Commit | Line | Data |
---|---|---|
20a884f5 | 1 | // SPDX-License-Identifier: GPL-2.0+ |
291dc7c0 JG |
2 | /* |
3 | * Cryptographic API. | |
4 | * | |
4e2c6d7f | 5 | * s390 implementation of the SHA512 and SHA38 Secure Hash Algorithm. |
291dc7c0 JG |
6 | * |
7 | * Copyright IBM Corp. 2007 | |
8 | * Author(s): Jan Glauber (jang@de.ibm.com) | |
291dc7c0 | 9 | */ |
563f346d | 10 | #include <crypto/internal/hash.h> |
9fadfd1a HX |
11 | #include <crypto/sha.h> |
12 | #include <linux/errno.h> | |
291dc7c0 | 13 | #include <linux/init.h> |
9fadfd1a | 14 | #include <linux/kernel.h> |
291dc7c0 | 15 | #include <linux/module.h> |
d05377c1 | 16 | #include <linux/cpufeature.h> |
c7d4d259 | 17 | #include <asm/cpacf.h> |
291dc7c0 JG |
18 | |
19 | #include "sha.h" | |
291dc7c0 | 20 | |
563f346d | 21 | static int sha512_init(struct shash_desc *desc) |
291dc7c0 | 22 | { |
563f346d | 23 | struct s390_sha_ctx *ctx = shash_desc_ctx(desc); |
291dc7c0 JG |
24 | |
25 | *(__u64 *)&ctx->state[0] = 0x6a09e667f3bcc908ULL; | |
26 | *(__u64 *)&ctx->state[2] = 0xbb67ae8584caa73bULL; | |
27 | *(__u64 *)&ctx->state[4] = 0x3c6ef372fe94f82bULL; | |
28 | *(__u64 *)&ctx->state[6] = 0xa54ff53a5f1d36f1ULL; | |
29 | *(__u64 *)&ctx->state[8] = 0x510e527fade682d1ULL; | |
30 | *(__u64 *)&ctx->state[10] = 0x9b05688c2b3e6c1fULL; | |
31 | *(__u64 *)&ctx->state[12] = 0x1f83d9abfb41bd6bULL; | |
32 | *(__u64 *)&ctx->state[14] = 0x5be0cd19137e2179ULL; | |
33 | ctx->count = 0; | |
c7d4d259 | 34 | ctx->func = CPACF_KIMD_SHA_512; |
563f346d HX |
35 | |
36 | return 0; | |
291dc7c0 JG |
37 | } |
38 | ||
9fadfd1a HX |
39 | static int sha512_export(struct shash_desc *desc, void *out) |
40 | { | |
41 | struct s390_sha_ctx *sctx = shash_desc_ctx(desc); | |
42 | struct sha512_state *octx = out; | |
43 | ||
44 | octx->count[0] = sctx->count; | |
45 | octx->count[1] = 0; | |
46 | memcpy(octx->state, sctx->state, sizeof(octx->state)); | |
47 | memcpy(octx->buf, sctx->buf, sizeof(octx->buf)); | |
48 | return 0; | |
49 | } | |
50 | ||
81bd5f6c | 51 | static int sha512_import(struct shash_desc *desc, const void *in) |
9fadfd1a HX |
52 | { |
53 | struct s390_sha_ctx *sctx = shash_desc_ctx(desc); | |
81bd5f6c | 54 | const struct sha512_state *ictx = in; |
9fadfd1a HX |
55 | |
56 | if (unlikely(ictx->count[1])) | |
57 | return -ERANGE; | |
58 | sctx->count = ictx->count[0]; | |
59 | ||
60 | memcpy(sctx->state, ictx->state, sizeof(ictx->state)); | |
61 | memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf)); | |
c7d4d259 | 62 | sctx->func = CPACF_KIMD_SHA_512; |
9fadfd1a HX |
63 | return 0; |
64 | } | |
65 | ||
563f346d HX |
66 | static struct shash_alg sha512_alg = { |
67 | .digestsize = SHA512_DIGEST_SIZE, | |
68 | .init = sha512_init, | |
69 | .update = s390_sha_update, | |
70 | .final = s390_sha_final, | |
9fadfd1a HX |
71 | .export = sha512_export, |
72 | .import = sha512_import, | |
563f346d | 73 | .descsize = sizeof(struct s390_sha_ctx), |
9fadfd1a | 74 | .statesize = sizeof(struct sha512_state), |
563f346d HX |
