Providerized libssl fallout: cleanup init
[openssl.git] / crypto / s390xcap.c
1 /*
2  * Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
3  *
4  * Licensed under the Apache License 2.0 (the "License").  You may not use
5  * this file except in compliance with the License.  You can obtain a copy
6  * in the file LICENSE in the source distribution or at
7  * https://www.openssl.org/source/license.html
8  */
9
10 #include <stdio.h>
11 #include <stdlib.h>
12 #include <string.h>
13 #include <setjmp.h>
14 #include <signal.h>
15 #include "internal/cryptlib.h"
16 #include "crypto/ctype.h"
17 #include "s390x_arch.h"
18
19 #if defined(__GLIBC__) && defined(__GLIBC_PREREQ)
20 # if __GLIBC_PREREQ(2, 16)
21 #  include <sys/auxv.h>
22 #  if defined(HWCAP_S390_STFLE) && defined(HWCAP_S390_VX)
23 #   define OSSL_IMPLEMENT_GETAUXVAL
24 #  endif
25 # endif
26 #endif
27
28 #define LEN     128
29 #define STR_(S) #S
30 #define STR(S)  STR_(S)
31
32 #define TOK_FUNC(NAME)                                                  \
33     (sscanf(tok_begin,                                                  \
34             " " STR(NAME) " : %" STR(LEN) "[^:] : "                     \
35             "%" STR(LEN) "s %" STR(LEN) "s ",                           \
36             tok[0], tok[1], tok[2]) == 2) {                             \
37                                                                         \
38         off = (tok[0][0] == '~') ? 1 : 0;                               \
39         if (sscanf(tok[0] + off, "%llx", &cap->NAME[0]) != 1)           \
40             goto ret;                                                   \
41         if (off)                                                        \
42             cap->NAME[0] = ~cap->NAME[0];                               \
43                                                                         \
44         off = (tok[1][0] == '~') ? 1 : 0;                               \
45         if (sscanf(tok[1] + off, "%llx", &cap->NAME[1]) != 1)           \
46             goto ret;                                                   \
47         if (off)                                                        \
48             cap->NAME[1] = ~cap->NAME[1];                               \
49     }
50
51 #define TOK_CPU(NAME)                                                   \
52     (sscanf(tok_begin,                                                  \
53             " %" STR(LEN) "s %" STR(LEN) "s ",                          \
54             tok[0], tok[1]) == 1                                        \
55      && !strcmp(tok[0], #NAME)) {                                       \
56             memcpy(cap, &NAME, sizeof(*cap));                           \
57     }
58
59 #ifndef OSSL_IMPLEMENT_GETAUXVAL
60 static sigjmp_buf ill_jmp;
61 static void ill_handler(int sig)
62 {
63     siglongjmp(ill_jmp, sig);
64 }
65
66 void OPENSSL_vx_probe(void);
67 #endif
68
69 static const char *env;
70 static int parse_env(struct OPENSSL_s390xcap_st *cap);
71
72 void OPENSSL_s390x_facilities(void);
73 void OPENSSL_s390x_functions(void);
74
75 struct OPENSSL_s390xcap_st OPENSSL_s390xcap_P;
76
77 void OPENSSL_cpuid_setup(void)
78 {
79     struct OPENSSL_s390xcap_st cap;
80
81     if (OPENSSL_s390xcap_P.stfle[0])
82         return;
83
84     /* set a bit that will not be tested later */
85     OPENSSL_s390xcap_P.stfle[0] |= S390X_CAPBIT(0);
86
87 #if defined(OSSL_IMPLEMENT_GETAUXVAL)
88     {
89         const unsigned long hwcap = getauxval(AT_HWCAP);
90
91         /* protection against missing store-facility-list-extended */
92         if (hwcap & HWCAP_S390_STFLE)
93             OPENSSL_s390x_facilities();
94
95         /* protection against disabled vector facility */
