1 /* SPDX-License-Identifier: GPL-2.0 */
2 /*
3  * Common values for SHA-2 algorithms
4  */
5 
6 #ifndef _CRYPTO_SHA2_H
7 #define _CRYPTO_SHA2_H
8 
9 #include <linux/types.h>
10 
11 #define SHA224_DIGEST_SIZE	28
12 #define SHA224_BLOCK_SIZE	64
13 
14 #define SHA256_DIGEST_SIZE      32
15 #define SHA256_BLOCK_SIZE       64
16 #define SHA256_STATE_WORDS      8
17 
18 #define SHA384_DIGEST_SIZE      48
19 #define SHA384_BLOCK_SIZE       128
20 
21 #define SHA512_DIGEST_SIZE      64
22 #define SHA512_BLOCK_SIZE       128
23 #define SHA512_STATE_SIZE       80
24 
25 #define SHA224_H0	0xc1059ed8UL
26 #define SHA224_H1	0x367cd507UL
27 #define SHA224_H2	0x3070dd17UL
28 #define SHA224_H3	0xf70e5939UL
29 #define SHA224_H4	0xffc00b31UL
30 #define SHA224_H5	0x68581511UL
31 #define SHA224_H6	0x64f98fa7UL
32 #define SHA224_H7	0xbefa4fa4UL
33 
34 #define SHA256_H0	0x6a09e667UL
35 #define SHA256_H1	0xbb67ae85UL
36 #define SHA256_H2	0x3c6ef372UL
37 #define SHA256_H3	0xa54ff53aUL
38 #define SHA256_H4	0x510e527fUL
39 #define SHA256_H5	0x9b05688cUL
40 #define SHA256_H6	0x1f83d9abUL
41 #define SHA256_H7	0x5be0cd19UL
42 
43 #define SHA384_H0	0xcbbb9d5dc1059ed8ULL
44 #define SHA384_H1	0x629a292a367cd507ULL
45 #define SHA384_H2	0x9159015a3070dd17ULL
46 #define SHA384_H3	0x152fecd8f70e5939ULL
47 #define SHA384_H4	0x67332667ffc00b31ULL
48 #define SHA384_H5	0x8eb44a8768581511ULL
49 #define SHA384_H6	0xdb0c2e0d64f98fa7ULL
50 #define SHA384_H7	0x47b5481dbefa4fa4ULL
51 
52 #define SHA512_H0	0x6a09e667f3bcc908ULL
53 #define SHA512_H1	0xbb67ae8584caa73bULL
54 #define SHA512_H2	0x3c6ef372fe94f82bULL
55 #define SHA512_H3	0xa54ff53a5f1d36f1ULL
56 #define SHA512_H4	0x510e527fade682d1ULL
57 #define SHA512_H5	0x9b05688c2b3e6c1fULL
58 #define SHA512_H6	0x1f83d9abfb41bd6bULL
59 #define SHA512_H7	0x5be0cd19137e2179ULL
60 
61 extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE];
62 
63 extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE];
64 
65 extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE];
66 
67 extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE];
68 
69 struct crypto_sha256_state {
70 	u32 state[SHA256_STATE_WORDS];
71 	u64 count;
72 };
73 
74 struct sha256_state {
75 	union {
76 		struct crypto_sha256_state ctx;
77 		struct {
78 			u32 state[SHA256_STATE_WORDS];
79 			u64 count;
80 		};
81 	};
82 	u8 buf[SHA256_BLOCK_SIZE];
83 };
84 
85 struct sha512_state {
86 	u64 state[SHA512_DIGEST_SIZE / 8];
87 	u64 count[2];
88 	u8 buf[SHA512_BLOCK_SIZE];
89 };
90 
91 static inline void sha256_block_init(struct crypto_sha256_state *sctx)
92 {
93 	sctx->state[0] = SHA256_H0;
94 	sctx->state[1] = SHA256_H1;
95 	sctx->state[2] = SHA256_H2;
96 	sctx->state[3] = SHA256_H3;
97 	sctx->state[4] = SHA256_H4;
98 	sctx->state[5] = SHA256_H5;
99 	sctx->state[6] = SHA256_H6;
100 	sctx->state[7] = SHA256_H7;
101 	sctx->count = 0;
102 }
103 
104 static inline void sha256_init(struct sha256_state *sctx)
105 {
106 	sha256_block_init(&sctx->ctx);
107 }
108 void sha256_update(struct sha256_state *sctx, const u8 *data, size_t len);
109 void sha256_final(struct sha256_state *sctx, u8 out[SHA256_DIGEST_SIZE]);
110 void sha256(const u8 *data, size_t len, u8 out[SHA256_DIGEST_SIZE]);
111 
112 static inline void sha224_block_init(struct crypto_sha256_state *sctx)
113 {
114 	sctx->state[0] = SHA224_H0;
115 	sctx->state[1] = SHA224_H1;
116 	sctx->state[2] = SHA224_H2;
117 	sctx->state[3] = SHA224_H3;
118 	sctx->state[4] = SHA224_H4;
119 	sctx->state[5] = SHA224_H5;
120 	sctx->state[6] = SHA224_H6;
121 	sctx->state[7] = SHA224_H7;
122 	sctx->count = 0;
123 }
124 
125 static inline void sha224_init(struct sha256_state *sctx)
126 {
127 	sha224_block_init(&sctx->ctx);
128 }
129 /* Simply use sha256_update as it is equivalent to sha224_update. */
130 void sha224_final(struct sha256_state *sctx, u8 out[SHA224_DIGEST_SIZE]);
131 
132 #endif /* _CRYPTO_SHA2_H */
133