blob: 23fa95e46ad6003ac9a918ccbc209e6fa3f7b828 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/**
Simon Butcher5b331b92016-01-03 16:14:14 +00002 * \file md4.h
Paul Bakkere0ccd0a2009-01-04 16:27:10 +00003 *
Paul Bakker37ca75d2011-01-06 12:28:03 +00004 * \brief MD4 message digest algorithm (hash function)
Hanno Beckerbbca8c52017-09-25 14:53:51 +01005 *
6 * \warning MD4 is considered a weak message digest and its use constitutes a
7 * security risk. We recommend considering stronger message digests
8 * instead.
Darryl Greena40a1012018-01-05 15:33:17 +00009 */
10/*
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +020011 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020012 * SPDX-License-Identifier: Apache-2.0
13 *
14 * Licensed under the Apache License, Version 2.0 (the "License"); you may
15 * not use this file except in compliance with the License.
16 * You may obtain a copy of the License at
17 *
18 * http://www.apache.org/licenses/LICENSE-2.0
19 *
20 * Unless required by applicable law or agreed to in writing, software
21 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
22 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
23 * See the License for the specific language governing permissions and
24 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000025 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000026 * This file is part of mbed TLS (https://tls.mbed.org)
Hanno Beckerbbca8c52017-09-25 14:53:51 +010027 *
Paul Bakker5121ce52009-01-03 21:22:43 +000028 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020029#ifndef MBEDTLS_MD4_H
30#define MBEDTLS_MD4_H
Paul Bakker5121ce52009-01-03 21:22:43 +000031
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020032#if !defined(MBEDTLS_CONFIG_FILE)
Paul Bakker90995b52013-06-24 19:20:35 +020033#include "config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020034#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020036#endif
Paul Bakker90995b52013-06-24 19:20:35 +020037
Rich Evans00ab4702015-02-06 13:43:58 +000038#include <stddef.h>
Manuel Pégourié-Gonnardab229102015-04-15 11:53:16 +020039#include <stdint.h>
Paul Bakker5c2364c2012-10-01 14:41:15 +000040
Gilles Peskinea381fe82018-01-23 18:16:11 +010041#define MBEDTLS_ERR_MD4_HW_ACCEL_FAILED -0x002D /**< MD4 hardware accelerator failed */
42
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020043#if !defined(MBEDTLS_MD4_ALT)
Paul Bakker90995b52013-06-24 19:20:35 +020044// Regular implementation
45//
46
Paul Bakker407a0da2013-06-27 14:29:21 +020047#ifdef __cplusplus
48extern "C" {
49#endif
50
Paul Bakker5121ce52009-01-03 21:22:43 +000051/**
52 * \brief MD4 context structure
Hanno Beckerbbca8c52017-09-25 14:53:51 +010053 *
54 * \warning MD4 is considered a weak message digest and its use
55 * constitutes a security risk. We recommend considering
56 * stronger message digests instead.
57 *
Paul Bakker5121ce52009-01-03 21:22:43 +000058 */
59typedef struct
60{
Paul Bakker5c2364c2012-10-01 14:41:15 +000061 uint32_t total[2]; /*!< number of bytes processed */
62 uint32_t state[4]; /*!< intermediate digest state */
Paul Bakker5121ce52009-01-03 21:22:43 +000063 unsigned char buffer[64]; /*!< data block being processed */
Paul Bakker5121ce52009-01-03 21:22:43 +000064}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020065mbedtls_md4_context;
Paul Bakker5121ce52009-01-03 21:22:43 +000066
Paul Bakker5121ce52009-01-03 21:22:43 +000067/**
Paul Bakker5b4af392014-06-26 12:09:34 +020068 * \brief Initialize MD4 context
69 *
70 * \param ctx MD4 context to be initialized
Hanno Beckerbbca8c52017-09-25 14:53:51 +010071 *
72 * \warning MD4 is considered a weak message digest and its use
73 * constitutes a security risk. We recommend considering
74 * stronger message digests instead.
75 *
Paul Bakker5b4af392014-06-26 12:09:34 +020076 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020077void mbedtls_md4_init( mbedtls_md4_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +020078
79/**
80 * \brief Clear MD4 context
81 *
82 * \param ctx MD4 context to be cleared
Hanno Beckerbbca8c52017-09-25 14:53:51 +010083 *
84 * \warning MD4 is considered a weak message digest and its use
85 * constitutes a security risk. We recommend considering
86 * stronger message digests instead.
