apt-pkg/contrib/sha1.cc

   1 // -*- mode: cpp; mode: fold -*-
   2 // Description                                                          /*{{{*/
   3 // $Id: sha1.cc,v 1.3 2001/05/13 05:15:03 jgg Exp $
   4 /* ######################################################################
   5
   6    SHA1 - SHA-1 Secure Hash Algorithm.
   7
   8    This file is a Public Domain wrapper for the Public Domain SHA1
   9    calculation code that is at it's end.
  10
  11    The algorithm was originally implemented by
  12    Steve Reid <sreid@sea-to-sky.net> and later modified by
  13    James H. Brown <jbrown@burgoyne.com>.
  14
  15    Modifications for APT were done by Alfredo K. Kojima and Jason
  16    Gunthorpe.
  17
  18    Still in the public domain.
  19
  20    Test Vectors (from FIPS PUB 180-1)
  21    "abc"
  22    A9993E36 4706816A BA3E2571 7850C26C 9CD0D89D
  23    "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
  24    84983E44 1C3BD26E BAAE4AA1 F95129E5 E54670F1
  25    A million repetitions of "a"
  26    34AA973C D4C4DAA4 F61EEB2B DBAD2731 6534016F
  27
  28    #####################################################################
  29  */
  30                                                                         /*}}} */
  31 // Include Files                                                        /*{{{*/
  32 #include <apt-pkg/sha1.h>
  33 #include <apt-pkg/strutl.h>
  34 #include <apt-pkg/macros.h>
  35
  36 #include <string.h>
  37 #include <unistd.h>
  38 #include <inttypes.h>
  39 #include <config.h>
  40                                                                         /*}}}*/
  41
  42 // SHA1Transform - Alters an existing SHA-1 hash                        /*{{{*/
  43 // ---------------------------------------------------------------------
  44 /* The core of the SHA-1 algorithm. This alters an existing SHA-1 hash to
  45    reflect the addition of 16 longwords of new data. Other routines convert
  46    incoming stream data into 16 long word chunks for this routine */
  47
  48 #define rol(value,bits) (((value) << (bits)) | ((value) >> (32 - (bits))))
  49
  50 /* blk0() and blk() perform the initial expand. */
  51 /* I got the idea of expanding during the round function from SSLeay */
  52 #ifndef WORDS_BIGENDIAN
  53 #define blk0(i) (block->l[i] = (rol(block->l[i],24)&0xFF00FF00) \
  54     |(rol(block->l[i],8)&0x00FF00FF))
  55 #else
  56 #define blk0(i) block->l[i]
  57 #endif
  58 #define blk(i) (block->l[i&15] = rol(block->l[(i+13)&15]^block->l[(i+8)&15] \
  59     ^block->l[(i+2)&15]^block->l[i&15],1))
  60
  61 /* (R0+R1),R2,R3,R4 are the different operations used in SHA1 */
  62 #define R0(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk0(i)+0x5A827999+rol(v,5);w=rol(w,30);
  63 #define R1(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk(i)+0x5A827999+rol(v,5);w=rol(w,30);
  64 #define R2(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0x6ED9EBA1+rol(v,5);w=rol(w,30);
  65 #define R3(v,w,x,y,z,i) z+=(((w|x)&y)|(w&x))+blk(i)+0x8F1BBCDC+rol(v,5);w=rol(w,30);
