xref: /optee_os/lib/libmbedtls/mbedtls/library/ripemd160.c (revision 7901324d9530594155991c8b283023d567741cc7)
1817466cbSJens Wiklander /*
2817466cbSJens Wiklander  *  RIPE MD-160 implementation
3817466cbSJens Wiklander  *
4*7901324dSJerome Forissier  *  Copyright The Mbed TLS Contributors
5*7901324dSJerome Forissier  *  SPDX-License-Identifier: Apache-2.0
6817466cbSJens Wiklander  *
7817466cbSJens Wiklander  *  Licensed under the Apache License, Version 2.0 (the "License"); you may
8817466cbSJens Wiklander  *  not use this file except in compliance with the License.
9817466cbSJens Wiklander  *  You may obtain a copy of the License at
10817466cbSJens Wiklander  *
11817466cbSJens Wiklander  *  http://www.apache.org/licenses/LICENSE-2.0
12817466cbSJens Wiklander  *
13817466cbSJens Wiklander  *  Unless required by applicable law or agreed to in writing, software
14817466cbSJens Wiklander  *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15817466cbSJens Wiklander  *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16817466cbSJens Wiklander  *  See the License for the specific language governing permissions and
17817466cbSJens Wiklander  *  limitations under the License.
18817466cbSJens Wiklander  */
19817466cbSJens Wiklander 
20817466cbSJens Wiklander /*
21817466cbSJens Wiklander  *  The RIPEMD-160 algorithm was designed by RIPE in 1996
22817466cbSJens Wiklander  *  http://homes.esat.kuleuven.be/~bosselae/mbedtls_ripemd160.html
23817466cbSJens Wiklander  *  http://ehash.iaik.tugraz.at/wiki/RIPEMD-160
24817466cbSJens Wiklander  */
25817466cbSJens Wiklander 
26*7901324dSJerome Forissier #include "common.h"
27817466cbSJens Wiklander 
28817466cbSJens Wiklander #if defined(MBEDTLS_RIPEMD160_C)
29817466cbSJens Wiklander 
30817466cbSJens Wiklander #include "mbedtls/ripemd160.h"
313d3b0591SJens Wiklander #include "mbedtls/platform_util.h"
3211fa71b9SJerome Forissier #include "mbedtls/error.h"
33817466cbSJens Wiklander 
34817466cbSJens Wiklander #include <string.h>
35817466cbSJens Wiklander 
36817466cbSJens Wiklander #if defined(MBEDTLS_SELF_TEST)
37817466cbSJens Wiklander #if defined(MBEDTLS_PLATFORM_C)
38817466cbSJens Wiklander #include "mbedtls/platform.h"
39817466cbSJens Wiklander #else
40817466cbSJens Wiklander #include <stdio.h>
41817466cbSJens Wiklander #define mbedtls_printf printf
42817466cbSJens Wiklander #endif /* MBEDTLS_PLATFORM_C */
43817466cbSJens Wiklander #endif /* MBEDTLS_SELF_TEST */
44817466cbSJens Wiklander 
453d3b0591SJens Wiklander #if !defined(MBEDTLS_RIPEMD160_ALT)
463d3b0591SJens Wiklander 
47817466cbSJens Wiklander /*
48817466cbSJens Wiklander  * 32-bit integer manipulation macros (little endian)
49817466cbSJens Wiklander  */
50817466cbSJens Wiklander #ifndef GET_UINT32_LE
51817466cbSJens Wiklander #define GET_UINT32_LE(n,b,i)                            \
52817466cbSJens Wiklander {                                                       \
53817466cbSJens Wiklander     (n) = ( (uint32_t) (b)[(i)    ]       )             \
54817466cbSJens Wiklander         | ( (uint32_t) (b)[(i) + 1] <<  8 )             \
55817466cbSJens Wiklander         | ( (uint32_t) (b)[(i) + 2] << 16 )             \
56817466cbSJens Wiklander         | ( (uint32_t) (b)[(i) + 3] << 24 );            \
57817466cbSJens Wiklander }
58817466cbSJens Wiklander #endif
59817466cbSJens Wiklander 
60817466cbSJens Wiklander #ifndef PUT_UINT32_LE
61817466cbSJens Wiklander #define PUT_UINT32_LE(n,b,i)                                    \
62817466cbSJens Wiklander {                                                               \
63817466cbSJens Wiklander     (b)[(i)    ] = (unsigned char) ( ( (n)       ) & 0xFF );    \
64817466cbSJens Wiklander     (b)[(i) + 1] = (unsigned char) ( ( (n) >>  8 ) & 0xFF );    \
65817466cbSJens Wiklander     (b)[(i) + 2] = (unsigned char) ( ( (n) >> 16 ) & 0xFF );    \
66817466cbSJens Wiklander     (b)[(i) + 3] = (unsigned char) ( ( (n) >> 24 ) & 0xFF );    \
67817466cbSJens Wiklander }
68817466cbSJens Wiklander #endif
69817466cbSJens Wiklander 
70817466cbSJens Wiklander void mbedtls_ripemd160_init( mbedtls_ripemd160_context *ctx )
