150 static struct skcipher_request *rxkad_get_call_crypto(struct rxrpc_call *call)  in rxkad_get_call_crypto()  argument
152 	struct crypto_skcipher *tfm = &call->conn->cipher->base;  in rxkad_get_call_crypto()
153 	struct skcipher_request	*cipher_req = call->cipher_req;  in rxkad_get_call_crypto()
159 		call->cipher_req = cipher_req;  in rxkad_get_call_crypto()
168 static void rxkad_free_call_crypto(struct rxrpc_call *call)  in rxkad_free_call_crypto()  argument
170 	if (call->cipher_req)  in rxkad_free_call_crypto()
171 		skcipher_request_free(call->cipher_req);  in rxkad_free_call_crypto()
172 	call->cipher_req = NULL;  in rxkad_free_call_crypto()
178 static int rxkad_secure_packet_auth(const struct rxrpc_call *call,  in rxkad_secure_packet_auth()  argument
192 	check = sp->hdr.seq ^ call->call_id;  in rxkad_secure_packet_auth()
202 	skcipher_request_set_sync_tfm(req, call->conn->cipher);  in rxkad_secure_packet_auth()
215 static int rxkad_secure_packet_encrypt(const struct rxrpc_call *call,  in rxkad_secure_packet_encrypt()  argument
234 	check = sp->hdr.seq ^ call->call_id;  in rxkad_secure_packet_encrypt()
241 	token = call->conn->params.key->payload.data[0];  in rxkad_secure_packet_encrypt()
245 	skcipher_request_set_sync_tfm(req, call->conn->cipher);  in rxkad_secure_packet_encrypt()
255 	len = data_size + call->conn->size_align - 1;  in rxkad_secure_packet_encrypt()
256 	len &= ~(call->conn->size_align - 1);  in rxkad_secure_packet_encrypt()
276 static int rxkad_secure_packet(struct rxrpc_call *call,  in rxkad_secure_packet()  argument
291 	       call->debug_id, key_serial(call->conn->params.key),  in rxkad_secure_packet()
294 	if (!call->conn->cipher)  in rxkad_secure_packet()
297 	ret = key_validate(call->conn->params.key);  in rxkad_secure_packet()
301 	req = rxkad_get_call_crypto(call);  in rxkad_secure_packet()
306 	memcpy(&iv, call->conn->csum_iv.x, sizeof(iv));  in rxkad_secure_packet()
309 	x = (call->cid & RXRPC_CHANNELMASK) << (32 - RXRPC_CIDSHIFT);  in rxkad_secure_packet()
311 	call->crypto_buf[0] = htonl(call->call_id);  in rxkad_secure_packet()
312 	call->crypto_buf[1] = htonl(x);  in rxkad_secure_packet()
314 	sg_init_one(&sg, call->crypto_buf, 8);  in rxkad_secure_packet()
315 	skcipher_request_set_sync_tfm(req, call->conn->cipher);  in rxkad_secure_packet()
321 	y = ntohl(call->crypto_buf[1]);  in rxkad_secure_packet()
327 	switch (call->conn->params.security_level) {  in rxkad_secure_packet()
332 		ret = rxkad_secure_packet_auth(call, skb, data_size, sechdr,  in rxkad_secure_packet()
336 		ret = rxkad_secure_packet_encrypt(call, skb, data_size,  in rxkad_secure_packet()
351 static int rxkad_verify_packet_1(struct rxrpc_call *call, struct sk_buff *skb,  in rxkad_verify_packet_1()  argument
367 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_1_hdr", "V1H",  in rxkad_verify_packet_1()
383 	skcipher_request_set_sync_tfm(req, call->conn->cipher);  in rxkad_verify_packet_1()
391 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_1_len", "XV1",  in rxkad_verify_packet_1()
402 	check ^= seq ^ call->call_id;  in rxkad_verify_packet_1()
405 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_1_check", "V1C",  in rxkad_verify_packet_1()
411 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_1_datalen", "V1L",  in rxkad_verify_packet_1()
421 		rxrpc_send_abort_packet(call);  in rxkad_verify_packet_1()
428 static int rxkad_verify_packet_2(struct rxrpc_call *call, struct sk_buff *skb,  in rxkad_verify_packet_2()  argument
445 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_2_hdr", "V2H",  in rxkad_verify_packet_2()
472 	token = call->conn->params.key->payload.data[0];  in rxkad_verify_packet_2()
475 	skcipher_request_set_sync_tfm(req, call->conn->cipher);  in rxkad_verify_packet_2()
485 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_2_len", "XV2",  in rxkad_verify_packet_2()
496 	check ^= seq ^ call->call_id;  in rxkad_verify_packet_2()
499 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_2_check", "V2C",  in rxkad_verify_packet_2()
505 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_2_datalen", "V2L",  in rxkad_verify_packet_2()
515 		rxrpc_send_abort_packet(call);  in rxkad_verify_packet_2()
527 static int rxkad_verify_packet(struct rxrpc_call *call, struct sk_buff *skb,  in rxkad_verify_packet()  argument
539 	       call->debug_id, key_serial(call->conn->params.key), seq);  in rxkad_verify_packet()
541 	if (!call->conn->cipher)  in rxkad_verify_packet()
544 	req = rxkad_get_call_crypto(call);  in rxkad_verify_packet()
549 	memcpy(&iv, call->conn->csum_iv.x, sizeof(iv));  in rxkad_verify_packet()
552 	x = (call->cid & RXRPC_CHANNELMASK) << (32 - RXRPC_CIDSHIFT);  in rxkad_verify_packet()
554 	call->crypto_buf[0] = htonl(call->call_id);  in rxkad_verify_packet()
555 	call->crypto_buf[1] = htonl(x);  in rxkad_verify_packet()
557 	sg_init_one(&sg, call->crypto_buf, 8);  in rxkad_verify_packet()
558 	skcipher_request_set_sync_tfm(req, call->conn->cipher);  in rxkad_verify_packet()
564 	y = ntohl(call->crypto_buf[1]);  in rxkad_verify_packet()
570 		aborted = rxrpc_abort_eproto(call, skb, "rxkad_csum", "VCK",  in rxkad_verify_packet()
575 	switch (call->conn->params.security_level) {  in rxkad_verify_packet()
579 		return rxkad_verify_packet_1(call, skb, offset, len, seq, req);  in rxkad_verify_packet()
581 		return rxkad_verify_packet_2(call, skb, offset, len, seq, req);  in rxkad_verify_packet()
588 		rxrpc_send_abort_packet(call);  in rxkad_verify_packet()
595 static void rxkad_locate_data_1(struct rxrpc_call *call, struct sk_buff *skb,  in rxkad_locate_data_1()  argument
609 static void rxkad_locate_data_2(struct rxrpc_call *call, struct sk_buff *skb,  in rxkad_locate_data_2()  argument
623 static void rxkad_locate_data(struct rxrpc_call *call, struct sk_buff *skb,  in rxkad_locate_data()  argument
626 	switch (call->conn->params.security_level) {  in rxkad_locate_data()
628 		rxkad_locate_data_1(call, skb, _offset, _len);  in rxkad_locate_data()
631 		rxkad_locate_data_2(call, skb, _offset, _len);  in rxkad_locate_data()
1174 		struct rxrpc_call *call;  in rxkad_verify_response()  local
1187 			call = rcu_dereference_protected(  in rxkad_verify_response()
1188 				conn->channels[i].call,  in rxkad_verify_response()
1190 			if (call && call->state < RXRPC_CALL_COMPLETE)  in rxkad_verify_response()