xref: /freebsd/sbin/md5/md5.c (revision a91a2465)
1 /*
2  * Derived from:
3  *
4  * MDDRIVER.C - test driver for MD2, MD4 and MD5
5  */
6 
7 /*
8  *  Copyright (C) 1990-2, RSA Data Security, Inc. Created 1990. All
9  *  rights reserved.
10  *
11  *  RSA Data Security, Inc. makes no representations concerning either
12  *  the merchantability of this software or the suitability of this
13  *  software for any particular purpose. It is provided "as is"
14  *  without express or implied warranty of any kind.
15  *
16  *  These notices must be retained in any copies of any part of this
17  *  documentation and/or software.
18  */
19 
20 #include <sys/param.h>
21 #include <sys/resource.h>
22 #include <sys/stat.h>
23 #include <sys/time.h>
24 
25 #include <err.h>
26 #include <errno.h>
27 #include <fcntl.h>
28 #include <getopt.h>
29 #include <md5.h>
30 #include <osreldate.h>
31 #include <ripemd.h>
32 #include <sha.h>
33 #include <sha224.h>
34 #include <sha256.h>
35 #include <sha384.h>
36 #include <sha512.h>
37 #include <sha512t.h>
38 #include <skein.h>
39 #include <stdbool.h>
40 #include <stdio.h>
41 #include <stdlib.h>
42 #include <string.h>
43 #include <time.h>
44 #include <unistd.h>
45 
46 #ifdef HAVE_CAPSICUM
47 #include <sys/capsicum.h>
48 #include <capsicum_helpers.h>
49 #include <libcasper.h>
50 #include <casper/cap_fileargs.h>
51 #endif
52 
53 /*
54  * Length of test block, number of test blocks.
55  */
56 #define TEST_BLOCK_LEN 10000
57 #define TEST_BLOCK_COUNT 100000
58 #define MDTESTCOUNT 8
59 
60 static char *progname;
61 
62 static bool cflag;
63 static bool pflag;
64 static bool qflag;
65 static bool sflag;
66 static bool wflag;
67 static bool strict;
68 static bool skip;
69 static bool ignoreMissing;
70 static char* checkAgainst;
71 static int checksFailed;
72 static bool failed;
73 static int endl = '\n';
74 
75 typedef void (DIGEST_Init)(void *);
76 typedef void (DIGEST_Update)(void *, const unsigned char *, size_t);
77 typedef char *(DIGEST_End)(void *, char *);
78 
79 extern const char *MD5TestOutput[MDTESTCOUNT];
80 extern const char *SHA1_TestOutput[MDTESTCOUNT];
81 extern const char *SHA224_TestOutput[MDTESTCOUNT];
82 extern const char *SHA256_TestOutput[MDTESTCOUNT];
83 extern const char *SHA384_TestOutput[MDTESTCOUNT];
84 extern const char *SHA512_TestOutput[MDTESTCOUNT];
85 extern const char *SHA512t224_TestOutput[MDTESTCOUNT];
86 extern const char *SHA512t256_TestOutput[MDTESTCOUNT];
87 extern const char *RIPEMD160_TestOutput[MDTESTCOUNT];
88 extern const char *SKEIN256_TestOutput[MDTESTCOUNT];
89 extern const char *SKEIN512_TestOutput[MDTESTCOUNT];
90 extern const char *SKEIN1024_TestOutput[MDTESTCOUNT];
91 
92 typedef struct Algorithm_t {
93 	const char *progname;
94 	const char *perlname;
95 	const char *name;
96 	const char *(*TestOutput)[MDTESTCOUNT];
97 	DIGEST_Init *Init;
98 	DIGEST_Update *Update;
99 	DIGEST_End *End;
100 	char *(*Data)(const void *, unsigned int, char *);
101 } Algorithm_t;
102 
103 static void MD5_Update(MD5_CTX *, const unsigned char *, size_t);
104 static char *MDInput(const Algorithm_t *, FILE *, char *, bool);
105 static void MDOutput(const Algorithm_t *, char *, const char *);
106 static void MDTimeTrial(const Algorithm_t *);
107 static void MDTestSuite(const Algorithm_t *);
108 static void usage(const Algorithm_t *);
109 static void version(void);
110 
111 typedef union {
112 	MD5_CTX md5;
113 	SHA1_CTX sha1;
114 	SHA224_CTX sha224;
115 	SHA256_CTX sha256;
116 	SHA384_CTX sha384;
117 	SHA512_CTX sha512;
118 	RIPEMD160_CTX ripemd160;
119 	SKEIN256_CTX skein256;
120 	SKEIN512_CTX skein512;
121 	SKEIN1024_CTX skein1024;
122 } DIGEST_CTX;
123 
124 /* max(MD5_DIGEST_LENGTH, SHA_DIGEST_LENGTH,
125 	SHA256_DIGEST_LENGTH, SHA512_DIGEST_LENGTH,
126 	RIPEMD160_DIGEST_LENGTH, SKEIN1024_DIGEST_LENGTH)*2+1 */
127 #define HEX_DIGEST_LENGTH 257
128 
129 /* algorithm function table */
130 
131 static const struct Algorithm_t Algorithm[] = {
132 	{ "md5", NULL, "MD5",
133 		&MD5TestOutput, (DIGEST_Init*)&MD5Init,
134 		(DIGEST_Update*)&MD5_Update, (DIGEST_End*)&MD5End,
135 		&MD5Data },
136 	{ "sha1", "1", "SHA1",
137 		&SHA1_TestOutput, (DIGEST_Init*)&SHA1_Init,
138 		(DIGEST_Update*)&SHA1_Update, (DIGEST_End*)&SHA1_End,
139 		&SHA1_Data },
140 	{ "sha224", "224", "SHA224",
141 		&SHA224_TestOutput, (DIGEST_Init*)&SHA224_Init,
142 		(DIGEST_Update*)&SHA224_Update, (DIGEST_End*)&SHA224_End,
143 		&SHA224_Data },
144 	{ "sha256", "256", "SHA256",
145 		&SHA256_TestOutput, (DIGEST_Init*)&SHA256_Init,
146 		(DIGEST_Update*)&SHA256_Update, (DIGEST_End*)&SHA256_End,
147 		&SHA256_Data },
148 	{ "sha384", "384", "SHA384",
149 		&SHA384_TestOutput, (DIGEST_Init*)&SHA384_Init,
