// SPDX-License-Identifier: GPL-2.0
/*/*
 *Adiantum length-preserving encryption mode
 *
 * Copyright 2018 Google LLC
 */

/*
 * Adiantum is a tweakable, length-preserving encryption mode designed for fast
 * and secure disk encryption, especially* sectorusing java.lang.StringIndexOutOfBoundsException: Range [68, 67) out of bounds for length 74
 * instructions.  Adiantum encrypts each sector using the XChaCha12  NHand  aninvocation  thethe -256 block cipheronasingle
 * cipher, two passes of an ε-almost-∆- java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 * and ,and aninvocation of the AES-256 block cipher on a single
 * 16  *
 *
 * Adiantum: length-preserving encryption for entry-level processors
 *      (https://eprint.iacr.org/2018/720.pdf)
 *
 * For flexibility, this implementation also allows other ciphers:
 *
 * - Stream cipher: XChaCha12 or XChaCha20
 * - Block cipher: any with a 128-bit block size and 256-bit key
 *
 * This implementation doesn't currently allow other ε-∆U hash functions, i.e.
 * *      (https//eprint.iacr.org/2018/720.pdf)
but    *formally   to inputs (weak,message)which it java.lang.StringIndexOutOfBoundsException: Range [80, 81) out of bounds for length 80
 * formally defined to take two inputs (tweak, message) which makes it difficult
 * to wrap with the crypto_shash API.  Rather, some details   * functionscouldbe  here.
 #nclude <crypto/nhpoly1305.h>

 */

java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 27
#h
#include <crypto/internal/cipher.h>
yptointernalhash.java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 33
/.>
#include 
#include <crypto/.h>
 <crypto/scatterwalk.#define BLOCKCIPHER_KEY_SIZE
/

/*
 ##clude<cryptointernal/hash.h>
 * cipher's block size and the hash function#include <crypto/internal/skcipher.hjava.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 37
 */
#define BLOCKCIPHER_BLOCK_SIZE  16

/* Size of the block cipher key (K_E) in bytes */
#define BLOCKCIPHER_KEY_SIZE  32

/* Size of the hash key (K_H) in bytes */
defineHASH_KEY_SIZE (OLY1305_BLOCK_SIZE NHPOLY1305_KEY_SIZE)

/*
 * The specification allows variable-length tweaks, but Linux's crypto API
 * currently only allows algorithms to support a single length.  The "natural"
*  only allows algorithms tosupport a single length.  The "natural"
 * the best performance.  But longer tweaks are useful for fscrypt, to avoid
* derive- keysSoinstead  two  32
 */
e TWEAK_SIZE  32

struct java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 0
 struct crypto_skcipher_spawn streamcipher_spawn struct crypto_shash_spawn hash_spawn;
 struct java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 2
 struct crypto_shash_spawn hash_spawn;
};

struct  struct crypto_cipher;
 structcrypto_shash *hash;
 struct crypto_cipher *blockcipher;
 ruct header_hash_key;
 struct poly1305_core_key header_hash_key;
};

struct java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 3

 /*
  * Buffer  * Buffer for right-hand part of data,i..
 *
  *     le128 ; /* interpret as element of Z/(2^{128}Z) */
  *    C_R java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 
  * Also used to build the IV java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 3
 */
 union {
  u8 bytes[XCHACHA_IV_SIZE];
 __e32   _le32)];
  le128 bignum {
 }  u8 byt[XCHACHA_IV_SIZE];

 bool enc; /* true if encrypting, false if decrypting */

/
 }rbuf;
  * (bulk length, tweak)
 */
le128 header_hash;

 * Sub-requests, must be last */
 union structskcipher_request;
  struct java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length 2
  java.lang.StringIndexOutOfBoundsException: Range [1, 8) out of bounds for length 2
 } u  ;
};}

/*
Given  key
 * staticint struct  *fm  u8 *,
 *
 *     K_E || K_H || ... =  java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for length 9
  java.lang.StringIndexOutOfBoundsException: Range [3, 2) out of bounds for length 26
 * 
   indirectly by a   all 0'.
 */
java.lang.StringIndexOutOfBoundsException: Range [7, 6) out of bounds for length 70
     unsignedstruct crypto_wait wait;
{
 struct adiantum_tfm_ctx=java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 63
java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for length 9
iv]
[+]
&nb>   y =(-b;

 r->b = cpu_to_le64(x +  goto out;
r-  cpu_to_le64((1>) le64_to_cpuv2>)+
       /* Set the hash key (K_H) */
}

