1817466cbSJens Wiklander /* 2817466cbSJens Wiklander * RIPE MD-160 implementation 3817466cbSJens Wiklander * 4*7901324dSJerome Forissier * Copyright The Mbed TLS Contributors 5*7901324dSJerome Forissier * SPDX-License-Identifier: Apache-2.0 6817466cbSJens Wiklander * 7817466cbSJens Wiklander * Licensed under the Apache License, Version 2.0 (the "License"); you may 8817466cbSJens Wiklander * not use this file except in compliance with the License. 9817466cbSJens Wiklander * You may obtain a copy of the License at 10817466cbSJens Wiklander * 11817466cbSJens Wiklander * http://www.apache.org/licenses/LICENSE-2.0 12817466cbSJens Wiklander * 13817466cbSJens Wiklander * Unless required by applicable law or agreed to in writing, software 14817466cbSJens Wiklander * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT 15817466cbSJens Wiklander * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 16817466cbSJens Wiklander * See the License for the specific language governing permissions and 17817466cbSJens Wiklander * limitations under the License. 18817466cbSJens Wiklander */ 19817466cbSJens Wiklander 20817466cbSJens Wiklander /* 21817466cbSJens Wiklander * The RIPEMD-160 algorithm was designed by RIPE in 1996 22817466cbSJens Wiklander * http://homes.esat.kuleuven.be/~bosselae/mbedtls_ripemd160.html 23817466cbSJens Wiklander * http://ehash.iaik.tugraz.at/wiki/RIPEMD-160 24817466cbSJens Wiklander */ 25817466cbSJens Wiklander 26*7901324dSJerome Forissier #include "common.h" 27817466cbSJens Wiklander 28817466cbSJens Wiklander #if defined(MBEDTLS_RIPEMD160_C) 29817466cbSJens Wiklander 30817466cbSJens Wiklander #include "mbedtls/ripemd160.h" 313d3b0591SJens Wiklander #include "mbedtls/platform_util.h" 3211fa71b9SJerome Forissier #include "mbedtls/error.h" 33817466cbSJens Wiklander 34817466cbSJens Wiklander #include <string.h> 35817466cbSJens Wiklander 36817466cbSJens Wiklander #if defined(MBEDTLS_SELF_TEST) 37817466cbSJens Wiklander #if defined(MBEDTLS_PLATFORM_C) 38817466cbSJens Wiklander #include "mbedtls/platform.h" 39817466cbSJens Wiklander #else 40817466cbSJens Wiklander #include <stdio.h> 41817466cbSJens Wiklander #define mbedtls_printf printf 42817466cbSJens Wiklander #endif /* MBEDTLS_PLATFORM_C */ 43817466cbSJens Wiklander #endif /* MBEDTLS_SELF_TEST */ 44817466cbSJens Wiklander 453d3b0591SJens Wiklander #if !defined(MBEDTLS_RIPEMD160_ALT) 463d3b0591SJens Wiklander 47817466cbSJens Wiklander /* 48817466cbSJens Wiklander * 32-bit integer manipulation macros (little endian) 49817466cbSJens Wiklander */ 50817466cbSJens Wiklander #ifndef GET_UINT32_LE 51817466cbSJens Wiklander #define GET_UINT32_LE(n,b,i) \ 52817466cbSJens Wiklander { \ 53817466cbSJens Wiklander (n) = ( (uint32_t) (b)[(i) ] ) \ 54817466cbSJens Wiklander | ( (uint32_t) (b)[(i) + 1] << 8 ) \ 55817466cbSJens Wiklander | ( (uint32_t) (b)[(i) + 2] << 16 ) \ 56817466cbSJens Wiklander | ( (uint32_t) (b)[(i) + 3] << 24 ); \ 57817466cbSJens Wiklander } 58817466cbSJens Wiklander #endif 59817466cbSJens Wiklander 60817466cbSJens Wiklander #ifndef PUT_UINT32_LE 61817466cbSJens Wiklander #define PUT_UINT32_LE(n,b,i) \ 62817466cbSJens Wiklander { \ 63817466cbSJens Wiklander (b)[(i) ] = (unsigned char) ( ( (n) ) & 0xFF ); \ 64817466cbSJens Wiklander (b)[(i) + 1] = (unsigned char) ( ( (n) >> 8 ) & 0xFF ); \ 65817466cbSJens Wiklander (b)[(i) + 2] = (unsigned char) ( ( (n) >> 16 ) & 0xFF ); \ 66817466cbSJens Wiklander (b)[(i) + 3] = (unsigned char) ( ( (n) >> 24 ) & 0xFF ); \ 67817466cbSJens Wiklander } 68817466cbSJens Wiklander #endif 69817466cbSJens Wiklander 70817466cbSJens Wiklander void mbedtls_ripemd160_init( mbedtls_ripemd160_context *ctx ) 71817466cbSJens Wiklander { 72817466cbSJens Wiklander memset( ctx, 0, sizeof( mbedtls_ripemd160_context ) ); 73817466cbSJens Wiklander } 74817466cbSJens Wiklander 75817466cbSJens Wiklander void mbedtls_ripemd160_free( mbedtls_ripemd160_context *ctx ) 76817466cbSJens Wiklander { 77817466cbSJens Wiklander if( ctx == NULL ) 78817466cbSJens Wiklander return; 79817466cbSJens Wiklander 803d3b0591SJens Wiklander mbedtls_platform_zeroize( ctx, sizeof( mbedtls_ripemd160_context ) ); 81817466cbSJens Wiklander } 82817466cbSJens Wiklander 83817466cbSJens Wiklander void mbedtls_ripemd160_clone( mbedtls_ripemd160_context *dst, 84817466cbSJens Wiklander const mbedtls_ripemd160_context *src ) 85817466cbSJens Wiklander { 86817466cbSJens Wiklander *dst = *src; 87817466cbSJens Wiklander } 88817466cbSJens Wiklander 89817466cbSJens Wiklander /* 90817466cbSJens Wiklander * RIPEMD-160 context setup 91817466cbSJens Wiklander */ 923d3b0591SJens Wiklander int mbedtls_ripemd160_starts_ret( mbedtls_ripemd160_context *ctx ) 93817466cbSJens Wiklander { 94817466cbSJens Wiklander ctx->total[0] = 0; 95817466cbSJens Wiklander ctx->total[1] = 0; 96817466cbSJens Wiklander 97817466cbSJens Wiklander ctx->state[0] = 0x67452301; 98817466cbSJens Wiklander ctx->state[1] = 0xEFCDAB89; 99817466cbSJens Wiklander ctx->state[2] = 0x98BADCFE; 100817466cbSJens Wiklander ctx->state[3] = 0x10325476; 101817466cbSJens Wiklander ctx->state[4] = 0xC3D2E1F0; 1023d3b0591SJens Wiklander 1033d3b0591SJens Wiklander return( 0 ); 104817466cbSJens Wiklander } 105817466cbSJens Wiklander 1063d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED) 1073d3b0591SJens Wiklander void mbedtls_ripemd160_starts( mbedtls_ripemd160_context *ctx ) 1083d3b0591SJens Wiklander { 1093d3b0591SJens Wiklander mbedtls_ripemd160_starts_ret( ctx ); 1103d3b0591SJens Wiklander } 1113d3b0591SJens Wiklander #endif 1123d3b0591SJens Wiklander 113817466cbSJens Wiklander #if !defined(MBEDTLS_RIPEMD160_PROCESS_ALT) 114817466cbSJens Wiklander /* 115817466cbSJens Wiklander * Process one block 116817466cbSJens Wiklander */ 1173d3b0591SJens Wiklander int mbedtls_internal_ripemd160_process( mbedtls_ripemd160_context *ctx, 1183d3b0591SJens Wiklander const unsigned char data[64] ) 119817466cbSJens Wiklander { 120*7901324dSJerome Forissier struct 121*7901324dSJerome Forissier { 122817466cbSJens Wiklander uint32_t A, B, C, D, E, Ap, Bp, Cp, Dp, Ep, X[16]; 123*7901324dSJerome Forissier } local; 124817466cbSJens Wiklander 125*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 0], data, 0 ); 126*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 1], data, 4 ); 127*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 2], data, 8 ); 128*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 3], data, 12 ); 129*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 4], data, 16 ); 130*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 5], data, 20 ); 131*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 6], data, 24 ); 132*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 7], data, 28 ); 133*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 8], data, 32 ); 134*7901324dSJerome Forissier GET_UINT32_LE( local.X[ 9], data, 36 ); 135*7901324dSJerome Forissier GET_UINT32_LE( local.X[10], data, 40 ); 136*7901324dSJerome Forissier GET_UINT32_LE( local.X[11], data, 44 ); 137*7901324dSJerome Forissier GET_UINT32_LE( local.X[12], data, 48 ); 138*7901324dSJerome Forissier GET_UINT32_LE( local.X[13], data, 52 ); 139*7901324dSJerome Forissier GET_UINT32_LE( local.X[14], data, 56 ); 140*7901324dSJerome Forissier GET_UINT32_LE( local.X[15], data, 60 ); 141817466cbSJens Wiklander 142*7901324dSJerome Forissier local.A = local.Ap = ctx->state[0]; 143*7901324dSJerome Forissier local.B = local.Bp = ctx->state[1]; 144*7901324dSJerome Forissier local.C = local.Cp = ctx->state[2]; 145*7901324dSJerome