Nils Schneider
13 years ago
28 changed files with 87 additions and 6057 deletions
@ -1,67 +0,0 @@ |
|||
Compilation Copyright (c) 1995-2009 by Wei Dai. All rights reserved. |
|||
This copyright applies only to this software distribution package |
|||
as a compilation, and does not imply a copyright on any particular |
|||
file in the package. |
|||
|
|||
The following files are copyrighted by their respective original authors, |
|||
and their use is subject to additional licenses included in these files. |
|||
|
|||
mars.cpp - Copyright 1998 Brian Gladman. |
|||
|
|||
All other files in this compilation are placed in the public domain by |
|||
Wei Dai and other contributors. |
|||
|
|||
I would like to thank the following authors for placing their works into |
|||
the public domain: |
|||
|
|||
Joan Daemen - 3way.cpp |
|||
Leonard Janke - cast.cpp, seal.cpp |
|||
Steve Reid - cast.cpp |
|||
Phil Karn - des.cpp |
|||
Andrew M. Kuchling - md2.cpp, md4.cpp |
|||
Colin Plumb - md5.cpp |
|||
Seal Woods - rc6.cpp |
|||
Chris Morgan - rijndael.cpp |
|||
Paulo Baretto - rijndael.cpp, skipjack.cpp, square.cpp |
|||
Richard De Moliner - safer.cpp |
|||
Matthew Skala - twofish.cpp |
|||
Kevin Springle - camellia.cpp, shacal2.cpp, ttmac.cpp, whrlpool.cpp, ripemd.cpp |
|||
|
|||
Permission to use, copy, modify, and distribute this compilation for |
|||
any purpose, including commercial applications, is hereby granted |
|||
without fee, subject to the following restrictions: |
|||
|
|||
1. Any copy or modification of this compilation in any form, except |
|||
in object code form as part of an application software, must include |
|||
the above copyright notice and this license. |
|||
|
|||
2. Users of this software agree that any modification or extension |
|||
they provide to Wei Dai will be considered public domain and not |
|||
copyrighted unless it includes an explicit copyright notice. |
|||
|
|||
3. Wei Dai makes no warranty or representation that the operation of the |
|||
software in this compilation will be error-free, and Wei Dai is under no |
|||
obligation to provide any services, by way of maintenance, update, or |
|||
otherwise. THE SOFTWARE AND ANY DOCUMENTATION ARE PROVIDED "AS IS" |
|||
WITHOUT EXPRESS OR IMPLIED WARRANTY INCLUDING, BUT NOT LIMITED TO, |
|||
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
|||
PURPOSE. IN NO EVENT WILL WEI DAI OR ANY OTHER CONTRIBUTOR BE LIABLE FOR |
|||
DIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES, EVEN IF |
|||
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. |
|||
|
|||
4. Users will not use Wei Dai or any other contributor's name in any |
|||
publicity or advertising, without prior written consent in each case. |
|||
|
|||
5. Export of this software from the United States may require a |
|||
specific license from the United States Government. It is the |
|||
responsibility of any person or organization contemplating export |
|||
to obtain such a license before exporting. |
|||
|
|||
6. Certain parts of this software may be protected by patents. It |
|||
is the users' responsibility to obtain the appropriate |
|||
licenses before using those parts. |
|||
|
|||
If this compilation is used in object code form in an application |
|||
software, acknowledgement of the author is not required but would be |
|||
appreciated. The contribution of any useful modifications or extensions |
|||
to Wei Dai is not required but would also be appreciated. |
|||
@ -1,429 +0,0 @@ |
|||
Crypto++: a C++ Class Library of Cryptographic Schemes |
|||
Version 5.6.0 (3/15/2009) |
|||
|
|||
Crypto++ Library is a free C++ class library of cryptographic schemes. |
|||
Currently the library contains the following algorithms: |
|||
|
|||
algorithm type name |
|||
|
|||
authenticated encryption schemes GCM, CCM, EAX |
|||
|
|||
high speed stream ciphers Panama, Sosemanuk, Salsa20, XSalsa20 |
|||
|
|||
AES and AES candidates AES (Rijndael), RC6, MARS, Twofish, Serpent, |
|||
CAST-256 |
|||
|
|||
IDEA, Triple-DES (DES-EDE2 and DES-EDE3), |
|||
other block ciphers Camellia, SEED, RC5, Blowfish, TEA, XTEA, |
|||
Skipjack, SHACAL-2 |
|||
|
|||
block cipher modes of operation ECB, CBC, CBC ciphertext stealing (CTS), |
|||
CFB, OFB, counter mode (CTR) |
|||
|
|||
message authentication codes VMAC, HMAC, CMAC, CBC-MAC, DMAC, |
|||
Two-Track-MAC |
|||
|
|||
SHA-1, SHA-2 (SHA-224, SHA-256, SHA-384, and |
|||
hash functions SHA-512), Tiger, WHIRLPOOL, RIPEMD-128, |
|||
RIPEMD-256, RIPEMD-160, RIPEMD-320 |
|||
|
|||
RSA, DSA, ElGamal, Nyberg-Rueppel (NR), |
|||
public-key cryptography Rabin, Rabin-Williams (RW), LUC, LUCELG, |
|||
DLIES (variants of DHAES), ESIGN |
|||
|
|||
padding schemes for public-key PKCS#1 v2.0, OAEP, PSS, PSSR, IEEE P1363 |
|||
systems EMSA2 and EMSA5 |
|||
|
|||
Diffie-Hellman (DH), Unified Diffie-Hellman |
|||
key agreement schemes (DH2), Menezes-Qu-Vanstone (MQV), LUCDIF, |
|||
XTR-DH |
|||
|
|||
elliptic curve cryptography ECDSA, ECNR, ECIES, ECDH, ECMQV |
|||
|
|||
insecure or obsolescent MD2, MD4, MD5, Panama Hash, DES, ARC4, SEAL |
|||
algorithms retained for backwards 3.0, WAKE, WAKE-OFB, DESX (DES-XEX3), RC2, |
|||
compatibility and historical SAFER, 3-WAY, GOST, SHARK, CAST-128, Square |
|||
value |
|||
|
|||
Other features include: |
|||
|
|||
* pseudo random number generators (PRNG): ANSI X9.17 appendix C, RandomPool |
|||
* password based key derivation functions: PBKDF1 and PBKDF2 from PKCS #5, |
|||
PBKDF from PKCS #12 appendix B |
|||
* Shamir's secret sharing scheme and Rabin's information dispersal algorithm |
|||
(IDA) |
|||
* fast multi-precision integer (bignum) and polynomial operations |
|||
* finite field arithmetics, including GF(p) and GF(2^n) |
|||
* prime number generation and verification |
|||
* useful non-cryptographic algorithms |
|||
+ DEFLATE (RFC 1951) compression/decompression with gzip (RFC 1952) and |
|||
zlib (RFC 1950) format support |
|||
+ hex, base-32, and base-64 coding/decoding |
|||
+ 32-bit CRC and Adler32 checksum |
|||
* class wrappers for these operating system features (optional): |
|||
+ high resolution timers on Windows, Unix, and Mac OS |
|||
+ Berkeley and Windows style sockets |
|||
+ Windows named pipes |
|||
+ /dev/random, /dev/urandom, /dev/srandom |
|||
+ Microsoft's CryptGenRandom on Windows |
|||
* A high level interface for most of the above, using a filter/pipeline |
|||
metaphor |
|||
* benchmarks and validation testing |
|||
* x86, x86-64 (x64), MMX, and SSE2 assembly code for the most commonly used |
|||
algorithms, with run-time CPU feature detection and code selection |
|||
* some versions are available in FIPS 140-2 validated form |
|||
|
|||
You are welcome to use it for any purpose without paying me, but see |
|||
License.txt for the fine print. |
|||
|
|||
The following compilers are supported for this release. Please visit |
|||
http://www.cryptopp.com the most up to date build instructions and porting notes. |
|||
|
|||
* MSVC 6.0 - 2008 |
|||
* GCC 3.3 - 4.3 |
|||
* C++Builder 2009 |
|||
* Intel C++ Compiler 9 - 11 |
|||
* Sun Studio 12 (CC 5.9) |
|||
|
|||
*** Important Usage Notes *** |
|||
|
|||
1. If a constructor for A takes a pointer to an object B (except primitive |
|||
types such as int and char), then A owns B and will delete B at A's |
|||
destruction. If a constructor for A takes a reference to an object B, |
|||
then the caller retains ownership of B and should not destroy it until |
|||
A no longer needs it. |
|||
|
|||
2. Crypto++ is thread safe at the class level. This means you can use |
|||
Crypto++ safely in a multithreaded application, but you must provide |
|||
synchronization when multiple threads access a common Crypto++ object. |
|||
|
|||
*** MSVC-Specific Information *** |
|||
|
|||
On Windows, Crypto++ can be compiled into 3 forms: a static library |
|||
including all algorithms, a DLL with only FIPS Approved algorithms, and |
|||
a static library with only algorithms not in the DLL. |
|||
(FIPS Approved means Approved according to the FIPS 140-2 standard.) |
|||
The DLL may be used by itself, or it may be used together with the second |
|||
form of the static library. MSVC project files are included to build |
|||
all three forms, and sample applications using each of the three forms |
|||
are also included. |
|||
|
|||
To compile Crypto++ with MSVC, open the "cryptest.dsw" (for MSVC 6 and MSVC .NET |
|||
2003) or "cryptest.sln" (for MSVC .NET 2005) workspace file and build one or |
|||
more of the following projects: |
|||
|
|||
cryptdll - This builds the DLL. Please note that if you wish to use Crypto++ |
|||
as a FIPS validated module, you must use a pre-built DLL that has undergone |
|||
the FIPS validation process instead of building your own. |
|||
dlltest - This builds a sample application that only uses the DLL. |
|||
cryptest Non-DLL-Import Configuration - This builds the full static library |
|||
along with a full test driver. |
|||
cryptest DLL-Import Configuration - This builds a static library containing |
|||
only algorithms not in the DLL, along with a full test driver that uses |
|||
both the DLL and the static library. |
|||
|
|||
To use the Crypto++ DLL in your application, #include "dll.h" before including |
|||
any other Crypto++ header files, and place the DLL in the same directory as |
|||
your .exe file. dll.h includes the line #pragma comment(lib, "cryptopp") |
|||
so you don't have to explicitly list the import library in your project |
|||
settings. To use a static library form of Crypto++, specify it as |
|||
an additional library to link with in your project settings. |
|||
In either case you should check the compiler options to |
|||
make sure that the library and your application are using the same C++ |
|||
run-time libraries and calling conventions. |
|||
|
|||
*** DLL Memory Management *** |
|||
|
|||
Because it's possible for the Crypto++ DLL to delete objects allocated |
|||
by the calling application, they must use the same C++ memory heap. Three |
|||
methods are provided to achieve this. |
|||
1. The calling application can tell Crypto++ what heap to use. This method |
|||
is required when the calling application uses a non-standard heap. |
|||
2. Crypto++ can tell the calling application what heap to use. This method |
|||
is required when the calling application uses a statically linked C++ Run |
|||
Time Library. (Method 1 does not work in this case because the Crypto++ DLL |
|||
is initialized before the calling application's heap is initialized.) |
|||
3. Crypto++ can automatically use the heap provided by the calling application's |
|||
dynamically linked C++ Run Time Library. The calling application must |
|||
make sure that the dynamically linked C++ Run Time Library is initialized |
|||
before Crypto++ is loaded. (At this time it is not clear if it is possible |
|||
to control the order in which DLLs are initialized on Windows 9x machines, |
|||
so it might be best to avoid using this method.) |
|||
|
|||
When Crypto++ attaches to a new process, it searches all modules loaded |
|||
into the process space for exported functions "GetNewAndDeleteForCryptoPP" |
|||
and "SetNewAndDeleteFromCryptoPP". If one of these functions is found, |
|||
Crypto++ uses methods 1 or 2, respectively, by calling the function. |
|||
Otherwise, method 3 is used. |
|||
|
|||
*** GCC-Specific Information *** |
|||
|
|||
A makefile is included for you to compile Crypto++ with GCC. Make sure |
|||
you are using GNU Make and GNU ld. The make process will produce two files, |
|||
libcryptopp.a and cryptest.exe. Run "cryptest.exe v" for the validation |
|||
suite. |
|||
|
|||
*** Documentation and Support *** |
|||
|
|||
Crypto++ is documented through inline comments in header files, which are |
|||
processed through Doxygen to produce an HTML reference manual. You can find |
|||
a link to the manual from http://www.cryptopp.com. Also at that site is |
|||
the Crypto++ FAQ, which you should browse through before attempting to |
|||
use this library, because it will likely answer many of questions that |
|||
may come up. |
|||
|
|||
If you run into any problems, please try the Crypto++ mailing list. |
|||
The subscription information and the list archive are available on |
|||
http://www.cryptopp.com. You can also email me directly by visiting |
|||
http://www.weidai.com, but you will probably get a faster response through |
|||
the mailing list. |
|||
|
|||
*** History *** |
|||
|
|||
1.0 - First public release. Withdrawn at the request of RSA DSI. |
|||
- included Blowfish, BBS, DES, DH, Diamond, DSA, ElGamal, IDEA, |
|||
MD5, RC4, RC5, RSA, SHA, WAKE, secret sharing, DEFLATE compression |
|||
- had a serious bug in the RSA key generation code. |
|||
|
|||
1.1 - Removed RSA, RC4, RC5 |
|||
- Disabled calls to RSAREF's non-public functions |
|||
- Minor bugs fixed |
|||
|
|||
2.0 - a completely new, faster multiprecision integer class |
|||
- added MD5-MAC, HAVAL, 3-WAY, TEA, SAFER, LUC, Rabin, BlumGoldwasser, |
|||
elliptic curve algorithms |
|||
- added the Lucas strong probable primality test |
|||
- ElGamal encryption and signature schemes modified to avoid weaknesses |
|||
- Diamond changed to Diamond2 because of key schedule weakness |
|||
- fixed bug in WAKE key setup |
|||
- SHS class renamed to SHA |
|||
- lots of miscellaneous optimizations |
|||
|
|||
2.1 - added Tiger, HMAC, GOST, RIPE-MD160, LUCELG, LUCDIF, XOR-MAC, |
|||
OAEP, PSSR, SHARK |
|||
- added precomputation to DH, ElGamal, DSA, and elliptic curve algorithms |
|||
- added back RC5 and a new RSA |
|||
- optimizations in elliptic curves over GF(p) |
|||
- changed Rabin to use OAEP and PSSR |
|||
- changed many classes to allow copy constructors to work correctly |
|||
- improved exception generation and handling |
|||
|
|||
2.2 - added SEAL, CAST-128, Square |
|||
- fixed bug in HAVAL (padding problem) |
|||
- fixed bug in triple-DES (decryption order was reversed) |
|||
- fixed bug in RC5 (couldn't handle key length not a multiple of 4) |
|||
- changed HMAC to conform to RFC-2104 (which is not compatible |
|||
with the original HMAC) |
|||
- changed secret sharing and information dispersal to use GF(2^32) |
|||
instead of GF(65521) |
|||
- removed zero knowledge prover/verifier for graph isomorphism |
|||
- removed several utility classes in favor of the C++ standard library |
|||
|
|||
2.3 - ported to EGCS |
|||
- fixed incomplete workaround of min/max conflict in MSVC |
|||
|
|||
3.0 - placed all names into the "CryptoPP" namespace |
|||
- added MD2, RC2, RC6, MARS, RW, DH2, MQV, ECDHC, CBC-CTS |
|||
- added abstract base classes PK_SimpleKeyAgreementDomain and |
|||
PK_AuthenticatedKeyAgreementDomain |
|||
- changed DH and LUCDIF to implement the PK_SimpleKeyAgreementDomain |
|||
interface and to perform domain parameter and key validation |
|||
- changed interfaces of PK_Signer and PK_Verifier to sign and verify |
|||
messages instead of message digests |
|||
- changed OAEP to conform to PKCS#1 v2.0 |
|||
- changed benchmark code to produce HTML tables as output |
|||
- changed PSSR to track IEEE P1363a |
|||
- renamed ElGamalSignature to NR and changed it to track IEEE P1363 |
|||
- renamed ECKEP to ECMQVC and changed it to track IEEE P1363 |
|||
- renamed several other classes for clarity |
|||
- removed support for calling RSAREF |
|||
- removed option to compile old SHA (SHA-0) |
|||
- removed option not to throw exceptions |
|||
|
|||
3.1 - added ARC4, Rijndael, Twofish, Serpent, CBC-MAC, DMAC |
|||
- added interface for querying supported key lengths of symmetric ciphers |
|||
and MACs |
|||
- added sample code for RSA signature and verification |
|||
- changed CBC-CTS to be compatible with RFC 2040 |
|||
- updated SEAL to version 3.0 of the cipher specification |
|||
- optimized multiprecision squaring and elliptic curves over GF(p) |
|||
- fixed bug in MARS key setup |
|||
- fixed bug with attaching objects to Deflator |
|||
|
|||
3.2 - added DES-XEX3, ECDSA, DefaultEncryptorWithMAC |
|||
- renamed DES-EDE to DES-EDE2 and TripleDES to DES-EDE3 |
|||
- optimized ARC4 |
|||
- generalized DSA to allow keys longer than 1024 bits |
|||
- fixed bugs in GF2N and ModularArithmetic that can cause calculation errors |
|||
- fixed crashing bug in Inflator when given invalid inputs |
|||
- fixed endian bug in Serpent |
|||
- fixed padding bug in Tiger |
|||
|
|||
4.0 - added Skipjack, CAST-256, Panama, SHA-2 (SHA-256, SHA-384, and SHA-512), |
|||
and XTR-DH |
|||
