/* * Copyright (c) 2016-2017, Mellanox Technologies. All rights reserved. * Copyright (c) 2016-2017, Dave Watson <davejwatson@fb.com>. All rights reserved. * * This software is available to you under a choice of one of two * licenses. You may choose to be licensed under the terms of the GNU * General Public License (GPL) Version 2, available from the file * COPYING in the main directory of this source tree, or the * OpenIB.org BSD license below: * * Redistribution and use in source and binary forms, with or * without modification, are permitted provided that the following * conditions are met: * * - Redistributions of source code must retain the above * copyright notice, this list of conditions and the following * disclaimer. * * - Redistributions in binary form must reproduce the above * copyright notice, this list of conditions and the following * disclaimer in the documentation and/or other materials * provided with the distribution. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE * SOFTWARE. */ #ifndef _TLS_OFFLOAD_H #define _TLS_OFFLOAD_H #include <linux/types.h> #include <asm/byteorder.h> #include <linux/socket.h> #include <linux/tcp.h> #include <net/tcp.h> #include <uapi/linux/tls.h> /* Maximum data size carried in a TLS record */ #define TLS_MAX_PAYLOAD_SIZE ((size_t)1 << 14) #define TLS_HEADER_SIZE 5 #define TLS_NONCE_OFFSET TLS_HEADER_SIZE #define TLS_CRYPTO_INFO_READY(info) ((info)->cipher_type) #define TLS_RECORD_TYPE_DATA 0x17 #define TLS_AAD_SPACE_SIZE 13 struct tls_sw_context { struct crypto_aead *aead_send; /* Sending context */ char aad_space[TLS_AAD_SPACE_SIZE]; unsigned int sg_plaintext_size; int sg_plaintext_num_elem; struct scatterlist sg_plaintext_data[MAX_SKB_FRAGS]; unsigned int sg_encrypted_size; int sg_encrypted_num_elem; struct scatterlist sg_encrypted_data[MAX_SKB_FRAGS]; /* AAD | sg_plaintext_data | sg_tag */ struct scatterlist sg_aead_in[2]; /* AAD | sg_encrypted_data (data contain overhead for hdr&iv&tag) */ struct scatterlist sg_aead_out[2]; }; enum { TLS_PENDING_CLOSED_RECORD }; union tls_crypto_context { struct tls_crypto_info info; struct tls12_crypto_info_aes_gcm_128 aes_gcm_128; }; struct tls_context { union tls_crypto_context crypto_send; void *priv_ctx; u8 tx_conf:2; u16 prepend_size; u16 tag_size; u16 overhead_size; u16 iv_size; char *iv; u16 rec_seq_size; char *rec_seq; struct scatterlist *partially_sent_record; u16 partially_sent_offset; unsigned long flags; bool in_tcp_sendpages; u16 pending_open_record_frags; int (*push_pending_record)(struct sock *sk, int flags); void (*sk_write_space)(struct sock *sk); void (*sk_proto_close)(struct sock *sk, long timeout); int (*setsockopt)(struct sock *sk, int level, int optname, char __user *optval, unsigned int optlen); int (*getsockopt)(struct sock *sk, int level, int optname, char __user *optval, int __user *optlen); }; int wait_on_pending_writer(struct sock *sk, long *timeo); int tls_sk_query(struct sock *sk, int optname, char __user *optval, int __user *optlen); int tls_sk_attach(struct sock *sk, int optname, char __user *optval, unsigned int optlen); int tls_set_sw_offload(struct sock *sk, struct tls_context *ctx); int tls_sw_sendmsg(struct sock *sk, struct msghdr *msg, size_t size); int tls_sw_sendpage(struct sock *sk, struct page *page, int offset, size_t size, int flags); void tls_sw_close(struct sock *sk, long timeout); void tls_sw_free_tx_resources(struct