Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 1 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 2 | * All rights reserved. |
| 3 | * |
| 4 | * This package is an SSL implementation written |
| 5 | * by Eric Young (eay@cryptsoft.com). |
| 6 | * The implementation was written so as to conform with Netscapes SSL. |
| 7 | * |
| 8 | * This library is free for commercial and non-commercial use as long as |
| 9 | * the following conditions are aheared to. The following conditions |
| 10 | * apply to all code found in this distribution, be it the RC4, RSA, |
| 11 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation |
| 12 | * included with this distribution is covered by the same copyright terms |
| 13 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). |
| 14 | * |
| 15 | * Copyright remains Eric Young's, and as such any Copyright notices in |
| 16 | * the code are not to be removed. |
| 17 | * If this package is used in a product, Eric Young should be given attribution |
| 18 | * as the author of the parts of the library used. |
| 19 | * This can be in the form of a textual message at program startup or |
| 20 | * in documentation (online or textual) provided with the package. |
| 21 | * |
| 22 | * Redistribution and use in source and binary forms, with or without |
| 23 | * modification, are permitted provided that the following conditions |
| 24 | * are met: |
| 25 | * 1. Redistributions of source code must retain the copyright |
| 26 | * notice, this list of conditions and the following disclaimer. |
| 27 | * 2. Redistributions in binary form must reproduce the above copyright |
| 28 | * notice, this list of conditions and the following disclaimer in the |
| 29 | * documentation and/or other materials provided with the distribution. |
| 30 | * 3. All advertising materials mentioning features or use of this software |
| 31 | * must display the following acknowledgement: |
| 32 | * "This product includes cryptographic software written by |
| 33 | * Eric Young (eay@cryptsoft.com)" |
| 34 | * The word 'cryptographic' can be left out if the rouines from the library |
| 35 | * being used are not cryptographic related :-). |
| 36 | * 4. If you include any Windows specific code (or a derivative thereof) from |
| 37 | * the apps directory (application code) you must include an acknowledgement: |
| 38 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" |
| 39 | * |
| 40 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND |
| 41 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| 42 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
| 43 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE |
| 44 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
| 45 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
| 46 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
| 47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
| 48 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
| 49 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
| 50 | * SUCH DAMAGE. |
| 51 | * |
| 52 | * The licence and distribution terms for any publically available version or |
| 53 | * derivative of this code cannot be changed. i.e. this code cannot simply be |
| 54 | * copied and put under another distribution licence |
| 55 | * [including the GNU Public Licence.] */ |
| 56 | |
| 57 | #include <openssl/sha.h> |
| 58 | |
| 59 | #include <string.h> |
| 60 | |
| 61 | #include <openssl/mem.h> |
| 62 | |
