[apt.git] / apt-pkg / contrib / sha1.cc

// -*- mode: cpp; mode: fold -*-
// Description                                                          /*{{{*/
// $Id: sha1.cc,v 1.3 2001/05/13 05:15:03 jgg Exp $
/* ######################################################################
   
   SHA1 - SHA-1 Secure Hash Algorithm.
   
   This file is a Public Domain wrapper for the Public Domain SHA1 
   calculation code that is at it's end.

   The algorithm was originally implemented by 
   Steve Reid <sreid@sea-to-sky.net> and later modified by 
   James H. Brown <jbrown@burgoyne.com>.
   
   Modifications for APT were done by Alfredo K. Kojima and Jason 
   Gunthorpe.
   
   Still in the public domain.
   
   Test Vectors (from FIPS PUB 180-1)
   "abc"
   A9993E36 4706816A BA3E2571 7850C26C 9CD0D89D
   "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
   84983E44 1C3BD26E BAAE4AA1 F95129E5 E54670F1
   A million repetitions of "a"
   34AA973C D4C4DAA4 F61EEB2B DBAD2731 6534016F
   
   ##################################################################### 
 */
									/*}}} */
// Include Files                                                        /*{{{*/
#include <apt-pkg/sha1.h>
#include <apt-pkg/strutl.h>
#include <apt-pkg/macros.h>

#include <string.h>
#include <unistd.h>
#include <inttypes.h>
#include <config.h>
									/*}}}*/

// SHA1Transform - Alters an existing SHA-1 hash			/*{{{*/
// ---------------------------------------------------------------------
/* The core of the SHA-1 algorithm. This alters an existing SHA-1 hash to
   reflect the addition of 16 longwords of new data. Other routines convert
   incoming stream data into 16 long word chunks for this routine */

#define rol(value,bits) (((value) << (bits)) | ((value) >> (32 - (bits))))

/* blk0() and blk() perform the initial expand. */
/* I got the idea of expanding during the round function from SSLeay */
#ifndef WORDS_BIGENDIAN
#define blk0(i) (block->l[i] = (rol(block->l[i],24)&0xFF00FF00) \
    |(rol(block->l[i],8)&0x00FF00FF))
#else
#define blk0(i) block->l[i]
#endif
#define blk(i) (block->l[i&15] = rol(block->l[(i+13)&15]^block->l[(i+8)&15] \
    ^block->l[(i+2)&15]^block->l[i&15],1))

/* (R0+R1),R2,R3,R4 are the different operations used in SHA1 */
#define R0(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk0(i)+0x5A827999+rol(v,5);w=rol(w,30);
#define R1(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk(i)+0x5A827999+rol(v,5);w=rol(w,30);
#define R2(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0x6ED9EBA1+rol(v,5);w=rol(w,30);
#define R3(v,w,x,y,z,i) z+=(((w|x)&y)|(w&x))+blk(i)+0x8F1BBCDC+rol(v,5);w=rol(w,30);
#define R4(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0xCA62C1D6+rol(v,5);w=rol(w,30);

static void SHA1Transform(uint32_t state[5],uint8_t const buffer[64])
{
   uint32_t a,b,c,d,e;
   typedef union
   {
      uint8_t c[64];
      uint32_t l[16];
   }
   CHAR64LONG16;
   CHAR64LONG16 workspace, *block;

   block = &workspace;
   memcpy(block,buffer,sizeof(workspace));

   /* Copy context->state[] to working vars */
   a = state[0];
   b = state[1];
   c = state[2];
   d = state[3];
   e = state[4];
   
