Botan 3.4.0
Crypto and TLS for C&
sha2_64.cpp
Go to the documentation of this file.
1/*
2* SHA-{384,512}
3* (C) 1999-2011,2015 Jack Lloyd
4*
5* Botan is released under the Simplified BSD License (see license.txt)
6*/
7
8#include <botan/internal/sha2_64.h>
9
10#include <botan/internal/bit_ops.h>
11#include <botan/internal/cpuid.h>
12#include <botan/internal/loadstor.h>
13#include <botan/internal/rotate.h>
14#include <botan/internal/sha2_64_f.h>
15#include <botan/internal/stl_util.h>
16
17namespace Botan {
18
19namespace {
20
21std::string sha512_provider() {
22#if defined(BOTAN_HAS_SHA2_64_BMI2)
23 if(CPUID::has_bmi2()) {
24 return "bmi2";
25 }
26#endif
27
28#if defined(BOTAN_HAS_SHA2_64_ARMV8)
29 if(CPUID::has_arm_sha2_512()) {
30 return "armv8";
31 }
32#endif
33
34 return "base";
35}
36
37} // namespace
38
39/*
40* SHA-{384,512} Compression Function
41*/
42//static
43void SHA_512::compress_digest(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
44#if defined(BOTAN_HAS_SHA2_64_BMI2)
45 if(CPUID::has_bmi2()) {
46 return compress_digest_bmi2(digest, input, blocks);
47 }
48#endif
49
50#if defined(BOTAN_HAS_SHA2_64_ARMV8)
51 if(CPUID::has_arm_sha2_512()) {
52 return compress_digest_armv8(digest, input, blocks);
53 }
54#endif
55
56 uint64_t A = digest[0], B = digest[1], C = digest[2], D = digest[3], E = digest[4], F = digest[5], G = digest[6],
57 H = digest[7];
58
59 BufferSlicer in(input);
60
61 for(size_t i = 0; i != blocks; ++i) {
62 const auto block = in.take(block_bytes);
63
64 uint64_t W00 = load_be<uint64_t>(block.data(), 0);
65 uint64_t W01 = load_be<uint64_t>(block.data(), 1);
66 uint64_t W02 = load_be<uint64_t>(block.data(), 2);
67 uint64_t W03 = load_be<uint64_t>(block.data(), 3);
68 uint64_t W04 = load_be<uint64_t>(block.data(), 4);
69 uint64_t W05 = load_be<uint64_t>(block.data(), 5);
70 uint64_t W06 = load_be<uint64_t>(block.data(), 6);
71 uint64_t W07 = load_be<uint64_t>(block.data(), 7);
72 uint64_t W08 = load_be<uint64_t>(block.data(), 8);
73 uint64_t W09 = load_be<uint64_t>(block.data(), 9);
74 uint64_t W10 = load_be<uint64_t>(block.data(), 10);
75 uint64_t W11 = load_be<uint64_t>(block.data(), 11);
76 uint64_t W12 = load_be<uint64_t>(block.data(), 12);
77 uint64_t W13 = load_be<uint64_t>(block.data(), 13);
78 uint64_t W14 = load_be<uint64_t>(block.data(), 14);
79 uint64_t W15 = load_be<uint64_t>(block.data(), 15);
80
81 SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x428A2F98D728AE22);
82 SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x7137449123EF65CD);
83 SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xB5C0FBCFEC4D3B2F);
84 SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xE9B5DBA58189DBBC);
85 SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x3956C25BF348B538);
86 SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x59F111F1B605D019);
87 SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x923F82A4AF194F9B);
88 SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0xAB1C5ED5DA6D8118);
89 SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xD807AA98A3030242);
90 SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x12835B0145706FBE);
91 SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x243185BE4EE4B28C);
92 SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x550C7DC3D5FFB4E2);
93 SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x72BE5D74F27B896F);
94 SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x80DEB1FE3B1696B1);
95 SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x9BDC06A725C71235);
96 SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC19BF174CF692694);
97 SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xE49B69C19EF14AD2);
98 SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xEFBE4786384F25E3);
99 SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x0FC19DC68B8CD5B5);
100 SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x240CA1CC77AC9C65);
101 SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x2DE92C6F592B0275);
102 SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4A7484AA6EA6E483);
103 SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5CB0A9DCBD41FBD4);
104 SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x76F988DA831153B5);
105 SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x983E5152EE66DFAB);
106 SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA831C66D2DB43210);
107 SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xB00327C898FB213F);
108 SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xBF597FC7BEEF0EE4);
109 SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xC6E00BF33DA88FC2);
