blob: eb5d499ad7e458572cbe1110fa686612b5d0d7c2 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/**
Simon Butcher5b331b92016-01-03 16:14:14 +00002 * \file md5.h
Paul Bakkere0ccd0a2009-01-04 16:27:10 +00003 *
Paul Bakker37ca75d2011-01-06 12:28:03 +00004 * \brief MD5 message digest algorithm (hash function)
Hanno Beckerbbca8c52017-09-25 14:53:51 +01005 *
6 * \warning MD5 is considered a weak message digest and its use constitutes a
7 * security risk. We recommend considering stronger message
8 * digests instead.
Darryl Greena40a1012018-01-05 15:33:17 +00009 */
10/*
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +020011 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Bence Szépkúti4e9f7122020-06-05 13:02:18 +020012 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
13 *
14 * This file is provided under the Apache License 2.0, or the
15 * GNU General Public License v2.0 or later.
16 *
17 * **********
18 * Apache License 2.0:
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020019 *
20 * Licensed under the Apache License, Version 2.0 (the "License"); you may
21 * not use this file except in compliance with the License.
22 * You may obtain a copy of the License at
23 *
24 * http://www.apache.org/licenses/LICENSE-2.0
25 *
26 * Unless required by applicable law or agreed to in writing, software
27 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
28 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
29 * See the License for the specific language governing permissions and
30 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000031 *
Bence Szépkúti4e9f7122020-06-05 13:02:18 +020032 * **********
33 *
34 * **********
35 * GNU General Public License v2.0 or later:
36 *
37 * This program is free software; you can redistribute it and/or modify
38 * it under the terms of the GNU General Public License as published by
39 * the Free Software Foundation; either version 2 of the License, or
40 * (at your option) any later version.
41 *
42 * This program is distributed in the hope that it will be useful,
43 * but WITHOUT ANY WARRANTY; without even the implied warranty of
44 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
45 * GNU General Public License for more details.
46 *
47 * You should have received a copy of the GNU General Public License along
48 * with this program; if not, write to the Free Software Foundation, Inc.,
49 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
50 *
51 * **********
52 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000053 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker5121ce52009-01-03 21:22:43 +000054 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020055#ifndef MBEDTLS_MD5_H
56#define MBEDTLS_MD5_H
Paul Bakker5121ce52009-01-03 21:22:43 +000057
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020058#if !defined(MBEDTLS_CONFIG_FILE)
Paul Bakker90995b52013-06-24 19:20:35 +020059#include "config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020060#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020062#endif
Paul Bakker90995b52013-06-24 19:20:35 +020063
Rich Evans00ab4702015-02-06 13:43:58 +000064#include <stddef.h>
Manuel Pégourié-Gonnardab229102015-04-15 11:53:16 +020065#include <stdint.h>
Paul Bakker5c2364c2012-10-01 14:41:15 +000066
Gilles Peskinea381fe82018-01-23 18:16:11 +010067#define MBEDTLS_ERR_MD5_HW_ACCEL_FAILED -0x002F /**< MD5 hardware accelerator failed */
68
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020069#if !defined(MBEDTLS_MD5_ALT)
Paul Bakker90995b52013-06-24 19:20:35 +020070// Regular implementation
71//
72
Paul Bakker407a0da2013-06-27 14:29:21 +020073#ifdef __cplusplus
74extern "C" {
75#endif
76
Paul Bakker5121ce52009-01-03 21:22:43 +000077/**
78 * \brief MD5 context structure
Hanno Beckerbbca8c52017-09-25 14:53:51 +010079 *
80 * \warning MD5 is considered a weak message digest and its use
81 * constitutes a security risk. We recommend considering
82 * stronger message digests instead.
83 *
Paul Bakker5121ce52009-01-03 21:22:43 +000084 */
85typedef struct
86{
Paul Bakker5c2364c2012-10-01 14:41:15 +000087 uint32_t total[2]; /*!< number of bytes processed */
88 uint32_t state[4]; /*!< intermediate digest state */
Paul Bakker5121ce52009-01-03 21:22:43 +000089 unsigned char buffer[64]; /*!< data block being processed */
Paul Bakker5121ce52009-01-03 21:22:43 +000090}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020091mbedtls_md5_context;
Paul Bakker5121ce52009-01-03 21:22:43 +000092
Paul Bakker5121ce52009-01-03 21:22:43 +000093/**
Paul Bakker5b4af392014-06-26 12:09:34 +020094 * \brief Initialize MD5 context
95 *
96 * \param ctx MD5 context to be initialized
Hanno Beckerbbca8c52017-09-25 14:53:51 +010097 *
98 * \warning MD5 is considered a weak message digest and its use
99 * constitutes a security risk. We recommend considering
100 * stronger message digests instead.
