fs/ext4/ext4_crypto.h

   1 /*
   2  * linux/fs/ext4/ext4_crypto.h
   3  *
   4  * Copyright (C) 2015, Google, Inc.
   5  *
   6  * This contains encryption header content for ext4
   7  *
   8  * Written by Michael Halcrow, 2015.
   9  */
  10
  11 #ifndef _EXT4_CRYPTO_H
  12 #define _EXT4_CRYPTO_H
  13
  14 #include <linux/fs.h>
  15
  16 #define EXT4_KEY_DESCRIPTOR_SIZE 8
  17
  18 /* Policy provided via an ioctl on the topmost directory */
  19 struct ext4_encryption_policy {
  20         char version;
  21         char contents_encryption_mode;
  22         char filenames_encryption_mode;
  23         char flags;
  24         char master_key_descriptor[EXT4_KEY_DESCRIPTOR_SIZE];
  25 } __attribute__((__packed__));
  26
  27 #define EXT4_ENCRYPTION_CONTEXT_FORMAT_V1 1
  28 #define EXT4_KEY_DERIVATION_NONCE_SIZE 16
  29
  30 #define EXT4_POLICY_FLAGS_PAD_4         0x00
  31 #define EXT4_POLICY_FLAGS_PAD_8         0x01
  32 #define EXT4_POLICY_FLAGS_PAD_16        0x02
  33 #define EXT4_POLICY_FLAGS_PAD_32        0x03
  34 #define EXT4_POLICY_FLAGS_PAD_MASK      0x03
  35 #define EXT4_POLICY_FLAGS_VALID         0x03
  36
  37 /**
  38  * Encryption context for inode
  39  *
  40  * Protector format:
  41  *  1 byte: Protector format (1 = this version)
  42  *  1 byte: File contents encryption mode
  43  *  1 byte: File names encryption mode
  44  *  1 byte: Reserved
  45  *  8 bytes: Master Key descriptor
  46  *  16 bytes: Encryption Key derivation nonce
  47  */
  48 struct ext4_encryption_context {
  49         char format;
  50         char contents_encryption_mode;
  51         char filenames_encryption_mode;
  52         char flags;
  53         char master_key_descriptor[EXT4_KEY_DESCRIPTOR_SIZE];
  54         char nonce[EXT4_KEY_DERIVATION_NONCE_SIZE];
  55 } __attribute__((__packed__));
  56
  57 /* Encryption parameters */
  58 #define EXT4_XTS_TWEAK_SIZE 16
  59 #define EXT4_AES_128_ECB_KEY_SIZE 16
  60 #define EXT4_AES_256_GCM_KEY_SIZE 32
  61 #define EXT4_AES_256_CBC_KEY_SIZE 32
  62 #define EXT4_AES_256_CTS_KEY_SIZE 32
  63 #define EXT4_AES_256_XTS_KEY_SIZE 64
  64 #define EXT4_MAX_KEY_SIZE 64
  65
  66 #define EXT4_KEY_DESC_PREFIX "ext4:"
  67 #define EXT4_KEY_DESC_PREFIX_SIZE 5
  68
  69 /* This is passed in from userspace into the kernel keyring */
  70 struct ext4_encryption_key {
  71         __u32 mode;
  72         char raw[EXT4_MAX_KEY_SIZE];
  73         __u32 size;
  74 } __attribute__((__packed__));
  75
  76 struct ext4_crypt_info {
  77         char            ci_data_mode;
  78         char            ci_filename_mode;
  79         char            ci_flags;
  80         struct crypto_ablkcipher *ci_ctfm;
  81         char            ci_master_key[EXT4_KEY_DESCRIPTOR_SIZE];
  82 };
  83
  84 #define EXT4_CTX_REQUIRES_FREE_ENCRYPT_FL             0x00000001
  85 #define EXT4_WRITE_PATH_FL                            0x00000002
  86
  87 struct ext4_crypto_ctx {
  88         union {
  89                 struct {
  90                         struct page *bounce_page;       /* Ciphertext page */
  91                         struct page *control_page;      /* Original page  */
  92                 } w;
  93                 struct {
  94                         struct bio *bio;
  95                         struct work_struct work;
  96                 } r;
  97                 struct list_head free_list;     /* Free list */
  98         };
  99         char flags;                      /* Flags */
 100         char mode;                       /* Encryption mode for tfm */
 101 };
 102
 103 struct ext4_completion_result {
 104         struct completion completion;
 105         int res;
 106 };
 107
 108 #define DECLARE_EXT4_COMPLETION_RESULT(ecr) \
 109         struct ext4_completion_result ecr = { \
 110                 COMPLETION_INITIALIZER((ecr).completion), 0 }
 111
 112 static inline int ext4_encryption_key_size(int mode)
 113 {
 114         switch (mode) {
 115         case EXT4_ENCRYPTION_MODE_AES_256_XTS:
 116                 return EXT4_AES_256_XTS_KEY_SIZE;
 117         case EXT4_ENCRYPTION_MODE_AES_256_GCM:
 118                 return EXT4_AES_256_GCM_KEY_SIZE;
 119         case EXT4_ENCRYPTION_MODE_AES_256_CBC:
 120                 return EXT4_AES_256_CBC_KEY_SIZE;
 121         case EXT4_ENCRYPTION_MODE_AES_256_CTS:
 122                 return EXT4_AES_256_CTS_KEY_SIZE;
 123         default:
 124                 BUG();
 125         }
 126         return 0;
 127 }
 128
 129 #define EXT4_FNAME_NUM_SCATTER_ENTRIES  4
 130 #define EXT4_CRYPTO_BLOCK_SIZE          16
 131 #define EXT4_FNAME_CRYPTO_DIGEST_SIZE   32
 132
 133 struct ext4_str {
 134         unsigned char *name;
 135         u32 len;
 136 };
 137
 138 /**
 139  * For encrypted symlinks, the ciphertext length is stored at the beginning
 140  * of the string in little-endian format.
 141  */
 142 struct ext4_encrypted_symlink_data {
 143         __le16 len;
 144         char encrypted_path[1];
 145 } __attribute__((__packed__));
 146
 147 /**
 148  * This function is used to calculate the disk space required to
 149  * store a filename of length l in encrypted symlink format.
 150  */
 151 static inline u32 encrypted_symlink_data_len(u32 l)
 152 {
 153         if (l < EXT4_CRYPTO_BLOCK_SIZE)
 154                 l = EXT4_CRYPTO_BLOCK_SIZE;
 155         return (l + sizeof(struct ext4_encrypted_symlink_data) - 1);
 156 }
 157
 158 #endif  /* _EXT4_CRYPTO_H */