ON Semiconductor / mbed-os

Dependents:   mbed-TFT-example-NCS36510 mbed-Accelerometer-example-NCS36510 mbed-Accelerometer-example-NCS36510

Committer:
group-onsemi
Date:
Wed Jan 25 20:34:15 2017 +0000
Revision:
0:098463de4c5d
Initial commit

Who changed what in which revision?

UserRevisionLine numberNew contents of line
group-onsemi 0:098463de4c5d 1 /*
group-onsemi 0:098463de4c5d 2 * FIPS-180-1 compliant SHA-1 implementation
group-onsemi 0:098463de4c5d 3 *
group-onsemi 0:098463de4c5d 4 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
group-onsemi 0:098463de4c5d 5 * SPDX-License-Identifier: Apache-2.0
group-onsemi 0:098463de4c5d 6 *
group-onsemi 0:098463de4c5d 7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
group-onsemi 0:098463de4c5d 8 * not use this file except in compliance with the License.
group-onsemi 0:098463de4c5d 9 * You may obtain a copy of the License at
group-onsemi 0:098463de4c5d 10 *
group-onsemi 0:098463de4c5d 11 * http://www.apache.org/licenses/LICENSE-2.0
group-onsemi 0:098463de4c5d 12 *
group-onsemi 0:098463de4c5d 13 * Unless required by applicable law or agreed to in writing, software
group-onsemi 0:098463de4c5d 14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
group-onsemi 0:098463de4c5d 15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
group-onsemi 0:098463de4c5d 16 * See the License for the specific language governing permissions and
group-onsemi 0:098463de4c5d 17 * limitations under the License.
group-onsemi 0:098463de4c5d 18 *
group-onsemi 0:098463de4c5d 19 * This file is part of mbed TLS (https://tls.mbed.org)
group-onsemi 0:098463de4c5d 20 */
group-onsemi 0:098463de4c5d 21 /*
group-onsemi 0:098463de4c5d 22 * The SHA-1 standard was published by NIST in 1993.
group-onsemi 0:098463de4c5d 23 *
group-onsemi 0:098463de4c5d 24 * http://www.itl.nist.gov/fipspubs/fip180-1.htm
group-onsemi 0:098463de4c5d 25 */
group-onsemi 0:098463de4c5d 26
group-onsemi 0:098463de4c5d 27 #if !defined(MBEDTLS_CONFIG_FILE)
group-onsemi 0:098463de4c5d 28 #include "mbedtls/config.h"
group-onsemi 0:098463de4c5d 29 #else
group-onsemi 0:098463de4c5d 30 #include MBEDTLS_CONFIG_FILE
group-onsemi 0:098463de4c5d 31 #endif
group-onsemi 0:098463de4c5d 32
group-onsemi 0:098463de4c5d 33 #if defined(MBEDTLS_SHA1_C)
group-onsemi 0:098463de4c5d 34
group-onsemi 0:098463de4c5d 35 #include "mbedtls/sha1.h"
group-onsemi 0:098463de4c5d 36
group-onsemi 0:098463de4c5d 37 #include <string.h>
group-onsemi 0:098463de4c5d 38
group-onsemi 0:098463de4c5d 39 #if defined(MBEDTLS_SELF_TEST)
group-onsemi 0:098463de4c5d 40 #if defined(MBEDTLS_PLATFORM_C)
group-onsemi 0:098463de4c5d 41 #include "mbedtls/platform.h"
group-onsemi 0:098463de4c5d 42 #else
group-onsemi 0:098463de4c5d 43 #include <stdio.h>
group-onsemi 0:098463de4c5d 44 #define mbedtls_printf printf
group-onsemi 0:098463de4c5d 45 #endif /* MBEDTLS_PLATFORM_C */
group-onsemi 0:098463de4c5d 46 #endif /* MBEDTLS_SELF_TEST */
group-onsemi 0:098463de4c5d 47
group-onsemi 0:098463de4c5d 48 #if !defined(MBEDTLS_SHA1_ALT)
group-onsemi 0:098463de4c5d 49