71817466cbSJens Wiklander {
72817466cbSJens Wiklander     memset( ctx, 0, sizeof( mbedtls_ripemd160_context ) );
73817466cbSJens Wiklander }
74817466cbSJens Wiklander 
75817466cbSJens Wiklander void mbedtls_ripemd160_free( mbedtls_ripemd160_context *ctx )
76817466cbSJens Wiklander {
77817466cbSJens Wiklander     if( ctx == NULL )
78817466cbSJens Wiklander         return;
79817466cbSJens Wiklander 
803d3b0591SJens Wiklander     mbedtls_platform_zeroize( ctx, sizeof( mbedtls_ripemd160_context ) );
81817466cbSJens Wiklander }
82817466cbSJens Wiklander 
83817466cbSJens Wiklander void mbedtls_ripemd160_clone( mbedtls_ripemd160_context *dst,
84817466cbSJens Wiklander                         const mbedtls_ripemd160_context *src )
85817466cbSJens Wiklander {
86817466cbSJens Wiklander     *dst = *src;
87817466cbSJens Wiklander }
88817466cbSJens Wiklander 
89817466cbSJens Wiklander /*
90817466cbSJens Wiklander  * RIPEMD-160 context setup
91817466cbSJens Wiklander  */
923d3b0591SJens Wiklander int mbedtls_ripemd160_starts_ret( mbedtls_ripemd160_context *ctx )
93817466cbSJens Wiklander {
94817466cbSJens Wiklander     ctx->total[0] = 0;
95817466cbSJens Wiklander     ctx->total[1] = 0;
96817466cbSJens Wiklander 
97817466cbSJens Wiklander     ctx->state[0] = 0x67452301;
98817466cbSJens Wiklander     ctx->state[1] = 0xEFCDAB89;
99817466cbSJens Wiklander     ctx->state[2] = 0x98BADCFE;
100817466cbSJens Wiklander     ctx->state[3] = 0x10325476;
101817466cbSJens Wiklander     ctx->state[4] = 0xC3D2E1F0;
1023d3b0591SJens Wiklander 
1033d3b0591SJens Wiklander     return( 0 );
104817466cbSJens Wiklander }
105817466cbSJens Wiklander 
1063d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED)
1073d3b0591SJens Wiklander void mbedtls_ripemd160_starts( mbedtls_ripemd160_context *ctx )
1083d3b0591SJens Wiklander {
1093d3b0591SJens Wiklander     mbedtls_ripemd160_starts_ret( ctx );
1103d3b0591SJens Wiklander }
1113d3b0591SJens Wiklander #endif
1123d3b0591SJens Wiklander 
113817466cbSJens Wiklander #if !defined(MBEDTLS_RIPEMD160_PROCESS_ALT)
114817466cbSJens Wiklander /*
115817466cbSJens Wiklander  * Process one block
116817466cbSJens Wiklander  */
1173d3b0591SJens Wiklander int mbedtls_internal_ripemd160_process( mbedtls_ripemd160_context *ctx,
1183d3b0591SJens Wiklander                                         const unsigned char data[64] )
119817466cbSJens Wiklander {
120*7901324dSJerome Forissier     struct
121*7901324dSJerome Forissier     {
122817466cbSJens Wiklander         uint32_t A, B, C, D, E, Ap, Bp, Cp, Dp, Ep, X[16];
123*7901324dSJerome Forissier     } local;
124817466cbSJens Wiklander 
125*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 0], data,  0 );
126*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 1], data,  4 );
127*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 2], data,  8 );
128*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 3], data, 12 );
129*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 4], data, 16 );
130*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 5], data, 20 );
131*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 6], data, 24 );
132*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 7], data, 28 );
133*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 8], data, 32 );
134*7901324dSJerome Forissier     GET_UINT32_LE( local.X[ 9], data, 36 );
135*7901324dSJerome Forissier     GET_UINT32_LE( local.X[10], data, 40 );
136*7901324dSJerome Forissier     GET_UINT32_LE( local.X[11], data, 44 );
137*7901324dSJerome Forissier     GET_UINT32_LE( local.X[12], data, 48 );
138*7901324dSJerome Forissier     GET_UINT32_LE( local.X[13], data, 52 );
139*7901324dSJerome Forissier     GET_UINT32_LE( local.X[14], data, 56 );
140*7901324dSJerome Forissier     GET_UINT32_LE( local.X[15], data, 60 );
141817466cbSJens Wiklander 
142*7901324dSJerome Forissier     local.A = local.Ap = ctx->state[0];
143*7901324dSJerome Forissier     local.B = local.Bp = ctx->state[1];
144*7901324dSJerome Forissier     local.C = local.Cp = ctx->state[2];