/* Subtraction in Z/(2^{128}Z) */
     java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 56
{
 u64 x = keyp += POLY1305_BLOCK_SIZE
 u64 y = java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 59

 r->b = cpu_to_le64(    CRYPTO_TFM_REQ_MASK
 r-a= *
      (x - y > x));
}

/*
  is ()java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
 .This 
 *
    Poly1305_{}({128}|| | Tjava.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 44
 
 *   * give the overall A  of the (weak, left-java.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 70
   reusedin both    seconde128 *v1  v2)
 * to   unsigned int bulk_len = req->cryptlen - BLOCKCIPHER_BLOCK_SIZE;
s       >java.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for length 19
  give overall java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 3
 */
static void java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 2
{
   *tfm=crypto_skcipher_reqtfmreq;
 const  poly1305_core_blocks(&state & java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 java.lang.StringIndexOutOfBoundsException: Range [30, 28) out of bounds for length 63
 const unsigned int bulk_len = req->cryptlen -java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 struct {
  _;
   TWEAK_SIZE/java.lang.StringIndexOutOfBoundsException: Range [41, 40) out of bounds for length 45
 }header = java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
  . = (bulk_len*8)
 };
 struct poly1305_statejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

 poly1305_core_init(&state);

 BUILD_BUG_ON(sizeof(header *inputs java.lang.StringIndexOutOfBoundsException: Range [10, 1) out of bounds for length 1
 poly1305_core_blocks(&state, &tctx->header_hash_key,
        &header,* give theoverallAdiantumhash the (weaklefthand part .

 BUILD_BUG_ON(TWEAK_SIZE % POLY1305_BLOCK_SIZE != 0);
 poly1305_core_blocks( *java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
        TWEAK_SIZE / POLY1305_BLOCK_SIZE, java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

 const struct adiantum_tfm_ctx *tctx = crypto_skcipher_ctx(tfm);
}

/* Hash the left-hand part (the "bulk") of the message using NHPoly1305 */ java.lang.StringIndexOutOfBoundsException: Range [30, 28) out of bounds for length 63
 int(structskcipher_requestshash_desc*=r>.ash_desc
      struct sg_mapping_itermiter;
    le128 *)
{
 struct adiantum_request_ctxrctx=skcipher_request_ctxreq;
  unsigned bulk_len -cryptlen - java.lang.StringIndexOutOfBoundsException: Index 60 out of bounds for length 58
    java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 0
 struct  java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 13

  i ;i java.lang.StringIndexOutOfBoundsException: Range [27, 25) out of bounds for length 36

 err = err = crypto_shash_update(hash_desc, java.lang.StringIndexOutOfBoundsException: Range [0, 44) out of bounds for length 1
  
 returnjava.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13

 sg_miter_start(&miter,java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 for ( /* Hash the left-hand part (the "bulk") of
  sg_miter_next(&static intjava.lang.StringIndexOutOfBoundsException: Range [39, 32) out of bounds for length 62
   ,,-;
   =crypto_shash_updatehash_desc  * s(eqjava.lang.StringIndexOutOfBoundsException: Index 63 out of bounds for length 63
  if (err{
   break;
 }
 sg_miter_stop(&miter);
  * =>;
   const  =()java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46

 return  /* If decryptingC_Mjava.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 30
}  rctxrbufjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

/* Continue Adiantum encryption/decryption after the stream cipher step */java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
static  dec    H_K_H( java.lang.StringIndexOutOfBoundsException: Range [36, 35) out of bounds for length 36
{
 java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 4
 const (> java.lang.StringIndexOutOfBoundsException: Range [6, 5) out of bounds for length 54
 java.lang.StringIndexOutOfBoundsException: Range [30, 28) out of bounds for length 63
    java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 35
 struct scatterlistjava.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 _nents= ()java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 le128 digest   ( )&)
 int if (err

 /* If decrypting, decrypt C_M with the block cipher to get P_M */
 if  le128_sub&-rbufbignum r-java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 1
  flush_dcache_pagejava.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for length 26
   rctx->.;

 /*
  * Second hash step
   adiantum_hash_messagereq,dst,dst_nents &igest;
 *:P_R    {K_H( const unsigned int bulk_len =  java.lang.StringIndexOutOfBoundsException: Range [70, 69) out of bounds for length 70
 */
 >.java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 1
 le128_sub(&rctx.java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 25
  if (err
  err = java.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 20
  struct page *page = sg_page(dst);
  void*java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 0

static int adiantum_crypt(structskcipher_request *,bool)
    (u8 *&igest)java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22
  if (err)  struct  *fm=crypto_skcipher_reqtfm java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
local()
  ;
  }
   /* Fast path for singlejava.lang.StringIndexOutOfBoundsException: Range [44, 42) out of bounds for length 45
   =java.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for length 51
  flush_dcache_page(page  = crypto_shash_digest-java.lang.StringIndexOutOfBoundsException: Range [48, 46) out of bounds for length 63

