Pieter Wuille
11 years ago
5 changed files with 248 additions and 4 deletions
@ -0,0 +1,217 @@ |
|||||||
|
// Copyright (c) 2014 The Bitcoin developers
|
||||||
|
// Distributed under the MIT/X11 software license, see the accompanying
|
||||||
|
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
|
||||||
|
|
||||||
|
#include "crypto/ripemd160.h" |
||||||
|
|
||||||
|
#include <string.h> |
||||||
|
|
||||||
|
// Internal implementation code.
|
||||||
|
namespace { |
||||||
|
|
||||||
|
/** Read 4 bytes, and interpret them as a 32-bit unsigned little-endian integer. */ |
||||||
|
uint32_t inline ReadLE32(const unsigned char *data) { |
||||||
|
return ((uint32_t)data[0] | (uint32_t)data[1] << 8 | (uint32_t)data[2] << 16 | (uint32_t)data[3] << 24); |
||||||
|
} |
||||||
|
|
||||||
|
/** Write a 32-bit unsigned little-endian integer. */ |
||||||
|
void inline WriteLE32(unsigned char *data, uint32_t x) { |
||||||
|
data[0] = x; |
||||||
|
data[1] = x >> 8; |
||||||
|
data[2] = x >> 16; |
||||||
|
data[3] = x >> 24; |
||||||
|
} |
||||||
|
|
||||||
|
/// Internal RIPEMD-160 implementation.
|
||||||
|
namespace ripemd160 { |
||||||
|
|
||||||
|
uint32_t inline f1(uint32_t x, uint32_t y, uint32_t z) { return x ^ y ^ z; } |
||||||
|
uint32_t inline f2(uint32_t x, uint32_t y, uint32_t z) { return (x & y) | (~x & z); } |
||||||
|
uint32_t inline f3(uint32_t x, uint32_t y, uint32_t z) { return (x | ~y) ^ z; } |
||||||
|
uint32_t inline f4(uint32_t x, uint32_t y, uint32_t z) { return (x & z) | (y & ~z); } |
||||||
|
uint32_t inline f5(uint32_t x, uint32_t y, uint32_t z) { return x ^ (y | ~z); } |
||||||
|
|
||||||
|
/** Initialize RIPEMD-160 state. */ |
||||||
|
void inline Initialize(uint32_t *s) { |
||||||
|
s[0] = 0x67452301ul; |
||||||
|
s[1] = 0xEFCDAB89ul; |
||||||
|
s[2] = 0x98BADCFEul; |
||||||
|
s[3] = 0x10325476ul; |
||||||
|
s[4] = 0xC3D2E1F0ul; |
||||||
|
} |
||||||
|
|
||||||
|
uint32_t inline rol(uint32_t x, int i) { return (x << i) | (x >> (32-i)); } |
||||||
|
|
||||||
|
void inline Round(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t f, uint32_t x, uint32_t k, int r) { |
||||||
|
a = rol(a + f + x + k, r) + e; |
||||||
|
c = rol(c, 10); |
||||||
|
} |
||||||
|
|
||||||
|
void inline R11(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f1(b, c, d), x, 0, r); } |
||||||
|
void inline R21(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f2(b, c, d), x, 0x5A827999ul, r); } |
||||||
|
void inline R31(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f3(b, c, d), x, 0x6ED9EBA1ul, r); } |
||||||
|
void inline R41(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f4(b, c, d), x, 0x8F1BBCDCul, r); } |
||||||
|
void inline R51(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f5(b, c, d), x, 0xA953FD4Eul, r); } |
||||||
|
|
||||||
|
