blob: 28b499820243ad59a70b521880ecc42379b31eca [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/**
Simon Butcher5b331b92016-01-03 16:14:14 +00002 * \file sha512.h
Rose Zadik1a6275a2018-03-27 13:03:42 +01003 * \brief This file contains SHA-384 and SHA-512 definitions and functions.
Paul Bakkere0ccd0a2009-01-04 16:27:10 +00004 *
Rose Zadik1a6275a2018-03-27 13:03:42 +01005 * The Secure Hash Algorithms 384 and 512 (SHA-384 and SHA-512) cryptographic
6 * hash functions are defined in <em>FIPS 180-4: Secure Hash Standard (SHS)</em>.
Darryl Greena40a1012018-01-05 15:33:17 +00007 */
8/*
Rose Zadik27ff1202018-01-26 11:01:31 +00009 * Copyright (C) 2006-2018, Arm Limited (or its affiliates), All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020010 * SPDX-License-Identifier: Apache-2.0
11 *
12 * Licensed under the Apache License, Version 2.0 (the "License"); you may
13 * not use this file except in compliance with the License.
14 * You may obtain a copy of the License at
15 *
16 * http://www.apache.org/licenses/LICENSE-2.0
17 *
18 * Unless required by applicable law or agreed to in writing, software
19 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
20 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
21 * See the License for the specific language governing permissions and
22 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000023 *
Rose Zadik27ff1202018-01-26 11:01:31 +000024 * This file is part of Mbed TLS (https://tls.mbed.org)
Paul Bakker5121ce52009-01-03 21:22:43 +000025 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020026#ifndef MBEDTLS_SHA512_H
27#define MBEDTLS_SHA512_H
Paul Bakker5121ce52009-01-03 21:22:43 +000028
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020029#if !defined(MBEDTLS_CONFIG_FILE)
Paul Bakker90995b52013-06-24 19:20:35 +020030#include "config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020031#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020032#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020033#endif
Paul Bakker90995b52013-06-24 19:20:35 +020034
Rich Evans00ab4702015-02-06 13:43:58 +000035#include <stddef.h>
Manuel Pégourié-Gonnardab229102015-04-15 11:53:16 +020036#include <stdint.h>
Paul Bakker5121ce52009-01-03 21:22:43 +000037
Ron Eldor9924bdc2018-10-04 10:59:13 +030038/* MBEDTLS_ERR_SHA512_HW_ACCEL_FAILED is deprecated and should not be used. */
Gilles Peskinea381fe82018-01-23 18:16:11 +010039#define MBEDTLS_ERR_SHA512_HW_ACCEL_FAILED -0x0039 /**< SHA-512 hardware accelerator failed */
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +000040#define MBEDTLS_ERR_SHA512_BAD_INPUT_DATA -0x0075 /**< SHA-512 input data was malformed. */
Gilles Peskinea381fe82018-01-23 18:16:11 +010041
Paul Bakker407a0da2013-06-27 14:29:21 +020042#ifdef __cplusplus
43extern "C" {
44#endif
45
Ron Eldorb2aacec2017-05-18 16:53:08 +030046#if !defined(MBEDTLS_SHA512_ALT)
47// Regular implementation
48//
49
Paul Bakker5121ce52009-01-03 21:22:43 +000050/**
Rose Zadik27ff1202018-01-26 11:01:31 +000051 * \brief The SHA-512 context structure.
52 *
53 * The structure is used both for SHA-384 and for SHA-512
54 * checksum calculations. The choice between these two is
55 * made in the call to mbedtls_sha512_starts_ret().
