^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) // SPDX-License-Identifier: GPL-2.0 OR MIT
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * This is an implementation of the BLAKE2s hash and PRF functions.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) * Information: https://blake2.net/
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) #include <crypto/internal/blake2s.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) #include <linux/types.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #include <linux/string.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) #include <linux/kernel.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) #include <linux/module.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) #include <linux/init.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) #include <linux/bug.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) #if IS_ENABLED(CONFIG_CRYPTO_ARCH_HAVE_LIB_BLAKE2S)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) # define blake2s_compress blake2s_compress_arch
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) #else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) # define blake2s_compress blake2s_compress_generic
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) void blake2s_update(struct blake2s_state *state, const u8 *in, size_t inlen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) __blake2s_update(state, in, inlen, blake2s_compress);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) EXPORT_SYMBOL(blake2s_update);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) void blake2s_final(struct blake2s_state *state, u8 *out)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) WARN_ON(IS_ENABLED(DEBUG) && !out);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) __blake2s_final(state, out, blake2s_compress);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) memzero_explicit(state, sizeof(*state));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) EXPORT_SYMBOL(blake2s_final);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) void blake2s256_hmac(u8 *out, const u8 *in, const u8 *key, const size_t inlen,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) const size_t keylen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) struct blake2s_state state;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) u8 x_key[BLAKE2S_BLOCK_SIZE] __aligned(__alignof__(u32)) = { 0 };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) u8 i_hash[BLAKE2S_HASH_SIZE] __aligned(__alignof__(u32));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) int i;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) if (keylen > BLAKE2S_BLOCK_SIZE) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) blake2s_init(&state, BLAKE2S_HASH_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) blake2s_update(&state, key, keylen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) blake2s_final(&state, x_key);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) } else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) memcpy(x_key, key, keylen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) for (i = 0; i < BLAKE2S_BLOCK_SIZE; ++i)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) x_key[i] ^= 0x36;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) blake2s_init(&state, BLAKE2S_HASH_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) blake2s_update(&state, x_key, BLAKE2S_BLOCK_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) blake2s_update(&state, in, inlen);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) blake2s_final(&state, i_hash);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) for (i = 0; i < BLAKE2S_BLOCK_SIZE; ++i)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) x_key[i] ^= 0x5c ^ 0x36;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) blake2s_init(&state, BLAKE2S_HASH_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) blake2s_update(&state, x_key, BLAKE2S_BLOCK_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) blake2s_update(&state, i_hash, BLAKE2S_HASH_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) blake2s_final(&state, i_hash);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) memcpy(out, i_hash, BLAKE2S_HASH_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) memzero_explicit(x_key, BLAKE2S_BLOCK_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) memzero_explicit(i_hash, BLAKE2S_HASH_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) EXPORT_SYMBOL(blake2s256_hmac);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) static int __init mod_init(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78) if (!IS_ENABLED(CONFIG_CRYPTO_MANAGER_DISABLE_TESTS) &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) WARN_ON(!blake2s_selftest()))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) return -ENODEV;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) static void __exit mod_exit(void)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) module_init(mod_init);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) module_exit(mod_exit);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) MODULE_LICENSE("GPL v2");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) MODULE_DESCRIPTION("BLAKE2s hash function");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) MODULE_AUTHOR("Jason A. Donenfeld <Jason@zx2c4.com>");