Index: openssl/crypto/whrlpool/wp_dgst.c |
=================================================================== |
--- openssl/crypto/whrlpool/wp_dgst.c (revision 0) |
+++ openssl/crypto/whrlpool/wp_dgst.c (revision 0) |
@@ -0,0 +1,264 @@ |
+/** |
+ * The Whirlpool hashing function. |
+ * |
+ * <P> |
+ * <b>References</b> |
+ * |
+ * <P> |
+ * The Whirlpool algorithm was developed by |
+ * <a href="mailto:pbarreto@scopus.com.br">Paulo S. L. M. Barreto</a> and |
+ * <a href="mailto:vincent.rijmen@cryptomathic.com">Vincent Rijmen</a>. |
+ * |
+ * See |
+ * P.S.L.M. Barreto, V. Rijmen, |
+ * ``The Whirlpool hashing function,'' |
+ * NESSIE submission, 2000 (tweaked version, 2001), |
+ * <https://www.cosic.esat.kuleuven.ac.be/nessie/workshop/submissions/whirlpool.zip> |
+ * |
+ * Based on "@version 3.0 (2003.03.12)" by Paulo S.L.M. Barreto and |
+ * Vincent Rijmen. Lookup "reference implementations" on |
+ * <http://planeta.terra.com.br/informatica/paulobarreto/> |
+ * |
+ * ============================================================================= |
+ * |
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS |
+ * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED |
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE |
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR |
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF |
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR |
+ * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, |
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE |
+ * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, |
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
+ * |
+ */ |
+ |
+/* |
+ * OpenSSL-specific implementation notes. |
+ * |
+ * WHIRLPOOL_Update as well as one-stroke WHIRLPOOL both expect |
+ * number of *bytes* as input length argument. Bit-oriented routine |
+ * as specified by authors is called WHIRLPOOL_BitUpdate[!] and |
+ * does not have one-stroke counterpart. |
+ * |
+ * WHIRLPOOL_BitUpdate implements byte-oriented loop, essentially |
+ * to serve WHIRLPOOL_Update. This is done for performance. |
+ * |
+ * Unlike authors' reference implementation, block processing |
+ * routine whirlpool_block is designed to operate on multi-block |
+ * input. This is done for perfomance. |
+ */ |
+ |
+#include "wp_locl.h" |
+#include <string.h> |
+ |
+int WHIRLPOOL_Init (WHIRLPOOL_CTX *c) |
+ { |
+ memset (c,0,sizeof(*c)); |
+ return(1); |
+ } |
+ |
+int WHIRLPOOL_Update (WHIRLPOOL_CTX *c,const void *_inp,size_t bytes) |
+ { |
+ /* Well, largest suitable chunk size actually is |
+ * (1<<(sizeof(size_t)*8-3))-64, but below number |
+ * is large enough for not to care about excessive |
+ * calls to WHIRLPOOL_BitUpdate... */ |
+ size_t chunk = ((size_t)1)<<(sizeof(size_t)*8-4); |
+ const unsigned char *inp = _inp; |
+ |
+ while (bytes>=chunk) |
+ { |
+ WHIRLPOOL_BitUpdate(c,inp,chunk*8); |
+ bytes -= chunk; |
+ inp += chunk; |
+ } |
+ if (bytes) |
+ WHIRLPOOL_BitUpdate(c,inp,bytes*8); |
+ |
+ return(1); |
+ } |
+ |
+void WHIRLPOOL_BitUpdate(WHIRLPOOL_CTX *c,const void *_inp,size_t bits) |
+ { |
+ size_t n; |
+ unsigned int bitoff = c->bitoff, |
+ bitrem = bitoff%8, |
+ inpgap = (8-(unsigned int)bits%8)&7; |
+ const unsigned char *inp=_inp; |
+ |
+ /* This 256-bit increment procedure relies on the size_t |
+ * being natural size of CPU register, so that we don't |
+ * have to mask the value in order to detect overflows. */ |
+ c->bitlen[0] += bits; |
+ if (c->bitlen[0] < bits) /* overflow */ |
+ { |
+ n = 1; |
+ do { c->bitlen[n]++; |
+ } while(c->bitlen[n]==0 |
+ && ++n<(WHIRLPOOL_COUNTER/sizeof(size_t))); |
+ } |
+ |
+#ifndef OPENSSL_SMALL_FOOTPRINT |
+ reconsider: |