96         if (!(hwcap & HWCAP_S390_VX)) {
97             OPENSSL_s390xcap_P.stfle[2] &= ~(S390X_CAPBIT(S390X_VX)
98                                              | S390X_CAPBIT(S390X_VXD)
99                                              | S390X_CAPBIT(S390X_VXE));
100         }
101     }
102 #else
103     {
104         sigset_t oset;
105         struct sigaction ill_act, oact_ill, oact_fpe;
106
107         memset(&ill_act, 0, sizeof(ill_act));
108         ill_act.sa_handler = ill_handler;
109         sigfillset(&ill_act.sa_mask);
110         sigdelset(&ill_act.sa_mask, SIGILL);
111         sigdelset(&ill_act.sa_mask, SIGFPE);
112         sigdelset(&ill_act.sa_mask, SIGTRAP);
113
114         sigprocmask(SIG_SETMASK, &ill_act.sa_mask, &oset);
115         sigaction(SIGILL, &ill_act, &oact_ill);
116         sigaction(SIGFPE, &ill_act, &oact_fpe);
117
118         /* protection against missing store-facility-list-extended */
119         if (sigsetjmp(ill_jmp, 1) == 0)
120             OPENSSL_s390x_facilities();
121
122         /* protection against disabled vector facility */
123         if ((OPENSSL_s390xcap_P.stfle[2] & S390X_CAPBIT(S390X_VX))
124             && (sigsetjmp(ill_jmp, 1) == 0)) {
125             OPENSSL_vx_probe();
126         } else {
127             OPENSSL_s390xcap_P.stfle[2] &= ~(S390X_CAPBIT(S390X_VX)
128                                              | S390X_CAPBIT(S390X_VXD)
129                                              | S390X_CAPBIT(S390X_VXE));
130         }
131
132         sigaction(SIGFPE, &oact_fpe, NULL);
133         sigaction(SIGILL, &oact_ill, NULL);
134         sigprocmask(SIG_SETMASK, &oset, NULL);
135     }
136 #endif
137
138     env = getenv("OPENSSL_s390xcap");
139     if (env != NULL) {
140         if (!parse_env(&cap))
141             env = NULL;
142     }
143
144     if (env != NULL) {
145         OPENSSL_s390xcap_P.stfle[0] &= cap.stfle[0];
146         OPENSSL_s390xcap_P.stfle[1] &= cap.stfle[1];
147         OPENSSL_s390xcap_P.stfle[2] &= cap.stfle[2];
148     }
149
150     OPENSSL_s390x_functions(); /* check OPENSSL_s390xcap_P.stfle */
151
152     if (env != NULL) {
153         OPENSSL_s390xcap_P.kimd[0] &= cap.kimd[0];
154         OPENSSL_s390xcap_P.kimd[1] &= cap.kimd[1];
155         OPENSSL_s390xcap_P.klmd[0] &= cap.klmd[0];
156         OPENSSL_s390xcap_P.klmd[1] &= cap.klmd[1];
157         OPENSSL_s390xcap_P.km[0] &= cap.km[0];
158         OPENSSL_s390xcap_P.km[1] &= cap.km[1];
159         OPENSSL_s390xcap_P.kmc[0] &= cap.kmc[0];
160         OPENSSL_s390xcap_P.kmc[1] &= cap.kmc[1];
161         OPENSSL_s390xcap_P.kmac[0] &= cap.kmac[0];
162         OPENSSL_s390xcap_P.kmac[1] &= cap.kmac[1];
163         OPENSSL_s390xcap_P.kmctr[0] &= cap.kmctr[0];
164         OPENSSL_s390xcap_P.kmctr[1] &= cap.kmctr[1];
165         OPENSSL_s390xcap_P.kmo[0] &= cap.kmo[0];
166         OPENSSL_s390xcap_P.kmo[1] &= cap.kmo[1];
167         OPENSSL_s390xcap_P.kmf[0] &= cap.kmf[0];
168         OPENSSL_s390xcap_P.kmf[1] &= cap.kmf[1];
169         OPENSSL_s390xcap_P.prno[0] &= cap.prno[0];
170         OPENSSL_s390xcap_P.prno[1] &= cap.prno[1];
171         OPENSSL_s390xcap_P.kma[0] &= cap.kma[0];
172         OPENSSL_s390xcap_P.kma[1] &= cap.kma[1];
173         OPENSSL_s390xcap_P.pcc[0] &= cap.pcc[0];
174         OPENSSL_s390xcap_P.pcc[1] &= cap.pcc[1];
175         OPENSSL_s390xcap_P.kdsa[0] &= cap.kdsa[0];
176         OPENSSL_s390xcap_P.kdsa[1] &= cap.kdsa[1];
177     }
178 }
179
180 static int parse_env(struct OPENSSL_s390xcap_st *cap)
181 {
182     /*-
183      * CPU model data
184      * (only the STFLE- and QUERY-bits relevant to libcrypto are set)
185      */
186
187     /*-
188      * z900 (2000) - z/Architecture POP SA22-7832-00
189      * Facility detection would fail on real hw (no STFLE).
