You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
122 lines
2.9 KiB
122 lines
2.9 KiB
/* |
|
* fscrypt_private.h |
|
* |
|
* Copyright (C) 2015, Google, Inc. |
|
* |
|
* This contains encryption key functions. |
|
* |
|
* Written by Michael Halcrow, Ildar Muslukhov, and Uday Savagaonkar, 2015. |
|
*/ |
|
|
|
#ifndef _FSCRYPT_PRIVATE_H |
|
#define _FSCRYPT_PRIVATE_H |
|
|
|
#include <linux/fscrypt_supp.h> |
|
#include <crypto/hash.h> |
|
|
|
/* Encryption parameters */ |
|
#define FS_IV_SIZE 16 |
|
#define FS_AES_128_ECB_KEY_SIZE 16 |
|
#define FS_AES_128_CBC_KEY_SIZE 16 |
|
#define FS_AES_128_CTS_KEY_SIZE 16 |
|
#define FS_AES_256_GCM_KEY_SIZE 32 |
|
#define FS_AES_256_CBC_KEY_SIZE 32 |
|
#define FS_AES_256_CTS_KEY_SIZE 32 |
|
#define FS_AES_256_XTS_KEY_SIZE 64 |
|
|
|
#define FS_KEY_DERIVATION_NONCE_SIZE 16 |
|
|
|
/** |
|
* Encryption context for inode |
|
* |
|
* Protector format: |
|
* 1 byte: Protector format (1 = this version) |
|
* 1 byte: File contents encryption mode |
|
* 1 byte: File names encryption mode |
|
* 1 byte: Flags |
|
* 8 bytes: Master Key descriptor |
|
* 16 bytes: Encryption Key derivation nonce |
|
*/ |
|
struct fscrypt_context { |
|
u8 format; |
|
u8 contents_encryption_mode; |
|
u8 filenames_encryption_mode; |
|
u8 flags; |
|
u8 master_key_descriptor[FS_KEY_DESCRIPTOR_SIZE]; |
|
u8 nonce[FS_KEY_DERIVATION_NONCE_SIZE]; |
|
} __packed; |
|
|
|
#define FS_ENCRYPTION_CONTEXT_FORMAT_V1 1 |
|
|
|
/* |
|
* A pointer to this structure is stored in the file system's in-core |
|
* representation of an inode. |
|
*/ |
|
struct fscrypt_info { |
|
u8 ci_data_mode; |
|
u8 ci_filename_mode; |
|
u8 ci_flags; |
|
struct crypto_ablkcipher *ci_ctfm; |
|
struct crypto_cipher *ci_essiv_tfm; |
|
u8 ci_master_key[FS_KEY_DESCRIPTOR_SIZE]; |
|
}; |
|
|
|
typedef enum { |
|
FS_DECRYPT = 0, |
|
FS_ENCRYPT, |
|
} fscrypt_direction_t; |
|
|
|
#define FS_CTX_REQUIRES_FREE_ENCRYPT_FL 0x00000001 |
|
#define FS_CTX_HAS_BOUNCE_BUFFER_FL 0x00000002 |
|
|
|
struct fscrypt_completion_result { |
|
struct completion completion; |
|
int res; |
|
}; |
|
|
|
#define DECLARE_FS_COMPLETION_RESULT(ecr) \ |
|
struct fscrypt_completion_result ecr = { \ |
|
COMPLETION_INITIALIZER_ONSTACK((ecr).completion), 0 } |
|
|
|
static inline void inode_lock(struct inode *inode) |
|
{ |
|
mutex_lock(&inode->i_mutex); |
|
} |
|
|
|
static inline void inode_unlock(struct inode *inode) |
|
{ |
|
mutex_unlock(&inode->i_mutex); |
|
} |
|
|
|
static inline const struct user_key_payload *user_key_payload(const struct key *key) |
|
{ |
|
return (struct user_key_payload *)rcu_dereference_key(key); |
|
} |
|
|
|
/* bio stuffs */ |
|
#define REQ_OP_READ READ |
|
#define REQ_OP_WRITE WRITE |
|
#define bio_op(bio) ((bio)->bi_rw & 1) |
|
|
|
static inline void bio_set_op_attrs(struct bio *bio, unsigned op, |
|
unsigned op_flags) |
|
{ |
|
bio->bi_rw = op | op_flags; |
|
} |
|
|
|
/* crypto.c */ |
|
extern int fscrypt_initialize(unsigned int cop_flags); |
|
extern struct workqueue_struct *fscrypt_read_workqueue; |
|
extern int fscrypt_do_page_crypto(const struct inode *inode, |
|
fscrypt_direction_t rw, u64 lblk_num, |
|
struct page *src_page, |
|
struct page *dest_page, |
|
unsigned int len, unsigned int offs, |
|
gfp_t gfp_flags); |
|
extern struct page *fscrypt_alloc_bounce_page(struct fscrypt_ctx *ctx, |
|
gfp_t gfp_flags); |
|
|
|
/* keyinfo.c */ |
|
extern void __exit fscrypt_essiv_cleanup(void); |
|
|
|
#endif /* _FSCRYPT_PRIVATE_H */
|
|
|