150 		(DIGEST_Update*)&SHA384_Update, (DIGEST_End*)&SHA384_End,
151 		&SHA384_Data },
152 	{ "sha512", "512", "SHA512",
153 		&SHA512_TestOutput, (DIGEST_Init*)&SHA512_Init,
154 		(DIGEST_Update*)&SHA512_Update, (DIGEST_End*)&SHA512_End,
155 		&SHA512_Data },
156 	{ "sha512t224", "512224", "SHA512t224",
157 		&SHA512t224_TestOutput, (DIGEST_Init*)&SHA512_224_Init,
158 		(DIGEST_Update*)&SHA512_224_Update, (DIGEST_End*)&SHA512_224_End,
159 		&SHA512_224_Data },
160 	{ "sha512t256", "512256", "SHA512t256",
161 		&SHA512t256_TestOutput, (DIGEST_Init*)&SHA512_256_Init,
162 		(DIGEST_Update*)&SHA512_256_Update, (DIGEST_End*)&SHA512_256_End,
163 		&SHA512_256_Data },
164 	{ "rmd160", NULL, "RMD160",
165 		&RIPEMD160_TestOutput,
166 		(DIGEST_Init*)&RIPEMD160_Init, (DIGEST_Update*)&RIPEMD160_Update,
167 		(DIGEST_End*)&RIPEMD160_End, &RIPEMD160_Data },
168 	{ "skein256", NULL, "Skein256",
169 		&SKEIN256_TestOutput,
170 		(DIGEST_Init*)&SKEIN256_Init, (DIGEST_Update*)&SKEIN256_Update,
171 		(DIGEST_End*)&SKEIN256_End, &SKEIN256_Data },
172 	{ "skein512", NULL, "Skein512",
173 		&SKEIN512_TestOutput,
174 		(DIGEST_Init*)&SKEIN512_Init, (DIGEST_Update*)&SKEIN512_Update,
175 		(DIGEST_End*)&SKEIN512_End, &SKEIN512_Data },
176 	{ "skein1024", NULL, "Skein1024",
177 		&SKEIN1024_TestOutput,
178 		(DIGEST_Init*)&SKEIN1024_Init, (DIGEST_Update*)&SKEIN1024_Update,
179 		(DIGEST_End*)&SKEIN1024_End, &SKEIN1024_Data },
180 	{ }
181 };
182 
183 static int digest = -1;
184 static unsigned int malformed;
185 
186 static enum mode {
187 	mode_bsd,
188 	mode_gnu,
189 	mode_perl,
190 } mode = mode_bsd;
191 
192 static enum input_mode {
193 	input_binary	 = '*',
194 	input_text	 = ' ',
195 	input_universal	 = 'U',
196 	input_bits	 = '^',
197 } input_mode = input_binary;
198 
199 static enum output_mode {
200 	output_bare,
201 	output_tagged,
202 	output_reverse,
203 	output_gnu,
204 } output_mode = output_tagged;
205 
206 enum optval {
207 	opt_end = -1,
208 	/* ensure we don't collide with shortopts */
209 	opt_dummy = CHAR_MAX,
210 	/* BSD options */
211 	opt_check,
212 	opt_passthrough,
213 	opt_quiet,
214 	opt_reverse,
215 	opt_string,
216 	opt_time_trial,
217 	opt_self_test,
218 	/* GNU options */
219 	opt_binary,
220 	opt_help,
221 	opt_ignore_missing,
222 	opt_status,
223 	opt_strict,
224 	opt_tag,
225 	opt_text,
226 	opt_warn,
227 	opt_version,
228 	opt_zero,
229 	/* Perl options */
230 	opt_algorithm,
231 	opt_bits,
232 	opt_universal,
233 };
234 
235 static const struct option bsd_longopts[] = {
236 	{ "check",		required_argument,	0, opt_check },
237 	{ "passthrough",	no_argument,		0, opt_passthrough },
238 	{ "quiet",		no_argument,		0, opt_quiet },
239 	{ "reverse",		no_argument,		0, opt_reverse },
240 	{ "string",		required_argument,	0, opt_string },
241 	{ "time-trial",		no_argument,		0, opt_time_trial },
242 	{ "self-test",		no_argument,		0, opt_self_test },
243 	{ }
244 };
245 static const char *bsd_shortopts = "bc:pqrs:tx";
246 
247 static const struct option gnu_longopts[] = {
248 	{ "binary",		no_argument,		0, opt_binary },
249 	{ "check",		no_argument,		0, opt_check },
250 	{ "help",		no_argument,		0, opt_help },
251 	{ "ignore-missing",	no_argument,		0, opt_ignore_missing },
252 	{ "quiet",		no_argument,		0, opt_quiet },
253 	{ "status",		no_argument,		0, opt_status },
254 	{ "strict",		no_argument,		0, opt_strict },
255 	{ "tag",		no_argument,		0, opt_tag },
256 	{ "text",		no_argument,		0, opt_text },
257 	{ "version",		no_argument,		0, opt_version },
258 	{ "warn",		no_argument,		0, opt_warn },
259 	{ "zero",		no_argument,		0, opt_zero },
260 	{ }
261 };
262 static const char *gnu_shortopts = "bctwz";
263 
264 static const struct option perl_longopts[] = {
265 	{ "algorithm",		required_argument,	0, opt_algorithm },
266 	{ "binary",		no_argument,		0, opt_binary },
267 	{ "check",		no_argument,		0, opt_check },
268 	{ "help",		no_argument,		0, opt_help },
269 	{ "ignore-missing",	no_argument,		0, opt_ignore_missing },
270 	{ "quiet",		no_argument,		0, opt_quiet },
271 	{ "status",		no_argument,		0, opt_status },
272 	{ "strict",		no_argument,		0, opt_strict },
273 	{ "tag",		no_argument,		0, opt_tag },
274 	{ "text",		no_argument,		0, opt_text },
275 	{ "UNIVERSAL",		no_argument,		0, opt_universal },
276 	{ "version",		no_argument,		0, opt_version },
277 	{ "warn",		no_argument,		0, opt_warn },
278 	{ "01",			no_argument,		0, opt_bits },
279 	{ }
280 };
281 static const char *perl_shortopts = "0a:bchqstUvw";
282 
283 static void
284 MD5_Update(MD5_CTX *c, const unsigned char *data, size_t len)
285 {
286 	MD5Update(c, data, len);
287 }
288 
289 struct chksumrec {
290 	char *filename;
291 	enum input_mode input_mode;