190      */
191     static const struct OPENSSL_s390xcap_st z900 = {
192         /*.stfle  = */{0ULL, 0ULL, 0ULL, 0ULL},
193         /*.kimd   = */{0ULL, 0ULL},
194         /*.klmd   = */{0ULL, 0ULL},
195         /*.km     = */{0ULL, 0ULL},
196         /*.kmc    = */{0ULL, 0ULL},
197         /*.kmac   = */{0ULL, 0ULL},
198         /*.kmctr  = */{0ULL, 0ULL},
199         /*.kmo    = */{0ULL, 0ULL},
200         /*.kmf    = */{0ULL, 0ULL},
201         /*.prno   = */{0ULL, 0ULL},
202         /*.kma    = */{0ULL, 0ULL},
203         /*.pcc    = */{0ULL, 0ULL},
204         /*.kdsa   = */{0ULL, 0ULL},
205     };
206
207     /*-
208      * z990 (2003) - z/Architecture POP SA22-7832-02
209      * Implements MSA. Facility detection would fail on real hw (no STFLE).
210      */
211     static const struct OPENSSL_s390xcap_st z990 = {
212         /*.stfle  = */{S390X_CAPBIT(S390X_MSA),
213                        0ULL, 0ULL, 0ULL},
214         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
215                        | S390X_CAPBIT(S390X_SHA_1),
216                        0ULL},
217         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
218                        | S390X_CAPBIT(S390X_SHA_1),
219                        0ULL},
220         /*.km     = */{S390X_CAPBIT(S390X_QUERY),
221                        0ULL},
222         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY),
223                        0ULL},
224         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY),
225                        0ULL},
226         /*.kmctr  = */{0ULL, 0ULL},
227         /*.kmo    = */{0ULL, 0ULL},
228         /*.kmf    = */{0ULL, 0ULL},
229         /*.prno   = */{0ULL, 0ULL},
230         /*.kma    = */{0ULL, 0ULL},
231         /*.pcc    = */{0ULL, 0ULL},
232         /*.kdsa   = */{0ULL, 0ULL},
233     };
234
235     /*-
236      * z9 (2005) - z/Architecture POP SA22-7832-04
237      * Implements MSA and MSA1.
238      */
239     static const struct OPENSSL_s390xcap_st z9 = {
240         /*.stfle  = */{S390X_CAPBIT(S390X_MSA)
241                        | S390X_CAPBIT(S390X_STCKF),
242                        0ULL, 0ULL, 0ULL},
243         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
244                        | S390X_CAPBIT(S390X_SHA_1)
245                        | S390X_CAPBIT(S390X_SHA_256),
246                        0ULL},
247         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
248                        | S390X_CAPBIT(S390X_SHA_1)
249                        | S390X_CAPBIT(S390X_SHA_256),
250                        0ULL},
251         /*.km     = */{S390X_CAPBIT(S390X_QUERY)
252                        | S390X_CAPBIT(S390X_AES_128),
253                        0ULL},
254         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY)
255                        | S390X_CAPBIT(S390X_AES_128),
256                        0ULL},
257         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY),
258                        0ULL},
259         /*.kmctr  = */{0ULL, 0ULL},
260         /*.kmo    = */{0ULL, 0ULL},
261         /*.kmf    = */{0ULL, 0ULL},
262         /*.prno   = */{0ULL, 0ULL},
263         /*.kma    = */{0ULL, 0ULL},
264         /*.pcc    = */{0ULL, 0ULL},
265         /*.kdsa   = */{0ULL, 0ULL},
266     };
267
268     /*-
269      * z10 (2008) - z/Architecture POP SA22-7832-06
270      * Implements MSA and MSA1-2.
271      */
272     static const struct OPENSSL_s390xcap_st z10 = {
273         /*.stfle  = */{S390X_CAPBIT(S390X_MSA)
274                        | S390X_CAPBIT(S390X_STCKF),
275                        0ULL, 0ULL, 0ULL},
276         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
277                        | S390X_CAPBIT(S390X_SHA_1)
278                        | S390X_CAPBIT(S390X_SHA_256)
279                        | S390X_CAPBIT(S390X_SHA_512),
280                        0ULL},
281         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
282                        | S390X_CAPBIT(S390X_SHA_1)
283                        | S390X_CAPBIT(S390X_SHA_256)
284                        | S390X_CAPBIT(S390X_SHA_512),
285                        0ULL},
286         /*.km     = */{S390X_CAPBIT(S390X_QUERY)
287                        | S390X_CAPBIT(S390X_AES_128)
288                        | S390X_CAPBIT(S390X_AES_192)
289                        | S390X_CAPBIT(S390X_AES_256),
290                        0ULL},
291         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY)
292                        | S390X_CAPBIT(S390X_AES_128)
293                        | S390X_CAPBIT(S390X_AES_192)
294                        | S390X_CAPBIT(S390X_AES_256),
295                        0ULL},
296         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY),
297                        0ULL},
298         /*.kmctr  = */{0ULL, 0ULL},
299         /*.kmo    = */{0ULL, 0ULL},
300         /*.kmf    = */{0ULL, 0ULL},
301         /*.prno   = */{0ULL, 0ULL},
302         /*.kma    = */{0ULL, 0ULL},
303         /*.pcc    = */{0ULL, 0ULL},
304         /*.kdsa   = */{0ULL, 0ULL},
305     };
306
307     /*-
308      * z196 (2010) - z/Architecture POP SA22-7832-08
309      * Implements MSA and MSA1-4.