- added a faster variant of Rabin's Information Dispersal Algorithm (IDA) |
|||
- added class wrappers for these operating system features: |
|||
- high resolution timers on Windows, Unix, and MacOS |
|||
- Berkeley and Windows style sockets |
|||
- Windows named pipes |
|||
- /dev/random and /dev/urandom on Linux and FreeBSD |
|||
- Microsoft's CryptGenRandom on Windows |
|||
- added support for SEC 1 elliptic curve key format and compressed points |
|||
- added support for X.509 public key format (subjectPublicKeyInfo) for |
|||
RSA, DSA, and elliptic curve schemes |
|||
- added support for DER and OpenPGP signature format for DSA |
|||
- added support for ZLIB compressed data format (RFC 1950) |
|||
- changed elliptic curve encryption to use ECIES (as defined in SEC 1) |
|||
- changed MARS key schedule to reflect the latest specification |
|||
- changed BufferedTransformation interface to support multiple channels |
|||
and messages |
|||
- changed CAST and SHA-1 implementations to use public domain source code |
|||
- fixed bug in StringSource |
|||
- optmized multi-precision integer code for better performance |
|||
|
|||
4.1 - added more support for the recommended elliptic curve parameters in SEC 2 |
|||
- added Panama MAC, MARC4 |
|||
- added IV stealing feature to CTS mode |
|||
- added support for PKCS #8 private key format for RSA, DSA, and elliptic |
|||
curve schemes |
|||
- changed Deflate, MD5, Rijndael, and Twofish to use public domain code |
|||
- fixed a bug with flushing compressed streams |
|||
- fixed a bug with decompressing stored blocks |
|||
- fixed a bug with EC point decompression using non-trinomial basis |
|||
- fixed a bug in NetworkSource::GeneralPump() |
|||
- fixed a performance issue with EC over GF(p) decryption |
|||
- fixed syntax to allow GCC to compile without -fpermissive |
|||
- relaxed some restrictions in the license |
|||
|
|||
4.2 - added support for longer HMAC keys |
|||
- added MD4 (which is not secure so use for compatibility purposes only) |
|||
- added compatibility fixes/workarounds for STLport 4.5, GCC 3.0.2, |
|||
and MSVC 7.0 |
|||
- changed MD2 to use public domain code |
|||
- fixed a bug with decompressing multiple messages with the same object |
|||
- fixed a bug in CBC-MAC with MACing multiple messages with the same object |
|||
- fixed a bug in RC5 and RC6 with zero-length keys |
|||
- fixed a bug in Adler32 where incorrect checksum may be generated |
|||
|
|||
5.0 - added ESIGN, DLIES, WAKE-OFB, PBKDF1 and PBKDF2 from PKCS #5 |
|||
- added key validation for encryption and signature public/private keys |
|||
- renamed StreamCipher interface to SymmetricCipher, which is now implemented |
|||
by both stream ciphers and block cipher modes including ECB and CBC |
|||
- added keying interfaces to support resetting of keys and IVs without |
|||
having to destroy and recreate objects |
|||
- changed filter interface to support non-blocking input/output |
|||
- changed SocketSource and SocketSink to use overlapped I/O on Microsoft Windows |
|||
- grouped related classes inside structs to help templates, for example |
|||
AESEncryption and AESDecryption are now AES::Encryption and AES::Decryption |
|||
- where possible, typedefs have been added to improve backwards |
|||
compatibility when the CRYPTOPP_MAINTAIN_BACKWARDS_COMPATIBILITY macro is defined |
|||
- changed Serpent, HAVAL and IDEA to use public domain code |
|||
- implemented SSE2 optimizations for Integer operations |
|||
- fixed a bug in HMAC::TruncatedFinal() |
|||
- fixed SKIPJACK byte ordering following NIST clarification dated 5/9/02 |
|||
|
|||
5.01 - added known answer test for X9.17 RNG in FIPS 140 power-up self test |
|||
- submitted to NIST/CSE, but not publicly released |
|||
|
|||
5.02 - changed EDC test to MAC integrity check using HMAC/SHA1 |
|||
- improved performance of integrity check |
|||
- added blinding to defend against RSA timing attack |
|||
|
|||
5.03 - created DLL version of Crypto++ for FIPS 140-2 validation |
|||
- fixed vulnerabilities in GetNextIV for CTR and OFB modes |
|||
|
|||
5.0.4 - Removed DES, SHA-256, SHA-384, SHA-512 from DLL |
|||
|
|||
5.1 - added PSS padding and changed PSSR to track IEEE P1363a draft standard |
|||
- added blinding for RSA and Rabin to defend against timing attacks |
|||
on decryption operations |
|||
- changed signing and decryption APIs to support the above |
|||
- changed WaitObjectContainer to allow waiting for more than 64 |
|||
objects at a time on Win32 platforms |
|||
- fixed a bug in CBC and ECB modes with processing non-aligned data |
|||
- fixed standard conformance bugs in DLIES (DHAES mode) and RW/EMSA2 |
|||
signature scheme (these fixes are not backwards compatible) |
|||
- fixed a number of compiler warnings, minor bugs, and portability problems |
|||
- removed Sapphire |
|||
|
|||
5.2 - merged in changes for 5.01 - 5.0.4 |
|||
- added support for using encoding parameters and key derivation parameters |
|||
with public key encryption (implemented by OAEP and DL/ECIES) |
|||
- added Camellia, SHACAL-2, Two-Track-MAC, Whirlpool, RIPEMD-320, |
|||
RIPEMD-128, RIPEMD-256, Base-32 coding, FIPS variant of CFB mode |
|||
- added ThreadUserTimer for timing thread CPU usage |
|||
- added option for password-based key derivation functions |
|||
to iterate until a mimimum elapsed thread CPU time is reached |
|||
- added option (on by default) for DEFLATE compression to detect |
|||
uncompressible files and process them more quickly |
|||
- improved compatibility and performance on 64-bit platforms, |
|||
including Alpha, IA-64, x86-64, PPC64, Sparc64, and MIPS64 |
|||
- fixed ONE_AND_ZEROS_PADDING to use 0x80 instead 0x01 as padding. |
|||
- fixed encoding/decoding of PKCS #8 privateKeyInfo to properly |
|||
handle optional attributes |
|||
|
|||
5.2.1 - fixed bug in the "dlltest" DLL testing program |
|||
- fixed compiling with STLport using VC .NET |
|||
- fixed compiling with -fPIC using GCC |
|||
- fixed compiling with -msse2 on systems without memalign() |
|||
- fixed inability to instantiate PanamaMAC |
|||
- fixed problems with inline documentation |
|||
|
|||
5.2.2 - added SHA-224 |
|||
- put SHA-256, SHA-384, SHA-512, RSASSA-PSS into DLL |
|||
|
|||
5.2.3 - fixed issues with FIPS algorithm test vectors |
|||
- put RSASSA-ISO into DLL |
|||
|
|||
5.3 - ported to MSVC 2005 with support for x86-64 |
|||
- added defense against AES timing attacks, and more AES test vectors |
|||
- changed StaticAlgorithmName() of Rijndael to "AES", CTR to "CTR" |
|||
|
|||
5.4 - added Salsa20 |
|||
- updated Whirlpool to version 3.0 |
|||
- ported to GCC 4.1, Sun C++ 5.8, and Borland C++Builder 2006 |
|||
|
|||
5.5 - added VMAC and Sosemanuk (with x86-64 and SSE2 assembly) |
|||
- improved speed of integer arithmetic, AES, SHA-512, Tiger, Salsa20, |
|||
Whirlpool, and PANAMA cipher using assembly (x86-64, MMX, SSE2) |
|||
- optimized Camellia and added defense against timing attacks |
|||
- updated benchmarks code to show cycles per byte and to time key/IV setup |
|||
- started using OpenMP for increased multi-core speed |
|||
- enabled GCC optimization flags by default in GNUmakefile |
|||
- added blinding and computational error checking for RW signing |
|||
- changed RandomPool, X917RNG, GetNextIV, DSA/NR/ECDSA/ECNR to reduce |
|||
the risk of reusing random numbers and IVs after virtual machine state |
|||
rollback |
|||
- changed default FIPS mode RNG from AutoSeededX917RNG<DES_EDE3> to |
|||
AutoSeededX917RNG<AES> |
|||
- fixed PANAMA cipher interface to accept 256-bit key and 256-bit IV |
|||
- moved MD2, MD4, MD5, PanamaHash, ARC4, WAKE_CFB into the namespace "Weak" |
|||
- removed HAVAL, MD5-MAC, XMAC |
|||
|
|||
5.5.1 - fixed VMAC validation failure on 32-bit big-endian machines |
|||
|
|||
5.5.2 - ported x64 assembly language code for AES, Salsa20, Sosemanuk, and Panama |
|||
to MSVC 2005 (using MASM since MSVC doesn't support inline assembly on x64) |
|||
- fixed Salsa20 initialization crash on non-SSE2 machines |
|||
- fixed Whirlpool crash on Pentium 2 machines |
|||
- fixed possible branch prediction analysis (BPA) vulnerability in |
|||
MontgomeryReduce(), which may affect security of RSA, RW, LUC |
|||
- fixed link error with MSVC 2003 when using "debug DLL" form of runtime library |
|||
- fixed crash in SSE2_Add on P4 machines when compiled with |
|||
MSVC 6.0 SP5 with Processor Pack |
|||
- ported to MSVC 2008, GCC 4.2, Sun CC 5.9, Intel C++ Compiler 10.0, |
|||
and Borland C++Builder 2007 |
|||
|
|||
5.6 - added AuthenticatedSymmetricCipher interface class and Filter wrappers |
|||
- added CCM, GCM (with SSE2 assembly), EAX, CMAC, XSalsa20, and SEED |
|||
- added support for variable length IVs |
|||
- improved AES and SHA-256 speed on x86 and x64 |
|||
- fixed incorrect VMAC computation on message lengths |
|||
that are >64 mod 128 (x86 assembly version is not affected) |
|||
- fixed compiler error in vmac.cpp on x86 with GCC -fPIC |
|||
- fixed run-time validation error on x86-64 with GCC 4.3.2 -O2 |
|||
- fixed HashFilter bug when putMessage=true |
|||
- removed WORD64_AVAILABLE; compiler support for 64-bit int is now required |
|||
- ported to GCC 4.3, C++Builder 2009, Sun CC 5.10, Intel C++ Compiler 11 |
|||
|
|||
Written by Wei Dai |
|||
@ -1,462 +0,0 @@ |
|||
#ifndef CRYPTOPP_CONFIG_H |
|||
#define CRYPTOPP_CONFIG_H |
|||
|
|||
//// Bitcoin: disable SSE2 on 32-bit
|
|||
#if !defined(_M_X64) && !defined(__x86_64__) |
|||
#define CRYPTOPP_DISABLE_SSE2 1 |
|||
#endif |
|||
//////////// end of Bitcoin changes
|
|||
|
|||
|
|||
// ***************** Important Settings ********************
|
|||
|
|||
// define this if running on a big-endian CPU
|
|||
#if !defined(IS_LITTLE_ENDIAN) && (defined(__BIG_ENDIAN__) || defined(__sparc) || defined(__sparc__) || defined(__hppa__) || defined(__mips__) || (defined(__MWERKS__) && !defined(__INTEL__))) |
|||
# define IS_BIG_ENDIAN |
|||
#endif |
|||
|
|||
// define this if running on a little-endian CPU
|
|||
// big endian will be assumed if IS_LITTLE_ENDIAN is not defined
|
|||
#ifndef IS_BIG_ENDIAN |
|||
# define IS_LITTLE_ENDIAN |
|||
#endif |
|||
|
|||
// define this if you want to disable all OS-dependent features,
|
|||
// such as sockets and OS-provided random number generators
|
|||
// #define NO_OS_DEPENDENCE
|
|||
|
|||
// Define this to use features provided by Microsoft's CryptoAPI.
|
|||
// Currently the only feature used is random number generation.
|
|||
// This macro will be ignored if NO_OS_DEPENDENCE is defined.
|
|||
#define USE_MS_CRYPTOAPI |
|||
|
|||
// Define this to 1 to enforce the requirement in FIPS 186-2 Change Notice 1 that only 1024 bit moduli be used
|
|||
#ifndef DSA_1024_BIT_MODULUS_ONLY |
|||
# define DSA_1024_BIT_MODULUS_ONLY 1 |
|||
#endif |
|||
|
|||
// ***************** Less Important Settings ***************
|
|||
|
|||
// define this to retain (as much as possible) old deprecated function and class names
|
|||
// #define CRYPTOPP_MAINTAIN_BACKWARDS_COMPATIBILITY
|
|||
|
|||
#define GZIP_OS_CODE 0 |
|||
|
|||
// Try this if your CPU has 256K internal cache or a slow multiply instruction
|
|||
// and you want a (possibly) faster IDEA implementation using log tables
|
|||
// #define IDEA_LARGECACHE
|
|||
|
|||
// Define this if, for the linear congruential RNG, you want to use
|
|||
// the original constants as specified in S.K. Park and K.W. Miller's
|
|||
// CACM paper.
|
|||
// #define LCRNG_ORIGINAL_NUMBERS
|
|||
|
|||
// choose which style of sockets to wrap (mostly useful for cygwin which has both)
|
|||
#define PREFER_BERKELEY_STYLE_SOCKETS |
|||
// #define PREFER_WINDOWS_STYLE_SOCKETS
|
|||
|
|||
// set the name of Rijndael cipher, was "Rijndael" before version 5.3
|
|||
#define CRYPTOPP_RIJNDAEL_NAME "AES" |
|||
|
|||
// ***************** Important Settings Again ********************
|
|||
// But the defaults should be ok.
|
|||
|
|||
// namespace support is now required
|
|||
#ifdef NO_NAMESPACE |
|||
# error namespace support is now required |
|||
#endif |
|||
|
|||
// Define this to workaround a Microsoft CryptoAPI bug where
|
|||
// each call to CryptAcquireContext causes a 100 KB memory leak.
|
|||
// Defining this will cause Crypto++ to make only one call to CryptAcquireContext.
|
|||
#define WORKAROUND_MS_BUG_Q258000 |
|||
|
|||
#ifdef CRYPTOPP_DOXYGEN_PROCESSING |
|||
// Avoid putting "CryptoPP::" in front of everything in Doxygen output
|
|||
# define CryptoPP |
|||
# define NAMESPACE_BEGIN(x) |
|||
# define NAMESPACE_END |
|||
// Get Doxygen to generate better documentation for these typedefs
|
|||
# define DOCUMENTED_TYPEDEF(x, y) class y : public x {}; |
|||
#else |
|||
# define NAMESPACE_BEGIN(x) namespace x { |
|||
# define NAMESPACE_END } |
|||
# define DOCUMENTED_TYPEDEF(x, y) typedef x y; |
|||
#endif |
|||
#define ANONYMOUS_NAMESPACE_BEGIN namespace { |
|||
#define USING_NAMESPACE(x) using namespace x; |
|||
#define DOCUMENTED_NAMESPACE_BEGIN(x) namespace x { |
|||
#define DOCUMENTED_NAMESPACE_END } |
|||
|
|||
// What is the type of the third parameter to bind?
|
|||
// For Unix, the new standard is ::socklen_t (typically unsigned int), and the old standard is int.
|
|||
// Unfortunately there is no way to tell whether or not socklen_t is defined.
|
|||
// To work around this, TYPE_OF_SOCKLEN_T is a macro so that you can change it from the makefile.
|
|||
#ifndef TYPE_OF_SOCKLEN_T |
|||
# if defined(_WIN32) || defined(__CYGWIN__) |
|||
# define TYPE_OF_SOCKLEN_T int |
|||
# else |
|||
# define TYPE_OF_SOCKLEN_T ::socklen_t |
|||
# endif |
|||
#endif |
|||
|
|||
#if defined(__CYGWIN__) && defined(PREFER_WINDOWS_STYLE_SOCKETS) |
|||
# define __USE_W32_SOCKETS |
|||
#endif |
|||
|
|||
typedef unsigned char byte; // put in global namespace to avoid ambiguity with other byte typedefs
|
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
typedef unsigned short word16; |
|||
typedef unsigned int word32; |
|||
|
|||
#if defined(_MSC_VER) || defined(__BORLANDC__) |
|||
typedef unsigned __int64 word64; |
|||
#define W64LIT(x) x##ui64 |
|||
#else |
|||
typedef unsigned long long word64; |
|||
#define W64LIT(x) x##ULL |
|||
#endif |
|||
|
|||
// define large word type, used for file offsets and such
|
|||
typedef word64 lword; |
|||
const lword LWORD_MAX = W64LIT(0xffffffffffffffff); |
|||
|
|||
#ifdef __GNUC__ |
|||
#define CRYPTOPP_GCC_VERSION (__GNUC__ * 10000 + __GNUC_MINOR__ * 100 + __GNUC_PATCHLEVEL__) |
|||
#endif |
|||
|
|||
// define hword, word, and dword. these are used for multiprecision integer arithmetic
|
|||
// Intel compiler won't have _umul128 until version 10.0. See http://softwarecommunity.intel.com/isn/Community/en-US/forums/thread/30231625.aspx
|
|||
#if (defined(_MSC_VER) && (!defined(__INTEL_COMPILER) || __INTEL_COMPILER >= 1000) && (defined(_M_X64) || defined(_M_IA64))) || (defined(__DECCXX) && defined(__alpha__)) || (defined(__INTEL_COMPILER) && defined(__x86_64__)) || (defined(__SUNPRO_CC) && defined(__x86_64__)) |
|||
typedef word32 hword; |
|||
typedef word64 word; |
|||
#else |
|||
#define CRYPTOPP_NATIVE_DWORD_AVAILABLE |
|||
#if defined(__alpha__) || defined(__ia64__) || defined(_ARCH_PPC64) || defined(__x86_64__) || defined(__mips64) || defined(__sparc64__) |
|||
#if defined(__GNUC__) && !defined(__INTEL_COMPILER) && !(CRYPTOPP_GCC_VERSION == 40001 && defined(__APPLE__)) && CRYPTOPP_GCC_VERSION >= 30400 |
|||
// GCC 4.0.1 on MacOS X is missing __umodti3 and __udivti3
|
|||
// mode(TI) division broken on amd64 with GCC earlier than GCC 3.4
|
|||
typedef word32 hword; |
|||
typedef word64 word; |
|||
typedef __uint128_t dword; |
|||
typedef __uint128_t word128; |
|||
#define CRYPTOPP_WORD128_AVAILABLE |
|||
#else |
|||
// if we're here, it means we're on a 64-bit CPU but we don't have a way to obtain 128-bit multiplication results
|
|||
typedef word16 hword; |
|||
typedef word32 word; |
|||
typedef word64 dword; |
|||
#endif |
|||
#else |
|||
// being here means the native register size is probably 32 bits or less
|
|||
#define CRYPTOPP_BOOL_SLOW_WORD64 1 |
|||
typedef word16 hword; |
|||
typedef word32 word; |
|||
typedef word64 dword; |
|||
#endif |
|||
#endif |
|||
#ifndef CRYPTOPP_BOOL_SLOW_WORD64 |
|||
#define CRYPTOPP_BOOL_SLOW_WORD64 0 |
|||
#endif |
|||
|
|||
const unsigned int WORD_SIZE = sizeof(word); |
|||
const unsigned int WORD_BITS = WORD_SIZE * 8; |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#ifndef CRYPTOPP_L1_CACHE_LINE_SIZE |
|||
// This should be a lower bound on the L1 cache line size. It's used for defense against timing attacks.
