ext/digest/rmd160/rmd160.c

DEFINITIONS

1. RMD160_Init
2. RMD160_Transform
3. RMD160_Update
4. RMD160_Final
5. RMD160_Equal

   1  /*      $NetBSD: rmd160.c,v 1.1.1.1 2001/03/06 11:21:05 agc Exp $       */
   2  /*      $RoughId: rmd160.c,v 1.2 2001/07/13 19:49:10 knu Exp $  */
   3  /*      $Id: rmd160.c,v 1.1 2001/07/13 20:06:14 knu Exp $       */
   4  
   5  /********************************************************************\
   6   *
   7   *      FILE:     rmd160.c
   8   *
   9   *      CONTENTS: A sample C-implementation of the RIPEMD-160
  10   *                hash-function.
  11   *      TARGET:   any computer with an ANSI C compiler
  12   *
  13   *      AUTHOR:   Antoon Bosselaers, ESAT-COSIC
  14   *                (Arranged for libc by Todd C. Miller)
  15   *      DATE:     1 March 1996
  16   *      VERSION:  1.0
  17   *
  18   *      Copyright (c) Katholieke Universiteit Leuven
  19   *      1996, All Rights Reserved
  20   *
  21  \********************************************************************/
  22  
  23  #include "rmd160.h"
  24  
  25  #ifndef lint
  26  /* __RCSID("$NetBSD: rmd160.c,v 1.1.1.1 2001/03/06 11:21:05 agc Exp $"); */
  27  #endif  /* not lint */
  28  
  29  /* header files */
  30  
  31  #ifdef HAVE_SYS_ENDIAN_H_
  32  #include <sys/endian.h>
  33  #endif
  34  
  35  #ifdef HAVE_MACHINE_ENDIAN_H_
  36  #include <machine/endian.h>
  37  #endif
  38  
  39  /* #include "namespace.h" */
  40  
  41  #include <assert.h>
  42  #include <stdio.h>
  43  #include <stdlib.h>
  44  #include <string.h>
  45  
  46  #ifndef _DIAGASSERT
  47  #define _DIAGASSERT(cond)       assert(cond)
  48  #endif
  49  
  50  
  51  /********************************************************************/
  52  
  53  /* macro definitions */
  54  
  55  /* collect four bytes into one word: */
  56  #define BYTES_TO_DWORD(strptr)                  \
  57      (((uint32_t) *((strptr)+3) << 24) | \
  58      ((uint32_t) *((strptr)+2) << 16) |          \
  59      ((uint32_t) *((strptr)+1) <<  8) |          \
  60      ((uint32_t) *(strptr)))
  61  
  62  /* ROL(x, n) cyclically rotates x over n bits to the left */
  63  /* x must be of an unsigned 32 bits type and 0 <= n < 32. */
  64  #define ROL(x, n)       (((x) << (n)) | ((x) >> (32-(n))))
  65  
  66  /* the three basic functions F(), G() and H() */
  67  #define F(x, y, z)      ((x) ^ (y) ^ (z))
  68  #define G(x, y, z)      (((x) & (y)) | (~(x) & (z)))
  69  #define H(x, y, z)      (((x) | ~(y)) ^ (z))
  70  #define I(x, y, z)      (((x) & (z)) | ((y) & ~(z)))
  71  #define J(x, y, z)      ((x) ^ ((y) | ~(z)))
  72  
  73  /* the eight basic operations FF() through III() */
  74  #define FF(a, b, c, d, e, x, s) {                       \
  75        (a) += F((b), (c), (d)) + (x);                    \
  76        (a) = ROL((a), (s)) + (e);                        \
  77        (c) = ROL((c), 10);                               \
  78  }
  79  #define GG(a, b, c, d, e, x, s) {                       \
  80        (a) += G((b), (c), (d)) + (x) + 0x5a827999U;      \
