diff options
Diffstat (limited to 'src/lib/libcrypto/sha/sha1.c')
-rw-r--r-- | src/lib/libcrypto/sha/sha1.c | 518 |
1 files changed, 0 insertions, 518 deletions
diff --git a/src/lib/libcrypto/sha/sha1.c b/src/lib/libcrypto/sha/sha1.c deleted file mode 100644 index ab05709818..0000000000 --- a/src/lib/libcrypto/sha/sha1.c +++ /dev/null | |||
@@ -1,518 +0,0 @@ | |||
1 | /* $OpenBSD: sha1.c,v 1.16 2025/02/14 12:01:58 jsing Exp $ */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | |||
59 | #include <stdlib.h> | ||
60 | #include <string.h> | ||
61 | |||
62 | #include <openssl/opensslconf.h> | ||
63 | |||
64 | #include <openssl/crypto.h> | ||
65 | #include <openssl/sha.h> | ||
66 | |||
67 | #include "crypto_internal.h" | ||
68 | |||
69 | #if !defined(OPENSSL_NO_SHA1) && !defined(OPENSSL_NO_SHA) | ||
70 | |||
71 | /* Ensure that SHA_LONG and uint32_t are equivalent sizes. */ | ||
72 | CTASSERT(sizeof(SHA_LONG) == sizeof(uint32_t)); | ||
73 | |||
74 | void sha1_block_data_order(SHA_CTX *ctx, const void *p, size_t num); | ||
75 | void sha1_block_generic(SHA_CTX *ctx, const void *p, size_t num); | ||
76 | |||
77 | #ifndef HAVE_SHA1_BLOCK_GENERIC | ||
78 | static inline SHA_LONG | ||
79 | Ch(SHA_LONG x, SHA_LONG y, SHA_LONG z) | ||
80 | { | ||
81 | return (x & y) ^ (~x & z); | ||
82 | } | ||
83 | |||
84 | static inline SHA_LONG | ||
85 | Parity(SHA_LONG x, SHA_LONG y, SHA_LONG z) | ||
86 | { | ||
87 | return x ^ y ^ z; | ||
88 | } | ||
89 | |||
90 | static inline SHA_LONG | ||
91 | Maj(SHA_LONG x, SHA_LONG y, SHA_LONG z) | ||
92 | { | ||
93 | return (x & y) ^ (x & z) ^ (y & z); | ||
94 | } | ||
95 | |||
96 | static inline void | ||
97 | sha1_msg_schedule_update(SHA_LONG *W0, SHA_LONG W2, SHA_LONG W8, SHA_LONG W13) | ||
98 | { | ||
99 | *W0 = crypto_rol_u32(W13 ^ W8 ^ W2 ^ *W0, 1); | ||
100 | } | ||
101 | |||
102 | static inline void | ||
103 | sha1_round1(SHA_LONG *a, SHA_LONG *b, SHA_LONG *c, SHA_LONG *d, SHA_LONG *e, | ||
104 | SHA_LONG Wt) | ||
105 | { | ||
106 | SHA_LONG Kt, T; | ||
107 | |||
108 | Kt = 0x5a827999UL; | ||
109 | T = crypto_rol_u32(*a, 5) + Ch(*b, *c, *d) + *e + Kt + Wt; | ||
110 | |||
111 | *e = *d; | ||
112 | *d = *c; | ||
113 | *c = crypto_rol_u32(*b, 30); | ||
114 | *b = *a; | ||
115 | *a = T; | ||
116 | } | ||
117 | |||
118 | static inline void | ||
119 | sha1_round2(SHA_LONG *a, SHA_LONG *b, SHA_LONG *c, SHA_LONG *d, SHA_LONG *e, | ||
120 | SHA_LONG Wt) | ||
121 | { | ||
122 | SHA_LONG Kt, T; | ||
123 | |||