  66 #define R4(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0xCA62C1D6+rol(v,5);w=rol(w,30);
  67
  68 static void SHA1Transform(uint32_t state[5],uint8_t const buffer[64])
  69 {
  70    uint32_t a,b,c,d,e;
  71    typedef union
  72    {
  73       uint8_t c[64];
  74       uint32_t l[16];
  75    }
  76    CHAR64LONG16;
  77    CHAR64LONG16 workspace, *block;
  78
  79    block = &workspace;
  80    memcpy(block,buffer,sizeof(workspace));
  81
  82    /* Copy context->state[] to working vars */
  83    a = state[0];
  84    b = state[1];
  85    c = state[2];
  86    d = state[3];
  87    e = state[4];
  88
  89    /* 4 rounds of 20 operations each. Loop unrolled. */
  90    R0(a,b,c,d,e,0);
  91    R0(e,a,b,c,d,1);
  92    R0(d,e,a,b,c,2);
  93    R0(c,d,e,a,b,3);
  94    R0(b,c,d,e,a,4);
  95    R0(a,b,c,d,e,5);
  96    R0(e,a,b,c,d,6);
  97    R0(d,e,a,b,c,7);
  98    R0(c,d,e,a,b,8);
  99    R0(b,c,d,e,a,9);
 100    R0(a,b,c,d,e,10);
 101    R0(e,a,b,c,d,11);
 102    R0(d,e,a,b,c,12);
 103    R0(c,d,e,a,b,13);
 104    R0(b,c,d,e,a,14);
 105    R0(a,b,c,d,e,15);
 106    R1(e,a,b,c,d,16);
 107    R1(d,e,a,b,c,17);
 108    R1(c,d,e,a,b,18);
 109    R1(b,c,d,e,a,19);
 110    R2(a,b,c,d,e,20);
 111    R2(e,a,b,c,d,21);
 112    R2(d,e,a,b,c,22);
 113    R2(c,d,e,a,b,23);
 114    R2(b,c,d,e,a,24);
 115    R2(a,b,c,d,e,25);
 116    R2(e,a,b,c,d,26);
 117    R2(d,e,a,b,c,27);
 118    R2(c,d,e,a,b,28);
 119    R2(b,c,d,e,a,29);
 120    R2(a,b,c,d,e,30);
 121    R2(e,a,b,c,d,31);
 122    R2(d,e,a,b,c,32);
 123    R2(c,d,e,a,b,33);
 124    R2(b,c,d,e,a,34);
 125    R2(a,b,c,d,e,35);
 126    R2(e,a,b,c,d,36);
 127    R2(d,e,a,b,c,37);
 128    R2(c,d,e,a,b,38);
 129    R2(b,c,d,e,a,39);
 130    R3(a,b,c,d,e,40);
 131    R3(e,a,b,c,d,41);
 132    R3(d,e,a,b,c,42);
 133    R3(c,d,e,a,b,43);
 134    R3(b,c,d,e,a,44);
 135    R3(a,b,c,d,e,45);
 136    R3(e,a,b,c,d,46);
 137    R3(d,e,a,b,c,47);
 138    R3(c,d,e,a,b,48);
 139    R3(b,c,d,e,a,49);
 140    R3(a,b,c,d,e,50);
 141    R3(e,a,b,c,d,51);
 142    R3(d,e,a,b,c,52);
 143    R3(c,d,e,a,b,53);
 144    R3(b,c,d,e,a,54);
 145    R3(a,b,c,d,e,55);
 146    R3(e,a,b,c,d,56);
 147    R3(d,e,a,b,c,57);
 148    R3(c,d,e,a,b,58);
 149    R3(b,c,d,e,a,59);
 150    R4(a,b,c,d,e,60);
 151    R4(e,a,b,c,d,61);
 152    R4(d,e,a,b,c,62);
 153    R4(c,d,e,a,b,63);
 154    R4(b,c,d,e,a,64);
 155    R4(a,b,c,d,e,65);
 156    R4(e,a,b,c,d,66);
 157    R4(d,e,a,b,c,67);
 158    R4(c,d,e,a,b,68);
 159    R4(b,c,d,e,a,69);
 160    R4(a,b,c,d,e,70);
 161    R4(e,a,b,c,d,71);
 162    R4(d,e,a,b,c,72);
 163    R4(c,d,e,a,b,73);
 164    R4(b,c,d,e,a,74);
 165    R4(a,b,c,d,e,75);
 166    R4(e,a,b,c,d,76);
 167    R4(d,e,a,b,c,77);
 168    R4(c,d,e,a,b,78);
 169    R4(b,c,d,e,a,79);
 170
 171    /* Add the working vars back into context.state[] */
 172    state[0] += a;
 173    state[1] += b;
 174    state[2] += c;
 175    state[3] += d;
 176    state[4] += e;
 177 }
 178                                                                         /*}}}*/
 179
 180 // SHA1Summation::SHA1Summation - Constructor                           /*{{{*/