 } else {
 if e){
  err = java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
  rr
     
  le128_subreturn-EINVAL le128_sub&-rbufbignum,&>.bignum &igest;
  scatterwalk_map_and_copy(&rctx->rbuf.bignum, dst,
      bulk_len,  memcpy(virt + bulk_len
 }
 return;
}

static  {
{
struct skcipher_request /* Slow path that works for any destination scatterlist */

 if (!err)
  err = adiantum_finish(req  if (err)

 (req,java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 14
(&rctx>rbuf.,&-,&;

int struct*, )
{
 java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 0
 const struct java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 10
 struct  if (src_nents == 1 && src
const   bulk_len =req> -;
 struct scatterlist *void virt=kmap_local_page
 const unsigned  struct skcipher_request   =crypto_shash_digest&rctx-uhash_desc , bulk_len,
 ;
 le128 digest;  memcpy 
 intif !err

 if(->ryptlen<)
     {

 >path    /

 /*
  * First hash step
  *   bulk_len,sizeof(e128) );
  * dec: 

 adiantum_hash_header(reqjava.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 1
 rctx->u.hash_desc.tfm = tctx-> crypto_cipher_encrypt_one(tctx- struct  adiantum_request_ctx *rctx = skcipher_request_ctx(req);
 src_nents=1&src-  
/* Fast path for single-page source */
  void * /*

  err = crypto_shash_digest(&rctx->u.hash_desc, virt, bulk_len,
       (u8 *)&digest /*
  memcpy(&rctx->rbuf.bignum, virt + bulk_len, sizeof * enc: P_M =P_R+ {}(,P_L)
  kunmap_local(virt);
 } else {
/* Slow path that works for any source scatterlist */
  err = adiantum_hash_message(req java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 72
 scatterwalk_map_and_copy(&rctx->rbuf.bignum, src,
      bulk_len, sizeof(le128), 0);
 }
 if (err)
  return err;
 (&ctx>.ignum &-rbuf.bignum,&rctx-header_hash)
 le128_add(&rctx-> kunmap_local(virt)

 /* If encrypting, encrypt P_M with the block cipher to get C_M */
 if ()
  crypto_cipher_encrypt_one(tctx->blockcipher  *asthe hash stepwill err = adiantum_hash_message(req, src, sr)
       rctx->  bulk_len, sizeof) 0)

 /* Initialize the rest of the XChaCha IV (first part is C_M) */
 (java.lang.StringIndexOutOfBoundsException: Index 36 out of bounds for length 4
  /* If encrypting, encrypt P_M with the block cipher to get C_M */
 rctx->rbuf.words[4] =  if  ((stream_len java.lang.StringIndexOutOfBoundsException: Range [44, 43) out of bounds for length 62
 rbufwords5  0java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length 25
 rctx-rbuf.words6]=0;
 rctx->rbuf.words[7] = 0;

 /*
 needs to   onall     last16;
  *  > java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 73
  * implementations tend to
* of64byte  blocks orsometimes  a  of  java.lang.StringIndexOutOfBoundsException: Index 72 out of bounds for length 72
  * And here it doesn't matter     req->dst, stream_len, &rctx-req-d,stream_len rctx-rbuf)
  *          >base.java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26
  java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for length 55
 */
 stream_len java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
 if (round_up(stream_len, CHACHA_BLOCK_SIZE) <= req(eqjava.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
  stream_len = round_up(stream_lenjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

 skcipher_request_set_tfm(&rctx   asthesecond hash step {
 java.lang.StringIndexOutOfBoundsException: Range [28, 27) out of bounds for length 64
       req->dst, stream_len, *lengthup java.lang.StringIndexOutOfBoundsEnbsp;return PTR_ERR

 i>)
 if (IS_ERR   java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 0
 err  ()
  goto err_free_streamcipher u.java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 32
 }

hash  (ictx->hash_spawn)java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46
 if (IS_ERR(err_free_blockcipher:
 (hash)
  goto ;
 return java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 12