145*7901324dSJerome Forissier     local.D = local.Dp = ctx->state[3];
146*7901324dSJerome Forissier     local.E = local.Ep = ctx->state[4];
147817466cbSJens Wiklander 
1485b25c76aSJerome Forissier #define F1( x, y, z )   ( (x) ^ (y) ^ (z) )
1495b25c76aSJerome Forissier #define F2( x, y, z )   ( ( (x) & (y) ) | ( ~(x) & (z) ) )
1505b25c76aSJerome Forissier #define F3( x, y, z )   ( ( (x) | ~(y) ) ^ (z) )
1515b25c76aSJerome Forissier #define F4( x, y, z )   ( ( (x) & (z) ) | ( (y) & ~(z) ) )
1525b25c76aSJerome Forissier #define F5( x, y, z )   ( (x) ^ ( (y) | ~(z) ) )
153817466cbSJens Wiklander 
1545b25c76aSJerome Forissier #define S( x, n ) ( ( (x) << (n) ) | ( (x) >> (32 - (n)) ) )
155817466cbSJens Wiklander 
156817466cbSJens Wiklander #define P( a, b, c, d, e, r, s, f, k )                      \
1575b25c76aSJerome Forissier     do                                                      \
1585b25c76aSJerome Forissier     {                                                       \
159*7901324dSJerome Forissier         (a) += f( (b), (c), (d) ) + local.X[r] + (k);       \
1605b25c76aSJerome Forissier         (a) = S( (a), (s) ) + (e);                          \
1615b25c76aSJerome Forissier         (c) = S( (c), 10 );                                 \
1625b25c76aSJerome Forissier     } while( 0 )
163817466cbSJens Wiklander 
164817466cbSJens Wiklander #define P2( a, b, c, d, e, r, s, rp, sp )                               \
1655b25c76aSJerome Forissier     do                                                                  \
1665b25c76aSJerome Forissier     {                                                                   \
1675b25c76aSJerome Forissier         P( (a), (b), (c), (d), (e), (r), (s), F, K );                   \
1685b25c76aSJerome Forissier         P( a ## p, b ## p, c ## p, d ## p, e ## p,                      \
1695b25c76aSJerome Forissier            (rp), (sp), Fp, Kp );                                        \
1705b25c76aSJerome Forissier     } while( 0 )
171817466cbSJens Wiklander 
172817466cbSJens Wiklander #define F   F1
173817466cbSJens Wiklander #define K   0x00000000
174817466cbSJens Wiklander #define Fp  F5
175817466cbSJens Wiklander #define Kp  0x50A28BE6
176*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  0, 11,  5,  8 );
177*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  1, 14, 14,  9 );
178*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  2, 15,  7,  9 );
179*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  3, 12,  0, 11 );
180*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A,  4,  5,  9, 13 );
181*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  5,  8,  2, 15 );
182*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  6,  7, 11, 15 );
183*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  7,  9,  4,  5 );
184*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  8, 11, 13,  7 );
185*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A,  9, 13,  6,  7 );
186*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E, 10, 14, 15,  8 );
187*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D, 11, 15,  8, 11 );
188*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C, 12,  6,  1, 14 );
189*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B, 13,  7, 10, 14 );
190*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 14,  9,  3, 12 );
191*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E, 15,  8, 12,  6 );
192817466cbSJens Wiklander #undef F
193817466cbSJens Wiklander #undef K
194817466cbSJens Wiklander #undef Fp
195817466cbSJens Wiklander #undef Kp
196817466cbSJens Wiklander 
197817466cbSJens Wiklander #define F   F2
198817466cbSJens Wiklander #define K   0x5A827999
199817466cbSJens Wiklander #define Fp  F4
200817466cbSJens Wiklander #define Kp  0x5C4DD124
201*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  7,  7,  6,  9 );
202*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  4,  6, 11, 13 );
203*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B, 13,  8,  3, 15 );
204*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A,  1, 13,  7,  7 );
