A library for setting up Secure Socket Layer (SSL) connections and verifying remote hosts using certificates. Contains only the source files for mbed platform implementation of the library.
Dependents: HTTPClient-SSL HTTPClient-SSL HTTPClient-SSL HTTPClient-SSL
ctaocrypt/src/sha256.c@6:cf58d49e1a86, 2015-03-23 (annotated)
- Committer:
- Mike Fiore
- Date:
- Mon Mar 23 16:51:07 2015 -0500
- Revision:
- 6:cf58d49e1a86
- Parent:
- 0:b86d15c6ba29
fix whitespace in sha512.c
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
Vanger | 0:b86d15c6ba29 | 1 | /* sha256.c |
Vanger | 0:b86d15c6ba29 | 2 | * |
Vanger | 0:b86d15c6ba29 | 3 | * Copyright (C) 2006-2014 wolfSSL Inc. |
Vanger | 0:b86d15c6ba29 | 4 | * |
Vanger | 0:b86d15c6ba29 | 5 | * This file is part of CyaSSL. |
Vanger | 0:b86d15c6ba29 | 6 | * |
Vanger | 0:b86d15c6ba29 | 7 | * CyaSSL is free software; you can redistribute it and/or modify |
Vanger | 0:b86d15c6ba29 | 8 | * it under the terms of the GNU General Public License as published by |
Vanger | 0:b86d15c6ba29 | 9 | * the Free Software Foundation; either version 2 of the License, or |
Vanger | 0:b86d15c6ba29 | 10 | * (at your option) any later version. |
Vanger | 0:b86d15c6ba29 | 11 | * |
Vanger | 0:b86d15c6ba29 | 12 | * CyaSSL is distributed in the hope that it will be useful, |
Vanger | 0:b86d15c6ba29 | 13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
Vanger | 0:b86d15c6ba29 | 14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
Vanger | 0:b86d15c6ba29 | 15 | * GNU General Public License for more details. |
Vanger | 0:b86d15c6ba29 | 16 | * |
Vanger | 0:b86d15c6ba29 | 17 | * You should have received a copy of the GNU General Public License |
Vanger | 0:b86d15c6ba29 | 18 | * along with this program; if not, write to the Free Software |
Vanger | 0:b86d15c6ba29 | 19 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA |
Vanger | 0:b86d15c6ba29 | 20 | */ |
Vanger | 0:b86d15c6ba29 | 21 | |
Vanger | 0:b86d15c6ba29 | 22 | |
Vanger | 0:b86d15c6ba29 | 23 | /* code submitted by raphael.huck@efixo.com */ |
Vanger | 0:b86d15c6ba29 | 24 | |
Vanger | 0:b86d15c6ba29 | 25 | #ifdef HAVE_CONFIG_H |
Vanger | 0:b86d15c6ba29 | 26 | #include <config.h> |
Vanger | 0:b86d15c6ba29 | 27 | #endif |
Vanger | 0:b86d15c6ba29 | 28 | |
Vanger | 0:b86d15c6ba29 | 29 | #include <cyassl/ctaocrypt/settings.h> |
Vanger | 0:b86d15c6ba29 | 30 | |
Vanger | 0:b86d15c6ba29 | 31 | #if !defined(NO_SHA256) |
