1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0+
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Cryptographic API.
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * s390 generic implementation of the SHA Secure Hash Algorithms.
6*4882a593Smuzhiyun *
7*4882a593Smuzhiyun * Copyright IBM Corp. 2007
8*4882a593Smuzhiyun * Author(s): Jan Glauber (jang@de.ibm.com)
9*4882a593Smuzhiyun */
10*4882a593Smuzhiyun
11*4882a593Smuzhiyun #include <crypto/internal/hash.h>
12*4882a593Smuzhiyun #include <linux/module.h>
13*4882a593Smuzhiyun #include <asm/cpacf.h>
14*4882a593Smuzhiyun #include "sha.h"
15*4882a593Smuzhiyun
s390_sha_update(struct shash_desc * desc,const u8 * data,unsigned int len)16*4882a593Smuzhiyun int s390_sha_update(struct shash_desc *desc, const u8 *data, unsigned int len)
17*4882a593Smuzhiyun {
18*4882a593Smuzhiyun struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
19*4882a593Smuzhiyun unsigned int bsize = crypto_shash_blocksize(desc->tfm);
20*4882a593Smuzhiyun unsigned int index, n;
21*4882a593Smuzhiyun
22*4882a593Smuzhiyun /* how much is already in the buffer? */
23*4882a593Smuzhiyun index = ctx->count % bsize;
24*4882a593Smuzhiyun ctx->count += len;
25*4882a593Smuzhiyun
26*4882a593Smuzhiyun if ((index + len) < bsize)
27*4882a593Smuzhiyun goto store;
28*4882a593Smuzhiyun
29*4882a593Smuzhiyun /* process one stored block */
30*4882a593Smuzhiyun if (index) {
31*4882a593Smuzhiyun memcpy(ctx->buf + index, data, bsize - index);
32*4882a593Smuzhiyun cpacf_kimd(ctx->func, ctx->state, ctx->buf, bsize);
33*4882a593Smuzhiyun data += bsize - index;
34*4882a593Smuzhiyun len -= bsize - index;
35*4882a593Smuzhiyun index = 0;
36*4882a593Smuzhiyun }
37*4882a593Smuzhiyun
38*4882a593Smuzhiyun /* process as many blocks as possible */
39*4882a593Smuzhiyun if (len >= bsize) {
40*4882a593Smuzhiyun n = (len / bsize) * bsize;
41*4882a593Smuzhiyun cpacf_kimd(ctx->func, ctx->state, data, n);
42*4882a593Smuzhiyun data += n;
43*4882a593Smuzhiyun len -= n;
44*4882a593Smuzhiyun }
45*4882a593Smuzhiyun store:
46*4882a593Smuzhiyun if (len)
47*4882a593Smuzhiyun memcpy(ctx->buf + index , data, len);
48*4882a593Smuzhiyun
49*4882a593Smuzhiyun return 0;
50*4882a593Smuzhiyun }
51*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(s390_sha_update);
52*4882a593Smuzhiyun
s390_crypto_shash_parmsize(int func)53*4882a593Smuzhiyun static int s390_crypto_shash_parmsize(int func)
54*4882a593Smuzhiyun {
55*4882a593Smuzhiyun switch (func) {
56*4882a593Smuzhiyun case CPACF_KLMD_SHA_1:
57*4882a593Smuzhiyun return 20;
58*4882a593Smuzhiyun case CPACF_KLMD_SHA_256:
59*4882a593Smuzhiyun return 32;
60*4882a593Smuzhiyun case CPACF_KLMD_SHA_512:
61*4882a593Smuzhiyun return 64;
62*4882a593Smuzhiyun case CPACF_KLMD_SHA3_224:
63*4882a593Smuzhiyun case CPACF_KLMD_SHA3_256:
