^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) /* SPDX-License-Identifier: GPL-2.0-only */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * sm3_base.h - core logic for SM3 implementations
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * Copyright (C) 2017 ARM Limited or its affiliates.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) * Written by Gilad Ben-Yossef <gilad@benyossef.com>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) #ifndef _CRYPTO_SM3_BASE_H
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) #define _CRYPTO_SM3_BASE_H
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) #include <crypto/internal/hash.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #include <crypto/sm3.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) #include <linux/crypto.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) #include <linux/module.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) #include <asm/unaligned.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) typedef void (sm3_block_fn)(struct sm3_state *sst, u8 const *src, int blocks);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) static inline int sm3_base_init(struct shash_desc *desc)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) struct sm3_state *sctx = shash_desc_ctx(desc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) sctx->state[0] = SM3_IVA;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) sctx->state[1] = SM3_IVB;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) sctx->state[2] = SM3_IVC;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) sctx->state[3] = SM3_IVD;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) sctx->state[4] = SM3_IVE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) sctx->state[5] = SM3_IVF;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) sctx->state[6] = SM3_IVG;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) sctx->state[7] = SM3_IVH;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) sctx->count = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) static inline int sm3_base_do_update(struct shash_desc *desc,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) const u8 *data,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) unsigned int len,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) sm3_block_fn *block_fn)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) struct sm3_state *sctx = shash_desc_ctx(desc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) unsigned int partial = sctx->count % SM3_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) sctx->count += len;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) if (unlikely((partial + len) >= SM3_BLOCK_SIZE)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) int blocks;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) if (partial) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) int p = SM3_BLOCK_SIZE - partial;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53) memcpy(sctx->buffer + partial, data, p);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) data += p;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) len -= p;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) block_fn(sctx, sctx->buffer, 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) blocks = len / SM3_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) len %= SM3_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) if (blocks) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) block_fn(sctx, data, blocks);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) data += blocks * SM3_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) partial = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) if (len)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) memcpy(sctx->buffer + partial, data, len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) static inline int sm3_base_do_finalize(struct shash_desc *desc,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) sm3_block_fn *block_fn)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78) const int bit_offset = SM3_BLOCK_SIZE - sizeof(__be64);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) struct sm3_state *sctx = shash_desc_ctx(desc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) __be64 *bits = (__be64 *)(sctx->buffer + bit_offset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) unsigned int partial = sctx->count % SM3_BLOCK_SIZE;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) sctx->buffer[partial++] = 0x80;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) if (partial > bit_offset) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) memset(sctx->buffer + partial, 0x0, SM3_BLOCK_SIZE - partial);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) partial = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) block_fn(sctx, sctx->buffer, 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) memset(sctx->buffer + partial, 0x0, bit_offset - partial);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) *bits = cpu_to_be64(sctx->count << 3);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) block_fn(sctx, sctx->buffer, 1);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98) static inline int sm3_base_finish(struct shash_desc *desc, u8 *out)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) struct sm3_state *sctx = shash_desc_ctx(desc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) __be32 *digest = (__be32 *)out;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) int i;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) for (i = 0; i < SM3_DIGEST_SIZE / sizeof(__be32); i++)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) put_unaligned_be32(sctx->state[i], digest++);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) *sctx = (struct sm3_state){};
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) #endif /* _CRYPTO_SM3_BASE_H */