1 | /*
|
---|
2 | * Copyright 2017-2022 The OpenSSL Project Authors. All Rights Reserved.
|
---|
3 | * Copyright 2017 Ribose Inc. All Rights Reserved.
|
---|
4 | * Ported from Ribose contributions from Botan.
|
---|
5 | *
|
---|
6 | * Licensed under the Apache License 2.0 (the "License"). You may not use
|
---|
7 | * this file except in compliance with the License. You can obtain a copy
|
---|
8 | * in the file LICENSE in the source distribution or at
|
---|
9 | * https://www.openssl.org/source/license.html
|
---|
10 | */
|
---|
11 |
|
---|
12 | #include <string.h>
|
---|
13 | #include "internal/sm3.h"
|
---|
14 |
|
---|
15 | #define DATA_ORDER_IS_BIG_ENDIAN
|
---|
16 |
|
---|
17 | #define HASH_LONG SM3_WORD
|
---|
18 | #define HASH_CTX SM3_CTX
|
---|
19 | #define HASH_CBLOCK SM3_CBLOCK
|
---|
20 | #define HASH_UPDATE ossl_sm3_update
|
---|
21 | #define HASH_TRANSFORM ossl_sm3_transform
|
---|
22 | #define HASH_FINAL ossl_sm3_final
|
---|
23 | #define HASH_MAKE_STRING(c, s) \
|
---|
24 | do { \
|
---|
25 | unsigned long ll; \
|
---|
26 | ll=(c)->A; (void)HOST_l2c(ll, (s)); \
|
---|
27 | ll=(c)->B; (void)HOST_l2c(ll, (s)); \
|
---|
28 | ll=(c)->C; (void)HOST_l2c(ll, (s)); \
|
---|
29 | ll=(c)->D; (void)HOST_l2c(ll, (s)); \
|
---|
30 | ll=(c)->E; (void)HOST_l2c(ll, (s)); \
|
---|
31 | ll=(c)->F; (void)HOST_l2c(ll, (s)); \
|
---|
32 | ll=(c)->G; (void)HOST_l2c(ll, (s)); \
|
---|
33 | ll=(c)->H; (void)HOST_l2c(ll, (s)); \
|
---|
34 | } while (0)
|
---|
35 |
|
---|
36 | #if defined(OPENSSL_SM3_ASM)
|
---|
37 | # if defined(__aarch64__)
|
---|
38 | # include "crypto/arm_arch.h"
|
---|
39 | # define HWSM3_CAPABLE (OPENSSL_armcap_P & ARMV8_SM3)
|
---|
40 | void ossl_hwsm3_block_data_order(SM3_CTX *c, const void *p, size_t num);
|
---|
41 | # endif
|
---|
42 | #endif
|
---|
43 |
|
---|
44 | #if defined(HWSM3_CAPABLE)
|
---|
45 | # define HASH_BLOCK_DATA_ORDER (HWSM3_CAPABLE ? ossl_hwsm3_block_data_order \
|
---|
46 | : ossl_sm3_block_data_order)
|
---|
47 | #else
|
---|
48 | # define HASH_BLOCK_DATA_ORDER ossl_sm3_block_data_order
|
---|
49 | #endif
|
---|
50 |
|
---|
51 | void ossl_sm3_block_data_order(SM3_CTX *c, const void *p, size_t num);
|
---|
52 | void ossl_sm3_transform(SM3_CTX *c, const unsigned char *data);
|
---|
53 |
|
---|
54 | #include "crypto/md32_common.h"
|
---|
55 |
|
---|
56 | #ifndef PEDANTIC
|
---|
57 | # if defined(__GNUC__) && __GNUC__>=2 && \
|
---|
58 | !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_NO_INLINE_ASM)
|
---|
59 | # if defined(__riscv_zksh)
|
---|
60 | # define P0(x) ({ MD32_REG_T ret; \
|
---|
61 | asm ("sm3p0 %0, %1" \
|
---|
62 | : "=r"(ret) \
|
---|
63 | : "r"(x)); ret; })
|
---|
64 | # define P1(x) ({ MD32_REG_T ret; \
|
---|
65 | asm ("sm3p1 %0, %1" \
|
---|
66 | : "=r"(ret) \
|
---|
67 | : "r"(x)); ret; })
|
---|
68 | # endif
|
---|
69 | # endif
|
---|
70 | #endif
|
---|
71 |
|
---|
72 | #ifndef P0
|
---|
73 | # define P0(X) (X ^ ROTATE(X, 9) ^ ROTATE(X, 17))
|
---|
74 | #endif
|
---|
75 | #ifndef P1
|
---|
76 | # define P1(X) (X ^ ROTATE(X, 15) ^ ROTATE(X, 23))
|
---|
77 | #endif
|
---|
78 |
|
---|
79 | #define FF0(X,Y,Z) (X ^ Y ^ Z)
|
---|
80 | #define GG0(X,Y,Z) (X ^ Y ^ Z)
|
---|
81 |
|
---|
82 | #define FF1(X,Y,Z) ((X & Y) | ((X | Y) & Z))
|
---|
83 | #define GG1(X,Y,Z) ((Z ^ (X & (Y ^ Z))))
|
---|
84 |
|
---|
85 | #define EXPAND(W0,W7,W13,W3,W10) \
|
---|
86 | (P1(W0 ^ W7 ^ ROTATE(W13, 15)) ^ ROTATE(W3, 7) ^ W10)
|
---|
87 |
|
---|
88 | #define RND(A, B, C, D, E, F, G, H, TJ, Wi, Wj, FF, GG) \
|
---|
89 | do { \
|
---|
90 | const SM3_WORD A12 = ROTATE(A, 12); \
|
---|
91 | const SM3_WORD A12_SM = A12 + E + TJ; \
|
---|
92 | const SM3_WORD SS1 = ROTATE(A12_SM, 7); \
|
---|
93 | const SM3_WORD TT1 = FF(A, B, C) + D + (SS1 ^ A12) + (Wj); \
|
---|
94 | const SM3_WORD TT2 = GG(E, F, G) + H + SS1 + Wi; \
|
---|
95 | B = ROTATE(B, 9); \
|
---|
96 | D = TT1; \
|
---|
97 | F = ROTATE(F, 19); \
|
---|
98 | H = P0(TT2); \
|
---|
99 | } while(0)
|
---|
100 |
|
---|
101 | #define R1(A,B,C,D,E,F,G,H,TJ,Wi,Wj) \
|
---|
102 | RND(A,B,C,D,E,F,G,H,TJ,Wi,Wj,FF0,GG0)
|
---|
103 |
|
---|
104 | #define R2(A,B,C,D,E,F,G,H,TJ,Wi,Wj) \
|
---|
105 | RND(A,B,C,D,E,F,G,H,TJ,Wi,Wj,FF1,GG1)
|
---|
106 |
|
---|
107 | #define SM3_A 0x7380166fUL
|
---|
108 | #define SM3_B 0x4914b2b9UL
|
---|
109 | #define SM3_C 0x172442d7UL
|
---|
110 | #define SM3_D 0xda8a0600UL
|
---|
111 | #define SM3_E 0xa96f30bcUL
|
---|
112 | #define SM3_F 0x163138aaUL
|
---|
113 | #define SM3_G 0xe38dee4dUL
|
---|
114 | #define SM3_H 0xb0fb0e4eUL
|
---|