Robert Sloan | 572a4e2 | 2017-04-17 10:52:19 -0700 | [diff] [blame] | 63 | #include "../../internal.h" |
Robert Sloan | 69939df | 2017-01-09 10:53:07 -0800 | [diff] [blame] | 64 | |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 65 | |
Robert Sloan | ae1abf9 | 2017-10-05 12:50:08 -0700 | [diff] [blame^] | 66 | #if (!defined(OPENSSL_NO_ASM) && \ |
| 67 | (defined(OPENSSL_X86) || defined(OPENSSL_X86_64) || \ |
| 68 | defined(OPENSSL_ARM) || defined(OPENSSL_AARCH64))) || \ |
| 69 | defined(OPENSSL_PPC64LE) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 70 | #define SHA1_ASM |
| 71 | #endif |
| 72 | |
| 73 | int SHA1_Init(SHA_CTX *sha) { |
Robert Sloan | 69939df | 2017-01-09 10:53:07 -0800 | [diff] [blame] | 74 | OPENSSL_memset(sha, 0, sizeof(SHA_CTX)); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 75 | sha->h[0] = 0x67452301UL; |
| 76 | sha->h[1] = 0xefcdab89UL; |
| 77 | sha->h[2] = 0x98badcfeUL; |
| 78 | sha->h[3] = 0x10325476UL; |
| 79 | sha->h[4] = 0xc3d2e1f0UL; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 80 | return 1; |
| 81 | } |
| 82 | |
| 83 | uint8_t *SHA1(const uint8_t *data, size_t len, uint8_t *out) { |
| 84 | SHA_CTX ctx; |
Robert Sloan | 572a4e2 | 2017-04-17 10:52:19 -0700 | [diff] [blame] | 85 | SHA1_Init(&ctx); |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 86 | SHA1_Update(&ctx, data, len); |
| 87 | SHA1_Final(out, &ctx); |
| 88 | OPENSSL_cleanse(&ctx, sizeof(ctx)); |
| 89 | return out; |
| 90 | } |
| 91 | |
| 92 | #define DATA_ORDER_IS_BIG_ENDIAN |
| 93 | |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 94 | #define HASH_CTX SHA_CTX |
| 95 | #define HASH_CBLOCK 64 |
| 96 | #define HASH_MAKE_STRING(c, s) \ |
| 97 | do { \ |
Adam Langley | 53b272a | 2015-06-04 17:45:09 -0700 | [diff] [blame] | 98 | uint32_t ll; \ |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 99 | ll = (c)->h[0]; \ |
Adam Langley | 4139edb | 2016-01-13 15:00:54 -0800 | [diff] [blame] | 100 | HOST_l2c(ll, (s)); \ |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 101 | ll = (c)->h[1]; \ |
Adam Langley | 4139edb | 2016-01-13 15:00:54 -0800 | [diff] [blame] | 102 | HOST_l2c(ll, (s)); \ |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 103 | ll = (c)->h[2]; \ |
Adam Langley | 4139edb | 2016-01-13 15:00:54 -0800 | [diff] [blame] | 104 | HOST_l2c(ll, (s)); \ |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 105 | ll = (c)->h[3]; \ |
Adam Langley | 4139edb | 2016-01-13 15:00:54 -0800 | [diff] [blame] | 106 | HOST_l2c(ll, (s)); \ |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 107 | ll = (c)->h[4]; \ |
Adam Langley | 4139edb | 2016-01-13 15:00:54 -0800 | [diff] [blame] | 108 | HOST_l2c(ll, (s)); \ |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 109 | } while (0) |
| 110 | |
| 111 | #define HASH_UPDATE SHA1_Update |
| 112 | #define HASH_TRANSFORM SHA1_Transform |
| 113 | #define HASH_FINAL SHA1_Final |
| 114 | #define HASH_BLOCK_DATA_ORDER sha1_block_data_order |
Adam Langley | 4139edb | 2016-01-13 15:00:54 -0800 | [diff] [blame] | 115 | #define ROTATE(a, n) (((a) << (n)) | ((a) >> (32 - (n)))) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 116 | #define Xupdate(a, ix, ia, ib, ic, id) \ |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 117 | do { \ |
| 118 | (a) = ((ia) ^ (ib) ^ (ic) ^ (id)); \ |
| 119 | (ix) = (a) = ROTATE((a), 1); \ |
| 120 | } while (0) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 121 | |
| 122 | #ifndef SHA1_ASM |
| 123 | static |
