1/*
  2 * Cryptographic API.
  3 *
  4 * s390 generic implementation of the SHA Secure Hash Algorithms.
  5 *
  6 * Copyright IBM Corp. 2007
  7 * Author(s): Jan Glauber (jang@de.ibm.com)
  8 *
  9 * This program is free software; you can redistribute it and/or modify it
 10 * under the terms of the GNU General Public License as published by the Free
 11 * Software Foundation; either version 2 of the License, or (at your option)
 12 * any later version.
 13 *
 14 */
 15
 16#include <crypto/internal/hash.h>
 17#include <linux/module.h>
 
 18#include "sha.h"
 19#include "crypt_s390.h"
 20
 21int s390_sha_update(struct shash_desc *desc, const u8 *data, unsigned int len)
 22{
 23	struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
 24	unsigned int bsize = crypto_shash_blocksize(desc->tfm);
 25	unsigned int index;
 26	int ret;
 27
 28	/* how much is already in the buffer? */
 29	index = ctx->count & (bsize - 1);
 30	ctx->count += len;
 31
 32	if ((index + len) < bsize)
 33		goto store;
 34
 35	/* process one stored block */
 36	if (index) {
 37		memcpy(ctx->buf + index, data, bsize - index);
 38		ret = crypt_s390_kimd(ctx->func, ctx->state, ctx->buf, bsize);
 39		BUG_ON(ret != bsize);
 40		data += bsize - index;
 41		len -= bsize - index;
 42		index = 0;
 43	}
 44
 45	/* process as many blocks as possible */
 46	if (len >= bsize) {
 47		ret = crypt_s390_kimd(ctx->func, ctx->state, data,
 48				      len & ~(bsize - 1));
 49		BUG_ON(ret != (len & ~(bsize - 1)));
 50		data += ret;
 51		len -= ret;
 52	}
 53store:
 54	if (len)
 55		memcpy(ctx->buf + index , data, len);
 56
 57	return 0;
 58}
 59EXPORT_SYMBOL_GPL(s390_sha_update);
 60
 61int s390_sha_final(struct shash_desc *desc, u8 *out)
 62{
 63	struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
 64	unsigned int bsize = crypto_shash_blocksize(desc->tfm);
 65	u64 bits;
 66	unsigned int index, end, plen;
 67	int ret;
 68
 69	/* SHA-512 uses 128 bit padding length */
 70	plen = (bsize > SHA256_BLOCK_SIZE) ? 16 : 8;
 71
 72	/* must perform manual padding */
 73	index = ctx->count & (bsize - 1);
 74	end = (index < bsize - plen) ? bsize : (2 * bsize);
 75
 76	/* start pad with 1 */
 77	ctx->buf[index] = 0x80;
 78	index++;
 79
 80	/* pad with zeros */
 81	memset(ctx->buf + index, 0x00, end - index - 8);
 82
 83	/*
 84	 * Append message length. Well, SHA-512 wants a 128 bit length value,
 85	 * nevertheless we use u64, should be enough for now...
 86	 */
 87	bits = ctx->count * 8;
 88	memcpy(ctx->buf + end - 8, &bits, sizeof(bits));
 89
 90	ret = crypt_s390_kimd(ctx->func, ctx->state, ctx->buf, end);
 91	BUG_ON(ret != end);
 92
 93	/* copy digest to out */
 94	memcpy(out, ctx->state, crypto_shash_digestsize(desc->tfm));
 95	/* wipe context */
 96	memset(ctx, 0, sizeof *ctx);
 97
 98	return 0;
 99}
100EXPORT_SYMBOL_GPL(s390_sha_final);
101
102MODULE_LICENSE("GPL");
103MODULE_DESCRIPTION("s390 SHA cipher common functions");

 1// SPDX-License-Identifier: GPL-2.0+
 2/*
 3 * Cryptographic API.
 4 *
 5 * s390 generic implementation of the SHA Secure Hash Algorithms.
 6 *
 7 * Copyright IBM Corp. 2007
 8 * Author(s): Jan Glauber (jang@de.ibm.com)
 
 
 
 
 
 
 9 */
10
11#include <crypto/internal/hash.h>
12#include <linux/module.h>
13#include <asm/cpacf.h>
14#include "sha.h"
 
15
16int s390_sha_update(struct shash_desc *desc, const u8 *data, unsigned int len)
17{
18	struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
19	unsigned int bsize = crypto_shash_blocksize(desc->tfm);
20	unsigned int index, n;
 
21
22	/* how much is already in the buffer? */
23	index = ctx->count & (bsize - 1);
24	ctx->count += len;
25
26	if ((index + len) < bsize)
27		goto store;
28
29	/* process one stored block */
30	if (index) {
31		memcpy(ctx->buf + index, data, bsize - index);
32		cpacf_kimd(ctx->func, ctx->state, ctx->buf, bsize);
 
33		data += bsize - index;
34		len -= bsize - index;
35		index = 0;
36	}
37
38	/* process as many blocks as possible */
39	if (len >= bsize) {
40		n = len & ~(bsize - 1);
41		cpacf_kimd(ctx->func, ctx->state, data, n);
42		data += n;
43		len -= n;
 
44	}
45store:
46	if (len)
47		memcpy(ctx->buf + index , data, len);
48
49	return 0;
50}
51EXPORT_SYMBOL_GPL(s390_sha_update);
52
53int s390_sha_final(struct shash_desc *desc, u8 *out)
54{
55	struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
56	unsigned int bsize = crypto_shash_blocksize(desc->tfm);
57	u64 bits;
58	unsigned int index, end, plen;
 
59
60	/* SHA-512 uses 128 bit padding length */
61	plen = (bsize > SHA256_BLOCK_SIZE) ? 16 : 8;
62
63	/* must perform manual padding */
64	index = ctx->count & (bsize - 1);
65	end = (index < bsize - plen) ? bsize : (2 * bsize);
66
67	/* start pad with 1 */
68	ctx->buf[index] = 0x80;
69	index++;
70
71	/* pad with zeros */
72	memset(ctx->buf + index, 0x00, end - index - 8);
73
74	/*
75	 * Append message length. Well, SHA-512 wants a 128 bit length value,
76	 * nevertheless we use u64, should be enough for now...
77	 */
78	bits = ctx->count * 8;
79	memcpy(ctx->buf + end - 8, &bits, sizeof(bits));
80	cpacf_kimd(ctx->func, ctx->state, ctx->buf, end);
 
 
81
82	/* copy digest to out */
83	memcpy(out, ctx->state, crypto_shash_digestsize(desc->tfm));
84	/* wipe context */
85	memset(ctx, 0, sizeof *ctx);
86
87	return 0;
88}
89EXPORT_SYMBOL_GPL(s390_sha_final);
90
91MODULE_LICENSE("GPL");
92MODULE_DESCRIPTION("s390 SHA cipher common functions");