Back to home page

OSCL-LXR
 
 

     

0001 // SPDX-License-Identifier: GPL-2.0-or-later
0002 /*
0003  * Cryptographic API.
0004  *
0005  * RIPEMD-160 - RACE Integrity Primitives Evaluation Message Digest.
0006  *
0007  * Based on the reference implementation by Antoon Bosselaers, ESAT-COSIC
0008  *
0009  * Copyright (c) 2008 Adrian-Ken Rueegsegger <ken@codelabs.ch>
0010  */
0011 #include <crypto/internal/hash.h>
0012 #include <linux/init.h>
0013 #include <linux/module.h>
0014 #include <linux/mm.h>
0015 #include <linux/types.h>
0016 #include <asm/byteorder.h>
0017 
0018 #include "ripemd.h"
0019 
0020 struct rmd160_ctx {
0021     u64 byte_count;
0022     u32 state[5];
0023     __le32 buffer[16];
0024 };
0025 
0026 #define K1  RMD_K1
0027 #define K2  RMD_K2
0028 #define K3  RMD_K3
0029 #define K4  RMD_K4
0030 #define K5  RMD_K5
0031 #define KK1 RMD_K6
0032 #define KK2 RMD_K7
0033 #define KK3 RMD_K8
0034 #define KK4 RMD_K9
0035 #define KK5 RMD_K1
0036 
0037 #define F1(x, y, z) (x ^ y ^ z)     /* XOR */
0038 #define F2(x, y, z) (z ^ (x & (y ^ z))) /* x ? y : z */
0039 #define F3(x, y, z) ((x | ~y) ^ z)
0040 #define F4(x, y, z) (y ^ (z & (x ^ y))) /* z ? x : y */
0041 #define F5(x, y, z) (x ^ (y | ~z))
0042 
0043 #define ROUND(a, b, c, d, e, f, k, x, s)  { \
0044     (a) += f((b), (c), (d)) + le32_to_cpup(&(x)) + (k); \
0045     (a) = rol32((a), (s)) + (e); \
0046     (c) = rol32((c), 10); \
0047 }
0048 
0049 static void rmd160_transform(u32 *state, const __le32 *in)
0050 {
0051     u32 aa, bb, cc, dd, ee, aaa, bbb, ccc, ddd, eee;
0052 
0053     /* Initialize left lane */
0054     aa = state[0];
0055     bb = state[1];
0056     cc = state[2];
0057     dd = state[3];
0058     ee = state[4];
0059 
0060     /* Initialize right lane */
0061     aaa = state[0];
0062     bbb = state[1];
0063     ccc = state[2];
0064     ddd = state[3];
0065     eee = state[4];
0066 
0067     /* round 1: left lane */
0068     ROUND(aa, bb, cc, dd, ee, F1, K1, in[0],  11);
0069     ROUND(ee, aa, bb, cc, dd, F1, K1, in[1],  14);
0070     ROUND(dd, ee, aa, bb, cc, F1, K1, in[2],  15);
0071     ROUND(cc, dd, ee, aa, bb, F1, K1, in[3],  12);
0072     ROUND(bb, cc, dd, ee, aa, F1, K1, in[4],   5);
0073     ROUND(aa, bb, cc, dd, ee, F1, K1, in[5],   8);
0074     ROUND(ee, aa, bb, cc, dd, F1, K1, in[6],   7);
0075     ROUND(dd, ee, aa, bb, cc, F1, K1, in[7],   9);
0076     ROUND(cc, dd, ee, aa, bb, F1, K1, in[8],  11);
0077     ROUND(bb, cc, dd, ee, aa, F1, K1, in[9],  13);
0078     ROUND(aa, bb, cc, dd, ee, F1, K1, in[10], 14);
0079     ROUND(ee, aa, bb, cc, dd, F1, K1, in[11], 15);
