xref: /freebsd/sys/opencrypto/xform_sha2.c (revision 2e3f49888ec8851bafb22011533217487764fdb0)
1 /*	$OpenBSD: xform.c,v 1.16 2001/08/28 12:20:43 ben Exp $	*/
2 /*-
3  * The authors of this code are John Ioannidis (ji@tla.org),
4  * Angelos D. Keromytis (kermit@csd.uch.gr),
5  * Niels Provos (provos@physnet.uni-hamburg.de) and
6  * Damien Miller (djm@mindrot.org).
7  *
8  * This code was written by John Ioannidis for BSD/OS in Athens, Greece,
9  * in November 1995.
10  *
11  * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
12  * by Angelos D. Keromytis.
13  *
14  * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
15  * and Niels Provos.
16  *
17  * Additional features in 1999 by Angelos D. Keromytis.
18  *
19  * AES XTS implementation in 2008 by Damien Miller
20  *
21  * Copyright (C) 1995, 1996, 1997, 1998, 1999 by John Ioannidis,
22  * Angelos D. Keromytis and Niels Provos.
23  *
24  * Copyright (C) 2001, Angelos D. Keromytis.
25  *
26  * Copyright (C) 2008, Damien Miller
27  * Copyright (c) 2014 The FreeBSD Foundation
28  * All rights reserved.
29  *
30  * Portions of this software were developed by John-Mark Gurney
31  * under sponsorship of the FreeBSD Foundation and
32  * Rubicon Communications, LLC (Netgate).
33  *
34  * Permission to use, copy, and modify this software with or without fee
35  * is hereby granted, provided that this entire notice is included in
36  * all copies of any software which is or includes a copy or
37  * modification of this software.
38  * You may use this code under the GNU public license if you so wish. Please
39  * contribute changes back to the authors under this freer than GPL license
40  * so that we may further the use of strong encryption without limitations to
41  * all.
42  *
43  * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
44  * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
45  * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
46  * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
47  * PURPOSE.
48  */
49 
50 #include <sys/types.h>
51 #include <crypto/sha2/sha224.h>
52 #include <crypto/sha2/sha256.h>
53 #include <crypto/sha2/sha384.h>
54 #include <crypto/sha2/sha512.h>
55 #include <opencrypto/xform_auth.h>
56 
57 static	int SHA224Update_int(void *, const void *, u_int);
58 static	int SHA256Update_int(void *, const void *, u_int);
59 static	int SHA384Update_int(void *, const void *, u_int);
60 static	int SHA512Update_int(void *, const void *, u_int);
61 
62 /* Plain hashes */
63 const struct auth_hash auth_hash_sha2_224 = {
64 	.type = CRYPTO_SHA2_224,
65 	.name = "SHA2-224",
66 	.hashsize = SHA2_224_HASH_LEN,
67 	.ctxsize = sizeof(SHA224_CTX),
68 	.blocksize = SHA2_224_BLOCK_LEN,
69 	.Init = (void (*)(void *)) SHA224_Init,
70 	.Update = SHA224Update_int,
71 	.Final = (void (*)(uint8_t *, void *)) SHA224_Final,
72 };
73 
74 const struct auth_hash auth_hash_sha2_256 = {
75 	.type = CRYPTO_SHA2_256,
76 	.name = "SHA2-256",
77 	.keysize = SHA2_256_BLOCK_LEN,
78 	.hashsize = SHA2_256_HASH_LEN,
79 	.ctxsize = sizeof(SHA256_CTX),
80 	.blocksize = SHA2_256_BLOCK_LEN,
81 	.Init = (void (*)(void *)) SHA256_Init,
82 	.Update = SHA256Update_int,
