lib/sha1.c - main - githubmirror/iproute2

lib/sha1.c
108 строк4 KB
Eric Biggers
lib/bpf_legacy: Use userspace SHA-1 code instead of AF_ALG
21 дек 2025, 02:34
21 дек 2025, 02:349ba1b06
// SPDX-License-Identifier: GPL-2.0-or-later
/*
 * SHA-1 message digest algorithm
 *
 * Copyright 2025 Google LLC
 */

#include <arpa/inet.h>
#include <string.h>

#include "sha1.h"
#include "utils.h"

static const __u32 sha1_K[4] = { 0x5A827999, 0x6ED9EBA1, 0x8F1BBCDC,
				 0xCA62C1D6 };

static inline __u32 rol32(__u32 v, int bits)
{
	return (v << bits) | (v >> (32 - bits));
}

#define round_up(a, b) (((a) + (b) - 1) & ~((b) - 1))

#define SHA1_ROUND(i, a, b, c, d, e)                                           \
	do {                                                                   \
		if ((i) >= 16)                                                 \
			w[i] = rol32(w[(i) - 16] ^ w[(i) - 14] ^ w[(i) - 8] ^  \
					     w[(i) - 3],                       \
				     1);                                       \
		e += w[i] + rol32(a, 5) + sha1_K[(i) / 20];                    \
		if ((i) < 20)                                                  \
			e += (b & (c ^ d)) ^ d;                                \
		else if ((i) < 40 || (i) >= 60)                                \
			e += b ^ c ^ d;                                        \
		else                                                           \
			e += (c & d) ^ (b & (c ^ d));                          \
		b = rol32(b, 30);                                              \
		/* The new (a, b, c, d, e) is the old (e, a, b, c, d). */      \
	} while (0)

#define SHA1_5ROUNDS(i)                                                        \
	do {                                                                   \
		SHA1_ROUND((i) + 0, a, b, c, d, e);                            \
		SHA1_ROUND((i) + 1, e, a, b, c, d);                            \
		SHA1_ROUND((i) + 2, d, e, a, b, c);                            \
		SHA1_ROUND((i) + 3, c, d, e, a, b);                            \
		SHA1_ROUND((i) + 4, b, c, d, e, a);                            \
	} while (0)

#define SHA1_20ROUNDS(i)                                                       \
	do {                                                                   \
		SHA1_5ROUNDS((i) + 0);                                         \
		SHA1_5ROUNDS((i) + 5);                                         \
		SHA1_5ROUNDS((i) + 10);                                        \
		SHA1_5ROUNDS((i) + 15);                                        \
	} while (0)

static void sha1_blocks(__u32 h[5], const __u8 *data, size_t nblocks)
{
	while (nblocks--) {
		__u32 a = h[0];
		__u32 b = h[1];
		__u32 c = h[2];
		__u32 d = h[3];
		__u32 e = h[4];
		__u32 w[80];
		int i;

		memcpy(w, data, SHA1_BLOCK_SIZE);
		for (i = 0; i < 16; i++)
			w[i] = ntohl(w[i]);
		SHA1_20ROUNDS(0);
		SHA1_20ROUNDS(20);
		SHA1_20ROUNDS(40);
		SHA1_20ROUNDS(60);

		h[0] += a;
		h[1] += b;
		h[2] += c;
		h[3] += d;
		h[4] += e;
		data += SHA1_BLOCK_SIZE;
	}
}

/* Calculate the SHA-1 message digest of the given data. */
void sha1(const __u8 *data, size_t len, __u8 out[SHA1_DIGEST_SIZE])
{
	__u32 h[5] = { 0x67452301, 0xEFCDAB89, 0x98BADCFE, 0x10325476,
		       0xC3D2E1F0 };
	const __be64 bitcount = htonll((__u64)len * 8);
	__u8 final_data[2 * SHA1_BLOCK_SIZE] = { 0 };
	size_t final_len = len % SHA1_BLOCK_SIZE;
	int i;

	sha1_blocks(h, data, len / SHA1_BLOCK_SIZE);

	memcpy(final_data, data + len - final_len, final_len);
	final_data[final_len] = 0x80;
	final_len = round_up(final_len + 9, SHA1_BLOCK_SIZE);
	memcpy(&final_data[final_len - 8], &bitcount, 8);

	sha1_blocks(h, final_data, final_len / SHA1_BLOCK_SIZE);

	for (i = 0; i < ARRAY_SIZE(h); i++)
		h[i] = htonl(h[i]);
	memcpy(out, h, SHA1_DIGEST_SIZE);
}