162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0+
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci * Cryptographic API.
462306a36Sopenharmony_ci *
562306a36Sopenharmony_ci * s390 implementation of the SHA512 and SHA384 Secure Hash Algorithm.
662306a36Sopenharmony_ci *
762306a36Sopenharmony_ci * Copyright IBM Corp. 2019
862306a36Sopenharmony_ci * Author(s): Joerg Schmidbauer (jschmidb@de.ibm.com)
962306a36Sopenharmony_ci */
1062306a36Sopenharmony_ci#include <crypto/internal/hash.h>
1162306a36Sopenharmony_ci#include <linux/init.h>
1262306a36Sopenharmony_ci#include <linux/module.h>
1362306a36Sopenharmony_ci#include <linux/cpufeature.h>
1462306a36Sopenharmony_ci#include <crypto/sha3.h>
1562306a36Sopenharmony_ci#include <asm/cpacf.h>
1662306a36Sopenharmony_ci
1762306a36Sopenharmony_ci#include "sha.h"
1862306a36Sopenharmony_ci
1962306a36Sopenharmony_cistatic int sha3_512_init(struct shash_desc *desc)
2062306a36Sopenharmony_ci{
2162306a36Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
2262306a36Sopenharmony_ci
2362306a36Sopenharmony_ci	memset(sctx->state, 0, sizeof(sctx->state));
2462306a36Sopenharmony_ci	sctx->count = 0;
2562306a36Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_512;
2662306a36Sopenharmony_ci
2762306a36Sopenharmony_ci	return 0;
2862306a36Sopenharmony_ci}
2962306a36Sopenharmony_ci
3062306a36Sopenharmony_cistatic int sha3_512_export(struct shash_desc *desc, void *out)
3162306a36Sopenharmony_ci{
3262306a36Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
3362306a36Sopenharmony_ci	struct sha3_state *octx = out;
3462306a36Sopenharmony_ci
3562306a36Sopenharmony_ci	octx->rsiz = sctx->count;
3662306a36Sopenharmony_ci	octx->rsizw = sctx->count >> 32;
3762306a36Sopenharmony_ci
3862306a36Sopenharmony_ci	memcpy(octx->st, sctx->state, sizeof(octx->st));
3962306a36Sopenharmony_ci	memcpy(octx->buf, sctx->buf, sizeof(octx->buf));
4062306a36Sopenharmony_ci
4162306a36Sopenharmony_ci	return 0;
4262306a36Sopenharmony_ci}
4362306a36Sopenharmony_ci
4462306a36Sopenharmony_cistatic int sha3_512_import(struct shash_desc *desc, const void *in)
4562306a36Sopenharmony_ci{
4662306a36Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
4762306a36Sopenharmony_ci	const struct sha3_state *ictx = in;
4862306a36Sopenharmony_ci
4962306a36Sopenharmony_ci	if (unlikely(ictx->rsizw))
5062306a36Sopenharmony_ci		return -ERANGE;
5162306a36Sopenharmony_ci	sctx->count = ictx->rsiz;
5262306a36Sopenharmony_ci
5362306a36Sopenharmony_ci	memcpy(sctx->state, ictx->st, sizeof(ictx->st));
5462306a36Sopenharmony_ci	memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf));
5562306a36Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_512;
5662306a36Sopenharmony_ci
5762306a36Sopenharmony_ci	return 0;
5862306a36Sopenharmony_ci}
5962306a36Sopenharmony_ci
6062306a36Sopenharmony_cistatic int sha3_384_import(struct shash_desc *desc, const void *in)
6162306a36Sopenharmony_ci{
6262306a36Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
6362306a36Sopenharmony_ci	const struct sha3_state *ictx = in;
6462306a36Sopenharmony_ci
6562306a36Sopenharmony_ci	if (unlikely(ictx->rsizw))
6662306a36Sopenharmony_ci		return -ERANGE;
6762306a36Sopenharmony_ci	sctx->count = ictx->rsiz;
6862306a36Sopenharmony_ci
6962306a36Sopenharmony_ci	memcpy(sctx->state, ictx->st, sizeof(ictx->st));
7062306a36Sopenharmony_ci	memcpy(sctx->buf, ictx->buf, sizeof(ictx->buf));
7162306a36Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_384;
7262306a36Sopenharmony_ci
7362306a36Sopenharmony_ci	return 0;
7462306a36Sopenharmony_ci}
7562306a36Sopenharmony_ci
7662306a36Sopenharmony_cistatic struct shash_alg sha3_512_alg = {
7762306a36Sopenharmony_ci	.digestsize	=	SHA3_512_DIGEST_SIZE,
7862306a36Sopenharmony_ci	.init		=	sha3_512_init,