group-onsemi 0:098463de4c5d 50 /* Implementation that should never be optimized out by the compiler */
group-onsemi 0:098463de4c5d 51 static void mbedtls_zeroize( void *v, size_t n ) {
group-onsemi 0:098463de4c5d 52 volatile unsigned char *p = (unsigned char*)v; while( n-- ) *p++ = 0;
group-onsemi 0:098463de4c5d 53 }
group-onsemi 0:098463de4c5d 54
group-onsemi 0:098463de4c5d 55 /*
group-onsemi 0:098463de4c5d 56 * 32-bit integer manipulation macros (big endian)
group-onsemi 0:098463de4c5d 57 */
group-onsemi 0:098463de4c5d 58 #ifndef GET_UINT32_BE
group-onsemi 0:098463de4c5d 59 #define GET_UINT32_BE(n,b,i) \
group-onsemi 0:098463de4c5d 60 { \
group-onsemi 0:098463de4c5d 61 (n) = ( (uint32_t) (b)[(i) ] << 24 ) \
group-onsemi 0:098463de4c5d 62 | ( (uint32_t) (b)[(i) + 1] << 16 ) \
group-onsemi 0:098463de4c5d 63 | ( (uint32_t) (b)[(i) + 2] << 8 ) \
group-onsemi 0:098463de4c5d 64 | ( (uint32_t) (b)[(i) + 3] ); \
group-onsemi 0:098463de4c5d 65 }
group-onsemi 0:098463de4c5d 66 #endif
group-onsemi 0:098463de4c5d 67
group-onsemi 0:098463de4c5d 68 #ifndef PUT_UINT32_BE
group-onsemi 0:098463de4c5d 69 #define PUT_UINT32_BE(n,b,i) \
group-onsemi 0:098463de4c5d 70 { \
group-onsemi 0:098463de4c5d 71 (b)[(i) ] = (unsigned char) ( (n) >> 24 ); \
group-onsemi 0:098463de4c5d 72 (b)[(i) + 1] = (unsigned char) ( (n) >> 16 ); \
group-onsemi 0:098463de4c5d 73 (b)[(i) + 2] = (unsigned char) ( (n) >> 8 ); \
group-onsemi 0:098463de4c5d 74 (b)[(i) + 3] = (unsigned char) ( (n) ); \
group-onsemi 0:098463de4c5d 75 }
group-onsemi 0:098463de4c5d 76 #endif
group-onsemi 0:098463de4c5d 77
group-onsemi 0:098463de4c5d 78 void mbedtls_sha1_init( mbedtls_sha1_context *ctx )
group-onsemi 0:098463de4c5d 79 {
group-onsemi 0:098463de4c5d 80 memset( ctx, 0, sizeof( mbedtls_sha1_context ) );
group-onsemi 0:098463de4c5d 81 }
group-onsemi 0:098463de4c5d 82
group-onsemi 0:098463de4c5d 83 void mbedtls_sha1_free( mbedtls_sha1_context *ctx )
group-onsemi 0:098463de4c5d 84 {
group-onsemi 0:098463de4c5d 85 if( ctx == NULL )
group-onsemi 0:098463de4c5d 86 return;
group-onsemi 0:098463de4c5d 87
group-onsemi 0:098463de4c5d 88 mbedtls_zeroize( ctx, sizeof( mbedtls_sha1_context ) );
group-onsemi 0:098463de4c5d 89 }
group-onsemi 0:098463de4c5d 90
group-onsemi 0:098463de4c5d 91 void mbedtls_sha1_clone( mbedtls_sha1_context *dst,
group-onsemi 0:098463de4c5d 92 const mbedtls_sha1_context *src )
group-onsemi 0:098463de4c5d 93 {
group-onsemi 0:098463de4c5d 94 *dst = *src;
group-onsemi 0:098463de4c5d 95 }
group-onsemi 0:098463de4c5d 96
group-onsemi 0:098463de4c5d 97 /*
group-onsemi 0:098463de4c5d 98 * SHA-1 context setup
group-onsemi 0:098463de4c5d 99 */
group-onsemi 0:098463de4c5d 100 void mbedtls_sha1_starts( mbedtls_sha1_context *ctx )
group-onsemi 0:098463de4c5d 101 {
group-onsemi 0:098463de4c5d 102 ctx->total[0] = 0;
group-onsemi 0:098463de4c5d 103 ctx->total[1] = 0;
group-onsemi 0:098463de4c5d 104
group-onsemi 0:098463de4c5d 105 ctx->state[0] = 0x67452301;
group-onsemi 0:098463de4c5d 106 ctx->state[1] = 0xEFCDAB89;
