Function xlp_sec_process

freebsd/mips/nlm/dev/sec/nlmsec.c:564–689

}

static int
xlp_sec_process(device_t dev, struct cryptop *crp, int hint)
{
	struct xlp_sec_softc *sc = device_get_softc(dev);
	const struct crypto_session_params *csp;
	struct xlp_sec_command *cmd = NULL;
	int err = -1, ret = 0;
	struct xlp_sec_session *ses;
	unsigned int nsegs = 0;

	ses = crypto_get_driver_session(crp->crp_session);
	csp = crypto_get_params(crp->crp_session);

	/*
	 * This device only support AAD requests where the AAD is
	 * adjacent to the payload.
	 */
	if (crp->crp_aad_length != 0 && crp->crp_payload_start !=
	    crp->crp_aad_start + crp->crp_aad_length) {
		err = EFBIG;
		goto errout;
	}

	if ((cmd = malloc(sizeof(struct xlp_sec_command), M_DEVBUF,
	    M_NOWAIT | M_ZERO)) == NULL) {
		err = ENOMEM;
		goto errout;
	}

	cmd->crp = crp;
	cmd->ses = ses;
	cmd->hash_dst_len = ses->hs_mlen;

	if ((ret = xlp_get_nsegs(crp, &nsegs)) != 0) {
		err = EINVAL;
		goto errout;
	}

	if (crp->crp_flags & CRYPTO_F_IV_SEPARATE) {
		/* Since IV is given as separate segment to avoid copy */
		nsegs += 1;
	}
	cmd->nsegs = nsegs;

	if ((err = xlp_alloc_cmd_params(cmd, nsegs)) != 0)
		goto errout;

	switch (csp->csp_mode) {
	case CSP_MODE_CIPHER:
		if ((ret = nlm_get_cipher_param(cmd, csp)) != 0) {
			err = EINVAL;
			goto errout;
		}
		cmd->cipheroff = crp->crp_payload_start;
		cmd->cipherlen = crp->crp_payload_length;
		if (crp->crp_flags & CRYPTO_F_IV_SEPARATE) {
			cmd->cipheroff += cmd->ivlen;
			cmd->ivoff = 0;