18c2ecf20Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0+
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci * Cryptographic API.
48c2ecf20Sopenharmony_ci *
58c2ecf20Sopenharmony_ci * s390 implementation of the SHA512 and SHA384 Secure Hash Algorithm.
68c2ecf20Sopenharmony_ci *
78c2ecf20Sopenharmony_ci * Copyright IBM Corp. 2019
88c2ecf20Sopenharmony_ci * Author(s): Joerg Schmidbauer (jschmidb@de.ibm.com)
98c2ecf20Sopenharmony_ci */
108c2ecf20Sopenharmony_ci#include <crypto/internal/hash.h>
118c2ecf20Sopenharmony_ci#include <linux/init.h>
128c2ecf20Sopenharmony_ci#include <linux/module.h>
138c2ecf20Sopenharmony_ci#include <linux/cpufeature.h>
148c2ecf20Sopenharmony_ci#include <crypto/sha.h>
158c2ecf20Sopenharmony_ci#include <crypto/sha3.h>
168c2ecf20Sopenharmony_ci#include <asm/cpacf.h>
178c2ecf20Sopenharmony_ci
188c2ecf20Sopenharmony_ci#include "sha.h"
198c2ecf20Sopenharmony_ci
208c2ecf20Sopenharmony_cistatic int sha3_512_init(struct shash_desc *desc)
218c2ecf20Sopenharmony_ci{
228c2ecf20Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
238c2ecf20Sopenharmony_ci
248c2ecf20Sopenharmony_ci	memset(sctx->state, 0, sizeof(sctx->state));
258c2ecf20Sopenharmony_ci	sctx->count = 0;
268c2ecf20Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_512;
278c2ecf20Sopenharmony_ci
288c2ecf20Sopenharmony_ci	return 0;
298c2ecf20Sopenharmony_ci}
308c2ecf20Sopenharmony_ci
318c2ecf20Sopenharmony_cistatic int sha3_512_export(struct shash_desc *desc, void *out)
328c2ecf20Sopenharmony_ci{
338c2ecf20Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
348c2ecf20Sopenharmony_ci	struct sha3_state *octx = out;
358c2ecf20Sopenharmony_ci
368c2ecf20Sopenharmony_ci	octx->rsiz = sctx->count;
378c2ecf20Sopenharmony_ci	octx->rsizw = sctx->count >> 32;
388c2ecf20Sopenharmony_ci
398c2ecf20Sopenharmony_ci	memcpy(octx->st, sctx->state, sizeof(octx->st));
408c2ecf20Sopenharmony_ci	memcpy(octx->buf, sctx->buf, sizeof(octx->buf));
418c2ecf20Sopenharmony_ci
428c2ecf20Sopenharmony_ci	return 0;
438c2ecf20Sopenharmony_ci}
448c2ecf20Sopenharmony_ci
458c2ecf20Sopenharmony_cistatic int sha3_512_import(struct shash_desc *desc, const void *in)
468c2ecf20Sopenharmony_ci{
478c2ecf20Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
488c2ecf20Sopenharmony_ci	const struct sha3_state *ictx = in;
498c2ecf20Sopenharmony_ci
508c2ecf20Sopenharmony_ci	if (unlikely(ictx->rsizw))
518c2ecf20Sopenharmony_ci		return -ERANGE;
528c2ecf20Sopenharmony_ci	sctx->count = ictx->rsiz;
538c2ecf20Sopenharmony_ci
548c2ecf20Sopenharmony_ci	memcpy(sctx->state, ictx->st, sizeof(ictx->st));
558c2ecf20Sopenharmony_ci	memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf));
568c2ecf20Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_512;
578c2ecf20Sopenharmony_ci
588c2ecf20Sopenharmony_ci	return 0;
598c2ecf20Sopenharmony_ci}
608c2ecf20Sopenharmony_ci
618c2ecf20Sopenharmony_cistatic int sha3_384_import(struct shash_desc *desc, const void *in)
628c2ecf20Sopenharmony_ci{
638c2ecf20Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
648c2ecf20Sopenharmony_ci	const struct sha3_state *ictx = in;
658c2ecf20Sopenharmony_ci
668c2ecf20Sopenharmony_ci	if (unlikely(ictx->rsizw))
678c2ecf20Sopenharmony_ci		return -ERANGE;
688c2ecf20Sopenharmony_ci	sctx->count = ictx->rsiz;
698c2ecf20Sopenharmony_ci
708c2ecf20Sopenharmony_ci	memcpy(sctx->state, ictx->st, sizeof(ictx->st));
718c2ecf20Sopenharmony_ci	memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf));
728c2ecf20Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_384;
738c2ecf20Sopenharmony_ci
748c2ecf20Sopenharmony_ci	return 0;
758c2ecf20Sopenharmony_ci}
768c2ecf20Sopenharmony_ci
778c2ecf20Sopenharmony_cistatic struct shash_alg sha3_512_alg = {
788c2ecf20Sopenharmony_ci	.digestsize	=	SHA3_512_DIGEST_SIZE,
798c2ecf20Sopenharmony_ci	.init		=	sha3_512_init,