group-onsemi 0:098463de4c5d 107 ctx->state[2] = 0x98BADCFE;
group-onsemi 0:098463de4c5d 108 ctx->state[3] = 0x10325476;
group-onsemi 0:098463de4c5d 109 ctx->state[4] = 0xC3D2E1F0;
group-onsemi 0:098463de4c5d 110 }
group-onsemi 0:098463de4c5d 111
group-onsemi 0:098463de4c5d 112 #if !defined(MBEDTLS_SHA1_PROCESS_ALT)
group-onsemi 0:098463de4c5d 113 void mbedtls_sha1_process( mbedtls_sha1_context *ctx, const unsigned char data[64] )
group-onsemi 0:098463de4c5d 114 {
group-onsemi 0:098463de4c5d 115 uint32_t temp, W[16], A, B, C, D, E;
group-onsemi 0:098463de4c5d 116
group-onsemi 0:098463de4c5d 117 GET_UINT32_BE( W[ 0], data, 0 );
group-onsemi 0:098463de4c5d 118 GET_UINT32_BE( W[ 1], data, 4 );
group-onsemi 0:098463de4c5d 119 GET_UINT32_BE( W[ 2], data, 8 );
group-onsemi 0:098463de4c5d 120 GET_UINT32_BE( W[ 3], data, 12 );
group-onsemi 0:098463de4c5d 121 GET_UINT32_BE( W[ 4], data, 16 );
group-onsemi 0:098463de4c5d 122 GET_UINT32_BE( W[ 5], data, 20 );
group-onsemi 0:098463de4c5d 123 GET_UINT32_BE( W[ 6], data, 24 );
group-onsemi 0:098463de4c5d 124 GET_UINT32_BE( W[ 7], data, 28 );
group-onsemi 0:098463de4c5d 125 GET_UINT32_BE( W[ 8], data, 32 );
group-onsemi 0:098463de4c5d 126 GET_UINT32_BE( W[ 9], data, 36 );
group-onsemi 0:098463de4c5d 127 GET_UINT32_BE( W[10], data, 40 );
group-onsemi 0:098463de4c5d 128 GET_UINT32_BE( W[11], data, 44 );
group-onsemi 0:098463de4c5d 129 GET_UINT32_BE( W[12], data, 48 );
group-onsemi 0:098463de4c5d 130 GET_UINT32_BE( W[13], data, 52 );
group-onsemi 0:098463de4c5d 131 GET_UINT32_BE( W[14], data, 56 );
group-onsemi 0:098463de4c5d 132 GET_UINT32_BE( W[15], data, 60 );
group-onsemi 0:098463de4c5d 133
group-onsemi 0:098463de4c5d 134 #define S(x,n) ((x << n) | ((x & 0xFFFFFFFF) >> (32 - n)))
group-onsemi 0:098463de4c5d 135
group-onsemi 0:098463de4c5d 136 #define R(t) \
group-onsemi 0:098463de4c5d 137 ( \
group-onsemi 0:098463de4c5d 138 temp = W[( t - 3 ) & 0x0F] ^ W[( t - 8 ) & 0x0F] ^ \
group-onsemi 0:098463de4c5d 139 W[( t - 14 ) & 0x0F] ^ W[ t & 0x0F], \
group-onsemi 0:098463de4c5d 140 ( W[t & 0x0F] = S(temp,1) ) \
group-onsemi 0:098463de4c5d 141 )
group-onsemi 0:098463de4c5d 142
group-onsemi 0:098463de4c5d 143 #define P(a,b,c,d,e,x) \
group-onsemi 0:098463de4c5d 144 { \
group-onsemi 0:098463de4c5d 145 e += S(a,5) + F(b,c,d) + K + x; b = S(b,30); \
group-onsemi 0:098463de4c5d 146 }
group-onsemi 0:098463de4c5d 147
group-onsemi 0:098463de4c5d 148 A = ctx->state[0];
group-onsemi 0:098463de4c5d 149 B = ctx->state[1];
group-onsemi 0:098463de4c5d 150 C = ctx->state[2];
group-onsemi 0:098463de4c5d 151 D = ctx->state[3];
group-onsemi 0:098463de4c5d 152 E = ctx->state[4];
group-onsemi 0:098463de4c5d 153
group-onsemi 0:098463de4c5d 154 #define F(x,y,z) (z ^ (x & (y ^ z)))
group-onsemi 0:098463de4c5d 155 #define K 0x5A827999
group-onsemi 0:098463de4c5d 156
group-onsemi 0:098463de4c5d 157 P( A, B, C, D, E, W[0] );
group-onsemi 0:098463de4c5d 158 P( E, A, B, C, D, W[1] );
group-onsemi 0:098463de4c5d 159 P( D, E, A, B, C, W[2] );
group-onsemi 0:098463de4c5d 160 P( C, D, E, A, B, W[3] );
