/*

   BLAKE2 reference source code package - reference C implementations

   Written in 2012 by Samuel Neves <sneves@dei.uc.pt>

   To the extent possible under law, the author(s) have dedicated all copyright

   and related and neighboring rights to this software to the public domain

   worldwide. This software is distributed without any warranty.

   You should have received a copy of the CC0 Public Domain Dedication along with

   this software. If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.

*/

/* blake2-impl.h

 *

 * Copyright (C) 2006-2026 wolfSSL Inc.

 *

 * This file is part of wolfSSL.

 *

 * wolfSSL is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 3 of the License, or

 * (at your option) any later version.

 *

 * wolfSSL is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA

 */

#ifndef WOLFCRYPT_BLAKE2_IMPL_H

#define WOLFCRYPT_BLAKE2_IMPL_H

#include <wolfssl/wolfcrypt/types.h>

static WC_INLINE word32 load32( const void *src )

{

#if defined(LITTLE_ENDIAN_ORDER) && \

    (!defined(WOLFSSL_GENERAL_ALIGNMENT) || (WOLFSSL_GENERAL_ALIGNMENT == 0))

  return *( const word32 * )( src );

#else

  const byte *p = ( const byte * )src;

  word32 w = *p++;

  w |= ( word32 )( *p++ ) <<  8;

  w |= ( word32 )( *p++ ) << 16;

  w |= ( word32 )( *p++ ) << 24;

  return w;

#endif

}

Unexecuted instantiation: blake2b.c:load32

Unexecuted instantiation: blake2s.c:load32

static WC_INLINE word64 load64( const void *src )

{

#if defined(LITTLE_ENDIAN_ORDER) && \

    (!defined(WOLFSSL_GENERAL_ALIGNMENT) || (WOLFSSL_GENERAL_ALIGNMENT == 0))

  return *( const word64 * )( src );

#else

  const byte *p = ( const byte * )src;

  word64 w = *p++;

  w |= ( word64 )( *p++ ) <<  8;

  w |= ( word64 )( *p++ ) << 16;

  w |= ( word64 )( *p++ ) << 24;

  w |= ( word64 )( *p++ ) << 32;

  w |= ( word64 )( *p++ ) << 40;

  w |= ( word64 )( *p++ ) << 48;

  w |= ( word64 )( *p++ ) << 56;

  return w;

#endif

}

Unexecuted instantiation: blake2b.c:load64

Unexecuted instantiation: blake2s.c:load64

static WC_INLINE void store32( void *dst, word32 w )

{

#if defined(LITTLE_ENDIAN_ORDER) && \

    (!defined(WOLFSSL_GENERAL_ALIGNMENT) || (WOLFSSL_GENERAL_ALIGNMENT == 0))

  *( word32 * )( dst ) = w;

#else

  byte *p = ( byte * )dst;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w;

#endif

}

Unexecuted instantiation: blake2b.c:store32

Unexecuted instantiation: blake2s.c:store32

static WC_INLINE void store64( void *dst, word64 w )

{

#if defined(LITTLE_ENDIAN_ORDER) && \

    (!defined(WOLFSSL_GENERAL_ALIGNMENT) || (WOLFSSL_GENERAL_ALIGNMENT == 0))

  *( word64 * )( dst ) = w;

#else

  byte *p = ( byte * )dst;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w;

#endif

}

Unexecuted instantiation: blake2b.c:store64

Unexecuted instantiation: blake2s.c:store64

static WC_INLINE word64 load48( const void *src )

{

  const byte *p = ( const byte * )src;

  word64 w = *p++;

  w |= ( word64 )( *p++ ) <<  8;

  w |= ( word64 )( *p++ ) << 16;

  w |= ( word64 )( *p++ ) << 24;

  w |= ( word64 )( *p++ ) << 32;

  w |= ( word64 )( *p++ ) << 40;

  return w;

}

Unexecuted instantiation: blake2b.c:load48

Unexecuted instantiation: blake2s.c:load48

static WC_INLINE void store48( void *dst, word64 w )

{

  byte *p = ( byte * )dst;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w; w >>= 8;

  *p++ = ( byte )w;

}

Unexecuted instantiation: blake2b.c:store48

Unexecuted instantiation: blake2s.c:store48

static WC_INLINE word32 rotl32( const word32 w, const unsigned c )

{

  return ( w << c ) | ( w >> ( 32 - c ) );

}

Unexecuted instantiation: blake2b.c:rotl32

Unexecuted instantiation: blake2s.c:rotl32

static WC_INLINE word64 rotl64( const word64 w, const unsigned c )

{

  return ( w << c ) | ( w >> ( 64 - c ) );

}

Unexecuted instantiation: blake2b.c:rotl64

Unexecuted instantiation: blake2s.c:rotl64

static WC_INLINE word32 rotr32( const word32 w, const unsigned c )

{

  return ( w >> c ) | ( w << ( 32 - c ) );

}

Unexecuted instantiation: blake2b.c:rotr32

Unexecuted instantiation: blake2s.c:rotr32

static WC_INLINE word64 rotr64( const word64 w, const unsigned c )

{

  return ( w >> c ) | ( w << ( 64 - c ) );

}

Unexecuted instantiation: blake2b.c:rotr64

Unexecuted instantiation: blake2s.c:rotr64

/* prevents compiler optimizing out memset() */

static WC_INLINE void secure_zero_memory( void *v, word64 n )

{

  volatile byte *p = ( volatile byte * )v;

  while( n-- ) *p++ = 0;

}

Unexecuted instantiation: blake2b.c:secure_zero_memory

Unexecuted instantiation: blake2s.c:secure_zero_memory

#endif  /* WOLFCRYPT_BLAKE2_IMPL_H */