Forissier local.D = local.Dp = ctx->state[3]; 146*7901324dSJerome Forissier local.E = local.Ep = ctx->state[4]; 147817466cbSJens Wiklander 1485b25c76aSJerome Forissier #define F1( x, y, z ) ( (x) ^ (y) ^ (z) ) 1495b25c76aSJerome Forissier #define F2( x, y, z ) ( ( (x) & (y) ) | ( ~(x) & (z) ) ) 1505b25c76aSJerome Forissier #define F3( x, y, z ) ( ( (x) | ~(y) ) ^ (z) ) 1515b25c76aSJerome Forissier #define F4( x, y, z ) ( ( (x) & (z) ) | ( (y) & ~(z) ) ) 1525b25c76aSJerome Forissier #define F5( x, y, z ) ( (x) ^ ( (y) | ~(z) ) ) 153817466cbSJens Wiklander 1545b25c76aSJerome Forissier #define S( x, n ) ( ( (x) << (n) ) | ( (x) >> (32 - (n)) ) ) 155817466cbSJens Wiklander 156817466cbSJens Wiklander #define P( a, b, c, d, e, r, s, f, k ) \ 1575b25c76aSJerome Forissier do \ 1585b25c76aSJerome Forissier { \ 159*7901324dSJerome Forissier (a) += f( (b), (c), (d) ) + local.X[r] + (k); \ 1605b25c76aSJerome Forissier (a) = S( (a), (s) ) + (e); \ 1615b25c76aSJerome Forissier (c) = S( (c), 10 ); \ 1625b25c76aSJerome Forissier } while( 0 ) 163817466cbSJens Wiklander 164817466cbSJens Wiklander #define P2( a, b, c, d, e, r, s, rp, sp ) \ 1655b25c76aSJerome Forissier do \ 1665b25c76aSJerome Forissier { \ 1675b25c76aSJerome Forissier P( (a), (b), (c), (d), (e), (r), (s), F, K ); \ 1685b25c76aSJerome Forissier P( a ## p, b ## p, c ## p, d ## p, e ## p, \ 1695b25c76aSJerome Forissier (rp), (sp), Fp, Kp ); \ 1705b25c76aSJerome Forissier } while( 0 ) 171817466cbSJens Wiklander 172817466cbSJens Wiklander #define F F1 173817466cbSJens Wiklander #define K 0x00000000 174817466cbSJens Wiklander #define Fp F5 175817466cbSJens Wiklander #define Kp 0x50A28BE6 176*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 0, 11, 5, 8 ); 177*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 1, 14, 14, 9 ); 178*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 2, 15, 7, 9 ); 179*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 3, 12, 0, 11 ); 180*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 4, 5, 9, 13 ); 181*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 5, 8, 2, 15 ); 182*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 6, 7, 11, 15 ); 183*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 7, 9, 4, 5 ); 184*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 8, 11, 13, 7 ); 185*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 9, 13, 6, 7 ); 186*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 10, 14, 15, 8 ); 187*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 11, 15, 8, 11 ); 188*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 12, 6, 1, 14 ); 189*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 13, 7, 10, 14 ); 190*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 14, 9, 3, 12 ); 191*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 15, 8, 12, 6 ); 192817466cbSJens Wiklander #undef F 193817466cbSJens Wiklander #undef K 194817466cbSJens Wiklander #undef Fp 195817466cbSJens Wiklander #undef Kp 196817466cbSJens Wiklander 197817466cbSJens Wiklander #define F F2 198817466cbSJens Wiklander #define K 0x5A827999 199817466cbSJens Wiklander #define Fp F4 200817466cbSJens Wiklander #define Kp 0x5C4DD124 201*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 7, 7, 6, 9 ); 202*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 4, 6, 11, 13 ); 203*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 13, 8, 3, 15 ); 204*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 1, 13, 7, 7 ); 205*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 10, 11, 0, 12 ); 206*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 6, 9, 13, 8 ); 207*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 15, 7, 5, 9 ); 208*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 3, 