linux-imx

/*

 * Copyright (c) 2013, 2014 Kenneth MacKay. All rights reserved.

 * Copyright (c) 2019 Vitaly Chikunov <vt@altlinux.org>

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions are

 * met:

 *  * Redistributions of source code must retain the above copyright

 *   notice, this list of conditions and the following disclaimer.

 *  * Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in the

 *    documentation and/or other materials provided with the distribution.

 *

 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS

 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT

 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR

 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT

 * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,

 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY

 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT

 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE

 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

 */

​

#include <linux/module.h>

#include <linux/random.h>

#include <linux/slab.h>

#include <linux/swab.h>

#include <linux/fips.h>

#include <crypto/ecdh.h>

#include <crypto/rng.h>

#include <asm/unaligned.h>

#include <linux/ratelimit.h>

​

#include "ecc.h"

#include "ecc_curve_defs.h"

​

typedef struct {

    u64 m_low;

    u64 m_high;

} uint128_t;

​

static inline const struct ecc_curve *ecc_get_curve(unsigned int curve_id)

{

    switch (curve_id) {

    /* In FIPS mode only allow P256 and higher */

    case ECC_CURVE_NIST_P192:

        return fips_enabled ? NULL : &nist_p192;

    case ECC_CURVE_NIST_P256:

        return &nist_p256;

    default:

        return NULL;

    }

}

​

static u64 *ecc_alloc_digits_space(unsigned int ndigits)

{

    size_t len = ndigits * sizeof(u64);

​

    if (!len)

        return NULL;