Vanger | 0:b86d15c6ba29 | 32 | |
Vanger | 0:b86d15c6ba29 | 33 | #ifdef CYASSL_PIC32MZ_HASH |
Vanger | 0:b86d15c6ba29 | 34 | #define InitSha256 InitSha256_sw |
Vanger | 0:b86d15c6ba29 | 35 | #define Sha256Update Sha256Update_sw |
Vanger | 0:b86d15c6ba29 | 36 | #define Sha256Final Sha256Final_sw |
Vanger | 0:b86d15c6ba29 | 37 | #endif |
Vanger | 0:b86d15c6ba29 | 38 | |
Vanger | 0:b86d15c6ba29 | 39 | #ifdef HAVE_FIPS |
Vanger | 0:b86d15c6ba29 | 40 | /* set NO_WRAPPERS before headers, use direct internal f()s not wrappers */ |
Vanger | 0:b86d15c6ba29 | 41 | #define FIPS_NO_WRAPPERS |
Vanger | 0:b86d15c6ba29 | 42 | #endif |
Vanger | 0:b86d15c6ba29 | 43 | |
Vanger | 0:b86d15c6ba29 | 44 | #include <cyassl/ctaocrypt/sha256.h> |
Vanger | 0:b86d15c6ba29 | 45 | #include <cyassl/ctaocrypt/logging.h> |
Vanger | 0:b86d15c6ba29 | 46 | #include <cyassl/ctaocrypt/error-crypt.h> |
Vanger | 0:b86d15c6ba29 | 47 | |
Vanger | 0:b86d15c6ba29 | 48 | #ifdef NO_INLINE |
Vanger | 0:b86d15c6ba29 | 49 | #include <cyassl/ctaocrypt/misc.h> |
Vanger | 0:b86d15c6ba29 | 50 | #else |
Vanger | 0:b86d15c6ba29 | 51 | #include <ctaocrypt/src/misc.c> |
Vanger | 0:b86d15c6ba29 | 52 | #endif |
Vanger | 0:b86d15c6ba29 | 53 | |
Vanger | 0:b86d15c6ba29 | 54 | #ifdef FREESCALE_MMCAU |
Vanger | 0:b86d15c6ba29 | 55 | #include "cau_api.h" |
Vanger | 0:b86d15c6ba29 | 56 | #endif |
Vanger | 0:b86d15c6ba29 | 57 | |
Vanger | 0:b86d15c6ba29 | 58 | #ifndef min |
Vanger | 0:b86d15c6ba29 | 59 | |
Vanger | 0:b86d15c6ba29 | 60 | static INLINE word32 min(word32 a, word32 b) |
Vanger | 0:b86d15c6ba29 | 61 | { |
Vanger | 0:b86d15c6ba29 | 62 | return a > b ? b : a; |
Vanger | 0:b86d15c6ba29 | 63 | } |
Vanger | 0:b86d15c6ba29 | 64 | |
Vanger | 0:b86d15c6ba29 | 65 | #endif /* min */ |
Vanger | 0:b86d15c6ba29 | 66 | |
Vanger | 0:b86d15c6ba29 | 67 | |
Vanger | 0:b86d15c6ba29 | 68 | int InitSha256(Sha256* sha256) |
Vanger | 0:b86d15c6ba29 | 69 | { |
Vanger | 0:b86d15c6ba29 | 70 | #ifdef FREESCALE_MMCAU |
Vanger | 0:b86d15c6ba29 | 71 | cau_sha256_initialize_output(sha256->digest); |
Vanger | 0:b86d15c6ba29 | 72 | #else |
Vanger | 0:b86d15c6ba29 | 73 | sha256->digest[0] = 0x6A09E667L; |
Vanger | 0:b86d15c6ba29 | 74 | sha256->digest[1] = 0xBB67AE85L; |
Vanger | 0:b86d15c6ba29 | 75 | sha256->digest[2] = 0x3C6EF372L; |
Vanger | 0:b86d15c6ba29 | 76 | sha256->digest[3] = 0xA54FF53AL; |