   /* 4 rounds of 20 operations each. Loop unrolled. */
   R0(a,b,c,d,e,0);
   R0(e,a,b,c,d,1);
   R0(d,e,a,b,c,2);
   R0(c,d,e,a,b,3);
   R0(b,c,d,e,a,4);
   R0(a,b,c,d,e,5);
   R0(e,a,b,c,d,6);
   R0(d,e,a,b,c,7);
   R0(c,d,e,a,b,8);
   R0(b,c,d,e,a,9);
   R0(a,b,c,d,e,10);
   R0(e,a,b,c,d,11);
   R0(d,e,a,b,c,12);
   R0(c,d,e,a,b,13);
   R0(b,c,d,e,a,14);
   R0(a,b,c,d,e,15);
   R1(e,a,b,c,d,16);
   R1(d,e,a,b,c,17);
   R1(c,d,e,a,b,18);
   R1(b,c,d,e,a,19);
   R2(a,b,c,d,e,20);
   R2(e,a,b,c,d,21);
   R2(d,e,a,b,c,22);
   R2(c,d,e,a,b,23);
   R2(b,c,d,e,a,24);
   R2(a,b,c,d,e,25);
   R2(e,a,b,c,d,26);
   R2(d,e,a,b,c,27);
   R2(c,d,e,a,b,28);
   R2(b,c,d,e,a,29);
   R2(a,b,c,d,e,30);
   R2(e,a,b,c,d,31);
   R2(d,e,a,b,c,32);
   R2(c,d,e,a,b,33);
   R2(b,c,d,e,a,34);
   R2(a,b,c,d,e,35);
   R2(e,a,b,c,d,36);
   R2(d,e,a,b,c,37);
   R2(c,d,e,a,b,38);
   R2(b,c,d,e,a,39);
   R3(a,b,c,d,e,40);
   R3(e,a,b,c,d,41);
   R3(d,e,a,b,c,42);
   R3(c,d,e,a,b,43);
   R3(b,c,d,e,a,44);
   R3(a,b,c,d,e,45);
   R3(e,a,b,c,d,46);
   R3(d,e,a,b,c,47);
   R3(c,d,e,a,b,48);
   R3(b,c,d,e,a,49);
   R3(a,b,c,d,e,50);
   R3(e,a,b,c,d,51);
   R3(d,e,a,b,c,52);
   R3(c,d,e,a,b,53);
   R3(b,c,d,e,a,54);
   R3(a,b,c,d,e,55);
   R3(e,a,b,c,d,56);
   R3(d,e,a,b,c,57);
   R3(c,d,e,a,b,58);
   R3(b,c,d,e,a,59);
   R4(a,b,c,d,e,60);
   R4(e,a,b,c,d,61);
   R4(d,e,a,b,c,62);
   R4(c,d,e,a,b,63);
   R4(b,c,d,e,a,64);
   R4(a,b,c,d,e,65);
   R4(e,a,b,c,d,66);
   R4(d,e,a,b,c,67);
   R4(c,d,e,a,b,68);
   R4(b,c,d,e,a,69);
   R4(a,b,c,d,e,70);
   R4(e,a,b,c,d,71);
   R4(d,e,a,b,c,72);
   R4(c,d,e,a,b,73);
   R4(b,c,d,e,a,74);
   R4(a,b,c,d,e,75);
   R4(e,a,b,c,d,76);
   R4(d,e,a,b,c,77);
   R4(c,d,e,a,b,78);
   R4(b,c,d,e,a,79);
   
   /* Add the working vars back into context.state[] */
   state[0] += a;
   state[1] += b;
   state[2] += c;
   state[3] += d;
   state[4] += e;   
}
									/*}}}*/

// SHA1Summation::SHA1Summation - Constructor                           /*{{{*/
// ---------------------------------------------------------------------
/* */
SHA1Summation::SHA1Summation()
{
   uint32_t *state = (uint32_t *)State;
   uint32_t *count = (uint32_t *)Count;
   
   /* SHA1 initialization constants */
   state[0] = 0x67452301;
   state[1] = 0xEFCDAB89;
   state[2] = 0x98BADCFE;
   state[3] = 0x10325476;
   state[4] = 0xC3D2E1F0;
   count[0] = 0;
   count[1] = 0;
   Done = false;
}
									/*}}}*/
// SHA1Summation::Result - Return checksum value                        /*{{{*/
// ---------------------------------------------------------------------
/* Add() may not be called after this */
SHA1SumValue SHA1Summation::Result()
{
   uint32_t *state = (uint32_t *)State;
   uint32_t *count = (uint32_t *)Count;
   
   // Apply the padding
   if (Done == false)
   {
      unsigned char finalcount[8];

      for (unsigned i = 0; i < 8; i++)
      {
	 // Endian independent
	 finalcount[i] = (unsigned char) ((count[(i >= 4 ? 0 : 1)]
					   >> ((3 - (i & 3)) * 8)) & 255);	
      }
      
      Add((unsigned char *) "\200",1);
      while ((count[0] & 504) != 448)
	 Add((unsigned char *) "\0",1);
      
      Add(finalcount,8);	/* Should cause a SHA1Transform() */
      
   }

   Done = true;

