md5.c 7.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247
  1. /*
  2. * This code implements the MD5 message-digest algorithm.
  3. * The algorithm is due to Ron Rivest. This code was
  4. * written by Colin Plumb in 1993, no copyright is claimed.
  5. * This code is in the public domain; do with it what you wish.
  6. *
  7. * Equivalent code is available from RSA Data Security, Inc.
  8. * This code has been tested against that, and is equivalent,
  9. * except that you don't need to include two pages of legalese
  10. * with every copy.
  11. *
  12. * To compute the message digest of a chunk of bytes, declare an
  13. * MD5Context structure, pass it to MD5Init, call MD5Update as
  14. * needed on buffers full of bytes, and then call MD5Final, which
  15. * will fill a supplied 16-byte array with the digest.
  16. */
  17. /* Brutally hacked by John Walker back from ANSI C to K&R (no
  18. prototypes) to maintain the tradition that Netfone will compile
  19. with Sun's original "cc". */
  20. /* Ripped out ugly K&R again ;) --mbuesch */
  21. /* killed stupid endianness thing --jmberg */
  22. #include <memory.h> /* for memcpy() */
  23. #include "md5.h"
  24. /* This function does the Right Thing (tm) on LittleEndian and BigEndian. */
  25. static void byteReverse(unsigned char *buf, unsigned longs)
  26. {
  27. uint32_t t;
  28. do {
  29. t = (uint32_t) ((unsigned) buf[3] << 8 | buf[2]) << 16 |
  30. ((unsigned) buf[1] << 8 | buf[0]);
  31. *(uint32_t *) buf = t;
  32. buf += 4;
  33. } while (--longs);
  34. }
  35. /* The four core functions - F1 is optimized somewhat */
  36. /* #define F1(x, y, z) (x & y | ~x & z) */
  37. #define F1(x, y, z) (z ^ (x & (y ^ z)))
  38. #define F2(x, y, z) F1(z, x, y)
  39. #define F3(x, y, z) (x ^ y ^ z)
  40. #define F4(x, y, z) (y ^ (x | ~z))
  41. /* This is the central step in the MD5 algorithm. */
  42. #define MD5STEP(f, w, x, y, z, data, s) \
  43. ( w += f(x, y, z) + data, w = w<<s | w>>(32-s), w += x )
  44. /*
  45. * The core of the MD5 algorithm, this alters an existing MD5 hash to
  46. * reflect the addition of 16 longwords of new data. MD5Update blocks
  47. * the data and converts bytes into longwords for this routine.
  48. */
  49. static void MD5Transform(uint32_t *buf, uint32_t *in)
  50. {
  51. register uint32_t a, b, c, d;
  52. a = buf[0];
  53. b = buf[1];
  54. c = buf[2];
  55. d = buf[3];
  56. MD5STEP(F1, a, b, c, d, in[0] + 0xd76aa478, 7);
  57. MD5STEP(F1, d, a, b, c, in[1] + 0xe8c7b756, 12);
  58. MD5STEP(F1, c, d, a, b, in[2] + 0x242070db, 17);
  59. MD5STEP(F1, b, c, d, a, in[3] + 0xc1bdceee, 22);
  60. MD5STEP(F1, a, b, c, d, in[4] + 0xf57c0faf, 7);
  61. MD5STEP(F1, d, a, b, c, in[5] + 0x4787c62a, 12);
  62. MD5STEP(F1, c, d, a, b, in[6] + 0xa8304613, 17);
  63. MD5STEP(F1, b, c, d, a, in[7] + 0xfd469501, 22);
  64. MD5STEP(F1, a, b, c, d, in[8] + 0x698098d8, 7);
  65. MD5STEP(F1, d, a, b, c, in[9] + 0x8b44f7af, 12);
  66. MD5STEP(F1, c, d, a, b, in[10] + 0xffff5bb1, 17);
  67. MD5STEP(F1, b, c, d, a, in[11] + 0x895cd7be, 22);
