162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci * sha512-ce-glue.c - SHA-384/SHA-512 using ARMv8 Crypto Extensions
462306a36Sopenharmony_ci *
562306a36Sopenharmony_ci * Copyright (C) 2018 Linaro Ltd <ard.biesheuvel@linaro.org>
662306a36Sopenharmony_ci *
762306a36Sopenharmony_ci * This program is free software; you can redistribute it and/or modify
862306a36Sopenharmony_ci * it under the terms of the GNU General Public License version 2 as
962306a36Sopenharmony_ci * published by the Free Software Foundation.
1062306a36Sopenharmony_ci */
1162306a36Sopenharmony_ci
1262306a36Sopenharmony_ci#include <asm/neon.h>
1362306a36Sopenharmony_ci#include <asm/simd.h>
1462306a36Sopenharmony_ci#include <asm/unaligned.h>
1562306a36Sopenharmony_ci#include <crypto/internal/hash.h>
1662306a36Sopenharmony_ci#include <crypto/internal/simd.h>
1762306a36Sopenharmony_ci#include <crypto/sha2.h>
1862306a36Sopenharmony_ci#include <crypto/sha512_base.h>
1962306a36Sopenharmony_ci#include <linux/cpufeature.h>
2062306a36Sopenharmony_ci#include <linux/crypto.h>
2162306a36Sopenharmony_ci#include <linux/module.h>
2262306a36Sopenharmony_ci
2362306a36Sopenharmony_ciMODULE_DESCRIPTION("SHA-384/SHA-512 secure hash using ARMv8 Crypto Extensions");
2462306a36Sopenharmony_ciMODULE_AUTHOR("Ard Biesheuvel <ard.biesheuvel@linaro.org>");
2562306a36Sopenharmony_ciMODULE_LICENSE("GPL v2");
2662306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha384");
2762306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha512");
2862306a36Sopenharmony_ci
2962306a36Sopenharmony_ciasmlinkage int sha512_ce_transform(struct sha512_state *sst, u8 const *src,
3062306a36Sopenharmony_ci				   int blocks);
3162306a36Sopenharmony_ci
3262306a36Sopenharmony_ciasmlinkage void sha512_block_data_order(u64 *digest, u8 const *src, int blocks);
3362306a36Sopenharmony_ci
3462306a36Sopenharmony_cistatic void __sha512_ce_transform(struct sha512_state *sst, u8 const *src,
3562306a36Sopenharmony_ci				  int blocks)
3662306a36Sopenharmony_ci{
3762306a36Sopenharmony_ci	while (blocks) {
3862306a36Sopenharmony_ci		int rem;
3962306a36Sopenharmony_ci
4062306a36Sopenharmony_ci		kernel_neon_begin();
4162306a36Sopenharmony_ci		rem = sha512_ce_transform(sst, src, blocks);
4262306a36Sopenharmony_ci		kernel_neon_end();
4362306a36Sopenharmony_ci		src += (blocks - rem) * SHA512_BLOCK_SIZE;
4462306a36Sopenharmony_ci		blocks = rem;
4562306a36Sopenharmony_ci	}
4662306a36Sopenharmony_ci}
4762306a36Sopenharmony_ci
4862306a36Sopenharmony_cistatic void __sha512_block_data_order(struct sha512_state *sst, u8 const *src,
4962306a36Sopenharmony_ci				      int blocks)
5062306a36Sopenharmony_ci{
5162306a36Sopenharmony_ci	sha512_block_data_order(sst->state, src, blocks);
5262306a36Sopenharmony_ci}
5362306a36Sopenharmony_ci
5462306a36Sopenharmony_cistatic int sha512_ce_update(struct shash_desc *desc, const u8 *data,
5562306a36Sopenharmony_ci			    unsigned int len)
5662306a36Sopenharmony_ci{
5762306a36Sopenharmony_ci	sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform
5862306a36Sopenharmony_ci						   : __sha512_block_data_order;
5962306a36Sopenharmony_ci
6062306a36Sopenharmony_ci	sha512_base_do_update(desc, data, len, fn);
