63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include "config.h"

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <isc/assertions.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <isc/platform.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <isc/safe.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <isc/sha1.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <isc/string.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <isc/types.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <isc/util.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#if PKCS11CRYPTO

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <pk11/internal.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#include <pk11/pk11.h>

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#endif

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#ifdef ISC_PLATFORM_OPENSSLHASH

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define EVP_MD_CTX_new() &(context->_ctx)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define EVP_MD_CTX_free(ptr) EVP_MD_CTX_cleanup(ptr)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#endif

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_init(isc_sha1_t *context)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(context != NULL);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->ctx = EVP_MD_CTX_new();

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews RUNTIME_CHECK(context->ctx != NULL);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews if (EVP_DigestInit(context->ctx, EVP_sha1()) != 1) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews FATAL_ERROR(__FILE__, __LINE__, "Cannot initialize SHA1.");

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews }

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_invalidate(isc_sha1_t *context) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews EVP_MD_CTX_free(context->ctx);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->ctx = NULL;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_update(isc_sha1_t *context, const unsigned char *data,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews unsigned int len)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(context != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(context->ctx != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(data != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews RUNTIME_CHECK(EVP_DigestUpdate(context->ctx,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (const void *) data,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (size_t) len) == 1);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_final(isc_sha1_t *context, unsigned char *digest) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(digest != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(context != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(context->ctx != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews RUNTIME_CHECK(EVP_DigestFinal(context->ctx, digest, NULL) == 1);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews EVP_MD_CTX_free(context->ctx);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->ctx = NULL;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#elif PKCS11CRYPTO

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_init(isc_sha1_t *ctx) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_RV rv;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_MECHANISM mech = { CKM_SHA_1, NULL, 0 };

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews RUNTIME_CHECK(pk11_get_session(ctx, OP_DIGEST, ISC_TRUE, ISC_FALSE,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews ISC_FALSE, NULL, 0) == ISC_R_SUCCESS);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews PK11_FATALCHECK(pkcs_C_DigestInit, (ctx->session, &mech));

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_invalidate(isc_sha1_t *ctx) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_BYTE garbage[ISC_SHA1_DIGESTLENGTH];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_ULONG len = ISC_SHA1_DIGESTLENGTH;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews if (ctx->handle == NULL)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews return;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (void) pkcs_C_DigestFinal(ctx->session, garbage, &len);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_safe_memwipe(garbage, sizeof(garbage));

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews pk11_return_session(ctx);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_update(isc_sha1_t *ctx, const unsigned char *buf, unsigned int len) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_RV rv;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_BYTE_PTR pPart;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews DE_CONST(buf, pPart);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews PK11_FATALCHECK(pkcs_C_DigestUpdate,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (ctx->session, pPart, (CK_ULONG) len));

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_final(isc_sha1_t *ctx, unsigned char *digest) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_RV rv;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CK_ULONG len = ISC_SHA1_DIGESTLENGTH;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews PK11_FATALCHECK(pkcs_C_DigestFinal,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (ctx->session, (CK_BYTE_PTR) digest, &len));

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews pk11_return_session(ctx);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#else

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define rol(value, bits) (((value) << (bits)) | ((value) >> (32 - (bits))))

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#if !defined(WORDS_BIGENDIAN)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews# define blk0(i) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (block->l[i] = (rol(block->l[i], 24) & 0xFF00FF00) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews | (rol(block->l[i], 8) & 0x00FF00FF))

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#else

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews# define blk0(i) block->l[i]

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#endif

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define blk(i) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (block->l[i & 15] = rol(block->l[(i + 13) & 15] \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews ^ block->l[(i + 8) & 15] \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews ^ block->l[(i + 2) & 15] \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews ^ block->l[i & 15], 1))