group-onsemi 0:098463de4c5d 161 P( B, C, D, E, A, W[4] );
group-onsemi 0:098463de4c5d 162 P( A, B, C, D, E, W[5] );
group-onsemi 0:098463de4c5d 163 P( E, A, B, C, D, W[6] );
group-onsemi 0:098463de4c5d 164 P( D, E, A, B, C, W[7] );
group-onsemi 0:098463de4c5d 165 P( C, D, E, A, B, W[8] );
group-onsemi 0:098463de4c5d 166 P( B, C, D, E, A, W[9] );
group-onsemi 0:098463de4c5d 167 P( A, B, C, D, E, W[10] );
group-onsemi 0:098463de4c5d 168 P( E, A, B, C, D, W[11] );
group-onsemi 0:098463de4c5d 169 P( D, E, A, B, C, W[12] );
group-onsemi 0:098463de4c5d 170 P( C, D, E, A, B, W[13] );
group-onsemi 0:098463de4c5d 171 P( B, C, D, E, A, W[14] );
group-onsemi 0:098463de4c5d 172 P( A, B, C, D, E, W[15] );
group-onsemi 0:098463de4c5d 173 P( E, A, B, C, D, R(16) );
group-onsemi 0:098463de4c5d 174 P( D, E, A, B, C, R(17) );
group-onsemi 0:098463de4c5d 175 P( C, D, E, A, B, R(18) );
group-onsemi 0:098463de4c5d 176 P( B, C, D, E, A, R(19) );
group-onsemi 0:098463de4c5d 177
group-onsemi 0:098463de4c5d 178 #undef K
group-onsemi 0:098463de4c5d 179 #undef F
group-onsemi 0:098463de4c5d 180
group-onsemi 0:098463de4c5d 181 #define F(x,y,z) (x ^ y ^ z)
group-onsemi 0:098463de4c5d 182 #define K 0x6ED9EBA1
group-onsemi 0:098463de4c5d 183
group-onsemi 0:098463de4c5d 184 P( A, B, C, D, E, R(20) );
group-onsemi 0:098463de4c5d 185 P( E, A, B, C, D, R(21) );
group-onsemi 0:098463de4c5d 186 P( D, E, A, B, C, R(22) );
group-onsemi 0:098463de4c5d 187 P( C, D, E, A, B, R(23) );
group-onsemi 0:098463de4c5d 188 P( B, C, D, E, A, R(24) );
group-onsemi 0:098463de4c5d 189 P( A, B, C, D, E, R(25) );
group-onsemi 0:098463de4c5d 190 P( E, A, B, C, D, R(26) );
group-onsemi 0:098463de4c5d 191 P( D, E, A, B, C, R(27) );
group-onsemi 0:098463de4c5d 192 P( C, D, E, A, B, R(28) );
group-onsemi 0:098463de4c5d 193 P( B, C, D, E, A, R(29) );
group-onsemi 0:098463de4c5d 194 P( A, B, C, D, E, R(30) );
group-onsemi 0:098463de4c5d 195 P( E, A, B, C, D, R(31) );
group-onsemi 0:098463de4c5d 196 P( D, E, A, B, C, R(32) );
group-onsemi 0:098463de4c5d 197 P( C, D, E, A, B, R(33) );
group-onsemi 0:098463de4c5d 198 P( B, C, D, E, A, R(34) );
group-onsemi 0:098463de4c5d 199 P( A, B, C, D, E, R(35) );
group-onsemi 0:098463de4c5d 200 P( E, A, B, C, D, R(36) );
group-onsemi 0:098463de4c5d 201 P( D, E, A, B, C, R(37) );
group-onsemi 0:098463de4c5d 202 P( C, D, E, A, B, R(38) );
group-onsemi 0:098463de4c5d 203 P( B, C, D, E, A, R(39) );
group-onsemi 0:098463de4c5d 204
group-onsemi 0:098463de4c5d 205 #undef K
group-onsemi 0:098463de4c5d 206 #undef F
group-onsemi 0:098463de4c5d 207
group-onsemi 0:098463de4c5d 208 #define F(x,y,z) ((x & y) | (z & (x | y)))
group-onsemi 0:098463de4c5d 209 #define K 0x8F1BBCDC
group-onsemi 0:098463de4c5d 210
group-onsemi 0:098463de4c5d 211 P( A, B, C, D, E, R(40) );
group-onsemi 0:098463de4c5d 212 P( E, A, B, C, D, R(41) );
group-onsemi 0:098463de4c5d 213 P( D, E, A, B, C, R(42) );
group-onsemi 0:098463de4c5d 214 P( C, D, E, A, B, R(43) );
group-onsemi 0:098463de4c5d 215 P( B, C, D, E, A, R(44) );
group-onsemi 0:098463de4c5d 216 P( A, B, C, D, E, R(45) );