15, 10, 11 ); 209*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 12, 7, 14, 7 ); 210*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 0, 12, 15, 7 ); 211*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 9, 15, 8, 12 ); 212*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 5, 9, 12, 7 ); 213*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 2, 11, 4, 6 ); 214*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 14, 7, 9, 15 ); 215*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 11, 13, 1, 13 ); 216*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 8, 12, 2, 11 ); 217817466cbSJens Wiklander #undef F 218817466cbSJens Wiklander #undef K 219817466cbSJens Wiklander #undef Fp 220817466cbSJens Wiklander #undef Kp 221817466cbSJens Wiklander 222817466cbSJens Wiklander #define F F3 223817466cbSJens Wiklander #define K 0x6ED9EBA1 224817466cbSJens Wiklander #define Fp F3 225817466cbSJens Wiklander #define Kp 0x6D703EF3 226*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 3, 11, 15, 9 ); 227*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 10, 13, 5, 7 ); 228*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 14, 6, 1, 15 ); 229*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 4, 7, 3, 11 ); 230*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 9, 14, 7, 8 ); 231*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 15, 9, 14, 6 ); 232*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 8, 13, 6, 6 ); 233*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 1, 15, 9, 14 ); 234*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 2, 14, 11, 12 ); 235*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 7, 8, 8, 13 ); 236*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 0, 13, 12, 5 ); 237*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 6, 6, 2, 14 ); 238*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 13, 5, 10, 13 ); 239*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 11, 12, 0, 13 ); 240*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 5, 7, 4, 7 ); 241*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 12, 5, 13, 5 ); 242817466cbSJens Wiklander #undef F 243817466cbSJens Wiklander #undef K 244817466cbSJens Wiklander #undef Fp 245817466cbSJens Wiklander #undef Kp 246817466cbSJens Wiklander 247817466cbSJens Wiklander #define F F4 248817466cbSJens Wiklander #define K 0x8F1BBCDC 249817466cbSJens Wiklander #define Fp F2 250817466cbSJens Wiklander #define Kp 0x7A6D76E9 251*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 1, 11, 8, 15 ); 252*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 9, 12, 6, 5 ); 253*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 11, 14, 4, 8 ); 254*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 10, 15, 1, 11 ); 255*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 0, 14, 3, 14 ); 256*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 8, 15, 11, 14 ); 257*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 12, 9, 15, 6 ); 258*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 4, 8, 0, 14 ); 259*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 13, 9, 5, 6 ); 260*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 3, 14, 12, 9 ); 261*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 7, 5, 2, 12 ); 262*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 15, 6, 13, 9 ); 263*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 14, 8, 9, 12 ); 264*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 5, 6, 7, 5 ); 265*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 6, 5, 10, 15 ); 266*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 2, 12, 14, 8 ); 267817466cbSJens Wiklander #undef F 268817466cbSJens Wiklander #undef K 269817466cbSJens Wiklander #undef Fp 270817466cbSJens Wiklander #undef Kp 271817466cbSJens Wiklander 272817466cbSJens Wiklander #define F F5 273817466cbSJens Wiklander #define K 0xA953FD4E 274817466cbSJens Wiklander #define Fp F1 275817466cbSJens Wiklander #define Kp 0x00000000 276*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 4, 9, 12, 8 ); 277*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 0, 15, 15, 5 ); 278*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 5, 5, 10, 12 ); 279*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 9, 11, 4, 9 ); 280*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 7, 6, 1, 12 ); 281*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 12, 8, 5, 5 ); 282*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 2, 13, 8, 14 ); 283*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 10, 12, 7, 6 ); 284*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 14, 5, 6, 8 ); 285*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 1, 12, 2, 13 ); 286*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 3, 13, 13, 6 ); 287*7901324dSJerome Forissier P2( local.A, local.B, local.C, local.D, local.E, 8, 14, 14, 5 ); 288*7901324dSJerome Forissier P2( local.E, local.A, local.B, local.C, local.D, 11, 11, 0, 15 ); 289*7901324dSJerome Forissier P2( local.D, local.E, local.A, local.B, local.C, 6, 8, 3, 13 ); 290*7901324dSJerome Forissier P2( local.C, local.D, local.E, local.A, local.B, 15, 5, 9, 11 ); 291*7901324dSJerome Forissier P2( local.B, local.C, local.D, local.E, local.A, 13, 6, 11, 11 ); 292817466cbSJens Wiklander #undef F 293817466cbSJens Wiklander #undef K 294817466cbSJens Wiklander #undef Fp 295817466cbSJens Wiklander #undef Kp 296817466cbSJens Wiklander 297*7901324dSJerome Forissier local.C = ctx->state[1] + local.C + local.Dp; 298*7901324dSJerome Forissier ctx->state[1] = ctx->state[2] + local.D + local.Ep; 299*7901324dSJerome Forissier ctx->state[2] = ctx->state[3] + local.E + local.Ap; 300*7901324dSJerome Forissier ctx->state[3] = ctx->state[4] + local.A + local.Bp; 301*7901324dSJerome Forissier ctx->state[4] = ctx->state[0] + local.B + local.Cp; 302*7901324dSJerome Forissier ctx->state[0] = local.C; 303*7901324dSJerome Forissier 304*7901324dSJerome Forissier /* Zeroise variables to clear sensitive data from memory. */ 305*7901324dSJerome Forissier mbedtls_platform_zeroize( &local, sizeof( local ) ); 3063d3b0591SJens Wiklander 3073d3b0591SJens Wiklander return( 0 ); 308817466cbSJens Wiklander } 3093d3b0591SJens Wiklander 3103d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED) 3113d3b0591SJens Wiklander void mbedtls_ripemd160_process( mbedtls_ripemd160_context *ctx, 3123d3b0591SJens Wiklander const unsigned char data[64] ) 3133d3b0591SJens Wiklander { 3143d3b0591SJens Wiklander mbedtls_internal_ripemd160_process( ctx, data ); 3153d3b0591SJens Wiklander } 3163d3b0591SJens Wiklander #endif 317817466cbSJens Wiklander #endif /* !MBEDTLS_RIPEMD160_PROCESS_ALT */ 318817466cbSJens Wiklander 319817466cbSJens Wiklander /* 320817466cbSJens Wiklander * RIPEMD-160 process buffer 321817466cbSJens Wiklander */ 3223d3b0591SJens Wiklander int mbedtls_ripemd160_update_ret( mbedtls_ripemd160_context *ctx, 3233d3b0591SJens Wiklander const unsigned char *input, 3243d3b0591SJens Wiklander size_t ilen ) 325817466cbSJens Wiklander { 32611fa71b9SJerome Forissier int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED; 327817466cbSJens Wiklander size_t fill; 328817466cbSJens Wiklander uint32_t left; 329817466cbSJens Wiklander 330817466cbSJens Wiklander if( ilen == 0 ) 3313d3b0591SJens Wiklander return( 0 ); 332817466cbSJens Wiklander 333817466cbSJens Wiklander left = ctx->total[0] & 0x3F; 334817466cbSJens Wiklander fill = 64 - left; 335817466cbSJens Wiklander 336817466cbSJens