1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
|
/*
* Implementation of RIPEMD-160.
*
* Copyright (C) 2014 Legimet <legimet.calc@gmail.com>
*
* Permission is hereby granted, without written agreement and without
* license or royalty fees, to use, copy, modify, and distribute this
* software and its documentation for any purpose, provided that the
* above copyright notice and the following two paragraphs appear in
* all copies of this software.
*
* IN NO EVENT SHALL I LIABLE TO ANY PARTY FOR DIRECT, INDIRECT, SPECIAL,
* INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OF THIS
* SOFTWARE AND ITS DOCUMENTATION, EVEN IF I HAVE BEEN ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*
* I SPECIFICALLY DISCLAIM ANY WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE. THE SOFTWARE PROVIDED HEREUNDER IS ON AN "AS IS" BASIS, AND
* I HAVE NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT, UPDATES,
* ENHANCEMENTS, OR MODIFICATIONS.
*/
#include <stdint.h>
#include <string.h>
#include "rmdcommon.h"
#include "rmd160.h"
void ripemd160_MDinit(dword *MDbuf) {
MDbuf[0] = initvals[0];
MDbuf[1] = initvals[1];
MDbuf[2] = initvals[2];
MDbuf[3] = initvals[3];
MDbuf[4] = initvals[4];
}
static inline void ripemd160_round1(dword *a, dword *b, dword *c, dword *d, dword *e,
dword *ap, dword *bp, dword *cp, dword *dp, dword *ep, int i, dword *X) {
*a = rmd_rol(*a + rmd_f1(*b, *c, *d) + X[r[i]], s[i]) + *e;
*c = rmd_rol(*c, 10);
*ap = rmd_rol(*ap + rmd_f5(*bp, *cp, *dp) + X[rprime[i]] + kprime[0], sprime[i]) + *ep;
*cp = rmd_rol(*cp, 10);
}
static inline void ripemd160_round2(dword *a, dword *b, dword *c, dword *d, dword *e,
dword *ap, dword *bp, dword *cp, dword *dp, dword *ep, int i, dword *X) {
*a = rmd_rol(*a + rmd_f2(*b, *c, *d) + X[r[i]] + k[0], s[i]) + *e;
*c = rmd_rol(*c, 10);
*ap = rmd_rol(*ap + rmd_f4(*bp, *cp, *dp) + X[rprime[i]] + kprime[1], sprime[i]) + *ep;
*cp = rmd_rol(*cp, 10);
}
static inline void ripemd160_round3(dword *a, dword *b, dword *c, dword *d, dword *e,
dword *ap, dword *bp, dword *cp, dword *dp, dword *ep, int i, dword *X) {
*a = rmd_rol(*a + rmd_f3(*b, *c, *d) + X[r[i]] + k[1], s[i]) + *e;
*c = rmd_rol(*c, 10);
*ap = rmd_rol(*ap + rmd_f3(*bp, *cp, *dp) + X[rprime[i]] + kprime[2], sprime[i]) + *ep;
*cp = rmd_rol(*cp, 10);
}
static inline void ripemd160_round4(dword *a, dword *b, dword *c, dword *d, dword *e,
dword *ap, dword *bp, dword *cp, dword *dp, dword *ep, int i, dword *X) {
*a = rmd_rol(*a + rmd_f4(*b, *c, *d) + X[r[i]] + k[2], s[i]) + *e;
*c = rmd_rol(*c, 10);
*ap = rmd_rol(*ap + rmd_f2(*bp, *cp, *dp) + X[rprime[i]] + kprime[3], sprime[i]) + *ep;
*cp = rmd_rol(*cp, 10);
}
static inline void ripemd160_round5(dword *a, dword *b, dword *c, dword *d, dword *e,
dword *ap, dword *bp, dword *cp, dword *dp, dword *ep, int i, dword *X) {
*a = rmd_rol(*a + rmd_f5(*b, *c, *d) + X[r[i]] + k[3], s[i]) + *e;
*c = rmd_rol(*c, 10);
*ap = rmd_rol(*ap + rmd_f1(*bp, *cp, *dp) + X[rprime[i]], sprime[i]) + *ep;
*cp = rmd_rol(*cp, 10);
}
void ripemd160_compress(dword *MDbuf, dword *X) {
dword a = MDbuf[0], b = MDbuf[1], c = MDbuf[2], d = MDbuf[3], e = MDbuf[4];