0080     ROUND(dd, ee, aa, bb, cc, F1, K1, in[12],  6);
0081     ROUND(cc, dd, ee, aa, bb, F1, K1, in[13],  7);
0082     ROUND(bb, cc, dd, ee, aa, F1, K1, in[14],  9);
0083     ROUND(aa, bb, cc, dd, ee, F1, K1, in[15],  8);
0084 
0085     /* round 2: left lane" */
0086     ROUND(ee, aa, bb, cc, dd, F2, K2, in[7],   7);
0087     ROUND(dd, ee, aa, bb, cc, F2, K2, in[4],   6);
0088     ROUND(cc, dd, ee, aa, bb, F2, K2, in[13],  8);
0089     ROUND(bb, cc, dd, ee, aa, F2, K2, in[1],  13);
0090     ROUND(aa, bb, cc, dd, ee, F2, K2, in[10], 11);
0091     ROUND(ee, aa, bb, cc, dd, F2, K2, in[6],   9);
0092     ROUND(dd, ee, aa, bb, cc, F2, K2, in[15],  7);
0093     ROUND(cc, dd, ee, aa, bb, F2, K2, in[3],  15);
0094     ROUND(bb, cc, dd, ee, aa, F2, K2, in[12],  7);
0095     ROUND(aa, bb, cc, dd, ee, F2, K2, in[0],  12);
0096     ROUND(ee, aa, bb, cc, dd, F2, K2, in[9],  15);
0097     ROUND(dd, ee, aa, bb, cc, F2, K2, in[5],   9);
0098     ROUND(cc, dd, ee, aa, bb, F2, K2, in[2],  11);
0099     ROUND(bb, cc, dd, ee, aa, F2, K2, in[14],  7);
0100     ROUND(aa, bb, cc, dd, ee, F2, K2, in[11], 13);
0101     ROUND(ee, aa, bb, cc, dd, F2, K2, in[8],  12);
0102 
0103     /* round 3: left lane" */
0104     ROUND(dd, ee, aa, bb, cc, F3, K3, in[3],  11);
0105     ROUND(cc, dd, ee, aa, bb, F3, K3, in[10], 13);
0106     ROUND(bb, cc, dd, ee, aa, F3, K3, in[14],  6);
0107     ROUND(aa, bb, cc, dd, ee, F3, K3, in[4],   7);
0108     ROUND(ee, aa, bb, cc, dd, F3, K3, in[9],  14);
0109     ROUND(dd, ee, aa, bb, cc, F3, K3, in[15],  9);
0110     ROUND(cc, dd, ee, aa, bb, F3, K3, in[8],  13);
0111     ROUND(bb, cc, dd, ee, aa, F3, K3, in[1],  15);
0112     ROUND(aa, bb, cc, dd, ee, F3, K3, in[2],  14);
0113     ROUND(ee, aa, bb, cc, dd, F3, K3, in[7],   8);
0114     ROUND(dd, ee, aa, bb, cc, F3, K3, in[0],  13);
0115     ROUND(cc, dd, ee, aa, bb, F3, K3, in[6],   6);
0116     ROUND(bb, cc, dd, ee, aa, F3, K3, in[13],  5);
0117     ROUND(aa, bb, cc, dd, ee, F3, K3, in[11], 12);
0118     ROUND(ee, aa, bb, cc, dd, F3, K3, in[5],   7);
0119     ROUND(dd, ee, aa, bb, cc, F3, K3, in[12],  5);
0120 
0121     /* round 4: left lane" */
0122     ROUND(cc, dd, ee, aa, bb, F4, K4, in[1],  11);
0123     ROUND(bb, cc, dd, ee, aa, F4, K4, in[9],  12);
0124     ROUND(aa, bb, cc, dd, ee, F4, K4, in[11], 14);
0125     ROUND(ee, aa, bb, cc, dd, F4, K4, in[10], 15);
0126     ROUND(dd, ee, aa, bb, cc, F4, K4, in[0],  14);
0127     ROUND(cc, dd, ee, aa, bb, F4, K4, in[8],  15);
0128     ROUND(bb, cc, dd, ee, aa, F4, K4, in[12],  9);
0129     ROUND(aa, bb, cc, dd, ee, F4, K4, in[4],   8);
0130     ROUND(ee, aa, bb, cc, dd, F4, K4, in[13],  9);