| 124 | #endif |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 125 | void sha1_block_data_order(uint32_t *state, const uint8_t *data, size_t num); |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 126 | |
| 127 | #include "../digest/md32_common.h" |
| 128 | |
| 129 | #define K_00_19 0x5a827999UL |
| 130 | #define K_20_39 0x6ed9eba1UL |
| 131 | #define K_40_59 0x8f1bbcdcUL |
| 132 | #define K_60_79 0xca62c1d6UL |
| 133 | |
Robert Sloan | 8f860b1 | 2017-08-28 07:37:06 -0700 | [diff] [blame] | 134 | // As pointed out by Wei Dai <weidai@eskimo.com>, F() below can be simplified |
| 135 | // to the code in F_00_19. Wei attributes these optimisations to Peter |
| 136 | // Gutmann's SHS code, and he attributes it to Rich Schroeppel. #define |
| 137 | // F(x,y,z) (((x) & (y)) | ((~(x)) & (z))) I've just become aware of another |
| 138 | // tweak to be made, again from Wei Dai, in F_40_59, (x&a)|(y&a) -> (x|y)&a |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 139 | #define F_00_19(b, c, d) ((((c) ^ (d)) & (b)) ^ (d)) |
| 140 | #define F_20_39(b, c, d) ((b) ^ (c) ^ (d)) |
| 141 | #define F_40_59(b, c, d) (((b) & (c)) | (((b) | (c)) & (d))) |
| 142 | #define F_60_79(b, c, d) F_20_39(b, c, d) |
| 143 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 144 | #define BODY_00_15(i, a, b, c, d, e, f, xi) \ |
| 145 | do { \ |
| 146 | (f) = (xi) + (e) + K_00_19 + ROTATE((a), 5) + F_00_19((b), (c), (d)); \ |
| 147 | (b) = ROTATE((b), 30); \ |
| 148 | } while (0) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 149 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 150 | #define BODY_16_19(i, a, b, c, d, e, f, xi, xa, xb, xc, xd) \ |
| 151 | do { \ |
| 152 | Xupdate(f, xi, xa, xb, xc, xd); \ |
| 153 | (f) += (e) + K_00_19 + ROTATE((a), 5) + F_00_19((b), (c), (d)); \ |
| 154 | (b) = ROTATE((b), 30); \ |
| 155 | } while (0) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 156 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 157 | #define BODY_20_31(i, a, b, c, d, e, f, xi, xa, xb, xc, xd) \ |
| 158 | do { \ |
| 159 | Xupdate(f, xi, xa, xb, xc, xd); \ |
| 160 | (f) += (e) + K_20_39 + ROTATE((a), 5) + F_20_39((b), (c), (d)); \ |
| 161 | (b) = ROTATE((b), 30); \ |
| 162 | } while (0) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 163 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 164 | #define BODY_32_39(i, a, b, c, d, e, f, xa, xb, xc, xd) \ |
| 165 | do { \ |
| 166 | Xupdate(f, xa, xa, xb, xc, xd); \ |
| 167 | (f) += (e) + K_20_39 + ROTATE((a), 5) + F_20_39((b), (c), (d)); \ |
| 168 | (b) = ROTATE((b), 30); \ |
| 169 | } while (0) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 170 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 171 | #define BODY_40_59(i, a, b, c, d, e, f, xa, xb, xc, xd) \ |
| 172 | do { \ |
| 173 | Xupdate(f, xa, xa, xb, xc, xd); \ |
| 174 | (f) += (e) + K_40_59 + ROTATE((a), 5) + F_40_59((b), (c), (d)); \ |
| 175 | (b) = ROTATE((b), 30); \ |
| 176 | } while (0) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 177 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 178 | #define BODY_60_79(i, a, b, c, d, e, f, xa, xb, xc, xd) \ |
| 179 | do { \ |
| 180 | Xupdate(f, xa, xa, xb, xc, xd); \ |
| 181 | (f) = (xa) + (e) + K_60_79 + ROTATE((a), 5) + F_60_79((b), (c), (d)); \ |
| 182 | (b) = ROTATE((b), 30); \ |
| 183 | } while (0) |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 184 | |
| 185 | #ifdef X |
| 186 | #undef X |
| 187 | #endif |
| 188 | |
| 189 | /* Originally X was an array. As it's automatic it's natural |