124 | Kt = 0x6ed9eba1UL; | ||
125 | T = crypto_rol_u32(*a, 5) + Parity(*b, *c, *d) + *e + Kt + Wt; | ||
126 | |||
127 | *e = *d; | ||
128 | *d = *c; | ||
129 | *c = crypto_rol_u32(*b, 30); | ||
130 | *b = *a; | ||
131 | *a = T; | ||
132 | } | ||
133 | |||
134 | static inline void | ||
135 | sha1_round3(SHA_LONG *a, SHA_LONG *b, SHA_LONG *c, SHA_LONG *d, SHA_LONG *e, | ||
136 | SHA_LONG Wt) | ||
137 | { | ||
138 | SHA_LONG Kt, T; | ||
139 | |||
140 | Kt = 0x8f1bbcdcUL; | ||
141 | T = crypto_rol_u32(*a, 5) + Maj(*b, *c, *d) + *e + Kt + Wt; | ||
142 | |||
143 | *e = *d; | ||
144 | *d = *c; | ||
145 | *c = crypto_rol_u32(*b, 30); | ||
146 | *b = *a; | ||
147 | *a = T; | ||
148 | } | ||
149 | |||
150 | static inline void | ||
151 | sha1_round4(SHA_LONG *a, SHA_LONG *b, SHA_LONG *c, SHA_LONG *d, SHA_LONG *e, | ||
152 | SHA_LONG Wt) | ||
153 | { | ||
154 | SHA_LONG Kt, T; | ||
155 | |||
156 | Kt = 0xca62c1d6UL; | ||
157 | T = crypto_rol_u32(*a, 5) + Parity(*b, *c, *d) + *e + Kt + Wt; | ||
158 | |||
159 | *e = *d; | ||
160 | *d = *c; | ||
161 | *c = crypto_rol_u32(*b, 30); | ||
162 | *b = *a; | ||
163 | *a = T; | ||
164 | } | ||
165 | |||
166 | void | ||
167 | sha1_block_generic(SHA_CTX *ctx, const void *_in, size_t num) | ||
168 | { | ||
169 | const uint8_t *in = _in; | ||
170 | const SHA_LONG *in32; | ||
171 | unsigned int a, b, c, d, e; | ||
172 | unsigned int X0, X1, X2, X3, X4, X5, X6, X7, | ||
173 | X8, X9, X10, X11, X12, X13, X14, X15; | ||
174 | |||
175 | while (num--) { | ||
176 | a = ctx->h0; | ||
177 | b = ctx->h1; | ||
178 | c = ctx->h2; | ||
179 | d = ctx->h3; | ||
180 | e = ctx->h4; | ||
181 | |||
182 | if ((size_t)in % 4 == 0) { | ||
183 | /* Input is 32 bit aligned. */ | ||
184 | in32 = (const SHA_LONG *)in; | ||
185 | X0 = be32toh(in32[0]); | ||
186 | X1 = be32toh(in32[1]); | ||
187 | X2 = be32toh(in32[2]); | ||
188 | X3 = be32toh(in32[3]); | ||
189 | X4 = be32toh(in32[4]); | ||
190 | X5 = be32toh(in32[5]); | ||
191 | X6 = be32toh(in32[6]); | ||
192 | X7 = be32toh(in32[7]); | ||
193 | X8 = be32toh(in32[8]); | ||
194 | X9 = be32toh(in32[9]); | ||
195 | X10 = be32toh(in32[10]); | ||
196 | X11 = be32toh(in32[11]); | ||
197 | X12 = be32toh(in32[12]); | ||
198 | X13 = be32toh(in32[13]); | ||
199 | X14 = be32toh(in32[14]); | ||
200 | X15 = be32toh(in32[15]); | ||
201 | } else { | ||
202 | /* Input is not 32 bit aligned. */ | ||
203 | X0 = crypto_load_be32toh(&in[0 * 4]); | ||
204 | X1 = crypto_load_be32toh(&in[1 * 4]); | ||
