/* sha1.c - Functions to compute SHA1 message digest of files or

   memory blocks according to the NIST specification FIPS-180-1.

   Copyright (C) 2000-2001, 2003-2006, 2008-2026 Free Software Foundation, Inc.

   This file is free software: you can redistribute it and/or modify

   it under the terms of the GNU Lesser General Public License as

   published by the Free Software Foundation; either version 2.1 of the

   License, or (at your option) any later version.

   This file is distributed in the hope that it will be useful,

   but WITHOUT ANY WARRANTY; without even the implied warranty of

   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

   GNU Lesser General Public License for more details.

   You should have received a copy of the GNU Lesser General Public License

   along with this program.  If not, see <https://www.gnu.org/licenses/>.  */

/* Written by Scott G. Miller

   Credits:

      Robert Klep <robert@ilse.nl>  -- Expansion function fix

*/

#include <config.h>

/* Specification.  */

#include "sha1.h"

#include <stdlib.h>

#if USE_UNLOCKED_IO

# include "unlocked-io.h"

#endif

#include "af_alg.h"

#define BLOCKSIZE 32768

#if BLOCKSIZE % 64 != 0

# error "invalid BLOCKSIZE"

#endif

/* Compute SHA1 message digest for bytes read from STREAM.  The

   resulting message digest number will be written into the 20 bytes

   beginning at RESBLOCK.  */

int

sha1_stream (FILE *stream, void *resblock)

{

  switch (afalg_stream (stream, "sha1", resblock, SHA1_DIGEST_SIZE))

    {

    case 0: return 0;

    case -EIO: return 1;

    }

  char *buffer = malloc (BLOCKSIZE + 72);

  if (!buffer)

    return 1;

  struct sha1_ctx ctx;

  sha1_init_ctx (&ctx);

  size_t sum;

  /* Iterate over full file contents.  */

  while (1)

    {

      /* We read the file in blocks of BLOCKSIZE bytes.  One call of the

         computation function processes the whole buffer so that with the

         next round of the loop another block can be read.  */

      sum = 0;

      /* Read block.  Take care for partial reads.  */

      while (1)

        {

          /* Either process a partial fread() from this loop,

             or the fread() in afalg_stream may have gotten EOF.

             We need to avoid a subsequent fread() as EOF may

             not be sticky.  For details of such systems, see:

             https://sourceware.org/PR1190  */

          if (feof (stream))

            goto process_partial_block;

          size_t n = fread (buffer + sum, 1, BLOCKSIZE - sum, stream);

          sum += n;

          if (sum == BLOCKSIZE)

            break;

          if (n == 0)

            {

              /* Check for the error flag IFF N == 0, so that we don't

                 exit the loop after a partial read due to e.g., EAGAIN

                 or EWOULDBLOCK.  */

              if (ferror (stream))

                {

                  free (buffer);

                  return 1;

                }

              goto process_partial_block;

            }

        }

      /* Process buffer with BLOCKSIZE bytes.  Note that

                        BLOCKSIZE % 64 == 0

       */

      sha1_process_block (buffer, BLOCKSIZE, &ctx);

    }

 process_partial_block:;

  /* Process any remaining bytes.  */

  if (sum > 0)

    sha1_process_bytes (buffer, sum, &ctx);

  /* Construct result in desired memory.  */

  sha1_finish_ctx (&ctx, resblock);

  free (buffer);

  return 0;

}