Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1 | /** |
Paul Bakker | d2681d8 | 2013-06-30 14:49:12 +0200 | [diff] [blame] | 2 | * \file sha256.h |
Paul Bakker | e0ccd0a | 2009-01-04 16:27:10 +0000 | [diff] [blame] | 3 | * |
Paul Bakker | f3b86c1 | 2011-01-27 15:24:17 +0000 | [diff] [blame] | 4 | * \brief SHA-224 and SHA-256 cryptographic hash function |
Paul Bakker | 37ca75d | 2011-01-06 12:28:03 +0000 | [diff] [blame] | 5 | * |
Manuel Pégourié-Gonnard | a658a40 | 2015-01-23 09:45:19 +0000 | [diff] [blame^] | 6 | * Copyright (C) 2006-2014, ARM Limited, All Rights Reserved |
Paul Bakker | b96f154 | 2010-07-18 20:36:00 +0000 | [diff] [blame] | 7 | * |
Manuel Pégourié-Gonnard | 967a2a5 | 2015-01-22 14:28:16 +0000 | [diff] [blame] | 8 | * This file is part of mbed TLS (http://www.polarssl.org) |
Paul Bakker | 84f12b7 | 2010-07-18 10:13:04 +0000 | [diff] [blame] | 9 | * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org> |
Paul Bakker | b96f154 | 2010-07-18 20:36:00 +0000 | [diff] [blame] | 10 | * |
Paul Bakker | 77b385e | 2009-07-28 17:23:11 +0000 | [diff] [blame] | 11 | * All rights reserved. |
Paul Bakker | e0ccd0a | 2009-01-04 16:27:10 +0000 | [diff] [blame] | 12 | * |
Paul Bakker | e0ccd0a | 2009-01-04 16:27:10 +0000 | [diff] [blame] | 13 | * This program is free software; you can redistribute it and/or modify |
| 14 | * it under the terms of the GNU General Public License as published by |
| 15 | * the Free Software Foundation; either version 2 of the License, or |
| 16 | * (at your option) any later version. |
| 17 | * |
| 18 | * This program is distributed in the hope that it will be useful, |
| 19 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 20 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 21 | * GNU General Public License for more details. |
| 22 | * |
| 23 | * You should have received a copy of the GNU General Public License along |
| 24 | * with this program; if not, write to the Free Software Foundation, Inc., |
| 25 | * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 26 | */ |
Paul Bakker | d2681d8 | 2013-06-30 14:49:12 +0200 | [diff] [blame] | 27 | #ifndef POLARSSL_SHA256_H |
| 28 | #define POLARSSL_SHA256_H |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 29 | |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 30 | #if !defined(POLARSSL_CONFIG_FILE) |
Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 31 | #include "config.h" |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 32 | #else |
| 33 | #include POLARSSL_CONFIG_FILE |
| 34 | #endif |
Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 35 | |
Paul Bakker | 23986e5 | 2011-04-24 08:57:21 +0000 | [diff] [blame] | 36 | #include <string.h> |
| 37 | |
Paul Bakker | fa6a620 | 2013-10-28 18:48:30 +0100 | [diff] [blame] | 38 | #if defined(_MSC_VER) && !defined(EFIX64) && !defined(EFI32) |
Paul Bakker | 5c2364c | 2012-10-01 14:41:15 +0000 | [diff] [blame] | 39 | #include <basetsd.h> |
| 40 | typedef UINT32 uint32_t; |
| 41 | #else |
| 42 | #include <inttypes.h> |
| 43 | #endif |
| 44 | |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 45 | #define POLARSSL_ERR_SHA256_FILE_IO_ERROR -0x0078 /**< Read/write error in file. */ |
Paul Bakker | 69e095c | 2011-12-10 21:55:01 +0000 | [diff] [blame] | 46 | |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 47 | #if !defined(POLARSSL_SHA256_ALT) |
Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 48 | // Regular implementation |
| 49 | // |
| 50 | |
Paul Bakker | 407a0da | 2013-06-27 14:29:21 +0200 | [diff] [blame] | 51 | #ifdef __cplusplus |
| 52 | extern "C" { |
| 53 | #endif |
| 54 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 55 | /** |
