Botan 3.10.0
Crypto and TLS for C&
sha2_64.cpp
Go to the documentation of this file.
1/*
2* SHA-{384,512}
3* (C) 1999-2011,2015 Jack Lloyd
4*
5* Botan is released under the Simplified BSD License (see license.txt)
6*/
7
8#include <botan/internal/sha2_64.h>
9
10#include <botan/internal/loadstor.h>
11#include <botan/internal/sha2_64_f.h>
12#include <botan/internal/stl_util.h>
13
14#if defined(BOTAN_HAS_CPUID)
15 #include <botan/internal/cpuid.h>
16#endif
17
18namespace Botan {
19
20namespace {
21
22std::string sha512_provider() {
23#if defined(BOTAN_HAS_SHA2_64_X86)
24 if(auto feat = CPUID::check(CPUID::Feature::SHA512)) {
25 return *feat;
26 }
27#endif
28
29#if defined(BOTAN_HAS_SHA2_64_ARMV8)
30 if(auto feat = CPUID::check(CPUID::Feature::SHA2_512)) {
31 return *feat;
32 }
33#endif
34
35#if defined(BOTAN_HAS_SHA2_64_X86_AVX512)
36 if(auto feat = CPUID::check(CPUID::Feature::AVX512, CPUID::Feature::BMI)) {
37 return *feat;
38 }
39#endif
40
41#if defined(BOTAN_HAS_SHA2_64_X86_AVX2)
42 if(auto feat = CPUID::check(CPUID::Feature::AVX2, CPUID::Feature::BMI)) {
43 return *feat;
44 }
45#endif
46
47 return "base";
48}
49
50} // namespace
51
52/*
53* SHA-{384,512} Compression Function
54*/
55//static
56void SHA_512::compress_digest(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
57#if defined(BOTAN_HAS_SHA2_64_X86)
58 if(CPUID::has(CPUID::Feature::SHA512)) {
59 return compress_digest_x86(digest, input, blocks);
60 }
61#endif
62
63#if defined(BOTAN_HAS_SHA2_64_ARMV8)
64 if(CPUID::has(CPUID::Feature::SHA2_512)) {
65 return compress_digest_armv8(digest, input, blocks);
66 }
67#endif
68
69#if defined(BOTAN_HAS_SHA2_64_X86_AVX512)
70 if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::BMI)) {
71 return compress_digest_x86_avx512(digest, input, blocks);
72 }
73#endif
74
75#if defined(BOTAN_HAS_SHA2_64_X86_AVX2)
76 if(CPUID::has(CPUID::Feature::AVX2, CPUID::Feature::BMI)) {
77 return compress_digest_x86_avx2(digest, input, blocks);
78 }
79#endif
80
81 uint64_t A = digest[0];
82 uint64_t B = digest[1];
83 uint64_t C = digest[2];
84 uint64_t D = digest[3];
85 uint64_t E = digest[4];
86 uint64_t F = digest[5];
87 uint64_t G = digest[6];
88 uint64_t H = digest[7];
89
90 std::array<uint64_t, 16> W{};
91
92 BufferSlicer in(input);
93
94 for(size_t i = 0; i != blocks; ++i) {
95 load_be(W, in.take<block_bytes>());
96
97 // clang-format off
98
99 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x428A2F98D728AE22);
100 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x7137449123EF65CD);
101 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0xB5C0FBCFEC4D3B2F);
102 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0xE9B5DBA58189DBBC);
103 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x3956C25BF348B538);
104 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x59F111F1B605D019);
105 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x923F82A4AF194F9B);
106 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0xAB1C5ED5DA6D8118);
107 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0xD807AA98A3030242);
108 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x12835B0145706FBE);
109 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x243185BE4EE4B28C);
110 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x550C7DC3D5FFB4E2);
111 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x72BE5D74F27B896F);
112 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0x80DEB1FE3B1696B1);
113 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x9BDC06A725C71235);
114 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0xC19BF174CF692694);
115 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0xE49B69C19EF14AD2);
116 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0xEFBE4786384F25E3);
117 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x0FC19DC68B8CD5B5);
118 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x240CA1CC77AC9C65);
119 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x2DE92C6F592B0275);
120 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x4A7484AA6EA6E483);
121 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x5CB0A9DCBD41FBD4);
122 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x76F988DA831153B5);
123 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x983E5152EE66DFAB);
124 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0xA831C66D2DB43210);
125 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0xB00327C898FB213F);
126 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0xBF597FC7BEEF0EE4);
127 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0xC6E00BF33DA88FC2);