0131     ROUND(dd, ee, aa, bb, cc, F4, K4, in[3],  14);
0132     ROUND(cc, dd, ee, aa, bb, F4, K4, in[7],   5);
0133     ROUND(bb, cc, dd, ee, aa, F4, K4, in[15],  6);
0134     ROUND(aa, bb, cc, dd, ee, F4, K4, in[14],  8);
0135     ROUND(ee, aa, bb, cc, dd, F4, K4, in[5],   6);
0136     ROUND(dd, ee, aa, bb, cc, F4, K4, in[6],   5);
0137     ROUND(cc, dd, ee, aa, bb, F4, K4, in[2],  12);
0138 
0139     /* round 5: left lane" */
0140     ROUND(bb, cc, dd, ee, aa, F5, K5, in[4],   9);
0141     ROUND(aa, bb, cc, dd, ee, F5, K5, in[0],  15);
0142     ROUND(ee, aa, bb, cc, dd, F5, K5, in[5],   5);
0143     ROUND(dd, ee, aa, bb, cc, F5, K5, in[9],  11);
0144     ROUND(cc, dd, ee, aa, bb, F5, K5, in[7],   6);
0145     ROUND(bb, cc, dd, ee, aa, F5, K5, in[12],  8);
0146     ROUND(aa, bb, cc, dd, ee, F5, K5, in[2],  13);
0147     ROUND(ee, aa, bb, cc, dd, F5, K5, in[10], 12);
0148     ROUND(dd, ee, aa, bb, cc, F5, K5, in[14],  5);
0149     ROUND(cc, dd, ee, aa, bb, F5, K5, in[1],  12);
0150     ROUND(bb, cc, dd, ee, aa, F5, K5, in[3],  13);
0151     ROUND(aa, bb, cc, dd, ee, F5, K5, in[8],  14);
0152     ROUND(ee, aa, bb, cc, dd, F5, K5, in[11], 11);
0153     ROUND(dd, ee, aa, bb, cc, F5, K5, in[6],   8);
0154     ROUND(cc, dd, ee, aa, bb, F5, K5, in[15],  5);
0155     ROUND(bb, cc, dd, ee, aa, F5, K5, in[13],  6);
0156 
0157     /* round 1: right lane */
0158     ROUND(aaa, bbb, ccc, ddd, eee, F5, KK1, in[5],   8);
0159     ROUND(eee, aaa, bbb, ccc, ddd, F5, KK1, in[14],  9);
0160     ROUND(ddd, eee, aaa, bbb, ccc, F5, KK1, in[7],   9);
0161     ROUND(ccc, ddd, eee, aaa, bbb, F5, KK1, in[0],  11);
0162     ROUND(bbb, ccc, ddd, eee, aaa, F5, KK1, in[9],  13);
0163     ROUND(aaa, bbb, ccc, ddd, eee, F5, KK1, in[2],  15);
0164     ROUND(eee, aaa, bbb, ccc, ddd, F5, KK1, in[11], 15);
0165     ROUND(ddd, eee, aaa, bbb, ccc, F5, KK1, in[4],   5);
0166     ROUND(ccc, ddd, eee, aaa, bbb, F5, KK1, in[13],  7);
0167     ROUND(bbb, ccc, ddd, eee, aaa, F5, KK1, in[6],   7);
0168     ROUND(aaa, bbb, ccc, ddd, eee, F5, KK1, in[15],  8);
0169     ROUND(eee, aaa, bbb, ccc, ddd, F5, KK1, in[8],  11);
0170     ROUND(ddd, eee, aaa, bbb, ccc, F5, KK1, in[1],  14);
0171     ROUND(ccc, ddd, eee, aaa, bbb, F5, KK1, in[10], 14);
0172     ROUND(bbb, ccc, ddd, eee, aaa, F5, KK1, in[3],  12);
0173     ROUND(aaa, bbb, ccc, ddd, eee, F5, KK1, in[12],  6);
0174 
0175     /* round 2: right lane */
0176     ROUND(eee, aaa, bbb, ccc, ddd, F4, KK2, in[6],   9);
0177     ROUND(ddd, eee, aaa, bbb, ccc, F4, KK2, in[11], 13);
0178     ROUND(ccc, ddd, eee, aaa, bbb, F4, KK2, in[3],  15);