292 	char *chksum;
293 	struct chksumrec *next;
294 };
295 
296 static struct chksumrec *head = NULL;
297 static struct chksumrec **next = &head;
298 static unsigned int numrecs;
299 
300 #define PADDING	7	/* extra padding for "SHA512t256 (...) = ...\n" style */
301 #define CHKFILELINELEN	(HEX_DIGEST_LENGTH + MAXPATHLEN + PADDING)
302 
303 static void
304 gnu_check(const char *checksumsfile)
305 {
306 	FILE *inp;
307 	char *linebuf = NULL;
308 	size_t linecap;
309 	ssize_t linelen;
310 	int lineno;
311 	char *filename;
312 	char *hashstr;
313 	struct chksumrec *rec;
314 	const char *digestname;
315 	size_t digestnamelen;
316 	size_t hashstrlen;
317 	struct stat st;
318 
319 	if (strcmp(checksumsfile, "-") == 0)
320 		inp = stdin;
321 	else if ((inp = fopen(checksumsfile, "r")) == NULL)
322 		err(1, "%s", checksumsfile);
323 	digestname = Algorithm[digest].name;
324 	digestnamelen = strlen(digestname);
325 	hashstrlen = strlen(*(Algorithm[digest].TestOutput[0]));
326 	lineno = 0;
327 	linecap = CHKFILELINELEN;
328 	while ((linelen = getline(&linebuf, &linecap, inp)) > 0) {
329 		lineno++;
330 		while (linelen > 0 && linebuf[linelen - 1] == '\n')
331 			linelen--;
332 		linebuf[linelen] = '\0';
333 		filename = linebuf + digestnamelen + 2;
334 		hashstr = linebuf + linelen - hashstrlen;
335 		/*
336 		 * supported formats:
337 		 * BSD: <DigestName> (<Filename>): <Digest>
338 		 * GNU: <Digest> [ *U^]<Filename>
339 		 */
340 		if ((size_t)linelen >= digestnamelen + hashstrlen + 6 &&
341 		    strncmp(linebuf, digestname, digestnamelen) == 0 &&
342 		    strncmp(filename - 2, " (", 2) == 0 &&
343 		    strncmp(hashstr - 4, ") = ", 4) == 0 &&
344 		    strspn(hashstr, "0123456789ABCDEFabcdef") == hashstrlen) {
345 			*(hashstr - 4) = '\0';
346 		} else if ((size_t)linelen >= hashstrlen + 3 &&
347 		    strspn(linebuf, "0123456789ABCDEFabcdef") == hashstrlen &&
348 		    linebuf[hashstrlen] == ' ') {
349 			linebuf[hashstrlen] = '\0';
350 			hashstr = linebuf;
351 			filename = linebuf + hashstrlen + 1;
352 		} else {
353 			if (wflag) {
354 				warnx("%s: %d: improperly formatted "
355 				    "%s checksum line",
356 				    checksumsfile, lineno,
357 				    mode == mode_perl ? "SHA" : digestname);
358 			}
359 			malformed++;
360 			continue;
361 		}
362 		rec = malloc(sizeof(*rec));
363 		if (rec == NULL)
364 			errx(1, "malloc failed");
365 
366 		if ((*filename == '*' || *filename == ' ' ||
367 		    *filename == 'U' || *filename == '^') &&
368 		    lstat(filename, &st) != 0 &&
369 		    lstat(filename + 1, &st) == 0) {
370 			rec->filename = strdup(filename + 1);
371 			rec->input_mode = (enum input_mode)*filename;
372 		} else {
373 			rec->filename = strdup(filename);
374 			rec->input_mode = input_mode;
375 		}
376 
377 		rec->chksum = strdup(hashstr);
378 		if (rec->chksum == NULL || rec->filename == NULL)
379 			errx(1, "malloc failed");
380 		rec->next = NULL;
381 		*next = rec;
382 		next = &rec->next;
383 		numrecs++;
384 	}
385 	if (inp != stdin)
386 		fclose(inp);
387 }
388 
389 /* Main driver.
390 
391 Arguments (may be any combination):
392   -sstring - digests string
393   -t       - runs time trial
394   -x       - runs test script
395   filename - digests file
396   (none)   - digests standard input
397  */
398 int
399 main(int argc, char *argv[])
400 {
401 #ifdef HAVE_CAPSICUM
402 	cap_rights_t rights;
403 	fileargs_t *fa = NULL;
404 #endif
405 	const struct option *longopts;
406 	const char *shortopts;
407 	FILE *f;
408 	int i, opt;
409 	char *p, *string = NULL;
410 	char buf[HEX_DIGEST_LENGTH];
411 	size_t len;
412 	struct chksumrec *rec;
413 
414 	if ((progname = strrchr(argv[0], '/')) == NULL)
415 		progname = argv[0];
416 	else
417 		progname++;
418 
419 	/*
420 	 * GNU coreutils has a number of programs named *sum. These produce
421 	 * similar results to the BSD version, but in a different format,
422 	 * similar to BSD's -r flag. We install links to this program with
423 	 * ending 'sum' to provide this compatibility. Check here to see if the
424 	 * name of the program ends in 'sum', set the flag and drop the 'sum' so
425 	 * the digest lookup works. Also, make -t a nop when running in this mode
426 	 * since that means 'text file' there (though it's a nop in coreutils
427 	 * on unix-like systems). The -c flag conflicts, so it's just disabled
428 	 * in this mode (though in the future it might be implemented).
429 	 *
430 	 * We also strive to be compatible with the shasum script which is
431 	 * included in Perl.  It is roughly equivalent to the GNU offering
432 	 * but uses a command-line argument to select the algorithm, and
433 	 * supports only SHA-1 and SHA-2.