   // Transfer over the result
   SHA1SumValue Value;
   unsigned char res[20];
   for (unsigned i = 0; i < 20; i++)
   {
      res[i] = (unsigned char)
	 ((state[i >> 2] >> ((3 - (i & 3)) * 8)) & 255);
   }
   Value.Set(res);
   return Value;
}
									/*}}}*/
// SHA1Summation::Add - Adds content of buffer into the checksum        /*{{{*/
// ---------------------------------------------------------------------
/* May not be called after Result() is called */
bool SHA1Summation::Add(const unsigned char *data,unsigned long len)
{
   if (Done)
      return false;

   uint32_t *state = (uint32_t *)State;
   uint32_t *count = (uint32_t *)Count;
   uint8_t *buffer = (uint8_t *)Buffer;
   uint32_t i,j;

   j = (count[0] >> 3) & 63;
   if ((count[0] += len << 3) < (len << 3))
      count[1]++;
   count[1] += (len >> 29);
   if ((j + len) > 63)
   {
      memcpy(&buffer[j],data,(i = 64 - j));
      SHA1Transform(state,buffer);
      for (; i + 63 < len; i += 64)
      {
	 SHA1Transform(state,&data[i]);
      }
      j = 0;
   }
   else
      i = 0;
   memcpy(&buffer[j],&data[i],len - i);
   