|
|||
#if defined(_M_X64) || defined(__x86_64__) |
|||
#define CRYPTOPP_L1_CACHE_LINE_SIZE 64 |
|||
#else |
|||
// L1 cache line size is 32 on Pentium III and earlier
|
|||
#define CRYPTOPP_L1_CACHE_LINE_SIZE 32 |
|||
#endif |
|||
#endif |
|||
|
|||
#if defined(_MSC_VER) |
|||
#if _MSC_VER == 1200 |
|||
#include <malloc.h> |
|||
#endif |
|||
#if _MSC_VER > 1200 || defined(_mm_free) |
|||
#define CRYPTOPP_MSVC6PP_OR_LATER // VC 6 processor pack or later
|
|||
#else |
|||
#define CRYPTOPP_MSVC6_NO_PP // VC 6 without processor pack
|
|||
#endif |
|||
#endif |
|||
|
|||
#ifndef CRYPTOPP_ALIGN_DATA |
|||
#if defined(CRYPTOPP_MSVC6PP_OR_LATER) |
|||
#define CRYPTOPP_ALIGN_DATA(x) __declspec(align(x)) |
|||
#elif defined(__GNUC__) |
|||
#define CRYPTOPP_ALIGN_DATA(x) __attribute__((aligned(x))) |
|||
#else |
|||
#define CRYPTOPP_ALIGN_DATA(x) |
|||
#endif |
|||
#endif |
|||
|
|||
#ifndef CRYPTOPP_SECTION_ALIGN16 |
|||
#if defined(__GNUC__) && !defined(__APPLE__) |
|||
// the alignment attribute doesn't seem to work without this section attribute when -fdata-sections is turned on
|
|||
#define CRYPTOPP_SECTION_ALIGN16 __attribute__((section ("CryptoPP_Align16"))) |
|||
#else |
|||
#define CRYPTOPP_SECTION_ALIGN16 |
|||
#endif |
|||
#endif |
|||
|
|||
#if defined(_MSC_VER) || defined(__fastcall) |
|||
#define CRYPTOPP_FASTCALL __fastcall |
|||
#else |
|||
#define CRYPTOPP_FASTCALL |
|||
#endif |
|||
|
|||
// VC60 workaround: it doesn't allow typename in some places
|
|||
#if defined(_MSC_VER) && (_MSC_VER < 1300) |
|||
#define CPP_TYPENAME |
|||
#else |
|||
#define CPP_TYPENAME typename |
|||
#endif |
|||
|
|||
// VC60 workaround: can't cast unsigned __int64 to float or double
|
|||
#if defined(_MSC_VER) && !defined(CRYPTOPP_MSVC6PP_OR_LATER) |
|||
#define CRYPTOPP_VC6_INT64 (__int64) |
|||
#else |
|||
#define CRYPTOPP_VC6_INT64 |
|||
#endif |
|||
|
|||
#ifdef _MSC_VER |
|||
#define CRYPTOPP_NO_VTABLE __declspec(novtable) |
|||
#else |
|||
#define CRYPTOPP_NO_VTABLE |
|||
#endif |
|||
|
|||
#ifdef _MSC_VER |
|||
// 4231: nonstandard extension used : 'extern' before template explicit instantiation
|
|||
// 4250: dominance
|
|||
// 4251: member needs to have dll-interface
|
|||
// 4275: base needs to have dll-interface
|
|||
// 4660: explicitly instantiating a class that's already implicitly instantiated
|
|||
// 4661: no suitable definition provided for explicit template instantiation request
|
|||
// 4786: identifer was truncated in debug information
|
|||
// 4355: 'this' : used in base member initializer list
|
|||
// 4910: '__declspec(dllexport)' and 'extern' are incompatible on an explicit instantiation
|
|||
# pragma warning(disable: 4231 4250 4251 4275 4660 4661 4786 4355 4910) |
|||
#endif |
|||
|
|||
#ifdef __BORLANDC__ |
|||
// 8037: non-const function called for const object. needed to work around BCB2006 bug
|
|||
# pragma warn -8037 |
|||
#endif |
|||
|
|||
#if (defined(_MSC_VER) && _MSC_VER <= 1300) || defined(__MWERKS__) || defined(_STLPORT_VERSION) |
|||
#define CRYPTOPP_DISABLE_UNCAUGHT_EXCEPTION |
|||
#endif |
|||
|
|||
#ifndef CRYPTOPP_DISABLE_UNCAUGHT_EXCEPTION |
|||
#define CRYPTOPP_UNCAUGHT_EXCEPTION_AVAILABLE |
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_DISABLE_X86ASM // for backwards compatibility: this macro had both meanings
|
|||
#define CRYPTOPP_DISABLE_ASM |
|||
#define CRYPTOPP_DISABLE_SSE2 |
|||
#endif |
|||
|
|||
#if !defined(CRYPTOPP_DISABLE_ASM) && ((defined(_MSC_VER) && defined(_M_IX86)) || (defined(__GNUC__) && (defined(__i386__) || defined(__x86_64__)))) |
|||
#define CRYPTOPP_X86_ASM_AVAILABLE |
|||
|
|||
#if !defined(CRYPTOPP_DISABLE_SSE2) && (defined(CRYPTOPP_MSVC6PP_OR_LATER) || CRYPTOPP_GCC_VERSION >= 30300) |
|||
#define CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE 1 |
|||
#else |
|||
#define CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE 0 |
|||
#endif |
|||
|
|||
// SSSE3 was actually introduced in GNU as 2.17, which was released 6/23/2006, but we can't tell what version of binutils is installed.
|
|||
// GCC 4.1.2 was released on 2/13/2007, so we'll use that as a proxy for the binutils version.
|
|||
#if !defined(CRYPTOPP_DISABLE_SSSE3) && (_MSC_VER >= 1400 || CRYPTOPP_GCC_VERSION >= 40102) |
|||
#define CRYPTOPP_BOOL_SSSE3_ASM_AVAILABLE 1 |
|||
#else |
|||
#define CRYPTOPP_BOOL_SSSE3_ASM_AVAILABLE 0 |
|||
#endif |
|||
#endif |
|||
|
|||
#if !defined(CRYPTOPP_DISABLE_ASM) && defined(_MSC_VER) && defined(_M_X64) |
|||
#define CRYPTOPP_X64_MASM_AVAILABLE |
|||
#endif |
|||
|
|||
#if !defined(CRYPTOPP_DISABLE_ASM) && defined(__GNUC__) && defined(__x86_64__) |
|||
#define CRYPTOPP_X64_ASM_AVAILABLE |
|||
#endif |
|||
|
|||
#if !defined(CRYPTOPP_DISABLE_SSE2) && (defined(CRYPTOPP_MSVC6PP_OR_LATER) || defined(__SSE2__)) |
|||
#define CRYPTOPP_BOOL_SSE2_INTRINSICS_AVAILABLE 1 |
|||
#else |
|||
#define CRYPTOPP_BOOL_SSE2_INTRINSICS_AVAILABLE 0 |
|||
#endif |
|||
|
|||
#if CRYPTOPP_BOOL_SSE2_INTRINSICS_AVAILABLE || CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE || defined(CRYPTOPP_X64_MASM_AVAILABLE) |
|||
#define CRYPTOPP_BOOL_ALIGN16_ENABLED 1 |
|||
#else |
|||
#define CRYPTOPP_BOOL_ALIGN16_ENABLED 0 |
|||
#endif |
|||
|
|||
// how to allocate 16-byte aligned memory (for SSE2)
|
|||
#if defined(CRYPTOPP_MSVC6PP_OR_LATER) |
|||
#define CRYPTOPP_MM_MALLOC_AVAILABLE |
|||
#elif defined(__FreeBSD__) || defined(__NetBSD__) || defined(__OpenBSD__) |
|||
#define CRYPTOPP_MALLOC_ALIGNMENT_IS_16 |
|||
#elif defined(__linux__) || defined(__sun__) || defined(__CYGWIN__) |
|||
#define CRYPTOPP_MEMALIGN_AVAILABLE |
|||
#else |
|||
#define CRYPTOPP_NO_ALIGNED_ALLOC |
|||
#endif |
|||
|
|||
// how to disable inlining
|
|||
#if defined(_MSC_VER) && _MSC_VER >= 1300 |
|||
# define CRYPTOPP_NOINLINE_DOTDOTDOT |
|||
# define CRYPTOPP_NOINLINE __declspec(noinline) |
|||
#elif defined(__GNUC__) |
|||
# define CRYPTOPP_NOINLINE_DOTDOTDOT |
|||
# define CRYPTOPP_NOINLINE __attribute__((noinline)) |
|||
#else |
|||
# define CRYPTOPP_NOINLINE_DOTDOTDOT ... |
|||
# define CRYPTOPP_NOINLINE |
|||
#endif |
|||
|
|||
// how to declare class constants
|
|||
#if (defined(_MSC_VER) && _MSC_VER <= 1300) || defined(__INTEL_COMPILER) |
|||
# define CRYPTOPP_CONSTANT(x) enum {x}; |
|||
#else |
|||
# define CRYPTOPP_CONSTANT(x) static const int x; |
|||
#endif |
|||
|
|||
#if defined(_M_X64) || defined(__x86_64__) |
|||
#define CRYPTOPP_BOOL_X64 1 |
|||
#else |
|||
#define CRYPTOPP_BOOL_X64 0 |
|||
#endif |
|||
|
|||
// see http://predef.sourceforge.net/prearch.html
|
|||
#if defined(_M_IX86) || defined(__i386__) || defined(__i386) || defined(_X86_) || defined(__I86__) || defined(__INTEL__) |
|||
#define CRYPTOPP_BOOL_X86 1 |
|||
#else |
|||
#define CRYPTOPP_BOOL_X86 0 |
|||
#endif |
|||
|
|||
#if CRYPTOPP_BOOL_X64 || CRYPTOPP_BOOL_X86 || defined(__powerpc__) |
|||
#define CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS |
|||
#endif |
|||
|
|||
#define CRYPTOPP_VERSION 560 |
|||
|
|||
// ***************** determine availability of OS features ********************
|
|||
|
|||
#ifndef NO_OS_DEPENDENCE |
|||
|
|||
#if defined(_WIN32) || defined(__CYGWIN__) |
|||
#define CRYPTOPP_WIN32_AVAILABLE |
|||
#endif |
|||
|
|||
#if defined(__unix__) || defined(__MACH__) || defined(__NetBSD__) || defined(__sun) |
|||
#define CRYPTOPP_UNIX_AVAILABLE |
|||
#endif |
|||
|
|||
#if defined(CRYPTOPP_WIN32_AVAILABLE) || defined(CRYPTOPP_UNIX_AVAILABLE) |
|||
# define HIGHRES_TIMER_AVAILABLE |
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_UNIX_AVAILABLE |
|||
# define HAS_BERKELEY_STYLE_SOCKETS |
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_WIN32_AVAILABLE |
|||
# define HAS_WINDOWS_STYLE_SOCKETS |
|||
#endif |
|||
|
|||
#if defined(HIGHRES_TIMER_AVAILABLE) && (defined(HAS_BERKELEY_STYLE_SOCKETS) || defined(HAS_WINDOWS_STYLE_SOCKETS)) |
|||
# define SOCKETS_AVAILABLE |
|||
#endif |
|||
|
|||
#if defined(HAS_WINDOWS_STYLE_SOCKETS) && (!defined(HAS_BERKELEY_STYLE_SOCKETS) || defined(PREFER_WINDOWS_STYLE_SOCKETS)) |
|||
# define USE_WINDOWS_STYLE_SOCKETS |
|||
#else |
|||
# define USE_BERKELEY_STYLE_SOCKETS |
|||
#endif |
|||
|
|||
#if defined(HIGHRES_TIMER_AVAILABLE) && defined(CRYPTOPP_WIN32_AVAILABLE) && !defined(USE_BERKELEY_STYLE_SOCKETS) |
|||
# define WINDOWS_PIPES_AVAILABLE |
|||
#endif |
|||
|
|||
#if defined(CRYPTOPP_WIN32_AVAILABLE) && defined(USE_MS_CRYPTOAPI) |
|||
# define NONBLOCKING_RNG_AVAILABLE |
|||
# define OS_RNG_AVAILABLE |
|||
#endif |
|||
|
|||
#if defined(CRYPTOPP_UNIX_AVAILABLE) || defined(CRYPTOPP_DOXYGEN_PROCESSING) |
|||
# define NONBLOCKING_RNG_AVAILABLE |
|||
# define BLOCKING_RNG_AVAILABLE |
|||
# define OS_RNG_AVAILABLE |
|||
# define HAS_PTHREADS |
|||
# define THREADS_AVAILABLE |
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_WIN32_AVAILABLE |
|||
# define HAS_WINTHREADS |
|||
# define THREADS_AVAILABLE |
|||
#endif |
|||
|
|||
#endif // NO_OS_DEPENDENCE
|
|||
|
|||
// ***************** DLL related ********************
|
|||
|
|||
#ifdef CRYPTOPP_WIN32_AVAILABLE |
|||
|
|||
#ifdef CRYPTOPP_EXPORTS |
|||
#define CRYPTOPP_IS_DLL |
|||
#define CRYPTOPP_DLL __declspec(dllexport) |
|||
#elif defined(CRYPTOPP_IMPORTS) |
|||
#define CRYPTOPP_IS_DLL |
|||
#define CRYPTOPP_DLL __declspec(dllimport) |
|||
#else |
|||
#define CRYPTOPP_DLL |
|||
#endif |
|||
|
|||
#define CRYPTOPP_API __cdecl |
|||
|
|||
#else // CRYPTOPP_WIN32_AVAILABLE
|
|||
|
|||
#define CRYPTOPP_DLL |
|||
#define CRYPTOPP_API |
|||
|
|||
#endif // CRYPTOPP_WIN32_AVAILABLE
|
|||
|
|||
#if defined(__MWERKS__) |
|||
#define CRYPTOPP_EXTERN_DLL_TEMPLATE_CLASS extern class CRYPTOPP_DLL |
|||
#elif defined(__BORLANDC__) || defined(__SUNPRO_CC) |
|||
#define CRYPTOPP_EXTERN_DLL_TEMPLATE_CLASS template class CRYPTOPP_DLL |
|||
#else |
|||
#define CRYPTOPP_EXTERN_DLL_TEMPLATE_CLASS extern template class CRYPTOPP_DLL |
|||
#endif |
|||
|
|||
#if defined(CRYPTOPP_MANUALLY_INSTANTIATE_TEMPLATES) && !defined(CRYPTOPP_IMPORTS) |
|||
#define CRYPTOPP_DLL_TEMPLATE_CLASS template class CRYPTOPP_DLL |
|||
#else |
|||
#define CRYPTOPP_DLL_TEMPLATE_CLASS CRYPTOPP_EXTERN_DLL_TEMPLATE_CLASS |
|||
#endif |
|||
|
|||
#if defined(__MWERKS__) |
|||
#define CRYPTOPP_EXTERN_STATIC_TEMPLATE_CLASS extern class |
|||
#elif defined(__BORLANDC__) || defined(__SUNPRO_CC) |
|||
#define CRYPTOPP_EXTERN_STATIC_TEMPLATE_CLASS template class |
|||
#else |
|||
#define CRYPTOPP_EXTERN_STATIC_TEMPLATE_CLASS extern template class |
|||
#endif |
|||
|
|||
#if defined(CRYPTOPP_MANUALLY_INSTANTIATE_TEMPLATES) && !defined(CRYPTOPP_EXPORTS) |
|||
#define CRYPTOPP_STATIC_TEMPLATE_CLASS template class |
|||
#else |
|||
#define CRYPTOPP_STATIC_TEMPLATE_CLASS CRYPTOPP_EXTERN_STATIC_TEMPLATE_CLASS |
|||
#endif |
|||
|
|||
#endif |
|||
@ -1,199 +0,0 @@ |
|||
// cpu.cpp - written and placed in the public domain by Wei Dai
|
|||
|
|||
#include "pch.h" |
|||
|
|||
#ifndef CRYPTOPP_IMPORTS |
|||
|
|||
#include "cpu.h" |
|||
#include "misc.h" |
|||
#include <algorithm> |
|||
|
|||
#ifdef __GNUC__ |
|||
#include <signal.h> |
|||
#include <setjmp.h> |
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_MSVC6PP_OR_LATER |
|||
#include <emmintrin.h> |
|||
#endif |
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
#ifdef CRYPTOPP_X86_ASM_AVAILABLE |
|||
|
|||
#ifndef _MSC_VER |
|||
typedef void (*SigHandler)(int); |
|||
|
|||
static jmp_buf s_jmpNoCPUID; |
|||
static void SigIllHandlerCPUID(int) |
|||
{ |
|||
longjmp(s_jmpNoCPUID, 1); |
|||
} |
|||
#endif |
|||
|
|||
bool CpuId(word32 input, word32 *output) |
|||
{ |
|||
#ifdef _MSC_VER |
|||
__try |
|||
{ |
|||
__asm |
|||
{ |
|||
mov eax, input |
|||
cpuid |
|||
mov edi, output |
|||
mov [edi], eax |
|||
mov [edi+4], ebx |
|||
mov [edi+8], ecx |
|||
mov [edi+12], edx |
|||
} |
|||
} |
|||
__except (1) |
|||
{ |
|||
return false; |
|||
} |
|||
return true; |
|||
#else |
|||
SigHandler oldHandler = signal(SIGILL, SigIllHandlerCPUID); |
|||
if (oldHandler == SIG_ERR) |
|||
return false; |
|||
|
|||
bool result = true; |
|||
if (setjmp(s_jmpNoCPUID)) |
|||
result = false; |
|||
else |
|||
{ |
|||
__asm__ |
|||
( |
|||
// save ebx in case -fPIC is being used
|
|||
#if CRYPTOPP_BOOL_X86 |
|||
"push %%ebx; cpuid; mov %%ebx, %%edi; pop %%ebx" |
|||
#else |
|||
"pushq %%rbx; cpuid; mov %%ebx, %%edi; popq %%rbx" |
|||
#endif |
|||
: "=a" (output[0]), "=D" (output[1]), "=c" (output[2]), "=d" (output[3]) |
|||
: "a" (input) |
|||
); |
|||
} |
|||
|
|||
signal(SIGILL, oldHandler); |
|||
return result; |
|||
#endif |
|||
} |
|||
|
|||
#if !CRYPTOPP_BOOL_X64 && !defined(_MSC_VER) && defined(__GNUC__) |
|||
static jmp_buf s_jmpNoSSE2; |
|||
static void SigIllHandlerSSE2(int) |
|||
{ |
|||
longjmp(s_jmpNoSSE2, 1); |
|||
} |
|||
#endif |
|||
|
|||
#elif _MSC_VER >= 1400 && CRYPTOPP_BOOL_X64 |
|||
|
|||
bool CpuId(word32 input, word32 *output) |
|||
{ |
|||
__cpuid((int *)output, input); |
|||
return true; |
|||
} |
|||
|
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_CPUID_AVAILABLE |
|||
|
|||
static bool TrySSE2() |
|||
{ |
|||
#if CRYPTOPP_BOOL_X64 |
|||
return true; |
|||
#elif defined(_MSC_VER) |
|||
__try |
|||
{ |
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
AS2(por xmm0, xmm0) // executing SSE2 instruction
|
|||
#elif CRYPTOPP_BOOL_SSE2_INTRINSICS_AVAILABLE |
|||
__mm128i x = _mm_setzero_si128(); |
|||
return _mm_cvtsi128_si32(x) == 0; |
|||
#endif |
|||
} |
|||
__except (1) |
|||
{ |
|||
return false; |
|||
} |
|||
return true; |
|||
#elif defined(__GNUC__) |
|||
SigHandler oldHandler = signal(SIGILL, SigIllHandlerSSE2); |
|||
if (oldHandler == SIG_ERR) |
|||
return false; |
|||
|
|||
bool result = true; |
|||
if (setjmp(s_jmpNoSSE2)) |
|||
result = false; |
|||
else |
|||
{ |
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
__asm __volatile ("por %xmm0, %xmm0"); |
|||
#elif CRYPTOPP_BOOL_SSE2_INTRINSICS_AVAILABLE |
|||
__mm128i x = _mm_setzero_si128(); |
|||
result = _mm_cvtsi128_si32(x) == 0; |
|||
#endif |
|||
} |
|||
|
|||
signal(SIGILL, oldHandler); |
|||
return result; |
|||
#else |
|||
return false; |
|||
#endif |
|||
} |
|||
|
|||
bool g_x86DetectionDone = false; |
|||
bool g_hasISSE = false, g_hasSSE2 = false, g_hasSSSE3 = false, g_hasMMX = false, g_isP4 = false; |
|||
word32 g_cacheLineSize = CRYPTOPP_L1_CACHE_LINE_SIZE; |
|||
|
|||
void DetectX86Features() |
|||
{ |
|||
word32 cpuid[4], cpuid1[4]; |
|||
if (!CpuId(0, cpuid)) |
|||
return; |
|||
if (!CpuId(1, cpuid1)) |
|||
return; |
|||
|
|||
g_hasMMX = (cpuid1[3] & (1 << 23)) != 0; |
|||
if ((cpuid1[3] & (1 << 26)) != 0) |
|||
g_hasSSE2 = TrySSE2(); |
|||
g_hasSSSE3 = g_hasSSE2 && (cpuid1[2] & (1<<9)); |
|||
|
|||
if ((cpuid1[3] & (1 << 25)) != 0) |
|||
g_hasISSE = true; |
|||
else |
|||
{ |
|||
word32 cpuid2[4]; |
|||
CpuId(0x080000000, cpuid2); |
|||
if (cpuid2[0] >= 0x080000001) |
|||
{ |
|||
CpuId(0x080000001, cpuid2); |
|||
g_hasISSE = (cpuid2[3] & (1 << 22)) != 0; |
|||
} |
|||
} |
|||
|
|||
std::swap(cpuid[2], cpuid[3]); |
|||
if (memcmp(cpuid+1, "GenuineIntel", 12) == 0) |
|||
{ |
|||
g_isP4 = ((cpuid1[0] >> 8) & 0xf) == 0xf; |
|||
g_cacheLineSize = 8 * GETBYTE(cpuid1[1], 1); |
|||
} |
|||
