/*
 * sha256_base.h - core logic for SHA-256 implementations
 *
 * Copyright (C) 2015 Linaro Ltd <ard.biesheuvel@linaro.org>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <crypto/internal/hash.h>
#include <crypto/sha.h>
#include <linux/crypto.h>
#include <linux/module.h>

#include <asm/unaligned.h>

typedef void (sha256_block_fn)(struct sha256_state *sst, u8 const *src,
			       int blocks);

static inline int sha224_base_init(struct shash_desc *desc)
{
	struct sha256_state *sctx = shash_desc_ctx(desc);

	sctx->state[0] = SHA224_H0;
	sctx->state[1] = SHA224_H1;
	sctx->state[2] = SHA224_H2;
	sctx->state[3] = SHA224_H3;
	sctx->state[4] = SHA224_H4;
	sctx->state[5] = SHA224_H5;
	sctx->state[6] = SHA224_H6;
	sctx->state[7] = SHA224_H7;
	sctx->count = 0;

	return 0;
}

static inline int sha256_base_init(struct shash_desc *desc)
{
	struct sha256_state *sctx = shash_desc_ctx(desc);

	sctx->state[0] = SHA256_H0;
	sctx->state[1] = SHA256_H1;
	sctx->state[2] = SHA256_H2;
	sctx->state[3] = SHA256_H3;
	sctx->state[4] = SHA256_H4;
	sctx->state[5] = SHA256_H5;
	sctx->state[6] = SHA256_H6;
	sctx->state[7] = SHA256_H7;
	sctx->count = 0;

	return 0;
}

static inline int sha256_base_do_update(struct shash_desc *desc,
					const u8 *data,
					unsigned int len,
					sha256_block_fn *block_fn)
{
	struct sha256_state *sctx = shash_desc_ctx(desc);
	unsigned int partial = sctx->count % SHA256_BLOCK_SIZE;

	sctx->count += len;

	if (unlikely((partial + len) >= SHA256_BLOCK_SIZE)) {
		int blocks;

		if (partial) {
			int p = SHA256_BLOCK_SIZE - partial;

			memcpy(sctx->buf + partial, data, p);
			data += p;
			len -= p;

			block_fn(sctx, sctx->buf, 1);
		}

		blocks = len / SHA256_BLOCK_SIZE;
		len %= SHA256_BLOCK_SIZE;

		if (blocks) {
			block_fn(sctx, data, blocks);
			data += blocks * SHA256_BLOCK_SIZE;
		}
		partial = 0;
	}
	if (len)
		memcpy(sctx->buf + partial, data, len);

	return 0;
}

static inline int sha256_base_do_finalize(struct shash_desc *desc,
					  sha256_block_fn *block_fn)
{
	const int bit_offset = SHA256_BLOCK_SIZE - sizeof(__be64);
	struct sha256_state *sctx = shash_desc_ctx(desc);
	__be64 *bits = (__be64 *)(sctx->buf + bit_offset);
	unsigned int partial = sctx->count % SHA256_BLOCK_SIZE;

	sctx->buf[partial++] = 0x80;
	if (partial > bit_offset) {
		memset(sctx->buf + partial, 0x0, SHA256_BLOCK_SIZE - partial);
		partial = 0;

		block_fn(sctx, sctx->buf, 1);
	}

	memset(sctx->buf + partial, 0x0, bit_offset - partial);
	*bits = cpu_to_be64(sctx->count << 3);
	block_fn(sctx, sctx->buf, 1);

	return 0;
}

static inline int sha256_base_finish(struct shash_desc *desc, u8 *out)
{
	unsigned int digest_size = crypto_shash_digestsize(desc->tfm);
	struct sha256_state *sctx = shash_desc_ctx(desc);
	__be32 *digest = (__be32 *)out;
	int i;

	for (i = 0; digest_size > 0; i++, digest_size -= sizeof(__be32))
		put_unaligned_be32(sctx->state[i], digest++);