205*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E, 10, 11,  0, 12 );
206*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  6,  9, 13,  8 );
207*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C, 15,  7,  5,  9 );
208*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  3, 15, 10, 11 );
209*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 12,  7, 14,  7 );
210*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  0, 12, 15,  7 );
211*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  9, 15,  8, 12 );
212*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  5,  9, 12,  7 );
213*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  2, 11,  4,  6 );
214*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 14,  7,  9, 15 );
215*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E, 11, 13,  1, 13 );
216*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  8, 12,  2, 11 );
217817466cbSJens Wiklander #undef F
218817466cbSJens Wiklander #undef K
219817466cbSJens Wiklander #undef Fp
220817466cbSJens Wiklander #undef Kp
221817466cbSJens Wiklander 
222817466cbSJens Wiklander #define F   F3
223817466cbSJens Wiklander #define K   0x6ED9EBA1
224817466cbSJens Wiklander #define Fp  F3
225817466cbSJens Wiklander #define Kp  0x6D703EF3
226*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  3, 11, 15,  9 );
227*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B, 10, 13,  5,  7 );
228*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 14,  6,  1, 15 );
229*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  4,  7,  3, 11 );
230*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  9, 14,  7,  8 );
231*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C, 15,  9, 14,  6 );
232*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  8, 13,  6,  6 );
233*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A,  1, 15,  9, 14 );
234*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  2, 14, 11, 12 );
235*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  7,  8,  8, 13 );
236*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  0, 13, 12,  5 );
237*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  6,  6,  2, 14 );
238*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 13,  5, 10, 13 );
239*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E, 11, 12,  0, 13 );
240*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  5,  7,  4,  7 );
241*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C, 12,  5, 13,  5 );
242817466cbSJens Wiklander #undef F
243817466cbSJens Wiklander #undef K
244817466cbSJens Wiklander #undef Fp
245817466cbSJens Wiklander #undef Kp
246817466cbSJens Wiklander 
247817466cbSJens Wiklander #define F   F4
248817466cbSJens Wiklander #define K   0x8F1BBCDC
249817466cbSJens Wiklander #define Fp  F2
250817466cbSJens Wiklander #define Kp  0x7A6D76E9
251*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  1, 11,  8, 15 );
252*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A,  9, 12,  6,  5 );
253*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E, 11, 14,  4,  8 );
254*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D, 10, 15,  1, 11 );
255*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  0, 14,  3, 14 );
256*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  8, 15, 11, 14 );
257*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 12,  9, 15,  6 );
258*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  4,  8,  0, 14 );
259*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D, 13,  9,  5,  6 );
260*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  3, 14, 12,  9 );
261*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  7,  5,  2, 12 );
262*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 15,  6, 13,  9 );
263*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E, 14,  8,  9, 12 );
264*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  5,  6,  7,  5 );
265*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  6,  5, 10, 15 );
266*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  2, 12, 14,  8 );
