source: asp3_tinet_ecnl_arm/trunk/wolfssl-3.12.2/wolfcrypt/src/ripemd.c@ 352

Last change on this file since 352 was 352, checked in by coas-nagasima, 6 years ago

arm向けASP3版ECNLを追加
  • Property svn:eol-style set to native
  • Property svn:mime-type set to text/x-csrc;charset=UTF-8
File size: 15.4 KB
Line 
1/* ripemd.c
2 *
3 * Copyright (C) 2006-2017 wolfSSL Inc.
4 *
5 * This file is part of wolfSSL.
6 *
7 * wolfSSL is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 2 of the License, or
10 * (at your option) any later version.
11 *
12 * wolfSSL is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
16 *
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
20 */
21
22
23
24#ifdef HAVE_CONFIG_H
25 #include <config.h>
26#endif
27
28#include <wolfssl/wolfcrypt/settings.h>
29
30#ifdef WOLFSSL_RIPEMD
31
32#include <wolfssl/wolfcrypt/ripemd.h>
33#ifdef NO_INLINE
34 #include <wolfssl/wolfcrypt/misc.h>
35#else
36 #define WOLFSSL_MISC_INCLUDED
37 #include <wolfcrypt/src/misc.c>
38#endif
39
40#include <wolfssl/wolfcrypt/error-crypt.h>
41
42int wc_InitRipeMd(RipeMd* ripemd)
43{
44 if (ripemd == NULL) {
45 return BAD_FUNC_ARG;
46 }
47
48 ripemd->digest[0] = 0x67452301L;
49 ripemd->digest[1] = 0xEFCDAB89L;
50 ripemd->digest[2] = 0x98BADCFEL;
51 ripemd->digest[3] = 0x10325476L;
52 ripemd->digest[4] = 0xC3D2E1F0L;
53
54 ripemd->buffLen = 0;
55 ripemd->loLen = 0;
56 ripemd->hiLen = 0;
57
58 return 0;
59}
60
61
62/* for all */
63#define F(x, y, z) (x ^ y ^ z)
64#define G(x, y, z) (z ^ (x & (y^z)))
65#define H(x, y, z) (z ^ (x | ~y))
66#define I(x, y, z) (y ^ (z & (x^y)))
67#define J(x, y, z) (x ^ (y | ~z))
68
69#define k0 0
70#define k1 0x5a827999
71#define k2 0x6ed9eba1
72#define k3 0x8f1bbcdc
73#define k4 0xa953fd4e
74#define k5 0x50a28be6
75#define k6 0x5c4dd124
76#define k7 0x6d703ef3
77#define k8 0x7a6d76e9
78#define k9 0
79
80/* for 160 and 320 */
81#define Subround(f, a, b, c, d, e, x, s, k) \
82 a += f(b, c, d) + x + k;\
83 a = rotlFixed((word32)a, s) + e;\
84 c = rotlFixed((word32)c, 10U)
85
86static void Transform(RipeMd* ripemd)
87{
88 word32 a1, b1, c1, d1, e1, a2, b2, c2, d2, e2;
89 a1 = a2 = ripemd->digest[0];
90 b1 = b2 = ripemd->digest[1];
91 c1 = c2 = ripemd->digest[2];
92 d1 = d2 = ripemd->digest[3];
93 e1 = e2 = ripemd->digest[4];
94
95 Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 11, k0);
96 Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 1], 14, k0);
97 Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 2], 15, k0);
98 Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 12, k0);
99 Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 4], 5, k0);
100 Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 5], 8, k0);
101 Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 6], 7, k0);
102 Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 7], 9, k0);
103 Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 11, k0);
104 Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 13, k0);
105 Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[10], 14, k0);
106 Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[11], 15, k0);
107 Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[12], 6, k0);
108 Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[13], 7, k0);
109 Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[14], 9, k0);
110 Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[15], 8, k0);
111
112 Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 7], 7, k1);
113 Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 4], 6, k1);
114 Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[13], 8, k1);
115 Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 13, k1);
116 Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[10], 11, k1);
117 Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 6], 9, k1);
118 Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[15], 7, k1);
119 Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 15, k1);
120 Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[12], 7, k1);
121 Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 12, k1);
122 Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 15, k1);
123 Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 5], 9, k1);
124 Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 11, k1);
125 Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[14], 7, k1);
126 Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[11], 13, k1);
127 Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 8], 12, k1);
128
129 Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 11, k2);
130 Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[10], 13, k2);
131 Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[14], 6, k2);
132 Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 4], 7, k2);
133 Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 14, k2);
134 Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[15], 9, k2);
135 Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 13, k2);
136 Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 15, k2);
137 Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 14, k2);
138 Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 7], 8, k2);
139 Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 13, k2);
140 Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 6], 6, k2);
141 Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[13], 5, k2);
142 Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[11], 12, k2);
