Orange Pi5 kernel

^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   1) // SPDX-License-Identifier: GPL-2.0
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   3)  * ARM NEON accelerated ChaCha and XChaCha stream ciphers,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   4)  * including ChaCha20 (RFC7539)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   5)  *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   6)  * Copyright (C) 2016-2019 Linaro, Ltd. <ard.biesheuvel@linaro.org>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   7)  * Copyright (C) 2015 Martin Willi
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   8)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   9) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  10) #include <crypto/algapi.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  11) #include <crypto/internal/chacha.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  12) #include <crypto/internal/simd.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  13) #include <crypto/internal/skcipher.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  14) #include <linux/jump_label.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  15) #include <linux/kernel.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  16) #include <linux/module.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  17) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  18) #include <asm/cputype.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  19) #include <asm/hwcap.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  20) #include <asm/neon.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  21) #include <asm/simd.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  22) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  23) asmlinkage void chacha_block_xor_neon(const u32 *state, u8 *dst, const u8 *src,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  24) 				      int nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  25) asmlinkage void chacha_4block_xor_neon(const u32 *state, u8 *dst, const u8 *src,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  26) 				       int nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  27) asmlinkage void hchacha_block_arm(const u32 *state, u32 *out, int nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  28) asmlinkage void hchacha_block_neon(const u32 *state, u32 *out, int nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  29) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  30) asmlinkage void chacha_doarm(u8 *dst, const u8 *src, unsigned int bytes,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  31) 			     const u32 *state, int nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  32) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  33) static __ro_after_init DEFINE_STATIC_KEY_FALSE(use_neon);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  34) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  35) static inline bool neon_usable(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  36) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  37) 	return static_branch_likely(&use_neon) && crypto_simd_usable();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  38) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  39) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  40) static void chacha_doneon(u32 *state, u8 *dst, const u8 *src,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  41) 			  unsigned int bytes, int nrounds)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  42) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  43) 	u8 buf[CHACHA_BLOCK_SIZE];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  44) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  45) 	while (bytes >= CHACHA_BLOCK_SIZE * 4) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  46) 		chacha_4block_xor_neon(state, dst, src, nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  47) 		bytes -= CHACHA_BLOCK_SIZE * 4;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  48) 		src += CHACHA_BLOCK_SIZE * 4;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  49) 		dst += CHACHA_BLOCK_SIZE * 4;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  50) 		state[12] += 4;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  51) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  52) 	while (bytes >= CHACHA_BLOCK_SIZE) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  53) 		chacha_block_xor_neon(state, dst, src, nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  54) 		bytes -= CHACHA_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  55) 		src += CHACHA_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  56) 		dst += CHACHA_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  57) 		state[12]++;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  58) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  59) 	if (bytes) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  60) 		memcpy(buf, src, bytes);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  61) 		chacha_block_xor_neon(state, buf, buf, nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  62) 		memcpy(dst, buf, bytes);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  63) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  64) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  65) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  66) void hchacha_block_arch(const u32 *state, u32 *stream, int nrounds)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  67) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  68) 	if (!IS_ENABLED(CONFIG_KERNEL_MODE_NEON) || !neon_usable()) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  69) 		hchacha_block_arm(state, stream, nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  70) 	} else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  71) 		kernel_neon_begin();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  72) 		hchacha_block_neon(state, stream, nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  73) 		kernel_neon_end();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  74) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  75) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  76) EXPORT_SYMBOL(hchacha_block_arch);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  77) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  78) void chacha_init_arch(u32 *state, const u32 *key, const u8 *iv)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  79) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  80) 	chacha_init_generic(state, key, iv);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  81) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  82) EXPORT_SYMBOL(chacha_init_arch);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  83) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  84) void chacha_crypt_arch(u32 *state, u8 *dst, const u8 *src, unsigned int bytes,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  85) 		       int nrounds)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  86) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  87) 	if (!IS_ENABLED(CONFIG_KERNEL_MODE_NEON) || !neon_usable() ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  88) 	    bytes <= CHACHA_BLOCK_SIZE) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  89) 		chacha_doarm(dst, src, bytes, state, nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  90) 		state[12] += DIV_ROUND_UP(bytes, CHACHA_BLOCK_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  91) 		return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  92) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  93) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  94) 	do {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  95) 		unsigned int todo = min_t(unsigned int, bytes, SZ_4K);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  96) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  97) 		kernel_neon_begin();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  98) 		chacha_doneon(state, dst, src, todo, nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  99) 		kernel_neon_end();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) 		bytes -= todo;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) 		src += todo;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) 		dst += todo;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) 	} while (bytes);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) EXPORT_SYMBOL(chacha_crypt_arch);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) static int chacha_stream_xor(struct skcipher_request *req,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) 			     