tron@2186: /* $Id$ */
tron@2186: 
truelight@602: /*
truelight@602:   Copyright (C) 1999, 2000, 2002 Aladdin Enterprises.  All rights reserved.
truelight@602: 
truelight@602:   This software is provided 'as-is', without any express or implied
truelight@602:   warranty.  In no event will the authors be held liable for any damages
truelight@602:   arising from the use of this software.
truelight@602: 
truelight@602:   Permission is granted to anyone to use this software for any purpose,
truelight@602:   including commercial applications, and to alter it and redistribute it
truelight@602:   freely, subject to the following restrictions:
truelight@602: 
truelight@602:   1. The origin of this software must not be misrepresented; you must not
truelight@602:      claim that you wrote the original software. If you use this software
truelight@602:      in a product, an acknowledgment in the product documentation would be
truelight@602:      appreciated but is not required.
truelight@602:   2. Altered source versions must be plainly marked as such, and must not be
truelight@602:      misrepresented as being the original software.
truelight@602:   3. This notice may not be removed or altered from any source distribution.
truelight@602: 
truelight@602:   L. Peter Deutsch
truelight@602:   ghost@aladdin.com
truelight@602: 
truelight@602:  */
tron@2186: /* $Id$ */
truelight@602: /*
truelight@602:   Independent implementation of MD5 (RFC 1321).
truelight@602: 
truelight@602:   This code implements the MD5 Algorithm defined in RFC 1321, whose
truelight@602:   text is available at
truelight@602: 	http://www.ietf.org/rfc/rfc1321.txt
truelight@602:   The code is derived from the text of the RFC, including the test suite
truelight@602:   (section A.5) but excluding the rest of Appendix A.  It does not include
truelight@602:   any code or documentation that is identified in the RFC as being
truelight@602:   copyrighted.
truelight@602: 
truelight@602:   The original and principal author of md5.c is L. Peter Deutsch
truelight@602:   <ghost@aladdin.com>.  Other authors are noted in the change history
truelight@602:   that follows (in reverse chronological order):
truelight@602: 
truelight@602:   2002-04-13 lpd Clarified derivation from RFC 1321; now handles byte order
truelight@602: 	either statically or dynamically; added missing #include <string.h>
truelight@602: 	in library.
truelight@602:   2002-03-11 lpd Corrected argument list for main(), and added int return
truelight@602: 	type, in test program and T value program.
truelight@602:   2002-02-21 lpd Added missing #include <stdio.h> in test program.
truelight@602:   2000-07-03 lpd Patched to eliminate warnings about "constant is
truelight@602: 	unsigned in ANSI C, signed in traditional"; made test program
truelight@602: 	self-checking.
truelight@602:   1999-11-04 lpd Edited comments slightly for automatic TOC extraction.
truelight@602:   1999-10-18 lpd Fixed typo in header comment (ansi2knr rather than md5).
truelight@602:   1999-05-03 lpd Original version.
