1 // SPDX-License-Identifier: BSD-2-Clause
2 /* LibTomCrypt, modular cryptographic library -- Tom St Denis
3 *
4 * LibTomCrypt is a library that provides various cryptographic
5 * algorithms in a highly modular and flexible manner.
6 *
7 * The library is free for all purposes without any express
8 * guarantee it works.
9 */
10 /**
11 @param sha224.c
12 LTC_SHA-224 new NIST standard based off of LTC_SHA-256 truncated to 224 bits (Tom St Denis)
13 */
14
15 #include "tomcrypt_private.h"
16
17 #if defined(LTC_SHA224) && defined(LTC_SHA256)
18
19 const struct ltc_hash_descriptor sha224_desc =
20 {
21 "sha224",
22 10,
23 28,
24 64,
25
26 /* OID */
27 { 2, 16, 840, 1, 101, 3, 4, 2, 4, },
28 9,
29
30 &sha224_init,
31 &sha256_process,
32 &sha224_done,
33 &sha224_test,
34 NULL
35 };
36
37 /* init the sha256 er... sha224 state ;-) */
38 /**
39 Initialize the hash state
40 @param md The hash state you wish to initialize
41 @return CRYPT_OK if successful
42 */
sha224_init(hash_state * md)43 int sha224_init(hash_state * md)
44 {
45 LTC_ARGCHK(md != NULL);
46
47 md->sha256.curlen = 0;
48 md->sha256.length = 0;
49 md->sha256.state[0] = 0xc1059ed8UL;
50 md->sha256.state[1] = 0x367cd507UL;
51 md->sha256.state[2] = 0x3070dd17UL;
52 md->sha256.state[3] = 0xf70e5939UL;
53 md->sha256.state[4] = 0xffc00b31UL;
54 md->sha256.state[5] = 0x68581511UL;
55 md->sha256.state[6] = 0x64f98fa7UL;
56 md->sha256.state[7] = 0xbefa4fa4UL;
57 return CRYPT_OK;
58 }
59
60 /**
61 Terminate the hash to get the digest
62 @param md The hash state
63 @param out [out] The destination of the hash (28 bytes)
64 @return CRYPT_OK if successful
65 */
sha224_done(hash_state * md,unsigned char * out)66 int sha224_done(hash_state * md, unsigned char *out)
67 {
68 unsigned char buf[32];
69 int err;
70
71 LTC_ARGCHK(md != NULL);
72 LTC_ARGCHK(out != NULL);
73
74 err = sha256_done(md, buf);
75 XMEMCPY(out, buf, 28);
76 #ifdef LTC_CLEAN_STACK
77 zeromem(buf, sizeof(buf));
78 #endif
79 return err;
80 }
81
82 /**
83 Self-test the hash
84 @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
85 */
sha224_test(void)86 int sha224_test(void)
87 {
88 #ifndef LTC_TEST
89 return CRYPT_NOP;
90 #else
91 static const struct {
92 const char *msg;
93 unsigned char hash[28];
94 } tests[] = {
95 { "abc",
96 { 0x23, 0x09, 0x7d, 0x22, 0x34, 0x05, 0xd8,
97 0x22, 0x86, 0x42, 0xa4, 0x77, 0xbd, 0xa2,
98 0x55, 0xb3, 0x2a, 0xad, 0xbc, 0xe4, 0xbd,
99 0xa0, 0xb3, 0xf7, 0xe3, 0x6c, 0x9d, 0xa7 }
100 },
101 { "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq",
102 { 0x75, 0x38, 0x8b, 0x16, 0x51, 0x27, 0x76,
103 0xcc, 0x5d, 0xba, 0x5d, 0xa1, 0xfd, 0x89,
104 0x01, 0x50, 0xb0, 0xc6, 0x45, 0x5c, 0xb4,
105 0xf5, 0x8b, 0x19, 0x52, 0x52, 0x25, 0x25 }
106 },
107 };
108
109 int i;
110 unsigned char tmp[28];
111 hash_state md;
112
113 for (i = 0; i < (int)(sizeof(tests) / sizeof(tests[0])); i++) {
114 sha224_init(&md);
115 sha224_process(&md, (unsigned char*)tests[i].msg, (unsigned long)strlen(tests[i].msg));
116 sha224_done(&md, tmp);
117 if (compare_testvector(tmp, sizeof(tmp), tests[i].hash, sizeof(tests[i].hash), "SHA224", i)) {
118 return CRYPT_FAIL_TESTVECTOR;
119 }
120 }
121 return CRYPT_OK;
122 #endif
123 }
124
125 #endif /* defined(LTC_SHA224) && defined(LTC_SHA256) */
126
127
128 /* ref: $Format:%D$ */
129 /* git commit: $Format:%H$ */
130 /* commit time: $Format:%ai$ */
131