/src/botan/src/lib/hash/mdx_hash/mdx_hash.cpp
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Merkle-Damgard Hash Function |
3 | | * (C) 1999-2008,2018 Jack Lloyd |
4 | | * |
5 | | * Botan is released under the Simplified BSD License (see license.txt) |
6 | | */ |
7 | | |
8 | | #include <botan/mdx_hash.h> |
9 | | #include <botan/exceptn.h> |
10 | | #include <botan/loadstor.h> |
11 | | #include <botan/internal/bit_ops.h> |
12 | | |
13 | | namespace Botan { |
14 | | |
15 | | /* |
16 | | * MDx_HashFunction Constructor |
17 | | */ |
18 | | MDx_HashFunction::MDx_HashFunction(size_t block_len, |
19 | | bool byte_big_endian, |
20 | | bool bit_big_endian, |
21 | | uint8_t cnt_size) : |
22 | | m_pad_char(bit_big_endian == true ? 0x80 : 0x01), |
23 | | m_counter_size(cnt_size), |
24 | | m_block_bits(ceil_log2(block_len)), |
25 | | m_count_big_endian(byte_big_endian), |
26 | | m_count(0), |
27 | | m_buffer(block_len), |
28 | | m_position(0) |
29 | 125k | { |
30 | 125k | if(!is_power_of_2(block_len)) |
31 | 0 | throw Invalid_Argument("MDx_HashFunction block length must be a power of 2"); |
32 | 125k | if(m_block_bits < 3 || m_block_bits > 16) |
33 | 0 | throw Invalid_Argument("MDx_HashFunction block size too large or too small"); |
34 | 125k | if(m_counter_size < 8 || m_counter_size > block_len) |
35 | 0 | throw Invalid_State("MDx_HashFunction invalid counter length"); |
36 | 125k | } |
37 | | |
38 | | /* |
39 | | * Clear memory of sensitive data |
40 | | */ |
41 | | void MDx_HashFunction::clear() |
42 | 552k | { |
43 | 552k | zeroise(m_buffer); |
44 | 552k | m_count = m_position = 0; |
45 | 552k | } |
46 | | |
47 | | /* |
48 | | * Update the hash |
49 | | */ |
50 | | void MDx_HashFunction::add_data(const uint8_t input[], size_t length) |
51 | 780k | { |
52 | 780k | const size_t block_len = static_cast<size_t>(1) << m_block_bits; |
53 | 780k | |
54 | 780k | m_count += length; |
55 | 780k | |
56 | 780k | if(m_position) |
57 | 84.7k | { |
58 | 84.7k | buffer_insert(m_buffer, m_position, input, length); |
59 | 84.7k | |
60 | 84.7k | if(m_position + length >= block_len) |
61 | 42.7k | { |
62 | 42.7k | compress_n(m_buffer.data(), 1); |
63 | 42.7k | input += (block_len - m_position); |
64 | 42.7k | length -= (block_len - m_position); |
65 | 42.7k | m_position = 0; |
66 | 42.7k | } |
67 | 84.7k | } |
68 | 780k | |
69 | 780k | // Just in case the compiler can't figure out block_len is a power of 2 |
70 | 780k | const size_t full_blocks = length >> m_block_bits; |
71 | 780k | const size_t remaining = length & (block_len - 1); |
72 | 780k | |
73 | 780k | if(full_blocks > 0) |
74 | 382k | { |
75 | 382k | compress_n(input, full_blocks); |
76 | 382k | } |
77 | 780k | |
78 | 780k | buffer_insert(m_buffer, m_position, input + full_blocks * block_len, remaining); |
79 | 780k | m_position += remaining; |
80 | 780k | } |
81 | | |
82 | | /* |
83 | | * Finalize a hash |
84 | | */ |
85 | | void MDx_HashFunction::final_result(uint8_t output[]) |
86 | 388k | { |
87 | 388k | const size_t block_len = static_cast<size_t>(1) << m_block_bits; |
88 | 388k | |
89 | 388k | clear_mem(&m_buffer[m_position], block_len - m_position); |
90 | 388k | m_buffer[m_position] = m_pad_char; |
91 | 388k | |
92 | 388k | if(m_position >= block_len - m_counter_size) |
93 | 34.6k | { |
94 | 34.6k | compress_n(m_buffer.data(), 1); |
95 | 34.6k | zeroise(m_buffer); |
96 | 34.6k | } |
97 | 388k | |
98 | 388k | write_count(&m_buffer[block_len - m_counter_size]); |
99 | 388k | |
100 | 388k | compress_n(m_buffer.data(), 1); |
101 | 388k | copy_out(output); |
102 | 388k | clear(); |
103 | 388k | } |
104 | | |
105 | | /* |
106 | | * Write the count bits to the buffer |
107 | | */ |
108 | | void MDx_HashFunction::write_count(uint8_t out[]) |
109 | 388k | { |
110 | 388k | BOTAN_ASSERT_NOMSG(m_counter_size <= output_length()); |
111 | 388k | BOTAN_ASSERT_NOMSG(m_counter_size >= 8); |
112 | 388k | |
113 | 388k | const uint64_t bit_count = m_count * 8; |
114 | 388k | |
115 | 388k | if(m_count_big_endian) |
116 | 388k | store_be(bit_count, out + m_counter_size - 8); |
117 | 155 | else |
118 | 155 | store_le(bit_count, out + m_counter_size - 8); |
119 | 388k | } |
120 | | |
121 | | } |