Wiklander ctx->total[0] += (uint32_t) ilen; 337817466cbSJens Wiklander ctx->total[0] &= 0xFFFFFFFF; 338817466cbSJens Wiklander 339817466cbSJens Wiklander if( ctx->total[0] < (uint32_t) ilen ) 340817466cbSJens Wiklander ctx->total[1]++; 341817466cbSJens Wiklander 342817466cbSJens Wiklander if( left && ilen >= fill ) 343817466cbSJens Wiklander { 344817466cbSJens Wiklander memcpy( (void *) (ctx->buffer + left), input, fill ); 3453d3b0591SJens Wiklander 3463d3b0591SJens Wiklander if( ( ret = mbedtls_internal_ripemd160_process( ctx, ctx->buffer ) ) != 0 ) 3473d3b0591SJens Wiklander return( ret ); 3483d3b0591SJens Wiklander 349817466cbSJens Wiklander input += fill; 350817466cbSJens Wiklander ilen -= fill; 351817466cbSJens Wiklander left = 0; 352817466cbSJens Wiklander } 353817466cbSJens Wiklander 354817466cbSJens Wiklander while( ilen >= 64 ) 355817466cbSJens Wiklander { 3563d3b0591SJens Wiklander if( ( ret = mbedtls_internal_ripemd160_process( ctx, input ) ) != 0 ) 3573d3b0591SJens Wiklander return( ret ); 3583d3b0591SJens Wiklander 359817466cbSJens Wiklander input += 64; 360817466cbSJens Wiklander ilen -= 64; 361817466cbSJens Wiklander } 362817466cbSJens Wiklander 363817466cbSJens Wiklander if( ilen > 0 ) 364817466cbSJens Wiklander { 365817466cbSJens Wiklander memcpy( (void *) (ctx->buffer + left), input, ilen ); 366817466cbSJens Wiklander } 3673d3b0591SJens Wiklander 3683d3b0591SJens Wiklander return( 0 ); 369817466cbSJens Wiklander } 370817466cbSJens Wiklander 3713d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED) 3723d3b0591SJens Wiklander void mbedtls_ripemd160_update( mbedtls_ripemd160_context *ctx, 3733d3b0591SJens Wiklander const unsigned char *input, 3743d3b0591SJens Wiklander size_t ilen ) 3753d3b0591SJens Wiklander { 3763d3b0591SJens Wiklander mbedtls_ripemd160_update_ret( ctx, input, ilen ); 3773d3b0591SJens Wiklander } 3783d3b0591SJens Wiklander #endif 3793d3b0591SJens Wiklander 380817466cbSJens Wiklander static const unsigned char ripemd160_padding[64] = 381817466cbSJens Wiklander { 382817466cbSJens Wiklander 0x80, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 383817466cbSJens Wiklander 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 384817466cbSJens Wiklander 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 385817466cbSJens Wiklander 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 386817466cbSJens Wiklander }; 387817466cbSJens Wiklander 388817466cbSJens Wiklander /* 389817466cbSJens Wiklander * RIPEMD-160 final digest 390817466cbSJens Wiklander */ 3913d3b0591SJens Wiklander int mbedtls_ripemd160_finish_ret( mbedtls_ripemd160_context *ctx, 3923d3b0591SJens Wiklander unsigned char output[20] ) 393817466cbSJens Wiklander { 39411fa71b9SJerome Forissier int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED; 395817466cbSJens Wiklander uint32_t last, padn; 396817466cbSJens Wiklander uint32_t high, low; 397817466cbSJens Wiklander unsigned char msglen[8]; 398817466cbSJens Wiklander 399817466cbSJens Wiklander high = ( ctx->total[0] >> 29 ) 400817466cbSJens Wiklander | ( ctx->total[1] << 3 ); 401817466cbSJens Wiklander low = ( ctx->total[0] << 3 ); 402817466cbSJens Wiklander 403817466cbSJens Wiklander PUT_UINT32_LE( low, msglen, 0 ); 404817466cbSJens Wiklander PUT_UINT32_LE( high, msglen, 4 ); 405817466cbSJens Wiklander 406817466cbSJens Wiklander last = ctx->total[0] & 0x3F; 407817466cbSJens Wiklander padn = ( last < 56 ) ? ( 56 - last ) : ( 120 - last ); 408817466cbSJens Wiklander 4093d3b0591SJens Wiklander ret = mbedtls_ripemd160_update_ret( ctx, ripemd160_padding, padn ); 4103d3b0591SJens Wiklander if( ret != 0 ) 4113d3b0591SJens Wiklander return( ret ); 4123d3b0591SJens Wiklander 4133d3b0591SJens Wiklander ret = mbedtls_ripemd160_update_ret( ctx, msglen, 