434 	 */
435 	len = strlen(progname);
436 	if (strcmp(progname, "shasum") == 0) {
437 		mode = mode_perl;
438 		input_mode = input_text;
439 		output_mode = output_gnu;
440 		digest = 1;
441 		longopts = perl_longopts;
442 		shortopts = perl_shortopts;
443 	} else if (len > 3 && strcmp(progname + len - 3, "sum") == 0) {
444 		len -= 3;
445 		mode = mode_gnu;
446 		input_mode = input_text;
447 		/*
448 		 * The historical behavior in GNU emulation mode is
449 		 * output_reverse, however this not true to the original
450 		 * and the flag that was used to force the correct output
451 		 * was -b, which means something else (input_binary) in
452 		 * GNU land.  Switch to the correct behavior.
453 		 */
454 		output_mode = output_gnu;
455 		longopts = gnu_longopts;
456 		shortopts = gnu_shortopts;
457 	} else {
458 		mode = mode_bsd;
459 		input_mode = input_binary;
460 		output_mode = output_tagged;
461 		longopts = bsd_longopts;
462 		shortopts = bsd_shortopts;
463 	}
464 
465 	if (digest < 0) {
466 		for (digest = 0; Algorithm[digest].progname != NULL; digest++)
467 			if (strncasecmp(Algorithm[digest].progname, progname, len) == 0)
468 				break;
469 
470 		if (Algorithm[digest].progname == NULL)
471 			digest = 0;
472 	}
473 
474 	failed = false;
475 	checkAgainst = NULL;
476 	checksFailed = 0;
477 	skip = false;
478 	while ((opt = getopt_long(argc, argv, shortopts, longopts, NULL)) != opt_end)
479 		switch (opt) {
480 		case opt_bits:
481 		case '0':
482 			input_mode = input_bits;
483 			break;
484 		case opt_algorithm:
485 		case 'a':
486 			for (i = 0; Algorithm[i].progname != NULL; i++) {
487 				if (Algorithm[i].perlname != NULL &&
488 				    strcasecmp(Algorithm[i].perlname, optarg) == 0) {
489 					digest = i;
490 					break;
491 				}
492 			}
493 			if (Algorithm[i].progname == NULL)
494 				usage(&Algorithm[digest]);
495 			break;
496 		case opt_binary:
497 		case 'b':
498 			/* in BSD mode, -b is now a no-op */
499 			if (mode != mode_bsd)
500 				input_mode = input_binary;
501 			break;
502 		case opt_check:
503 		case 'c':
504 			cflag = true;
505 			if (mode == mode_bsd)
506 				checkAgainst = optarg;
507 			break;
508 		case opt_passthrough:
509 		case 'p':
510 			pflag = true;
511 			break;
512 		case opt_quiet:
513 		case 'q':
514 			output_mode = output_bare;
515 			qflag = true;
516 			break;
517 		case opt_reverse:
518 		case 'r':
519 			if (!qflag)
520 				output_mode = output_reverse;
521 			break;
522 		case opt_status:
523 			sflag = true;
524 			break;
525 		case opt_strict:
526 			strict = 1;
527 			break;
528 		case 's':
529 			if (mode == mode_perl) {
530 				sflag = true;
531 				break;
532 			}
533 			/* fall through */
534 		case opt_string:
535 			output_mode = output_bare;
536 			string = optarg;
537 			break;
538 		case opt_tag:
539 			output_mode = output_tagged;
540 			break;
541 		case opt_time_trial:
542 		case opt_text:
543 		case 't':
544 			if (mode == mode_bsd) {
545 				MDTimeTrial(&Algorithm[digest]);
546 				skip = true;
547 			} else {
548 				input_mode = input_text;
549 			}
550 			break;
551 		case opt_universal:
552 		case 'U':
553 			input_mode = input_universal;
554 			break;
555 		case opt_version:
556 			version();
557 			break;
558 		case opt_warn:
559 		case 'w':
560 			wflag = true;
561 			break;
562 		case opt_self_test:
563 		case 'x':
564 			MDTestSuite(&Algorithm[digest]);
565 			skip = true;
566 			break;
567 		case opt_zero:
568 		case 'z':
569 			endl = '\0';
570 			break;
571 		case opt_ignore_missing:
572 			ignoreMissing = true;
573 			break;
574 		default:
575 			usage(&Algorithm[digest]);
576 		}
577 	argc -= optind;
578 	argv += optind;
579 
580 #ifdef HAVE_CAPSICUM
581 	if (caph_limit_stdio() < 0)
582 		err(1, "unable to limit rights for stdio");
583 #endif
584 
585 	if (cflag && mode != mode_bsd) {
586 		/*
587 		 * Read digest files into a linked list, then replace argv
588 		 * with an array of the filenames from that list.