7962306a36Sopenharmony_ci	.update		=	s390_sha_update,
8062306a36Sopenharmony_ci	.final		=	s390_sha_final,
8162306a36Sopenharmony_ci	.export		=	sha3_512_export,
8262306a36Sopenharmony_ci	.import		=	sha3_512_import,
8362306a36Sopenharmony_ci	.descsize	=	sizeof(struct s390_sha_ctx),
8462306a36Sopenharmony_ci	.statesize	=	sizeof(struct sha3_state),
8562306a36Sopenharmony_ci	.base		=	{
8662306a36Sopenharmony_ci		.cra_name	 =	"sha3-512",
8762306a36Sopenharmony_ci		.cra_driver_name =	"sha3-512-s390",
8862306a36Sopenharmony_ci		.cra_priority	 =	300,
8962306a36Sopenharmony_ci		.cra_blocksize	 =	SHA3_512_BLOCK_SIZE,
9062306a36Sopenharmony_ci		.cra_module	 =	THIS_MODULE,
9162306a36Sopenharmony_ci	}
9262306a36Sopenharmony_ci};
9362306a36Sopenharmony_ci
9462306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha3-512");
9562306a36Sopenharmony_ci
9662306a36Sopenharmony_cistatic int sha3_384_init(struct shash_desc *desc)
9762306a36Sopenharmony_ci{
9862306a36Sopenharmony_ci	struct s390_sha_ctx *sctx = shash_desc_ctx(desc);
9962306a36Sopenharmony_ci
10062306a36Sopenharmony_ci	memset(sctx->state, 0, sizeof(sctx->state));
10162306a36Sopenharmony_ci	sctx->count = 0;
10262306a36Sopenharmony_ci	sctx->func = CPACF_KIMD_SHA3_384;
10362306a36Sopenharmony_ci
10462306a36Sopenharmony_ci	return 0;
10562306a36Sopenharmony_ci}
10662306a36Sopenharmony_ci
10762306a36Sopenharmony_cistatic struct shash_alg sha3_384_alg = {
10862306a36Sopenharmony_ci	.digestsize	=	SHA3_384_DIGEST_SIZE,
10962306a36Sopenharmony_ci	.init		=	sha3_384_init,
11062306a36Sopenharmony_ci	.update		=	s390_sha_update,
11162306a36Sopenharmony_ci	.final		=	s390_sha_final,
11262306a36Sopenharmony_ci	.export		=	sha3_512_export, /* same as for 512 */
11362306a36Sopenharmony_ci	.import		=	sha3_384_import, /* function code different! */
11462306a36Sopenharmony_ci	.descsize	=	sizeof(struct s390_sha_ctx),
11562306a36Sopenharmony_ci	.statesize	=	sizeof(struct sha3_state),
11662306a36Sopenharmony_ci	.base		=	{
11762306a36Sopenharmony_ci		.cra_name	 =	"sha3-384",
11862306a36Sopenharmony_ci		.cra_driver_name =	"sha3-384-s390",
11962306a36Sopenharmony_ci		.cra_priority	 =	300,
12062306a36Sopenharmony_ci		.cra_blocksize	 =	SHA3_384_BLOCK_SIZE,
12162306a36Sopenharmony_ci		.cra_ctxsize	 =	sizeof(struct s390_sha_ctx),
12262306a36Sopenharmony_ci		.cra_module	 =	THIS_MODULE,
12362306a36Sopenharmony_ci	}
12462306a36Sopenharmony_ci};
12562306a36Sopenharmony_ci
12662306a36Sopenharmony_ciMODULE_ALIAS_CRYPTO("sha3-384");
12762306a36Sopenharmony_ci
12862306a36Sopenharmony_cistatic int __init init(void)
12962306a36Sopenharmony_ci{
13062306a36Sopenharmony_ci	int ret;
13162306a36Sopenharmony_ci
13262306a36Sopenharmony_ci	if (!cpacf_query_func(CPACF_KIMD, CPACF_KIMD_SHA3_512))
13362306a36Sopenharmony_ci		return -ENODEV;
13462306a36Sopenharmony_ci	ret = crypto_register_shash(&sha3_512_alg);
13562306a36Sopenharmony_ci	if (ret < 0)
13662306a36Sopenharmony_ci		goto out;
13762306a36Sopenharmony_ci	ret = crypto_register_shash(&sha3_384_alg);
13862306a36Sopenharmony_ci	if (ret < 0)
13962306a36Sopenharmony_ci		crypto_unregister_shash(&sha3_512_alg);
14062306a36Sopenharmony_ciout:
14162306a36Sopenharmony_ci	return ret;
14262306a36Sopenharmony_ci}
14362306a36Sopenharmony_ci
14462306a36Sopenharmony_cistatic void __exit fini(void)
14562306a36Sopenharmony_ci{
14662306a36Sopenharmony_ci	crypto_unregister_shash(&sha3_512_alg);
14762306a36Sopenharmony_ci	crypto_unregister_shash(&sha3_384_alg);
14862306a36Sopenharmony_ci}
14962306a36Sopenharmony_ci
15062306a36Sopenharmony_cimodule_cpu_feature_match(S390_CPU_FEATURE_MSA, init);
15162306a36Sopenharmony_cimodule_exit(fini);
15262306a36Sopenharmony_ci
15362306a36Sopenharmony_ciMODULE_LICENSE("GPL");
15462306a36Sopenharmony_ciMODULE_DESCRIPTION("SHA3-512 and SHA3-384 Secure Hash Algorithm");
155