xref: /freebsd/sys/opencrypto/xform_sha2.c (revision 716fd348e01c5f2ba125f878a634a753436c2994)
1 /*	$OpenBSD: xform.c,v 1.16 2001/08/28 12:20:43 ben Exp $	*/
2 /*-
3  * The authors of this code are John Ioannidis (ji@tla.org),
4  * Angelos D. Keromytis (kermit@csd.uch.gr),
5  * Niels Provos (provos@physnet.uni-hamburg.de) and
6  * Damien Miller (djm@mindrot.org).
7  *
8  * This code was written by John Ioannidis for BSD/OS in Athens, Greece,
9  * in November 1995.
10  *
11  * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
12  * by Angelos D. Keromytis.
13  *
14  * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
15  * and Niels Provos.
16  *
17  * Additional features in 1999 by Angelos D. Keromytis.
18  *
19  * AES XTS implementation in 2008 by Damien Miller
20  *
21  * Copyright (C) 1995, 1996, 1997, 1998, 1999 by John Ioannidis,
22  * Angelos D. Keromytis and Niels Provos.
23  *
24  * Copyright (C) 2001, Angelos D. Keromytis.
25  *
26  * Copyright (C) 2008, Damien Miller
27  * Copyright (c) 2014 The FreeBSD Foundation
28  * All rights reserved.
29  *
30  * Portions of this software were developed by John-Mark Gurney
31  * under sponsorship of the FreeBSD Foundation and
32  * Rubicon Communications, LLC (Netgate).
33  *
34  * Permission to use, copy, and modify this software with or without fee
35  * is hereby granted, provided that this entire notice is included in
36  * all copies of any software which is or includes a copy or
37  * modification of this software.
38  * You may use this code under the GNU public license if you so wish. Please
39  * contribute changes back to the authors under this freer than GPL license
40  * so that we may further the use of strong encryption without limitations to
41  * all.
42  *
43  * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
44  * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
45  * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
46  * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
47  * PURPOSE.
48  */
49 
50 #include <sys/cdefs.h>
51 __FBSDID("$FreeBSD$");
52 
53 #include <sys/types.h>
54 #include <crypto/sha2/sha224.h>
55 #include <crypto/sha2/sha256.h>
56 #include <crypto/sha2/sha384.h>
57 #include <crypto/sha2/sha512.h>
58 #include <opencrypto/xform_auth.h>
59 
60 static	int SHA224Update_int(void *, const void *, u_int);
61 static	int SHA256Update_int(void *, const void *, u_int);
62 static	int SHA384Update_int(void *, const void *, u_int);
63 static	int SHA512Update_int(void *, const void *, u_int);
64 
65 /* Plain hashes */
66 const struct auth_hash auth_hash_sha2_224 = {
67 	.type = CRYPTO_SHA2_224,
68 	.name = "SHA2-224",
69 	.hashsize = SHA2_224_HASH_LEN,
70 	.ctxsize = sizeof(SHA224_CTX),
71 	.blocksize = SHA2_224_BLOCK_LEN,
72 	.Init = (void (*)(void *)) SHA224_Init,
73 	.Update = SHA224Update_int,
74 	.Final = (void (*)(uint8_t *, void *)) SHA224_Final,
75 };
76 
77 const struct auth_hash auth_hash_sha2_256 = {
78 	.type = CRYPTO_SHA2_256,
79 	.name = "SHA2-256",
80 	.keysize = SHA2_256_BLOCK_LEN,
81 	.hashsize = SHA2_256_HASH_LEN,
82 	.ctxsize = sizeof(SHA256_CTX),
83 	.blocksize = SHA2_256_BLOCK_LEN,
84 	.Init = (void (*)(void *)) SHA256_Init,