Paul Bakker5121ce52009-01-03 21:22:43 +000056 */
Dawid Drozd428cc522018-07-24 10:02:47 +020057typedef struct mbedtls_sha512_context
Paul Bakker5121ce52009-01-03 21:22:43 +000058{
Rose Zadik27ff1202018-01-26 11:01:31 +000059 uint64_t total[2]; /*!< The number of Bytes processed. */
60 uint64_t state[8]; /*!< The intermediate digest state. */
61 unsigned char buffer[128]; /*!< The data block being processed. */
Rose Zadik1a6275a2018-03-27 13:03:42 +010062 int is384; /*!< Determines which function to use:
63 0: Use SHA-512, or 1: Use SHA-384. */
Paul Bakker5121ce52009-01-03 21:22:43 +000064}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020065mbedtls_sha512_context;
Paul Bakker5121ce52009-01-03 21:22:43 +000066
Ron Eldorb2aacec2017-05-18 16:53:08 +030067#else /* MBEDTLS_SHA512_ALT */
68#include "sha512_alt.h"
69#endif /* MBEDTLS_SHA512_ALT */
70
Paul Bakker5121ce52009-01-03 21:22:43 +000071/**
Rose Zadik27ff1202018-01-26 11:01:31 +000072 * \brief This function initializes a SHA-512 context.
Paul Bakker5b4af392014-06-26 12:09:34 +020073 *
Rose Zadik27ff1202018-01-26 11:01:31 +000074 * \param ctx The SHA-512 context to initialize.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +000075 * Must not be \c NULL.
Paul Bakker5b4af392014-06-26 12:09:34 +020076 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020077void mbedtls_sha512_init( mbedtls_sha512_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +020078
79/**
Rose Zadik27ff1202018-01-26 11:01:31 +000080 * \brief This function clears a SHA-512 context.
Paul Bakker5b4af392014-06-26 12:09:34 +020081 *
Rose Zadik27ff1202018-01-26 11:01:31 +000082 * \param ctx The SHA-512 context to clear.
Paul Bakker5b4af392014-06-26 12:09:34 +020083 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020084void mbedtls_sha512_free( mbedtls_sha512_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +020085
86/**
Rose Zadik27ff1202018-01-26 11:01:31 +000087 * \brief This function clones the state of a SHA-512 context.
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +020088 *
Rose Zadik27ff1202018-01-26 11:01:31 +000089 * \param dst The destination context.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +000090 * Must not be \c NULL.
Rose Zadik27ff1202018-01-26 11:01:31 +000091 * \param src The context to clone.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +000092 * Must not be \c NULL.
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +020093 */
94void mbedtls_sha512_clone( mbedtls_sha512_context *dst,
95 const mbedtls_sha512_context *src );
96
97/**
Rose Zadik27ff1202018-01-26 11:01:31 +000098 * \brief This function starts a SHA-384 or SHA-512 checksum
99 * calculation.
Paul Bakker5121ce52009-01-03 21:22:43 +0000100 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000101 * \param ctx The SHA-512 context to initialize.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000102 * Must not be \c NULL.
Rose Zadik1a6275a2018-03-27 13:03:42 +0100103 * \param is384 Determines which function to use:
104 * 0: Use SHA-512, or 1: Use SHA-384.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100105 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000106 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000107 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100108int mbedtls_sha512_starts_ret( mbedtls_sha512_context *ctx, int is384 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000109
110/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000111 * \brief This function feeds an input buffer into an ongoing
112 * SHA-512 checksum calculation.
Paul Bakker5121ce52009-01-03 21:22:43 +0000113 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000114 * \param ctx The SHA-512 context.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000115 * Must not be \c NULL.
Rose Zadik27ff1202018-01-26 11:01:31 +0000116 * \param input The buffer holding the input data.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000117 * Must not be \c NULL if \p ilen is greater than 0.
Rose Zadik27ff1202018-01-26 11:01:31 +0000118 * \param ilen The length of the input data.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100119 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000120 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000121 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100122int mbedtls_sha512_update_ret( mbedtls_sha512_context *ctx,
Rose Zadik27ff1202018-01-26 11:01:31 +0000123 const unsigned char *input,
124 size_t ilen );
Paul Bakker5121ce52009-01-03 21:22:43 +0000125
126/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000127 * \brief This function finishes the SHA-512 operation, and writes
128 * the result to the output buffer. This function is for
129 * internal use only.
Paul Bakker5121ce52009-01-03 21:22:43 +0000130 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000131 * \param ctx The SHA-512 context.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000132 * Must not be \c NULL.
