1 /* 2 * Cryptographic API. 3 * 4 * s390 implementation of the SHA512 and SHA38 Secure Hash Algorithm. 5 * 6 * Copyright IBM Corp. 2007 7 * Author(s): Jan Glauber (jang@de.ibm.com) 8 * 9 * This program is free software; you can redistribute it and/or modify it 10 * under the terms of the GNU General Public License as published by the Free 11 * Software Foundation; either version 2 of the License, or (at your option) 12 * any later version. 13 * 14 */ 15 #include <crypto/internal/hash.h> 16 #include <crypto/sha.h> 17 #include <linux/errno.h> 18 #include <linux/init.h> 19 #include <linux/kernel.h> 20 #include <linux/module.h> 21 #include <linux/cpufeature.h> 22 23 #include "sha.h" 24 #include "crypt_s390.h" 25 26 static int sha512_init(struct shash_desc *desc) 27 { 28 struct s390_sha_ctx *ctx = shash_desc_ctx(desc); 29 30 *(__u64 *)&ctx->state[0] = 0x6a09e667f3bcc908ULL; 31 *(__u64 *)&ctx->state[2] = 0xbb67ae8584caa73bULL; 32 *(__u64 *)&ctx->state[4] = 0x3c6ef372fe94f82bULL; 33 *(__u64 *)&ctx->state[6] = 0xa54ff53a5f1d36f1ULL; 34 *(__u64 *)&ctx->state[8] = 0x510e527fade682d1ULL; 35 *(__u64 *)&ctx->state[10] = 0x9b05688c2b3e6c1fULL; 36 *(__u64 *)&ctx->state[12] = 0x1f83d9abfb41bd6bULL; 37 *(__u64 *)&ctx->state[14] = 0x5be0cd19137e2179ULL; 38 ctx->count = 0; 39 ctx->func = KIMD_SHA_512; 40 41 return 0; 42 } 43 44 static int sha512_export(struct shash_desc *desc, void *out) 45 { 46 struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 47 struct sha512_state *octx = out; 48 49 octx->count[0] = sctx->count; 50 octx->count[1] = 0; 51 memcpy(octx->state, sctx->state, sizeof(octx->state)); 52 memcpy(octx->buf, sctx->buf, sizeof(octx->buf)); 53 return 0; 54 } 55 56 static int sha512_import(struct shash_desc *desc, const void *in) 57 { 58 struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 59 const struct sha512_state *ictx = in; 60 61 if (unlikely(ictx->count[1])) 62 return -ERANGE; 63 sctx->count = ictx->count[0]; 64 65 memcpy(sctx->state, ictx->state, sizeof(ictx->state)); 66 memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf)); 67 sctx->func = KIMD_SHA_512; 68 return 0; 69 } 70 71 static struct shash_alg sha512_alg = { 72 .digestsize = SHA512_DIGEST_SIZE, 73 .init = sha512_init, 74 .update = s390_sha_update, 75 .final = s390_sha_final, 76 .export = sha512_export, 77 .import = sha512_import, 78 .descsize = sizeof(struct s390_sha_ctx), 79 .statesize = sizeof(struct sha512_state), 80 .base = { 81 .cra_name = "sha512", 82 .cra_driver_name= "sha512-s390", 83 .cra_priority = CRYPT_S390_PRIORITY, 84 .cra_flags = CRYPTO_ALG_TYPE_SHASH, 85 .cra_blocksize = SHA512_BLOCK_SIZE, 86 .cra_module = THIS_MODULE, 87 } 88 }; 89 90 MODULE_ALIAS_CRYPTO("sha512"); 91 92 static int sha384_init(struct shash_desc *desc) 93 { 94 struct s390_sha_ctx *ctx = shash_desc_ctx(desc); 95 96 *(__u64 *)&ctx->state[0] = 0xcbbb9d5dc1059ed8ULL; 97 *(__u64 *)&ctx->state[2] = 0x629a292a367cd507ULL; 98 *(__u64 *)&ctx->state[4] = 0x9159015a3070dd17ULL; 99 *(__u64 *)&ctx->state[6] = 0x152fecd8f70e5939ULL; 100 *(__u64 *)&ctx->state[8] = 0x67332667ffc00b31ULL; 101 *(__u64 *)&ctx->state[10] = 0x8eb44a8768581511ULL; 102 *(__u64 *)&ctx->state[12] = 0xdb0c2e0d64f98fa7ULL; 103 *(__u64 *)&ctx->state[14] = 0x47b5481dbefa4fa4ULL; 104 ctx->count = 0; 105 ctx->func = KIMD_SHA_512; 106 107 return 0; 108 } 109 110 static struct shash_alg sha384_alg = { 111 .digestsize = SHA384_DIGEST_SIZE, 112 .init = sha384_init, 113 .update = s390_sha_update, 114 .final = s390_sha_final, 115 .export = sha512_export, 116 .import = sha512_import, 117 .descsize = sizeof(struct s390_sha_ctx), 118 .statesize = sizeof(struct sha512_state), 119 .base = { 120 .cra_name = "sha384", 121 .cra_driver_name= "sha384-s390", 122 .cra_priority = CRYPT_S390_PRIORITY, 123 .cra_flags = CRYPTO_ALG_TYPE_SHASH, 124 .cra_blocksize = SHA384_BLOCK_SIZE, 125 .cra_ctxsize = sizeof(struct s390_sha_ctx), 126 .cra_module = THIS_MODULE, 127 } 128 }; 129 130 MODULE_ALIAS_CRYPTO("sha384"); 131 132 static int __init init(void) 133 { 134 int ret; 135 136 if (!crypt_s390_func_available(KIMD_SHA_512, CRYPT_S390_MSA)) 137 return -EOPNOTSUPP; 138 if ((ret = crypto_register_shash(&sha512_alg)) < 0) 139 goto out; 140 if ((ret = crypto_register_shash(&sha384_alg)) < 0) 141 crypto_unregister_shash(&sha512_alg); 142 out: 143 return ret; 144 } 145 146 static void __exit fini(void) 147 { 148 crypto_unregister_shash(&sha512_alg); 149 crypto_unregister_shash(&sha384_alg); 150 } 151 152 module_cpu_feature_match(MSA, init); 153 module_exit(fini); 154 155 MODULE_LICENSE("GPL"); 156 MODULE_DESCRIPTION("SHA512 and SHA-384 Secure Hash Algorithm"); 157