crypto: scatterlist handling improvements
Subsystems (14)
v2 cover crypto: scatterlist handling improvements
This series cleans up and optimizes the code that translates between scatterlists (the input to the API) and virtual addresses (what software implementations operate on) for skcipher and aead algorithms.
This takes the form of cleanups and optimizations to the skcipher_walk functions and a rework of the underlying scatter_walk functions.
This series is organized as follows:
- Patch 1-8 are cleanups and optimizations for skcipher_walk.
- Patch 9-10 are cleanups for drivers that were unnecessarily using scatter_walk when simpler approaches existed.
- Patch 11-15 improve scatter_walk, introducing easier-to-use functions and optimizing performance in some cases.
- Patch 16-27 convert users to use the new functions.
- Patch 28 removes functions that are no longer needed.
- Patch 29 optimizes the walker on !HIGHMEM platforms to start returning data segments that can cross a page boundary. This can significantly improve performance in cases where messages can cross pages, such as IPsec. Previously there was a large overhead caused by packets being unnecessarily divided into multiple parts by the walker, including hitting skcipher_next_slow() which uses a single-block bounce buffer.
Changed in v2:
- Added comment to scatterwalk_done_dst().
- Added scatterwalk_get_sglist() and use it in net/tls/.
- Dropped the keywrap patch, as keywrap is being removed by
https://lore.kernel.org/r/[email protected]
Eric Biggers (29):
crypto: skcipher - document skcipher_walk_done() and rename some vars
crypto: skcipher - remove unnecessary page alignment of bounce buffer
crypto: skcipher - remove redundant clamping to page size
crypto: skcipher - remove redundant check for SKCIPHER_WALK_SLOW
crypto: skcipher - fold skcipher_walk_skcipher() into
skcipher_walk_virt()
crypto: skcipher - clean up initialization of skcipher_walk::flags
crypto: skcipher - optimize initializing skcipher_walk fields
crypto: skcipher - call cond_resched() directly
crypto: omap - switch from scatter_walk to plain offset
crypto: powerpc/p10-aes-gcm - simplify handling of linear associated
data
crypto: scatterwalk - move to next sg entry just in time
crypto: scatterwalk - add new functions for skipping data
crypto: scatterwalk - add new functions for iterating through data
crypto: scatterwalk - add new functions for copying data
crypto: scatterwalk - add scatterwalk_get_sglist()
crypto: skcipher - use scatterwalk_start_at_pos()
crypto: aegis - use the new scatterwalk functions
crypto: arm/ghash - use the new scatterwalk functions
crypto: arm64 - use the new scatterwalk functions
crypto: nx - use the new scatterwalk functions
crypto: s390/aes-gcm - use the new scatterwalk functions
crypto: s5p-sss - use the new scatterwalk functions
crypto: stm32 - use the new scatterwalk functions
crypto: x86/aes-gcm - use the new scatterwalk functions
crypto: x86/aegis - use the new scatterwalk functions net/tls: use the new scatterwalk functions
crypto: skcipher - use the new scatterwalk functions
crypto: scatterwalk - remove obsolete functions
crypto: scatterwalk - don't split at page boundaries when !HIGHMEM
arch/arm/crypto/ghash-ce-glue.c | 15 +- arch/arm64/crypto/aes-ce-ccm-glue.c | 17 +- arch/arm64/crypto/ghash-ce-glue.c | 16 +- arch/arm64/crypto/sm4-ce-ccm-glue.c | 27 ++- arch/arm64/crypto/sm4-ce-gcm-glue.c | 31 ++- arch/powerpc/crypto/aes-gcm-p10-glue.c | 8 +- arch/s390/crypto/aes_s390.c | 33 ++-- arch/x86/crypto/aegis128-aesni-glue.c | 10 +- arch/x86/crypto/aesni-intel_glue.c | 28 +-- crypto/aegis128-core.c | 10 +- crypto/scatterwalk.c | 91 +++++---- crypto/skcipher.c | 253 ++++++++++--------------- drivers/crypto/nx/nx-aes-ccm.c | 16 +- drivers/crypto/nx/nx-aes-gcm.c | 17 +- drivers/crypto/nx/nx.c | 31 +-- drivers/crypto/nx/nx.h | 3 - drivers/crypto/omap-aes.c | 34 ++-- drivers/crypto/omap-aes.h | 6 +- drivers/crypto/omap-des.c | 40 ++-- drivers/crypto/s5p-sss.c | 38 ++-- drivers/crypto/stm32/stm32-cryp.c | 34 ++-- include/crypto/internal/skcipher.h | 2 +- include/crypto/scatterwalk.h | 203 ++++++++++++++++---- net/tls/tls_device_fallback.c | 31 +-- 24 files changed, 473 insertions(+), 521 deletions(-)
base-commit: 7b6092ee7a4ce2d03dc65b87537889e8e1e0ab95
prerequisite-patch-id: a0414cca60a72ee1056cce0a74175103b19e0e77
Signature · 1 line
2.47.1
PATCH v2 1/29 crypto: skcipher - document skcipher_walk_done() and rename some vars
From: Eric Biggers <[email protected]>
skcipher_walk_done() has an unusual calling convention, and some of its local variables have unclear names. Document it and rename variables to make it a bit clearer what is going on. No change in behavior.
--- crypto/skcipher.c | 50 ++++++++++++++++++++---------- include/crypto/internal/skcipher.h | 2 +- 2 files changed, 35 insertions(+), 17 deletions(-)
crypto/skcipher.c +34 -16
@@ -87,21 +87,39 @@ static int skcipher_done_slow(struct skcipher_walk *walk, unsigned int bsize) addr =skcipher_get_spot (addr, bsize);scatterwalk_copychunks (addr, &walk->out, bsize,1 );return 0 ; } -int skcipher_walk_done (struct skcipher_walk *walk,int err) +/** +* skcipher_walk_done() - finish one step of a skcipher_walk +* @walk: the skcipher_walk +* @res: number of bytes *not* processed (>= 0) from walk->nbytes, +* or a -errno value to terminate the walk due to an error +* +* This function cleans up after one step of walking through the source and +* destination scatterlists, and advances to the next step if applicable. +* walk->nbytes is set to the number of bytes available in the next step, +* walk->total is set to the new total number of bytes remaining, and +* walk->{src,dst}.virt.addr is set to the next pair of data pointers. If there +* is no more data, or if an error occurred (i.e. -errno return), then +* walk->nbytes and walk->total are set to 0 and all resources owned by the +* skcipher_walk are freed. +* +* Return: 0 or a -errno value. If @res was a -errno value then it will be +* returned, but other errors may occur too. +*/ +int skcipher_walk_done (struct skcipher_walk *walk,int res) { -unsigned int n = walk->nbytes; -unsigned int nbytes =0 ; +unsigned int n = walk->nbytes;/* num bytes processed this step */ +unsigned int total =0 ;/* new total remaining */ if (!n) goto finish; -if (likely (err >=0 )) { - n -= err; - nbytes = walk->total - n; +if (likely (res >=0 )) { + n -= res;/* subtract num bytes *not* processed */ + total = walk->total - n; }if (likely (!(walk->flags & (SKCIPHER_WALK_SLOW |SKCIPHER_WALK_COPY |SKCIPHER_WALK_DIFF )))) {
@@ -113,35 +131,35 @@ int skcipher_walk_done(struct skcipher_walk *walk, int err) }else if (walk->flags &SKCIPHER_WALK_COPY ) {skcipher_map_dst (walk);memcpy (walk->dst.virt.addr, walk->page, n);skcipher_unmap_dst (walk); }else if (unlikely (walk->flags &SKCIPHER_WALK_SLOW )) { -if (err >0 ) { +if (res >0 ) {/* * Didn't process all bytes. Either the algorithm is * broken, or this was the last step and it turned out * the message wasn't evenly divisible into blocks but * the algorithm requires it. */ - err = -EINVAL ; - nbytes =0 ; + res = -EINVAL ; + total =0 ; }else n =skcipher_done_slow (walk, n); } -if (err >0 ) - err =0 ; +if (res >0 ) + res =0 ; - walk->total = nbytes; + walk->total = total; walk->nbytes =0 ;scatterwalk_advance (&walk->in, n);scatterwalk_advance (&walk->out, n); -scatterwalk_done (&walk->in,0 , nbytes); -scatterwalk_done (&walk->out,1 , nbytes); +scatterwalk_done (&walk->in,0 , total); +scatterwalk_done (&walk->out,1 , total); -if (nbytes) { +if (total) {crypto_yield (walk->flags &SKCIPHER_WALK_SLEEP ?CRYPTO_TFM_REQ_MAY_SLEEP :0 );return skcipher_walk_next (walk); }
@@ -156,11 +174,11 @@ int skcipher_walk_done(struct skcipher_walk *walk, int err)kfree (walk->buffer);if (walk->page)free_page ((unsigned long )walk->page); out: -return err; +return res; }EXPORT_SYMBOL_GPL (skcipher_walk_done);static int skcipher_next_slow (struct skcipher_walk *walk,unsigned int bsize) {
include/crypto/internal/skcipher.h +1 -1
@@ -194,11 +194,11 @@ void crypto_unregister_lskcipher(struct lskcipher_alg *alg);int crypto_register_lskciphers (struct lskcipher_alg *algs,int count);void crypto_unregister_lskciphers (struct lskcipher_alg *algs,int count);int lskcipher_register_instance (struct crypto_template *tmpl,struct lskcipher_instance *inst); -int skcipher_walk_done (struct skcipher_walk *walk,int err); +int skcipher_walk_done (struct skcipher_walk *walk,int res);int skcipher_walk_virt (struct skcipher_walk *walk,struct skcipher_request *req,bool atomic);int skcipher_walk_aead_encrypt (struct skcipher_walk *walk,struct aead_request *req,bool atomic);
Signature · 1 line
2.47.1
PATCH v2 2/29 crypto: skcipher - remove unnecessary page alignment of bounce buffer
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
In the slow path of skcipher_walk where it uses a slab bounce buffer for the data and/or IV, do not bother to avoid crossing a page boundary in the part(s) of this buffer that are used, and do not bother to allocate extra space in the buffer for that purpose. The buffer is accessed only by virtual address, so pages are irrelevant for it.
This logic may have been present due to the physical address support in skcipher_walk, but that has now been removed. Or it may have been present to be consistent with the fast path that currently does not hand back addresses that span pages, but that behavior is a side effect of the pages being "mapped" one by one and is not actually a requirement.
--- crypto/skcipher.c | 62 ++++++++++++----------------------------------- 1 file changed, 15 insertions(+), 47 deletions(-)
crypto/skcipher.c +15 -47
@@ -61,32 +61,20 @@ static inline void skcipher_unmap_dst(struct skcipher_walk *walk)static inline gfp_t skcipher_walk_gfp (struct skcipher_walk *walk) {return walk->flags &SKCIPHER_WALK_SLEEP ?GFP_KERNEL :GFP_ATOMIC ; } -/* Get a spot of the specified length that does not straddle a page. -* The caller needs to ensure that there is enough space for this operation. -*/ -static inline u8 *skcipher_get_spot (u8 *start,unsigned int len) -{ -u8 *end_page = (u8 *)(((unsigned long )(start + len -1 )) &PAGE_MASK ); - -return max (start, end_page); -} -static inline struct skcipher_alg *__crypto_skcipher_alg (struct crypto_alg *alg) { return container_of(alg, struct skcipher_alg, base); }static int skcipher_done_slow (struct skcipher_walk *walk,unsigned int bsize) { -u8 *addr; +u8 *addr =PTR_ALIGN (walk->buffer, walk->alignmask +1 ); - addr = (u8 *)ALIGN ((unsigned long )walk->buffer, walk->alignmask +1 ); - addr =skcipher_get_spot (addr, bsize);scatterwalk_copychunks (addr, &walk->out, bsize,1 );return 0 ; }/**
@@ -181,37 +169,26 @@ int skcipher_walk_done(struct skcipher_walk *walk, int res)EXPORT_SYMBOL_GPL (skcipher_walk_done);static int skcipher_next_slow (struct skcipher_walk *walk,unsigned int bsize) {unsigned alignmask = walk->alignmask; -unsigned a;unsigned n;u8 *buffer;if (!walk->buffer) walk->buffer = walk->page; buffer = walk->buffer; -if (buffer) - goto ok; - -/* Start with the minimum alignment of kmalloc. */ - a =crypto_tfm_ctx_alignment () -1 ; - n = bsize; - -/* Minimum size to align buffer by alignmask. */ - n += alignmask & ~a; - -/* Minimum size to ensure buffer does not straddle a page. */ - n += (bsize -1 ) & ~(alignmask | a); - - buffer =kzalloc (n,skcipher_walk_gfp (walk)); -if (!buffer) -return skcipher_walk_done (walk, -ENOMEM ); - walk->buffer = buffer; -ok: +if (!buffer) { +/* Min size for a buffer of bsize bytes aligned to alignmask */ + n = bsize + (alignmask & ~(crypto_tfm_ctx_alignment () -1 )); + + buffer =kzalloc (n,skcipher_walk_gfp (walk)); +if (!buffer) +return skcipher_walk_done (walk, -ENOMEM ); + walk->buffer = buffer; + } walk->dst.virt.addr =PTR_ALIGN (buffer, alignmask +1 ); - walk->dst.virt.addr =skcipher_get_spot (walk->dst.virt.addr, bsize); walk->src.virt.addr = walk->dst.virt.addr;scatterwalk_copychunks (walk->src.virt.addr, &walk->in, bsize,0 ); walk->nbytes = bsize;
@@ -294,34 +271,25 @@ static int skcipher_walk_next(struct skcipher_walk *walk)return skcipher_next_fast (walk); }static int skcipher_copy_iv (struct skcipher_walk *walk) { -unsigned a =crypto_tfm_ctx_alignment () -1 ;unsigned alignmask = walk->alignmask;unsigned ivsize = walk->ivsize; -unsigned bs = walk->stride; -unsigned aligned_bs; +unsigned aligned_stride =ALIGN (walk->stride, alignmask +1 );unsigned size;u8 *iv; - aligned_bs =ALIGN (bs, alignmask +1 ); - -/* Minimum size to align buffer by alignmask. */ - size = alignmask & ~a; - - size += aligned_bs + ivsize; - -/* Minimum size to ensure buffer does not straddle a page. */ - size += (bs -1 ) & ~(alignmask | a); +/* Min size for a buffer of stride + ivsize, aligned to alignmask */ + size = aligned_stride + ivsize + + (alignmask & ~(crypto_tfm_ctx_alignment () -1 )); walk->buffer =kmalloc (size,skcipher_walk_gfp (walk));if (!walk->buffer)return -ENOMEM ; - iv =PTR_ALIGN (walk->buffer, alignmask +1 ); - iv =skcipher_get_spot (iv, bs) + aligned_bs; + iv =PTR_ALIGN (walk->buffer, alignmask +1 ) + aligned_stride; walk->iv =memcpy (iv, walk->iv, walk->ivsize);return 0 ; }
Signature · 1 line
2.47.1
PATCH v2 3/29 crypto: skcipher - remove redundant clamping to page size
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
In the case where skcipher_walk_next() allocates a bounce page, that page by definition has size PAGE_SIZE. The number of bytes to copy 'n' is guaranteed to fit in it, since earlier in the function it was clamped to be at most a page. Therefore remove the unnecessary logic that tried to clamp 'n' again to fit in the bounce page.
