sum.h 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414
  1. /*
  2. SHA-1 in C
  3. By Steve Reid <[email protected]>
  4. 100% Public Domain
  5. -----------------
  6. Modified 7/98
  7. By James H. Brown <[email protected]>
  8. Still 100% Public Domain
  9. Corrected a problem which generated improper hash values on 16 bit machines
  10. Routine SHA1Update changed from
  11. void SHA1Update(SHA1_CTX* context, unsigned char* data, unsigned int
  12. len)
  13. to
  14. void SHA1Update(SHA1_CTX* context, unsigned char* data, unsigned
  15. long len)
  16. The 'len' parameter was declared an int which works fine on 32 bit machines.
  17. However, on 16 bit machines an int is too small for the shifts being done
  18. against
  19. it. This caused the hash function to generate incorrect values if len was
  20. greater than 8191 (8K - 1) due to the 'len << 3' on line 3 of SHA1Update().
  21. Since the file IO in main() reads 16K at a time, any file 8K or larger would
  22. be guaranteed to generate the wrong hash (e.g. Test Vector #3, a million
  23. "a"s).
  24. I also changed the declaration of variables i & j in SHA1Update to
  25. unsigned long from unsigned int for the same reason.
  26. These changes should make no difference to any 32 bit implementations since
  27. an
  28. int and a long are the same size in those environments.
  29. --
  30. I also corrected a few compiler warnings generated by Borland C.
  31. 1. Added #include <process.h> for exit() prototype
  32. 2. Removed unused variable 'j' in SHA1Final
  33. 3. Changed exit(0) to return(0) at end of main.
  34. ALL changes I made can be located by searching for comments containing 'JHB'
  35. -----------------
  36. Modified 8/98
  37. By Steve Reid <[email protected]>
  38. Still 100% public domain
  39. 1- Removed #include <process.h> and used return() instead of exit()
  40. 2- Fixed overwriting of finalcount in SHA1Final() (discovered by Chris Hall)
  41. 3- Changed email address from [email protected] to [email protected]
  42. -----------------
  43. Modified 4/01
  44. By Saul Kravitz <[email protected]>
  45. Still 100% PD
  46. Modified to run on Compaq Alpha hardware.
  47. -----------------
  48. Modified 07/2002
  49. By Ralph Giles <[email protected]>
  50. Still 100% public domain
  51. modified for use with stdint types, autoconf
  52. code cleanup, removed attribution comments
  53. switched SHA1Final() argument order for consistency
  54. use SHA1_ prefix for public api
  55. move public api to sha1.h
  56. */
  57. /*
  58. Test Vectors (from FIPS PUB 180-1)
  59. "abc"
  60. A9993E36 4706816A BA3E2571 7850C26C 9CD0D89D
  61. "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"
  62. 84983E44 1C3BD26E BAAE4AA1 F95129E5 E54670F1
  63. A million repetitions of "a"
  64. 34AA973C D4C4DAA4 F61EEB2B DBAD2731 6534016F
  65. */
  66. #include <stddef.h>
  67. #include <stdint.h>
  68. /* public api for steve reid's public domain SHA-1 implementation */
  69. /* this file is in the public domain */
  70. #ifndef __SHA1_H
  71. #define __SHA1_H
  72. #ifdef __cplusplus
  73. extern "C" {
  74. #endif
  75. typedef struct {
  76. uint32_t state[5];
  77. uint32_t count[2];
  78. uint8_t buffer[64];
  79. } SHA1_CTX;
  80. #define SHA1_DIGEST_SIZE 20
  81. static void SHA1_Init(SHA1_CTX* context);
  82. static void SHA1_Update(SHA1_CTX* context, const uint8_t* data, const size_t len);
  83. static void SHA1_Final(SHA1_CTX* context, uint8_t digest[SHA1_DIGEST_SIZE]);