  81        (a) = ROL((a), (s)) + (e);                        \
  82        (c) = ROL((c), 10);                               \
  83  }
  84  #define HH(a, b, c, d, e, x, s) {                       \
  85        (a) += H((b), (c), (d)) + (x) + 0x6ed9eba1U;      \
  86        (a) = ROL((a), (s)) + (e);                        \
  87        (c) = ROL((c), 10);                               \
  88  }
  89  #define II(a, b, c, d, e, x, s) {                       \
  90        (a) += I((b), (c), (d)) + (x) + 0x8f1bbcdcU;      \
  91        (a) = ROL((a), (s)) + (e);                        \
  92        (c) = ROL((c), 10);                               \
  93  }
  94  #define JJ(a, b, c, d, e, x, s) {                       \
  95        (a) += J((b), (c), (d)) + (x) + 0xa953fd4eU;      \
  96        (a) = ROL((a), (s)) + (e);                        \
  97        (c) = ROL((c), 10);                               \
  98  }
  99  #define FFF(a, b, c, d, e, x, s)        {               \
 100        (a) += F((b), (c), (d)) + (x);                    \
 101        (a) = ROL((a), (s)) + (e);                        \
 102        (c) = ROL((c), 10);                               \
 103  }
 104  #define GGG(a, b, c, d, e, x, s)        {               \
 105        (a) += G((b), (c), (d)) + (x) + 0x7a6d76e9U;      \
 106        (a) = ROL((a), (s)) + (e);                        \
 107        (c) = ROL((c), 10);                               \
 108  }
 109  #define HHH(a, b, c, d, e, x, s)        {               \
 110        (a) += H((b), (c), (d)) + (x) + 0x6d703ef3U;      \
 111        (a) = ROL((a), (s)) + (e);                        \
 112        (c) = ROL((c), 10);                               \
 113  }
 114  #define III(a, b, c, d, e, x, s)        {               \
 115        (a) += I((b), (c), (d)) + (x) + 0x5c4dd124U;      \
 116        (a) = ROL((a), (s)) + (e);                        \
 117        (c) = ROL((c), 10);                               \
 118  }
 119  #define JJJ(a, b, c, d, e, x, s)        {               \
 120        (a) += J((b), (c), (d)) + (x) + 0x50a28be6U;      \
 121        (a) = ROL((a), (s)) + (e);                        \
 122        (c) = ROL((c), 10);                               \
 123  }
 124  
 125  /********************************************************************/
 126  
 127  void
RMD160_Init(RMD160_CTX *context)
 129  {
 130  
_DIAGASSERT(context != NULL);
 132  
 133          /* ripemd-160 initialization constants */
 134          context->state[0] = 0x67452301U;
 135          context->state[1] = 0xefcdab89U;
 136          context->state[2] = 0x98badcfeU;
 137          context->state[3] = 0x10325476U;
 138          context->state[4] = 0xc3d2e1f0U;
 139          context->length[0] = context->length[1] = 0;
 140          context->buflen = 0;
 141  }
 142  
 143  /********************************************************************/
 144  
 145  void
RMD160_Transform(uint32_t state[5], const uint32_t block[16])
 147  {
 148          uint32_t aa, bb, cc, dd, ee;