Vanger | 0:b86d15c6ba29 | 77 | sha256->digest[4] = 0x510E527FL; |
Vanger | 0:b86d15c6ba29 | 78 | sha256->digest[5] = 0x9B05688CL; |
Vanger | 0:b86d15c6ba29 | 79 | sha256->digest[6] = 0x1F83D9ABL; |
Vanger | 0:b86d15c6ba29 | 80 | sha256->digest[7] = 0x5BE0CD19L; |
Vanger | 0:b86d15c6ba29 | 81 | #endif |
Vanger | 0:b86d15c6ba29 | 82 | |
Vanger | 0:b86d15c6ba29 | 83 | sha256->buffLen = 0; |
Vanger | 0:b86d15c6ba29 | 84 | sha256->loLen = 0; |
Vanger | 0:b86d15c6ba29 | 85 | sha256->hiLen = 0; |
Vanger | 0:b86d15c6ba29 | 86 | |
Vanger | 0:b86d15c6ba29 | 87 | return 0; |
Vanger | 0:b86d15c6ba29 | 88 | } |
Vanger | 0:b86d15c6ba29 | 89 | |
Vanger | 0:b86d15c6ba29 | 90 | #ifdef FREESCALE_MMCAU |
Vanger | 0:b86d15c6ba29 | 91 | #define XTRANSFORM(S,B) Transform((S), (B)) |
Vanger | 0:b86d15c6ba29 | 92 | |
Vanger | 0:b86d15c6ba29 | 93 | static int Transform(Sha256* sha256, byte* buf) |
Vanger | 0:b86d15c6ba29 | 94 | { |
Vanger | 0:b86d15c6ba29 | 95 | cau_sha256_hash_n(buf, 1, sha256->digest); |
Vanger | 0:b86d15c6ba29 | 96 | |
Vanger | 0:b86d15c6ba29 | 97 | return 0; |
Vanger | 0:b86d15c6ba29 | 98 | } |
Vanger | 0:b86d15c6ba29 | 99 | |
Vanger | 0:b86d15c6ba29 | 100 | #else |
Vanger | 0:b86d15c6ba29 | 101 | #define XTRANSFORM(S,B) Transform((S)) |
Vanger | 0:b86d15c6ba29 | 102 | |
Vanger | 0:b86d15c6ba29 | 103 | static const word32 K[64] = { |
Vanger | 0:b86d15c6ba29 | 104 | 0x428A2F98L, 0x71374491L, 0xB5C0FBCFL, 0xE9B5DBA5L, 0x3956C25BL, |
Vanger | 0:b86d15c6ba29 | 105 | 0x59F111F1L, 0x923F82A4L, 0xAB1C5ED5L, 0xD807AA98L, 0x12835B01L, |
Vanger | 0:b86d15c6ba29 | 106 | 0x243185BEL, 0x550C7DC3L, 0x72BE5D74L, 0x80DEB1FEL, 0x9BDC06A7L, |
Vanger | 0:b86d15c6ba29 | 107 | 0xC19BF174L, 0xE49B69C1L, 0xEFBE4786L, 0x0FC19DC6L, 0x240CA1CCL, |
Vanger | 0:b86d15c6ba29 | 108 | 0x2DE92C6FL, 0x4A7484AAL, 0x5CB0A9DCL, 0x76F988DAL, 0x983E5152L, |
Vanger | 0:b86d15c6ba29 | 109 | 0xA831C66DL, 0xB00327C8L, 0xBF597FC7L, 0xC6E00BF3L, 0xD5A79147L, |
Vanger | 0:b86d15c6ba29 | 110 | 0x06CA6351L, 0x14292967L, 0x27B70A85L, 0x2E1B2138L, 0x4D2C6DFCL, |
Vanger | 0:b86d15c6ba29 | 111 | 0x53380D13L, 0x650A7354L, 0x766A0ABBL, 0x81C2C92EL, 0x92722C85L, |
Vanger | 0:b86d15c6ba29 | 112 | 0xA2BFE8A1L, 0xA81A664BL, 0xC24B8B70L, 0xC76C51A3L, 0xD192E819L, |
Vanger | 0:b86d15c6ba29 | 113 | 0xD6990624L, 0xF40E3585L, 0x106AA070L, 0x19A4C116L, 0x1E376C08L, |
Vanger | 0:b86d15c6ba29 | 114 | 0x2748774CL, 0x34B0BCB5L, 0x391C0CB3L, 0x4ED8AA4AL, 0x5B9CCA4FL, |
