162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0 262306a36Sopenharmony_ci/* 362306a36Sopenharmony_ci * sha512-ce-glue.c - SHA-384/SHA-512 using ARMv8 Crypto Extensions 462306a36Sopenharmony_ci * 562306a36Sopenharmony_ci * Copyright (C) 2018 Linaro Ltd <ard.biesheuvel@linaro.org> 662306a36Sopenharmony_ci * 762306a36Sopenharmony_ci * This program is free software; you can redistribute it and/or modify 862306a36Sopenharmony_ci * it under the terms of the GNU General Public License version 2 as 962306a36Sopenharmony_ci * published by the Free Software Foundation. 1062306a36Sopenharmony_ci */ 1162306a36Sopenharmony_ci 1262306a36Sopenharmony_ci#include <asm/neon.h> 1362306a36Sopenharmony_ci#include <asm/simd.h> 1462306a36Sopenharmony_ci#include <asm/unaligned.h> 1562306a36Sopenharmony_ci#include <crypto/internal/hash.h> 1662306a36Sopenharmony_ci#include <crypto/internal/simd.h> 1762306a36Sopenharmony_ci#include <crypto/sha2.h> 1862306a36Sopenharmony_ci#include <crypto/sha512_base.h> 1962306a36Sopenharmony_ci#include <linux/cpufeature.h> 2062306a36Sopenharmony_ci#include <linux/crypto.h> 2162306a36Sopenharmony_ci#include <linux/module.h> 2262306a36Sopenharmony_ci 2362306a36Sopenharmony_ciMODULE_DESCRIPTION("SHA-384/SHA-512 secure hash using ARMv8 Crypto Extensions"); 2462306a36Sopenharmony_ciMODULE_AUTHOR("Ard Biesheuvel <ard.biesheuvel@linaro.org>"); 2562306a36Sopenharmony_ciMODULE_LICENSE("GPL v2"); 2662306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha384"); 2762306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha512"); 2862306a36Sopenharmony_ci 2962306a36Sopenharmony_ciasmlinkage int sha512_ce_transform(struct sha512_state *sst, u8 const *src, 3062306a36Sopenharmony_ci int blocks); 3162306a36Sopenharmony_ci 3262306a36Sopenharmony_ciasmlinkage void sha512_block_data_order(u64 *digest, u8 const *src, int blocks); 3362306a36Sopenharmony_ci 3462306a36Sopenharmony_cistatic void __sha512_ce_transform(struct sha512_state *sst, u8 const *src, 3562306a36Sopenharmony_ci int blocks) 3662306a36Sopenharmony_ci{ 3762306a36Sopenharmony_ci while (blocks) { 3862306a36Sopenharmony_ci int rem; 3962306a36Sopenharmony_ci 4062306a36Sopenharmony_ci kernel_neon_begin(); 4162306a36Sopenharmony_ci rem = sha512_ce_transform(sst, src, blocks); 4262306a36Sopenharmony_ci kernel_neon_end(); 4362306a36Sopenharmony_ci src += (blocks - rem) * SHA512_BLOCK_SIZE; 4462306a36Sopenharmony_ci blocks = rem; 4562306a36Sopenharmony_ci } 4662306a36Sopenharmony_ci} 4762306a36Sopenharmony_ci 4862306a36Sopenharmony_cistatic void __sha512_block_data_order(struct sha512_state *sst, u8 const *src, 4962306a36Sopenharmony_ci int blocks) 5062306a36Sopenharmony_ci{ 5162306a36Sopenharmony_ci sha512_block_data_order(sst->state, src, blocks); 5262306a36Sopenharmony_ci} 5362306a36Sopenharmony_ci 5462306a36Sopenharmony_cistatic int sha512_ce_update(struct shash_desc *desc, const u8 *data, 5562306a36Sopenharmony_ci unsigned int len) 5662306a36Sopenharmony_ci{ 5762306a36Sopenharmony_ci sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform 5862306a36Sopenharmony_ci : __sha512_block_data_order; 5962306a36Sopenharmony_ci 6062306a36Sopenharmony_ci sha512_base_do_update(desc, data, len, fn); 