^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) // SPDX-License-Identifier: (GPL-2.0-only OR Apache-2.0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * Generic implementation of the BLAKE2b digest algorithm. Based on the BLAKE2b
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) * reference implementation, but it has been heavily modified for use in the
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * kernel. The reference implementation was:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) * Copyright 2012, Samuel Neves <sneves@dei.uc.pt>. You may use this under
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) * the terms of the CC0, the OpenSSL Licence, or the Apache Public License
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) * 2.0, at your option. The terms of these licenses can be found at:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) * - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) * - OpenSSL license : https://www.openssl.org/source/license.html
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) * - Apache 2.0 : https://www.apache.org/licenses/LICENSE-2.0
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) * More information about BLAKE2 can be found at https://blake2.net.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) #include <asm/unaligned.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) #include <linux/module.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) #include <linux/kernel.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) #include <linux/bitops.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) #include <crypto/internal/blake2b.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) #include <crypto/internal/hash.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) static const u8 blake2b_sigma[12][16] = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) { 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) { 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) { 7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) { 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) { 2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) { 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) { 13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) { 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) { 10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) { 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3 }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) static void blake2b_increment_counter(struct blake2b_state *S, const u64 inc)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) S->t[0] += inc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) S->t[1] += (S->t[0] < inc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) #define G(r,i,a,b,c,d) \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) do { \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) a = a + b + m[blake2b_sigma[r][2*i+0]]; \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) d = ror64(d ^ a, 32); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) c = c + d; \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) b = ror64(b ^ c, 24); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) a = a + b + m[blake2b_sigma[r][2*i+1]]; \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53) d = ror64(d ^ a, 16); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) c = c + d; \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) b = ror64(b ^ c, 63); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) } while (0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) #define ROUND(r) \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) do { \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) G(r,0,v[ 0],v[ 4],v[ 8],v[12]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) G(r,1,v[ 1],v[ 5],v[ 9],v[13]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) G(r,2,v[ 2],v[ 6],v[10],v[14]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) G(r,3,v[ 3],v[ 7],v[11],v[15]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) G(r,4,v[ 0],v[ 5],v[10],v[15]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) G(r,5,v[ 1],v[ 6],v[11],v[12]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) G(r,6,v[ 2],v[ 7],v[ 8],v[13]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) G(r,7,v[ 3],v[ 4],v[ 9],v[14]); \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) } while (0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) static void blake2b_compress_one_generic(struct blake2b_state *S,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) const u8 block[BLAKE2B_BLOCK_SIZE])
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) u64 m[16];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) u64 v[16];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) size_t i;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) for (i = 0; i < 16; ++i)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78) m[i] = get_unaligned_le64(block + i * sizeof(m[i]));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) for (i = 0; i < 8; ++i)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) v[i] = S->h[i];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) v[ 8] = BLAKE2B_IV0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) v[ 9] = BLAKE2B_IV1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) v[10] = BLAKE2B_IV2;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) v[11] = BLAKE2B_IV3;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) v[12] = BLAKE2B_IV4 ^ S->t[0];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) v[13] = BLAKE2B_IV5 ^ S->t[1];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) v[14] = BLAKE2B_IV6 ^ S->f[0];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) v[15] = BLAKE2B_IV7 ^ S->f[1];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) ROUND(0);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) ROUND(1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94) ROUND(2);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) ROUND(3);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) ROUND(4);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97) ROUND(5);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98) ROUND(6);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) ROUND(7);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) ROUND(8);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) ROUND(9);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) ROUND(10);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) ROUND(11);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) #ifdef CONFIG_CC_IS_CLANG
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) #pragma nounroll /* https://bugs.llvm.org/show_bug.cgi?id=45803 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) for (i = 0; i < 8; ++i)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) S->h[i] = S->h[i] ^ v[i] ^ v[i + 8];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) #undef G
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) #undef ROUND
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) void blake2b_compress_generic(struct blake2b_state *state,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) const u8 *block, size_t nblocks, u32 inc)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) do {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) blake2b_increment_counter(state, inc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) blake2b_compress_one_generic(state, block);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) block += BLAKE2B_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) } while (--nblocks);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) EXPORT_SYMBOL(blake2b_compress_generic);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) static int crypto_blake2b_update_generic(struct shash_desc *desc,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) const u8 *in, unsigned int inlen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) return crypto_blake2b_update(desc, in, inlen, blake2b_compress_generic);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) static int crypto_blake2b_final_generic(struct shash_desc *desc, u8 *out)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) return crypto_blake2b_final(desc, out, blake2b_compress_generic);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) #define BLAKE2B_ALG(name, driver_name, digest_size) \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) { \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) .base.cra_name = name, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) .base.cra_driver_name = driver_name, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140) .base.cra_priority = 100, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) .base.cra_flags = CRYPTO_ALG_OPTIONAL_KEY, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) .base.cra_blocksize = BLAKE2B_BLOCK_SIZE, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) .base.cra_ctxsize = sizeof(struct blake2b_tfm_ctx), \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) .base.cra_module = THIS_MODULE, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) .digestsize = digest_size, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) .setkey = crypto_blake2b_setkey, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) .init = crypto_blake2b_init, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) .update = crypto_blake2b_update_generic, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) .final = crypto_blake2b_final_generic, \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) .descsize = sizeof(struct blake2b_state), \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) static struct shash_alg blake2b_algs[] = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) BLAKE2B_ALG("blake2b-160", "blake2b-160-generic",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) BLAKE2B_160_HASH_SIZE),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) BLAKE2B_ALG("blake2b-256", "blake2b-256-generic",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) BLAKE2B_256_HASH_SIZE),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) BLAKE2B_ALG("blake2b-384", "blake2b-384-generic",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) BLAKE2B_384_HASH_SIZE),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) BLAKE2B_ALG("blake2b-512", "blake2b-512-generic",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) BLAKE2B_512_HASH_SIZE),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) static int __init blake2b_mod_init(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) return crypto_register_shashes(blake2b_algs, ARRAY_SIZE(blake2b_algs));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) static void __exit blake2b_mod_fini(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) crypto_unregister_shashes(blake2b_algs, ARRAY_SIZE(blake2b_algs));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) subsys_initcall(blake2b_mod_init);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) module_exit(blake2b_mod_fini);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) MODULE_AUTHOR("David Sterba <kdave@kernel.org>");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) MODULE_DESCRIPTION("BLAKE2b generic implementation");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) MODULE_LICENSE("GPL");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) MODULE_ALIAS_CRYPTO("blake2b-160");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) MODULE_ALIAS_CRYPTO("blake2b-160-generic");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) MODULE_ALIAS_CRYPTO("blake2b-256");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) MODULE_ALIAS_CRYPTO("blake2b-256-generic");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) MODULE_ALIAS_CRYPTO("blake2b-384");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) MODULE_ALIAS_CRYPTO("blake2b-384-generic");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) MODULE_ALIAS_CRYPTO("blake2b-512");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) MODULE_ALIAS_CRYPTO("blake2b-512-generic");
Orange Pi5 kernel
Deprecated Linux kernel 5.10.110 for OrangePi 5/5B/5+ boards
3 Commits
0 Branches
0 Tags