267817466cbSJens Wiklander #undef F
268817466cbSJens Wiklander #undef K
269817466cbSJens Wiklander #undef Fp
270817466cbSJens Wiklander #undef Kp
271817466cbSJens Wiklander 
272817466cbSJens Wiklander #define F   F5
273817466cbSJens Wiklander #define K   0xA953FD4E
274817466cbSJens Wiklander #define Fp  F1
275817466cbSJens Wiklander #define Kp  0x00000000
276*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A,  4,  9, 12,  8 );
277*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  0, 15, 15,  5 );
278*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D,  5,  5, 10, 12 );
279*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  9, 11,  4,  9 );
280*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  7,  6,  1, 12 );
281*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 12,  8,  5,  5 );
282*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  2, 13,  8, 14 );
283*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D, 10, 12,  7,  6 );
284*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C, 14,  5,  6,  8 );
285*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B,  1, 12,  2, 13 );
286*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A,  3, 13, 13,  6 );
287*7901324dSJerome Forissier     P2( local.A, local.B, local.C, local.D, local.E,  8, 14, 14,  5 );
288*7901324dSJerome Forissier     P2( local.E, local.A, local.B, local.C, local.D, 11, 11,  0, 15 );
289*7901324dSJerome Forissier     P2( local.D, local.E, local.A, local.B, local.C,  6,  8,  3, 13 );
290*7901324dSJerome Forissier     P2( local.C, local.D, local.E, local.A, local.B, 15,  5,  9, 11 );
291*7901324dSJerome Forissier     P2( local.B, local.C, local.D, local.E, local.A, 13,  6, 11, 11 );
292817466cbSJens Wiklander #undef F
293817466cbSJens Wiklander #undef K
294817466cbSJens Wiklander #undef Fp
295817466cbSJens Wiklander #undef Kp
296817466cbSJens Wiklander 
297*7901324dSJerome Forissier     local.C       = ctx->state[1] + local.C + local.Dp;
298*7901324dSJerome Forissier     ctx->state[1] = ctx->state[2] + local.D + local.Ep;
299*7901324dSJerome Forissier     ctx->state[2] = ctx->state[3] + local.E + local.Ap;
300*7901324dSJerome Forissier     ctx->state[3] = ctx->state[4] + local.A + local.Bp;
301*7901324dSJerome Forissier     ctx->state[4] = ctx->state[0] + local.B + local.Cp;
302*7901324dSJerome Forissier     ctx->state[0] = local.C;
303*7901324dSJerome Forissier 
304*7901324dSJerome Forissier     /* Zeroise variables to clear sensitive data from memory. */
305*7901324dSJerome Forissier     mbedtls_platform_zeroize( &local, sizeof( local ) );
3063d3b0591SJens Wiklander 
3073d3b0591SJens Wiklander     return( 0 );
308817466cbSJens Wiklander }
3093d3b0591SJens Wiklander 
3103d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED)
3113d3b0591SJens Wiklander void mbedtls_ripemd160_process( mbedtls_ripemd160_context *ctx,
3123d3b0591SJens Wiklander                                 const unsigned char data[64] )
3133d3b0591SJens Wiklander {
3143d3b0591SJens Wiklander     mbedtls_internal_ripemd160_process( ctx, data );
3153d3b0591SJens Wiklander }
3163d3b0591SJens Wiklander #endif
317817466cbSJens Wiklander #endif /* !MBEDTLS_RIPEMD160_PROCESS_ALT */
318817466cbSJens Wiklander 
319817466cbSJens Wiklander /*
320817466cbSJens Wiklander  * RIPEMD-160 process buffer
321817466cbSJens Wiklander  */
3223d3b0591SJens Wiklander int mbedtls_ripemd160_update_ret( mbedtls_ripemd160_context *ctx,
3233d3b0591SJens Wiklander                                   const unsigned char *input,
3243d3b0591SJens Wiklander                                   size_t ilen )
325817466cbSJens Wiklander {
32611fa71b9SJerome Forissier     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
327817466cbSJens Wiklander     size_t fill;
328817466cbSJens Wiklander     uint32_t left;
329817466cbSJens Wiklander 
330817466cbSJens Wiklander     if( ilen == 0 )
3313d3b0591SJens Wiklander         return( 0 );
332817466cbSJens Wiklander 
333817466cbSJens Wiklander     left = ctx->total[0] & 0x3F;
334817466cbSJens Wiklander     fill = 64 - left;
335817466cbSJens Wiklander 
