[openssl/openssl] 086d88: s390x: Fix Keccak implementation

[Tomas Mraz]

  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 086d88a637ecf537af62260e16d4e0011dbb8d1b
      https://github.openssl.org/openssl/openssl/commit/086d88a637ecf537af62260e16d4e0011dbb8d1b
  Author: Juergen Christ <jchrist at linux.ibm.com>
  Date:   2022-07-14 (Thu, 14 Jul 2022)

  Changed paths:
    M providers/implementations/digests/sha3_prov.c

  Log Message:
  -----------
  s390x: Fix Keccak implementation

s390x does not directly support keccak via CPACF since these instructions
hard-code the padding to either SHA-3 or SHAKE for the "compute last message
digest" function.  This caused test errors on Keccak digests.  Fix it by using
"compute intermediate message digest" and manually computing the padding for
Keccak.

Fixes: a8b238f0e4c1 ("Fix SHA, SHAKE, and KECCAK ASM flag passing")

Signed-off-by: Juergen Christ <jchrist at linux.ibm.com>

Reviewed-by: Patrick Steuer <patrick.steuer at de.ibm.com>
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18794)