8 ); 4143d3b0591SJens Wiklander if( ret != 0 ) 4153d3b0591SJens Wiklander return( ret ); 416817466cbSJens Wiklander 417817466cbSJens Wiklander PUT_UINT32_LE( ctx->state[0], output, 0 ); 418817466cbSJens Wiklander PUT_UINT32_LE( ctx->state[1], output, 4 ); 419817466cbSJens Wiklander PUT_UINT32_LE( ctx->state[2], output, 8 ); 420817466cbSJens Wiklander PUT_UINT32_LE( ctx->state[3], output, 12 ); 421817466cbSJens Wiklander PUT_UINT32_LE( ctx->state[4], output, 16 ); 4223d3b0591SJens Wiklander 4233d3b0591SJens Wiklander return( 0 ); 424817466cbSJens Wiklander } 425817466cbSJens Wiklander 4263d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED) 4273d3b0591SJens Wiklander void mbedtls_ripemd160_finish( mbedtls_ripemd160_context *ctx, 4283d3b0591SJens Wiklander unsigned char output[20] ) 4293d3b0591SJens Wiklander { 4303d3b0591SJens Wiklander mbedtls_ripemd160_finish_ret( ctx, output ); 4313d3b0591SJens Wiklander } 4323d3b0591SJens Wiklander #endif 4333d3b0591SJens Wiklander 4343d3b0591SJens Wiklander #endif /* ! MBEDTLS_RIPEMD160_ALT */ 4353d3b0591SJens Wiklander 436817466cbSJens Wiklander /* 437817466cbSJens Wiklander * output = RIPEMD-160( input buffer ) 438817466cbSJens Wiklander */ 4393d3b0591SJens Wiklander int mbedtls_ripemd160_ret( const unsigned char *input, 4403d3b0591SJens Wiklander size_t ilen, 441817466cbSJens Wiklander unsigned char output[20] ) 442817466cbSJens Wiklander { 44311fa71b9SJerome Forissier int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED; 444817466cbSJens Wiklander mbedtls_ripemd160_context ctx; 445817466cbSJens Wiklander 446817466cbSJens Wiklander mbedtls_ripemd160_init( &ctx ); 4473d3b0591SJens Wiklander 4483d3b0591SJens Wiklander if( ( ret = mbedtls_ripemd160_starts_ret( &ctx ) ) != 0 ) 4493d3b0591SJens Wiklander goto exit; 4503d3b0591SJens Wiklander 4513d3b0591SJens Wiklander if( ( ret = mbedtls_ripemd160_update_ret( &ctx, input, ilen ) ) != 0 ) 4523d3b0591SJens Wiklander goto exit; 4533d3b0591SJens Wiklander 4543d3b0591SJens Wiklander if( ( ret = mbedtls_ripemd160_finish_ret( &ctx, output ) ) != 0 ) 4553d3b0591SJens Wiklander goto exit; 4563d3b0591SJens Wiklander 4573d3b0591SJens Wiklander exit: 458817466cbSJens Wiklander mbedtls_ripemd160_free( &ctx ); 4593d3b0591SJens Wiklander 4603d3b0591SJens Wiklander return( ret ); 461817466cbSJens Wiklander } 462817466cbSJens Wiklander 4633d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED) 4643d3b0591SJens Wiklander void mbedtls_ripemd160( const unsigned char *input, 4653d3b0591SJens Wiklander size_t ilen, 4663d3b0591SJens Wiklander unsigned char output[20] ) 4673d3b0591SJens Wiklander { 4683d3b0591SJens Wiklander mbedtls_ripemd160_ret( input, ilen, output ); 4693d3b0591SJens Wiklander } 4703d3b0591SJens Wiklander #endif 4713d3b0591SJens Wiklander 472817466cbSJens Wiklander #if defined(MBEDTLS_SELF_TEST) 473817466cbSJens Wiklander /* 474817466cbSJens Wiklander * Test vectors from the RIPEMD-160 paper and 475817466cbSJens Wiklander * http://homes.esat.kuleuven.be/~bosselae/mbedtls_ripemd160.html#HMAC 476817466cbSJens Wiklander */ 477817466cbSJens Wiklander #define TESTS 8 4783d3b0591SJens Wiklander static const unsigned char ripemd160_test_str[TESTS][81] = 479817466cbSJens Wiklander { 4803d3b0591SJens Wiklander { "" }, 4813d3b0591SJens Wiklander { "a" }, 4823d3b0591SJens Wiklander { "abc" }, 4833d3b0591SJens Wiklander { "message digest" }, 4843d3b0591SJens Wiklander { "abcdefghijklmnopqrstuvwxyz" }, 4853d3b0591SJens Wiklander { "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq" }, 4863d3b0591SJens Wiklander { "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789" }, 48736905f94SGuido Vranken { "12345678901234567890123456789012345678901234567890123456789012345678901234567890" }, 4883d3b0591SJens