Vanger | 0:b86d15c6ba29 | 115 | 0x682E6FF3L, 0x748F82EEL, 0x78A5636FL, 0x84C87814L, 0x8CC70208L, |
Vanger | 0:b86d15c6ba29 | 116 | 0x90BEFFFAL, 0xA4506CEBL, 0xBEF9A3F7L, 0xC67178F2L |
Vanger | 0:b86d15c6ba29 | 117 | }; |
Vanger | 0:b86d15c6ba29 | 118 | |
Vanger | 0:b86d15c6ba29 | 119 | #define Ch(x,y,z) (z ^ (x & (y ^ z))) |
Vanger | 0:b86d15c6ba29 | 120 | #define Maj(x,y,z) (((x | y) & z) | (x & y)) |
Vanger | 0:b86d15c6ba29 | 121 | #define S(x, n) rotrFixed(x, n) |
Vanger | 0:b86d15c6ba29 | 122 | #define R(x, n) (((x)&0xFFFFFFFFU)>>(n)) |
Vanger | 0:b86d15c6ba29 | 123 | #define Sigma0(x) (S(x, 2) ^ S(x, 13) ^ S(x, 22)) |
Vanger | 0:b86d15c6ba29 | 124 | #define Sigma1(x) (S(x, 6) ^ S(x, 11) ^ S(x, 25)) |
Vanger | 0:b86d15c6ba29 | 125 | #define Gamma0(x) (S(x, 7) ^ S(x, 18) ^ R(x, 3)) |
Vanger | 0:b86d15c6ba29 | 126 | #define Gamma1(x) (S(x, 17) ^ S(x, 19) ^ R(x, 10)) |
Vanger | 0:b86d15c6ba29 | 127 | |
Vanger | 0:b86d15c6ba29 | 128 | #define RND(a,b,c,d,e,f,g,h,i) \ |
Vanger | 0:b86d15c6ba29 | 129 | t0 = h + Sigma1(e) + Ch(e, f, g) + K[i] + W[i]; \ |
Vanger | 0:b86d15c6ba29 | 130 | t1 = Sigma0(a) + Maj(a, b, c); \ |
Vanger | 0:b86d15c6ba29 | 131 | d += t0; \ |
Vanger | 0:b86d15c6ba29 | 132 | h = t0 + t1; |
Vanger | 0:b86d15c6ba29 | 133 | |
Vanger | 0:b86d15c6ba29 | 134 | |
Vanger | 0:b86d15c6ba29 | 135 | static int Transform(Sha256* sha256) |
Vanger | 0:b86d15c6ba29 | 136 | { |
Vanger | 0:b86d15c6ba29 | 137 | word32 S[8], t0, t1; |
Vanger | 0:b86d15c6ba29 | 138 | int i; |
Vanger | 0:b86d15c6ba29 | 139 | |
Vanger | 0:b86d15c6ba29 | 140 | #ifdef CYASSL_SMALL_STACK |
Vanger | 0:b86d15c6ba29 | 141 | word32* W; |
Vanger | 0:b86d15c6ba29 | 142 | |
Vanger | 0:b86d15c6ba29 | 143 | W = (word32*) XMALLOC(sizeof(word32) * 64, NULL, DYNAMIC_TYPE_TMP_BUFFER); |
Vanger | 0:b86d15c6ba29 | 144 | if (W == NULL) |
Vanger | 0:b86d15c6ba29 | 145 | return MEMORY_E; |
Vanger | 0:b86d15c6ba29 | 146 | #else |
Vanger | 0:b86d15c6ba29 | 147 | word32 W[64]; |
Vanger | 0:b86d15c6ba29 | 148 | #endif |
Vanger | 0:b86d15c6ba29 | 149 | |
Vanger | 0:b86d15c6ba29 | 150 | /* Copy context->state[] to working vars */ |
Vanger | 0:b86d15c6ba29 | 151 | for (i = 0; i < 8; i++) |
Vanger | 0:b86d15c6ba29 | 152 | S[i] = sha256->digest[i]; |
Vanger | 0:b86d15c6ba29 | 153 | |
Vanger | 0:b86d15c6ba29 | 154 | for (i = 0; i < 16; i++) |
Vanger | 0:b86d15c6ba29 | 155 | W[i] = sha256->buffer[i]; |
