1 /* SPDX-License-Identifier: GPL-2.0 */
3 * sha3-ce-glue.c - core SHA-3 transform using v8.2 Crypto Extensions
5 * Copyright (C) 2018 Linaro Ltd <ard.biesheuvel@linaro.org>
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2 as
9 * published by the Free Software Foundation.
12 #include <asm/hwcap.h>
15 #include <asm/unaligned.h>
16 #include <crypto/internal/hash.h>
17 #include <crypto/sha3.h>
18 #include <linux/cpufeature.h>
19 #include <linux/crypto.h>
20 #include <linux/module.h>
22 MODULE_DESCRIPTION("SHA3 secure hash using ARMv8 Crypto Extensions");
23 MODULE_AUTHOR("Ard Biesheuvel <ard.biesheuvel@linaro.org>");
24 MODULE_LICENSE("GPL v2");
25 MODULE_ALIAS_CRYPTO("sha3-224");
26 MODULE_ALIAS_CRYPTO("sha3-256");
27 MODULE_ALIAS_CRYPTO("sha3-384");
28 MODULE_ALIAS_CRYPTO("sha3-512");
30 asmlinkage void sha3_ce_transform(u64 *st, const u8 *data, int blocks,
33 static int sha3_update(struct shash_desc *desc, const u8 *data,
36 struct sha3_state *sctx = shash_desc_ctx(desc);
37 unsigned int digest_size = crypto_shash_digestsize(desc->tfm);
40 return crypto_sha3_update(desc, data, len);
42 if ((sctx->partial + len) >= sctx->rsiz) {
46 int p = sctx->rsiz - sctx->partial;
48 memcpy(sctx->buf + sctx->partial, data, p);
50 sha3_ce_transform(sctx->st, sctx->buf, 1, digest_size);
58 blocks = len / sctx->rsiz;
63 sha3_ce_transform(sctx->st, data, blocks, digest_size);
65 data += blocks * sctx->rsiz;
70 memcpy(sctx->buf + sctx->partial, data, len);
76 static int sha3_final(struct shash_desc *desc, u8 *out)
78 struct sha3_state *sctx = shash_desc_ctx(desc);
79 unsigned int digest_size = crypto_shash_digestsize(desc->tfm);
80 __le64 *digest = (__le64 *)out;
84 return crypto_sha3_final(desc, out);
86 sctx->buf[sctx->partial++] = 0x06;
87 memset(sctx->buf + sctx->partial, 0, sctx->rsiz - sctx->partial);
88 sctx->buf[sctx->rsiz - 1] |= 0x80;
91 sha3_ce_transform(sctx->st, sctx->buf, 1, digest_size);
94 for (i = 0; i < digest_size / 8; i++)
95 put_unaligned_le64(sctx->st[i], digest++);
98 put_unaligned_le32(sctx->st[i], (__le32 *)digest);
100 *sctx = (struct sha3_state){};
104 static struct shash_alg algs[] = { {
105 .digestsize = SHA3_224_DIGEST_SIZE,
106 .init = crypto_sha3_init,
107 .update = sha3_update,
109 .descsize = sizeof(struct sha3_state),
110 .base.cra_name = "sha3-224",
111 .base.cra_driver_name = "sha3-224-ce",
112 .base.cra_blocksize = SHA3_224_BLOCK_SIZE,
113 .base.cra_module = THIS_MODULE,
114 .base.cra_priority = 200,
116 .digestsize = SHA3_256_DIGEST_SIZE,
117 .init = crypto_sha3_init,
118 .update = sha3_update,
120 .descsize = sizeof(struct sha3_state),
121 .base.cra_name = "sha3-256",
122 .base.cra_driver_name = "sha3-256-ce",
123 .base.cra_blocksize = SHA3_256_BLOCK_SIZE,
124 .base.cra_module = THIS_MODULE,
125 .base.cra_priority = 200,
127 .digestsize = SHA3_384_DIGEST_SIZE,
128 .init = crypto_sha3_init,
129 .update = sha3_update,
131 .descsize = sizeof(struct sha3_state),
132 .base.cra_name = "sha3-384",
133 .base.cra_driver_name = "sha3-384-ce",
134 .base.cra_blocksize = SHA3_384_BLOCK_SIZE,
135 .base.cra_module = THIS_MODULE,
136 .base.cra_priority = 200,
138 .digestsize = SHA3_512_DIGEST_SIZE,
139 .init = crypto_sha3_init,
140 .update = sha3_update,
142 .descsize = sizeof(struct sha3_state),
143 .base.cra_name = "sha3-512",
144 .base.cra_driver_name = "sha3-512-ce",
145 .base.cra_blocksize = SHA3_512_BLOCK_SIZE,
146 .base.cra_module = THIS_MODULE,
147 .base.cra_priority = 200,
150 static int __init sha3_neon_mod_init(void)
152 return crypto_register_shashes(algs, ARRAY_SIZE(algs));
155 static void __exit sha3_neon_mod_fini(void)
157 crypto_unregister_shashes(algs, ARRAY_SIZE(algs));
160 module_cpu_feature_match(SHA3, sha3_neon_mod_init);
161 module_exit(sha3_neon_mod_fini);