1*4882a593Smuzhiyun /* SPDX-License-Identifier: GPL-2.0-only */
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * sha1_base.h - core logic for SHA-1 implementations
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (C) 2015 Linaro Ltd <ard.biesheuvel@linaro.org>
6*4882a593Smuzhiyun */
7*4882a593Smuzhiyun
8*4882a593Smuzhiyun #ifndef _CRYPTO_SHA1_BASE_H
9*4882a593Smuzhiyun #define _CRYPTO_SHA1_BASE_H
10*4882a593Smuzhiyun
11*4882a593Smuzhiyun #include <crypto/internal/hash.h>
12*4882a593Smuzhiyun #include <crypto/sha.h>
13*4882a593Smuzhiyun #include <linux/crypto.h>
14*4882a593Smuzhiyun #include <linux/module.h>
15*4882a593Smuzhiyun
16*4882a593Smuzhiyun #include <asm/unaligned.h>
17*4882a593Smuzhiyun
18*4882a593Smuzhiyun typedef void (sha1_block_fn)(struct sha1_state *sst, u8 const *src, int blocks);
19*4882a593Smuzhiyun
sha1_base_init(struct shash_desc * desc)20*4882a593Smuzhiyun static inline int sha1_base_init(struct shash_desc *desc)
21*4882a593Smuzhiyun {
22*4882a593Smuzhiyun struct sha1_state *sctx = shash_desc_ctx(desc);
23*4882a593Smuzhiyun
24*4882a593Smuzhiyun sctx->state[0] = SHA1_H0;
25*4882a593Smuzhiyun sctx->state[1] = SHA1_H1;
26*4882a593Smuzhiyun sctx->state[2] = SHA1_H2;
27*4882a593Smuzhiyun sctx->state[3] = SHA1_H3;
28*4882a593Smuzhiyun sctx->state[4] = SHA1_H4;
29*4882a593Smuzhiyun sctx->count = 0;
30*4882a593Smuzhiyun
31*4882a593Smuzhiyun return 0;
32*4882a593Smuzhiyun }
33*4882a593Smuzhiyun
sha1_base_do_update(struct shash_desc * desc,const u8 * data,unsigned int len,sha1_block_fn * block_fn)34*4882a593Smuzhiyun static inline int sha1_base_do_update(struct shash_desc *desc,
35*4882a593Smuzhiyun const u8 *data,
36*4882a593Smuzhiyun unsigned int len,
37*4882a593Smuzhiyun sha1_block_fn *block_fn)
38*4882a593Smuzhiyun {
39*4882a593Smuzhiyun struct sha1_state *sctx = shash_desc_ctx(desc);
40*4882a593Smuzhiyun unsigned int partial = sctx->count % SHA1_BLOCK_SIZE;
41*4882a593Smuzhiyun
42*4882a593Smuzhiyun sctx->count += len;
43*4882a593Smuzhiyun
44*4882a593Smuzhiyun if (unlikely((partial + len) >= SHA1_BLOCK_SIZE)) {
45*4882a593Smuzhiyun int blocks;
46*4882a593Smuzhiyun
47*4882a593Smuzhiyun if (partial) {
48*4882a593Smuzhiyun int p = SHA1_BLOCK_SIZE - partial;
49*4882a593Smuzhiyun
50*4882a593Smuzhiyun memcpy(sctx->buffer + partial, data, p);
51*4882a593Smuzhiyun data += p;
52*4882a593Smuzhiyun len -= p;
53*4882a593Smuzhiyun
54*4882a593Smuzhiyun block_fn(sctx, sctx->buffer, 1);
55*4882a593Smuzhiyun }
56*4882a593Smuzhiyun
57*4882a593Smuzhiyun blocks = len / SHA1_BLOCK_SIZE;
58*4882a593Smuzhiyun len %= SHA1_BLOCK_SIZE;
59*4882a593Smuzhiyun
60*4882a593Smuzhiyun if (blocks) {
61*4882a593Smuzhiyun block_fn(sctx, data, blocks);
62*4882a593Smuzhiyun data += blocks * SHA1_BLOCK_SIZE;
63*4882a593Smuzhiyun }
64*4882a593Smuzhiyun partial = 0;
65*4882a593Smuzhiyun }
66*4882a593Smuzhiyun if (len)
67*4882a593Smuzhiyun memcpy(sctx->buffer + partial, data, len);
68*4882a593Smuzhiyun
69*4882a593Smuzhiyun return 0;
70*4882a593Smuzhiyun }
71*4882a593Smuzhiyun
sha1_base_do_finalize(struct shash_desc * desc,sha1_block_fn * block_fn)72*4882a593Smuzhiyun static inline int sha1_base_do_finalize(struct shash_desc *desc,
73*4882a593Smuzhiyun sha1_block_fn *block_fn)
74*4882a593Smuzhiyun {
75*4882a593Smuzhiyun const int bit_offset = SHA1_BLOCK_SIZE - sizeof(__be64);
76*4882a593Smuzhiyun struct sha1_state *sctx = shash_desc_ctx(desc);
77*4882a593Smuzhiyun __be64 *bits = (__be64 *)(sctx->buffer + bit_offset);
78*4882a593Smuzhiyun unsigned int partial = sctx->count % SHA1_BLOCK_SIZE;
79*4882a593Smuzhiyun
80*4882a593Smuzhiyun sctx->buffer[partial++] = 0x80;
81*4882a593Smuzhiyun if (partial > bit_offset) {
82*4882a593Smuzhiyun memset(sctx->buffer + partial, 0x0, SHA1_BLOCK_SIZE - partial);
83*4882a593Smuzhiyun partial = 0;
84*4882a593Smuzhiyun
85*4882a593Smuzhiyun block_fn(sctx, sctx->buffer, 1);
86*4882a593Smuzhiyun }
87*4882a593Smuzhiyun
88*4882a593Smuzhiyun memset(sctx->buffer + partial, 0x0, bit_offset - partial);
89*4882a593Smuzhiyun *bits = cpu_to_be64(sctx->count << 3);
90*4882a593Smuzhiyun block_fn(sctx, sctx->buffer, 1);
91*4882a593Smuzhiyun
92*4882a593Smuzhiyun return 0;
93*4882a593Smuzhiyun }
94*4882a593Smuzhiyun
sha1_base_finish(struct shash_desc * desc,u8 * out)95*4882a593Smuzhiyun static inline int sha1_base_finish(struct shash_desc *desc, u8 *out)
96*4882a593Smuzhiyun {
97*4882a593Smuzhiyun struct sha1_state *sctx = shash_desc_ctx(desc);
98*4882a593Smuzhiyun __be32 *digest = (__be32 *)out;
99*4882a593Smuzhiyun int i;
100*4882a593Smuzhiyun
101*4882a593Smuzhiyun for (i = 0; i < SHA1_DIGEST_SIZE / sizeof(__be32); i++)
102*4882a593Smuzhiyun put_unaligned_be32(sctx->state[i], digest++);
103*4882a593Smuzhiyun
104*4882a593Smuzhiyun *sctx = (struct sha1_state){};
105*4882a593Smuzhiyun return 0;
106*4882a593Smuzhiyun }
107*4882a593Smuzhiyun
108*4882a593Smuzhiyun #endif /* _CRYPTO_SHA1_BASE_H */
109