From nobody Mon Sep 21 19:08:38 2026 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=aspeedtech.com); dmarc=pass(p=quarantine dis=none) header.from=aspeedtech.com ARC-Seal: i=2; a=rsa-sha256; t=1784086658; cv=pass; d=zohomail.com; s=zohoarc; b=BQkMKrGOjhDUvXia/sVXtcH4dioBAJpuwycKLZNmX8LNVqPS7kVhcAb9xnep2ch2mh5sYhZsH2PuBrU620cQsEBxy9thS/pg/TZvLVHhsgp7+b8XWpss8EX+S4JTC9eGT2nmHNCyZA/RyTM9DOVBNaJNAi8UbH7YOuFIgnJ4Zuk= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1784086658; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=ZP88/4rPMg1FVqvGqTLlZ5jPpui4Td6aiKBJehpSof8=; b=IdLPJ9fP4oW4Nr8DRVBBfV1bSq0Em39a6yu9xkB9sp8rpzedmvvl07eDh3vLjnxmi6lHD8aDnw1r1LiC1IwbWHfJ7JTbT++WXZwVGgUpIfs1Alg2U0u3pyu+rGhx9GEvtydNmba+n/Y/DgPD0acrZuOqpUBY30nK23tlCqDtwVk= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=aspeedtech.com); dmarc=pass header.from= (p=quarantine dis=none) Return-Path: Received: from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1784086658961888.4581791476664; Tue, 14 Jul 2026 20:37:38 -0700 (PDT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists1p.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1wjqNt-0003IA-GP; Tue, 14 Jul 2026 23:34:09 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wjqNl-0003F9-Gj; Tue, 14 Jul 2026 23:34:01 -0400 Received: from mail-japaneastazlp170120005.outbound.protection.outlook.com ([2a01:111:f403:c405::5] helo=TYPPR03CU001.outbound.protection.outlook.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wjqNj-0000nz-NW; Tue, 14 Jul 2026 23:34:01 -0400 Received: from TYZPR06MB4980.apcprd06.prod.outlook.com (2603:1096:400:1cc::10) by TY0PR06MB5258.apcprd06.prod.outlook.com (2603:1096:400:205::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.11; Wed, 15 Jul 2026 03:33:31 +0000 Received: from TYZPR06MB4980.apcprd06.prod.outlook.com ([fe80::ea8a:7cb7:4822:2fb3]) by TYZPR06MB4980.apcprd06.prod.outlook.com ([fe80::ea8a:7cb7:4822:2fb3%6]) with mapi id 15.21.0223.008; Wed, 15 Jul 2026 03:33:31 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=DkNwHEz0yLk0/GU5tspBdNtXQMt1a+KRs4nnsQtO27ewRhvTgwaDwYPdGkLFTXZAMu272gO6/jKKL0ODXZnF0xIVJbCyQ1doooOLNeqUj9Mmnb+DKX+kMPfeJIUtQcwMKjBSXG4LLE5ZTpIBa9/iy2u61VrQXUCQtri1JF5kfGK0EmLPnWiClE7cG56sC9si8ynmdm6eFIpftXJ2ijwu0wQdugm5nDYXTvzLUzX8bcFJQuTEycUR3l2Y9CulxW4gImLx5TtGK1NdYfqQqjzKU8Gkvav2uJK3QTuClMRrB9pupBqHYJsgl2QPizaFidU/0qJ3OMRi8xaKpbN9kcUGSg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ZP88/4rPMg1FVqvGqTLlZ5jPpui4Td6aiKBJehpSof8=; b=NETvMxIB4mUjx8MC9ZtWmMTdG7KnAahqogcv/GZwmf8vXwbdBObnbb+TKQzYFXTzVKpnXBJozjanRluuYBtRosTBYzUnTQLrsOe+9q80YB2mRsnw7LYw0uFENxS4VU+7KJaRW+4TlzE3ZQPNy5pN0wpoGtgeeDoBuNxbtVf8GE9saLPLOO2UeTYMJ/Wx7Oivi5b0XPOT/NNjAM97aje6w9FxSPmoNMD4WV+cig+tgp04ZMcA0zZac8YaFoxGy1iy2M3BzIm0+n3Cy47sHxXQrEqHd4/xsOhm7dBdmIc/Emf8vpdA/5vN88w8Tpe/B46lPzIAdie7f8WzNZMxSZCK/g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=aspeedtech.com; dmarc=pass action=none header.from=aspeedtech.com; dkim=pass header.d=aspeedtech.