336817466cbSJens Wiklander     ctx->total[0] += (uint32_t) ilen;
337817466cbSJens Wiklander     ctx->total[0] &= 0xFFFFFFFF;
338817466cbSJens Wiklander 
339817466cbSJens Wiklander     if( ctx->total[0] < (uint32_t) ilen )
340817466cbSJens Wiklander         ctx->total[1]++;
341817466cbSJens Wiklander 
342817466cbSJens Wiklander     if( left && ilen >= fill )
343817466cbSJens Wiklander     {
344817466cbSJens Wiklander         memcpy( (void *) (ctx->buffer + left), input, fill );
3453d3b0591SJens Wiklander 
3463d3b0591SJens Wiklander         if( ( ret = mbedtls_internal_ripemd160_process( ctx, ctx->buffer ) ) != 0 )
3473d3b0591SJens Wiklander             return( ret );
3483d3b0591SJens Wiklander 
349817466cbSJens Wiklander         input += fill;
350817466cbSJens Wiklander         ilen  -= fill;
351817466cbSJens Wiklander         left = 0;
352817466cbSJens Wiklander     }
353817466cbSJens Wiklander 
354817466cbSJens Wiklander     while( ilen >= 64 )
355817466cbSJens Wiklander     {
3563d3b0591SJens Wiklander         if( ( ret = mbedtls_internal_ripemd160_process( ctx, input ) ) != 0 )
3573d3b0591SJens Wiklander             return( ret );
3583d3b0591SJens Wiklander 
359817466cbSJens Wiklander         input += 64;
360817466cbSJens Wiklander         ilen  -= 64;
361817466cbSJens Wiklander     }
362817466cbSJens Wiklander 
363817466cbSJens Wiklander     if( ilen > 0 )
364817466cbSJens Wiklander     {
365817466cbSJens Wiklander         memcpy( (void *) (ctx->buffer + left), input, ilen );
366817466cbSJens Wiklander     }
3673d3b0591SJens Wiklander 
3683d3b0591SJens Wiklander     return( 0 );
369817466cbSJens Wiklander }
370817466cbSJens Wiklander 
3713d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED)
3723d3b0591SJens Wiklander void mbedtls_ripemd160_update( mbedtls_ripemd160_context *ctx,
3733d3b0591SJens Wiklander                                const unsigned char *input,
3743d3b0591SJens Wiklander                                size_t ilen )
3753d3b0591SJens Wiklander {
3763d3b0591SJens Wiklander     mbedtls_ripemd160_update_ret( ctx, input, ilen );
3773d3b0591SJens Wiklander }
3783d3b0591SJens Wiklander #endif
3793d3b0591SJens Wiklander 
380817466cbSJens Wiklander static const unsigned char ripemd160_padding[64] =
381817466cbSJens Wiklander {
382817466cbSJens Wiklander  0x80, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
383817466cbSJens Wiklander     0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
384817466cbSJens Wiklander     0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
385817466cbSJens Wiklander     0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
386817466cbSJens Wiklander };
387817466cbSJens Wiklander 
388817466cbSJens Wiklander /*
389817466cbSJens Wiklander  * RIPEMD-160 final digest
390817466cbSJens Wiklander  */
3913d3b0591SJens Wiklander int mbedtls_ripemd160_finish_ret( mbedtls_ripemd160_context *ctx,
3923d3b0591SJens Wiklander                                   unsigned char output[20] )
393817466cbSJens Wiklander {
39411fa71b9SJerome Forissier     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
395817466cbSJens Wiklander     uint32_t last, padn;
396817466cbSJens Wiklander     uint32_t high, low;
397817466cbSJens Wiklander     unsigned char msglen[8];
398817466cbSJens Wiklander 
399817466cbSJens Wiklander     high = ( ctx->total[0] >> 29 )
400817466cbSJens Wiklander          | ( ctx->total[1] <<  3 );
401817466cbSJens Wiklander     low  = ( ctx->total[0] <<  3 );
402817466cbSJens Wiklander 
403817466cbSJens Wiklander     PUT_UINT32_LE( low,  msglen, 0 );
404817466cbSJens Wiklander     PUT_UINT32_LE( high, msglen, 4 );
405817466cbSJens Wiklander 
406817466cbSJens Wiklander     last = ctx->total[0] & 0x3F;
407817466cbSJens Wiklander     padn = ( last < 56 ) ? ( 56 - last ) : ( 120 - last );
408817466cbSJens Wiklander 
4093d3b0591SJens Wiklander     ret = mbedtls_ripemd160_update_ret( ctx, ripemd160_padding, padn );
4103d3b0591SJens Wiklander     if( ret != 0 )
4113d3b0591SJens Wiklander         return( ret );
4123d3b0591SJens Wiklander 