205 | X2 = crypto_load_be32toh(&in[2 * 4]); | ||
206 | X3 = crypto_load_be32toh(&in[3 * 4]); | ||
207 | X4 = crypto_load_be32toh(&in[4 * 4]); | ||
208 | X5 = crypto_load_be32toh(&in[5 * 4]); | ||
209 | X6 = crypto_load_be32toh(&in[6 * 4]); | ||
210 | X7 = crypto_load_be32toh(&in[7 * 4]); | ||
211 | X8 = crypto_load_be32toh(&in[8 * 4]); | ||
212 | X9 = crypto_load_be32toh(&in[9 * 4]); | ||
213 | X10 = crypto_load_be32toh(&in[10 * 4]); | ||
214 | X11 = crypto_load_be32toh(&in[11 * 4]); | ||
215 | X12 = crypto_load_be32toh(&in[12 * 4]); | ||
216 | X13 = crypto_load_be32toh(&in[13 * 4]); | ||
217 | X14 = crypto_load_be32toh(&in[14 * 4]); | ||
218 | X15 = crypto_load_be32toh(&in[15 * 4]); | ||
219 | } | ||
220 | in += SHA_CBLOCK; | ||
221 | |||
222 | sha1_round1(&a, &b, &c, &d, &e, X0); | ||
223 | sha1_round1(&a, &b, &c, &d, &e, X1); | ||
224 | sha1_round1(&a, &b, &c, &d, &e, X2); | ||
225 | sha1_round1(&a, &b, &c, &d, &e, X3); | ||
226 | sha1_round1(&a, &b, &c, &d, &e, X4); | ||
227 | sha1_round1(&a, &b, &c, &d, &e, X5); | ||
228 | sha1_round1(&a, &b, &c, &d, &e, X6); | ||
229 | sha1_round1(&a, &b, &c, &d, &e, X7); | ||
230 | sha1_round1(&a, &b, &c, &d, &e, X8); | ||
231 | sha1_round1(&a, &b, &c, &d, &e, X9); | ||
232 | sha1_round1(&a, &b, &c, &d, &e, X10); | ||
233 | sha1_round1(&a, &b, &c, &d, &e, X11); | ||
234 | sha1_round1(&a, &b, &c, &d, &e, X12); | ||
235 | sha1_round1(&a, &b, &c, &d, &e, X13); | ||
236 | sha1_round1(&a, &b, &c, &d, &e, X14); | ||
237 | sha1_round1(&a, &b, &c, &d, &e, X15); | ||
238 | |||
239 | sha1_msg_schedule_update(&X0, X2, X8, X13); | ||
240 | sha1_msg_schedule_update(&X1, X3, X9, X14); | ||
241 | sha1_msg_schedule_update(&X2, X4, X10, X15); | ||
242 | sha1_msg_schedule_update(&X3, X5, X11, X0); | ||
243 | sha1_msg_schedule_update(&X4, X6, X12, X1); | ||
244 | sha1_msg_schedule_update(&X5, X7, X13, X2); | ||
245 | sha1_msg_schedule_update(&X6, X8, X14, X3); | ||
246 | sha1_msg_schedule_update(&X7, X9, X15, X4); | ||
247 | sha1_msg_schedule_update(&X8, X10, X0, X5); | ||
248 | sha1_msg_schedule_update(&X9, X11, X1, X6); | ||
249 | sha1_msg_schedule_update(&X10, X12, X2, X7); | ||
250 | sha1_msg_schedule_update(&X11, X13, X3, X8); | ||
251 | sha1_msg_schedule_update(&X12, X14, X4, X9); | ||
252 | sha1_msg_schedule_update(&X13, X15, X5, X10); | ||
253 | sha1_msg_schedule_update(&X14, X0, X6, X11); | ||
254 | sha1_msg_schedule_update(&X15, X1, X7, X12); | ||
255 | |||
256 | sha1_round1(&a, &b, &c, &d, &e, X0); | ||