6162306a36Sopenharmony_ci	return 0;
6262306a36Sopenharmony_ci}
6362306a36Sopenharmony_ci
6462306a36Sopenharmony_cistatic int sha512_ce_finup(struct shash_desc *desc, const u8 *data,
6562306a36Sopenharmony_ci			   unsigned int len, u8 *out)
6662306a36Sopenharmony_ci{
6762306a36Sopenharmony_ci	sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform
6862306a36Sopenharmony_ci						   : __sha512_block_data_order;
6962306a36Sopenharmony_ci
7062306a36Sopenharmony_ci	sha512_base_do_update(desc, data, len, fn);
7162306a36Sopenharmony_ci	sha512_base_do_finalize(desc, fn);
7262306a36Sopenharmony_ci	return sha512_base_finish(desc, out);
7362306a36Sopenharmony_ci}
7462306a36Sopenharmony_ci
7562306a36Sopenharmony_cistatic int sha512_ce_final(struct shash_desc *desc, u8 *out)
7662306a36Sopenharmony_ci{
7762306a36Sopenharmony_ci	sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform
7862306a36Sopenharmony_ci						   : __sha512_block_data_order;
7962306a36Sopenharmony_ci
8062306a36Sopenharmony_ci	sha512_base_do_finalize(desc, fn);
8162306a36Sopenharmony_ci	return sha512_base_finish(desc, out);
8262306a36Sopenharmony_ci}
8362306a36Sopenharmony_ci
8462306a36Sopenharmony_cistatic struct shash_alg algs[] = { {
8562306a36Sopenharmony_ci	.init			= sha384_base_init,
8662306a36Sopenharmony_ci	.update			= sha512_ce_update,
8762306a36Sopenharmony_ci	.final			= sha512_ce_final,
8862306a36Sopenharmony_ci	.finup			= sha512_ce_finup,
8962306a36Sopenharmony_ci	.descsize		= sizeof(struct sha512_state),
9062306a36Sopenharmony_ci	.digestsize		= SHA384_DIGEST_SIZE,
9162306a36Sopenharmony_ci	.base.cra_name		= "sha384",
9262306a36Sopenharmony_ci	.base.cra_driver_name	= "sha384-ce",
9362306a36Sopenharmony_ci	.base.cra_priority	= 200,
9462306a36Sopenharmony_ci	.base.cra_blocksize	= SHA512_BLOCK_SIZE,
9562306a36Sopenharmony_ci	.base.cra_module	= THIS_MODULE,
9662306a36Sopenharmony_ci}, {
9762306a36Sopenharmony_ci	.init			= sha512_base_init,
9862306a36Sopenharmony_ci	.update			= sha512_ce_update,
9962306a36Sopenharmony_ci	.final			= sha512_ce_final,
10062306a36Sopenharmony_ci	.finup			= sha512_ce_finup,
10162306a36Sopenharmony_ci	.descsize		= sizeof(struct sha512_state),
10262306a36Sopenharmony_ci	.digestsize		= SHA512_DIGEST_SIZE,
10362306a36Sopenharmony_ci	.base.cra_name		= "sha512",
10462306a36Sopenharmony_ci	.base.cra_driver_name	= "sha512-ce",
10562306a36Sopenharmony_ci	.base.cra_priority	= 200,
10662306a36Sopenharmony_ci	.base.cra_blocksize	= SHA512_BLOCK_SIZE,
10762306a36Sopenharmony_ci	.base.cra_module	= THIS_MODULE,
10862306a36Sopenharmony_ci} };
10962306a36Sopenharmony_ci
11062306a36Sopenharmony_cistatic int __init sha512_ce_mod_init(void)
11162306a36Sopenharmony_ci{
11262306a36Sopenharmony_ci	return crypto_register_shashes(algs, ARRAY_SIZE(algs));
11362306a36Sopenharmony_ci}
11462306a36Sopenharmony_ci
11562306a36Sopenharmony_cistatic void __exit sha512_ce_mod_fini(void)
11662306a36Sopenharmony_ci{
11762306a36Sopenharmony_ci	crypto_unregister_shashes(algs, ARRAY_SIZE(algs));
11862306a36Sopenharmony_ci}
11962306a36Sopenharmony_ci
12062306a36Sopenharmony_cimodule_cpu_feature_match(SHA512, sha512_ce_mod_init);
12162306a36Sopenharmony_cimodule_exit(sha512_ce_mod_fini);
122