18c2ecf20Sopenharmony_ci/* SPDX-License-Identifier: GPL-2.0 */
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci * sha512-ce-glue.c - SHA-384/SHA-512 using ARMv8 Crypto Extensions
48c2ecf20Sopenharmony_ci *
58c2ecf20Sopenharmony_ci * Copyright (C) 2018 Linaro Ltd <ard.biesheuvel@linaro.org>
68c2ecf20Sopenharmony_ci *
78c2ecf20Sopenharmony_ci * This program is free software; you can redistribute it and/or modify
88c2ecf20Sopenharmony_ci * it under the terms of the GNU General Public License version 2 as
98c2ecf20Sopenharmony_ci * published by the Free Software Foundation.
108c2ecf20Sopenharmony_ci */
118c2ecf20Sopenharmony_ci
128c2ecf20Sopenharmony_ci#include <asm/neon.h>
138c2ecf20Sopenharmony_ci#include <asm/simd.h>
148c2ecf20Sopenharmony_ci#include <asm/unaligned.h>
158c2ecf20Sopenharmony_ci#include <crypto/internal/hash.h>
168c2ecf20Sopenharmony_ci#include <crypto/internal/simd.h>
178c2ecf20Sopenharmony_ci#include <crypto/sha.h>
188c2ecf20Sopenharmony_ci#include <crypto/sha512_base.h>
198c2ecf20Sopenharmony_ci#include <linux/cpufeature.h>
208c2ecf20Sopenharmony_ci#include <linux/crypto.h>
218c2ecf20Sopenharmony_ci#include <linux/module.h>
228c2ecf20Sopenharmony_ci
238c2ecf20Sopenharmony_ciMODULE_DESCRIPTION("SHA-384/SHA-512 secure hash using ARMv8 Crypto Extensions");
248c2ecf20Sopenharmony_ciMODULE_AUTHOR("Ard Biesheuvel <ard.biesheuvel@linaro.org>");
258c2ecf20Sopenharmony_ciMODULE_LICENSE("GPL v2");
268c2ecf20Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha384");
278c2ecf20Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha512");
288c2ecf20Sopenharmony_ci
298c2ecf20Sopenharmony_ciasmlinkage int sha512_ce_transform(struct sha512_state *sst, u8 const *src,
308c2ecf20Sopenharmony_ci				   int blocks);
318c2ecf20Sopenharmony_ci
328c2ecf20Sopenharmony_ciasmlinkage void sha512_block_data_order(u64 *digest, u8 const *src, int blocks);
338c2ecf20Sopenharmony_ci
348c2ecf20Sopenharmony_cistatic void __sha512_ce_transform(struct sha512_state *sst, u8 const *src,
358c2ecf20Sopenharmony_ci				  int blocks)
368c2ecf20Sopenharmony_ci{
378c2ecf20Sopenharmony_ci	while (blocks) {
388c2ecf20Sopenharmony_ci		int rem;
398c2ecf20Sopenharmony_ci
408c2ecf20Sopenharmony_ci		kernel_neon_begin();
418c2ecf20Sopenharmony_ci		rem = sha512_ce_transform(sst, src, blocks);
428c2ecf20Sopenharmony_ci		kernel_neon_end();
438c2ecf20Sopenharmony_ci		src += (blocks - rem) * SHA512_BLOCK_SIZE;
448c2ecf20Sopenharmony_ci		blocks = rem;
458c2ecf20Sopenharmony_ci	}
468c2ecf20Sopenharmony_ci}
478c2ecf20Sopenharmony_ci
488c2ecf20Sopenharmony_cistatic void __sha512_block_data_order(struct sha512_state *sst, u8 const *src,
498c2ecf20Sopenharmony_ci				      int blocks)
508c2ecf20Sopenharmony_ci{
518c2ecf20Sopenharmony_ci	sha512_block_data_order(sst->state, src, blocks);
528c2ecf20Sopenharmony_ci}
538c2ecf20Sopenharmony_ci
548c2ecf20Sopenharmony_cistatic int sha512_ce_update(struct shash_desc *desc, const u8 *data,
558c2ecf20Sopenharmony_ci			    unsigned int len)
568c2ecf20Sopenharmony_ci{
578c2ecf20Sopenharmony_ci	sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform
588c2ecf20Sopenharmony_ci						   : __sha512_block_data_order;
598c2ecf20Sopenharmony_ci
608c2ecf20Sopenharmony_ci	sha512_base_do_update(desc, data, len, fn);