group-onsemi 0:098463de4c5d 217 P( E, A, B, C, D, R(46) );
group-onsemi 0:098463de4c5d 218 P( D, E, A, B, C, R(47) );
group-onsemi 0:098463de4c5d 219 P( C, D, E, A, B, R(48) );
group-onsemi 0:098463de4c5d 220 P( B, C, D, E, A, R(49) );
group-onsemi 0:098463de4c5d 221 P( A, B, C, D, E, R(50) );
group-onsemi 0:098463de4c5d 222 P( E, A, B, C, D, R(51) );
group-onsemi 0:098463de4c5d 223 P( D, E, A, B, C, R(52) );
group-onsemi 0:098463de4c5d 224 P( C, D, E, A, B, R(53) );
group-onsemi 0:098463de4c5d 225 P( B, C, D, E, A, R(54) );
group-onsemi 0:098463de4c5d 226 P( A, B, C, D, E, R(55) );
group-onsemi 0:098463de4c5d 227 P( E, A, B, C, D, R(56) );
group-onsemi 0:098463de4c5d 228 P( D, E, A, B, C, R(57) );
group-onsemi 0:098463de4c5d 229 P( C, D, E, A, B, R(58) );
group-onsemi 0:098463de4c5d 230 P( B, C, D, E, A, R(59) );
group-onsemi 0:098463de4c5d 231
group-onsemi 0:098463de4c5d 232 #undef K
group-onsemi 0:098463de4c5d 233 #undef F
group-onsemi 0:098463de4c5d 234
group-onsemi 0:098463de4c5d 235 #define F(x,y,z) (x ^ y ^ z)
group-onsemi 0:098463de4c5d 236 #define K 0xCA62C1D6
group-onsemi 0:098463de4c5d 237
group-onsemi 0:098463de4c5d 238 P( A, B, C, D, E, R(60) );
group-onsemi 0:098463de4c5d 239 P( E, A, B, C, D, R(61) );
group-onsemi 0:098463de4c5d 240 P( D, E, A, B, C, R(62) );
group-onsemi 0:098463de4c5d 241 P( C, D, E, A, B, R(63) );
group-onsemi 0:098463de4c5d 242 P( B, C, D, E, A, R(64) );
group-onsemi 0:098463de4c5d 243 P( A, B, C, D, E, R(65) );
group-onsemi 0:098463de4c5d 244 P( E, A, B, C, D, R(66) );
group-onsemi 0:098463de4c5d 245 P( D, E, A, B, C, R(67) );
group-onsemi 0:098463de4c5d 246 P( C, D, E, A, B, R(68) );
group-onsemi 0:098463de4c5d 247 P( B, C, D, E, A, R(69) );
group-onsemi 0:098463de4c5d 248 P( A, B, C, D, E, R(70) );
group-onsemi 0:098463de4c5d 249 P( E, A, B, C, D, R(71) );
group-onsemi 0:098463de4c5d 250 P( D, E, A, B, C, R(72) );
group-onsemi 0:098463de4c5d 251 P( C, D, E, A, B, R(73) );
group-onsemi 0:098463de4c5d 252 P( B, C, D, E, A, R(74) );
group-onsemi 0:098463de4c5d 253 P( A, B, C, D, E, R(75) );
group-onsemi 0:098463de4c5d 254 P( E, A, B, C, D, R(76) );
group-onsemi 0:098463de4c5d 255 P( D, E, A, B, C, R(77) );
group-onsemi 0:098463de4c5d 256 P( C, D, E, A, B, R(78) );
group-onsemi 0:098463de4c5d 257 P( B, C, D, E, A, R(79) );
group-onsemi 0:098463de4c5d 258
group-onsemi 0:098463de4c5d 259 #undef K
group-onsemi 0:098463de4c5d 260 #undef F
group-onsemi 0:098463de4c5d 261
group-onsemi 0:098463de4c5d 262 ctx->state[0] += A;
group-onsemi 0:098463de4c5d 263 ctx->state[1] += B;
group-onsemi 0:098463de4c5d 264 ctx->state[2] += C;
group-onsemi 0:098463de4c5d 265 ctx->state[3] += D;
group-onsemi 0:098463de4c5d 266 ctx->state[4] += E;
group-onsemi 0:098463de4c5d 267 }
group-onsemi 0:098463de4c5d 268 #endif /* !MBEDTLS_SHA1_PROCESS_ALT */
group-onsemi 0:098463de4c5d 269
group-onsemi 0:098463de4c5d 270 /*
group-onsemi 0:098463de4c5d 271 * SHA-1 process buffer
group-onsemi 0:098463de4c5d 272 */
