1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
// -*- mode:C++; tab-width:8; c-basic-offset:2; indent-tabs-mode:t -*-
// vim: ts=8 sw=2 smarttab
#include "Utils.h"
#include "common/dout.h"
#include "common/errno.h"
#include "librbd/ImageCtx.h"
#include "librbd/crypto/BlockCrypto.h"
#include "librbd/crypto/CryptoImageDispatch.h"
#include "librbd/crypto/CryptoInterface.h"
#include "librbd/crypto/CryptoObjectDispatch.h"
#include "librbd/crypto/EncryptionFormat.h"
#include "librbd/crypto/openssl/DataCryptor.h"
#include "librbd/io/ImageDispatcherInterface.h"
#include "librbd/io/ObjectDispatcherInterface.h"
#define dout_subsys ceph_subsys_rbd
#undef dout_prefix
#define dout_prefix *_dout << "librbd::crypto::util: " << __func__ << ": "
namespace librbd {
namespace crypto {
namespace util {
template <typename I>
void set_crypto(I *image_ctx,
decltype(I::encryption_format) encryption_format) {
std::unique_lock image_locker{image_ctx->image_lock};
ceph_assert(!image_ctx->encryption_format);
auto crypto = encryption_format->get_crypto();
auto object_dispatch = CryptoObjectDispatch<I>::create(image_ctx, crypto);
auto image_dispatch = CryptoImageDispatch::create(crypto->get_data_offset());
image_ctx->io_object_dispatcher->register_dispatch(object_dispatch);
image_ctx->io_image_dispatcher->register_dispatch(image_dispatch);
image_ctx->encryption_format = std::move(encryption_format);
}
int build_crypto(
CephContext* cct, const unsigned char* key, uint32_t key_length,
uint64_t block_size, uint64_t data_offset,
std::unique_ptr<CryptoInterface>* result_crypto) {
const char* cipher_suite;
switch (key_length) {
case 32:
cipher_suite = "aes-128-xts";
break;
case 64:
cipher_suite = "aes-256-xts";
break;
default:
lderr(cct) << "unsupported key length: " << key_length << dendl;
return -ENOTSUP;
}
auto data_cryptor = new openssl::DataCryptor(cct);
int r = data_cryptor->init(cipher_suite, key, key_length);
if (r != 0) {
lderr(cct) << "error initializing data cryptor: " << cpp_strerror(r)
<< dendl;
delete data_cryptor;
return r;
}
result_crypto->reset(BlockCrypto<EVP_CIPHER_CTX>::create(
cct, data_cryptor, block_size, data_offset));
return 0;
}
} // namespace util
} // namespace crypto
} // namespace librbd
template void librbd::crypto::util::set_crypto(
librbd::ImageCtx *image_ctx,
std::unique_ptr<EncryptionFormat<librbd::ImageCtx>> encryption_format);
|
