blob: 33c32ce8e02ca13ca5a4a8ad6b774ef6326676ab [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/**
Simon Butcher5b331b92016-01-03 16:14:14 +00002 * \file sha512.h
Paul Bakkere0ccd0a2009-01-04 16:27:10 +00003 *
Rose Zadik27ff1202018-01-26 11:01:31 +00004 * \brief The SHA-384 and SHA-512 cryptographic hash function.
Darryl Greena40a1012018-01-05 15:33:17 +00005 */
6/*
Bence Szépkúti44bfbe32020-08-19 16:54:51 +02007 * Copyright The Mbed TLS Contributors
Bence Szépkúti4e9f7122020-06-05 13:02:18 +02008 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
9 *
10 * This file is provided under the Apache License 2.0, or the
11 * GNU General Public License v2.0 or later.
12 *
13 * **********
14 * Apache License 2.0:
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020015 *
16 * Licensed under the Apache License, Version 2.0 (the "License"); you may
17 * not use this file except in compliance with the License.
18 * You may obtain a copy of the License at
19 *
20 * http://www.apache.org/licenses/LICENSE-2.0
21 *
22 * Unless required by applicable law or agreed to in writing, software
23 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
24 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
25 * See the License for the specific language governing permissions and
26 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000027 *
Bence Szépkúti4e9f7122020-06-05 13:02:18 +020028 * **********
29 *
30 * **********
31 * GNU General Public License v2.0 or later:
32 *
33 * This program is free software; you can redistribute it and/or modify
34 * it under the terms of the GNU General Public License as published by
35 * the Free Software Foundation; either version 2 of the License, or
36 * (at your option) any later version.
37 *
38 * This program is distributed in the hope that it will be useful,
39 * but WITHOUT ANY WARRANTY; without even the implied warranty of
40 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
41 * GNU General Public License for more details.
42 *
43 * You should have received a copy of the GNU General Public License along
44 * with this program; if not, write to the Free Software Foundation, Inc.,
45 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
46 *
47 * **********
Paul Bakker5121ce52009-01-03 21:22:43 +000048 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020049#ifndef MBEDTLS_SHA512_H
50#define MBEDTLS_SHA512_H
Paul Bakker5121ce52009-01-03 21:22:43 +000051
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020052#if !defined(MBEDTLS_CONFIG_FILE)
Paul Bakker90995b52013-06-24 19:20:35 +020053#include "config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020054#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020055#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020056#endif
Paul Bakker90995b52013-06-24 19:20:35 +020057
Rich Evans00ab4702015-02-06 13:43:58 +000058#include <stddef.h>
Manuel Pégourié-Gonnardab229102015-04-15 11:53:16 +020059#include <stdint.h>
Paul Bakker5121ce52009-01-03 21:22:43 +000060
Gilles Peskinea381fe82018-01-23 18:16:11 +010061#define MBEDTLS_ERR_SHA512_HW_ACCEL_FAILED -0x0039 /**< SHA-512 hardware accelerator failed */
62
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020063#if !defined(MBEDTLS_SHA512_ALT)
Paul Bakker90995b52013-06-24 19:20:35 +020064// Regular implementation
65//
66
Paul Bakker407a0da2013-06-27 14:29:21 +020067#ifdef __cplusplus
68extern "C" {
69#endif
70
Paul Bakker5121ce52009-01-03 21:22:43 +000071/**
Rose Zadik27ff1202018-01-26 11:01:31 +000072 * \brief The SHA-512 context structure.
73 *
74 * The structure is used both for SHA-384 and for SHA-512
75 * checksum calculations. The choice between these two is
76 * made in the call to mbedtls_sha512_starts_ret().
Paul Bakker5121ce52009-01-03 21:22:43 +000077 */
78typedef struct
79{
Rose Zadik27ff1202018-01-26 11:01:31 +000080 uint64_t total[2]; /*!< The number of Bytes processed. */
81 uint64_t state[8]; /*!< The intermediate digest state. */
82 unsigned char buffer[128]; /*!< The data block being processed. */
83 int is384; /*!< Determines which function to use.
84 * <ul><li>0: Use SHA-512.</li>
85 * <li>1: Use SHA-384.</li></ul> */
Paul Bakker5121ce52009-01-03 21:22:43 +000086}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020087mbedtls_sha512_context;
Paul Bakker5121ce52009-01-03 21:22:43 +000088
Paul Bakker5121ce52009-01-03 21:22:43 +000089/**
Rose Zadik27ff1202018-01-26 11:01:31 +000090 * \brief This function initializes a SHA-512 context.
