tron@2186: /* $Id$ */
tron@2186: 
belugas@6527: /** @file md5.cpp */
belugas@6527: 
truelight@602: /*
truelight@602:   Copyright (C) 1999, 2000, 2002 Aladdin Enterprises.  All rights reserved.
truelight@602: 
truelight@602:   This software is provided 'as-is', without any express or implied
truelight@602:   warranty.  In no event will the authors be held liable for any damages
truelight@602:   arising from the use of this software.
truelight@602: 
truelight@602:   Permission is granted to anyone to use this software for any purpose,
truelight@602:   including commercial applications, and to alter it and redistribute it
truelight@602:   freely, subject to the following restrictions:
truelight@602: 
truelight@602:   1. The origin of this software must not be misrepresented; you must not
truelight@602:      claim that you wrote the original software. If you use this software
truelight@602:      in a product, an acknowledgment in the product documentation would be
truelight@602:      appreciated but is not required.
truelight@602:   2. Altered source versions must be plainly marked as such, and must not be
truelight@602:      misrepresented as being the original software.
truelight@602:   3. This notice may not be removed or altered from any source distribution.
truelight@602: 
truelight@602:   L. Peter Deutsch
truelight@602:   ghost@aladdin.com
truelight@602: 
truelight@602:  */
belugas@6527: 
truelight@602: /*
truelight@602:   Independent implementation of MD5 (RFC 1321).
truelight@602: 
truelight@602:   This code implements the MD5 Algorithm defined in RFC 1321, whose
truelight@602:   text is available at
skidd13@8629:   http://www.ietf.org/rfc/rfc1321.txt
truelight@602:   The code is derived from the text of the RFC, including the test suite
truelight@602:   (section A.5) but excluding the rest of Appendix A.  It does not include
truelight@602:   any code or documentation that is identified in the RFC as being
truelight@602:   copyrighted.
truelight@602: 
truelight@602:   The original and principal author of md5.c is L. Peter Deutsch
truelight@602:   <ghost@aladdin.com>.  Other authors are noted in the change history
truelight@602:   that follows (in reverse chronological order):
truelight@602: 
skidd13@8629:   2007-12-24 Changed to C++ and adapted to OpenTTD source
truelight@602:   2002-04-13 lpd Clarified derivation from RFC 1321; now handles byte order
skidd13@8629:              either statically or dynamically; added missing #include <string.h>
skidd13@8629:              in library.
truelight@602:   2002-03-11 lpd Corrected argument list for main(), and added int return
skidd13@8629:              type, in test program and T value program.
truelight@602:   2002-02-21 lpd Added missing #include <stdio.h> in test program.
truelight@602:   2000-07-03 lpd Patched to eliminate warnings about "constant is
skidd13@8629:              unsigned in ANSI C, signed in traditional"; made test program
skidd13@8629:              self-checking.
truelight@602:   1999-11-04 lpd Edited comments slightly for automatic TOC extraction.
truelight@602:   1999-10-18 lpd Fixed typo in header comment (ansi2knr rather than md5).
