blob: 5c2132c7190095bc941dbd2b335234d8d9e12f22 [file] [log] [blame]
Greg Kroah-Hartmanb2441312017-11-01 15:07:57 +01001/* SPDX-License-Identifier: GPL-2.0 */
Jan Glauber5265eeb2007-10-09 22:43:13 +08002/*
3 * Common values for SHA algorithms
4 */
5
6#ifndef _CRYPTO_SHA_H
7#define _CRYPTO_SHA_H
8
Herbert Xue2a7ce42009-07-09 21:27:13 +08009#include <linux/types.h>
10
Jan Glauber5265eeb2007-10-09 22:43:13 +080011#define SHA1_DIGEST_SIZE 20
12#define SHA1_BLOCK_SIZE 64
13
Jonathan Lynchcd12fb92007-11-10 20:08:25 +080014#define SHA224_DIGEST_SIZE 28
15#define SHA224_BLOCK_SIZE 64
16
Jan Glauber5265eeb2007-10-09 22:43:13 +080017#define SHA256_DIGEST_SIZE 32
18#define SHA256_BLOCK_SIZE 64
19
20#define SHA384_DIGEST_SIZE 48
21#define SHA384_BLOCK_SIZE 128
22
23#define SHA512_DIGEST_SIZE 64
24#define SHA512_BLOCK_SIZE 128
25
26#define SHA1_H0 0x67452301UL
27#define SHA1_H1 0xefcdab89UL
28#define SHA1_H2 0x98badcfeUL
29#define SHA1_H3 0x10325476UL
30#define SHA1_H4 0xc3d2e1f0UL
31
Jonathan Lynchcd12fb92007-11-10 20:08:25 +080032#define SHA224_H0 0xc1059ed8UL
33#define SHA224_H1 0x367cd507UL
34#define SHA224_H2 0x3070dd17UL
35#define SHA224_H3 0xf70e5939UL
36#define SHA224_H4 0xffc00b31UL
37#define SHA224_H5 0x68581511UL
38#define SHA224_H6 0x64f98fa7UL
39#define SHA224_H7 0xbefa4fa4UL
40
Jan Glauber5265eeb2007-10-09 22:43:13 +080041#define SHA256_H0 0x6a09e667UL
42#define SHA256_H1 0xbb67ae85UL
43#define SHA256_H2 0x3c6ef372UL
44#define SHA256_H3 0xa54ff53aUL
45#define SHA256_H4 0x510e527fUL
46#define SHA256_H5 0x9b05688cUL
47#define SHA256_H6 0x1f83d9abUL
48#define SHA256_H7 0x5be0cd19UL
49
50#define SHA384_H0 0xcbbb9d5dc1059ed8ULL
51#define SHA384_H1 0x629a292a367cd507ULL
52#define SHA384_H2 0x9159015a3070dd17ULL
53#define SHA384_H3 0x152fecd8f70e5939ULL
54#define SHA384_H4 0x67332667ffc00b31ULL
55#define SHA384_H5 0x8eb44a8768581511ULL
56#define SHA384_H6 0xdb0c2e0d64f98fa7ULL
57#define SHA384_H7 0x47b5481dbefa4fa4ULL
58
59#define SHA512_H0 0x6a09e667f3bcc908ULL
60#define SHA512_H1 0xbb67ae8584caa73bULL
61#define SHA512_H2 0x3c6ef372fe94f82bULL
62#define SHA512_H3 0xa54ff53a5f1d36f1ULL
63#define SHA512_H4 0x510e527fade682d1ULL
64#define SHA512_H5 0x9b05688c2b3e6c1fULL
65#define SHA512_H6 0x1f83d9abfb41bd6bULL
66#define SHA512_H7 0x5be0cd19137e2179ULL
67
LABBE Corentin0c4c78d2015-12-17 13:45:39 +010068extern const u8 sha1_zero_message_hash[SHA1_DIGEST_SIZE];
69
70extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE];
71
72extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE];
73
Antoine Tenart26f71202018-05-29 14:13:49 +020074extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE];
75
Antoine Tenart30c217e2018-05-29 14:13:45 +020076extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE];
77
Herbert Xue2a7ce42009-07-09 21:27:13 +080078struct sha1_state {
Herbert Xue2a7ce42009-07-09 21:27:13 +080079 u32 state[SHA1_DIGEST_SIZE / 4];
Ard Biesheuvelc4d5b9f2015-04-09 12:55:33 +020080 u64 count;
Herbert Xue2a7ce42009-07-09 21:27:13 +080081 u8 buffer[SHA1_BLOCK_SIZE];
82};
83
Herbert Xu9b2fda72009-07-10 13:00:27 +080084struct sha256_state {
Herbert Xu9b2fda72009-07-10 13:00:27 +080085 u32 state[SHA256_DIGEST_SIZE / 4];
Ard Biesheuvel11b8d5e2015-04-09 12:55:34 +020086 u64 count;
