162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-only
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci * sha2-ce-glue.c - SHA-224/SHA-256 using ARMv8 Crypto Extensions
462306a36Sopenharmony_ci *
562306a36Sopenharmony_ci * Copyright (C) 2015 Linaro Ltd <ard.biesheuvel@linaro.org>
662306a36Sopenharmony_ci */
762306a36Sopenharmony_ci
862306a36Sopenharmony_ci#include <crypto/internal/hash.h>
962306a36Sopenharmony_ci#include <crypto/internal/simd.h>
1062306a36Sopenharmony_ci#include <crypto/sha2.h>
1162306a36Sopenharmony_ci#include <crypto/sha256_base.h>
1262306a36Sopenharmony_ci#include <linux/cpufeature.h>
1362306a36Sopenharmony_ci#include <linux/crypto.h>
1462306a36Sopenharmony_ci#include <linux/module.h>
1562306a36Sopenharmony_ci
1662306a36Sopenharmony_ci#include <asm/hwcap.h>
1762306a36Sopenharmony_ci#include <asm/simd.h>
1862306a36Sopenharmony_ci#include <asm/neon.h>
1962306a36Sopenharmony_ci#include <asm/unaligned.h>
2062306a36Sopenharmony_ci
2162306a36Sopenharmony_ci#include "sha256_glue.h"
2262306a36Sopenharmony_ci
2362306a36Sopenharmony_ciMODULE_DESCRIPTION("SHA-224/SHA-256 secure hash using ARMv8 Crypto Extensions");
2462306a36Sopenharmony_ciMODULE_AUTHOR("Ard Biesheuvel <ard.biesheuvel@linaro.org>");
2562306a36Sopenharmony_ciMODULE_LICENSE("GPL v2");
2662306a36Sopenharmony_ci
2762306a36Sopenharmony_ciasmlinkage void sha2_ce_transform(struct sha256_state *sst, u8 const *src,
2862306a36Sopenharmony_ci				  int blocks);
2962306a36Sopenharmony_ci
3062306a36Sopenharmony_cistatic int sha2_ce_update(struct shash_desc *desc, const u8 *data,
3162306a36Sopenharmony_ci			  unsigned int len)
3262306a36Sopenharmony_ci{
3362306a36Sopenharmony_ci	struct sha256_state *sctx = shash_desc_ctx(desc);
3462306a36Sopenharmony_ci
3562306a36Sopenharmony_ci	if (!crypto_simd_usable() ||
3662306a36Sopenharmony_ci	    (sctx->count % SHA256_BLOCK_SIZE) + len < SHA256_BLOCK_SIZE)
3762306a36Sopenharmony_ci		return crypto_sha256_arm_update(desc, data, len);
3862306a36Sopenharmony_ci
3962306a36Sopenharmony_ci	kernel_neon_begin();
4062306a36Sopenharmony_ci	sha256_base_do_update(desc, data, len,
4162306a36Sopenharmony_ci			      (sha256_block_fn *)sha2_ce_transform);
4262306a36Sopenharmony_ci	kernel_neon_end();
4362306a36Sopenharmony_ci
4462306a36Sopenharmony_ci	return 0;
4562306a36Sopenharmony_ci}
4662306a36Sopenharmony_ci
4762306a36Sopenharmony_cistatic int sha2_ce_finup(struct shash_desc *desc, const u8 *data,
4862306a36Sopenharmony_ci			 unsigned int len, u8 *out)
4962306a36Sopenharmony_ci{
5062306a36Sopenharmony_ci	if (!crypto_simd_usable())
5162306a36Sopenharmony_ci		return crypto_sha256_arm_finup(desc, data, len, out);
5262306a36Sopenharmony_ci
5362306a36Sopenharmony_ci	kernel_neon_begin();
5462306a36Sopenharmony_ci	if (len)