257 | sha1_round1(&a, &b, &c, &d, &e, X1); | ||
258 | sha1_round1(&a, &b, &c, &d, &e, X2); | ||
259 | sha1_round1(&a, &b, &c, &d, &e, X3); | ||
260 | sha1_round2(&a, &b, &c, &d, &e, X4); | ||
261 | sha1_round2(&a, &b, &c, &d, &e, X5); | ||
262 | sha1_round2(&a, &b, &c, &d, &e, X6); | ||
263 | sha1_round2(&a, &b, &c, &d, &e, X7); | ||
264 | sha1_round2(&a, &b, &c, &d, &e, X8); | ||
265 | sha1_round2(&a, &b, &c, &d, &e, X9); | ||
266 | sha1_round2(&a, &b, &c, &d, &e, X10); | ||
267 | sha1_round2(&a, &b, &c, &d, &e, X11); | ||
268 | sha1_round2(&a, &b, &c, &d, &e, X12); | ||
269 | sha1_round2(&a, &b, &c, &d, &e, X13); | ||
270 | sha1_round2(&a, &b, &c, &d, &e, X14); | ||
271 | sha1_round2(&a, &b, &c, &d, &e, X15); | ||
272 | |||
273 | sha1_msg_schedule_update(&X0, X2, X8, X13); | ||
274 | sha1_msg_schedule_update(&X1, X3, X9, X14); | ||
275 | sha1_msg_schedule_update(&X2, X4, X10, X15); | ||
276 | sha1_msg_schedule_update(&X3, X5, X11, X0); | ||
277 | sha1_msg_schedule_update(&X4, X6, X12, X1); | ||
278 | sha1_msg_schedule_update(&X5, X7, X13, X2); | ||
279 | sha1_msg_schedule_update(&X6, X8, X14, X3); | ||
280 | sha1_msg_schedule_update(&X7, X9, X15, X4); | ||
281 | sha1_msg_schedule_update(&X8, X10, X0, X5); | ||
282 | sha1_msg_schedule_update(&X9, X11, X1, X6); | ||
283 | sha1_msg_schedule_update(&X10, X12, X2, X7); | ||
284 | sha1_msg_schedule_update(&X11, X13, X3, X8); | ||
285 | sha1_msg_schedule_update(&X12, X14, X4, X9); | ||
286 | sha1_msg_schedule_update(&X13, X15, X5, X10); | ||
287 | sha1_msg_schedule_update(&X14, X0, X6, X11); | ||
288 | sha1_msg_schedule_update(&X15, X1, X7, X12); | ||
289 | |||
290 | sha1_round2(&a, &b, &c, &d, &e, X0); | ||
291 | sha1_round2(&a, &b, &c, &d, &e, X1); | ||
292 | sha1_round2(&a, &b, &c, &d, &e, X2); | ||
293 | sha1_round2(&a, &b, &c, &d, &e, X3); | ||
294 | sha1_round2(&a, &b, &c, &d, &e, X4); | ||
295 | sha1_round2(&a, &b, &c, &d, &e, X5); | ||
296 | sha1_round2(&a, &b, &c, &d, &e, X6); | ||
297 | sha1_round2(&a, &b, &c, &d, &e, X7); | ||
298 | sha1_round3(&a, &b, &c, &d, &e, X8); | ||
299 | sha1_round3(&a, &b, &c, &d, &e, X9); | ||
300 | sha1_round3(&a, &b, &c, &d, &e, X10); | ||
301 | sha1_round3(&a, &b, &c, &d, &e, X11); | ||
302 | sha1_round3(&a, &b, &c, &d, &e, X12); | ||
303 | sha1_round3(&a, &b, &c, &d, &e, X13); | ||
304 | sha1_round3(&a, &b, &c, &d, &e, X14); | ||
305 | sha1_round3(&a, &b, &c, &d, &e, X15); | ||
306 | |||
307 | sha1_msg_schedule_update(&X0, X2, X8, X13); | ||