4133d3b0591SJens Wiklander     ret = mbedtls_ripemd160_update_ret( ctx, msglen, 8 );
4143d3b0591SJens Wiklander     if( ret != 0 )
4153d3b0591SJens Wiklander         return( ret );
416817466cbSJens Wiklander 
417817466cbSJens Wiklander     PUT_UINT32_LE( ctx->state[0], output,  0 );
418817466cbSJens Wiklander     PUT_UINT32_LE( ctx->state[1], output,  4 );
419817466cbSJens Wiklander     PUT_UINT32_LE( ctx->state[2], output,  8 );
420817466cbSJens Wiklander     PUT_UINT32_LE( ctx->state[3], output, 12 );
421817466cbSJens Wiklander     PUT_UINT32_LE( ctx->state[4], output, 16 );
4223d3b0591SJens Wiklander 
4233d3b0591SJens Wiklander     return( 0 );
424817466cbSJens Wiklander }
425817466cbSJens Wiklander 
4263d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED)
4273d3b0591SJens Wiklander void mbedtls_ripemd160_finish( mbedtls_ripemd160_context *ctx,
4283d3b0591SJens Wiklander                                unsigned char output[20] )
4293d3b0591SJens Wiklander {
4303d3b0591SJens Wiklander     mbedtls_ripemd160_finish_ret( ctx, output );
4313d3b0591SJens Wiklander }
4323d3b0591SJens Wiklander #endif
4333d3b0591SJens Wiklander 
4343d3b0591SJens Wiklander #endif /* ! MBEDTLS_RIPEMD160_ALT */
4353d3b0591SJens Wiklander 
436817466cbSJens Wiklander /*
437817466cbSJens Wiklander  * output = RIPEMD-160( input buffer )
438817466cbSJens Wiklander  */
4393d3b0591SJens Wiklander int mbedtls_ripemd160_ret( const unsigned char *input,
4403d3b0591SJens Wiklander                            size_t ilen,
441817466cbSJens Wiklander                            unsigned char output[20] )
442817466cbSJens Wiklander {
44311fa71b9SJerome Forissier     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
444817466cbSJens Wiklander     mbedtls_ripemd160_context ctx;
445817466cbSJens Wiklander 
446817466cbSJens Wiklander     mbedtls_ripemd160_init( &ctx );
4473d3b0591SJens Wiklander 
4483d3b0591SJens Wiklander     if( ( ret = mbedtls_ripemd160_starts_ret( &ctx ) ) != 0 )
4493d3b0591SJens Wiklander         goto exit;
4503d3b0591SJens Wiklander 
4513d3b0591SJens Wiklander     if( ( ret = mbedtls_ripemd160_update_ret( &ctx, input, ilen ) ) != 0 )
4523d3b0591SJens Wiklander         goto exit;
4533d3b0591SJens Wiklander 
4543d3b0591SJens Wiklander     if( ( ret = mbedtls_ripemd160_finish_ret( &ctx, output ) ) != 0 )
4553d3b0591SJens Wiklander         goto exit;
4563d3b0591SJens Wiklander 
4573d3b0591SJens Wiklander exit:
458817466cbSJens Wiklander     mbedtls_ripemd160_free( &ctx );
4593d3b0591SJens Wiklander 
4603d3b0591SJens Wiklander     return( ret );
461817466cbSJens Wiklander }
462817466cbSJens Wiklander 
4633d3b0591SJens Wiklander #if !defined(MBEDTLS_DEPRECATED_REMOVED)
4643d3b0591SJens Wiklander void mbedtls_ripemd160( const unsigned char *input,
4653d3b0591SJens Wiklander                         size_t ilen,
4663d3b0591SJens Wiklander                         unsigned char output[20] )
4673d3b0591SJens Wiklander {
4683d3b0591SJens Wiklander     mbedtls_ripemd160_ret( input, ilen, output );
4693d3b0591SJens Wiklander }
4703d3b0591SJens Wiklander #endif
4713d3b0591SJens Wiklander 
472817466cbSJens Wiklander #if defined(MBEDTLS_SELF_TEST)
473817466cbSJens Wiklander /*
474817466cbSJens Wiklander  * Test vectors from the RIPEMD-160 paper and
475817466cbSJens Wiklander  * http://homes.esat.kuleuven.be/~bosselae/mbedtls_ripemd160.html#HMAC
476817466cbSJens Wiklander  */
477817466cbSJens Wiklander #define TESTS   8
4783d3b0591SJens Wiklander static const unsigned char ripemd160_test_str[TESTS][81] =
479817466cbSJens Wiklander {
4803d3b0591SJens Wiklander     { "" },
4813d3b0591SJens Wiklander     { "a" },
4823d3b0591SJens Wiklander     { "abc" },
4833d3b0591SJens Wiklander     { "message digest" },
4843d3b0591SJens Wiklander     { "abcdefghijklmnopqrstuvwxyz" },
4853d3b0591SJens Wiklander     { "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq" },
4863d3b0591SJens Wiklander     { "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789" },
48736905f94SGuido Vranken     { "12345678901234567890123456789012345678901234567890123456789012345678901234567890" },