110 SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD5A79147930AA725);
111 SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x06CA6351E003826F);
112 SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x142929670A0E6E70);
113 SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x27B70A8546D22FFC);
114 SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x2E1B21385C26C926);
115 SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x4D2C6DFC5AC42AED);
116 SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x53380D139D95B3DF);
117 SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x650A73548BAF63DE);
118 SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x766A0ABB3C77B2A8);
119 SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x81C2C92E47EDAEE6);
120 SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x92722C851482353B);
121 SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0xA2BFE8A14CF10364);
122 SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0xA81A664BBC423001);
123 SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0xC24B8B70D0F89791);
124 SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0xC76C51A30654BE30);
125 SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0xD192E819D6EF5218);
126 SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xD69906245565A910);
127 SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xF40E35855771202A);
128 SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x106AA07032BBD1B8);
129 SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0x19A4C116B8D2D0C8);
130 SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0x1E376C085141AB53);
131 SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0x2748774CDF8EEB99);
132 SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0x34B0BCB5E19B48A8);
133 SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x391C0CB3C5C95A63);
134 SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x4ED8AA4AE3418ACB);
135 SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x5B9CCA4F7763E373);
136 SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x682E6FF3D6B2B8A3);
137 SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x748F82EE5DEFB2FC);
138 SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x78A5636F43172F60);
139 SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x84C87814A1F0AB72);
140 SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x8CC702081A6439EC);
141 SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x90BEFFFA23631E28);
142 SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0xA4506CEBDE82BDE9);
143 SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0xBEF9A3F7B2C67915);
144 SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0xC67178F2E372532B);
145 SHA2_64_F(A, B, C, D, E, F, G, H, W00, W14, W09, W01, 0xCA273ECEEA26619C);
146 SHA2_64_F(H, A, B, C, D, E, F, G, W01, W15, W10, W02, 0xD186B8C721C0C207);
147 SHA2_64_F(G, H, A, B, C, D, E, F, W02, W00, W11, W03, 0xEADA7DD6CDE0EB1E);
148 SHA2_64_F(F, G, H, A, B, C, D, E, W03, W01, W12, W04, 0xF57D4F7FEE6ED178);
149 SHA2_64_F(E, F, G, H, A, B, C, D, W04, W02, W13, W05, 0x06F067AA72176FBA);
150 SHA2_64_F(D, E, F, G, H, A, B, C, W05, W03, W14, W06, 0x0A637DC5A2C898A6);
151 SHA2_64_F(C, D, E, F, G, H, A, B, W06, W04, W15, W07, 0x113F9804BEF90DAE);
152 SHA2_64_F(B, C, D, E, F, G, H, A, W07, W05, W00, W08, 0x1B710B35131C471B);
153 SHA2_64_F(A, B, C, D, E, F, G, H, W08, W06, W01, W09, 0x28DB77F523047D84);
154 SHA2_64_F(H, A, B, C, D, E, F, G, W09, W07, W02, W10, 0x32CAAB7B40C72493);
155 SHA2_64_F(G, H, A, B, C, D, E, F, W10, W08, W03, W11, 0x3C9EBE0A15C9BEBC);
156 SHA2_64_F(F, G, H, A, B, C, D, E, W11, W09, W04, W12, 0x431D67C49C100D4C);
157 SHA2_64_F(E, F, G, H, A, B, C, D, W12, W10, W05, W13, 0x4CC5D4BECB3E42B6);
158 SHA2_64_F(D, E, F, G, H, A, B, C, W13, W11, W06, W14, 0x597F299CFC657E2A);
159 SHA2_64_F(C, D, E, F, G, H, A, B, W14, W12, W07, W15, 0x5FCB6FAB3AD6FAEC);
160 SHA2_64_F(B, C, D, E, F, G, H, A, W15, W13, W08, W00, 0x6C44198C4A475817);
161
162 A = (digest[0] += A);
163 B = (digest[1] += B);
164 C = (digest[2] += C);
165 D = (digest[3] += D);
166 E = (digest[4] += E);
167 F = (digest[5] += F);
168 G = (digest[6] += G);
169 H = (digest[7] += H);
170 }
171}
172
173std::string SHA_512_256::provider() const {
174 return sha512_provider();
175}
176
177std::string SHA_384::provider() const {
178 return sha512_provider();
179}
180
181std::string SHA_512::provider() const {
182 return sha512_provider();
183}
184
185void SHA_512_256::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
186 SHA_512::compress_digest(digest, input, blocks);
187}
188
189void SHA_384::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