310      */
311     static const struct OPENSSL_s390xcap_st z196 = {
312         /*.stfle  = */{S390X_CAPBIT(S390X_MSA)
313                        | S390X_CAPBIT(S390X_STCKF),
314                        S390X_CAPBIT(S390X_MSA3)
315                        | S390X_CAPBIT(S390X_MSA4),
316                        0ULL, 0ULL},
317         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
318                        | S390X_CAPBIT(S390X_SHA_1)
319                        | S390X_CAPBIT(S390X_SHA_256)
320                        | S390X_CAPBIT(S390X_SHA_512),
321                        S390X_CAPBIT(S390X_GHASH)},
322         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
323                        | S390X_CAPBIT(S390X_SHA_1)
324                        | S390X_CAPBIT(S390X_SHA_256)
325                        | S390X_CAPBIT(S390X_SHA_512),
326                        0ULL},
327         /*.km     = */{S390X_CAPBIT(S390X_QUERY)
328                        | S390X_CAPBIT(S390X_AES_128)
329                        | S390X_CAPBIT(S390X_AES_192)
330                        | S390X_CAPBIT(S390X_AES_256)
331                        | S390X_CAPBIT(S390X_XTS_AES_128)
332                        | S390X_CAPBIT(S390X_XTS_AES_256),
333                        0ULL},
334         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY)
335                        | S390X_CAPBIT(S390X_AES_128)
336                        | S390X_CAPBIT(S390X_AES_192)
337                        | S390X_CAPBIT(S390X_AES_256),
338                        0ULL},
339         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY)
340                        | S390X_CAPBIT(S390X_AES_128)
341                        | S390X_CAPBIT(S390X_AES_192)
342                        | S390X_CAPBIT(S390X_AES_256),
343                        0ULL},
344         /*.kmctr  = */{S390X_CAPBIT(S390X_QUERY)
345                        | S390X_CAPBIT(S390X_AES_128)
346                        | S390X_CAPBIT(S390X_AES_192)
347                        | S390X_CAPBIT(S390X_AES_256),
348                        0ULL},
349         /*.kmo    = */{S390X_CAPBIT(S390X_QUERY)
350                        | S390X_CAPBIT(S390X_AES_128)
351                        | S390X_CAPBIT(S390X_AES_192)
352                        | S390X_CAPBIT(S390X_AES_256),
353                        0ULL},
354         /*.kmf    = */{S390X_CAPBIT(S390X_QUERY)
355                        | S390X_CAPBIT(S390X_AES_128)
356                        | S390X_CAPBIT(S390X_AES_192)
357                        | S390X_CAPBIT(S390X_AES_256),
358                        0ULL},
359         /*.prno   = */{0ULL, 0ULL},
360         /*.kma    = */{0ULL, 0ULL},
361         /*.pcc    = */{S390X_CAPBIT(S390X_QUERY),
362                        0ULL},
363         /*.kdsa   = */{0ULL, 0ULL},
364     };
365
366     /*-
367      * zEC12 (2012) - z/Architecture POP SA22-7832-09
368      * Implements MSA and MSA1-4.
