X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=blobdiff_plain;f=src%2Fceph%2Fsrc%2Frgw%2Frgw_crypt.h;fp=src%2Fceph%2Fsrc%2Frgw%2Frgw_crypt.h;h=0000000000000000000000000000000000000000;hb=7da45d65be36d36b880cc55c5036e96c24b53f00;hp=77f07f8f2fe2ead5dea00d57296c1068ac7bd3fb;hpb=691462d09d0987b47e112d6ee8740375df3c51b2;p=stor4nfv.git

diff --git a/src/ceph/src/rgw/rgw_crypt.h b/src/ceph/src/rgw/rgw_crypt.h
deleted file mode 100644
index 77f07f8..0000000
--- a/src/ceph/src/rgw/rgw_crypt.h
+++ /dev/null
@@ -1,154 +0,0 @@
-// -*- mode:C; tab-width:8; c-basic-offset:2; indent-tabs-mode:t -*-
-// vim: ts=8 sw=2 smarttab
-/**
- * Crypto filters for Put/Post/Get operations.
- */
-#ifndef CEPH_RGW_CRYPT_H
-#define CEPH_RGW_CRYPT_H
-
-#include <rgw/rgw_op.h>
-#include <rgw/rgw_rest.h>
-#include <rgw/rgw_rest_s3.h>
-#include <boost/utility/string_view.hpp>
-
-/**
- * \brief Interface for block encryption methods
- *
- * Encrypts and decrypts data.
- * Operations are performed in context of larger stream being divided into blocks.
- * Each block can be processed independently, but only as a whole.
- * Part block cannot be properly processed.
- * Each request must start on block-aligned offset.
- * Each request should have length that is multiply of block size.
- * Request with unaligned length is only acceptable for last part of stream.
- */
-class BlockCrypt {
-public:
-  BlockCrypt(){};
-  virtual ~BlockCrypt(){};
-
-  /**
-    * Determines size of encryption block.
-    * This is usually multiply of key size.
-    * It determines size of chunks that should be passed to \ref encrypt and \ref decrypt.
-    */
-  virtual size_t get_block_size() = 0;
-
-  /**
-   * Encrypts data.
-   * Argument \ref stream_offset shows where in generalized stream chunk is located.
-   * Input for encryption is \ref input buffer, with relevant data in range <in_ofs, in_ofs+size).
-   * \ref input and \output may not be the same buffer.
-   *
-   * \params
-   * input - source buffer of data
-   * in_ofs - offset of chunk inside input
-   * size - size of chunk, must be chunk-aligned unless last part is processed
-   * output - destination buffer to encrypt to
-   * stream_offset - location of <in_ofs,in_ofs+size) chunk in data stream, must be chunk-aligned
-   * \return true iff successfully encrypted
-   */
-  virtual bool encrypt(bufferlist& input,
-                       off_t in_ofs,
-                       size_t size,
-                       bufferlist& output,
-                       off_t stream_offset) = 0;
-
-  /**
-   * Decrypts data.
-   * Argument \ref stream_offset shows where in generalized stream chunk is located.
-   * Input for decryption is \ref input buffer, with relevant data in range <in_ofs, in_ofs+size).
-   * \ref input and \output may not be the same buffer.
-   *
-   * \params
-   * input - source buffer of data
-   * in_ofs - offset of chunk inside input
-   * size - size of chunk, must be chunk-aligned unless last part is processed
-   * output - destination buffer to encrypt to
-   * stream_offset - location of <in_ofs,in_ofs+size) chunk in data stream, must be chunk-aligned
-   * \return true iff successfully encrypted
-   */
-  virtual bool decrypt(bufferlist& input,
-                       off_t in_ofs,
-                       size_t size,
-                       bufferlist& output,
-                       off_t stream_offset) = 0;
-};
-
-static const size_t AES_256_KEYSIZE = 256 / 8;
-bool AES_256_ECB_encrypt(CephContext* cct,
-                         const uint8_t* key,
-                         size_t key_size,
-                         const uint8_t* data_in,
-                         uint8_t* data_out,
-                         size_t data_size);
-
-class RGWGetObj_BlockDecrypt : public RGWGetObj_Filter {
-  CephContext* cct;
-
-  std::unique_ptr<BlockCrypt> crypt; /**< already configured stateless BlockCrypt
-                                          for operations when enough data is accumulated */
-  off_t enc_begin_skip; /**< amount of data to skip from beginning of received data */
-  off_t ofs; /**< stream offset of data we expect to show up next through \ref handle_data */
-  off_t end; /**< stream offset of last byte that is requested */
-  bufferlist cache; /**< stores extra data that could not (yet) be processed by BlockCrypt */
-  size_t block_size; /**< snapshot of \ref BlockCrypt.get_block_size() */
-  std::vector<size_t> parts_len; /**< size of parts of multipart object, parsed from manifest */
-public:
-  RGWGetObj_BlockDecrypt(CephContext* cct,
-                         RGWGetDataCB* next,
-                         std::unique_ptr<BlockCrypt> crypt);
-  virtual ~RGWGetObj_BlockDecrypt();
-
-  virtual int fixup_range(off_t& bl_ofs,
-                          off_t& bl_end) override;
-  virtual int handle_data(bufferlist& bl,
-                          off_t bl_ofs,
-                          off_t bl_len) override;
-  virtual int flush() override;
-
-  int read_manifest(bufferlist& manifest_bl);
-}; /* RGWGetObj_BlockDecrypt */
-
-
-class RGWPutObj_BlockEncrypt : public RGWPutObj_Filter
-{
-  CephContext* cct;
-  std::unique_ptr<BlockCrypt> crypt; /**< already configured stateless BlockCrypt
-                                          for operations when enough data is accumulated */
-  off_t ofs; /**< stream offset of data we expect to show up next through \ref handle_data */
-  bufferlist cache; /**< stores extra data that could not (yet) be processed by BlockCrypt */
-  size_t block_size; /**< snapshot of \ref BlockCrypt.get_block_size() */
-public:
-  RGWPutObj_BlockEncrypt(CephContext* cct,
-                         RGWPutObjDataProcessor* next,
-                         std::unique_ptr<BlockCrypt> crypt);
-  virtual ~RGWPutObj_BlockEncrypt();
-  virtual int handle_data(bufferlist& bl,
-                          off_t ofs,
-                          void **phandle,
-                          rgw_raw_obj *pobj,
-                          bool *again) override;
-  virtual int throttle_data(void *handle,
-                            const rgw_raw_obj& obj,
-                            uint64_t size,
-                            bool need_to_wait) override;
-}; /* RGWPutObj_BlockEncrypt */
-
-
-int rgw_s3_prepare_encrypt(struct req_state* s,
-                           std::map<std::string, ceph::bufferlist>& attrs,
-                           std::map<std::string,
-                                    RGWPostObj_ObjStore::post_form_part,
-                                    const ltstr_nocase>* parts,
-                           std::unique_ptr<BlockCrypt>* block_crypt,
-                           std::map<std::string,
-                                    std::string>& crypt_http_responses);
-
-int rgw_s3_prepare_decrypt(struct req_state* s,
-                           std::map<std::string, ceph::bufferlist>& attrs,
-                           std::unique_ptr<BlockCrypt>* block_crypt,
-                           std::map<std::string,
-                                    std::string>& crypt_http_responses);
-
-#endif