sha256_ssse3_glue.c 5.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192
  1. /*
  2. * Cryptographic API.
  3. *
  4. * Glue code for the SHA256 Secure Hash Algorithm assembler
  5. * implementation using supplemental SSE3 / AVX / AVX2 instructions.
  6. *
  7. * This file is based on sha256_generic.c
  8. *
  9. * Copyright (C) 2013 Intel Corporation.
  10. *
  11. * Author:
  12. * Tim Chen <tim.c.chen@linux.intel.com>
  13. *
  14. * This program is free software; you can redistribute it and/or modify it
  15. * under the terms of the GNU General Public License as published by the Free
  16. * Software Foundation; either version 2 of the License, or (at your option)
  17. * any later version.
  18. *
  19. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  20. * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  21. * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  22. * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  23. * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  24. * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  25. * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  26. * SOFTWARE.
  27. */
  28. #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  29. #include <crypto/internal/hash.h>
  30. #include <linux/init.h>
  31. #include <linux/module.h>
  32. #include <linux/mm.h>
  33. #include <linux/cryptohash.h>
  34. #include <linux/types.h>
  35. #include <crypto/sha.h>
  36. #include <crypto/sha256_base.h>
  37. #include <asm/fpu/api.h>
  38. #include <linux/string.h>
  39. asmlinkage void sha256_transform_ssse3(u32 *digest, const char *data,
  40. u64 rounds);
  41. #ifdef CONFIG_AS_AVX
  42. asmlinkage void sha256_transform_avx(u32 *digest, const char *data,
  43. u64 rounds);
  44. #endif
  45. #ifdef CONFIG_AS_AVX2
  46. asmlinkage void sha256_transform_rorx(u32 *digest, const char *data,
  47. u64 rounds);
  48. #endif
  49. static void (*sha256_transform_asm)(u32 *, const char *, u64);
  50. static int sha256_ssse3_update(struct shash_desc *desc, const u8 *data,
  51. unsigned int len)
  52. {
  53. struct sha256_state *sctx = shash_desc_ctx(desc);
  54. if (!irq_fpu_usable() ||
  55. (sctx->count % SHA256_BLOCK_SIZE) + len < SHA256_BLOCK_SIZE)
  56. return crypto_sha256_update(desc, data, len);
  57. /* make sure casting to sha256_block_fn() is safe */
  58. BUILD_BUG_ON(offsetof(struct sha256_state, state) != 0);
  59. kernel_fpu_begin();
  60. sha256_base_do_update(desc, data, len,
  61. (sha256_block_fn *)sha256_transform_asm);
  62. kernel_fpu_end();
  63. return 0;
  64. }
  65. static int sha256_ssse3_finup(struct shash_desc *desc, const u8 *data,
  66. unsigned int len, u8 *out)
  67. {
  68. if (!irq_fpu_usable())
  69. return crypto_sha256_finup(desc, data, len, out);
  70. kernel_fpu_begin();
  71. if (len)
  72. sha256_base_do_update(desc, data, len,
  73. (sha256_block_fn *)sha256_transform_asm);
  74. sha256_base_do_finalize(desc, (sha256_block_fn *)sha256_transform_asm);
  75. kernel_fpu_end();
  76. return sha256_base_finish(desc, out);
  77. }
  78. /* Add padding and return the message digest. */
  79. static int sha256_ssse3_final(struct shash_desc *desc, u8 *out)
  80. {
  81. return sha256_ssse3_finup(desc, NULL, 0, out);
  82. }
  83. static struct shash_alg algs[] = { {
  84. .digestsize = SHA256_DIGEST_SIZE,
  85. .init = sha256_base_init,
  86. .update = sha256_ssse3_update,
  87. .final = sha256_ssse3_final,
  88. .finup = sha256_ssse3_finup,
  89. .descsize = sizeof(struct sha256_state),
  90. .base = {
  91. .cra_name = "sha256",
  92. .cra_driver_name = "sha256-ssse3",
  93. .cra_priority = 150,
  94. .cra_flags = CRYPTO_ALG_TYPE_SHASH,
  95. .cra_blocksize = SHA256_BLOCK_SIZE,
  96. .cra_module = THIS_MODULE,
  97. }
  98. }, {
  99. .digestsize = SHA224_DIGEST_SIZE,
  100. .init = sha224_base_init,
  101. .update = sha256_ssse3_update,
  102. .final = sha256_ssse3_final,
  103. .finup = sha256_ssse3_finup,
  104. .descsize = sizeof(struct sha256_state),
  105. .base = {
  106. .cra_name = "sha224",
  107. .cra_driver_name = "sha224-ssse3",
  108. .cra_priority = 150,
  109. .cra_flags = CRYPTO_ALG_TYPE_SHASH,
  110. .cra_blocksize = SHA224_BLOCK_SIZE,
  111. .cra_module = THIS_MODULE,
  112. }
  113. } };
  114. #ifdef CONFIG_AS_AVX
  115. static bool __init avx_usable(void)
  116. {
  117. if (!cpu_has_xfeatures(XSTATE_SSE | XSTATE_YMM, NULL)) {
  118. if (cpu_has_avx)
  119. pr_info("AVX detected but unusable.\n");
  120. return false;
  121. }
  122. return true;
  123. }
  124. #endif
  125. static int __init sha256_ssse3_mod_init(void)
  126. {
  127. /* test for SSSE3 first */
  128. if (cpu_has_ssse3)
  129. sha256_transform_asm = sha256_transform_ssse3;
  130. #ifdef CONFIG_AS_AVX
  131. /* allow AVX to override SSSE3, it's a little faster */
  132. if (avx_usable()) {
  133. #ifdef CONFIG_AS_AVX2
  134. if (boot_cpu_has(X86_FEATURE_AVX2) && boot_cpu_has(X86_FEATURE_BMI2))
  135. sha256_transform_asm = sha256_transform_rorx;
  136. else
  137. #endif
  138. sha256_transform_asm = sha256_transform_avx;
  139. }
  140. #endif
  141. if (sha256_transform_asm) {
  142. #ifdef CONFIG_AS_AVX
  143. if (sha256_transform_asm == sha256_transform_avx)
  144. pr_info("Using AVX optimized SHA-256 implementation\n");
  145. #ifdef CONFIG_AS_AVX2
  146. else if (sha256_transform_asm == sha256_transform_rorx)
  147. pr_info("Using AVX2 optimized SHA-256 implementation\n");
  148. #endif
  149. else
  150. #endif
  151. pr_info("Using SSSE3 optimized SHA-256 implementation\n");
  152. return crypto_register_shashes(algs, ARRAY_SIZE(algs));
  153. }
  154. pr_info("Neither AVX nor SSSE3 is available/usable.\n");
  155. return -ENODEV;
  156. }
  157. static void __exit sha256_ssse3_mod_fini(void)
  158. {
  159. crypto_unregister_shashes(algs, ARRAY_SIZE(algs));
  160. }
  161. module_init(sha256_ssse3_mod_init);
  162. module_exit(sha256_ssse3_mod_fini);
  163. MODULE_LICENSE("GPL");
  164. MODULE_DESCRIPTION("SHA256 Secure Hash Algorithm, Supplemental SSE3 accelerated");
  165. MODULE_ALIAS_CRYPTO("sha256");
  166. MODULE_ALIAS_CRYPTO("sha224");