arch/x86/crypto/nhpoly1305-sse2-glue.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  * NHPoly1305 - ε-almost-∆-universal hash function for Adiantum
   4  * (SSE2 accelerated version)
   5  *
   6  * Copyright 2018 Google LLC
   7  */
   8
   9 #include <crypto/internal/hash.h>
  10 #include <crypto/internal/simd.h>
  11 #include <crypto/nhpoly1305.h>
  12 #include <linux/module.h>
  13 #include <asm/simd.h>
  14
  15 asmlinkage void nh_sse2(const u32 *key, const u8 *message, size_t message_len,
  16                         u8 hash[NH_HASH_BYTES]);
  17
  18 /* wrapper to avoid indirect call to assembly, which doesn't work with CFI */
  19 static void _nh_sse2(const u32 *key, const u8 *message, size_t message_len,
  20                      __le64 hash[NH_NUM_PASSES])
  21 {
  22         nh_sse2(key, message, message_len, (u8 *)hash);
  23 }
  24
  25 static int nhpoly1305_sse2_update(struct shash_desc *desc,
  26                                   const u8 *src, unsigned int srclen)
  27 {
  28         if (srclen < 64 || !crypto_simd_usable())
  29                 return crypto_nhpoly1305_update(desc, src, srclen);
  30
  31         do {
  32                 unsigned int n = min_t(unsigned int, srclen, SZ_4K);
  33
  34                 kernel_fpu_begin();
  35                 crypto_nhpoly1305_update_helper(desc, src, n, _nh_sse2);
  36                 kernel_fpu_end();
  37                 src += n;
  38                 srclen -= n;
  39         } while (srclen);
  40         return 0;
  41 }
  42
  43 static struct shash_alg nhpoly1305_alg = {
  44         .base.cra_name          = "nhpoly1305",
  45         .base.cra_driver_name   = "nhpoly1305-sse2",
  46         .base.cra_priority      = 200,
  47         .base.cra_ctxsize       = sizeof(struct nhpoly1305_key),
  48         .base.cra_module        = THIS_MODULE,
  49         .digestsize             = POLY1305_DIGEST_SIZE,
  50         .init                   = crypto_nhpoly1305_init,
  51         .update                 = nhpoly1305_sse2_update,
  52         .final                  = crypto_nhpoly1305_final,
  53         .setkey                 = crypto_nhpoly1305_setkey,
  54         .descsize               = sizeof(struct nhpoly1305_state),
  55 };
  56
  57 static int __init nhpoly1305_mod_init(void)
  58 {
  59         if (!boot_cpu_has(X86_FEATURE_XMM2))
  60                 return -ENODEV;
  61
  62         return crypto_register_shash(&nhpoly1305_alg);
  63 }
  64
  65 static void __exit nhpoly1305_mod_exit(void)
  66 {
  67         crypto_unregister_shash(&nhpoly1305_alg);
  68 }
  69
  70 module_init(nhpoly1305_mod_init);
  71 module_exit(nhpoly1305_mod_exit);
  72
  73 MODULE_DESCRIPTION("NHPoly1305 ε-almost-∆-universal hash function (SSE2-accelerated)");
  74 MODULE_LICENSE("GPL v2");
  75 MODULE_AUTHOR("Eric Biggers <ebiggers@google.com>");
  76 MODULE_ALIAS_CRYPTO("nhpoly1305");
  77 MODULE_ALIAS_CRYPTO("nhpoly1305-sse2");