5562306a36Sopenharmony_ci		sha256_base_do_update(desc, data, len,
5662306a36Sopenharmony_ci				      (sha256_block_fn *)sha2_ce_transform);
5762306a36Sopenharmony_ci	sha256_base_do_finalize(desc, (sha256_block_fn *)sha2_ce_transform);
5862306a36Sopenharmony_ci	kernel_neon_end();
5962306a36Sopenharmony_ci
6062306a36Sopenharmony_ci	return sha256_base_finish(desc, out);
6162306a36Sopenharmony_ci}
6262306a36Sopenharmony_ci
6362306a36Sopenharmony_cistatic int sha2_ce_final(struct shash_desc *desc, u8 *out)
6462306a36Sopenharmony_ci{
6562306a36Sopenharmony_ci	return sha2_ce_finup(desc, NULL, 0, out);
6662306a36Sopenharmony_ci}
6762306a36Sopenharmony_ci
6862306a36Sopenharmony_cistatic struct shash_alg algs[] = { {
6962306a36Sopenharmony_ci	.init			= sha224_base_init,
7062306a36Sopenharmony_ci	.update			= sha2_ce_update,
7162306a36Sopenharmony_ci	.final			= sha2_ce_final,
7262306a36Sopenharmony_ci	.finup			= sha2_ce_finup,
7362306a36Sopenharmony_ci	.descsize		= sizeof(struct sha256_state),
7462306a36Sopenharmony_ci	.digestsize		= SHA224_DIGEST_SIZE,
7562306a36Sopenharmony_ci	.base			= {
7662306a36Sopenharmony_ci		.cra_name		= "sha224",
7762306a36Sopenharmony_ci		.cra_driver_name	= "sha224-ce",
7862306a36Sopenharmony_ci		.cra_priority		= 300,
7962306a36Sopenharmony_ci		.cra_blocksize		= SHA256_BLOCK_SIZE,
8062306a36Sopenharmony_ci		.cra_module		= THIS_MODULE,
8162306a36Sopenharmony_ci	}
8262306a36Sopenharmony_ci}, {
8362306a36Sopenharmony_ci	.init			= sha256_base_init,
8462306a36Sopenharmony_ci	.update			= sha2_ce_update,
8562306a36Sopenharmony_ci	.final			= sha2_ce_final,
8662306a36Sopenharmony_ci	.finup			= sha2_ce_finup,
8762306a36Sopenharmony_ci	.descsize		= sizeof(struct sha256_state),
8862306a36Sopenharmony_ci	.digestsize		= SHA256_DIGEST_SIZE,
8962306a36Sopenharmony_ci	.base			= {
9062306a36Sopenharmony_ci		.cra_name		= "sha256",
9162306a36Sopenharmony_ci		.cra_driver_name	= "sha256-ce",
9262306a36Sopenharmony_ci		.cra_priority		= 300,
9362306a36Sopenharmony_ci		.cra_blocksize		= SHA256_BLOCK_SIZE,
9462306a36Sopenharmony_ci		.cra_module		= THIS_MODULE,
9562306a36Sopenharmony_ci	}
9662306a36Sopenharmony_ci} };
9762306a36Sopenharmony_ci
9862306a36Sopenharmony_cistatic int __init sha2_ce_mod_init(void)
9962306a36Sopenharmony_ci{
10062306a36Sopenharmony_ci	return crypto_register_shashes(algs, ARRAY_SIZE(algs));
10162306a36Sopenharmony_ci}
10262306a36Sopenharmony_ci
10362306a36Sopenharmony_cistatic void __exit sha2_ce_mod_fini(void)
10462306a36Sopenharmony_ci{
10562306a36Sopenharmony_ci	crypto_unregister_shashes(algs, ARRAY_SIZE(algs));
10662306a36Sopenharmony_ci}
10762306a36Sopenharmony_ci
10862306a36Sopenharmony_cimodule_cpu_feature_match(SHA2, sha2_ce_mod_init);
10962306a36Sopenharmony_cimodule_exit(sha2_ce_mod_fini);
110