--- crypto/skcipher.c | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-)
crypto/skcipher.c +1 -5
@@ -248,28 +248,24 @@ static int skcipher_walk_next(struct skcipher_walk *walk)return skcipher_walk_done (walk, -EINVAL ); slow_path:return skcipher_next_slow (walk, bsize); } + walk->nbytes = n;if (unlikely ((walk->in.offset | walk->out.offset) & walk->alignmask)) {if (!walk->page) {gfp_t gfp =skcipher_walk_gfp (walk); walk->page = (void *)__get_free_page (gfp);if (!walk->page) goto slow_path; } - - walk->nbytes =min_t (unsigned, n, -PAGE_SIZE -offset_in_page (walk->page)); walk->flags |=SKCIPHER_WALK_COPY ;return skcipher_next_copy (walk); } - walk->nbytes = n; -return skcipher_next_fast (walk); }static int skcipher_copy_iv (struct skcipher_walk *walk) {
Signature · 1 line
2.47.1
PATCH v2 4/29 crypto: skcipher - remove redundant check for SKCIPHER_WALK_SLOW
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
In skcipher_walk_done(), remove the check for SKCIPHER_WALK_SLOW because it is always true. All other flags (and lack thereof) were checked earlier in the function, leaving SKCIPHER_WALK_SLOW as the only remaining possibility.
--- crypto/skcipher.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
crypto/skcipher.c +1 -1
@@ -118,11 +118,11 @@ int skcipher_walk_done(struct skcipher_walk *walk, int res) goto unmap_src; }else if (walk->flags &SKCIPHER_WALK_COPY ) {skcipher_map_dst (walk);memcpy (walk->dst.virt.addr, walk->page, n);skcipher_unmap_dst (walk); - }else if (unlikely (walk->flags &SKCIPHER_WALK_SLOW )) { + }else {/* SKCIPHER_WALK_SLOW */ if (res >0 ) {/* * Didn't process all bytes. Either the algorithm is * broken, or this was the last step and it turned out * the message wasn't evenly divisible into blocks but
Signature · 1 line
2.47.1
PATCH v2 5/29 crypto: skcipher - fold skcipher_walk_skcipher() into skcipher_walk_virt()
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Fold skcipher_walk_skcipher() into skcipher_walk_virt() which is its only remaining caller. No change in behavior.
--- crypto/skcipher.c | 23 ++++++++--------------- 1 file changed, 8 insertions(+), 15 deletions(-)
crypto/skcipher.c +8 -15
@@ -304,23 +304,26 @@ static int skcipher_walk_first(struct skcipher_walk *walk) walk->page =NULL ;return skcipher_walk_next (walk); } -static int skcipher_walk_skcipher (struct skcipher_walk *walk, -struct skcipher_request *req) +int skcipher_walk_virt (struct skcipher_walk *walk, +struct skcipher_request *req,bool atomic) {struct crypto_skcipher *tfm =crypto_skcipher_reqtfm (req);struct skcipher_alg *alg =crypto_skcipher_alg (tfm); +int err =0 ; + +might_sleep_if (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ); walk->total = req->cryptlen; walk->nbytes =0 ; walk->iv = req->iv; walk->oiv = req->iv;if (unlikely (!walk->total)) -return 0 ; + goto out;scatterwalk_start (&walk->in, req->src);scatterwalk_start (&walk->out, req->dst); walk->flags &= ~SKCIPHER_WALK_SLEEP ;
@@ -334,22 +337,12 @@ static int skcipher_walk_skcipher(struct skcipher_walk *walk,if (alg->co.base.cra_type != &crypto_skcipher_type) walk->stride = alg->co.chunksize;else walk->stride = alg->walksize; -return skcipher_walk_first (walk); -} - -int skcipher_walk_virt (struct skcipher_walk *walk, -struct skcipher_request *req,bool atomic) -{ -int err; - -might_sleep_if (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ); - - err =skcipher_walk_skcipher (walk, req); - + err =skcipher_walk_first (walk); +out: walk->flags &= atomic ? ~SKCIPHER_WALK_SLEEP : ~0 ;return err; }EXPORT_SYMBOL_GPL (skcipher_walk_virt);
Signature · 1 line
2.47.1
PATCH v2 6/29 crypto: skcipher - clean up initialization of skcipher_walk::flags
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
- Initialize SKCIPHER_WALK_SLEEP in a consistent way, and check for atomic=true at the same time as CRYPTO_TFM_REQ_MAY_SLEEP. Technically atomic=true only needs to apply after the first step, but it is very rarely used. We should optimize for the common case. So, check 'atomic' alongside CRYPTO_TFM_REQ_MAY_SLEEP. This is more efficient.
- Initialize flags other than SKCIPHER_WALK_SLEEP to 0 rather than preserving them. No caller actually initializes the flags, which makes it impossible to use their original values for anything. Indeed, that does not happen and all meaningful flags get overridden anyway. It may have been thought that just clearing one flag would be faster than clearing all flags, but that's not the case as the former is a read-write operation whereas the latter is just a write.
- Move the explicit clearing of SKCIPHER_WALK_SLOW, SKCIPHER_WALK_COPY, and SKCIPHER_WALK_DIFF into skcipher_walk_done(), since it is now only needed on non-first steps.
--- crypto/skcipher.c | 39 +++++++++++++-------------------------- 1 file changed, 13 insertions(+), 26 deletions(-)
crypto/skcipher.c +13 -26
@@ -146,10 +146,12 @@ int skcipher_walk_done(struct skcipher_walk *walk, int res)scatterwalk_done (&walk->out,1 , total);if (total) {crypto_yield (walk->flags &SKCIPHER_WALK_SLEEP ?CRYPTO_TFM_REQ_MAY_SLEEP :0 ); + walk->flags &= ~(SKCIPHER_WALK_SLOW |SKCIPHER_WALK_COPY | +SKCIPHER_WALK_DIFF );return skcipher_walk_next (walk); } finish:/* Short-circuit for the common/fast path. */
@@ -233,13 +235,10 @@ static int skcipher_next_fast(struct skcipher_walk *walk)static int skcipher_walk_next (struct skcipher_walk *walk) {unsigned int bsize;unsigned int n; - walk->flags &= ~(SKCIPHER_WALK_SLOW |SKCIPHER_WALK_COPY | -SKCIPHER_WALK_DIFF ); - n = walk->total; bsize =min (walk->stride,max (n, walk->blocksize)); n =scatterwalk_clamp (&walk->in, n); n =scatterwalk_clamp (&walk->out, n);
@@ -309,55 +308,53 @@ static int skcipher_walk_first(struct skcipher_walk *walk)int skcipher_walk_virt (struct skcipher_walk *walk,struct skcipher_request *req,bool atomic) {struct crypto_skcipher *tfm =crypto_skcipher_reqtfm (req);struct skcipher_alg *alg =crypto_skcipher_alg (tfm); -int err =0 ;might_sleep_if (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ); walk->total = req->cryptlen; walk->nbytes =0 ; walk->iv = req->iv; walk->oiv = req->iv; +if ((req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ) && !atomic) + walk->flags =SKCIPHER_WALK_SLEEP ; +else + walk->flags =0 ;if (unlikely (!walk->total)) - goto out; +return 0 ;scatterwalk_start (&walk->in, req->src);scatterwalk_start (&walk->out, req->dst); - walk->flags &= ~SKCIPHER_WALK_SLEEP ; - walk->flags |= req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ? -SKCIPHER_WALK_SLEEP :0 ; - walk->blocksize =crypto_skcipher_blocksize (tfm); walk->ivsize =crypto_skcipher_ivsize (tfm); walk->alignmask =crypto_skcipher_alignmask (tfm);if (alg->co.base.cra_type != &crypto_skcipher_type) walk->stride = alg->co.chunksize;else walk->stride = alg->walksize; - err =skcipher_walk_first (walk); -out: - walk->flags &= atomic ? ~SKCIPHER_WALK_SLEEP : ~0 ; - -return err; +return skcipher_walk_first (walk); }EXPORT_SYMBOL_GPL (skcipher_walk_virt);static int skcipher_walk_aead_common (struct skcipher_walk *walk,struct aead_request *req,bool atomic) {struct crypto_aead *tfm =crypto_aead_reqtfm (req); -int err; walk->nbytes =0 ; walk->iv = req->iv; walk->oiv = req->iv; +if ((req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ) && !atomic) + walk->flags =SKCIPHER_WALK_SLEEP ; +else + walk->flags =0 ;if (unlikely (!walk->total))return 0 ;scatterwalk_start (&walk->in, req->src);
@@ -367,26 +364,16 @@ static int skcipher_walk_aead_common(struct skcipher_walk *walk,scatterwalk_copychunks (NULL , &walk->out, req->assoclen,2 );scatterwalk_done (&walk->in,0 , walk->total);scatterwalk_done (&walk->out,0 , walk->total); -if (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ) - walk->flags |=SKCIPHER_WALK_SLEEP ; -else - walk->flags &= ~SKCIPHER_WALK_SLEEP ; - walk->blocksize =crypto_aead_blocksize (tfm); walk->stride =crypto_aead_chunksize (tfm); walk->ivsize =crypto_aead_ivsize (tfm); walk->alignmask =crypto_aead_alignmask (tfm); - err =skcipher_walk_first (walk); - -if (atomic) - walk->flags &= ~SKCIPHER_WALK_SLEEP ; - -return err; +return skcipher_walk_first (walk); }int skcipher_walk_aead_encrypt (struct skcipher_walk *walk,struct aead_request *req,bool atomic) {
Signature · 1 line
2.47.1
PATCH v2 7/29 crypto: skcipher - optimize initializing skcipher_walk fields
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
The helper functions like crypto_skcipher_blocksize() take in a pointer to a tfm object, but they actually return properties of the algorithm. As the Linux kernel is compiled with -fno-strict-aliasing, the compiler has to assume that the writes to struct skcipher_walk could clobber the tfm's pointer to its algorithm. Thus it gets repeatedly reloaded in the generated code. Therefore, replace the use of these helper functions with staightforward accesses to the struct fields.
Note that while *users* of the skcipher and aead APIs are supposed to use the helper functions, this particular code is part of the API *implementation* in crypto/skcipher.c, which already accesses the algorithm struct directly in many cases. So there is no reason to prefer the helper functions here.
--- crypto/skcipher.c | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-)
crypto/skcipher.c +10 -10
@@ -306,12 +306,12 @@ static int skcipher_walk_first(struct skcipher_walk *walk) }int skcipher_walk_virt (struct skcipher_walk *walk,struct skcipher_request *req,bool atomic) { -struct crypto_skcipher *tfm =crypto_skcipher_reqtfm (req); -struct skcipher_alg *alg =crypto_skcipher_alg (tfm); +const struct skcipher_alg *alg = +crypto_skcipher_alg (crypto_skcipher_reqtfm (req));might_sleep_if (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ); walk->total = req->cryptlen; walk->nbytes =0 ;
@@ -326,13 +326,13 @@ int skcipher_walk_virt(struct skcipher_walk *walk,return 0 ;scatterwalk_start (&walk->in, req->src);scatterwalk_start (&walk->out, req->dst); - walk->blocksize =crypto_skcipher_blocksize (tfm); - walk->ivsize =crypto_skcipher_ivsize (tfm); - walk->alignmask =crypto_skcipher_alignmask (tfm); + walk->blocksize = alg->base.cra_blocksize; + walk->ivsize = alg->co.ivsize; + walk->alignmask = alg->base.cra_alignmask;if (alg->co.base.cra_type != &crypto_skcipher_type) walk->stride = alg->co.chunksize;else walk->stride = alg->walksize;
@@ -342,11 +342,11 @@ int skcipher_walk_virt(struct skcipher_walk *walk,EXPORT_SYMBOL_GPL (skcipher_walk_virt);static int skcipher_walk_aead_common (struct skcipher_walk *walk,struct aead_request *req,bool atomic) { -struct crypto_aead *tfm =crypto_aead_reqtfm (req); +const struct aead_alg *alg =crypto_aead_alg (crypto_aead_reqtfm (req)); walk->nbytes =0 ; walk->iv = req->iv; walk->oiv = req->iv;if ((req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ) && !atomic)
@@ -364,14 +364,14 @@ static int skcipher_walk_aead_common(struct skcipher_walk *walk,scatterwalk_copychunks (NULL , &walk->out, req->assoclen,2 );scatterwalk_done (&walk->in,0 , walk->total);scatterwalk_done (&walk->out,0 , walk->total); - walk->blocksize =crypto_aead_blocksize (tfm); - walk->stride =crypto_aead_chunksize (tfm); - walk->ivsize =crypto_aead_ivsize (tfm); - walk->alignmask =crypto_aead_alignmask (tfm); + walk->blocksize = alg->base.cra_blocksize; + walk->stride = alg->chunksize; + walk->ivsize = alg->ivsize; + walk->alignmask = alg->base.cra_alignmask;return skcipher_walk_first (walk); } int skcipher_walk_aead_encrypt(struct skcipher_walk *walk,
Signature · 1 line
2.47.1
PATCH v2 8/29 crypto: skcipher - call cond_resched() directly
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
In skcipher_walk_done(), instead of calling crypto_yield() which requires a translation between flags, just call cond_resched() directly. This has the same effect.
--- crypto/skcipher.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
crypto/skcipher.c +2 -2
@@ -144,12 +144,12 @@ int skcipher_walk_done(struct skcipher_walk *walk, int res)scatterwalk_advance (&walk->out, n);scatterwalk_done (&walk->in,0 , total);scatterwalk_done (&walk->out,1 , total);if (total) { -crypto_yield (walk->flags &SKCIPHER_WALK_SLEEP ? -CRYPTO_TFM_REQ_MAY_SLEEP :0 ); +if (walk->flags &SKCIPHER_WALK_SLEEP ) +cond_resched (); walk->flags &= ~(SKCIPHER_WALK_SLOW |SKCIPHER_WALK_COPY |SKCIPHER_WALK_DIFF );return skcipher_walk_next (walk); }
Signature · 1 line
2.47.1
PATCH v2 9/29 crypto: omap - switch from scatter_walk to plain offset
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
The omap driver was using struct scatter_walk, but only to maintain an offset, rather than iterating through the virtual addresses of the data contained in the scatterlist which is what scatter_walk is intended for. Make it just use a plain offset instead. This is simpler and avoids using struct scatter_walk in a way that is not well supported.