190 SHA_512::compress_digest(digest, input, blocks);
191}
192
193void SHA_512::compress_n(digest_type& digest, std::span<const uint8_t> input, size_t blocks) {
194 SHA_512::compress_digest(digest, input, blocks);
195}
196
197void SHA_512_256::init(digest_type& digest) {
198 digest.assign({0x22312194FC2BF72C,
199 0x9F555FA3C84C64C2,
200 0x2393B86B6F53B151,
201 0x963877195940EABD,
202 0x96283EE2A88EFFE3,
203 0xBE5E1E2553863992,
204 0x2B0199FC2C85B8AA,
205 0x0EB72DDC81C52CA2});
206}
207
208void SHA_384::init(digest_type& digest) {
209 digest.assign({0xCBBB9D5DC1059ED8,
210 0x629A292A367CD507,
211 0x9159015A3070DD17,
212 0x152FECD8F70E5939,
213 0x67332667FFC00B31,
214 0x8EB44A8768581511,
215 0xDB0C2E0D64F98FA7,
216 0x47B5481DBEFA4FA4});
217}
218
219void SHA_512::init(digest_type& digest) {
220 digest.assign({0x6A09E667F3BCC908,
221 0xBB67AE8584CAA73B,
222 0x3C6EF372FE94F82B,
223 0xA54FF53A5F1D36F1,
224 0x510E527FADE682D1,
225 0x9B05688C2B3E6C1F,
226 0x1F83D9ABFB41BD6B,
227 0x5BE0CD19137E2179});
228}
229
230std::unique_ptr<HashFunction> SHA_384::new_object() const {
231 return std::make_unique<SHA_384>();
232}
233
234std::unique_ptr<HashFunction> SHA_512::new_object() const {
235 return std::make_unique<SHA_512>();
236}
237
238std::unique_ptr<HashFunction> SHA_512_256::new_object() const {
239 return std::make_unique<SHA_512_256>();
240}
241
242std::unique_ptr<HashFunction> SHA_384::copy_state() const {
243 return std::make_unique<SHA_384>(*this);
244}
245
246std::unique_ptr<HashFunction> SHA_512::copy_state() const {
247 return std::make_unique<SHA_512>(*this);
248}
249
250std::unique_ptr<HashFunction> SHA_512_256::copy_state() const {
251 return std::make_unique<SHA_512_256>(*this);
252}
253
254void SHA_384::add_data(std::span<const uint8_t> input) {
255 m_md.update(input);
256}
257
258void SHA_512::add_data(std::span<const uint8_t> input) {
259 m_md.update(input);
260}
261
262void SHA_512_256::add_data(std::span<const uint8_t> input) {
263 m_md.update(input);
264}
265
266void SHA_384::final_result(std::span<uint8_t> output) {
267 m_md.final(output);
268}
269
270void SHA_512::final_result(std::span<uint8_t> output) {
271 m_md.final(output);
272}
273
274void SHA_512_256::final_result(std::span<uint8_t> output) {
275 m_md.final(output);
276}
277
278} // namespace Botan
Botan::BufferSlicer::take
std::span< const uint8_t > take(const size_t count)
Definition stl_util.h:156
Botan::SHA_384::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:230
Botan::SHA_384::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:242
Botan::SHA_384::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:20
Botan::SHA_384::provider
std::string provider() const override
Definition sha2_64.cpp:177
Botan::SHA_384::init
static void init(digest_type &digest)
Definition sha2_64.cpp:208
Botan::SHA_384::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:189
Botan::SHA_512_256::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:111
Botan::SHA_512_256::provider
std::string provider() const override
Definition sha2_64.cpp:173
Botan::SHA_512_256::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:250
Botan::SHA_512_256::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:238
Botan::SHA_512_256::init
static void init(digest_type &digest)
Definition sha2_64.cpp:197
Botan::SHA_512_256::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:185
Botan::SHA_512::compress_n
static void compress_n(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:193
Botan::SHA_512::new_object
std::unique_ptr< HashFunction > new_object() const override
Definition sha2_64.cpp:234
Botan::SHA_512::block_bytes
static constexpr size_t block_bytes
Definition sha2_64.h:64
Botan::SHA_512::provider
std::string provider() const override
Definition sha2_64.cpp:181
Botan::SHA_512::compress_digest_bmi2
static void compress_digest_bmi2(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64_bmi2.cpp:17
Botan::SHA_512::init
static void init(digest_type &digest)
Definition sha2_64.cpp:219
Botan::SHA_512::digest_type
secure_vector< uint64_t > digest_type
Definition sha2_64.h:60
Botan::SHA_512::copy_state
std::unique_ptr< HashFunction > copy_state() const override
Definition sha2_64.cpp:246
Botan::SHA_512::compress_digest
static void compress_digest(digest_type &digest, std::span< const uint8_t > input, size_t blocks)
Definition sha2_64.cpp:43
Botan::SHA2_64_F
BOTAN_FORCE_INLINE void SHA2_64_F(uint64_t A, uint64_t B, uint64_t C, uint64_t &D, uint64_t E, uint64_t F, uint64_t G, uint64_t &H, uint64_t &M1, uint64_t M2, uint64_t M3, uint64_t M4, uint64_t magic)
Definition sha2_64_f.h:19
Generated by doxygen 1.10.0