group-onsemi 0:098463de4c5d 273 void mbedtls_sha1_update( mbedtls_sha1_context *ctx, const unsigned char *input, size_t ilen )
group-onsemi 0:098463de4c5d 274 {
group-onsemi 0:098463de4c5d 275 size_t fill;
group-onsemi 0:098463de4c5d 276 uint32_t left;
group-onsemi 0:098463de4c5d 277
group-onsemi 0:098463de4c5d 278 if( ilen == 0 )
group-onsemi 0:098463de4c5d 279 return;
group-onsemi 0:098463de4c5d 280
group-onsemi 0:098463de4c5d 281 left = ctx->total[0] & 0x3F;
group-onsemi 0:098463de4c5d 282 fill = 64 - left;
group-onsemi 0:098463de4c5d 283
group-onsemi 0:098463de4c5d 284 ctx->total[0] += (uint32_t) ilen;
group-onsemi 0:098463de4c5d 285 ctx->total[0] &= 0xFFFFFFFF;
group-onsemi 0:098463de4c5d 286
group-onsemi 0:098463de4c5d 287 if( ctx->total[0] < (uint32_t) ilen )
group-onsemi 0:098463de4c5d 288 ctx->total[1]++;
group-onsemi 0:098463de4c5d 289
group-onsemi 0:098463de4c5d 290 if( left && ilen >= fill )
group-onsemi 0:098463de4c5d 291 {
group-onsemi 0:098463de4c5d 292 memcpy( (void *) (ctx->buffer + left), input, fill );
group-onsemi 0:098463de4c5d 293 mbedtls_sha1_process( ctx, ctx->buffer );
group-onsemi 0:098463de4c5d 294 input += fill;
group-onsemi 0:098463de4c5d 295 ilen -= fill;
group-onsemi 0:098463de4c5d 296 left = 0;
group-onsemi 0:098463de4c5d 297 }
group-onsemi 0:098463de4c5d 298
group-onsemi 0:098463de4c5d 299 while( ilen >= 64 )
group-onsemi 0:098463de4c5d 300 {
group-onsemi 0:098463de4c5d 301 mbedtls_sha1_process( ctx, input );
group-onsemi 0:098463de4c5d 302 input += 64;
group-onsemi 0:098463de4c5d 303 ilen -= 64;
group-onsemi 0:098463de4c5d 304 }
group-onsemi 0:098463de4c5d 305
group-onsemi 0:098463de4c5d 306 if( ilen > 0 )
group-onsemi 0:098463de4c5d 307 memcpy( (void *) (ctx->buffer + left), input, ilen );
group-onsemi 0:098463de4c5d 308 }
group-onsemi 0:098463de4c5d 309
group-onsemi 0:098463de4c5d 310 static const unsigned char sha1_padding[64] =
group-onsemi 0:098463de4c5d 311 {
group-onsemi 0:098463de4c5d 312 0x80, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
group-onsemi 0:098463de4c5d 313 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
group-onsemi 0:098463de4c5d 314 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
group-onsemi 0:098463de4c5d 315 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
group-onsemi 0:098463de4c5d 316 };
group-onsemi 0:098463de4c5d 317
group-onsemi 0:098463de4c5d 318 /*
group-onsemi 0:098463de4c5d 319 * SHA-1 final digest
group-onsemi 0:098463de4c5d 320 */
group-onsemi 0:098463de4c5d 321 void mbedtls_sha1_finish( mbedtls_sha1_context *ctx, unsigned char output[20] )
group-onsemi 0:098463de4c5d 322 {
group-onsemi 0:098463de4c5d 323 uint32_t last, padn;
group-onsemi 0:098463de4c5d 324 uint32_t high, low;
group-onsemi 0:098463de4c5d 325 unsigned char msglen[8];
group-onsemi 0:098463de4c5d 326
group-onsemi 0:098463de4c5d 327 high = ( ctx->total[0] >> 29 )
group-onsemi 0:098463de4c5d 328 | ( ctx->total[1] << 3 );
group-onsemi 0:098463de4c5d 329 low = ( ctx->total[0] << 3 );
group-onsemi 0:098463de4c5d 330
group-onsemi 0:098463de4c5d 331 PUT_UINT32_BE( high, msglen, 0 );
