include/crypto/sha2.h

   1 /* SPDX-License-Identifier: GPL-2.0 */
   2 /*
   3  * Common values for SHA-2 algorithms
   4  */
   5
   6 #ifndef _CRYPTO_SHA2_H
   7 #define _CRYPTO_SHA2_H
   8
   9 #include <linux/types.h>
  10
  11 #define SHA224_DIGEST_SIZE      28
  12 #define SHA224_BLOCK_SIZE       64
  13
  14 #define SHA256_DIGEST_SIZE      32
  15 #define SHA256_BLOCK_SIZE       64
  16
  17 #define SHA384_DIGEST_SIZE      48
  18 #define SHA384_BLOCK_SIZE       128
  19
  20 #define SHA512_DIGEST_SIZE      64
  21 #define SHA512_BLOCK_SIZE       128
  22
  23 #define SHA224_H0       0xc1059ed8UL
  24 #define SHA224_H1       0x367cd507UL
  25 #define SHA224_H2       0x3070dd17UL
  26 #define SHA224_H3       0xf70e5939UL
  27 #define SHA224_H4       0xffc00b31UL
  28 #define SHA224_H5       0x68581511UL
  29 #define SHA224_H6       0x64f98fa7UL
  30 #define SHA224_H7       0xbefa4fa4UL
  31
  32 #define SHA256_H0       0x6a09e667UL
  33 #define SHA256_H1       0xbb67ae85UL
  34 #define SHA256_H2       0x3c6ef372UL
  35 #define SHA256_H3       0xa54ff53aUL
  36 #define SHA256_H4       0x510e527fUL
  37 #define SHA256_H5       0x9b05688cUL
  38 #define SHA256_H6       0x1f83d9abUL
  39 #define SHA256_H7       0x5be0cd19UL
  40
  41 #define SHA384_H0       0xcbbb9d5dc1059ed8ULL
  42 #define SHA384_H1       0x629a292a367cd507ULL
  43 #define SHA384_H2       0x9159015a3070dd17ULL
  44 #define SHA384_H3       0x152fecd8f70e5939ULL
  45 #define SHA384_H4       0x67332667ffc00b31ULL
  46 #define SHA384_H5       0x8eb44a8768581511ULL
  47 #define SHA384_H6       0xdb0c2e0d64f98fa7ULL
  48 #define SHA384_H7       0x47b5481dbefa4fa4ULL
  49
  50 #define SHA512_H0       0x6a09e667f3bcc908ULL
  51 #define SHA512_H1       0xbb67ae8584caa73bULL
  52 #define SHA512_H2       0x3c6ef372fe94f82bULL
  53 #define SHA512_H3       0xa54ff53a5f1d36f1ULL
  54 #define SHA512_H4       0x510e527fade682d1ULL
  55 #define SHA512_H5       0x9b05688c2b3e6c1fULL
  56 #define SHA512_H6       0x1f83d9abfb41bd6bULL
  57 #define SHA512_H7       0x5be0cd19137e2179ULL
  58
  59 extern const u8 sha224_zero_message_hash[SHA224_DIGEST_SIZE];
  60
  61 extern const u8 sha256_zero_message_hash[SHA256_DIGEST_SIZE];
  62
  63 extern const u8 sha384_zero_message_hash[SHA384_DIGEST_SIZE];
  64
  65 extern const u8 sha512_zero_message_hash[SHA512_DIGEST_SIZE];
  66
  67 struct sha256_state {
  68         u32 state[SHA256_DIGEST_SIZE / 4];
  69         u64 count;
  70         u8 buf[SHA256_BLOCK_SIZE];
  71 };
  72
  73 struct sha512_state {
  74         u64 state[SHA512_DIGEST_SIZE / 8];
  75         u64 count[2];
  76         u8 buf[SHA512_BLOCK_SIZE];
  77 };
  78
  79 struct shash_desc;
  80
  81 extern int crypto_sha256_update(struct shash_desc *desc, const u8 *data,
  82                               unsigned int len);
  83
  84 extern int crypto_sha256_finup(struct shash_desc *desc, const u8 *data,
  85                                unsigned int len, u8 *hash);
  86
  87 extern int crypto_sha512_update(struct shash_desc *desc, const u8 *data,
  88                               unsigned int len);
  89
  90 extern int crypto_sha512_finup(struct shash_desc *desc, const u8 *data,
  91                                unsigned int len, u8 *hash);
  92
  93 /*
  94  * Stand-alone implementation of the SHA256 algorithm. It is designed to
  95  * have as little dependencies as possible so it can be used in the
  96  * kexec_file purgatory. In other cases you should generally use the
  97  * hash APIs from include/crypto/hash.h. Especially when hashing large
  98  * amounts of data as those APIs may be hw-accelerated.
  99  *
 100  * For details see lib/crypto/sha256.c
 101  */
 102
 103 static inline void sha256_init(struct sha256_state *sctx)
 104 {
 105         sctx->state[0] = SHA256_H0;
 106         sctx->state[1] = SHA256_H1;
 107         sctx->state[2] = SHA256_H2;
 108         sctx->state[3] = SHA256_H3;
 109         sctx->state[4] = SHA256_H4;
 110         sctx->state[5] = SHA256_H5;
 111         sctx->state[6] = SHA256_H6;
 112         sctx->state[7] = SHA256_H7;
 113         sctx->count = 0;
 114 }
 115 void sha256_update(struct sha256_state *sctx, const u8 *data, unsigned int len);
 116 void sha256_final(struct sha256_state *sctx, u8 *out);
 117 void sha256(const u8 *data, unsigned int len, u8 *out);
 118
 119 static inline void sha224_init(struct sha256_state *sctx)
 120 {
 121         sctx->state[0] = SHA224_H0;
 122         sctx->state[1] = SHA224_H1;
 123         sctx->state[2] = SHA224_H2;
 124         sctx->state[3] = SHA224_H3;
 125         sctx->state[4] = SHA224_H4;
 126         sctx->state[5] = SHA224_H5;
 127         sctx->state[6] = SHA224_H6;
 128         sctx->state[7] = SHA224_H7;
 129         sctx->count = 0;
 130 }
 131 /* Simply use sha256_update as it is equivalent to sha224_update. */
 132 void sha224_final(struct sha256_state *sctx, u8 *out);
 133
 134 #endif /* _CRYPTO_SHA2_H */