Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7918ecef authored by Ard Biesheuvel's avatar Ard Biesheuvel Committed by Herbert Xu
Browse files

crypto: arm64/sha2 - integrate OpenSSL implementations of SHA256/SHA512 



This integrates both the accelerated scalar and the NEON implementations
of SHA-224/256 as well as SHA-384/512 from the OpenSSL project.

Relative performance compared to the respective generic C versions:

                 |  SHA256-scalar  | SHA256-NEON* |  SHA512  |
     ------------+-----------------+--------------+----------+
     Cortex-A53  |      1.63x      |     1.63x    |   2.34x  |
     Cortex-A57  |      1.43x      |     1.59x    |   1.95x  |
     Cortex-A73  |      1.26x      |     1.56x    |     ?    |

The core crypto code was authored by Andy Polyakov of the OpenSSL
project, in collaboration with whom the upstream code was adapted so
that this module can be built from the same version of sha512-armv8.pl.

The version in this patch was taken from OpenSSL commit 32bbb62ea634
("sha/asm/sha512-armv8.pl: fix big-endian support in __KERNEL__ case.")

* The core SHA algorithm is fundamentally sequential, but there is a
  secondary transformation involved, called the schedule update, which
  can be performed independently. The NEON version of SHA-224/SHA-256
  only implements this part of the algorithm using NEON instructions,
  the sequential part is always done using scalar instructions.

Signed-off-by: default avatarArd Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
parent ed424bb3

arch/arm64/crypto/Kconfig

+8 −0
Original line number Original line Diff line number Diff line
@@ -8,6 +8,14 @@ menuconfig ARM64_CRYPTO 




if ARM64_CRYPTO

if ARM64_CRYPTO





config CRYPTO_SHA256_ARM64

	tristate "SHA-224/SHA-256 digest algorithm for arm64"

	select CRYPTO_HASH



config CRYPTO_SHA512_ARM64

	tristate "SHA-384/SHA-512 digest algorithm for arm64"

	select CRYPTO_HASH



config CRYPTO_SHA1_ARM64_CE

config CRYPTO_SHA1_ARM64_CE

	tristate "SHA-1 digest algorithm (ARMv8 Crypto Extensions)"

	tristate "SHA-1 digest algorithm (ARMv8 Crypto Extensions)"

	depends on ARM64 && KERNEL_MODE_NEON

	depends on ARM64 && KERNEL_MODE_NEON

arch/arm64/crypto/Makefile

+17 −0
Original line number Original line Diff line number Diff line
@@ -29,6 +29,12 @@ aes-ce-blk-y := aes-glue-ce.o aes-ce.o 
obj-$(CONFIG_CRYPTO_AES_ARM64_NEON_BLK) += aes-neon-blk.o

obj-$(CONFIG_CRYPTO_AES_ARM64_NEON_BLK) += aes-neon-blk.o

aes-neon-blk-y := aes-glue-neon.o aes-neon.o

aes-neon-blk-y := aes-glue-neon.o aes-neon.o





obj-$(CONFIG_CRYPTO_SHA256_ARM64) += sha256-arm64.o

sha256-arm64-y := sha256-glue.o sha256-core.o



obj-$(CONFIG_CRYPTO_SHA512_ARM64) += sha512-arm64.o

sha512-arm64-y := sha512-glue.o sha512-core.o



AFLAGS_aes-ce.o		:= -DINTERLEAVE=4

AFLAGS_aes-ce.o		:= -DINTERLEAVE=4

AFLAGS_aes-neon.o	:= -DINTERLEAVE=4

AFLAGS_aes-neon.o	:= -DINTERLEAVE=4
@@ -40,3 +46,14 @@ CFLAGS_crc32-arm64.o := -mcpu=generic+crc 




$(obj)/aes-glue-%.o: $(src)/aes-glue.c FORCE

$(obj)/aes-glue-%.o: $(src)/aes-glue.c FORCE

	$(call if_changed_rule,cc_o_c)

	$(call if_changed_rule,cc_o_c)



quiet_cmd_perlasm = PERLASM $@

      cmd_perlasm = $(PERL) $(<) void $(@)



$(src)/sha256-core.S_shipped: $(src)/sha512-armv8.pl

	$(call cmd,perlasm)



$(src)/sha512-core.S_shipped: $(src)/sha512-armv8.pl

	$(call cmd,perlasm)



.PRECIOUS: $(obj)/sha256-core.S $(obj)/sha512-core.S