1/* SPDX-License-Identifier: GPL-2.0 */
2/*
3 * Common values for SHA-2 algorithms
4 */
5
6#ifndef _CRYPTO_SHA2_H
7#define _CRYPTO_SHA2_H
8
9#include <linux/types.h>
10
11#define SHA224_DIGEST_SIZE 28
12#define SHA224_BLOCK_SIZE 64
13
14#define SHA256_DIGEST_SIZE 32
15#define SHA256_BLOCK_SIZE 64
16
17#define SHA384_DIGEST_SIZE 48
18#define SHA384_BLOCK_SIZE 128
19
20#define SHA512_DIGEST_SIZE 64
21#define SHA512_BLOCK_SIZE 128
22
23#define SHA224_H0 0xc1059ed8UL
24#define SHA224_H1 0x367cd507UL
25#define SHA224_H2 0x3070dd17UL
26#define SHA224_H3 0xf70e5939UL
27#define SHA224_H4 0xffc00b31UL
28#define SHA224_H5 0x68581511UL
29#define SHA224_H6 0x64f98fa7UL
30#define SHA224_H7 0xbefa4fa4UL
31
32#define SHA256_H0 0x6a09e667UL
33#define SHA256_H1 0xbb67ae85UL
34#define SHA256_H2 0x3c6ef372UL
35#define SHA256_H3 0xa54ff53aUL
36#define SHA256_H4 0x510e527fUL
37#define SHA256_H5 0x9b05688cUL
38#define SHA256_H6 0x1f83d9abUL
39#define SHA256_H7 0x5be0cd19UL
40
41#define SHA384_H0 0xcbbb9d5dc1059ed8ULL
42#define SHA384_H1 0x629a292a367cd507ULL
43#define SHA384_H2 0x9159015a3070dd17ULL
44#define SHA384_H3 0x152fecd8f70e5939ULL
45#define SHA384_H4 0x67332667ffc00b31ULL
46#define SHA384_H5 0x8eb44a8768581511ULL
47#define SHA384_H6 0xdb0c2e0d64f98fa7ULL
48#define SHA384_H7 0x47b5481dbefa4fa4ULL
49
50#define SHA512_H0 0x6a09e667f3bcc908ULL
51#define SHA512_H1 0xbb67ae8584caa73bULL
52#define SHA512_H2 0x3c6ef372fe94f82bULL
53#define SHA512_H3 0xa54ff53a5f1d36f1ULL
54#define SHA512_H4 0x510e527fade682d1ULL
55#define SHA512_H5 0x9b05688c2b3e6c1fULL
56#define SHA512_H6 0x1f83d9abfb41bd6bULL
57#define SHA512_H7 0x5be0cd19137e2179ULL
58
59extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE];
60
61extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE];
62
63extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE];
64
65extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE];
66
67struct sha256_state {
68 u32 state[SHA256_DIGEST_SIZE / 4];
69 u64 count;
70 u8 buf[SHA256_BLOCK_SIZE];
71};
72
73struct sha512_state {
74 u64 state[SHA512_DIGEST_SIZE / 8];
75 u64 count[2];
76 u8 buf[SHA512_BLOCK_SIZE];
77};
78
79struct shash_desc;
80
81extern int crypto_sha256_update(struct shash_desc *desc, const u8 *data,
82 unsigned int len);
83
84extern int crypto_sha256_finup(struct shash_desc *desc, const u8 *data,
85 unsigned int len, u8 *hash);
86
87extern int crypto_sha512_update(struct shash_desc *desc, const u8 *data,
88 unsigned int len);
89
90extern int crypto_sha512_finup(struct shash_desc *desc, const u8 *data,
91 unsigned int len, u8 *hash);
92
93/*
94 * Stand-alone implementation of the SHA256 algorithm. It is designed to
95 * have as little dependencies as possible so it can be used in the
96 * kexec_file purgatory. In other cases you should generally use the
97 * hash APIs from include/crypto/hash.h. Especially when hashing large
98 * amounts of data as those APIs may be hw-accelerated.
99 *
100 * For details see lib/crypto/sha256.c
101 */
102
103static inline void sha256_init(struct sha256_state *sctx)
104{
105 sctx->state[0] = SHA256_H0;
106 sctx->state[1] = SHA256_H1;
107 sctx->state[2] = SHA256_H2;
108 sctx->state[3] = SHA256_H3;
109 sctx->state[4] = SHA256_H4;
110 sctx->state[5] = SHA256_H5;
111 sctx->state[6] = SHA256_H6;
112 sctx->state[7] = SHA256_H7;
113 sctx->count = 0;
114}
115void sha256_update(struct sha256_state *sctx, const u8 *data, unsigned int len);
116void sha256_final(struct sha256_state *sctx, u8 *out);
117void sha256(const u8 *data, unsigned int len, u8 *out);
118
119static inline void sha224_init(struct sha256_state *sctx)
120{
121 sctx->state[0] = SHA224_H0;
122 sctx->state[1] = SHA224_H1;
123 sctx->state[2] = SHA224_H2;
124 sctx->state[3] = SHA224_H3;
125 sctx->state[4] = SHA224_H4;
126 sctx->state[5] = SHA224_H5;
127 sctx->state[6] = SHA224_H6;
128 sctx->state[7] = SHA224_H7;
129 sctx->count = 0;
130}
131/* Simply use sha256_update as it is equivalent to sha224_update. */
132void sha224_final(struct sha256_state *sctx, u8 *out);
133
134#endif /* _CRYPTO_SHA2_H */
135

source code of linux/include/crypto/sha2.h