101 *
Paul Bakker5b4af392014-06-26 12:09:34 +0200102 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200103void mbedtls_md5_init( mbedtls_md5_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +0200104
105/**
106 * \brief Clear MD5 context
107 *
108 * \param ctx MD5 context to be cleared
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100109 *
110 * \warning MD5 is considered a weak message digest and its use
111 * constitutes a security risk. We recommend considering
112 * stronger message digests instead.
113 *
Paul Bakker5b4af392014-06-26 12:09:34 +0200114 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200115void mbedtls_md5_free( mbedtls_md5_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +0200116
117/**
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +0200118 * \brief Clone (the state of) an MD5 context
119 *
120 * \param dst The destination context
121 * \param src The context to be cloned
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100122 *
123 * \warning MD5 is considered a weak message digest and its use
124 * constitutes a security risk. We recommend considering
125 * stronger message digests instead.
126 *
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +0200127 */
128void mbedtls_md5_clone( mbedtls_md5_context *dst,
129 const mbedtls_md5_context *src );
130
131/**
Paul Bakker5121ce52009-01-03 21:22:43 +0000132 * \brief MD5 context setup
133 *
134 * \param ctx context to be initialized
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100135 *
136 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100137 *
138 * \warning MD5 is considered a weak message digest and its use
139 * constitutes a security risk. We recommend considering
140 * stronger message digests instead.
141 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000142 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100143int mbedtls_md5_starts_ret( mbedtls_md5_context *ctx );
Paul Bakker5121ce52009-01-03 21:22:43 +0000144
145/**
146 * \brief MD5 process buffer
147 *
148 * \param ctx MD5 context
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100149 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000150 * \param ilen length of the input data
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100151 *
152 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100153 *
154 * \warning MD5 is considered a weak message digest and its use
155 * constitutes a security risk. We recommend considering
156 * stronger message digests instead.
157 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000158 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100159int mbedtls_md5_update_ret( mbedtls_md5_context *ctx,
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100160 const unsigned char *input,
161 size_t ilen );
Paul Bakker5121ce52009-01-03 21:22:43 +0000162
163/**
164 * \brief MD5 final digest
165 *
166 * \param ctx MD5 context
167 * \param output MD5 checksum result
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100168 *
169 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100170 *
171 * \warning MD5 is considered a weak message digest and its use
172 * constitutes a security risk. We recommend considering
173 * stronger message digests instead.
174 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000175 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100176int mbedtls_md5_finish_ret( mbedtls_md5_context *ctx,
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100177 unsigned char output[16] );
Paul Bakker5121ce52009-01-03 21:22:43 +0000178
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100179/**
180 * \brief MD5 process data block (internal use only)
181 *
182 * \param ctx MD5 context
183 * \param data buffer holding one block of data
184 *
185 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100186 *
187 * \warning MD5 is considered a weak message digest and its use
188 * constitutes a security risk. We recommend considering
189 * stronger message digests instead.
190 *
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100191 */
Andres Amaya Garciacccfe082017-06-28 10:36:39 +0100192int mbedtls_internal_md5_process( mbedtls_md5_context *ctx,
193 const unsigned char data[64] );
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100194
195#if !defined(MBEDTLS_DEPRECATED_REMOVED)
196#if defined(MBEDTLS_DEPRECATED_WARNING)
197#define MBEDTLS_DEPRECATED __attribute__((deprecated))
198#else
199#define MBEDTLS_DEPRECATED
200#endif
201/**
202 * \brief MD5 context setup
203 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100204 * \deprecated Superseded by mbedtls_md5_starts_ret() in 2.7.0
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100205 *
206 * \param ctx context to be initialized
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100207 *
208 * \warning MD5 is considered a weak message digest and its use
209 * constitutes a security risk. We recommend considering
210 * stronger message digests instead.