369      */
370     static const struct OPENSSL_s390xcap_st zEC12 = {
371         /*.stfle  = */{S390X_CAPBIT(S390X_MSA)
372                        | S390X_CAPBIT(S390X_STCKF),
373                        S390X_CAPBIT(S390X_MSA3)
374                        | S390X_CAPBIT(S390X_MSA4),
375                        0ULL, 0ULL},
376         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
377                        | S390X_CAPBIT(S390X_SHA_1)
378                        | S390X_CAPBIT(S390X_SHA_256)
379                        | S390X_CAPBIT(S390X_SHA_512),
380                    S390X_CAPBIT(S390X_GHASH)},
381         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
382                        | S390X_CAPBIT(S390X_SHA_1)
383                        | S390X_CAPBIT(S390X_SHA_256)
384                        | S390X_CAPBIT(S390X_SHA_512),
385                        0ULL},
386         /*.km     = */{S390X_CAPBIT(S390X_QUERY)
387                        | S390X_CAPBIT(S390X_AES_128)
388                        | S390X_CAPBIT(S390X_AES_192)
389                        | S390X_CAPBIT(S390X_AES_256)
390                        | S390X_CAPBIT(S390X_XTS_AES_128)
391                        | S390X_CAPBIT(S390X_XTS_AES_256),
392                        0ULL},
393         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY)
394                        | S390X_CAPBIT(S390X_AES_128)
395                        | S390X_CAPBIT(S390X_AES_192)
396                        | S390X_CAPBIT(S390X_AES_256),
397                        0ULL},
398         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY)
399                        | S390X_CAPBIT(S390X_AES_128)
400                        | S390X_CAPBIT(S390X_AES_192)
401                        | S390X_CAPBIT(S390X_AES_256),
402                        0ULL},
403         /*.kmctr  = */{S390X_CAPBIT(S390X_QUERY)
404                        | S390X_CAPBIT(S390X_AES_128)
405                        | S390X_CAPBIT(S390X_AES_192)
406                        | S390X_CAPBIT(S390X_AES_256),
407                        0ULL},
408         /*.kmo    = */{S390X_CAPBIT(S390X_QUERY)
409                        | S390X_CAPBIT(S390X_AES_128)
410                        | S390X_CAPBIT(S390X_AES_192)
411                        | S390X_CAPBIT(S390X_AES_256),
412                        0ULL},
413         /*.kmf    = */{S390X_CAPBIT(S390X_QUERY)
414                        | S390X_CAPBIT(S390X_AES_128)
415                        | S390X_CAPBIT(S390X_AES_192)
416                        | S390X_CAPBIT(S390X_AES_256),
417                        0ULL},
418         /*.prno   = */{0ULL, 0ULL},
419         /*.kma    = */{0ULL, 0ULL},
420         /*.pcc    = */{S390X_CAPBIT(S390X_QUERY),
421                        0ULL},
422         /*.kdsa   = */{0ULL, 0ULL},
423     };
424
425     /*-
426      * z13 (2015) - z/Architecture POP SA22-7832-10
427      * Implements MSA and MSA1-5.
428      */
429     static const struct OPENSSL_s390xcap_st z13 = {
430         /*.stfle  = */{S390X_CAPBIT(S390X_MSA)
431                        | S390X_CAPBIT(S390X_STCKF)
432                        | S390X_CAPBIT(S390X_MSA5),
433                        S390X_CAPBIT(S390X_MSA3)
434                        | S390X_CAPBIT(S390X_MSA4),
435                        S390X_CAPBIT(S390X_VX),
436                        0ULL},
437         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
438                        | S390X_CAPBIT(S390X_SHA_1)
439                        | S390X_CAPBIT(S390X_SHA_256)
440                        | S390X_CAPBIT(S390X_SHA_512),
441                        S390X_CAPBIT(S390X_GHASH)},
442         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
443                        | S390X_CAPBIT(S390X_SHA_1)
444                        | S390X_CAPBIT(S390X_SHA_256)
445                        | S390X_CAPBIT(S390X_SHA_512),
446                        0ULL},
447         /*.km     = */{S390X_CAPBIT(S390X_QUERY)
448                        | S390X_CAPBIT(S390X_AES_128)
449                        | S390X_CAPBIT(S390X_AES_192)
450                        | S390X_CAPBIT(S390X_AES_256)
451                        | S390X_CAPBIT(S390X_XTS_AES_128)
452                        | S390X_CAPBIT(S390X_XTS_AES_256),
453                        0ULL},
454         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY)
455                        | S390X_CAPBIT(S390X_AES_128)
456                        | S390X_CAPBIT(S390X_AES_192)
457                        | S390X_CAPBIT(S390X_AES_256),
458                        0ULL},
459         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY)
460                        | S390X_CAPBIT(S390X_AES_128)
461                        | S390X_CAPBIT(S390X_AES_192)
462                        | S390X_CAPBIT(S390X_AES_256),
463                        0ULL},
464         /*.kmctr  = */{S390X_CAPBIT(S390X_QUERY)
465                        | S390X_CAPBIT(S390X_AES_128)
466                        | S390X_CAPBIT(S390X_AES_192)
467                        | S390X_CAPBIT(S390X_AES_256),
468                        0ULL},
469         /*.kmo    = */{S390X_CAPBIT(S390X_QUERY)
470                        | S390X_CAPBIT(S390X_AES_128)
471                        | S390X_CAPBIT(S390X_AES_192)
472                        | S390X_CAPBIT(S390X_AES_256),
473                        0ULL},
474         /*.kmf    = */{S390X_CAPBIT(S390X_QUERY)
475                        | S390X_CAPBIT(S390X_AES_128)
476                        | S390X_CAPBIT(S390X_AES_192)
477                        | S390X_CAPBIT(S390X_AES_256),
478                        0ULL},
479         /*.prno   = */{S390X_CAPBIT(S390X_QUERY)
480                        | S390X_CAPBIT(S390X_SHA_512_DRNG),
481                        0ULL},
482         /*.kma    = */{0ULL, 0ULL},
483         /*.pcc    = */{S390X_CAPBIT(S390X_QUERY),
484                        0ULL},
485         /*.kdsa   = */{0ULL, 0ULL},
486     };
487
488     /*-
489      * z14 (2017) - z/Architecture POP SA22-7832-11
490      * Implements MSA and MSA1-8.
