| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* | 
 | 2 |  * Cryptographic API. | 
 | 3 |  * | 
 | 4 |  * SHA1 Secure Hash Algorithm. | 
 | 5 |  * | 
 | 6 |  * Derived from cryptoapi implementation, adapted for in-place | 
 | 7 |  * scatterlist interface. | 
 | 8 |  * | 
 | 9 |  * Copyright (c) Alan Smithee. | 
 | 10 |  * Copyright (c) Andrew McDonald <andrew@mcdonald.org.uk> | 
 | 11 |  * Copyright (c) Jean-Francois Dive <jef@linuxbe.org> | 
 | 12 |  * | 
 | 13 |  * This program is free software; you can redistribute it and/or modify it | 
 | 14 |  * under the terms of the GNU General Public License as published by the Free | 
 | 15 |  * Software Foundation; either version 2 of the License, or (at your option) | 
 | 16 |  * any later version. | 
 | 17 |  * | 
 | 18 |  */ | 
 | 19 | #include <linux/init.h> | 
 | 20 | #include <linux/module.h> | 
 | 21 | #include <linux/mm.h> | 
 | 22 | #include <linux/crypto.h> | 
 | 23 | #include <linux/cryptohash.h> | 
 | 24 | #include <asm/scatterlist.h> | 
 | 25 | #include <asm/byteorder.h> | 
 | 26 |  | 
 | 27 | #define SHA1_DIGEST_SIZE	20 | 
 | 28 | #define SHA1_HMAC_BLOCK_SIZE	64 | 
 | 29 |  | 
 | 30 | struct sha1_ctx { | 
 | 31 |         u64 count; | 
 | 32 |         u32 state[5]; | 
 | 33 |         u8 buffer[64]; | 
 | 34 | }; | 
 | 35 |  | 
 | 36 | static void sha1_init(void *ctx) | 
 | 37 | { | 
 | 38 | 	struct sha1_ctx *sctx = ctx; | 
 | 39 | 	static const struct sha1_ctx initstate = { | 
 | 40 | 	  0, | 
 | 41 | 	  { 0x67452301, 0xEFCDAB89, 0x98BADCFE, 0x10325476, 0xC3D2E1F0 }, | 
 | 42 | 	  { 0, } | 
 | 43 | 	}; | 
 | 44 |  | 
 | 45 | 	*sctx = initstate; | 
 | 46 | } | 
 | 47 |  | 
 | 48 | static void sha1_update(void *ctx, const u8 *data, unsigned int len) | 
 | 49 | { | 
 | 50 | 	struct sha1_ctx *sctx = ctx; | 
 | 51 | 	unsigned int i, j; | 
 | 52 | 	u32 temp[SHA_WORKSPACE_WORDS]; | 
 | 53 |  | 
 | 54 | 	j = (sctx->count >> 3) & 0x3f; | 
 | 55 | 	sctx->count += len << 3; | 
 | 56 |  | 
 | 57 | 	if ((j + len) > 63) { | 
 | 58 | 		memcpy(&sctx->buffer[j], data, (i = 64-j)); | 
 | 59 | 		sha_transform(sctx->state, sctx->buffer, temp); | 
 | 60 | 		for ( ; i + 63 < len; i += 64) { | 
 | 61 | 			sha_transform(sctx->state, &data[i], temp); | 
 | 62 | 		} | 
 | 63 | 		j = 0; | 
 | 64 | 	} | 
 | 65 | 	else i = 0; | 
 | 66 | 	memset(temp, 0, sizeof(temp)); | 
 | 67 | 	memcpy(&sctx->buffer[j], &data[i], len - i); | 
 | 68 | } | 
 | 69 |  | 