group-onsemi 0:098463de4c5d 332 PUT_UINT32_BE( low, msglen, 4 );
group-onsemi 0:098463de4c5d 333
group-onsemi 0:098463de4c5d 334 last = ctx->total[0] & 0x3F;
group-onsemi 0:098463de4c5d 335 padn = ( last < 56 ) ? ( 56 - last ) : ( 120 - last );
group-onsemi 0:098463de4c5d 336
group-onsemi 0:098463de4c5d 337 mbedtls_sha1_update( ctx, sha1_padding, padn );
group-onsemi 0:098463de4c5d 338 mbedtls_sha1_update( ctx, msglen, 8 );
group-onsemi 0:098463de4c5d 339
group-onsemi 0:098463de4c5d 340 PUT_UINT32_BE( ctx->state[0], output, 0 );
group-onsemi 0:098463de4c5d 341 PUT_UINT32_BE( ctx->state[1], output, 4 );
group-onsemi 0:098463de4c5d 342 PUT_UINT32_BE( ctx->state[2], output, 8 );
group-onsemi 0:098463de4c5d 343 PUT_UINT32_BE( ctx->state[3], output, 12 );
group-onsemi 0:098463de4c5d 344 PUT_UINT32_BE( ctx->state[4], output, 16 );
group-onsemi 0:098463de4c5d 345 }
group-onsemi 0:098463de4c5d 346
group-onsemi 0:098463de4c5d 347 #endif /* !MBEDTLS_SHA1_ALT */
group-onsemi 0:098463de4c5d 348
group-onsemi 0:098463de4c5d 349 /*
group-onsemi 0:098463de4c5d 350 * output = SHA-1( input buffer )
group-onsemi 0:098463de4c5d 351 */
group-onsemi 0:098463de4c5d 352 void mbedtls_sha1( const unsigned char *input, size_t ilen, unsigned char output[20] )
group-onsemi 0:098463de4c5d 353 {
group-onsemi 0:098463de4c5d 354 mbedtls_sha1_context ctx;
group-onsemi 0:098463de4c5d 355
group-onsemi 0:098463de4c5d 356 mbedtls_sha1_init( &ctx );
group-onsemi 0:098463de4c5d 357 mbedtls_sha1_starts( &ctx );
group-onsemi 0:098463de4c5d 358 mbedtls_sha1_update( &ctx, input, ilen );
group-onsemi 0:098463de4c5d 359 mbedtls_sha1_finish( &ctx, output );
group-onsemi 0:098463de4c5d 360 mbedtls_sha1_free( &ctx );
group-onsemi 0:098463de4c5d 361 }
group-onsemi 0:098463de4c5d 362
group-onsemi 0:098463de4c5d 363 #if defined(MBEDTLS_SELF_TEST)
group-onsemi 0:098463de4c5d 364 /*
group-onsemi 0:098463de4c5d 365 * FIPS-180-1 test vectors
group-onsemi 0:098463de4c5d 366 */
group-onsemi 0:098463de4c5d 367 static const unsigned char sha1_test_buf[3][57] =
group-onsemi 0:098463de4c5d 368 {
group-onsemi 0:098463de4c5d 369 { "abc" },
group-onsemi 0:098463de4c5d 370 { "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq" },
group-onsemi 0:098463de4c5d 371 { "" }
group-onsemi 0:098463de4c5d 372 };
group-onsemi 0:098463de4c5d 373
group-onsemi 0:098463de4c5d 374 static const int sha1_test_buflen[3] =
group-onsemi 0:098463de4c5d 375 {
group-onsemi 0:098463de4c5d 376 3, 56, 1000
group-onsemi 0:098463de4c5d 377 };
group-onsemi 0:098463de4c5d 378
group-onsemi 0:098463de4c5d 379 static const unsigned char sha1_test_sum[3][20] =
group-onsemi 0:098463de4c5d 380 {
group-onsemi 0:098463de4c5d 381 { 0xA9, 0x99, 0x3E, 0x36, 0x47, 0x06, 0x81, 0x6A, 0xBA, 0x3E,
group-onsemi 0:098463de4c5d 382 0x25, 0x71, 0x78, 0x50, 0xC2, 0x6C, 0x9C, 0xD0, 0xD8, 0x9D },
group-onsemi 0:098463de4c5d 383 { 0x84, 0x98, 0x3E, 0x44, 0x1C, 0x3B, 0xD2, 0x6E, 0xBA, 0xAE,
group-onsemi 0:098463de4c5d 384 0x4A, 0xA1, 0xF9, 0x51, 0x29, 0xE5, 0xE5, 0x46, 0x70, 0xF1 },
