1// SPDX-License-Identifier: GPL-2.0-or-later 2/* 3 * SHA-512 and SHA-384 using the RISC-V vector crypto extensions 4 * 5 * Copyright (C) 2023 VRULL GmbH 6 * Author: Heiko Stuebner <heiko.stuebner@vrull.eu> 7 * 8 * Copyright (C) 2023 SiFive, Inc. 9 * Author: Jerry Shih <jerry.shih@sifive.com> 10 */ 11 12#include <asm/simd.h> 13#include <asm/vector.h> 14#include <crypto/internal/hash.h> 15#include <crypto/internal/simd.h> 16#include <crypto/sha512_base.h> 17#include <linux/linkage.h> 18#include <linux/module.h> 19 20/* 21 * Note: the asm function only uses the 'state' field of struct sha512_state. 22 * It is assumed to be the first field. 23 */ 24asmlinkage void sha512_transform_zvknhb_zvkb( 25 struct sha512_state *state, const u8 *data, int num_blocks); 26 27static int riscv64_sha512_update(struct shash_desc *desc, const u8 *data, 28 unsigned int len) 29{ 30 /* 31 * Ensure struct sha512_state begins directly with the SHA-512 32 * 512-bit internal state, as this is what the asm function expects. 33 */ 34 BUILD_BUG_ON(offsetof(struct sha512_state, state) != 0); 35 36 if (crypto_simd_usable()) { 37 kernel_vector_begin(); 38 sha512_base_do_update(desc, data, len, 39 sha512_transform_zvknhb_zvkb); 40 kernel_vector_end(); 41 } else { 42 crypto_sha512_update(desc, data, len); 43 } 44 return 0; 45} 46 47static int riscv64_sha512_finup(struct shash_desc *desc, const u8 *data, 48 unsigned int len, u8 *out) 49{ 50 if (crypto_simd_usable()) { 51 kernel_vector_begin(); 52 if (len) 53 sha512_base_do_update(desc, data, len, 54 sha512_transform_zvknhb_zvkb); 55 sha512_base_do_finalize(desc, sha512_transform_zvknhb_zvkb); 56 kernel_vector_end(); 57 58 return sha512_base_finish(desc, out); 59 } 60 61 return crypto_sha512_finup(desc, data, len, out); 62} 63 64static int riscv64_sha512_final(struct shash_desc *desc, u8 *out) 65{ 66 return riscv64_sha512_finup(desc, NULL, 0, out); 67} 68 69static int riscv64_sha512_digest(struct shash_desc *desc, const u8 *data, 70 unsigned int len, u8 *out) 71{ 72 return sha512_base_init(desc) ?: 73 riscv64_sha512_finup(desc, data, len, out); 74} 75 76static struct shash_alg riscv64_sha512_algs[] = { 77 { 78 .init = sha512_base_init, 79 .update = riscv64_sha512_update, 80 .final = riscv64_sha512_final, 81 .finup = riscv64_sha512_finup, 82 .digest = riscv64_sha512_digest, 83 .descsize = sizeof(struct sha512_state), 84 .digestsize = SHA512_DIGEST_SIZE, 85 .base = { 86 .cra_blocksize = SHA512_BLOCK_SIZE, 87 .cra_priority = 300, 88 .cra_name = "sha512", 89 .cra_driver_name = "sha512-riscv64-zvknhb-zvkb", 90 .cra_module = THIS_MODULE, 91 }, 92 }, { 93 .init = sha384_base_init, 94 .update = riscv64_sha512_update, 95 .final = riscv64_sha512_final, 96 .finup = riscv64_sha512_finup, 97 .descsize = sizeof(struct sha512_state), 98 .digestsize = SHA384_DIGEST_SIZE, 99 .base = { 100 .cra_blocksize = SHA384_BLOCK_SIZE, 101 .cra_priority = 300, 102 .cra_name = "sha384", 103 .cra_driver_name = "sha384-riscv64-zvknhb-zvkb", 104 .cra_module = THIS_MODULE, 105 }, 106 }, 107}; 108 109static int __init riscv64_sha512_mod_init(void) 110{ 111 if (riscv_isa_extension_available(NULL, ZVKNHB) && 112 riscv_isa_extension_available(NULL, ZVKB) && 113 riscv_vector_vlen() >= 128) 114 return crypto_register_shashes(riscv64_sha512_algs, 115 ARRAY_SIZE(riscv64_sha512_algs)); 116 117 return -ENODEV; 118} 119 120static void __exit riscv64_sha512_mod_exit(void) 121{ 122 crypto_unregister_shashes(riscv64_sha512_algs, 123 ARRAY_SIZE(riscv64_sha512_algs)); 124} 125 126module_init(riscv64_sha512_mod_init); 127module_exit(riscv64_sha512_mod_exit); 128 129MODULE_DESCRIPTION("SHA-512 (RISC-V accelerated)"); 130MODULE_AUTHOR("Heiko Stuebner <heiko.stuebner@vrull.eu>"); 131MODULE_LICENSE("GPL"); 132MODULE_ALIAS_CRYPTO("sha512"); 133MODULE_ALIAS_CRYPTO("sha384"); 134