Botan 3.8.1
Crypto and TLS for C&
sha2_64.cpp
Go to the documentation of this file.
1/*
2* SHA-{384,512}
3* (C) 1999-2011,2015 Jack Lloyd
4*
5* Botan is released under the Simplified BSD License (see license.txt)
6*/
7
8#include <botan/internal/sha2_64.h>
9
10#include <botan/internal/bit_ops.h>
11#include <botan/internal/loadstor.h>
12#include <botan/internal/rotate.h>
13#include <botan/internal/sha2_64_f.h>
14#include <botan/internal/stl_util.h>
15
16#if defined(BOTAN_HAS_CPUID)
17 #include <botan/internal/cpuid.h>
18#endif
19
20namespace Botan {
21
22namespace {
23
24std::string sha512_provider() {
25#if defined(BOTAN_HAS_SHA2_64_X86)
26 if(auto feat = CPUID::check(CPUID::Feature::SHA512)) {
27 return *feat;
28 }
29#endif
30
31#if defined(BOTAN_HAS_SHA2_64_ARMV8)
32 if(auto feat = CPUID::check(CPUID::Feature::SHA2_512)) {
33 return *feat;
34 }
35#endif
36
37#if defined(BOTAN_HAS_SHA2_64_X86_AVX512)
38 if(auto feat = CPUID::check(CPUID::Feature::AVX512, CPUID::Feature::BMI)) {
39 return *feat;
40 }
41#endif
42
43#if defined(BOTAN_HAS_SHA2_64_X86_AVX2)
44 if(auto feat = CPUID::check(CPUID::Feature::AVX2, CPUID::Feature::BMI)) {
45 return *feat;
46 }
47#endif
48
49 return "base";
50}
51
52} // namespace
53
54/*
55* SHA-{384,512} Compression Function
56*/
57//static
58void SHA_512::compress_digest(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
59#if defined(BOTAN_HAS_SHA2_64_X86)
60 if(CPUID::has(CPUID::Feature::SHA512)) {
61 return compress_digest_x86(digest, input, blocks);
62 }
63#endif
64
65#if defined(BOTAN_HAS_SHA2_64_ARMV8)
66 if(CPUID::has(CPUID::Feature::SHA2_512)) {
67 return compress_digest_armv8(digest, input, blocks);
68 }
69#endif
70
71#if defined(BOTAN_HAS_SHA2_64_X86_AVX512)
72 if(CPUID::has(CPUID::Feature::AVX512, CPUID::Feature::BMI)) {
73 return compress_digest_x86_avx512(digest, input, blocks);
74 }
75#endif
76
77#if defined(BOTAN_HAS_SHA2_64_X86_AVX2)
78 if(CPUID::has(CPUID::Feature::AVX2, CPUID::Feature::BMI)) {
79 return compress_digest_x86_avx2(digest, input, blocks);
80 }
81#endif
82
83 uint64_t A = digest[0], B = digest[1], C = digest[2], D = digest[3], E = digest[4], F = digest[5], G = digest[6],
84 H = digest[7];
85
86 std::array<uint64_t, 16> W;
87
88 BufferSlicer in(input);
89
90 for(size_t i = 0; i != blocks; ++i) {
91 load_be(W, in.take<block_bytes>());
92
93 // clang-format off
94
95 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x428A2F98D728AE22);
96 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x7137449123EF65CD);
97 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0xB5C0FBCFEC4D3B2F);
98 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0xE9B5DBA58189DBBC);
99 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x3956C25BF348B538);
100 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x59F111F1B605D019);
101 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x923F82A4AF194F9B);
102 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0xAB1C5ED5DA6D8118);
103 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0xD807AA98A3030242);
104 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x12835B0145706FBE);
105 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x243185BE4EE4B28C);
106 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x550C7DC3D5FFB4E2);
107 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x72BE5D74F27B896F);
108 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0x80DEB1FE3B1696B1);
109 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x9BDC06A725C71235);
110 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0xC19BF174CF692694);
111 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0xE49B69C19EF14AD2);
112 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0xEFBE4786384F25E3);
113 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x0FC19DC68B8CD5B5);
114 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x240CA1CC77AC9C65);
115 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x2DE92C6F592B0275);
116 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x4A7484AA6EA6E483);
117 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x5CB0A9DCBD41FBD4);
118 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x76F988DA831153B5);
119 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x983E5152EE66DFAB);
120 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0xA831C66D2DB43210);
121 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0xB00327C898FB213F);
122 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0xBF597FC7BEEF0EE4);
123 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0xC6E00BF33DA88FC2);
124 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xD5A79147930AA725);