| 190 | * to expect RISC compiler to accomodate at least part of it in |
| 191 | * the register bank, isn't it? Unfortunately not all compilers |
| 192 | * "find" this expectation reasonable:-( On order to make such |
| 193 | * compilers generate better code I replace X[] with a bunch of |
| 194 | * X0, X1, etc. See the function body below... |
| 195 | * <appro@fy.chalmers.se> */ |
| 196 | #define X(i) XX##i |
| 197 | |
| 198 | #if !defined(SHA1_ASM) |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 199 | static void sha1_block_data_order(uint32_t *state, const uint8_t *data, |
| 200 | size_t num) { |
Adam Langley | 53b272a | 2015-06-04 17:45:09 -0700 | [diff] [blame] | 201 | register uint32_t A, B, C, D, E, T, l; |
| 202 | uint32_t XX0, XX1, XX2, XX3, XX4, XX5, XX6, XX7, XX8, XX9, XX10, |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 203 | XX11, XX12, XX13, XX14, XX15; |
| 204 | |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 205 | A = state[0]; |
| 206 | B = state[1]; |
| 207 | C = state[2]; |
| 208 | D = state[3]; |
| 209 | E = state[4]; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 210 | |
| 211 | for (;;) { |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 212 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 213 | X(0) = l; |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 214 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 215 | X(1) = l; |
| 216 | BODY_00_15(0, A, B, C, D, E, T, X(0)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 217 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 218 | X(2) = l; |
| 219 | BODY_00_15(1, T, A, B, C, D, E, X(1)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 220 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 221 | X(3) = l; |
| 222 | BODY_00_15(2, E, T, A, B, C, D, X(2)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 223 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 224 | X(4) = l; |
| 225 | BODY_00_15(3, D, E, T, A, B, C, X(3)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 226 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 227 | X(5) = l; |
| 228 | BODY_00_15(4, C, D, E, T, A, B, X(4)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 229 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 230 | X(6) = l; |
| 231 | BODY_00_15(5, B, C, D, E, T, A, X(5)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 232 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 233 | X(7) = l; |
| 234 | BODY_00_15(6, A, B, C, D, E, T, X(6)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 235 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 236 | X(8) = l; |
| 237 | BODY_00_15(7, T, A, B, C, D, E, X(7)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 238 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 239 | X(9) = l; |
| 240 | BODY_00_15(8, E, T, A, B, C, D, X(8)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 241 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 242 | X(10) = l; |
| 243 | BODY_00_15(9, D, E, T, A, B, C, X(9)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 244 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 245 | X(11) = l; |
| 246 | BODY_00_15(10, C, D, E, T, A, B, X(10)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 247 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 248 | X(12) = l; |
| 249 | BODY_00_15(11, B, C, D, E, T, A, X(11)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 250 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 251 | X(13) = l; |