Paul Bakker5b4af392014-06-26 12:09:34 +020091 *
Rose Zadik27ff1202018-01-26 11:01:31 +000092 * \param ctx The SHA-512 context to initialize.
Paul Bakker5b4af392014-06-26 12:09:34 +020093 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020094void mbedtls_sha512_init( mbedtls_sha512_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +020095
96/**
Rose Zadik27ff1202018-01-26 11:01:31 +000097 * \brief This function clears a SHA-512 context.
Paul Bakker5b4af392014-06-26 12:09:34 +020098 *
Rose Zadik27ff1202018-01-26 11:01:31 +000099 * \param ctx The SHA-512 context to clear.
Paul Bakker5b4af392014-06-26 12:09:34 +0200100 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200101void mbedtls_sha512_free( mbedtls_sha512_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +0200102
103/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000104 * \brief This function clones the state of a SHA-512 context.
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +0200105 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000106 * \param dst The destination context.
107 * \param src The context to clone.
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +0200108 */
109void mbedtls_sha512_clone( mbedtls_sha512_context *dst,
110 const mbedtls_sha512_context *src );
111
112/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000113 * \brief This function starts a SHA-384 or SHA-512 checksum
114 * calculation.
Paul Bakker5121ce52009-01-03 21:22:43 +0000115 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000116 * \param ctx The SHA-512 context to initialize.
117 * \param is384 Determines which function to use.
118 * <ul><li>0: Use SHA-512.</li>
119 * <li>1: Use SHA-384.</li></ul>
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100120 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000121 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000122 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100123int mbedtls_sha512_starts_ret( mbedtls_sha512_context *ctx, int is384 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000124
125/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000126 * \brief This function feeds an input buffer into an ongoing
127 * SHA-512 checksum calculation.
Paul Bakker5121ce52009-01-03 21:22:43 +0000128 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000129 * \param ctx The SHA-512 context.
130 * \param input The buffer holding the input data.
131 * \param ilen The length of the input data.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100132 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000133 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000134 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100135int mbedtls_sha512_update_ret( mbedtls_sha512_context *ctx,
Rose Zadik27ff1202018-01-26 11:01:31 +0000136 const unsigned char *input,
137 size_t ilen );
Paul Bakker5121ce52009-01-03 21:22:43 +0000138
139/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000140 * \brief This function finishes the SHA-512 operation, and writes
141 * the result to the output buffer. This function is for
142 * internal use only.
Paul Bakker5121ce52009-01-03 21:22:43 +0000143 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000144 * \param ctx The SHA-512 context.
145 * \param output The SHA-384 or SHA-512 checksum result.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100146 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000147 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000148 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100149int mbedtls_sha512_finish_ret( mbedtls_sha512_context *ctx,
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100150 unsigned char output[64] );
151
152/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000153 * \brief This function processes a single data block within
154 * the ongoing SHA-512 computation.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100155 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000156 * \param ctx The SHA-512 context.
157 * \param data The buffer holding one block of data.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100158 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000159 * \return \c 0 on success.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100160 */
Andres Amaya Garciacccfe082017-06-28 10:36:39 +0100161int mbedtls_internal_sha512_process( mbedtls_sha512_context *ctx,
162 const unsigned char data[128] );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100163#if !defined(MBEDTLS_DEPRECATED_REMOVED)
164#if defined(MBEDTLS_DEPRECATED_WARNING)
165#define MBEDTLS_DEPRECATED __attribute__((deprecated))
166#else
167#define MBEDTLS_DEPRECATED
168#endif
169/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000170 * \brief This function starts a SHA-384 or SHA-512 checksum
171 * calculation.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100172 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100173 * \deprecated Superseded by mbedtls_sha512_starts_ret() in 2.7.0
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100174 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000175 * \param ctx The SHA-512 context to initialize.
176 * \param is384 Determines which function to use.
177 * <ul><li>0: Use SHA-512.</li>
178 * <li>1: Use SHA-384.</li></ul>
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100179 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000180MBEDTLS_DEPRECATED void mbedtls_sha512_starts( mbedtls_sha512_context *ctx,
181 int is384 );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100182
183/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000184 * \brief This function feeds an input buffer into an ongoing
185 * SHA-512 checksum calculation.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100186 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100187 * \deprecated Superseded by mbedtls_sha512_update_ret() in 2.7.0
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100188 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000189 * \param ctx The SHA-512 context.
190 * \param input The buffer holding the data.