Wiklander }; 4893d3b0591SJens Wiklander 4903d3b0591SJens Wiklander static const size_t ripemd160_test_strlen[TESTS] = 4913d3b0591SJens Wiklander { 4923d3b0591SJens Wiklander 0, 1, 3, 14, 26, 56, 62, 80 493817466cbSJens Wiklander }; 494817466cbSJens Wiklander 495817466cbSJens Wiklander static const unsigned char ripemd160_test_md[TESTS][20] = 496817466cbSJens Wiklander { 497817466cbSJens Wiklander { 0x9c, 0x11, 0x85, 0xa5, 0xc5, 0xe9, 0xfc, 0x54, 0x61, 0x28, 498817466cbSJens Wiklander 0x08, 0x97, 0x7e, 0xe8, 0xf5, 0x48, 0xb2, 0x25, 0x8d, 0x31 }, 499817466cbSJens Wiklander { 0x0b, 0xdc, 0x9d, 0x2d, 0x25, 0x6b, 0x3e, 0xe9, 0xda, 0xae, 500817466cbSJens Wiklander 0x34, 0x7b, 0xe6, 0xf4, 0xdc, 0x83, 0x5a, 0x46, 0x7f, 0xfe }, 501817466cbSJens Wiklander { 0x8e, 0xb2, 0x08, 0xf7, 0xe0, 0x5d, 0x98, 0x7a, 0x9b, 0x04, 502817466cbSJens Wiklander 0x4a, 0x8e, 0x98, 0xc6, 0xb0, 0x87, 0xf1, 0x5a, 0x0b, 0xfc }, 503817466cbSJens Wiklander { 0x5d, 0x06, 0x89, 0xef, 0x49, 0xd2, 0xfa, 0xe5, 0x72, 0xb8, 504817466cbSJens Wiklander 0x81, 0xb1, 0x23, 0xa8, 0x5f, 0xfa, 0x21, 0x59, 0x5f, 0x36 }, 505817466cbSJens Wiklander { 0xf7, 0x1c, 0x27, 0x10, 0x9c, 0x69, 0x2c, 0x1b, 0x56, 0xbb, 506817466cbSJens Wiklander 0xdc, 0xeb, 0x5b, 0x9d, 0x28, 0x65, 0xb3, 0x70, 0x8d, 0xbc }, 507817466cbSJens Wiklander { 0x12, 0xa0, 0x53, 0x38, 0x4a, 0x9c, 0x0c, 0x88, 0xe4, 0x05, 508817466cbSJens Wiklander 0xa0, 0x6c, 0x27, 0xdc, 0xf4, 0x9a, 0xda, 0x62, 0xeb, 0x2b }, 509817466cbSJens Wiklander { 0xb0, 0xe2, 0x0b, 0x6e, 0x31, 0x16, 0x64, 0x02, 0x86, 0xed, 510817466cbSJens Wiklander 0x3a, 0x87, 0xa5, 0x71, 0x30, 0x79, 0xb2, 0x1f, 0x51, 0x89 }, 511817466cbSJens Wiklander { 0x9b, 0x75, 0x2e, 0x45, 0x57, 0x3d, 0x4b, 0x39, 0xf4, 0xdb, 512817466cbSJens Wiklander 0xd3, 0x32, 0x3c, 0xab, 0x82, 0xbf, 0x63, 0x32, 0x6b, 0xfb }, 513817466cbSJens Wiklander }; 514817466cbSJens Wiklander 515817466cbSJens Wiklander /* 516817466cbSJens Wiklander * Checkup routine 517817466cbSJens Wiklander */ 518817466cbSJens Wiklander int mbedtls_ripemd160_self_test( int verbose ) 519817466cbSJens Wiklander { 5203d3b0591SJens Wiklander int i, ret = 0; 521817466cbSJens Wiklander unsigned char output[20]; 522817466cbSJens Wiklander 523817466cbSJens Wiklander memset( output, 0, sizeof output ); 524817466cbSJens Wiklander 525817466cbSJens Wiklander for( i = 0; i < TESTS; i++ ) 526817466cbSJens Wiklander { 527817466cbSJens Wiklander if( verbose != 0 ) 528817466cbSJens Wiklander mbedtls_printf( " RIPEMD-160 test #%d: ", i + 1 ); 529817466cbSJens Wiklander 5303d3b0591SJens Wiklander ret = mbedtls_ripemd160_ret( ripemd160_test_str[i], 5313d3b0591SJens Wiklander ripemd160_test_strlen[i], output ); 5323d3b0591SJens Wiklander if( ret != 0 ) 5333d3b0591SJens Wiklander goto fail; 534817466cbSJens Wiklander 535817466cbSJens Wiklander if( memcmp( output, ripemd160_test_md[i], 20 ) != 0 ) 536817466cbSJens Wiklander { 5373d3b0591SJens Wiklander ret = 1; 5383d3b0591SJens Wiklander goto fail; 539817466cbSJens Wiklander } 540817466cbSJens Wiklander 541817466cbSJens Wiklander if( verbose != 0 ) 542817466cbSJens Wiklander mbedtls_printf( "passed\n" ); 543817466cbSJens Wiklander } 544817466cbSJens Wiklander 545817466cbSJens Wiklander if( verbose != 0 ) 546817466cbSJens Wiklander mbedtls_printf( "\n" ); 547817466cbSJens Wiklander 548817466cbSJens Wiklander return( 0 ); 5493d3b0591SJens Wiklander 5503d3b0591SJens Wiklander fail: 5513d3b0591SJens Wiklander if( verbose != 0 ) 5523d3b0591SJens Wiklander mbedtls_printf( "failed\n" ); 5533d3b0591SJens Wiklander 5543d3b0591SJens Wiklander return( ret ); 555817466cbSJens Wiklander } 556817466cbSJens Wiklander 557817466cbSJens Wiklander #endif /* MBEDTLS_SELF_TEST */ 558817466cbSJens Wiklander 559817466cbSJens Wiklander #endif /* MBEDTLS_RIPEMD160_C */ 560