1 /* SPDX-License-Identifier: GPL-2.0 */ 2 /* 3 * Common values for the Poly1305 algorithm 4 */ 5 6 #ifndef _CRYPTO_POLY1305_H 7 #define _CRYPTO_POLY1305_H 8 9 #include <linux/types.h> 10 #include <linux/crypto.h> 11 12 #define POLY1305_BLOCK_SIZE 16 13 #define POLY1305_KEY_SIZE 32 14 #define POLY1305_DIGEST_SIZE 16 15 16 /* The poly1305_key and poly1305_state types are mostly opaque and 17 * implementation-defined. Limbs might be in base 2^64 or base 2^26, or 18 * different yet. The union type provided keeps these 64-bit aligned for the 19 * case in which this is implemented using 64x64 multiplies. 20 */ 21 22 struct poly1305_key { 23 union { 24 u32 r[5]; 25 u64 r64[3]; 26 }; 27 }; 28 29 struct poly1305_core_key { 30 struct poly1305_key key; 31 struct poly1305_key precomputed_s; 32 }; 33 34 struct poly1305_state { 35 union { 36 u32 h[5]; 37 u64 h64[3]; 38 }; 39 }; 40 41 struct poly1305_desc_ctx { 42 /* partial buffer */ 43 u8 buf[POLY1305_BLOCK_SIZE]; 44 /* bytes used in partial buffer */ 45 unsigned int buflen; 46 /* how many keys have been set in r[] */ 47 unsigned short rset; 48 /* whether s[] has been set */ 49 bool sset; 50 /* finalize key */ 51 u32 s[4]; 52 /* accumulator */ 53 struct poly1305_state h; 54 /* key */ 55 union { 56 struct poly1305_key opaque_r[CONFIG_CRYPTO_LIB_POLY1305_RSIZE]; 57 struct poly1305_core_key core_r; 58 }; 59 }; 60 61 void poly1305_init_arch(struct poly1305_desc_ctx *desc, 62 const u8 key[POLY1305_KEY_SIZE]); 63 void poly1305_init_generic(struct poly1305_desc_ctx *desc, 64 const u8 key[POLY1305_KEY_SIZE]); 65 66 static inline void poly1305_init(struct poly1305_desc_ctx *desc, const u8 *key) 67 { 68 if (IS_ENABLED(CONFIG_CRYPTO_ARCH_HAVE_LIB_POLY1305)) 69 poly1305_init_arch(desc, key); 70 else 71 poly1305_init_generic(desc, key); 72 } 73 74 void poly1305_update_arch(struct poly1305_desc_ctx *desc, const u8 *src, 75 unsigned int nbytes); 76 void poly1305_update_generic(struct poly1305_desc_ctx *desc, const u8 *src, 77 unsigned int nbytes); 78 79 static inline void poly1305_update(struct poly1305_desc_ctx *desc, 80 const u8 *src, unsigned int nbytes) 81 { 82 if (IS_ENABLED(CONFIG_CRYPTO_ARCH_HAVE_LIB_POLY1305)) 83 poly1305_update_arch(desc, src, nbytes); 84 else 85 poly1305_update_generic(desc, src, nbytes); 86 } 87 88 void poly1305_final_arch(struct poly1305_desc_ctx *desc, u8 *digest); 89 void poly1305_final_generic(struct poly1305_desc_ctx *desc, u8 *digest); 90 91 static inline void poly1305_final(struct poly1305_desc_ctx *desc, u8 *digest) 92 { 93 if (IS_ENABLED(CONFIG_CRYPTO_ARCH_HAVE_LIB_POLY1305)) 94 poly1305_final_arch(desc, digest); 95 else 96 poly1305_final_generic(desc, digest); 97 } 98 99 #endif 100