--- drivers/crypto/omap-aes.c | 34 ++++++++++++++------------------- drivers/crypto/omap-aes.h | 6 ++---- drivers/crypto/omap-des.c | 40 ++++++++++++++++----------------------- 3 files changed, 32 insertions(+), 48 deletions(-)
drivers/crypto/omap-aes.c +14 -20
@@ -16,11 +16,10 @@#include <crypto/aes.h> #include <crypto/gcm.h> #include <crypto/internal/aead.h> #include <crypto/internal/engine.h> #include <crypto/internal/skcipher.h> -#include <crypto/scatterwalk.h> #include <linux/dma-mapping.h> #include <linux/dmaengine.h> #include <linux/err.h> #include <linux/init.h> #include <linux/interrupt.h>
@@ -270,13 +269,13 @@ static int omap_aes_crypt_dma(struct omap_aes_dev *dd,struct dma_async_tx_descriptor *tx_in, *tx_out =NULL , *cb_desc;struct dma_slave_config cfg;int ret;if (dd->pio_only) { -scatterwalk_start (&dd->in_walk, dd->in_sg); + dd->in_sg_offset =0 ;if (out_sg_len) -scatterwalk_start (&dd->out_walk, dd->out_sg); + dd->out_sg_offset =0 ;/* Enable DATAIN interrupt and let it take care of the rest */ omap_aes_write (dd,AES_REG_IRQ_ENABLE (dd),0x2 );return 0 ;
@@ -869,25 +868,22 @@ static irqreturn_t omap_aes_irq(int irq, void *dev_id)if (status &AES_REG_IRQ_DATA_IN ) {omap_aes_write (dd,AES_REG_IRQ_ENABLE (dd),0x0 );BUG_ON (!dd->in_sg); -BUG_ON (_calc_walked (in) > dd->in_sg->length); +BUG_ON (dd->in_sg_offset > dd->in_sg->length); - src =sg_virt (dd->in_sg) +_calc_walked (in); + src =sg_virt (dd->in_sg) + dd->in_sg_offset;for (i =0 ; i <AES_BLOCK_WORDS ; i++) {omap_aes_write (dd,AES_REG_DATA_N (dd, i), *src); - -scatterwalk_advance (&dd->in_walk,4 ); -if (dd->in_sg->length ==_calc_walked (in)) { + dd->in_sg_offset +=4 ; +if (dd->in_sg_offset == dd->in_sg->length) { dd->in_sg =sg_next (dd->in_sg);if (dd->in_sg) { -scatterwalk_start (&dd->in_walk, - dd->in_sg); - src =sg_virt (dd->in_sg) + -_calc_walked (in); + dd->in_sg_offset =0 ; + src =sg_virt (dd->in_sg); } }else { src++; } }
@@ -902,24 +898,22 @@ static irqreturn_t omap_aes_irq(int irq, void *dev_id) }else if (status &AES_REG_IRQ_DATA_OUT ) {omap_aes_write (dd,AES_REG_IRQ_ENABLE (dd),0x0 );BUG_ON (!dd->out_sg); -BUG_ON (_calc_walked (out) > dd->out_sg->length); +BUG_ON (dd->out_sg_offset > dd->out_sg->length); - dst =sg_virt (dd->out_sg) +_calc_walked (out); + dst =sg_virt (dd->out_sg) + dd->out_sg_offset;for (i =0 ; i <AES_BLOCK_WORDS ; i++) { *dst =omap_aes_read (dd,AES_REG_DATA_N (dd, i)); -scatterwalk_advance (&dd->out_walk,4 ); -if (dd->out_sg->length ==_calc_walked (out)) { + dd->out_sg_offset +=4 ; +if (dd->out_sg_offset == dd->out_sg->length) { dd->out_sg =sg_next (dd->out_sg);if (dd->out_sg) { -scatterwalk_start (&dd->out_walk, - dd->out_sg); - dst =sg_virt (dd->out_sg) + -_calc_walked (out); + dd->out_sg_offset =0 ; + dst =sg_virt (dd->out_sg); } }else { dst++; } }
drivers/crypto/omap-aes.h +2 -4
@@ -12,12 +12,10 @@#include <crypto/aes.h> #define DST_MAXBURST 4#define DMA_MIN (DST_MAXBURST * sizeof(u32)) -#define _calc_walked (inout) (dd->inout##_walk.offset - dd->inout##_sg->offset) -/* * OMAP TRM gives bitfields as start:end, where start is the higher bit * number. For example 7:0 */ #define FLD_MASK (start, end) (((1 << ((start) - (end) + 1)) - 1) << (end))
@@ -184,12 +182,12 @@ struct omap_aes_dev {/* Buffers for copying for unaligned cases */ struct scatterlist in_sgl[2 ];struct scatterlist out_sgl;struct scatterlist *orig_out; -struct scatter_walk in_walk; -struct scatter_walk out_walk; +unsigned int in_sg_offset; +unsigned int out_sg_offset;struct dma_chan *dma_lch_in;struct dma_chan *dma_lch_out;int in_sg_len;int out_sg_len;int pio_only;
drivers/crypto/omap-des.c +16 -24
@@ -17,11 +17,10 @@#endif #include <crypto/engine.h> #include <crypto/internal/des.h> #include <crypto/internal/skcipher.h> -#include <crypto/scatterwalk.h> #include <linux/dma-mapping.h> #include <linux/dmaengine.h> #include <linux/err.h> #include <linux/init.h> #include <linux/interrupt.h>
@@ -38,12 +37,10 @@#define DST_MAXBURST 2#define DES_BLOCK_WORDS (DES_BLOCK_SIZE >> 2) -#define _calc_walked (inout) (dd->inout##_walk.offset - dd->inout##_sg->offset) -#define DES_REG_KEY (dd, x) ((dd)->pdata->key_ofs - \ ((x ^ 0x01) * 0x04))#define DES_REG_IV (dd, x) ((dd)->pdata->iv_ofs + ((x) * 0x04))
@@ -150,12 +147,12 @@ struct omap_des_dev {/* Buffers for copying for unaligned cases */ struct scatterlist in_sgl;struct scatterlist out_sgl;struct scatterlist *orig_out; -struct scatter_walk in_walk; -struct scatter_walk out_walk; +unsigned int in_sg_offset; +unsigned int out_sg_offset;struct dma_chan *dma_lch_in;struct dma_chan *dma_lch_out;int in_sg_len;int out_sg_len;int pio_only;
@@ -377,12 +374,12 @@ static int omap_des_crypt_dma(struct crypto_tfm *tfm,struct dma_async_tx_descriptor *tx_in, *tx_out;struct dma_slave_config cfg;int ret;if (dd->pio_only) { -scatterwalk_start (&dd->in_walk, dd->in_sg); -scatterwalk_start (&dd->out_walk, dd->out_sg); + dd->in_sg_offset =0 ; + dd->out_sg_offset =0 ;/* Enable DATAIN interrupt and let it take care of the rest */ omap_des_write (dd,DES_REG_IRQ_ENABLE (dd),0x2 );return 0 ;
@@ -834,25 +831,22 @@ static irqreturn_t omap_des_irq(int irq, void *dev_id)if (status &DES_REG_IRQ_DATA_IN ) {omap_des_write (dd,DES_REG_IRQ_ENABLE (dd),0x0 );BUG_ON (!dd->in_sg); -BUG_ON (_calc_walked (in) > dd->in_sg->length); +BUG_ON (dd->in_sg_offset > dd->in_sg->length); - src =sg_virt (dd->in_sg) +_calc_walked (in); + src =sg_virt (dd->in_sg) + dd->in_sg_offset;for (i =0 ; i <DES_BLOCK_WORDS ; i++) {omap_des_write (dd,DES_REG_DATA_N (dd, i), *src); - -scatterwalk_advance (&dd->in_walk,4 ); -if (dd->in_sg->length ==_calc_walked (in)) { + dd->in_sg_offset +=4 ; +if (dd->in_sg_offset == dd->in_sg->length) { dd->in_sg =sg_next (dd->in_sg);if (dd->in_sg) { -scatterwalk_start (&dd->in_walk, - dd->in_sg); - src =sg_virt (dd->in_sg) + -_calc_walked (in); + dd->in_sg_offset =0 ; + src =sg_virt (dd->in_sg); } }else { src++; } }
@@ -867,24 +861,22 @@ static irqreturn_t omap_des_irq(int irq, void *dev_id) }else if (status &DES_REG_IRQ_DATA_OUT ) {omap_des_write (dd,DES_REG_IRQ_ENABLE (dd),0x0 );BUG_ON (!dd->out_sg); -BUG_ON (_calc_walked (out) > dd->out_sg->length); +BUG_ON (dd->out_sg_offset > dd->out_sg->length); - dst =sg_virt (dd->out_sg) +_calc_walked (out); + dst =sg_virt (dd->out_sg) + dd->out_sg_offset;for (i =0 ; i <DES_BLOCK_WORDS ; i++) { *dst =omap_des_read (dd,DES_REG_DATA_N (dd, i)); -scatterwalk_advance (&dd->out_walk,4 ); -if (dd->out_sg->length ==_calc_walked (out)) { + dd->out_sg_offset +=4 ; +if (dd->out_sg_offset == dd->out_sg->length) { dd->out_sg =sg_next (dd->out_sg);if (dd->out_sg) { -scatterwalk_start (&dd->out_walk, - dd->out_sg); - dst =sg_virt (dd->out_sg) + -_calc_walked (out); + dd->out_sg_offset =0 ; + dst =sg_virt (dd->out_sg); } }else { dst++; } }
Signature · 1 line
2.47.1
PATCH v2 10/29 crypto: powerpc/p10-aes-gcm - simplify handling of linear associated data
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
p10_aes_gcm_crypt() is abusing the scatter_walk API to get the virtual address for the first source scatterlist element. But this code is only built for PPC64 which is a !HIGHMEM platform, and it can read past a page boundary from the address returned by scatterwalk_map() which means it already assumes the address is from the kernel's direct map. Thus, just use sg_virt() instead to get the same result in a simpler way.
---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
arch/powerpc/crypto/aes-gcm-p10-glue.c | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-)
arch/powerpc/crypto/aes-gcm-p10-glue.c +2 -6
@@ -212,11 +212,10 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,struct p10_aes_gcm_ctx *ctx =crypto_tfm_ctx (tfm);u8 databuf[sizeof (struct gcm_ctx ) +PPC_ALIGN ];struct gcm_ctx *gctx =PTR_ALIGN ((void *)databuf,PPC_ALIGN );u8 hashbuf[sizeof (struct Hash_ctx ) +PPC_ALIGN ];struct Hash_ctx *hash =PTR_ALIGN ((void *)hashbuf,PPC_ALIGN ); -struct scatter_walk assoc_sg_walk;struct skcipher_walk walk;u8 *assocmem =NULL ;u8 *assoc;unsigned int cryptlen = req->cryptlen;unsigned char ivbuf[AES_BLOCK_SIZE +PPC_ALIGN ];
@@ -232,12 +231,11 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,memset (ivbuf,0 ,sizeof (ivbuf));memcpy (iv, riv,GCM_IV_SIZE );/* Linearize assoc, if not already linear */ if (req->src->length >= assoclen && req->src->length) { -scatterwalk_start (&assoc_sg_walk, req->src); - assoc =scatterwalk_map (&assoc_sg_walk); + assoc =sg_virt (req->src);/* ppc64 is !HIGHMEM */ }else {gfp_t flags = (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ) ?GFP_KERNEL :GFP_ATOMIC ;/* assoc can be any length, so must be on heap */
@@ -251,13 +249,11 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,vsx_begin ();gcmp10_init (gctx, iv, (unsigned char *) &ctx->enc_key, hash, assoc, assoclen);vsx_end (); -if (!assocmem) -scatterwalk_unmap (assoc); -else +if (assocmem)kfree (assocmem);if (enc) ret =skcipher_walk_aead_encrypt (&walk, req, false);else
Signature · 1 line
2.47.1
Re: [PATCH v2 10/29] crypto: powerpc/p10-aes-gcm - simplify handling of linear associated data
Le 30/12/2024 à 01:13, Eric Biggers a écrit :
Quoted 56 lines
From: Eric Biggers <[email protected]>
p10_aes_gcm_crypt()is abusing thescatter_walkAPI to get the virtual address for the first source scatterlist element. But this code is only built for PPC64 which is a !HIGHMEM platform, and it can read past a page boundary from the address returned byscatterwalk_map()which means it already assumes the address is from the kernel's direct map. Thus, just usesg_virt()instead to get the same result in a simpler way.Cc Christophe Leroy <[email protected]>Cc Danny Tsen <[email protected]>Cc Michael Ellerman <[email protected]>Cc Naveen N Rao <[email protected]>Cc Nicholas Piggin <[email protected]>Signed-off-by Eric Biggers <[email protected]>---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
arch/powerpc/crypto/aes-gcm-p10-glue.c | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-)arch/powerpc/crypto/aes-gcm-p10-glue.c +1
-3@@ -212,11 +212,10 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,struct p10_aes_gcm_ctx *ctx =crypto_tfm_ctx (tfm);u8 databuf[sizeof (struct gcm_ctx ) +PPC_ALIGN ];struct gcm_ctx *gctx =PTR_ALIGN ((void *)databuf,PPC_ALIGN );u8 hashbuf[sizeof (struct Hash_ctx ) +PPC_ALIGN ];struct Hash_ctx *hash =PTR_ALIGN ((void *)hashbuf,PPC_ALIGN ); -struct scatter_walk assoc_sg_walk;struct skcipher_walk walk;u8 *assocmem =NULL ;u8 *assoc;unsigned int cryptlen = req->cryptlen;unsigned char ivbuf[AES_BLOCK_SIZE +PPC_ALIGN ];@@ -232,12 +231,11 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,memset (ivbuf,0 ,sizeof (ivbuf));memcpy (iv, riv,GCM_IV_SIZE );/* Linearize assoc, if not already linear */ if (req->src->length >= assoclen && req->src->length) { -scatterwalk_start (&assoc_sg_walk, req->src); - assoc =scatterwalk_map (&assoc_sg_walk); + assoc =sg_virt (req->src);/* ppc64 is !HIGHMEM */ }else {gfp_t flags = (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ) ?GFP_KERNEL :GFP_ATOMIC ;/* assoc can be any length, so must be on heap */
arch/powerpc/crypto/aes-gcm-p10-glue.c static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv, · line 255
Quoted 10 lines
arch/powerpc/crypto/aes-gcm-p10-glue.c +1
-3@@ -251,13 +249,11 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,vsx_begin ();gcmp10_init (gctx, iv, (unsigned char *) &ctx->enc_key, hash, assoc, assoclen);vsx_end (); -if (!assocmem) -scatterwalk_unmap (assoc); -else +if (assocmem)kfree (assocmem);
kfree() accepts a NULL pointer, you can call kfree(assocmem) without 'if (assocmem)'
Quoted 4 lines
arch/powerpc/crypto/aes-gcm-p10-glue.c +0
-0if (enc) ret =skcipher_walk_aead_encrypt (&walk, req, false);else
Re: [PATCH v2 10/29] crypto: powerpc/p10-aes-gcm - simplify handling of linear associated data
Quoted 60 lines · Christophe Leroy
Le 30/12/2024 à 01:13, Eric Biggers a écrit :
Quoted 57 lines
From: Eric Biggers <[email protected]>
p10_aes_gcm_crypt()is abusing thescatter_walkAPI to get the virtual address for the first source scatterlist element. But this code is only built for PPC64 which is a !HIGHMEM platform, and it can read past a page boundary from the address returned byscatterwalk_map()which means it already assumes the address is from the kernel's direct map. Thus, just usesg_virt()instead to get the same result in a simpler way.Cc Christophe Leroy <[email protected]>Cc Danny Tsen <[email protected]>Cc Michael Ellerman <[email protected]>Cc Naveen N Rao <[email protected]>Cc Nicholas Piggin <[email protected]>Signed-off-by Eric Biggers <[email protected]>---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
arch/powerpc/crypto/aes-gcm-p10-glue.c | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-)arch/powerpc/crypto/aes-gcm-p10-glue.c +1
-3@@ -212,11 +212,10 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,struct p10_aes_gcm_ctx *ctx =crypto_tfm_ctx (tfm);u8 databuf[sizeof (struct gcm_ctx ) +PPC_ALIGN ];struct gcm_ctx *gctx =PTR_ALIGN ((void *)databuf,PPC_ALIGN );u8 hashbuf[sizeof (struct Hash_ctx ) +PPC_ALIGN ];struct Hash_ctx *hash =PTR_ALIGN ((void *)hashbuf,PPC_ALIGN ); -struct scatter_walk assoc_sg_walk;struct skcipher_walk walk;u8 *assocmem =NULL ;u8 *assoc;unsigned int cryptlen = req->cryptlen;unsigned char ivbuf[AES_BLOCK_SIZE +PPC_ALIGN ];@@ -232,12 +231,11 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,memset (ivbuf,0 ,sizeof (ivbuf));memcpy (iv, riv,GCM_IV_SIZE );/* Linearize assoc, if not already linear */ if (req->src->length >= assoclen && req->src->length) { -scatterwalk_start (&assoc_sg_walk, req->src); - assoc =scatterwalk_map (&assoc_sg_walk); + assoc =sg_virt (req->src);/* ppc64 is !HIGHMEM */ }else {gfp_t flags = (req->base.flags &CRYPTO_TFM_REQ_MAY_SLEEP ) ?GFP_KERNEL :GFP_ATOMIC ;/* assoc can be any length, so must be on heap */ @@ -251,13 +249,11 @@ static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv,vsx_begin ();gcmp10_init (gctx, iv, (unsigned char *) &ctx->enc_key, hash, assoc, assoclen);vsx_end ();
Quoted 8 lines
arch/powerpc/crypto/aes-gcm-p10-glue.c static int p10_aes_gcm_crypt(struct aead_request *req, u8 *riv, · line 255
Quoted 5 lines
arch/powerpc/crypto/aes-gcm-p10-glue.c +1
-3-if (!assocmem) -scatterwalk_unmap (assoc); -else +if (assocmem)kfree (assocmem);
kfree()accepts a NULL pointer, you can call kfree(assocmem) without 'if (assocmem)'
The existing code did that too, but sure I'll change that in v3.