 149          uint32_t aaa, bbb, ccc, ddd, eee;
 150  
_DIAGASSERT(state != NULL);
_DIAGASSERT(block != NULL);
 153  
 154          aa = aaa = state[0];
 155          bb = bbb = state[1];
 156          cc = ccc = state[2];
 157          dd = ddd = state[3];
 158          ee = eee = state[4];
 159  
 160          /* round 1 */
FF(aa, bb, cc, dd, ee, block[ 0], 11);
FF(ee, aa, bb, cc, dd, block[ 1], 14);
FF(dd, ee, aa, bb, cc, block[ 2], 15);
FF(cc, dd, ee, aa, bb, block[ 3], 12);
FF(bb, cc, dd, ee, aa, block[ 4],  5);
FF(aa, bb, cc, dd, ee, block[ 5],  8);
FF(ee, aa, bb, cc, dd, block[ 6],  7);
FF(dd, ee, aa, bb, cc, block[ 7],  9);
FF(cc, dd, ee, aa, bb, block[ 8], 11);
FF(bb, cc, dd, ee, aa, block[ 9], 13);
FF(aa, bb, cc, dd, ee, block[10], 14);
FF(ee, aa, bb, cc, dd, block[11], 15);
FF(dd, ee, aa, bb, cc, block[12],  6);
FF(cc, dd, ee, aa, bb, block[13],  7);
FF(bb, cc, dd, ee, aa, block[14],  9);
FF(aa, bb, cc, dd, ee, block[15],  8);
 177  
 178          /* round 2 */
GG(ee, aa, bb, cc, dd, block[ 7],  7);
GG(dd, ee, aa, bb, cc, block[ 4],  6);
GG(cc, dd, ee, aa, bb, block[13],  8);
GG(bb, cc, dd, ee, aa, block[ 1], 13);
GG(aa, bb, cc, dd, ee, block[10], 11);
GG(ee, aa, bb, cc, dd, block[ 6],  9);
GG(dd, ee, aa, bb, cc, block[15],  7);
GG(cc, dd, ee, aa, bb, block[ 3], 15);
GG(bb, cc, dd, ee, aa, block[12],  7);
GG(aa, bb, cc, dd, ee, block[ 0], 12);
GG(ee, aa, bb, cc, dd, block[ 9], 15);
GG(dd, ee, aa, bb, cc, block[ 5],  9);
GG(cc, dd, ee, aa, bb, block[ 2], 11);
GG(bb, cc, dd, ee, aa, block[14],  7);
GG(aa, bb, cc, dd, ee, block[11], 13);
GG(ee, aa, bb, cc, dd, block[ 8], 12);
 195  
 196          /* round 3 */
HH(dd, ee, aa, bb, cc, block[ 3], 11);
HH(cc, dd, ee, aa, bb, block[10], 13);
HH(bb, cc, dd, ee, aa, block[14],  6);
HH(aa, bb, cc, dd, ee, block[ 4],  7);
HH(ee, aa, bb, cc, dd, block[ 9], 14);
HH(dd, ee, aa, bb, cc, block[15],  9);
HH(cc, dd, ee, aa, bb, block[ 8], 13);
HH(bb, cc, dd, ee, aa, block[ 1], 15);
HH(aa, bb, cc, dd, ee, block[ 2], 14);
HH(ee, aa, bb, cc, dd, block[ 7],  8);
HH(dd, ee, aa, bb, cc, block[ 0], 13);
HH(cc, dd, ee, aa, bb, block[ 6],  6);
HH(bb, cc, dd, ee, aa, block[13],  5);
HH(aa, bb, cc, dd, ee, block[11], 12);
HH(ee, aa, bb, cc, dd, block[ 5],  7);
HH(dd, ee, aa, bb, cc, block[12],  5);
 213  
 214          /* round 4 */
II(cc, dd, ee, aa, bb, block[ 1], 11);
II(bb, cc, dd, ee, aa, block[ 9], 12);
II(aa, bb, cc, dd, ee, block[11], 14);
II(ee, aa, bb, cc, dd, block[10], 15);
II(dd, ee, aa, bb, cc, block[ 0], 14);
II(cc, dd, ee, aa, bb, block[ 8], 15);
II(bb, cc, dd, ee, aa, block[12],  9);
II(aa, bb, cc, dd, ee, block[ 4],  8);
II(ee, aa, bb, cc, dd, block[13],  9);
II(dd, ee, aa, bb, cc, block[ 3], 14);
II(cc, dd, ee, aa, bb, block[ 7],  5);
II(bb, cc, dd, ee, aa, block[15],  6);
II(aa, bb, cc, dd, ee, block[14],  8);
II(ee, aa, bb, cc, dd, block[ 5],  6);
II(dd, ee, aa, bb, cc, block[ 6],  5);
II(cc, dd, ee, aa, bb, block[ 2], 12);
 231  
 232          /* round 5 */
JJ(bb, cc, dd, ee, aa, block[ 4],  9);
JJ(aa, bb, cc, dd, ee, block[ 0], 15);