truelight@602:   1999-05-03 lpd Original version.
truelight@602:  */
truelight@602: 
bjarni@645: #include "stdafx.h"
skidd13@8629: #include "core/bitmath_func.hpp"
rubidium@8628: #include "core/endian_func.hpp"
truelight@602: #include "md5.h"
truelight@602: 
skidd13@8629: #define T_MASK ((uint32)~0)
truelight@602: #define T1 /* 0xd76aa478 */ (T_MASK ^ 0x28955b87)
truelight@602: #define T2 /* 0xe8c7b756 */ (T_MASK ^ 0x173848a9)
truelight@602: #define T3    0x242070db
truelight@602: #define T4 /* 0xc1bdceee */ (T_MASK ^ 0x3e423111)
truelight@602: #define T5 /* 0xf57c0faf */ (T_MASK ^ 0x0a83f050)
truelight@602: #define T6    0x4787c62a
truelight@602: #define T7 /* 0xa8304613 */ (T_MASK ^ 0x57cfb9ec)
truelight@602: #define T8 /* 0xfd469501 */ (T_MASK ^ 0x02b96afe)
truelight@602: #define T9    0x698098d8
truelight@602: #define T10 /* 0x8b44f7af */ (T_MASK ^ 0x74bb0850)
truelight@602: #define T11 /* 0xffff5bb1 */ (T_MASK ^ 0x0000a44e)
truelight@602: #define T12 /* 0x895cd7be */ (T_MASK ^ 0x76a32841)
truelight@602: #define T13    0x6b901122
truelight@602: #define T14 /* 0xfd987193 */ (T_MASK ^ 0x02678e6c)
truelight@602: #define T15 /* 0xa679438e */ (T_MASK ^ 0x5986bc71)
truelight@602: #define T16    0x49b40821
truelight@602: #define T17 /* 0xf61e2562 */ (T_MASK ^ 0x09e1da9d)
truelight@602: #define T18 /* 0xc040b340 */ (T_MASK ^ 0x3fbf4cbf)
truelight@602: #define T19    0x265e5a51
truelight@602: #define T20 /* 0xe9b6c7aa */ (T_MASK ^ 0x16493855)
truelight@602: #define T21 /* 0xd62f105d */ (T_MASK ^ 0x29d0efa2)
truelight@602: #define T22    0x02441453
truelight@602: #define T23 /* 0xd8a1e681 */ (T_MASK ^ 0x275e197e)
truelight@602: #define T24 /* 0xe7d3fbc8 */ (T_MASK ^ 0x182c0437)
truelight@602: #define T25    0x21e1cde6
truelight@602: #define T26 /* 0xc33707d6 */ (T_MASK ^ 0x3cc8f829)
truelight@602: #define T27 /* 0xf4d50d87 */ (T_MASK ^ 0x0b2af278)
truelight@602: #define T28    0x455a14ed
truelight@602: #define T29 /* 0xa9e3e905 */ (T_MASK ^ 0x561c16fa)
truelight@602: #define T30 /* 0xfcefa3f8 */ (T_MASK ^ 0x03105c07)
truelight@602: #define T31    0x676f02d9
truelight@602: #define T32 /* 0x8d2a4c8a */ (T_MASK ^ 0x72d5b375)
truelight@602: #define T33 /* 0xfffa3942 */ (T_MASK ^ 0x0005c6bd)
truelight@602: #define T34 /* 0x8771f681 */ (T_MASK ^ 0x788e097e)
truelight@602: #define T35    0x6d9d6122
truelight@602: #define T36 /* 0xfde5380c */ (T_MASK ^ 0x021ac7f3)
truelight@602: #define T37 /* 0xa4beea44 */ (T_MASK ^ 0x5b4115bb)
truelight@602: #define T38    0x4bdecfa9
truelight@602: #define T39 /* 0xf6bb4b60 */ (T_MASK ^ 0x0944b49f)
truelight@602: #define T40 /* 0xbebfbc70 */ (T_MASK ^ 0x4140438f)
truelight@602: #define T41    0x289b7ec6
truelight@602: #define T42 /* 0xeaa127fa */ (T_MASK ^ 0x155ed805)
truelight@602: #define T43 /* 0xd4ef3085 */ (T_MASK ^ 0x2b10cf7a)
truelight@602: #define T44    0x04881d05
truelight@602: #define T45 /* 0xd9d4d039 */ (T_MASK ^ 0x262b2fc6)
truelight@602: #define T46 /* 0xe6db99e5 */ (T_MASK ^ 0x1924661a)
truelight@602: #define T47    0x1fa27cf8
truelight@602: #define T48 /* 0xc4ac5665 */ (T_MASK ^ 0x3b53a99a)
truelight@602: #define T49 /* 0xf4292244 */ (T_MASK ^ 0x0bd6ddbb)
truelight@602: #define T50    0x432aff97
