[openssl/openssl] bff624: Support multiple calls of low level SHA3_squeeze()...

[Holger Dengler]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: bff62480333680463c82e88fdc67ed5ec14a0017
      https://github.com/openssl/openssl/commit/bff62480333680463c82e88fdc67ed5ec14a0017
  Author: Holger Dengler <dengler at linux.ibm.com>
  Date:   2023-11-10 (Fri, 10 Nov 2023)

  Changed paths:
    M crypto/sha/asm/keccak1600-s390x.pl

  Log Message:
  -----------
  Support multiple calls of low level SHA3_squeeze() for s390x.

The low level SHA3_Squeeze() function needed to change slightly so
that it can handle multiple squeezes. Support this on s390x
architecture as well.

Signed-off-by: Holger Dengler <dengler at linux.ibm.com>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22221)


  Commit: 1337b50936ed190a98af1ee6601d857b42a3d296
      https://github.com/openssl/openssl/commit/1337b50936ed190a98af1ee6601d857b42a3d296
  Author: Holger Dengler <dengler at linux.ibm.com>
  Date:   2023-11-10 (Fri, 10 Nov 2023)

  Changed paths:
    M providers/implementations/digests/sha3_prov.c

  Log Message:
  -----------
  Add xof state handing for generic sha3 absorb.

The digest life-cycle diagram specifies state transitions to `updated`
(aka XOF_STATE_ABSORB) only from `initialised` and `updated`. Add this
checking to the generic sha3 absorb implementation.

Signed-off-by: Holger Dengler <dengler at linux.ibm.com>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22221)


  Commit: 7aa45b8bb3269e881d0378aa785ff344efdd2897
      https://github.com/openssl/openssl/commit/7aa45b8bb3269e881d0378aa785ff344efdd2897
  Author: Holger Dengler <dengler at linux.ibm.com>
  Date:   2023-11-10 (Fri, 10 Nov 2023)

  Changed paths:
    M providers/implementations/digests/sha3_prov.c

  Log Message:
  -----------
  Fix state handling of sha3_absorb for s390x.

The digest life-cycle state diagram has been updated for XOF. Fix the
state handling in s390x_sha3_aborb() according to the updated state
diagram.

Signed-off-by: Holger Dengler <dengler at linux.ibm.com>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22221)


  Commit: 017acc58f6b67d5b347db411a7a1c4e890434f42
      https://github.com/openssl/openssl/commit/017acc58f6b67d5b347db411a7a1c4e890434f42
  Author: Holger Dengler <dengler at linux.ibm.com>
  Date:   2023-11-10 (Fri, 10 Nov 2023)

  Changed paths:
    M providers/implementations/digests/sha3_prov.c

  Log Message:
  -----------
  Fix state handling of sha3_final for s390x.

The digest life-cycle state diagram has been updated for XOF. Fix the
state handling in s390x_sha3_final() according to the updated state
diagram.

Signed-off-by: Holger Dengler <dengler at linux.ibm.com>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22221)


  Commit: 288fbb4b71343516cee6f6a44b9ec55d82fb1532
      https://github.com/openssl/openssl/commit/288fbb4b71343516cee6f6a44b9ec55d82fb1532
  Author: Holger Dengler <dengler at linux.ibm.com>
  Date:   2023-11-10 (Fri, 10 Nov 2023)

  Changed paths:
    M providers/implementations/digests/sha3_prov.c

  Log Message:
  -----------
  Fix state handling of shake_final for s390x.

The digest life-cycle state diagram has been updated for XOF. Fix the
state handling in s390x_shake_final() according to the updated state
diagram.

Signed-off-by: Holger Dengler <dengler at linux.ibm.com>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22221)


  Commit: 1022131d16e30cfbf896e02419019de48e8e1149
      https://github.com/openssl/openssl/commit/1022131d16e30cfbf896e02419019de48e8e1149
  Author: Holger Dengler <dengler at linux.ibm.com>
  Date:   2023-11-10 (Fri, 10 Nov 2023)

  Changed paths:
    M providers/implementations/digests/sha3_prov.c

  Log Message:
  -----------
  Fix state handling of keccak_final for s390x.

The digest life-cycle state diagram has been updated for XOF. Fix the
state handling in s390x_keccac_final() according to the updated state
diagram.

Signed-off-by: Holger Dengler <dengler at linux.ibm.com>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22221)


  Commit: 94898923538f686b74b6ddef34571f804d9b3811
      https://github.com/openssl/openssl/commit/94898923538f686b74b6ddef34571f804d9b3811
  Author: Holger Dengler <dengler at linux.ibm.com>
  Date:   2023-11-10 (Fri, 10 Nov 2023)

  Changed paths:
    M providers/implementations/digests/sha3_prov.c

  Log Message:
  -----------
  Support EVP_DigestSqueeze() for in the digest provider for s390x.

The new EVP_DigestSqueeze() API requires changes to all keccak-based
digest provider implementations. Update the s390x-part of the SHA3
digest provider.

Squeeze for SHA3 is not supported, so add an empty function pointer
(NULL).

Signed-off-by: Holger Dengler <dengler at linux.ibm.com>

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Todd Short <todd.short at me.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22221)


Compare: https://github.com/openssl/openssl/compare/536649082212...94898923538f