- Eric
PATCH v2 11/29 crypto: scatterwalk - move to next sg entry just in time
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
The scatterwalk_* functions are designed to advance to the next sg entry only when there is more data from the request to process. Compared to the alternative of advancing after each step if !sg_is_last(sg), this has the advantage that it doesn't cause problems if users accidentally don't terminate their scatterlist with the end marker (which is an easy mistake to make, and there are examples of this).
Currently, the advance to the next sg entry happens in scatterwalk_done(), which is called after each "step" of the walk. It requires the caller to pass in a boolean 'more' that indicates whether there is more data. This works when the caller immediately knows whether there is more data, though it adds some complexity. However in the case of scatterwalk_copychunks() it's not immediately known whether there is more data, so the call to scatterwalk_done() has to happen higher up the stack. This is error-prone, and indeed the needed call to scatterwalk_done() is not always made, e.g. scatterwalk_copychunks() is sometimes called multiple times in a row. This causes a zero-length step to get added in some cases, which is unexpected and seems to work only by accident.
This patch begins the switch to a less error-prone approach where the advance to the next sg entry happens just in time instead. For now, that means just doing the advance in scatterwalk_clamp() if it's needed there. Initially this is redundant, but it's needed to keep the tree in a working state as later patches change things to the final state.
Later patches will similarly move the dcache flushing logic out of scatterwalk_done() and then remove scatterwalk_done() entirely.
--- include/crypto/scatterwalk.h | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-)
include/crypto/scatterwalk.h +10 -9
@@ -24,22 +24,30 @@ static inline void scatterwalk_crypto_chain(struct scatterlist *head,sg_chain (head, num, sg); elsesg_mark_end (head ); } +static inline void scatterwalk_start (struct scatter_walk *walk, +struct scatterlist *sg) +{ + walk->sg = sg; + walk->offset = sg->offset; +} +static inline unsigned int scatterwalk_pagelen (struct scatter_walk *walk) {unsigned int len = walk->sg->offset + walk->sg->length - walk->offset;unsigned int len_this_page =offset_in_page (~walk->offset) +1 ;return len_this_page > len ? len : len_this_page; }static inline unsigned int scatterwalk_clamp (struct scatter_walk *walk,unsigned int nbytes) { -unsigned int len_this_page =scatterwalk_pagelen (walk); -return nbytes > len_this_page ? len_this_page : nbytes; +if (walk->offset >= walk->sg->offset + walk->sg->length) +scatterwalk_start (walk,sg_next (walk->sg)); +return min (nbytes,scatterwalk_pagelen (walk)); }static inline void scatterwalk_advance (struct scatter_walk *walk,unsigned int nbytes) {
@@ -54,17 +62,10 @@ static inline struct page *scatterwalk_page(struct scatter_walk *walk)static inline void scatterwalk_unmap (void *vaddr) {kunmap_local (vaddr); } -static inline void scatterwalk_start (struct scatter_walk *walk, -struct scatterlist *sg) -{ - walk->sg = sg; - walk->offset = sg->offset; -} -static inline void *scatterwalk_map (struct scatter_walk *walk) {return kmap_local_page (scatterwalk_page (walk)) +offset_in_page (walk->offset); }
Signature · 1 line
2.47.1
PATCH v2 12/29 crypto: scatterwalk - add new functions for skipping data
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Add scatterwalk_skip() to skip the given number of bytes in a scatter_walk. Previously support for skipping was provided through scatterwalk_copychunks(..., 2) followed by scatterwalk_done(), which was confusing and less efficient.
Also add scatterwalk_start_at_pos() which starts a scatter_walk at the given position, equivalent to scatterwalk_start() + scatterwalk_skip(). This addresses another common need in a more streamlined way.
Later patches will convert various users to use these functions.
--- crypto/scatterwalk.c | 15 +++++++++++++++ include/crypto/scatterwalk.h | 18 ++++++++++++++++++ 2 files changed, 33 insertions(+)
crypto/scatterwalk.c +15 -0
@@ -13,10 +13,25 @@#include <linux/kernel.h> #include <linux/mm.h> #include <linux/module.h> #include <linux/scatterlist.h> +void scatterwalk_skip (struct scatter_walk *walk,unsigned int nbytes) +{ +struct scatterlist *sg = walk->sg; + + nbytes += walk->offset - sg->offset; + +while (nbytes > sg->length) { + nbytes -= sg->length; + sg =sg_next (sg); + } + walk->sg = sg; + walk->offset = sg->offset + nbytes; +} +EXPORT_SYMBOL_GPL (scatterwalk_skip); +static inline void memcpy_dir (void *buf,void *sgdata,size_t nbytes,int out) {void *src = out ? buf : sgdata;void *dst = out ? sgdata : buf;
include/crypto/scatterwalk.h +18 -0
@@ -31,10 +31,26 @@ static inline void scatterwalk_start(struct scatter_walk *walk, { walk->sg = sg; walk->offset = sg->offset; } +/* +* This is equivalent to scatterwalk_start(walk, sg) followed by +* scatterwalk_skip(walk, pos). +*/ +static inline void scatterwalk_start_at_pos (struct scatter_walk *walk, +struct scatterlist *sg, +unsigned int pos) +{ +while (pos > sg->length) { + pos -= sg->length; + sg =sg_next (sg); + } + walk->sg = sg; + walk->offset = sg->offset + pos; +} +static inline unsigned int scatterwalk_pagelen (struct scatter_walk *walk) {unsigned int len = walk->sg->offset + walk->sg->length - walk->offset;unsigned int len_this_page =offset_in_page (~walk->offset) +1 ;return len_this_page > len ? len : len_this_page;
@@ -90,10 +106,12 @@ static inline void scatterwalk_done(struct scatter_walk *walk, int out,if (!more || walk->offset >= walk->sg->offset + walk->sg->length || !(walk->offset & (PAGE_SIZE -1 )))scatterwalk_pagedone (walk, out, more); } +void scatterwalk_skip (struct scatter_walk *walk,unsigned int nbytes); +void scatterwalk_copychunks (void *buf,struct scatter_walk *walk,size_t nbytes,int out);void scatterwalk_map_and_copy (void *buf,struct scatterlist *sg,unsigned int start,unsigned int nbytes,int out);
Signature · 1 line
2.47.1
PATCH v2 13/29 crypto: scatterwalk - add new functions for iterating through data
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Add scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(). Also add scatterwalk_done_src() and scatterwalk_done_dst() which consolidate scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done() or scatterwalk_pagedone(). A later patch will remove scatterwalk_done() and scatterwalk_pagedone().
The new code eliminates the error-prone 'more' parameter. Advancing to the next sg entry now only happens just-in-time in scatterwalk_next().
The new code also pairs the dcache flush more closely with the actual write, similar to memcpy_to_page(). Previously it was paired with advancing to the next page. This is currently causing bugs where the dcache flush is incorrectly being skipped, usually due to scatterwalk_copychunks() being called without a following scatterwalk_done(). The dcache flush may have been placed where it was in order to not call flush_dcache_page() redundantly when visiting a page more than once. However, that case is rare in practice, and most architectures either do not implement flush_dcache_page() anyway or implement it lazily where it just clears a page flag.
Another limitation of the old code was that by the time the flush happened, there was no way to tell if more than one page needed to be flushed. That has been sufficient because the code goes page by page, but I would like to optimize that on !HIGHMEM platforms. The new code makes this possible, and a later patch will implement this optimization.
--- include/crypto/scatterwalk.h | 69 ++++++++++++++++++++++++++++++++---- 1 file changed, 63 insertions(+), 6 deletions(-)
include/crypto/scatterwalk.h +63 -6
@@ -62,16 +62,10 @@ static inline unsigned int scatterwalk_clamp(struct scatter_walk *walk,if (walk->offset >= walk->sg->offset + walk->sg->length)scatterwalk_start (walk,sg_next (walk->sg));return min (nbytes,scatterwalk_pagelen (walk)); } -static inline void scatterwalk_advance (struct scatter_walk *walk, -unsigned int nbytes) -{ - walk->offset += nbytes; -} -static inline struct page *scatterwalk_page (struct scatter_walk *walk) {return sg_page (walk->sg) + (walk->offset >>PAGE_SHIFT ); }
@@ -84,10 +78,28 @@ static inline void *scatterwalk_map(struct scatter_walk *walk) {return kmap_local_page (scatterwalk_page (walk)) +offset_in_page (walk->offset); } +/** +* scatterwalk_next() - Get the next data buffer in a scatterlist walk +* @walk: the scatter_walk +* @total: the total number of bytes remaining, > 0 +* @nbytes_ret: (out) the next number of bytes available, <= @total +* +* Return: A virtual address for the next segment of data from the scatterlist. +* The caller must call scatterwalk_done_src() or scatterwalk_done_dst() +* when it is done using this virtual address. +*/ +static inline void *scatterwalk_next (struct scatter_walk *walk, +unsigned int total, +unsigned int *nbytes_ret) +{ + *nbytes_ret =scatterwalk_clamp (walk, total); +return scatterwalk_map (walk); +} +static inline void scatterwalk_pagedone (struct scatter_walk *walk,int out,unsigned int more) {if (out) {struct page *page;
@@ -106,10 +118,55 @@ static inline void scatterwalk_done(struct scatter_walk *walk, int out,if (!more || walk->offset >= walk->sg->offset + walk->sg->length || !(walk->offset & (PAGE_SIZE -1 )))scatterwalk_pagedone (walk, out, more); } +static inline void scatterwalk_advance (struct scatter_walk *walk, +unsigned int nbytes) +{ + walk->offset += nbytes; +} + +/** +* scatterwalk_done_src() - Finish one step of a walk of source scatterlist +* @walk: the scatter_walk +* @vaddr: the address returned by scatterwalk_next() +* @nbytes: the number of bytes processed this step, less than or equal to the +* number of bytes that scatterwalk_next() returned. +* +* Use this if the @vaddr was not written to, i.e. it is source data. +*/ +static inline void scatterwalk_done_src (struct scatter_walk *walk, +const void *vaddr,unsigned int nbytes) +{ +scatterwalk_unmap ((void *)vaddr); +scatterwalk_advance (walk, nbytes); +} + +/** +* scatterwalk_done_dst() - Finish one step of a walk of destination scatterlist +* @walk: the scatter_walk +* @vaddr: the address returned by scatterwalk_next() +* @nbytes: the number of bytes processed this step, less than or equal to the +* number of bytes that scatterwalk_next() returned. +* +* Use this if the @vaddr may have been written to, i.e. it is destination data. +*/ +static inline void scatterwalk_done_dst (struct scatter_walk *walk, +void *vaddr,unsigned int nbytes) +{ +scatterwalk_unmap (vaddr); +/* +* Explicitly check ARCH_IMPLEMENTS_FLUSH_DCACHE_PAGE instead of just +* relying on flush_dcache_page() being a no-op when not implemented, +* since otherwise the BUG_ON in sg_page() does not get optimized out. +*/ +if (ARCH_IMPLEMENTS_FLUSH_DCACHE_PAGE ) +flush_dcache_page (scatterwalk_page (walk)); +scatterwalk_advance (walk, nbytes); +} +void scatterwalk_skip (struct scatter_walk *walk,unsigned int nbytes);void scatterwalk_copychunks (void *buf,struct scatter_walk *walk,size_t nbytes,int out);
Signature · 1 line
2.47.1
PATCH v2 14/29 crypto: scatterwalk - add new functions for copying data
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Add memcpy_from_sglist() and memcpy_to_sglist() which are more readable versions of scatterwalk_map_and_copy() with the 'out' argument 0 and 1 respectively. They follow the same argument order as memcpy_from_page() and memcpy_to_page() from <linux/highmem.h>. Note that in the case of memcpy_from_sglist(), this also happens to be the same argument order that scatterwalk_map_and_copy() uses.
The new code is also faster, mainly because it builds the scatter_walk directly without creating a temporary scatterlist. E.g., a 20% performance improvement is seen for copying the AES-GCM auth tag.
Make scatterwalk_map_and_copy() be a wrapper around memcpy_from_sglist() and memcpy_to_sglist(). Callers of scatterwalk_map_and_copy() should be updated to call memcpy_from_sglist() or memcpy_to_sglist() directly, but there are a lot of them so they aren't all being updated right away.
Also add functions memcpy_from_scatterwalk() and memcpy_to_scatterwalk() which are similar but operate on a scatter_walk instead of a scatterlist. These will replace scatterwalk_copychunks() with the 'out' argument 0 and 1 respectively. Their behavior differs slightly from scatterwalk_copychunks() in that they automatically take care of flushing the dcache when needed, making them easier to use.
scatterwalk_copychunks() itself is left unchanged for now. It will be removed after its callers are updated to use other functions instead.
--- crypto/scatterwalk.c | 59 ++++++++++++++++++++++++++++++------ include/crypto/scatterwalk.h | 24 +++++++++++++-- 2 files changed, 72 insertions(+), 11 deletions(-)
crypto/scatterwalk.c +50 -9
@@ -65,26 +65,67 @@ void scatterwalk_copychunks(void *buf, struct scatter_walk *walk,scatterwalk_pagedone (walk, out &1 ,1 ); } }EXPORT_SYMBOL_GPL (scatterwalk_copychunks); -void scatterwalk_map_and_copy (void *buf,struct scatterlist *sg, -unsigned int start,unsigned int nbytes,int out) +inline void memcpy_from_scatterwalk (void *buf,struct scatter_walk *walk, +unsigned int nbytes) +{ +do { +const void *src_addr; +unsigned int to_copy; + + src_addr =scatterwalk_next (walk, nbytes, &to_copy); +memcpy (buf, src_addr, to_copy); +scatterwalk_done_src (walk, src_addr, to_copy); + buf += to_copy; + nbytes -= to_copy; + }while (nbytes); +} +EXPORT_SYMBOL_GPL (memcpy_from_scatterwalk); + +inline void memcpy_to_scatterwalk (struct scatter_walk *walk,const void *buf, +unsigned int nbytes) +{ +do { +void *dst_addr; +unsigned int to_copy; + + dst_addr =scatterwalk_next (walk, nbytes, &to_copy); +memcpy (dst_addr, buf, to_copy); +scatterwalk_done_dst (walk, dst_addr, to_copy); + buf += to_copy; + nbytes -= to_copy; + }while (nbytes); +} +EXPORT_SYMBOL_GPL (memcpy_to_scatterwalk); + +void memcpy_from_sglist (void *buf,struct scatterlist *sg, +unsigned int start,unsigned int nbytes) {struct scatter_walk walk; -struct scatterlist tmp[2 ]; -if (!nbytes) +if (unlikely (nbytes ==0 ))/* in case sg == NULL */ return ; - sg =scatterwalk_ffwd (tmp, sg, start); +scatterwalk_start_at_pos (&walk, sg, start); +memcpy_from_scatterwalk (buf, &walk, nbytes); +} +EXPORT_SYMBOL_GPL (memcpy_from_sglist); + +void memcpy_to_sglist (struct scatterlist *sg,unsigned int start, +const void *buf,unsigned int nbytes) +{ +struct scatter_walk walk; + +if (unlikely (nbytes ==0 ))/* in case sg == NULL */ +return ; -scatterwalk_start (&walk, sg); -scatterwalk_copychunks (buf, &walk, nbytes, out); -scatterwalk_done (&walk, out,0 ); +scatterwalk_start_at_pos (&walk, sg, start); +memcpy_to_scatterwalk (&walk, buf, nbytes); } -EXPORT_SYMBOL_GPL (scatterwalk_map_and_copy); +EXPORT_SYMBOL_GPL (memcpy_to_sglist);struct scatterlist *scatterwalk_ffwd (struct scatterlist dst[2 ],struct scatterlist *src,unsigned int len) {
include/crypto/scatterwalk.h +22 -2
@@ -168,12 +168,32 @@ static inline void scatterwalk_done_dst(struct scatter_walk *walk,void scatterwalk_skip (struct scatter_walk *walk,unsigned int nbytes);void scatterwalk_copychunks (void *buf,struct scatter_walk *walk,size_t nbytes,int out); -void scatterwalk_map_and_copy (void *buf,struct scatterlist *sg, -unsigned int start,unsigned int nbytes,int out); +void memcpy_from_scatterwalk (void *buf,struct scatter_walk *walk, +unsigned int nbytes); + +void memcpy_to_scatterwalk (struct scatter_walk *walk,const void *buf, +unsigned int nbytes); + +void memcpy_from_sglist (void *buf,struct scatterlist *sg, +unsigned int start,unsigned int nbytes); + +void memcpy_to_sglist (struct scatterlist *sg,unsigned int start, +const void *buf,unsigned int nbytes); + +/* In new code, please use memcpy_{from,to}_sglist() directly instead. */ +static inline void scatterwalk_map_and_copy (void *buf,struct scatterlist *sg, +unsigned int start, +unsigned int nbytes,int out) +{ +if (out) +memcpy_to_sglist (sg, start, buf, nbytes); +else +memcpy_from_sglist (buf, sg, start, nbytes); +}struct scatterlist *scatterwalk_ffwd (struct scatterlist dst[2 ],struct scatterlist *src,unsigned int len);
Signature · 1 line
2.47.1
PATCH v2 15/29 crypto: scatterwalk - add scatterwalk_get_sglist()
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Add a function that creates a scatterlist that represents the remaining data in a walk. This will be used to replace chain_to_walk() in net/tls/tls_device_fallback.c so that it will no longer need to reach into the internals of struct scatter_walk.