75 | .base = { |
76 | .cra_name = "sha512", | |
77 | .cra_driver_name= "sha512-s390", | |
c7d4d259 | 78 | .cra_priority = 300, |
563f346d HX |
79 | .cra_flags = CRYPTO_ALG_TYPE_SHASH, |
80 | .cra_blocksize = SHA512_BLOCK_SIZE, | |
81 | .cra_module = THIS_MODULE, | |
82 | } | |
291dc7c0 JG |
83 | }; |
84 | ||
5d26a105 | 85 | MODULE_ALIAS_CRYPTO("sha512"); |
4e2c6d7f | 86 | |
563f346d | 87 | static int sha384_init(struct shash_desc *desc) |
4e2c6d7f | 88 | { |
563f346d | 89 | struct s390_sha_ctx *ctx = shash_desc_ctx(desc); |
4e2c6d7f JG |
90 | |
91 | *(__u64 *)&ctx->state[0] = 0xcbbb9d5dc1059ed8ULL; | |
92 | *(__u64 *)&ctx->state[2] = 0x629a292a367cd507ULL; | |
93 | *(__u64 *)&ctx->state[4] = 0x9159015a3070dd17ULL; | |
94 | *(__u64 *)&ctx->state[6] = 0x152fecd8f70e5939ULL; | |
95 | *(__u64 *)&ctx->state[8] = 0x67332667ffc00b31ULL; | |
96 | *(__u64 *)&ctx->state[10] = 0x8eb44a8768581511ULL; | |
97 | *(__u64 *)&ctx->state[12] = 0xdb0c2e0d64f98fa7ULL; | |
98 | *(__u64 *)&ctx->state[14] = 0x47b5481dbefa4fa4ULL; | |
99 | ctx->count = 0; | |
c7d4d259 | 100 | ctx->func = CPACF_KIMD_SHA_512; |
563f346d HX |
101 | |
102 | return 0; | |
4e2c6d7f JG |
103 | } |
104 | ||
563f346d HX |
105 | static struct shash_alg sha384_alg = { |
106 | .digestsize = SHA384_DIGEST_SIZE, | |
107 | .init = sha384_init, | |
108 | .update = s390_sha_update, | |
109 | .final = s390_sha_final, | |
9fadfd1a HX |
110 | .export = sha512_export, |
111 | .import = sha512_import, | |
563f346d | 112 | .descsize = sizeof(struct s390_sha_ctx), |
9fadfd1a | 113 | .statesize = sizeof(struct sha512_state), |
563f346d HX |
114 | .base = { |
115 | .cra_name = "sha384", | |
116 | .cra_driver_name= "sha384-s390", | |
c7d4d259 | 117 | .cra_priority = 300, |
563f346d | 118 | .cra_flags = CRYPTO_ALG_TYPE_SHASH, |
949abe57 | 119 | .cra_blocksize = SHA384_BLOCK_SIZE, |
563f346d HX |
120 | .cra_ctxsize = sizeof(struct s390_sha_ctx), |
121 | .cra_module = THIS_MODULE, | |
122 | } | |
4e2c6d7f JG |
123 | }; |
124 | ||
5d26a105 | 125 | MODULE_ALIAS_CRYPTO("sha384"); |
4e2c6d7f | 126 | |
291dc7c0 JG |
127 | static int __init init(void) |
128 | { | |
4e2c6d7f JG |
129 | int ret; |
130 | ||
69c0e360 | 131 | if (!cpacf_query_func(CPACF_KIMD, CPACF_KIMD_SHA_512)) |
291dc7c0 | 132 | return -EOPNOTSUPP; |
563f346d | 133 | if ((ret = crypto_register_shash(&sha512_alg)) < 0) |
4e2c6d7f | 134 | goto out; |
563f346d HX |
135 | if ((ret = crypto_register_shash(&sha384_alg)) < 0) |
136 | crypto_unregister_shash(&sha512_alg); | |
4e2c6d7f JG |
137 | out: |
138 | return ret; | |
291dc7c0 JG |
139 | } |
140 | ||
141 | static void __exit fini(void) | |
142 | { | |
563f346d HX |
143 | crypto_unregister_shash(&sha512_alg); |
144 | crypto_unregister_shash(&sha384_alg); | |
291dc7c0 JG |
145 | } |
146 | ||
d05377c1 | 147 | module_cpu_feature_match(MSA, init); |
291dc7c0 JG |
148 | module_exit(fini); |
149 | ||
291dc7c0 | 150 | MODULE_LICENSE("GPL"); |
4e2c6d7f | 151 | MODULE_DESCRIPTION("SHA512 and SHA-384 Secure Hash Algorithm"); |