dword ap = MDbuf[0], bp = MDbuf[1], cp = MDbuf[2], dp = MDbuf[3], ep = MDbuf[4];
int i;
for (i = 0; i < 15;) {
ripemd160_round1(&a, &b, &c, &d, &e, &ap, &bp, &cp, &dp, &ep, i++, X);
ripemd160_round1(&e, &a, &b, &c, &d, &ep, &ap, &bp, &cp, &dp, i++, X);
ripemd160_round1(&d, &e, &a, &b, &c, &dp, &ep, &ap, &bp, &cp, i++, X);
ripemd160_round1(&c, &d, &e, &a, &b, &cp, &dp, &ep, &ap, &bp, i++, X);
ripemd160_round1(&b, &c, &d, &e, &a, &bp, &cp, &dp, &ep, &ap, i++, X);
}
ripemd160_round1(&a, &b, &c, &d, &e, &ap, &bp, &cp, &dp, &ep, i++, X);
for (i = 16; i < 31;) {
ripemd160_round2(&e, &a, &b, &c, &d, &ep, &ap, &bp, &cp, &dp, i++, X);
ripemd160_round2(&d, &e, &a, &b, &c, &dp, &ep, &ap, &bp, &cp, i++, X);
ripemd160_round2(&c, &d, &e, &a, &b, &cp, &dp, &ep, &ap, &bp, i++, X);
ripemd160_round2(&b, &c, &d, &e, &a, &bp, &cp, &dp, &ep, &ap, i++, X);
ripemd160_round2(&a, &b, &c, &d, &e, &ap, &bp, &cp, &dp, &ep, i++, X);
}
ripemd160_round2(&e, &a, &b, &c, &d, &ep, &ap, &bp, &cp, &dp, i++, X);
for (i = 32; i < 47;) {
ripemd160_round3(&d, &e, &a, &b, &c, &dp, &ep, &ap, &bp, &cp, i++, X);
ripemd160_round3(&c, &d, &e, &a, &b, &cp, &dp, &ep, &ap, &bp, i++, X);
ripemd160_round3(&b, &c, &d, &e, &a, &bp, &cp, &dp, &ep, &ap, i++, X);
ripemd160_round3(&a, &b, &c, &d, &e, &ap, &bp, &cp, &dp, &ep, i++, X);
ripemd160_round3(&e, &a, &b, &c, &d, &ep, &ap, &bp, &cp, &dp, i++, X);
}
ripemd160_round3(&d, &e, &a, &b, &c, &dp, &ep, &ap, &bp, &cp, i++, X);
for (i = 48; i < 63;) {
ripemd160_round4(&c, &d, &e, &a, &b, &cp, &dp, &ep, &ap, &bp, i++, X);
ripemd160_round4(&b, &c, &d, &e, &a, &bp, &cp, &dp, &ep, &ap, i++, X);
ripemd160_round4(&a, &b, &c, &d, &e, &ap, &bp, &cp, &dp, &ep, i++, X);
ripemd160_round4(&e, &a, &b, &c, &d, &ep, &ap, &bp, &cp, &dp, i++, X);
ripemd160_round4(&d, &e, &a, &b, &c, &dp, &ep, &ap, &bp, &cp, i++, X);
}
ripemd160_round4(&c, &d, &e, &a, &b, &cp, &dp, &ep, &ap, &bp, i++, X);
for (i = 64; i < 79;) {
ripemd160_round5(&b, &c, &d, &e, &a, &bp, &cp, &dp, &ep, &ap, i++, X);
ripemd160_round5(&a, &b, &c, &d, &e, &ap, &bp, &cp, &dp, &ep, i++, X);
ripemd160_round5(&e, &a, &b, &c, &d, &ep, &ap, &bp, &cp, &dp, i++, X);
ripemd160_round5(&d, &e, &a, &b, &c, &dp, &ep, &ap, &bp, &cp, i++, X);
ripemd160_round5(&c, &d, &e, &a, &b, &cp, &dp, &ep, &ap, &bp, i++, X);
}
ripemd160_round5(&b, &c, &d, &e, &a, &bp, &cp, &dp, &ep, &ap, i, X);
c += MDbuf[1] + dp;
MDbuf[1] = MDbuf[2] + d + ep;
MDbuf[2] = MDbuf[3] + e + ap;
MDbuf[3] = MDbuf[4] + a + bp;
MDbuf[4] = MDbuf[0] + b + cp;
MDbuf[0] = c;
}
void ripemd160_MDfinish(dword *MDbuf, byte *strptr, dword lswlen, dword mswlen) {
dword X[16] = {0}; /* Initialize to all 0 */
dword i;
/* Copy bytes from strptr into X */
for (i = 0; i < (lswlen & 63); i++) {
X[i >> 2] |= (dword)strptr[i] << ((i & 3) << 3);
}
/* Add a 1 bit for padding */
X[i >> 2] |= 128 << ((i & 3) << 3);
/* length in bits is at least 448 mod 512, second block needed */
if ((lswlen & 63) >= 56) {
ripemd160_compress(MDbuf, X);
memset(X, 0, 64);
}
/* Append the 64-bit length in the last 2 words, low-order word first */
X[14] = lswlen << 3;
X[15] = (mswlen << 3) + (lswlen >> 29);
ripemd160_compress(MDbuf, X); /* Compress the final block */
}
|
