop_spawn(&ctx->spawn);
569 static struct crypto_template mcryptd_tmpl = {
571 .create = mcryptd_create,
572 .free = mcryptd_free,
573 .module = THIS_MODULE,
576 struct mcryptd_ahash *mcryptd_alloc_ahash(const char *alg_name,
579 char mcryptd_alg_name[CRYPTO_MAX_ALG_NAME];
580 struct crypto_ahash *tfm;
582 if (snprintf(mcryptd_alg_name, CRYPTO_MAX_ALG_NAME,
583 "mcryptd(%s)", alg_name) >= CRYPTO_MAX_ALG_NAME)
584 return ERR_PTR(-EINVAL);
585 tfm = crypto_alloc_ahash(mcryptd_alg_name, type, mask);
587 return ERR_CAST(tfm);
588 if (tfm->base.__crt_alg->cra_module != THIS_MODULE) {
589 crypto_free_ahash(tfm);
590 return ERR_PTR(-EINVAL);
593 return __mcryptd_ahash_cast(tfm);
595 EXPORT_SYMBOL_GPL(mcryptd_alloc_ahash);
597 int shash_ahash_mcryptd_digest(struct ahash_request *req,
598 struct shash_desc *desc)
602 err = crypto_shash_init(desc) ?:
603 shash_ahash_mcryptd_finup(req, desc);
607 EXPORT_SYMBOL_GPL(shash_ahash_mcryptd_digest);
609 int shash_ahash_mcryptd_update(struct ahash_request *req,
610 struct shash_desc *desc)
612 struct crypto_shash *tfm = desc->tfm;
613 struct shash_alg *shash = crypto_shash_alg(tfm);
615 /* alignment is to be done by multi-buffer crypto algorithm if needed */
617 return shash->update(desc, NULL, 0);
619 EXPORT_SYMBOL_GPL(shash_ahash_mcryptd_update);
621 int shash_ahash_mcryptd_finup(struct ahash_request *req,
622 struct shash_desc *desc)
624 struct crypto_shash *tfm = desc->tfm;
625 struct shash_alg *shash = crypto_shash_alg(tfm);
627 /* alignment is to be done by multi-buffer crypto algorithm if needed */
629 return shash->finup(desc, NULL, 0, req->result);
631 EXPORT_SYMBOL_GPL(shash_ahash_mcryptd_finup);
633 int shash_ahash_mcryptd_final(struct ahash_request *req,
634 struct shash_desc *desc)
636 struct crypto_shash *tfm = desc->tfm;
637 struct shash_alg *shash = crypto_shash_alg(tfm);
639 /* alignment is to be done by multi-buffer crypto algorithm if needed */
641 return shash->final(desc, req->result);
643 EXPORT_SYMBOL_GPL(shash_ahash_mcryptd_final);
645 struct crypto_shash *mcryptd_ahash_child(struct mcryptd_ahash *tfm)
647 struct mcryptd_hash_ctx *ctx = crypto_ahash_ctx(&tfm->base);
651 EXPORT_SYMBOL_GPL(mcryptd_ahash_child);
653 struct shash_desc *mcryptd_shash_desc(struct ahash_request *req)
655 struct mcryptd_hash_request_ctx *rctx = ahash_request_ctx(req);
658 EXPORT_SYMBOL_GPL(mcryptd_shash_desc);
660 void mcryptd_free_ahash(struct mcryptd_ahash *tfm)
662 crypto_free_ahash(&tfm->base);
664 EXPORT_SYMBOL_GPL(mcryptd_free_ahash);
667 static int __init mcryptd_init(void)
670 struct mcryptd_flush_list *flist;
672 mcryptd_flist = alloc_percpu(struct mcryptd_flush_list);
673 for_each_possible_cpu(cpu) {
674 flist = per_cpu_ptr(mcryptd_flist, cpu);
675 INIT_LIST_HEAD(&flist->list);
676 mutex_init(&flist->lock);
679 err = mcryptd_init_queue(&mqueue, MCRYPTD_MAX_CPU_QLEN);
681 free_percpu(mcryptd_flist);
685 err = crypto_register_template(&mcryptd_tmpl);
687 mcryptd_fini_queue(&mqueue);
688 free_percpu(mcryptd_flist);
694 static void __exit mcryptd_exit(void)
696 mcryptd_fini_queue(&mqueue);
697 crypto_unregister_template(&mcryptd_tmpl);
698 free_percpu(mcryptd_flist);
701 subsys_initcall(mcryptd_init);
702 module_exit(mcryptd_exit);
704 MODULE_LICENSE("GPL");
705 MODULE_DESCRIPTION("Software async multibuffer crypto daemon");
706 MODULE_ALIAS_CRYPTO("mcryptd");