80 static bool supported_iv_ino_lblk_policy(const struct fscrypt_policy_v2 *policy,  in supported_iv_ino_lblk_policy()  argument
95 	if (policy->contents_encryption_mode != FSCRYPT_MODE_AES_256_XTS) {  in supported_iv_ino_lblk_policy()
130 static bool fscrypt_supported_v1_policy(const struct fscrypt_policy_v1 *policy,  in fscrypt_supported_v1_policy()  argument
133 	if (!fscrypt_valid_enc_modes(policy->contents_encryption_mode,  in fscrypt_supported_v1_policy()
134 				     policy->filenames_encryption_mode)) {  in fscrypt_supported_v1_policy()
137 			     policy->contents_encryption_mode,  in fscrypt_supported_v1_policy()
138 			     policy->filenames_encryption_mode);  in fscrypt_supported_v1_policy()
142 	if (policy->flags & ~(FSCRYPT_POLICY_FLAGS_PAD_MASK |  in fscrypt_supported_v1_policy()
145 			     policy->flags);  in fscrypt_supported_v1_policy()
149 	if ((policy->flags & FSCRYPT_POLICY_FLAG_DIRECT_KEY) &&  in fscrypt_supported_v1_policy()
150 	    !supported_direct_key_modes(inode, policy->contents_encryption_mode,  in fscrypt_supported_v1_policy()
151 					policy->filenames_encryption_mode))  in fscrypt_supported_v1_policy()
164 static bool fscrypt_supported_v2_policy(const struct fscrypt_policy_v2 *policy,  in fscrypt_supported_v2_policy()  argument
169 	if (!fscrypt_valid_enc_modes(policy->contents_encryption_mode,  in fscrypt_supported_v2_policy()
170 				     policy->filenames_encryption_mode)) {  in fscrypt_supported_v2_policy()
173 			     policy->contents_encryption_mode,  in fscrypt_supported_v2_policy()
174 			     policy->filenames_encryption_mode);  in fscrypt_supported_v2_policy()
178 	if (policy->flags & ~FSCRYPT_POLICY_FLAGS_VALID) {  in fscrypt_supported_v2_policy()
180 			     policy->flags);  in fscrypt_supported_v2_policy()
184 	count += !!(policy->flags & FSCRYPT_POLICY_FLAG_DIRECT_KEY);  in fscrypt_supported_v2_policy()
185 	count += !!(policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_64);  in fscrypt_supported_v2_policy()
186 	count += !!(policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_32);  in fscrypt_supported_v2_policy()
189 			     policy->flags);  in fscrypt_supported_v2_policy()
193 	if ((policy->flags & FSCRYPT_POLICY_FLAG_DIRECT_KEY) &&  in fscrypt_supported_v2_policy()
194 	    !supported_direct_key_modes(inode, policy->contents_encryption_mode,  in fscrypt_supported_v2_policy()
195 					policy->filenames_encryption_mode))  in fscrypt_supported_v2_policy()
198 	if ((policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_64) &&  in fscrypt_supported_v2_policy()
199 	    !supported_iv_ino_lblk_policy(policy, inode, "IV_INO_LBLK_64",  in fscrypt_supported_v2_policy()
209 	if ((policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_32) &&  in fscrypt_supported_v2_policy()
210 	    !supported_iv_ino_lblk_policy(policy, inode, "IV_INO_LBLK_32",  in fscrypt_supported_v2_policy()
214 	if (memchr_inv(policy->__reserved, 0, sizeof(policy->__reserved))) {  in fscrypt_supported_v2_policy()
265 		const struct fscrypt_policy_v1 *policy = &policy_u->v1;  in fscrypt_new_context()  local
270 			policy->contents_encryption_mode;  in fscrypt_new_context()
272 			policy->filenames_encryption_mode;  in fscrypt_new_context()
273 		ctx->flags = policy->flags;  in fscrypt_new_context()
275 		       policy->master_key_descriptor,  in fscrypt_new_context()
281 		const struct fscrypt_policy_v2 *policy = &policy_u->v2;  in fscrypt_new_context()  local
286 			policy->contents_encryption_mode;  in fscrypt_new_context()
288 			policy->filenames_encryption_mode;  in fscrypt_new_context()
289 		ctx->flags = policy->flags;  in fscrypt_new_context()
291 		       policy->master_key_identifier,  in fscrypt_new_context()
327 		struct fscrypt_policy_v1 *policy = &policy_u->v1;  in fscrypt_policy_from_context()  local
329 		policy->version = FSCRYPT_POLICY_V1;  in fscrypt_policy_from_context()
330 		policy->contents_encryption_mode =  in fscrypt_policy_from_context()
332 		policy->filenames_encryption_mode =  in fscrypt_policy_from_context()
334 		policy->flags = ctx->flags;  in fscrypt_policy_from_context()
335 		memcpy(policy->master_key_descriptor,  in fscrypt_policy_from_context()
337 		       sizeof(policy->master_key_descriptor));  in fscrypt_policy_from_context()
342 		struct fscrypt_policy_v2 *policy = &policy_u->v2;  in fscrypt_policy_from_context()  local