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define R0(v,w,x,y,z,i) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews z += ((w & (x ^ y)) ^ y) + blk0(i) + 0x5A827999 + rol(v, 5); \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews w = rol(w, 30);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define R1(v,w,x,y,z,i) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews z += ((w & (x ^ y)) ^ y) + blk(i) + 0x5A827999 + rol(v, 5); \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews w = rol(w, 30);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define R2(v,w,x,y,z,i) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews z += (w ^ x ^ y) + blk(i) + 0x6ED9EBA1 + rol(v, 5); \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews w = rol(w, 30);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define R3(v,w,x,y,z,i) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews z += (((w | x) & y) | (w & x)) + blk(i) + 0x8F1BBCDC + rol(v, 5); \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews w = rol(w, 30);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define R4(v,w,x,y,z,i) \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews z += (w ^ x ^ y) + blk(i) + 0xCA62C1D6 + rol(v, 5); \

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews w = rol(w, 30);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewstypedef union {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews unsigned char c[64];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews unsigned int l[16];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews} CHAR64LONG16;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#ifdef __sparc_v9__

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void do_R01(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *d, isc_uint32_t *e, CHAR64LONG16 *);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void do_R2(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *d, isc_uint32_t *e, CHAR64LONG16 *);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void do_R3(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *d, isc_uint32_t *e, CHAR64LONG16 *);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void do_R4(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *d, isc_uint32_t *e, CHAR64LONG16 *);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define nR0(v,w,x,y,z,i) R0(*v,*w,*x,*y,*z,i)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define nR1(v,w,x,y,z,i) R1(*v,*w,*x,*y,*z,i)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define nR2(v,w,x,y,z,i) R2(*v,*w,*x,*y,*z,i)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define nR3(v,w,x,y,z,i) R3(*v,*w,*x,*y,*z,i)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#define nR4(v,w,x,y,z,i) R4(*v,*w,*x,*y,*z,i)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsdo_R01(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c, isc_uint32_t *d,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *e, CHAR64LONG16 *block)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR0(a,b,c,d,e, 0); nR0(e,a,b,c,d, 1); nR0(d,e,a,b,c, 2);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR0(c,d,e,a,b, 3); nR0(b,c,d,e,a, 4); nR0(a,b,c,d,e, 5);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR0(e,a,b,c,d, 6); nR0(d,e,a,b,c, 7); nR0(c,d,e,a,b, 8);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR0(b,c,d,e,a, 9); nR0(a,b,c,d,e,10); nR0(e,a,b,c,d,11);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR0(d,e,a,b,c,12); nR0(c,d,e,a,b,13); nR0(b,c,d,e,a,14);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR0(a,b,c,d,e,15); nR1(e,a,b,c,d,16); nR1(d,e,a,b,c,17);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR1(c,d,e,a,b,18); nR1(b,c,d,e,a,19);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsdo_R2(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c, isc_uint32_t *d,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *e, CHAR64LONG16 *block)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR2(a,b,c,d,e,20); nR2(e,a,b,c,d,21); nR2(d,e,a,b,c,22);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR2(c,d,e,a,b,23); nR2(b,c,d,e,a,24); nR2(a,b,c,d,e,25);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR2(e,a,b,c,d,26); nR2(d,e,a,b,c,27); nR2(c,d,e,a,b,28);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR2(b,c,d,e,a,29); nR2(a,b,c,d,e,30); nR2(e,a,b,c,d,31);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR2(d,e,a,b,c,32); nR2(c,d,e,a,b,33); nR2(b,c,d,e,a,34);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR2(a,b,c,d,e,35); nR2(e,a,b,c,d,36); nR2(d,e,a,b,c,37);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR2(c,d,e,a,b,38); nR2(b,c,d,e,a,39);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsdo_R3(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c, isc_uint32_t *d,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *e, CHAR64LONG16 *block)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR3(a,b,c,d,e,40); nR3(e,a,b,c,d,41); nR3(d,e,a,b,c,42);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR3(c,d,e,a,b,43); nR3(b,c,d,e,a,44); nR3(a,b,c,d,e,45);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR3(e,a,b,c,d,46); nR3(d,e,a,b,c,47); nR3(c,d,e,a,b,48);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR3(b,c,d,e,a,49); nR3(a,b,c,d,e,50); nR3(e,a,b,c,d,51);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR3(d,e,a,b,c,52); nR3(c,d,e,a,b,53); nR3(b,c,d,e,a,54);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR3(a,b,c,d,e,55); nR3(e,a,b,c,d,56); nR3(d,e,a,b,c,57);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR3(c,d,e,a,b,58); nR3(b,c,d,e,a,59);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsdo_R4(isc_uint32_t *a, isc_uint32_t *b, isc_uint32_t *c, isc_uint32_t *d,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t *e, CHAR64LONG16 *block)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR4(a,b,c,d,e,60); nR4(e,a,b,c,d,61); nR4(d,e,a,b,c,62);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR4(c,d,e,a,b,63); nR4(b,c,d,e,a,64); nR4(a,b,c,d,e,65);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR4(e,a,b,c,d,66); nR4(d,e,a,b,c,67); nR4(c,d,e,a,b,68);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR4(b,c,d,e,a,69); nR4(a,b,c,d,e,70); nR4(e,a,b,c,d,71);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR4(d,e,a,b,c,72); nR4(c,d,e,a,b,73); nR4(b,c,d,e,a,74);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR4(a,b,c,d,e,75); nR4(e,a,b,c,d,76); nR4(d,e,a,b,c,77);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews nR4(c,d,e,a,b,78); nR4(b,c,d,e,a,79);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#endif

