X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;ds=inline;f=lib%2Futils_dm.h;h=cd8b65340001395900cca4105139d22f9854d252;hb=ad21d48762fa70838d4ab4fbe8fe2a2e8a4dcef1;hp=c954ff0975cbb9009b4a626020292e0ff5c10425;hpb=9c71c74d596d59887033a8e40a5904b30b3b8879;p=platform%2Fupstream%2Fcryptsetup.git diff --git a/lib/utils_dm.h b/lib/utils_dm.h index c954ff0..cd8b653 100644 --- a/lib/utils_dm.h +++ b/lib/utils_dm.h @@ -1,3 +1,26 @@ +/* + * libdevmapper - device-mapper backend for cryptsetup + * + * Copyright (C) 2004, Jana Saout + * Copyright (C) 2004-2007, Clemens Fruhwirth + * Copyright (C) 2009-2015, Red Hat, Inc. All rights reserved. + * Copyright (C) 2009-2015, Milan Broz + * + * This program is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License + * as published by the Free Software Foundation; either version 2 + * of the License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + */ + #ifndef _UTILS_DM_H #define _UTILS_DM_H @@ -6,6 +29,8 @@ struct crypt_device; struct volume_key; +struct crypt_params_verity; +struct device; /* Device mapper backend - kernel support flags */ #define DM_KEY_WIPE_SUPPORTED (1 << 0) /* key wipe message */ @@ -13,53 +38,75 @@ struct volume_key; #define DM_SECURE_SUPPORTED (1 << 2) /* wipe (secure) buffer flag */ #define DM_PLAIN64_SUPPORTED (1 << 3) /* plain64 IV */ #define DM_DISCARDS_SUPPORTED (1 << 4) /* discards/TRIM option is supported */ +#define DM_VERITY_SUPPORTED (1 << 5) /* dm-verity target supported */ +#define DM_TCW_SUPPORTED (1 << 6) /* tcw (TCRYPT CBC with whitening) */ +#define DM_SAME_CPU_CRYPT_SUPPORTED (1 << 7) /* same_cpu_crypt */ +#define DM_SUBMIT_FROM_CRYPT_CPUS_SUPPORTED (1 << 8) /* submit_from_crypt_cpus */ + uint32_t dm_flags(void); #define DM_ACTIVE_DEVICE (1 << 0) -#define DM_ACTIVE_CIPHER (1 << 1) -#define DM_ACTIVE_UUID (1 << 2) -#define DM_ACTIVE_KEY (1 << 3) +#define DM_ACTIVE_UUID (1 << 1) -#define DM_ACTIVE_ALL ( \ - DM_ACTIVE_DEVICE | \ - DM_ACTIVE_CIPHER | \ - DM_ACTIVE_UUID | \ - DM_ACTIVE_KEY) +#define DM_ACTIVE_CRYPT_CIPHER (1 << 2) +#define DM_ACTIVE_CRYPT_KEYSIZE (1 << 3) +#define DM_ACTIVE_CRYPT_KEY (1 << 4) + +#define DM_ACTIVE_VERITY_ROOT_HASH (1 << 5) +#define DM_ACTIVE_VERITY_HASH_DEVICE (1 << 6) +#define DM_ACTIVE_VERITY_PARAMS (1 << 7) struct crypt_dm_active_device { - const char *device; - const char *cipher; + enum { DM_CRYPT = 0, DM_VERITY } target; + uint64_t size; /* active device size */ + uint32_t flags; /* activation flags */ const char *uuid; + struct device *data_device; + union { + struct { + const char *cipher; - /* Active key for device */ - struct volume_key *vk; + /* Active key for device */ + struct volume_key *vk; - /* struct crypt_active_device */ - uint64_t offset; /* offset in sectors */ - uint64_t iv_offset; /* IV initilisation sector */ - uint64_t size; /* active device size */ - uint32_t flags; /* activation flags */ + /* struct crypt_active_device */ + uint64_t offset; /* offset in sectors */ + uint64_t iv_offset; /* IV initilisation sector */ + } crypt; + struct { + struct device *hash_device; + + const char *root_hash; + uint32_t root_hash_size; + + uint64_t hash_offset; /* hash offset in blocks (not header) */ + struct crypt_params_verity *vp; + } verity; + } u; }; +void dm_backend_init(void); +void dm_backend_exit(void); + +int dm_remove_device(struct crypt_device *cd, const char *name, + int force, uint64_t size); +int dm_status_device(struct crypt_device *cd, const char *name); +int dm_status_suspended(struct crypt_device *cd, const char *name); +int dm_status_verity_ok(struct crypt_device *cd, const char *name); +int dm_query_device(struct crypt_device *cd, const char *name, + uint32_t get_flags, struct crypt_dm_active_device *dmd); +int dm_create_device(struct crypt_device *cd, const char *name, + const char *type, struct crypt_dm_active_device *dmd, + int reload); +int dm_suspend_and_wipe_key(struct crypt_device *cd, const char *name); +int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name, + size_t key_size, const char *key); + const char *dm_get_dir(void); -int dm_init(struct crypt_device *context, int check_kernel); -void dm_exit(void); -int dm_remove_device(const char *name, int force, uint64_t size); -int dm_status_device(const char *name); -int dm_status_suspended(const char *name); -int dm_query_device(const char *name, uint32_t get_flags, - struct crypt_dm_active_device *dmd); -int dm_create_device(const char *name, - const char *type, - struct crypt_dm_active_device *dmd, - int reload); -int dm_suspend_and_wipe_key(const char *name); -int dm_resume_and_reinstate_key(const char *name, - size_t key_size, - const char *key); -char *dm_device_path(const char *prefix, int major, int minor); + +/* These are DM helpers used only by utils_devpath file */ int dm_is_dm_device(int major, int minor); int dm_is_dm_kernel_name(const char *name); -int dm_check_segment(const char *name, uint64_t offset, uint64_t size); +char *dm_device_path(const char *prefix, int major, int minor); #endif /* _UTILS_DM_H */