Vanger | 0:b86d15c6ba29 | 156 | |
Vanger | 0:b86d15c6ba29 | 157 | for (i = 16; i < 64; i++) |
Vanger | 0:b86d15c6ba29 | 158 | W[i] = Gamma1(W[i-2]) + W[i-7] + Gamma0(W[i-15]) + W[i-16]; |
Vanger | 0:b86d15c6ba29 | 159 | |
Vanger | 0:b86d15c6ba29 | 160 | for (i = 0; i < 64; i += 8) { |
Vanger | 0:b86d15c6ba29 | 161 | RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],i+0); |
Vanger | 0:b86d15c6ba29 | 162 | RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],i+1); |
Vanger | 0:b86d15c6ba29 | 163 | RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],i+2); |
Vanger | 0:b86d15c6ba29 | 164 | RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],i+3); |
Vanger | 0:b86d15c6ba29 | 165 | RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],i+4); |
Vanger | 0:b86d15c6ba29 | 166 | RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],i+5); |
Vanger | 0:b86d15c6ba29 | 167 | RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],i+6); |
Vanger | 0:b86d15c6ba29 | 168 | RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],i+7); |
Vanger | 0:b86d15c6ba29 | 169 | } |
Vanger | 0:b86d15c6ba29 | 170 | |
Vanger | 0:b86d15c6ba29 | 171 | /* Add the working vars back into digest state[] */ |
Vanger | 0:b86d15c6ba29 | 172 | for (i = 0; i < 8; i++) { |
Vanger | 0:b86d15c6ba29 | 173 | sha256->digest[i] += S[i]; |
Vanger | 0:b86d15c6ba29 | 174 | } |
Vanger | 0:b86d15c6ba29 | 175 | |
Vanger | 0:b86d15c6ba29 | 176 | #ifdef CYASSL_SMALL_STACK |
Vanger | 0:b86d15c6ba29 | 177 | XFREE(W, NULL, DYNAMIC_TYPE_TMP_BUFFER); |
Vanger | 0:b86d15c6ba29 | 178 | #endif |
Vanger | 0:b86d15c6ba29 | 179 | |
Vanger | 0:b86d15c6ba29 | 180 | return 0; |
Vanger | 0:b86d15c6ba29 | 181 | } |
Vanger | 0:b86d15c6ba29 | 182 | |
Vanger | 0:b86d15c6ba29 | 183 | #endif /* FREESCALE_MMCAU */ |
Vanger | 0:b86d15c6ba29 | 184 | |
Vanger | 0:b86d15c6ba29 | 185 | |
Vanger | 0:b86d15c6ba29 | 186 | static INLINE void AddLength(Sha256* sha256, word32 len) |
Vanger | 0:b86d15c6ba29 | 187 | { |
Vanger | 0:b86d15c6ba29 | 188 | word32 tmp = sha256->loLen; |
Vanger | 0:b86d15c6ba29 | 189 | if ( (sha256->loLen += len) < tmp) |
Vanger | 0:b86d15c6ba29 | 190 | sha256->hiLen++; /* carry low to high */ |
Vanger | 0:b86d15c6ba29 | 191 | } |
Vanger | 0:b86d15c6ba29 | 192 | |
Vanger | 0:b86d15c6ba29 | 193 | |
Vanger | 0:b86d15c6ba29 | 194 | int Sha256Update(Sha256* sha256, const byte* data, word32 len) |
Vanger | 0:b86d15c6ba29 | 195 | { |
