summaryrefslogtreecommitdiffstats
path: root/src/plugins/crypto_native/sha2.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/plugins/crypto_native/sha2.c')
-rw-r--r--src/plugins/crypto_native/sha2.c198
1 files changed, 0 insertions, 198 deletions
diff --git a/src/plugins/crypto_native/sha2.c b/src/plugins/crypto_native/sha2.c
deleted file mode 100644
index 6787f629104..00000000000
--- a/src/plugins/crypto_native/sha2.c
+++ /dev/null
@@ -1,198 +0,0 @@
-/* SPDX-License-Identifier: Apache-2.0
- * Copyright(c) 2024 Cisco Systems, Inc.
- */
-
-#include <vlib/vlib.h>
-#include <vnet/plugin/plugin.h>
-#include <vnet/crypto/crypto.h>
-#include <crypto_native/crypto_native.h>
-#include <vppinfra/crypto/sha2.h>
-
-static_always_inline u32
-crypto_native_ops_hash_sha2 (vlib_main_t *vm, vnet_crypto_op_t *ops[],
- u32 n_ops, vnet_crypto_op_chunk_t *chunks,
- clib_sha2_type_t type, int maybe_chained)
-{
- vnet_crypto_op_t *op = ops[0];
- clib_sha2_ctx_t ctx;
- u32 n_left = n_ops;
-
-next:
- if (op->flags & VNET_CRYPTO_OP_FLAG_CHAINED_BUFFERS)
- {
- vnet_crypto_op_chunk_t *chp = chunks + op->chunk_index;
- clib_sha2_init (&ctx, type);
- for (int j = 0; j < op->n_chunks; j++, chp++)
- clib_sha2_update (&ctx, chp->src, chp->len);
- clib_sha2_final (&ctx, op->digest);
- }
- else
- clib_sha2 (type, op->src, op->len, op->digest);
-
- op->status = VNET_CRYPTO_OP_STATUS_COMPLETED;
-
- if (--n_left)
- {
- op += 1;
- goto next;
- }
-
- return n_ops;
-}
-
-static_always_inline u32
-crypto_native_ops_hmac_sha2 (vlib_main_t *vm, vnet_crypto_op_t *ops[],
- u32 n_ops, vnet_crypto_op_chunk_t *chunks,
- clib_sha2_type_t type)
-{
- crypto_native_main_t *cm = &crypto_native_main;
- vnet_crypto_op_t *op = ops[0];
- u32 n_left = n_ops;
- clib_sha2_hmac_ctx_t ctx;
- u8 buffer[64];
- u32 sz, n_fail = 0;
-
- for (; n_left; n_left--, op++)
- {
- clib_sha2_hmac_init (
- &ctx, type, (clib_sha2_hmac_key_data_t *) cm->key_data[op->key_index]);
- if (op->flags & VNET_CRYPTO_OP_FLAG_CHAINED_BUFFERS)
- {
- vnet_crypto_op_chunk_t *chp = chunks + op->chunk_index;
- for (int j = 0; j < op->n_chunks; j++, chp++)
- clib_sha2_hmac_update (&ctx, chp->src, chp->len);
- }
- else
- clib_sha2_hmac_update (&ctx, op->src, op->len);
-
- clib_sha2_hmac_final (&ctx, buffer);
-
- if (op->digest_len)
- {
- sz = op->digest_len;
- if (op->flags & VNET_CRYPTO_OP_FLAG_HMAC_CHECK)
- {
- if ((memcmp (op->digest, buffer, sz)))
- {
- n_fail++;
- op->status = VNET_CRYPTO_OP_STATUS_FAIL_BAD_HMAC;
- continue;
- }
- }
- else
- clib_memcpy_fast (op->digest, buffer, sz);
- }
- else
- {
- sz = clib_sha2_variants[type].digest_size;
- if (op->flags & VNET_CRYPTO_OP_FLAG_HMAC_CHECK)
- {
- if ((memcmp (op->digest, buffer, sz)))
