1*4882a593Smuzhiyun /*
2*4882a593Smuzhiyun * Copyright (c) 2013, Andreas Oetken.
3*4882a593Smuzhiyun *
4*4882a593Smuzhiyun * SPDX-License-Identifier: GPL-2.0+
5*4882a593Smuzhiyun */
6*4882a593Smuzhiyun
7*4882a593Smuzhiyun #ifndef USE_HOSTCC
8*4882a593Smuzhiyun #include <common.h>
9*4882a593Smuzhiyun #include <crypto.h>
10*4882a593Smuzhiyun #include <fdtdec.h>
11*4882a593Smuzhiyun #include <asm/byteorder.h>
12*4882a593Smuzhiyun #include <linux/errno.h>
13*4882a593Smuzhiyun #include <asm/unaligned.h>
14*4882a593Smuzhiyun #include <hash.h>
15*4882a593Smuzhiyun #else
16*4882a593Smuzhiyun #include "fdt_host.h"
17*4882a593Smuzhiyun #endif
18*4882a593Smuzhiyun #include <u-boot/rsa.h>
19*4882a593Smuzhiyun
rsa_hash_calculate(const char * name,const struct image_region region[],int region_count,uint8_t * checksum)20*4882a593Smuzhiyun int rsa_hash_calculate(const char *name,
21*4882a593Smuzhiyun const struct image_region region[],
22*4882a593Smuzhiyun int region_count, uint8_t *checksum)
23*4882a593Smuzhiyun {
24*4882a593Smuzhiyun struct hash_algo *algo;
25*4882a593Smuzhiyun int ret = 0;
26*4882a593Smuzhiyun void *ctx;
27*4882a593Smuzhiyun uint32_t i;
28*4882a593Smuzhiyun i = 0;
29*4882a593Smuzhiyun
30*4882a593Smuzhiyun ret = hash_progressive_lookup_algo(name, &algo);
31*4882a593Smuzhiyun if (ret)
32*4882a593Smuzhiyun return ret;
33*4882a593Smuzhiyun
34*4882a593Smuzhiyun ret = algo->hash_init(algo, &ctx);
35*4882a593Smuzhiyun if (ret)
36*4882a593Smuzhiyun return ret;
37*4882a593Smuzhiyun
38*4882a593Smuzhiyun for (i = 0; i < region_count - 1; i++) {
39*4882a593Smuzhiyun ret = algo->hash_update(algo, ctx, region[i].data,
40*4882a593Smuzhiyun region[i].size, 0);
41*4882a593Smuzhiyun if (ret)
42*4882a593Smuzhiyun return ret;
43*4882a593Smuzhiyun }
44*4882a593Smuzhiyun
45*4882a593Smuzhiyun ret = algo->hash_update(algo, ctx, region[i].data, region[i].size, 1);
46*4882a593Smuzhiyun if (ret)
47*4882a593Smuzhiyun return ret;
48*4882a593Smuzhiyun ret = algo->hash_finish(algo, ctx, checksum, algo->digest_size);
49*4882a593Smuzhiyun if (ret)
50*4882a593Smuzhiyun return ret;
51*4882a593Smuzhiyun
52*4882a593Smuzhiyun return 0;
53*4882a593Smuzhiyun }
54*4882a593Smuzhiyun
55*4882a593Smuzhiyun #if !defined(USE_HOSTCC)
56*4882a593Smuzhiyun #if CONFIG_IS_ENABLED(FIT_HW_CRYPTO)
hw_rsa_hash_calculate(const char * name,const struct image_region region[],int region_count,uint8_t * checksum)57*4882a593Smuzhiyun int hw_rsa_hash_calculate(const char *name,
58*4882a593Smuzhiyun const struct image_region region[],
59*4882a593Smuzhiyun int region_count, uint8_t *checksum)
60*4882a593Smuzhiyun
61*4882a593Smuzhiyun {
62*4882a593Smuzhiyun struct udevice *dev;
63*4882a593Smuzhiyun sha_context ctx;
64*4882a593Smuzhiyun
65*4882a593Smuzhiyun if (!name)
66*4882a593Smuzhiyun return -EINVAL;
67*4882a593Smuzhiyun
68*4882a593Smuzhiyun if (!strcmp(name, "sha1"))
69*4882a593Smuzhiyun ctx.algo = CRYPTO_SHA1;
70*4882a593Smuzhiyun else if (!strcmp(name, "sha256"))
71*4882a593Smuzhiyun ctx.algo = CRYPTO_SHA256;
72*4882a593Smuzhiyun else
73*4882a593Smuzhiyun return -EPERM;
74*4882a593Smuzhiyun
75*4882a593Smuzhiyun dev = crypto_get_device(ctx.algo);
76*4882a593Smuzhiyun if (!dev) {
77*4882a593Smuzhiyun printf("No crypto device for expected capability\n");
78*4882a593Smuzhiyun return -ENODEV;
79*4882a593Smuzhiyun }
80*4882a593Smuzhiyun
81*4882a593Smuzhiyun return crypto_sha_regions_csum(dev, &ctx, region,
82*4882a593Smuzhiyun region_count, checksum);
83*4882a593Smuzhiyun }
84*4882a593Smuzhiyun #endif
85*4882a593Smuzhiyun #endif
86*4882a593Smuzhiyun
hash_calculate(const char * name,const struct image_region region[],int region_count,uint8_t * checksum)87*4882a593Smuzhiyun int hash_calculate(const char *name,
88*4882a593Smuzhiyun const struct image_region region[],
89*4882a593Smuzhiyun int region_count, uint8_t *checksum)
90*4882a593Smuzhiyun {
91*4882a593Smuzhiyun #if defined(USE_HOSTCC)
92*4882a593Smuzhiyun return rsa_hash_calculate(name, region, region_count, checksum);
93*4882a593Smuzhiyun #else
94*4882a593Smuzhiyun #if !CONFIG_IS_ENABLED(FIT_HW_CRYPTO)
95*4882a593Smuzhiyun return rsa_hash_calculate(name, region, region_count, checksum);
96*4882a593Smuzhiyun #else
97*4882a593Smuzhiyun return hw_rsa_hash_calculate(name, region, region_count, checksum);
98*4882a593Smuzhiyun #endif
99*4882a593Smuzhiyun #endif
100*4882a593Smuzhiyun }
101