3 This file is part of the AVR-Crypto-Lib.
4 Copyright (C) 2008 Daniel Otte (daniel.otte@rub.de)
6 This program is free software: you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation, either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 * \license GPLv3 or later
24 * \brief Implementation of the MD5 hash algorithm as described in RFC 1321
36 void md5_init(md5_ctx_t *s){
45 uint32_t md5_F(uint32_t x, uint32_t y, uint32_t z){
46 return ((x&y)|((~x)&z));
50 uint32_t md5_G(uint32_t x, uint32_t y, uint32_t z){
51 return ((x&z)|((~z)&y));
55 uint32_t md5_H(uint32_t x, uint32_t y, uint32_t z){
60 uint32_t md5_I(uint32_t x, uint32_t y, uint32_t z){
61 return (y ^ (x | (~z)));
64 typedef uint32_t md5_func_t(uint32_t, uint32_t, uint32_t);
66 #define ROTL32(x,n) (((x)<<(n)) | ((x)>>(32-(n))))
69 void md5_core(uint32_t* a, void* block, uint8_t as, uint8_t s, uint8_t i, uint8_t fi){
71 md5_func_t* funcs[]={md5_F, md5_G, md5_H, md5_I};
73 /* a = b + ((a + F(b,c,d) + X[k] + T[i]) <<< s). */
75 char funcc[]={'*', '-', '+', '~'};
76 cli_putstr("\r\n DBG: md5_core [");
78 cli_hexdump(&as, 1); cli_putc(' ');
79 cli_hexdump(&k, 1); cli_putc(' ');
80 cli_hexdump(&s, 1); cli_putc(' ');
81 cli_hexdump(&i, 1); cli_putc(']');
83 t = a[as] + funcs[fi](a[(as+1)&3], a[(as+2)&3], a[(as+3)&3])
84 + *((uint32_t*)block) + pgm_read_dword(md5_T+i) ;
85 a[as]=a[(as+1)&3] + ROTL32(t, s);
88 void md5_nextBlock(md5_ctx_t *state, const void* block){
91 /* this requires other mixed sboxes */
93 cli_putstr("\r\n DBG: md5_nextBlock: block:\r\n");
94 cli_hexdump(block, 16); cli_putstr("\r\n");
95 cli_hexdump(block+16, 16); cli_putstr("\r\n");
96 cli_hexdump(block+32, 16); cli_putstr("\r\n");
97 cli_hexdump(block+48, 16); cli_putstr("\r\n");
106 uint8_t s1t[]={7,12,17,22}; // 1,-1 1,4 2,-1 3,-2
109 md5_core(a, &(((uint32_t*)block)[m*4+n]), 4-n, s1t[n],i++,0);
113 uint8_t s2t[]={5,9,14,20}; // 1,-3 1,1 2,-2 2,4
116 md5_core(a, &(((uint32_t*)block)[(1+m*4+n*5)&0xf]), 4-n, s2t[n],i++,1);
120 uint8_t s3t[]={4,11,16,23}; // 0,4 1,3 2,0 3,-1
123 md5_core(a, &(((uint32_t*)block)[(5-m*4+n*3)&0xf]), 4-n, s3t[n],i++,2);
127 uint8_t s4t[]={6,10,15,21}; // 1,-2 1,2 2,-1 3,-3
130 md5_core(a, &(((uint32_t*)block)[(0-m*4+n*7)&0xf]), 4-n, s4t[n],i++,3);
140 void md5_lastBlock(md5_ctx_t *state, const void* block, uint16_t length_b){
146 while (length_b >= 512){
147 md5_nextBlock(state, block);
149 block = ((uint8_t*)block) + 512/8;
151 memset(buffer.v8, 0, 64);
152 memcpy(buffer.v8, block, length_b/8);
153 /* insert padding one */
157 t = ((uint8_t*)block)[l];
158 t |= (0x80>>(length_b%8));
163 /* insert length value */
164 if(l+sizeof(uint64_t) >= 512/8){
165 md5_nextBlock(state, buffer.v8);
167 memset(buffer.v8, 0, 64-8);
169 buffer.v64[7] = (state->counter * 512) + length_b;
170 md5_nextBlock(state, buffer.v8);
173 void md5_ctx2hash(md5_hash_t* dest, const md5_ctx_t* state){
174 memcpy(dest, state->a, MD5_HASH_BYTES);
177 void md5(md5_hash_t* dest, const void* msg, uint32_t length_b){
180 while(length_b>=MD5_BLOCK_BITS){
181 md5_nextBlock(&ctx, msg);
182 msg = (uint8_t*)msg + MD5_BLOCK_BYTES;
183 length_b -= MD5_BLOCK_BITS;
185 md5_lastBlock(&ctx, msg, length_b);
186 md5_ctx2hash(dest, &ctx);