  84. #ifdef __cplusplus
  85. }
  86. #endif
  87. #endif /* __SHA1_H */
  88. #define SHA1HANDSOFF
  89. #ifdef HAVE_CONFIG_H
  90. #include "config.h"
  91. #endif
  92. #include <stdio.h>
  93. #include <string.h>
  94. //#include "os_types.h"
  95. //#include "sha1.h"
  96. static void SHA1_Transform(uint32_t state[5], const uint8_t buffer[64]);
  97. #define rol(value, bits) (((value) << (bits)) | ((value) >> (32 - (bits))))
  98. /* blk0() and blk() perform the initial expand. */
  99. /* I got the idea of expanding during the round function from SSLeay */
  100. /* FIXME: can we do this in an endian-proof way? */
  101. #ifdef WORDS_BIGENDIAN
  102. #define blk0(i) block->l[i]
  103. #else
  104. #define blk0(i) (block->l[i] = (rol(block->l[i],24)&0xFF00FF00) \
  105. |(rol(block->l[i],8)&0x00FF00FF))
  106. #endif
  107. #define blk(i) (block->l[i&15] = rol(block->l[(i+13)&15]^block->l[(i+8)&15] \
  108. ^block->l[(i+2)&15]^block->l[i&15],1))
  109. /* (R0+R1), R2, R3, R4 are the different operations used in SHA1 */
  110. #define R0(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk0(i)+0x5A827999+rol(v,5);w=rol(w,30);
  111. #define R1(v,w,x,y,z,i) z+=((w&(x^y))^y)+blk(i)+0x5A827999+rol(v,5);w=rol(w,30);
  112. #define R2(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0x6ED9EBA1+rol(v,5);w=rol(w,30);
  113. #define R3(v,w,x,y,z,i) z+=(((w|x)&y)|(w&x))+blk(i)+0x8F1BBCDC+rol(v,5);w=rol(w,30);
  114. #define R4(v,w,x,y,z,i) z+=(w^x^y)+blk(i)+0xCA62C1D6+rol(v,5);w=rol(w,30);
  115. #ifdef VERBOSE /* SAK */
  116. void SHAPrintContext(SHA1_CTX *context, char *msg){
  117. printf("%s (%d,%d) %x %x %x %x %x\n",
  118. msg,
  119. context->count[0], context->count[1],
  120. context->state[0],
  121. context->state[1],
  122. context->state[2],
  123. context->state[3],
  124. context->state[4]);
  125. }
  126. #endif /* VERBOSE */
  127. /* Hash a single 512-bit block. This is the core of the algorithm. */
  128. static void SHA1_Transform(uint32_t state[5], const uint8_t buffer[64])
  129. {
  130. uint32_t a, b, c, d, e;
  131. typedef union {
  132. uint8_t c[64];
  133. uint32_t l[16];
  134. } CHAR64LONG16;
  135. CHAR64LONG16* block;
  136. #ifdef SHA1HANDSOFF
  137. static uint8_t workspace[64];
  138. block = (CHAR64LONG16*)workspace;
  139. memcpy(block, buffer, 64);
  140. #else
  141. block = (CHAR64LONG16*)buffer;
  142. #endif
  143. /* Copy context->state[] to working vars */
  144. a = state[0];
  145. b = state[1];
  146. c = state[2];
  147. d = state[3];
  148. e = state[4];
  149. /* 4 rounds of 20 operations each. Loop unrolled. */
  150. R0(a,b,c,d,e, 0); R0(e,a,b,c,d, 1); R0(d,e,a,b,c, 2); R0(c,d,e,a,b, 3);
  151. R0(b,c,d,e,a, 4); R0(a,b,c,d,e, 5); R0(e,a,b,c,d, 6); R0(d,e,a,b,c, 7);
  152. R0(c,d,e,a,b, 8); R0(b,c,d,e,a, 9); R0(a,b,c,d,e,10); R0(e,a,b,c,d,11);
  153. R0(d,e,a,b,c,12); R0(c,d,e,a,b,13); R0(b,c,d,e,a,14); R0(a,b,c,d,e,15);
  154. R1(e,a,b,c,d,16); R1(d,e,a,b,c,17); R1(c,d,e,a,b,18); R1(b,c,d,e,a,19);
  155. R2(a,b,c,d,e,20); R2(e,a,b,c,d,21); R2(d,e,a,b,c,22); R2(c,d,e,a,b,23);
  156. R2(b,c,d,e,a,24); R2(a,b,c,d,e,25); R2(e,a,b,c,d,26); R2(d,e,a,b,c,27);
  157. R2(c,d,e,a,b,28); R2(b,c,d,e,a,29); R2(a,b,c,d,e,30); R2(e,a,b,c,d,31);
  158. R2(d,e,a,b,c,32); R2(c,d,e,a,b,33); R2(b,c,d,e,a,34); R2(a,b,c,d,e,35);
  159. R2(e,a,b,c,d,36); R2(d,e,a,b,c,37); R2(c,d,e,a,b,38); R2(b,c,d,e,a,39);