83 	.Final = (void (*)(uint8_t *, void *)) SHA256_Final,
84 };
85 
86 const struct auth_hash auth_hash_sha2_384 = {
87 	.type = CRYPTO_SHA2_384,
88 	.name = "SHA2-384",
89 	.keysize = SHA2_384_BLOCK_LEN,
90 	.hashsize = SHA2_384_HASH_LEN,
91 	.ctxsize = sizeof(SHA384_CTX),
92 	.blocksize = SHA2_384_BLOCK_LEN,
93 	.Init = (void (*)(void *)) SHA384_Init,
94 	.Update = SHA384Update_int,
95 	.Final = (void (*)(uint8_t *, void *)) SHA384_Final,
96 };
97 
98 const struct auth_hash auth_hash_sha2_512 = {
99 	.type = CRYPTO_SHA2_512,
100 	.name = "SHA2-512",
101 	.keysize = SHA2_512_BLOCK_LEN,
102 	.hashsize = SHA2_512_HASH_LEN,
103 	.ctxsize = sizeof(SHA512_CTX),
104 	.blocksize = SHA2_512_BLOCK_LEN,
105 	.Init = (void (*)(void *)) SHA512_Init,
106 	.Update = SHA512Update_int,
107 	.Final = (void (*)(uint8_t *, void *)) SHA512_Final,
108 };
109 
110 /* Authentication instances */
111 const struct auth_hash auth_hash_hmac_sha2_224 = {
112 	.type = CRYPTO_SHA2_224_HMAC,
113 	.name = "HMAC-SHA2-224",
114 	.keysize = SHA2_224_BLOCK_LEN,
115 	.hashsize = SHA2_224_HASH_LEN,
116 	.ctxsize = sizeof(SHA224_CTX),
117 	.blocksize = SHA2_224_BLOCK_LEN,
118 	.Init = (void (*)(void *)) SHA224_Init,
119 	.Update = SHA224Update_int,
120 	.Final = (void (*)(uint8_t *, void *)) SHA224_Final,
121 };
122 
123 const struct auth_hash auth_hash_hmac_sha2_256 = {
124 	.type = CRYPTO_SHA2_256_HMAC,
125 	.name = "HMAC-SHA2-256",
126 	.keysize = SHA2_256_BLOCK_LEN,
127 	.hashsize = SHA2_256_HASH_LEN,
128 	.ctxsize = sizeof(SHA256_CTX),
129 	.blocksize = SHA2_256_BLOCK_LEN,
130 	.Init = (void (*)(void *)) SHA256_Init,
131 	.Update = SHA256Update_int,
132 	.Final = (void (*)(uint8_t *, void *)) SHA256_Final,
133 };
134 
135 const struct auth_hash auth_hash_hmac_sha2_384 = {
136 	.type = CRYPTO_SHA2_384_HMAC,
137 	.name = "HMAC-SHA2-384",
138 	.keysize = SHA2_384_BLOCK_LEN,
139 	.hashsize = SHA2_384_HASH_LEN,
140 	.ctxsize = sizeof(SHA384_CTX),
141 	.blocksize = SHA2_384_BLOCK_LEN,
142 	.Init = (void (*)(void *)) SHA384_Init,
143 	.Update = SHA384Update_int,
144 	.Final = (void (*)(uint8_t *, void *)) SHA384_Final,
145 };
146 
147 const struct auth_hash auth_hash_hmac_sha2_512 = {
148 	.type = CRYPTO_SHA2_512_HMAC,
149 	.name = "HMAC-SHA2-512",
150 	.keysize = SHA2_512_BLOCK_LEN,
151 	.hashsize = SHA2_512_HASH_LEN,
152 	.ctxsize = sizeof(SHA512_CTX),
153 	.blocksize = SHA2_512_BLOCK_LEN,
154 	.Init = (void (*)(void *)) SHA512_Init,
155 	.Update = SHA512Update_int,
156 	.Final = (void (*)(uint8_t *, void *)) SHA512_Final,
157 };
158 
159 /*
160  * And now for auth.
161  */
162 static int
163 SHA224Update_int(void *ctx, const void *buf, u_int len)
164 {
165 	SHA224_Update(ctx, buf, len);
166 	return 0;
167 }
168 
169 static int
170 SHA256Update_int(void *ctx, const void *buf, u_int len)
171 {
172 	SHA256_Update(ctx, buf, len);
173 	return 0;
174 }
175 
176 static int
177 SHA384Update_int(void *ctx, const void *buf, u_int len)
178 {
179 	SHA384_Update(ctx, buf, len);
180 	return 0;
181 }
182 
183 static int
184 SHA512Update_int(void *ctx, const void *buf, u_int len)
185 {
186 	SHA512_Update(ctx, buf, len);
187 	return 0;
188 }
189