+ if (inpgap==0 && bitrem==0) /* byte-oriented loop */ |
+ { |
+ while (bits) |
+ { |
+ if (bitoff==0 && (n=bits/WHIRLPOOL_BBLOCK)) |
+ { |
+ whirlpool_block(c,inp,n); |
+ inp += n*WHIRLPOOL_BBLOCK/8; |
+ bits %= WHIRLPOOL_BBLOCK; |
+ } |
+ else |
+ { |
+ unsigned int byteoff = bitoff/8; |
+ |
+ bitrem = WHIRLPOOL_BBLOCK - bitoff;/* re-use bitrem */ |
+ if (bits >= bitrem) |
+ { |
+ bits -= bitrem; |
+ bitrem /= 8; |
+ memcpy(c->data+byteoff,inp,bitrem); |
+ inp += bitrem; |
+ whirlpool_block(c,c->data,1); |
+ bitoff = 0; |
+ } |
+ else |
+ { |
+ memcpy(c->data+byteoff,inp,bits/8); |
+ bitoff += (unsigned int)bits; |
+ bits = 0; |
+ } |
+ c->bitoff = bitoff; |
+ } |
+ } |
+ } |
+ else /* bit-oriented loop */ |
+#endif |
+ { |
+ /* |
+ inp |
+ | |
+ +-------+-------+------- |
+ ||||||||||||||||||||| |
+ +-------+-------+------- |
+ +-------+-------+-------+-------+------- |
+ |||||||||||||| c->data |
+ +-------+-------+-------+-------+------- |
+ | |
+ c->bitoff/8 |
+ */ |
+ while (bits) |
+ { |
+ unsigned int byteoff = bitoff/8; |
+ unsigned char b; |
+ |
+#ifndef OPENSSL_SMALL_FOOTPRINT |
+ if (bitrem==inpgap) |
+ { |
+ c->data[byteoff++] |= inp[0] & (0xff>>inpgap); |
+ inpgap = 8-inpgap; |
+ bitoff += inpgap; bitrem = 0; /* bitoff%8 */ |
+ bits -= inpgap; inpgap = 0; /* bits%8 */ |
+ inp++; |
+ if (bitoff==WHIRLPOOL_BBLOCK) |
+ { |
+ whirlpool_block(c,c->data,1); |
+ bitoff = 0; |
+ } |
+ c->bitoff = bitoff; |
+ goto reconsider; |
+ } |
+ else |
+#endif |
+ if (bits>=8) |
+ { |
+ b = ((inp[0]<<inpgap) | (inp[1]>>(8-inpgap))); |
+ b &= 0xff; |
+ if (bitrem) c->data[byteoff++] |= b>>bitrem; |
+ else c->data[byteoff++] = b; |
+ bitoff += 8; |
+ bits -= 8; |
+ inp++; |
+ if (bitoff>=WHIRLPOOL_BBLOCK) |
+ { |
+ whirlpool_block(c,c->data,1); |
+ byteoff = 0; |
+ bitoff %= WHIRLPOOL_BBLOCK; |
+ } |
+ if (bitrem) c->data[byteoff] = b<<(8-bitrem); |
+ } |
+ else /* remaining less than 8 bits */ |
+ { |
+ b = (inp[0]<<inpgap)&0xff; |
+ if (bitrem) c->data[byteoff++] |= b>>bitrem; |
+ else c->data[byteoff++] = b; |
+ bitoff += (unsigned int)bits; |
+ if (bitoff==WHIRLPOOL_BBLOCK) |
+ { |
+ whirlpool_block(c,c->data,1); |
+ byteoff = 0; |
+ bitoff %= WHIRLPOOL_BBLOCK; |
+ } |
+ if (bitrem) c->data[byteoff] = b<<(8-bitrem); |
+ bits = 0; |
+ } |
+ c->bitoff = bitoff; |
+ } |
+ } |
+ } |
+ |
+int WHIRLPOOL_Final (unsigned char *md,WHIRLPOOL_CTX *c) |
+ { |
+ unsigned int bitoff = c->bitoff, |
+ byteoff = bitoff/8; |
+ size_t i,j,v; |
+ unsigned char *p; |
+ |
+ bitoff %= 8; |
+ if (bitoff) c->data[byteoff] |= 0x80>>bitoff; |
+ else c->data[byteoff] = 0x80; |
+ byteoff++; |
+ |
+ /* pad with zeros */ |
+ if (byteoff > (WHIRLPOOL_BBLOCK/8-WHIRLPOOL_COUNTER)) |
+ { |
+ if (byteoff<WHIRLPOOL_BBLOCK/8) |
+ memset(&c->data[byteoff],0,WHIRLPOOL_BBLOCK/8-byteoff); |
+ whirlpool_block(c,c->data,1); |
+ byteoff = 0; |
+ } |
+ if (byteoff < (WHIRLPOOL_BBLOCK/8-WHIRLPOOL_COUNTER)) |
+ memset(&c->data[byteoff],0, |
+ (WHIRLPOOL_BBLOCK/8-WHIRLPOOL_COUNTER)-byteoff); |
+ /* smash 256-bit c->bitlen in big-endian order */ |
+ p = &c->data[WHIRLPOOL_BBLOCK/8-1]; /* last byte in c->data */ |
+ for(i=0;i<WHIRLPOOL_COUNTER/sizeof(size_t);i++) |
+ for(v=c->bitlen[i],j=0;j<sizeof(size_t);j++,v>>=8) |
+ *p-- = (unsigned char)(v&0xff); |
+ |
+ whirlpool_block(c,c->data,1); |
+ |
+ if (md) { |
+ memcpy(md,c->H.c,WHIRLPOOL_DIGEST_LENGTH); |
+ memset(c,0,sizeof(*c)); |
+ return(1); |
+ } |
+ return(0); |
+ } |
+ |
+unsigned char *WHIRLPOOL(const void *inp, size_t bytes,unsigned char *md) |
+ { |
+ WHIRLPOOL_CTX ctx; |
+ static unsigned char m[WHIRLPOOL_DIGEST_LENGTH]; |
+ |
+ if (md == NULL) md=m; |
+ WHIRLPOOL_Init(&ctx); |
+ WHIRLPOOL_Update(&ctx,inp,bytes); |
+ WHIRLPOOL_Final(md,&ctx); |
+ return(md); |
+ } |