308 | sha1_msg_schedule_update(&X1, X3, X9, X14); | ||
309 | sha1_msg_schedule_update(&X2, X4, X10, X15); | ||
310 | sha1_msg_schedule_update(&X3, X5, X11, X0); | ||
311 | sha1_msg_schedule_update(&X4, X6, X12, X1); | ||
312 | sha1_msg_schedule_update(&X5, X7, X13, X2); | ||
313 | sha1_msg_schedule_update(&X6, X8, X14, X3); | ||
314 | sha1_msg_schedule_update(&X7, X9, X15, X4); | ||
315 | sha1_msg_schedule_update(&X8, X10, X0, X5); | ||
316 | sha1_msg_schedule_update(&X9, X11, X1, X6); | ||
317 | sha1_msg_schedule_update(&X10, X12, X2, X7); | ||
318 | sha1_msg_schedule_update(&X11, X13, X3, X8); | ||
319 | sha1_msg_schedule_update(&X12, X14, X4, X9); | ||
320 | sha1_msg_schedule_update(&X13, X15, X5, X10); | ||
321 | sha1_msg_schedule_update(&X14, X0, X6, X11); | ||
322 | sha1_msg_schedule_update(&X15, X1, X7, X12); | ||
323 | |||
324 | sha1_round3(&a, &b, &c, &d, &e, X0); | ||
325 | sha1_round3(&a, &b, &c, &d, &e, X1); | ||
326 | sha1_round3(&a, &b, &c, &d, &e, X2); | ||
327 | sha1_round3(&a, &b, &c, &d, &e, X3); | ||
328 | sha1_round3(&a, &b, &c, &d, &e, X4); | ||
329 | sha1_round3(&a, &b, &c, &d, &e, X5); | ||
330 | sha1_round3(&a, &b, &c, &d, &e, X6); | ||
331 | sha1_round3(&a, &b, &c, &d, &e, X7); | ||
332 | sha1_round3(&a, &b, &c, &d, &e, X8); | ||
333 | sha1_round3(&a, &b, &c, &d, &e, X9); | ||
334 | sha1_round3(&a, &b, &c, &d, &e, X10); | ||
335 | sha1_round3(&a, &b, &c, &d, &e, X11); | ||
336 | sha1_round4(&a, &b, &c, &d, &e, X12); | ||
337 | sha1_round4(&a, &b, &c, &d, &e, X13); | ||
338 | sha1_round4(&a, &b, &c, &d, &e, X14); | ||
339 | sha1_round4(&a, &b, &c, &d, &e, X15); | ||
340 | |||
341 | sha1_msg_schedule_update(&X0, X2, X8, X13); | ||
342 | sha1_msg_schedule_update(&X1, X3, X9, X14); | ||
343 | sha1_msg_schedule_update(&X2, X4, X10, X15); | ||
344 | sha1_msg_schedule_update(&X3, X5, X11, X0); | ||
345 | sha1_msg_schedule_update(&X4, X6, X12, X1); | ||
346 | sha1_msg_schedule_update(&X5, X7, X13, X2); | ||
347 | sha1_msg_schedule_update(&X6, X8, X14, X3); | ||
348 | sha1_msg_schedule_update(&X7, X9, X15, X4); | ||
349 | sha1_msg_schedule_update(&X8, X10, X0, X5); | ||
350 | sha1_msg_schedule_update(&X9, X11, X1, X6); | ||
351 | sha1_msg_schedule_update(&X10, X12, X2, X7); | ||
352 | sha1_msg_schedule_update(&X11, X13, X3, X8); | ||
353 | sha1_msg_schedule_update(&X12, X14, X4, X9); | ||
354 | sha1_msg_schedule_update(&X13, X15, X5, X10); | ||
355 | sha1_msg_schedule_update(&X14, X0, X6, X11); | ||
