Pieter Wuille
10 years ago
5 changed files with 21 additions and 144 deletions
@ -1,47 +0,0 @@
@@ -1,47 +0,0 @@
|
||||
// Copyright (c) 2014 The Bitcoin Core developers
|
||||
// Distributed under the MIT software license, see the accompanying
|
||||
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
|
||||
|
||||
#include "crypto/rfc6979_hmac_sha256.h" |
||||
|
||||
#include <string.h> |
||||
|
||||
#include <algorithm> |
||||
|
||||
static const unsigned char zero[1] = {0x00}; |
||||
static const unsigned char one[1] = {0x01}; |
||||
|
||||
RFC6979_HMAC_SHA256::RFC6979_HMAC_SHA256(const unsigned char* key, size_t keylen, const unsigned char* msg, size_t msglen) : retry(false) |
||||
{ |
||||
memset(V, 0x01, sizeof(V)); |
||||
memset(K, 0x00, sizeof(K)); |
||||
|
||||
CHMAC_SHA256(K, sizeof(K)).Write(V, sizeof(V)).Write(zero, sizeof(zero)).Write(key, keylen).Write(msg, msglen).Finalize(K); |
||||
CHMAC_SHA256(K, sizeof(K)).Write(V, sizeof(V)).Finalize(V); |
||||
CHMAC_SHA256(K, sizeof(K)).Write(V, sizeof(V)).Write(one, sizeof(one)).Write(key, keylen).Write(msg, msglen).Finalize(K); |
||||
CHMAC_SHA256(K, sizeof(K)).Write(V, sizeof(V)).Finalize(V); |
||||
} |
||||
|
||||
RFC6979_HMAC_SHA256::~RFC6979_HMAC_SHA256() |
||||
{ |
||||
memset(V, 0x01, sizeof(V)); |
||||
memset(K, 0x00, sizeof(K)); |
||||
} |
||||
|
||||
void RFC6979_HMAC_SHA256::Generate(unsigned char* output, size_t outputlen) |
||||
{ |
||||
if (retry) { |
||||
CHMAC_SHA256(K, sizeof(K)).Write(V, sizeof(V)).Write(zero, sizeof(zero)).Finalize(K); |
||||
CHMAC_SHA256(K, sizeof(K)).Write(V, sizeof(V)).Finalize(V); |
||||
} |
||||
|
||||
while (outputlen > 0) { |
||||
CHMAC_SHA256(K, sizeof(K)).Write(V, sizeof(V)).Finalize(V); |
||||
size_t len = std::min(outputlen, sizeof(V)); |
||||
memcpy(output, V, len); |
||||
output += len; |
||||
outputlen -= len; |
||||
} |
||||
|
||||
retry = true; |
||||
} |
@ -1,36 +0,0 @@
@@ -1,36 +0,0 @@
|
||||
// Copyright (c) 2014 The Bitcoin Core developers
|
||||
// Distributed under the MIT software license, see the accompanying
|
||||
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
|
||||
|
||||
#ifndef BITCOIN_RFC6979_HMAC_SHA256_H |
||||
#define BITCOIN_RFC6979_HMAC_SHA256_H |
||||
|
||||
#include "crypto/hmac_sha256.h" |
||||
|
||||
#include <stdint.h> |
||||
#include <stdlib.h> |
||||
|
||||
/** The RFC 6979 PRNG using HMAC-SHA256. */ |
||||
class RFC6979_HMAC_SHA256 |
||||
{ |
||||
private: |
||||
unsigned char V[CHMAC_SHA256::OUTPUT_SIZE]; |
||||
unsigned char K[CHMAC_SHA256::OUTPUT_SIZE]; |
||||
bool retry; |
||||
|
||||
public: |
||||
/**
|
||||
* Construct a new RFC6979 PRNG, using the given key and message. |
||||
* The message is assumed to be already hashed. |
||||
*/ |
||||
RFC6979_HMAC_SHA256(const unsigned char* key, size_t keylen, const unsigned char* msg, size_t msglen); |
||||
|
||||
/**
|
||||
* Generate a byte array. |
||||
*/ |
||||
void Generate(unsigned char* output, size_t outputlen); |
||||
|
||||
~RFC6979_HMAC_SHA256(); |
||||
}; |
||||
|
||||
#endif // BITCOIN_RFC6979_HMAC_SHA256_H
|
Loading…
Reference in new issue