3c67d83a8a
Reviewed by: George Wilson <george.wilson@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com>
Reviewed by: Richard Lowe <richlowe@richlowe.net>
Approved by: Garrett D'Amore <garrett@damore.org>
Ported by: Tony Hutter <hutter2@llnl.gov>
OpenZFS-issue: https://www.illumos.org/issues/4185
OpenZFS-commit: https://github.com/openzfs/openzfs/commit/45818ee
Porting Notes:
This code is ported on top of the Illumos Crypto Framework code:
b5e030c8db
The list of porting changes includes:
- Copied module/icp/include/sha2/sha2.h directly from illumos
- Removed from module/icp/algs/sha2/sha2.c:
#pragma inline(SHA256Init, SHA384Init, SHA512Init)
- Added 'ctx' to lib/libzfs/libzfs_sendrecv.c:zio_checksum_SHA256() since
it now takes in an extra parameter.
- Added CTASSERT() to assert.h from for module/zfs/edonr_zfs.c
- Added skein & edonr to libicp/Makefile.am
- Added sha512.S. It was generated from sha512-x86_64.pl in Illumos.
- Updated ztest.c with new fletcher_4_*() args; used NULL for new CTX argument.
- In icp/algs/edonr/edonr_byteorder.h, Removed the #if defined(__linux) section
to not #include the non-existant endian.h.
- In skein_test.c, renane NULL to 0 in "no test vector" array entries to get
around a compiler warning.
- Fixup test files:
- Rename <sys/varargs.h> -> <varargs.h>, <strings.h> -> <string.h>,
- Remove <note.h> and define NOTE() as NOP.
- Define u_longlong_t
- Rename "#!/usr/bin/ksh" -> "#!/bin/ksh -p"
- Rename NULL to 0 in "no test vector" array entries to get around a
compiler warning.
- Remove "for isa in $($ISAINFO); do" stuff
- Add/update Makefiles
- Add some userspace headers like stdio.h/stdlib.h in places of
sys/types.h.
- EXPORT_SYMBOL *_Init/*_Update/*_Final... routines in ICP modules.
- Update scripts/zfs2zol-patch.sed
- include <sys/sha2.h> in sha2_impl.h
- Add sha2.h to include/sys/Makefile.am
- Add skein and edonr dirs to icp Makefile
- Add new checksums to zpool_get.cfg
- Move checksum switch block from zfs_secpolicy_setprop() to
zfs_check_settable()
- Fix -Wuninitialized error in edonr_byteorder.h on PPC
- Fix stack frame size errors on ARM32
- Don't unroll loops in Skein on 32-bit to save stack space
- Add memory barriers in sha2.c on 32-bit to save stack space
- Add filetest_001_pos.ksh checksum sanity test
- Add option to write psudorandom data in file_write utility
104 lines
3.0 KiB
C
104 lines
3.0 KiB
C
/*
|
|
* CDDL HEADER START
|
|
*
|
|
* The contents of this file are subject to the terms of the
|
|
* Common Development and Distribution License (the "License").
|
|
* You may not use this file except in compliance with the License.
|
|
*
|
|
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
|
|
* or http://opensource.org/licenses/CDDL-1.0.
|
|
* See the License for the specific language governing permissions
|
|
* and limitations under the License.
|
|
*
|
|
* When distributing Covered Code, include this CDDL HEADER in each
|
|
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
|
|
* If applicable, add the following below this CDDL HEADER, with the
|
|
* fields enclosed by brackets "[]" replaced with your own identifying
|
|
* information: Portions Copyright [yyyy] [name of copyright owner]
|
|
*
|
|
* CDDL HEADER END
|
|
*/
|
|
/*
|
|
* Copyright 2013 Saso Kiselkov. All rights reserved.
|
|
* Use is subject to license terms.
|
|
*/
|
|
#include <sys/zfs_context.h>
|
|
#include <sys/zio.h>
|
|
#include <sys/edonr.h>
|
|
#include <sys/zfs_context.h> /* For CTASSERT() */
|
|
|
|
#define EDONR_MODE 512
|
|
#define EDONR_BLOCK_SIZE EdonR512_BLOCK_SIZE
|
|
|
|
/*
|
|
* Native zio_checksum interface for the Edon-R hash function.
|
|
*/
|
|
/*ARGSUSED*/
|
|
void
|
|
zio_checksum_edonr_native(const void *buf, uint64_t size,
|
|
const void *ctx_template, zio_cksum_t *zcp)
|
|
{
|
|
uint8_t digest[EDONR_MODE / 8];
|
|
EdonRState ctx;
|
|
|
|
ASSERT(ctx_template != NULL);
|
|
bcopy(ctx_template, &ctx, sizeof (ctx));
|
|
EdonRUpdate(&ctx, buf, size * 8);
|
|
EdonRFinal(&ctx, digest);
|
|
bcopy(digest, zcp->zc_word, sizeof (zcp->zc_word));
|
|
}
|
|
|
|
/*
|
|
* Byteswapped zio_checksum interface for the Edon-R hash function.
|
|
*/
|
|
void
|
|
zio_checksum_edonr_byteswap(const void *buf, uint64_t size,
|
|
const void *ctx_template, zio_cksum_t *zcp)
|
|
{
|
|
zio_cksum_t tmp;
|
|
|
|
zio_checksum_edonr_native(buf, size, ctx_template, &tmp);
|
|
zcp->zc_word[0] = BSWAP_64(zcp->zc_word[0]);
|
|
zcp->zc_word[1] = BSWAP_64(zcp->zc_word[1]);
|
|
zcp->zc_word[2] = BSWAP_64(zcp->zc_word[2]);
|
|
zcp->zc_word[3] = BSWAP_64(zcp->zc_word[3]);
|
|
}
|
|
|
|
void *
|
|
zio_checksum_edonr_tmpl_init(const zio_cksum_salt_t *salt)
|
|
{
|
|
EdonRState *ctx;
|
|
uint8_t salt_block[EDONR_BLOCK_SIZE];
|
|
|
|
/*
|
|
* Edon-R needs all but the last hash invocation to be on full-size
|
|
* blocks, but the salt is too small. Rather than simply padding it
|
|
* with zeros, we expand the salt into a new salt block of proper
|
|
* size by double-hashing it (the new salt block will be composed of
|
|
* H(salt) || H(H(salt))).
|
|
*/
|
|
CTASSERT(EDONR_BLOCK_SIZE == 2 * (EDONR_MODE / 8));
|
|
EdonRHash(EDONR_MODE, salt->zcs_bytes, sizeof (salt->zcs_bytes) * 8,
|
|
salt_block);
|
|
EdonRHash(EDONR_MODE, salt_block, EDONR_MODE, salt_block +
|
|
EDONR_MODE / 8);
|
|
|
|
/*
|
|
* Feed the new salt block into the hash function - this will serve
|
|
* as our MAC key.
|
|
*/
|
|
ctx = kmem_zalloc(sizeof (*ctx), KM_SLEEP);
|
|
EdonRInit(ctx, EDONR_MODE);
|
|
EdonRUpdate(ctx, salt_block, sizeof (salt_block) * 8);
|
|
return (ctx);
|
|
}
|
|
|
|
void
|
|
zio_checksum_edonr_tmpl_free(void *ctx_template)
|
|
{
|
|
EdonRState *ctx = ctx_template;
|
|
|
|
bzero(ctx, sizeof (*ctx));
|
|
kmem_free(ctx, sizeof (*ctx));
|
|
}
|