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aspeedtech.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZP88/4rPMg1FVqvGqTLlZ5jPpui4Td6aiKBJehpSof8=; b=AZ9azPh46RtmHjtmrScHYlc6X6Ts46CQYYfD5UaoIEBsy3rtEwoVv7t2BjlVSqmwmqYPOa5HBJDp9SsWcuta9uATlLfn1iwiC64jdW30m5I10tLA5unW23oWJFMt+vVpLe3oLy3PkCffc1pA38+NDjvykn9wDfR+iEp5YuZfENwKdAXDx13sNCAHuHxyxQvntfuGafXkoi7aqJGjqU2ob2+g1XBVeAq8cInhvW+uTK3NlMC/1Ft35Ns3JLYAEiXSfCIvAkb9BdvXZ3YuaATIVhFzPTPPWFnPwzwzeCsC6SEy23ZH6iHp9zUeK25/miMYLsMaGvgYeh1qouZOmnUD9w== From: Jamin Lin To: =?iso-8859-1?Q?Daniel_P=2E_Berrang=E9?= , =?iso-8859-1?Q?C=E9dric_Le_Goater?= , Peter Maydell , Steven Lee , Troy Lee , Kane Chen , Andrew Jeffery , Joel Stanley , Eric Blake , Markus Armbruster , Fabiano Rosas , Laurent Vivier , Paolo Bonzini , "open list:All patches CC here" , "open list:ASPEED BMCs" CC: Jamin Lin , Troy Lee Subject: [PATCH v2 11/17] crypto/cipher-gnutls: Implement AES-GCM Thread-Topic: [PATCH v2 11/17] crypto/cipher-gnutls: Implement AES-GCM Thread-Index: AQHdFAq1vRz49aUPpUKss5yCKuRwQg== Date: Wed, 15 Jul 2026 03:33:31 +0000 Message-ID: <20260715033311.1648424-12-jamin_lin@aspeedtech.com> References: <20260715033311.1648424-1-jamin_lin@aspeedtech.com> In-Reply-To: <20260715033311.1648424-1-jamin_lin@aspeedtech.com> Accept-Language: zh-TW, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=aspeedtech.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: TYZPR06MB4980:EE_|TY0PR06MB5258:EE_ x-ms-office365-filtering-correlation-id: fa47b659-7d0e-40a2-cb65-08dee221d7cd x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; ARA:13230040|1800799024|366016|7416014|376014|23010399003|56012099006|6133799003|22082099003|18002099003|38070700021|921020; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:TYZPR06MB4980.apcprd06.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(366016)(7416014)(376014)(23010399003)(56012099006)(6133799003)(22082099003)(18002099003)(38070700021)(921020); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?XD7GmTROaVrIADgWZC5az9pw0NQqaSKlLlOZKFXMyaiZ6dZky7KEYa4py8?= =?iso-8859-1?Q?ca157cuwAg9Y9wN3pvjdY18f8xTEY/3+4JMWByIhj9+Fxjoac1lQLgNINi?= =?iso-8859-1?Q?4bTMTrQEA8NWPxmaXDkuVM2C7yJ8p4z2P5NgPyna0cTEWAHln+lmsW4WxZ?= =?iso-8859-1?Q?LY1sQrCGV+qngWZWTLh/Z/HkarZGdG7TNU5SPYWfNbfqspedfpTbr8/U+4?= =?iso-8859-1?Q?ohfrJLYf0Q2QAPKXRaJiC+f3WZpiwxqZ14HlPn3E6u3hMoBfqOIEOuSt8o?= =?iso-8859-1?Q?ro5z3nnwyNn5NsYEq/WLqRoppArwCt1tPF64mJAiuX+PTIXYYKf5srvZA+?= =?iso-8859-1?Q?OXCq8v2F78VSpJOa7G9lZMnpgZZIF8JDlXokQd7qNHZPJweo4WcWOQuhqc?= =?iso-8859-1?Q?c+QtqoPXaYXmQafAb6Vv51NBL9vOJF5Z5M4IukGxkxdXRefV8H83CKE0hR?= =?iso-8859-1?Q?8H7xX38ZUVH5JseBfkAuPFY+Mk39UA8vBnV3lOpeJOC1YDsvWI3zVgoZRU?