truelight@602:  */
truelight@602: 
bjarni@645: #include "stdafx.h"
truelight@602: #include "md5.h"
truelight@602: #include <string.h>
truelight@602: 
truelight@602: #undef BYTE_ORDER	/* 1 = big-endian, -1 = little-endian, 0 = unknown */
bjarni@645: #if defined(TTD_BIG_ENDIAN)
bjarni@645: #  define BYTE_ORDER 1
truelight@602: #else
bjarni@645: #  define BYTE_ORDER -1
truelight@602: #endif
truelight@602: 
truelight@602: #define T_MASK ((md5_word_t)~0)
truelight@602: #define T1 /* 0xd76aa478 */ (T_MASK ^ 0x28955b87)
truelight@602: #define T2 /* 0xe8c7b756 */ (T_MASK ^ 0x173848a9)
truelight@602: #define T3    0x242070db
truelight@602: #define T4 /* 0xc1bdceee */ (T_MASK ^ 0x3e423111)
truelight@602: #define T5 /* 0xf57c0faf */ (T_MASK ^ 0x0a83f050)
truelight@602: #define T6    0x4787c62a
truelight@602: #define T7 /* 0xa8304613 */ (T_MASK ^ 0x57cfb9ec)
truelight@602: #define T8 /* 0xfd469501 */ (T_MASK ^ 0x02b96afe)
truelight@602: #define T9    0x698098d8
truelight@602: #define T10 /* 0x8b44f7af */ (T_MASK ^ 0x74bb0850)
truelight@602: #define T11 /* 0xffff5bb1 */ (T_MASK ^ 0x0000a44e)
truelight@602: #define T12 /* 0x895cd7be */ (T_MASK ^ 0x76a32841)
truelight@602: #define T13    0x6b901122
truelight@602: #define T14 /* 0xfd987193 */ (T_MASK ^ 0x02678e6c)
truelight@602: #define T15 /* 0xa679438e */ (T_MASK ^ 0x5986bc71)
truelight@602: #define T16    0x49b40821
truelight@602: #define T17 /* 0xf61e2562 */ (T_MASK ^ 0x09e1da9d)
truelight@602: #define T18 /* 0xc040b340 */ (T_MASK ^ 0x3fbf4cbf)
truelight@602: #define T19    0x265e5a51
truelight@602: #define T20 /* 0xe9b6c7aa */ (T_MASK ^ 0x16493855)
truelight@602: #define T21 /* 0xd62f105d */ (T_MASK ^ 0x29d0efa2)
truelight@602: #define T22    0x02441453
truelight@602: #define T23 /* 0xd8a1e681 */ (T_MASK ^ 0x275e197e)
truelight@602: #define T24 /* 0xe7d3fbc8 */ (T_MASK ^ 0x182c0437)
truelight@602: #define T25    0x21e1cde6
truelight@602: #define T26 /* 0xc33707d6 */ (T_MASK ^ 0x3cc8f829)
truelight@602: #define T27 /* 0xf4d50d87 */ (T_MASK ^ 0x0b2af278)
truelight@602: #define T28    0x455a14ed
truelight@602: #define T29 /* 0xa9e3e905 */ (T_MASK ^ 0x561c16fa)
truelight@602: #define T30 /* 0xfcefa3f8 */ (T_MASK ^ 0x03105c07)
truelight@602: #define T31    0x676f02d9
truelight@602: #define T32 /* 0x8d2a4c8a */ (T_MASK ^ 0x72d5b375)
truelight@602: #define T33 /* 0xfffa3942 */ (T_MASK ^ 0x0005c6bd)
truelight@602: #define T34 /* 0x8771f681 */ (T_MASK ^ 0x788e097e)
truelight@602: #define T35    0x6d9d6122
truelight@602: #define T36 /* 0xfde5380c */ (T_MASK ^ 0x021ac7f3)
truelight@602: #define T37 /* 0xa4beea44 */ (T_MASK ^ 0x5b4115bb)
truelight@602: #define T38    0x4bdecfa9
truelight@602: #define T39 /* 0xf6bb4b60 */ (T_MASK ^ 0x0944b49f)
truelight@602: #define T40 /* 0xbebfbc70 */ (T_MASK ^ 0x4140438f)
truelight@602: #define T41    0x289b7ec6
truelight@602: #define T42 /* 0xeaa127fa */ (T_MASK ^ 0x155ed805)
truelight@602: #define T43 /* 0xd4ef3085 */ (T_MASK ^ 0x2b10cf7a)
truelight@602: #define T44    0x04881d05
truelight@602: #define T45 /* 0xd9d4d039 */ (T_MASK ^ 0x262b2fc6)
truelight@602: #define T46 /* 0xe6db99e5 */ (T_MASK ^ 0x1924661a)
