Add fips_approved flag to SHA512 and HMAC-SHA512 structs.

Ensure this is initialized correctly based on system state
and key length.

Requested by lab.

Signed-off-by: Jeremy Allison <jallison@ciq.com>

Author: jallisonciq

include/crypto/sha2.h

@@ -746,6 +746,7 @@ void hmac_sha384_usingrawkey(const u8 *raw_key, size_t raw_key_len,
  */
 struct sha512_ctx {
 	struct __sha512_ctx ctx;
+	bool fips_approved;
 };
 
 /**
@@ -801,6 +802,7 @@ void sha512(const u8 *data, size_t len, u8 out[SHA512_DIGEST_SIZE]);
  */
 struct hmac_sha512_key {
 	struct __hmac_sha512_key key;
+	bool fips_approved;
 };
 
 /**
@@ -809,6 +811,7 @@ struct hmac_sha512_key {
  */
 struct hmac_sha512_ctx {
 	struct __hmac_sha512_ctx ctx;
+	bool fips_approved;
 };
 
 /**
@@ -838,6 +841,7 @@ static inline void hmac_sha512_init(struct hmac_sha512_ctx *ctx,
 				    const struct hmac_sha512_key *key)
 {
 	__hmac_sha512_init(&ctx->ctx, &key->key);
+	ctx->fips_approved = key->fips_approved;
 }
 
 /**

lib/crypto/sha512.c

@@ -158,6 +158,7 @@ EXPORT_SYMBOL_GPL(sha384_init);
 void sha512_init(struct sha512_ctx *ctx)
 {
 	__sha512_init(&ctx->ctx, &sha512_iv, 0);
+	ctx->fips_approved = fips_enabled;
 }
 EXPORT_SYMBOL_GPL(sha512_init);
 
@@ -300,6 +301,9 @@ void hmac_sha512_preparekey(struct hmac_sha512_key *key,
 {
 	__hmac_sha512_preparekey(&key->key.istate, &key->key.ostate,
 				 raw_key, raw_key_len, &sha512_iv);
+	key->fips_approved = fips_enabled;
+	if (fips_enabled && raw_key_len < 112 / 8)
+		key->fips_approved = false;
 }
 EXPORT_SYMBOL_GPL(hmac_sha512_preparekey);
 
@@ -331,6 +335,9 @@ void hmac_sha512_init_usingrawkey(struct hmac_sha512_ctx *ctx,
 				 raw_key, raw_key_len, &sha512_iv);
 	ctx->ctx.sha_ctx.bytecount_lo = SHA512_BLOCK_SIZE;
 	ctx->ctx.sha_ctx.bytecount_hi = 0;
+	ctx->fips_approved = fips_enabled;
+	if (fips_enabled && raw_key_len < 112 / 8)
+		ctx->fips_approved = false;
 }
 EXPORT_SYMBOL_GPL(hmac_sha512_init_usingrawkey);