else if (memcmp(cpuid+1, "AuthenticAMD", 12) == 0) |
|||
{ |
|||
CpuId(0x80000005, cpuid); |
|||
g_cacheLineSize = GETBYTE(cpuid[2], 0); |
|||
} |
|||
|
|||
if (!g_cacheLineSize) |
|||
g_cacheLineSize = CRYPTOPP_L1_CACHE_LINE_SIZE; |
|||
|
|||
g_x86DetectionDone = true; |
|||
} |
|||
|
|||
#endif |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#endif |
|||
@ -1,263 +0,0 @@ |
|||
#ifndef CRYPTOPP_CPU_H |
|||
#define CRYPTOPP_CPU_H |
|||
|
|||
#ifdef CRYPTOPP_GENERATE_X64_MASM |
|||
|
|||
#define CRYPTOPP_X86_ASM_AVAILABLE |
|||
#define CRYPTOPP_BOOL_X64 1 |
|||
#define CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE 1 |
|||
#define NAMESPACE_END |
|||
|
|||
#else |
|||
|
|||
#include "config.h" |
|||
|
|||
#ifdef CRYPTOPP_MSVC6PP_OR_LATER |
|||
#include <emmintrin.h> |
|||
#endif |
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
#if defined(CRYPTOPP_X86_ASM_AVAILABLE) || (_MSC_VER >= 1400 && CRYPTOPP_BOOL_X64) |
|||
|
|||
#define CRYPTOPP_CPUID_AVAILABLE |
|||
|
|||
// these should not be used directly
|
|||
extern CRYPTOPP_DLL bool g_x86DetectionDone; |
|||
extern CRYPTOPP_DLL bool g_hasSSE2; |
|||
extern CRYPTOPP_DLL bool g_hasISSE; |
|||
extern CRYPTOPP_DLL bool g_hasMMX; |
|||
extern CRYPTOPP_DLL bool g_hasSSSE3; |
|||
extern CRYPTOPP_DLL bool g_isP4; |
|||
extern CRYPTOPP_DLL word32 g_cacheLineSize; |
|||
CRYPTOPP_DLL void CRYPTOPP_API DetectX86Features(); |
|||
|
|||
CRYPTOPP_DLL bool CRYPTOPP_API CpuId(word32 input, word32 *output); |
|||
|
|||
#if CRYPTOPP_BOOL_X64 |
|||
inline bool HasSSE2() {return true;} |
|||
inline bool HasISSE() {return true;} |
|||
inline bool HasMMX() {return true;} |
|||
#else |
|||
|
|||
inline bool HasSSE2() |
|||
{ |
|||
if (!g_x86DetectionDone) |
|||
DetectX86Features(); |
|||
return g_hasSSE2; |
|||
} |
|||
|
|||
inline bool HasISSE() |
|||
{ |
|||
if (!g_x86DetectionDone) |
|||
DetectX86Features(); |
|||
return g_hasISSE; |
|||
} |
|||
|
|||
inline bool HasMMX() |
|||
{ |
|||
if (!g_x86DetectionDone) |
|||
DetectX86Features(); |
|||
return g_hasMMX; |
|||
} |
|||
|
|||
#endif |
|||
|
|||
inline bool HasSSSE3() |
|||
{ |
|||
if (!g_x86DetectionDone) |
|||
DetectX86Features(); |
|||
return g_hasSSSE3; |
|||
} |
|||
|
|||
inline bool IsP4() |
|||
{ |
|||
if (!g_x86DetectionDone) |
|||
DetectX86Features(); |
|||
return g_isP4; |
|||
} |
|||
|
|||
inline int GetCacheLineSize() |
|||
{ |
|||
if (!g_x86DetectionDone) |
|||
DetectX86Features(); |
|||
return g_cacheLineSize; |
|||
} |
|||
|
|||
#else |
|||
|
|||
inline int GetCacheLineSize() |
|||
{ |
|||
return CRYPTOPP_L1_CACHE_LINE_SIZE; |
|||
} |
|||
|
|||
inline bool HasSSSE3() {return false;} |
|||
inline bool IsP4() {return false;} |
|||
|
|||
// assume MMX and SSE2 if intrinsics are enabled
|
|||
#if CRYPTOPP_BOOL_SSE2_INTRINSICS_AVAILABLE || CRYPTOPP_BOOL_X64 |
|||
inline bool HasSSE2() {return true;} |
|||
inline bool HasISSE() {return true;} |
|||
inline bool HasMMX() {return true;} |
|||
#else |
|||
inline bool HasSSE2() {return false;} |
|||
inline bool HasISSE() {return false;} |
|||
inline bool HasMMX() {return false;} |
|||
#endif |
|||
|
|||
#endif // #ifdef CRYPTOPP_X86_ASM_AVAILABLE || _MSC_VER >= 1400
|
|||
|
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_GENERATE_X64_MASM |
|||
#define AS1(x) x*newline* |
|||
#define AS2(x, y) x, y*newline* |
|||
#define AS3(x, y, z) x, y, z*newline* |
|||
#define ASS(x, y, a, b, c, d) x, y, a*64+b*16+c*4+d*newline* |
|||
#define ASL(x) label##x:*newline* |
|||
#define ASJ(x, y, z) x label##y*newline* |
|||
#define ASC(x, y) x label##y*newline* |
|||
#define AS_HEX(y) 0##y##h |
|||
#elif defined(__GNUC__) |
|||
// define these in two steps to allow arguments to be expanded
|
|||
#define GNU_AS1(x) #x ";" |
|||
#define GNU_AS2(x, y) #x ", " #y ";" |
|||
#define GNU_AS3(x, y, z) #x ", " #y ", " #z ";" |
|||
#define GNU_ASL(x) "\n" #x ":" |
|||
#define GNU_ASJ(x, y, z) #x " " #y #z ";" |
|||
#define AS1(x) GNU_AS1(x) |
|||
#define AS2(x, y) GNU_AS2(x, y) |
|||
#define AS3(x, y, z) GNU_AS3(x, y, z) |
|||
#define ASS(x, y, a, b, c, d) #x ", " #y ", " #a "*64+" #b "*16+" #c "*4+" #d ";" |
|||
#define ASL(x) GNU_ASL(x) |
|||
#define ASJ(x, y, z) GNU_ASJ(x, y, z) |
|||
#define ASC(x, y) #x " " #y ";" |
|||
#define CRYPTOPP_NAKED |
|||
#define AS_HEX(y) 0x##y |
|||
#else |
|||
#define AS1(x) __asm {x} |
|||
#define AS2(x, y) __asm {x, y} |
|||
#define AS3(x, y, z) __asm {x, y, z} |
|||
#define ASS(x, y, a, b, c, d) __asm {x, y, _MM_SHUFFLE(a, b, c, d)} |
|||
#define ASL(x) __asm {label##x:} |
|||
#define ASJ(x, y, z) __asm {x label##y} |
|||
#define ASC(x, y) __asm {x label##y} |
|||
#define CRYPTOPP_NAKED __declspec(naked) |
|||
#define AS_HEX(y) 0x##y |
|||
#endif |
|||
|
|||
#define IF0(y) |
|||
#define IF1(y) y |
|||
|
|||
#ifdef CRYPTOPP_GENERATE_X64_MASM |
|||
#define ASM_MOD(x, y) ((x) MOD (y)) |
|||
#define XMMWORD_PTR XMMWORD PTR |
|||
#else |
|||
// GNU assembler doesn't seem to have mod operator
|
|||
#define ASM_MOD(x, y) ((x)-((x)/(y))*(y)) |
|||
// GAS 2.15 doesn't support XMMWORD PTR. it seems necessary only for MASM
|
|||
#define XMMWORD_PTR |
|||
#endif |
|||
|
|||
#if CRYPTOPP_BOOL_X86 |
|||
#define AS_REG_1 ecx |
|||
#define AS_REG_2 edx |
|||
#define AS_REG_3 esi |
|||
#define AS_REG_4 edi |
|||
#define AS_REG_5 eax |
|||
#define AS_REG_6 ebx |
|||
#define AS_REG_7 ebp |
|||
#define AS_REG_1d ecx |
|||
#define AS_REG_2d edx |
|||
#define AS_REG_3d esi |
|||
#define AS_REG_4d edi |
|||
#define AS_REG_5d eax |
|||
#define AS_REG_6d ebx |
|||
#define AS_REG_7d ebp |
|||
#define WORD_SZ 4 |
|||
#define WORD_REG(x) e##x |
|||
#define WORD_PTR DWORD PTR |
|||
#define AS_PUSH_IF86(x) AS1(push e##x) |
|||
#define AS_POP_IF86(x) AS1(pop e##x) |
|||
#define AS_JCXZ jecxz |
|||
#elif CRYPTOPP_BOOL_X64 |
|||
#ifdef CRYPTOPP_GENERATE_X64_MASM |
|||
#define AS_REG_1 rcx |
|||
#define AS_REG_2 rdx |
|||
#define AS_REG_3 r8 |
|||
#define AS_REG_4 r9 |
|||
#define AS_REG_5 rax |
|||
#define AS_REG_6 r10 |
|||
#define AS_REG_7 r11 |
|||
#define AS_REG_1d ecx |
|||
#define AS_REG_2d edx |
|||
#define AS_REG_3d r8d |
|||
#define AS_REG_4d r9d |
|||
#define AS_REG_5d eax |
|||
#define AS_REG_6d r10d |
|||
#define AS_REG_7d r11d |
|||
#else |
|||
#define AS_REG_1 rdi |
|||
#define AS_REG_2 rsi |
|||
#define AS_REG_3 rdx |
|||
#define AS_REG_4 rcx |
|||
#define AS_REG_5 r8 |
|||
#define AS_REG_6 r9 |
|||
#define AS_REG_7 r10 |
|||
#define AS_REG_1d edi |
|||
#define AS_REG_2d esi |
|||
#define AS_REG_3d edx |
|||
#define AS_REG_4d ecx |
|||
#define AS_REG_5d r8d |
|||
#define AS_REG_6d r9d |
|||
#define AS_REG_7d r10d |
|||
#endif |
|||
#define WORD_SZ 8 |
|||
#define WORD_REG(x) r##x |
|||
#define WORD_PTR QWORD PTR |
|||
#define AS_PUSH_IF86(x) |
|||
#define AS_POP_IF86(x) |
|||
#define AS_JCXZ jrcxz |
|||
#endif |
|||
|
|||
// helper macro for stream cipher output
|
|||
#define AS_XMM_OUTPUT4(labelPrefix, inputPtr, outputPtr, x0, x1, x2, x3, t, p0, p1, p2, p3, increment)\ |
|||
AS2( test inputPtr, inputPtr)\ |
|||
ASC( jz, labelPrefix##3)\ |
|||
AS2( test inputPtr, 15)\ |
|||
ASC( jnz, labelPrefix##7)\ |
|||
AS2( pxor xmm##x0, [inputPtr+p0*16])\ |
|||
AS2( pxor xmm##x1, [inputPtr+p1*16])\ |
|||
AS2( pxor xmm##x2, [inputPtr+p2*16])\ |
|||
AS2( pxor xmm##x3, [inputPtr+p3*16])\ |
|||
AS2( add inputPtr, increment*16)\ |
|||
ASC( jmp, labelPrefix##3)\ |
|||
ASL(labelPrefix##7)\ |
|||
AS2( movdqu xmm##t, [inputPtr+p0*16])\ |
|||
AS2( pxor xmm##x0, xmm##t)\ |
|||
AS2( movdqu xmm##t, [inputPtr+p1*16])\ |
|||
AS2( pxor xmm##x1, xmm##t)\ |
|||
AS2( movdqu xmm##t, [inputPtr+p2*16])\ |
|||
AS2( pxor xmm##x2, xmm##t)\ |
|||
AS2( movdqu xmm##t, [inputPtr+p3*16])\ |
|||
AS2( pxor xmm##x3, xmm##t)\ |
|||
AS2( add inputPtr, increment*16)\ |
|||
ASL(labelPrefix##3)\ |
|||
AS2( test outputPtr, 15)\ |
|||
ASC( jnz, labelPrefix##8)\ |
|||
AS2( movdqa [outputPtr+p0*16], xmm##x0)\ |
|||
AS2( movdqa [outputPtr+p1*16], xmm##x1)\ |
|||
AS2( movdqa [outputPtr+p2*16], xmm##x2)\ |
|||
AS2( movdqa [outputPtr+p3*16], xmm##x3)\ |
|||
ASC( jmp, labelPrefix##9)\ |
|||
ASL(labelPrefix##8)\ |
|||
AS2( movdqu [outputPtr+p0*16], xmm##x0)\ |
|||
AS2( movdqu [outputPtr+p1*16], xmm##x1)\ |
|||
AS2( movdqu [outputPtr+p2*16], xmm##x2)\ |
|||
AS2( movdqu [outputPtr+p3*16], xmm##x3)\ |
|||
ASL(labelPrefix##9)\ |
|||
AS2( add outputPtr, increment*16) |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#endif |
|||
File diff suppressed because it is too large
@ -1,29 +0,0 @@ |
|||
#ifndef CRYPTOPP_ITERHASH_H |
|||
#define CRYPTOPP_ITERHASH_H |
|||
|
|||
#include "secblock.h" |
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
// *** trimmed down dependency from iterhash.h ***
|
|||
template <class T_HashWordType, class T_Endianness, unsigned int T_BlockSize, unsigned int T_StateSize, class T_Transform, unsigned int T_DigestSize = 0, bool T_StateAligned = false> |
|||
class CRYPTOPP_NO_VTABLE IteratedHashWithStaticTransform |
|||
{ |
|||
public: |
|||
CRYPTOPP_CONSTANT(DIGESTSIZE = T_DigestSize ? T_DigestSize : T_StateSize) |
|||
unsigned int DigestSize() const {return DIGESTSIZE;}; |
|||
typedef T_HashWordType HashWordType; |
|||
CRYPTOPP_CONSTANT(BLOCKSIZE = T_BlockSize) |
|||
|
|||
protected: |
|||
IteratedHashWithStaticTransform() {this->Init();} |
|||
void HashEndianCorrectedBlock(const T_HashWordType *data) {T_Transform::Transform(this->m_state, data);} |
|||
void Init() {T_Transform::InitState(this->m_state);} |
|||
|
|||
T_HashWordType* StateBuf() {return this->m_state;} |
|||
FixedSizeAlignedSecBlock<T_HashWordType, T_BlockSize/sizeof(T_HashWordType), T_StateAligned> m_state; |
|||
}; |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#endif |
|||
File diff suppressed because it is too large
@ -1,2 +0,0 @@ |
|||
* |
|||
!.gitignore |
|||
@ -1,21 +0,0 @@ |
|||
#ifndef CRYPTOPP_PCH_H |
|||
#define CRYPTOPP_PCH_H |
|||
|
|||
#ifdef CRYPTOPP_GENERATE_X64_MASM |
|||
|
|||
#include "cpu.h" |
|||
|
|||
#else |
|||
|
|||
#include "config.h" |
|||
|
|||
#ifdef USE_PRECOMPILED_HEADERS |
|||
#include "simple.h" |
|||
#include "secblock.h" |
|||
#include "misc.h" |
|||
#include "smartptr.h" |
|||
#endif |
|||
|
|||
#endif |
|||
|
|||
#endif |
|||
@ -1,501 +0,0 @@ |
|||
// secblock.h - written and placed in the public domain by Wei Dai
|
|||
|
|||
#ifndef CRYPTOPP_SECBLOCK_H |
|||
#define CRYPTOPP_SECBLOCK_H |
|||
|
|||
#include "config.h" |
|||
#include "misc.h" |
|||
#include <assert.h> |
|||
|
|||
#if defined(CRYPTOPP_MEMALIGN_AVAILABLE) || defined(CRYPTOPP_MM_MALLOC_AVAILABLE) || defined(QNX) |
|||
#include <malloc.h> |
|||
#else |
|||
#include <stdlib.h> |
|||
#endif |
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
// ************** secure memory allocation ***************
|
|||
|
|||
template<class T> |
|||
class AllocatorBase |
|||
{ |
|||
public: |
|||
typedef T value_type; |
|||
typedef size_t size_type; |
|||
#ifdef CRYPTOPP_MSVCRT6 |
|||
typedef ptrdiff_t difference_type; |
|||
#else |
|||
typedef std::ptrdiff_t difference_type; |
|||
#endif |
|||
typedef T * pointer; |
|||
typedef const T * const_pointer; |
|||
typedef T & reference; |
|||
typedef const T & const_reference; |
|||
|
|||
pointer address(reference r) const {return (&r);} |
|||
const_pointer address(const_reference r) const {return (&r); } |
|||
void construct(pointer p, const T& val) {new (p) T(val);} |
|||
void destroy(pointer p) {p->~T();} |
|||
size_type max_size() const {return ~size_type(0)/sizeof(T);} // switch to std::numeric_limits<T>::max later
|
|||
|
|||
protected: |
|||
static void CheckSize(size_t n) |
|||
{ |
|||
if (n > ~size_t(0) / sizeof(T)) |
|||
throw InvalidArgument("AllocatorBase: requested size would cause integer overflow"); |
|||
} |
|||
}; |
|||
|
|||
#define CRYPTOPP_INHERIT_ALLOCATOR_TYPES \ |
|||
typedef typename AllocatorBase<T>::value_type value_type;\ |
|||
typedef typename AllocatorBase<T>::size_type size_type;\ |
|||
typedef typename AllocatorBase<T>::difference_type difference_type;\ |
|||
typedef typename AllocatorBase<T>::pointer pointer;\ |
|||
typedef typename AllocatorBase<T>::const_pointer const_pointer;\ |
|||
typedef typename AllocatorBase<T>::reference reference;\ |
|||
typedef typename AllocatorBase<T>::const_reference const_reference; |
|||
|
|||
#if defined(_MSC_VER) && (_MSC_VER < 1300) |
|||
// this pragma causes an internal compiler error if placed immediately before std::swap(a, b)
|
|||
#pragma warning(push) |
|||
#pragma warning(disable: 4700) // VC60 workaround: don't know how to get rid of this warning
|
|||
#endif |
|||
|
|||
template <class T, class A> |
|||
typename A::pointer StandardReallocate(A& a, T *p, typename A::size_type oldSize, typename A::size_type newSize, bool preserve) |
|||
{ |
|||
if (oldSize == newSize) |
|||
return p; |
|||
|
|||
if (preserve) |
|||
{ |
|||
typename A::pointer newPointer = a.allocate(newSize, NULL); |
|||
memcpy_s(newPointer, sizeof(T)*newSize, p, sizeof(T)*STDMIN(oldSize, newSize)); |
|||
a.deallocate(p, oldSize); |
|||
return newPointer; |
|||
} |
|||
else |
|||
{ |
|||
a.deallocate(p, oldSize); |
|||
return a.allocate(newSize, NULL); |
|||
} |
|||
} |
|||
|
|||
#if defined(_MSC_VER) && (_MSC_VER < 1300) |
|||
#pragma warning(pop) |
|||
#endif |
|||
|
|||
template <class T, bool T_Align16 = false> |
|||
class AllocatorWithCleanup : public AllocatorBase<T> |
|||
{ |
|||
public: |
|||
CRYPTOPP_INHERIT_ALLOCATOR_TYPES |
|||
|
|||
pointer allocate(size_type n, const void * = NULL) |
|||
{ |
|||
CheckSize(n); |
|||
if (n == 0) |
|||
return NULL; |
|||
|
|||
if (CRYPTOPP_BOOL_ALIGN16_ENABLED && T_Align16 && n*sizeof(T) >= 16) |
|||
{ |
|||
byte *p; |
|||
#ifdef CRYPTOPP_MM_MALLOC_AVAILABLE |
|||
while (!(p = (byte *)_mm_malloc(sizeof(T)*n, 16))) |
|||
#elif defined(CRYPTOPP_MEMALIGN_AVAILABLE) |
|||
while (!(p = (byte *)memalign(16, sizeof(T)*n))) |
|||
#elif defined(CRYPTOPP_MALLOC_ALIGNMENT_IS_16) |
|||
while (!(p = (byte *)malloc(sizeof(T)*n))) |
|||
#else |
|||
while (!(p = (byte *)malloc(sizeof(T)*n + 16))) |
|||
#endif |
|||
CallNewHandler(); |
|||
|
|||
#ifdef CRYPTOPP_NO_ALIGNED_ALLOC |
|||
size_t adjustment = 16-((size_t)p%16); |
|||
p += adjustment; |
|||
p[-1] = (byte)adjustment; |
|||
#endif |
|||
|
|||
assert(IsAlignedOn(p, 16)); |
|||
return (pointer)p; |
|||
} |
|||
|
|||
pointer p; |
|||
while (!(p = (pointer)malloc(sizeof(T)*n))) |
|||
CallNewHandler(); |
|||
return p; |
|||
} |
|||
|
|||
void deallocate(void *p, size_type n) |
|||
{ |
|||
memset_z(p, 0, n*sizeof(T)); |
|||
|
|||
if (CRYPTOPP_BOOL_ALIGN16_ENABLED && T_Align16 && n*sizeof(T) >= 16) |
|||
{ |
|||
#ifdef CRYPTOPP_MM_MALLOC_AVAILABLE |
|||
_mm_free(p); |
|||
#elif defined(CRYPTOPP_NO_ALIGNED_ALLOC) |
|||
p = (byte *)p - ((byte *)p)[-1]; |
|||
free(p); |
|||
#else |
|||
free(p); |
|||
#endif |
|||
return; |
|||
} |
|||
|
|||
free(p); |
|||
} |
|||
|
|||
pointer reallocate(T *p, size_type oldSize, size_type newSize, bool preserve) |
|||
{ |
|||
return StandardReallocate(*this, p, oldSize, newSize, preserve); |
|||
} |
|||
|
|||
// VS.NET STL enforces the policy of "All STL-compliant allocators have to provide a
|
|||
// template class member called rebind".