const struct chacha_ctx *ctx, const u8 *iv,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) 			     bool neon)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) 	struct skcipher_walk walk;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) 	u32 state[16];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) 	int err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) 	err = skcipher_walk_virt(&walk, req, false);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) 	chacha_init_generic(state, ctx->key, iv);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) 	while (walk.nbytes > 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) 		unsigned int nbytes = walk.nbytes;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) 		if (nbytes < walk.total)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) 			nbytes = round_down(nbytes, walk.stride);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) 		if (!IS_ENABLED(CONFIG_KERNEL_MODE_NEON) || !neon) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) 			chacha_doarm(walk.dst.virt.addr, walk.src.virt.addr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) 				     nbytes, state, ctx->nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) 			state[12] += DIV_ROUND_UP(nbytes, CHACHA_BLOCK_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) 		} else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) 			kernel_neon_begin();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) 			chacha_doneon(state, walk.dst.virt.addr,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) 				      walk.src.virt.addr, nbytes, ctx->nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) 			kernel_neon_end();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) 		err = skcipher_walk_done(&walk, walk.nbytes - nbytes);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) 	return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) static int do_chacha(struct skcipher_request *req, bool neon)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) 	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) 	struct chacha_ctx *ctx = crypto_skcipher_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) 	return chacha_stream_xor(req, ctx, req->iv, neon);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) static int chacha_arm(struct skcipher_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) 	return do_chacha(req, false);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) static int chacha_neon(struct skcipher_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) 	return do_chacha(req, neon_usable());
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) static int do_xchacha(struct skcipher_request *req, bool neon)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) 	struct crypto_skcipher *tfm = crypto_skcipher_reqtfm(req);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) 	struct chacha_ctx *ctx = crypto_skcipher_ctx(tfm);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) 	struct chacha_ctx subctx;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) 	u32 state[16];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) 	u8 real_iv[16];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) 	chacha_init_generic(state, ctx->key, req->iv);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) 	if (!IS_ENABLED(CONFIG_KERNEL_MODE_NEON) || !neon) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) 		hchacha_block_arm(state, subctx.key, ctx->nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) 	} else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) 		kernel_neon_begin();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) 		hchacha_block_neon(state, subctx.key, ctx->nrounds);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) 		kernel_neon_end();
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) 	subctx.nrounds = ctx->nrounds;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) 	memcpy(&real_iv[0], req->iv + 24, 8);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) 	memcpy(&real_iv[8], req->iv + 16, 8);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) 	return chacha_stream_xor(req, &subctx, real_iv, neon);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) static int xchacha_arm(struct skcipher_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) 	return do_xchacha(req, false);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) static int xchacha_neon(struct skcipher_request *req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) 	return do_xchacha(req, neon_usable());
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194) static struct skcipher_alg arm_algs[] = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) 	{
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196) 		.base.cra_name		= "chacha20",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) 		.base.cra_driver_name	= "chacha20-arm",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) 		.base.cra_priority	= 200,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199) 		.base.cra_blocksize	= 1,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) 		.base.cra_ctxsize	= sizeof(struct chacha_ctx),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) 		.base.cra_module	= THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) 		.min_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) 		.max_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205) 		.ivsize			= CHACHA_IV_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206) 		.chunksize		= CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207) 		.setkey			= chacha20_setkey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) 		.encrypt		= chacha_arm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) 		.decrypt		= chacha_arm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) 	}, {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211) 		.base.cra_name		= "xchacha20",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) 		.base.cra_driver_name	= "xchacha20-arm",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) 		.base.cra_priority	= 200,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) 		.base.cra_blocksize	= 1,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) 		.base.cra_ctxsize	= sizeof(struct chacha_ctx),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) 		.base.cra_module	= THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) 		.min_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) 		.max_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) 		.ivsize			= XCHACHA_IV_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) 		.chunksize		= CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222) 		.setkey			= chacha20_setkey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) 		.encrypt		= xchacha_arm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) 		.decrypt		= xchacha_arm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) 	}, {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) 		.base.cra_name		= "xchacha12",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227) 		.base.cra_driver_name	= "xchacha12-arm",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) 		.base.cra_priority	= 200,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229) 		.base.cra_blocksize	= 1,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230) 		.base.cra_ctxsize	= sizeof(struct chacha_ctx),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231) 		.base.cra_module	= THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233) 		.min_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234) 		.max_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) 		.ivsize			= XCHACHA_IV_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) 		.chunksize		= CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) 		.setkey			= chacha12_setkey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238) 		.encrypt		= xchacha_arm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) 		.decrypt		= xchacha_arm,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240) 	},
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) static struct skcipher_alg neon_algs[] = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244) 	{