void inline R12(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f5(b, c, d), x, 0x50A28BE6ul, r); } |
||||||
|
void inline R22(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f4(b, c, d), x, 0x5C4DD124ul, r); } |
||||||
|
void inline R32(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f3(b, c, d), x, 0x6D703EF3ul, r); } |
||||||
|
void inline R42(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f2(b, c, d), x, 0x7A6D76E9ul, r); } |
||||||
|
void inline R52(uint32_t &a, uint32_t b, uint32_t &c, uint32_t d, uint32_t e, uint32_t x, int r) { Round(a, b, c, d, e, f1(b, c, d), x, 0, r); } |
||||||
|
|
||||||
|
/** Perform a RIPEMD-160 transformation, processing a 64-byte chunk. */ |
||||||
|
void Transform(uint32_t *s, const unsigned char *chunk) { |
||||||
|
uint32_t a1 = s[0], b1 = s[1], c1 = s[2], d1 = s[3], e1 = s[4]; |
||||||
|
uint32_t a2 = a1 , b2 = b1 , c2 = c1 , d2 = d1 , e2 = e1 ; |
||||||
|
uint32_t w0 = ReadLE32(chunk + 0), w1 = ReadLE32(chunk + 4), w2 = ReadLE32(chunk + 8), w3 = ReadLE32(chunk + 12); |
||||||
|
uint32_t w4 = ReadLE32(chunk + 16), w5 = ReadLE32(chunk + 20), w6 = ReadLE32(chunk + 24), w7 = ReadLE32(chunk + 28); |
||||||
|
uint32_t w8 = ReadLE32(chunk + 32), w9 = ReadLE32(chunk + 36), w10 = ReadLE32(chunk + 40), w11 = ReadLE32(chunk + 44); |
||||||
|
uint32_t w12 = ReadLE32(chunk + 48), w13 = ReadLE32(chunk + 52), w14 = ReadLE32(chunk + 56), w15 = ReadLE32(chunk + 60); |
||||||
|
|
||||||
|
R11(a1, b1, c1, d1, e1, w0 , 11); R12(a2, b2, c2, d2, e2, w5 , 8); |
||||||
|
R11(e1, a1, b1, c1, d1, w1 , 14); R12(e2, a2, b2, c2, d2, w14, 9); |
||||||
|
R11(d1, e1, a1, b1, c1, w2 , 15); R12(d2, e2, a2, b2, c2, w7 , 9); |
||||||
|
R11(c1, d1, e1, a1, b1, w3 , 12); R12(c2, d2, e2, a2, b2, w0 , 11); |
||||||
|
R11(b1, c1, d1, e1, a1, w4 , 5); R12(b2, c2, d2, e2, a2, w9 , 13); |
||||||
|
R11(a1, b1, c1, d1, e1, w5 , 8); R12(a2, b2, c2, d2, e2, w2 , 15); |
||||||
|
R11(e1, a1, b1, c1, d1, w6 , 7); R12(e2, a2, b2, c2, d2, w11, 15); |
||||||
|
R11(d1, e1, a1, b1, c1, w7 , 9); R12(d2, e2, a2, b2, c2, w4 , 5); |
||||||
|
R11(c1, d1, e1, a1, b1, w8 , 11); R12(c2, d2, e2, a2, b2, w13, 7); |
||||||
|
R11(b1, c1, d1, e1, a1, w9 , 13); R12(b2, c2, d2, e2, a2, w6 , 7); |
||||||
|
R11(a1, b1, c1, d1, e1, w10, 14); R12(a2, b2, c2, d2, e2, w15, 8); |
||||||
|
R11(e1, a1, b1, c1, d1, w11, 15); R12(e2, a2, b2, c2, d2, w8 , 11); |
||||||
|
R11(d1, e1, a1, b1, c1, w12, 6); R12(d2, e2, a2, b2, c2, w1 , 14); |
||||||
|
R11(c1, d1, e1, a1, b1, w13, 7); R12(c2, d2, e2, a2, b2, w10, 14); |
||||||
|
R11(b1, c1, d1, e1, a1, w14, 9); R12(b2, c2, d2, e2, a2, w3 , 12); |
||||||
|
R11(a1, b1, c1, d1, e1, w15, 8); R12(a2, b2, c2, d2, e2, w12, 6); |
||||||
|
|
||||||
|
R21(e1, a1, b1, c1, d1, w7 , 7); R22(e2, a2, b2, c2, d2, w6 , 9); |
||||||
|
R21(d1, e1, a1, b1, c1, w4 , 6); R22(d2, e2, a2, b2, c2, w11, 13); |
