LXR linux/include/crypto/sha2.h

   1/* SPDX-License-Identifier: GPL-2.0 */
   2/*
   3 * Common values for SHA-2 algorithms
   4 */
   5
   6#ifndef _CRYPTO_SHA2_H
   7#define _CRYPTO_SHA2_H
   8
   9#include <linux/types.h>
  10
  11#define SHA224_DIGEST_SIZE      28
  12#define SHA224_BLOCK_SIZE       64
  13
  14#define SHA256_DIGEST_SIZE      32
  15#define SHA256_BLOCK_SIZE       64
  16
  17#define SHA384_DIGEST_SIZE      48
  18#define SHA384_BLOCK_SIZE       128
  19
  20#define SHA512_DIGEST_SIZE      64
  21#define SHA512_BLOCK_SIZE       128
  22
  23#define SHA224_H0       0xc1059ed8UL
  24#define SHA224_H1       0x367cd507UL
  25#define SHA224_H2       0x3070dd17UL
  26#define SHA224_H3       0xf70e5939UL
  27#define SHA224_H4       0xffc00b31UL
  28#define SHA224_H5       0x68581511UL
  29#define SHA224_H6       0x64f98fa7UL
  30#define SHA224_H7       0xbefa4fa4UL
  31
  32#define SHA256_H0       0x6a09e667UL
  33#define SHA256_H1       0xbb67ae85UL
  34#define SHA256_H2       0x3c6ef372UL
  35#define SHA256_H3       0xa54ff53aUL
  36#define SHA256_H4       0x510e527fUL
  37#define SHA256_H5       0x9b05688cUL
  38#define SHA256_H6       0x1f83d9abUL
  39#define SHA256_H7       0x5be0cd19UL
  40
  41#define SHA384_H0       0xcbbb9d5dc1059ed8ULL
  42#define SHA384_H1       0x629a292a367cd507ULL
  43#define SHA384_H2       0x9159015a3070dd17ULL
  44#define SHA384_H3       0x152fecd8f70e5939ULL
  45#define SHA384_H4       0x67332667ffc00b31ULL
  46#define SHA384_H5       0x8eb44a8768581511ULL
  47#define SHA384_H6       0xdb0c2e0d64f98fa7ULL
  48#define SHA384_H7       0x47b5481dbefa4fa4ULL
  49
  50#define SHA512_H0       0x6a09e667f3bcc908ULL
  51#define SHA512_H1       0xbb67ae8584caa73bULL
  52#define SHA512_H2       0x3c6ef372fe94f82bULL
  53#define SHA512_H3       0xa54ff53a5f1d36f1ULL
  54#define SHA512_H4       0x510e527fade682d1ULL
  55#define SHA512_H5       0x9b05688c2b3e6c1fULL
  56#define SHA512_H6       0x1f83d9abfb41bd6bULL
  57#define SHA512_H7       0x5be0cd19137e2179ULL
  58
  59extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE];
  60
  61extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE];
  62
  63extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE];
  64
  65extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE];
  66
  67struct sha256_state {
  68        u32 state[SHA256_DIGEST_SIZE / 4];
  69        u64 count;
  70        u8 buf[SHA256_BLOCK_SIZE];
  71};
  72
  73struct sha512_state {
  74        u64 state[SHA512_DIGEST_SIZE / 8];
  75        u64 count[2];
  76        u8 buf[SHA512_BLOCK_SIZE];
  77};
  78
  79struct shash_desc;
  80
  81extern int crypto_sha256_update(struct shash_desc *desc, const u8 *data,
  82                              unsigned int len);
  83
  84extern int crypto_sha256_finup(struct shash_desc *desc, const u8 *data,
  85                               unsigned int len, u8 *hash);
  86
  87extern int crypto_sha512_update(struct shash_desc *desc, const u8 *data,
  88                              unsigned int len);
  89
  90extern int crypto_sha512_finup(struct shash_desc *desc, const u8 *data,
  91                               unsigned int len, u8 *hash);
  92
  93/*
  94 * Stand-alone implementation of the SHA256 algorithm. It is designed to
  95 * have as little dependencies as possible so it can be used in the
  96 * kexec_file purgatory. In other cases you should generally use the
  97 * hash APIs from include/crypto/hash.h. Especially when hashing large
  98 * amounts of data as those APIs may be hw-accelerated.
  99 *
 100 * For details see lib/crypto/sha256.c
 101 */
 102
 103static inline void sha256_init(struct sha256_state *sctx)
 104{
 105        sctx->state[0] = SHA256_H0;
 106        sctx->state[1] = SHA256_H1;
 107        sctx->state[2] = SHA256_H2;
 108        sctx->state[3] = SHA256_H3;
 109        sctx->state[4] = SHA256_H4;
 110        sctx->state[5] = SHA256_H5;
 111        sctx->state[6] = SHA256_H6;
 112        sctx->state[7] = SHA256_H7;
 113        sctx->count = 0;
 114}
 115void sha256_update(struct sha256_state *sctx, const u8 *data, unsigned int len);
 116void sha256_final(struct sha256_state *sctx, u8 *out);
 117void sha256(const u8 *data, unsigned int len, u8 *out);
 118
 119static inline void sha224_init(struct sha256_state *sctx)
 120{
 121        sctx->state[0] = SHA224_H0;
 122        sctx->state[1] = SHA224_H1;
 123        sctx->state[2] = SHA224_H2;
 124        sctx->state[3] = SHA224_H3;
 125        sctx->state[4] = SHA224_H4;
 126        sctx->state[5] = SHA224_H5;
 127        sctx->state[6] = SHA224_H6;
 128        sctx->state[7] = SHA224_H7;
 129        sctx->count = 0;
 130}
 131void sha224_update(struct sha256_state *sctx, const u8 *data, unsigned int len);
 132void sha224_final(struct sha256_state *sctx, u8 *out);
 133
 134#endif /* _CRYPTO_SHA2_H */
 135