|
|||
template <class U> struct rebind { typedef AllocatorWithCleanup<U, T_Align16> other; }; |
|||
#if _MSC_VER >= 1500 |
|||
AllocatorWithCleanup() {} |
|||
template <class U, bool A> AllocatorWithCleanup(const AllocatorWithCleanup<U, A> &) {} |
|||
#endif |
|||
}; |
|||
|
|||
CRYPTOPP_DLL_TEMPLATE_CLASS AllocatorWithCleanup<byte>; |
|||
CRYPTOPP_DLL_TEMPLATE_CLASS AllocatorWithCleanup<word16>; |
|||
CRYPTOPP_DLL_TEMPLATE_CLASS AllocatorWithCleanup<word32>; |
|||
CRYPTOPP_DLL_TEMPLATE_CLASS AllocatorWithCleanup<word64>; |
|||
#if CRYPTOPP_BOOL_X86 |
|||
CRYPTOPP_DLL_TEMPLATE_CLASS AllocatorWithCleanup<word, true>; // for Integer
|
|||
#endif |
|||
|
|||
template <class T> |
|||
class NullAllocator : public AllocatorBase<T> |
|||
{ |
|||
public: |
|||
CRYPTOPP_INHERIT_ALLOCATOR_TYPES |
|||
|
|||
pointer allocate(size_type n, const void * = NULL) |
|||
{ |
|||
assert(false); |
|||
return NULL; |
|||
} |
|||
|
|||
void deallocate(void *p, size_type n) |
|||
{ |
|||
//// Bitcoin: don't know why this trips, probably a false alarm, depends on the compiler used.
|
|||
//assert(false);
|
|||
} |
|||
|
|||
size_type max_size() const {return 0;} |
|||
}; |
|||
|
|||
// This allocator can't be used with standard collections because
|
|||
// they require that all objects of the same allocator type are equivalent.
|
|||
// So this is for use with SecBlock only.
|
|||
template <class T, size_t S, class A = NullAllocator<T>, bool T_Align16 = false> |
|||
class FixedSizeAllocatorWithCleanup : public AllocatorBase<T> |
|||
{ |
|||
public: |
|||
CRYPTOPP_INHERIT_ALLOCATOR_TYPES |
|||
|
|||
FixedSizeAllocatorWithCleanup() : m_allocated(false) {} |
|||
|
|||
pointer allocate(size_type n) |
|||
{ |
|||
assert(IsAlignedOn(m_array, 8)); |
|||
|
|||
if (n <= S && !m_allocated) |
|||
{ |
|||
m_allocated = true; |
|||
return GetAlignedArray(); |
|||
} |
|||
else |
|||
return m_fallbackAllocator.allocate(n); |
|||
} |
|||
|
|||
pointer allocate(size_type n, const void *hint) |
|||
{ |
|||
if (n <= S && !m_allocated) |
|||
{ |
|||
m_allocated = true; |
|||
return GetAlignedArray(); |
|||
} |
|||
else |
|||
return m_fallbackAllocator.allocate(n, hint); |
|||
} |
|||
|
|||
void deallocate(void *p, size_type n) |
|||
{ |
|||
if (p == GetAlignedArray()) |
|||
{ |
|||
assert(n <= S); |
|||
assert(m_allocated); |
|||
m_allocated = false; |
|||
memset(p, 0, n*sizeof(T)); |
|||
} |
|||
else |
|||
m_fallbackAllocator.deallocate(p, n); |
|||
} |
|||
|
|||
pointer reallocate(pointer p, size_type oldSize, size_type newSize, bool preserve) |
|||
{ |
|||
if (p == GetAlignedArray() && newSize <= S) |
|||
{ |
|||
assert(oldSize <= S); |
|||
if (oldSize > newSize) |
|||
memset(p + newSize, 0, (oldSize-newSize)*sizeof(T)); |
|||
return p; |
|||
} |
|||
|
|||
pointer newPointer = allocate(newSize, NULL); |
|||
if (preserve) |
|||
memcpy(newPointer, p, sizeof(T)*STDMIN(oldSize, newSize)); |
|||
deallocate(p, oldSize); |
|||
return newPointer; |
|||
} |
|||
|
|||
size_type max_size() const {return STDMAX(m_fallbackAllocator.max_size(), S);} |
|||
|
|||
private: |
|||
#ifdef __BORLANDC__ |
|||
T* GetAlignedArray() {return m_array;} |
|||
T m_array[S]; |
|||
#else |
|||
T* GetAlignedArray() {return (CRYPTOPP_BOOL_ALIGN16_ENABLED && T_Align16) ? (T*)(((byte *)m_array) + (0-(size_t)m_array)%16) : m_array;} |
|||
CRYPTOPP_ALIGN_DATA(8) T m_array[(CRYPTOPP_BOOL_ALIGN16_ENABLED && T_Align16) ? S+8/sizeof(T) : S]; |
|||
#endif |
|||
A m_fallbackAllocator; |
|||
bool m_allocated; |
|||
}; |
|||
|
|||
//! a block of memory allocated using A
|
|||
template <class T, class A = AllocatorWithCleanup<T> > |
|||
class SecBlock |
|||
{ |
|||
public: |
|||
typedef typename A::value_type value_type; |
|||
typedef typename A::pointer iterator; |
|||
typedef typename A::const_pointer const_iterator; |
|||
typedef typename A::size_type size_type; |
|||
|
|||
explicit SecBlock(size_type size=0) |
|||
: m_size(size) {m_ptr = m_alloc.allocate(size, NULL);} |
|||
SecBlock(const SecBlock<T, A> &t) |
|||
: m_size(t.m_size) {m_ptr = m_alloc.allocate(m_size, NULL); memcpy_s(m_ptr, m_size*sizeof(T), t.m_ptr, m_size*sizeof(T));} |
|||
SecBlock(const T *t, size_type len) |
|||
: m_size(len) |
|||
{ |
|||
m_ptr = m_alloc.allocate(len, NULL); |
|||
if (t == NULL) |
|||
memset_z(m_ptr, 0, len*sizeof(T)); |
|||
else |
|||
memcpy(m_ptr, t, len*sizeof(T)); |
|||
} |
|||
|
|||
~SecBlock() |
|||
{m_alloc.deallocate(m_ptr, m_size);} |
|||
|
|||
#ifdef __BORLANDC__ |
|||
operator T *() const |
|||
{return (T*)m_ptr;} |
|||
#else |
|||
operator const void *() const |
|||
{return m_ptr;} |
|||
operator void *() |
|||
{return m_ptr;} |
|||
|
|||
operator const T *() const |
|||
{return m_ptr;} |
|||
operator T *() |
|||
{return m_ptr;} |
|||
#endif |
|||
|
|||
// T *operator +(size_type offset)
|
|||
// {return m_ptr+offset;}
|
|||
|
|||
// const T *operator +(size_type offset) const
|
|||
// {return m_ptr+offset;}
|
|||
|
|||
// T& operator[](size_type index)
|
|||
// {assert(index >= 0 && index < m_size); return m_ptr[index];}
|
|||
|
|||
// const T& operator[](size_type index) const
|
|||
// {assert(index >= 0 && index < m_size); return m_ptr[index];}
|
|||
|
|||
iterator begin() |
|||
{return m_ptr;} |
|||
const_iterator begin() const |
|||
{return m_ptr;} |
|||
iterator end() |
|||
{return m_ptr+m_size;} |
|||
const_iterator end() const |
|||
{return m_ptr+m_size;} |
|||
|
|||
typename A::pointer data() {return m_ptr;} |
|||
typename A::const_pointer data() const {return m_ptr;} |
|||
|
|||
size_type size() const {return m_size;} |
|||
bool empty() const {return m_size == 0;} |
|||
|
|||
byte * BytePtr() {return (byte *)m_ptr;} |
|||
const byte * BytePtr() const {return (const byte *)m_ptr;} |
|||
size_type SizeInBytes() const {return m_size*sizeof(T);} |
|||
|
|||
//! set contents and size
|
|||
void Assign(const T *t, size_type len) |
|||
{ |
|||
New(len); |
|||
memcpy_s(m_ptr, m_size*sizeof(T), t, len*sizeof(T)); |
|||
} |
|||
|
|||
//! copy contents and size from another SecBlock
|
|||
void Assign(const SecBlock<T, A> &t) |
|||
{ |
|||
New(t.m_size); |
|||
memcpy_s(m_ptr, m_size*sizeof(T), t.m_ptr, m_size*sizeof(T)); |
|||
} |
|||
|
|||
SecBlock<T, A>& operator=(const SecBlock<T, A> &t) |
|||
{ |
|||
Assign(t); |
|||
return *this; |
|||
} |
|||
|
|||
// append to this object
|
|||
SecBlock<T, A>& operator+=(const SecBlock<T, A> &t) |
|||
{ |
|||
size_type oldSize = m_size; |
|||
Grow(m_size+t.m_size); |
|||
memcpy_s(m_ptr+oldSize, m_size*sizeof(T), t.m_ptr, t.m_size*sizeof(T)); |
|||
return *this; |
|||
} |
|||
|
|||
// append operator
|
|||
SecBlock<T, A> operator+(const SecBlock<T, A> &t) |
|||
{ |
|||
SecBlock<T, A> result(m_size+t.m_size); |
|||
memcpy_s(result.m_ptr, result.m_size*sizeof(T), m_ptr, m_size*sizeof(T)); |
|||
memcpy_s(result.m_ptr+m_size, t.m_size*sizeof(T), t.m_ptr, t.m_size*sizeof(T)); |
|||
return result; |
|||
} |
|||
|
|||
bool operator==(const SecBlock<T, A> &t) const |
|||
{ |
|||
return m_size == t.m_size && VerifyBufsEqual(m_ptr, t.m_ptr, m_size*sizeof(T)); |
|||
} |
|||
|
|||
bool operator!=(const SecBlock<T, A> &t) const |
|||
{ |
|||
return !operator==(t); |
|||
} |
|||
|
|||
//! change size, without preserving contents
|
|||
void New(size_type newSize) |
|||
{ |
|||
m_ptr = m_alloc.reallocate(m_ptr, m_size, newSize, false); |
|||
m_size = newSize; |
|||
} |
|||
|
|||
//! change size and set contents to 0
|
|||
void CleanNew(size_type newSize) |
|||
{ |
|||
New(newSize); |
|||
memset_z(m_ptr, 0, m_size*sizeof(T)); |
|||
} |
|||
|
|||
//! change size only if newSize > current size. contents are preserved
|
|||
void Grow(size_type newSize) |
|||
{ |
|||
if (newSize > m_size) |
|||
{ |
|||
m_ptr = m_alloc.reallocate(m_ptr, m_size, newSize, true); |
|||
m_size = newSize; |
|||
} |
|||
} |
|||
|
|||
//! change size only if newSize > current size. contents are preserved and additional area is set to 0
|
|||
void CleanGrow(size_type newSize) |
|||
{ |
|||
if (newSize > m_size) |
|||
{ |
|||
m_ptr = m_alloc.reallocate(m_ptr, m_size, newSize, true); |
|||
memset(m_ptr+m_size, 0, (newSize-m_size)*sizeof(T)); |
|||
m_size = newSize; |
|||
} |
|||
} |
|||
|
|||
//! change size and preserve contents
|
|||
void resize(size_type newSize) |
|||
{ |
|||
m_ptr = m_alloc.reallocate(m_ptr, m_size, newSize, true); |
|||
m_size = newSize; |
|||
} |
|||
|
|||
//! swap contents and size with another SecBlock
|
|||
void swap(SecBlock<T, A> &b) |
|||
{ |
|||
std::swap(m_alloc, b.m_alloc); |
|||
std::swap(m_size, b.m_size); |
|||
std::swap(m_ptr, b.m_ptr); |
|||
} |
|||
|
|||
//private:
|
|||
A m_alloc; |
|||
size_type m_size; |
|||
T *m_ptr; |
|||
}; |
|||
|
|||
typedef SecBlock<byte> SecByteBlock; |
|||
typedef SecBlock<byte, AllocatorWithCleanup<byte, true> > AlignedSecByteBlock; |
|||
typedef SecBlock<word> SecWordBlock; |
|||
|
|||
//! a SecBlock with fixed size, allocated statically
|
|||
template <class T, unsigned int S, class A = FixedSizeAllocatorWithCleanup<T, S> > |
|||
class FixedSizeSecBlock : public SecBlock<T, A> |
|||
{ |
|||
public: |
|||
explicit FixedSizeSecBlock() : SecBlock<T, A>(S) {} |
|||
}; |
|||
|
|||
template <class T, unsigned int S, bool T_Align16 = true> |
|||
class FixedSizeAlignedSecBlock : public FixedSizeSecBlock<T, S, FixedSizeAllocatorWithCleanup<T, S, NullAllocator<T>, T_Align16> > |
|||
{ |
|||
}; |
|||
|
|||
//! a SecBlock that preallocates size S statically, and uses the heap when this size is exceeded
|
|||
template <class T, unsigned int S, class A = FixedSizeAllocatorWithCleanup<T, S, AllocatorWithCleanup<T> > > |
|||
class SecBlockWithHint : public SecBlock<T, A> |
|||
{ |
|||
public: |
|||
explicit SecBlockWithHint(size_t size) : SecBlock<T, A>(size) {} |
|||
}; |
|||
|
|||
template<class T, bool A, class U, bool B> |
|||
inline bool operator==(const CryptoPP::AllocatorWithCleanup<T, A>&, const CryptoPP::AllocatorWithCleanup<U, B>&) {return (true);} |
|||
template<class T, bool A, class U, bool B> |
|||
inline bool operator!=(const CryptoPP::AllocatorWithCleanup<T, A>&, const CryptoPP::AllocatorWithCleanup<U, B>&) {return (false);} |
|||
|
|||
NAMESPACE_END |
|||
|
|||
NAMESPACE_BEGIN(std) |
|||
template <class T, class A> |
|||
inline void swap(CryptoPP::SecBlock<T, A> &a, CryptoPP::SecBlock<T, A> &b) |
|||
{ |
|||
a.swap(b); |
|||
} |
|||
|
|||
#if defined(_STLP_DONT_SUPPORT_REBIND_MEMBER_TEMPLATE) || (defined(_STLPORT_VERSION) && !defined(_STLP_MEMBER_TEMPLATE_CLASSES)) |
|||
// working for STLport 5.1.3 and MSVC 6 SP5
|
|||
template <class _Tp1, class _Tp2> |
|||
inline CryptoPP::AllocatorWithCleanup<_Tp2>& |
|||
__stl_alloc_rebind(CryptoPP::AllocatorWithCleanup<_Tp1>& __a, const _Tp2*) |
|||
{ |
|||
return (CryptoPP::AllocatorWithCleanup<_Tp2>&)(__a); |
|||
} |
|||
#endif |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#endif |
|||
@ -1,899 +0,0 @@ |
|||
// sha.cpp - modified by Wei Dai from Steve Reid's public domain sha1.c
|
|||
|
|||
// Steve Reid implemented SHA-1. Wei Dai implemented SHA-2.
|
|||
// Both are in the public domain.