JJ(ee, aa, bb, cc, dd, block[ 5],  5);
JJ(dd, ee, aa, bb, cc, block[ 9], 11);
JJ(cc, dd, ee, aa, bb, block[ 7],  6);
JJ(bb, cc, dd, ee, aa, block[12],  8);
JJ(aa, bb, cc, dd, ee, block[ 2], 13);
JJ(ee, aa, bb, cc, dd, block[10], 12);
JJ(dd, ee, aa, bb, cc, block[14],  5);
JJ(cc, dd, ee, aa, bb, block[ 1], 12);
JJ(bb, cc, dd, ee, aa, block[ 3], 13);
JJ(aa, bb, cc, dd, ee, block[ 8], 14);
JJ(ee, aa, bb, cc, dd, block[11], 11);
JJ(dd, ee, aa, bb, cc, block[ 6],  8);
JJ(cc, dd, ee, aa, bb, block[15],  5);
JJ(bb, cc, dd, ee, aa, block[13],  6);
 249  
 250          /* parallel round 1 */
JJJ(aaa, bbb, ccc, ddd, eee, block[ 5],  8);
JJJ(eee, aaa, bbb, ccc, ddd, block[14],  9);
JJJ(ddd, eee, aaa, bbb, ccc, block[ 7],  9);
JJJ(ccc, ddd, eee, aaa, bbb, block[ 0], 11);
JJJ(bbb, ccc, ddd, eee, aaa, block[ 9], 13);
JJJ(aaa, bbb, ccc, ddd, eee, block[ 2], 15);
JJJ(eee, aaa, bbb, ccc, ddd, block[11], 15);
JJJ(ddd, eee, aaa, bbb, ccc, block[ 4],  5);
JJJ(ccc, ddd, eee, aaa, bbb, block[13],  7);
JJJ(bbb, ccc, ddd, eee, aaa, block[ 6],  7);
JJJ(aaa, bbb, ccc, ddd, eee, block[15],  8);
JJJ(eee, aaa, bbb, ccc, ddd, block[ 8], 11);
JJJ(ddd, eee, aaa, bbb, ccc, block[ 1], 14);
JJJ(ccc, ddd, eee, aaa, bbb, block[10], 14);
JJJ(bbb, ccc, ddd, eee, aaa, block[ 3], 12);
JJJ(aaa, bbb, ccc, ddd, eee, block[12],  6);
 267  
 268          /* parallel round 2 */
III(eee, aaa, bbb, ccc, ddd, block[ 6],  9);
III(ddd, eee, aaa, bbb, ccc, block[11], 13);
III(ccc, ddd, eee, aaa, bbb, block[ 3], 15);
III(bbb, ccc, ddd, eee, aaa, block[ 7],  7);
III(aaa, bbb, ccc, ddd, eee, block[ 0], 12);
III(eee, aaa, bbb, ccc, ddd, block[13],  8);
III(ddd, eee, aaa, bbb, ccc, block[ 5],  9);
III(ccc, ddd, eee, aaa, bbb, block[10], 11);
III(bbb, ccc, ddd, eee, aaa, block[14],  7);
III(aaa, bbb, ccc, ddd, eee, block[15],  7);
III(eee, aaa, bbb, ccc, ddd, block[ 8], 12);
III(ddd, eee, aaa, bbb, ccc, block[12],  7);
III(ccc, ddd, eee, aaa, bbb, block[ 4],  6);
III(bbb, ccc, ddd, eee, aaa, block[ 9], 15);
III(aaa, bbb, ccc, ddd, eee, block[ 1], 13);
III(eee, aaa, bbb, ccc, ddd, block[ 2], 11);
 285  
 286          /* parallel round 3 */
HHH(ddd, eee, aaa, bbb, ccc, block[15],  9);
HHH(ccc, ddd, eee, aaa, bbb, block[ 5],  7);
HHH(bbb, ccc, ddd, eee, aaa, block[ 1], 15);
HHH(aaa, bbb, ccc, ddd, eee, block[ 3], 11);
HHH(eee, aaa, bbb, ccc, ddd, block[ 7],  8);
HHH(ddd, eee, aaa, bbb, ccc, block[14],  6);
HHH(ccc, ddd, eee, aaa, bbb, block[ 6],  6);
HHH(bbb, ccc, ddd, eee, aaa, block[ 9], 14);
HHH(aaa, bbb, ccc, ddd, eee, block[11], 12);
HHH(eee, aaa, bbb, ccc, ddd, block[ 8], 13);
HHH(ddd, eee, aaa, bbb, ccc, block[12],  5);
HHH(ccc, ddd, eee, aaa, bbb, block[ 2], 14);
HHH(bbb, ccc, ddd, eee, aaa, block[10], 13);
HHH(aaa, bbb, ccc, ddd, eee, block[ 0], 13);
HHH(eee, aaa, bbb, ccc, ddd, block[ 4],  7);
HHH(ddd, eee, aaa, bbb, ccc, block[13],  5);
 303  
 304          /* parallel round 4 */
GGG(ccc, ddd, eee, aaa, bbb, block[ 8], 15);
GGG(bbb, ccc, ddd, eee, aaa, block[ 6],  5);
GGG(aaa, bbb, ccc, ddd, eee, block[ 4],  8);
GGG(eee, aaa, bbb, ccc, ddd, block[ 1], 11);