589 		 */
590 		if (argc < 1)
591 			usage(&Algorithm[digest]);
592 		while (argc--)
593 			gnu_check(*argv++);
594 		argc = 0;
595 		argv = calloc(sizeof(char *), numrecs + 1);
596 		for (rec = head; rec != NULL; rec = rec->next) {
597 			argv[argc] = rec->filename;
598 			argc++;
599 		}
600 		argv[argc] = NULL;
601 		rec = head;
602 	}
603 
604 #ifdef HAVE_CAPSICUM
605 	fa = fileargs_init(argc, argv, O_RDONLY, 0,
606 	    cap_rights_init(&rights, CAP_READ, CAP_FSTAT, CAP_FCNTL), FA_OPEN | FA_LSTAT);
607 	if (fa == NULL)
608 		err(1, "Unable to initialize casper");
609 	if (caph_enter_casper() < 0)
610 		err(1, "Unable to enter capability mode");
611 #endif
612 
613 	if (*argv && !pflag && string == NULL) {
614 		do {
615 			const char *filename = *argv;
616 			const char *filemode = "rb";
617 
618 			if (cflag && mode != mode_bsd) {
619 				input_mode = rec->input_mode;
620 				checkAgainst = rec->chksum;
621 				rec = rec->next;
622 			}
623 			if (input_mode == input_text)
624 				filemode = "r";
625 			if (strcmp(filename, "-") == 0) {
626 				f = stdin;
627 			} else {
628 #ifdef HAVE_CAPSICUM
629 				f = fileargs_fopen(fa, filename, filemode);
630 #else
631 				f = fopen(filename, filemode);
632 #endif
633 			}
634 			if (f == NULL) {
635 				if (errno != ENOENT || !(cflag && ignoreMissing)) {
636 					warn("%s", filename);
637 					failed = true;
638 				}
639 				continue;
640 			}
641 			p = MDInput(&Algorithm[digest], f, buf, false);
642 			if (f != stdin)
643 				(void)fclose(f);
644 			MDOutput(&Algorithm[digest], p, filename);
645 		} while (*++argv);
646 	} else if (!cflag && string == NULL && !skip) {
647 		if (mode == mode_bsd)
648 			output_mode = output_bare;
649 		p = MDInput(&Algorithm[digest], stdin, buf, pflag);
650 		MDOutput(&Algorithm[digest], p, "-");
651 	} else if (string != NULL) {
652 		len = strlen(string);
653 		p = Algorithm[digest].Data(string, len, buf);
654 		MDOutput(&Algorithm[digest], p, string);
655 	}
656 	if (cflag && mode != mode_bsd) {
657 		if (!sflag && malformed > 1)
658 			warnx("WARNING: %d lines are improperly formatted", malformed);
659 		else if (!sflag && malformed > 0)
660 			warnx("WARNING: %d line is improperly formatted", malformed);
661 		if (!sflag && checksFailed > 1)
662 			warnx("WARNING: %d computed checksums did NOT match", checksFailed);
663 		else if (!sflag && checksFailed > 0)
664 			warnx("WARNING: %d computed checksum did NOT match", checksFailed);
665 		if (checksFailed != 0 || (strict && malformed > 0))
666 			return (1);
667 	}
668 #ifdef HAVE_CAPSICUM
669 	fileargs_free(fa);
670 #endif
671 	if (failed)
672 		return (1);
673 	if (checksFailed > 0)
674 		return (2);
675 
676 	return (0);
677 }
678 
679 /*
680  * Common input handling
681  */
682 static char *
683 MDInput(const Algorithm_t *alg, FILE *f, char *buf, bool tee)
684 {
685 	char block[4096];
686 	DIGEST_CTX context;
687 	char *end, *p, *q;
688 	size_t len;
689 	int bits;
690 	uint8_t byte;
691 	bool cr = false;
692 
693 	alg->Init(&context);
694 	while ((len = fread(block, 1, sizeof(block), f)) > 0) {
695 		switch (input_mode) {
696 		case input_binary:
697 		case input_text:
698 			if (tee && fwrite(block, 1, len, stdout) != len)
699 				err(1, "stdout");
700 			alg->Update(&context, block, len);
701 			break;
702 		case input_universal:
703 			end = block + len;
704 			for (p = q = block; p < end; p = q) {
705 				if (cr) {
706 					if (*p == '\n')
707 						p++;
708 					if (tee && putchar('\n') == EOF)
709 						err(1, "stdout");
710 					alg->Update(&context, "\n", 1);
711 					cr = false;
712 				}
713 				for (q = p; q < end && *q != '\r'; q++)
714 					/* nothing */;
715 				if (q > p) {
716 					if (tee &&
717 					    fwrite(p, 1, q - p, stdout) !=
718 					    (size_t)(q - p))
719 						err(1, "stdout");
720 					alg->Update(&context, p, q - p);
721 				}
722 				if (q < end && *q == '\r') {
723 					cr = true;
724 					q++;
725 				}
726 			}
727 			break;
728 		case input_bits:
729 			end = block + len;
730 			bits = byte = 0;
731 			for (p = block; p < end; p++) {
732 				if (*p == '0' || *p == '1') {
733 					byte <<= 1;
734 					byte |= *p - '0';
735 					if (++bits == 8) {
736 						if (tee && putchar(byte) == EOF)
737 							err(1, "stdout");
738 						alg->Update(&context, &byte, 1);
739 						bits = byte = 0;
740 					}
741 				}
742 			}
743 			break;
744 		}
745 	}
746 	if (ferror(f)) {
747 		alg->End(&context, buf);
748 		return (NULL);
749 	}
750 	if (cr) {
751 		if (tee && putchar('\n') == EOF)
752 			err(1, "stdout");
753 		alg->Update(&context, "\n", 1);
754 	}
755 	if (input_mode == input_bits && bits != 0)
756 		errx(1, "input length was not a multiple of 8");
757 	return (alg->End(&context, buf));
758 }
759 
760 /*
761  * Common output handling
762  */
763 static void
764 MDOutput(const Algorithm_t *alg, char *p, const char *name)
765 {
766 	bool checkfailed = false;
767 
768 	if (p == NULL) {
769 		warn("%s", name);
770 		failed = true;
771 	} else if (cflag && mode != mode_bsd) {
772 		checkfailed = strcasecmp(checkAgainst, p) != 0;
773 		if (!sflag && (!qflag || checkfailed))
774 			printf("%s: %s%c", name, checkfailed ? "FAILED" : "OK",
775 			    endl);
776 	} else {
777 		switch (output_mode) {
778 		case output_bare:
779 			printf("%s", p);
780 			break;
781 		case output_gnu:
782 			printf("%s %c%s", p, input_mode, name);
783 			break;
784 		case output_reverse:
785 			printf("%s %s", p, name);
786 			break;
787 		case output_tagged:
788 			if (mode == mode_perl &&
789 			    strncmp(alg->name, "SHA512t", 7) == 0) {
790 				printf("%.6s/%s", alg->name, alg->name + 7);
791 			} else {
792 				printf("%s", alg->name);
793 			}
794 			printf(" (%s) = %s", name, p);
795 			break;
796 		}
797 		if (checkAgainst) {
798 			checkfailed = strcasecmp(checkAgainst, p) != 0;
799 			if (!qflag && checkfailed)
800 				printf(" [ Failed ]");
801 		}
802 		printf("%c", endl);
803 	}
804 	if (checkfailed)
805 		checksFailed++;
806 }
807 
808 /*
809  * Measures the time to digest TEST_BLOCK_COUNT TEST_BLOCK_LEN-byte blocks.