| 56 | * \brief SHA-256 context structure |
| 57 | */ |
| 58 | typedef struct |
| 59 | { |
Paul Bakker | 5c2364c | 2012-10-01 14:41:15 +0000 | [diff] [blame] | 60 | uint32_t total[2]; /*!< number of bytes processed */ |
| 61 | uint32_t state[8]; /*!< intermediate digest state */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 62 | unsigned char buffer[64]; /*!< data block being processed */ |
| 63 | |
| 64 | unsigned char ipad[64]; /*!< HMAC: inner padding */ |
| 65 | unsigned char opad[64]; /*!< HMAC: outer padding */ |
| 66 | int is224; /*!< 0 => SHA-256, else SHA-224 */ |
| 67 | } |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 68 | sha256_context; |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 69 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 70 | /** |
Paul Bakker | 5b4af39 | 2014-06-26 12:09:34 +0200 | [diff] [blame] | 71 | * \brief Initialize SHA-256 context |
| 72 | * |
| 73 | * \param ctx SHA-256 context to be initialized |
| 74 | */ |
| 75 | void sha256_init( sha256_context *ctx ); |
| 76 | |
| 77 | /** |
| 78 | * \brief Clear SHA-256 context |
| 79 | * |
| 80 | * \param ctx SHA-256 context to be cleared |
| 81 | */ |
| 82 | void sha256_free( sha256_context *ctx ); |
| 83 | |
| 84 | /** |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 85 | * \brief SHA-256 context setup |
| 86 | * |
| 87 | * \param ctx context to be initialized |
| 88 | * \param is224 0 = use SHA256, 1 = use SHA224 |
| 89 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 90 | void sha256_starts( sha256_context *ctx, int is224 ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 91 | |
| 92 | /** |
| 93 | * \brief SHA-256 process buffer |
| 94 | * |
| 95 | * \param ctx SHA-256 context |
| 96 | * \param input buffer holding the data |
| 97 | * \param ilen length of the input data |
| 98 | */ |
Paul Bakker | b9e4e2c | 2014-05-01 14:18:25 +0200 | [diff] [blame] | 99 | void sha256_update( sha256_context *ctx, const unsigned char *input, |
| 100 | size_t ilen ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 101 | |
| 102 | /** |
| 103 | * \brief SHA-256 final digest |
| 104 | * |
| 105 | * \param ctx SHA-256 context |
| 106 | * \param output SHA-224/256 checksum result |
| 107 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 108 | void sha256_finish( sha256_context *ctx, unsigned char output[32] ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 109 | |
Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 110 | /* Internal use */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 111 | void sha256_process( sha256_context *ctx, const unsigned char data[64] ); |
Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 112 | |
| 113 | #ifdef __cplusplus |
| 114 | } |
| 115 | #endif |
| 116 | |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 117 | #else /* POLARSSL_SHA256_ALT */ |
Paul Bakker | d2681d8 | 2013-06-30 14:49:12 +0200 | [diff] [blame] | 118 | #include "sha256_alt.h" |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 119 | #endif /* POLARSSL_SHA256_ALT */ |
Paul Bakker | 90995b5 | 2013-06-24 19:20:35 +0200 | [diff] [blame] | 120 | |
| 121 | #ifdef __cplusplus |
| 122 | extern "C" { |
| 123 | #endif |
| 124 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 125 | /** |
| 126 | * \brief Output = SHA-256( input buffer ) |
| 127 | * |
| 128 | * \param input buffer holding the data |
| 129 | * \param ilen length of the input data |
| 130 | * \param output SHA-224/256 checksum result |
| 131 | * \param is224 0 = use SHA256, 1 = use SHA224 |
| 132 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 133 | void sha256( const unsigned char *input, size_t ilen, |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 134 | unsigned char output[32], int is224 ); |