truelight@602: #define T47    0x1fa27cf8
truelight@602: #define T48 /* 0xc4ac5665 */ (T_MASK ^ 0x3b53a99a)
truelight@602: #define T49 /* 0xf4292244 */ (T_MASK ^ 0x0bd6ddbb)
truelight@602: #define T50    0x432aff97
truelight@602: #define T51 /* 0xab9423a7 */ (T_MASK ^ 0x546bdc58)
truelight@602: #define T52 /* 0xfc93a039 */ (T_MASK ^ 0x036c5fc6)
truelight@602: #define T53    0x655b59c3
truelight@602: #define T54 /* 0x8f0ccc92 */ (T_MASK ^ 0x70f3336d)
truelight@602: #define T55 /* 0xffeff47d */ (T_MASK ^ 0x00100b82)
truelight@602: #define T56 /* 0x85845dd1 */ (T_MASK ^ 0x7a7ba22e)
truelight@602: #define T57    0x6fa87e4f
truelight@602: #define T58 /* 0xfe2ce6e0 */ (T_MASK ^ 0x01d3191f)
truelight@602: #define T59 /* 0xa3014314 */ (T_MASK ^ 0x5cfebceb)
truelight@602: #define T60    0x4e0811a1
truelight@602: #define T61 /* 0xf7537e82 */ (T_MASK ^ 0x08ac817d)
truelight@602: #define T62 /* 0xbd3af235 */ (T_MASK ^ 0x42c50dca)
truelight@602: #define T63    0x2ad7d2bb
truelight@602: #define T64 /* 0xeb86d391 */ (T_MASK ^ 0x14792c6e)
truelight@602: 
truelight@602: 
truelight@602: static void
truelight@602: md5_process(md5_state_t *pms, const md5_byte_t *data /*[64]*/)
truelight@602: {
truelight@602:     md5_word_t
truelight@602: 	a = pms->abcd[0], b = pms->abcd[1],
truelight@602: 	c = pms->abcd[2], d = pms->abcd[3];
truelight@602:     md5_word_t t;
truelight@602: #if BYTE_ORDER > 0
truelight@602:     /* Define storage only for big-endian CPUs. */
truelight@602:     md5_word_t X[16];
truelight@602: #else
truelight@602:     /* Define storage for little-endian or both types of CPUs. */
truelight@602:     md5_word_t xbuf[16];
truelight@602:     const md5_word_t *X;
truelight@602: #endif
truelight@602: 
truelight@602:     {
truelight@602: #if BYTE_ORDER == 0
truelight@602: 	/*
truelight@602: 	 * Determine dynamically whether this is a big-endian or
truelight@602: 	 * little-endian machine, since we can use a more efficient
truelight@602: 	 * algorithm on the latter.
truelight@602: 	 */
truelight@602: 	static const int w = 1;
truelight@602: 
truelight@602: 	if (*((const md5_byte_t *)&w)) /* dynamic little-endian */
truelight@602: #endif
truelight@602: #if BYTE_ORDER <= 0		/* little-endian */
truelight@602: 	{
truelight@602: 	    /*
truelight@602: 	     * On little-endian machines, we can process properly aligned
truelight@602: 	     * data without copying it.
truelight@602: 	     */
truelight@602: 	    if (!((data - (const md5_byte_t *)0) & 3)) {
truelight@602: 		/* data are properly aligned */
truelight@602: 		X = (const md5_word_t *)data;
truelight@602: 	    } else {
truelight@602: 		/* not aligned */
truelight@602: 		memcpy(xbuf, data, 64);
truelight@602: 		X = xbuf;
truelight@602: 	    }
truelight@602: 	}
truelight@602: #endif
truelight@602: #if BYTE_ORDER == 0
truelight@602: 	else			/* dynamic big-endian */
truelight@602: #endif
truelight@602: #if BYTE_ORDER >= 0		/* big-endian */
truelight@602: 	{
truelight@602: 	    /*
truelight@602: 	     * On big-endian machines, we must arrange the bytes in the
truelight@602: 	     * right order.