128 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xD5A79147930AA725);
129 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x06CA6351E003826F);
130 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x142929670A0E6E70);
131 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x27B70A8546D22FFC);
132 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x2E1B21385C26C926);
133 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x4D2C6DFC5AC42AED);
134 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x53380D139D95B3DF);
135 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x650A73548BAF63DE);
136 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x766A0ABB3C77B2A8);
137 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x81C2C92E47EDAEE6);
138 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x92722C851482353B);
139 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0xA2BFE8A14CF10364);
140 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0xA81A664BBC423001);
141 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0xC24B8B70D0F89791);
142 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0xC76C51A30654BE30);
143 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0xD192E819D6EF5218);
144 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xD69906245565A910);
145 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0xF40E35855771202A);
146 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x106AA07032BBD1B8);
147 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x19A4C116B8D2D0C8);
148 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x1E376C085141AB53);
149 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x2748774CDF8EEB99);
150 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x34B0BCB5E19B48A8);
151 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x391C0CB3C5C95A63);
152 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x4ED8AA4AE3418ACB);
153 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x5B9CCA4F7763E373);
154 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x682E6FF3D6B2B8A3);
155 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x748F82EE5DEFB2FC);
156 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x78A5636F43172F60);
157 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x84C87814A1F0AB72);
158 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x8CC702081A6439EC);
159 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x90BEFFFA23631E28);
160 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xA4506CEBDE82BDE9);
161 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0xBEF9A3F7B2C67915);
162 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0xC67178F2E372532B);
163 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0xCA273ECEEA26619C);
164 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0xD186B8C721C0C207);
165 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0xEADA7DD6CDE0EB1E);
166 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0xF57D4F7FEE6ED178);
167 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x06F067AA72176FBA);
168 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x0A637DC5A2C898A6);
169 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x113F9804BEF90DAE);
170 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x1B710B35131C471B);
171 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x28DB77F523047D84);
172 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x32CAAB7B40C72493);
173 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x3C9EBE0A15C9BEBC);
174 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x431D67C49C100D4C);
175 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x4CC5D4BECB3E42B6);
176 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0x597F299CFC657E2A);
177 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x5FCB6FAB3AD6FAEC);
178 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x6C44198C4A475817);
179
180 // clang-format on
181
182 A = (digest[0] += A);
183 B = (digest[1] += B);
184 C = (digest[2] += C);
185 D = (digest[3] += D);
186 E = (digest[4] += E);
187 F = (digest[5] += F);
188 G = (digest[6] += G);
189 H = (digest[7] += H);
190 }
191}
192
193std::string SHA_512_256::provider() const {
194 return sha512_provider();
195}
196
197std::string SHA_384::provider() const {
198 return sha512_provider();
199}
200
201std::string SHA_512::provider() const {
202 return sha512_provider();
203}
204
205void SHA_512_256::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
206 SHA_512::compress_digest(digest, input, blocks);
207}
208