810  */
811 static void
812 MDTimeTrial(const Algorithm_t *alg)
813 {
814 	DIGEST_CTX context;
815 	struct rusage before, after;
816 	struct timeval total;
817 	float seconds;
818 	unsigned char block[TEST_BLOCK_LEN];
819 	unsigned int i;
820 	char *p, buf[HEX_DIGEST_LENGTH];
821 
822 	printf("%s time trial. Digesting %d %d-byte blocks ...",
823 	    alg->name, TEST_BLOCK_COUNT, TEST_BLOCK_LEN);
824 	fflush(stdout);
825 
826 	/* Initialize block */
827 	for (i = 0; i < TEST_BLOCK_LEN; i++)
828 		block[i] = (unsigned char) (i & 0xff);
829 
830 	/* Start timer */
831 	getrusage(RUSAGE_SELF, &before);
832 
833 	/* Digest blocks */
834 	alg->Init(&context);
835 	for (i = 0; i < TEST_BLOCK_COUNT; i++)
836 		alg->Update(&context, block, TEST_BLOCK_LEN);
837 	p = alg->End(&context, buf);
838 
839 	/* Stop timer */
840 	getrusage(RUSAGE_SELF, &after);
841 	timersub(&after.ru_utime, &before.ru_utime, &total);
842 	seconds = total.tv_sec + (float) total.tv_usec / 1000000;
843 
844 	printf(" done\n");
845 	printf("Digest = %s", p);
846 	printf("\nTime = %f seconds\n", seconds);
847 	printf("Speed = %f MiB/second\n", (float) TEST_BLOCK_LEN *
848 		(float) TEST_BLOCK_COUNT / seconds / (1 << 20));
849 }
850 /*
851  * Digests a reference suite of strings and prints the results.
852  */
853 
854 static const char *MDTestInput[MDTESTCOUNT] = {
855 	"",
856 	"a",
857 	"abc",
858 	"message digest",
859 	"abcdefghijklmnopqrstuvwxyz",
860 	"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
861 	"12345678901234567890123456789012345678901234567890123456789012345678901234567890",
862 	"MD5 has not yet (2001-09-03) been broken, but sufficient attacks have been made \
863 that its security is in some doubt"
864 };
865 
866 const char *MD5TestOutput[MDTESTCOUNT] = {
867 	"d41d8cd98f00b204e9800998ecf8427e",
868 	"0cc175b9c0f1b6a831c399e269772661",
869 	"900150983cd24fb0d6963f7d28e17f72",
870 	"f96b697d7cb7938d525a2f31aaf161d0",
871 	"c3fcd3d76192e4007dfb496cca67e13b",
872 	"d174ab98d277d9f5a5611c2c9f419d9f",
873 	"57edf4a22be3c955ac49da2e2107b67a",
874 	"b50663f41d44d92171cb9976bc118538"
875 };
876 
877 const char *SHA1_TestOutput[MDTESTCOUNT] = {
878 	"da39a3ee5e6b4b0d3255bfef95601890afd80709",
879 	"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8",
880 	"a9993e364706816aba3e25717850c26c9cd0d89d",
881 	"c12252ceda8be8994d5fa0290a47231c1d16aae3",
882 	"32d10c7b8cf96570ca04ce37f2a19d84240d3a89",
883 	"761c457bf73b14d27e9e9265c46f4b4dda11f940",
884 	"50abf5706a150990a08b2c5ea40fa0e585554732",
885 	"18eca4333979c4181199b7b4fab8786d16cf2846"
886 };
887 
888 const char *SHA224_TestOutput[MDTESTCOUNT] = {
889 	"d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f",
890 	"abd37534c7d9a2efb9465de931cd7055ffdb8879563ae98078d6d6d5",
891 	"23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7",
892 	"2cb21c83ae2f004de7e81c3c7019cbcb65b71ab656b22d6d0c39b8eb",
893 	"45a5f72c39c5cff2522eb3429799e49e5f44b356ef926bcf390dccc2",
894 	"bff72b4fcb7d75e5632900ac5f90d219e05e97a7bde72e740db393d9",
895 	"b50aecbe4e9bb0b57bc5f3ae760a8e01db24f203fb3cdcd13148046e",
896 	"5ae55f3779c8a1204210d7ed7689f661fbe140f96f272ab79e19d470"
897 };
898 
899 const char *SHA256_TestOutput[MDTESTCOUNT] = {
900 	"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
901 	"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb",
902 	"ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad",
903 	"f7846f55cf23e14eebeab5b4e1550cad5b509e3348fbc4efa3a1413d393cb650",
904 	"71c480df93d6ae2f1efad1447c66c9525e316218cf51fc8d9ed832f2daf18b73",
905 	"db4bfcbd4da0cd85a60c3c37d3fbd8805c77f15fc6b1fdfe614ee0a7c8fdb4c0",
906 	"f371bc4a311f2b009eef952dd83ca80e2b60026c8e935592d0f9c308453c813e",
907 	"e6eae09f10ad4122a0e2a4075761d185a272ebd9f5aa489e998ff2f09cbfdd9f"
908 };
909 
910 const char *SHA384_TestOutput[MDTESTCOUNT] = {
911 	"38b060a751ac96384cd9327eb1b1e36a21fdb71114be07434c0cc7bf63f6e1da274edebfe76f65fbd51ad2f14898b95b",
912 	"54a59b9f22b0b80880d8427e548b7c23abd873486e1f035dce9cd697e85175033caa88e6d57bc35efae0b5afd3145f31",
913 	"cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7",
914 	"473ed35167ec1f5d8e550368a3db39be54639f828868e9454c239fc8b52e3c61dbd0d8b4de1390c256dcbb5d5fd99cd5",
