xref: /freebsd/crypto/libecc/src/hash/sha512-256.c (revision f0865ec9906d5a18fa2a3b61381f22ce16e606ad)
1*f0865ec9SKyle Evans /*
2*f0865ec9SKyle Evans  *  Copyright (C) 2017 - This file is part of libecc project
3*f0865ec9SKyle Evans  *
4*f0865ec9SKyle Evans  *  Authors:
5*f0865ec9SKyle Evans  *      Ryad BENADJILA <ryadbenadjila@gmail.com>
6*f0865ec9SKyle Evans  *      Arnaud EBALARD <arnaud.ebalard@ssi.gouv.fr>
7*f0865ec9SKyle Evans  *      Jean-Pierre FLORI <jean-pierre.flori@ssi.gouv.fr>
8*f0865ec9SKyle Evans  *
9*f0865ec9SKyle Evans  *  Contributors:
10*f0865ec9SKyle Evans  *      Nicolas VIVET <nicolas.vivet@ssi.gouv.fr>
11*f0865ec9SKyle Evans  *      Karim KHALFALLAH <karim.khalfallah@ssi.gouv.fr>
12*f0865ec9SKyle Evans  *
13*f0865ec9SKyle Evans  *  This software is licensed under a dual BSD and GPL v2 license.
14*f0865ec9SKyle Evans  *  See LICENSE file at the root folder of the project.
15*f0865ec9SKyle Evans  */
16*f0865ec9SKyle Evans #include <libecc/lib_ecc_config.h>
17*f0865ec9SKyle Evans #ifdef WITH_HASH_SHA512_256
18*f0865ec9SKyle Evans 
19*f0865ec9SKyle Evans #include <libecc/hash/sha512-256.h>
20*f0865ec9SKyle Evans 
21*f0865ec9SKyle Evans /* Init hash function. Returns 0 on success, -1 on error. */
sha512_256_init(sha512_256_context * ctx)22*f0865ec9SKyle Evans int sha512_256_init(sha512_256_context *ctx)
23*f0865ec9SKyle Evans {
24*f0865ec9SKyle Evans 	int ret;
25*f0865ec9SKyle Evans 
26*f0865ec9SKyle Evans 	MUST_HAVE((ctx != NULL), ret, err);
27*f0865ec9SKyle Evans 
28*f0865ec9SKyle Evans 	ctx->sha512_total[0] = ctx->sha512_total[1] = 0;
29*f0865ec9SKyle Evans 	ctx->sha512_state[0] = (u64)(0x22312194FC2BF72C);
30*f0865ec9SKyle Evans 	ctx->sha512_state[1] = (u64)(0x9F555FA3C84C64C2);
31*f0865ec9SKyle Evans 	ctx->sha512_state[2] = (u64)(0x2393B86B6F53B151);
32*f0865ec9SKyle Evans 	ctx->sha512_state[3] = (u64)(0x963877195940EABD);
33*f0865ec9SKyle Evans 	ctx->sha512_state[4] = (u64)(0x96283EE2A88EFFE3);
34*f0865ec9SKyle Evans 	ctx->sha512_state[5] = (u64)(0xBE5E1E2553863992);
35*f0865ec9SKyle Evans 	ctx->sha512_state[6] = (u64)(0x2B0199FC2C85B8AA);
36*f0865ec9SKyle Evans 	ctx->sha512_state[7] = (u64)(0x0EB72DDC81C52CA2);
37*f0865ec9SKyle Evans 
38*f0865ec9SKyle Evans 	/* Tell that we are initialized */
39*f0865ec9SKyle Evans 	ctx->magic = SHA512_256_HASH_MAGIC;
40*f0865ec9SKyle Evans 	ret = 0;
41*f0865ec9SKyle Evans 
42*f0865ec9SKyle Evans err:
43*f0865ec9SKyle Evans 	return ret;
44*f0865ec9SKyle Evans }
45*f0865ec9SKyle Evans 
46*f0865ec9SKyle Evans /* Update hash function. Returns 0 on success, -1 on error. */
sha512_256_update(sha512_256_context * ctx,const u8 * input,u32 ilen)47*f0865ec9SKyle Evans int sha512_256_update(sha512_256_context *ctx, const u8 *input, u32 ilen)
48*f0865ec9SKyle Evans {
49*f0865ec9SKyle Evans 	int ret;
50*f0865ec9SKyle Evans 
51*f0865ec9SKyle Evans 	SHA512_256_HASH_CHECK_INITIALIZED(ctx, ret, err);
52*f0865ec9SKyle Evans 
53*f0865ec9SKyle Evans 	ret = sha512_core_update(ctx, input, ilen);
54*f0865ec9SKyle Evans 
55*f0865ec9SKyle Evans err:
56*f0865ec9SKyle Evans 	return ret;
57*f0865ec9SKyle Evans }
58*f0865ec9SKyle Evans 
59*f0865ec9SKyle Evans /*
60*f0865ec9SKyle Evans  * Finalize hash function. Returns 0 on success, -1 on error.
