mirror of
https://github.com/torvalds/linux.git
synced 2025-12-07 20:06:24 +00:00
3a597e6e97
For the HMAC-MD5 computations in NTLMv2, use the HMAC-MD5 library
instead of a "hmac(md5)" crypto_shash. This is simpler and faster.
With the library there's no need to allocate memory, no need to handle
errors, and the HMAC-MD5 code is accessed directly without inefficient
indirect calls and other unnecessary API overhead.
To preserve the existing behavior of NTLMv2 support being disabled when
the kernel is booted with "fips=1", make ksmbd_auth_ntlmv2() check
fips_enabled itself. Previously it relied on the error from
crypto_alloc_shash("hmac(md5)") being bubbled up. I don't know for sure
that this is actually needed, but this preserves the existing behavior.
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
50 lines
1.1 KiB
C
50 lines
1.1 KiB
C
/* SPDX-License-Identifier: GPL-2.0-or-later */
|
|
/*
|
|
* Copyright (C) 2019 Samsung Electronics Co., Ltd.
|
|
*/
|
|
|
|
#ifndef __CRYPTO_CTX_H__
|
|
#define __CRYPTO_CTX_H__
|
|
|
|
#include <crypto/hash.h>
|
|
#include <crypto/aead.h>
|
|
|
|
enum {
|
|
CRYPTO_SHASH_CMACAES = 0,
|
|
CRYPTO_SHASH_MAX,
|
|
};
|
|
|
|
enum {
|
|
CRYPTO_AEAD_AES_GCM = 16,
|
|
CRYPTO_AEAD_AES_CCM,
|
|
CRYPTO_AEAD_MAX,
|
|
};
|
|
|
|
enum {
|
|
CRYPTO_BLK_ECBDES = 32,
|
|
CRYPTO_BLK_MAX,
|
|
};
|
|
|
|
struct ksmbd_crypto_ctx {
|
|
struct list_head list;
|
|
|
|
struct shash_desc *desc[CRYPTO_SHASH_MAX];
|
|
struct crypto_aead *ccmaes[CRYPTO_AEAD_MAX];
|
|
};
|
|
|
|
#define CRYPTO_CMACAES(c) ((c)->desc[CRYPTO_SHASH_CMACAES])
|
|
|
|
#define CRYPTO_CMACAES_TFM(c) ((c)->desc[CRYPTO_SHASH_CMACAES]->tfm)
|
|
|
|
#define CRYPTO_GCM(c) ((c)->ccmaes[CRYPTO_AEAD_AES_GCM])
|
|
#define CRYPTO_CCM(c) ((c)->ccmaes[CRYPTO_AEAD_AES_CCM])
|
|
|
|
void ksmbd_release_crypto_ctx(struct ksmbd_crypto_ctx *ctx);
|
|
struct ksmbd_crypto_ctx *ksmbd_crypto_ctx_find_cmacaes(void);
|
|
struct ksmbd_crypto_ctx *ksmbd_crypto_ctx_find_gcm(void);
|
|
struct ksmbd_crypto_ctx *ksmbd_crypto_ctx_find_ccm(void);
|
|
void ksmbd_crypto_destroy(void);
|
|
int ksmbd_crypto_create(void);
|
|
|
|
#endif /* __CRYPTO_CTX_H__ */
|