1 /* ripemd.c
2  *
3  * Copyright (C) 2006-2021 wolfSSL Inc.
4  *
5  * This file is part of wolfSSL.
6  *
7  * wolfSSL is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License as published by
9  * the Free Software Foundation; either version 2 of the License, or
10  * (at your option) any later version.
11  *
12  * wolfSSL is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15  * GNU General Public License for more details.
16  *
17  * You should have received a copy of the GNU General Public License
18  * along with this program; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
20  */
21 
22 
23 
24 #ifdef HAVE_CONFIG_H
25     #include <config.h>
26 #endif
27 
28 #include <wolfssl/wolfcrypt/settings.h>
29 
30 #ifdef WOLFSSL_RIPEMD
31 
32 #include <wolfssl/wolfcrypt/ripemd.h>
33 #ifdef NO_INLINE
34     #include <wolfssl/wolfcrypt/misc.h>
35 #else
36     #define WOLFSSL_MISC_INCLUDED
37     #include <wolfcrypt/src/misc.c>
38 #endif
39 
40 #include <wolfssl/wolfcrypt/error-crypt.h>
41 
wc_InitRipeMd(RipeMd * ripemd)42 int wc_InitRipeMd(RipeMd* ripemd)
43 {
44     if (ripemd == NULL) {
45         return BAD_FUNC_ARG;
46     }
47 
48     ripemd->digest[0] = 0x67452301L;
49     ripemd->digest[1] = 0xEFCDAB89L;
50     ripemd->digest[2] = 0x98BADCFEL;
51     ripemd->digest[3] = 0x10325476L;
52     ripemd->digest[4] = 0xC3D2E1F0L;
53 
54     ripemd->buffLen = 0;
55     ripemd->loLen   = 0;
56     ripemd->hiLen   = 0;
57 
58     return 0;
59 }
60 
61 
62 /* for all */
63 #define F(x, y, z)    (x ^ y ^ z)
64 #define G(x, y, z)    (z ^ (x & (y^z)))
65 #define H(x, y, z)    (z ^ (x | ~y))
66 #define I(x, y, z)    (y ^ (z & (x^y)))
67 #define J(x, y, z)    (x ^ (y | ~z))
68 
69 #define k0 0
70 #define k1 0x5a827999
71 #define k2 0x6ed9eba1
72 #define k3 0x8f1bbcdc
73 #define k4 0xa953fd4e
74 #define k5 0x50a28be6
75 #define k6 0x5c4dd124
76 #define k7 0x6d703ef3
77 #define k8 0x7a6d76e9
78 #define k9 0
79 
80 /* for 160 and 320 */
81 #define Subround(f, a, b, c, d, e, x, s, k) \
82     a += f(b, c, d) + x + k;\
83     a = rotlFixed((word32)a, s) + e;\
84     c = rotlFixed((word32)c, 10U)
85 
Transform(RipeMd * ripemd)86 static void Transform(RipeMd* ripemd)
87 {
88     word32 a1, b1, c1, d1, e1, a2, b2, c2, d2, e2;
89     a1 = a2 = ripemd->digest[0];
90     b1 = b2 = ripemd->digest[1];
91     c1 = c2 = ripemd->digest[2];
92     d1 = d2 = ripemd->digest[3];
93     e1 = e2 = ripemd->digest[4];
94 
95     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 11, k0);
96     Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 1], 14, k0);
97     Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 2], 15, k0);
98     Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 12, k0);
99     Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 4],  5, k0);
100     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 5],  8, k0);
101     Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 6],  7, k0);
102     Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 7],  9, k0);
103     Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 11, k0);
104     Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 13, k0);
105     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[10], 14, k0);
106     Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[11], 15, k0);
107     Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[12],  6, k0);
108     Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[13],  7, k0);
109     Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[14],  9, k0);
110     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[15],  8, k0);
111 
112     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 7],  7, k1);
113     Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 4],  6, k1);
114     Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[13],  8, k1);
115     Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 13, k1);
116     Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[10], 11, k1);
117     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 6],  9, k1);
118     Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[15],  7, k1);
119     Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 15, k1);
120     Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[12],  7, k1);
121     Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 12, k1);
122     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 15, k1);
123     Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 5],  9, k1);
124     Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 11, k1);
125     Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[14],  7, k1);
126     Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[11], 13, k1);
127     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 8], 12, k1);
128 
129     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 11, k2);
130     Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[10], 13, k2);
131     Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[14],  6, k2);
132     Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 4],  7, k2);
133     Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 14, k2);
134     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[15],  9, k2);
135     Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 13, k2);
136     Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 15, k2);
137     Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 14, k2);
138     Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 7],  8, k2);
139     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 13, k2);
140     Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 6],  6, k2);
141     Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[13],  5, k2);
142     Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[11], 12, k2);
143     Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 5],  7, k2);
144     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[12],  5, k2);