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic void

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewstransform(isc_uint32_t state[5], const unsigned char buffer[64]) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_uint32_t a, b, c, d, e;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CHAR64LONG16 *block;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews CHAR64LONG16 workspace;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(buffer != NULL);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(state != NULL);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews block = &workspace;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (void)memmove(block, buffer, 64);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews /* Copy context->state[] to working vars */

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews a = state[0];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews b = state[1];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews c = state[2];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews d = state[3];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews e = state[4];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#ifdef __sparc_v9__

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews do_R01(&a, &b, &c, &d, &e, block);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews do_R2(&a, &b, &c, &d, &e, block);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews do_R3(&a, &b, &c, &d, &e, block);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews do_R4(&a, &b, &c, &d, &e, block);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#else

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews /* 4 rounds of 20 operations each. Loop unrolled. */

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R0(a,b,c,d,e, 0); R0(e,a,b,c,d, 1); R0(d,e,a,b,c, 2); R0(c,d,e,a,b, 3);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R0(b,c,d,e,a, 4); R0(a,b,c,d,e, 5); R0(e,a,b,c,d, 6); R0(d,e,a,b,c, 7);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R0(c,d,e,a,b, 8); R0(b,c,d,e,a, 9); R0(a,b,c,d,e,10); R0(e,a,b,c,d,11);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R0(d,e,a,b,c,12); R0(c,d,e,a,b,13); R0(b,c,d,e,a,14); R0(a,b,c,d,e,15);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R1(e,a,b,c,d,16); R1(d,e,a,b,c,17); R1(c,d,e,a,b,18); R1(b,c,d,e,a,19);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R2(a,b,c,d,e,20); R2(e,a,b,c,d,21); R2(d,e,a,b,c,22); R2(c,d,e,a,b,23);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R2(b,c,d,e,a,24); R2(a,b,c,d,e,25); R2(e,a,b,c,d,26); R2(d,e,a,b,c,27);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R2(c,d,e,a,b,28); R2(b,c,d,e,a,29); R2(a,b,c,d,e,30); R2(e,a,b,c,d,31);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R2(d,e,a,b,c,32); R2(c,d,e,a,b,33); R2(b,c,d,e,a,34); R2(a,b,c,d,e,35);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R2(e,a,b,c,d,36); R2(d,e,a,b,c,37); R2(c,d,e,a,b,38); R2(b,c,d,e,a,39);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R3(a,b,c,d,e,40); R3(e,a,b,c,d,41); R3(d,e,a,b,c,42); R3(c,d,e,a,b,43);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R3(b,c,d,e,a,44); R3(a,b,c,d,e,45); R3(e,a,b,c,d,46); R3(d,e,a,b,c,47);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R3(c,d,e,a,b,48); R3(b,c,d,e,a,49); R3(a,b,c,d,e,50); R3(e,a,b,c,d,51);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R3(d,e,a,b,c,52); R3(c,d,e,a,b,53); R3(b,c,d,e,a,54); R3(a,b,c,d,e,55);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R3(e,a,b,c,d,56); R3(d,e,a,b,c,57); R3(c,d,e,a,b,58); R3(b,c,d,e,a,59);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R4(a,b,c,d,e,60); R4(e,a,b,c,d,61); R4(d,e,a,b,c,62); R4(c,d,e,a,b,63);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R4(b,c,d,e,a,64); R4(a,b,c,d,e,65); R4(e,a,b,c,d,66); R4(d,e,a,b,c,67);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R4(c,d,e,a,b,68); R4(b,c,d,e,a,69); R4(a,b,c,d,e,70); R4(e,a,b,c,d,71);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R4(d,e,a,b,c,72); R4(c,d,e,a,b,73); R4(b,c,d,e,a,74); R4(a,b,c,d,e,75);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews R4(e,a,b,c,d,76); R4(d,e,a,b,c,77); R4(c,d,e,a,b,78); R4(b,c,d,e,a,79);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews#endif

