1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * NHPoly1305 - ε-almost-∆-universal hash function for Adiantum
4  * (AVX2 accelerated version)
5  *
6  * Copyright 2018 Google LLC
7  */
8 
9 #include <crypto/internal/hash.h>
10 #include <crypto/internal/simd.h>
11 #include <crypto/nhpoly1305.h>
12 #include <linux/module.h>
13 #include <asm/simd.h>
14 
15 asmlinkage void nh_avx2(const u32 *key, const u8 *message, size_t message_len,
16 			u8 hash[NH_HASH_BYTES]);
17 
18 /* wrapper to avoid indirect call to assembly, which doesn't work with CFI */
19 static void _nh_avx2(const u32 *key, const u8 *message, size_t message_len,
20 		     __le64 hash[NH_NUM_PASSES])
21 {
22 	nh_avx2(key, message, message_len, (u8 *)hash);
23 }
24 
25 static int nhpoly1305_avx2_update(struct shash_desc *desc,
26 				  const u8 *src, unsigned int srclen)
27 {
28 	if (srclen < 64 || !crypto_simd_usable())
29 		return crypto_nhpoly1305_update(desc, src, srclen);
30 
31 	do {
32 		unsigned int n = min_t(unsigned int, srclen, PAGE_SIZE);
33 
34 		kernel_fpu_begin();
35 		crypto_nhpoly1305_update_helper(desc, src, n, _nh_avx2);
36 		kernel_fpu_end();
37 		src += n;
38 		srclen -= n;
39 	} while (srclen);
40 	return 0;
41 }
42 
43 static struct shash_alg nhpoly1305_alg = {
44 	.base.cra_name		= "nhpoly1305",
45 	.base.cra_driver_name	= "nhpoly1305-avx2",
46 	.base.cra_priority	= 300,
47 	.base.cra_ctxsize	= sizeof(struct nhpoly1305_key),
48 	.base.cra_module	= THIS_MODULE,
49 	.digestsize		= POLY1305_DIGEST_SIZE,
50 	.init			= crypto_nhpoly1305_init,
51 	.update			= nhpoly1305_avx2_update,
52 	.final			= crypto_nhpoly1305_final,
53 	.setkey			= crypto_nhpoly1305_setkey,
54 	.descsize		= sizeof(struct nhpoly1305_state),
55 };
56 
57 static int __init nhpoly1305_mod_init(void)
58 {
59 	if (!boot_cpu_has(X86_FEATURE_AVX2) ||
60 	    !boot_cpu_has(X86_FEATURE_OSXSAVE))
61 		return -ENODEV;
62 
63 	return crypto_register_shash(&nhpoly1305_alg);
64 }
65 
66 static void __exit nhpoly1305_mod_exit(void)
67 {
68 	crypto_unregister_shash(&nhpoly1305_alg);
69 }
70 
71 module_init(nhpoly1305_mod_init);
72 module_exit(nhpoly1305_mod_exit);
73 
74 MODULE_DESCRIPTION("NHPoly1305 ε-almost-∆-universal hash function (AVX2-accelerated)");
75 MODULE_LICENSE("GPL v2");
76 MODULE_AUTHOR("Eric Biggers <ebiggers@google.com>");
77 MODULE_ALIAS_CRYPTO("nhpoly1305");
78 MODULE_ALIAS_CRYPTO("nhpoly1305-avx2");
79