0179     ROUND(bbb, ccc, ddd, eee, aaa, F4, KK2, in[7],   7);
0180     ROUND(aaa, bbb, ccc, ddd, eee, F4, KK2, in[0],  12);
0181     ROUND(eee, aaa, bbb, ccc, ddd, F4, KK2, in[13],  8);
0182     ROUND(ddd, eee, aaa, bbb, ccc, F4, KK2, in[5],   9);
0183     ROUND(ccc, ddd, eee, aaa, bbb, F4, KK2, in[10], 11);
0184     ROUND(bbb, ccc, ddd, eee, aaa, F4, KK2, in[14],  7);
0185     ROUND(aaa, bbb, ccc, ddd, eee, F4, KK2, in[15],  7);
0186     ROUND(eee, aaa, bbb, ccc, ddd, F4, KK2, in[8],  12);
0187     ROUND(ddd, eee, aaa, bbb, ccc, F4, KK2, in[12],  7);
0188     ROUND(ccc, ddd, eee, aaa, bbb, F4, KK2, in[4],   6);
0189     ROUND(bbb, ccc, ddd, eee, aaa, F4, KK2, in[9],  15);
0190     ROUND(aaa, bbb, ccc, ddd, eee, F4, KK2, in[1],  13);
0191     ROUND(eee, aaa, bbb, ccc, ddd, F4, KK2, in[2],  11);
0192 
0193     /* round 3: right lane */
0194     ROUND(ddd, eee, aaa, bbb, ccc, F3, KK3, in[15],  9);
0195     ROUND(ccc, ddd, eee, aaa, bbb, F3, KK3, in[5],   7);
0196     ROUND(bbb, ccc, ddd, eee, aaa, F3, KK3, in[1],  15);
0197     ROUND(aaa, bbb, ccc, ddd, eee, F3, KK3, in[3],  11);
0198     ROUND(eee, aaa, bbb, ccc, ddd, F3, KK3, in[7],   8);
0199     ROUND(ddd, eee, aaa, bbb, ccc, F3, KK3, in[14],  6);
0200     ROUND(ccc, ddd, eee, aaa, bbb, F3, KK3, in[6],   6);
0201     ROUND(bbb, ccc, ddd, eee, aaa, F3, KK3, in[9],  14);
0202     ROUND(aaa, bbb, ccc, ddd, eee, F3, KK3, in[11], 12);
0203     ROUND(eee, aaa, bbb, ccc, ddd, F3, KK3, in[8],  13);
0204     ROUND(ddd, eee, aaa, bbb, ccc, F3, KK3, in[12],  5);
0205     ROUND(ccc, ddd, eee, aaa, bbb, F3, KK3, in[2],  14);
0206     ROUND(bbb, ccc, ddd, eee, aaa, F3, KK3, in[10], 13);
0207     ROUND(aaa, bbb, ccc, ddd, eee, F3, KK3, in[0],  13);
0208     ROUND(eee, aaa, bbb, ccc, ddd, F3, KK3, in[4],   7);
0209     ROUND(ddd, eee, aaa, bbb, ccc, F3, KK3, in[13],  5);
0210 
0211     /* round 4: right lane */
0212     ROUND(ccc, ddd, eee, aaa, bbb, F2, KK4, in[8],  15);
0213     ROUND(bbb, ccc, ddd, eee, aaa, F2, KK4, in[6],   5);
0214     ROUND(aaa, bbb, ccc, ddd, eee, F2, KK4, in[4],   8);
0215     ROUND(eee, aaa, bbb, ccc, ddd, F2, KK4, in[1],  11);
0216     ROUND(ddd, eee, aaa, bbb, ccc, F2, KK4, in[3],  14);
0217     ROUND(ccc, ddd, eee, aaa, bbb, F2, KK4, in[11], 14);
0218     ROUND(bbb, ccc, ddd, eee, aaa, F2, KK4, in[15],  6);
0219     ROUND(aaa, bbb, ccc, ddd, eee, F2, KK4, in[0],  14);
0220     ROUND(eee, aaa, bbb, ccc, ddd, F2, KK4, in[5],   6);
0221     ROUND(ddd, eee, aaa, bbb, ccc, F2, KK4, in[12],  9);
0222     ROUND(ccc, ddd, eee, aaa, bbb, F2, KK4, in[2],  12);
0223     ROUND(bbb, ccc, ddd, eee, aaa, F2, KK4, in[13],  9);