915 	"feb67349df3db6f5924815d6c3dc133f091809213731fe5c7b5f4999e463479ff2877f5f2936fa63bb43784b12f3ebb4",
916 	"1761336e3f7cbfe51deb137f026f89e01a448e3b1fafa64039c1464ee8732f11a5341a6f41e0c202294736ed64db1a84",
917 	"b12932b0627d1c060942f5447764155655bd4da0c9afa6dd9b9ef53129af1b8fb0195996d2de9ca0df9d821ffee67026",
918 	"99428d401bf4abcd4ee0695248c9858b7503853acfae21a9cffa7855f46d1395ef38596fcd06d5a8c32d41a839cc5dfb"
919 };
920 
921 const char *SHA512_TestOutput[MDTESTCOUNT] = {
922 	"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e",
923 	"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75",
924 	"ddaf35a193617abacc417349ae20413112e6fa4e89a97ea20a9eeee64b55d39a2192992a274fc1a836ba3c23a3feebbd454d4423643ce80e2a9ac94fa54ca49f",
925 	"107dbf389d9e9f71a3a95f6c055b9251bc5268c2be16d6c13492ea45b0199f3309e16455ab1e96118e8a905d5597b72038ddb372a89826046de66687bb420e7c",
926 	"4dbff86cc2ca1bae1e16468a05cb9881c97f1753bce3619034898faa1aabe429955a1bf8ec483d7421fe3c1646613a59ed5441fb0f321389f77f48a879c7b1f1",
927 	"1e07be23c26a86ea37ea810c8ec7809352515a970e9253c26f536cfc7a9996c45c8370583e0a78fa4a90041d71a4ceab7423f19c71b9d5a3e01249f0bebd5894",
928 	"72ec1ef1124a45b047e8b7c75a932195135bb61de24ec0d1914042246e0aec3a2354e093d76f3048b456764346900cb130d2a4fd5dd16abb5e30bcb850dee843",
929 	"e8a835195e039708b13d9131e025f4441dbdc521ce625f245a436dcd762f54bf5cb298d96235e6c6a304e087ec8189b9512cbdf6427737ea82793460c367b9c3"
930 };
931 
932 const char *SHA512t224_TestOutput[MDTESTCOUNT] = {
933 	"6ed0dd02806fa89e25de060c19d3ac86cabb87d6a0ddd05c333b84f4",
934 	"d5cdb9ccc769a5121d4175f2bfdd13d6310e0d3d361ea75d82108327",
935 	"4634270f707b6a54daae7530460842e20e37ed265ceee9a43e8924aa",
936 	"ad1a4db188fe57064f4f24609d2a83cd0afb9b398eb2fcaeaae2c564",
937 	"ff83148aa07ec30655c1b40aff86141c0215fe2a54f767d3f38743d8",
938 	"a8b4b9174b99ffc67d6f49be9981587b96441051e16e6dd036b140d3",
939 	"ae988faaa47e401a45f704d1272d99702458fea2ddc6582827556dd2",
940 	"b3c3b945249b0c8c94aba76ea887bcaad5401665a1fbeb384af4d06b"
941 };
942 
943 const char *SHA512t256_TestOutput[MDTESTCOUNT] = {
944 	"c672b8d1ef56ed28ab87c3622c5114069bdd3ad7b8f9737498d0c01ecef0967a",
945 	"455e518824bc0601f9fb858ff5c37d417d67c2f8e0df2babe4808858aea830f8",
946 	"53048e2681941ef99b2e29b76b4c7dabe4c2d0c634fc6d46e0e2f13107e7af23",
947 	"0cf471fd17ed69d990daf3433c89b16d63dec1bb9cb42a6094604ee5d7b4e9fb",
948 	"fc3189443f9c268f626aea08a756abe7b726b05f701cb08222312ccfd6710a26",
949 	"cdf1cc0effe26ecc0c13758f7b4a48e000615df241284185c39eb05d355bb9c8",
950 	"2c9fdbc0c90bdd87612ee8455474f9044850241dc105b1e8b94b8ddf5fac9148",
951 	"dd095fc859b336c30a52548b3dc59fcc0d1be8616ebcf3368fad23107db2d736"
952 };
953 
954 const char *RIPEMD160_TestOutput[MDTESTCOUNT] = {
955 	"9c1185a5c5e9fc54612808977ee8f548b2258d31",
956 	"0bdc9d2d256b3ee9daae347be6f4dc835a467ffe",
957 	"8eb208f7e05d987a9b044a8e98c6b087f15a0bfc",
958 	"5d0689ef49d2fae572b881b123a85ffa21595f36",
959 	"f71c27109c692c1b56bbdceb5b9d2865b3708dbc",
960 	"b0e20b6e3116640286ed3a87a5713079b21f5189",
961 	"9b752e45573d4b39f4dbd3323cab82bf63326bfb",
962 	"5feb69c6bf7c29d95715ad55f57d8ac5b2b7dd32"
963 };
964 
965 const char *SKEIN256_TestOutput[MDTESTCOUNT] = {
966 	"c8877087da56e072870daa843f176e9453115929094c3a40c463a196c29bf7ba",
967 	"7fba44ff1a31d71a0c1f82e6e82fb5e9ac6c92a39c9185b9951fed82d82fe635",
968 	"258bdec343b9fde1639221a5ae0144a96e552e5288753c5fec76c05fc2fc1870",
969 	"4d2ce0062b5eb3a4db95bc1117dd8aa014f6cd50fdc8e64f31f7d41f9231e488",
970 	"46d8440685461b00e3ddb891b2ecc6855287d2bd8834a95fb1c1708b00ea5e82",
971 	"7c5eb606389556b33d34eb2536459528dc0af97adbcd0ce273aeb650f598d4b2",
972 	"4def7a7e5464a140ae9c3a80279fbebce4bd00f9faad819ab7e001512f67a10d",
973 	"d9c017dbe355f318d036469eb9b5fbe129fc2b5786a9dc6746a516eab6fe0126"
974 };
975 
976 const char *SKEIN512_TestOutput[MDTESTCOUNT] = {
977 	"bc5b4c50925519c290cc634277ae3d6257212395cba733bbad37a4af0fa06af41fca7903d06564fea7a2d3730dbdb80c1f85562dfcc070334ea4d1d9e72cba7a",
978 	"b1cd8d33f61b3737adfd59bb13ad82f4a9548e92f22956a8976cca3fdb7fee4fe91698146c4197cec85d38b83c5d93bdba92c01fd9a53870d0c7f967bc62bdce",
979 	"8f5dd9ec798152668e35129496b029a960c9a9b88662f7f9482f110b31f9f93893ecfb25c009baad9e46737197d5630379816a886aa05526d3a70df272d96e75",