---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
include/crypto/scatterwalk.h | 17 +++++++++++++++++ 1 file changed, 17 insertions(+)
include/crypto/scatterwalk.h +17 -0
@@ -67,10 +67,27 @@ static inline unsigned int scatterwalk_clamp(struct scatter_walk *walk,static inline struct page *scatterwalk_page (struct scatter_walk *walk) {return sg_page (walk->sg) + (walk->offset >>PAGE_SHIFT ); } +/* +* Create a scatterlist that represents the remaining data in a walk. Uses +* chaining to reference the original scatterlist, so this uses at most two +* entries in @sg_out regardless of the number of entries in the original list. +* Assumes that sg_init_table() was already done. +*/ +static inline void scatterwalk_get_sglist (struct scatter_walk *walk, +struct scatterlist sg_out[2 ]) +{ +if (walk->offset >= walk->sg->offset + walk->sg->length) +scatterwalk_start (walk,sg_next (walk->sg)); +sg_set_page (sg_out,sg_page (walk->sg), + walk->sg->offset + walk->sg->length - walk->offset, + walk->offset); +scatterwalk_crypto_chain (sg_out,sg_next (walk->sg),2 ); +} +static inline void scatterwalk_unmap (void *vaddr) {kunmap_local (vaddr); }
Signature · 1 line
2.47.1
PATCH v2 16/29 crypto: skcipher - use scatterwalk_start_at_pos()
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
In skcipher_walk_aead_common(), use scatterwalk_start_at_pos() instead of a sequence of scatterwalk_start(), scatterwalk_copychunks(..., 2), and scatterwalk_done(). This is simpler and faster.
--- crypto/skcipher.c | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-)
crypto/skcipher.c +2 -8
@@ -355,18 +355,12 @@ static int skcipher_walk_aead_common(struct skcipher_walk *walk, walk->flags =0 ;if (unlikely (!walk->total))return 0 ; -scatterwalk_start (&walk->in, req->src); -scatterwalk_start (&walk->out, req->dst); - -scatterwalk_copychunks (NULL , &walk->in, req->assoclen,2 ); -scatterwalk_copychunks (NULL , &walk->out, req->assoclen,2 ); - -scatterwalk_done (&walk->in,0 , walk->total); -scatterwalk_done (&walk->out,0 , walk->total); +scatterwalk_start_at_pos (&walk->in, req->src, req->assoclen); +scatterwalk_start_at_pos (&walk->out, req->dst, req->assoclen); walk->blocksize = alg->base.cra_blocksize; walk->stride = alg->chunksize; walk->ivsize = alg->ivsize; walk->alignmask = alg->base.cra_alignmask;
Signature · 1 line
2.47.1
PATCH v2 17/29 crypto: aegis - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Use scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(), and use scatterwalk_done_src() which consolidates scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done().
--- crypto/aegis128-core.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-)
crypto/aegis128-core.c +4 -6
@@ -282,14 +282,14 @@ static void crypto_aegis128_process_ad(struct aegis_state *state,union aegis_block buf;unsigned int pos =0 ;scatterwalk_start (&walk, sg_src);while (assoclen !=0 ) { -unsigned int size =scatterwalk_clamp (&walk, assoclen); +unsigned int size; +const u8 *mapped =scatterwalk_next (&walk, assoclen, &size);unsigned int left = size; -void *mapped =scatterwalk_map (&walk); -const u8 *src = (const u8 *)mapped; +const u8 *src = mapped;if (pos + size >=AEGIS_BLOCK_SIZE ) {if (pos >0 ) {unsigned int fill =AEGIS_BLOCK_SIZE - pos;memcpy (buf.bytes + pos, src, fill);
@@ -306,13 +306,11 @@ static void crypto_aegis128_process_ad(struct aegis_state *state,memcpy (buf.bytes + pos, src, left); pos += left; assoclen -= size; -scatterwalk_unmap (mapped); -scatterwalk_advance (&walk, size); -scatterwalk_done (&walk,0 , assoclen); +scatterwalk_done_src (&walk, mapped, size); }if (pos >0 ) {memset (buf.bytes + pos,0 ,AEGIS_BLOCK_SIZE - pos);crypto_aegis128_update_a (state, &buf, do_simd);
Signature · 1 line
2.47.1
PATCH v2 18/29 crypto: arm/ghash - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Use scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(), and use scatterwalk_done_src() which consolidates scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done(). Remove unnecessary code that seemed to be intended to advance to the next sg entry, which is already handled by the scatterwalk functions.
--- arch/arm/crypto/ghash-ce-glue.c | 15 ++++----------- 1 file changed, 4 insertions(+), 11 deletions(-)
arch/arm/crypto/ghash-ce-glue.c +4 -11
@@ -457,30 +457,23 @@ static void gcm_calculate_auth_mac(struct aead_request *req, u64 dg[], u32 len)int buf_count =0 ;scatterwalk_start (&walk, req->src);do { -u32 n =scatterwalk_clamp (&walk, len); -u8 *p; +unsigned int n; +const u8 *p; -if (!n) { -scatterwalk_start (&walk,sg_next (walk.sg)); - n =scatterwalk_clamp (&walk, len); - } - - p =scatterwalk_map (&walk); + p =scatterwalk_next (&walk, len, &n);gcm_update_mac (dg, p, n, buf, &buf_count, ctx); -scatterwalk_unmap (p); +scatterwalk_done_src (&walk, p, n);if (unlikely (len /SZ_4K > (len - n) /SZ_4K )) {kernel_neon_end ();kernel_neon_begin (); } len -= n; -scatterwalk_advance (&walk, n); -scatterwalk_done (&walk,0 , len); }while (len);if (buf_count) {memset (&buf[buf_count],0 ,GHASH_BLOCK_SIZE - buf_count);pmull_ghash_update_p64 (1 , dg, buf, ctx->h,NULL );
Signature · 1 line
2.47.1
PATCH v2 19/29 crypto: arm64 - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Use scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(), and use scatterwalk_done_src() which consolidates scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done(). Remove unnecessary code that seemed to be intended to advance to the next sg entry, which is already handled by the scatterwalk functions. Adjust variable naming slightly to keep things consistent.
--- arch/arm64/crypto/aes-ce-ccm-glue.c | 17 ++++------------ arch/arm64/crypto/ghash-ce-glue.c | 16 ++++----------- arch/arm64/crypto/sm4-ce-ccm-glue.c | 27 ++++++++++--------------- arch/arm64/crypto/sm4-ce-gcm-glue.c | 31 ++++++++++++----------------- 4 files changed, 32 insertions(+), 59 deletions(-)
arch/arm64/crypto/aes-ce-ccm-glue.c +4 -13
@@ -154,27 +154,18 @@ static void ccm_calculate_auth_mac(struct aead_request *req, u8 mac[]) macp =ce_aes_ccm_auth_data (mac, (u8 *)<ag, ltag.len, macp, ctx->key_enc,num_rounds (ctx));scatterwalk_start (&walk, req->src);do { -u32 n =scatterwalk_clamp (&walk, len); -u8 *p; - -if (!n) { -scatterwalk_start (&walk,sg_next (walk.sg)); - n =scatterwalk_clamp (&walk, len); - } - p =scatterwalk_map (&walk); +unsigned int n; +const u8 *p; + p =scatterwalk_next (&walk, len, &n); macp =ce_aes_ccm_auth_data (mac, p, n, macp, ctx->key_enc,num_rounds (ctx)); - +scatterwalk_done_src (&walk, p, n); len -= n; - -scatterwalk_unmap (p); -scatterwalk_advance (&walk, n); -scatterwalk_done (&walk,0 , len); }while (len); }static int ccm_encrypt (struct aead_request *req) {
arch/arm64/crypto/ghash-ce-glue.c +4 -12
@@ -306,25 +306,17 @@ static void gcm_calculate_auth_mac(struct aead_request *req, u64 dg[], u32 len)int buf_count =0 ;scatterwalk_start (&walk, req->src);do { -u32 n =scatterwalk_clamp (&walk, len); -u8 *p; - -if (!n) { -scatterwalk_start (&walk,sg_next (walk.sg)); - n =scatterwalk_clamp (&walk, len); - } - p =scatterwalk_map (&walk); +unsigned int n; +const u8 *p; + p =scatterwalk_next (&walk, len, &n);gcm_update_mac (dg, p, n, buf, &buf_count, ctx); +scatterwalk_done_src (&walk, p, n); len -= n; - -scatterwalk_unmap (p); -scatterwalk_advance (&walk, n); -scatterwalk_done (&walk,0 , len); }while (len);if (buf_count) {memset (&buf[buf_count],0 ,GHASH_BLOCK_SIZE - buf_count); ghash_do_simd_update(1, dg, buf, &ctx->ghash_key, NULL,
arch/arm64/crypto/sm4-ce-ccm-glue.c +11 -16
@@ -110,21 +110,16 @@ static void ccm_calculate_auth_mac(struct aead_request *req, u8 mac[])crypto_xor (mac, (const u8 *)&aadlen, len);scatterwalk_start (&walk, req->src); do { - u32 n = scatterwalk_clamp(&walk, assoclen); - u8 *p, *ptr; + unsigned int n, orig_n; + const u8 *p, *orig_p; - if (!n) { - scatterwalk_start(&walk, sg_next(walk.sg)); - n = scatterwalk_clamp(&walk, assoclen); - } - - p = ptr = scatterwalk_map(&walk); - assoclen -= n; - scatterwalk_advance(&walk, n); + orig_p = scatterwalk_next(&walk, assoclen, &orig_n); + p = orig_p; + n = orig_n; while (n > 0) { unsigned int l, nblocks; if (len == SM4_BLOCK_SIZE) {
@@ -134,30 +129,30 @@ static void ccm_calculate_auth_mac(struct aead_request *req, u8 mac[]) len =0 ; }else { nblocks = n /SM4_BLOCK_SIZE ;sm4_ce_cbcmac_update (ctx->rkey_enc, - mac, ptr, nblocks); + mac, p, nblocks); - ptr += nblocks *SM4_BLOCK_SIZE ; + p += nblocks *SM4_BLOCK_SIZE ; n %=SM4_BLOCK_SIZE ;continue ; } } l =min (n,SM4_BLOCK_SIZE - len);if (l) { -crypto_xor (mac + len, ptr, l); +crypto_xor (mac + len, p, l); len += l; - ptr += l; + p += l; n -= l; } } -scatterwalk_unmap (p); -scatterwalk_done (&walk,0 , assoclen); +scatterwalk_done_src (&walk, orig_p, orig_n); + assoclen -= orig_n; }while (assoclen); } static int ccm_crypt(struct aead_request *req, struct skcipher_walk *walk, u32 *rkey_enc, u8 mac[],
arch/arm64/crypto/sm4-ce-gcm-glue.c +13 -18
@@ -80,53 +80,48 @@ static void gcm_calculate_auth_mac(struct aead_request *req, u8 ghash[])unsigned int buflen =0 ;scatterwalk_start (&walk, req->src);do { -u32 n =scatterwalk_clamp (&walk, assoclen); -u8 *p, *ptr; +unsigned int n, orig_n; +const u8 *p, *orig_p; -if (!n) { -scatterwalk_start (&walk,sg_next (walk.sg)); - n =scatterwalk_clamp (&walk, assoclen); - } - - p = ptr =scatterwalk_map (&walk); - assoclen -= n; -scatterwalk_advance (&walk, n); + orig_p =scatterwalk_next (&walk, assoclen, &orig_n); + p = orig_p; + n = orig_n;if (n + buflen <GHASH_BLOCK_SIZE ) { -memcpy (&buffer[buflen], ptr, n); +memcpy (&buffer[buflen], p, n); buflen += n; }else {unsigned int nblocks;if (buflen) {unsigned int l =GHASH_BLOCK_SIZE - buflen; -memcpy (&buffer[buflen], ptr, l); - ptr += l; +memcpy (&buffer[buflen], p, l); + p += l; n -= l;pmull_ghash_update (ctx->ghash_table, ghash, buffer,1 ); } nblocks = n /GHASH_BLOCK_SIZE ;if (nblocks) {pmull_ghash_update (ctx->ghash_table, ghash, - ptr, nblocks); - ptr += nblocks *GHASH_BLOCK_SIZE ; + p, nblocks); + p += nblocks *GHASH_BLOCK_SIZE ; } buflen = n %GHASH_BLOCK_SIZE ;if (buflen) -memcpy (&buffer[0 ], ptr, buflen); +memcpy (&buffer[0 ], p, buflen); } -scatterwalk_unmap (p); -scatterwalk_done (&walk,0 , assoclen); +scatterwalk_done_src (&walk, orig_p, orig_n); + assoclen -= orig_n; }while (assoclen);/* padding with '0' */ if (buflen) {memset (&buffer[buflen],0 ,GHASH_BLOCK_SIZE - buflen);
Signature · 1 line
2.47.1
PATCH v2 20/29 crypto: nx - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
- In nx_walk_and_build(), use scatterwalk_start_at_pos() instead of a more complex way to achieve the same result.
- Also in nx_walk_and_build(), use the new functions scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(), and use scatterwalk_done_src() which consolidates scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done(). Remove unnecessary code that seemed to be intended to advance to the next sg entry, which is already handled by the scatterwalk functions.
Note that nx_walk_and_build() does not actually read or write the mapped virtual address, and thus it is misusing the scatter_walk API. It really should just access the scatterlist directly. This patch does not try to address this existing issue.
- In nx_gca(), use memcpy_from_sglist() instead of a more complex way to achieve the same result.
- In various functions, replace calls to scatterwalk_map_and_copy() with memcpy_from_sglist() or memcpy_to_sglist() as appropriate. Note that this eliminates the confusing 'out' argument (which this driver had tried to work around by defining the missing constants for it...)