truelight@602: 	     */
truelight@602: 	    const md5_byte_t *xp = data;
truelight@602: 	    int i;
truelight@602: 
truelight@602: #  if BYTE_ORDER == 0
truelight@602: 	    X = xbuf;		/* (dynamic only) */
truelight@602: #  else
truelight@602: #    define xbuf X		/* (static only) */
truelight@602: #  endif
truelight@602: 	    for (i = 0; i < 16; ++i, xp += 4)
truelight@602: 		xbuf[i] = xp[0] + (xp[1] << 8) + (xp[2] << 16) + (xp[3] << 24);
truelight@602: 	}
truelight@602: #endif
truelight@602:     }
truelight@602: 
truelight@602: #define ROTATE_LEFT(x, n) (((x) << (n)) | ((x) >> (32 - (n))))
truelight@602: 
truelight@602:     /* Round 1. */
truelight@602:     /* Let [abcd k s i] denote the operation
truelight@602:        a = b + ((a + F(b,c,d) + X[k] + T[i]) <<< s). */
truelight@602: #define F(x, y, z) (((x) & (y)) | (~(x) & (z)))
truelight@602: #define SET(a, b, c, d, k, s, Ti)\
truelight@602:   t = a + F(b,c,d) + X[k] + Ti;\
truelight@602:   a = ROTATE_LEFT(t, s) + b
truelight@602:     /* Do the following 16 operations. */
truelight@602:     SET(a, b, c, d,  0,  7,  T1);
truelight@602:     SET(d, a, b, c,  1, 12,  T2);
truelight@602:     SET(c, d, a, b,  2, 17,  T3);
truelight@602:     SET(b, c, d, a,  3, 22,  T4);
truelight@602:     SET(a, b, c, d,  4,  7,  T5);
truelight@602:     SET(d, a, b, c,  5, 12,  T6);
truelight@602:     SET(c, d, a, b,  6, 17,  T7);
truelight@602:     SET(b, c, d, a,  7, 22,  T8);
truelight@602:     SET(a, b, c, d,  8,  7,  T9);
truelight@602:     SET(d, a, b, c,  9, 12, T10);
truelight@602:     SET(c, d, a, b, 10, 17, T11);
truelight@602:     SET(b, c, d, a, 11, 22, T12);
truelight@602:     SET(a, b, c, d, 12,  7, T13);
truelight@602:     SET(d, a, b, c, 13, 12, T14);
truelight@602:     SET(c, d, a, b, 14, 17, T15);
truelight@602:     SET(b, c, d, a, 15, 22, T16);
truelight@602: #undef SET
truelight@602: 
truelight@602:      /* Round 2. */
truelight@602:      /* Let [abcd k s i] denote the operation
truelight@602:           a = b + ((a + G(b,c,d) + X[k] + T[i]) <<< s). */
truelight@602: #define G(x, y, z) (((x) & (z)) | ((y) & ~(z)))
truelight@602: #define SET(a, b, c, d, k, s, Ti)\
truelight@602:   t = a + G(b,c,d) + X[k] + Ti;\
truelight@602:   a = ROTATE_LEFT(t, s) + b
truelight@602:      /* Do the following 16 operations. */
truelight@602:     SET(a, b, c, d,  1,  5, T17);
truelight@602:     SET(d, a, b, c,  6,  9, T18);
truelight@602:     SET(c, d, a, b, 11, 14, T19);
truelight@602:     SET(b, c, d, a,  0, 20, T20);
truelight@602:     SET(a, b, c, d,  5,  5, T21);
truelight@602:     SET(d, a, b, c, 10,  9, T22);
truelight@602:     SET(c, d, a, b, 15, 14, T23);
truelight@602:     SET(b, c, d, a,  4, 20, T24);
truelight@602:     SET(a, b, c, d,  9,  5, T25);
truelight@602:     SET(d, a, b, c, 14,  9, T26);
truelight@602:     SET(c, d, a, b,  3, 14, T27);
truelight@602:     SET(b, c, d, a,  8, 20, T28);
truelight@602:     SET(a, b, c, d, 13,  5, T29);
truelight@602:     SET(d, a, b, c,  2,  9, T30);