209void SHA_384::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
210 SHA_512::compress_digest(digest, input, blocks);
211}
212
213void SHA_512::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
214 SHA_512::compress_digest(digest, input, blocks);
215}
216
217void SHA_512_256::init(digest_type& digest) {
218 digest.assign({0x22312194FC2BF72C,
219 0x9F555FA3C84C64C2,
220 0x2393B86B6F53B151,
221 0x963877195940EABD,
222 0x96283EE2A88EFFE3,
223 0xBE5E1E2553863992,
224 0x2B0199FC2C85B8AA,
225 0x0EB72DDC81C52CA2});
226}
227
228void SHA_384::init(digest_type& digest) {
229 digest.assign({0xCBBB9D5DC1059ED8,
230 0x629A292A367CD507,
231 0x9159015A3070DD17,
232 0x152FECD8F70E5939,
233 0x67332667FFC00B31,
234 0x8EB44A8768581511,
235 0xDB0C2E0D64F98FA7,
236 0x47B5481DBEFA4FA4});
237}
238
239void SHA_512::init(digest_type& digest) {
240 digest.assign({0x6A09E667F3BCC908,
241 0xBB67AE8584CAA73B,
242 0x3C6EF372FE94F82B,
243 0xA54FF53A5F1D36F1,
244 0x510E527FADE682D1,
245 0x9B05688C2B3E6C1F,
246 0x1F83D9ABFB41BD6B,
247 0x5BE0CD19137E2179});
248}
249
250std::unique_ptr<HashFunction> SHA_384::new_object() const {
251 return std::make_unique<SHA_384>();
252}
253
254std::unique_ptr<HashFunction> SHA_512::new_object() const {
255 return std::make_unique<SHA_512>();
256}
257
258std::unique_ptr<HashFunction> SHA_512_256::new_object() const {
259 return std::make_unique<SHA_512_256>();
260}
261
262std::unique_ptr<HashFunction> SHA_384::copy_state() const {
263 return std::make_unique<SHA_384>(*this);
264}
265
266std::unique_ptr<HashFunction> SHA_512::copy_state() const {
267 return std::make_unique<SHA_512>(*this);
268}
269
270std::unique_ptr<HashFunction> SHA_512_256::copy_state() const {
271 return std::make_unique<SHA_512_256>(*this);
272}
273
274void SHA_384::add_data(std::span<const uint8_t> input) {
275 m_md.update(input);
276}
277
278void SHA_512::add_data(std::span<const uint8_t> input) {
279 m_md.update(input);
280}
281
282void SHA_512_256::add_data(std::span<const uint8_t> input) {
283 m_md.update(input);
284}
285
286void SHA_384::final_result(std::span<uint8_t> output) {
287 m_md.final(output);
288}
289
290void SHA_512::final_result(std::span<uint8_t> output) {
291 m_md.final(output);
292}
293
294void SHA_512_256::final_result(std::span<uint8_t> output) {
295 m_md.final(output);
296}
297
298} // namespace Botan
Botan::BufferSlicer::take
std::span< const uint8_t > take(const size_t count)
Definition stl_util.h:89
Botan::CPUID::check
static std::optional< std::string > check(CPUID::Feature feat)
Definition cpuid.h:67
Botan::CPUID::has
static bool has(CPUID::Feature feat)
Definition cpuid.h:94
Botan::SHA_384::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:250
Botan::SHA_384::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:262
Botan::SHA_384::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:20
Botan::SHA_384::provider
std::string provider() const override
Definition sha2_64.cpp:197
Botan::SHA_384::init
static void init(digest_type &digest)
Definition sha2_64.cpp:228
Botan::SHA_384::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:209
Botan::SHA_512_256::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:119
Botan::SHA_512_256::provider
std::string provider() const override
Definition sha2_64.cpp:193
Botan::SHA_512_256::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:270
Botan::SHA_512_256::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:258
Botan::SHA_512_256::init
static void init(digest_type &digest)
Definition sha2_64.cpp:217
Botan::SHA_512_256::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:205
Botan::SHA_512::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:213
Botan::SHA_512::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:254
Botan::SHA_512::block_bytes
static constexpr size_t block_bytes
Definition sha2_64.h:64
Botan::SHA_512::provider
std::string provider() const override
Definition sha2_64.cpp:201
Botan::SHA_512::init
static void init(digest_type &digest)
Definition sha2_64.cpp:239
Botan::SHA_512::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:60
Botan::SHA_512::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:266
Botan::SHA_512::compress_digest
static void compress_digest(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:56
Botan::SHA2_64_F
BOTAN_FORCE_INLINE void SHA2_64_F(uint64_t A, uint64_t B, uint64_t C, uint64_t &D, uint64_t E, uint64_t F, uint64_t G, uint64_t &H, uint64_t &M1, uint64_t M2, uint64_t M3, uint64_t M4, uint64_t magic)
Definition sha2_64_f.h:19
Botan::load_be
constexpr auto load_be(ParamTs &&... params)
Definition loadstor.h:504
Generated by doxygen 1.15.0