group-onsemi 0:098463de4c5d 385 { 0x34, 0xAA, 0x97, 0x3C, 0xD4, 0xC4, 0xDA, 0xA4, 0xF6, 0x1E,
group-onsemi 0:098463de4c5d 386 0xEB, 0x2B, 0xDB, 0xAD, 0x27, 0x31, 0x65, 0x34, 0x01, 0x6F }
group-onsemi 0:098463de4c5d 387 };
group-onsemi 0:098463de4c5d 388
group-onsemi 0:098463de4c5d 389 /*
group-onsemi 0:098463de4c5d 390 * Checkup routine
group-onsemi 0:098463de4c5d 391 */
group-onsemi 0:098463de4c5d 392 int mbedtls_sha1_self_test( int verbose )
group-onsemi 0:098463de4c5d 393 {
group-onsemi 0:098463de4c5d 394 int i, j, buflen, ret = 0;
group-onsemi 0:098463de4c5d 395 unsigned char buf[1024];
group-onsemi 0:098463de4c5d 396 unsigned char sha1sum[20];
group-onsemi 0:098463de4c5d 397 mbedtls_sha1_context ctx;
group-onsemi 0:098463de4c5d 398
group-onsemi 0:098463de4c5d 399 mbedtls_sha1_init( &ctx );
group-onsemi 0:098463de4c5d 400
group-onsemi 0:098463de4c5d 401 /*
group-onsemi 0:098463de4c5d 402 * SHA-1
group-onsemi 0:098463de4c5d 403 */
group-onsemi 0:098463de4c5d 404 for( i = 0; i < 3; i++ )
group-onsemi 0:098463de4c5d 405 {
group-onsemi 0:098463de4c5d 406 if( verbose != 0 )
group-onsemi 0:098463de4c5d 407 mbedtls_printf( " SHA-1 test #%d: ", i + 1 );
group-onsemi 0:098463de4c5d 408
group-onsemi 0:098463de4c5d 409 mbedtls_sha1_starts( &ctx );
group-onsemi 0:098463de4c5d 410
group-onsemi 0:098463de4c5d 411 if( i == 2 )
group-onsemi 0:098463de4c5d 412 {
group-onsemi 0:098463de4c5d 413 memset( buf, 'a', buflen = 1000 );
group-onsemi 0:098463de4c5d 414
group-onsemi 0:098463de4c5d 415 for( j = 0; j < 1000; j++ )
group-onsemi 0:098463de4c5d 416 mbedtls_sha1_update( &ctx, buf, buflen );
group-onsemi 0:098463de4c5d 417 }
group-onsemi 0:098463de4c5d 418 else
group-onsemi 0:098463de4c5d 419 mbedtls_sha1_update( &ctx, sha1_test_buf[i],
group-onsemi 0:098463de4c5d 420 sha1_test_buflen[i] );
group-onsemi 0:098463de4c5d 421
group-onsemi 0:098463de4c5d 422 mbedtls_sha1_finish( &ctx, sha1sum );
group-onsemi 0:098463de4c5d 423
group-onsemi 0:098463de4c5d 424 if( memcmp( sha1sum, sha1_test_sum[i], 20 ) != 0 )
group-onsemi 0:098463de4c5d 425 {
group-onsemi 0:098463de4c5d 426 if( verbose != 0 )
group-onsemi 0:098463de4c5d 427 mbedtls_printf( "failed\n" );
group-onsemi 0:098463de4c5d 428
group-onsemi 0:098463de4c5d 429 ret = 1;
group-onsemi 0:098463de4c5d 430 goto exit;
group-onsemi 0:098463de4c5d 431 }
group-onsemi 0:098463de4c5d 432
group-onsemi 0:098463de4c5d 433 if( verbose != 0 )
group-onsemi 0:098463de4c5d 434 mbedtls_printf( "passed\n" );
group-onsemi 0:098463de4c5d 435 }
group-onsemi 0:098463de4c5d 436
group-onsemi 0:098463de4c5d 437 if( verbose != 0 )
group-onsemi 0:098463de4c5d 438 mbedtls_printf( "\n" );
group-onsemi 0:098463de4c5d 439
group-onsemi 0:098463de4c5d 440 exit:
group-onsemi 0:098463de4c5d 441 mbedtls_sha1_free( &ctx );
group-onsemi 0:098463de4c5d 442
group-onsemi 0:098463de4c5d 443 return( ret );
group-onsemi 0:098463de4c5d 444 }
group-onsemi 0:098463de4c5d 445
group-onsemi 0:098463de4c5d 446 #endif /* MBEDTLS_SELF_TEST */
group-onsemi 0:098463de4c5d 447
group-onsemi 0:098463de4c5d 448 #endif /* MBEDTLS_SHA1_C */