1 // SPDX-License-Identifier: GPL-2.0-or-later
5  * RIPEMD-320 - RACE Integrity Primitives Evaluation Message Digest.
7  * Based on the reference implementation by Antoon Bosselaers, ESAT-COSIC
9  * Copyright (c) 2008 Adrian-Ken Rueegsegger <ken@codelabs.ch>
37 #define F1(x, y, z) (x ^ y ^ z)		/* XOR */  argument
38 #define F2(x, y, z) (z ^ (x & (y ^ z)))	/* x ? y : z */  argument
39 #define F3(x, y, z) ((x | ~y) ^ z)  argument
40 #define F4(x, y, z) (y ^ (z & (x ^ y)))	/* z ? x : y */  argument
41 #define F5(x, y, z) (x ^ (y | ~z))  argument
43 #define ROUND(a, b, c, d, e, f, k, x, s)  { \  argument
44 	(a) += f((b), (c), (d)) + le32_to_cpup(&(x)) + (k); \
45 	(a) = rol32((a), (s)) + (e); \
54 	aa = state[0];  in rmd320_transform()
65 	eee = state[9];  in rmd320_transform()
68 	ROUND(aa, bb, cc, dd, ee, F1, K1, in[0],  11);  in rmd320_transform()
75 	ROUND(dd, ee, aa, bb, cc, F1, K1, in[7],   9);  in rmd320_transform()
77 	ROUND(bb, cc, dd, ee, aa, F1, K1, in[9],  13);  in rmd320_transform()
82 	ROUND(bb, cc, dd, ee, aa, F1, K1, in[14],  9);  in rmd320_transform()
87 	ROUND(eee, aaa, bbb, ccc, ddd, F5, KK1, in[14],  9);  in rmd320_transform()
88 	ROUND(ddd, eee, aaa, bbb, ccc, F5, KK1, in[7],   9);  in rmd320_transform()
89 	ROUND(ccc, ddd, eee, aaa, bbb, F5, KK1, in[0],  11);  in rmd320_transform()
90 	ROUND(bbb, ccc, ddd, eee, aaa, F5, KK1, in[9],  13);  in rmd320_transform()
103 	/* Swap contents of "a" registers */  in rmd320_transform()
112 	ROUND(ee, aa, bb, cc, dd, F2, K2, in[6],   9);  in rmd320_transform()
116 	ROUND(aa, bb, cc, dd, ee, F2, K2, in[0],  12);  in rmd320_transform()
117 	ROUND(ee, aa, bb, cc, dd, F2, K2, in[9],  15);  in rmd320_transform()
118 	ROUND(dd, ee, aa, bb, cc, F2, K2, in[5],   9);  in rmd320_transform()
125 	ROUND(eee, aaa, bbb, ccc, ddd, F4, KK2, in[6],   9);  in rmd320_transform()
129 	ROUND(aaa, bbb, ccc, ddd, eee, F4, KK2, in[0],  12);  in rmd320_transform()
131 	ROUND(ddd, eee, aaa, bbb, ccc, F4, KK2, in[5],   9);  in rmd320_transform()
138 	ROUND(bbb, ccc, ddd, eee, aaa, F4, KK2, in[9],  15);  in rmd320_transform()
150 	ROUND(ee, aa, bb, cc, dd, F3, K3, in[9],  14);  in rmd320_transform()
151 	ROUND(dd, ee, aa, bb, cc, F3, K3, in[15],  9);  in rmd320_transform()
156 	ROUND(dd, ee, aa, bb, cc, F3, K3, in[0],  13);  in rmd320_transform()
164 	ROUND(ddd, eee, aaa, bbb, ccc, F3, KK3, in[15],  9);  in rmd320_transform()
171 	ROUND(bbb, ccc, ddd, eee, aaa, F3, KK3, in[9],  14);  in rmd320_transform()
177 	ROUND(aaa, bbb, ccc, ddd, eee, F3, KK3, in[0],  13);  in rmd320_transform()
186 	ROUND(bb, cc, dd, ee, aa, F4, K4, in[9],  12);  in rmd320_transform()
189 	ROUND(dd, ee, aa, bb, cc, F4, K4, in[0],  14);  in rmd320_transform()
191 	ROUND(bb, cc, dd, ee, aa, F4, K4, in[12],  9);  in rmd320_transform()
193 	ROUND(ee, aa, bb, cc, dd, F4, K4, in[13],  9);  in rmd320_transform()
210 	ROUND(aaa, bbb, ccc, ddd, eee, F2, KK4, in[0],  14);  in rmd320_transform()
