18c2ecf20Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci * NHPoly1305 - ε-almost-∆-universal hash function for Adiantum
48c2ecf20Sopenharmony_ci * (AVX2 accelerated version)
58c2ecf20Sopenharmony_ci *
68c2ecf20Sopenharmony_ci * Copyright 2018 Google LLC
78c2ecf20Sopenharmony_ci */
88c2ecf20Sopenharmony_ci
98c2ecf20Sopenharmony_ci#include <crypto/internal/hash.h>
108c2ecf20Sopenharmony_ci#include <crypto/internal/simd.h>
118c2ecf20Sopenharmony_ci#include <crypto/nhpoly1305.h>
128c2ecf20Sopenharmony_ci#include <linux/module.h>
138c2ecf20Sopenharmony_ci#include <linux/sizes.h>
148c2ecf20Sopenharmony_ci#include <asm/simd.h>
158c2ecf20Sopenharmony_ci
168c2ecf20Sopenharmony_ciasmlinkage void nh_avx2(const u32 *key, const u8 *message, size_t message_len,
178c2ecf20Sopenharmony_ci			u8 hash[NH_HASH_BYTES]);
188c2ecf20Sopenharmony_ci
198c2ecf20Sopenharmony_ci/* wrapper to avoid indirect call to assembly, which doesn't work with CFI */
208c2ecf20Sopenharmony_cistatic void _nh_avx2(const u32 *key, const u8 *message, size_t message_len,
218c2ecf20Sopenharmony_ci		     __le64 hash[NH_NUM_PASSES])
228c2ecf20Sopenharmony_ci{
238c2ecf20Sopenharmony_ci	nh_avx2(key, message, message_len, (u8 *)hash);
248c2ecf20Sopenharmony_ci}
258c2ecf20Sopenharmony_ci
268c2ecf20Sopenharmony_cistatic int nhpoly1305_avx2_update(struct shash_desc *desc,
278c2ecf20Sopenharmony_ci				  const u8 *src, unsigned int srclen)
288c2ecf20Sopenharmony_ci{
298c2ecf20Sopenharmony_ci	if (srclen < 64 || !crypto_simd_usable())
308c2ecf20Sopenharmony_ci		return crypto_nhpoly1305_update(desc, src, srclen);
318c2ecf20Sopenharmony_ci
328c2ecf20Sopenharmony_ci	do {
338c2ecf20Sopenharmony_ci		unsigned int n = min_t(unsigned int, srclen, SZ_4K);
348c2ecf20Sopenharmony_ci
358c2ecf20Sopenharmony_ci		kernel_fpu_begin();
368c2ecf20Sopenharmony_ci		crypto_nhpoly1305_update_helper(desc, src, n, _nh_avx2);
378c2ecf20Sopenharmony_ci		kernel_fpu_end();
388c2ecf20Sopenharmony_ci		src += n;
398c2ecf20Sopenharmony_ci		srclen -= n;
408c2ecf20Sopenharmony_ci	} while (srclen);
418c2ecf20Sopenharmony_ci	return 0;
428c2ecf20Sopenharmony_ci}
438c2ecf20Sopenharmony_ci
448c2ecf20Sopenharmony_cistatic struct shash_alg nhpoly1305_alg = {
458c2ecf20Sopenharmony_ci	.base.cra_name		= "nhpoly1305",
468c2ecf20Sopenharmony_ci	.base.cra_driver_name	= "nhpoly1305-avx2",
478c2ecf20Sopenharmony_ci	.base.cra_priority	= 300,
488c2ecf20Sopenharmony_ci	.base.cra_ctxsize	= sizeof(struct nhpoly1305_key),
498c2ecf20Sopenharmony_ci	.base.cra_module	= THIS_MODULE,
508c2ecf20Sopenharmony_ci	.digestsize		= POLY1305_DIGEST_SIZE,
518c2ecf20Sopenharmony_ci	.init			= crypto_nhpoly1305_init,
528c2ecf20Sopenharmony_ci	.update			= nhpoly1305_avx2_update,
538c2ecf20Sopenharmony_ci	.final			= crypto_nhpoly1305_final,
548c2ecf20Sopenharmony_ci	.setkey			= crypto_nhpoly1305_setkey,
558c2ecf20Sopenharmony_ci	.descsize		= sizeof(struct nhpoly1305_state),
568c2ecf20Sopenharmony_ci};
578c2ecf20Sopenharmony_ci
588c2ecf20Sopenharmony_cistatic int __init nhpoly1305_mod_init(void)
598c2ecf20Sopenharmony_ci{
608c2ecf20Sopenharmony_ci	if (!boot_cpu_has(X86_FEATURE_AVX2) ||
618c2ecf20Sopenharmony_ci	    !boot_cpu_has(X86_FEATURE_OSXSAVE))
628c2ecf20Sopenharmony_ci		return -ENODEV;
638c2ecf20Sopenharmony_ci
648c2ecf20Sopenharmony_ci	return crypto_register_shash(&nhpoly1305_alg);
658c2ecf20Sopenharmony_ci}
668c2ecf20Sopenharmony_ci
678c2ecf20Sopenharmony_cistatic void __exit nhpoly1305_mod_exit(void)
688c2ecf20Sopenharmony_ci{
698c2ecf20Sopenharmony_ci	crypto_unregister_shash(&nhpoly1305_alg);
708c2ecf20Sopenharmony_ci}
718c2ecf20Sopenharmony_ci
728c2ecf20Sopenharmony_cimodule_init(nhpoly1305_mod_init);
738c2ecf20Sopenharmony_cimodule_exit(nhpoly1305_mod_exit);
748c2ecf20Sopenharmony_ci
758c2ecf20Sopenharmony_ciMODULE_DESCRIPTION("NHPoly1305 ε-almost-∆-universal hash function (AVX2-accelerated)");
768c2ecf20Sopenharmony_ciMODULE_LICENSE("GPL v2");
778c2ecf20Sopenharmony_ciMODULE_AUTHOR("Eric Biggers <ebiggers@google.com>");
788c2ecf20Sopenharmony_ciMODULE_ALIAS_CRYPTO("nhpoly1305");
798c2ecf20Sopenharmony_ciMODULE_ALIAS_CRYPTO("nhpoly1305-avx2");
80