Vanger | 0:b86d15c6ba29 | 196 | /* do block size increments */ |
Vanger | 0:b86d15c6ba29 | 197 | byte* local = (byte*)sha256->buffer; |
Vanger | 0:b86d15c6ba29 | 198 | |
Vanger | 0:b86d15c6ba29 | 199 | while (len) { |
Vanger | 0:b86d15c6ba29 | 200 | word32 add = min(len, SHA256_BLOCK_SIZE - sha256->buffLen); |
Vanger | 0:b86d15c6ba29 | 201 | XMEMCPY(&local[sha256->buffLen], data, add); |
Vanger | 0:b86d15c6ba29 | 202 | |
Vanger | 0:b86d15c6ba29 | 203 | sha256->buffLen += add; |
Vanger | 0:b86d15c6ba29 | 204 | data += add; |
Vanger | 0:b86d15c6ba29 | 205 | len -= add; |
Vanger | 0:b86d15c6ba29 | 206 | |
Vanger | 0:b86d15c6ba29 | 207 | if (sha256->buffLen == SHA256_BLOCK_SIZE) { |
Vanger | 0:b86d15c6ba29 | 208 | int ret; |
Vanger | 0:b86d15c6ba29 | 209 | |
Vanger | 0:b86d15c6ba29 | 210 | #if defined(LITTLE_ENDIAN_ORDER) && !defined(FREESCALE_MMCAU) |
Vanger | 0:b86d15c6ba29 | 211 | ByteReverseWords(sha256->buffer, sha256->buffer, |
Vanger | 0:b86d15c6ba29 | 212 | SHA256_BLOCK_SIZE); |
Vanger | 0:b86d15c6ba29 | 213 | #endif |
Vanger | 0:b86d15c6ba29 | 214 | |
Vanger | 0:b86d15c6ba29 | 215 | ret = XTRANSFORM(sha256, local); |
Vanger | 0:b86d15c6ba29 | 216 | if (ret != 0) |
Vanger | 0:b86d15c6ba29 | 217 | return ret; |
Vanger | 0:b86d15c6ba29 | 218 | |
Vanger | 0:b86d15c6ba29 | 219 | AddLength(sha256, SHA256_BLOCK_SIZE); |
Vanger | 0:b86d15c6ba29 | 220 | sha256->buffLen = 0; |
Vanger | 0:b86d15c6ba29 | 221 | } |
Vanger | 0:b86d15c6ba29 | 222 | } |
Vanger | 0:b86d15c6ba29 | 223 | |
Vanger | 0:b86d15c6ba29 | 224 | return 0; |
Vanger | 0:b86d15c6ba29 | 225 | } |
Vanger | 0:b86d15c6ba29 | 226 | |
Vanger | 0:b86d15c6ba29 | 227 | |
Vanger | 0:b86d15c6ba29 | 228 | int Sha256Final(Sha256* sha256, byte* hash) |
Vanger | 0:b86d15c6ba29 | 229 | { |
Vanger | 0:b86d15c6ba29 | 230 | byte* local = (byte*)sha256->buffer; |
Vanger | 0:b86d15c6ba29 | 231 | int ret; |
Vanger | 0:b86d15c6ba29 | 232 | |
Vanger | 0:b86d15c6ba29 | 233 | AddLength(sha256, sha256->buffLen); /* before adding pads */ |
Vanger | 0:b86d15c6ba29 | 234 | |
Vanger | 0:b86d15c6ba29 | 235 | local[sha256->buffLen++] = 0x80; /* add 1 */ |
Vanger | 0:b86d15c6ba29 | 236 | |
Vanger | 0:b86d15c6ba29 | 237 | /* pad with zeros */ |
Vanger | 0:b86d15c6ba29 | 238 | if (sha256->buffLen > SHA256_PAD_SIZE) { |
Vanger | 0:b86d15c6ba29 | 239 | XMEMSET(&local[sha256->buffLen], 0, SHA256_BLOCK_SIZE - sha256->buffLen); |
