1  /* SPDX-License-Identifier: GPL-2.0 */
2  /*
3   * Common values for SHA-2 algorithms
4   */
5  
6  #ifndef _CRYPTO_SHA2_H
7  #define _CRYPTO_SHA2_H
8  
9  #include <linux/types.h>
10  
11  #define SHA224_DIGEST_SIZE	28
12  #define SHA224_BLOCK_SIZE	64
13  
14  #define SHA256_DIGEST_SIZE      32
15  #define SHA256_BLOCK_SIZE       64
16  
17  #define SHA384_DIGEST_SIZE      48
18  #define SHA384_BLOCK_SIZE       128
19  
20  #define SHA512_DIGEST_SIZE      64
21  #define SHA512_BLOCK_SIZE       128
22  
23  #define SHA224_H0	0xc1059ed8UL
24  #define SHA224_H1	0x367cd507UL
25  #define SHA224_H2	0x3070dd17UL
26  #define SHA224_H3	0xf70e5939UL
27  #define SHA224_H4	0xffc00b31UL
28  #define SHA224_H5	0x68581511UL
29  #define SHA224_H6	0x64f98fa7UL
30  #define SHA224_H7	0xbefa4fa4UL
31  
32  #define SHA256_H0	0x6a09e667UL
33  #define SHA256_H1	0xbb67ae85UL
34  #define SHA256_H2	0x3c6ef372UL
35  #define SHA256_H3	0xa54ff53aUL
36  #define SHA256_H4	0x510e527fUL
37  #define SHA256_H5	0x9b05688cUL
38  #define SHA256_H6	0x1f83d9abUL
39  #define SHA256_H7	0x5be0cd19UL
40  
41  #define SHA384_H0	0xcbbb9d5dc1059ed8ULL
42  #define SHA384_H1	0x629a292a367cd507ULL
43  #define SHA384_H2	0x9159015a3070dd17ULL
44  #define SHA384_H3	0x152fecd8f70e5939ULL
45  #define SHA384_H4	0x67332667ffc00b31ULL
46  #define SHA384_H5	0x8eb44a8768581511ULL
47  #define SHA384_H6	0xdb0c2e0d64f98fa7ULL
48  #define SHA384_H7	0x47b5481dbefa4fa4ULL
49  
50  #define SHA512_H0	0x6a09e667f3bcc908ULL
51  #define SHA512_H1	0xbb67ae8584caa73bULL
52  #define SHA512_H2	0x3c6ef372fe94f82bULL
53  #define SHA512_H3	0xa54ff53a5f1d36f1ULL
54  #define SHA512_H4	0x510e527fade682d1ULL
55  #define SHA512_H5	0x9b05688c2b3e6c1fULL
56  #define SHA512_H6	0x1f83d9abfb41bd6bULL
57  #define SHA512_H7	0x5be0cd19137e2179ULL
58  
59  extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE];
60  
61  extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE];
62  
63  extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE];
64  
65  extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE];
66  
67  struct sha256_state {
68  	u32 state[SHA256_DIGEST_SIZE / 4];
69  	u64 count;
70  	u8 buf[SHA256_BLOCK_SIZE];
71  };
72  
73  struct sha512_state {
74  	u64 state[SHA512_DIGEST_SIZE / 8];
75  	u64 count[2];
76  	u8 buf[SHA512_BLOCK_SIZE];
77  };
78  
79  struct shash_desc;
80  
81  extern int crypto_sha256_update(struct shash_desc *desc, const u8 *data,
82  			      unsigned int len);
83  
84  extern int crypto_sha256_finup(struct shash_desc *desc, const u8 *data,
85  			       unsigned int len, u8 *hash);
86  
87  extern int crypto_sha512_update(struct shash_desc *desc, const u8 *data,
88  			      unsigned int len);
89  
90  extern int crypto_sha512_finup(struct shash_desc *desc, const u8 *data,
91  			       unsigned int len, u8 *hash);
92  
93  /*
94   * Stand-alone implementation of the SHA256 algorithm. It is designed to
95   * have as little dependencies as possible so it can be used in the
96   * kexec_file purgatory. In other cases you should generally use the
97   * hash APIs from include/crypto/hash.h. Especially when hashing large
98   * amounts of data as those APIs may be hw-accelerated.
99   *
100   * For details see lib/crypto/sha256.c
101   */
102  
sha256_init(struct sha256_state * sctx)103  static inline void sha256_init(struct sha256_state *sctx)
104  {
105  	sctx->state[0] = SHA256_H0;
106  	sctx->state[1] = SHA256_H1;
107  	sctx->state[2] = SHA256_H2;
108  	sctx->state[3] = SHA256_H3;
109  	sctx->state[4] = SHA256_H4;
110  	sctx->state[5] = SHA256_H5;
111  	sctx->state[6] = SHA256_H6;
112  	sctx->state[7] = SHA256_H7;
113  	sctx->count = 0;
114  }
115  void sha256_update(struct sha256_state *sctx, const u8 *data, unsigned int len);
116  void sha256_final(struct sha256_state *sctx, u8 *out);
117  void sha256(const u8 *data, unsigned int len, u8 *out);
118  
sha224_init(struct sha256_state * sctx)119  static inline void sha224_init(struct sha256_state *sctx)
120  {
121  	sctx->state[0] = SHA224_H0;
122  	sctx->state[1] = SHA224_H1;
123  	sctx->state[2] = SHA224_H2;
124  	sctx->state[3] = SHA224_H3;
125  	sctx->state[4] = SHA224_H4;
126  	sctx->state[5] = SHA224_H5;
127  	sctx->state[6] = SHA224_H6;
128  	sctx->state[7] = SHA224_H7;
129  	sctx->count = 0;
130  }
131  /* Simply use sha256_update as it is equivalent to sha224_update. */
132  void sha224_final(struct sha256_state *sctx, u8 *out);
133  
134  #endif /* _CRYPTO_SHA2_H */
135