980 	"15b73c158ffb875fed4d72801ded0794c720b121c0c78edf45f900937e6933d9e21a3a984206933d504b5dbb2368000411477ee1b204c986068df77886542fcc",
981 	"23793ad900ef12f9165c8080da6fdfd2c8354a2929b8aadf83aa82a3c6470342f57cf8c035ec0d97429b626c4d94f28632c8f5134fd367dca5cf293d2ec13f8c",
982 	"0c6bed927e022f5ddcf81877d42e5f75798a9f8fd3ede3d83baac0a2f364b082e036c11af35fe478745459dd8f5c0b73efe3c56ba5bb2009208d5a29cc6e469c",
983 	"2ca9fcffb3456f297d1b5f407014ecb856f0baac8eb540f534b1f187196f21e88f31103128c2f03fcc9857d7a58eb66f9525e2302d88833ee069295537a434ce",
984 	"1131f2aaa0e97126c9314f9f968cc827259bbfabced2943bb8c9274448998fb3b78738b4580dd500c76105fd3c03e465e1414f2c29664286b1f79d3e51128125"
985 };
986 
987 const char *SKEIN1024_TestOutput[MDTESTCOUNT] = {
988 	"0fff9563bb3279289227ac77d319b6fff8d7e9f09da1247b72a0a265cd6d2a62645ad547ed8193db48cff847c06494a03f55666d3b47eb4c20456c9373c86297d630d5578ebd34cb40991578f9f52b18003efa35d3da6553ff35db91b81ab890bec1b189b7f52cb2a783ebb7d823d725b0b4a71f6824e88f68f982eefc6d19c6",
989 	"6ab4c4ba9814a3d976ec8bffa7fcc638ceba0544a97b3c98411323ffd2dc936315d13dc93c13c4e88cda6f5bac6f2558b2d8694d3b6143e40d644ae43ca940685cb37f809d3d0550c56cba8036dee729a4f8fb960732e59e64d57f7f7710f8670963cdcdc95b41daab4855fcf8b6762a64b173ee61343a2c7689af1d293eba97",
990 	"35a599a0f91abcdb4cb73c19b8cb8d947742d82c309137a7caed29e8e0a2ca7a9ff9a90c34c1908cc7e7fd99bb15032fb86e76df21b72628399b5f7c3cc209d7bb31c99cd4e19465622a049afbb87c03b5ce3888d17e6e667279ec0aa9b3e2712624c01b5f5bbe1a564220bdcf6990af0c2539019f313fdd7406cca3892a1f1f",
991 	"ea891f5268acd0fac97467fc1aa89d1ce8681a9992a42540e53babee861483110c2d16f49e73bac27653ff173003e40cfb08516cd34262e6af95a5d8645c9c1abb3e813604d508b8511b30f9a5c1b352aa0791c7d2f27b2706dccea54bc7de6555b5202351751c3299f97c09cf89c40f67187e2521c0fad82b30edbb224f0458",
992 	"f23d95c2a25fbcd0e797cd058fec39d3c52d2b5afd7a9af1df934e63257d1d3dcf3246e7329c0f1104c1e51e3d22e300507b0c3b9f985bb1f645ef49835080536becf83788e17fed09c9982ba65c3cb7ffe6a5f745b911c506962adf226e435c42f6f6bc08d288f9c810e807e3216ef444f3db22744441deefa4900982a1371f",
993 	"cf3889e8a8d11bfd3938055d7d061437962bc5eac8ae83b1b71c94be201b8cf657fdbfc38674997a008c0c903f56a23feb3ae30e012377f1cfa080a9ca7fe8b96138662653fb3335c7d06595bf8baf65e215307532094cfdfa056bd8052ab792a3944a2adaa47b30335b8badb8fe9eb94fe329cdca04e58bbc530f0af709f469",
994 	"cf21a613620e6c119eca31fdfaad449a8e02f95ca256c21d2a105f8e4157048f9fe1e897893ea18b64e0e37cb07d5ac947f27ba544caf7cbc1ad094e675aed77a366270f7eb7f46543bccfa61c526fd628408058ed00ed566ac35a9761d002e629c4fb0d430b2f4ad016fcc49c44d2981c4002da0eecc42144160e2eaea4855a",
995 	"e6799b78db54085a2be7ff4c8007f147fa88d326abab30be0560b953396d8802feee9a15419b48a467574e9283be15685ca8a079ee52b27166b64dd70b124b1d4e4f6aca37224c3f2685e67e67baef9f94b905698adc794a09672aba977a61b20966912acdb08c21a2c37001785355dc884751a21f848ab36e590331ff938138"
996 };
997 
998 static void
999 MDTestSuite(const Algorithm_t *alg)
1000 {
1001 	int i;
1002 	char buffer[HEX_DIGEST_LENGTH];
1003 
1004 	printf("%s test suite:\n", alg->name);
1005 	for (i = 0; i < MDTESTCOUNT; i++) {
1006 		(*alg->Data)(MDTestInput[i], strlen(MDTestInput[i]), buffer);
1007 		printf("%s (\"%s\") = %s", alg->name, MDTestInput[i], buffer);
1008 		if (strcmp(buffer, (*alg->TestOutput)[i]) == 0) {
1009 			printf(" - verified correct\n");
1010 		} else {
1011 			printf(" - INCORRECT RESULT!\n");
1012 			failed = true;
1013 		}
1014 	}
1015 }
1016 
1017 static void
1018 usage(const Algorithm_t *alg)
1019 {
1020 
1021 	switch (mode) {
1022 	case mode_gnu:
1023 		fprintf(stderr, "usage: %ssum [-bctwz] [files ...]\n", alg->progname);
1024 		break;
1025 	case mode_perl:
1026 		fprintf(stderr, "usage: shasum [-0bchqstUvw] [-a alg] [files ...]\n");
1027 		break;
1028 	default:
1029 		fprintf(stderr, "usage: %s [-pqrtx] [-c string] [-s string] [files ...]\n",
1030 		    alg->progname);
1031 	}
1032 	exit(1);
1033 }
1034 
1035 static void
1036 version(void)
1037 {
1038 	if (mode == mode_gnu)
1039 		printf("%s (FreeBSD) ", progname);
1040 	printf("%d.%d\n",
1041 	    __FreeBSD_version / 100000,
1042 	    (__FreeBSD_version / 1000) % 100);
1043 	exit(0);
1044 }
1045