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) 		.base.cra_name		= "chacha20",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) 		.base.cra_driver_name	= "chacha20-neon",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) 		.base.cra_priority	= 300,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248) 		.base.cra_blocksize	= 1,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) 		.base.cra_ctxsize	= sizeof(struct chacha_ctx),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) 		.base.cra_module	= THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) 		.min_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) 		.max_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254) 		.ivsize			= CHACHA_IV_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255) 		.chunksize		= CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) 		.walksize		= 4 * CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257) 		.setkey			= chacha20_setkey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) 		.encrypt		= chacha_neon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259) 		.decrypt		= chacha_neon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 260) 	}, {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 261) 		.base.cra_name		= "xchacha20",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 262) 		.base.cra_driver_name	= "xchacha20-neon",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 263) 		.base.cra_priority	= 300,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 264) 		.base.cra_blocksize	= 1,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 265) 		.base.cra_ctxsize	= sizeof(struct chacha_ctx),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 266) 		.base.cra_module	= THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 267) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 268) 		.min_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 269) 		.max_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 270) 		.ivsize			= XCHACHA_IV_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 271) 		.chunksize		= CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 272) 		.walksize		= 4 * CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 273) 		.setkey			= chacha20_setkey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 274) 		.encrypt		= xchacha_neon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 275) 		.decrypt		= xchacha_neon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 276) 	}, {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 277) 		.base.cra_name		= "xchacha12",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 278) 		.base.cra_driver_name	= "xchacha12-neon",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 279) 		.base.cra_priority	= 300,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 280) 		.base.cra_blocksize	= 1,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 281) 		.base.cra_ctxsize	= sizeof(struct chacha_ctx),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 282) 		.base.cra_module	= THIS_MODULE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 283) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 284) 		.min_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 285) 		.max_keysize		= CHACHA_KEY_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 286) 		.ivsize			= XCHACHA_IV_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 287) 		.chunksize		= CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 288) 		.walksize		= 4 * CHACHA_BLOCK_SIZE,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 289) 		.setkey			= chacha12_setkey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 290) 		.encrypt		= xchacha_neon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 291) 		.decrypt		= xchacha_neon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 292) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 293) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 294) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 295) static int __init chacha_simd_mod_init(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 296) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 297) 	int err = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 298) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 299) 	if (IS_REACHABLE(CONFIG_CRYPTO_SKCIPHER)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 300) 		err = crypto_register_skciphers(arm_algs, ARRAY_SIZE(arm_algs));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 301) 		if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 302) 			return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 303) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 304) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 305) 	if (IS_ENABLED(CONFIG_KERNEL_MODE_NEON) && (elf_hwcap & HWCAP_NEON)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 306) 		int i;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 307) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 308) 		switch (read_cpuid_part()) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 309) 		case ARM_CPU_PART_CORTEX_A7:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 310) 		case ARM_CPU_PART_CORTEX_A5:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 311) 			/*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 312) 			 * The Cortex-A7 and Cortex-A5 do not perform well with
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 313) 			 * the NEON implementation but do incredibly with the
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 314) 			 * scalar one and use less power.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 315) 			 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 316) 			for (i = 0; i < ARRAY_SIZE(neon_algs); i++)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 317) 				neon_algs[i].base.cra_priority = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 318) 			break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 319) 		default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 320) 			static_branch_enable(&use_neon);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 321) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 322) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 323) 		if (IS_REACHABLE(CONFIG_CRYPTO_SKCIPHER)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 324) 			err = crypto_register_skciphers(neon_algs, ARRAY_SIZE(neon_algs));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 325) 			if (err)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 326) 				crypto_unregister_skciphers(arm_algs, ARRAY_SIZE(arm_algs));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 327) 		}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 328) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 329) 	return err;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 330) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 331) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 332) static void __exit chacha_simd_mod_fini(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 333) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 334) 	if (IS_REACHABLE(CONFIG_CRYPTO_SKCIPHER)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 335) 		crypto_unregister_skciphers(arm_algs, ARRAY_SIZE(arm_algs));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 336) 		if (IS_ENABLED(CONFIG_KERNEL_MODE_NEON) && (elf_hwcap & HWCAP_NEON))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 337) 			crypto_unregister_skciphers(neon_algs, ARRAY_SIZE(neon_algs));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 338) 	}
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 339) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 340) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 341) module_init(chacha_simd_mod_init);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 342) module_exit(chacha_simd_mod_fini);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 343) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 344) MODULE_DESCRIPTION("ChaCha and XChaCha stream ciphers (scalar and NEON accelerated)");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 345) MODULE_AUTHOR("Ard Biesheuvel <ard.biesheuvel@linaro.org>");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 346) MODULE_LICENSE("GPL v2");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 347) MODULE_ALIAS_CRYPTO("chacha20");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 348) MODULE_ALIAS_CRYPTO("chacha20-arm");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 349) MODULE_ALIAS_CRYPTO("xchacha20");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 350) MODULE_ALIAS_CRYPTO("xchacha20-arm");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 351) MODULE_ALIAS_CRYPTO("xchacha12");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 352) MODULE_ALIAS_CRYPTO("xchacha12-arm");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 353) #ifdef CONFIG_KERNEL_MODE_NEON
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 354) MODULE_ALIAS_CRYPTO("chacha20-neon");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 355) MODULE_ALIAS_CRYPTO("xchacha20-neon");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 356) MODULE_ALIAS_CRYPTO("xchacha12-neon");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 357) #endif