Add fips_approved flag to SHA384 and HMAC-SHA384 structs.

Ensure this is initialized correctly based on system state
and key length.

Requested by lab.

Signed-off-by: Jeremy Allison <jallison@ciq.com>

Author: jallisonciq

include/crypto/sha2.h

@@ -569,6 +569,7 @@ void __hmac_sha512_init(struct __hmac_sha512_ctx *ctx,
  */
 struct sha384_ctx {
 	struct __sha512_ctx ctx;
+	bool fips_approved;
 };
 
 /**
@@ -624,6 +625,7 @@ void sha384(const u8 *data, size_t len, u8 out[SHA384_DIGEST_SIZE]);
  */
 struct hmac_sha384_key {
 	struct __hmac_sha512_key key;
+	bool fips_approved;
 };
 
 /**
@@ -632,6 +634,7 @@ struct hmac_sha384_key {
  */
 struct hmac_sha384_ctx {
 	struct __hmac_sha512_ctx ctx;
+	bool fips_approved;
 };
 
 /**
@@ -661,6 +664,7 @@ static inline void hmac_sha384_init(struct hmac_sha384_ctx *ctx,
 				    const struct hmac_sha384_key *key)
 {
 	__hmac_sha512_init(&ctx->ctx, &key->key);
+	ctx->fips_approved = key->fips_approved;
 }
 
 /**

lib/crypto/sha512.c

@@ -151,6 +151,7 @@ static void __sha512_init(struct __sha512_ctx *ctx,
 void sha384_init(struct sha384_ctx *ctx)
 {
 	__sha512_init(&ctx->ctx, &sha384_iv, 0);
+	ctx->fips_approved = fips_enabled;
 }
 EXPORT_SYMBOL_GPL(sha384_init);
 
@@ -288,6 +289,9 @@ void hmac_sha384_preparekey(struct hmac_sha384_key *key,
 {
 	__hmac_sha512_preparekey(&key->key.istate, &key->key.ostate,
 				 raw_key, raw_key_len, &sha384_iv);
+	key->fips_approved = fips_enabled;
+	if (fips_enabled && raw_key_len < 112 / 8)
+		key->fips_approved = false;
 }
 EXPORT_SYMBOL_GPL(hmac_sha384_preparekey);
 
@@ -314,6 +318,9 @@ void hmac_sha384_init_usingrawkey(struct hmac_sha384_ctx *ctx,
 				 raw_key, raw_key_len, &sha384_iv);
 	ctx->ctx.sha_ctx.bytecount_lo = SHA512_BLOCK_SIZE;
 	ctx->ctx.sha_ctx.bytecount_hi = 0;
+	ctx->fips_approved = fips_enabled;
+	if (fips_enabled && raw_key_len < 112 / 8)
+		ctx->fips_approved = false;
 }
 EXPORT_SYMBOL_GPL(hmac_sha384_init_usingrawkey);