|
|||
|
|||
// use "cl /EP /P /DCRYPTOPP_GENERATE_X64_MASM sha.cpp" to generate MASM code
|
|||
|
|||
#include "pch.h" |
|||
|
|||
#ifndef CRYPTOPP_IMPORTS |
|||
#ifndef CRYPTOPP_GENERATE_X64_MASM |
|||
|
|||
#include "sha.h" |
|||
#include "misc.h" |
|||
#include "cpu.h" |
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
// start of Steve Reid's code
|
|||
|
|||
#define blk0(i) (W[i] = data[i]) |
|||
#define blk1(i) (W[i&15] = rotlFixed(W[(i+13)&15]^W[(i+8)&15]^W[(i+2)&15]^W[i&15],1)) |
|||
|
|||
void SHA1::InitState(HashWordType *state) |
|||
{ |
|||
state[0] = 0x67452301L; |
|||
state[1] = 0xEFCDAB89L; |
|||
state[2] = 0x98BADCFEL; |
|||
state[3] = 0x10325476L; |
|||
state[4] = 0xC3D2E1F0L; |
|||
} |
|||
|
|||
#define f1(x,y,z) (z^(x&(y^z))) |
|||
#define f2(x,y,z) (x^y^z) |
|||
#define f3(x,y,z) ((x&y)|(z&(x|y))) |
|||
#define f4(x,y,z) (x^y^z) |
|||
|
|||
/* (R0+R1), R2, R3, R4 are the different operations used in SHA1 */ |
|||
#define R0(v,w,x,y,z,i) z+=f1(w,x,y)+blk0(i)+0x5A827999+rotlFixed(v,5);w=rotlFixed(w,30); |
|||
#define R1(v,w,x,y,z,i) z+=f1(w,x,y)+blk1(i)+0x5A827999+rotlFixed(v,5);w=rotlFixed(w,30); |
|||
#define R2(v,w,x,y,z,i) z+=f2(w,x,y)+blk1(i)+0x6ED9EBA1+rotlFixed(v,5);w=rotlFixed(w,30); |
|||
#define R3(v,w,x,y,z,i) z+=f3(w,x,y)+blk1(i)+0x8F1BBCDC+rotlFixed(v,5);w=rotlFixed(w,30); |
|||
#define R4(v,w,x,y,z,i) z+=f4(w,x,y)+blk1(i)+0xCA62C1D6+rotlFixed(v,5);w=rotlFixed(w,30); |
|||
|
|||
void SHA1::Transform(word32 *state, const word32 *data) |
|||
{ |
|||
word32 W[16]; |
|||
/* Copy context->state[] to working vars */ |
|||
word32 a = state[0]; |
|||
word32 b = state[1]; |
|||
word32 c = state[2]; |
|||
word32 d = state[3]; |
|||
word32 e = state[4]; |
|||
/* 4 rounds of 20 operations each. Loop unrolled. */ |
|||
R0(a,b,c,d,e, 0); R0(e,a,b,c,d, 1); R0(d,e,a,b,c, 2); R0(c,d,e,a,b, 3); |
|||
R0(b,c,d,e,a, 4); R0(a,b,c,d,e, 5); R0(e,a,b,c,d, 6); R0(d,e,a,b,c, 7); |
|||
R0(c,d,e,a,b, 8); R0(b,c,d,e,a, 9); R0(a,b,c,d,e,10); R0(e,a,b,c,d,11); |
|||
R0(d,e,a,b,c,12); R0(c,d,e,a,b,13); R0(b,c,d,e,a,14); R0(a,b,c,d,e,15); |
|||
R1(e,a,b,c,d,16); R1(d,e,a,b,c,17); R1(c,d,e,a,b,18); R1(b,c,d,e,a,19); |
|||
R2(a,b,c,d,e,20); R2(e,a,b,c,d,21); R2(d,e,a,b,c,22); R2(c,d,e,a,b,23); |
|||
R2(b,c,d,e,a,24); R2(a,b,c,d,e,25); R2(e,a,b,c,d,26); R2(d,e,a,b,c,27); |
|||
R2(c,d,e,a,b,28); R2(b,c,d,e,a,29); R2(a,b,c,d,e,30); R2(e,a,b,c,d,31); |
|||
R2(d,e,a,b,c,32); R2(c,d,e,a,b,33); R2(b,c,d,e,a,34); R2(a,b,c,d,e,35); |
|||
R2(e,a,b,c,d,36); R2(d,e,a,b,c,37); R2(c,d,e,a,b,38); R2(b,c,d,e,a,39); |
|||
R3(a,b,c,d,e,40); R3(e,a,b,c,d,41); R3(d,e,a,b,c,42); R3(c,d,e,a,b,43); |
|||
R3(b,c,d,e,a,44); R3(a,b,c,d,e,45); R3(e,a,b,c,d,46); R3(d,e,a,b,c,47); |
|||
R3(c,d,e,a,b,48); R3(b,c,d,e,a,49); R3(a,b,c,d,e,50); R3(e,a,b,c,d,51); |
|||
R3(d,e,a,b,c,52); R3(c,d,e,a,b,53); R3(b,c,d,e,a,54); R3(a,b,c,d,e,55); |
|||
R3(e,a,b,c,d,56); R3(d,e,a,b,c,57); R3(c,d,e,a,b,58); R3(b,c,d,e,a,59); |
|||
R4(a,b,c,d,e,60); R4(e,a,b,c,d,61); R4(d,e,a,b,c,62); R4(c,d,e,a,b,63); |
|||
R4(b,c,d,e,a,64); R4(a,b,c,d,e,65); R4(e,a,b,c,d,66); R4(d,e,a,b,c,67); |
|||
R4(c,d,e,a,b,68); R4(b,c,d,e,a,69); R4(a,b,c,d,e,70); R4(e,a,b,c,d,71); |
|||
R4(d,e,a,b,c,72); R4(c,d,e,a,b,73); R4(b,c,d,e,a,74); R4(a,b,c,d,e,75); |
|||
R4(e,a,b,c,d,76); R4(d,e,a,b,c,77); R4(c,d,e,a,b,78); R4(b,c,d,e,a,79); |
|||
/* Add the working vars back into context.state[] */ |
|||
state[0] += a; |
|||
state[1] += b; |
|||
state[2] += c; |
|||
state[3] += d; |
|||
state[4] += e; |
|||
} |
|||
|
|||
// end of Steve Reid's code
|
|||
|
|||
// *************************************************************
|
|||
|
|||
void SHA224::InitState(HashWordType *state) |
|||
{ |
|||
static const word32 s[8] = {0xc1059ed8, 0x367cd507, 0x3070dd17, 0xf70e5939, 0xffc00b31, 0x68581511, 0x64f98fa7, 0xbefa4fa4}; |
|||
memcpy(state, s, sizeof(s)); |
|||
} |
|||
|
|||
void SHA256::InitState(HashWordType *state) |
|||
{ |
|||
static const word32 s[8] = {0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19}; |
|||
memcpy(state, s, sizeof(s)); |
|||
} |
|||
|
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
CRYPTOPP_ALIGN_DATA(16) extern const word32 SHA256_K[64] CRYPTOPP_SECTION_ALIGN16 = { |
|||
#else |
|||
extern const word32 SHA256_K[64] = { |
|||
#endif |
|||
0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, |
|||
0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, |
|||
0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, |
|||
0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, |
|||
0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, |
|||
0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, |
|||
0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, |
|||
0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, |
|||
0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, |
|||
0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, |
|||
0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, |
|||
0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, |
|||
0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, |
|||
0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, |
|||
0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, |
|||
0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2 |
|||
}; |
|||
|
|||
#endif // #ifndef CRYPTOPP_GENERATE_X64_MASM
|
|||
|
|||
#if defined(CRYPTOPP_X86_ASM_AVAILABLE) || defined(CRYPTOPP_GENERATE_X64_MASM) |
|||
|
|||
#pragma warning(disable: 4731) // frame pointer register 'ebp' modified by inline assembly code
|
|||
|
|||
static void CRYPTOPP_FASTCALL X86_SHA256_HashBlocks(word32 *state, const word32 *data, size_t len |
|||
#if defined(_MSC_VER) && (_MSC_VER == 1200) |
|||
, ... // VC60 workaround: prevent VC 6 from inlining this function
|
|||
#endif |
|||
) |
|||
{ |
|||
#if defined(_MSC_VER) && (_MSC_VER == 1200) |
|||
AS2(mov ecx, [state]) |
|||
AS2(mov edx, [data]) |
|||
#endif |
|||
|
|||
#define LOCALS_SIZE 8*4 + 16*4 + 4*WORD_SZ |
|||
#define H(i) [BASE+ASM_MOD(1024+7-(i),8)*4] |
|||
#define G(i) H(i+1) |
|||
#define F(i) H(i+2) |
|||
#define E(i) H(i+3) |
|||
#define D(i) H(i+4) |
|||
#define C(i) H(i+5) |
|||
#define B(i) H(i+6) |
|||
#define A(i) H(i+7) |
|||
#define Wt(i) BASE+8*4+ASM_MOD(1024+15-(i),16)*4 |
|||
#define Wt_2(i) Wt((i)-2) |
|||
#define Wt_15(i) Wt((i)-15) |
|||
#define Wt_7(i) Wt((i)-7) |
|||
#define K_END [BASE+8*4+16*4+0*WORD_SZ] |
|||
#define STATE_SAVE [BASE+8*4+16*4+1*WORD_SZ] |
|||
#define DATA_SAVE [BASE+8*4+16*4+2*WORD_SZ] |
|||
#define DATA_END [BASE+8*4+16*4+3*WORD_SZ] |
|||
#define Kt(i) WORD_REG(si)+(i)*4 |
|||
#if CRYPTOPP_BOOL_X86 |
|||
#define BASE esp+4 |
|||
#elif defined(__GNUC__) |
|||
#define BASE r8 |
|||
#else |
|||
#define BASE rsp |
|||
#endif |
|||
|
|||
#define RA0(i, edx, edi) \ |
|||
AS2( add edx, [Kt(i)] )\ |
|||
AS2( add edx, [Wt(i)] )\ |
|||
AS2( add edx, H(i) )\ |
|||
|
|||
#define RA1(i, edx, edi) |
|||
|
|||
#define RB0(i, edx, edi) |
|||
|
|||
#define RB1(i, edx, edi) \ |
|||
AS2( mov AS_REG_7d, [Wt_2(i)] )\ |
|||
AS2( mov edi, [Wt_15(i)])\ |
|||
AS2( mov ebx, AS_REG_7d )\ |
|||
AS2( shr AS_REG_7d, 10 )\ |
|||
AS2( ror ebx, 17 )\ |
|||
AS2( xor AS_REG_7d, ebx )\ |
|||
AS2( ror ebx, 2 )\ |
|||
AS2( xor ebx, AS_REG_7d )/* s1(W_t-2) */\ |
|||
AS2( add ebx, [Wt_7(i)])\ |
|||
AS2( mov AS_REG_7d, edi )\ |
|||
AS2( shr AS_REG_7d, 3 )\ |
|||
AS2( ror edi, 7 )\ |
|||
AS2( add ebx, [Wt(i)])/* s1(W_t-2) + W_t-7 + W_t-16 */\ |
|||
AS2( xor AS_REG_7d, edi )\ |
|||
AS2( add edx, [Kt(i)])\ |
|||
AS2( ror edi, 11 )\ |
|||
AS2( add edx, H(i) )\ |
|||
AS2( xor AS_REG_7d, edi )/* s0(W_t-15) */\ |
|||
AS2( add AS_REG_7d, ebx )/* W_t = s1(W_t-2) + W_t-7 + s0(W_t-15) W_t-16*/\ |
|||
AS2( mov [Wt(i)], AS_REG_7d)\ |
|||
AS2( add edx, AS_REG_7d )\ |
|||
|
|||
#define ROUND(i, r, eax, ecx, edi, edx)\ |
|||
/* in: edi = E */\ |
|||
/* unused: eax, ecx, temp: ebx, AS_REG_7d, out: edx = T1 */\ |
|||
AS2( mov edx, F(i) )\ |
|||
AS2( xor edx, G(i) )\ |
|||
AS2( and edx, edi )\ |
|||
AS2( xor edx, G(i) )/* Ch(E,F,G) = (G^(E&(F^G))) */\ |
|||
AS2( mov AS_REG_7d, edi )\ |
|||
AS2( ror edi, 6 )\ |
|||
AS2( ror AS_REG_7d, 25 )\ |
|||
RA##r(i, edx, edi )/* H + Wt + Kt + Ch(E,F,G) */\ |
|||
AS2( xor AS_REG_7d, edi )\ |
|||
AS2( ror edi, 5 )\ |
|||
AS2( xor AS_REG_7d, edi )/* S1(E) */\ |
|||
AS2( add edx, AS_REG_7d )/* T1 = S1(E) + Ch(E,F,G) + H + Wt + Kt */\ |
|||
RB##r(i, edx, edi )/* H + Wt + Kt + Ch(E,F,G) */\ |
|||
/* in: ecx = A, eax = B^C, edx = T1 */\ |
|||
/* unused: edx, temp: ebx, AS_REG_7d, out: eax = A, ecx = B^C, edx = E */\ |
|||
AS2( mov ebx, ecx )\ |
|||
AS2( xor ecx, B(i) )/* A^B */\ |
|||
AS2( and eax, ecx )\ |
|||
AS2( xor eax, B(i) )/* Maj(A,B,C) = B^((A^B)&(B^C) */\ |
|||
AS2( mov AS_REG_7d, ebx )\ |
|||
AS2( ror ebx, 2 )\ |
|||
AS2( add eax, edx )/* T1 + Maj(A,B,C) */\ |
|||
AS2( add edx, D(i) )\ |
|||
AS2( mov D(i), edx )\ |
|||
AS2( ror AS_REG_7d, 22 )\ |
|||
AS2( xor AS_REG_7d, ebx )\ |
|||
AS2( ror ebx, 11 )\ |
|||
AS2( xor AS_REG_7d, ebx )\ |
|||
AS2( add eax, AS_REG_7d )/* T1 + S0(A) + Maj(A,B,C) */\ |
|||
AS2( mov H(i), eax )\ |
|||
|
|||
#define SWAP_COPY(i) \ |
|||
AS2( mov WORD_REG(bx), [WORD_REG(dx)+i*WORD_SZ])\ |
|||
AS1( bswap WORD_REG(bx))\ |
|||
AS2( mov [Wt(i*(1+CRYPTOPP_BOOL_X64)+CRYPTOPP_BOOL_X64)], WORD_REG(bx)) |
|||
|
|||
#if defined(__GNUC__) |
|||
#if CRYPTOPP_BOOL_X64 |
|||
FixedSizeAlignedSecBlock<byte, LOCALS_SIZE> workspace; |
|||
#endif |
|||
__asm__ __volatile__ |
|||
( |
|||
#if CRYPTOPP_BOOL_X64 |
|||
"lea %4, %%r8;" |
|||
#endif |
|||
".intel_syntax noprefix;" |
|||
#elif defined(CRYPTOPP_GENERATE_X64_MASM) |
|||
ALIGN 8 |
|||
X86_SHA256_HashBlocks PROC FRAME |
|||
rex_push_reg rsi |
|||
push_reg rdi |
|||
push_reg rbx |
|||
push_reg rbp |
|||
alloc_stack(LOCALS_SIZE+8) |
|||
.endprolog |
|||
mov rdi, r8 |
|||
lea rsi, [?SHA256_K@CryptoPP@@3QBIB + 48*4] |
|||
#endif |
|||
|
|||
#if CRYPTOPP_BOOL_X86 |
|||
#ifndef __GNUC__ |
|||
AS2( mov edi, [len]) |
|||
AS2( lea WORD_REG(si), [SHA256_K+48*4]) |
|||
#endif |
|||
#if !defined(_MSC_VER) || (_MSC_VER < 1400) |
|||
AS_PUSH_IF86(bx) |
|||
#endif |
|||
|
|||
AS_PUSH_IF86(bp) |
|||
AS2( mov ebx, esp) |
|||
AS2( and esp, -16) |
|||
AS2( sub WORD_REG(sp), LOCALS_SIZE) |
|||
AS_PUSH_IF86(bx) |
|||
#endif |
|||
AS2( mov STATE_SAVE, WORD_REG(cx)) |
|||
AS2( mov DATA_SAVE, WORD_REG(dx)) |
|||
AS2( add WORD_REG(di), WORD_REG(dx)) |
|||
AS2( mov DATA_END, WORD_REG(di)) |
|||
AS2( mov K_END, WORD_REG(si)) |
|||
|
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
#if CRYPTOPP_BOOL_X86 |
|||
AS2( test edi, 1) |
|||
ASJ( jnz, 2, f) |
|||
#endif |
|||
AS2( movdqa xmm0, XMMWORD_PTR [WORD_REG(cx)+0*16]) |
|||
AS2( movdqa xmm1, XMMWORD_PTR [WORD_REG(cx)+1*16]) |
|||
#endif |
|||
|
|||
#if CRYPTOPP_BOOL_X86 |
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
ASJ( jmp, 0, f) |
|||
#endif |
|||
ASL(2) // non-SSE2
|
|||
AS2( mov esi, ecx) |
|||
AS2( lea edi, A(0)) |
|||
AS2( mov ecx, 8) |
|||
AS1( rep movsd) |
|||
AS2( mov esi, K_END) |
|||
ASJ( jmp, 3, f) |
|||
#endif |
|||
|
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
ASL(0) |
|||
AS2( movdqa E(0), xmm1) |
|||
AS2( movdqa A(0), xmm0) |
|||
#endif |
|||
#if CRYPTOPP_BOOL_X86 |
|||
ASL(3) |
|||
#endif |
|||
AS2( sub WORD_REG(si), 48*4) |
|||
SWAP_COPY(0) SWAP_COPY(1) SWAP_COPY(2) SWAP_COPY(3) |
|||
SWAP_COPY(4) SWAP_COPY(5) SWAP_COPY(6) SWAP_COPY(7) |
|||
#if CRYPTOPP_BOOL_X86 |
|||
SWAP_COPY(8) SWAP_COPY(9) SWAP_COPY(10) SWAP_COPY(11) |
|||
SWAP_COPY(12) SWAP_COPY(13) SWAP_COPY(14) SWAP_COPY(15) |
|||
#endif |
|||
AS2( mov edi, E(0)) // E
|
|||
AS2( mov eax, B(0)) // B
|
|||
AS2( xor eax, C(0)) // B^C
|
|||
AS2( mov ecx, A(0)) // A
|
|||
|
|||
ROUND(0, 0, eax, ecx, edi, edx) |
|||
ROUND(1, 0, ecx, eax, edx, edi) |
|||
ROUND(2, 0, eax, ecx, edi, edx) |
|||
ROUND(3, 0, ecx, eax, edx, edi) |
|||
ROUND(4, 0, eax, ecx, edi, edx) |
|||
ROUND(5, 0, ecx, eax, edx, edi) |
|||
ROUND(6, 0, eax, ecx, edi, edx) |
|||
ROUND(7, 0, ecx, eax, edx, edi) |
|||
ROUND(8, 0, eax, ecx, edi, edx) |
|||
ROUND(9, 0, ecx, eax, edx, edi) |
|||
ROUND(10, 0, eax, ecx, edi, edx) |
|||
ROUND(11, 0, ecx, eax, edx, edi) |
|||
ROUND(12, 0, eax, ecx, edi, edx) |
|||
ROUND(13, 0, ecx, eax, edx, edi) |
|||
ROUND(14, 0, eax, ecx, edi, edx) |
|||
ROUND(15, 0, ecx, eax, edx, edi) |
|||
|
|||
ASL(1) |
|||
AS2(add WORD_REG(si), 4*16) |
|||
ROUND(0, 1, eax, ecx, edi, edx) |
|||
ROUND(1, 1, ecx, eax, edx, edi) |
|||
ROUND(2, 1, eax, ecx, edi, edx) |
|||
ROUND(3, 1, ecx, eax, edx, edi) |
|||
ROUND(4, 1, eax, ecx, edi, edx) |
|||
ROUND(5, 1, ecx, eax, edx, edi) |
|||
ROUND(6, 1, eax, ecx, edi, edx) |
|||
ROUND(7, 1, ecx, eax, edx, edi) |
|||
ROUND(8, 1, eax, ecx, edi, edx) |
|||
ROUND(9, 1, ecx, eax, edx, edi) |
|||
ROUND(10, 1, eax, ecx, edi, edx) |
|||
ROUND(11, 1, ecx, eax, edx, edi) |
|||
ROUND(12, 1, eax, ecx, edi, edx) |
|||
ROUND(13, 1, ecx, eax, edx, edi) |
|||
ROUND(14, 1, eax, ecx, edi, edx) |
|||
ROUND(15, 1, ecx, eax, edx, edi) |
|||
AS2( cmp WORD_REG(si), K_END) |
|||
ASJ( jne, 1, b) |
|||
|
|||
AS2( mov WORD_REG(dx), DATA_SAVE) |
|||
AS2( add WORD_REG(dx), 64) |
|||
AS2( mov AS_REG_7, STATE_SAVE) |
|||
AS2( mov DATA_SAVE, WORD_REG(dx)) |
|||
|
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
#if CRYPTOPP_BOOL_X86 |
|||
AS2( test DWORD PTR DATA_END, 1) |
|||
ASJ( jnz, 4, f) |
|||
#endif |
|||
AS2( movdqa xmm1, XMMWORD_PTR [AS_REG_7+1*16]) |
|||
AS2( movdqa xmm0, XMMWORD_PTR [AS_REG_7+0*16]) |
|||
AS2( paddd xmm1, E(0)) |
|||
AS2( paddd xmm0, A(0)) |
|||
AS2( movdqa [AS_REG_7+1*16], xmm1) |
