summaryrefslogtreecommitdiffstats
path: root/crypto/akcipher.c
blob: f866085c8a4a38e83e94bb64efcaa80e5e7eff73 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
// SPDX-License-Identifier: GPL-2.0-or-later
/*
 * Public Key Encryption
 *
 * Copyright (c) 2015, Intel Corporation
 * Authors: Tadeusz Struk <tadeusz.struk@intel.com>
 */
#include <linux/errno.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/seq_file.h>
#include <linux/slab.h>
#include <linux/string.h>
#include <linux/crypto.h>
#include <linux/compiler.h>
#include <crypto/algapi.h>
#include <linux/cryptouser.h>
#include <net/netlink.h>
#include <crypto/akcipher.h>
#include <crypto/internal/akcipher.h>
#include "internal.h"

#ifdef CONFIG_NET
static int crypto_akcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	struct crypto_report_akcipher rakcipher;

	memset(&rakcipher, 0, sizeof(rakcipher));

	strscpy(rakcipher.type, "akcipher", sizeof(rakcipher.type));

	return nla_put(skb, CRYPTOCFGA_REPORT_AKCIPHER,
		       sizeof(rakcipher), &rakcipher);
}
#else
static int crypto_akcipher_report(struct sk_buff *skb, struct crypto_alg *alg)
{
	return -ENOSYS;
}
#endif

static void crypto_akcipher_show(struct seq_file *m, struct crypto_alg *alg)
	__maybe_unused;

static void crypto_akcipher_show(struct seq_file *m, struct crypto_alg *alg)
{
	seq_puts(m, "type         : akcipher\n");
}

static void crypto_akcipher_exit_tfm(struct crypto_tfm *tfm)
{
	struct crypto_akcipher *akcipher = __crypto_akcipher_tfm(tfm);
	struct akcipher_alg *alg = crypto_akcipher_alg(akcipher);

	alg->exit(akcipher);
}

static int crypto_akcipher_init_tfm(struct crypto_tfm *tfm)
{
	struct crypto_akcipher *akcipher = __crypto_akcipher_tfm(tfm);
	struct akcipher_alg *alg = crypto_akcipher_alg(akcipher);

	if (alg->exit)
		akcipher->base.exit = crypto_akcipher_exit_tfm;

	if (alg->init)
		return alg->init(akcipher);

	return 0;
}

static void crypto_akcipher_free_instance(struct crypto_instance *inst)
{
	struct akcipher_instance *akcipher = akcipher_instance(inst);

	akcipher->free(akcipher);
}

static const struct crypto_type crypto_akcipher_type = {
	.extsize = crypto_alg_extsize,
	.init_tfm = crypto_akcipher_init_tfm,
	.free = crypto_akcipher_free_instance,
#ifdef CONFIG_PROC_FS
	.show = crypto_akcipher_show,
#endif
	.report = crypto_akcipher_report,
	.maskclear = ~CRYPTO_ALG_TYPE_MASK,
	.maskset = CRYPTO_ALG_TYPE_MASK,
	.type = CRYPTO_ALG_TYPE_AKCIPHER,
	.tfmsize = offsetof(struct crypto_akcipher, base),
};

int crypto_grab_akcipher(struct crypto_akcipher_spawn *spawn,
			 struct crypto_instance *inst,
			 const char *name, u32 type, u32 mask)
{
	spawn->base.frontend = &crypto_akcipher_type;
	return crypto_grab_spawn(&spawn->base, inst, name, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_grab_akcipher);

struct crypto_akcipher *crypto_alloc_akcipher(const char *alg_name, u32 type,
					      u32 mask)
{
	return crypto_alloc_tfm(alg_name, &crypto_akcipher_type, type, mask);
}
EXPORT_SYMBOL_GPL(crypto_alloc_akcipher);

static void akcipher_prepare_alg(struct akcipher_alg *alg)
{
	struct crypto_alg *base = &alg->base;

	base->cra_type = &crypto_akcipher_type;
	base->cra_flags &= ~CRYPTO_ALG_TYPE_MASK;
	base->cra_flags |= CRYPTO_ALG_TYPE_AKCIPHER;
}

static int akcipher_default_op(struct akcipher_request *req)
{
	return -ENOSYS;
}

int crypto_register_akcipher(struct akcipher_alg *alg)
{
	struct crypto_alg *base = &alg->base;

	if (!alg->sign)
		alg->sign = akcipher_default_op;
	if (!alg->verify)
		alg->verify = akcipher_default_op;
	if (!alg->encrypt)
		alg->encrypt = akcipher_default_op;
	if (!alg->decrypt)
		alg->decrypt = akcipher_default_op;

	akcipher_prepare_alg(alg);
	return crypto_register_alg(base);
}
EXPORT_SYMBOL_GPL(crypto_register_akcipher);

void crypto_unregister_akcipher(struct akcipher_alg *alg)
{
	crypto_unregister_alg(&alg->base);
}
EXPORT_SYMBOL_GPL(crypto_unregister_akcipher);

int akcipher_register_instance(struct crypto_template *tmpl,
			       struct akcipher_instance *inst)
{
	if (WARN_ON(!inst->free))
		return -EINVAL;
	akcipher_prepare_alg(&inst->alg);
	return crypto_register_instance(tmpl, akcipher_crypto_instance(inst));
}
EXPORT_SYMBOL_GPL(akcipher_register_instance);

MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("Generic public key cipher type");
lass="w"> struct ebpf_network_viewer_dimension_names *next; } ebpf_network_viewer_dim_name_t ; typedef struct ebpf_network_viewer_port_list { char *value; uint32_t hash; uint16_t first; uint16_t last; uint16_t cmp_first; uint16_t cmp_last; uint16_t protocol; uint32_t pid; uint32_t tgid; uint64_t connections; struct ebpf_network_viewer_port_list *next; } ebpf_network_viewer_port_list_t; typedef struct netdata_passive_connection { uint32_t tgid; uint32_t pid; uint64_t counter; } netdata_passive_connection_t; typedef struct netdata_passive_connection_idx { uint16_t protocol; uint16_t port; } netdata_passive_connection_idx_t; /** * Union used to store ip addresses */ union netdata_ip_t { uint8_t addr8[16]; uint16_t addr16[8]; uint32_t addr32[4]; uint64_t addr64[2]; }; typedef struct ebpf_network_viewer_ip_list { char *value; // IP value uint32_t hash; // IP hash uint8_t ver; // IP version union netdata_ip_t first; // The IP address informed union netdata_ip_t last; // The IP address informed struct ebpf_network_viewer_ip_list *next; } ebpf_network_viewer_ip_list_t; typedef struct ebpf_network_viewer_hostname_list { char *value; // IP value uint32_t hash; // IP hash SIMPLE_PATTERN *value_pattern; struct ebpf_network_viewer_hostname_list *next; } ebpf_network_viewer_hostname_list_t; typedef struct ebpf_network_viewer_options { RW_SPINLOCK rw_spinlock; uint32_t enabled; uint32_t family; // AF_INET, AF_INET6 or AF_UNSPEC (both) uint32_t hostname_resolution_enabled; uint32_t service_resolution_enabled; ebpf_network_viewer_port_list_t *excluded_port; ebpf_network_viewer_port_list_t *included_port; ebpf_network_viewer_dim_name_t *names; ebpf_network_viewer_ip_list_t *excluded_ips; ebpf_network_viewer_ip_list_t *included_ips; ebpf_network_viewer_hostname_list_t *excluded_hostnames; ebpf_network_viewer_hostname_list_t *included_hostnames; ebpf_network_viewer_ip_list_t *ipv4_local_ip; ebpf_network_viewer_ip_list_t *ipv6_local_ip; } ebpf_network_viewer_options_t; extern ebpf_network_viewer_options_t network_viewer_opt; /** * Structure to store socket information */ typedef struct netdata_socket { // Timestamp uint64_t first_timestamp; uint64_t current_timestamp; // Socket additional info uint16_t protocol; uint16_t family; uint32_t external_origin; struct { uint32_t call_tcp_sent; uint32_t call_tcp_received; uint64_t tcp_bytes_sent; uint64_t tcp_bytes_received; uint32_t close; //It is never used with UDP uint32_t retransmit; //It is never used with UDP uint32_t ipv4_connect; uint32_t ipv6_connect; } tcp; struct { uint32_t call_udp_sent; uint32_t call_udp_received; uint64_t udp_bytes_sent; uint64_t udp_bytes_received; } udp; } netdata_socket_t; typedef enum netdata_socket_flags { NETDATA_SOCKET_FLAGS_ALREADY_OPEN = (1<<0) } netdata_socket_flags_t; typedef enum netdata_socket_src_ip_origin { NETDATA_EBPF_SRC_IP_ORIGIN_LOCAL, NETDATA_EBPF_SRC_IP_ORIGIN_EXTERNAL } netdata_socket_src_ip_origin_t; typedef struct netata_socket_plus { netdata_socket_t data; // Data read from database uint32_t pid; time_t last_update; netdata_socket_flags_t flags; struct { char src_ip[INET6_ADDRSTRLEN + 1]; // uint16_t src_port; char dst_ip[INET6_ADDRSTRLEN+ 1]; char dst_port[NI_MAXSERV + 1]; } socket_string; } netdata_socket_plus_t; extern ARAL *aral_socket_table; /** * Index used together previous structure */ typedef struct netdata_socket_idx { union netdata_ip_t saddr; //uint16_t sport; union netdata_ip_t daddr; uint16_t dport; uint32_t pid; } netdata_socket_idx_t; void ebpf_clean_port_structure(ebpf_network_viewer_port_list_t **clean); extern ebpf_network_viewer_port_list_t *listen_ports; void update_listen_table(uint16_t value, uint16_t proto, netdata_passive_connection_t *values); void ebpf_fill_ip_list_unsafe(ebpf_network_viewer_ip_list_t **out, ebpf_network_viewer_ip_list_t *in, char *table); void ebpf_parse_service_name_section(struct config *cfg); void ebpf_parse_ips_unsafe(char *ptr); void ebpf_parse_ports(char *ptr); void ebpf_socket_read_open_connections(BUFFER *buf, struct ebpf_module *em); void ebpf_socket_fill_publish_apps(uint32_t current_pid, netdata_socket_t *ns); extern struct config socket_config; extern netdata_ebpf_targets_t socket_targets[]; #endif