---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
drivers/crypto/nx/nx-aes-ccm.c | 16 ++++++---------- drivers/crypto/nx/nx-aes-gcm.c | 17 ++++++----------- drivers/crypto/nx/nx.c | 31 +++++-------------------------- drivers/crypto/nx/nx.h | 3 --- 4 files changed, 17 insertions(+), 50 deletions(-)
drivers/crypto/nx/nx-aes-ccm.c +6 -10
@@ -215,17 +215,15 @@ static int generate_pat(u8 *iv,*/ if (b1) {memset (b1,0 ,16 );if (assoclen <=65280 ) { *(u16 *)b1 = assoclen; -scatterwalk_map_and_copy (b1 +2 , req->src,0 , - iauth_len,SCATTERWALK_FROM_SG ); +memcpy_from_sglist (b1 +2 , req->src,0 , iauth_len); }else { *(u16 *)b1 = (u16)(0xfffe ); *(u32 *)&b1[2 ] = assoclen; -scatterwalk_map_and_copy (b1 +6 , req->src,0 , - iauth_len,SCATTERWALK_FROM_SG ); +memcpy_from_sglist (b1 +6 , req->src,0 , iauth_len); } }/* now copy any remaining AAD to scatterlist and call nx... */ if (!assoclen) {
@@ -339,13 +337,12 @@ static int ccm_nx_decrypt(struct aead_request *req,spin_lock_irqsave (&nx_ctx->lock, irq_flags); nbytes -= authsize;/* copy out the auth tag to compare with later */ -scatterwalk_map_and_copy (priv->oauth_tag, - req->src, nbytes + req->assoclen, authsize, -SCATTERWALK_FROM_SG ); +memcpy_from_sglist (priv->oauth_tag, req->src, nbytes + req->assoclen, + authsize); rc =generate_pat (iv, req, nx_ctx, authsize, nbytes, assoclen, csbcpb->cpb.aes_ccm.in_pat_or_b0);if (rc) goto out;
@@ -463,13 +460,12 @@ static int ccm_nx_encrypt(struct aead_request *req, processed += to_process; }while (processed < nbytes);/* copy out the auth tag */ -scatterwalk_map_and_copy (csbcpb->cpb.aes_ccm.out_pat_or_mac, - req->dst, nbytes + req->assoclen, authsize, -SCATTERWALK_TO_SG ); +memcpy_to_sglist (req->dst, nbytes + req->assoclen, + csbcpb->cpb.aes_ccm.out_pat_or_mac, authsize); out:spin_unlock_irqrestore (&nx_ctx->lock, irq_flags);return rc; }
drivers/crypto/nx/nx-aes-gcm.c +6 -11
@@ -101,20 +101,17 @@ static int nx_gca(struct nx_crypto_ctx *nx_ctx,u8 *out, unsigned int assoclen) { int rc;struct nx_csbcpb *csbcpb_aead = nx_ctx->csbcpb_aead; -struct scatter_walk walk;struct nx_sg *nx_sg = nx_ctx->in_sg;unsigned int nbytes = assoclen;unsigned int processed =0 , to_process;unsigned int max_sg_len;if (nbytes <=AES_BLOCK_SIZE ) { -scatterwalk_start (&walk, req->src); -scatterwalk_copychunks (out, &walk, nbytes,SCATTERWALK_FROM_SG ); -scatterwalk_done (&walk,SCATTERWALK_FROM_SG ,0 ); +memcpy_from_sglist (out, req->src,0 , nbytes);return 0 ; }NX_CPB_FDM (csbcpb_aead) &= ~NX_FDM_CONTINUATION ;
@@ -389,23 +386,21 @@ static int gcm_aes_nx_crypt(struct aead_request *req, int enc, }while (processed < nbytes); mac:if (enc) {/* copy out the auth tag */ -scatterwalk_map_and_copy ( - csbcpb->cpb.aes_gcm.out_pat_or_mac, +memcpy_to_sglist ( req->dst, req->assoclen + nbytes, -crypto_aead_authsize (crypto_aead_reqtfm (req)), -SCATTERWALK_TO_SG ); + csbcpb->cpb.aes_gcm.out_pat_or_mac, +crypto_aead_authsize (crypto_aead_reqtfm (req))); }else {u8 *itag = nx_ctx->priv.gcm.iauth_tag;u8 *otag = csbcpb->cpb.aes_gcm.out_pat_or_mac; -scatterwalk_map_and_copy ( +memcpy_from_sglist ( itag, req->src, req->assoclen + nbytes, -crypto_aead_authsize (crypto_aead_reqtfm (req)), -SCATTERWALK_FROM_SG ); +crypto_aead_authsize (crypto_aead_reqtfm (req))); rc =crypto_memneq (itag, otag,crypto_aead_authsize (crypto_aead_reqtfm (req))) ? -EBADMSG :0 ; } out:
drivers/crypto/nx/nx.c +5 -26
@@ -151,44 +151,23 @@ struct nx_sg *nx_walk_and_build(struct nx_sg *nx_dst,unsigned int start, unsigned int *src_len) { struct scatter_walk walk;struct nx_sg *nx_sg = nx_dst; -unsigned int n, offset =0 , len = *src_len; +unsigned int n, len = *src_len;char *dst;/* we need to fast forward through @start bytes first */ -for (;;) { -scatterwalk_start (&walk, sg_src); - -if (start < offset + sg_src->length) -break ; - - offset += sg_src->length; - sg_src =sg_next (sg_src); - } - -/* start - offset is the number of bytes to advance in the scatterlist -* element we're currently looking at */ -scatterwalk_advance (&walk, start - offset); +scatterwalk_start_at_pos (&walk, sg_src, start);while (len && (nx_sg - nx_dst) < sglen) { - n =scatterwalk_clamp (&walk, len); -if (!n) { -/* In cases where we have scatterlist chain sg_next -* handles with it properly */ -scatterwalk_start (&walk,sg_next (walk.sg)); - n =scatterwalk_clamp (&walk, len); - } - dst =scatterwalk_map (&walk); + dst =scatterwalk_next (&walk, len, &n); nx_sg =nx_build_sg_list (nx_sg, dst, &n, sglen - (nx_sg - nx_dst)); - len -= n; -scatterwalk_unmap (dst); -scatterwalk_advance (&walk, n); -scatterwalk_done (&walk,SCATTERWALK_FROM_SG , len); +scatterwalk_done_src (&walk, dst, n); + len -= n; }/* update to_process */ *src_len -= len;/* return the moved destination pointer */
drivers/crypto/nx/nx.h +0 -3
@@ -187,9 +187,6 @@ extern struct shash_alg nx_shash_aes_xcbc_alg;extern struct shash_alg nx_shash_sha512_alg;extern struct shash_alg nx_shash_sha256_alg;extern struct nx_crypto_driver nx_driver; -#define SCATTERWALK_TO_SG 1 -#define SCATTERWALK_FROM_SG 0 -#endif
Signature · 1 line
2.47.1
PATCH v2 21/29 crypto: s390/aes-gcm - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Use scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(). Use scatterwalk_done_src() and scatterwalk_done_dst() which consolidate scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done().
Besides the new functions being a bit easier to use, this is necessary because scatterwalk_done() is planned to be removed.
---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
arch/s390/crypto/aes_s390.c | 33 +++++++++++++-------------------- 1 file changed, 13 insertions(+), 20 deletions(-)
arch/s390/crypto/aes_s390.c +13 -20
@@ -785,32 +785,25 @@ static void gcm_walk_start(struct gcm_sg_walk *gw, struct scatterlist *sg,scatterwalk_start (&gw->walk, sg); }static inline unsigned int _gcm_sg_clamp_and_map (struct gcm_sg_walk *gw) { -struct scatterlist *nextsg; - - gw->walk_bytes =scatterwalk_clamp (&gw->walk, gw->walk_bytes_remain); -while (!gw->walk_bytes) { - nextsg =sg_next (gw->walk.sg); -if (!nextsg) -return 0 ; -scatterwalk_start (&gw->walk, nextsg); - gw->walk_bytes =scatterwalk_clamp (&gw->walk, - gw->walk_bytes_remain); - } - gw->walk_ptr =scatterwalk_map (&gw->walk); +if (gw->walk_bytes_remain ==0 ) +return 0 ; + gw->walk_ptr =scatterwalk_next (&gw->walk, gw->walk_bytes_remain, + &gw->walk_bytes);return gw->walk_bytes; }static inline void _gcm_sg_unmap_and_advance (struct gcm_sg_walk *gw, -unsigned int nbytes) +unsigned int nbytes,bool out) { gw->walk_bytes_remain -= nbytes; -scatterwalk_unmap (gw->walk_ptr); -scatterwalk_advance (&gw->walk, nbytes); -scatterwalk_done (&gw->walk,0 , gw->walk_bytes_remain); +if (out) +scatterwalk_done_dst (&gw->walk, gw->walk_ptr, nbytes); +else +scatterwalk_done_src (&gw->walk, gw->walk_ptr, nbytes); gw->walk_ptr =NULL ; }static int gcm_in_walk_go (struct gcm_sg_walk *gw,unsigned int minbytesneeded) {
@@ -842,11 +835,11 @@ static int gcm_in_walk_go(struct gcm_sg_walk *gw, unsigned int minbytesneeded)while (1 ) { n =min (gw->walk_bytes,AES_BLOCK_SIZE - gw->buf_bytes);memcpy (gw->buf + gw->buf_bytes, gw->walk_ptr, n); gw->buf_bytes += n; -_gcm_sg_unmap_and_advance (gw, n); +_gcm_sg_unmap_and_advance (gw, n, false);if (gw->buf_bytes >= minbytesneeded) { gw->ptr = gw->buf; gw->nbytes = gw->buf_bytes; goto out; }
@@ -902,11 +895,11 @@ static int gcm_in_walk_done(struct gcm_sg_walk *gw, unsigned int bytesdone)memmove (gw->buf, gw->buf + bytesdone, n); gw->buf_bytes = n; }else gw->buf_bytes =0 ; }else -_gcm_sg_unmap_and_advance (gw, bytesdone); +_gcm_sg_unmap_and_advance (gw, bytesdone, false);return bytesdone; }static int gcm_out_walk_done (struct gcm_sg_walk *gw,unsigned int bytesdone)
@@ -920,14 +913,14 @@ static int gcm_out_walk_done(struct gcm_sg_walk *gw, unsigned int bytesdone)for (i =0 ; i < bytesdone; i += n) {if (!_gcm_sg_clamp_and_map (gw))return i; n =min (gw->walk_bytes, bytesdone - i);memcpy (gw->walk_ptr, gw->buf + i, n); -_gcm_sg_unmap_and_advance (gw, n); +_gcm_sg_unmap_and_advance (gw, n, true); } }else -_gcm_sg_unmap_and_advance (gw, bytesdone); +_gcm_sg_unmap_and_advance (gw, bytesdone, true);return bytesdone; }static int gcm_aes_crypt (struct aead_request *req,unsigned int flags)
Signature · 1 line
2.47.1
Re: [PATCH v2 21/29] crypto: s390/aes-gcm - use the new scatterwalk functions
Quoted 118 lines · Eric Biggers
From: Eric Biggers <[email protected]>
Use
scatterwalk_next()which consolidatesscatterwalk_clamp()andscatterwalk_map(). Usescatterwalk_done_src()andscatterwalk_done_dst()which consolidatescatterwalk_unmap(),scatterwalk_advance(), andscatterwalk_done().Besides the new functions being a bit easier to use, this is necessary because
scatterwalk_done()is planned to be removed.Cc Harald Freudenberger <[email protected]>Cc Holger Dengler <[email protected]>Signed-off-by Eric Biggers <[email protected]>---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
arch/s390/crypto/aes_s390.c | 33 +++++++++++++-------------------- 1 file changed, 13 insertions(+), 20 deletions(-)arch/s390/crypto/aes_s390.c +9
-16@@ -785,32 +785,25 @@ static void gcm_walk_start(struct gcm_sg_walk *gw, struct scatterlist *sg,scatterwalk_start (&gw->walk, sg); }static inline unsigned int _gcm_sg_clamp_and_map (struct gcm_sg_walk *gw) { -struct scatterlist *nextsg; - - gw->walk_bytes =scatterwalk_clamp (&gw->walk, gw->walk_bytes_remain); -while (!gw->walk_bytes) { - nextsg =sg_next (gw->walk.sg); -if (!nextsg) -return 0 ; -scatterwalk_start (&gw->walk, nextsg); - gw->walk_bytes =scatterwalk_clamp (&gw->walk, - gw->walk_bytes_remain); - } - gw->walk_ptr =scatterwalk_map (&gw->walk); +if (gw->walk_bytes_remain ==0 ) +return 0 ; + gw->walk_ptr =scatterwalk_next (&gw->walk, gw->walk_bytes_remain, + &gw->walk_bytes);return gw->walk_bytes; }static inline void _gcm_sg_unmap_and_advance (struct gcm_sg_walk *gw, -unsigned int nbytes) +unsigned int nbytes,bool out) { gw->walk_bytes_remain -= nbytes; -scatterwalk_unmap (gw->walk_ptr); -scatterwalk_advance (&gw->walk, nbytes); -scatterwalk_done (&gw->walk,0 , gw->walk_bytes_remain); +if (out) +scatterwalk_done_dst (&gw->walk, gw->walk_ptr, nbytes); +else +scatterwalk_done_src (&gw->walk, gw->walk_ptr, nbytes); gw->walk_ptr =NULL ; }static int gcm_in_walk_go(struct
gcm_sg_walk*gw, unsigned int
minbytesneeded)
{arch/s390/crypto/aes_s390.c +1
-1@@ -842,11 +835,11 @@ static int gcm_in_walk_go(struct gcm_sg_walk *gw, unsigned int minbytesneeded)while (1 ) { n =min (gw->walk_bytes,AES_BLOCK_SIZE - gw->buf_bytes);memcpy (gw->buf + gw->buf_bytes, gw->walk_ptr, n); gw->buf_bytes += n; -_gcm_sg_unmap_and_advance (gw, n); +_gcm_sg_unmap_and_advance (gw, n, false);if (gw->buf_bytes >= minbytesneeded) { gw->ptr = gw->buf; gw->nbytes = gw->buf_bytes; goto out;arch/s390/crypto/aes_s390.c +1
-1}@@ -902,11 +895,11 @@ static int gcm_in_walk_done(struct gcm_sg_walk *gw, unsigned int bytesdone) memmove(gw->buf, gw->buf + bytesdone, n); gw->buf_bytes = n; }else gw->buf_bytes =0 ; }else -_gcm_sg_unmap_and_advance (gw, bytesdone); +_gcm_sg_unmap_and_advance (gw, bytesdone, false);return bytesdone; }static int gcm_out_walk_done(struct
gcm_sg_walk*gw, unsigned int
bytesdone)arch/s390/crypto/aes_s390.c +2
-2@@ -920,14 +913,14 @@ static int gcm_out_walk_done(struct gcm_sg_walk *gw, unsigned int bytesdone)for (i =0 ; i < bytesdone; i += n) {if (!_gcm_sg_clamp_and_map (gw))return i; n =min (gw->walk_bytes, bytesdone - i);memcpy (gw->walk_ptr, gw->buf + i, n); -_gcm_sg_unmap_and_advance (gw, n); +_gcm_sg_unmap_and_advance (gw, n, true); } }else -_gcm_sg_unmap_and_advance (gw, bytesdone); +_gcm_sg_unmap_and_advance (gw, bytesdone, true);return bytesdone; }
Quoted 1 line
static int
gcm_aes_crypt(struct aead_request *req, unsigned int flags)
PATCH v2 22/29 crypto: s5p-sss - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
s5p_sg_copy_buf() open-coded a copy from/to a scatterlist using scatterwalk_* functions that are planned for removal. Replace it with the new functions memcpy_from_sglist() and memcpy_to_sglist() instead. Also take the opportunity to replace calls to scatterwalk_map_and_copy() in the same file; this eliminates the confusing 'out' argument.
