[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH v3 06/12] cryptodev-builtin: Detect akcipher capability
From: |
zhenwei pi |
Subject: |
[PATCH v3 06/12] cryptodev-builtin: Detect akcipher capability |
Date: |
Sat, 28 Jan 2023 11:56:27 +0800 |
Rather than exposing akcipher service/RSA algorithm to virtio crypto
device unconditionally, detect akcipher capability from akcipher
crypto framework. This avoids unsuccessful requests.
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: zhenwei pi <pizhenwei@bytedance.com>
---
backends/cryptodev-builtin.c | 18 +++++++++++++++---
1 file changed, 15 insertions(+), 3 deletions(-)
diff --git a/backends/cryptodev-builtin.c b/backends/cryptodev-builtin.c
index c0fbb650d7..c45b5906c5 100644
--- a/backends/cryptodev-builtin.c
+++ b/backends/cryptodev-builtin.c
@@ -59,6 +59,19 @@ struct CryptoDevBackendBuiltin {
CryptoDevBackendBuiltinSession *sessions[MAX_NUM_SESSIONS];
};
+static void cryptodev_builtin_init_akcipher(CryptoDevBackend *backend)
+{
+ QCryptoAkCipherOptions opts;
+
+ opts.alg = QCRYPTO_AKCIPHER_ALG_RSA;
+ opts.u.rsa.padding_alg = QCRYPTO_RSA_PADDING_ALG_RAW;
+ if (qcrypto_akcipher_supports(&opts)) {
+ backend->conf.crypto_services |=
+ (1u << QCRYPTODEV_BACKEND_SERVICE_AKCIPHER);
+ backend->conf.akcipher_algo = 1u << VIRTIO_CRYPTO_AKCIPHER_RSA;
+ }
+}
+
static void cryptodev_builtin_init(
CryptoDevBackend *backend, Error **errp)
{
@@ -81,11 +94,9 @@ static void cryptodev_builtin_init(
backend->conf.crypto_services =
1u << QCRYPTODEV_BACKEND_SERVICE_CIPHER |
1u << QCRYPTODEV_BACKEND_SERVICE_HASH |
- 1u << QCRYPTODEV_BACKEND_SERVICE_MAC |
- 1u << QCRYPTODEV_BACKEND_SERVICE_AKCIPHER;
+ 1u << QCRYPTODEV_BACKEND_SERVICE_MAC;
backend->conf.cipher_algo_l = 1u << VIRTIO_CRYPTO_CIPHER_AES_CBC;
backend->conf.hash_algo = 1u << VIRTIO_CRYPTO_HASH_SHA1;
- backend->conf.akcipher_algo = 1u << VIRTIO_CRYPTO_AKCIPHER_RSA;
/*
* Set the Maximum length of crypto request.
* Why this value? Just avoid to overflow when
@@ -94,6 +105,7 @@ static void cryptodev_builtin_init(
backend->conf.max_size = LONG_MAX - sizeof(CryptoDevBackendOpInfo);
backend->conf.max_cipher_key_len = CRYPTODEV_BUITLIN_MAX_CIPHER_KEY_LEN;
backend->conf.max_auth_key_len = CRYPTODEV_BUITLIN_MAX_AUTH_KEY_LEN;
+ cryptodev_builtin_init_akcipher(backend);
cryptodev_backend_set_ready(backend, true);
}
--
2.34.1
- [PATCH v3 12/12] MAINTAINERS: add myself as the maintainer for cryptodev, (continued)
- [PATCH v3 12/12] MAINTAINERS: add myself as the maintainer for cryptodev, zhenwei pi, 2023/01/19
- Re: [PATCH v3 00/12] Refactor cryptodev, Michael S. Tsirkin, 2023/01/27
- [PATCH v3 00/12] Refactor cryptodev, zhenwei pi, 2023/01/27
- [PATCH v3 01/12] cryptodev: Introduce cryptodev.json, zhenwei pi, 2023/01/27
- [PATCH v3 02/12] cryptodev: Remove 'name' & 'model' fields, zhenwei pi, 2023/01/27
- [PATCH v3 03/12] cryptodev: Introduce cryptodev alg type in QAPI, zhenwei pi, 2023/01/27
- [PATCH v3 04/12] cryptodev: Introduce server type in QAPI, zhenwei pi, 2023/01/27
- [PATCH v3 05/12] cryptodev: Introduce 'query-cryptodev' QMP command, zhenwei pi, 2023/01/27
- [PATCH v3 06/12] cryptodev-builtin: Detect akcipher capability,
zhenwei pi <=
- [PATCH v3 07/12] hmp: add cryptodev info command, zhenwei pi, 2023/01/27
- [PATCH v3 08/12] cryptodev: Use CryptoDevBackendOpInfo for operation, zhenwei pi, 2023/01/27
- [PATCH v3 09/12] cryptodev: Account statistics, zhenwei pi, 2023/01/27
- [PATCH v3 10/12] cryptodev: support QoS, zhenwei pi, 2023/01/27
- [PATCH v3 11/12] cryptodev: Support query-stats QMP command, zhenwei pi, 2023/01/27
- [PATCH v3 12/12] MAINTAINERS: add myself as the maintainer for cryptodev, zhenwei pi, 2023/01/27
- Re: [PATCH v3 00/12] Refactor cryptodev, Michael S. Tsirkin, 2023/01/28