212 	ROUND(ddd, eee, aaa, bbb, ccc, F2, KK4, in[12],  9);  in rmd320_transform()
214 	ROUND(bbb, ccc, ddd, eee, aaa, F2, KK4, in[13],  9);  in rmd320_transform()
215 	ROUND(aaa, bbb, ccc, ddd, eee, F2, KK4, in[9],  12);  in rmd320_transform()
224 	ROUND(bb, cc, dd, ee, aa, F5, K5, in[4],   9);  in rmd320_transform()
225 	ROUND(aa, bb, cc, dd, ee, F5, K5, in[0],  15);  in rmd320_transform()
227 	ROUND(dd, ee, aa, bb, cc, F5, K5, in[9],  11);  in rmd320_transform()
245 	ROUND(ddd, eee, aaa, bbb, ccc, F1, KK5, in[4],   9);  in rmd320_transform()
254 	ROUND(eee, aaa, bbb, ccc, ddd, F1, KK5, in[0],  15);  in rmd320_transform()
256 	ROUND(ccc, ddd, eee, aaa, bbb, F1, KK5, in[9],  11);  in rmd320_transform()
263 	state[0] += aa;  in rmd320_transform()
272 	state[9] += eee;  in rmd320_transform()
279 	rctx->byte_count = 0;  in rmd320_init()
281 	rctx->state[0] = RMD_H0;  in rmd320_init()
282 	rctx->state[1] = RMD_H1;  in rmd320_init()
283 	rctx->state[2] = RMD_H2;  in rmd320_init()
284 	rctx->state[3] = RMD_H3;  in rmd320_init()
285 	rctx->state[4] = RMD_H4;  in rmd320_init()
286 	rctx->state[5] = RMD_H5;  in rmd320_init()
287 	rctx->state[6] = RMD_H6;  in rmd320_init()
288 	rctx->state[7] = RMD_H7;  in rmd320_init()
289 	rctx->state[8] = RMD_H8;  in rmd320_init()
290 	rctx->state[9] = RMD_H9;  in rmd320_init()
292 	memset(rctx->buffer, 0, sizeof(rctx->buffer));  in rmd320_init()
294 	return 0;  in rmd320_init()
301 	const u32 avail = sizeof(rctx->buffer) - (rctx->byte_count & 0x3f);  in rmd320_update()
303 	rctx->byte_count += len;  in rmd320_update()
307 		memcpy((char *)rctx->buffer + (sizeof(rctx->buffer) - avail),  in rmd320_update()
312 	memcpy((char *)rctx->buffer + (sizeof(rctx->buffer) - avail),  in rmd320_update()
315 	rmd320_transform(rctx->state, rctx->buffer);  in rmd320_update()
317 	len -= avail;  in rmd320_update()
319 	while (len >= sizeof(rctx->buffer)) {  in rmd320_update()
320 		memcpy(rctx->buffer, data, sizeof(rctx->buffer));  in rmd320_update()
321 		rmd320_transform(rctx->state, rctx->buffer);  in rmd320_update()
322 		data += sizeof(rctx->buffer);  in rmd320_update()
323 		len -= sizeof(rctx->buffer);  in rmd320_update()
326 	memcpy(rctx->buffer, data, len);  in rmd320_update()
329 	return 0;  in rmd320_update()
339 	static const u8 padding[64] = { 0x80, };  in rmd320_final()
341 	bits = cpu_to_le64(rctx->byte_count << 3);  in rmd320_final()
344 	index = rctx->byte_count & 0x3f;  in rmd320_final()
345 	padlen = (index < 56) ? (56 - index) : ((64+56) - index);  in rmd320_final()
352 	for (i = 0; i < 10; i++)  in rmd320_final()
353 		dst[i] = cpu_to_le32p(&rctx->state[i]);  in rmd320_final()
356 	memset(rctx, 0, sizeof(*rctx));  in rmd320_final()
358 	return 0;  in rmd320_final()
369 		.cra_driver_name =	"rmd320-generic",
389 MODULE_AUTHOR("Adrian-Ken Rueegsegger <ken@codelabs.ch>");
390 MODULE_DESCRIPTION("RIPEMD-320 Message Digest");