sha2.h (3849B)
1/* SPDX-License-Identifier: GPL-2.0 */ 2/* 3 * Common values for SHA-2 algorithms 4 */ 5 6#ifndef _CRYPTO_SHA2_H 7#define _CRYPTO_SHA2_H 8 9#include <linux/types.h> 10 11#define SHA224_DIGEST_SIZE 28 12#define SHA224_BLOCK_SIZE 64 13 14#define SHA256_DIGEST_SIZE 32 15#define SHA256_BLOCK_SIZE 64 16 17#define SHA384_DIGEST_SIZE 48 18#define SHA384_BLOCK_SIZE 128 19 20#define SHA512_DIGEST_SIZE 64 21#define SHA512_BLOCK_SIZE 128 22 23#define SHA224_H0 0xc1059ed8UL 24#define SHA224_H1 0x367cd507UL 25#define SHA224_H2 0x3070dd17UL 26#define SHA224_H3 0xf70e5939UL 27#define SHA224_H4 0xffc00b31UL 28#define SHA224_H5 0x68581511UL 29#define SHA224_H6 0x64f98fa7UL 30#define SHA224_H7 0xbefa4fa4UL 31 32#define SHA256_H0 0x6a09e667UL 33#define SHA256_H1 0xbb67ae85UL 34#define SHA256_H2 0x3c6ef372UL 35#define SHA256_H3 0xa54ff53aUL 36#define SHA256_H4 0x510e527fUL 37#define SHA256_H5 0x9b05688cUL 38#define SHA256_H6 0x1f83d9abUL 39#define SHA256_H7 0x5be0cd19UL 40 41#define SHA384_H0 0xcbbb9d5dc1059ed8ULL 42#define SHA384_H1 0x629a292a367cd507ULL 43#define SHA384_H2 0x9159015a3070dd17ULL 44#define SHA384_H3 0x152fecd8f70e5939ULL 45#define SHA384_H4 0x67332667ffc00b31ULL 46#define SHA384_H5 0x8eb44a8768581511ULL 47#define SHA384_H6 0xdb0c2e0d64f98fa7ULL 48#define SHA384_H7 0x47b5481dbefa4fa4ULL 49 50#define SHA512_H0 0x6a09e667f3bcc908ULL 51#define SHA512_H1 0xbb67ae8584caa73bULL 52#define SHA512_H2 0x3c6ef372fe94f82bULL 53#define SHA512_H3 0xa54ff53a5f1d36f1ULL 54#define SHA512_H4 0x510e527fade682d1ULL 55#define SHA512_H5 0x9b05688c2b3e6c1fULL 56#define SHA512_H6 0x1f83d9abfb41bd6bULL 57#define SHA512_H7 0x5be0cd19137e2179ULL 58 59extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE]; 60 61extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE]; 62 63extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE]; 64 65extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE]; 66 67struct sha256_state { 68 u32 state[SHA256_DIGEST_SIZE / 4]; 69 u64 count; 70 u8 buf[SHA256_BLOCK_SIZE]; 71}; 72 73struct sha512_state { 74 u64 state[SHA512_DIGEST_SIZE / 8]; 75 u64 count[2]; 76 u8 buf[SHA512_BLOCK_SIZE]; 77}; 78 79struct shash_desc; 80 81extern int crypto_sha256_update(struct shash_desc *desc, const u8 *data, 82 unsigned int len); 83 84extern int crypto_sha256_finup(struct shash_desc *desc, const u8 *data, 85 unsigned int len, u8 *hash); 86 87extern int crypto_sha512_update(struct shash_desc *desc, const u8 *data, 88 unsigned int len); 89 90extern int crypto_sha512_finup(struct shash_desc *desc, const u8 *data, 91 unsigned int len, u8 *hash); 92 93/* 94 * Stand-alone implementation of the SHA256 algorithm. It is designed to 95 * have as little dependencies as possible so it can be used in the 96 * kexec_file purgatory. In other cases you should generally use the 97 * hash APIs from include/crypto/hash.h. Especially when hashing large 98 * amounts of data as those APIs may be hw-accelerated. 99 * 100 * For details see lib/crypto/sha256.c 101 */ 102 103static inline void sha256_init(struct sha256_state *sctx) 104{ 105 sctx->state[0] = SHA256_H0; 106 sctx->state[1] = SHA256_H1; 107 sctx->state[2] = SHA256_H2; 108 sctx->state[3] = SHA256_H3; 109 sctx->state[4] = SHA256_H4; 110 sctx->state[5] = SHA256_H5; 111 sctx->state[6] = SHA256_H6; 112 sctx->state[7] = SHA256_H7; 113 sctx->count = 0; 114} 115void sha256_update(struct sha256_state *sctx, const u8 *data, unsigned int len); 116void sha256_final(struct sha256_state *sctx, u8 *out); 117void sha256(const u8 *data, unsigned int len, u8 *out); 118 119static inline void sha224_init(struct sha256_state *sctx) 120{ 121 sctx->state[0] = SHA224_H0; 122 sctx->state[1] = SHA224_H1; 123 sctx->state[2] = SHA224_H2; 124 sctx->state[3] = SHA224_H3; 125 sctx->state[4] = SHA224_H4; 126 sctx->state[5] = SHA224_H5; 127 sctx->state[6] = SHA224_H6; 128 sctx->state[7] = SHA224_H7; 129 sctx->count = 0; 130} 131void sha224_update(struct sha256_state *sctx, const u8 *data, unsigned int len); 132void sha224_final(struct sha256_state *sctx, u8 *out); 133 134#endif /* _CRYPTO_SHA2_H */