87 *
Paul Bakker5b4af392014-06-26 12:09:34 +020088 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020089void mbedtls_md4_free( mbedtls_md4_context *ctx );
Paul Bakker5b4af392014-06-26 12:09:34 +020090
91/**
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +020092 * \brief Clone (the state of) an MD4 context
93 *
94 * \param dst The destination context
95 * \param src The context to be cloned
Hanno Beckerbbca8c52017-09-25 14:53:51 +010096 *
97 * \warning MD4 is considered a weak message digest and its use
98 * constitutes a security risk. We recommend considering
99 * stronger message digests instead.
100 *
Manuel Pégourié-Gonnard16d412f2015-07-06 15:26:26 +0200101 */
102void mbedtls_md4_clone( mbedtls_md4_context *dst,
103 const mbedtls_md4_context *src );
104
105/**
Paul Bakker5121ce52009-01-03 21:22:43 +0000106 * \brief MD4 context setup
107 *
108 * \param ctx context to be initialized
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100109 *
110 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100111 *
112 * \warning MD4 is considered a weak message digest and its use
113 * constitutes a security risk. We recommend considering
114 * stronger message digests instead.
Paul Bakker5121ce52009-01-03 21:22:43 +0000115 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100116int mbedtls_md4_starts_ret( mbedtls_md4_context *ctx );
Paul Bakker5121ce52009-01-03 21:22:43 +0000117
118/**
119 * \brief MD4 process buffer
120 *
121 * \param ctx MD4 context
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100122 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000123 * \param ilen length of the input data
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100124 *
125 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100126 *
127 * \warning MD4 is considered a weak message digest and its use
128 * constitutes a security risk. We recommend considering
129 * stronger message digests instead.
130 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000131 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100132int mbedtls_md4_update_ret( mbedtls_md4_context *ctx,
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100133 const unsigned char *input,
134 size_t ilen );
Paul Bakker5121ce52009-01-03 21:22:43 +0000135
136/**
137 * \brief MD4 final digest
138 *
139 * \param ctx MD4 context
140 * \param output MD4 checksum result
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100141 *
142 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100143 *
144 * \warning MD4 is considered a weak message digest and its use
145 * constitutes a security risk. We recommend considering
146 * stronger message digests instead.
147 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000148 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100149int mbedtls_md4_finish_ret( mbedtls_md4_context *ctx,
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100150 unsigned char output[16] );
151
152/**
153 * \brief MD4 process data block (internal use only)
154 *
155 * \param ctx MD4 context
156 * \param data buffer holding one block of data
157 *
158 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100159 *
160 * \warning MD4 is considered a weak message digest and its use
161 * constitutes a security risk. We recommend considering
162 * stronger message digests instead.
163 *
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100164 */
Andres Amaya Garciacccfe082017-06-28 10:36:39 +0100165int mbedtls_internal_md4_process( mbedtls_md4_context *ctx,
166 const unsigned char data[64] );
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100167
168#if !defined(MBEDTLS_DEPRECATED_REMOVED)
169#if defined(MBEDTLS_DEPRECATED_WARNING)
170#define MBEDTLS_DEPRECATED __attribute__((deprecated))
171#else
172#define MBEDTLS_DEPRECATED
173#endif
174/**
175 * \brief MD4 context setup
176 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100177 * \deprecated Superseded by mbedtls_md4_starts_ret() in 2.7.0
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100178 *
179 * \param ctx context to be initialized
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100180 *
181 * \warning MD4 is considered a weak message digest and its use
182 * constitutes a security risk. We recommend considering
183 * stronger message digests instead.
184 *
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100185 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000186MBEDTLS_DEPRECATED void mbedtls_md4_starts( mbedtls_md4_context *ctx );
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100187
188/**
189 * \brief MD4 process buffer
190 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100191 * \deprecated Superseded by mbedtls_md4_update_ret() in 2.7.0
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100192 *
193 * \param ctx MD4 context
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100194 * \param input buffer holding the data
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100195 * \param ilen length of the input data
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100196 *
197 * \warning MD4 is considered a weak message digest and its use
198 * constitutes a security risk. We recommend considering
199 * stronger message digests instead.