0224     ROUND(aaa, bbb, ccc, ddd, eee, F2, KK4, in[9],  12);
0225     ROUND(eee, aaa, bbb, ccc, ddd, F2, KK4, in[7],   5);
0226     ROUND(ddd, eee, aaa, bbb, ccc, F2, KK4, in[10], 15);
0227     ROUND(ccc, ddd, eee, aaa, bbb, F2, KK4, in[14],  8);
0228 
0229     /* round 5: right lane */
0230     ROUND(bbb, ccc, ddd, eee, aaa, F1, KK5, in[12],  8);
0231     ROUND(aaa, bbb, ccc, ddd, eee, F1, KK5, in[15],  5);
0232     ROUND(eee, aaa, bbb, ccc, ddd, F1, KK5, in[10], 12);
0233     ROUND(ddd, eee, aaa, bbb, ccc, F1, KK5, in[4],   9);
0234     ROUND(ccc, ddd, eee, aaa, bbb, F1, KK5, in[1],  12);
0235     ROUND(bbb, ccc, ddd, eee, aaa, F1, KK5, in[5],   5);
0236     ROUND(aaa, bbb, ccc, ddd, eee, F1, KK5, in[8],  14);
0237     ROUND(eee, aaa, bbb, ccc, ddd, F1, KK5, in[7],   6);
0238     ROUND(ddd, eee, aaa, bbb, ccc, F1, KK5, in[6],   8);
0239     ROUND(ccc, ddd, eee, aaa, bbb, F1, KK5, in[2],  13);
0240     ROUND(bbb, ccc, ddd, eee, aaa, F1, KK5, in[13],  6);
0241     ROUND(aaa, bbb, ccc, ddd, eee, F1, KK5, in[14],  5);
0242     ROUND(eee, aaa, bbb, ccc, ddd, F1, KK5, in[0],  15);
0243     ROUND(ddd, eee, aaa, bbb, ccc, F1, KK5, in[3],  13);
0244     ROUND(ccc, ddd, eee, aaa, bbb, F1, KK5, in[9],  11);
0245     ROUND(bbb, ccc, ddd, eee, aaa, F1, KK5, in[11], 11);
0246 
0247     /* combine results */
0248     ddd += cc + state[1];       /* final result for state[0] */
0249     state[1] = state[2] + dd + eee;
0250     state[2] = state[3] + ee + aaa;
0251     state[3] = state[4] + aa + bbb;
0252     state[4] = state[0] + bb + ccc;
0253     state[0] = ddd;
0254 }
0255 
0256 static int rmd160_init(struct shash_desc *desc)
0257 {
0258     struct rmd160_ctx *rctx = shash_desc_ctx(desc);
0259 
0260     rctx->byte_count = 0;
0261 
0262     rctx->state[0] = RMD_H0;
0263     rctx->state[1] = RMD_H1;
0264     rctx->state[2] = RMD_H2;
0265     rctx->state[3] = RMD_H3;
0266     rctx->state[4] = RMD_H4;
0267 
0268     memset(rctx->buffer, 0, sizeof(rctx->buffer));
0269 
0270     return 0;
0271 }
0272 
0273 static int rmd160_update(struct shash_desc *desc, const u8 *data,
0274              unsigned int len)
0275 {
0276     struct rmd160_ctx *rctx = shash_desc_ctx(desc);
0277     const u32 avail = sizeof(rctx->buffer) - (rctx->byte_count & 0x3f);
0278 
0279     rctx->byte_count += len;
0280 
0281     /* Enough space in buffer? If so copy and we're done */
0282     if (avail > len) {
0283         memcpy((char *)rctx->buffer + (sizeof(rctx->buffer) - avail),
0284                data, len);
0285         goto out;
0286     }
0287 
0288     memcpy((char *)rctx->buffer + (sizeof(rctx->buffer) - avail),