 | 70 |  | 
 | 71 | /* Add padding and return the message digest. */ | 
 | 72 | static void sha1_final(void* ctx, u8 *out) | 
 | 73 | { | 
 | 74 | 	struct sha1_ctx *sctx = ctx; | 
 | 75 | 	u32 i, j, index, padlen; | 
 | 76 | 	u64 t; | 
 | 77 | 	u8 bits[8] = { 0, }; | 
 | 78 | 	static const u8 padding[64] = { 0x80, }; | 
 | 79 |  | 
 | 80 | 	t = sctx->count; | 
 | 81 | 	bits[7] = 0xff & t; t>>=8; | 
 | 82 | 	bits[6] = 0xff & t; t>>=8; | 
 | 83 | 	bits[5] = 0xff & t; t>>=8; | 
 | 84 | 	bits[4] = 0xff & t; t>>=8; | 
 | 85 | 	bits[3] = 0xff & t; t>>=8; | 
 | 86 | 	bits[2] = 0xff & t; t>>=8; | 
 | 87 | 	bits[1] = 0xff & t; t>>=8; | 
 | 88 | 	bits[0] = 0xff & t; | 
 | 89 |  | 
 | 90 | 	/* Pad out to 56 mod 64 */ | 
 | 91 | 	index = (sctx->count >> 3) & 0x3f; | 
 | 92 | 	padlen = (index < 56) ? (56 - index) : ((64+56) - index); | 
 | 93 | 	sha1_update(sctx, padding, padlen); | 
 | 94 |  | 
 | 95 | 	/* Append length */ | 
 | 96 | 	sha1_update(sctx, bits, sizeof bits);  | 
 | 97 |  | 
 | 98 | 	/* Store state in digest */ | 
 | 99 | 	for (i = j = 0; i < 5; i++, j += 4) { | 
 | 100 | 		u32 t2 = sctx->state[i]; | 
 | 101 | 		out[j+3] = t2 & 0xff; t2>>=8; | 
 | 102 | 		out[j+2] = t2 & 0xff; t2>>=8; | 
 | 103 | 		out[j+1] = t2 & 0xff; t2>>=8; | 
 | 104 | 		out[j  ] = t2 & 0xff; | 
 | 105 | 	} | 
 | 106 |  | 
 | 107 | 	/* Wipe context */ | 
 | 108 | 	memset(sctx, 0, sizeof *sctx); | 
 | 109 | } | 
 | 110 |  | 
 | 111 | static struct crypto_alg alg = { | 
 | 112 | 	.cra_name	=	"sha1", | 
 | 113 | 	.cra_flags	=	CRYPTO_ALG_TYPE_DIGEST, | 
 | 114 | 	.cra_blocksize	=	SHA1_HMAC_BLOCK_SIZE, | 
 | 115 | 	.cra_ctxsize	=	sizeof(struct sha1_ctx), | 
 | 116 | 	.cra_module	=	THIS_MODULE, | 
 | 117 | 	.cra_list       =       LIST_HEAD_INIT(alg.cra_list), | 
 | 118 | 	.cra_u		=	{ .digest = { | 
 | 119 | 	.dia_digestsize	=	SHA1_DIGEST_SIZE, | 
 | 120 | 	.dia_init   	= 	sha1_init, | 
 | 121 | 	.dia_update 	=	sha1_update, | 
 | 122 | 	.dia_final  	=	sha1_final } } | 
 | 123 | }; | 
 | 124 |  | 
 | 125 | static int __init init(void) | 
 | 126 | { | 
 | 127 | 	return crypto_register_alg(&alg); | 
 | 128 | } | 
 | 129 |  | 
 | 130 | static void __exit fini(void) | 
 | 131 | { | 
 | 132 | 	crypto_unregister_alg(&alg); | 
 | 133 | } | 
 | 134 |  | 
 | 135 | module_init(init); | 
 | 136 | module_exit(fini); | 
 | 137 |  | 
 | 138 | MODULE_LICENSE("GPL"); | 
 | 139 | MODULE_DESCRIPTION("SHA1 Secure Hash Algorithm"); |