 181 // ---------------------------------------------------------------------
 182 /* */
 183 SHA1Summation::SHA1Summation()
 184 {
 185    uint32_t *state = (uint32_t *)State;
 186    uint32_t *count = (uint32_t *)Count;
 187
 188    /* SHA1 initialization constants */
 189    state[0] = 0x67452301;
 190    state[1] = 0xEFCDAB89;
 191    state[2] = 0x98BADCFE;
 192    state[3] = 0x10325476;
 193    state[4] = 0xC3D2E1F0;
 194    count[0] = 0;
 195    count[1] = 0;
 196    Done = false;
 197 }
 198                                                                         /*}}}*/
 199 // SHA1Summation::Result - Return checksum value                        /*{{{*/
 200 // ---------------------------------------------------------------------
 201 /* Add() may not be called after this */
 202 SHA1SumValue SHA1Summation::Result()
 203 {
 204    uint32_t *state = (uint32_t *)State;
 205    uint32_t *count = (uint32_t *)Count;
 206
 207    // Apply the padding
 208    if (Done == false)
 209    {
 210       unsigned char finalcount[8];
 211
 212       for (unsigned i = 0; i < 8; i++)
 213       {
 214          // Endian independent
 215          finalcount[i] = (unsigned char) ((count[(i >= 4 ? 0 : 1)]
 216                                            >> ((3 - (i & 3)) * 8)) & 255);
 217       }
 218
 219       Add((unsigned char *) "\200",1);
 220       while ((count[0] & 504) != 448)
 221          Add((unsigned char *) "\0",1);
 222
 223       Add(finalcount,8);        /* Should cause a SHA1Transform() */
 224
 225    }
 226
 227    Done = true;
 228
 229    // Transfer over the result
 230    SHA1SumValue Value;
 231    unsigned char res[20];
 232    for (unsigned i = 0; i < 20; i++)
 233    {
 234       res[i] = (unsigned char)
 235          ((state[i >> 2] >> ((3 - (i & 3)) * 8)) & 255);
 236    }
 237    Value.Set(res);
 238    return Value;
 239 }
 240                                                                         /*}}}*/
 241 // SHA1Summation::Add - Adds content of buffer into the checksum        /*{{{*/
 242 // ---------------------------------------------------------------------
 243 /* May not be called after Result() is called */
 244 bool SHA1Summation::Add(const unsigned char *data,unsigned long len)
 245 {
 246    if (Done)
 247       return false;
 248
 249    uint32_t *state = (uint32_t *)State;
 250    uint32_t *count = (uint32_t *)Count;
 251    uint8_t *buffer = (uint8_t *)Buffer;
 252    uint32_t i,j;
 253
 254    j = (count[0] >> 3) & 63;
 255    if ((count[0] += len << 3) < (len << 3))
 256       count[1]++;
 257    count[1] += (len >> 29);
 258    if ((j + len) > 63)
 259    {
 260       memcpy(&buffer[j],data,(i = 64 - j));
 261       SHA1Transform(state,buffer);
 262       for (; i + 63 < len; i += 64)
 263       {
 264          SHA1Transform(state,&data[i]);
 265       }
 266       j = 0;
 267    }
 268    else
 269       i = 0;
 270    memcpy(&buffer[j],&data[i],len - i);
 271
 272    return true;
 273 }
 274                                                                         /*}}}*/