Rose Zadik27ff1202018-01-26 11:01:31 +0000133 * \param output The SHA-384 or SHA-512 checksum result.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000134 * Must not be \c NULL.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100135 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000136 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000137 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100138int mbedtls_sha512_finish_ret( mbedtls_sha512_context *ctx,
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100139 unsigned char output[64] );
140
141/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000142 * \brief This function processes a single data block within
143 * the ongoing SHA-512 computation.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100144 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000145 * \param ctx The SHA-512 context.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000146 * Must not be \c NULL.
Rose Zadik27ff1202018-01-26 11:01:31 +0000147 * \param data The buffer holding one block of data.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000148 * Must not be \c NULL.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100149 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000150 * \return \c 0 on success.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100151 */
Andres Amaya Garciacccfe082017-06-28 10:36:39 +0100152int mbedtls_internal_sha512_process( mbedtls_sha512_context *ctx,
153 const unsigned char data[128] );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100154#if !defined(MBEDTLS_DEPRECATED_REMOVED)
155#if defined(MBEDTLS_DEPRECATED_WARNING)
156#define MBEDTLS_DEPRECATED __attribute__((deprecated))
157#else
158#define MBEDTLS_DEPRECATED
159#endif
160/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000161 * \brief This function starts a SHA-384 or SHA-512 checksum
162 * calculation.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100163 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100164 * \deprecated Superseded by mbedtls_sha512_starts_ret() in 2.7.0
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100165 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000166 * \param ctx The SHA-512 context to initialize.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000167 * Must not be \c NULL.
Rose Zadik1a6275a2018-03-27 13:03:42 +0100168 * \param is384 Determines which function to use:
169 * 0: Use SHA-512, or 1: Use SHA-384.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100170 */
Jaeden Amero041039f2018-02-19 15:28:08 +0000171MBEDTLS_DEPRECATED void mbedtls_sha512_starts( mbedtls_sha512_context *ctx,
172 int is384 );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100173
174/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000175 * \brief This function feeds an input buffer into an ongoing
176 * SHA-512 checksum calculation.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100177 *
Rose Zadik1a6275a2018-03-27 13:03:42 +0100178 * \deprecated Superseded by mbedtls_sha512_update_ret() in 2.7.0.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100179 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000180 * \param ctx The SHA-512 context.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000181 * Must not be \c NULL.
Rose Zadik27ff1202018-01-26 11:01:31 +0000182 * \param input The buffer holding the data.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000183 * Must not be \c NULL if \p ilen is greater than 0.
Rose Zadik27ff1202018-01-26 11:01:31 +0000184 * \param ilen The length of the input data.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100185 */
Jaeden Amero041039f2018-02-19 15:28:08 +0000186MBEDTLS_DEPRECATED void mbedtls_sha512_update( mbedtls_sha512_context *ctx,
187 const unsigned char *input,
188 size_t ilen );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100189
190/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000191 * \brief This function finishes the SHA-512 operation, and writes
192 * the result to the output buffer.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100193 *
Rose Zadik1a6275a2018-03-27 13:03:42 +0100194 * \deprecated Superseded by mbedtls_sha512_finish_ret() in 2.7.0.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100195 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000196 * \param ctx The SHA-512 context.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000197 * Must not be \c NULL.
Rose Zadik27ff1202018-01-26 11:01:31 +0000198 * \param output The SHA-384 or SHA-512 checksum result.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000199 * Must not be \c NULL.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100200 */
Jaeden Amero041039f2018-02-19 15:28:08 +0000201MBEDTLS_DEPRECATED void mbedtls_sha512_finish( mbedtls_sha512_context *ctx,
202 unsigned char output[64] );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100203
204/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000205 * \brief This function processes a single data block within
206 * the ongoing SHA-512 computation. This function is for
207 * internal use only.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100208 *
Rose Zadik1a6275a2018-03-27 13:03:42 +0100209 * \deprecated Superseded by mbedtls_internal_sha512_process() in 2.7.0.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100210 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000211 * \param ctx The SHA-512 context.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000212 * Must not be \c NULL.
