You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

74 lines
2.3 KiB

// Copyright (c) 2011-present, Facebook, Inc. All rights reserved.
// Copyright (c) 2020 Intel Corporation
// This source code is licensed under both the GPLv2 (found in the
// COPYING file in the root directory) and Apache 2.0 License
// (found in the LICENSE.Apache file in the root directory).
#pragma once
#if !defined(ROCKSDB_LITE)
// Includes Intel's Integrated Performance Primitives for Cryptography (IPPCP).
// IPPCP is lightweight cryptography library that is highly-optimized for
// various Intel CPUs.
//
// We use it here to provide an AES-128/192/256 encryption with a CTR mode of
// operation.
//
// Download URL: https://github.com/intel/ipp-crypto.
//
#include <ippcp.h>
#include <rocksdb/env_encryption.h>
#include <string>
namespace ROCKSDB_NAMESPACE {
// AES-128, AES-192, and AES-256 encryptions are all supported.
enum struct KeySize { AES_128 = 16, AES_192 = 24, AES_256 = 32 };
// This encryption provider uses AES block cipher and a CTR mode of operation
// with a cryptographically secure IV that is randomly generated.
//
// Note: a prefix size of 4096 (4K) is chosen for optimal performance.
//
class IppcpProvider : public EncryptionProvider {
public:
static constexpr size_t kPrefixSize = 4096;
static std::unique_ptr<EncryptionProvider> CreateProvider();
static const char* kName() { return "ippcp"; }
virtual const char* Name() const override { return kName(); }
virtual size_t GetPrefixLength() const override { return kPrefixSize; }
virtual Status AddCipher(const std::string& /*descriptor*/,
const char* /*cipher*/, size_t /*len*/,
bool /*for_write*/) override;
virtual Status CreateNewPrefix(const std::string& fname, char* prefix,
size_t prefixLength) const override;
virtual Status CreateCipherStream(
const std::string& fname, const EnvOptions& options, Slice& prefix,
std::unique_ptr<BlockAccessCipherStream>* result) override;
virtual ~IppcpProvider();
private:
int ctx_size_;
KeySize key_size_;
IppsAESSpec* aes_ctx_;
IppcpProvider()
: ctx_size_(0), key_size_(KeySize::AES_256), aes_ctx_(nullptr) {}
IppcpProvider(const IppcpProvider&) = delete;
IppcpProvider& operator=(const IppcpProvider&) = delete;
};
} // namespace ROCKSDB_NAMESPACE
#endif // !defined(ROCKSDB_LITE)