61*f0865ec9SKyle Evans  */
sha512_256_final(sha512_256_context * ctx,u8 output[SHA512_256_DIGEST_SIZE])62*f0865ec9SKyle Evans int sha512_256_final(sha512_256_context *ctx, u8 output[SHA512_256_DIGEST_SIZE])
63*f0865ec9SKyle Evans {
64*f0865ec9SKyle Evans 	int ret;
65*f0865ec9SKyle Evans 
66*f0865ec9SKyle Evans 	SHA512_256_HASH_CHECK_INITIALIZED(ctx, ret, err);
67*f0865ec9SKyle Evans 	ret = sha512_core_final(ctx, output, SHA512_256_DIGEST_SIZE); EG(ret, err);
68*f0865ec9SKyle Evans 
69*f0865ec9SKyle Evans 	ctx->magic = WORD(0);
70*f0865ec9SKyle Evans 	ret = 0;
71*f0865ec9SKyle Evans 
72*f0865ec9SKyle Evans err:
73*f0865ec9SKyle Evans 	return ret;
74*f0865ec9SKyle Evans }
75*f0865ec9SKyle Evans 
76*f0865ec9SKyle Evans /*
77*f0865ec9SKyle Evans  * Scattered version performing init/update/finalize on a vector of buffers
78*f0865ec9SKyle Evans  * 'inputs' with the length of each buffer passed via 'ilens'. The function
79*f0865ec9SKyle Evans  * loops on pointers in 'inputs' until it finds a NULL pointer. The function
80*f0865ec9SKyle Evans  * returns 0 on success, -1 on error.
81*f0865ec9SKyle Evans  */
sha512_256_scattered(const u8 ** inputs,const u32 * ilens,u8 output[SHA512_256_DIGEST_SIZE])82*f0865ec9SKyle Evans int sha512_256_scattered(const u8 **inputs, const u32 *ilens,
83*f0865ec9SKyle Evans 		      u8 output[SHA512_256_DIGEST_SIZE])
84*f0865ec9SKyle Evans {
85*f0865ec9SKyle Evans 	sha512_256_context ctx;
86*f0865ec9SKyle Evans 	int pos = 0;
87*f0865ec9SKyle Evans 	int ret;
88*f0865ec9SKyle Evans 
89*f0865ec9SKyle Evans 	MUST_HAVE((inputs != NULL) && (ilens != NULL) && (output != NULL), ret, err);
90*f0865ec9SKyle Evans 
91*f0865ec9SKyle Evans 	ret = sha512_256_init(&ctx); EG(ret, err);
92*f0865ec9SKyle Evans 
93*f0865ec9SKyle Evans 	while (inputs[pos] != NULL) {
94*f0865ec9SKyle Evans 		ret = sha512_256_update(&ctx, inputs[pos], ilens[pos]); EG(ret, err);
95*f0865ec9SKyle Evans 		pos += 1;
96*f0865ec9SKyle Evans 	}
97*f0865ec9SKyle Evans 
98*f0865ec9SKyle Evans 	ret = sha512_256_final(&ctx, output);
99*f0865ec9SKyle Evans 
100*f0865ec9SKyle Evans err:
101*f0865ec9SKyle Evans 	return ret;
102*f0865ec9SKyle Evans }
103*f0865ec9SKyle Evans 
104*f0865ec9SKyle Evans /* init/update/finalize on a single buffer 'input' of length 'ilen'. */
sha512_256(const u8 * input,u32 ilen,u8 output[SHA512_256_DIGEST_SIZE])105*f0865ec9SKyle Evans int sha512_256(const u8 *input, u32 ilen, u8 output[SHA512_256_DIGEST_SIZE])
106*f0865ec9SKyle Evans {
107*f0865ec9SKyle Evans 	sha512_256_context ctx;
108*f0865ec9SKyle Evans 	int ret;
109*f0865ec9SKyle Evans 
110*f0865ec9SKyle Evans 	ret = sha512_256_init(&ctx); EG(ret, err);
111*f0865ec9SKyle Evans 	ret = sha512_256_update(&ctx, input, ilen); EG(ret, err);
112*f0865ec9SKyle Evans 	ret = sha512_256_final(&ctx, output);
113*f0865ec9SKyle Evans 
114*f0865ec9SKyle Evans err:
115*f0865ec9SKyle Evans 	return ret;
116*f0865ec9SKyle Evans }
117*f0865ec9SKyle Evans 
118*f0865ec9SKyle Evans #else /* WITH_HASH_SHA512_256 */
119*f0865ec9SKyle Evans 
120*f0865ec9SKyle Evans /*
121*f0865ec9SKyle Evans  * Dummy definition to avoid the empty translation unit ISO C warning
122*f0865ec9SKyle Evans  */
123*f0865ec9SKyle Evans typedef int dummy;
124*f0865ec9SKyle Evans #endif /* WITH_HASH_SHA512_256 */
125