35 #include <sys/types.h>
67 #define SHA2_UNROLL_TRANSFORM
120 #define SHA256_SHORT_BLOCK_LENGTH (SHA256_BLOCK_LENGTH - 8)
121 #define SHA384_SHORT_BLOCK_LENGTH (SHA384_BLOCK_LENGTH - 16)
122 #define SHA512_SHORT_BLOCK_LENGTH (SHA512_BLOCK_LENGTH - 16)
126 #ifndef WORDS_BIGENDIAN
127 #define REVERSE32(w,x) { \
128 sha2_word32 tmp = (w); \
129 tmp = (tmp >> 16) | (tmp << 16); \
130 (x) = ((tmp & 0xff00ff00UL) >> 8) | ((tmp & 0x00ff00ffUL) << 8); \
132 #define REVERSE64(w,x) { \
133 sha2_word64 tmp = (w); \
134 tmp = (tmp >> 32) | (tmp << 32); \
135 tmp = ((tmp & 0xff00ff00ff00ff00ULL) >> 8) | \
136 ((tmp & 0x00ff00ff00ff00ffULL) << 8); \
137 (x) = ((tmp & 0xffff0000ffff0000ULL) >> 16) | \
138 ((tmp & 0x0000ffff0000ffffULL) << 16); \
147 #define ADDINC128(w,n) { \
148 (w)[0] += (sha2_word64)(n); \
149 if ((w)[0] < (n)) { \
163 #if !defined(SHA2_USE_MEMSET_MEMCPY) && !defined(SHA2_USE_BZERO_BCOPY)
165 #define SHA2_USE_MEMSET_MEMCPY 1
167 #if defined(SHA2_USE_MEMSET_MEMCPY) && defined(SHA2_USE_BZERO_BCOPY)
169 #error Define either SHA2_USE_MEMSET_MEMCPY or SHA2_USE_BZERO_BCOPY, not both!
172 #ifdef SHA2_USE_MEMSET_MEMCPY
173 #define MEMSET_BZERO(p,l) memset((p), 0, (l))
174 #define MEMCPY_BCOPY(d,s,l) memcpy((d), (s), (l))
176 #ifdef SHA2_USE_BZERO_BCOPY
177 #define MEMSET_BZERO(p,l) bzero((p), (l))
178 #define MEMCPY_BCOPY(d,s,l) bcopy((s), (d), (l))
192 #define R(b,x) ((x) >> (b))
194 #define S32(b,x) (((x) >> (b)) | ((x) << (32 - (b))))
196 #define S64(b,x) (((x) >> (b)) | ((x) << (64 - (b))))
199 #define Ch(x,y,z) (((x) & (y)) ^ ((~(x)) & (z)))
200 #define Maj(x,y,z) (((x) & (y)) ^ ((x) & (z)) ^ ((y) & (z)))
203 #define Sigma0_256(x) (S32(2, (x)) ^ S32(13, (x)) ^ S32(22, (x)))
204 #define Sigma1_256(x) (S32(6, (x)) ^ S32(11, (x)) ^ S32(25, (x)))
205 #define sigma0_256(x) (S32(7, (x)) ^ S32(18, (x)) ^ R(3 , (x)))
206 #define sigma1_256(x) (S32(17, (x)) ^ S32(19, (x)) ^ R(10, (x)))
209 #define Sigma0_512(x) (S64(28, (x)) ^ S64(34, (x)) ^ S64(39, (x)))
210 #define Sigma1_512(x) (S64(14, (x)) ^ S64(18, (x)) ^ S64(41, (x)))
211 #define sigma0_512(x) (S64( 1, (x)) ^ S64( 8, (x)) ^ R( 7, (x)))
212 #define sigma1_512(x) (S64(19, (x)) ^ S64(61, (x)) ^ R( 6, (x)))
227 0x428a2f98UL, 0x71374491UL, 0xb5c0fbcfUL, 0xe9b5dba5UL,
228 0x3956c25bUL, 0x59f111f1UL, 0x923f82a4UL, 0xab1c5ed5UL,
229 0xd807aa98UL, 0x12835b01UL, 0x243185beUL, 0x550c7dc3UL,
230 0x72be5d74UL, 0x80deb1feUL, 0x9bdc06a7UL, 0xc19bf174UL,
231 0xe49b69c1UL, 0xefbe4786UL, 0x0fc19dc6UL, 0x240ca1ccUL,
232 0x2de92c6fUL, 0x4a7484aaUL, 0x5cb0a9dcUL, 0x76f988daUL,
233 0x983e5152UL, 0xa831c66dUL, 0xb00327c8UL, 0xbf597fc7UL,
234 0xc6e00bf3UL, 0xd5a79147UL, 0x06ca6351UL, 0x14292967UL,
235 0x27b70a85UL, 0x2e1b2138UL, 0x4d2c6dfcUL, 0x53380d13UL,
236 0x650a7354UL, 0x766a0abbUL, 0x81c2c92eUL, 0x92722c85UL,
237 0xa2bfe8a1UL, 0xa81a664bUL, 0xc24b8b70UL, 0xc76c51a3UL,
238 0xd192e819UL, 0xd6990624UL, 0xf40e3585UL, 0x106aa070UL,
239 0x19a4c116UL, 0x1e376c08UL, 0x2748774cUL, 0x34b0bcb5UL,
240 0x391c0cb3UL, 0x4ed8aa4aUL, 0x5b9cca4fUL, 0x682e6ff3UL,
241 0x748f82eeUL, 0x78a5636fUL, 0x84c87814UL, 0x8cc70208UL,
242 0x90befffaUL, 0xa4506cebUL, 0xbef9a3f7UL, 0xc67178f2UL
259 0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL,
260 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,
261 0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL,
262 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,
263 0xd807aa98a3030242ULL, 0x12835b0145706fbeULL,
264 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,
265 0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL,