344 		policy->version = FSCRYPT_POLICY_V2;  in fscrypt_policy_from_context()
345 		policy->contents_encryption_mode =  in fscrypt_policy_from_context()
347 		policy->filenames_encryption_mode =  in fscrypt_policy_from_context()
349 		policy->flags = ctx->flags;  in fscrypt_policy_from_context()
350 		memcpy(policy->__reserved, ctx->__reserved,  in fscrypt_policy_from_context()
351 		       sizeof(policy->__reserved));  in fscrypt_policy_from_context()
352 		memcpy(policy->master_key_identifier,  in fscrypt_policy_from_context()
354 		       sizeof(policy->master_key_identifier));  in fscrypt_policy_from_context()
363 static int fscrypt_get_policy(struct inode *inode, union fscrypt_policy *policy)  in fscrypt_get_policy()  argument
372 		*policy = ci->ci_policy;  in fscrypt_get_policy()
383 	return fscrypt_policy_from_context(policy, &ctx, ret);  in fscrypt_get_policy()
387 				 const union fscrypt_policy *policy)  in set_encryption_policy()  argument
394 	if (!fscrypt_supported_policy(policy, inode))  in set_encryption_policy()
397 	switch (policy->version) {  in set_encryption_policy()
415 					       policy->v2.master_key_identifier);  in set_encryption_policy()
418 		if (policy->v2.flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_32)  in set_encryption_policy()
428 	ctxsize = fscrypt_new_context(&ctx, policy, nonce);  in set_encryption_policy()
435 	union fscrypt_policy policy;  in fscrypt_ioctl_set_policy()  local
442 	if (get_user(policy.version, (const u8 __user *)arg))  in fscrypt_ioctl_set_policy()
445 	size = fscrypt_policy_size(&policy);  in fscrypt_ioctl_set_policy()
460 	version = policy.version;  in fscrypt_ioctl_set_policy()
461 	if (copy_from_user(&policy, arg, size))  in fscrypt_ioctl_set_policy()
463 	policy.version = version;  in fscrypt_ioctl_set_policy()
483 			ret = set_encryption_policy(inode, &policy);  in fscrypt_ioctl_set_policy()
485 		   (ret == 0 && !fscrypt_policies_equal(&policy,  in fscrypt_ioctl_set_policy()
501 	union fscrypt_policy policy;  in fscrypt_ioctl_get_policy()  local
504 	err = fscrypt_get_policy(file_inode(filp), &policy);  in fscrypt_ioctl_get_policy()
508 	if (policy.version != FSCRYPT_POLICY_V1)  in fscrypt_ioctl_get_policy()
511 	if (copy_to_user(arg, &policy, sizeof(policy.v1)))  in fscrypt_ioctl_get_policy()
521 	union fscrypt_policy *policy = (union fscrypt_policy *)&arg.policy;  in fscrypt_ioctl_get_policy_ex()  local
528 		     offsetof(typeof(arg), policy));  in fscrypt_ioctl_get_policy_ex()
529 	BUILD_BUG_ON(sizeof(arg.policy) != sizeof(*policy));  in fscrypt_ioctl_get_policy_ex()
531 	err = fscrypt_get_policy(file_inode(filp), policy);  in fscrypt_ioctl_get_policy_ex()
534 	policy_size = fscrypt_policy_size(policy);  in fscrypt_ioctl_get_policy_ex()
719 	union fscrypt_policy *policy = NULL;  in fscrypt_set_test_dummy_encryption()  local
739 	policy = kzalloc(sizeof(*policy), GFP_KERNEL);  in fscrypt_set_test_dummy_encryption()
740 	if (!policy) {  in fscrypt_set_test_dummy_encryption()
749 	policy->version = version;  in fscrypt_set_test_dummy_encryption()
750 	switch (policy->version) {  in fscrypt_set_test_dummy_encryption()
752 		policy->v1.contents_encryption_mode = FSCRYPT_MODE_AES_256_XTS;  in fscrypt_set_test_dummy_encryption()
753 		policy->v1.filenames_encryption_mode = FSCRYPT_MODE_AES_256_CTS;  in fscrypt_set_test_dummy_encryption()
754 		memcpy(policy->v1.master_key_descriptor, key_spec.u.descriptor,  in fscrypt_set_test_dummy_encryption()
758 		policy->v2.contents_encryption_mode = FSCRYPT_MODE_AES_256_XTS;  in fscrypt_set_test_dummy_encryption()
759 		policy->v2.filenames_encryption_mode = FSCRYPT_MODE_AES_256_CTS;  in fscrypt_set_test_dummy_encryption()
760 		memcpy(policy->v2.master_key_identifier, key_spec.u.identifier,  in fscrypt_set_test_dummy_encryption()
769 	if (dummy_policy->policy) {  in fscrypt_set_test_dummy_encryption()
770 		if (fscrypt_policies_equal(policy, dummy_policy->policy))  in fscrypt_set_test_dummy_encryption()
776 	dummy_policy->policy = policy;  in fscrypt_set_test_dummy_encryption()
777 	policy = NULL;  in fscrypt_set_test_dummy_encryption()
780 	kfree(policy);  in fscrypt_set_test_dummy_encryption()
797 	const union fscrypt_policy *policy = fscrypt_get_dummy_policy(sb);  in fscrypt_show_test_dummy_encryption()  local
800 	if (!policy)  in fscrypt_show_test_dummy_encryption()
803 	vers = policy->version;  in fscrypt_show_test_dummy_encryption()