1// SPDX-License-Identifier: GPL-2.0
2/*
3 * sha512-ce-glue.c - SHA-384/SHA-512 using ARMv8 Crypto Extensions
4 *
5 * Copyright (C) 2018 Linaro Ltd <ard.biesheuvel@linaro.org>
6 *
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2 as
9 * published by the Free Software Foundation.
10 */
11
12#include <asm/neon.h>
13#include <asm/simd.h>
14#include <asm/unaligned.h>
15#include <crypto/internal/hash.h>
16#include <crypto/internal/simd.h>
17#include <crypto/sha2.h>
18#include <crypto/sha512_base.h>
19#include <linux/cpufeature.h>
20#include <linux/crypto.h>
21#include <linux/module.h>
22
23MODULE_DESCRIPTION("SHA-384/SHA-512 secure hash using ARMv8 Crypto Extensions");
24MODULE_AUTHOR("Ard Biesheuvel <ard.biesheuvel@linaro.org>");
25MODULE_LICENSE("GPL v2");
26MODULE_ALIAS_CRYPTO("sha384");
27MODULE_ALIAS_CRYPTO("sha512");
28
29asmlinkage int __sha512_ce_transform(struct sha512_state *sst, u8 const *src,
30 int blocks);
31
32asmlinkage void sha512_block_data_order(u64 *digest, u8 const *src, int blocks);
33
34static void sha512_ce_transform(struct sha512_state *sst, u8 const *src,
35 int blocks)
36{
37 while (blocks) {
38 int rem;
39
40 kernel_neon_begin();
41 rem = __sha512_ce_transform(sst, src, blocks);
42 kernel_neon_end();
43 src += (blocks - rem) * SHA512_BLOCK_SIZE;
44 blocks = rem;
45 }
46}
47
48static void sha512_arm64_transform(struct sha512_state *sst, u8 const *src,
49 int blocks)
50{
51 sha512_block_data_order(digest: sst->state, src, blocks);
52}
53
54static int sha512_ce_update(struct shash_desc *desc, const u8 *data,
55 unsigned int len)
56{
57 sha512_block_fn *fn = crypto_simd_usable() ? sha512_ce_transform
58 : sha512_arm64_transform;
59
60 sha512_base_do_update(desc, data, len, block_fn: fn);
61 return 0;
62}
63
64static int sha512_ce_finup(struct shash_desc *desc, const u8 *data,
65 unsigned int len, u8 *out)
66{
67 sha512_block_fn *fn = crypto_simd_usable() ? sha512_ce_transform
68 : sha512_arm64_transform;
69
70 sha512_base_do_update(desc, data, len, block_fn: fn);
71 sha512_base_do_finalize(desc, block_fn: fn);
72 return sha512_base_finish(desc, out);
73}
74
75static int sha512_ce_final(struct shash_desc *desc, u8 *out)
76{
77 sha512_block_fn *fn = crypto_simd_usable() ? sha512_ce_transform
78 : sha512_arm64_transform;
79
80 sha512_base_do_finalize(desc, block_fn: fn);
81 return sha512_base_finish(desc, out);
82}
83
84static struct shash_alg algs[] = { {
85 .init = sha384_base_init,
86 .update = sha512_ce_update,
87 .final = sha512_ce_final,
88 .finup = sha512_ce_finup,
89 .descsize = sizeof(struct sha512_state),
90 .digestsize = SHA384_DIGEST_SIZE,
91 .base.cra_name = "sha384",
92 .base.cra_driver_name = "sha384-ce",
93 .base.cra_priority = 200,
94 .base.cra_blocksize = SHA512_BLOCK_SIZE,
95 .base.cra_module = THIS_MODULE,
96}, {
97 .init = sha512_base_init,
98 .update = sha512_ce_update,
99 .final = sha512_ce_final,
100 .finup = sha512_ce_finup,
101 .descsize = sizeof(struct sha512_state),
102 .digestsize = SHA512_DIGEST_SIZE,
103 .base.cra_name = "sha512",
104 .base.cra_driver_name = "sha512-ce",
105 .base.cra_priority = 200,
106 .base.cra_blocksize = SHA512_BLOCK_SIZE,
107 .base.cra_module = THIS_MODULE,
108} };
109
110static int __init sha512_ce_mod_init(void)
111{
112 return crypto_register_shashes(algs, ARRAY_SIZE(algs));
113}
114
115static void __exit sha512_ce_mod_fini(void)
116{
117 crypto_unregister_shashes(algs, ARRAY_SIZE(algs));
118}
119
120module_cpu_feature_match(SHA512, sha512_ce_mod_init);
121module_exit(sha512_ce_mod_fini);
122

source code of linux/arch/arm64/crypto/sha512-ce-glue.c