808c2ecf20Sopenharmony_ci	.update		=	s390_sha_update,
818c2ecf20Sopenharmony_ci	.final		=	s390_sha_final,
828c2ecf20Sopenharmony_ci	.export		=	sha3_512_export,
838c2ecf20Sopenharmony_ci	.import		=	sha3_512_import,
848c2ecf20Sopenharmony_ci	.descsize	=	sizeof(struct s390_sha_ctx),
858c2ecf20Sopenharmony_ci	.statesize	=	sizeof(struct sha3_state),
868c2ecf20Sopenharmony_ci	.base		=	{
878c2ecf20Sopenharmony_ci		.cra_name	 =	"sha3-512",
888c2ecf20Sopenharmony_ci		.cra_driver_name =	"sha3-512-s390",
898c2ecf20Sopenharmony_ci		.cra_priority	 =	300,
908c2ecf20Sopenharmony_ci		.cra_blocksize	 =	SHA3_512_BLOCK_SIZE,
918c2ecf20Sopenharmony_ci		.cra_module	 =	THIS_MODULE,
928c2ecf20Sopenharmony_ci	}
938c2ecf20Sopenharmony_ci};
948c2ecf20Sopenharmony_ci
958c2ecf20Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha3-512");
968c2ecf20Sopenharmony_ci
978c2ecf20Sopenharmony_cistatic int sha3_384_init(struct shash_desc *desc)
988c2ecf20Sopenharmony_ci{
998c2ecf20Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
1008c2ecf20Sopenharmony_ci
1018c2ecf20Sopenharmony_ci	memset(sctx->state, 0, sizeof(sctx->state));
1028c2ecf20Sopenharmony_ci	sctx->count = 0;
1038c2ecf20Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_384;
1048c2ecf20Sopenharmony_ci
1058c2ecf20Sopenharmony_ci	return 0;
1068c2ecf20Sopenharmony_ci}
1078c2ecf20Sopenharmony_ci
1088c2ecf20Sopenharmony_cistatic struct shash_alg sha3_384_alg = {
1098c2ecf20Sopenharmony_ci	.digestsize	=	SHA3_384_DIGEST_SIZE,
1108c2ecf20Sopenharmony_ci	.init		=	sha3_384_init,
1118c2ecf20Sopenharmony_ci	.update		=	s390_sha_update,
1128c2ecf20Sopenharmony_ci	.final		=	s390_sha_final,
1138c2ecf20Sopenharmony_ci	.export		=	sha3_512_export, /* same as for 512 */
1148c2ecf20Sopenharmony_ci	.import		=	sha3_384_import, /* function code different! */
1158c2ecf20Sopenharmony_ci	.descsize	=	sizeof(struct s390_sha_ctx),
1168c2ecf20Sopenharmony_ci	.statesize	=	sizeof(struct sha3_state),
1178c2ecf20Sopenharmony_ci	.base		=	{
1188c2ecf20Sopenharmony_ci		.cra_name	 =	"sha3-384",
1198c2ecf20Sopenharmony_ci		.cra_driver_name =	"sha3-384-s390",
1208c2ecf20Sopenharmony_ci		.cra_priority	 =	300,
1218c2ecf20Sopenharmony_ci		.cra_blocksize	 =	SHA3_384_BLOCK_SIZE,
1228c2ecf20Sopenharmony_ci		.cra_ctxsize	 =	sizeof(struct s390_sha_ctx),
1238c2ecf20Sopenharmony_ci		.cra_module	 =	THIS_MODULE,
1248c2ecf20Sopenharmony_ci	}
1258c2ecf20Sopenharmony_ci};
1268c2ecf20Sopenharmony_ci
1278c2ecf20Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha3-384");
1288c2ecf20Sopenharmony_ci
1298c2ecf20Sopenharmony_cistatic int __init init(void)
1308c2ecf20Sopenharmony_ci{
1318c2ecf20Sopenharmony_ci	int ret;
1328c2ecf20Sopenharmony_ci
1338c2ecf20Sopenharmony_ci	if (!cpacf_query_func(CPACF_KIMD, CPACF_KIMD_SHA3_512))
1348c2ecf20Sopenharmony_ci		return -ENODEV;
1358c2ecf20Sopenharmony_ci	ret = crypto_register_shash(&sha3_512_alg);
1368c2ecf20Sopenharmony_ci	if (ret < 0)
1378c2ecf20Sopenharmony_ci		goto out;
1388c2ecf20Sopenharmony_ci	ret = crypto_register_shash(&sha3_384_alg);
1398c2ecf20Sopenharmony_ci	if (ret < 0)
1408c2ecf20Sopenharmony_ci		crypto_unregister_shash(&sha3_512_alg);
1418c2ecf20Sopenharmony_ciout:
1428c2ecf20Sopenharmony_ci	return ret;
1438c2ecf20Sopenharmony_ci}
1448c2ecf20Sopenharmony_ci
1458c2ecf20Sopenharmony_cistatic void __exit fini(void)
1468c2ecf20Sopenharmony_ci{
1478c2ecf20Sopenharmony_ci	crypto_unregister_shash(&sha3_512_alg);
1488c2ecf20Sopenharmony_ci	crypto_unregister_shash(&sha3_384_alg);
1498c2ecf20Sopenharmony_ci}
1508c2ecf20Sopenharmony_ci
1518c2ecf20Sopenharmony_cimodule_cpu_feature_match(MSA, init);
1528c2ecf20Sopenharmony_cimodule_exit(fini);
1538c2ecf20Sopenharmony_ci
1548c2ecf20Sopenharmony_ciMODULE_LICENSE("GPL");
1558c2ecf20Sopenharmony_ciMODULE_DESCRIPTION("SHA3-512 and SHA3-384 Secure Hash Algorithm");
156