293 static int pkey_ep11key2pkey(const u8 *key, size_t keylen,  in pkey_ep11key2pkey()  argument
306 			    ep11_kb_wkvp(key, keylen));  in pkey_ep11key2pkey()
314 		rc = ep11_kblob2protkey(card, dom, key, keylen,  in pkey_ep11key2pkey()
519 	u32 keylen;  in nonccatokecc2pkey()  local
524 		keylen = 32;  in nonccatokecc2pkey()
527 		keylen = 48;  in nonccatokecc2pkey()
530 		keylen = 80;  in nonccatokecc2pkey()
533 		keylen = 32;  in nonccatokecc2pkey()
536 		keylen = 64;  in nonccatokecc2pkey()
544 	if (t->len != keylen) {  in nonccatokecc2pkey()
564 static int pkey_nonccatok2pkey(const u8 *key, u32 keylen,  in pkey_nonccatok2pkey()  argument
574 		if (keylen != sizeof(struct protaeskeytoken))  in pkey_nonccatok2pkey()
588 		if (keylen < sizeof(struct clearkeytoken) ||  in pkey_nonccatok2pkey()
589 		    keylen != sizeof(*t) + t->len)  in pkey_nonccatok2pkey()
615 		rc = ep11_check_aes_key(debug_info, 3, key, keylen, 1);  in pkey_nonccatok2pkey()
618 		rc = pkey_ep11key2pkey(key, keylen,  in pkey_nonccatok2pkey()
624 		rc = ep11_check_aes_key_with_hdr(debug_info, 3, key, keylen, 1);  in pkey_nonccatok2pkey()
627 		rc = pkey_ep11key2pkey(key, keylen,  in pkey_nonccatok2pkey()
642 static int pkey_ccainttok2pkey(const u8 *key, u32 keylen,  in pkey_ccainttok2pkey()  argument
649 		if (keylen != sizeof(struct secaeskeytoken))  in pkey_ccainttok2pkey()
653 		if (keylen < hdr->len || keylen > MAXCCAVLSCTOKENSIZE)  in pkey_ccainttok2pkey()
668 int pkey_keyblob2pkey(const u8 *key, u32 keylen,  in pkey_keyblob2pkey()  argument
674 	if (keylen < sizeof(struct keytoken_header)) {  in pkey_keyblob2pkey()
675 		DEBUG_ERR("%s invalid keylen %d\n", __func__, keylen);  in pkey_keyblob2pkey()
681 		rc = pkey_nonccatok2pkey(key, keylen,  in pkey_keyblob2pkey()
685 		rc = pkey_ccainttok2pkey(key, keylen,  in pkey_keyblob2pkey()
826 static int pkey_verifykey2(const u8 *key, size_t keylen,  in pkey_verifykey2()  argument
835 	if (keylen < sizeof(struct keytoken_header))  in pkey_verifykey2()
910 		rc = ep11_check_aes_key(debug_info, 3, key, keylen, 1);  in pkey_verifykey2()
921 				    ep11_kb_wkvp(key, keylen));  in pkey_verifykey2()
937 						 key, keylen, 1);  in pkey_verifykey2()
948 				    ep11_kb_wkvp(key, keylen));  in pkey_verifykey2()
967 			      const u8 *key, size_t keylen,  in pkey_keyblob2pkey2()  argument
977 	if (keylen < sizeof(struct keytoken_header))  in pkey_keyblob2pkey2()
982 			if (keylen != sizeof(struct secaeskeytoken))  in pkey_keyblob2pkey2()
987 			if (keylen < hdr->len || keylen > MAXCCAVLSCTOKENSIZE)  in pkey_keyblob2pkey2()
998 			if (ep11_check_aes_key(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey2()
1002 							key, keylen, 1))  in pkey_keyblob2pkey2()
1005 			return pkey_nonccatok2pkey(key, keylen,  in pkey_keyblob2pkey2()
1031 			rc = ep11_kblob2protkey(card, dom, key, keylen,  in pkey_keyblob2pkey2()
1042 static int pkey_apqns4key(const u8 *key, size_t keylen, u32 flags,  in pkey_apqns4key()  argument
1049 	if (keylen < sizeof(struct keytoken_header) || flags == 0)  in pkey_apqns4key()
1220 			      const u8 *key, size_t keylen,  in pkey_keyblob2pkey3()  argument
1230 	if (keylen < sizeof(struct keytoken_header))  in pkey_keyblob2pkey3()
1237 		if (ep11_check_aes_key_with_hdr(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1243 		if (ep11_check_ecc_key_with_hdr(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1249 		if (ep11_check_aes_key(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1254 			if (keylen != sizeof(struct secaeskeytoken))  in pkey_keyblob2pkey3()
1260 			if (keylen < hdr->len || keylen > MAXCCAVLSCTOKENSIZE)  in pkey_keyblob2pkey3()
1271 		if (keylen < sizeof(struct eccprivkeytoken))  in pkey_keyblob2pkey3()
1273 		if (cca_check_sececckeytoken(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1276 		return pkey_nonccatok2pkey(key, keylen,  in pkey_keyblob2pkey3()
1323 static void *_copy_key_from_user(void __user *ukey, size_t keylen)  in _copy_key_from_user()  argument
1325 	if (!ukey || keylen < MINKEYBLOBBUFSIZE || keylen > KEYBLOBBUFSIZE)  in _copy_key_from_user()
1328 	return memdup_user(ukey, keylen);  in _copy_key_from_user()
1491 		kkey = _copy_key_from_user(ktp.key, ktp.keylen);  in pkey_unlocked_ioctl()
1495 		rc = pkey_keyblob2pkey(kkey, ktp.keylen, ktp.protkey.protkey,  in pkey_unlocked_ioctl()
1498 		memzero_explicit(kkey, ktp.keylen);  in pkey_unlocked_ioctl()
1533 			if (kgs.keylen < klen) {  in pkey_unlocked_ioctl()
1542 		kgs.keylen = klen;  in pkey_unlocked_ioctl()
1575 			if (kcs.keylen < klen) {  in pkey_unlocked_ioctl()
1584 		kcs.keylen = klen;  in pkey_unlocked_ioctl()
1598 		kkey = _copy_key_from_user(kvk.key, kvk.keylen);  in pkey_unlocked_ioctl()
1601 		rc = pkey_verifykey2(kkey, kvk.keylen,  in pkey_unlocked_ioctl()
1623 		kkey = _copy_key_from_user(ktp.key, ktp.keylen);  in pkey_unlocked_ioctl()
1630 					kkey, ktp.keylen,  in pkey_unlocked_ioctl()
1635 		memzero_explicit(kkey, ktp.keylen);  in pkey_unlocked_ioctl()
1660 		kkey = _copy_key_from_user(kak.key, kak.keylen);  in pkey_unlocked_ioctl()
1665 		rc = pkey_apqns4key(kkey, kak.keylen, kak.flags,  in pkey_unlocked_ioctl()
1746 		kkey = _copy_key_from_user(ktp.key, ktp.keylen);  in pkey_unlocked_ioctl()
1758 					kkey, ktp.keylen,  in pkey_unlocked_ioctl()
1762 		memzero_explicit(kkey, ktp.keylen);  in pkey_unlocked_ioctl()