| 135 | |
| 136 | /** |
| 137 | * \brief Output = SHA-256( file contents ) |
| 138 | * |
| 139 | * \param path input file name |
| 140 | * \param output SHA-224/256 checksum result |
| 141 | * \param is224 0 = use SHA256, 1 = use SHA224 |
| 142 | * |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 143 | * \return 0 if successful, or POLARSSL_ERR_SHA256_FILE_IO_ERROR |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 144 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 145 | int sha256_file( const char *path, unsigned char output[32], int is224 ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 146 | |
| 147 | /** |
| 148 | * \brief SHA-256 HMAC context setup |
| 149 | * |
| 150 | * \param ctx HMAC context to be initialized |
| 151 | * \param key HMAC secret key |
| 152 | * \param keylen length of the HMAC key |
| 153 | * \param is224 0 = use SHA256, 1 = use SHA224 |
| 154 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 155 | void sha256_hmac_starts( sha256_context *ctx, const unsigned char *key, |
| 156 | size_t keylen, int is224 ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 157 | |
| 158 | /** |
| 159 | * \brief SHA-256 HMAC process buffer |
| 160 | * |
| 161 | * \param ctx HMAC context |
| 162 | * \param input buffer holding the data |
| 163 | * \param ilen length of the input data |
| 164 | */ |
Paul Bakker | b9e4e2c | 2014-05-01 14:18:25 +0200 | [diff] [blame] | 165 | void sha256_hmac_update( sha256_context *ctx, const unsigned char *input, |
| 166 | size_t ilen ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 167 | |
| 168 | /** |
| 169 | * \brief SHA-256 HMAC final digest |
| 170 | * |
| 171 | * \param ctx HMAC context |
| 172 | * \param output SHA-224/256 HMAC checksum result |
| 173 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 174 | void sha256_hmac_finish( sha256_context *ctx, unsigned char output[32] ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 175 | |
| 176 | /** |
Paul Bakker | 7d3b661 | 2010-03-21 16:23:13 +0000 | [diff] [blame] | 177 | * \brief SHA-256 HMAC context reset |
| 178 | * |
| 179 | * \param ctx HMAC context to be reset |
| 180 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 181 | void sha256_hmac_reset( sha256_context *ctx ); |
Paul Bakker | 7d3b661 | 2010-03-21 16:23:13 +0000 | [diff] [blame] | 182 | |
| 183 | /** |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 184 | * \brief Output = HMAC-SHA-256( hmac key, input buffer ) |
| 185 | * |
| 186 | * \param key HMAC secret key |
| 187 | * \param keylen length of the HMAC key |
| 188 | * \param input buffer holding the data |
| 189 | * \param ilen length of the input data |
| 190 | * \param output HMAC-SHA-224/256 result |
| 191 | * \param is224 0 = use SHA256, 1 = use SHA224 |
| 192 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 193 | void sha256_hmac( const unsigned char *key, size_t keylen, |
| 194 | const unsigned char *input, size_t ilen, |
| 195 | unsigned char output[32], int is224 ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 196 | |
| 197 | /** |
| 198 | * \brief Checkup routine |
| 199 | * |
| 200 | * \return 0 if successful, or 1 if the test failed |
| 201 | */ |
Paul Bakker | 9e36f04 | 2013-06-30 14:34:05 +0200 | [diff] [blame] | 202 | int sha256_self_test( int verbose ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 203 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 204 | #ifdef __cplusplus |
| 205 | } |
| 206 | #endif |
| 207 | |
Paul Bakker | d2681d8 | 2013-06-30 14:49:12 +0200 | [diff] [blame] | 208 | #endif /* sha256.h */ |