||||||
|
R21(c1, d1, e1, a1, b1, w13, 8); R22(c2, d2, e2, a2, b2, w3 , 15); |
||||||
|
R21(b1, c1, d1, e1, a1, w1 , 13); R22(b2, c2, d2, e2, a2, w7 , 7); |
||||||
|
R21(a1, b1, c1, d1, e1, w10, 11); R22(a2, b2, c2, d2, e2, w0 , 12); |
||||||
|
R21(e1, a1, b1, c1, d1, w6 , 9); R22(e2, a2, b2, c2, d2, w13, 8); |
||||||
|
R21(d1, e1, a1, b1, c1, w15, 7); R22(d2, e2, a2, b2, c2, w5 , 9); |
||||||
|
R21(c1, d1, e1, a1, b1, w3 , 15); R22(c2, d2, e2, a2, b2, w10, 11); |
||||||
|
R21(b1, c1, d1, e1, a1, w12, 7); R22(b2, c2, d2, e2, a2, w14, 7); |
||||||
|
R21(a1, b1, c1, d1, e1, w0 , 12); R22(a2, b2, c2, d2, e2, w15, 7); |
||||||
|
R21(e1, a1, b1, c1, d1, w9 , 15); R22(e2, a2, b2, c2, d2, w8 , 12); |
||||||
|
R21(d1, e1, a1, b1, c1, w5 , 9); R22(d2, e2, a2, b2, c2, w12, 7); |
||||||
|
R21(c1, d1, e1, a1, b1, w2 , 11); R22(c2, d2, e2, a2, b2, w4 , 6); |
||||||
|
R21(b1, c1, d1, e1, a1, w14, 7); R22(b2, c2, d2, e2, a2, w9 , 15); |
||||||
|
R21(a1, b1, c1, d1, e1, w11, 13); R22(a2, b2, c2, d2, e2, w1 , 13); |
||||||
|
R21(e1, a1, b1, c1, d1, w8 , 12); R22(e2, a2, b2, c2, d2, w2 , 11); |
||||||
|
|
||||||
|
R31(d1, e1, a1, b1, c1, w3 , 11); R32(d2, e2, a2, b2, c2, w15, 9); |
||||||
|
R31(c1, d1, e1, a1, b1, w10, 13); R32(c2, d2, e2, a2, b2, w5 , 7); |
||||||
|
R31(b1, c1, d1, e1, a1, w14, 6); R32(b2, c2, d2, e2, a2, w1 , 15); |
||||||
|
R31(a1, b1, c1, d1, e1, w4 , 7); R32(a2, b2, c2, d2, e2, w3 , 11); |
||||||
|
R31(e1, a1, b1, c1, d1, w9 , 14); R32(e2, a2, b2, c2, d2, w7 , 8); |
||||||
|
R31(d1, e1, a1, b1, c1, w15, 9); R32(d2, e2, a2, b2, c2, w14, 6); |
||||||
|
R31(c1, d1, e1, a1, b1, w8 , 13); R32(c2, d2, e2, a2, b2, w6 , 6); |
||||||
|
R31(b1, c1, d1, e1, a1, w1 , 15); R32(b2, c2, d2, e2, a2, w9 , 14); |
||||||
|
R31(a1, b1, c1, d1, e1, w2 , 14); R32(a2, b2, c2, d2, e2, w11, 12); |
||||||
|
R31(e1, a1, b1, c1, d1, w7 , 8); R32(e2, a2, b2, c2, d2, w8 , 13); |
||||||
|
R31(d1, e1, a1, b1, c1, w0 , 13); R32(d2, e2, a2, b2, c2, w12, 5); |
||||||
|
R31(c1, d1, e1, a1, b1, w6 , 6); R32(c2, d2, e2, a2, b2, w2 , 14); |
||||||
|
R31(b1, c1, d1, e1, a1, w13, 5); R32(b2, c2, d2, e2, a2, w10, 13); |
||||||
|
R31(a1, b1, c1, d1, e1, w11, 12); R32(a2, b2, c2, d2, e2, w0 , 13); |
||||||
|
R31(e1, a1, b1, c1, d1, w5 , 7); R32(e2, a2, b2, c2, d2, w4 , 7); |
||||||
|
R31(d1, e1, a1, b1, c1, w12, 5); R32(d2, e2, a2, b2, c2, w13, 5); |
||||||
|
|
||||||
|
R41(c1, d1, e1, a1, b1, w1 , 11); R42(c2, d2, e2, a2, b2, w8 , 15); |
||||||
|
R41(b1, c1, d1, e1, a1, w9 , 12); R42(b2, c2, d2, e2, a2, w6 , 5); |
||||||
|
R41(a1, b1, c1, d1, e1, w11, 14); R42(a2, b2, c2, d2, e2, w4 , 8); |
||||||
|
R41(e1, a1, b1, c1, d1, w10, 15); R42(e2, a2, b2, c2, d2, w1 , 11); |
||||||
|
R41(d1, e1, a1, b1, c1, w0 , 14); R42(d2, e2, a2, b2, c2, w3 , 14); |
||||||
|