0289            data, avail);
0290 
0291     rmd160_transform(rctx->state, rctx->buffer);
0292     data += avail;
0293     len -= avail;
0294 
0295     while (len >= sizeof(rctx->buffer)) {
0296         memcpy(rctx->buffer, data, sizeof(rctx->buffer));
0297         rmd160_transform(rctx->state, rctx->buffer);
0298         data += sizeof(rctx->buffer);
0299         len -= sizeof(rctx->buffer);
0300     }
0301 
0302     memcpy(rctx->buffer, data, len);
0303 
0304 out:
0305     return 0;
0306 }
0307 
0308 /* Add padding and return the message digest. */
0309 static int rmd160_final(struct shash_desc *desc, u8 *out)
0310 {
0311     struct rmd160_ctx *rctx = shash_desc_ctx(desc);
0312     u32 i, index, padlen;
0313     __le64 bits;
0314     __le32 *dst = (__le32 *)out;
0315     static const u8 padding[64] = { 0x80, };
0316 
0317     bits = cpu_to_le64(rctx->byte_count << 3);
0318 
0319     /* Pad out to 56 mod 64 */
0320     index = rctx->byte_count & 0x3f;
0321     padlen = (index < 56) ? (56 - index) : ((64+56) - index);
0322     rmd160_update(desc, padding, padlen);
0323 
0324     /* Append length */
0325     rmd160_update(desc, (const u8 *)&bits, sizeof(bits));
0326 
0327     /* Store state in digest */
0328     for (i = 0; i < 5; i++)
0329         dst[i] = cpu_to_le32p(&rctx->state[i]);
0330 
0331     /* Wipe context */
0332     memset(rctx, 0, sizeof(*rctx));
0333 
0334     return 0;
0335 }
0336 
0337 static struct shash_alg alg = {
0338     .digestsize =   RMD160_DIGEST_SIZE,
0339     .init       =   rmd160_init,
0340     .update     =   rmd160_update,
0341     .final      =   rmd160_final,
0342     .descsize   =   sizeof(struct rmd160_ctx),
0343     .base       =   {
0344         .cra_name    =  "rmd160",
0345         .cra_driver_name =  "rmd160-generic",
0346         .cra_blocksize   =  RMD160_BLOCK_SIZE,
0347         .cra_module  =  THIS_MODULE,
0348     }
0349 };
0350 
0351 static int __init rmd160_mod_init(void)
0352 {
0353     return crypto_register_shash(&alg);
0354 }
0355 
0356 static void __exit rmd160_mod_fini(void)
0357 {
0358     crypto_unregister_shash(&alg);
0359 }
0360 
0361 subsys_initcall(rmd160_mod_init);
0362 module_exit(rmd160_mod_fini);
0363 
0364 MODULE_LICENSE("GPL");
0365 MODULE_AUTHOR("Adrian-Ken Rueegsegger <ken@codelabs.ch>");
0366 MODULE_DESCRIPTION("RIPEMD-160 Message Digest");
0367 MODULE_ALIAS_CRYPTO("rmd160");
[ Source navigation ] [ Diff markup ] [ Identifier search ] [ general search ]

This page was automatically generated by the 2.1.0 LXR engine.

The LXR team
Valid CSS 2.1! Valid HTML 4.01!