143 Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 5], 7, k2);
144 Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[12], 5, k2);
145
146 Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 11, k3);
147 Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 12, k3);
148 Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[11], 14, k3);
149 Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[10], 15, k3);
150 Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 14, k3);
151 Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 15, k3);
152 Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[12], 9, k3);
153 Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[ 4], 8, k3);
154 Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[13], 9, k3);
155 Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 14, k3);
156 Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 7], 5, k3);
157 Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[15], 6, k3);
158 Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[14], 8, k3);
159 Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[ 5], 6, k3);
160 Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 6], 5, k3);
161 Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 12, k3);
162
163 Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 4], 9, k4);
164 Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 15, k4);
165 Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[ 5], 5, k4);
166 Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 9], 11, k4);
167 Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 7], 6, k4);
168 Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[12], 8, k4);
169 Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 13, k4);
170 Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[10], 12, k4);
171 Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[14], 5, k4);
172 Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 12, k4);
173 Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 3], 13, k4);
174 Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 8], 14, k4);
175 Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[11], 11, k4);
176 Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 6], 8, k4);
177 Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[15], 5, k4);
178 Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[13], 6, k4);
179
180 Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 5], 8, k5);
181 Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[14], 9, k5);
182 Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 7], 9, k5);
183 Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[ 0], 11, k5);
184 Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 13, k5);
185 Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 2], 15, k5);
186 Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[11], 15, k5);
187 Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 4], 5, k5);
188 Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[13], 7, k5);
189 Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 6], 7, k5);
190 Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[15], 8, k5);
191 Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 11, k5);
192 Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 1], 14, k5);
193 Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[10], 14, k5);
194 Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 3], 12, k5);
195 Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[12], 6, k5);
196
197 Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 6], 9, k6);
198 Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[11], 13, k6);
199 Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 3], 15, k6);
200 Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 7], 7, k6);
201 Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 12, k6);
202 Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[13], 8, k6);
203 Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[ 5], 9, k6);
204 Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[10], 11, k6);
205 Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[14], 7, k6);
206 Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[15], 7, k6);
207 Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 12, k6);
208 Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[12], 7, k6);
209 Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 4], 6, k6);
210 Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 15, k6);
211 Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 1], 13, k6);
212 Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 2], 11, k6);
213
214 Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[15], 9, k7);
215 Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 5], 7, k7);
216 Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 1], 15, k7);
217 Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 3], 11, k7);
218 Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 7], 8, k7);
219 Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[14], 6, k7);
220 Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 6], 6, k7);
221 Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 14, k7);
222 Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[11], 12, k7);
223 Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 13, k7);
224 Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[12], 5, k7);
225 Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 14, k7);