sock *sk); void tls_sk_destruct(struct sock *sk, struct tls_context *ctx); void tls_icsk_clean_acked(struct sock *sk); int tls_push_sg(struct sock *sk, struct tls_context *ctx, struct scatterlist *sg, u16 first_offset, int flags); int tls_push_pending_closed_record(struct sock *sk, struct tls_context *ctx, int flags, long *timeo); static inline bool tls_is_pending_closed_record(struct tls_context *ctx) { return test_bit(TLS_PENDING_CLOSED_RECORD, &ctx->flags); } static inline int tls_complete_pending_work(struct sock *sk, struct tls_context *ctx, int flags, long *timeo) { int rc = 0; if (unlikely(sk->sk_write_pending)) rc = wait_on_pending_writer(sk, timeo); if (!rc && tls_is_pending_closed_record(ctx)) rc = tls_push_pending_closed_record(sk, ctx, flags, timeo); return rc; } static inline bool tls_is_partially_sent_record(struct tls_context *ctx) { return !!ctx->partially_sent_record; } static inline bool tls_is_pending_open_record(struct tls_context *tls_ctx) { return tls_ctx->pending_open_record_frags; } static inline void tls_err_abort(struct sock *sk) { sk->sk_err = EBADMSG; sk->sk_error_report(sk); } static inline bool tls_bigint_increment(unsigned char *seq, int len) { int i; for (i = len - 1; i >= 0; i--) { ++seq[i]; if (seq[i] != 0) break; } return (i == -1); } static inline void tls_advance_record_sn(struct sock *sk, struct tls_context *ctx) { if (tls_bigint_increment(ctx->rec_seq, ctx->rec_seq_size)) tls_err_abort(sk); tls_bigint_increment(ctx->iv + TLS_CIPHER_AES_GCM_128_SALT_SIZE, ctx->iv_size); } static inline void tls_fill_prepend(struct tls_context *ctx, char *buf, size_t plaintext_len, unsigned char record_type) { size_t pkt_len, iv_size = ctx->iv_size; pkt_len = plaintext_len + iv_size + ctx->tag_size; /* we cover nonce explicit here as well, so buf should be of * size KTLS_DTLS_HEADER_SIZE + KTLS_DTLS_NONCE_EXPLICIT_SIZE */ buf[0] = record_type; buf[1] = TLS_VERSION_MINOR(ctx->crypto_send.info.version); buf[2] = TLS_VERSION_MAJOR(ctx->crypto_send.info.version); /* we can use IV for nonce explicit according to spec */ buf[3] = pkt_len >> 8; buf[4] = pkt_len & 0xFF; memcpy(buf + TLS_NONCE_OFFSET, ctx->iv + TLS_CIPHER_AES_GCM_128_SALT_SIZE, iv_size); } static inline void tls_make_aad(char *buf, size_t size, char *record_sequence, int record_sequence_size, unsigned char record_type) { memcpy(buf, record_sequence, record_sequence_size); buf[8] = record_type; buf[9] = TLS_1_2_VERSION_MAJOR; buf[10] = TLS_1_2_VERSION_MINOR; buf[11] = size >> 8; buf[12] = size & 0xFF; } static inline struct tls_context *tls_get_ctx(const struct sock *sk) { struct inet_connection_sock *icsk = inet_csk(sk); return icsk->icsk_ulp_data; } static inline struct tls_sw_context *tls_sw_ctx( const struct tls_context *tls_ctx) { return (struct tls_sw_context *)tls_ctx->priv_ctx; } static inline struct tls_offload_context *tls_offload_ctx( const struct tls_context *tls_ctx) { return (struct tls_offload_context *)tls_ctx->priv_ctx; } int tls_proccess_cmsg(struct sock *sk, struct msghdr *msg, unsigned char *record_type); #endif /* _TLS_OFFLOAD_H */
Name | Type | Size | Permission | Actions |
---|---|---|---|---|
9p | Folder | 0755 |
|
|
bluetooth | Folder | 0755 |
|
|
caif | Folder | 0755 |
|
|
iucv | Folder | 0755 |
|
|
netfilter | Folder | 0755 |
|
|
netns | Folder | 0755 |
|
|
nfc | Folder | 0755 |
|
|
phonet | Folder | 0755 |
|
|
sctp | Folder | 0755 |