145 
146     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 11, k3);
147     Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 12, k3);
148     Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[11], 14, k3);
149     Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[10], 15, k3);
150     Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 14, k3);
151     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 15, k3);
152     Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[12],  9, k3);
153     Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[ 4],  8, k3);
154     Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[13],  9, k3);
155     Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 14, k3);
156     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 7],  5, k3);
157     Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[15],  6, k3);
158     Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[14],  8, k3);
159     Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[ 5],  6, k3);
160     Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 6],  5, k3);
161     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 12, k3);
162 
163     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 4],  9, k4);
164     Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 15, k4);
165     Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[ 5],  5, k4);
166     Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 9], 11, k4);
167     Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 7],  6, k4);
168     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[12],  8, k4);
169     Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 13, k4);
170     Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[10], 12, k4);
171     Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[14],  5, k4);
172     Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 12, k4);
173     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 3], 13, k4);
174     Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 8], 14, k4);
175     Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[11], 11, k4);
176     Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 6],  8, k4);
177     Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[15],  5, k4);
178     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[13],  6, k4);
179 
180     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 5],  8, k5);
181     Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[14],  9, k5);
182     Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 7],  9, k5);
183     Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[ 0], 11, k5);
184     Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 13, k5);
185     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 2], 15, k5);
186     Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[11], 15, k5);
187     Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 4],  5, k5);
188     Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[13],  7, k5);
189     Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 6],  7, k5);
190     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[15],  8, k5);
191     Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 11, k5);
192     Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 1], 14, k5);
193     Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[10], 14, k5);
194     Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 3], 12, k5);
195     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[12],  6, k5);
196 
197     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 6],  9, k6);
198     Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[11], 13, k6);
199     Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 3], 15, k6);
200     Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 7],  7, k6);
201     Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 12, k6);
202     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[13],  8, k6);
203     Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[ 5],  9, k6);
204     Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[10], 11, k6);
205     Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[14],  7, k6);
206     Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[15],  7, k6);
207     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 12, k6);
208     Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[12],  7, k6);
209     Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 4],  6, k6);
210     Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 15, k6);
211     Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 1], 13, k6);
212     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 2], 11, k6);
213 
214     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[15],  9, k7);
215     Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 5],  7, k7);
216     Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 1], 15, k7);
217     Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 3], 11, k7);
218     Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 7],  8, k7);
219     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[14],  6, k7);
220     Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 6],  6, k7);
221     Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 14, k7);
222     Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[11], 12, k7);
223     Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 13, k7);
224     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[12],  5, k7);
225     Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 14, k7);
226     Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[10], 13, k7);
227     Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 13, k7);
228     Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 4],  7, k7);
229     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[13],  5, k7);