= =?iso-8859-1?Q?t5+OJPhXDQd2yF3ofPibyG9SzrL8w9giKMR7ubP1Wi4kNH3nvHVw7MRaL5?= =?iso-8859-1?Q?0O/2KezDKMTidZU/ILfSH7L0zBFrrecN7X9f9OBtiMixDp13qMAnMvuAc/?= =?iso-8859-1?Q?3xxfz+juGGUjeWebFRycriO3NAQq/tL94yIVPMl8LW+LZpiLg/D9VZKs8O?= =?iso-8859-1?Q?dx3fWKB/fvdWocuF+IGPqHY8gdO4R0VmGdriNO790hqyJg66HTPXvV/paA?= =?iso-8859-1?Q?6bU+TT+Ln7ykyvpdI96oXBHKVxm3omncqBRm7kO2Y7/djIkxHRNw04fEx/?= =?iso-8859-1?Q?xhvAX7jqv1qfvgCob3TASyVlr1M+Bumgh0qYnGQTgx+5iO1rLWVmshZsFV?= =?iso-8859-1?Q?TiWHm7wHBJgdC7klqHE85ikI+r7EGXEHcghAumgoaIIPdYkBwPU5fdC5Xt?= =?iso-8859-1?Q?d/6D8mh2OSqOY9nRPHyQDAOh7lgGwNErZeb3qX9YfM4LFSIb/HmkC4tyiO?= =?iso-8859-1?Q?OxM42mvvLSmpXHx8masi1aqnSctY73ui9KkUwt38FR9Ev3ai29N+PmRjiN?= =?iso-8859-1?Q?HsdzZ/kJI2cBSOmlvuFJFOBSDWGGJgRrERNVoOmfkrAz9AL9OxzehojHuv?= =?iso-8859-1?Q?qrlBm1Vx58wzBe4EowL63ATBTpClNXbLURhNhMX3TJoQJ9c5OFEs/AjZkU?= =?iso-8859-1?Q?q4dZaxqLTDITC7MqhnMpkm1aSOECQRFJ0C7IJwVs46WGC2q6yOWVc658wX?= =?iso-8859-1?Q?nz6do9XnHSEvjroe3gRfD1bIHcYFMINNiKTG7Prbm0LIoGJscShZ3Qd435?= =?iso-8859-1?Q?GY4MTqeqtp89ukMoJoaqb3Em9zXRR37Q/cJ9ENTwXvFf0I5f8OMYmYvNbY?= =?iso-8859-1?Q?vcG1sGzUmWMz9dWG5w9xjcqU5cXbznCeaXi1tzBaKTMTwH3UpQ/zfgFVX6?= =?iso-8859-1?Q?jJ/A+99d+09o7cqueJKprBY/119eRWL8c0hKDVDl6unwRDfuYghsbaw+qW?= =?iso-8859-1?Q?1QCXxHRtXdTYXcq/GszZ071TNOfslJ9DEFWwDUr/aLgoqhU4Qr3bZz869m?= =?iso-8859-1?Q?4nDh9n8IdgLlelMqQkPVhuQf/7zfwzetEg0jQhVYnoSjdPY0euh2m6kl64?= =?iso-8859-1?Q?J6Qpp8HXcnwdbL0foTogteGkh9Fs3uhY95OMc4DIWCEq4ATL7MLVZEf+Oe?= =?iso-8859-1?Q?/dAlrm/S9JKH5fp0BALPRfRU0sgXUQkSM3qID685a9hMe3/66oZyP3FPek?= =?iso-8859-1?Q?qSIyFA7Xu5+ivmJfnBu7fOcfE4/PJhT9e0OpzPJNKHQA1j+lQ5HQ9+8yff?= =?iso-8859-1?Q?NmyPir3l+g=3D=3D?= Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: IiCAy+zStOreaST4P40bXGgU+uuljHvbIpBV2qYvvizvJo4rs73+e+h3wxOYEE+/z63gw24QC3trqJj8zT2aMxv2Eo2Zq5AhbMrPY54rdG4ahceU0WhyTe1NpFtJZMnvYU6mpSLUvmKpGnIas39Kdda0+aQdVAzCFfA00X4rubCZYP235c6Syd/qZ+wAi6cKNNFlMNq9ZPyjWzCet3YXxZne93oNPuTxL2ROjc0JnjLvorluCvSboOcKJ0HwFzm3hmDMgPscPqiLxRdHU9KgvbA7Gk21UnQO23Xln6/nonF82wvpKvOoK0K6nbfyeiPEoCxVwrJxAimSNqt3iZ7Fnw== X-OriginatorOrg: aspeedtech.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: TYZPR06MB4980.apcprd06.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: fa47b659-7d0e-40a2-cb65-08dee221d7cd X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jul 2026 03:33:31.5254 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 43d4aa98-e35b-4575-8939-080e90d5a249 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: owryrq2D82HfAKOWjWgbzvsaJNbb2LUtb8jy0zcNb691m4zXqa59/M2bdq2I1fnbm8YDXMStm8IOhi9bpRRYTU+OoAWqb5xHXQxs9+DcKIk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR06MB5258 Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists1p.gnu.org; Received-SPF: pass client-ip=2a01:111:f403:c405::5; envelope-from=jamin_lin@aspeedtech.com; helo=TYPPR03CU001.outbound.protection.outlook.