125 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x06CA6351E003826F);
126 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x142929670A0E6E70);
127 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x27B70A8546D22FFC);
128 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x2E1B21385C26C926);
129 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x4D2C6DFC5AC42AED);
130 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x53380D139D95B3DF);
131 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x650A73548BAF63DE);
132 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x766A0ABB3C77B2A8);
133 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x81C2C92E47EDAEE6);
134 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x92722C851482353B);
135 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0xA2BFE8A14CF10364);
136 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0xA81A664BBC423001);
137 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0xC24B8B70D0F89791);
138 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0xC76C51A30654BE30);
139 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0xD192E819D6EF5218);
140 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xD69906245565A910);
141 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0xF40E35855771202A);
142 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x106AA07032BBD1B8);
143 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0x19A4C116B8D2D0C8);
144 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0x1E376C085141AB53);
145 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0x2748774CDF8EEB99);
146 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0x34B0BCB5E19B48A8);
147 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x391C0CB3C5C95A63);
148 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x4ED8AA4AE3418ACB);
149 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x5B9CCA4F7763E373);
150 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x682E6FF3D6B2B8A3);
151 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x748F82EE5DEFB2FC);
152 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x78A5636F43172F60);
153 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x84C87814A1F0AB72);
154 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x8CC702081A6439EC);
155 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x90BEFFFA23631E28);
156 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0xA4506CEBDE82BDE9);
157 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0xBEF9A3F7B2C67915);
158 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0xC67178F2E372532B);
159 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 0], W[14], W[ 9], W[ 1], 0xCA273ECEEA26619C);
160 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 1], W[15], W[10], W[ 2], 0xD186B8C721C0C207);
161 SHA2_64_F(G, H, A, B, C, D, E, F, W[ 2], W[ 0], W[11], W[ 3], 0xEADA7DD6CDE0EB1E);
162 SHA2_64_F(F, G, H, A, B, C, D, E, W[ 3], W[ 1], W[12], W[ 4], 0xF57D4F7FEE6ED178);
163 SHA2_64_F(E, F, G, H, A, B, C, D, W[ 4], W[ 2], W[13], W[ 5], 0x06F067AA72176FBA);
164 SHA2_64_F(D, E, F, G, H, A, B, C, W[ 5], W[ 3], W[14], W[ 6], 0x0A637DC5A2C898A6);
165 SHA2_64_F(C, D, E, F, G, H, A, B, W[ 6], W[ 4], W[15], W[ 7], 0x113F9804BEF90DAE);
166 SHA2_64_F(B, C, D, E, F, G, H, A, W[ 7], W[ 5], W[ 0], W[ 8], 0x1B710B35131C471B);
167 SHA2_64_F(A, B, C, D, E, F, G, H, W[ 8], W[ 6], W[ 1], W[ 9], 0x28DB77F523047D84);
168 SHA2_64_F(H, A, B, C, D, E, F, G, W[ 9], W[ 7], W[ 2], W[10], 0x32CAAB7B40C72493);
169 SHA2_64_F(G, H, A, B, C, D, E, F, W[10], W[ 8], W[ 3], W[11], 0x3C9EBE0A15C9BEBC);
170 SHA2_64_F(F, G, H, A, B, C, D, E, W[11], W[ 9], W[ 4], W[12], 0x431D67C49C100D4C);
171 SHA2_64_F(E, F, G, H, A, B, C, D, W[12], W[10], W[ 5], W[13], 0x4CC5D4BECB3E42B6);
172 SHA2_64_F(D, E, F, G, H, A, B, C, W[13], W[11], W[ 6], W[14], 0x597F299CFC657E2A);
173 SHA2_64_F(C, D, E, F, G, H, A, B, W[14], W[12], W[ 7], W[15], 0x5FCB6FAB3AD6FAEC);
174 SHA2_64_F(B, C, D, E, F, G, H, A, W[15], W[13], W[ 8], W[ 0], 0x6C44198C4A475817);
175
176 // clang-format on
177
178 A = (digest[0] += A);
179 B = (digest[1] += B);
180 C = (digest[2] += C);
181 D = (digest[3] += D);
182 E = (digest[4] += E);
183 F = (digest[5] += F);
184 G = (digest[6] += G);
185 H = (digest[7] += H);
186 }
187}
188
189std::string SHA_512_256::provider() const {
190 return sha512_provider();
191}
192
193std::string SHA_384::provider() const {
194 return sha512_provider();
195}
196
197std::string SHA_512::provider() const {
198 return sha512_provider();
199}
200
201void SHA_512_256::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