|||
AS2( movdqa [AS_REG_7+0*16], xmm0) |
|||
AS2( cmp WORD_REG(dx), DATA_END) |
|||
ASJ( jl, 0, b) |
|||
#endif |
|||
|
|||
#if CRYPTOPP_BOOL_X86 |
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
ASJ( jmp, 5, f) |
|||
ASL(4) // non-SSE2
|
|||
#endif |
|||
AS2( add [AS_REG_7+0*4], ecx) // A
|
|||
AS2( add [AS_REG_7+4*4], edi) // E
|
|||
AS2( mov eax, B(0)) |
|||
AS2( mov ebx, C(0)) |
|||
AS2( mov ecx, D(0)) |
|||
AS2( add [AS_REG_7+1*4], eax) |
|||
AS2( add [AS_REG_7+2*4], ebx) |
|||
AS2( add [AS_REG_7+3*4], ecx) |
|||
AS2( mov eax, F(0)) |
|||
AS2( mov ebx, G(0)) |
|||
AS2( mov ecx, H(0)) |
|||
AS2( add [AS_REG_7+5*4], eax) |
|||
AS2( add [AS_REG_7+6*4], ebx) |
|||
AS2( add [AS_REG_7+7*4], ecx) |
|||
AS2( mov ecx, AS_REG_7d) |
|||
AS2( cmp WORD_REG(dx), DATA_END) |
|||
ASJ( jl, 2, b) |
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE |
|||
ASL(5) |
|||
#endif |
|||
#endif |
|||
|
|||
AS_POP_IF86(sp) |
|||
AS_POP_IF86(bp) |
|||
#if !defined(_MSC_VER) || (_MSC_VER < 1400) |
|||
AS_POP_IF86(bx) |
|||
#endif |
|||
|
|||
#ifdef CRYPTOPP_GENERATE_X64_MASM |
|||
add rsp, LOCALS_SIZE+8 |
|||
pop rbp |
|||
pop rbx |
|||
pop rdi |
|||
pop rsi |
|||
ret |
|||
X86_SHA256_HashBlocks ENDP |
|||
#endif |
|||
|
|||
#ifdef __GNUC__ |
|||
".att_syntax prefix;" |
|||
: |
|||
: "c" (state), "d" (data), "S" (SHA256_K+48), "D" (len) |
|||
#if CRYPTOPP_BOOL_X64 |
|||
, "m" (workspace[0]) |
|||
#endif |
|||
: "memory", "cc", "%eax" |
|||
#if CRYPTOPP_BOOL_X64 |
|||
, "%rbx", "%r8" |
|||
#endif |
|||
); |
|||
#endif |
|||
} |
|||
|
|||
#endif // #if defined(CRYPTOPP_X86_ASM_AVAILABLE) || defined(CRYPTOPP_GENERATE_X64_MASM)
|
|||
|
|||
#ifndef CRYPTOPP_GENERATE_X64_MASM |
|||
|
|||
#ifdef CRYPTOPP_X64_MASM_AVAILABLE |
|||
extern "C" { |
|||
void CRYPTOPP_FASTCALL X86_SHA256_HashBlocks(word32 *state, const word32 *data, size_t len); |
|||
} |
|||
#endif |
|||
|
|||
#if defined(CRYPTOPP_X86_ASM_AVAILABLE) || defined(CRYPTOPP_X64_MASM_AVAILABLE) |
|||
|
|||
size_t SHA256::HashMultipleBlocks(const word32 *input, size_t length) |
|||
{ |
|||
X86_SHA256_HashBlocks(m_state, input, (length&(size_t(0)-BLOCKSIZE)) - !HasSSE2()); |
|||
return length % BLOCKSIZE; |
|||
} |
|||
|
|||
size_t SHA224::HashMultipleBlocks(const word32 *input, size_t length) |
|||
{ |
|||
X86_SHA256_HashBlocks(m_state, input, (length&(size_t(0)-BLOCKSIZE)) - !HasSSE2()); |
|||
return length % BLOCKSIZE; |
|||
} |
|||
|
|||
#endif |
|||
|
|||
#define blk2(i) (W[i&15]+=s1(W[(i-2)&15])+W[(i-7)&15]+s0(W[(i-15)&15])) |
|||
|
|||
#define Ch(x,y,z) (z^(x&(y^z))) |
|||
#define Maj(x,y,z) (y^((x^y)&(y^z))) |
|||
|
|||
#define a(i) T[(0-i)&7] |
|||
#define b(i) T[(1-i)&7] |
|||
#define c(i) T[(2-i)&7] |
|||
#define d(i) T[(3-i)&7] |
|||
#define e(i) T[(4-i)&7] |
|||
#define f(i) T[(5-i)&7] |
|||
#define g(i) T[(6-i)&7] |
|||
#define h(i) T[(7-i)&7] |
|||
|
|||
#define R(i) h(i)+=S1(e(i))+Ch(e(i),f(i),g(i))+SHA256_K[i+j]+(j?blk2(i):blk0(i));\ |
|||
d(i)+=h(i);h(i)+=S0(a(i))+Maj(a(i),b(i),c(i)) |
|||
|
|||
// for SHA256
|
|||
#define S0(x) (rotrFixed(x,2)^rotrFixed(x,13)^rotrFixed(x,22)) |
|||
#define S1(x) (rotrFixed(x,6)^rotrFixed(x,11)^rotrFixed(x,25)) |
|||
#define s0(x) (rotrFixed(x,7)^rotrFixed(x,18)^(x>>3)) |
|||
#define s1(x) (rotrFixed(x,17)^rotrFixed(x,19)^(x>>10)) |
|||
|
|||
void SHA256::Transform(word32 *state, const word32 *data) |
|||
{ |
|||
word32 W[16]; |
|||
#if defined(CRYPTOPP_X86_ASM_AVAILABLE) || defined(CRYPTOPP_X64_MASM_AVAILABLE) |
|||
// this byte reverse is a waste of time, but this function is only called by MDC
|
|||
ByteReverse(W, data, BLOCKSIZE); |
|||
X86_SHA256_HashBlocks(state, W, BLOCKSIZE - !HasSSE2()); |
|||
#else |
|||
word32 T[8]; |
|||
/* Copy context->state[] to working vars */ |
|||
memcpy(T, state, sizeof(T)); |
|||
/* 64 operations, partially loop unrolled */ |
|||
for (unsigned int j=0; j<64; j+=16) |
|||
{ |
|||
R( 0); R( 1); R( 2); R( 3); |
|||
R( 4); R( 5); R( 6); R( 7); |
|||
R( 8); R( 9); R(10); R(11); |
|||
R(12); R(13); R(14); R(15); |
|||
} |
|||
/* Add the working vars back into context.state[] */ |
|||
state[0] += a(0); |
|||
state[1] += b(0); |
|||
state[2] += c(0); |
|||
state[3] += d(0); |
|||
state[4] += e(0); |
|||
state[5] += f(0); |
|||
state[6] += g(0); |
|||
state[7] += h(0); |
|||
#endif |
|||
} |
|||
|
|||
/*
|
|||
// smaller but slower
|
|||
void SHA256::Transform(word32 *state, const word32 *data) |
|||
{ |
|||
word32 T[20]; |
|||
word32 W[32]; |
|||
unsigned int i = 0, j = 0; |
|||
word32 *t = T+8; |
|||
|
|||
memcpy(t, state, 8*4); |
|||
word32 e = t[4], a = t[0]; |
|||
|
|||
do |
|||
{ |
|||
word32 w = data[j]; |
|||
W[j] = w; |
|||
w += SHA256_K[j]; |
|||
w += t[7]; |
|||
w += S1(e); |
|||
w += Ch(e, t[5], t[6]); |
|||
e = t[3] + w; |
|||
t[3] = t[3+8] = e; |
|||
w += S0(t[0]); |
|||
a = w + Maj(a, t[1], t[2]); |
|||
t[-1] = t[7] = a; |
|||
--t; |
|||
++j; |
|||
if (j%8 == 0) |
|||
t += 8; |
|||
} while (j<16); |
|||
|
|||
do |
|||
{ |
|||
i = j&0xf; |
|||
word32 w = s1(W[i+16-2]) + s0(W[i+16-15]) + W[i] + W[i+16-7]; |
|||
W[i+16] = W[i] = w; |
|||
w += SHA256_K[j]; |
|||
w += t[7]; |
|||
w += S1(e); |
|||
w += Ch(e, t[5], t[6]); |
|||
e = t[3] + w; |
|||
t[3] = t[3+8] = e; |
|||
w += S0(t[0]); |
|||
a = w + Maj(a, t[1], t[2]); |
|||
t[-1] = t[7] = a; |
|||
|
|||
w = s1(W[(i+1)+16-2]) + s0(W[(i+1)+16-15]) + W[(i+1)] + W[(i+1)+16-7]; |
|||
W[(i+1)+16] = W[(i+1)] = w; |
|||
w += SHA256_K[j+1]; |
|||
w += (t-1)[7]; |
|||
w += S1(e); |
|||
w += Ch(e, (t-1)[5], (t-1)[6]); |
|||
e = (t-1)[3] + w; |
|||
(t-1)[3] = (t-1)[3+8] = e; |
|||
w += S0((t-1)[0]); |
|||
a = w + Maj(a, (t-1)[1], (t-1)[2]); |
|||
(t-1)[-1] = (t-1)[7] = a; |
|||
|
|||
t-=2; |
|||
j+=2; |
|||
if (j%8 == 0) |
|||
t += 8; |
|||
} while (j<64); |
|||
|
|||
state[0] += a; |
|||
state[1] += t[1]; |
|||
state[2] += t[2]; |
|||
state[3] += t[3]; |
|||
state[4] += e; |
|||
state[5] += t[5]; |
|||
state[6] += t[6]; |
|||
state[7] += t[7]; |
|||
} |
|||
*/ |
|||
|
|||
#undef S0 |
|||
#undef S1 |
|||
#undef s0 |
|||
#undef s1 |
|||
#undef R |
|||
|
|||
// *************************************************************
|
|||
|
|||
void SHA384::InitState(HashWordType *state) |
|||
{ |
|||
static const word64 s[8] = { |
|||
W64LIT(0xcbbb9d5dc1059ed8), W64LIT(0x629a292a367cd507), |
|||
W64LIT(0x9159015a3070dd17), W64LIT(0x152fecd8f70e5939), |
|||
W64LIT(0x67332667ffc00b31), W64LIT(0x8eb44a8768581511), |
|||
W64LIT(0xdb0c2e0d64f98fa7), W64LIT(0x47b5481dbefa4fa4)}; |
|||
memcpy(state, s, sizeof(s)); |
|||
} |
|||
|
|||
void SHA512::InitState(HashWordType *state) |
|||
{ |
|||
static const word64 s[8] = { |
|||
W64LIT(0x6a09e667f3bcc908), W64LIT(0xbb67ae8584caa73b), |
|||
W64LIT(0x3c6ef372fe94f82b), W64LIT(0xa54ff53a5f1d36f1), |
|||
W64LIT(0x510e527fade682d1), W64LIT(0x9b05688c2b3e6c1f), |
|||
W64LIT(0x1f83d9abfb41bd6b), W64LIT(0x5be0cd19137e2179)}; |
|||
memcpy(state, s, sizeof(s)); |
|||
} |
|||
|
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE && CRYPTOPP_BOOL_X86 |
|||
CRYPTOPP_ALIGN_DATA(16) static const word64 SHA512_K[80] CRYPTOPP_SECTION_ALIGN16 = { |
|||
#else |
|||
static const word64 SHA512_K[80] = { |
|||
#endif |
|||
W64LIT(0x428a2f98d728ae22), W64LIT(0x7137449123ef65cd), |
|||
W64LIT(0xb5c0fbcfec4d3b2f), W64LIT(0xe9b5dba58189dbbc), |
|||
W64LIT(0x3956c25bf348b538), W64LIT(0x59f111f1b605d019), |
|||
W64LIT(0x923f82a4af194f9b), W64LIT(0xab1c5ed5da6d8118), |
|||
W64LIT(0xd807aa98a3030242), W64LIT(0x12835b0145706fbe), |
|||
W64LIT(0x243185be4ee4b28c), W64LIT(0x550c7dc3d5ffb4e2), |
|||
W64LIT(0x72be5d74f27b896f), W64LIT(0x80deb1fe3b1696b1), |
|||
W64LIT(0x9bdc06a725c71235), W64LIT(0xc19bf174cf692694), |
|||
W64LIT(0xe49b69c19ef14ad2), W64LIT(0xefbe4786384f25e3), |
|||
W64LIT(0x0fc19dc68b8cd5b5), W64LIT(0x240ca1cc77ac9c65), |
|||
W64LIT(0x2de92c6f592b0275), W64LIT(0x4a7484aa6ea6e483), |
|||
W64LIT(0x5cb0a9dcbd41fbd4), W64LIT(0x76f988da831153b5), |
|||
W64LIT(0x983e5152ee66dfab), W64LIT(0xa831c66d2db43210), |
|||
W64LIT(0xb00327c898fb213f), W64LIT(0xbf597fc7beef0ee4), |
|||
W64LIT(0xc6e00bf33da88fc2), W64LIT(0xd5a79147930aa725), |
|||
W64LIT(0x06ca6351e003826f), W64LIT(0x142929670a0e6e70), |
|||
W64LIT(0x27b70a8546d22ffc), W64LIT(0x2e1b21385c26c926), |
|||
W64LIT(0x4d2c6dfc5ac42aed), W64LIT(0x53380d139d95b3df), |
|||
W64LIT(0x650a73548baf63de), W64LIT(0x766a0abb3c77b2a8), |
|||
W64LIT(0x81c2c92e47edaee6), W64LIT(0x92722c851482353b), |
|||
W64LIT(0xa2bfe8a14cf10364), W64LIT(0xa81a664bbc423001), |
|||
W64LIT(0xc24b8b70d0f89791), W64LIT(0xc76c51a30654be30), |
|||
W64LIT(0xd192e819d6ef5218), W64LIT(0xd69906245565a910), |
|||
W64LIT(0xf40e35855771202a), W64LIT(0x106aa07032bbd1b8), |
|||
W64LIT(0x19a4c116b8d2d0c8), W64LIT(0x1e376c085141ab53), |
|||
W64LIT(0x2748774cdf8eeb99), W64LIT(0x34b0bcb5e19b48a8), |
|||
W64LIT(0x391c0cb3c5c95a63), W64LIT(0x4ed8aa4ae3418acb), |
|||
W64LIT(0x5b9cca4f7763e373), W64LIT(0x682e6ff3d6b2b8a3), |
|||
W64LIT(0x748f82ee5defb2fc), W64LIT(0x78a5636f43172f60), |
|||
W64LIT(0x84c87814a1f0ab72), W64LIT(0x8cc702081a6439ec), |
|||
W64LIT(0x90befffa23631e28), W64LIT(0xa4506cebde82bde9), |
|||
W64LIT(0xbef9a3f7b2c67915), W64LIT(0xc67178f2e372532b), |
|||
W64LIT(0xca273eceea26619c), W64LIT(0xd186b8c721c0c207), |
|||
W64LIT(0xeada7dd6cde0eb1e), W64LIT(0xf57d4f7fee6ed178), |
|||
W64LIT(0x06f067aa72176fba), W64LIT(0x0a637dc5a2c898a6), |
|||
W64LIT(0x113f9804bef90dae), W64LIT(0x1b710b35131c471b), |
|||
W64LIT(0x28db77f523047d84), W64LIT(0x32caab7b40c72493), |
|||
W64LIT(0x3c9ebe0a15c9bebc), W64LIT(0x431d67c49c100d4c), |
|||
W64LIT(0x4cc5d4becb3e42b6), W64LIT(0x597f299cfc657e2a), |
|||
W64LIT(0x5fcb6fab3ad6faec), W64LIT(0x6c44198c4a475817) |
|||
}; |
|||
|
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE && CRYPTOPP_BOOL_X86 |
|||
// put assembly version in separate function, otherwise MSVC 2005 SP1 doesn't generate correct code for the non-assembly version
|
|||
CRYPTOPP_NAKED static void CRYPTOPP_FASTCALL SHA512_SSE2_Transform(word64 *state, const word64 *data) |
|||
{ |
|||
#ifdef __GNUC__ |
|||
__asm__ __volatile__ |
|||
( |
|||
".intel_syntax noprefix;" |
|||
AS1( push ebx) |
|||
AS2( mov ebx, eax) |
|||
#else |
|||
AS1( push ebx) |
|||
AS1( push esi) |
|||
AS1( push edi) |
|||
AS2( lea ebx, SHA512_K) |
|||
#endif |
|||
|
|||
AS2( mov eax, esp) |
|||
AS2( and esp, 0xfffffff0) |
|||
AS2( sub esp, 27*16) // 17*16 for expanded data, 20*8 for state
|
|||
AS1( push eax) |
|||
AS2( xor eax, eax) |
|||
AS2( lea edi, [esp+4+8*8]) // start at middle of state buffer. will decrement pointer each round to avoid copying
|
|||
AS2( lea esi, [esp+4+20*8+8]) // 16-byte alignment, then add 8
|
|||
|
|||
AS2( movdqa xmm0, [ecx+0*16]) |
|||
AS2( movdq2q mm4, xmm0) |
|||
AS2( movdqa [edi+0*16], xmm0) |
|||
AS2( movdqa xmm0, [ecx+1*16]) |
|||
AS2( movdqa [edi+1*16], xmm0) |
|||
AS2( movdqa xmm0, [ecx+2*16]) |
|||
AS2( movdq2q mm5, xmm0) |
|||
AS2( movdqa [edi+2*16], xmm0) |
|||
AS2( movdqa xmm0, [ecx+3*16]) |
|||
AS2( movdqa [edi+3*16], xmm0) |
|||
ASJ( jmp, 0, f) |
|||
|
|||
#define SSE2_S0_S1(r, a, b, c) \ |
|||
AS2( movq mm6, r)\ |
|||
AS2( psrlq r, a)\ |
|||
AS2( movq mm7, r)\ |
|||
AS2( psllq mm6, 64-c)\ |
|||
AS2( pxor mm7, mm6)\ |
|||
AS2( psrlq r, b-a)\ |
|||
AS2( pxor mm7, r)\ |
|||
AS2( psllq mm6, c-b)\ |
|||
AS2( pxor mm7, mm6)\ |
|||
AS2( psrlq r, c-b)\ |
|||
AS2( pxor r, mm7)\ |
|||
AS2( psllq mm6, b-a)\ |
|||
AS2( pxor r, mm6) |
|||
|
|||
#define SSE2_s0(r, a, b, c) \ |
|||
AS2( movdqa xmm6, r)\ |
|||
AS2( psrlq r, a)\ |
|||
AS2( movdqa xmm7, r)\ |
|||
AS2( psllq xmm6, 64-c)\ |
|||
AS2( pxor xmm7, xmm6)\ |
|||
AS2( psrlq r, b-a)\ |
|||
AS2( pxor xmm7, r)\ |
|||
AS2( psrlq r, c-b)\ |
|||
AS2( pxor r, xmm7)\ |
|||
AS2( psllq xmm6, c-a)\ |
|||
AS2( pxor r, xmm6) |
|||
|
|||
#define SSE2_s1(r, a, b, c) \ |
|||
AS2( movdqa xmm6, r)\ |
|||
AS2( psrlq r, a)\ |
|||
AS2( movdqa xmm7, r)\ |
|||
AS2( psllq xmm6, 64-c)\ |
|||
AS2( pxor xmm7, xmm6)\ |
|||
AS2( psrlq r, b-a)\ |
|||
AS2( pxor xmm7, r)\ |
|||
AS2( psllq xmm6, c-b)\ |
|||
AS2( pxor xmm7, xmm6)\ |
|||
AS2( psrlq r, c-b)\ |
|||
AS2( pxor r, xmm7) |
|||
|
|||
ASL(SHA512_Round) |
|||
// k + w is in mm0, a is in mm4, e is in mm5
|
|||
AS2( paddq mm0, [edi+7*8]) // h
|
|||
AS2( movq mm2, [edi+5*8]) // f
|
|||
AS2( movq mm3, [edi+6*8]) // g
|
|||
AS2( pxor mm2, mm3) |
|||
AS2( pand mm2, mm5) |
|||
SSE2_S0_S1(mm5,14,18,41) |
|||
AS2( pxor mm2, mm3) |
|||
AS2( paddq mm0, mm2) // h += Ch(e,f,g)
|
|||
AS2( paddq mm5, mm0) // h += S1(e)
|
|||
AS2( movq mm2, [edi+1*8]) // b
|
|||
AS2( movq mm1, mm2) |
|||
AS2( por mm2, mm4) |
|||
AS2( pand mm2, [edi+2*8]) // c
|
|||
AS2( pand mm1, mm4) |
|||
AS2( por mm1, mm2) |
|||
AS2( paddq mm1, mm5) // temp = h + Maj(a,b,c)
|
|||
AS2( paddq mm5, [edi+3*8]) // e = d + h
|
|||
AS2( movq [edi+3*8], mm5) |
|||
AS2( movq [edi+11*8], mm5) |
|||
SSE2_S0_S1(mm4,28,34,39) // S0(a)
|
|||
AS2( paddq mm4, mm1) // a = temp + S0(a)
|
|||
AS2( movq [edi-8], mm4) |
|||
AS2( movq [edi+7*8], mm4) |
|||
AS1( ret) |
|||
|
|||
// first 16 rounds
|
|||
ASL(0) |
|||
AS2( movq mm0, [edx+eax*8]) |
|||
AS2( movq [esi+eax*8], mm0) |
|||
AS2( movq [esi+eax*8+16*8], mm0) |
|||
AS2( paddq mm0, [ebx+eax*8]) |
|||
ASC( call, SHA512_Round) |
|||
AS1( inc eax) |
|||
AS2( sub edi, 8) |
|||
AS2( test eax, 7) |
|||
ASJ( jnz, 0, b) |
|||
AS2( add edi, 8*8) |
|||
AS2( cmp eax, 16) |
|||
ASJ( jne, 0, b) |
|||
|
|||
// rest of the rounds
|
|||
AS2( movdqu xmm0, [esi+(16-2)*8]) |
|||
ASL(1) |
|||
// data expansion, W[i-2] already in xmm0
|
|||
AS2( movdqu xmm3, [esi]) |
|||
AS2( paddq xmm3, [esi+(16-7)*8]) |
|||
AS2( movdqa xmm2, [esi+(16-15)*8]) |