491      */
492     static const struct OPENSSL_s390xcap_st z14 = {
493         /*.stfle  = */{S390X_CAPBIT(S390X_MSA)
494                        | S390X_CAPBIT(S390X_STCKF)
495                        | S390X_CAPBIT(S390X_MSA5),
496                        S390X_CAPBIT(S390X_MSA3)
497                        | S390X_CAPBIT(S390X_MSA4),
498                        S390X_CAPBIT(S390X_VX)
499                        | S390X_CAPBIT(S390X_VXD)
500                        | S390X_CAPBIT(S390X_VXE)
501                        | S390X_CAPBIT(S390X_MSA8),
502                        0ULL},
503         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
504                        | S390X_CAPBIT(S390X_SHA_1)
505                        | S390X_CAPBIT(S390X_SHA_256)
506                        | S390X_CAPBIT(S390X_SHA_512)
507                        | S390X_CAPBIT(S390X_SHA3_224)
508                        | S390X_CAPBIT(S390X_SHA3_256)
509                        | S390X_CAPBIT(S390X_SHA3_384)
510                        | S390X_CAPBIT(S390X_SHA3_512)
511                        | S390X_CAPBIT(S390X_SHAKE_128)
512                        | S390X_CAPBIT(S390X_SHAKE_256),
513                        S390X_CAPBIT(S390X_GHASH)},
514         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
515                        | S390X_CAPBIT(S390X_SHA_1)
516                        | S390X_CAPBIT(S390X_SHA_256)
517                        | S390X_CAPBIT(S390X_SHA_512)
518                        | S390X_CAPBIT(S390X_SHA3_224)
519                        | S390X_CAPBIT(S390X_SHA3_256)
520                        | S390X_CAPBIT(S390X_SHA3_384)
521                        | S390X_CAPBIT(S390X_SHA3_512)
522                        | S390X_CAPBIT(S390X_SHAKE_128)
523                        | S390X_CAPBIT(S390X_SHAKE_256),
524                        0ULL},
525         /*.km     = */{S390X_CAPBIT(S390X_QUERY)
526                        | S390X_CAPBIT(S390X_AES_128)
527                        | S390X_CAPBIT(S390X_AES_192)
528                        | S390X_CAPBIT(S390X_AES_256)
529                        | S390X_CAPBIT(S390X_XTS_AES_128)
530                        | S390X_CAPBIT(S390X_XTS_AES_256),
531                        0ULL},
532         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY)
533                        | S390X_CAPBIT(S390X_AES_128)
534                        | S390X_CAPBIT(S390X_AES_192)
535                        | S390X_CAPBIT(S390X_AES_256),
536                        0ULL},
537         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY)
538                        | S390X_CAPBIT(S390X_AES_128)
539                        | S390X_CAPBIT(S390X_AES_192)
540                        | S390X_CAPBIT(S390X_AES_256),
541                        0ULL},
542         /*.kmctr  = */{S390X_CAPBIT(S390X_QUERY)
543                        | S390X_CAPBIT(S390X_AES_128)
544                        | S390X_CAPBIT(S390X_AES_192)
545                        | S390X_CAPBIT(S390X_AES_256),
546                        0ULL},
547         /*.kmo    = */{S390X_CAPBIT(S390X_QUERY)
548                        | S390X_CAPBIT(S390X_AES_128)
549                        | S390X_CAPBIT(S390X_AES_192)
550                        | S390X_CAPBIT(S390X_AES_256),
551                        0ULL},
552         /*.kmf    = */{S390X_CAPBIT(S390X_QUERY)
553                        | S390X_CAPBIT(S390X_AES_128)
554                        | S390X_CAPBIT(S390X_AES_192)
555                        | S390X_CAPBIT(S390X_AES_256),
556                        0ULL},
557         /*.prno   = */{S390X_CAPBIT(S390X_QUERY)
558                        | S390X_CAPBIT(S390X_SHA_512_DRNG),
559                        S390X_CAPBIT(S390X_TRNG)},
560         /*.kma    = */{S390X_CAPBIT(S390X_QUERY)
561                        | S390X_CAPBIT(S390X_AES_128)
562                        | S390X_CAPBIT(S390X_AES_192)
563                        | S390X_CAPBIT(S390X_AES_256),
564                        0ULL},
565         /*.pcc    = */{S390X_CAPBIT(S390X_QUERY),
566                        0ULL},
567         /*.kdsa   = */{0ULL, 0ULL},
568     };
569
570     /*-
571      * z15 (2019) - z/Architecture POP SA22-7832-12
572      * Implements MSA and MSA1-9.
