Function ktls_ocf_tls_cbc_encrypt

freebsd/opencrypto/ktls_ocf.c:157–315

}

static int
ktls_ocf_tls_cbc_encrypt(struct ktls_session *tls,
    const struct tls_record_layer *hdr, uint8_t *trailer, struct iovec *iniov,
    struct iovec *outiov, int iovcnt, uint64_t seqno,
    uint8_t record_type __unused)
{
	struct uio uio, out_uio;
	struct tls_mac_data ad;
	struct cryptop crp;
	struct ocf_session *os;
	struct iovec iov[iovcnt + 2];
	struct iovec out_iov[iovcnt + 1];
	int i, error;
	uint16_t tls_comp_len;
	uint8_t pad;
	bool inplace;

	os = tls->cipher;

#ifdef INVARIANTS
	if (os->implicit_iv) {
		mtx_lock(&os->lock);
		KASSERT(!os->in_progress,
		    ("concurrent implicit IV encryptions"));
		if (os->next_seqno != seqno) {
			printf("KTLS CBC: TLS records out of order.  "
			    "Expected %ju, got %ju\n",
			    (uintmax_t)os->next_seqno, (uintmax_t)seqno);
			mtx_unlock(&os->lock);
			return (EINVAL);
		}
		os->in_progress = true;
		mtx_unlock(&os->lock);
	}
#endif

	/*
	 * Compute the payload length.
	 *
	 * XXX: This could be easily computed O(1) from the mbuf
	 * fields, but we don't have those accessible here.  Can
	 * at least compute inplace as well while we are here.
	 */
	tls_comp_len = 0;
	inplace = true;
	for (i = 0; i < iovcnt; i++) {
		tls_comp_len += iniov[i].iov_len;
		if (iniov[i].iov_base != outiov[i].iov_base)
			inplace = false;
	}

	/* Initialize the AAD. */
	ad.seq = htobe64(seqno);
	ad.type = hdr->tls_type;
	ad.tls_vmajor = hdr->tls_vmajor;
	ad.tls_vminor = hdr->tls_vminor;
	ad.tls_length = htons(tls_comp_len);