blob: 613407a2f4d4cce13356b4170217b92127dd96a5 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/**
Simon Butcher5b331b92016-01-03 16:14:14 +00002 * \file sha1.h
Paul Bakkere0ccd0a2009-01-04 16:27:10 +00003 *
Paul Bakker37ca75d2011-01-06 12:28:03 +00004 * \brief SHA-1 cryptographic hash function
Hanno Beckerbbca8c52017-09-25 14:53:51 +01005 *
6 * \warning SHA-1 is considered a weak message digest and its use constitutes
7 * a security risk. We recommend considering stronger message
8 * digests instead.
Darryl Greena40a1012018-01-05 15:33:17 +00009 */
10/*
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +020011 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020012 * SPDX-License-Identifier: Apache-2.0
13 *
14 * Licensed under the Apache License, Version 2.0 (the "License"); you may
15 * not use this file except in compliance with the License.
16 * You may obtain a copy of the License at
17 *
18 * http://www.apache.org/licenses/LICENSE-2.0
19 *
20 * Unless required by applicable law or agreed to in writing, software
21 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
22 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
23 * See the License for the specific language governing permissions and
24 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000025 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000026 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker5121ce52009-01-03 21:22:43 +000027 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#ifndef MBEDTLS_SHA1_H
29#define MBEDTLS_SHA1_H
Paul Bakker5121ce52009-01-03 21:22:43 +000030
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020031#if !defined(MBEDTLS_CONFIG_FILE)
Paul Bakker90995b52013-06-24 19:20:35 +020032#include "config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020033#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020035#endif
Paul Bakker90995b52013-06-24 19:20:35 +020036
Rich Evans00ab4702015-02-06 13:43:58 +000037#include <stddef.h>
Manuel Pégourié-Gonnardab229102015-04-15 11:53:16 +020038#include <stdint.h>
Paul Bakker5c2364c2012-10-01 14:41:15 +000039
Gilles Peskinea381fe82018-01-23 18:16:11 +010040#define MBEDTLS_ERR_SHA1_HW_ACCEL_FAILED -0x0035 /**< SHA-1 hardware accelerator failed */
41
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +010042#if ( defined(__ARMCC_VERSION) || defined(_MSC_VER) ) && \
43 !defined(inline) && !defined(__cplusplus)
44#define inline __inline
45#endif
46
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020047#if !defined(MBEDTLS_SHA1_ALT)
Paul Bakker90995b52013-06-24 19:20:35 +020048// Regular implementation
49//
50
Paul Bakker407a0da2013-06-27 14:29:21 +020051#ifdef __cplusplus
52extern "C" {
53#endif
54
Paul Bakker5121ce52009-01-03 21:22:43 +000055/**
56 * \brief SHA-1 context structure
Hanno Beckerbbca8c52017-09-25 14:53:51 +010057 *
58 * \warning SHA-1 is considered a weak message digest and its use
59 * constitutes a security risk. We recommend considering
60 * stronger message digests instead.
61 *
Paul Bakker5121ce52009-01-03 21:22:43 +000062 */
63typedef struct
64{
Paul Bakker5c2364c2012-10-01 14:41:15 +000065 uint32_t total[2]; /*!< number of bytes processed */
66 uint32_t state[5]; /*!< intermediate digest state */
Paul Bakker5121ce52009-01-03 21:22:43 +000067 unsigned char buffer[64]; /*!< data block being processed */
Paul Bakker5121ce52009-01-03 21:22:43 +000068}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020069mbedtls_sha1_context;
Paul Bakker5121ce52009-01-03 21:22:43 +000070
Paul Bakker5121ce52009-01-03 21:22:43 +000071/**
Paul Bakker5b4af392014-06-26 12:09:34 +020072 * \brief Initialize SHA-1 context
73 *
74 * \param ctx SHA-1 context to be initialized
Hanno Beckerbbca8c52017-09-25 14:53:51 +010075 *
76 * \warning SHA-1 is considered a weak message digest and its use
77 * constitutes a security risk. We recommend considering
78 * stronger message digests instead.
79 *
Paul Bakker5b4af392014-06-26 12:09:34 +020080 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020081void mbedtls_sha1_init( mbedtls_sha1_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +020082
83/**
84 * \brief Clear SHA-1 context
85 *
86 * \param ctx SHA-1 context to be cleared
Hanno Beckerbbca8c52017-09-25 14:53:51 +010087 *
88 * \warning SHA-1 is considered a weak message digest and its use
89 * constitutes a security risk. We recommend considering
90 * stronger message digests instead.
