mirror of
https://github.com/torvalds/linux.git
synced 2025-11-03 01:59:51 +02:00
68546e5632
Reorganize the Curve25519 library code: - Build a single libcurve25519 module, instead of up to three modules: libcurve25519, libcurve25519-generic, and an arch-specific module. - Move the arch-specific Curve25519 code from arch/$(SRCARCH)/crypto/ to lib/crypto/$(SRCARCH)/. Centralize the build rules into lib/crypto/Makefile and lib/crypto/Kconfig. - Include the arch-specific code directly in lib/crypto/curve25519.c via a header, rather than using a separate .c file. - Eliminate the entanglement with CRYPTO. CRYPTO_LIB_CURVE25519 no longer selects CRYPTO, and the arch-specific Curve25519 code no longer depends on CRYPTO. This brings Curve25519 in line with the latest conventions for lib/crypto/, used by other algorithms. The exception is that I kept the generic code in separate translation units for now. (Some of the function names collide between the x86 and generic Curve25519 code. And the Curve25519 functions are very long anyway, so inlining doesn't matter as much for Curve25519 as it does for some other algorithms.) Link: https://lore.kernel.org/r/20250906213523.84915-11-ebiggers@kernel.org Signed-off-by: Eric Biggers <ebiggers@kernel.org>
78 lines
2.3 KiB
C
78 lines
2.3 KiB
C
// SPDX-License-Identifier: GPL-2.0 OR MIT
|
|
/*
|
|
* Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
|
|
*
|
|
* This is an implementation of the Curve25519 ECDH algorithm, using either an
|
|
* architecture-optimized implementation or a generic implementation. The
|
|
* generic implementation is either 32-bit, or 64-bit with 128-bit integers,
|
|
* depending on what is supported by the target compiler.
|
|
*
|
|
* Information: https://cr.yp.to/ecdh.html
|
|
*/
|
|
|
|
#include <crypto/curve25519.h>
|
|
#include <crypto/utils.h>
|
|
#include <linux/export.h>
|
|
#include <linux/init.h>
|
|
#include <linux/module.h>
|
|
|
|
static const u8 curve25519_null_point[CURVE25519_KEY_SIZE] __aligned(32) = { 0 };
|
|
static const u8 curve25519_base_point[CURVE25519_KEY_SIZE] __aligned(32) = { 9 };
|
|
|
|
#ifdef CONFIG_CRYPTO_LIB_CURVE25519_ARCH
|
|
#include "curve25519.h" /* $(SRCARCH)/curve25519.h */
|
|
#else
|
|
static void curve25519_arch(u8 mypublic[CURVE25519_KEY_SIZE],
|
|
const u8 secret[CURVE25519_KEY_SIZE],
|
|
const u8 basepoint[CURVE25519_KEY_SIZE])
|
|
{
|
|
curve25519_generic(mypublic, secret, basepoint);
|
|
}
|
|
|
|
static void curve25519_base_arch(u8 pub[CURVE25519_KEY_SIZE],
|
|
const u8 secret[CURVE25519_KEY_SIZE])
|
|
{
|
|
curve25519_generic(pub, secret, curve25519_base_point);
|
|
}
|
|
#endif
|
|
|
|
bool __must_check
|
|
curve25519(u8 mypublic[CURVE25519_KEY_SIZE],
|
|
const u8 secret[CURVE25519_KEY_SIZE],
|
|
const u8 basepoint[CURVE25519_KEY_SIZE])
|
|
{
|
|
curve25519_arch(mypublic, secret, basepoint);
|
|
return crypto_memneq(mypublic, curve25519_null_point,
|
|
CURVE25519_KEY_SIZE);
|
|
}
|
|
EXPORT_SYMBOL(curve25519);
|
|
|
|
bool __must_check
|
|
curve25519_generate_public(u8 pub[CURVE25519_KEY_SIZE],
|
|
const u8 secret[CURVE25519_KEY_SIZE])
|
|
{
|
|
if (unlikely(!crypto_memneq(secret, curve25519_null_point,
|
|
CURVE25519_KEY_SIZE)))
|
|
return false;
|
|
curve25519_base_arch(pub, secret);
|
|
return crypto_memneq(pub, curve25519_null_point, CURVE25519_KEY_SIZE);
|
|
}
|
|
EXPORT_SYMBOL(curve25519_generate_public);
|
|
|
|
#ifdef curve25519_mod_init_arch
|
|
static int __init curve25519_mod_init(void)
|
|
{
|
|
curve25519_mod_init_arch();
|
|
return 0;
|
|
}
|
|
subsys_initcall(curve25519_mod_init);
|
|
|
|
static void __exit curve25519_mod_exit(void)
|
|
{
|
|
}
|
|
module_exit(curve25519_mod_exit);
|
|
#endif
|
|
|
|
MODULE_LICENSE("GPL v2");
|
|
MODULE_DESCRIPTION("Curve25519 algorithm");
|
|
MODULE_AUTHOR("Jason A. Donenfeld <Jason@zx2c4.com>");
|