191 * \param ilen The length of the input data.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100192 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000193MBEDTLS_DEPRECATED void mbedtls_sha512_update( mbedtls_sha512_context *ctx,
194 const unsigned char *input,
195 size_t ilen );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100196
197/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000198 * \brief This function finishes the SHA-512 operation, and writes
199 * the result to the output buffer.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100200 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100201 * \deprecated Superseded by mbedtls_sha512_finish_ret() in 2.7.0
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100202 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000203 * \param ctx The SHA-512 context.
204 * \param output The SHA-384 or SHA-512 checksum result.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100205 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000206MBEDTLS_DEPRECATED void mbedtls_sha512_finish( mbedtls_sha512_context *ctx,
207 unsigned char output[64] );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100208
209/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000210 * \brief This function processes a single data block within
211 * the ongoing SHA-512 computation. This function is for
212 * internal use only.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100213 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100214 * \deprecated Superseded by mbedtls_internal_sha512_process() in 2.7.0
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100215 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000216 * \param ctx The SHA-512 context.
217 * \param data The buffer holding one block of data.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100218 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000219MBEDTLS_DEPRECATED void mbedtls_sha512_process(
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100220 mbedtls_sha512_context *ctx,
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000221 const unsigned char data[128] );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100222
223#undef MBEDTLS_DEPRECATED
224#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker5121ce52009-01-03 21:22:43 +0000225
Paul Bakker90995b52013-06-24 19:20:35 +0200226#ifdef __cplusplus
227}
228#endif
229
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200230#else /* MBEDTLS_SHA512_ALT */
Paul Bakkerd2681d82013-06-30 14:49:12 +0200231#include "sha512_alt.h"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200232#endif /* MBEDTLS_SHA512_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200233
234#ifdef __cplusplus
235extern "C" {
236#endif
237
Paul Bakker5121ce52009-01-03 21:22:43 +0000238/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000239 * \brief This function calculates the SHA-512 or SHA-384
240 * checksum of a buffer.
Paul Bakker5121ce52009-01-03 21:22:43 +0000241 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000242 * The function allocates the context, performs the
243 * calculation, and frees the context.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100244 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000245 * The SHA-512 result is calculated as
246 * output = SHA-512(input buffer).
247 *
248 * \param input The buffer holding the input data.
249 * \param ilen The length of the input data.
250 * \param output The SHA-384 or SHA-512 checksum result.
251 * \param is384 Determines which function to use.
252 * <ul><li>0: Use SHA-512.</li>
253 * <li>1: Use SHA-384.</li></ul>
254 *
255 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000256 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100257int mbedtls_sha512_ret( const unsigned char *input,
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100258 size_t ilen,
259 unsigned char output[64],
260 int is384 );
261
262#if !defined(MBEDTLS_DEPRECATED_REMOVED)
263#if defined(MBEDTLS_DEPRECATED_WARNING)
264#define MBEDTLS_DEPRECATED __attribute__((deprecated))
265#else
266#define MBEDTLS_DEPRECATED
267#endif
268/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000269 * \brief This function calculates the SHA-512 or SHA-384
270 * checksum of a buffer.
271 *
272 * The function allocates the context, performs the
273 * calculation, and frees the context.
274 *
275 * The SHA-512 result is calculated as
276 * output = SHA-512(input buffer).
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100277 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100278 * \deprecated Superseded by mbedtls_sha512_ret() in 2.7.0
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100279 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000280 * \param input The buffer holding the data.
281 * \param ilen The length of the input data.
282 * \param output The SHA-384 or SHA-512 checksum result.
283 * \param is384 Determines which function to use.
284 * <ul><li>0: Use SHA-512.</li>
285 * <li>1: Use SHA-384.</li></ul>
Paul Bakker5121ce52009-01-03 21:22:43 +0000286 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000287MBEDTLS_DEPRECATED void mbedtls_sha512( const unsigned char *input,
288 size_t ilen,
289 unsigned char output[64],
290 int is384 );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100291
292#undef MBEDTLS_DEPRECATED
293#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Rose Zadik27ff1202018-01-26 11:01:31 +0000294 /**
295 * \brief The SHA-384 or SHA-512 checkup routine.
Paul Bakker5121ce52009-01-03 21:22:43 +0000296 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000297 * \return \c 0 on success, or \c 1 on failure.
Paul Bakker5121ce52009-01-03 21:22:43 +0000298 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200299int mbedtls_sha512_self_test( int verbose );
Paul Bakker5121ce52009-01-03 21:22:43 +0000300
Paul Bakker5121ce52009-01-03 21:22:43 +0000301#ifdef __cplusplus
302}
303#endif
304
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200305#endif /* mbedtls_sha512.h */