Vanger | 0:b86d15c6ba29 | 240 | sha256->buffLen += SHA256_BLOCK_SIZE - sha256->buffLen; |
Vanger | 0:b86d15c6ba29 | 241 | |
Vanger | 0:b86d15c6ba29 | 242 | #if defined(LITTLE_ENDIAN_ORDER) && !defined(FREESCALE_MMCAU) |
Vanger | 0:b86d15c6ba29 | 243 | ByteReverseWords(sha256->buffer, sha256->buffer, SHA256_BLOCK_SIZE); |
Vanger | 0:b86d15c6ba29 | 244 | #endif |
Vanger | 0:b86d15c6ba29 | 245 | |
Vanger | 0:b86d15c6ba29 | 246 | ret = XTRANSFORM(sha256, local); |
Vanger | 0:b86d15c6ba29 | 247 | if (ret != 0) |
Vanger | 0:b86d15c6ba29 | 248 | return ret; |
Vanger | 0:b86d15c6ba29 | 249 | |
Vanger | 0:b86d15c6ba29 | 250 | sha256->buffLen = 0; |
Vanger | 0:b86d15c6ba29 | 251 | } |
Vanger | 0:b86d15c6ba29 | 252 | XMEMSET(&local[sha256->buffLen], 0, SHA256_PAD_SIZE - sha256->buffLen); |
Vanger | 0:b86d15c6ba29 | 253 | |
Vanger | 0:b86d15c6ba29 | 254 | /* put lengths in bits */ |
Vanger | 0:b86d15c6ba29 | 255 | sha256->hiLen = (sha256->loLen >> (8*sizeof(sha256->loLen) - 3)) + |
Vanger | 0:b86d15c6ba29 | 256 | (sha256->hiLen << 3); |
Vanger | 0:b86d15c6ba29 | 257 | sha256->loLen = sha256->loLen << 3; |
Vanger | 0:b86d15c6ba29 | 258 | |
Vanger | 0:b86d15c6ba29 | 259 | /* store lengths */ |
Vanger | 0:b86d15c6ba29 | 260 | #if defined(LITTLE_ENDIAN_ORDER) && !defined(FREESCALE_MMCAU) |
Vanger | 0:b86d15c6ba29 | 261 | ByteReverseWords(sha256->buffer, sha256->buffer, SHA256_BLOCK_SIZE); |
Vanger | 0:b86d15c6ba29 | 262 | #endif |
Vanger | 0:b86d15c6ba29 | 263 | /* ! length ordering dependent on digest endian type ! */ |
Vanger | 0:b86d15c6ba29 | 264 | XMEMCPY(&local[SHA256_PAD_SIZE], &sha256->hiLen, sizeof(word32)); |
Vanger | 0:b86d15c6ba29 | 265 | XMEMCPY(&local[SHA256_PAD_SIZE + sizeof(word32)], &sha256->loLen, |
Vanger | 0:b86d15c6ba29 | 266 | sizeof(word32)); |
Vanger | 0:b86d15c6ba29 | 267 | |
Vanger | 0:b86d15c6ba29 | 268 | #ifdef FREESCALE_MMCAU |
Vanger | 0:b86d15c6ba29 | 269 | /* Kinetis requires only these bytes reversed */ |
Vanger | 0:b86d15c6ba29 | 270 | ByteReverseWords(&sha256->buffer[SHA256_PAD_SIZE/sizeof(word32)], |
Vanger | 0:b86d15c6ba29 | 271 | &sha256->buffer[SHA256_PAD_SIZE/sizeof(word32)], |
Vanger | 0:b86d15c6ba29 | 272 | 2 * sizeof(word32)); |
Vanger | 0:b86d15c6ba29 | 273 | #endif |
Vanger | 0:b86d15c6ba29 | 274 | |
Vanger | 0:b86d15c6ba29 | 275 | ret = XTRANSFORM(sha256, local); |
Vanger | 0:b86d15c6ba29 | 276 | if (ret != 0) |
Vanger | 0:b86d15c6ba29 | 277 | return ret; |