266 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,
267 0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL,
268 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,
269 0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL,
270 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,
271 0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL,
272 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,
273 0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL,
274 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,
275 0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL,
276 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,
277 0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL,
278 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,
279 0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL,
280 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,
281 0xd192e819d6ef5218ULL, 0xd69906245565a910ULL,
282 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,
283 0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL,
284 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,
285 0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL,
286 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,
287 0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL,
288 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,
289 0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL,
290 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,
291 0xca273eceea26619cULL, 0xd186b8c721c0c207ULL,
292 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,
293 0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL,
294 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,
295 0x28db77f523047d84ULL, 0x32caab7b40c72493ULL,
296 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,
297 0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL,
298 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL
303 0xcbbb9d5dc1059ed8ULL,
304 0x629a292a367cd507ULL,
305 0x9159015a3070dd17ULL,
306 0x152fecd8f70e5939ULL,
307 0x67332667ffc00b31ULL,
308 0x8eb44a8768581511ULL,
309 0xdb0c2e0d64f98fa7ULL,
310 0x47b5481dbefa4fa4ULL
315 0x6a09e667f3bcc908ULL,
316 0xbb67ae8584caa73bULL,
317 0x3c6ef372fe94f82bULL,
318 0xa54ff53a5f1d36f1ULL,
319 0x510e527fade682d1ULL,
320 0x9b05688c2b3e6c1fULL,
321 0x1f83d9abfb41bd6bULL,
322 0x5be0cd19137e2179ULL
342 #ifdef SHA2_UNROLL_TRANSFORM
346 #ifndef WORDS_BIGENDIAN
348 #define ROUND256_0_TO_15(a,b,c,d,e,f,g,h) \
349 REVERSE32(*data++, W256[j]); \
350 T1 = (h) + Sigma1_256(e) + Ch((e), (f), (g)) + \
353 (h) = T1 + Sigma0_256(a) + Maj((a), (b), (c)); \
359 #define ROUND256_0_TO_15(a,b,c,d,e,f,g,h) \
360 T1 = (h) + Sigma1_256(e) + Ch((e), (f), (g)) + \
361 K256[j] + (W256[j] = *data++); \
363 (h) = T1 + Sigma0_256(a) + Maj((a), (b), (c)); \
368 #define ROUND256(a,b,c,d,e,f,g,h) \
369 s0 = W256[(j+1)&0x0f]; \
370 s0 = sigma0_256(s0); \
371 s1 = W256[(j+14)&0x0f]; \
372 s1 = sigma1_256(s1); \
373 T1 = (h) + Sigma1_256(e) + Ch((e), (f), (g)) + K256[j] + \
374 (W256[j&0x0f] += s1 + W256[(j+9)&0x0f] + s0); \
376 (h) = T1 + Sigma0_256(a) + Maj((a), (b), (c)); \
387 a = context->
state[0];
388 b = context->
state[1];
389 c = context->
state[2];
390 d = context->
state[3];
391 e = context->
state[4];
392 f = context->
state[5];
393 g = context->
state[6];
394 h = context->
state[7];
422 context->
state[0] += a;
423 context->
state[1] += b;
424 context->
state[2] += c;
425 context->
state[3] += d;
426 context->
state[4] += e;
427 context->
state[5] += f;
428 context->
state[6] += g;