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: qemu development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: qemu-devel-bounces+importer=patchew.org@nongnu.org X-ZohoMail-DKIM: pass (identity @aspeedtech.com) X-ZM-MESSAGEID: 1784086660804158500 Content-Type: text/plain; charset="utf-8" Add the AES-GCM AEAD mode to the gnutls backend so it is available when QEMU is built with gnutls (neither gcrypt nor nettle). GCM uses the incremental gnutls_cipher_* API with the GNUTLS_CIPHER_AES_*_GCM algorithms: gnutls_cipher_set_iv() sets the nonce, gnutls_cipher_add_auth() feeds the associated data, gnutls_cipher_encrypt2()/decrypt2() process the message, and gnutls_cipher_tag() reads back the authentication tag. Signed-off-by: Jamin Lin Reviewed-by: Daniel P. Berrang=C3=A9 --- crypto/cipher-gnutls.c.inc | 154 +++++++++++++++++++++++++++++++++++++ 1 file changed, 154 insertions(+) diff --git a/crypto/cipher-gnutls.c.inc b/crypto/cipher-gnutls.c.inc index a8263fff6d..963b328fa1 100644 --- a/crypto/cipher-gnutls.c.inc +++ b/crypto/cipher-gnutls.c.inc @@ -48,6 +48,15 @@ bool qcrypto_cipher_supports(QCryptoCipherAlgo alg, default: return false; } + case QCRYPTO_CIPHER_MODE_GCM: + switch (alg) { + case QCRYPTO_CIPHER_ALGO_AES_128: + case QCRYPTO_CIPHER_ALGO_AES_192: + case QCRYPTO_CIPHER_ALGO_AES_256: + return true; + default: + return false; + } default: return false; } @@ -223,6 +232,147 @@ static struct QCryptoCipherDriver gnutls_driver =3D { .cipher_free =3D qcrypto_gnutls_cipher_free, }; =20 +/* + * GCM is an AEAD stream mode: the nonce need not match the block size, the + * message length need not be a multiple of the block size, associated dat= a is + * fed with gnutls_cipher_add_auth() and the authentication tag is read ba= ck + * with gnutls_cipher_tag(). + */ +static int +qcrypto_gnutls_cipher_encrypt_gcm(QCryptoCipher *cipher, + const void *in, void *out, + size_t len, Error **errp) +{ + QCryptoCipherGnutls *ctx =3D container_of(cipher, QCryptoCipherGnutls,= base); + int err; + + err =3D gnutls_cipher_encrypt2(ctx->handle, in, len, out, len); + if (err !=3D 0) { + error_setg(errp, "Cannot encrypt data: %s", gnutls_strerror(err)); + return -1; + } + + return 0; +} + +static int +qcrypto_gnutls_cipher_decrypt_gcm(QCryptoCipher *cipher, + const void *in, void *out, + size_t len, Error **errp) +{ + QCryptoCipherGnutls *ctx =3D container_of(cipher, QCryptoCipherGnutls,= base); + int err; + + err =3D gnutls_cipher_decrypt2(ctx->handle, in, len, out, len); + if (err !=3D 0) { + error_setg(errp, "Cannot decrypt data: %s", gnutls_strerror(err)); + return -1; + } + + return 0; +} + +static int +qcrypto_gnutls_cipher_setiv_gcm(QCryptoCipher *cipher, + const uint8_t *iv, size_t niv, + Error **errp) +{ + QCryptoCipherGnutls *ctx =3D container_of(cipher, QCryptoCipherGnutls,= base); + + gnutls_cipher_set_iv(ctx->handle, (void *)iv, niv); + + return 0; +} + +static int +qcrypto_gnutls_cipher_setaad_gcm(QCryptoCipher *cipher, + const uint8_t *aad, size_t len, + Error **errp) +{ + QCryptoCipherGnutls *ctx =3D container_of(cipher, QCryptoCipherGnutls,= base); + int err; + + err =3D gnutls_cipher_add_auth(ctx->handle, aad, len); + if (err !