4883d3b0591SJens Wiklander };
4893d3b0591SJens Wiklander 
4903d3b0591SJens Wiklander static const size_t ripemd160_test_strlen[TESTS] =
4913d3b0591SJens Wiklander {
4923d3b0591SJens Wiklander     0, 1, 3, 14, 26, 56, 62, 80
493817466cbSJens Wiklander };
494817466cbSJens Wiklander 
495817466cbSJens Wiklander static const unsigned char ripemd160_test_md[TESTS][20] =
496817466cbSJens Wiklander {
497817466cbSJens Wiklander     { 0x9c, 0x11, 0x85, 0xa5, 0xc5, 0xe9, 0xfc, 0x54, 0x61, 0x28,
498817466cbSJens Wiklander       0x08, 0x97, 0x7e, 0xe8, 0xf5, 0x48, 0xb2, 0x25, 0x8d, 0x31 },
499817466cbSJens Wiklander     { 0x0b, 0xdc, 0x9d, 0x2d, 0x25, 0x6b, 0x3e, 0xe9, 0xda, 0xae,
500817466cbSJens Wiklander       0x34, 0x7b, 0xe6, 0xf4, 0xdc, 0x83, 0x5a, 0x46, 0x7f, 0xfe },
501817466cbSJens Wiklander     { 0x8e, 0xb2, 0x08, 0xf7, 0xe0, 0x5d, 0x98, 0x7a, 0x9b, 0x04,
502817466cbSJens Wiklander       0x4a, 0x8e, 0x98, 0xc6, 0xb0, 0x87, 0xf1, 0x5a, 0x0b, 0xfc },
503817466cbSJens Wiklander     { 0x5d, 0x06, 0x89, 0xef, 0x49, 0xd2, 0xfa, 0xe5, 0x72, 0xb8,
504817466cbSJens Wiklander       0x81, 0xb1, 0x23, 0xa8, 0x5f, 0xfa, 0x21, 0x59, 0x5f, 0x36 },
505817466cbSJens Wiklander     { 0xf7, 0x1c, 0x27, 0x10, 0x9c, 0x69, 0x2c, 0x1b, 0x56, 0xbb,
506817466cbSJens Wiklander       0xdc, 0xeb, 0x5b, 0x9d, 0x28, 0x65, 0xb3, 0x70, 0x8d, 0xbc },
507817466cbSJens Wiklander     { 0x12, 0xa0, 0x53, 0x38, 0x4a, 0x9c, 0x0c, 0x88, 0xe4, 0x05,
508817466cbSJens Wiklander       0xa0, 0x6c, 0x27, 0xdc, 0xf4, 0x9a, 0xda, 0x62, 0xeb, 0x2b },
509817466cbSJens Wiklander     { 0xb0, 0xe2, 0x0b, 0x6e, 0x31, 0x16, 0x64, 0x02, 0x86, 0xed,
510817466cbSJens Wiklander       0x3a, 0x87, 0xa5, 0x71, 0x30, 0x79, 0xb2, 0x1f, 0x51, 0x89 },
511817466cbSJens Wiklander     { 0x9b, 0x75, 0x2e, 0x45, 0x57, 0x3d, 0x4b, 0x39, 0xf4, 0xdb,
512817466cbSJens Wiklander       0xd3, 0x32, 0x3c, 0xab, 0x82, 0xbf, 0x63, 0x32, 0x6b, 0xfb },
513817466cbSJens Wiklander };
514817466cbSJens Wiklander 
515817466cbSJens Wiklander /*
516817466cbSJens Wiklander  * Checkup routine
517817466cbSJens Wiklander  */
518817466cbSJens Wiklander int mbedtls_ripemd160_self_test( int verbose )
519817466cbSJens Wiklander {
5203d3b0591SJens Wiklander     int i, ret = 0;
521817466cbSJens Wiklander     unsigned char output[20];
522817466cbSJens Wiklander 
523817466cbSJens Wiklander     memset( output, 0, sizeof output );
524817466cbSJens Wiklander 
525817466cbSJens Wiklander     for( i = 0; i < TESTS; i++ )
526817466cbSJens Wiklander     {
527817466cbSJens Wiklander         if( verbose != 0 )
528817466cbSJens Wiklander             mbedtls_printf( "  RIPEMD-160 test #%d: ", i + 1 );
529817466cbSJens Wiklander 
5303d3b0591SJens Wiklander         ret = mbedtls_ripemd160_ret( ripemd160_test_str[i],
5313d3b0591SJens Wiklander                                      ripemd160_test_strlen[i], output );
5323d3b0591SJens Wiklander         if( ret != 0 )
5333d3b0591SJens Wiklander             goto fail;
534817466cbSJens Wiklander 
535817466cbSJens Wiklander         if( memcmp( output, ripemd160_test_md[i], 20 ) != 0 )
536817466cbSJens Wiklander         {
5373d3b0591SJens Wiklander             ret = 1;
5383d3b0591SJens Wiklander             goto fail;
539817466cbSJens Wiklander         }
540817466cbSJens Wiklander 
541817466cbSJens Wiklander         if( verbose != 0 )
542817466cbSJens Wiklander             mbedtls_printf( "passed\n" );
543817466cbSJens Wiklander     }
544817466cbSJens Wiklander 
545817466cbSJens Wiklander     if( verbose != 0 )
546817466cbSJens Wiklander         mbedtls_printf( "\n" );
547817466cbSJens Wiklander 
548817466cbSJens Wiklander     return( 0 );
5493d3b0591SJens Wiklander 
5503d3b0591SJens Wiklander fail:
5513d3b0591SJens Wiklander     if( verbose != 0 )
5523d3b0591SJens Wiklander         mbedtls_printf( "failed\n" );
5533d3b0591SJens Wiklander 
5543d3b0591SJens Wiklander     return( ret );
555817466cbSJens Wiklander }
556817466cbSJens Wiklander 
557817466cbSJens Wiklander #endif /* MBEDTLS_SELF_TEST */
558817466cbSJens Wiklander 
559817466cbSJens Wiklander #endif /* MBEDTLS_RIPEMD160_C */
560