[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[for-8.0 v2 07/11] cryptodev-builtin: Detect akcipher capability
From: |
zhenwei pi |
Subject: |
[for-8.0 v2 07/11] cryptodev-builtin: Detect akcipher capability |
Date: |
Tue, 22 Nov 2022 22:07:52 +0800 |
Rather than exposing akcipher service/RSA algorithm to virtio crypto
device unconditionally, detect akcipher capability from akcipher
crypto framework. This avoids unsuccessful requests.
Signed-off-by: zhenwei pi <pizhenwei@bytedance.com>
---
backends/cryptodev-builtin.c | 18 +++++++++++++++---
1 file changed, 15 insertions(+), 3 deletions(-)
diff --git a/backends/cryptodev-builtin.c b/backends/cryptodev-builtin.c
index 4987abb7d6..94a02aeaf1 100644
--- a/backends/cryptodev-builtin.c
+++ b/backends/cryptodev-builtin.c
@@ -59,6 +59,19 @@ struct CryptoDevBackendBuiltin {
CryptoDevBackendBuiltinSession *sessions[MAX_NUM_SESSIONS];
};
+static void cryptodev_builtin_init_akcipher(CryptoDevBackend *backend)
+{
+ QCryptoAkCipherOptions opts;
+
+ opts.alg = QCRYPTO_AKCIPHER_ALG_RSA;
+ opts.u.rsa.padding_alg = QCRYPTO_RSA_PADDING_ALG_RAW;
+ if (qcrypto_akcipher_supports(&opts)) {
+ backend->conf.crypto_services |=
+ (1u << QCRYPTODEV_BACKEND_SERVICE_AKCIPHER);
+ backend->conf.akcipher_algo = 1u << VIRTIO_CRYPTO_AKCIPHER_RSA;
+ }
+}
+
static void cryptodev_builtin_init(
CryptoDevBackend *backend, Error **errp)
{
@@ -81,11 +94,9 @@ static void cryptodev_builtin_init(
backend->conf.crypto_services =
1u << QCRYPTODEV_BACKEND_SERVICE_CIPHER |
1u << QCRYPTODEV_BACKEND_SERVICE_HASH |
- 1u << QCRYPTODEV_BACKEND_SERVICE_MAC |
- 1u << QCRYPTODEV_BACKEND_SERVICE_AKCIPHER;
+ 1u << QCRYPTODEV_BACKEND_SERVICE_MAC;
backend->conf.cipher_algo_l = 1u << VIRTIO_CRYPTO_CIPHER_AES_CBC;
backend->conf.hash_algo = 1u << VIRTIO_CRYPTO_HASH_SHA1;
- backend->conf.akcipher_algo = 1u << VIRTIO_CRYPTO_AKCIPHER_RSA;
/*
* Set the Maximum length of crypto request.
* Why this value? Just avoid to overflow when
@@ -94,6 +105,7 @@ static void cryptodev_builtin_init(
backend->conf.max_size = LONG_MAX - sizeof(CryptoDevBackendOpInfo);
backend->conf.max_cipher_key_len = CRYPTODEV_BUITLIN_MAX_CIPHER_KEY_LEN;
backend->conf.max_auth_key_len = CRYPTODEV_BUITLIN_MAX_AUTH_KEY_LEN;
+ cryptodev_builtin_init_akcipher(backend);
cryptodev_backend_set_ready(backend, true);
}
--
2.20.1
- [for-8.0 v2 00/11] Refactor cryptodev, zhenwei pi, 2022/11/22
- [for-8.0 v2 01/11] cryptodev: Introduce cryptodev.json, zhenwei pi, 2022/11/22
- [for-8.0 v2 02/11] cryptodev: Remove 'name' & 'model' fields, zhenwei pi, 2022/11/22
- [for-8.0 v2 03/11] cryptodev: Introduce cryptodev alg type in QAPI, zhenwei pi, 2022/11/22
- [for-8.0 v2 04/11] cryptodev: Introduce server type in QAPI, zhenwei pi, 2022/11/22
- [for-8.0 v2 05/11] cryptodev: Introduce 'query-cryptodev' QMP command, zhenwei pi, 2022/11/22
- [for-8.0 v2 07/11] cryptodev-builtin: Detect akcipher capability,
zhenwei pi <=
- [for-8.0 v2 08/11] hmp: add cryptodev info command, zhenwei pi, 2022/11/22
- [for-8.0 v2 06/11] cryptodev: Support statistics, zhenwei pi, 2022/11/22
- [for-8.0 v2 10/11] cryptodev: support QoS, zhenwei pi, 2022/11/22
- [for-8.0 v2 09/11] cryptodev: Use CryptoDevBackendOpInfo for operation, zhenwei pi, 2022/11/22
- [for-8.0 v2 11/11] MAINTAINERS: add myself as the maintainer for cryptodev, zhenwei pi, 2022/11/22