Vanger | 0:b86d15c6ba29 | 278 | |
Vanger | 0:b86d15c6ba29 | 279 | #ifdef LITTLE_ENDIAN_ORDER |
Vanger | 0:b86d15c6ba29 | 280 | ByteReverseWords(sha256->digest, sha256->digest, SHA256_DIGEST_SIZE); |
Vanger | 0:b86d15c6ba29 | 281 | #endif |
Vanger | 0:b86d15c6ba29 | 282 | XMEMCPY(hash, sha256->digest, SHA256_DIGEST_SIZE); |
Vanger | 0:b86d15c6ba29 | 283 | |
Vanger | 0:b86d15c6ba29 | 284 | return InitSha256(sha256); /* reset state */ |
Vanger | 0:b86d15c6ba29 | 285 | } |
Vanger | 0:b86d15c6ba29 | 286 | |
Vanger | 0:b86d15c6ba29 | 287 | |
Vanger | 0:b86d15c6ba29 | 288 | int Sha256Hash(const byte* data, word32 len, byte* hash) |
Vanger | 0:b86d15c6ba29 | 289 | { |
Vanger | 0:b86d15c6ba29 | 290 | int ret = 0; |
Vanger | 0:b86d15c6ba29 | 291 | #ifdef CYASSL_SMALL_STACK |
Vanger | 0:b86d15c6ba29 | 292 | Sha256* sha256; |
Vanger | 0:b86d15c6ba29 | 293 | #else |
Vanger | 0:b86d15c6ba29 | 294 | Sha256 sha256[1]; |
Vanger | 0:b86d15c6ba29 | 295 | #endif |
Vanger | 0:b86d15c6ba29 | 296 | |
Vanger | 0:b86d15c6ba29 | 297 | #ifdef CYASSL_SMALL_STACK |
Vanger | 0:b86d15c6ba29 | 298 | sha256 = (Sha256*)XMALLOC(sizeof(Sha256), NULL, DYNAMIC_TYPE_TMP_BUFFER); |
Vanger | 0:b86d15c6ba29 | 299 | if (sha256 == NULL) |
Vanger | 0:b86d15c6ba29 | 300 | return MEMORY_E; |
Vanger | 0:b86d15c6ba29 | 301 | #endif |
Vanger | 0:b86d15c6ba29 | 302 | |
Vanger | 0:b86d15c6ba29 | 303 | if ((ret = InitSha256(sha256)) != 0) { |
Vanger | 0:b86d15c6ba29 | 304 | CYASSL_MSG("InitSha256 failed"); |
Vanger | 0:b86d15c6ba29 | 305 | } |
Vanger | 0:b86d15c6ba29 | 306 | else if ((ret = Sha256Update(sha256, data, len)) != 0) { |
Vanger | 0:b86d15c6ba29 | 307 | CYASSL_MSG("Sha256Update failed"); |
Vanger | 0:b86d15c6ba29 | 308 | } |
Vanger | 0:b86d15c6ba29 | 309 | else if ((ret = Sha256Final(sha256, hash)) != 0) { |
Vanger | 0:b86d15c6ba29 | 310 | CYASSL_MSG("Sha256Final failed"); |
Vanger | 0:b86d15c6ba29 | 311 | } |
Vanger | 0:b86d15c6ba29 | 312 | |
Vanger | 0:b86d15c6ba29 | 313 | #ifdef CYASSL_SMALL_STACK |
Vanger | 0:b86d15c6ba29 | 314 | XFREE(sha256, NULL, DYNAMIC_TYPE_TMP_BUFFER); |
Vanger | 0:b86d15c6ba29 | 315 | #endif |
Vanger | 0:b86d15c6ba29 | 316 | |
Vanger | 0:b86d15c6ba29 | 317 | return ret; |
Vanger | 0:b86d15c6ba29 | 318 | } |
Vanger | 0:b86d15c6ba29 | 319 | |
Vanger | 0:b86d15c6ba29 | 320 | |
Vanger | 0:b86d15c6ba29 | 321 | #endif /* NO_SHA256 */ |
Vanger | 0:b86d15c6ba29 | 322 |