xref: /freebsd/crypto/libecc/src/hash/sha512.c (revision f0865ec9906d5a18fa2a3b61381f22ce16e606ad)
1*f0865ec9SKyle Evans /*
2*f0865ec9SKyle Evans  *  Copyright (C) 2017 - This file is part of libecc project
3*f0865ec9SKyle Evans  *
4*f0865ec9SKyle Evans  *  Authors:
5*f0865ec9SKyle Evans  *      Ryad BENADJILA <ryadbenadjila@gmail.com>
6*f0865ec9SKyle Evans  *      Arnaud EBALARD <arnaud.ebalard@ssi.gouv.fr>
7*f0865ec9SKyle Evans  *      Jean-Pierre FLORI <jean-pierre.flori@ssi.gouv.fr>
8*f0865ec9SKyle Evans  *
9*f0865ec9SKyle Evans  *  Contributors:
10*f0865ec9SKyle Evans  *      Nicolas VIVET <nicolas.vivet@ssi.gouv.fr>
11*f0865ec9SKyle Evans  *      Karim KHALFALLAH <karim.khalfallah@ssi.gouv.fr>
12*f0865ec9SKyle Evans  *
13*f0865ec9SKyle Evans  *  This software is licensed under a dual BSD and GPL v2 license.
14*f0865ec9SKyle Evans  *  See LICENSE file at the root folder of the project.
15*f0865ec9SKyle Evans  */
16*f0865ec9SKyle Evans #include <libecc/lib_ecc_config.h>
17*f0865ec9SKyle Evans #ifdef WITH_HASH_SHA512
18*f0865ec9SKyle Evans 
19*f0865ec9SKyle Evans #include <libecc/hash/sha512.h>
20*f0865ec9SKyle Evans 
21*f0865ec9SKyle Evans /* Init hash function. Returns 0 on success, -1 on error. */
sha512_init(sha512_context * ctx)22*f0865ec9SKyle Evans int sha512_init(sha512_context *ctx)
23*f0865ec9SKyle Evans {
24*f0865ec9SKyle Evans 	int ret;
25*f0865ec9SKyle Evans 
26*f0865ec9SKyle Evans 	MUST_HAVE((ctx != NULL), ret, err);
27*f0865ec9SKyle Evans 
28*f0865ec9SKyle Evans 	ctx->sha512_total[0] = ctx->sha512_total[1] = 0;
29*f0865ec9SKyle Evans 	ctx->sha512_state[0] = (u64)(0x6A09E667F3BCC908);
30*f0865ec9SKyle Evans 	ctx->sha512_state[1] = (u64)(0xBB67AE8584CAA73B);
31*f0865ec9SKyle Evans 	ctx->sha512_state[2] = (u64)(0x3C6EF372FE94F82B);
32*f0865ec9SKyle Evans 	ctx->sha512_state[3] = (u64)(0xA54FF53A5F1D36F1);
33*f0865ec9SKyle Evans 	ctx->sha512_state[4] = (u64)(0x510E527FADE682D1);
34*f0865ec9SKyle Evans 	ctx->sha512_state[5] = (u64)(0x9B05688C2B3E6C1F);
35*f0865ec9SKyle Evans 	ctx->sha512_state[6] = (u64)(0x1F83D9ABFB41BD6B);
36*f0865ec9SKyle Evans 	ctx->sha512_state[7] = (u64)(0x5BE0CD19137E2179);
37*f0865ec9SKyle Evans 
38*f0865ec9SKyle Evans 	/* Tell that we are initialized */
39*f0865ec9SKyle Evans 	ctx->magic = SHA512_HASH_MAGIC;
40*f0865ec9SKyle Evans 	ret = 0;
41*f0865ec9SKyle Evans 
42*f0865ec9SKyle Evans err:
43*f0865ec9SKyle Evans 	return ret;
44*f0865ec9SKyle Evans }
45*f0865ec9SKyle Evans 
46*f0865ec9SKyle Evans /* Update hash function. Returns 0 on success, -1 on error. */
sha512_update(sha512_context * ctx,const u8 * input,u32 ilen)47*f0865ec9SKyle Evans int sha512_update(sha512_context *ctx, const u8 *input, u32 ilen)
48*f0865ec9SKyle Evans {
49*f0865ec9SKyle Evans 	int ret;
50*f0865ec9SKyle Evans 
51*f0865ec9SKyle Evans 	SHA512_HASH_CHECK_INITIALIZED(ctx, ret, err);
52*f0865ec9SKyle Evans 
53*f0865ec9SKyle Evans 	ret = sha512_core_update(ctx, input, ilen);
54*f0865ec9SKyle Evans 
55*f0865ec9SKyle Evans err:
56*f0865ec9SKyle Evans 	return ret;
57*f0865ec9SKyle Evans }
58*f0865ec9SKyle Evans 
59*f0865ec9SKyle Evans /*
60*f0865ec9SKyle Evans  * Finalize hash function. Returns 0 on success, -1 on error. */