truelight@602: #define T51 /* 0xab9423a7 */ (T_MASK ^ 0x546bdc58)
truelight@602: #define T52 /* 0xfc93a039 */ (T_MASK ^ 0x036c5fc6)
truelight@602: #define T53    0x655b59c3
truelight@602: #define T54 /* 0x8f0ccc92 */ (T_MASK ^ 0x70f3336d)
truelight@602: #define T55 /* 0xffeff47d */ (T_MASK ^ 0x00100b82)
truelight@602: #define T56 /* 0x85845dd1 */ (T_MASK ^ 0x7a7ba22e)
truelight@602: #define T57    0x6fa87e4f
truelight@602: #define T58 /* 0xfe2ce6e0 */ (T_MASK ^ 0x01d3191f)
truelight@602: #define T59 /* 0xa3014314 */ (T_MASK ^ 0x5cfebceb)
truelight@602: #define T60    0x4e0811a1
truelight@602: #define T61 /* 0xf7537e82 */ (T_MASK ^ 0x08ac817d)
truelight@602: #define T62 /* 0xbd3af235 */ (T_MASK ^ 0x42c50dca)
truelight@602: #define T63    0x2ad7d2bb
truelight@602: #define T64 /* 0xeb86d391 */ (T_MASK ^ 0x14792c6e)
truelight@602: 
skidd13@8629: static inline void Md5Set1(const uint32 *X, uint32 *a, const uint32 *b, const uint32 *c, const uint32 *d, const uint8 k, const uint8 s, const uint32 Ti)
truelight@602: {
skidd13@8629: 	uint32 t = (*b & *c) | (~*b & *d);
skidd13@8629: 	t += *a + X[k] + Ti;
skidd13@8629: 	*a = ROL(t, s) + *b;
truelight@602: }
truelight@602: 
skidd13@8629: static inline void Md5Set2(const uint32 *X, uint32 *a, const uint32 *b, const uint32 *c, const uint32 *d, const uint8 k, const uint8 s, const uint32 Ti)
truelight@602: {
skidd13@8629: 	uint32 t = (*b & *d) | (*c & ~*d);
skidd13@8629: 	t += *a + X[k] + Ti;
skidd13@8629: 	*a = ROL(t, s) + *b;
truelight@602: }
truelight@602: 
truelight@602: 
skidd13@8629: static inline void Md5Set3(const uint32 *X, uint32 *a, const uint32 *b, const uint32 *c, const uint32 *d, const uint8 k, const uint8 s, const uint32 Ti)
skidd13@8629: {
skidd13@8629: 	uint32 t = *b ^ *c ^ *d;
skidd13@8629: 	t += *a + X[k] + Ti;
skidd13@8629: 	*a = ROL(t, s) + *b;
truelight@602: }
truelight@602: 
skidd13@8629: static inline void Md5Set4(const uint32 *X, uint32 *a, const uint32 *b, const uint32 *c, const uint32 *d, const uint8 k, const uint8 s, const uint32 Ti)
truelight@602: {
skidd13@8629: 	uint32 t = *c ^ (*b | ~*d);
skidd13@8629: 	t += *a + X[k] + Ti;
skidd13@8629: 	*a = ROL(t, s) + *b;
skidd13@8629: }
truelight@602: 
skidd13@8629: Md5::Md5()
skidd13@8629: {
skidd13@8629: 	count[0] = 0;
skidd13@8629: 	count[1] = 0;
skidd13@8629: 	abcd[0] = 0x67452301;
skidd13@8629: 	abcd[1] = /*0xefcdab89*/ T_MASK ^ 0x10325476;
skidd13@8629: 	abcd[2] = /*0x98badcfe*/ T_MASK ^ 0x67452301;
skidd13@8629: 	abcd[3] = 0x10325476;
truelight@602: }
skidd13@8629: 
skidd13@8629: void Md5::Process(const uint8 *data /*[64]*/)
skidd13@8629: {
skidd13@8629: 	uint32 a = this->abcd[0];
skidd13@8629: 	uint32 b = this->abcd[1];
skidd13@8629: 	uint32 c = this->abcd[2];
skidd13@8629: 	uint32 d = this->abcd[3];
skidd13@8629: 
skidd13@8629: 	uint32 X[16];
skidd13@8629: 
skidd13@8629: 	/* Convert the uint8 data to uint32 LE */
skidd13@8629: 	uint32 *px = (uint32 *)data;
skidd13@8629: 	for (uint i = 0; i < 16; i++) {
skidd13@8629: 		X[i] = TO_LE32(*px);
skidd13@8629: 		px++;
skidd13@8629: 	}
skidd13@8629: 
skidd13@8629: 	/* Round 1. */
skidd13@8629: 	Md5Set1(X, &a, &b, &c, &d,  0,  7,  T1);