356 | sha1_msg_schedule_update(&X15, X1, X7, X12); | ||
357 | |||
358 | sha1_round4(&a, &b, &c, &d, &e, X0); | ||
359 | sha1_round4(&a, &b, &c, &d, &e, X1); | ||
360 | sha1_round4(&a, &b, &c, &d, &e, X2); | ||
361 | sha1_round4(&a, &b, &c, &d, &e, X3); | ||
362 | sha1_round4(&a, &b, &c, &d, &e, X4); | ||
363 | sha1_round4(&a, &b, &c, &d, &e, X5); | ||
364 | sha1_round4(&a, &b, &c, &d, &e, X6); | ||
365 | sha1_round4(&a, &b, &c, &d, &e, X7); | ||
366 | sha1_round4(&a, &b, &c, &d, &e, X8); | ||
367 | sha1_round4(&a, &b, &c, &d, &e, X9); | ||
368 | sha1_round4(&a, &b, &c, &d, &e, X10); | ||
369 | sha1_round4(&a, &b, &c, &d, &e, X11); | ||
370 | sha1_round4(&a, &b, &c, &d, &e, X12); | ||
371 | sha1_round4(&a, &b, &c, &d, &e, X13); | ||
372 | sha1_round4(&a, &b, &c, &d, &e, X14); | ||
373 | sha1_round4(&a, &b, &c, &d, &e, X15); | ||
374 | |||
375 | ctx->h0 += a; | ||
376 | ctx->h1 += b; | ||
377 | ctx->h2 += c; | ||
378 | ctx->h3 += d; | ||
379 | ctx->h4 += e; | ||
380 | } | ||
381 | } | ||
382 | #endif | ||
383 | |||
384 | #ifndef HAVE_SHA1_BLOCK_DATA_ORDER | ||
385 | void | ||
386 | sha1_block_data_order(SHA_CTX *ctx, const void *_in, size_t num) | ||
387 | { | ||
388 | sha1_block_generic(ctx, _in, num); | ||
389 | } | ||
390 | #endif | ||
391 | |||
392 | int | ||
393 | SHA1_Init(SHA_CTX *c) | ||
394 | { | ||
395 | memset(c, 0, sizeof(*c)); | ||
396 | |||
397 | c->h0 = 0x67452301UL; | ||
398 | c->h1 = 0xefcdab89UL; | ||
399 | c->h2 = 0x98badcfeUL; | ||
400 | c->h3 = 0x10325476UL; | ||
401 | c->h4 = 0xc3d2e1f0UL; | ||
402 | |||
403 | return 1; | ||
404 | } | ||
405 | LCRYPTO_ALIAS(SHA1_Init); | ||
406 | |||
407 | int | ||
408 | SHA1_Update(SHA_CTX *c, const void *data_, size_t len) | ||
409 | { | ||
410 | const unsigned char *data = data_; | ||
411 | unsigned char *p; | ||
412 | SHA_LONG l; | ||
413 | size_t n; | ||
414 | |||
415 | if (len == 0) | ||
416 | return 1; | ||
417 | |||
418 | l = (c->Nl + (((SHA_LONG)len) << 3))&0xffffffffUL; | ||
419 | /* 95-05-24 eay Fixed a bug with the overflow handling, thanks to | ||
420 | * Wei Dai <weidai@eskimo.com> for pointing it out. */ | ||
421 | if (l < c->Nl) /* overflow */ | ||
422 | c->Nh++; | ||
423 | c->Nh+=(SHA_LONG)(len>>29); /* might cause compiler warning on 16-bit */ | ||
424 | c->Nl = l; | ||
425 | |||
426 | n = c->num; | ||
427 | if (n != 0) { | ||
428 | p = (unsigned char *)c->data; | ||
429 | |||
430 | if (len >= SHA_CBLOCK || len + n >= SHA_CBLOCK) { | ||
431 | memcpy(p + n, data, SHA_CBLOCK - n); | ||