---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
drivers/crypto/s5p-sss.c | 38 +++++++++++--------------------------- 1 file changed, 11 insertions(+), 27 deletions(-)
drivers/crypto/s5p-sss.c +11 -27
@@ -456,34 +456,21 @@ static void s5p_free_sg_cpy(struct s5p_aes_dev *dev, struct scatterlist **sg)kfree (*sg); *sg =NULL ; } -static void s5p_sg_copy_buf (void *buf,struct scatterlist *sg, -unsigned int nbytes,int out) -{ -struct scatter_walk walk; - -if (!nbytes) -return ; - -scatterwalk_start (&walk, sg); -scatterwalk_copychunks (buf, &walk, nbytes, out); -scatterwalk_done (&walk, out,0 ); -} -static void s5p_sg_done (struct s5p_aes_dev *dev) {struct skcipher_request *req = dev->req;struct s5p_aes_reqctx *reqctx =skcipher_request_ctx (req);if (dev->sg_dst_cpy) {dev_dbg (dev->dev,"Copying %d bytes of output data back to original place\n" , dev->req->cryptlen); -s5p_sg_copy_buf (sg_virt (dev->sg_dst_cpy), dev->req->dst, - dev->req->cryptlen,1 ); +memcpy_to_sglist (dev->req->dst,0 ,sg_virt (dev->sg_dst_cpy), + dev->req->cryptlen); }s5p_free_sg_cpy (dev, &dev->sg_src_cpy);s5p_free_sg_cpy (dev, &dev->sg_dst_cpy);if (reqctx->mode &FLAGS_AES_CBC )memcpy_fromio (req->iv, dev->aes_ioaddr +SSS_REG_AES_IV_DATA (0 ),AES_BLOCK_SIZE );
@@ -524,11 +511,11 @@ static int s5p_make_sg_cpy(struct s5p_aes_dev *dev, struct scatterlist *src,kfree (*dst); *dst =NULL ;return -ENOMEM ; } -s5p_sg_copy_buf (pages, src, dev->req->cryptlen,0 ); +memcpy_from_sglist (pages, src,0 , dev->req->cryptlen);sg_init_table (*dst,1 );sg_set_buf (*dst, pages, len);return 0 ;
@@ -1033,12 +1020,11 @@ static int s5p_hash_copy_sgs(struct s5p_hash_reqctx *ctx, }if (ctx->bufcnt)memcpy (buf, ctx->dd->xmit_buf, ctx->bufcnt); -scatterwalk_map_and_copy (buf + ctx->bufcnt, sg, ctx->skip, - new_len,0 ); +memcpy_from_sglist (buf + ctx->bufcnt, sg, ctx->skip, new_len);sg_init_table (ctx->sgl,1 );sg_set_buf (ctx->sgl, buf, len); ctx->sg = ctx->sgl; ctx->sg_len =1 ; ctx->bufcnt =0 ;
@@ -1227,12 +1213,11 @@ static int s5p_hash_prepare_request(struct ahash_request *req, bool update)int len =BUFLEN - ctx->bufcnt %BUFLEN ;if (len > nbytes) len = nbytes; -scatterwalk_map_and_copy (ctx->buffer + ctx->bufcnt, req->src, -0 , len,0 ); +memcpy_from_sglist (ctx->buffer + ctx->bufcnt, req->src,0 , len); ctx->bufcnt += len; nbytes -= len; ctx->skip = len; }else { ctx->skip =0 ;
@@ -1251,13 +1236,12 @@ static int s5p_hash_prepare_request(struct ahash_request *req, bool update) xmit_len -= xmit_len & (BUFLEN -1 ); hash_later = ctx->total - xmit_len;/* copy hash_later bytes from end of req->src */ /* previous bytes are in xmit_buf, so no overwrite */ -scatterwalk_map_and_copy (ctx->buffer, req->src, - req->nbytes - hash_later, - hash_later,0 ); +memcpy_from_sglist (ctx->buffer, req->src, + req->nbytes - hash_later, hash_later); }if (xmit_len >BUFLEN ) { ret =s5p_hash_prepare_sgs (ctx, req->src, nbytes - hash_later, final);
@@ -1265,12 +1249,12 @@ static int s5p_hash_prepare_request(struct ahash_request *req, bool update)return ret; }else {/* have buffered data only */ if (unlikely (!ctx->bufcnt)) {/* first update didn't fill up buffer */ -scatterwalk_map_and_copy (ctx->dd->xmit_buf, req->src, -0 , xmit_len,0 ); +memcpy_from_sglist (ctx->dd->xmit_buf, req->src, +0 , xmit_len); }sg_init_table (ctx->sgl,1 );sg_set_buf (ctx->sgl, ctx->dd->xmit_buf, xmit_len);
@@ -1504,12 +1488,12 @@ static int s5p_hash_update(struct ahash_request *req)if (!req->nbytes)return 0 ;if (ctx->bufcnt + req->nbytes <=BUFLEN ) { -scatterwalk_map_and_copy (ctx->buffer + ctx->bufcnt, req->src, -0 , req->nbytes,0 ); +memcpy_from_sglist (ctx->buffer + ctx->bufcnt, req->src, +0 , req->nbytes); ctx->bufcnt += req->nbytes;return 0 ; }return s5p_hash_enqueue (req, true);/* HASH_OP_UPDATE */
Signature · 1 line
2.47.1
PATCH v2 23/29 crypto: stm32 - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Replace calls to the deprecated function scatterwalk_copychunks() with memcpy_from_scatterwalk(), memcpy_to_scatterwalk(), scatterwalk_skip(), or scatterwalk_start_at_pos() as appropriate.
---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
drivers/crypto/stm32/stm32-cryp.c | 34 +++++++++++++++---------------- 1 file changed, 17 insertions(+), 17 deletions(-)
drivers/crypto/stm32/stm32-cryp.c +17 -17
@@ -664,11 +664,11 @@ static void stm32_cryp_write_ccm_first_header(struct stm32_cryp *cryp) len =6 ; } written =min_t (size_t,AES_BLOCK_SIZE - len, alen); -scatterwalk_copychunks ((char *)block + len, &cryp->in_walk, written,0 ); +memcpy_from_scatterwalk ((char *)block + len, &cryp->in_walk, written);writesl (cryp->regs + cryp->caps->din, block,AES_BLOCK_32 ); cryp->header_in -= written;
@@ -991,11 +991,11 @@ static int stm32_cryp_header_dma_start(struct stm32_cryp *cryp) tx_in->callback_param = cryp; tx_in->callback = stm32_cryp_header_dma_callback;/* Advance scatterwalk to not DMA'ed data */ align_size =ALIGN_DOWN (cryp->header_in, cryp->hw_blocksize); -scatterwalk_copychunks (NULL , &cryp->in_walk, align_size,2 ); +scatterwalk_skip (&cryp->in_walk, align_size); cryp->header_in -= align_size; ret =dma_submit_error (dmaengine_submit (tx_in));if (ret <0 ) {dev_err (cryp->dev,"DMA in submit failed\n" );
@@ -1054,22 +1054,22 @@ static int stm32_cryp_dma_start(struct stm32_cryp *cryp) tx_out->callback = stm32_cryp_dma_callback; tx_out->callback_param = cryp;/* Advance scatterwalk to not DMA'ed data */ align_size =ALIGN_DOWN (cryp->payload_in, cryp->hw_blocksize); -scatterwalk_copychunks (NULL , &cryp->in_walk, align_size,2 ); +scatterwalk_skip (&cryp->in_walk, align_size); cryp->payload_in -= align_size; ret =dma_submit_error (dmaengine_submit (tx_in));if (ret <0 ) {dev_err (cryp->dev,"DMA in submit failed\n" );return ret; }dma_async_issue_pending (cryp->dma_lch_in);/* Advance scatterwalk to not DMA'ed data */ -scatterwalk_copychunks (NULL , &cryp->out_walk, align_size,2 ); +scatterwalk_skip (&cryp->out_walk, align_size); cryp->payload_out -= align_size; ret =dma_submit_error (dmaengine_submit (tx_out));if (ret <0 ) {dev_err (cryp->dev,"DMA out submit failed\n" );return ret;
@@ -1735,13 +1735,13 @@ static int stm32_cryp_prepare_req(struct skcipher_request *req, in_sg = areq->src; out_sg = areq->dst;scatterwalk_start (&cryp->in_walk, in_sg); -scatterwalk_start (&cryp->out_walk, out_sg);/* In output, jump after assoc data */ -scatterwalk_copychunks (NULL , &cryp->out_walk, cryp->areq->assoclen,2 ); +scatterwalk_start_at_pos (&cryp->out_walk, out_sg, + areq->assoclen); ret =stm32_cryp_hw_init (cryp);if (ret)return ret;
@@ -1871,16 +1871,16 @@ static int stm32_cryp_read_auth_tag(struct stm32_cryp *cryp)if (is_encrypt (cryp)) {u32 out_tag[AES_BLOCK_32 ];/* Get and write tag */ readsl (cryp->regs + cryp->caps->dout, out_tag,AES_BLOCK_32 ); -scatterwalk_copychunks (out_tag, &cryp->out_walk, cryp->authsize,1 ); +memcpy_to_scatterwalk (&cryp->out_walk, out_tag, cryp->authsize); }else {/* Get and check tag */ u32 in_tag[AES_BLOCK_32 ], out_tag[AES_BLOCK_32 ]; -scatterwalk_copychunks (in_tag, &cryp->in_walk, cryp->authsize,0 ); +memcpy_from_scatterwalk (in_tag, &cryp->in_walk, cryp->authsize);readsl (cryp->regs + cryp->caps->dout, out_tag,AES_BLOCK_32 );if (crypto_memneq (in_tag, out_tag, cryp->authsize)) ret = -EBADMSG ; }
@@ -1921,22 +1921,22 @@ static void stm32_cryp_check_ctr_counter(struct stm32_cryp *cryp)static void stm32_cryp_irq_read_data (struct stm32_cryp *cryp) {u32 block[AES_BLOCK_32 ];readsl (cryp->regs + cryp->caps->dout, block, cryp->hw_blocksize /sizeof (u32)); -scatterwalk_copychunks (block, &cryp->out_walk,min_t (size_t, cryp->hw_blocksize, - cryp->payload_out),1 ); +memcpy_to_scatterwalk (&cryp->out_walk, block,min_t (size_t, cryp->hw_blocksize, + cryp->payload_out)); cryp->payload_out -=min_t (size_t, cryp->hw_blocksize, cryp->payload_out); }static void stm32_cryp_irq_write_block (struct stm32_cryp *cryp) {u32 block[AES_BLOCK_32 ] = {0 }; -scatterwalk_copychunks (block, &cryp->in_walk,min_t (size_t, cryp->hw_blocksize, - cryp->payload_in),0 ); +memcpy_from_scatterwalk (block, &cryp->in_walk,min_t (size_t, cryp->hw_blocksize, + cryp->payload_in));writesl (cryp->regs + cryp->caps->din, block, cryp->hw_blocksize /sizeof (u32)); cryp->payload_in -=min_t (size_t, cryp->hw_blocksize, cryp->payload_in); }static void stm32_cryp_irq_write_gcm_padded_data (struct stm32_cryp *cryp)
@@ -1979,12 +1979,12 @@ static void stm32_cryp_irq_write_gcm_padded_data(struct stm32_cryp *cryp)* Same code as stm32_cryp_irq_read_data(), but we want to store * block value */ readsl (cryp->regs + cryp->caps->dout, block, cryp->hw_blocksize /sizeof (u32)); -scatterwalk_copychunks (block, &cryp->out_walk,min_t (size_t, cryp->hw_blocksize, - cryp->payload_out),1 ); +memcpy_to_scatterwalk (&cryp->out_walk, block,min_t (size_t, cryp->hw_blocksize, + cryp->payload_out)); cryp->payload_out -=min_t (size_t, cryp->hw_blocksize, cryp->payload_out);/* d) change mode back to AES GCM */ cfg &= ~CR_ALGO_MASK ;
@@ -2077,12 +2077,12 @@ static void stm32_cryp_irq_write_ccm_padded_data(struct stm32_cryp *cryp)* Same code as stm32_cryp_irq_read_data(), but we want to store * block value */ readsl (cryp->regs + cryp->caps->dout, block, cryp->hw_blocksize /sizeof (u32)); -scatterwalk_copychunks (block, &cryp->out_walk,min_t (size_t, cryp->hw_blocksize, - cryp->payload_out),1 ); +memcpy_to_scatterwalk (&cryp->out_walk, block,min_t (size_t, cryp->hw_blocksize, + cryp->payload_out)); cryp->payload_out -=min_t (size_t, cryp->hw_blocksize, cryp->payload_out);/* d) Load again CRYP_CSGCMCCMxR */ for (i =0 ; i <ARRAY_SIZE (cstmp2); i++) cstmp2[i] =stm32_cryp_read (cryp,CRYP_CSGCMCCM0R + i *4 );
@@ -2159,11 +2159,11 @@ static void stm32_cryp_irq_write_gcmccm_header(struct stm32_cryp *cryp)u32 block[AES_BLOCK_32 ] = {0 };size_t written; written =min_t (size_t,AES_BLOCK_SIZE , cryp->header_in); -scatterwalk_copychunks (block, &cryp->in_walk, written,0 ); +memcpy_from_scatterwalk (block, &cryp->in_walk, written);writesl (cryp->regs + cryp->caps->din, block,AES_BLOCK_32 ); cryp->header_in -= written;
Signature · 1 line
2.47.1
PATCH v2 24/29 crypto: x86/aes-gcm - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
In gcm_process_assoc(), use scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(). Use scatterwalk_done_src() which consolidates scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done().
Also rename some variables to avoid implying that anything is actually mapped (it's not), or that the loop is going page by page (it is for now, but nothing actually requires that to be the case).
--- arch/x86/crypto/aesni-intel_glue.c | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-)
arch/x86/crypto/aesni-intel_glue.c +14 -14
@@ -1289,45 +1289,45 @@ static void gcm_process_assoc(const struct aes_gcm_key *key, u8 ghash_acc[16],memset (ghash_acc,0 ,16 );scatterwalk_start (&walk, sg_src);while (assoclen) { -unsigned int len_this_page =scatterwalk_clamp (&walk, assoclen); -void *mapped =scatterwalk_map (&walk); -const void *src = mapped; +unsigned int orig_len_this_step; +const u8 *orig_src =scatterwalk_next (&walk, assoclen, + &orig_len_this_step); +unsigned int len_this_step = orig_len_this_step;unsigned int len; +const u8 *src = orig_src; - assoclen -= len_this_page; -scatterwalk_advance (&walk, len_this_page);if (unlikely (pos)) { - len =min (len_this_page,16 - pos); + len =min (len_this_step,16 - pos);memcpy (&buf[pos], src, len); pos += len; src += len; - len_this_page -= len; + len_this_step -= len;if (pos <16 ) goto next;aes_gcm_aad_update (key, ghash_acc, buf,16 , flags); pos =0 ; } - len = len_this_page; + len = len_this_step;if (unlikely (assoclen))/* Not the last segment yet? */ len =round_down (len,16 );aes_gcm_aad_update (key, ghash_acc, src, len, flags); src += len; - len_this_page -= len; -if (unlikely (len_this_page)) { -memcpy (buf, src, len_this_page); - pos = len_this_page; + len_this_step -= len; +if (unlikely (len_this_step)) { +memcpy (buf, src, len_this_step); + pos = len_this_step; } next: -scatterwalk_unmap (mapped); -scatterwalk_pagedone (&walk,0 , assoclen); +scatterwalk_done_src (&walk, orig_src, orig_len_this_step);if (need_resched ()) {kernel_fpu_end ();kernel_fpu_begin (); } + assoclen -= orig_len_this_step; }if (unlikely (pos))aes_gcm_aad_update (key, ghash_acc, buf, pos, flags); }
Signature · 1 line
2.47.1
PATCH v2 25/29 crypto: x86/aegis - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
In crypto_aegis128_aesni_process_ad(), use scatterwalk_next() which consolidates scatterwalk_clamp() and scatterwalk_map(). Use scatterwalk_done_src() which consolidates scatterwalk_unmap(), scatterwalk_advance(), and scatterwalk_done().