skidd13@8629: 	Md5Set1(X, &d, &a, &b, &c,  1, 12,  T2);
skidd13@8629: 	Md5Set1(X, &c, &d, &a, &b,  2, 17,  T3);
skidd13@8629: 	Md5Set1(X, &b, &c, &d, &a,  3, 22,  T4);
skidd13@8629: 	Md5Set1(X, &a, &b, &c, &d,  4,  7,  T5);
skidd13@8629: 	Md5Set1(X, &d, &a, &b, &c,  5, 12,  T6);
skidd13@8629: 	Md5Set1(X, &c, &d, &a, &b,  6, 17,  T7);
skidd13@8629: 	Md5Set1(X, &b, &c, &d, &a,  7, 22,  T8);
skidd13@8629: 	Md5Set1(X, &a, &b, &c, &d,  8,  7,  T9);
skidd13@8629: 	Md5Set1(X, &d, &a, &b, &c,  9, 12, T10);
skidd13@8629: 	Md5Set1(X, &c, &d, &a, &b, 10, 17, T11);
skidd13@8629: 	Md5Set1(X, &b, &c, &d, &a, 11, 22, T12);
skidd13@8629: 	Md5Set1(X, &a, &b, &c, &d, 12,  7, T13);
skidd13@8629: 	Md5Set1(X, &d, &a, &b, &c, 13, 12, T14);
skidd13@8629: 	Md5Set1(X, &c, &d, &a, &b, 14, 17, T15);
skidd13@8629: 	Md5Set1(X, &b, &c, &d, &a, 15, 22, T16);
skidd13@8629: 
skidd13@8629: 	/* Round 2. */
skidd13@8629: 	Md5Set2(X, &a, &b, &c, &d,  1,  5, T17);
skidd13@8629: 	Md5Set2(X, &d, &a, &b, &c,  6,  9, T18);
skidd13@8629: 	Md5Set2(X, &c, &d, &a, &b, 11, 14, T19);
skidd13@8629: 	Md5Set2(X, &b, &c, &d, &a,  0, 20, T20);
skidd13@8629: 	Md5Set2(X, &a, &b, &c, &d,  5,  5, T21);
skidd13@8629: 	Md5Set2(X, &d, &a, &b, &c, 10,  9, T22);
skidd13@8629: 	Md5Set2(X, &c, &d, &a, &b, 15, 14, T23);
skidd13@8629: 	Md5Set2(X, &b, &c, &d, &a,  4, 20, T24);
skidd13@8629: 	Md5Set2(X, &a, &b, &c, &d,  9,  5, T25);
skidd13@8629: 	Md5Set2(X, &d, &a, &b, &c, 14,  9, T26);
skidd13@8629: 	Md5Set2(X, &c, &d, &a, &b,  3, 14, T27);
skidd13@8629: 	Md5Set2(X, &b, &c, &d, &a,  8, 20, T28);
skidd13@8629: 	Md5Set2(X, &a, &b, &c, &d, 13,  5, T29);
skidd13@8629: 	Md5Set2(X, &d, &a, &b, &c,  2,  9, T30);
skidd13@8629: 	Md5Set2(X, &c, &d, &a, &b,  7, 14, T31);
skidd13@8629: 	Md5Set2(X, &b, &c, &d, &a, 12, 20, T32);
skidd13@8629: 
skidd13@8629: 	/* Round 3. */
skidd13@8629: 	Md5Set3(X, &a, &b, &c, &d,  5,  4, T33);
skidd13@8629: 	Md5Set3(X, &d, &a, &b, &c,  8, 11, T34);
skidd13@8629: 	Md5Set3(X, &c, &d, &a, &b, 11, 16, T35);
skidd13@8629: 	Md5Set3(X, &b, &c, &d, &a, 14, 23, T36);
skidd13@8629: 	Md5Set3(X, &a, &b, &c, &d,  1,  4, T37);
skidd13@8629: 	Md5Set3(X, &d, &a, &b, &c,  4, 11, T38);
skidd13@8629: 	Md5Set3(X, &c, &d, &a, &b,  7, 16, T39);
skidd13@8629: 	Md5Set3(X, &b, &c, &d, &a, 10, 23, T40);
skidd13@8629: 	Md5Set3(X, &a, &b, &c, &d, 13,  4, T41);
skidd13@8629: 	Md5Set3(X, &d, &a, &b, &c,  0, 11, T42);
skidd13@8629: 	Md5Set3(X, &c, &d, &a, &b,  3, 16, T43);
skidd13@8629: 	Md5Set3(X, &b, &c, &d, &a,  6, 23, T44);
skidd13@8629: 	Md5Set3(X, &a, &b, &c, &d,  9,  4, T45);
skidd13@8629: 	Md5Set3(X, &d, &a, &b, &c, 12, 11, T46);
skidd13@8629: 	Md5Set3(X, &c, &d, &a, &b, 15, 16, T47);
skidd13@8629: 	Md5Set3(X, &b, &c, &d, &a,  2, 23, T48);
skidd13@8629: 
skidd13@8629: 	/* Round 4. */
skidd13@8629: 	Md5Set4(X, &a, &b, &c, &d,  0,  6, T49);
skidd13@8629: 	Md5Set4(X, &d, &a, &b, &c,  7, 10, T50);
skidd13@8629: 	Md5Set4(X, &c, &d, &a, &b, 14, 15, T51);
skidd13@8629: 	Md5Set4(X, &b, &c, &d, &a,  5, 21, T52);
skidd13@8629: 	Md5Set4(X, &a, &b, &c, &d, 12,  6, T53);
skidd13@8629: 	Md5Set4(X, &d, &a, &b, &c,  3, 10, T54);
skidd13@8629: 	Md5Set4(X, &c, &d, &a, &b, 10, 15, T55);
skidd13@8629: 	Md5Set4(X, &b, &c, &d, &a,  1, 21, T56);
