1 | /* SPDX-License-Identifier: GPL-2.0 */ |
2 | /* |
3 | * Common values for SHA-2 algorithms |
4 | */ |
5 | |
6 | #ifndef _CRYPTO_SHA2_H |
7 | #define _CRYPTO_SHA2_H |
8 | |
9 | #include <linux/types.h> |
10 | |
11 | #define SHA224_DIGEST_SIZE 28 |
12 | #define SHA224_BLOCK_SIZE 64 |
13 | |
14 | #define SHA256_DIGEST_SIZE 32 |
15 | #define SHA256_BLOCK_SIZE 64 |
16 | |
17 | #define SHA384_DIGEST_SIZE 48 |
18 | #define SHA384_BLOCK_SIZE 128 |
19 | |
20 | #define SHA512_DIGEST_SIZE 64 |
21 | #define SHA512_BLOCK_SIZE 128 |
22 | |
23 | #define SHA224_H0 0xc1059ed8UL |
24 | #define SHA224_H1 0x367cd507UL |
25 | #define SHA224_H2 0x3070dd17UL |
26 | #define SHA224_H3 0xf70e5939UL |
27 | #define SHA224_H4 0xffc00b31UL |
28 | #define SHA224_H5 0x68581511UL |
29 | #define SHA224_H6 0x64f98fa7UL |
30 | #define SHA224_H7 0xbefa4fa4UL |
31 | |
32 | #define SHA256_H0 0x6a09e667UL |
33 | #define SHA256_H1 0xbb67ae85UL |
34 | #define SHA256_H2 0x3c6ef372UL |
35 | #define SHA256_H3 0xa54ff53aUL |
36 | #define SHA256_H4 0x510e527fUL |
37 | #define SHA256_H5 0x9b05688cUL |
38 | #define SHA256_H6 0x1f83d9abUL |
39 | #define SHA256_H7 0x5be0cd19UL |
40 | |
41 | #define SHA384_H0 0xcbbb9d5dc1059ed8ULL |
42 | #define SHA384_H1 0x629a292a367cd507ULL |
43 | #define SHA384_H2 0x9159015a3070dd17ULL |
44 | #define SHA384_H3 0x152fecd8f70e5939ULL |
45 | #define SHA384_H4 0x67332667ffc00b31ULL |
46 | #define SHA384_H5 0x8eb44a8768581511ULL |
47 | #define SHA384_H6 0xdb0c2e0d64f98fa7ULL |
48 | #define SHA384_H7 0x47b5481dbefa4fa4ULL |
49 | |
50 | #define SHA512_H0 0x6a09e667f3bcc908ULL |
51 | #define SHA512_H1 0xbb67ae8584caa73bULL |
52 | #define SHA512_H2 0x3c6ef372fe94f82bULL |
53 | #define SHA512_H3 0xa54ff53a5f1d36f1ULL |
54 | #define SHA512_H4 0x510e527fade682d1ULL |
55 | #define SHA512_H5 0x9b05688c2b3e6c1fULL |
56 | #define SHA512_H6 0x1f83d9abfb41bd6bULL |
57 | #define SHA512_H7 0x5be0cd19137e2179ULL |
58 | |
59 | extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE]; |
60 | |
61 | extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE]; |
62 | |
63 | extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE]; |
64 | |
65 | extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE]; |
66 | |
67 | struct sha256_state { |
68 | u32 state[SHA256_DIGEST_SIZE / 4]; |
69 | u64 count; |
70 | u8 buf[SHA256_BLOCK_SIZE]; |
71 | }; |
72 | |
73 | struct sha512_state { |
74 | u64 state[SHA512_DIGEST_SIZE / 8]; |
75 | u64 count[2]; |
76 | u8 buf[SHA512_BLOCK_SIZE]; |
77 | }; |
78 | |
79 | struct shash_desc; |
80 | |
81 | extern int crypto_sha256_update(struct shash_desc *desc, const u8 *data, |
82 | unsigned int len); |
83 | |
84 | extern int crypto_sha256_finup(struct shash_desc *desc, const u8 *data, |
85 | unsigned int len, u8 *hash); |
86 | |
87 | extern int crypto_sha512_update(struct shash_desc *desc, const u8 *data, |
88 | unsigned int len); |
89 | |
90 | extern int crypto_sha512_finup(struct shash_desc *desc, const u8 *data, |
91 | unsigned int len, u8 *hash); |
92 | |
93 | /* |
94 | * Stand-alone implementation of the SHA256 algorithm. It is designed to |
95 | * have as little dependencies as possible so it can be used in the |
96 | * kexec_file purgatory. In other cases you should generally use the |
97 | * hash APIs from include/crypto/hash.h. Especially when hashing large |
98 | * amounts of data as those APIs may be hw-accelerated. |
99 | * |
100 | * For details see lib/crypto/sha256.c |
101 | */ |
102 | |
103 | static inline void sha256_init(struct sha256_state *sctx) |
104 | { |
105 | sctx->state[0] = SHA256_H0; |
106 | sctx->state[1] = SHA256_H1; |
107 | sctx->state[2] = SHA256_H2; |
108 | sctx->state[3] = SHA256_H3; |
109 | sctx->state[4] = SHA256_H4; |
110 | sctx->state[5] = SHA256_H5; |
111 | sctx->state[6] = SHA256_H6; |
112 | sctx->state[7] = SHA256_H7; |
113 | sctx->count = 0; |
114 | } |
115 | void sha256_update(struct sha256_state *sctx, const u8 *data, unsigned int len); |
116 | void sha256_final(struct sha256_state *sctx, u8 *out); |
117 | void sha256(const u8 *data, unsigned int len, u8 *out); |
118 | |
119 | static inline void sha224_init(struct sha256_state *sctx) |
120 | { |
121 | sctx->state[0] = SHA224_H0; |
122 | sctx->state[1] = SHA224_H1; |
123 | sctx->state[2] = SHA224_H2; |
124 | sctx->state[3] = SHA224_H3; |
125 | sctx->state[4] = SHA224_H4; |
126 | sctx->state[5] = SHA224_H5; |
127 | sctx->state[6] = SHA224_H6; |
128 | sctx->state[7] = SHA224_H7; |
129 | sctx->count = 0; |
130 | } |
131 | /* Simply use sha256_update as it is equivalent to sha224_update. */ |
132 | void sha224_final(struct sha256_state *sctx, u8 *out); |
133 | |
134 | #endif /* _CRYPTO_SHA2_H */ |
135 | |