Herbert Xu9b2fda72009-07-10 13:00:27 +080087 u8 buf[SHA256_BLOCK_SIZE];
88};
89
Herbert Xu1f38ad82009-07-22 11:48:18 +080090struct sha512_state {
Herbert Xu13887ed2009-07-22 12:22:43 +080091 u64 state[SHA512_DIGEST_SIZE / 8];
Ard Biesheuvelb84a2a0b2015-04-09 12:55:35 +020092 u64 count[2];
Herbert Xu13887ed2009-07-22 12:22:43 +080093 u8 buf[SHA512_BLOCK_SIZE];
Herbert Xu1f38ad82009-07-22 11:48:18 +080094};
95
Herbert Xu4619b6b2011-08-16 14:03:05 +080096struct shash_desc;
97
Mathias Krause7c390172011-08-04 20:19:24 +020098extern int crypto_sha1_update(struct shash_desc *desc, const u8 *data,
99 unsigned int len);
100
Ard Biesheuvel7c71f0f2015-04-09 12:55:36 +0200101extern int crypto_sha1_finup(struct shash_desc *desc, const u8 *data,
102 unsigned int len, u8 *hash);
103
Tim Chen35d2c9d2013-03-26 13:58:49 -0700104extern int crypto_sha256_update(struct shash_desc *desc, const u8 *data,
105 unsigned int len);
Tim Chenbf70fa92013-03-26 13:59:25 -0700106
Ard Biesheuvela2e5ba42015-04-09 12:55:37 +0200107extern int crypto_sha256_finup(struct shash_desc *desc, const u8 *data,
108 unsigned int len, u8 *hash);
109
Tim Chenbf70fa92013-03-26 13:59:25 -0700110extern int crypto_sha512_update(struct shash_desc *desc, const u8 *data,
111 unsigned int len);
Ard Biesheuvelca142582015-04-09 12:55:38 +0200112
113extern int crypto_sha512_finup(struct shash_desc *desc, const u8 *data,
114 unsigned int len, u8 *hash);
Hans de Goede34d62452019-09-01 22:35:31 +0200115
116/*
117 * Stand-alone implementation of the SHA256 algorithm. It is designed to
118 * have as little dependencies as possible so it can be used in the
119 * kexec_file purgatory. In other cases you should generally use the
120 * hash APIs from include/crypto/hash.h. Especially when hashing large
121 * amounts of data as those APIs may be hw-accelerated.
122 *
123 * For details see lib/crypto/sha256.c
124 */
125
Hans de Goedec75c66b2019-09-01 22:35:32 +0200126static inline int sha256_init(struct sha256_state *sctx)
127{
128 sctx->state[0] = SHA256_H0;
129 sctx->state[1] = SHA256_H1;
130 sctx->state[2] = SHA256_H2;
131 sctx->state[3] = SHA256_H3;
132 sctx->state[4] = SHA256_H4;
133 sctx->state[5] = SHA256_H5;
134 sctx->state[6] = SHA256_H6;
135 sctx->state[7] = SHA256_H7;
136 sctx->count = 0;
137
138 return 0;
139}
Hans de Goede34d62452019-09-01 22:35:31 +0200140extern int sha256_update(struct sha256_state *sctx, const u8 *input,
141 unsigned int length);
142extern int sha256_final(struct sha256_state *sctx, u8 *hash);
143
Hans de Goedec75c66b2019-09-01 22:35:32 +0200144static inline int sha224_init(struct sha256_state *sctx)
145{
146 sctx->state[0] = SHA224_H0;
147 sctx->state[1] = SHA224_H1;
148 sctx->state[2] = SHA224_H2;
149 sctx->state[3] = SHA224_H3;
150 sctx->state[4] = SHA224_H4;
151 sctx->state[5] = SHA224_H5;
152 sctx->state[6] = SHA224_H6;
153 sctx->state[7] = SHA224_H7;
154 sctx->count = 0;
155
156 return 0;
157}
Hans de Goede34d62452019-09-01 22:35:31 +0200158extern int sha224_update(struct sha256_state *sctx, const u8 *input,
159 unsigned int length);
160extern int sha224_final(struct sha256_state *sctx, u8 *hash);
161
Jan Glauber5265eeb2007-10-09 22:43:13 +0800162#endif