  68. MD5STEP(F1, a, b, c, d, in[12] + 0x6b901122, 7);
  69. MD5STEP(F1, d, a, b, c, in[13] + 0xfd987193, 12);
  70. MD5STEP(F1, c, d, a, b, in[14] + 0xa679438e, 17);
  71. MD5STEP(F1, b, c, d, a, in[15] + 0x49b40821, 22);
  72. MD5STEP(F2, a, b, c, d, in[1] + 0xf61e2562, 5);
  73. MD5STEP(F2, d, a, b, c, in[6] + 0xc040b340, 9);
  74. MD5STEP(F2, c, d, a, b, in[11] + 0x265e5a51, 14);
  75. MD5STEP(F2, b, c, d, a, in[0] + 0xe9b6c7aa, 20);
  76. MD5STEP(F2, a, b, c, d, in[5] + 0xd62f105d, 5);
  77. MD5STEP(F2, d, a, b, c, in[10] + 0x02441453, 9);
  78. MD5STEP(F2, c, d, a, b, in[15] + 0xd8a1e681, 14);
  79. MD5STEP(F2, b, c, d, a, in[4] + 0xe7d3fbc8, 20);
  80. MD5STEP(F2, a, b, c, d, in[9] + 0x21e1cde6, 5);
  81. MD5STEP(F2, d, a, b, c, in[14] + 0xc33707d6, 9);
  82. MD5STEP(F2, c, d, a, b, in[3] + 0xf4d50d87, 14);
  83. MD5STEP(F2, b, c, d, a, in[8] + 0x455a14ed, 20);
  84. MD5STEP(F2, a, b, c, d, in[13] + 0xa9e3e905, 5);
  85. MD5STEP(F2, d, a, b, c, in[2] + 0xfcefa3f8, 9);
  86. MD5STEP(F2, c, d, a, b, in[7] + 0x676f02d9, 14);
  87. MD5STEP(F2, b, c, d, a, in[12] + 0x8d2a4c8a, 20);
  88. MD5STEP(F3, a, b, c, d, in[5] + 0xfffa3942, 4);
  89. MD5STEP(F3, d, a, b, c, in[8] + 0x8771f681, 11);
  90. MD5STEP(F3, c, d, a, b, in[11] + 0x6d9d6122, 16);
  91. MD5STEP(F3, b, c, d, a, in[14] + 0xfde5380c, 23);
  92. MD5STEP(F3, a, b, c, d, in[1] + 0xa4beea44, 4);
  93. MD5STEP(F3, d, a, b, c, in[4] + 0x4bdecfa9, 11);
  94. MD5STEP(F3, c, d, a, b, in[7] + 0xf6bb4b60, 16);
  95. MD5STEP(F3, b, c, d, a, in[10] + 0xbebfbc70, 23);
  96. MD5STEP(F3, a, b, c, d, in[13] + 0x289b7ec6, 4);
  97. MD5STEP(F3, d, a, b, c, in[0] + 0xeaa127fa, 11);
  98. MD5STEP(F3, c, d, a, b, in[3] + 0xd4ef3085, 16);
  99. MD5STEP(F3, b, c, d, a, in[6] + 0x04881d05, 23);
  100. MD5STEP(F3, a, b, c, d, in[9] + 0xd9d4d039, 4);
  101. MD5STEP(F3, d, a, b, c, in[12] + 0xe6db99e5, 11);
  102. MD5STEP(F3, c, d, a, b, in[15] + 0x1fa27cf8, 16);
  103. MD5STEP(F3, b, c, d, a, in[2] + 0xc4ac5665, 23);
  104. MD5STEP(F4, a, b, c, d, in[0] + 0xf4292244, 6);
  105. MD5STEP(F4, d, a, b, c, in[7] + 0x432aff97, 10);
  106. MD5STEP(F4, c, d, a, b, in[14] + 0xab9423a7, 15);
  107. MD5STEP(F4, b, c, d, a, in[5] + 0xfc93a039, 21);
  108. MD5STEP(F4, a, b, c, d, in[12] + 0x655b59c3, 6);
  109. MD5STEP(F4, d, a, b, c, in[3] + 0x8f0ccc92, 10);
  110. MD5STEP(F4, c, d, a, b, in[10] + 0xffeff47d, 15);
  111. MD5STEP(F4, b, c, d, a, in[1] + 0x85845dd1, 21);
  112. MD5STEP(F4, a, b, c, d, in[8] + 0x6fa87e4f, 6);
  113. MD5STEP(F4, d, a, b, c, in[15] + 0xfe2ce6e0, 10);
  114. MD5STEP(F4, c, d, a, b, in[6] + 0xa3014314, 15);
  115. MD5STEP(F4, b, c, d, a, in[13] + 0x4e0811a1, 21);
  116. MD5STEP(F4, a, b, c, d, in[4] + 0xf7537e82, 6);
  117. MD5STEP(F4, d, a, b, c, in[11] + 0xbd3af235, 10);
  118. MD5STEP(F4, c, d, a, b, in[2] + 0x2ad7d2bb, 15);
  119. MD5STEP(F4, b, c, d, a, in[9] + 0xeb86d391, 21);
  120. buf[0] += a;
  121. buf[1] += b;
  122. buf[2] += c;
  123. buf[3] += d;
  124. }
  125. /*
  126. * Start MD5 accumulation. Set bit count to 0 and buffer to mysterious
  127. * initialization constants.