200 *
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100201 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000202MBEDTLS_DEPRECATED void mbedtls_md4_update( mbedtls_md4_context *ctx,
203 const unsigned char *input,
204 size_t ilen );
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100205
206/**
207 * \brief MD4 final digest
208 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100209 * \deprecated Superseded by mbedtls_md4_finish_ret() in 2.7.0
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100210 *
211 * \param ctx MD4 context
212 * \param output MD4 checksum result
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100213 *
214 * \warning MD4 is considered a weak message digest and its use
215 * constitutes a security risk. We recommend considering
216 * stronger message digests instead.
217 *
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100218 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000219MBEDTLS_DEPRECATED void mbedtls_md4_finish( mbedtls_md4_context *ctx,
220 unsigned char output[16] );
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100221
222/**
223 * \brief MD4 process data block (internal use only)
224 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100225 * \deprecated Superseded by mbedtls_internal_md4_process() in 2.7.0
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100226 *
227 * \param ctx MD4 context
228 * \param data buffer holding one block of data
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100229 *
230 * \warning MD4 is considered a weak message digest and its use
231 * constitutes a security risk. We recommend considering
232 * stronger message digests instead.
233 *
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100234 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000235MBEDTLS_DEPRECATED void mbedtls_md4_process( mbedtls_md4_context *ctx,
236 const unsigned char data[64] );
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100237
238#undef MBEDTLS_DEPRECATED
239#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker5121ce52009-01-03 21:22:43 +0000240
Paul Bakker90995b52013-06-24 19:20:35 +0200241#ifdef __cplusplus
242}
243#endif
244
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245#else /* MBEDTLS_MD4_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200246#include "md4_alt.h"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200247#endif /* MBEDTLS_MD4_ALT */
Paul Bakker90995b52013-06-24 19:20:35 +0200248
249#ifdef __cplusplus
250extern "C" {
251#endif
252
Paul Bakker5121ce52009-01-03 21:22:43 +0000253/**
254 * \brief Output = MD4( input buffer )
255 *
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100256 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000257 * \param ilen length of the input data
258 * \param output MD4 checksum result
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100259 *
260 * \return 0 if successful
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100261 *
262 * \warning MD4 is considered a weak message digest and its use
263 * constitutes a security risk. We recommend considering
264 * stronger message digests instead.
265 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000266 */
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100267int mbedtls_md4_ret( const unsigned char *input,
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100268 size_t ilen,
269 unsigned char output[16] );
270
271#if !defined(MBEDTLS_DEPRECATED_REMOVED)
272#if defined(MBEDTLS_DEPRECATED_WARNING)
273#define MBEDTLS_DEPRECATED __attribute__((deprecated))
274#else
275#define MBEDTLS_DEPRECATED
276#endif
277/**
278 * \brief Output = MD4( input buffer )
279 *
Gilles Peskine3e28d702018-01-22 12:18:59 +0100280 * \deprecated Superseded by mbedtls_md4_ret() in 2.7.0
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100281 *
Andres Amaya Garciaa21247e2017-07-20 14:01:08 +0100282 * \param input buffer holding the data
Paul Bakker5121ce52009-01-03 21:22:43 +0000283 * \param ilen length of the input data
284 * \param output MD4 checksum result
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100285 *
286 * \warning MD4 is considered a weak message digest and its use
287 * constitutes a security risk. We recommend considering
288 * stronger message digests instead.
289 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000290 */
Jaeden Ameroa53ff8d2018-02-19 15:28:08 +0000291MBEDTLS_DEPRECATED void mbedtls_md4( const unsigned char *input,
292 size_t ilen,
293 unsigned char output[16] );
Andres Amaya Garciabee06352017-04-28 17:00:30 +0100294
295#undef MBEDTLS_DEPRECATED
296#endif /* !MBEDTLS_DEPRECATED_REMOVED */
Paul Bakker5121ce52009-01-03 21:22:43 +0000297
298/**
Paul Bakker5121ce52009-01-03 21:22:43 +0000299 * \brief Checkup routine
300 *
301 * \return 0 if successful, or 1 if the test failed
Hanno Beckerbbca8c52017-09-25 14:53:51 +0100302 *
303 * \warning MD4 is considered a weak message digest and its use
304 * constitutes a security risk. We recommend considering
305 * stronger message digests instead.
306 *
Paul Bakker5121ce52009-01-03 21:22:43 +0000307 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200308int mbedtls_md4_self_test( int verbose );
Paul Bakker5121ce52009-01-03 21:22:43 +0000309
Paul Bakker5121ce52009-01-03 21:22:43 +0000310#ifdef __cplusplus
311}
312#endif
313
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200314#endif /* mbedtls_md4.h */