202 SHA_512::compress_digest(digest, input, blocks);
203}
204
205void SHA_384::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
206 SHA_512::compress_digest(digest, input, blocks);
207}
208
209void SHA_512::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
210 SHA_512::compress_digest(digest, input, blocks);
211}
212
213void SHA_512_256::init(digest_type& digest) {
214 digest.assign({0x22312194FC2BF72C,
215 0x9F555FA3C84C64C2,
216 0x2393B86B6F53B151,
217 0x963877195940EABD,
218 0x96283EE2A88EFFE3,
219 0xBE5E1E2553863992,
220 0x2B0199FC2C85B8AA,
221 0x0EB72DDC81C52CA2});
222}
223
224void SHA_384::init(digest_type& digest) {
225 digest.assign({0xCBBB9D5DC1059ED8,
226 0x629A292A367CD507,
227 0x9159015A3070DD17,
228 0x152FECD8F70E5939,
229 0x67332667FFC00B31,
230 0x8EB44A8768581511,
231 0xDB0C2E0D64F98FA7,
232 0x47B5481DBEFA4FA4});
233}
234
235void SHA_512::init(digest_type& digest) {
236 digest.assign({0x6A09E667F3BCC908,
237 0xBB67AE8584CAA73B,
238 0x3C6EF372FE94F82B,
239 0xA54FF53A5F1D36F1,
240 0x510E527FADE682D1,
241 0x9B05688C2B3E6C1F,
242 0x1F83D9ABFB41BD6B,
243 0x5BE0CD19137E2179});
244}
245
246std::unique_ptr<HashFunction> SHA_384::new_object() const {
247 return std::make_unique<SHA_384>();
248}
249
250std::unique_ptr<HashFunction> SHA_512::new_object() const {
251 return std::make_unique<SHA_512>();
252}
253
254std::unique_ptr<HashFunction> SHA_512_256::new_object() const {
255 return std::make_unique<SHA_512_256>();
256}
257
258std::unique_ptr<HashFunction> SHA_384::copy_state() const {
259 return std::make_unique<SHA_384>(*this);
260}
261
262std::unique_ptr<HashFunction> SHA_512::copy_state() const {
263 return std::make_unique<SHA_512>(*this);
264}
265
266std::unique_ptr<HashFunction> SHA_512_256::copy_state() const {
267 return std::make_unique<SHA_512_256>(*this);
268}
269
270void SHA_384::add_data(std::span<const uint8_t> input) {
271 m_md.update(input);
272}
273
274void SHA_512::add_data(std::span<const uint8_t> input) {
275 m_md.update(input);
276}
277
278void SHA_512_256::add_data(std::span<const uint8_t> input) {
279 m_md.update(input);
280}
281
282void SHA_384::final_result(std::span<uint8_t> output) {
283 m_md.final(output);
284}
285
286void SHA_512::final_result(std::span<uint8_t> output) {
287 m_md.final(output);
288}
289
290void SHA_512_256::final_result(std::span<uint8_t> output) {
291 m_md.final(output);
292}
293
294} // namespace Botan
Botan::BufferSlicer::take
std::span< const uint8_t > take(const size_t count)
Definition stl_util.h:99
Botan::CPUID::check
static std::optional< std::string > check(CPUID::Feature feat)
Definition cpuid.h:67
Botan::CPUID::has
static bool has(CPUID::Feature feat)
Definition cpuid.h:94
Botan::SHA_384::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:246
Botan::SHA_384::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:258
Botan::SHA_384::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:20
Botan::SHA_384::provider
std::string provider() const override
Definition sha2_64.cpp:193
Botan::SHA_384::init
static void init(digest_type &digest)
Definition sha2_64.cpp:224
Botan::SHA_384::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:205
Botan::SHA_512_256::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:119
Botan::SHA_512_256::provider
std::string provider() const override
Definition sha2_64.cpp:189
Botan::SHA_512_256::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:266
Botan::SHA_512_256::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:254
Botan::SHA_512_256::init
static void init(digest_type &digest)
Definition sha2_64.cpp:213
Botan::SHA_512_256::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:201
Botan::SHA_512::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:209
Botan::SHA_512::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:250
Botan::SHA_512::block_bytes
static constexpr size_t block_bytes
Definition sha2_64.h:64
Botan::SHA_512::provider
std::string provider() const override
Definition sha2_64.cpp:197
Botan::SHA_512::init
static void init(digest_type &digest)
Definition sha2_64.cpp:235
Botan::SHA_512::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:60
Botan::SHA_512::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:262
Botan::SHA_512::compress_digest
static void compress_digest(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:58
Botan::SHA2_64_F
BOTAN_FORCE_INLINE void SHA2_64_F(uint64_t A, uint64_t B, uint64_t C, uint64_t &D, uint64_t E, uint64_t F, uint64_t G, uint64_t &H, uint64_t &M1, uint64_t M2, uint64_t M3, uint64_t M4, uint64_t magic)
Definition sha2_64_f.h:19
Botan::load_be
constexpr auto load_be(ParamTs &&... params)
Definition loadstor.h:504
Generated by doxygen 1.13.2