LXR linux/arch/s390/crypto/sha512

   1/*
   2 * Cryptographic API.
   3 *
   4 * s390 implementation of the SHA512 and SHA38 Secure Hash Algorithm.
   5 *
   6 * Copyright IBM Corp. 2007
   7 * Author(s): Jan Glauber (jang@de.ibm.com)
   8 *
   9 * This program is free software; you can redistribute it and/or modify it
  10 * under the terms of the GNU General Public License as published by the Free
  11 * Software Foundation; either version 2 of the License, or (at your option)
  12 * any later version.
  13 *
  14 */
  15#include <crypto/internal/hash.h>
  16#include <crypto/sha.h>
  17#include <linux/errno.h>
  18#include <linux/init.h>
  19#include <linux/kernel.h>
  20#include <linux/module.h>
  21#include <linux/cpufeature.h>
  22#include <asm/cpacf.h>
  23
  24#include "sha.h"
  25
  26static int sha512_init(struct shash_desc *desc)
  27{
  28        struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
  29
  30        *(__u64 *)&ctx->state[0] = 0x6a09e667f3bcc908ULL;
  31        *(__u64 *)&ctx->state[2] = 0xbb67ae8584caa73bULL;
  32        *(__u64 *)&ctx->state[4] = 0x3c6ef372fe94f82bULL;
  33        *(__u64 *)&ctx->state[6] = 0xa54ff53a5f1d36f1ULL;
  34        *(__u64 *)&ctx->state[8] = 0x510e527fade682d1ULL;
  35        *(__u64 *)&ctx->state[10] = 0x9b05688c2b3e6c1fULL;
  36        *(__u64 *)&ctx->state[12] = 0x1f83d9abfb41bd6bULL;
  37        *(__u64 *)&ctx->state[14] = 0x5be0cd19137e2179ULL;
  38        ctx->count = 0;
  39        ctx->func = CPACF_KIMD_SHA_512;
  40
  41        return 0;
  42}
  43
  44static int sha512_export(struct shash_desc *desc, void *out)
  45{
  46        struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
  47        struct sha512_state *octx = out;
  48
  49        octx->count[0] = sctx->count;
  50        octx->count[1] = 0;
  51        memcpy(octx->state, sctx->state, sizeof(octx->state));
  52        memcpy(octx->buf, sctx->buf, sizeof(octx->buf));
  53        return 0;
  54}
  55
  56static int sha512_import(struct shash_desc *desc, const void *in)
  57{
  58        struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
  59        const struct sha512_state *ictx = in;
  60
  61        if (unlikely(ictx->count[1]))
  62                return -ERANGE;
  63        sctx->count = ictx->count[0];
  64
  65        memcpy(sctx->state, ictx->state, sizeof(ictx->state));
  66        memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf));
  67        sctx->func = CPACF_KIMD_SHA_512;
  68        return 0;
  69}
  70
  71static struct shash_alg sha512_alg = {
  72        .digestsize     =       SHA512_DIGEST_SIZE,
  73        .init           =       sha512_init,
  74        .update         =       s390_sha_update,
  75        .final          =       s390_sha_final,
  76        .export         =       sha512_export,
  77        .import         =       sha512_import,
  78        .descsize       =       sizeof(struct s390_sha_ctx),
  79        .statesize      =       sizeof(struct sha512_state),
  80        .base           =       {
  81                .cra_name       =       "sha512",
  82                .cra_driver_name=       "sha512-s390",
  83                .cra_priority   =       300,
  84                .cra_flags      =       CRYPTO_ALG_TYPE_SHASH,
  85                .cra_blocksize  =       SHA512_BLOCK_SIZE,
  86                .cra_module     =       THIS_MODULE,
  87        }
  88};
  89
  90MODULE_ALIAS_CRYPTO("sha512");
  91
  92static int sha384_init(struct shash_desc *desc)
  93{
  94        struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
  95
  96        *(__u64 *)&ctx->state[0] = 0xcbbb9d5dc1059ed8ULL;
  97        *(__u64 *)&ctx->state[2] = 0x629a292a367cd507ULL;
  98        *(__u64 *)&ctx->state[4] = 0x9159015a3070dd17ULL;
  99        *(__u64 *)&ctx->state[6] = 0x152fecd8f70e5939ULL;
 100        *(__u64 *)&ctx->state[8] = 0x67332667ffc00b31ULL;
 101        *(__u64 *)&ctx->state[10] = 0x8eb44a8768581511ULL;
 102        *(__u64 *)&ctx->state[12] = 0xdb0c2e0d64f98fa7ULL;
 103        *(__u64 *)&ctx->state[14] = 0x47b5481dbefa4fa4ULL;
 104        ctx->count = 0;
 105        ctx->func = CPACF_KIMD_SHA_512;
 106
 107        return 0;
 108}
 109
 110static struct shash_alg sha384_alg = {
 111        .digestsize     =       SHA384_DIGEST_SIZE,
 112        .init           =       sha384_init,
 113        .update         =       s390_sha_update,
 114        .final          =       s390_sha_final,
 115        .export         =       sha512_export,
 116        .import         =       sha512_import,
 117        .descsize       =       sizeof(struct s390_sha_ctx),
 118        .statesize      =       sizeof(struct sha512_state),
 119        .base           =       {
 120                .cra_name       =       "sha384",
 121                .cra_driver_name=       "sha384-s390",
 122                .cra_priority   =       300,
 123                .cra_flags      =       CRYPTO_ALG_TYPE_SHASH,
 124                .cra_blocksize  =       SHA384_BLOCK_SIZE,
 125                .cra_ctxsize    =       sizeof(struct s390_sha_ctx),
 126                .cra_module     =       THIS_MODULE,
 127        }
 128};
 129
 130MODULE_ALIAS_CRYPTO("sha384");
 131
 132static int __init init(void)
 133{
 134        int ret;
 135
 136        if (!cpacf_query_func(CPACF_KIMD, CPACF_KIMD_SHA_512))
 137                return -EOPNOTSUPP;
 138        if ((ret = crypto_register_shash(&sha512_alg)) < 0)
 139                goto out;
 140        if ((ret = crypto_register_shash(&sha384_alg)) < 0)
 141                crypto_unregister_shash(&sha512_alg);
 142out:
 143        return ret;
 144}
 145
 146static void __exit fini(void)
 147{
 148        crypto_unregister_shash(&sha512_alg);
 149        crypto_unregister_shash(&sha384_alg);
 150}
 151
 152module_cpu_feature_match(MSA, init);
 153module_exit(fini);
 154
 155MODULE_LICENSE("GPL");
 156MODULE_DESCRIPTION("SHA512 and SHA-384 Secure Hash Algorithm");
 157