R41(c1, d1, e1, a1, b1, w8 , 15); R42(c2, d2, e2, a2, b2, w11, 14); |
||||||
|
R41(b1, c1, d1, e1, a1, w12, 9); R42(b2, c2, d2, e2, a2, w15, 6); |
||||||
|
R41(a1, b1, c1, d1, e1, w4 , 8); R42(a2, b2, c2, d2, e2, w0 , 14); |
||||||
|
R41(e1, a1, b1, c1, d1, w13, 9); R42(e2, a2, b2, c2, d2, w5 , 6); |
||||||
|
R41(d1, e1, a1, b1, c1, w3 , 14); R42(d2, e2, a2, b2, c2, w12, 9); |
||||||
|
R41(c1, d1, e1, a1, b1, w7 , 5); R42(c2, d2, e2, a2, b2, w2 , 12); |
||||||
|
R41(b1, c1, d1, e1, a1, w15, 6); R42(b2, c2, d2, e2, a2, w13, 9); |
||||||
|
R41(a1, b1, c1, d1, e1, w14, 8); R42(a2, b2, c2, d2, e2, w9 , 12); |
||||||
|
R41(e1, a1, b1, c1, d1, w5 , 6); R42(e2, a2, b2, c2, d2, w7 , 5); |
||||||
|
R41(d1, e1, a1, b1, c1, w6 , 5); R42(d2, e2, a2, b2, c2, w10, 15); |
||||||
|
R41(c1, d1, e1, a1, b1, w2 , 12); R42(c2, d2, e2, a2, b2, w14, 8); |
||||||
|
|
||||||
|
R51(b1, c1, d1, e1, a1, w4 , 9); R52(b2, c2, d2, e2, a2, w12, 8); |
||||||
|
R51(a1, b1, c1, d1, e1, w0 , 15); R52(a2, b2, c2, d2, e2, w15, 5); |
||||||
|
R51(e1, a1, b1, c1, d1, w5 , 5); R52(e2, a2, b2, c2, d2, w10, 12); |
||||||
|
R51(d1, e1, a1, b1, c1, w9 , 11); R52(d2, e2, a2, b2, c2, w4 , 9); |
||||||
|
R51(c1, d1, e1, a1, b1, w7 , 6); R52(c2, d2, e2, a2, b2, w1 , 12); |
||||||
|
R51(b1, c1, d1, e1, a1, w12, 8); R52(b2, c2, d2, e2, a2, w5 , 5); |
||||||
|
R51(a1, b1, c1, d1, e1, w2 , 13); R52(a2, b2, c2, d2, e2, w8 , 14); |
||||||
|
R51(e1, a1, b1, c1, d1, w10, 12); R52(e2, a2, b2, c2, d2, w7 , 6); |
||||||
|
R51(d1, e1, a1, b1, c1, w14, 5); R52(d2, e2, a2, b2, c2, w6 , 8); |
||||||
|
R51(c1, d1, e1, a1, b1, w1 , 12); R52(c2, d2, e2, a2, b2, w2 , 13); |
||||||
|
R51(b1, c1, d1, e1, a1, w3 , 13); R52(b2, c2, d2, e2, a2, w13, 6); |
||||||
|
R51(a1, b1, c1, d1, e1, w8 , 14); R52(a2, b2, c2, d2, e2, w14, 5); |
||||||
|
R51(e1, a1, b1, c1, d1, w11, 11); R52(e2, a2, b2, c2, d2, w0 , 15); |
||||||
|
R51(d1, e1, a1, b1, c1, w6 , 8); R52(d2, e2, a2, b2, c2, w3 , 13); |
||||||
|
R51(c1, d1, e1, a1, b1, w15, 5); R52(c2, d2, e2, a2, b2, w9 , 11); |
||||||
|
R51(b1, c1, d1, e1, a1, w13, 6); R52(b2, c2, d2, e2, a2, w11, 11); |
||||||
|
|
||||||
|
uint32_t t = s[0]; |
||||||
|
s[0] = s[1] + c1 + d2; |
||||||
|
s[1] = s[2] + d1 + e2; |
||||||
|
s[2] = s[3] + e1 + a2; |
||||||
|
s[3] = s[4] + a1 + b2; |
||||||
|
s[4] = t + b1 + c2; |
||||||
|
} |
||||||
|
|
||||||
|
} // namespace ripemd160
|
||||||
|
|
||||||
|
} // namespace
|
||||||
|
|
||||||
|
////// RIPEMD160
|
||||||
|
|
||||||
|
CRIPEMD160::CRIPEMD160() : bytes(0) { |
||||||
|
ripemd160::Initialize(s); |
||||||
|
} |
||||||
|
|
||||||
|
CRIPEMD160& CRIPEMD160::Write(const unsigned char *data, size_t len) { |
||||||
|
const unsigned char *end = data + len; |
||||||
|
size_t bufsize = bytes % 64; |
||||||
|
if (bufsize && bufsize + len >= 64) { |
||||||
|
// Fill the buffer, and process it.