230 
231     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 8], 15, k8);
232     Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[ 6],  5, k8);
233     Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 4],  8, k8);
234     Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 1], 11, k8);
235     Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 14, k8);
236     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[11], 14, k8);
237     Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[15],  6, k8);
238     Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 14, k8);
239     Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 5],  6, k8);
240     Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[12],  9, k8);
241     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 12, k8);
242     Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[13],  9, k8);
243     Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 9], 12, k8);
244     Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 7],  5, k8);
245     Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[10], 15, k8);
246     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[14],  8, k8);
247 
248     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[12],  8, k9);
249     Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[15],  5, k9);
250     Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[10], 12, k9);
251     Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 4],  9, k9);
252     Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 1], 12, k9);
253     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[ 5],  5, k9);
254     Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[ 8], 14, k9);
255     Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 7],  6, k9);
256     Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 6],  8, k9);
257     Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 13, k9);
258     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[13],  6, k9);
259     Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[14],  5, k9);
260     Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 0], 15, k9);
261     Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 13, k9);
262     Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 9], 11, k9);
263     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[11], 11, k9);
264 
265     c1                = ripemd->digest[1] + c1 + d2;
266     ripemd->digest[1] = ripemd->digest[2] + d1 + e2;
267     ripemd->digest[2] = ripemd->digest[3] + e1 + a2;
268     ripemd->digest[3] = ripemd->digest[4] + a1 + b2;
269     ripemd->digest[4] = ripemd->digest[0] + b1 + c2;
270     ripemd->digest[0] = c1;
271 }
272 
273 
AddLength(RipeMd * ripemd,word32 len)274 static WC_INLINE void AddLength(RipeMd* ripemd, word32 len)
275 {
276     word32 tmp = ripemd->loLen;
277     if ( (ripemd->loLen += len) < tmp)
278         ripemd->hiLen++;                       /* carry low to high */
279 }
280 
281 
wc_RipeMdUpdate(RipeMd * ripemd,const byte * data,word32 len)282 int wc_RipeMdUpdate(RipeMd* ripemd, const byte* data, word32 len)
283 {
284     /* do block size increments */
285     byte* local;
286 
287     if (ripemd == NULL || (data == NULL && len > 0)) {
288         return BAD_FUNC_ARG;
289     }
290 
291     local = (byte*)ripemd->buffer;
292 
293     while (len) {
294         word32 add = min(len, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
295         XMEMCPY(&local[ripemd->buffLen], data, add);
296 
297         ripemd->buffLen += add;
298         data         += add;
299         len          -= add;
300 
301         if (ripemd->buffLen == RIPEMD_BLOCK_SIZE) {
302             #ifdef BIG_ENDIAN_ORDER
303                 ByteReverseWords(ripemd->buffer, ripemd->buffer,
304                                  RIPEMD_BLOCK_SIZE);
305             #endif
306             Transform(ripemd);
307             AddLength(ripemd, RIPEMD_BLOCK_SIZE);
308             ripemd->buffLen = 0;
309         }
310     }
311     return 0;
312 }
313 
314 
wc_RipeMdFinal(RipeMd * ripemd,byte * hash)315 int wc_RipeMdFinal(RipeMd* ripemd, byte* hash)
316 {
317     byte* local;
318 
319     if (ripemd == NULL || hash == NULL) {
320         return BAD_FUNC_ARG;
321     }
322 
323     local = (byte*)ripemd->buffer;
324 
325     AddLength(ripemd, ripemd->buffLen);               /* before adding pads */
326 
327     local[ripemd->buffLen++] = 0x80;  /* add 1 */
328 
329     /* pad with zeros */
330     if (ripemd->buffLen > RIPEMD_PAD_SIZE) {
331         XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
332         ripemd->buffLen += RIPEMD_BLOCK_SIZE - ripemd->buffLen;
333 
334         #ifdef BIG_ENDIAN_ORDER
335             ByteReverseWords(ripemd->buffer, ripemd->buffer, RIPEMD_BLOCK_SIZE);
336         #endif
337         Transform(ripemd);
338         ripemd->buffLen = 0;
339     }
340     XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_PAD_SIZE - ripemd->buffLen);
341 
342     /* put lengths in bits */
343     ripemd->loLen = ripemd->loLen << 3;
344     ripemd->hiLen = (ripemd->loLen >> (8*sizeof(ripemd->loLen) - 3)) +
345                  (ripemd->hiLen << 3);
346 
347     /* store lengths */
348     #ifdef BIG_ENDIAN_ORDER
349         ByteReverseWords(ripemd->buffer, ripemd->buffer, RIPEMD_BLOCK_SIZE);
350     #endif
351     /* ! length ordering dependent on digest endian type ! */
352     XMEMCPY(&local[RIPEMD_PAD_SIZE], &ripemd->loLen, sizeof(word32));
353     XMEMCPY(&local[RIPEMD_PAD_SIZE + sizeof(word32)], &ripemd->hiLen,
354            sizeof(word32));
355 
356     Transform(ripemd);
357     #ifdef BIG_ENDIAN_ORDER
358         ByteReverseWords(ripemd->digest, ripemd->digest, RIPEMD_DIGEST_SIZE);
359     #endif
360     XMEMCPY(hash, ripemd->digest, RIPEMD_DIGEST_SIZE);
361 
362     return wc_InitRipeMd(ripemd);  /* reset state */
363 }
364 
365 
366 #endif /* WOLFSSL_RIPEMD */
367