2 * Copyright (c) 1995 - 2001 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
37 RCSID("$Id: sha.c,v 1.16 2001/01/29 04:33:44 assar Exp $");
43 #define A m->counter[0]
44 #define B m->counter[1]
45 #define C m->counter[2]
46 #define D m->counter[3]
47 #define E m->counter[4]
51 SHA1_Init (struct sha *m)
63 #define F0(x,y,z) CRAYFIX((x & y) | (~x & z))
64 #define F1(x,y,z) (x ^ y ^ z)
65 #define F2(x,y,z) ((x & y) | (x & z) | (y & z))
66 #define F3(x,y,z) F1(x,y,z)
77 temp = cshift(AA, 5) + f(BB,CC,DD) + EE + data[t] + k; \
80 CC = cshift(BB, 30); \
86 calc (struct sha *m, u_int32_t *in)
88 u_int32_t AA, BB, CC, DD, EE;
98 for (i = 0; i < 16; ++i)
100 for (i = 16; i < 80; ++i)
101 data[i] = cshift(data[i-3] ^ data[i-8] ^ data[i-14] ^ data[i-16], 1);
203 * From `Performance analysis of MD5' by Joseph D. Touch <touch@isi.edu>
206 #if !defined(WORDS_BIGENDIAN) || defined(_CRAY)
207 static inline u_int32_t
208 swap_u_int32_t (u_int32_t t)
210 #define ROL(x,n) ((x)<<(n))|((x)>>(32-(n)))
211 u_int32_t temp1, temp2;
213 temp1 = cshift(t, 16);
218 return temp1 | temp2;
228 SHA1_Update (struct sha *m, const void *v, size_t len)
230 const unsigned char *p = v;
231 size_t old_sz = m->sz[0];
235 if (m->sz[0] < old_sz)
237 offset = (old_sz / 8) % 64;
239 size_t l = min(len, 64 - offset);
240 memcpy(m->save + offset, p, l);
245 #if !defined(WORDS_BIGENDIAN) || defined(_CRAY)
247 u_int32_t current[16];
248 struct x32 *u = (struct x32*)m->save;
249 for(i = 0; i < 8; i++){
250 current[2*i+0] = swap_u_int32_t(u[i].a);
251 current[2*i+1] = swap_u_int32_t(u[i].b);
255 calc(m, (u_int32_t*)m->save);
263 SHA1_Final (void *res, struct sha *m)
265 static unsigned char zeros[72];
266 unsigned offset = (m->sz[0] / 8) % 64;
267 unsigned int dstart = (120 - offset - 1) % 64 + 1;
270 memset (zeros + 1, 0, sizeof(zeros) - 1);
271 zeros[dstart+7] = (m->sz[0] >> 0) & 0xff;
272 zeros[dstart+6] = (m->sz[0] >> 8) & 0xff;
273 zeros[dstart+5] = (m->sz[0] >> 16) & 0xff;
274 zeros[dstart+4] = (m->sz[0] >> 24) & 0xff;
275 zeros[dstart+3] = (m->sz[1] >> 0) & 0xff;
276 zeros[dstart+2] = (m->sz[1] >> 8) & 0xff;
277 zeros[dstart+1] = (m->sz[1] >> 16) & 0xff;
278 zeros[dstart+0] = (m->sz[1] >> 24) & 0xff;
279 SHA1_Update (m, zeros, dstart + 8);
282 unsigned char *r = (unsigned char*)res;
284 for (i = 0; i < 5; ++i) {
285 r[4*i+3] = m->counter[i] & 0xFF;
286 r[4*i+2] = (m->counter[i] >> 8) & 0xFF;
287 r[4*i+1] = (m->counter[i] >> 16) & 0xFF;
288 r[4*i] = (m->counter[i] >> 24) & 0xFF;
294 u_int32_t *r = (u_int32_t *)res;
296 for (i = 0; i < 5; ++i)
297 r[i] = swap_u_int32_t (m->counter[i]);