|
|
tc_act | Folder | 0755 |
|
|
6lowpan.h | File | 10.03 KB | 0644 |
|
Space.h | File | 1.15 KB | 0644 |
|
act_api.h | File | 6.38 KB | 0644 |
|
addrconf.h | File | 12.63 KB | 0644 |
|
af_ieee802154.h | File | 1.55 KB | 0644 |
|
af_rxrpc.h | File | 2.79 KB | 0644 |
|
af_unix.h | File | 2.22 KB | 0644 |
|
af_vsock.h | File | 7.21 KB | 0644 |
|
ah.h | File | 382 B | 0644 |
|
arp.h | File | 2 KB | 0644 |
|
atmclip.h | File | 1.48 KB | 0644 |
|
ax25.h | File | 15.02 KB | 0644 |
|
ax88796.h | File | 998 B | 0644 |
|
bond_3ad.h | File | 9.79 KB | 0644 |
|
bond_alb.h | File | 6.6 KB | 0644 |
|
bond_options.h | File | 3.92 KB | 0644 |
|
bonding.h | File | 19.1 KB | 0644 |
|
busy_poll.h | File | 3.8 KB | 0644 |
|
calipso.h | File | 2.15 KB | 0644 |
|
cfg80211-wext.h | File | 1.95 KB | 0644 |
|
cfg80211.h | File | 221.24 KB | 0644 |
|
cfg802154.h | File | 10.89 KB | 0644 |
|
checksum.h | File | 4.76 KB | 0644 |
|
cipso_ipv4.h | File | 8.2 KB | 0644 |
|
cls_cgroup.h | File | 2.15 KB | 0644 |
|
codel.h | File | 5.65 KB | 0644 |
|
codel_impl.h | File | 7.98 KB | 0644 |
|
codel_qdisc.h | File | 2.9 KB | 0644 |
|
compat.h | File | 2.11 KB | 0644 |
|
datalink.h | File | 619 B | 0644 |
|
dcbevent.h | File | 1.26 KB | 0644 |
|
dcbnl.h | File | 4.2 KB | 0644 |
|
devlink.h | File | 13.25 KB | 0644 |
|
dn.h | File | 6.88 KB | 0644 |
|
dn_dev.h | File | 5.36 KB | 0644 |
|
dn_fib.h | File | 3.98 KB | 0644 |
|
dn_neigh.h | File | 968 B | 0644 |
|
dn_nsp.h | File | 5.83 KB | 0644 |
|
dn_route.h | File | 4.36 KB | 0644 |
|
dsa.h | File | 13.94 KB | 0644 |
|
dsfield.h | File | 1.11 KB | 0644 |
|
dst.h | File | 13.48 KB | 0644 |
|
dst_cache.h | File | 2.53 KB | 0644 |
|
dst_metadata.h | File | 5.39 KB | 0644 |
|
dst_ops.h | File | 2 KB | 0644 |
|
erspan.h | File | 2.11 KB | 0644 |
|
esp.h | File | 877 B | 0644 |
|
ethoc.h | File | 538 B | 0644 |
|
fib_notifier.h | File | 1.29 KB | 0644 |
|
fib_rules.h | File | 4.18 KB | 0644 |
|
firewire.h | File | 636 B | 0644 |
|
flow.h | File | 6.16 KB | 0644 |
|
flow_dissector.h | File | 7.55 KB | 0644 |
|
fou.h | File | 549 B | 0644 |
|
fq.h | File | 2.67 KB | 0644 |
|
fq_impl.h | File | 6.9 KB | 0644 |
|
garp.h | File | 2.62 KB | 0644 |
|
gen_stats.h | File | 2.34 KB | 0644 |
|
genetlink.h | File | 11.3 KB | 0644 |
|
geneve.h | File | 1.67 KB | 0644 |
|
gre.h | File | 2.99 KB | 0644 |
|
gro_cells.h | File | 443 B | 0644 |
|
gtp.h | File | 633 B | 0644 |
|
gue.h | File | 3.23 KB | 0644 |
|
hwbm.h | File | 937 B | 0644 |
|
icmp.h | File | 2.01 KB | 0644 |
|
ieee80211_radiotap.h | File | 6.63 KB | 0644 |
|
ieee802154_netdev.h | File | 9.14 KB | 0644 |
|
if_inet6.h | File | 6.13 KB | 0644 |
|
ife.h | File | 1.06 KB | 0644 |
|
ila.h | File | 498 B | 0644 |
|
inet6_connection_sock.h | File | 976 B | 0644 |
|
inet6_hashtables.h | File | 3.7 KB | 0644 |
|
inet_common.h | File | 1.89 KB | 0644 |
|
inet_connection_sock.h | File | 10.48 KB | 0644 |
|
inet_ecn.h | File | 6.02 KB | 0644 |
|
inet_frag.h | File | 4.51 KB | 0644 |
|
inet_hashtables.h | File | 12.91 KB | 0644 |
|
inet_sock.h | File | 8.25 KB | 0644 |
|
inet_timewait_sock.h | File | 3.82 KB | 0644 |
|
inetpeer.h | File | 3.29 KB | 0644 |
|
ip.h | File | 18.51 KB | 0644 |
|
ip6_checksum.h | File | 2.89 KB | 0644 |
|
ip6_fib.h | File | 10.04 KB | 0644 |
|
ip6_route.h | File | 7.63 KB | 0644 |
|
ip6_tunnel.h | File | 4.72 KB | 0644 |
|
ip_fib.h | File | 10.72 KB | 0644 |
|
