a092c513db
QAPI's 'prefix' feature can make the connection between enumeration type and its constants less than obvious. It's best used with restraint. QCryptoCipherAlgorithm has a 'prefix' that overrides the generated enumeration constants' prefix to QCRYPTO_CIPHER_ALG. We could simply drop 'prefix', but then the prefix becomes QCRYPTO_CIPHER_ALGORITHM, which is rather long. We could additionally rename the type to QCryptoCipherAlg, but I think the abbreviation "alg" is less than clear. Rename the type to QCryptoCipherAlgo instead. The prefix becomes QCRYPTO_CIPHER_ALGO. Signed-off-by: Markus Armbruster <armbru@redhat.com> Acked-by: Daniel P. Berrangé <berrange@redhat.com> Message-ID: <20240904111836.3273842-13-armbru@redhat.com>
143 lines
4.7 KiB
C
143 lines
4.7 KiB
C
/*
|
|
* QEMU Crypto block device encryption
|
|
*
|
|
* Copyright (c) 2015-2016 Red Hat, Inc.
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
#ifndef QCRYPTO_BLOCKPRIV_H
|
|
#define QCRYPTO_BLOCKPRIV_H
|
|
|
|
#include "crypto/block.h"
|
|
#include "qemu/thread.h"
|
|
|
|
typedef struct QCryptoBlockDriver QCryptoBlockDriver;
|
|
|
|
struct QCryptoBlock {
|
|
QCryptoBlockFormat format;
|
|
|
|
const QCryptoBlockDriver *driver;
|
|
void *opaque;
|
|
|
|
/* Cipher parameters */
|
|
QCryptoCipherAlgo alg;
|
|
QCryptoCipherMode mode;
|
|
uint8_t *key;
|
|
size_t nkey;
|
|
|
|
QCryptoCipher **free_ciphers;
|
|
size_t max_free_ciphers;
|
|
size_t n_free_ciphers;
|
|
QCryptoIVGen *ivgen;
|
|
QemuMutex mutex;
|
|
|
|
QCryptoHashAlgo kdfhash;
|
|
size_t niv;
|
|
uint64_t payload_offset; /* In bytes */
|
|
uint64_t sector_size; /* In bytes */
|
|
|
|
bool detached_header; /* True if disk has a detached LUKS header */
|
|
};
|
|
|
|
struct QCryptoBlockDriver {
|
|
int (*open)(QCryptoBlock *block,
|
|
QCryptoBlockOpenOptions *options,
|
|
const char *optprefix,
|
|
QCryptoBlockReadFunc readfunc,
|
|
void *opaque,
|
|
unsigned int flags,
|
|
Error **errp);
|
|
|
|
int (*create)(QCryptoBlock *block,
|
|
QCryptoBlockCreateOptions *options,
|
|
const char *optprefix,
|
|
QCryptoBlockInitFunc initfunc,
|
|
QCryptoBlockWriteFunc writefunc,
|
|
void *opaque,
|
|
Error **errp);
|
|
|
|
int (*amend)(QCryptoBlock *block,
|
|
QCryptoBlockReadFunc readfunc,
|
|
QCryptoBlockWriteFunc writefunc,
|
|
void *opaque,
|
|
QCryptoBlockAmendOptions *options,
|
|
bool force,
|
|
Error **errp);
|
|
|
|
int (*get_info)(QCryptoBlock *block,
|
|
QCryptoBlockInfo *info,
|
|
Error **errp);
|
|
|
|
void (*cleanup)(QCryptoBlock *block);
|
|
|
|
int (*encrypt)(QCryptoBlock *block,
|
|
uint64_t startsector,
|
|
uint8_t *buf,
|
|
size_t len,
|
|
Error **errp);
|
|
int (*decrypt)(QCryptoBlock *block,
|
|
uint64_t startsector,
|
|
uint8_t *buf,
|
|
size_t len,
|
|
Error **errp);
|
|
|
|
bool (*has_format)(const uint8_t *buf,
|
|
size_t buflen);
|
|
};
|
|
|
|
|
|
int qcrypto_block_cipher_decrypt_helper(QCryptoCipher *cipher,
|
|
size_t niv,
|
|
QCryptoIVGen *ivgen,
|
|
int sectorsize,
|
|
uint64_t offset,
|
|
uint8_t *buf,
|
|
size_t len,
|
|
Error **errp);
|
|
|
|
int qcrypto_block_cipher_encrypt_helper(QCryptoCipher *cipher,
|
|
size_t niv,
|
|
QCryptoIVGen *ivgen,
|
|
int sectorsize,
|
|
uint64_t offset,
|
|
uint8_t *buf,
|
|
size_t len,
|
|
Error **errp);
|
|
|
|
int qcrypto_block_decrypt_helper(QCryptoBlock *block,
|
|
int sectorsize,
|
|
uint64_t offset,
|
|
uint8_t *buf,
|
|
size_t len,
|
|
Error **errp);
|
|
|
|
int qcrypto_block_encrypt_helper(QCryptoBlock *block,
|
|
int sectorsize,
|
|
uint64_t offset,
|
|
uint8_t *buf,
|
|
size_t len,
|
|
Error **errp);
|
|
|
|
int qcrypto_block_init_cipher(QCryptoBlock *block,
|
|
QCryptoCipherAlgo alg,
|
|
QCryptoCipherMode mode,
|
|
const uint8_t *key, size_t nkey,
|
|
Error **errp);
|
|
|
|
void qcrypto_block_free_cipher(QCryptoBlock *block);
|
|
|
|
#endif /* QCRYPTO_BLOCKPRIV_H */
|