|
||||||
|
memcpy(buf + bufsize, data, 64 - bufsize); |
||||||
|
bytes += 64 - bufsize; |
||||||
|
data += 64 - bufsize; |
||||||
|
ripemd160::Transform(s, buf); |
||||||
|
bufsize = 0; |
||||||
|
} |
||||||
|
while (end >= data + 64) { |
||||||
|
// Process full chunks directly from the source.
|
||||||
|
ripemd160::Transform(s, data); |
||||||
|
bytes += 64; |
||||||
|
data += 64; |
||||||
|
} |
||||||
|
if (end > data) { |
||||||
|
// Fill the buffer with what remains.
|
||||||
|
memcpy(buf + bufsize, data, end - data); |
||||||
|
bytes += end - data; |
||||||
|
} |
||||||
|
return *this; |
||||||
|
} |
||||||
|
|
||||||
|
void CRIPEMD160::Finalize(unsigned char *hash) { |
||||||
|
static const unsigned char pad[64] = {0x80}; |
||||||
|
unsigned char sizedesc[8]; |
||||||
|
WriteLE32(sizedesc, bytes << 3); |
||||||
|
WriteLE32(sizedesc+4, bytes >> 29); |
||||||
|
Write(pad, 1 + ((119 - (bytes % 64)) % 64)); |
||||||
|
Write(sizedesc, 8); |
||||||
|
WriteLE32(hash, s[0]); |
||||||
|
WriteLE32(hash+4, s[1]); |
||||||
|
WriteLE32(hash+8, s[2]); |
||||||
|
WriteLE32(hash+12, s[3]); |
||||||
|
WriteLE32(hash+16, s[4]); |
||||||
|
} |
||||||
|
|
||||||
|
CRIPEMD160& CRIPEMD160::Reset() { |
||||||
|
bytes = 0; |
||||||
|
ripemd160::Initialize(s); |
||||||
|
return *this; |
||||||
|
} |
@ -0,0 +1,25 @@ |
|||||||
|
// Copyright (c) 2014 The Bitcoin developers
|
||||||
|
// Distributed under the MIT/X11 software license, see the accompanying
|
||||||
|
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
|
||||||
|
|
||||||
|
#ifndef BITCOIN_RIPEMD160_H |
||||||
|
#define BITCOIN_RIPEMD160_H |
||||||
|
|
||||||
|
#include <stdint.h> |
||||||
|
#include <stdlib.h> |
||||||
|
|
||||||
|
/** A hasher class for RIPEMD-160. */ |
||||||
|
class CRIPEMD160 { |
||||||
|
private: |
||||||
|
uint32_t s[5]; |
||||||
|
unsigned char buf[64]; |
||||||
|
size_t bytes; |
||||||
|
|
||||||
|
public: |
||||||
|
CRIPEMD160(); |
||||||
|
CRIPEMD160& Write(const unsigned char *data, size_t len); |
||||||
|
void Finalize(unsigned char *hash); |
||||||
|
CRIPEMD160& Reset(); |
||||||
|
}; |
||||||
|
|
||||||
|
#endif |
Loading…
Reference in new issue