sha512_final(sha512_context * ctx,u8 output[SHA512_DIGEST_SIZE])61*f0865ec9SKyle Evans int sha512_final(sha512_context *ctx, u8 output[SHA512_DIGEST_SIZE])
62*f0865ec9SKyle Evans {
63*f0865ec9SKyle Evans 	int ret;
64*f0865ec9SKyle Evans 
65*f0865ec9SKyle Evans 	SHA512_HASH_CHECK_INITIALIZED(ctx, ret, err);
66*f0865ec9SKyle Evans 
67*f0865ec9SKyle Evans 	ret = sha512_core_final(ctx, output, SHA512_DIGEST_SIZE); EG(ret, err);
68*f0865ec9SKyle Evans 
69*f0865ec9SKyle Evans 	/* Tell that we are uninitialized */
70*f0865ec9SKyle Evans 	ctx->magic = WORD(0);
71*f0865ec9SKyle Evans 	ret = 0;
72*f0865ec9SKyle Evans 
73*f0865ec9SKyle Evans err:
74*f0865ec9SKyle Evans 	return ret;
75*f0865ec9SKyle Evans }
76*f0865ec9SKyle Evans 
77*f0865ec9SKyle Evans /*
78*f0865ec9SKyle Evans  * Scattered version performing init/update/finalize on a vector of buffers
79*f0865ec9SKyle Evans  * 'inputs' with the length of each buffer passed via 'ilens'. The function
80*f0865ec9SKyle Evans  * loops on pointers in 'inputs' until it finds a NULL pointer. The function
81*f0865ec9SKyle Evans  * returns 0 on success, -1 on error.
82*f0865ec9SKyle Evans  */
sha512_scattered(const u8 ** inputs,const u32 * ilens,u8 output[SHA512_DIGEST_SIZE])83*f0865ec9SKyle Evans int sha512_scattered(const u8 **inputs, const u32 *ilens,
84*f0865ec9SKyle Evans 		      u8 output[SHA512_DIGEST_SIZE])
85*f0865ec9SKyle Evans {
86*f0865ec9SKyle Evans 	sha512_context ctx;
87*f0865ec9SKyle Evans 	int pos = 0;
88*f0865ec9SKyle Evans 	int ret;
89*f0865ec9SKyle Evans 
90*f0865ec9SKyle Evans 	MUST_HAVE((inputs != NULL) && (ilens != NULL) && (output != NULL), ret, err);
91*f0865ec9SKyle Evans 
92*f0865ec9SKyle Evans 	ret = sha512_init(&ctx); EG(ret, err);
93*f0865ec9SKyle Evans 
94*f0865ec9SKyle Evans 	while (inputs[pos] != NULL) {
95*f0865ec9SKyle Evans 		ret = sha512_update(&ctx, inputs[pos], ilens[pos]); EG(ret, err);
96*f0865ec9SKyle Evans 		pos += 1;
97*f0865ec9SKyle Evans 	}
98*f0865ec9SKyle Evans 
99*f0865ec9SKyle Evans 	ret = sha512_final(&ctx, output);
100*f0865ec9SKyle Evans 
101*f0865ec9SKyle Evans err:
102*f0865ec9SKyle Evans 	return ret;
103*f0865ec9SKyle Evans }
104*f0865ec9SKyle Evans 
105*f0865ec9SKyle Evans /* init/update/finalize on a single buffer 'input' of length 'ilen'. */
sha512(const u8 * input,u32 ilen,u8 output[SHA512_DIGEST_SIZE])106*f0865ec9SKyle Evans int sha512(const u8 *input, u32 ilen, u8 output[SHA512_DIGEST_SIZE])
107*f0865ec9SKyle Evans {
108*f0865ec9SKyle Evans 	sha512_context ctx;
109*f0865ec9SKyle Evans 	int ret;
110*f0865ec9SKyle Evans 
111*f0865ec9SKyle Evans 	ret = sha512_init(&ctx); EG(ret, err);
112*f0865ec9SKyle Evans 	ret = sha512_update(&ctx, input, ilen); EG(ret, err);
113*f0865ec9SKyle Evans 	ret = sha512_final(&ctx, output);
114*f0865ec9SKyle Evans 
115*f0865ec9SKyle Evans err:
116*f0865ec9SKyle Evans 	return ret;
117*f0865ec9SKyle Evans }
118*f0865ec9SKyle Evans 
119*f0865ec9SKyle Evans #else /* WITH_HASH_SHA512 */
120*f0865ec9SKyle Evans 
121*f0865ec9SKyle Evans /*
122*f0865ec9SKyle Evans  * Dummy definition to avoid the empty translation unit ISO C warning
123*f0865ec9SKyle Evans  */
124*f0865ec9SKyle Evans typedef int dummy;
125*f0865ec9SKyle Evans #endif /* WITH_HASH_SHA512 */
126