Blame view

kernel/linux-rt-4.4.41/arch/s390/crypto/sha_common.c 2.57 KB
5113f6f70   김현기   kernel add
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
  /*
   * Cryptographic API.
   *
   * s390 generic implementation of the SHA Secure Hash Algorithms.
   *
   * Copyright IBM Corp. 2007
   * Author(s): Jan Glauber (jang@de.ibm.com)
   *
   * This program is free software; you can redistribute it and/or modify it
   * under the terms of the GNU General Public License as published by the Free
   * Software Foundation; either version 2 of the License, or (at your option)
   * any later version.
   *
   */
  
  #include <crypto/internal/hash.h>
  #include <linux/module.h>
  #include "sha.h"
  #include "crypt_s390.h"
  
  int s390_sha_update(struct shash_desc *desc, const u8 *data, unsigned int len)
  {
  	struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
  	unsigned int bsize = crypto_shash_blocksize(desc->tfm);
  	unsigned int index;
  	int ret;
  
  	/* how much is already in the buffer? */
  	index = ctx->count & (bsize - 1);
  	ctx->count += len;
  
  	if ((index + len) < bsize)
  		goto store;
  
  	/* process one stored block */
  	if (index) {
  		memcpy(ctx->buf + index, data, bsize - index);
  		ret = crypt_s390_kimd(ctx->func, ctx->state, ctx->buf, bsize);
  		if (ret != bsize)
  			return -EIO;
  		data += bsize - index;
  		len -= bsize - index;
  		index = 0;
  	}
  
  	/* process as many blocks as possible */
  	if (len >= bsize) {
  		ret = crypt_s390_kimd(ctx->func, ctx->state, data,
  				      len & ~(bsize - 1));
  		if (ret != (len & ~(bsize - 1)))
  			return -EIO;
  		data += ret;
  		len -= ret;
  	}
  store:
  	if (len)
  		memcpy(ctx->buf + index , data, len);
  
  	return 0;
  }
  EXPORT_SYMBOL_GPL(s390_sha_update);
  
  int s390_sha_final(struct shash_desc *desc, u8 *out)
  {
  	struct s390_sha_ctx *ctx = shash_desc_ctx(desc);
  	unsigned int bsize = crypto_shash_blocksize(desc->tfm);
  	u64 bits;
  	unsigned int index, end, plen;
  	int ret;
  
  	/* SHA-512 uses 128 bit padding length */
  	plen = (bsize > SHA256_BLOCK_SIZE) ? 16 : 8;
  
  	/* must perform manual padding */
  	index = ctx->count & (bsize - 1);
  	end = (index < bsize - plen) ? bsize : (2 * bsize);
  
  	/* start pad with 1 */
  	ctx->buf[index] = 0x80;
  	index++;
  
  	/* pad with zeros */
  	memset(ctx->buf + index, 0x00, end - index - 8);
  
  	/*
  	 * Append message length. Well, SHA-512 wants a 128 bit length value,
  	 * nevertheless we use u64, should be enough for now...
  	 */
  	bits = ctx->count * 8;
  	memcpy(ctx->buf + end - 8, &bits, sizeof(bits));
  
  	ret = crypt_s390_kimd(ctx->func, ctx->state, ctx->buf, end);
  	if (ret != end)
  		return -EIO;
  
  	/* copy digest to out */
  	memcpy(out, ctx->state, crypto_shash_digestsize(desc->tfm));
  	/* wipe context */
  	memset(ctx, 0, sizeof *ctx);
  
  	return 0;
  }
  EXPORT_SYMBOL_GPL(s390_sha_final);
  
  MODULE_LICENSE("GPL");
  MODULE_DESCRIPTION("s390 SHA cipher common functions");