211 *
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100212 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000213MBEDTLS_DEPRECATED void mbedtls_md5_starts( mbedtls_md5_context *ctx );
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100214
215/**
216 * \brief MD5 process buffer
217 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100218 * \deprecated Superseded by mbedtls_md5_update_ret() in 2.7.0
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100219 *
220 * \param ctx MD5 context
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100221 * \param input buffer holding the data
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100222 * \param ilen length of the input data
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100223 *
224 * \warning MD5 is considered a weak message digest and its use
225 * constitutes a security risk. We recommend considering
226 * stronger message digests instead.
227 *
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100228 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000229MBEDTLS_DEPRECATED void mbedtls_md5_update( mbedtls_md5_context *ctx,
230 const unsigned char *input,
231 size_t ilen );
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100232
233/**
234 * \brief MD5 final digest
235 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100236 * \deprecated Superseded by mbedtls_md5_finish_ret() in 2.7.0
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100237 *
238 * \param ctx MD5 context
239 * \param output MD5 checksum result
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100240 *
241 * \warning MD5 is considered a weak message digest and its use
242 * constitutes a security risk. We recommend considering
243 * stronger message digests instead.
244 *
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100245 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000246MBEDTLS_DEPRECATED void mbedtls_md5_finish( mbedtls_md5_context *ctx,
247 unsigned char output[16] );
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100248
249/**
250 * \brief MD5 process data block (internal use only)
251 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100252 * \deprecated Superseded by mbedtls_internal_md5_process() in 2.7.0
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100253 *
254 * \param ctx MD5 context
255 * \param data buffer holding one block of data
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100256 *
257 * \warning MD5 is considered a weak message digest and its use
258 * constitutes a security risk. We recommend considering
259 * stronger message digests instead.
260 *
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100261 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000262MBEDTLS_DEPRECATED void mbedtls_md5_process( mbedtls_md5_context *ctx,
263 const unsigned char data[64] );
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100264
265#undef MBEDTLS_DEPRECATED
266#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker90995b52013-06-24 19:20:35 +0200267
268#ifdef __cplusplus
269}
270#endif
271
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200272#else /* MBEDTLS_MD5_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200273#include "md5_alt.h"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200274#endif /* MBEDTLS_MD5_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200275
276#ifdef __cplusplus
277extern "C" {
278#endif
279
Paul Bakker5121ce52009-01-03 21:22:43 +0000280/**
281 * \brief Output = MD5( input buffer )
282 *
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100283 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000284 * \param ilen length of the input data
285 * \param output MD5 checksum result
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100286 *
287 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100288 *
289 * \warning MD5 is considered a weak message digest and its use
290 * constitutes a security risk. We recommend considering
291 * stronger message digests instead.
292 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000293 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100294int mbedtls_md5_ret( const unsigned char *input,
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100295 size_t ilen,
296 unsigned char output[16] );
297
298#if !defined(MBEDTLS_DEPRECATED_REMOVED)
299#if defined(MBEDTLS_DEPRECATED_WARNING)
300#define MBEDTLS_DEPRECATED __attribute__((deprecated))
301#else
302#define MBEDTLS_DEPRECATED
303#endif
304/**
305 * \brief Output = MD5( input buffer )
306 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100307 * \deprecated Superseded by mbedtls_md5_ret() in 2.7.0
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100308 *
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100309 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000310 * \param ilen length of the input data
311 * \param output MD5 checksum result
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100312 *
313 * \warning MD5 is considered a weak message digest and its use
314 * constitutes a security risk. We recommend considering
315 * stronger message digests instead.
316 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000317 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000318MBEDTLS_DEPRECATED void mbedtls_md5( const unsigned char *input,
319 size_t ilen,
320 unsigned char output[16] );
Andres Amaya Garcia2cfd7a92017-05-02 10:19:27 +0100321
322#undef MBEDTLS_DEPRECATED
323#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker5121ce52009-01-03 21:22:43 +0000324
325/**
Paul Bakker5121ce52009-01-03 21:22:43 +0000326 * \brief Checkup routine
327 *
328 * \return 0 if successful, or 1 if the test failed
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100329 *
330 * \warning MD5 is considered a weak message digest and its use
331 * constitutes a security risk. We recommend considering
332 * stronger message digests instead.
333 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000334 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200335int mbedtls_md5_self_test( int verbose );
Paul Bakker5121ce52009-01-03 21:22:43 +0000336
Paul Bakker5121ce52009-01-03 21:22:43 +0000337#ifdef __cplusplus
338}
339#endif
340
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200341#endif /* mbedtls_md5.h */