GGG(ddd, eee, aaa, bbb, ccc, block[ 3], 14);
GGG(ccc, ddd, eee, aaa, bbb, block[11], 14);
GGG(bbb, ccc, ddd, eee, aaa, block[15],  6);
GGG(aaa, bbb, ccc, ddd, eee, block[ 0], 14);
GGG(eee, aaa, bbb, ccc, ddd, block[ 5],  6);
GGG(ddd, eee, aaa, bbb, ccc, block[12],  9);
GGG(ccc, ddd, eee, aaa, bbb, block[ 2], 12);
GGG(bbb, ccc, ddd, eee, aaa, block[13],  9);
GGG(aaa, bbb, ccc, ddd, eee, block[ 9], 12);
GGG(eee, aaa, bbb, ccc, ddd, block[ 7],  5);
GGG(ddd, eee, aaa, bbb, ccc, block[10], 15);
GGG(ccc, ddd, eee, aaa, bbb, block[14],  8);
 321  
 322          /* parallel round 5 */
FFF(bbb, ccc, ddd, eee, aaa, block[12] ,  8);
FFF(aaa, bbb, ccc, ddd, eee, block[15] ,  5);
FFF(eee, aaa, bbb, ccc, ddd, block[10] , 12);
FFF(ddd, eee, aaa, bbb, ccc, block[ 4] ,  9);
FFF(ccc, ddd, eee, aaa, bbb, block[ 1] , 12);
FFF(bbb, ccc, ddd, eee, aaa, block[ 5] ,  5);
FFF(aaa, bbb, ccc, ddd, eee, block[ 8] , 14);
FFF(eee, aaa, bbb, ccc, ddd, block[ 7] ,  6);
FFF(ddd, eee, aaa, bbb, ccc, block[ 6] ,  8);
FFF(ccc, ddd, eee, aaa, bbb, block[ 2] , 13);
FFF(bbb, ccc, ddd, eee, aaa, block[13] ,  6);
FFF(aaa, bbb, ccc, ddd, eee, block[14] ,  5);
FFF(eee, aaa, bbb, ccc, ddd, block[ 0] , 15);
FFF(ddd, eee, aaa, bbb, ccc, block[ 3] , 13);
FFF(ccc, ddd, eee, aaa, bbb, block[ 9] , 11);
FFF(bbb, ccc, ddd, eee, aaa, block[11] , 11);
 339  
 340          /* combine results */
 341          ddd += cc + state[1];           /* final result for state[0] */
 342          state[1] = state[2] + dd + eee;
 343          state[2] = state[3] + ee + aaa;
 344          state[3] = state[4] + aa + bbb;
 345          state[4] = state[0] + bb + ccc;
 346          state[0] = ddd;
 347  }
 348  
 349  /********************************************************************/
 350  
 351  void
RMD160_Update(RMD160_CTX *context, const uint8_t *data, size_t nbytes)
 353  {
 354          uint32_t X[16];
 355          uint32_t ofs = 0;
 356          uint32_t i;
 357  #ifdef WORDS_BIGENDIAN
 358          uint32_t j;
 359  #endif
 360  
_DIAGASSERT(context != NULL);
_DIAGASSERT(data != NULL);
 363  
 364          /* update length[] */
 365          if (context->length[0] + nbytes < context->length[0])
 366                  context->length[1]++;           /* overflow to msb of length */
 367          context->length[0] += nbytes;
 368  
 369          (void)memset(X, 0, sizeof(X));
 370  
 371          if ( context->buflen + nbytes < 64 )
 372          {
 373                  (void)memcpy(context->bbuffer + context->buflen, data, nbytes);
 374                  context->buflen += nbytes;
 375          }
 376          else
 377          {
 378                  /* process first block */
 379                  ofs = 64 - context->buflen;
 380                  (void)memcpy(context->bbuffer + context->buflen, data, ofs);
 381  #ifndef WORDS_BIGENDIAN
 382                  (void)memcpy(X, context->bbuffer, sizeof(X));
 383  #else
 384                  for (j=0; j < 16; j++)
 385                          X[j] = BYTES_TO_DWORD(context->bbuffer + (4 * j));
 386  #endif