  160. R3(a,b,c,d,e,40); R3(e,a,b,c,d,41); R3(d,e,a,b,c,42); R3(c,d,e,a,b,43);
  161. R3(b,c,d,e,a,44); R3(a,b,c,d,e,45); R3(e,a,b,c,d,46); R3(d,e,a,b,c,47);
  162. R3(c,d,e,a,b,48); R3(b,c,d,e,a,49); R3(a,b,c,d,e,50); R3(e,a,b,c,d,51);
  163. R3(d,e,a,b,c,52); R3(c,d,e,a,b,53); R3(b,c,d,e,a,54); R3(a,b,c,d,e,55);
  164. R3(e,a,b,c,d,56); R3(d,e,a,b,c,57); R3(c,d,e,a,b,58); R3(b,c,d,e,a,59);
  165. R4(a,b,c,d,e,60); R4(e,a,b,c,d,61); R4(d,e,a,b,c,62); R4(c,d,e,a,b,63);
  166. R4(b,c,d,e,a,64); R4(a,b,c,d,e,65); R4(e,a,b,c,d,66); R4(d,e,a,b,c,67);
  167. R4(c,d,e,a,b,68); R4(b,c,d,e,a,69); R4(a,b,c,d,e,70); R4(e,a,b,c,d,71);
  168. R4(d,e,a,b,c,72); R4(c,d,e,a,b,73); R4(b,c,d,e,a,74); R4(a,b,c,d,e,75);
  169. R4(e,a,b,c,d,76); R4(d,e,a,b,c,77); R4(c,d,e,a,b,78); R4(b,c,d,e,a,79);
  170. /* Add the working vars back into context.state[] */
  171. state[0] += a;
  172. state[1] += b;
  173. state[2] += c;
  174. state[3] += d;
  175. state[4] += e;
  176. /* Wipe variables */
  177. a = b = c = d = e = 0;
  178. }
  179. /* SHA1Init - Initialize new context */
  180. static void SHA1_Init(SHA1_CTX* context)
  181. {
  182. /* SHA1 initialization constants */
  183. context->state[0] = 0x67452301;
  184. context->state[1] = 0xEFCDAB89;
  185. context->state[2] = 0x98BADCFE;
  186. context->state[3] = 0x10325476;
  187. context->state[4] = 0xC3D2E1F0;
  188. context->count[0] = context->count[1] = 0;
  189. }
  190. /* Run your data through this. */
  191. static void SHA1_Update(SHA1_CTX* context, const uint8_t* data, const size_t len)
  192. {
  193. size_t i, j;
  194. #ifdef VERBOSE
  195. SHAPrintContext(context, "before");
  196. #endif
  197. j = (context->count[0] >> 3) & 63;
  198. if ((context->count[0] += len << 3) < (len << 3)) context->count[1]++;
  199. context->count[1] += (len >> 29);
  200. if ((j + len) > 63) {
  201. memcpy(&context->buffer[j], data, (i = 64-j));
  202. SHA1_Transform(context->state, context->buffer);
  203. for ( ; i + 63 < len; i += 64) {
  204. SHA1_Transform(context->state, data + i);
  205. }
  206. j = 0;
  207. }
  208. else i = 0;
  209. memcpy(&context->buffer[j], &data[i], len - i);
  210. #ifdef VERBOSE
  211. SHAPrintContext(context, "after ");
  212. #endif
  213. }
  214. /* Add padding and return the message digest. */
  215. static void SHA1_Final(SHA1_CTX* context, uint8_t digest[SHA1_DIGEST_SIZE])
  216. {
  217. uint32_t i;
  218. uint8_t finalcount[8];
  219. for (i = 0; i < 8; i++) {
  220. finalcount[i] = (unsigned char)((context->count[(i >= 4 ? 0 : 1)]
  221. >> ((3-(i & 3)) * 8) ) & 255); /* Endian independent */
  222. }
  223. SHA1_Update(context, (uint8_t *)"\200", 1);
  224. while ((context->count[0] & 504) != 448) {
  225. SHA1_Update(context, (uint8_t *)"\0", 1);
  226. }
  227. SHA1_Update(context, finalcount, 8); /* Should cause a SHA1_Transform() */
  228. for (i = 0; i < SHA1_DIGEST_SIZE; i++) {
  229. digest[i] = (uint8_t)
  230. ((context->state[i>>2] >> ((3-(i & 3)) * 8) ) & 255);
  231. }
  232. /* Wipe variables */
  233. i = 0;
  234. memset(context->buffer, 0, 64);
  235. memset(context->state, 0, 20);
  236. memset(context->count, 0, 8);
  237. memset(finalcount, 0, 8); /* SWR */
  238. #ifdef SHA1HANDSOFF /* make SHA1Transform overwrite its own static vars */
  239. SHA1_Transform(context->state, context->buffer);
  240. #endif
  241. }
  242. static inline unsigned long sum(void *data, int len)
  243. {
  244. SHA1_CTX sha;
  245. uint8_t digest[20];
  246. SHA1_Init(&sha);