573      */
574     static const struct OPENSSL_s390xcap_st z15 = {
575         /*.stfle  = */{S390X_CAPBIT(S390X_MSA)
576                        | S390X_CAPBIT(S390X_STCKF)
577                        | S390X_CAPBIT(S390X_MSA5),
578                        S390X_CAPBIT(S390X_MSA3)
579                        | S390X_CAPBIT(S390X_MSA4),
580                        S390X_CAPBIT(S390X_VX)
581                        | S390X_CAPBIT(S390X_VXD)
582                        | S390X_CAPBIT(S390X_VXE)
583                        | S390X_CAPBIT(S390X_MSA8)
584                        | S390X_CAPBIT(S390X_MSA9),
585                        0ULL},
586         /*.kimd   = */{S390X_CAPBIT(S390X_QUERY)
587                        | S390X_CAPBIT(S390X_SHA_1)
588                        | S390X_CAPBIT(S390X_SHA_256)
589                        | S390X_CAPBIT(S390X_SHA_512)
590                        | S390X_CAPBIT(S390X_SHA3_224)
591                        | S390X_CAPBIT(S390X_SHA3_256)
592                        | S390X_CAPBIT(S390X_SHA3_384)
593                        | S390X_CAPBIT(S390X_SHA3_512)
594                        | S390X_CAPBIT(S390X_SHAKE_128)
595                        | S390X_CAPBIT(S390X_SHAKE_256),
596                        S390X_CAPBIT(S390X_GHASH)},
597         /*.klmd   = */{S390X_CAPBIT(S390X_QUERY)
598                        | S390X_CAPBIT(S390X_SHA_1)
599                        | S390X_CAPBIT(S390X_SHA_256)
600                        | S390X_CAPBIT(S390X_SHA_512)
601                        | S390X_CAPBIT(S390X_SHA3_224)
602                        | S390X_CAPBIT(S390X_SHA3_256)
603                        | S390X_CAPBIT(S390X_SHA3_384)
604                        | S390X_CAPBIT(S390X_SHA3_512)
605                        | S390X_CAPBIT(S390X_SHAKE_128)
606                        | S390X_CAPBIT(S390X_SHAKE_256),
607                        0ULL},
608         /*.km     = */{S390X_CAPBIT(S390X_QUERY)
609                        | S390X_CAPBIT(S390X_AES_128)
610                        | S390X_CAPBIT(S390X_AES_192)
611                        | S390X_CAPBIT(S390X_AES_256)
612                        | S390X_CAPBIT(S390X_XTS_AES_128)
613                        | S390X_CAPBIT(S390X_XTS_AES_256),
614                        0ULL},
615         /*.kmc    = */{S390X_CAPBIT(S390X_QUERY)
616                        | S390X_CAPBIT(S390X_AES_128)
617                        | S390X_CAPBIT(S390X_AES_192)
618                        | S390X_CAPBIT(S390X_AES_256),
619                        0ULL},
620         /*.kmac   = */{S390X_CAPBIT(S390X_QUERY)
621                        | S390X_CAPBIT(S390X_AES_128)
622                        | S390X_CAPBIT(S390X_AES_192)
623                        | S390X_CAPBIT(S390X_AES_256),
624                        0ULL},
625         /*.kmctr  = */{S390X_CAPBIT(S390X_QUERY)
626                        | S390X_CAPBIT(S390X_AES_128)
627                        | S390X_CAPBIT(S390X_AES_192)
628                        | S390X_CAPBIT(S390X_AES_256),
629                        0ULL},
630         /*.kmo    = */{S390X_CAPBIT(S390X_QUERY)
631                        | S390X_CAPBIT(S390X_AES_128)
632                        | S390X_CAPBIT(S390X_AES_192)
633                        | S390X_CAPBIT(S390X_AES_256),
634                        0ULL},
635         /*.kmf    = */{S390X_CAPBIT(S390X_QUERY)
636                        | S390X_CAPBIT(S390X_AES_128)
637                        | S390X_CAPBIT(S390X_AES_192)
638                        | S390X_CAPBIT(S390X_AES_256),
639                        0ULL},
640         /*.prno   = */{S390X_CAPBIT(S390X_QUERY)
641                        | S390X_CAPBIT(S390X_SHA_512_DRNG),
642                        S390X_CAPBIT(S390X_TRNG)},
643         /*.kma    = */{S390X_CAPBIT(S390X_QUERY)