6162306a36Sopenharmony_ci return 0; 6262306a36Sopenharmony_ci} 6362306a36Sopenharmony_ci 6462306a36Sopenharmony_cistatic int sha512_ce_finup(struct shash_desc *desc, const u8 *data, 6562306a36Sopenharmony_ci unsigned int len, u8 *out) 6662306a36Sopenharmony_ci{ 6762306a36Sopenharmony_ci sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform 6862306a36Sopenharmony_ci : __sha512_block_data_order; 6962306a36Sopenharmony_ci 7062306a36Sopenharmony_ci sha512_base_do_update(desc, data, len, fn); 7162306a36Sopenharmony_ci sha512_base_do_finalize(desc, fn); 7262306a36Sopenharmony_ci return sha512_base_finish(desc, out); 7362306a36Sopenharmony_ci} 7462306a36Sopenharmony_ci 7562306a36Sopenharmony_cistatic int sha512_ce_final(struct shash_desc *desc, u8 *out) 7662306a36Sopenharmony_ci{ 7762306a36Sopenharmony_ci sha512_block_fn *fn = crypto_simd_usable() ? __sha512_ce_transform 7862306a36Sopenharmony_ci : __sha512_block_data_order; 7962306a36Sopenharmony_ci 8062306a36Sopenharmony_ci sha512_base_do_finalize(desc, fn); 8162306a36Sopenharmony_ci return sha512_base_finish(desc, out); 8262306a36Sopenharmony_ci} 8362306a36Sopenharmony_ci 8462306a36Sopenharmony_cistatic struct shash_alg algs[] = { { 8562306a36Sopenharmony_ci .init = sha384_base_init, 8662306a36Sopenharmony_ci .update = sha512_ce_update, 8762306a36Sopenharmony_ci .final = sha512_ce_final, 8862306a36Sopenharmony_ci .finup = sha512_ce_finup, 8962306a36Sopenharmony_ci .descsize = sizeof(struct sha512_state), 9062306a36Sopenharmony_ci .digestsize = SHA384_DIGEST_SIZE, 9162306a36Sopenharmony_ci .base.cra_name = "sha384", 9262306a36Sopenharmony_ci .base.cra_driver_name = "sha384-ce", 9362306a36Sopenharmony_ci .base.cra_priority = 200, 9462306a36Sopenharmony_ci .base.cra_blocksize = SHA512_BLOCK_SIZE, 9562306a36Sopenharmony_ci .base.cra_module = THIS_MODULE, 9662306a36Sopenharmony_ci}, { 9762306a36Sopenharmony_ci .init = sha512_base_init, 9862306a36Sopenharmony_ci .update = sha512_ce_update, 9962306a36Sopenharmony_ci .final = sha512_ce_final, 10062306a36Sopenharmony_ci .finup = sha512_ce_finup, 10162306a36Sopenharmony_ci .descsize = sizeof(struct sha512_state), 10262306a36Sopenharmony_ci .digestsize = SHA512_DIGEST_SIZE, 10362306a36Sopenharmony_ci .base.cra_name = "sha512", 10462306a36Sopenharmony_ci .base.cra_driver_name = "sha512-ce", 10562306a36Sopenharmony_ci .base.cra_priority = 200, 10662306a36Sopenharmony_ci .base.cra_blocksize = SHA512_BLOCK_SIZE, 10762306a36Sopenharmony_ci .base.cra_module = THIS_MODULE, 10862306a36Sopenharmony_ci} }; 10962306a36Sopenharmony_ci 11062306a36Sopenharmony_cistatic int __init sha512_ce_mod_init(void) 11162306a36Sopenharmony_ci{ 11262306a36Sopenharmony_ci return crypto_register_shashes(algs, ARRAY_SIZE(algs)); 11362306a36Sopenharmony_ci} 11462306a36Sopenharmony_ci 11562306a36Sopenharmony_cistatic void __exit sha512_ce_mod_fini(void) 11662306a36Sopenharmony_ci{ 11762306a36Sopenharmony_ci crypto_unregister_shashes(algs, ARRAY_SIZE(algs)); 11862306a36Sopenharmony_ci} 11962306a36Sopenharmony_ci 12062306a36Sopenharmony_cimodule_cpu_feature_match(SHA512, sha512_ce_mod_init); 12162306a36Sopenharmony_cimodule_exit(sha512_ce_mod_fini); 122