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews /* Add the working vars back into context.state[] */

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews state[0] += a;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews state[1] += b;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews state[2] += c;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews state[3] += d;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews state[4] += e;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews /* Wipe variables */

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews a = b = c = d = e = 0;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews /* Avoid compiler warnings */

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews POST(a); POST(b); POST(c); POST(d); POST(e);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_init(isc_sha1_t *context)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(context != NULL);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews /* SHA1 initialization constants */

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->state[0] = 0x67452301;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->state[1] = 0xEFCDAB89;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->state[2] = 0x98BADCFE;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->state[3] = 0x10325476;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->state[4] = 0xC3D2E1F0;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->count[0] = 0;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->count[1] = 0;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_invalidate(isc_sha1_t *context) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews isc_safe_memwipe(context, sizeof(*context));

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_update(isc_sha1_t *context, const unsigned char *data,

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews unsigned int len)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews{

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews unsigned int i, j;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(context != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews INSIST(data != 0);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews j = context->count[0];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews if ((context->count[0] += len << 3) < j)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews context->count[1] += (len >> 29) + 1;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews j = (j >> 3) & 63;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews if ((j + len) > 63) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (void)memmove(&context->buffer[j], data, (i = 64 - j));

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews transform(context->state, context->buffer);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews for (; i + 63 < len; i += 64)

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews transform(context->state, &data[i]);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews j = 0;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews } else {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews i = 0;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews }

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews (void)memmove(&context->buffer[j], &data[i], len - i);

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews}

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic const unsigned char final_200 = 128;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsstatic const unsigned char final_0 = 0;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrewsisc_sha1_final(isc_sha1_t *context, unsigned char *digest) {

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews unsigned int i;

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews unsigned char finalcount[8];

63dd46733010bb9622810faa17d88c3e3c28b730Mark Andrews

INSIST(digest != 0);

INSIST(context != 0);

for (i = 0; i < 8; i++) {

/* Endian independent */

finalcount[i] = (unsigned char)

((context->count[(i >= 4 ? 0 : 1)]

>> ((3 - (i & 3)) * 8)) & 255);

}

isc_sha1_update(context, &final_200, 1);

while ((context->count[0] & 504) != 448)

isc_sha1_update(context, &final_0, 1);

/* The next Update should cause a transform() */

isc_sha1_update(context, finalcount, 8);

if (digest) {

for (i = 0; i < 20; i++)

digest[i] = (unsigned char)

((context->state[i >> 2]

>> ((3 - (i & 3)) * 8)) & 255);

}

isc_safe_memwipe(context, sizeof(*context));

}

#endif

isc_sha1_check(isc_boolean_t testing) {

isc_sha1_t ctx;

unsigned char input = 'a';

unsigned char digest[ISC_SHA1_DIGESTLENGTH];

unsigned char expected[] = {

0x86, 0xf7, 0xe4, 0x37, 0xfa, 0xa5, 0xa7, 0xfc,

0xe1, 0x5d, 0x1d, 0xdc, 0xb9, 0xea, 0xea, 0xea,

0x37, 0x76, 0x67, 0xb8

};

INSIST(sizeof(expected) == ISC_SHA1_DIGESTLENGTH);

/*

if (testing) {

input ^= 0x01;

}

/*

isc_sha1_init(&ctx);

isc_sha1_update(&ctx, &input, 1U);

isc_sha1_final(&ctx, digest);

/*

return (ISC_TF(memcmp(digest, expected, ISC_SHA1_DIGESTLENGTH) == 0));

}