   return true;
}
									/*}}}*/
Commit	Line	Data
784202a2 AL	1	// -- mode: cpp; mode: fold --
784202a2 AL	2	// Description /{{{/
c1ebf56d	3	// $Id: sha1.cc,v 1.3 2001/05/13 05:15:03 jgg Exp $
784202a2 AL	4	/* ######################################################################
	5
	6	SHA1 - SHA-1 Secure Hash Algorithm.
	7
	8	This file is a Public Domain wrapper for the Public Domain SHA1
	9	calculation code that is at it's end.
	10
	11	The algorithm was originally implemented by
	12	Steve Reid <sreid@sea-to-sky.net> and later modified by
	13	James H. Brown <jbrown@burgoyne.com>.
	14
	15	Modifications for APT were done by Alfredo K. Kojima and Jason
	16	Gunthorpe.
	17
	18	Still in the public domain.
	19
	20	Test Vectors (from FIPS PUB 180-1)
	21	"abc"
	22	A9993E36 4706816A BA3E2571 7850C26C 9CD0D89D
	23	"abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
	24	84983E44 1C3BD26E BAAE4AA1 F95129E5 E54670F1
	25	A million repetitions of "a"
	26	34AA973C D4C4DAA4 F61EEB2B DBAD2731 6534016F
	27
	28	#####################################################################
	29	*/
	30	/}}} /
	31	// Include Files /{{{/
784202a2 AL	32	#include <apt-pkg/sha1.h>
784202a2 AL	33	#include <apt-pkg/strutl.h>
aea7f4c8	34	#include <apt-pkg/macros.h>
784202a2 AL	35
	36	#include <string.h>
	37	#include <unistd.h>
	38	#include <inttypes.h>
	39	#include <config.h>
784202a2 AL	40	/}}}/
	41
	42	// SHA1Transform - Alters an existing SHA-1 hash /{{{/
	43	// ---------------------------------------------------------------------
	44	/* The core of the SHA-1 algorithm. This alters an existing SHA-1 hash to
	45	reflect the addition of 16 longwords of new data. Other routines convert
	46	incoming stream data into 16 long word chunks for this routine */
	47
	48	#define rol(value,bits) (((value) << (bits)) \| ((value) >> (32 - (bits))))
	49
	50	/* blk0() and blk() perform the initial expand. */
	51	/* I got the idea of expanding during the round function from SSLeay */
	52	#ifndef WORDS_BIGENDIAN
	53	#define blk0(i) (block->l[i] = (rol(block->l[i],24)&0xFF00FF00) \
	54	\|(rol(block->l[i],8)&0x00FF00FF))
	55	#else
	56	#define blk0(i) block->l[i]
	57	#endif
	58	#define blk(i) (block->l[i&15] = rol(block->l[(i+13)&15]^block->l[(i+8)&15] \
	59	^block->l[(i+2)&15]^block->l[i&15],1))
	60
	61	/* (R0+R1),R2,R3,R4 are the different operations used in SHA1 */
	62	#define R0(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk0(i)+0x5A827999+rol(v,5);w=rol(w,30);
	63	#define R1(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk(i)+0x5A827999+rol(v,5);w=rol(w,30);
	64	#define R2(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0x6ED9EBA1+rol(v,5);w=rol(w,30);
	65	#define R3(v,w,x,y,z,i) z+=(((w\|x)&y)\|(w&x))+blk(i)+0x8F1BBCDC+rol(v,5);w=rol(w,30);
	66	#define R4(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0xCA62C1D6+rol(v,5);w=rol(w,30);
	67
	68	static void SHA1Transform(uint32_t state[5],uint8_t const buffer[64])
	69	{
	70	uint32_t a,b,c,d,e;
	71	typedef union
	72	{
	73	uint8_t c[64];
	74	uint32_t l[16];
	75	}
	76	CHAR64LONG16;
1edc38ab	77	CHAR64LONG16 workspace, *block;
784202a2	78
1edc38ab	79	block = &workspace;
784202a2 AL	80	memcpy(block,buffer,sizeof(workspace));
	81
	82	/* Copy context->state[] to working vars */
	83	a = state[0];
	84	b = state[1];
	85	c = state[2];
	86	d = state[3];
	87	e = state[4];
	88
	89	/* 4 rounds of 20 operations each. Loop unrolled. */
	90	R0(a,b,c,d,e,0);
	91	R0(e,a,b,c,d,1);
	92	R0(d,e,a,b,c,2);
	93	R0(c,d,e,a,b,3);
	94	R0(b,c,d,e,a,4);
	95	R0(a,b,c,d,e,5);
	96	R0(e,a,b,c,d,6);
	97	R0(d,e,a,b,c,7);
	98	R0(c,d,e,a,b,8);
	99	R0(b,c,d,e,a,9);
	100	R0(a,b,c,d,e,10);
	101	R0(e,a,b,c,d,11);
	102	R0(d,e,a,b,c,12);
	103	R0(c,d,e,a,b,13);
	104	R0(b,c,d,e,a,14);
	105	R0(a,b,c,d,e,15);
	106	R1(e,a,b,c,d,16);
	107	R1(d,e,a,b,c,17);
	108	R1(c,d,e,a,b,18);
	109	R1(b,c,d,e,a,19);
	110	R2(a,b,c,d,e,20);
	111	R2(e,a,b,c,d,21);
	112	R2(d,e,a,b,c,22);
	113	R2(c,d,e,a,b,23);
	114	R2(b,c,d,e,a,24);
	115	R2(a,b,c,d,e,25);
	116	R2(e,a,b,c,d,26);