truelight@602:     SET(c, d, a, b,  7, 14, T31);
truelight@602:     SET(b, c, d, a, 12, 20, T32);
truelight@602: #undef SET
truelight@602: 
truelight@602:      /* Round 3. */
truelight@602:      /* Let [abcd k s t] denote the operation
truelight@602:           a = b + ((a + H(b,c,d) + X[k] + T[i]) <<< s). */
truelight@602: #define H(x, y, z) ((x) ^ (y) ^ (z))
truelight@602: #define SET(a, b, c, d, k, s, Ti)\
truelight@602:   t = a + H(b,c,d) + X[k] + Ti;\
truelight@602:   a = ROTATE_LEFT(t, s) + b
truelight@602:      /* Do the following 16 operations. */
truelight@602:     SET(a, b, c, d,  5,  4, T33);
truelight@602:     SET(d, a, b, c,  8, 11, T34);
truelight@602:     SET(c, d, a, b, 11, 16, T35);
truelight@602:     SET(b, c, d, a, 14, 23, T36);
truelight@602:     SET(a, b, c, d,  1,  4, T37);
truelight@602:     SET(d, a, b, c,  4, 11, T38);
truelight@602:     SET(c, d, a, b,  7, 16, T39);
truelight@602:     SET(b, c, d, a, 10, 23, T40);
truelight@602:     SET(a, b, c, d, 13,  4, T41);
truelight@602:     SET(d, a, b, c,  0, 11, T42);
truelight@602:     SET(c, d, a, b,  3, 16, T43);
truelight@602:     SET(b, c, d, a,  6, 23, T44);
truelight@602:     SET(a, b, c, d,  9,  4, T45);
truelight@602:     SET(d, a, b, c, 12, 11, T46);
truelight@602:     SET(c, d, a, b, 15, 16, T47);
truelight@602:     SET(b, c, d, a,  2, 23, T48);
truelight@602: #undef SET
truelight@602: 
truelight@602:      /* Round 4. */
truelight@602:      /* Let [abcd k s t] denote the operation
truelight@602:           a = b + ((a + I(b,c,d) + X[k] + T[i]) <<< s). */
truelight@602: #define I(x, y, z) ((y) ^ ((x) | ~(z)))
truelight@602: #define SET(a, b, c, d, k, s, Ti)\
truelight@602:   t = a + I(b,c,d) + X[k] + Ti;\
truelight@602:   a = ROTATE_LEFT(t, s) + b
truelight@602:      /* Do the following 16 operations. */
truelight@602:     SET(a, b, c, d,  0,  6, T49);
truelight@602:     SET(d, a, b, c,  7, 10, T50);
truelight@602:     SET(c, d, a, b, 14, 15, T51);
truelight@602:     SET(b, c, d, a,  5, 21, T52);
truelight@602:     SET(a, b, c, d, 12,  6, T53);
truelight@602:     SET(d, a, b, c,  3, 10, T54);
truelight@602:     SET(c, d, a, b, 10, 15, T55);
truelight@602:     SET(b, c, d, a,  1, 21, T56);
truelight@602:     SET(a, b, c, d,  8,  6, T57);
truelight@602:     SET(d, a, b, c, 15, 10, T58);
truelight@602:     SET(c, d, a, b,  6, 15, T59);
truelight@602:     SET(b, c, d, a, 13, 21, T60);
truelight@602:     SET(a, b, c, d,  4,  6, T61);
truelight@602:     SET(d, a, b, c, 11, 10, T62);
truelight@602:     SET(c, d, a, b,  2, 15, T63);
truelight@602:     SET(b, c, d, a,  9, 21, T64);
truelight@602: #undef SET
truelight@602: 
truelight@602:      /* Then perform the following additions. (That is increment each
truelight@602:         of the four registers by the value it had before this block
truelight@602:         was started.) */
truelight@602:     pms->abcd[0] += a;
truelight@602:     pms->abcd[1] += b;
truelight@602:     pms->abcd[2] += c;