- {
- n_fail++;
- op->status = VNET_CRYPTO_OP_STATUS_FAIL_BAD_HMAC;
- continue;
- }
- }
- else
- clib_memcpy_fast (op->digest, buffer, sz);
- }
-
- op->status = VNET_CRYPTO_OP_STATUS_COMPLETED;
- }
-
- return n_ops - n_fail;
-}
-
-static void *
-sha2_key_add (vnet_crypto_key_t *key, clib_sha2_type_t type)
-{
- clib_sha2_hmac_key_data_t *kd;
-
- kd = clib_mem_alloc_aligned (sizeof (*kd), CLIB_CACHE_LINE_BYTES);
- clib_sha2_hmac_key_data (type, key->data, vec_len (key->data), kd);
-
- return kd;
-}
-
-static int
-probe ()
-{
-#if defined(__x86_64__)
-
-#if defined(__SHA__) && defined(__AVX512F__)
- if (clib_cpu_supports_sha () && clib_cpu_supports_avx512f ())
- return 30;
-#elif defined(__SHA__) && defined(__AVX2__)
- if (clib_cpu_supports_sha () && clib_cpu_supports_avx2 ())
- return 20;
-#elif defined(__SHA__)
- if (clib_cpu_supports_sha ())
- return 10;
-#endif
-
-#elif defined(__aarch64__)
-#if defined(__ARM_FEATURE_SHA2)
- if (clib_cpu_supports_sha2 ())
- return 10;
-#endif
-#endif
- return -1;
-}
-
-#define _(b) \
- static u32 crypto_native_ops_hash_sha##b ( \
- vlib_main_t *vm, vnet_crypto_op_t *ops[], u32 n_ops) \
- { \
- return crypto_native_ops_hash_sha2 (vm, ops, n_ops, 0, CLIB_SHA2_##b, 0); \
- } \
- \
- static u32 crypto_native_ops_chained_hash_sha##b ( \
- vlib_main_t *vm, vnet_crypto_op_t *ops[], vnet_crypto_op_chunk_t *chunks, \
- u32 n_ops) \
- { \
- return crypto_native_ops_hash_sha2 (vm, ops, n_ops, chunks, \
- CLIB_SHA2_##b, 1); \
- } \
- \
- static u32 crypto_native_ops_hmac_sha##b ( \
- vlib_main_t *vm, vnet_crypto_op_t *ops[], u32 n_ops) \
- { \
- return crypto_native_ops_hmac_sha2 (vm, ops, n_ops, 0, CLIB_SHA2_##b); \
- } \
- \
- static u32 crypto_native_ops_chained_hmac_sha##b ( \
- vlib_main_t *vm, vnet_crypto_op_t *ops[], vnet_crypto_op_chunk_t *chunks, \
- u32 n_ops) \
- { \
- return crypto_native_ops_hmac_sha2 (vm, ops, n_ops, chunks, \
- CLIB_SHA2_##b); \
- } \
- \
- static void *sha2_##b##_key_add (vnet_crypto_key_t *k) \
- { \
- return sha2_key_add (k, CLIB_SHA2_##b); \
- } \
- \
- CRYPTO_NATIVE_OP_HANDLER (crypto_native_hash_sha##b) = { \
- .op_id = VNET_CRYPTO_OP_SHA##b##_HASH, \
- .fn = crypto_native_ops_hash_sha##b, \
- .cfn = crypto_native_ops_chained_hash_sha##b, \
- .probe = probe, \
- }; \
- CRYPTO_NATIVE_OP_HANDLER (crypto_native_hmac_sha##b) = { \
- .op_id = VNET_CRYPTO_OP_SHA##b##_HMAC, \
- .fn = crypto_native_ops_hmac_sha##b, \
- .cfn = crypto_native_ops_chained_hmac_sha##b, \
- .probe = probe, \
- }; \
- CRYPTO_NATIVE_KEY_HANDLER (crypto_native_hmac_sha##b) = { \
- .alg_id = VNET_CRYPTO_ALG_HMAC_SHA##b, \
- .key_fn = sha2_##b##_key_add, \
- .probe = probe, \
- };
-
-_ (224)
-_ (256)
-
-#undef _