91 *
Paul Bakker5b4af392014-06-26 12:09:34 +020092 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093void mbedtls_sha1_free( mbedtls_sha1_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +020094
95/**
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +020096 * \brief Clone (the state of) a SHA-1 context
97 *
98 * \param dst The destination context
99 * \param src The context to be cloned
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100100 *
101 * \warning SHA-1 is considered a weak message digest and its use
102 * constitutes a security risk. We recommend considering
103 * stronger message digests instead.
104 *
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +0200105 */
106void mbedtls_sha1_clone( mbedtls_sha1_context *dst,
107 const mbedtls_sha1_context *src );
108
109/**
Paul Bakker5121ce52009-01-03 21:22:43 +0000110 * \brief SHA-1 context setup
111 *
112 * \param ctx context to be initialized
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100113 *
114 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100115 *
116 * \warning SHA-1 is considered a weak message digest and its use
117 * constitutes a security risk. We recommend considering
118 * stronger message digests instead.
119 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000120 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100121int mbedtls_sha1_starts_ret( mbedtls_sha1_context *ctx );
Paul Bakker5121ce52009-01-03 21:22:43 +0000122
123/**
124 * \brief SHA-1 process buffer
125 *
126 * \param ctx SHA-1 context
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100127 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000128 * \param ilen length of the input data
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100129 *
130 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100131 *
132 * \warning SHA-1 is considered a weak message digest and its use
133 * constitutes a security risk. We recommend considering
134 * stronger message digests instead.
135 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000136 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100137int mbedtls_sha1_update_ret( mbedtls_sha1_context *ctx,
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100138 const unsigned char *input,
139 size_t ilen );
Paul Bakker5121ce52009-01-03 21:22:43 +0000140
141/**
142 * \brief SHA-1 final digest
143 *
144 * \param ctx SHA-1 context
145 * \param output SHA-1 checksum result
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100146 *
147 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100148 *
149 * \warning SHA-1 is considered a weak message digest and its use
150 * constitutes a security risk. We recommend considering
151 * stronger message digests instead.
152 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000153 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100154int mbedtls_sha1_finish_ret( mbedtls_sha1_context *ctx,
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100155 unsigned char output[20] );
Paul Bakker5121ce52009-01-03 21:22:43 +0000156
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100157/**
158 * \brief SHA-1 process data block (internal use only)
159 *
160 * \param ctx SHA-1 context
161 * \param data buffer holding one block of data
162 *
163 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100164 *
165 * \warning SHA-1 is considered a weak message digest and its use
166 * constitutes a security risk. We recommend considering
167 * stronger message digests instead.
168 *
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100169 */
Andres Amaya Garciacccfe082017-06-28 10:36:39 +0100170int mbedtls_internal_sha1_process( mbedtls_sha1_context *ctx,
171 const unsigned char data[64] );
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100172
173#if !defined(MBEDTLS_DEPRECATED_REMOVED)
174#if defined(MBEDTLS_DEPRECATED_WARNING)
175#define MBEDTLS_DEPRECATED __attribute__((deprecated))
176#else
177#define MBEDTLS_DEPRECATED
178#endif
179/**
180 * \brief SHA-1 context setup
181 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100182 * \deprecated Superseded by mbedtls_sha1_starts_ret() in 2.7.0
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100183 *
184 * \param ctx context to be initialized
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100185 *
186 * \warning SHA-1 is considered a weak message digest and its use
187 * constitutes a security risk. We recommend considering
188 * stronger message digests instead.
189 *
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100190 */
191MBEDTLS_DEPRECATED static inline void mbedtls_sha1_starts(
192 mbedtls_sha1_context *ctx )
193{
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100194 mbedtls_sha1_starts_ret( ctx );
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100195}
196
197/**
198 * \brief SHA-1 process buffer
199 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100200 * \deprecated Superseded by mbedtls_sha1_update_ret() in 2.7.0
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100201 *
202 * \param ctx SHA-1 context
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100203 * \param input buffer holding the data
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100204 * \param ilen length of the input data
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100205 *
206 * \warning SHA-1 is considered a weak message digest and its use
207 * constitutes a security risk. We recommend considering
208 * stronger message digests instead.