ip_tunnels.h | File | 13.61 KB | 0644 |
|
ip_vs.h | File | 46.78 KB | 0644 |
|
ipcomp.h | File | 659 B | 0644 |
|
ipconfig.h | File | 811 B | 0644 |
|
ipv6.h | File | 29.97 KB | 0644 |
|
ipv6_frag.h | File | 2.54 KB | 0644 |
|
ipx.h | File | 4.4 KB | 0644 |
|
iw_handler.h | File | 20.91 KB | 0644 |
|
kcm.h | File | 4.96 KB | 0644 |
|
l3mdev.h | File | 5.86 KB | 0644 |
|
lapb.h | File | 4.75 KB | 0644 |
|
lib80211.h | File | 3.92 KB | 0644 |
|
llc.h | File | 4.41 KB | 0644 |
|
llc_c_ac.h | File | 9.31 KB | 0644 |
|
llc_c_ev.h | File | 10.68 KB | 0644 |
|
llc_c_st.h | File | 1.72 KB | 0644 |
|
llc_conn.h | File | 4.06 KB | 0644 |
|
llc_if.h | File | 2.16 KB | 0644 |
|
llc_pdu.h | File | 14.44 KB | 0644 |
|
llc_s_ac.h | File | 1.55 KB | 0644 |
|
llc_s_ev.h | File | 2.2 KB | 0644 |
|
llc_s_st.h | File | 947 B | 0644 |
|
llc_sap.h | File | 1.08 KB | 0644 |
|
lwtunnel.h | File | 5.84 KB | 0644 |
|
mac80211.h | File | 230.36 KB | 0644 |
|
mac802154.h | File | 15.27 KB | 0644 |
|
mip6.h | File | 1.58 KB | 0644 |
|
mld.h | File | 2.8 KB | 0644 |
|
mpls.h | File | 932 B | 0644 |
|
mpls_iptunnel.h | File | 827 B | 0644 |
|
mrp.h | File | 3.03 KB | 0644 |
|
ncsi.h | File | 1.92 KB | 0644 |
|
ndisc.h | File | 13.77 KB | 0644 |
|
neighbour.h | File | 15.06 KB | 0644 |
|
net_namespace.h | File | 10.08 KB | 0644 |
|
net_ratelimit.h | File | 220 B | 0644 |
|
netevent.h | File | 910 B | 0644 |
|
netlabel.h | File | 20.74 KB | 0644 |
|
netlink.h | File | 40.39 KB | 0644 |
|
netprio_cgroup.h | File | 1.24 KB | 0644 |
|
netrom.h | File | 7.68 KB | 0644 |
|
nexthop.h | File | 865 B | 0644 |
|
nl802154.h | File | 12.09 KB | 0644 |
|
nsh.h | File | 12.31 KB | 0644 |
|
p8022.h | File | 447 B | 0644 |
|
ping.h | File | 3.45 KB | 0644 |
|
pkt_cls.h | File | 17.34 KB | 0644 |
|
pkt_sched.h | File | 4.05 KB | 0644 |
|
pptp.h | File | 557 B | 0644 |
|
protocol.h | File | 4.08 KB | 0644 |
|
psample.h | File | 860 B | 0644 |
|
psnap.h | File | 351 B | 0644 |
|
raw.h | File | 2.07 KB | 0644 |
|
rawv6.h | File | 854 B | 0644 |
|
red.h | File | 10.45 KB | 0644 |
|
regulatory.h | File | 10.12 KB | 0644 |
|
request_sock.h | File | 6.46 KB | 0644 |
|
rose.h | File | 7.62 KB | 0644 |
|
route.h | File | 10.02 KB | 0644 |
|
rtnetlink.h | File | 6.13 KB | 0644 |
|
sch_generic.h | File | 23.3 KB | 0644 |
|
scm.h | File | 3.5 KB | 0644 |
|
secure_seq.h | File | 855 B | 0644 |
|
seg6.h | File | 1.66 KB | 0644 |
|
seg6_hmac.h | File | 1.65 KB | 0644 |
|
slhc_vj.h | File | 6.67 KB | 0644 |
|
smc.h | File | 440 B | 0644 |
|
snmp.h | File | 5.23 KB | 0644 |
|
sock.h | File | 69.75 KB | 0644 |
|
sock_reuseport.h | File | 863 B | 0644 |
|
stp.h | File | 383 B | 0644 |
|
strparser.h | File | 3.75 KB | 0644 |
|
switchdev.h | File | 6.52 KB | 0644 |
|
tcp.h | File | 62.8 KB | 0644 |
|
tcp_states.h | File | 1.26 KB | 0644 |
|
timewait_sock.h | File | 1.11 KB | 0644 |
|
tipc.h | File | 2.34 KB | 0644 |
|
tls.h | File | 7.12 KB | 0644 |
|
transp_v6.h | File | 2.08 KB | 0644 |
|
tso.h | File | 515 B | 0644 |
|
tun_proto.h | File | 988 B | 0644 |
|
udp.h | File | 12.82 KB | 0644 |
|
udp_tunnel.h | File | 5.12 KB | 0644 |
|
udplite.h | File | 3.83 KB | 0644 |
|
vsock_addr.h | File | 1.05 KB | 0644 |
|
vxlan.h | File | 10.43 KB | 0644 |
|
wext.h | File | 1.51 KB | 0644 |
|
wimax.h | File | 19.97 KB | 0644 |
|
x25.h | File | 9.43 KB | 0644 |
|
x25device.h | File | 387 B | 0644 |
|
xfrm.h | File | 53.72 KB | 0644 |
|