--- arch/x86/crypto/aegis128-aesni-glue.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-)
arch/x86/crypto/aegis128-aesni-glue.c +4 -6
@@ -69,14 +69,14 @@ static void crypto_aegis128_aesni_process_ad(struct aegis_block buf;unsigned int pos =0 ;scatterwalk_start (&walk, sg_src);while (assoclen !=0 ) { -unsigned int size =scatterwalk_clamp (&walk, assoclen); +unsigned int size; +const u8 *mapped =scatterwalk_next (&walk, assoclen, &size);unsigned int left = size; -void *mapped =scatterwalk_map (&walk); -const u8 *src = (const u8 *)mapped; +const u8 *src = mapped;if (pos + size >=AEGIS128_BLOCK_SIZE ) {if (pos >0 ) {unsigned int fill =AEGIS128_BLOCK_SIZE - pos;memcpy (buf.bytes + pos, src, fill);
@@ -95,13 +95,11 @@ static void crypto_aegis128_aesni_process_ad(memcpy (buf.bytes + pos, src, left); pos += left; assoclen -= size; -scatterwalk_unmap (mapped); -scatterwalk_advance (&walk, size); -scatterwalk_done (&walk,0 , assoclen); +scatterwalk_done_src (&walk, mapped, size); }if (pos >0 ) {memset (buf.bytes + pos,0 ,AEGIS128_BLOCK_SIZE - pos);aegis128_aesni_ad (state, buf.bytes,AEGIS128_BLOCK_SIZE );
Signature · 1 line
2.47.1
PATCH v2 26/29 net/tls: use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Replace calls to the deprecated function scatterwalk_copychunks() with memcpy_from_scatterwalk(), memcpy_to_scatterwalk(), or scatterwalk_skip() as appropriate. The new functions generally behave more as expected and eliminate the need to call scatterwalk_done() or scatterwalk_pagedone().
However, the new functions intentionally do not advance to the next sg entry right away, which would have broken chain_to_walk() which is accessing the fields of struct scatter_walk directly. To avoid this, replace chain_to_walk() with scatterwalk_get_sglist() which supports the needed functionality.
---
This patch is part of a long series touching many files, so I have limited the Cc list on the full series. If you want the full series and did not receive it, please retrieve it from lore.kernel.org.
net/tls/tls_device_fallback.c | 31 ++++++------------------------- 1 file changed, 6 insertions(+), 25 deletions(-)
net/tls/tls_device_fallback.c +6 -25
@@ -35,21 +35,10 @@#include <net/ip6_checksum.h> #include <linux/skbuff_ref.h> #include "tls.h" -static void chain_to_walk (struct scatterlist *sg,struct scatter_walk *walk) -{ -struct scatterlist *src = walk->sg; -int diff = walk->offset - src->offset; - -sg_set_page (sg,sg_page (src), - src->length - diff, walk->offset); - -scatterwalk_crypto_chain (sg,sg_next (src),2 ); -} - static int tls_enc_record(struct aead_request *aead_req, struct crypto_aead *aead, char *aad, char *iv, __be64 rcd_sn, struct scatter_walk *in, struct scatter_walk *out, int *in_len,
@@ -67,20 +56,17 @@ static int tls_enc_record(struct aead_request *aead_req,DEBUG_NET_WARN_ON_ONCE (!cipher_desc || !cipher_desc->offloadable); buf_size =TLS_HEADER_SIZE + cipher_desc->iv; len =min_t (int, *in_len, buf_size); -scatterwalk_copychunks (buf, in, len,0 ); -scatterwalk_copychunks (buf, out, len,1 ); +memcpy_from_scatterwalk (buf, in, len); +memcpy_to_scatterwalk (out, buf, len); *in_len -= len;if (!*in_len)return 0 ; -scatterwalk_pagedone (in,0 ,1 ); -scatterwalk_pagedone (out,1 ,1 ); - len = buf[4 ] | (buf[3 ] <<8 ); len -= cipher_desc->iv;tls_make_aad (aad, len - cipher_desc->tag, (char *)&rcd_sn, buf[0 ], prot);
@@ -88,12 +74,12 @@ static int tls_enc_record(struct aead_request *aead_req,sg_init_table (sg_in,ARRAY_SIZE (sg_in));sg_init_table (sg_out,ARRAY_SIZE (sg_out));sg_set_buf (sg_in, aad,TLS_AAD_SPACE_SIZE );sg_set_buf (sg_out, aad,TLS_AAD_SPACE_SIZE ); -chain_to_walk (sg_in +1 , in); -chain_to_walk (sg_out +1 , out); +scatterwalk_get_sglist (in, sg_in +1 ); +scatterwalk_get_sglist (out, sg_out +1 ); *in_len -= len;if (*in_len <0 ) { *in_len += cipher_desc->tag;/* the input buffer doesn't contain the entire record.
@@ -108,14 +94,12 @@ static int tls_enc_record(struct aead_request *aead_req, *in_len =0 ; }if (*in_len) { -scatterwalk_copychunks (NULL , in, len,2 ); -scatterwalk_pagedone (in,0 ,1 ); -scatterwalk_copychunks (NULL , out, len,2 ); -scatterwalk_pagedone (out,1 ,1 ); +scatterwalk_skip (in, len); +scatterwalk_skip (out, len); } len -= cipher_desc->tag;aead_request_set_crypt (aead_req, sg_in, sg_out, len, iv);
@@ -160,13 +144,10 @@ static int tls_enc_records(struct aead_request *aead_req, cpu_to_be64(rcd_sn), &in, &out, &len, prot); rcd_sn++; }while (rc ==0 && len); -scatterwalk_done (&in,0 ,0 ); -scatterwalk_done (&out,1 ,0 ); -return rc; }/* Can't use icsk->icsk_af_ops->send_check here because the ip addresses * might have been changed by NAT.
Signature · 1 line
2.47.1
PATCH v2 27/29 crypto: skcipher - use the new scatterwalk functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Convert skcipher_walk to use the new scatterwalk functions.
This includes a few changes to exactly where the different parts of the iteration happen. For example the dcache flush that previously happened in scatterwalk_done() now happens in scatterwalk_dst_done() or in memcpy_to_scatterwalk(). Advancing to the next sg entry now happens just-in-time in scatterwalk_clamp() instead of in scatterwalk_done().
--- crypto/skcipher.c | 51 ++++++++++++++++++----------------------------- 1 file changed, 19 insertions(+), 32 deletions(-)
crypto/skcipher.c +19 -32
@@ -46,20 +46,10 @@ static inline void skcipher_map_src(struct skcipher_walk *walk)static inline void skcipher_map_dst (struct skcipher_walk *walk) { walk->dst.virt.addr =scatterwalk_map (&walk->out); } -static inline void skcipher_unmap_src (struct skcipher_walk *walk) -{ -scatterwalk_unmap (walk->src.virt.addr); -} - -static inline void skcipher_unmap_dst (struct skcipher_walk *walk) -{ -scatterwalk_unmap (walk->dst.virt.addr); -} -static inline gfp_t skcipher_walk_gfp (struct skcipher_walk *walk) {return walk->flags &SKCIPHER_WALK_SLEEP ?GFP_KERNEL :GFP_ATOMIC ; }
@@ -67,18 +57,10 @@ static inline struct skcipher_alg *__crypto_skcipher_alg( struct crypto_alg *alg) { return container_of(alg, struct skcipher_alg, base); } -static int skcipher_done_slow (struct skcipher_walk *walk,unsigned int bsize) -{ -u8 *addr =PTR_ALIGN (walk->buffer, walk->alignmask +1 ); - -scatterwalk_copychunks (addr, &walk->out, bsize,1 ); -return 0 ; -} -/** * skcipher_walk_done() - finish one step of a skcipher_walk * @walk: the skcipher_walk * @res: number of bytes *not* processed (>= 0) from walk->nbytes, * or a -errno value to terminate the walk due to an error
@@ -109,44 +91,45 @@ int skcipher_walk_done(struct skcipher_walk *walk, int res) }if (likely (!(walk->flags & (SKCIPHER_WALK_SLOW |SKCIPHER_WALK_COPY |SKCIPHER_WALK_DIFF )))) { -unmap_src: -skcipher_unmap_src (walk); +scatterwalk_advance (&walk->in, n); }else if (walk->flags &SKCIPHER_WALK_DIFF ) { -skcipher_unmap_dst (walk); - goto unmap_src; +scatterwalk_unmap (walk->src.virt.addr); +scatterwalk_advance (&walk->in, n); }else if (walk->flags &SKCIPHER_WALK_COPY ) { +scatterwalk_advance (&walk->in, n);skcipher_map_dst (walk);memcpy (walk->dst.virt.addr, walk->page, n); -skcipher_unmap_dst (walk); }else {/* SKCIPHER_WALK_SLOW */ if (res >0 ) {/* * Didn't process all bytes. Either the algorithm is * broken, or this was the last step and it turned out * the message wasn't evenly divisible into blocks but * the algorithm requires it. */ res = -EINVAL ; total =0 ; - }else - n =skcipher_done_slow (walk, n); + }else { +u8 *buf =PTR_ALIGN (walk->buffer, walk->alignmask +1 ); + +memcpy_to_scatterwalk (&walk->out, buf, n); + } + goto dst_done; } +scatterwalk_done_dst (&walk->out, walk->dst.virt.addr, n); +dst_done: +if (res >0 ) res =0 ; walk->total = total; walk->nbytes =0 ; -scatterwalk_advance (&walk->in, n); -scatterwalk_advance (&walk->out, n); -scatterwalk_done (&walk->in,0 , total); -scatterwalk_done (&walk->out,1 , total); -if (total) {if (walk->flags &SKCIPHER_WALK_SLEEP )cond_resched (); walk->flags &= ~(SKCIPHER_WALK_SLOW |SKCIPHER_WALK_COPY |SKCIPHER_WALK_DIFF );
@@ -189,11 +172,11 @@ static int skcipher_next_slow(struct skcipher_walk *walk, unsigned int bsize) walk->buffer = buffer; } walk->dst.virt.addr =PTR_ALIGN (buffer, alignmask +1 ); walk->src.virt.addr = walk->dst.virt.addr; -scatterwalk_copychunks (walk->src.virt.addr, &walk->in, bsize,0 ); +memcpy_from_scatterwalk (walk->src.virt.addr, &walk->in, bsize); walk->nbytes = bsize; walk->flags |=SKCIPHER_WALK_SLOW ;return 0 ;
@@ -203,11 +186,15 @@ static int skcipher_next_copy(struct skcipher_walk *walk) {u8 *tmp = walk->page;skcipher_map_src (walk);memcpy (tmp, walk->src.virt.addr, walk->nbytes); -skcipher_unmap_src (walk); +scatterwalk_unmap (walk->src.virt.addr); +/* +* walk->in is advanced later when the number of bytes actually +* processed (which might be less than walk->nbytes) is known. +*/ walk->src.virt.addr = tmp; walk->dst.virt.addr = tmp;return 0 ; }
Signature · 1 line
2.47.1
PATCH v2 28/29 crypto: scatterwalk - remove obsolete functions
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
Remove various functions that are no longer used.
--- crypto/scatterwalk.c | 37 ------------------------------------ include/crypto/scatterwalk.h | 25 ------------------------ 2 files changed, 62 deletions(-)
crypto/scatterwalk.c +0 -37
@@ -28,47 +28,10 @@ void scatterwalk_skip(struct scatter_walk *walk, unsigned int nbytes) walk->sg = sg; walk->offset = sg->offset + nbytes; }EXPORT_SYMBOL_GPL (scatterwalk_skip); -static inline void memcpy_dir (void *buf,void *sgdata,size_t nbytes,int out) -{ -void *src = out ? buf : sgdata; -void *dst = out ? sgdata : buf; - -memcpy (dst, src, nbytes); -} - -void scatterwalk_copychunks (void *buf,struct scatter_walk *walk, -size_t nbytes,int out) -{ -for (;;) { -unsigned int len_this_page =scatterwalk_pagelen (walk); -u8 *vaddr; - -if (len_this_page > nbytes) - len_this_page = nbytes; - -if (out !=2 ) { - vaddr =scatterwalk_map (walk); -memcpy_dir (buf, vaddr, len_this_page, out); -scatterwalk_unmap (vaddr); - } - -scatterwalk_advance (walk, len_this_page); - -if (nbytes == len_this_page) -break ; - - buf += len_this_page; - nbytes -= len_this_page; - -scatterwalk_pagedone (walk, out &1 ,1 ); - } -} -EXPORT_SYMBOL_GPL (scatterwalk_copychunks); -inline void memcpy_from_scatterwalk (void *buf,struct scatter_walk *walk,unsigned int nbytes) { do { const void *src_addr;
include/crypto/scatterwalk.h +0 -25
@@ -113,32 +113,10 @@ static inline void *scatterwalk_next(struct scatter_walk *walk, { *nbytes_ret =scatterwalk_clamp (walk, total);return scatterwalk_map (walk); } -static inline void scatterwalk_pagedone (struct scatter_walk *walk,int out, -unsigned int more) -{ -if (out) { -struct page *page; - - page =sg_page (walk->sg) + ((walk->offset -1 ) >>PAGE_SHIFT ); -flush_dcache_page (page); - } - -if (more && walk->offset >= walk->sg->offset + walk->sg->length) -scatterwalk_start (walk,sg_next (walk->sg)); -} - -static inline void scatterwalk_done (struct scatter_walk *walk,int out, -int more) -{ -if (!more || walk->offset >= walk->sg->offset + walk->sg->length || - !(walk->offset & (PAGE_SIZE -1 ))) -scatterwalk_pagedone (walk, out, more); -} -static inline void scatterwalk_advance (struct scatter_walk *walk,unsigned int nbytes) { walk->offset += nbytes; }
@@ -182,13 +160,10 @@ static inline void scatterwalk_done_dst(struct scatter_walk *walk,scatterwalk_advance (walk, nbytes); }void scatterwalk_skip (struct scatter_walk *walk,unsigned int nbytes); -void scatterwalk_copychunks (void *buf,struct scatter_walk *walk, -size_t nbytes,int out); -void memcpy_from_scatterwalk (void *buf,struct scatter_walk *walk,unsigned int nbytes);void memcpy_to_scatterwalk (struct scatter_walk *walk,const void *buf,unsigned int nbytes);
Signature · 1 line
2.47.1
PATCH v2 29/29 crypto: scatterwalk - don't split at page boundaries when !HIGHMEM
In reply to Eric BiggersFrom: Eric Biggers <[email protected]>
When !HIGHMEM, the kmap_local_page() in the scatterlist walker does not actually map anything, and the address it returns is just the address from the kernel's direct map, where each sg entry's data is virtually contiguous. To improve performance, stop unnecessarily clamping data segments to page boundaries in this case.
For now, still limit segments to PAGE_SIZE. This is needed to prevent preemption from being disabled for too long when SIMD is used, and to support the alignmask case which still uses a page-sized bounce buffer.
Even so, this change still helps a lot in cases where messages cross a page boundary. For example, testing IPsec with AES-GCM on x86_64, the messages are 1424 bytes which is less than PAGE_SIZE, but on the Rx side over a third cross a page boundary. These ended up being processed in three parts, with the middle part going through skcipher_next_slow which uses a 16-byte bounce buffer. That was causing a significant amount of overhead which unnecessarily reduced the performance benefit of the new x86_64 AES-GCM assembly code. This change solves the problem; all these messages now get passed to the assembly code in one part.
--- crypto/skcipher.c | 4 +- include/crypto/scatterwalk.h | 79 ++++++++++++++++++++++++++---------- 2 files changed, 59 insertions(+), 24 deletions(-)
crypto/skcipher.c +2 -2
@@ -203,12 +203,12 @@ static int skcipher_next_fast(struct skcipher_walk *walk) {unsigned long diff; diff =offset_in_page (walk->in.offset) -offset_in_page (walk->out.offset); - diff |= (u8 *)scatterwalk_page (&walk->in) - - (u8 *)scatterwalk_page (&walk->out); + diff |= (u8 *)(sg_page (walk->in.sg) + (walk->in.offset >>PAGE_SHIFT )) - + (u8 *)(sg_page (walk->out.sg) + (walk->out.offset >>PAGE_SHIFT ));skcipher_map_src (walk); walk->dst.virt.addr = walk->src.virt.addr;if (diff) {
include/crypto/scatterwalk.h +57 -22
138 lines not on this page · raw message
Signature · 1 line
2.47.1
Quoted 3 lines · Eric Biggers
base-commit:
7b6092ee7a4ce2d03dc65b87537889e8e1e0ab95
prerequisite-patch-id:a0414cca60a72ee1056cce0a74175103b19e0e77
This patchset is also available at:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux.git crypto-scatterlist-v2