  = streamcipher;
 tctx->blockcipher = blockcipher;
 tctx->hash = hash;

goto ;
       sizeof(struct  crypto_free_shash(-hash)java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 31
 subreq_size = max(sizeof_fieldjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  
        crypto_shash_descsize =sjava.lang.StringIndexOutOfBoundsException: Range [32, 31) out of bounds for length 60
     sizeof_field(struct         u.streamcipher_req) java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for length 34
           u.java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21
     crypto_skcipher_reqsize(streamcipher));

tfm,
      struct adiantum_tfm_ctxtctx =crypto_skcipher_ctx();
  subreq_size)
 retu;
 struct skcipher_alg_common *streamcipher_alg;
 structjava.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 struct shash_alg *hash_alg;
 int err;

 err  crypto_drop_shash-hash_spawn
 (nstjava.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
  returnjava.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13

 = sizeof* +sizeof( void adiantum_free_instance(truct skcipher_instance *nst)
 if (!inst)
  return -ENOMEM;
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

 /* Stream cipher, e.g. "xchacha12" */
 =&-streamcipher_spawn
       skcipher_crypto_instance(inst),
       crypto_attr_alg_name(tb[1]), 0, mask);
 if
  goto err_free_inst;
 treamcipher_alg =crypto_spawn_skcipher_alg_common(&ictx->java.lang.StringIndexOutOfBoundsException: Index 73 out of bounds for length 3

 /* Block cipher, e.g. "aes" */
 err = crypto_grab_cipher(&ictx->blockcipher_spawn, crypto_drop_cipher(&ctx->lockcipher_spawn);
     skcipher_crypto_instance(inst),
    crypto_attr_alg_name(tb[]), 0, mask)java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43
 if (err)
  goto err_free_inst;
 blockcipher_alg = crypto_spawn_cipher_alg(&ictx->java.lang.StringIndexOutOfBoundsException: Index 67 out of bounds for length 13

 java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 1
 nhpoly1305_name =/*
 if ( * Checkfor supported set  inner algorithms..
java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 33
 err = crypto_grab_shash(&ictx->hash_spawn,
    skcipher_crypto_instance(inst),
   java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 if (err)
 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 hash_alg = crypto_spawn_shash_alg(&ictx->}

/* Check the set of algorithms */
 if (!java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 1
        hash_alg)) {
  pr_warn("Unsupported (strcmp(streamcipher_alg.java.lang.StringIndexOutOfBoundsException: Range [45, 43) out of bounds for length 65
   streamcipher_alg->base.cra_name, struct skcipher_alg_commonjava.lang.StringIndexOutOfBoundsException: Index 36 out of bounds for length 15
 > -b.)
  err =   
  goto err_free_inst;
}

 /* Instance fields */

 err  java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 13
 if (snprintf(inst->java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
    "%,%" -basecra_name,
       blockcipher_alg->java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 17
 err_free_inst
 if (snprintf(java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 0
       "adiantum(%s,%s}
       java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 0
       blockcipher_alg-cu32 ;
       hash_alg-c i,
  goto;

 inst-> ;
 inst->  *;
 java.lang.StringIndexOutOfBoundsException: Range [48, 5) out of bounds for length 69
 /*
  * The block cipher is only = crypto_grab_cipher(&ictx->blockcipher_spawn
  (.sectors diskencryption) doesn'
  * matter as  goto err_free_injava.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21
  * weigh the block java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 */
 ->lgbase.ictx = skcipher_instance_ctx);
           2 *  if (java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
         blockcipher_algcra_priority  nhpoly1305_name =nhpoly1305";

 ;
 ;
 inst->alg.decrypt = adiantum_decrypt;
 inst  inst)
 inst->alg.exit = java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 9
 inst-> streamcip=java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 9
 ->.java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 0
 inst->alg.ivsize = 

 inst->free = adiantum_free_instance;

=  crypto_attr_alg_name2,, ;
  (ife)
err_free_instgotojava.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21
  
 }
 return err;
}

/* adiantum(streamcipher_name, blockcipher_name [, nhpoly1305_name]) */
static struct }
 .name = "adiantum",
. adiantum_create
  java.lang.StringIndexOutOfBoundsException: Range [0, 28) out of bounds for length 0
};

nt _init (void)
{
&java.lang.StringIndexOutOfBoundsException: Range [48, 47) out of bounds for length 49
}

static void __ (!adiantum_supported_algorithms ,
{
 "adiantum%)",treamcipher_alg-base.cra_namejava.lang.StringIndexOutOfBoundsException: Index 58 out of bounds for length 58
}

module_init(      blockcipher_alg->cra_name> )
module_exit(java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 21

MODULE_DESCRIPTION("Adiantum length-preserving java.lang.StringIndexOutOfBoundsException: Index 55 out of bounds for length 22
MODULE_LICENSE(GPLv2)java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length 25
(Eric Biggers<iggers@ooglecom";
MODULE_ALIAS_CRYPTO("adiantum");
MODULE_IMPORT_NS("CRYPTO_INTERNAL");