  247. SHA1_Update(&sha, data, len);
  248. SHA1_Final(&sha, digest);
  249. return digest[0] << 24 | digest[1] << 16 | digest[2] << 8 | digest[3];
  250. }
  251. #if 0
  252. int main(int argc, char** argv)
  253. {
  254. int i, j;
  255. SHA1_CTX context;
  256. unsigned char digest[SHA1_DIGEST_SIZE], buffer[16384];
  257. FILE* file;
  258. if (argc > 2) {
  259. puts("Public domain SHA-1 implementation - by Steve Reid <[email protected]>");
  260. puts("Modified for 16 bit environments 7/98 - by James H. Brown <[email protected]>"); /* JHB */
  261. puts("Produces the SHA-1 hash of a file, or stdin if no file is specified.");
  262. return(0);
  263. }
  264. if (argc < 2) {
  265. file = stdin;
  266. }
  267. else {
  268. if (!(file = fopen(argv[1], "rb"))) {
  269. fputs("Unable to open file.", stderr);
  270. return(-1);
  271. }
  272. }
  273. SHA1_Init(&context);
  274. while (!feof(file)) { /* note: what if ferror(file) */
  275. i = fread(buffer, 1, 16384, file);
  276. SHA1_Update(&context, buffer, i);
  277. }
  278. SHA1_Final(&context, digest);
  279. fclose(file);
  280. for (i = 0; i < SHA1_DIGEST_SIZE/4; i++) {
  281. for (j = 0; j < 4; j++) {
  282. printf("%02X", digest[i*4+j]);
  283. }
  284. putchar(' ');
  285. }
  286. putchar('\n');
  287. return(0); /* JHB */
  288. }
  289. #endif
  290. #if 0
  291. /* self test */
  292. #define TEST
  293. #ifdef TEST
  294. static char *test_data[] = {
  295. "abc",
  296. "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
  297. "A million repetitions of 'a'"};
  298. static char *test_results[] = {
  299. "A9993E36 4706816A BA3E2571 7850C26C 9CD0D89D",
  300. "84983E44 1C3BD26E BAAE4AA1 F95129E5 E54670F1",
  301. "34AA973C D4C4DAA4 F61EEB2B DBAD2731 6534016F"};
  302. void digest_to_hex(const uint8_t digest[SHA1_DIGEST_SIZE], char *output)
  303. {
  304. int i,j;
  305. char *c = output;
  306. for (i = 0; i < SHA1_DIGEST_SIZE/4; i++) {
  307. for (j = 0; j < 4; j++) {
  308. sprintf(c,"%02X", digest[i*4+j]);
  309. c += 2;
  310. }
  311. sprintf(c, " ");
  312. c += 1;
  313. }
  314. *(c - 1) = '\0';
  315. }
  316. int main(int argc, char** argv)
  317. {
  318. int k;
  319. SHA1_CTX context;
  320. uint8_t digest[20];
  321. char output[80];
  322. fprintf(stdout, "verifying SHA-1 implementation... ");
  323. for (k = 0; k < 2; k++){
  324. SHA1_Init(&context);
  325. SHA1_Update(&context, (uint8_t*)test_data[k], strlen(test_data[k]));
  326. SHA1_Final(&context, digest);
  327. digest_to_hex(digest, output);
  328. if (strcmp(output, test_results[k])) {
  329. fprintf(stdout, "FAIL\n");
  330. fprintf(stderr,"* hash of \"%s\" incorrect:\n", test_data[k]);
  331. fprintf(stderr,"\t%s returned\n", output);
  332. fprintf(stderr,"\t%s is correct\n", test_results[k]);
  333. return (1);
  334. }
  335. }
  336. /* million 'a' vector we feed separately */
  337. SHA1_Init(&context);
  338. for (k = 0; k < 1000000; k++)
  339. SHA1_Update(&context, (uint8_t*)"a", 1);
  340. SHA1_Final(&context, digest);
  341. digest_to_hex(digest, output);
  342. if (strcmp(output, test_results[2])) {
  343. fprintf(stdout, "FAIL\n");
  344. fprintf(stderr,"* hash of \"%s\" incorrect:\n", test_data[2]);
  345. fprintf(stderr,"\t%s returned\n", output);
  346. fprintf(stderr,"\t%s is correct\n", test_results[2]);
  347. return (1);
  348. }
  349. /* success */
  350. fprintf(stdout, "ok\n");
  351. return(0);
  352. }
  353. #endif /* TEST */
  354. #endif