	*sctx = (struct sha256_state){};
	return 0;
}
:37 -0500'>2017-02-08</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=217e6fa24ce28ec87fca8da93c9016cb78028612'>net: introduce device min_header_len</a></td><td>Willem de Bruijn</td><td>1</td><td><span class='deletions'>-0</span>/<span class='insertions'>+4</span></td></tr>
<tr><td><span title='2017-02-08 12:52:11 -0500'>2017-02-08</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=2bd137de531367fb573d90150d1872cb2a2095f7'>lwtunnel: valid encap attr check should return 0 when lwtunnel is disabled</a></td><td>David Ahern</td><td>1</td><td><span class='deletions'>-1</span>/<span class='insertions'>+4</span></td></tr>
<tr><td><span title='2017-02-07 12:10:57 -0800'>2017-02-07</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=926af6273fc683cd98cd0ce7bf0d04a02eed6742'>Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net</a></td><td>Linus Torvalds</td><td>3</td><td><span class='deletions'>-7</span>/<span class='insertions'>+10</span></td></tr>
<tr><td><span title='2017-02-07 11:19:00 -0500'>2017-02-07</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=69629464e0b587f3711739b3aa2bcdaf2e075276'>udp: properly cope with csum errors</a></td><td>Eric Dumazet</td><td>1</td><td><span class='deletions'>-1</span>/<span class='insertions'>+3</span></td></tr>
<tr><td><span title='2017-02-04 19:44:22 -0500'>2017-02-04</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=d71b7896886345c53ef1d84bda2bc758554f5d61'>netlabel: out of bound access in cipso_v4_validate()</a></td><td>Eric Dumazet</td><td>1</td><td><span class='deletions'>-0</span>/<span class='insertions'>+4</span></td></tr>
<tr><td><span title='2017-02-04 12:18:01 -0800'>2017-02-04</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=a572a1b999489efb591287632279c6c9eca3e4ed'>Merge branch 'irq-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/ker...</a></td><td>Linus Torvalds</td><td>1</td><td><span class='deletions'>-0</span>/<span class='insertions'>+17</span></td></tr>
<tr><td><span title='2017-02-04 10:44:15 -0800'>2017-02-04</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=412e6d3fec247b2bc83106514b0fb3b17e2eb7fe'>Merge tag 'char-misc-4.10-rc7' of git://git.kernel.org/pub/scm/linux/kernel/g...</a></td><td>Linus Torvalds</td><td>1</td><td><span class='deletions'>-2</span>/<span class='insertions'>+30</span></td></tr>
<tr><td><span title='2017-02-03 14:13:19 -0800'>2017-02-03</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=a96dfddbcc04336bbed50dc2b24823e45e09e80c'>base/memory, hotplug: fix a kernel oops in show_valid_zones()</a></td><td>Toshi Kani</td><td>1</td><td><span class='deletions'>-1</span>/<span class='insertions'>+2</span></td></tr>
<tr><td><span title='2017-02-03 11:32:25 -0800'>2017-02-03</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=79c9089f97d37ffac88c3ddb6d359b2cf75058b7'>Merge tag 'drm-fixes-for-v4.10-rc7' of git://people.freedesktop.org/~airlied/...</a></td><td>Linus Torvalds</td><td>2</td><td><span class='deletions'>-1</span>/<span class='insertions'>+16</span></td></tr>
<tr><td><span title='2017-02-03 10:30:27 -0800'>2017-02-03</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=2cb54ce9ee92ae627bc1cef8bea236905910a86d'>Merge branch 'modversions' (modversions fixes for powerpc from Ard)</a></td><td>Linus Torvalds</td><td>3</td><td><span class='deletions'>-17</span>/<span class='insertions'>+25</span></td></tr>
<tr><td><span title='2017-02-03 09:56:43 -0800'>2017-02-03</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=29905b52fad0854351f57bab867647e4982285bf'>log2: make order_base_2() behave correctly on const input value zero</a></td><td>Ard Biesheuvel</td><td>1</td><td><span class='deletions'>-1</span>/<span class='insertions'>+12</span></td></tr>
<tr><td><span title='2017-02-03 08:28:25 -0800'>2017-02-03</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=4b9eee96fcb361a5e16a8d2619825e8a048f81f7'>module: unify absolute krctab definitions for 32-bit and 64-bit</a></td><td>Ard Biesheuvel</td><td>1</td><td><span class='deletions'>-7</span>/<span class='insertions'>+0</span></td></tr>
<tr><td><span title='2017-02-03 08:28:25 -0800'>2017-02-03</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=71810db27c1c853b335675bee335d893bc3d324b'>modversions: treat symbol CRCs as 32 bit quantities</a></td><td>Ard Biesheuvel</td><td>3</td><td><span class='deletions'>-12</span>/<span class='insertions'>+27</span></td></tr>
<tr><td><span title='2017-02-03 11:05:23 -0500'>2017-02-03</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=013e8167899d389075160412a8c0c5e0581e1f13'>ipv6: sr: remove cleanup flag and fix HMAC computation</a></td><td>David Lebrun</td><td>1</td><td><span class='deletions'>-6</span>/<span class='insertions'>+3</span></td></tr>
<tr><td><span title='2017-02-02 13:30:19 -0800'>2017-02-02</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=891aa1e0f13c3aaa756c69b343d6ab6f3357009b'>Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/ke...</a></td><td>Linus Torvalds</td><td>1</td><td><span class='deletions'>-3</span>/<span class='insertions'>+0</span></td></tr>
<tr><td><span title='2017-02-01 11:52:27 -0800'>2017-02-01</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=6d04dfc8966019b8b0977b2cb942351f13d2b178'>Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net</a></td><td>Linus Torvalds</td><td>4</td><td><span class='deletions'>-19</span>/<span class='insertions'>+26</span></td></tr>
<tr><td><span title='2017-02-01 10:30:56 -0800'>2017-02-01</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=2883aaea363f7a897ff06d2e6c73ae7aae285bcb'>Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...</a></td><td>Linus Torvalds</td><td>1</td><td><span class='deletions'>-0</span>/<span class='insertions'>+1</span></td></tr>
<tr><td><span title='2017-02-01 12:10:56 -0500'>2017-02-01</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=1a2a14444d32b89b28116daea86f63ced1716668'>net: fix ndo_features_check/ndo_fix_features comment ordering</a></td><td>Dimitris Michailidis</td><td>1</td><td><span class='deletions'>-14</span>/<span class='insertions'>+15</span></td></tr>
<tr><td><span title='2017-02-01 08:37:27 +0100'>2017-02-01</span></td><td><a href='/cgit.cgi/linux/net-next.git/commit/include?id=fff4b87e594ad3d2e4f51e8d3d86a6f9d3d8b654'>perf/x86/intel/uncore: Make package handling more robust</a></td><td>Thomas Gleixner</td><td>1</td><td><span class='deletions'>-2</span>/<span class='insertions'>+0</span></td></tr>