162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0+ 262306a36Sopenharmony_ci/* 362306a36Sopenharmony_ci * Cryptographic API. 462306a36Sopenharmony_ci * 562306a36Sopenharmony_ci * s390 implementation of the SHA512 and SHA384 Secure Hash Algorithm. 662306a36Sopenharmony_ci * 762306a36Sopenharmony_ci * Copyright IBM Corp. 2019 862306a36Sopenharmony_ci * Author(s): Joerg Schmidbauer (jschmidb@de.ibm.com) 962306a36Sopenharmony_ci */ 1062306a36Sopenharmony_ci#include <crypto/internal/hash.h> 1162306a36Sopenharmony_ci#include <linux/init.h> 1262306a36Sopenharmony_ci#include <linux/module.h> 1362306a36Sopenharmony_ci#include <linux/cpufeature.h> 1462306a36Sopenharmony_ci#include <crypto/sha3.h> 1562306a36Sopenharmony_ci#include <asm/cpacf.h> 1662306a36Sopenharmony_ci 1762306a36Sopenharmony_ci#include "sha.h" 1862306a36Sopenharmony_ci 1962306a36Sopenharmony_cistatic int sha3_512_init(struct shash_desc *desc) 2062306a36Sopenharmony_ci{ 2162306a36Sopenharmony_ci struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 2262306a36Sopenharmony_ci 2362306a36Sopenharmony_ci memset(sctx->state, 0, sizeof(sctx->state)); 2462306a36Sopenharmony_ci sctx->count = 0; 2562306a36Sopenharmony_ci sctx->func = CPACF_KIMD_SHA3_512; 2662306a36Sopenharmony_ci 2762306a36Sopenharmony_ci return 0; 2862306a36Sopenharmony_ci} 2962306a36Sopenharmony_ci 3062306a36Sopenharmony_cistatic int sha3_512_export(struct shash_desc *desc, void *out) 3162306a36Sopenharmony_ci{ 3262306a36Sopenharmony_ci struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 3362306a36Sopenharmony_ci struct sha3_state *octx = out; 3462306a36Sopenharmony_ci 3562306a36Sopenharmony_ci octx->rsiz = sctx->count; 3662306a36Sopenharmony_ci octx->rsizw = sctx->count >> 32; 3762306a36Sopenharmony_ci 3862306a36Sopenharmony_ci memcpy(octx->st, sctx->state, sizeof(octx->st)); 3962306a36Sopenharmony_ci memcpy(octx->buf, sctx->buf, sizeof(octx->buf)); 4062306a36Sopenharmony_ci 4162306a36Sopenharmony_ci return 0; 4262306a36Sopenharmony_ci} 4362306a36Sopenharmony_ci 4462306a36Sopenharmony_cistatic int sha3_512_import(struct shash_desc *desc, const void *in) 4562306a36Sopenharmony_ci{ 4662306a36Sopenharmony_ci struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 4762306a36Sopenharmony_ci const struct sha3_state *ictx = in; 4862306a36Sopenharmony_ci 4962306a36Sopenharmony_ci if (unlikely(ictx->rsizw)) 5062306a36Sopenharmony_ci return -ERANGE; 5162306a36Sopenharmony_ci sctx->count = ictx->rsiz; 5262306a36Sopenharmony_ci 5362306a36Sopenharmony_ci memcpy(sctx->state, ictx->st, sizeof(ictx->st)); 5462306a36Sopenharmony_ci memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf)); 5562306a36Sopenharmony_ci sctx->func = CPACF_KIMD_SHA3_512; 5662306a36Sopenharmony_ci 5762306a36Sopenharmony_ci return 0; 5862306a36Sopenharmony_ci} 5962306a36Sopenharmony_ci 6062306a36Sopenharmony_cistatic int sha3_384_import(struct shash_desc *desc, const void *in) 6162306a36Sopenharmony_ci{ 6262306a36Sopenharmony_ci struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 6362306a36Sopenharmony_ci const struct sha3_state *ictx = in; 6462306a36Sopenharmony_ci 6562306a36Sopenharmony_ci if (unlikely(ictx->rsizw)) 6662306a36Sopenharmony_ci return -ERANGE; 6762306a36Sopenharmony_ci sctx->count = ictx->rsiz; 6862306a36Sopenharmony_ci 6962306a36Sopenharmony_ci memcpy(sctx->state, ictx->st, sizeof(ictx->st)); 7062306a36Sopenharmony_ci memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf)); 7162306a36Sopenharmony_ci sctx->func = CPACF_KIMD_SHA3_384; 7262306a36Sopenharmony_ci 7362306a36Sopenharmony_ci return 0; 7462306a36Sopenharmony_ci} 7562306a36Sopenharmony_ci 7662306a36Sopenharmony_cistatic struct shash_alg sha3_512_alg = { 7762306a36Sopenharmony_ci .digestsize = SHA3_512_DIGEST_SIZE, 7862306a36Sopenharmony_ci .init = sha3_512_init, 7962306a36Sopenharmony_ci .update = s390_sha_update, 8062306a36Sopenharmony_ci .final = s390_sha_final, 8162306a36Sopenharmony_ci .export = sha3_512_export, 8262306a36Sopenharmony_ci .import = sha3_512_import, 8362306a36Sopenharmony_ci .descsize = sizeof(struct s390_sha_ctx), 8462306a36Sopenharmony_ci .statesize = sizeof(struct sha3_state), 8562306a36Sopenharmony_ci .base = { 8662306a36Sopenharmony_ci .cra_name = "sha3-512", 8762306a36Sopenharmony_ci .cra_driver_name = "sha3-512-s390", 8862306a36Sopenharmony_ci .cra_priority = 300, 8962306a36Sopenharmony_ci .cra_blocksize = SHA3_512_BLOCK_SIZE, 9062306a36Sopenharmony_ci .cra_module = THIS_MODULE, 9162306a36Sopenharmony_ci } 9262306a36Sopenharmony_ci}; 9362306a36Sopenharmony_ci 9462306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha3-512"); 9562306a36Sopenharmony_ci 9662306a36Sopenharmony_cistatic int sha3_384_init(struct shash_desc *desc) 9762306a36Sopenharmony_ci{ 9862306a36Sopenharmony_ci struct s390_sha_ctx *sctx = shash_desc_ctx(desc); 9962306a36Sopenharmony_ci 10062306a36Sopenharmony_ci memset(sctx->state, 0, sizeof(sctx->state)); 10162306a36Sopenharmony_ci sctx->count = 0; 10262306a36Sopenharmony_ci sctx->func = CPACF_KIMD_SHA3_384; 10362306a36Sopenharmony_ci 10462306a36Sopenharmony_ci return 0; 10562306a36Sopenharmony_ci} 10662306a36Sopenharmony_ci 10762306a36Sopenharmony_cistatic struct shash_alg sha3_384_alg = { 10862306a36Sopenharmony_ci .digestsize = SHA3_384_DIGEST_SIZE, 10962306a36Sopenharmony_ci .init = sha3_384_init, 11062306a36Sopenharmony_ci .update = s390_sha_update, 11162306a36Sopenharmony_ci .final = s390_sha_final, 11262306a36Sopenharmony_ci .export = sha3_512_export, /* same as for 512 */ 11362306a36Sopenharmony_ci .import = sha3_384_import, /* function code different! */ 11462306a36Sopenharmony_ci .descsize = sizeof(struct s390_sha_ctx), 11562306a36Sopenharmony_ci .statesize = sizeof(struct sha3_state), 11662306a36Sopenharmony_ci .base = { 11762306a36Sopenharmony_ci .cra_name = "sha3-384", 11862306a36Sopenharmony_ci .cra_driver_name = "sha3-384-s390", 11962306a36Sopenharmony_ci .cra_priority = 300, 12062306a36Sopenharmony_ci .cra_blocksize = SHA3_384_BLOCK_SIZE, 12162306a36Sopenharmony_ci .cra_ctxsize = sizeof(struct s390_sha_ctx), 12262306a36Sopenharmony_ci .cra_module = THIS_MODULE, 12362306a36Sopenharmony_ci } 12462306a36Sopenharmony_ci}; 12562306a36Sopenharmony_ci 12662306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha3-384"); 12762306a36Sopenharmony_ci 12862306a36Sopenharmony_cistatic int __init init(void) 12962306a36Sopenharmony_ci{ 13062306a36Sopenharmony_ci int ret; 13162306a36Sopenharmony_ci 13262306a36Sopenharmony_ci if (!cpacf_query_func(CPACF_KIMD, CPACF_KIMD_SHA3_512)) 13362306a36Sopenharmony_ci return -ENODEV; 13462306a36Sopenharmony_ci ret = crypto_register_shash(&sha3_512_alg); 13562306a36Sopenharmony_ci if (ret < 0) 13662306a36Sopenharmony_ci goto out; 13762306a36Sopenharmony_ci ret = crypto_register_shash(&sha3_384_alg); 13862306a36Sopenharmony_ci if (ret < 0) 13962306a36Sopenharmony_ci crypto_unregister_shash(&sha3_512_alg); 14062306a36Sopenharmony_ciout: 14162306a36Sopenharmony_ci return ret; 14262306a36Sopenharmony_ci} 14362306a36Sopenharmony_ci 14462306a36Sopenharmony_cistatic void __exit fini(void) 14562306a36Sopenharmony_ci{ 14662306a36Sopenharmony_ci crypto_unregister_shash(&sha3_512_alg); 14762306a36Sopenharmony_ci crypto_unregister_shash(&sha3_384_alg); 14862306a36Sopenharmony_ci} 14962306a36Sopenharmony_ci 15062306a36Sopenharmony_cimodule_cpu_feature_match(S390_CPU_FEATURE_MSA, init); 15162306a36Sopenharmony_cimodule_exit(fini); 15262306a36Sopenharmony_ci 15362306a36Sopenharmony_ciMODULE_LICENSE("GPL"); 15462306a36Sopenharmony_ciMODULE_DESCRIPTION("SHA3-512 and SHA3-384 Secure Hash Algorithm"); 155