| 252 | BODY_00_15(12, A, B, C, D, E, T, X(12)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 253 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 254 | X(14) = l; |
| 255 | BODY_00_15(13, T, A, B, C, D, E, X(13)); |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 256 | HOST_c2l(data, l); |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 257 | X(15) = l; |
| 258 | BODY_00_15(14, E, T, A, B, C, D, X(14)); |
| 259 | BODY_00_15(15, D, E, T, A, B, C, X(15)); |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 260 | |
| 261 | BODY_16_19(16, C, D, E, T, A, B, X(0), X(0), X(2), X(8), X(13)); |
| 262 | BODY_16_19(17, B, C, D, E, T, A, X(1), X(1), X(3), X(9), X(14)); |
| 263 | BODY_16_19(18, A, B, C, D, E, T, X(2), X(2), X(4), X(10), X(15)); |
| 264 | BODY_16_19(19, T, A, B, C, D, E, X(3), X(3), X(5), X(11), X(0)); |
| 265 | |
| 266 | BODY_20_31(20, E, T, A, B, C, D, X(4), X(4), X(6), X(12), X(1)); |
| 267 | BODY_20_31(21, D, E, T, A, B, C, X(5), X(5), X(7), X(13), X(2)); |
| 268 | BODY_20_31(22, C, D, E, T, A, B, X(6), X(6), X(8), X(14), X(3)); |
| 269 | BODY_20_31(23, B, C, D, E, T, A, X(7), X(7), X(9), X(15), X(4)); |
| 270 | BODY_20_31(24, A, B, C, D, E, T, X(8), X(8), X(10), X(0), X(5)); |
| 271 | BODY_20_31(25, T, A, B, C, D, E, X(9), X(9), X(11), X(1), X(6)); |
| 272 | BODY_20_31(26, E, T, A, B, C, D, X(10), X(10), X(12), X(2), X(7)); |
| 273 | BODY_20_31(27, D, E, T, A, B, C, X(11), X(11), X(13), X(3), X(8)); |
| 274 | BODY_20_31(28, C, D, E, T, A, B, X(12), X(12), X(14), X(4), X(9)); |
| 275 | BODY_20_31(29, B, C, D, E, T, A, X(13), X(13), X(15), X(5), X(10)); |
| 276 | BODY_20_31(30, A, B, C, D, E, T, X(14), X(14), X(0), X(6), X(11)); |
| 277 | BODY_20_31(31, T, A, B, C, D, E, X(15), X(15), X(1), X(7), X(12)); |
| 278 | |
| 279 | BODY_32_39(32, E, T, A, B, C, D, X(0), X(2), X(8), X(13)); |
| 280 | BODY_32_39(33, D, E, T, A, B, C, X(1), X(3), X(9), X(14)); |
| 281 | BODY_32_39(34, C, D, E, T, A, B, X(2), X(4), X(10), X(15)); |
| 282 | BODY_32_39(35, B, C, D, E, T, A, X(3), X(5), X(11), X(0)); |
| 283 | BODY_32_39(36, A, B, C, D, E, T, X(4), X(6), X(12), X(1)); |
| 284 | BODY_32_39(37, T, A, B, C, D, E, X(5), X(7), X(13), X(2)); |
| 285 | BODY_32_39(38, E, T, A, B, C, D, X(6), X(8), X(14), X(3)); |
| 286 | BODY_32_39(39, D, E, T, A, B, C, X(7), X(9), X(15), X(4)); |
| 287 | |
| 288 | BODY_40_59(40, C, D, E, T, A, B, X(8), X(10), X(0), X(5)); |
| 289 | BODY_40_59(41, B, C, D, E, T, A, X(9), X(11), X(1), X(6)); |
| 290 | BODY_40_59(42, A, B, C, D, E, T, X(10), X(12), X(2), X(7)); |
| 291 | BODY_40_59(43, T, A, B, C, D, E, X(11), X(13), X(3), X(8)); |
| 292 | BODY_40_59(44, E, T, A, B, C, D, X(12), X(14), X(4), X(9)); |
| 293 | BODY_40_59(45, D, E, T, A, B, C, X(13), X(15), X(5), X(10)); |
| 294 | BODY_40_59(46, C, D, E, T, A, B, X(14), X(0), X(6), X(11)); |
| 295 | BODY_40_59(47, B, C, D, E, T, A, X(15), X(1), X(7), X(12)); |
| 296 | BODY_40_59(48, A, B, C, D, E, T, X(0), X(2), X(8), X(13)); |
| 297 | BODY_40_59(49, T, A, B, C, D, E, X(1), X(3), X(9), X(14)); |
| 298 | BODY_40_59(50, E, T, A, B, C, D, X(2), X(4), X(10), X(15)); |
| 299 | BODY_40_59(51, D, E, T, A, B, C, X(3), X(5), X(11), X(0)); |
| 300 | BODY_40_59(52, C, D, E, T, A, B, X(4), X(6), X(12), X(1)); |
| 301 | BODY_40_59(53, B, C, D, E, T, A, X(5), X(7), X(13), X(2)); |
| 302 | BODY_40_59(54, A, B, C, D, E, T, X(6), X(8), X(14), X(3)); |
| 303 | BODY_40_59(55, T, A, B, C, D, E, X(7), X(9), X(15), X(4)); |