85 	.Update = SHA256Update_int,
86 	.Final = (void (*)(uint8_t *, void *)) SHA256_Final,
87 };
88 
89 const struct auth_hash auth_hash_sha2_384 = {
90 	.type = CRYPTO_SHA2_384,
91 	.name = "SHA2-384",
92 	.keysize = SHA2_384_BLOCK_LEN,
93 	.hashsize = SHA2_384_HASH_LEN,
94 	.ctxsize = sizeof(SHA384_CTX),
95 	.blocksize = SHA2_384_BLOCK_LEN,
96 	.Init = (void (*)(void *)) SHA384_Init,
97 	.Update = SHA384Update_int,
98 	.Final = (void (*)(uint8_t *, void *)) SHA384_Final,
99 };
100 
101 const struct auth_hash auth_hash_sha2_512 = {
102 	.type = CRYPTO_SHA2_512,
103 	.name = "SHA2-512",
104 	.keysize = SHA2_512_BLOCK_LEN,
105 	.hashsize = SHA2_512_HASH_LEN,
106 	.ctxsize = sizeof(SHA512_CTX),
107 	.blocksize = SHA2_512_BLOCK_LEN,
108 	.Init = (void (*)(void *)) SHA512_Init,
109 	.Update = SHA512Update_int,
110 	.Final = (void (*)(uint8_t *, void *)) SHA512_Final,
111 };
112 
113 /* Authentication instances */
114 const struct auth_hash auth_hash_hmac_sha2_224 = {
115 	.type = CRYPTO_SHA2_224_HMAC,
116 	.name = "HMAC-SHA2-224",
117 	.keysize = SHA2_224_BLOCK_LEN,
118 	.hashsize = SHA2_224_HASH_LEN,
119 	.ctxsize = sizeof(SHA224_CTX),
120 	.blocksize = SHA2_224_BLOCK_LEN,
121 	.Init = (void (*)(void *)) SHA224_Init,
122 	.Update = SHA224Update_int,
123 	.Final = (void (*)(uint8_t *, void *)) SHA224_Final,
124 };
125 
126 const struct auth_hash auth_hash_hmac_sha2_256 = {
127 	.type = CRYPTO_SHA2_256_HMAC,
128 	.name = "HMAC-SHA2-256",
129 	.keysize = SHA2_256_BLOCK_LEN,
130 	.hashsize = SHA2_256_HASH_LEN,
131 	.ctxsize = sizeof(SHA256_CTX),
132 	.blocksize = SHA2_256_BLOCK_LEN,
133 	.Init = (void (*)(void *)) SHA256_Init,
134 	.Update = SHA256Update_int,
135 	.Final = (void (*)(uint8_t *, void *)) SHA256_Final,
136 };
137 
138 const struct auth_hash auth_hash_hmac_sha2_384 = {
139 	.type = CRYPTO_SHA2_384_HMAC,
140 	.name = "HMAC-SHA2-384",
141 	.keysize = SHA2_384_BLOCK_LEN,
142 	.hashsize = SHA2_384_HASH_LEN,
143 	.ctxsize = sizeof(SHA384_CTX),
144 	.blocksize = SHA2_384_BLOCK_LEN,
145 	.Init = (void (*)(void *)) SHA384_Init,
146 	.Update = SHA384Update_int,
147 	.Final = (void (*)(uint8_t *, void *)) SHA384_Final,
148 };
149 
150 const struct auth_hash auth_hash_hmac_sha2_512 = {
151 	.type = CRYPTO_SHA2_512_HMAC,
152 	.name = "HMAC-SHA2-512",
153 	.keysize = SHA2_512_BLOCK_LEN,
154 	.hashsize = SHA2_512_HASH_LEN,
155 	.ctxsize = sizeof(SHA512_CTX),
156 	.blocksize = SHA2_512_BLOCK_LEN,
157 	.Init = (void (*)(void *)) SHA512_Init,
158 	.Update = SHA512Update_int,
159 	.Final = (void (*)(uint8_t *, void *)) SHA512_Final,
160 };
161 
162 /*
163  * And now for auth.
164  */
165 static int
166 SHA224Update_int(void *ctx, const void *buf, u_int len)
167 {
168 	SHA224_Update(ctx, buf, len);
169 	return 0;
170 }
171 
172 static int
173 SHA256Update_int(void *ctx, const void *buf, u_int len)
174 {
175 	SHA256_Update(ctx, buf, len);
176 	return 0;
177 }
178 
179 static int
180 SHA384Update_int(void *ctx, const void *buf, u_int len)
181 {
182 	SHA384_Update(ctx, buf, len);
183 	return 0;
184 }
185 
186 static int
187 SHA512Update_int(void *ctx, const void *buf, u_int len)
188 {
189 	SHA512_Update(ctx, buf, len);
190 	return 0;
191 }
192