618c2ecf20Sopenharmony_ci	return 0;
628c2ecf20Sopenharmony_ci}
638c2ecf20Sopenharmony_ci
648c2ecf20Sopenharmony_cistatic int sha512_ce_finup(struct shash_desc *desc, const u8 *data,
658c2ecf20Sopenharmony_ci			   unsigned int len, u8 *out)
668c2ecf20Sopenharmony_ci{
678c2ecf20Sopenharmony_ci	sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform
688c2ecf20Sopenharmony_ci						   : __sha512_block_data_order;
698c2ecf20Sopenharmony_ci
708c2ecf20Sopenharmony_ci	sha512_base_do_update(desc, data, len, fn);
718c2ecf20Sopenharmony_ci	sha512_base_do_finalize(desc, fn);
728c2ecf20Sopenharmony_ci	return sha512_base_finish(desc, out);
738c2ecf20Sopenharmony_ci}
748c2ecf20Sopenharmony_ci
758c2ecf20Sopenharmony_cistatic int sha512_ce_final(struct shash_desc *desc, u8 *out)
768c2ecf20Sopenharmony_ci{
778c2ecf20Sopenharmony_ci	sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform
788c2ecf20Sopenharmony_ci						   : __sha512_block_data_order;
798c2ecf20Sopenharmony_ci
808c2ecf20Sopenharmony_ci	sha512_base_do_finalize(desc, fn);
818c2ecf20Sopenharmony_ci	return sha512_base_finish(desc, out);
828c2ecf20Sopenharmony_ci}
838c2ecf20Sopenharmony_ci
848c2ecf20Sopenharmony_cistatic struct shash_alg algs[] = { {
858c2ecf20Sopenharmony_ci	.init			= sha384_base_init,
868c2ecf20Sopenharmony_ci	.update			= sha512_ce_update,
878c2ecf20Sopenharmony_ci	.final			= sha512_ce_final,
888c2ecf20Sopenharmony_ci	.finup			= sha512_ce_finup,
898c2ecf20Sopenharmony_ci	.descsize		= sizeof(struct sha512_state),
908c2ecf20Sopenharmony_ci	.digestsize		= SHA384_DIGEST_SIZE,
918c2ecf20Sopenharmony_ci	.base.cra_name		= "sha384",
928c2ecf20Sopenharmony_ci	.base.cra_driver_name	= "sha384-ce",
938c2ecf20Sopenharmony_ci	.base.cra_priority	= 200,
948c2ecf20Sopenharmony_ci	.base.cra_blocksize	= SHA512_BLOCK_SIZE,
958c2ecf20Sopenharmony_ci	.base.cra_module	= THIS_MODULE,
968c2ecf20Sopenharmony_ci}, {
978c2ecf20Sopenharmony_ci	.init			= sha512_base_init,
988c2ecf20Sopenharmony_ci	.update			= sha512_ce_update,
998c2ecf20Sopenharmony_ci	.final			= sha512_ce_final,
1008c2ecf20Sopenharmony_ci	.finup			= sha512_ce_finup,
1018c2ecf20Sopenharmony_ci	.descsize		= sizeof(struct sha512_state),
1028c2ecf20Sopenharmony_ci	.digestsize		= SHA512_DIGEST_SIZE,
1038c2ecf20Sopenharmony_ci	.base.cra_name		= "sha512",
1048c2ecf20Sopenharmony_ci	.base.cra_driver_name	= "sha512-ce",
1058c2ecf20Sopenharmony_ci	.base.cra_priority	= 200,
1068c2ecf20Sopenharmony_ci	.base.cra_blocksize	= SHA512_BLOCK_SIZE,
1078c2ecf20Sopenharmony_ci	.base.cra_module	= THIS_MODULE,
1088c2ecf20Sopenharmony_ci} };
1098c2ecf20Sopenharmony_ci
1108c2ecf20Sopenharmony_cistatic int __init sha512_ce_mod_init(void)
1118c2ecf20Sopenharmony_ci{
1128c2ecf20Sopenharmony_ci	return crypto_register_shashes(algs, ARRAY_SIZE(algs));
1138c2ecf20Sopenharmony_ci}
1148c2ecf20Sopenharmony_ci
1158c2ecf20Sopenharmony_cistatic void __exit sha512_ce_mod_fini(void)
1168c2ecf20Sopenharmony_ci{
1178c2ecf20Sopenharmony_ci	crypto_unregister_shashes(algs, ARRAY_SIZE(algs));
1188c2ecf20Sopenharmony_ci}
1198c2ecf20Sopenharmony_ci
1208c2ecf20Sopenharmony_cimodule_cpu_feature_match(SHA512, sha512_ce_mod_init);
1218c2ecf20Sopenharmony_cimodule_exit(sha512_ce_mod_fini);
122