=3D 0) { + error_setg(errp, "Cannot add associated data: %s", + gnutls_strerror(err)); + return -1; + } + + return 0; +} + +static int +qcrypto_gnutls_cipher_gettag_gcm(QCryptoCipher *cipher, + uint8_t *tag, size_t len, + Error **errp) +{ + QCryptoCipherGnutls *ctx =3D container_of(cipher, QCryptoCipherGnutls,= base); + int err; + + err =3D gnutls_cipher_tag(ctx->handle, tag, len); + if (err !=3D 0) { + error_setg(errp, "Cannot get authentication tag: %s", + gnutls_strerror(err)); + return -1; + } + + return 0; +} + +static struct QCryptoCipherDriver gnutls_gcm_driver =3D { + .cipher_encrypt =3D qcrypto_gnutls_cipher_encrypt_gcm, + .cipher_decrypt =3D qcrypto_gnutls_cipher_decrypt_gcm, + .cipher_setiv =3D qcrypto_gnutls_cipher_setiv_gcm, + .cipher_setaad =3D qcrypto_gnutls_cipher_setaad_gcm, + .cipher_gettag =3D qcrypto_gnutls_cipher_gettag_gcm, + .cipher_free =3D qcrypto_gnutls_cipher_free, +}; + +static QCryptoCipher * +qcrypto_gnutls_aes_gcm_ctx_new(QCryptoCipherAlgo alg, const uint8_t *key, + size_t nkey, Error **errp) +{ + gnutls_datum_t gkey =3D { (unsigned char *)key, nkey }; + gnutls_cipher_algorithm_t galg =3D GNUTLS_CIPHER_UNKNOWN; + QCryptoCipherGnutls *ctx; + int err; + + switch (alg) { + case QCRYPTO_CIPHER_ALGO_AES_128: + galg =3D GNUTLS_CIPHER_AES_128_GCM; + break; + case QCRYPTO_CIPHER_ALGO_AES_192: + galg =3D GNUTLS_CIPHER_AES_192_GCM; + break; + case QCRYPTO_CIPHER_ALGO_AES_256: + galg =3D GNUTLS_CIPHER_AES_256_GCM; + break; + default: + error_setg(errp, "Unsupported cipher algorithm %s with GCM mode", + QCryptoCipherAlgo_str(alg)); + return NULL; + } + + if (!qcrypto_cipher_validate_key_length(alg, QCRYPTO_CIPHER_MODE_GCM, + nkey, errp)) { + return NULL; + } + + ctx =3D g_new0(QCryptoCipherGnutls, 1); + ctx->base.driver =3D &gnutls_gcm_driver; + ctx->blocksize =3D 16; + + err =3D gnutls_cipher_init(&ctx->handle, galg, &gkey, NULL); + if (err !=3D 0) { + error_setg(errp, "Cannot initialize cipher: %s", gnutls_strerror(e= rr)); + g_free(ctx); + return NULL; + } + + return &ctx->base; +} + static QCryptoCipher *qcrypto_cipher_ctx_new(QCryptoCipherAlgo alg, QCryptoCipherMode mode, const uint8_t *key, @@ -234,6 +384,10 @@ static QCryptoCipher *qcrypto_cipher_ctx_new(QCryptoCi= pherAlgo alg, gnutls_cipher_algorithm_t galg =3D GNUTLS_CIPHER_UNKNOWN; int err; =20 + if (mode =3D=3D QCRYPTO_CIPHER_MODE_GCM) { + return qcrypto_gnutls_aes_gcm_ctx_new(alg, key, nkey, errp); + } + switch (mode) { case QCRYPTO_CIPHER_MODE_XTS: switch (alg) { --=20 2.43.0