64*4882a593Smuzhiyun case CPACF_KLMD_SHA3_384:
65*4882a593Smuzhiyun case CPACF_KLMD_SHA3_512:
66*4882a593Smuzhiyun return 200;
67*4882a593Smuzhiyun default:
68*4882a593Smuzhiyun return -EINVAL;
69*4882a593Smuzhiyun }
70*4882a593Smuzhiyun }
71*4882a593Smuzhiyun
s390_sha_final(struct shash_desc * desc,u8 * out)72*4882a593Smuzhiyun int s390_sha_final(struct shash_desc *desc, u8 *out)
73*4882a593Smuzhiyun {
74*4882a593Smuzhiyun struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
75*4882a593Smuzhiyun unsigned int bsize = crypto_shash_blocksize(desc->tfm);
76*4882a593Smuzhiyun u64 bits;
77*4882a593Smuzhiyun unsigned int n;
78*4882a593Smuzhiyun int mbl_offset;
79*4882a593Smuzhiyun
80*4882a593Smuzhiyun n = ctx->count % bsize;
81*4882a593Smuzhiyun bits = ctx->count * 8;
82*4882a593Smuzhiyun mbl_offset = s390_crypto_shash_parmsize(ctx->func);
83*4882a593Smuzhiyun if (mbl_offset < 0)
84*4882a593Smuzhiyun return -EINVAL;
85*4882a593Smuzhiyun
86*4882a593Smuzhiyun mbl_offset = mbl_offset / sizeof(u32);
87*4882a593Smuzhiyun
88*4882a593Smuzhiyun /* set total msg bit length (mbl) in CPACF parmblock */
89*4882a593Smuzhiyun switch (ctx->func) {
90*4882a593Smuzhiyun case CPACF_KLMD_SHA_1:
91*4882a593Smuzhiyun case CPACF_KLMD_SHA_256:
92*4882a593Smuzhiyun memcpy(ctx->state + mbl_offset, &bits, sizeof(bits));
93*4882a593Smuzhiyun break;
94*4882a593Smuzhiyun case CPACF_KLMD_SHA_512:
95*4882a593Smuzhiyun /*
96*4882a593Smuzhiyun * the SHA512 parmblock has a 128-bit mbl field, clear
97*4882a593Smuzhiyun * high-order u64 field, copy bits to low-order u64 field
98*4882a593Smuzhiyun */
99*4882a593Smuzhiyun memset(ctx->state + mbl_offset, 0x00, sizeof(bits));
100*4882a593Smuzhiyun mbl_offset += sizeof(u64) / sizeof(u32);
101*4882a593Smuzhiyun memcpy(ctx->state + mbl_offset, &bits, sizeof(bits));
102*4882a593Smuzhiyun break;
103*4882a593Smuzhiyun case CPACF_KLMD_SHA3_224:
104*4882a593Smuzhiyun case CPACF_KLMD_SHA3_256:
105*4882a593Smuzhiyun case CPACF_KLMD_SHA3_384:
106*4882a593Smuzhiyun case CPACF_KLMD_SHA3_512:
107*4882a593Smuzhiyun break;
108*4882a593Smuzhiyun default:
109*4882a593Smuzhiyun return -EINVAL;
110*4882a593Smuzhiyun }
111*4882a593Smuzhiyun
112*4882a593Smuzhiyun cpacf_klmd(ctx->func, ctx->state, ctx->buf, n);
113*4882a593Smuzhiyun
114*4882a593Smuzhiyun /* copy digest to out */
115*4882a593Smuzhiyun memcpy(out, ctx->state, crypto_shash_digestsize(desc->tfm));
116*4882a593Smuzhiyun /* wipe context */
117*4882a593Smuzhiyun memset(ctx, 0, sizeof *ctx);
118*4882a593Smuzhiyun
119*4882a593Smuzhiyun return 0;
120*4882a593Smuzhiyun }
121*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(s390_sha_final);
122*4882a593Smuzhiyun
123*4882a593Smuzhiyun MODULE_LICENSE("GPL");
124*4882a593Smuzhiyun MODULE_DESCRIPTION("s390 SHA cipher common functions");
125