	117	R2(d,e,a,b,c,27);
	118	R2(c,d,e,a,b,28);
	119	R2(b,c,d,e,a,29);
	120	R2(a,b,c,d,e,30);
	121	R2(e,a,b,c,d,31);
	122	R2(d,e,a,b,c,32);
	123	R2(c,d,e,a,b,33);
	124	R2(b,c,d,e,a,34);
	125	R2(a,b,c,d,e,35);
	126	R2(e,a,b,c,d,36);
	127	R2(d,e,a,b,c,37);
	128	R2(c,d,e,a,b,38);
	129	R2(b,c,d,e,a,39);
	130	R3(a,b,c,d,e,40);
	131	R3(e,a,b,c,d,41);
	132	R3(d,e,a,b,c,42);
	133	R3(c,d,e,a,b,43);
	134	R3(b,c,d,e,a,44);
	135	R3(a,b,c,d,e,45);
	136	R3(e,a,b,c,d,46);
	137	R3(d,e,a,b,c,47);
	138	R3(c,d,e,a,b,48);
	139	R3(b,c,d,e,a,49);
	140	R3(a,b,c,d,e,50);
	141	R3(e,a,b,c,d,51);
	142	R3(d,e,a,b,c,52);
	143	R3(c,d,e,a,b,53);
144	R3(b,c,d,e,a,54);
145	R3(a,b,c,d,e,55);
146	R3(e,a,b,c,d,56);
147	R3(d,e,a,b,c,57);
148	R3(c,d,e,a,b,58);
149	R3(b,c,d,e,a,59);
150	R4(a,b,c,d,e,60);
151	R4(e,a,b,c,d,61);
152	R4(d,e,a,b,c,62);
153	R4(c,d,e,a,b,63);
154	R4(b,c,d,e,a,64);
155	R4(a,b,c,d,e,65);
156	R4(e,a,b,c,d,66);
157	R4(d,e,a,b,c,67);
158	R4(c,d,e,a,b,68);
159	R4(b,c,d,e,a,69);
160	R4(a,b,c,d,e,70);
161	R4(e,a,b,c,d,71);
162	R4(d,e,a,b,c,72);
163	R4(c,d,e,a,b,73);
164	R4(b,c,d,e,a,74);
165	R4(a,b,c,d,e,75);
166	R4(e,a,b,c,d,76);
167	R4(d,e,a,b,c,77);
168	R4(c,d,e,a,b,78);
169	R4(b,c,d,e,a,79);
170
171	/* Add the working vars back into context.state[] */
172	state[0] += a;
173	state[1] += b;
174	state[2] += c;
175	state[3] += d;
176	state[4] += e;
177	}
178	/}}}/
179
784202a2 AL	180	// SHA1Summation::SHA1Summation - Constructor /{{{/
	181	// ---------------------------------------------------------------------
	182	/* */
	183	SHA1Summation::SHA1Summation()
	184	{
	185	uint32_t state = (uint32_t )State;
	186	uint32_t count = (uint32_t )Count;
	187
	188	/* SHA1 initialization constants */
	189	state[0] = 0x67452301;
	190	state[1] = 0xEFCDAB89;
	191	state[2] = 0x98BADCFE;
	192	state[3] = 0x10325476;
	193	state[4] = 0xC3D2E1F0;
	194	count[0] = 0;
	195	count[1] = 0;
	196	Done = false;
	197	}
	198	/}}}/
	199	// SHA1Summation::Result - Return checksum value /{{{/
	200	// ---------------------------------------------------------------------
	201	/* Add() may not be called after this */
	202	SHA1SumValue SHA1Summation::Result()
	203	{
	204	uint32_t state = (uint32_t )State;
	205	uint32_t count = (uint32_t )Count;
784202a2 AL	206
	207	// Apply the padding
	208	if (Done == false)
	209	{
	210	unsigned char finalcount[8];
	211
	212	for (unsigned i = 0; i < 8; i++)
	213	{
	214	// Endian independent
	215	finalcount[i] = (unsigned char) ((count[(i >= 4 ? 0 : 1)]
	216	>> ((3 - (i & 3)) * 8)) & 255);
	217	}
	218
	219	Add((unsigned char *) "\200",1);
	220	while ((count[0] & 504) != 448)
	221	Add((unsigned char *) "\0",1);
	222
	223	Add(finalcount,8); /* Should cause a SHA1Transform() */
	224
	225	}
	226
	227	Done = true;
	228
	229	// Transfer over the result
	230	SHA1SumValue Value;
a7cc0584	231	unsigned char res[20];
784202a2 AL	232	for (unsigned i = 0; i < 20; i++)
784202a2 AL	233	{
7ac56f8f	234	res[i] = (unsigned char)
784202a2 AL	235	((state[i >> 2] >> ((3 - (i & 3)) * 8)) & 255);
784202a2 AL	236	}
7ac56f8f	237	Value.Set(res);
784202a2 AL	238	return Value;
	239	}
	240	/}}}/
	241	// SHA1Summation::Add - Adds content of buffer into the checksum /{{{/
	242	// ---------------------------------------------------------------------
	243	/* May not be called after Result() is called */
	244	bool SHA1Summation::Add(const unsigned char *data,unsigned long len)
	245	{
	246	if (Done)
	247	return false;
	248
	249	uint32_t state = (uint32_t )State;
	250	uint32_t count = (uint32_t )Count;
	251	uint8_t buffer = (uint8_t )Buffer;
	252	uint32_t i,j;
	253
	254	j = (count[0] >> 3) & 63;
	255	if ((count[0] += len << 3) < (len << 3))
	256	count[1]++;
	257	count[1] += (len >> 29);
	258	if ((j + len) > 63)
	259	{
	260	memcpy(&buffer[j],data,(i = 64 - j));
	261	SHA1Transform(state,buffer);
	262	for (; i + 63 < len; i += 64)
	263	{
	264	SHA1Transform(state,&data[i]);
	265	}
	266	j = 0;
	267	}
	268	else
	269	i = 0;
	270	memcpy(&buffer[j],&data[i],len - i);
	271
	272	return true;
	273	}
	274	/}}}/