RMD160_Transform(context->state, X);
 388                  nbytes -= ofs;
 389  
 390                  /* process remaining complete blocks */
 391                  for (i = 0; i < (nbytes >> 6); i++) {
 392  #ifndef WORDS_BIGENDIAN
 393                          (void)memcpy(X, data + (64 * i) + ofs, sizeof(X));
 394  #else
 395                          for (j=0; j < 16; j++)
 396                                  X[j] = BYTES_TO_DWORD(data + (64 * i) + (4 * j) + ofs);
 397  #endif
RMD160_Transform(context->state, X);
 399                  }
 400  
 401                  /*
 402                   * Put last bytes from data into context's buffer
 403                   */
 404                  context->buflen = nbytes & 63;
memcpy(context->bbuffer, data + (64 * i) + ofs, context->buflen);
 406          }
 407  }
 408  
 409  /********************************************************************/
 410  
 411  void
RMD160_Final(uint8_t digest[20], RMD160_CTX *context)
 413  {
 414          uint32_t i;
 415          uint32_t X[16];
 416  #ifdef WORDS_BIGENDIAN
 417          uint32_t j;
 418  #endif
 419  
_DIAGASSERT(digest != NULL);
_DIAGASSERT(context != NULL);
 422  
 423          /* append the bit m_n == 1 */
 424          context->bbuffer[context->buflen] = (uint8_t)'\200';
 425  
 426          (void)memset(context->bbuffer + context->buflen + 1, 0,
 427                  63 - context->buflen);
 428  #ifndef WORDS_BIGENDIAN
 429          (void)memcpy(X, context->bbuffer, sizeof(X));
 430  #else
 431          for (j=0; j < 16; j++)
 432                  X[j] = BYTES_TO_DWORD(context->bbuffer + (4 * j));
 433  #endif
 434          if ((context->buflen) > 55) {
 435                  /* length goes to next block */
RMD160_Transform(context->state, X);
 437                  (void)memset(X, 0, sizeof(X));
 438          }
 439  
 440          /* append length in bits */
 441          X[14] = context->length[0] << 3;
 442          X[15] = (context->length[0] >> 29) |
 443              (context->length[1] << 3);
RMD160_Transform(context->state, X);
 445  
 446          if (digest != NULL) {
 447                  for (i = 0; i < 20; i += 4) {
 448                          /* extracts the 8 least significant bits. */
 449                          digest[i]     =  context->state[i>>2];
 450                          digest[i + 1] = (context->state[i>>2] >>  8);
 451                          digest[i + 2] = (context->state[i>>2] >> 16);
 452                          digest[i + 3] = (context->state[i>>2] >> 24);
 453                  }
 454          }
 455  }
 456  
 457  int RMD160_Equal(RMD160_CTX* pctx1, RMD160_CTX* pctx2) {
 458          return pctx1->buflen == pctx2->buflen
 459                  && memcmp(pctx1->length, pctx2->length, sizeof(pctx1->length)) == 0
 460                  && memcmp(pctx1->state, pctx2->state, sizeof(pctx1->state)) == 0
 461                  && memcmp(pctx1->bbuffer, pctx2->bbuffer, sizeof(pctx1->bbuffer)) == 0;
 462  }
 463  
 464  /************************ end of file rmd160.c **********************/