429 context->
state[7] += h;
432 a = b = c = d = e = f = g = h = T1 = 0;
445 a = context->
state[0];
446 b = context->
state[1];
447 c = context->
state[2];
448 d = context->
state[3];
449 e = context->
state[4];
450 f = context->
state[5];
451 g = context->
state[6];
452 h = context->
state[7];
456 #ifndef WORDS_BIGENDIAN
480 s0 = W256[(j+1)&0x0f];
482 s1 = W256[(j+14)&0x0f];
487 (W256[j&0x0f] += s1 + W256[(j+9)&0x0f] + s0);
502 context->
state[0] += a;
503 context->
state[1] += b;
504 context->
state[2] += c;
505 context->
state[3] += d;
506 context->
state[4] += e;
507 context->
state[5] += f;
508 context->
state[6] += g;
509 context->
state[7] += h;
512 a = b = c = d = e = f = g = h = T1 = T2 = 0;
518 unsigned int freespace, usedspace;
533 if (len >= freespace) {
536 context->
bitcount += freespace << 3;
545 usedspace = freespace = 0;
562 usedspace = freespace = 0;
567 unsigned int usedspace;
575 #ifndef WORDS_BIGENDIAN
581 ((
char *)context->
buffer)[usedspace++] = 0x80;
601 *((
char *)context->
buffer) = 0x80;
609 #ifndef WORDS_BIGENDIAN
613 for (j = 0; j < 8; j++) {
615 *d++ = context->
state[j];
635 if (buffer != (
char*)0) {
670 #ifdef SHA2_UNROLL_TRANSFORM
673 #ifndef WORDS_BIGENDIAN
675 #define ROUND512_0_TO_15(a,b,c,d,e,f,g,h) \
676 REVERSE64(*data++, W512[j]); \
677 T1 = (h) + Sigma1_512(e) + Ch((e), (f), (g)) + \
680 (h) = T1 + Sigma0_512(a) + Maj((a), (b), (c)), \
686 #define ROUND512_0_TO_15(a,b,c,d,e,f,g,h) \
687 T1 = (h) + Sigma1_512(e) + Ch((e), (f), (g)) + \
688 K512[j] + (W512[j] = *data++); \
690 (h) = T1 + Sigma0_512(a) + Maj((a), (b), (c)); \
695 #define ROUND512(a,b,c,d,e,f,g,h) \
696 s0 = W512[(j+1)&0x0f]; \
697 s0 = sigma0_512(s0); \
698 s1 = W512[(j+14)&0x0f]; \
699 s1 = sigma1_512(s1); \
700 T1 = (h) + Sigma1_512(e) + Ch((e), (f), (g)) + K512[j] + \
701 (W512[j&0x0f] += s1 + W512[(j+9)&0x0f] + s0); \
703 (h) = T1 + Sigma0_512(a) + Maj((a), (b), (c)); \
712 a = context->
state[0];
713 b = context->
state[1];
714 c = context->
state[2];
715 d = context->
state[3];
716 e = context->
state[4];
717 f = context->
state[5];
718 g = context->
state[6];
719 h = context->
state[7];
746 context->
state[0] += a;
747 context->
state[1] += b;
748 context->
state[2] += c;
749 context->
state[3] += d;
750 context->
state[4] += e;
751 context->
state[5] += f;
752 context->
state[6] += g;
753 context->
state[7] += h;
756 a = b = c = d = e = f = g = h = T1 = 0;
767 a = context->
state[0];
768 b = context->
state[1];
769 c = context->
state[2];
770 d = context->
state[3];
771 e = context->
state[4];
772 f = context->
state[5];
773 g = context->
state[6];
774 h = context->
state[7];
778 #ifndef WORDS_BIGENDIAN
802 s0 = W512[(j+1)&0x0f];
804 s1 = W512[(j+14)&0x0f];
809 (W512[j&0x0f] += s1 + W512[(j+9)&0x0f] + s0);
824 context->
state[0] += a;
825 context->
state[1] += b;
826 context->
state[2] += c;
827 context->
state[3] += d;
828 context->
state[4] += e;
829 context->
state[5] += f;
830 context->
state[6] += g;
831 context->
state[7] += h;
834 a = b = c = d = e = f = g = h = T1 = T2 = 0;
840 unsigned int freespace, usedspace;
855 if (len >= freespace) {
867 usedspace = freespace = 0;
884 usedspace = freespace = 0;
888 unsigned int usedspace;
891 #ifndef WORDS_BIGENDIAN
898 ((
char *)context->
buffer)[usedspace++] = 0x80;
918 *((
char *)context->
buffer) = 0x80;
939 #ifndef WORDS_BIGENDIAN
943 for (j = 0; j < 8; j++) {
945 *d++ = context->
state[j];
964 if (buffer != (
char*)0) {
1014 #ifndef WORDS_BIGENDIAN
1018 for (j = 0; j < 6; j++) {
1020 *d++ = context->
state[j];
1039 if (buffer != (
char*)0) {