|||
SSE2_s1(xmm0, 6, 19, 61) |
|||
AS2( paddq xmm0, xmm3) |
|||
SSE2_s0(xmm2, 1, 7, 8) |
|||
AS2( paddq xmm0, xmm2) |
|||
AS2( movdq2q mm0, xmm0) |
|||
AS2( movhlps xmm1, xmm0) |
|||
AS2( paddq mm0, [ebx+eax*8]) |
|||
AS2( movlps [esi], xmm0) |
|||
AS2( movlps [esi+8], xmm1) |
|||
AS2( movlps [esi+8*16], xmm0) |
|||
AS2( movlps [esi+8*17], xmm1) |
|||
// 2 rounds
|
|||
ASC( call, SHA512_Round) |
|||
AS2( sub edi, 8) |
|||
AS2( movdq2q mm0, xmm1) |
|||
AS2( paddq mm0, [ebx+eax*8+8]) |
|||
ASC( call, SHA512_Round) |
|||
// update indices and loop
|
|||
AS2( add esi, 16) |
|||
AS2( add eax, 2) |
|||
AS2( sub edi, 8) |
|||
AS2( test eax, 7) |
|||
ASJ( jnz, 1, b) |
|||
// do housekeeping every 8 rounds
|
|||
AS2( mov esi, 0xf) |
|||
AS2( and esi, eax) |
|||
AS2( lea esi, [esp+4+20*8+8+esi*8]) |
|||
AS2( add edi, 8*8) |
|||
AS2( cmp eax, 80) |
|||
ASJ( jne, 1, b) |
|||
|
|||
#define SSE2_CombineState(i) \ |
|||
AS2( movdqa xmm0, [edi+i*16])\ |
|||
AS2( paddq xmm0, [ecx+i*16])\ |
|||
AS2( movdqa [ecx+i*16], xmm0) |
|||
|
|||
SSE2_CombineState(0) |
|||
SSE2_CombineState(1) |
|||
SSE2_CombineState(2) |
|||
SSE2_CombineState(3) |
|||
|
|||
AS1( pop esp) |
|||
AS1( emms) |
|||
|
|||
#if defined(__GNUC__) |
|||
AS1( pop ebx) |
|||
".att_syntax prefix;" |
|||
: |
|||
: "a" (SHA512_K), "c" (state), "d" (data) |
|||
: "%esi", "%edi", "memory", "cc" |
|||
); |
|||
#else |
|||
AS1( pop edi) |
|||
AS1( pop esi) |
|||
AS1( pop ebx) |
|||
AS1( ret) |
|||
#endif |
|||
} |
|||
#endif // #if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE
|
|||
|
|||
void SHA512::Transform(word64 *state, const word64 *data) |
|||
{ |
|||
#if CRYPTOPP_BOOL_SSE2_ASM_AVAILABLE && CRYPTOPP_BOOL_X86 |
|||
if (HasSSE2()) |
|||
{ |
|||
SHA512_SSE2_Transform(state, data); |
|||
return; |
|||
} |
|||
#endif |
|||
|
|||
#define S0(x) (rotrFixed(x,28)^rotrFixed(x,34)^rotrFixed(x,39)) |
|||
#define S1(x) (rotrFixed(x,14)^rotrFixed(x,18)^rotrFixed(x,41)) |
|||
#define s0(x) (rotrFixed(x,1)^rotrFixed(x,8)^(x>>7)) |
|||
#define s1(x) (rotrFixed(x,19)^rotrFixed(x,61)^(x>>6)) |
|||
|
|||
#define R(i) h(i)+=S1(e(i))+Ch(e(i),f(i),g(i))+SHA512_K[i+j]+(j?blk2(i):blk0(i));\ |
|||
d(i)+=h(i);h(i)+=S0(a(i))+Maj(a(i),b(i),c(i)) |
|||
|
|||
word64 W[16]; |
|||
word64 T[8]; |
|||
/* Copy context->state[] to working vars */ |
|||
memcpy(T, state, sizeof(T)); |
|||
/* 80 operations, partially loop unrolled */ |
|||
for (unsigned int j=0; j<80; j+=16) |
|||
{ |
|||
R( 0); R( 1); R( 2); R( 3); |
|||
R( 4); R( 5); R( 6); R( 7); |
|||
R( 8); R( 9); R(10); R(11); |
|||
R(12); R(13); R(14); R(15); |
|||
} |
|||
/* Add the working vars back into context.state[] */ |
|||
state[0] += a(0); |
|||
state[1] += b(0); |
|||
state[2] += c(0); |
|||
state[3] += d(0); |
|||
state[4] += e(0); |
|||
state[5] += f(0); |
|||
state[6] += g(0); |
|||
state[7] += h(0); |
|||
} |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#endif // #ifndef CRYPTOPP_GENERATE_X64_MASM
|
|||
#endif // #ifndef CRYPTOPP_IMPORTS
|
|||
@ -1,63 +0,0 @@ |
|||
#ifndef CRYPTOPP_SHA_H |
|||
#define CRYPTOPP_SHA_H |
|||
|
|||
#include "iterhash.h" |
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
/// <a href="http://www.weidai.com/scan-mirror/md.html#SHA-1">SHA-1</a>
|
|||
class CRYPTOPP_DLL SHA1 : public IteratedHashWithStaticTransform<word32, BigEndian, 64, 20, SHA1> |
|||
{ |
|||
public: |
|||
static void CRYPTOPP_API InitState(HashWordType *state); |
|||
static void CRYPTOPP_API Transform(word32 *digest, const word32 *data); |
|||
static const char * CRYPTOPP_API StaticAlgorithmName() {return "SHA-1";} |
|||
}; |
|||
|
|||
typedef SHA1 SHA; // for backwards compatibility
|
|||
|
|||
//! implements the SHA-256 standard
|
|||
class CRYPTOPP_DLL SHA256 : public IteratedHashWithStaticTransform<word32, BigEndian, 64, 32, SHA256, 32, true> |
|||
{ |
|||
public: |
|||
#if defined(CRYPTOPP_X86_ASM_AVAILABLE) || defined(CRYPTOPP_X64_MASM_AVAILABLE) |
|||
size_t HashMultipleBlocks(const word32 *input, size_t length); |
|||
#endif |
|||
static void CRYPTOPP_API InitState(HashWordType *state); |
|||
static void CRYPTOPP_API Transform(word32 *digest, const word32 *data); |
|||
static const char * CRYPTOPP_API StaticAlgorithmName() {return "SHA-256";} |
|||
}; |
|||
|
|||
//! implements the SHA-224 standard
|
|||
class CRYPTOPP_DLL SHA224 : public IteratedHashWithStaticTransform<word32, BigEndian, 64, 32, SHA224, 28, true> |
|||
{ |
|||
public: |
|||
#if defined(CRYPTOPP_X86_ASM_AVAILABLE) || defined(CRYPTOPP_X64_MASM_AVAILABLE) |
|||
size_t HashMultipleBlocks(const word32 *input, size_t length); |
|||
#endif |
|||
static void CRYPTOPP_API InitState(HashWordType *state); |
|||
static void CRYPTOPP_API Transform(word32 *digest, const word32 *data) {SHA256::Transform(digest, data);} |
|||
static const char * CRYPTOPP_API StaticAlgorithmName() {return "SHA-224";} |
|||
}; |
|||
|
|||
//! implements the SHA-512 standard
|
|||
class CRYPTOPP_DLL SHA512 : public IteratedHashWithStaticTransform<word64, BigEndian, 128, 64, SHA512, 64, CRYPTOPP_BOOL_X86> |
|||
{ |
|||
public: |
|||
static void CRYPTOPP_API InitState(HashWordType *state); |
|||
static void CRYPTOPP_API Transform(word64 *digest, const word64 *data); |
|||
static const char * CRYPTOPP_API StaticAlgorithmName() {return "SHA-512";} |
|||
}; |
|||
|
|||
//! implements the SHA-384 standard
|
|||
class CRYPTOPP_DLL SHA384 : public IteratedHashWithStaticTransform<word64, BigEndian, 128, 64, SHA384, 48, CRYPTOPP_BOOL_X86> |
|||
{ |
|||
public: |
|||
static void CRYPTOPP_API InitState(HashWordType *state); |
|||
static void CRYPTOPP_API Transform(word64 *digest, const word64 *data) {SHA512::Transform(digest, data);} |
|||
static const char * CRYPTOPP_API StaticAlgorithmName() {return "SHA-384";} |
|||
}; |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#endif |
|||
@ -1 +0,0 @@ |
|||
|
|||
@ -1,223 +0,0 @@ |
|||
#ifndef CRYPTOPP_SMARTPTR_H |
|||
#define CRYPTOPP_SMARTPTR_H |
|||
|
|||
#include "config.h" |
|||
#include <algorithm> |
|||
|
|||
NAMESPACE_BEGIN(CryptoPP) |
|||
|
|||
template <class T> class simple_ptr |
|||
{ |
|||
public: |
|||
simple_ptr() : m_p(NULL) {} |
|||
~simple_ptr() {delete m_p;} |
|||
T *m_p; |
|||
}; |
|||
|
|||
template <class T> class member_ptr |
|||
{ |
|||
public: |
|||
explicit member_ptr(T *p = NULL) : m_p(p) {} |
|||
|
|||
~member_ptr(); |
|||
|
|||
const T& operator*() const { return *m_p; } |
|||
T& operator*() { return *m_p; } |
|||
|
|||
const T* operator->() const { return m_p; } |
|||
T* operator->() { return m_p; } |
|||
|
|||
const T* get() const { return m_p; } |
|||
T* get() { return m_p; } |
|||
|
|||
T* release() |
|||
{ |
|||
T *old_p = m_p; |
|||
m_p = 0; |
|||
return old_p; |
|||
} |
|||
|
|||
void reset(T *p = 0); |
|||
|
|||
protected: |
|||
member_ptr(const member_ptr<T>& rhs); // copy not allowed
|
|||
void operator=(const member_ptr<T>& rhs); // assignment not allowed
|
|||
|
|||
T *m_p; |
|||
}; |
|||
|
|||
template <class T> member_ptr<T>::~member_ptr() {delete m_p;} |
|||
template <class T> void member_ptr<T>::reset(T *p) {delete m_p; m_p = p;} |
|||
|
|||
// ********************************************************
|
|||
|
|||
template<class T> class value_ptr : public member_ptr<T> |
|||
{ |
|||
public: |
|||
value_ptr(const T &obj) : member_ptr<T>(new T(obj)) {} |
|||
value_ptr(T *p = NULL) : member_ptr<T>(p) {} |
|||
value_ptr(const value_ptr<T>& rhs) |
|||
: member_ptr<T>(rhs.m_p ? new T(*rhs.m_p) : NULL) {} |
|||
|
|||
value_ptr<T>& operator=(const value_ptr<T>& rhs); |
|||
bool operator==(const value_ptr<T>& rhs) |
|||
{ |
|||
return (!this->m_p && !rhs.m_p) || (this->m_p && rhs.m_p && *this->m_p == *rhs.m_p); |
|||
} |
|||
}; |
|||
|
|||
template <class T> value_ptr<T>& value_ptr<T>::operator=(const value_ptr<T>& rhs) |
|||
{ |
|||
T *old_p = this->m_p; |
|||
this->m_p = rhs.m_p ? new T(*rhs.m_p) : NULL; |
|||
delete old_p; |
|||
return *this; |
|||
} |
|||
|
|||
// ********************************************************
|
|||
|
|||
template<class T> class clonable_ptr : public member_ptr<T> |
|||
{ |
|||
public: |
|||
clonable_ptr(const T &obj) : member_ptr<T>(obj.Clone()) {} |
|||
clonable_ptr(T *p = NULL) : member_ptr<T>(p) {} |
|||
clonable_ptr(const clonable_ptr<T>& rhs) |
|||
: member_ptr<T>(rhs.m_p ? rhs.m_p->Clone() : NULL) {} |
|||
|
|||
clonable_ptr<T>& operator=(const clonable_ptr<T>& rhs); |
|||
}; |
|||
|
|||
template <class T> clonable_ptr<T>& clonable_ptr<T>::operator=(const clonable_ptr<T>& rhs) |
|||
{ |
|||
T *old_p = this->m_p; |
|||
this->m_p = rhs.m_p ? rhs.m_p->Clone() : NULL; |
|||
delete old_p; |
|||
return *this; |
|||
} |
|||
|
|||
// ********************************************************
|
|||
|
|||
template<class T> class counted_ptr |
|||
{ |
|||
public: |
|||
explicit counted_ptr(T *p = 0); |
|||
counted_ptr(const T &r) : m_p(0) {attach(r);} |
|||
counted_ptr(const counted_ptr<T>& rhs); |
|||
|
|||
~counted_ptr(); |
|||
|
|||
const T& operator*() const { return *m_p; } |
|||
T& operator*() { return *m_p; } |
|||
|
|||
const T* operator->() const { return m_p; } |
|||
T* operator->() { return get(); } |
|||
|
|||
const T* get() const { return m_p; } |
|||
T* get(); |
|||
|
|||
void attach(const T &p); |
|||
|
|||
counted_ptr<T> & operator=(const counted_ptr<T>& rhs); |
|||
|
|||
private: |
|||
T *m_p; |
|||
}; |
|||
|
|||
template <class T> counted_ptr<T>::counted_ptr(T *p) |
|||
: m_p(p) |
|||
{ |
|||
if (m_p) |
|||
m_p->m_referenceCount = 1; |
|||
} |
|||
|
|||
template <class T> counted_ptr<T>::counted_ptr(const counted_ptr<T>& rhs) |
|||
: m_p(rhs.m_p) |
|||
{ |
|||
if (m_p) |
|||
m_p->m_referenceCount++; |
|||
} |
|||
|
|||
template <class T> counted_ptr<T>::~counted_ptr() |
|||
{ |
|||
if (m_p && --m_p->m_referenceCount == 0) |
|||
delete m_p; |
|||
} |
|||
|
|||
template <class T> void counted_ptr<T>::attach(const T &r) |
|||
{ |
|||
if (m_p && --m_p->m_referenceCount == 0) |
|||
delete m_p; |
|||
if (r.m_referenceCount == 0) |
|||
{ |
|||
m_p = r.clone(); |
|||
m_p->m_referenceCount = 1; |
|||
} |
|||
else |
|||
{ |
|||
m_p = const_cast<T *>(&r); |
|||
m_p->m_referenceCount++; |
|||
} |
|||
} |
|||
|
|||
template <class T> T* counted_ptr<T>::get() |
|||
{ |
|||
if (m_p && m_p->m_referenceCount > 1) |
|||
{ |
|||
T *temp = m_p->clone(); |
|||
m_p->m_referenceCount--; |
|||
m_p = temp; |
|||
m_p->m_referenceCount = 1; |
|||
} |
|||
return m_p; |
|||
} |
|||
|
|||
template <class T> counted_ptr<T> & counted_ptr<T>::operator=(const counted_ptr<T>& rhs) |
|||
{ |
|||
if (m_p != rhs.m_p) |
|||
{ |
|||
if (m_p && --m_p->m_referenceCount == 0) |
|||
delete m_p; |
|||
m_p = rhs.m_p; |
|||
if (m_p) |
|||
m_p->m_referenceCount++; |
|||
} |
|||
return *this; |
|||
} |
|||
|
|||
// ********************************************************
|
|||
|
|||
template <class T> class vector_member_ptrs |
|||
{ |
|||
public: |
|||
vector_member_ptrs(size_t size=0) |
|||
: m_size(size), m_ptr(new member_ptr<T>[size]) {} |
|||
~vector_member_ptrs() |
|||
{delete [] this->m_ptr;} |
|||
|
|||
member_ptr<T>& operator[](size_t index) |
|||
{assert(index<this->m_size); return this->m_ptr[index];} |
|||
const member_ptr<T>& operator[](size_t index) const |
|||
{assert(index<this->m_size); return this->m_ptr[index];} |
|||
|
|||
size_t size() const {return this->m_size;} |
|||
void resize(size_t newSize) |
|||
{ |
|||
member_ptr<T> *newPtr = new member_ptr<T>[newSize]; |
|||
for (size_t i=0; i<this->m_size && i<newSize; i++) |
|||
newPtr[i].reset(this->m_ptr[i].release()); |
|||
delete [] this->m_ptr; |
|||
this->m_size = newSize; |
|||
this->m_ptr = newPtr; |
|||
} |
|||
|
|||
private: |
|||
vector_member_ptrs(const vector_member_ptrs<T> &c); // copy not allowed
|
|||
void operator=(const vector_member_ptrs<T> &x); // assignment not allowed
|
|||
|
|||
size_t m_size; |
|||
member_ptr<T> *m_ptr; |
|||
}; |
|||
|
|||
NAMESPACE_END |
|||
|
|||
#endif |
|||
@ -1,27 +0,0 @@ |
|||
#ifndef CRYPTOPP_STDCPP_H |
|||
#define CRYPTOPP_STDCPP_H |
|||
|
|||
#include <stddef.h> |
|||
#include <assert.h> |
|||
#include <limits.h> |
|||
#include <memory> |
|||
#include <string> |
|||
#include <exception> |
|||
#include <typeinfo> |
|||
|
|||
|
|||
#ifdef _MSC_VER |
|||
#include <string.h> // CodeWarrior doesn't have memory.h |
|||
#include <algorithm> |
|||
#include <map> |
|||
#include <vector> |
|||
|
|||
// re-disable this
|
|||
#pragma warning(disable: 4231) |
|||
#endif |
|||
|
|||
#if defined(_MSC_VER) && defined(_CRTAPI1) |
|||
#define CRYPTOPP_MSVCRT6 |
|||
#endif |
|||
|
|||
#endif |
|||
@ -0,0 +1,35 @@ |
|||
#include <boost/test/unit_test.hpp> |
|||
|
|||
#include "../uint256.h" |
|||
|
|||
extern void SHA256Transform(void* pstate, void* pinput, const void* pinit); |
|||
|
|||
BOOST_AUTO_TEST_SUITE(miner_tests) |
|||
|
|||
BOOST_AUTO_TEST_CASE(sha256transform_equality) |
|||
{ |
|||
unsigned int pSHA256InitState[8] = {0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19}; |
|||
|
|||
|
|||
unsigned char pstate[32]; |
|||
unsigned char pinput[32]; |
|||
|
|||
int i; |
|||
|
|||
for (i = 0; i < 32; i++) { |
|||
pinput[i] = i; |
|||
pstate[i] = 0; |
|||
} |
|||
|
|||
uint256 hash; |
|||
|
|||
SHA256Transform(&hash, pinput, pSHA256InitState); |
|||
|
|||
BOOST_TEST_MESSAGE(hash.GetHex()); |
|||
|
|||
uint256 hash_reference("0x2df5e1c65ef9f8cde240d23cae2ec036d31a15ec64bc68f64be242b1da6631f3"); |
|||
|
|||
BOOST_CHECK(hash == hash_reference); |
|||
} |
|||
|
|||
BOOST_AUTO_TEST_SUITE_END() |
|||
Loading…
Reference in new issue