  128. */
  129. void MD5Init(struct MD5Context *ctx)
  130. {
  131. ctx->buf[0] = 0x67452301;
  132. ctx->buf[1] = 0xefcdab89;
  133. ctx->buf[2] = 0x98badcfe;
  134. ctx->buf[3] = 0x10325476;
  135. ctx->bits[0] = 0;
  136. ctx->bits[1] = 0;
  137. }
  138. /*
  139. * Update context to reflect the concatenation of another buffer full
  140. * of bytes.
  141. */
  142. void MD5Update(struct MD5Context *ctx, unsigned char *buf, unsigned len)
  143. {
  144. uint32_t t;
  145. /* Update bitcount */
  146. t = ctx->bits[0];
  147. if ((ctx->bits[0] = t + ((uint32_t) len << 3)) < t)
  148. ctx->bits[1]++; /* Carry from low to high */
  149. ctx->bits[1] += len >> 29;
  150. t = (t >> 3) & 0x3f; /* Bytes already in shsInfo->data */
  151. /* Handle any leading odd-sized chunks */
  152. if (t) {
  153. unsigned char *p = &ctx->u.in[t];
  154. t = 64 - t;
  155. if (len < t) {
  156. memcpy(p, buf, len);
  157. return;
  158. }
  159. memcpy(p, buf, t);
  160. byteReverse(ctx->u.in, 16);
  161. MD5Transform(ctx->buf, ctx->u.in_u32);
  162. buf += t;
  163. len -= t;
  164. }
  165. /* Process data in 64-byte chunks */
  166. while (len >= 64) {
  167. memcpy(ctx->u.in, buf, 64);
  168. byteReverse(ctx->u.in, 16);
  169. MD5Transform(ctx->buf, ctx->u.in_u32);
  170. buf += 64;
  171. len -= 64;
  172. }
  173. /* Handle any remaining bytes of data. */
  174. memcpy(ctx->u.in, buf, len);
  175. }
  176. /*
  177. * Final wrapup - pad to 64-byte boundary with the bit pattern
  178. * 1 0* (64-bit count of bits processed, MSB-first)
  179. */
  180. void MD5Final(unsigned char *digest, struct MD5Context *ctx)
  181. {
  182. unsigned count;
  183. unsigned char *p;
  184. /* Compute number of bytes mod 64 */
  185. count = (ctx->bits[0] >> 3) & 0x3F;
  186. /* Set the first char of padding to 0x80. This is safe since there is
  187. always at least one byte free */
  188. p = &ctx->u.in[count];
  189. *p++ = 0x80;
  190. /* Bytes of padding needed to make 64 bytes */
  191. count = 64 - 1 - count;
  192. /* Pad out to 56 mod 64 */
  193. if (count < 8) {
  194. /* Two lots of padding: Pad the first block to 64 bytes */
  195. memset(p, 0, count);
  196. byteReverse(ctx->u.in, 16);
  197. MD5Transform(ctx->buf, ctx->u.in_u32);
  198. /* Now fill the next block with 56 bytes */
  199. memset(ctx->u.in, 0, 56);
  200. } else {
  201. /* Pad block to 56 bytes */
  202. memset(p, 0, count - 8);
  203. }
  204. byteReverse(ctx->u.in, 14);
  205. /* Append length in bits and transform */
  206. ctx->u.in_u32[14] = ctx->bits[0];
  207. ctx->u.in_u32[15] = ctx->bits[1];
  208. MD5Transform(ctx->buf, ctx->u.in_u32);
  209. byteReverse((unsigned char *) ctx->buf, 4);
  210. memcpy(digest, ctx->buf, 16);
  211. memset(ctx, 0, sizeof(*ctx)); /* In case it's sensitive */
  212. }