432 | sha1_block_data_order(c, p, 1); | ||
433 | n = SHA_CBLOCK - n; | ||
434 | data += n; | ||
435 | len -= n; | ||
436 | c->num = 0; | ||
437 | memset(p,0,SHA_CBLOCK); /* keep it zeroed */ | ||
438 | } else { | ||
439 | memcpy(p + n, data, len); | ||
440 | c->num += (unsigned int)len; | ||
441 | return 1; | ||
442 | } | ||
443 | } | ||
444 | |||
445 | n = len/SHA_CBLOCK; | ||
446 | if (n > 0) { | ||
447 | sha1_block_data_order(c, data, n); | ||
448 | n *= SHA_CBLOCK; | ||
449 | data += n; | ||
450 | len -= n; | ||
451 | } | ||
452 | |||
453 | if (len != 0) { | ||
454 | p = (unsigned char *)c->data; | ||
455 | c->num = (unsigned int)len; | ||
456 | memcpy(p, data, len); | ||
457 | } | ||
458 | return 1; | ||
459 | } | ||
460 | LCRYPTO_ALIAS(SHA1_Update); | ||
461 | |||
462 | void | ||
463 | SHA1_Transform(SHA_CTX *c, const unsigned char *data) | ||
464 | { | ||
465 | sha1_block_data_order(c, data, 1); | ||
466 | } | ||
467 | LCRYPTO_ALIAS(SHA1_Transform); | ||
468 | |||
469 | int | ||
470 | SHA1_Final(unsigned char *md, SHA_CTX *c) | ||
471 | { | ||
472 | unsigned char *p = (unsigned char *)c->data; | ||
473 | size_t n = c->num; | ||
474 | |||
475 | p[n] = 0x80; /* there is always room for one */ | ||
476 | n++; | ||
477 | |||
478 | if (n > (SHA_CBLOCK - 8)) { | ||
479 | memset(p + n, 0, SHA_CBLOCK - n); | ||
480 | n = 0; | ||
481 | sha1_block_data_order(c, p, 1); | ||
482 | } | ||
483 | |||
484 | memset(p + n, 0, SHA_CBLOCK - 8 - n); | ||
485 | c->data[SHA_LBLOCK - 2] = htobe32(c->Nh); | ||
486 | c->data[SHA_LBLOCK - 1] = htobe32(c->Nl); | ||
487 | |||
488 | sha1_block_data_order(c, p, 1); | ||
489 | c->num = 0; | ||
490 | memset(p, 0, SHA_CBLOCK); | ||
491 | |||
492 | crypto_store_htobe32(&md[0 * 4], c->h0); | ||
493 | crypto_store_htobe32(&md[1 * 4], c->h1); | ||
494 | crypto_store_htobe32(&md[2 * 4], c->h2); | ||
495 | crypto_store_htobe32(&md[3 * 4], c->h3); | ||
496 | crypto_store_htobe32(&md[4 * 4], c->h4); | ||
497 | |||
498 | return 1; | ||
499 | } | ||
500 | LCRYPTO_ALIAS(SHA1_Final); | ||
501 | |||
502 | unsigned char * | ||
503 | SHA1(const unsigned char *d, size_t n, unsigned char *md) | ||
504 | { | ||
505 | SHA_CTX c; | ||
506 | |||
507 | if (!SHA1_Init(&c)) | ||
508 | return NULL; | ||
509 | SHA1_Update(&c, d, n); | ||
510 | SHA1_Final(md, &c); | ||
511 | |||
512 | explicit_bzero(&c, sizeof(c)); | ||
513 | |||
514 | return (md); | ||
515 | } | ||
516 | LCRYPTO_ALIAS(SHA1); | ||
517 | |||
518 | #endif | ||