| 304 | BODY_40_59(56, E, T, A, B, C, D, X(8), X(10), X(0), X(5)); |
| 305 | BODY_40_59(57, D, E, T, A, B, C, X(9), X(11), X(1), X(6)); |
| 306 | BODY_40_59(58, C, D, E, T, A, B, X(10), X(12), X(2), X(7)); |
| 307 | BODY_40_59(59, B, C, D, E, T, A, X(11), X(13), X(3), X(8)); |
| 308 | |
| 309 | BODY_60_79(60, A, B, C, D, E, T, X(12), X(14), X(4), X(9)); |
| 310 | BODY_60_79(61, T, A, B, C, D, E, X(13), X(15), X(5), X(10)); |
| 311 | BODY_60_79(62, E, T, A, B, C, D, X(14), X(0), X(6), X(11)); |
| 312 | BODY_60_79(63, D, E, T, A, B, C, X(15), X(1), X(7), X(12)); |
| 313 | BODY_60_79(64, C, D, E, T, A, B, X(0), X(2), X(8), X(13)); |
| 314 | BODY_60_79(65, B, C, D, E, T, A, X(1), X(3), X(9), X(14)); |
| 315 | BODY_60_79(66, A, B, C, D, E, T, X(2), X(4), X(10), X(15)); |
| 316 | BODY_60_79(67, T, A, B, C, D, E, X(3), X(5), X(11), X(0)); |
| 317 | BODY_60_79(68, E, T, A, B, C, D, X(4), X(6), X(12), X(1)); |
| 318 | BODY_60_79(69, D, E, T, A, B, C, X(5), X(7), X(13), X(2)); |
| 319 | BODY_60_79(70, C, D, E, T, A, B, X(6), X(8), X(14), X(3)); |
| 320 | BODY_60_79(71, B, C, D, E, T, A, X(7), X(9), X(15), X(4)); |
| 321 | BODY_60_79(72, A, B, C, D, E, T, X(8), X(10), X(0), X(5)); |
| 322 | BODY_60_79(73, T, A, B, C, D, E, X(9), X(11), X(1), X(6)); |
| 323 | BODY_60_79(74, E, T, A, B, C, D, X(10), X(12), X(2), X(7)); |
| 324 | BODY_60_79(75, D, E, T, A, B, C, X(11), X(13), X(3), X(8)); |
| 325 | BODY_60_79(76, C, D, E, T, A, B, X(12), X(14), X(4), X(9)); |
| 326 | BODY_60_79(77, B, C, D, E, T, A, X(13), X(15), X(5), X(10)); |
| 327 | BODY_60_79(78, A, B, C, D, E, T, X(14), X(0), X(6), X(11)); |
| 328 | BODY_60_79(79, T, A, B, C, D, E, X(15), X(1), X(7), X(12)); |
| 329 | |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 330 | state[0] = (state[0] + E) & 0xffffffffL; |
| 331 | state[1] = (state[1] + T) & 0xffffffffL; |
| 332 | state[2] = (state[2] + A) & 0xffffffffL; |
| 333 | state[3] = (state[3] + B) & 0xffffffffL; |
| 334 | state[4] = (state[4] + C) & 0xffffffffL; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 335 | |
Adam Langley | e9ada86 | 2015-05-11 17:20:37 -0700 | [diff] [blame] | 336 | if (--num == 0) { |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 337 | break; |
Adam Langley | e9ada86 | 2015-05-11 17:20:37 -0700 | [diff] [blame] | 338 | } |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 339 | |
Adam Langley | fad6327 | 2015-11-12 12:15:39 -0800 | [diff] [blame] | 340 | A = state[0]; |
| 341 | B = state[1]; |
| 342 | C = state[2]; |
| 343 | D = state[3]; |
| 344 | E = state[4]; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 345 | } |
| 346 | } |
| 347 | #endif |
Robert Sloan | 572a4e2 | 2017-04-17 10:52:19 -0700 | [diff] [blame] | 348 | |
| 349 | #undef DATA_ORDER_IS_BIG_ENDIAN |
| 350 | #undef HASH_CTX |
| 351 | #undef HASH_CBLOCK |
| 352 | #undef HASH_MAKE_STRING |
| 353 | #undef HASH_UPDATE |
| 354 | #undef HASH_TRANSFORM |
| 355 | #undef HASH_FINAL |
| 356 | #undef HASH_BLOCK_DATA_ORDER |
| 357 | #undef ROTATE |
| 358 | #undef Xupdate |
| 359 | #undef K_00_19 |
| 360 | #undef K_20_39 |
| 361 | #undef K_40_59 |
| 362 | #undef K_60_79 |
| 363 | #undef F_00_19 |
| 364 | #undef F_20_39 |
| 365 | #undef F_40_59 |
| 366 | #undef F_60_79 |
| 367 | #undef BODY_00_15 |
| 368 | #undef BODY_16_19 |
| 369 | #undef BODY_20_31 |
| 370 | #undef BODY_32_39 |
| 371 | #undef BODY_40_59 |
| 372 | #undef BODY_60_79 |
| 373 | #undef X |
| 374 | #undef HOST_c2l |
| 375 | #undef HOST_l2c |