2 * QEMU Crypto block device encryption
4 * Copyright (c) 2015-2016 Red Hat, Inc.
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
21 #include "qemu/osdep.h"
22 #include "qapi/error.h"
23 #include "crypto/blockpriv.h"
24 #include "crypto/block-qcow.h"
25 #include "crypto/block-luks.h"
27 static const QCryptoBlockDriver *qcrypto_block_drivers[] = {
28 [Q_CRYPTO_BLOCK_FORMAT_QCOW] = &qcrypto_block_driver_qcow,
29 [Q_CRYPTO_BLOCK_FORMAT_LUKS] = &qcrypto_block_driver_luks,
33 bool qcrypto_block_has_format(QCryptoBlockFormat format,
37 const QCryptoBlockDriver *driver;
39 if (format >= G_N_ELEMENTS(qcrypto_block_drivers) ||
40 !qcrypto_block_drivers[format]) {
44 driver = qcrypto_block_drivers[format];
46 return driver->has_format(buf, len);
50 QCryptoBlock *qcrypto_block_open(QCryptoBlockOpenOptions *options,
51 QCryptoBlockReadFunc readfunc,
56 QCryptoBlock *block = g_new0(QCryptoBlock, 1);
58 block->format = options->format;
60 if (options->format >= G_N_ELEMENTS(qcrypto_block_drivers) ||
61 !qcrypto_block_drivers[options->format]) {
62 error_setg(errp, "Unsupported block driver %d", options->format);
67 block->driver = qcrypto_block_drivers[options->format];
69 if (block->driver->open(block, options,
70 readfunc, opaque, flags, errp) < 0) {
79 QCryptoBlock *qcrypto_block_create(QCryptoBlockCreateOptions *options,
80 QCryptoBlockInitFunc initfunc,
81 QCryptoBlockWriteFunc writefunc,
85 QCryptoBlock *block = g_new0(QCryptoBlock, 1);
87 block->format = options->format;
89 if (options->format >= G_N_ELEMENTS(qcrypto_block_drivers) ||
90 !qcrypto_block_drivers[options->format]) {
91 error_setg(errp, "Unsupported block driver %d", options->format);
96 block->driver = qcrypto_block_drivers[options->format];
98 if (block->driver->create(block, options, initfunc,
99 writefunc, opaque, errp) < 0) {
108 int qcrypto_block_decrypt(QCryptoBlock *block,
109 uint64_t startsector,
114 return block->driver->decrypt(block, startsector, buf, len, errp);
118 int qcrypto_block_encrypt(QCryptoBlock *block,
119 uint64_t startsector,
124 return block->driver->encrypt(block, startsector, buf, len, errp);
128 QCryptoCipher *qcrypto_block_get_cipher(QCryptoBlock *block)
130 return block->cipher;
134 QCryptoIVGen *qcrypto_block_get_ivgen(QCryptoBlock *block)
140 QCryptoHashAlgorithm qcrypto_block_get_kdf_hash(QCryptoBlock *block)
142 return block->kdfhash;
146 uint64_t qcrypto_block_get_payload_offset(QCryptoBlock *block)
148 return block->payload_offset;
152 void qcrypto_block_free(QCryptoBlock *block)
158 block->driver->cleanup(block);
160 qcrypto_cipher_free(block->cipher);
161 qcrypto_ivgen_free(block->ivgen);
166 int qcrypto_block_decrypt_helper(QCryptoCipher *cipher,
170 uint64_t startsector,
178 iv = niv ? g_new0(uint8_t, niv) : NULL;
183 if (qcrypto_ivgen_calculate(ivgen,
190 if (qcrypto_cipher_setiv(cipher,
197 nbytes = len > sectorsize ? sectorsize : len;
198 if (qcrypto_cipher_decrypt(cipher, buf, buf,
215 int qcrypto_block_encrypt_helper(QCryptoCipher *cipher,
219 uint64_t startsector,
227 iv = niv ? g_new0(uint8_t, niv) : NULL;
232 if (qcrypto_ivgen_calculate(ivgen,
239 if (qcrypto_cipher_setiv(cipher,
246 nbytes = len > sectorsize ? sectorsize : len;
247 if (qcrypto_cipher_encrypt(cipher, buf, buf,