Rose Zadik27ff1202018-01-26 11:01:31 +0000213 * \param data The buffer holding one block of data.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000214 * Must not be \c NULL.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100215 */
Jaeden Amero041039f2018-02-19 15:28:08 +0000216MBEDTLS_DEPRECATED void mbedtls_sha512_process(
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100217 mbedtls_sha512_context *ctx,
Jaeden Amero041039f2018-02-19 15:28:08 +0000218 const unsigned char data[128] );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100219
220#undef MBEDTLS_DEPRECATED
221#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker5121ce52009-01-03 21:22:43 +0000222
223/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000224 * \brief This function calculates the SHA-512 or SHA-384
225 * checksum of a buffer.
Paul Bakker5121ce52009-01-03 21:22:43 +0000226 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000227 * The function allocates the context, performs the
228 * calculation, and frees the context.
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100229 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000230 * The SHA-512 result is calculated as
231 * output = SHA-512(input buffer).
232 *
233 * \param input The buffer holding the input data.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000234 * Must not be \c NULL if \p ilen is greater than 0.
Rose Zadik27ff1202018-01-26 11:01:31 +0000235 * \param ilen The length of the input data.
236 * \param output The SHA-384 or SHA-512 checksum result.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000237 * Must not be \c NULL.
Rose Zadik1a6275a2018-03-27 13:03:42 +0100238 * \param is384 Determines which function to use:
239 * 0: Use SHA-512, or 1: Use SHA-384.
Rose Zadik27ff1202018-01-26 11:01:31 +0000240 *
241 * \return \c 0 on success.
Paul Bakker5121ce52009-01-03 21:22:43 +0000242 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100243int mbedtls_sha512_ret( const unsigned char *input,
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100244 size_t ilen,
245 unsigned char output[64],
246 int is384 );
247
248#if !defined(MBEDTLS_DEPRECATED_REMOVED)
249#if defined(MBEDTLS_DEPRECATED_WARNING)
250#define MBEDTLS_DEPRECATED __attribute__((deprecated))
251#else
252#define MBEDTLS_DEPRECATED
253#endif
254/**
Rose Zadik27ff1202018-01-26 11:01:31 +0000255 * \brief This function calculates the SHA-512 or SHA-384
256 * checksum of a buffer.
257 *
258 * The function allocates the context, performs the
259 * calculation, and frees the context.
260 *
261 * The SHA-512 result is calculated as
262 * output = SHA-512(input buffer).
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100263 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100264 * \deprecated Superseded by mbedtls_sha512_ret() in 2.7.0
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100265 *
Rose Zadik27ff1202018-01-26 11:01:31 +0000266 * \param input The buffer holding the data.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000267 * Must not be \c NULL if \p ilen is greater than 0.
Rose Zadik27ff1202018-01-26 11:01:31 +0000268 * \param ilen The length of the input data.
269 * \param output The SHA-384 or SHA-512 checksum result.
Andres Amaya Garciaff1052e2018-12-10 10:28:10 +0000270 * Must not be \c NULL.
Rose Zadik1a6275a2018-03-27 13:03:42 +0100271 * \param is384 Determines which function to use:
272 * 0: Use SHA-512, or 1: Use SHA-384.
Paul Bakker5121ce52009-01-03 21:22:43 +0000273 */
Jaeden Amero041039f2018-02-19 15:28:08 +0000274MBEDTLS_DEPRECATED void mbedtls_sha512( const unsigned char *input,
275 size_t ilen,
276 unsigned char output[64],
277 int is384 );
Andres Amaya Garcia614c6892017-05-02 12:07:26 +0100278
279#undef MBEDTLS_DEPRECATED
280#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Rose Zadik27ff1202018-01-26 11:01:31 +0000281 /**
282 * \brief The SHA-384 or SHA-512 checkup routine.
Paul Bakker5121ce52009-01-03 21:22:43 +0000283 *
Rose Zadik1a6275a2018-03-27 13:03:42 +0100284 * \return \c 0 on success.
285 * \return \c 1 on failure.
Paul Bakker5121ce52009-01-03 21:22:43 +0000286 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200287int mbedtls_sha512_self_test( int verbose );
Paul Bakker5121ce52009-01-03 21:22:43 +0000288
Paul Bakker5121ce52009-01-03 21:22:43 +0000289#ifdef __cplusplus
290}
291#endif
292
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200293#endif /* mbedtls_sha512.h */