truelight@602:     pms->abcd[3] += d;
truelight@602: }
truelight@602: 
truelight@602: void
truelight@602: md5_init(md5_state_t *pms)
truelight@602: {
truelight@602:     pms->count[0] = pms->count[1] = 0;
truelight@602:     pms->abcd[0] = 0x67452301;
truelight@602:     pms->abcd[1] = /*0xefcdab89*/ T_MASK ^ 0x10325476;
truelight@602:     pms->abcd[2] = /*0x98badcfe*/ T_MASK ^ 0x67452301;
truelight@602:     pms->abcd[3] = 0x10325476;
truelight@602: }
truelight@602: 
truelight@602: void
hackykid@1884: md5_append(md5_state_t *pms, const void *data, int nbytes)
truelight@602: {
hackykid@1884:     const md5_byte_t *p = (const md5_byte_t *)data;
truelight@602:     int left = nbytes;
truelight@602:     int offset = (pms->count[0] >> 3) & 63;
truelight@602:     md5_word_t nbits = (md5_word_t)(nbytes << 3);
truelight@602: 
truelight@602:     if (nbytes <= 0)
truelight@602: 	return;
truelight@602: 
truelight@602:     /* Update the message length. */
truelight@602:     pms->count[1] += nbytes >> 29;
truelight@602:     pms->count[0] += nbits;
truelight@602:     if (pms->count[0] < nbits)
truelight@602: 	pms->count[1]++;
truelight@602: 
truelight@602:     /* Process an initial partial block. */
truelight@602:     if (offset) {
truelight@602: 	int copy = (offset + nbytes > 64 ? 64 - offset : nbytes);
truelight@602: 
truelight@602: 	memcpy(pms->buf + offset, p, copy);
truelight@602: 	if (offset + copy < 64)
truelight@602: 	    return;
truelight@602: 	p += copy;
truelight@602: 	left -= copy;
truelight@602: 	md5_process(pms, pms->buf);
truelight@602:     }
truelight@602: 
truelight@602:     /* Process full blocks. */
truelight@602:     for (; left >= 64; p += 64, left -= 64)
truelight@602: 	md5_process(pms, p);
truelight@602: 
truelight@602:     /* Process a final partial block. */
truelight@602:     if (left)
truelight@602: 	memcpy(pms->buf, p, left);
truelight@602: }
truelight@602: 
truelight@602: void
truelight@602: md5_finish(md5_state_t *pms, md5_byte_t digest[16])
truelight@602: {
truelight@602:     static const md5_byte_t pad[64] = {
truelight@602: 	0x80, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
truelight@602: 	0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
truelight@602: 	0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
truelight@602: 	0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
truelight@602:     };
truelight@602:     md5_byte_t data[8];
truelight@602:     int i;
truelight@602: 
truelight@602:     /* Save the length before padding. */
truelight@602:     for (i = 0; i < 8; ++i)
truelight@602: 	data[i] = (md5_byte_t)(pms->count[i >> 2] >> ((i & 3) << 3));
truelight@602:     /* Pad to 56 bytes mod 64. */
truelight@602:     md5_append(pms, pad, ((55 - (pms->count[0] >> 3)) & 63) + 1);
truelight@602:     /* Append the length. */
truelight@602:     md5_append(pms, data, 8);
truelight@602:     for (i = 0; i < 16; ++i)
truelight@602: 	digest[i] = (md5_byte_t)(pms->abcd[i >> 2] >> ((i & 3) << 3));
truelight@602: }