644                        | S390X_CAPBIT(S390X_AES_128)
645                        | S390X_CAPBIT(S390X_AES_192)
646                        | S390X_CAPBIT(S390X_AES_256),
647                        0ULL},
648         /*.pcc    = */{S390X_CAPBIT(S390X_QUERY),
649                        S390X_CAPBIT(S390X_SCALAR_MULTIPLY_P256)
650                        | S390X_CAPBIT(S390X_SCALAR_MULTIPLY_P384)
651                        | S390X_CAPBIT(S390X_SCALAR_MULTIPLY_P521)
652                        | S390X_CAPBIT(S390X_SCALAR_MULTIPLY_ED25519)
653                        | S390X_CAPBIT(S390X_SCALAR_MULTIPLY_ED448)
654                        | S390X_CAPBIT(S390X_SCALAR_MULTIPLY_X25519)
655                        | S390X_CAPBIT(S390X_SCALAR_MULTIPLY_X448)},
656         /*.kdsa   = */{S390X_CAPBIT(S390X_QUERY)
657                        | S390X_CAPBIT(S390X_ECDSA_VERIFY_P256)
658                        | S390X_CAPBIT(S390X_ECDSA_VERIFY_P384)
659                        | S390X_CAPBIT(S390X_ECDSA_VERIFY_P521)
660                        | S390X_CAPBIT(S390X_ECDSA_SIGN_P256)
661                        | S390X_CAPBIT(S390X_ECDSA_SIGN_P384)
662                        | S390X_CAPBIT(S390X_ECDSA_SIGN_P521)
663                        | S390X_CAPBIT(S390X_EDDSA_VERIFY_ED25519)
664                        | S390X_CAPBIT(S390X_EDDSA_VERIFY_ED448)
665                        | S390X_CAPBIT(S390X_EDDSA_SIGN_ED25519)
666                        | S390X_CAPBIT(S390X_EDDSA_SIGN_ED448),
667                        0ULL},
668     };
669
670     char *tok_begin, *tok_end, *buff, tok[S390X_STFLE_MAX][LEN + 1];
671     int rc, off, i, n;
672
673     buff = malloc(strlen(env) + 1);
674     if (buff == NULL)
675         return 0;
676
677     rc = 0;
678     memset(cap, ~0, sizeof(*cap));
679     strcpy(buff, env);
680
681     tok_begin = buff + strspn(buff, ";");
682     strtok(tok_begin, ";");
683     tok_end = strtok(NULL, ";");
684
685     while (tok_begin != NULL) {
686         /* stfle token */
687         if ((n = sscanf(tok_begin,
688                         " stfle : %" STR(LEN) "[^:] : "
689                         "%" STR(LEN) "[^:] : %" STR(LEN) "s ",
690                         tok[0], tok[1], tok[2]))) {
691             for (i = 0; i < n; i++) {
692                 off = (tok[i][0] == '~') ? 1 : 0;
693                 if (sscanf(tok[i] + off, "%llx", &cap->stfle[i]) != 1)
694                     goto ret;
695                 if (off)
696                     cap->stfle[i] = ~cap->stfle[i];
697             }
698         }
699
700         /* query function tokens */
701         else if TOK_FUNC(kimd)
702         else if TOK_FUNC(klmd)
703         else if TOK_FUNC(km)
704         else if TOK_FUNC(kmc)
705         else if TOK_FUNC(kmac)
706         else if TOK_FUNC(kmctr)
707         else if TOK_FUNC(kmo)
708         else if TOK_FUNC(kmf)
709         else if TOK_FUNC(prno)
710         else if TOK_FUNC(kma)
711         else if TOK_FUNC(pcc)
712         else if TOK_FUNC(kdsa)
713
714         /* CPU model tokens */
715         else if TOK_CPU(z900)
716         else if TOK_CPU(z990)
717         else if TOK_CPU(z9)
718         else if TOK_CPU(z10)
719         else if TOK_CPU(z196)
720         else if TOK_CPU(zEC12)
721         else if TOK_CPU(z13)
722         else if TOK_CPU(z14)
723         else if TOK_CPU(z15)
724
725         /* whitespace(ignored) or invalid tokens */
726         else {
727             while (*tok_begin != '\0') {
728                 if (!ossl_isspace(*tok_begin))
729                     goto ret;
730                 tok_begin++;
731             }
732         }
733
734         tok_begin = tok_end;
735         tok_end = strtok(NULL, ";");
736     }
737
738     rc = 1;
739 ret:
740     free(buff);
741     return rc;
742 }