1 // SPDX-License-Identifier: GPL-2.0+ 2 /* 3 * Cryptographic API. 4 * 5 * s390 implementation of the SHA512 and SHA38 Secure Hash Algorithm. 6 * 7 * Copyright IBM Corp. 2007 8 * Author(s): Jan Glauber (jang@de.ibm.com) 9 */ 10 #include <crypto/internal/hash.h> 11 #include <crypto/sha.h> 12 #include <linux/errno.h> 13 #include <linux/init.h> 14 #include <linux/kernel.h> 15 #include <linux/module.h> 16 #include <linux/cpufeature.h> 17 #include <asm/cpacf.h> 18 19 #include "sha.h" 20 21 static int sha512_init(struct shash_desc *desc) 22 { 23 struct s390_sha_ctx *ctx = shash_desc_ctx(desc); 24 25 *(__u64 *)&ctx->state[0] = 0x6a09e667f3bcc908ULL; 26 *(__u64 *)&ctx->state[2] = 0xbb67ae8584caa73bULL; 27 *(__u64 *)&ctx->state[4] = 0x3c6ef372fe94f82bULL; 28 *(__u64 *)&ctx->state[6] = 0xa54ff53a5f1d36f1ULL; 29 *(__u64 *)&ctx->state[8] = 0x510e527fade682d1ULL; 30 *(__u64 *)&ctx->state[10] = 0x9b05688c2b3e6c1fULL; 31 *(__u64 *)&ctx->state[12] = 0x1f83d9abfb41bd6bULL; 32 *(__u64 *)&ctx->state[14] = 0x5be0cd19137e2179ULL; 33 ctx->count = 0; 34 ctx->func = CPACF_KIMD_SHA_512; 35 36 return 0; 37 } 38 39 static int sha512_export(struct shash_desc *desc, void *out) 40 { 41 struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 42 struct sha512_state *octx = out; 43 44 octx->count[0] = sctx->count; 45 octx->count[1] = 0; 46 memcpy(octx->state, sctx->state, sizeof(octx->state)); 47 memcpy(octx->buf, sctx->buf, sizeof(octx->buf)); 48 return 0; 49 } 50 51 static int sha512_import(struct shash_desc *desc, const void *in) 52 { 53 struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 54 const struct sha512_state *ictx = in; 55 56 if (unlikely(ictx->count[1])) 57 return -ERANGE; 58 sctx->count = ictx->count[0]; 59 60 memcpy(sctx->state, ictx->state, sizeof(ictx->state)); 61 memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf)); 62 sctx->func = CPACF_KIMD_SHA_512; 63 return 0; 64 } 65 66 static struct shash_alg sha512_alg = { 67 .digestsize = SHA512_DIGEST_SIZE, 68 .init = sha512_init, 69 .update = s390_sha_update, 70 .final = s390_sha_final, 71 .export = sha512_export, 72 .import = sha512_import, 73 .descsize = sizeof(struct s390_sha_ctx), 74 .statesize = sizeof(struct sha512_state), 75 .base = { 76 .cra_name = "sha512", 77 .cra_driver_name= "sha512-s390", 78 .cra_priority = 300, 79 .cra_flags = CRYPTO_ALG_TYPE_SHASH, 80 .cra_blocksize = SHA512_BLOCK_SIZE, 81 .cra_module = THIS_MODULE, 82 } 83 }; 84 85 MODULE_ALIAS_CRYPTO("sha512"); 86 87 static int sha384_init(struct shash_desc *desc) 88 { 89 struct s390_sha_ctx *ctx = shash_desc_ctx(desc); 90 91 *(__u64 *)&ctx->state[0] = 0xcbbb9d5dc1059ed8ULL; 92 *(__u64 *)&ctx->state[2] = 0x629a292a367cd507ULL; 93 *(__u64 *)&ctx->state[4] = 0x9159015a3070dd17ULL; 94 *(__u64 *)&ctx->state[6] = 0x152fecd8f70e5939ULL; 95 *(__u64 *)&ctx->state[8] = 0x67332667ffc00b31ULL; 96 *(__u64 *)&ctx->state[10] = 0x8eb44a8768581511ULL; 97 *(__u64 *)&ctx->state[12] = 0xdb0c2e0d64f98fa7ULL; 98 *(__u64 *)&ctx->state[14] = 0x47b5481dbefa4fa4ULL; 99 ctx->count = 0; 100 ctx->func = CPACF_KIMD_SHA_512; 101 102 return 0; 103 } 104 105 static struct shash_alg sha384_alg = { 106 .digestsize = SHA384_DIGEST_SIZE, 107 .init = sha384_init, 108 .update = s390_sha_update, 109 .final = s390_sha_final, 110 .export = sha512_export, 111 .import = sha512_import, 112 .descsize = sizeof(struct s390_sha_ctx), 113 .statesize = sizeof(struct sha512_state), 114 .base = { 115 .cra_name = "sha384", 116 .cra_driver_name= "sha384-s390", 117 .cra_priority = 300, 118 .cra_flags = CRYPTO_ALG_TYPE_SHASH, 119 .cra_blocksize = SHA384_BLOCK_SIZE, 120 .cra_ctxsize = sizeof(struct s390_sha_ctx), 121 .cra_module = THIS_MODULE, 122 } 123 }; 124 125 MODULE_ALIAS_CRYPTO("sha384"); 126 127 static int __init init(void) 128 { 129 int ret; 130 131 if (!cpacf_query_func(CPACF_KIMD, CPACF_KIMD_SHA_512)) 132 return -EOPNOTSUPP; 133 if ((ret = crypto_register_shash(&sha512_alg)) < 0) 134 goto out; 135 if ((ret = crypto_register_shash(&sha384_alg)) < 0) 136 crypto_unregister_shash(&sha512_alg); 137 out: 138 return ret; 139 } 140 141 static void __exit fini(void) 142 { 143 crypto_unregister_shash(&sha512_alg); 144 crypto_unregister_shash(&sha384_alg); 145 } 146 147 module_cpu_feature_match(MSA, init); 148 module_exit(fini); 149 150 MODULE_LICENSE("GPL"); 151 MODULE_DESCRIPTION("SHA512 and SHA-384 Secure Hash Algorithm"); 152