skidd13@8629: 	Md5Set4(X, &a, &b, &c, &d,  8,  6, T57);
skidd13@8629: 	Md5Set4(X, &d, &a, &b, &c, 15, 10, T58);
skidd13@8629: 	Md5Set4(X, &c, &d, &a, &b,  6, 15, T59);
skidd13@8629: 	Md5Set4(X, &b, &c, &d, &a, 13, 21, T60);
skidd13@8629: 	Md5Set4(X, &a, &b, &c, &d,  4,  6, T61);
skidd13@8629: 	Md5Set4(X, &d, &a, &b, &c, 11, 10, T62);
skidd13@8629: 	Md5Set4(X, &c, &d, &a, &b,  2, 15, T63);
skidd13@8629: 	Md5Set4(X, &b, &c, &d, &a,  9, 21, T64);
skidd13@8629: 
skidd13@8629: 	/* Then perform the following additions. (That is increment each
skidd13@8629: 	 * of the four registers by the value it had before this block
skidd13@8629: 	 * was started.) */
skidd13@8629: 	this->abcd[0] += a;
skidd13@8629: 	this->abcd[1] += b;
skidd13@8629: 	this->abcd[2] += c;
skidd13@8629: 	this->abcd[3] += d;
skidd13@8629: }
skidd13@8629: 
skidd13@8629: void Md5::Append(const void *data, const size_t nbytes)
skidd13@8629: {
skidd13@8629: 	const uint8 *p = (const uint8 *)data;
skidd13@8629: 	size_t left = nbytes;
skidd13@8629: 	const size_t offset = (this->count[0] >> 3) & 63;
skidd13@8629: 	const uint32 nbits = (uint32)(nbytes << 3);
skidd13@8629: 
skidd13@8629: 	if (nbytes <= 0) return;
skidd13@8629: 
skidd13@8629: 	/* Update the message length. */
skidd13@8629: 	this->count[1] += (uint32)(nbytes >> 29);
skidd13@8629: 	this->count[0] += nbits;
skidd13@8629: 
skidd13@8629: 	if (this->count[0] < nbits) this->count[1]++;
skidd13@8629: 
skidd13@8629: 	/* Process an initial partial block. */
skidd13@8629: 	if (offset) {
skidd13@8629: 		size_t copy = (offset + nbytes > 64 ? 64 - offset : nbytes);
skidd13@8629: 
skidd13@8629: 		memcpy(this->buf + offset, p, copy);
skidd13@8629: 
skidd13@8629: 		if (offset + copy < 64) return;
skidd13@8629: 
skidd13@8629: 		p += copy;
skidd13@8629: 		left -= copy;
skidd13@8629: 		this->Process(this->buf);
skidd13@8629: 	}
skidd13@8629: 
skidd13@8629: 	/* Process full blocks. */
skidd13@8629: 	for (; left >= 64; p += 64, left -= 64) this->Process(p);
skidd13@8629: 
skidd13@8629: 	/* Process a final partial block. */
skidd13@8629: 	if (left) memcpy(this->buf, p, left);
skidd13@8629: }
skidd13@8629: 
skidd13@8629: void Md5::Finish(uint8 digest[16])
skidd13@8629: {
skidd13@8629: 	static const uint8 pad[64] = {
skidd13@8629: 		0x80, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
skidd13@8629: 		0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
skidd13@8629: 		0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
skidd13@8629: 		0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
skidd13@8629: 	};
skidd13@8629: 	uint8 data[8];
skidd13@8629: 	uint i;
skidd13@8629: 
skidd13@8629: 	/* Save the length before padding. */
skidd13@8629: 	for (i = 0; i < 8; ++i)
skidd13@8629: 		data[i] = (uint8)(this->count[i >> 2] >> ((i & 3) << 3));
skidd13@8629: 
skidd13@8629: 	/* Pad to 56 bytes mod 64. */
skidd13@8629: 	this->Append(pad, ((55 - (this->count[0] >> 3)) & 63) + 1);
skidd13@8629: 	/* Append the length. */
skidd13@8629: 	this->Append(data, 8);
skidd13@8629: 
skidd13@8629: 	for (i = 0; i < 16; ++i)
skidd13@8629: 		digest[i] = (uint8)(this->abcd[i >> 2] >> ((i & 3) << 3));
skidd13@8629: }