209 *
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100210 */
211MBEDTLS_DEPRECATED static inline void mbedtls_sha1_update(
212 mbedtls_sha1_context *ctx,
213 const unsigned char *input,
214 size_t ilen )
215{
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100216 mbedtls_sha1_update_ret( ctx, input, ilen );
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100217}
218
219/**
220 * \brief SHA-1 final digest
221 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100222 * \deprecated Superseded by mbedtls_sha1_finish_ret() in 2.7.0
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100223 *
224 * \param ctx SHA-1 context
225 * \param output SHA-1 checksum result
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100226 *
227 * \warning SHA-1 is considered a weak message digest and its use
228 * constitutes a security risk. We recommend considering
229 * stronger message digests instead.
230 *
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100231 */
232MBEDTLS_DEPRECATED static inline void mbedtls_sha1_finish(
233 mbedtls_sha1_context *ctx,
234 unsigned char output[20] )
235{
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100236 mbedtls_sha1_finish_ret( ctx, output );
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100237}
238
239/**
240 * \brief SHA-1 process data block (internal use only)
241 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100242 * \deprecated Superseded by mbedtls_internal_sha1_process() in 2.7.0
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100243 *
244 * \param ctx SHA-1 context
245 * \param data buffer holding one block of data
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100246 *
247 * \warning SHA-1 is considered a weak message digest and its use
248 * constitutes a security risk. We recommend considering
249 * stronger message digests instead.
250 *
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100251 */
252MBEDTLS_DEPRECATED static inline void mbedtls_sha1_process(
253 mbedtls_sha1_context *ctx,
254 const unsigned char data[64] )
255{
Andres Amaya Garciacccfe082017-06-28 10:36:39 +0100256 mbedtls_internal_sha1_process( ctx, data );
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100257}
258
259#undef MBEDTLS_DEPRECATED
260#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker90995b52013-06-24 19:20:35 +0200261
262#ifdef __cplusplus
263}
264#endif
265
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200266#else /* MBEDTLS_SHA1_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200267#include "sha1_alt.h"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200268#endif /* MBEDTLS_SHA1_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200269
270#ifdef __cplusplus
271extern "C" {
272#endif
273
Paul Bakker5121ce52009-01-03 21:22:43 +0000274/**
275 * \brief Output = SHA-1( input buffer )
276 *
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100277 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000278 * \param ilen length of the input data
279 * \param output SHA-1 checksum result
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100280 *
281 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100282 *
283 * \warning SHA-1 is considered a weak message digest and its use
284 * constitutes a security risk. We recommend considering
285 * stronger message digests instead.
286 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000287 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100288int mbedtls_sha1_ret( const unsigned char *input,
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100289 size_t ilen,
290 unsigned char output[20] );
291
292#if !defined(MBEDTLS_DEPRECATED_REMOVED)
293#if defined(MBEDTLS_DEPRECATED_WARNING)
294#define MBEDTLS_DEPRECATED __attribute__((deprecated))
295#else
296#define MBEDTLS_DEPRECATED
297#endif
298/**
299 * \brief Output = SHA-1( input buffer )
300 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100301 * \deprecated Superseded by mbedtls_sha1_ret() in 2.7.0
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100302 *
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100303 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000304 * \param ilen length of the input data
305 * \param output SHA-1 checksum result
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100306 *
307 * \warning SHA-1 is considered a weak message digest and its use
308 * constitutes a security risk. We recommend considering
309 * stronger message digests instead.
310 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000311 */
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100312MBEDTLS_DEPRECATED static inline void mbedtls_sha1( const unsigned char *input,
313 size_t ilen,
314 unsigned char output[20] )
315{
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100316 mbedtls_sha1_ret( input, ilen, output );
Andres Amaya Garcia034ea7e2017-04-28 15:14:50 +0100317}
318
319#undef MBEDTLS_DEPRECATED
320#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker5121ce52009-01-03 21:22:43 +0000321
322/**
Paul Bakker5121ce52009-01-03 21:22:43 +0000323 * \brief Checkup routine
324 *
325 * \return 0 if successful, or 1 if the test failed
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100326 *
327 * \warning SHA-1 is considered a weak message digest and its use
328 * constitutes a security risk. We recommend considering
329 * stronger message digests instead.
330 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000331 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200332int mbedtls_sha1_self_test( int verbose );
Paul Bakker5121ce52009-01-03 21:22:43 +0000333
Paul Bakker5121ce52009-01-03 21:22:43 +0000334#ifdef __cplusplus
335}
336#endif
337
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200338#endif /* mbedtls_sha1.h */