226 Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[10], 13, k7);
227 Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 13, k7);
228 Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 4], 7, k7);
229 Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[13], 5, k7);
230
231 Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 8], 15, k8);
232 Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[ 6], 5, k8);
233 Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 4], 8, k8);
234 Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 1], 11, k8);
235 Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 14, k8);
236 Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[11], 14, k8);
237 Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[15], 6, k8);
238 Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 14, k8);
239 Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 5], 6, k8);
240 Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[12], 9, k8);
241 Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 12, k8);
242 Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[13], 9, k8);
243 Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 9], 12, k8);
244 Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 7], 5, k8);
245 Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[10], 15, k8);
246 Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[14], 8, k8);
247
248 Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[12], 8, k9);
249 Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[15], 5, k9);
250 Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[10], 12, k9);
251 Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 4], 9, k9);
252 Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 1], 12, k9);
253 Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[ 5], 5, k9);
254 Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[ 8], 14, k9);
255 Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 7], 6, k9);
256 Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 6], 8, k9);
257 Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 13, k9);
258 Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[13], 6, k9);
259 Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[14], 5, k9);
260 Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 0], 15, k9);
261 Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 13, k9);
262 Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 9], 11, k9);
263 Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[11], 11, k9);
264
265 c1 = ripemd->digest[1] + c1 + d2;
266 ripemd->digest[1] = ripemd->digest[2] + d1 + e2;
267 ripemd->digest[2] = ripemd->digest[3] + e1 + a2;
268 ripemd->digest[3] = ripemd->digest[4] + a1 + b2;
269 ripemd->digest[4] = ripemd->digest[0] + b1 + c2;
270 ripemd->digest[0] = c1;
271}
272
273
274static INLINE void AddLength(RipeMd* ripemd, word32 len)
275{
276 word32 tmp = ripemd->loLen;
277 if ( (ripemd->loLen += len) < tmp)
278 ripemd->hiLen++; /* carry low to high */
279}
280
281
282int wc_RipeMdUpdate(RipeMd* ripemd, const byte* data, word32 len)
283{
284 /* do block size increments */
285 byte* local;
286
287 if (ripemd == NULL || (data == NULL && len > 0)) {
288 return BAD_FUNC_ARG;
289 }
290
291 local = (byte*)ripemd->buffer;
292
293 while (len) {
294 word32 add = min(len, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
295 XMEMCPY(&local[ripemd->buffLen], data, add);
296
297 ripemd->buffLen += add;
298 data += add;
299 len -= add;
300
301 if (ripemd->buffLen == RIPEMD_BLOCK_SIZE) {
302 #ifdef BIG_ENDIAN_ORDER
303 ByteReverseWords(ripemd->buffer, ripemd->buffer,
304 RIPEMD_BLOCK_SIZE);
305 #endif
306 Transform(ripemd);
307 AddLength(ripemd, RIPEMD_BLOCK_SIZE);
308 ripemd->buffLen = 0;
309 }
310 }
311 return 0;
312}
313
314
315int wc_RipeMdFinal(RipeMd* ripemd, byte* hash)
316{
317 byte* local;
318
319 if (ripemd == NULL || hash == NULL) {
320 return BAD_FUNC_ARG;
321 }
322
323 local = (byte*)ripemd->buffer;
324
325 AddLength(ripemd, ripemd->buffLen); /* before adding pads */
326
327 local[ripemd->buffLen++] = 0x80; /* add 1 */
328
329 /* pad with zeros */
330 if (ripemd->buffLen > RIPEMD_PAD_SIZE) {
331 XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
332 ripemd->buffLen += RIPEMD_BLOCK_SIZE - ripemd->buffLen;
333
334 #ifdef BIG_ENDIAN_ORDER
335 ByteReverseWords(ripemd->buffer, ripemd->buffer, RIPEMD_BLOCK_SIZE);
336 #endif
337 Transform(ripemd);
338 ripemd->buffLen = 0;
339 }
340 XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_PAD_SIZE - ripemd->buffLen);
341
342 /* put lengths in bits */
343 ripemd->loLen = ripemd->loLen << 3;
344 ripemd->hiLen = (ripemd->loLen >> (8*sizeof(ripemd->loLen) - 3)) +
345 (ripemd->hiLen << 3);
346
347 /* store lengths */
348 #ifdef BIG_ENDIAN_ORDER
349 ByteReverseWords(ripemd->buffer, ripemd->buffer, RIPEMD_BLOCK_SIZE);
350 #endif
351 /* ! length ordering dependent on digest endian type ! */
352 XMEMCPY(&local[RIPEMD_PAD_SIZE], &ripemd->loLen, sizeof(word32));
353 XMEMCPY(&local[RIPEMD_PAD_SIZE + sizeof(word32)], &ripemd->hiLen,
354 sizeof(word32));
355
356 Transform(ripemd);
357 #ifdef BIG_ENDIAN_ORDER
358 ByteReverseWords(ripemd->digest, ripemd->digest, RIPEMD_DIGEST_SIZE);
359 #endif
360 XMEMCPY(hash, ripemd->digest, RIPEMD_DIGEST_SIZE);
361
362 return wc_InitRipeMd(ripemd); /* reset state */
363}
364
365
366#endif /* WOLFSSL_RIPEMD */
Note: See TracBrowser for help on using the repository browser.