md5c.c 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377
  1. /*
  2. Copyright (C) 1999 Aladdin Enterprises. All rights reserved.
  3. This software is provided 'as-is', without any express or implied
  4. warranty. In no event will the authors be held liable for any damages
  5. arising from the use of this software.
  6. Permission is granted to anyone to use this software for any purpose,
  7. including commercial applications, and to alter it and redistribute it
  8. freely, subject to the following restrictions:
  9. 1. The origin of this software must not be misrepresented; you must not
  10. claim that you wrote the original software. If you use this software
  11. in a product, an acknowledgment in the product documentation would be
  12. appreciated but is not required.
  13. 2. Altered source versions must be plainly marked as such, and must not be
  14. misrepresented as being the original software.
  15. 3. This notice may not be removed or altered from any source distribution.
  16. L. Peter Deutsch
  17. ghost@aladdin.com
  18. */
  19. /*
  20. This code implements the MD5 Algorithm defined in RFC 1321.
  21. It is derived directly from the text of the RFC and not from the
  22. reference implementation.
  23. The original and principal author of ansi2knr is L. Peter Deutsch
  24. <ghost@aladdin.com>. Other authors are noted in the change history
  25. that follows (in reverse chronological order):
  26. 1999-05-03 lpd Original version.
  27. */
  28. /*$Id: md5c.c,v 1.1 1999/05/28 07:07:17 mike Exp $ */
  29. #include "md5.h"
  30. #ifdef TEST
  31. /*
  32. * Compile with -DTEST to create a self-contained executable test program.
  33. * The test program should print out the same values as given in section
  34. * A.5 of RFC 1321, reproduced below.
  35. */
  36. #include <string.h>
  37. main() {
  38. static const char *const test[7] = {
  39. "", /*d41d8cd98f00b204e9800998ecf8427e*/
  40. "a", /*0cc175b9c0f1b6a831c399e269772661*/
  41. "abc", /*900150983cd24fb0d6963f7d28e17f72*/
  42. "message digest", /*f96b697d7cb7938d525a2f31aaf161d0*/
  43. "abcdefghijklmnopqrstuvwxyz", /*c3fcd3d76192e4007dfb496cca67e13b*/
  44. "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",
  45. /*d174ab98d277d9f5a5611c2c9f419d9f*/
  46. "123456789012345678901234567890123456789012345678901234567890123456789012"
  47. "34567890" /*57edf4a22be3c955ac49da2e2107b67a*/
  48. };
  49. int i;
  50. for (i = 0; i < 7; ++i) {
  51. md5_state_t state;
  52. md5_byte_t digest[16];
  53. int di;
  54. md5_init(&state);
  55. md5_append(&state, (const md5_byte_t *)test[i], strlen(test[i]));
  56. md5_finish(&state, digest);
  57. printf("MD5 (\"%s\") = ", test[i]);
  58. for (di = 0; di < 16; ++di)
  59. printf("%02x", digest[di]);
  60. printf("\n");
  61. }
  62. return 0;
  63. }
  64. #endif /* TEST */
  65. /*
  66. * For reference, here is the program that computed the T values.
  67. */
  68. #if 0
  69. #include <math.h>
  70. main()
  71. {
  72. int i;
  73. for (i = 1; i <= 64; ++i) {
  74. unsigned long v = (unsigned long)(4294967296.0 * fabs(sin((double)i)));
  75. printf("#define T%d 0x%08lx\n", i, v);
  76. }
  77. return 0;
  78. }
  79. #endif
  80. /*
  81. * End of T computation program.
  82. */
  83. #define T1 0xd76aa478
  84. #define T2 0xe8c7b756
  85. #define T3 0x242070db
  86. #define T4 0xc1bdceee
  87. #define T5 0xf57c0faf
  88. #define T6 0x4787c62a
  89. #define T7 0xa8304613
  90. #define T8 0xfd469501
  91. #define T9 0x698098d8
  92. #define T10 0x8b44f7af
  93. #define T11 0xffff5bb1
  94. #define T12 0x895cd7be
  95. #define T13 0x6b901122
  96. #define T14 0xfd987193
  97. #define T15 0xa679438e
  98. #define T16 0x49b40821
  99. #define T17 0xf61e2562
  100. #define T18 0xc040b340
  101. #define T19 0x265e5a51
  102. #define T20 0xe9b6c7aa
  103. #define T21 0xd62f105d
  104. #define T22 0x02441453
  105. #define T23 0xd8a1e681
  106. #define T24 0xe7d3fbc8
  107. #define T25 0x21e1cde6
  108. #define T26 0xc33707d6
  109. #define T27 0xf4d50d87
  110. #define T28 0x455a14ed
  111. #define T29 0xa9e3e905
  112. #define T30 0xfcefa3f8
  113. #define T31 0x676f02d9
  114. #define T32 0x8d2a4c8a
  115. #define T33 0xfffa3942
  116. #define T34 0x8771f681
  117. #define T35 0x6d9d6122
  118. #define T36 0xfde5380c
  119. #define T37 0xa4beea44
  120. #define T38 0x4bdecfa9
  121. #define T39 0xf6bb4b60
  122. #define T40 0xbebfbc70
  123. #define T41 0x289b7ec6
  124. #define T42 0xeaa127fa
  125. #define T43 0xd4ef3085
  126. #define T44 0x04881d05
  127. #define T45 0xd9d4d039
  128. #define T46 0xe6db99e5
  129. #define T47 0x1fa27cf8
  130. #define T48 0xc4ac5665
  131. #define T49 0xf4292244
  132. #define T50 0x432aff97
  133. #define T51 0xab9423a7
  134. #define T52 0xfc93a039
  135. #define T53 0x655b59c3
  136. #define T54 0x8f0ccc92
  137. #define T55 0xffeff47d
  138. #define T56 0x85845dd1
  139. #define T57 0x6fa87e4f
  140. #define T58 0xfe2ce6e0
  141. #define T59 0xa3014314
  142. #define T60 0x4e0811a1
  143. #define T61 0xf7537e82
  144. #define T62 0xbd3af235
  145. #define T63 0x2ad7d2bb
  146. #define T64 0xeb86d391
  147. static void md5_process(md5_state_t *pms, const md5_byte_t *data /*[64]*/) {
  148. md5_word_t a = pms->abcd[0], b = pms->abcd[1], c = pms->abcd[2],
  149. d = pms->abcd[3];
  150. md5_word_t t;
  151. #ifndef ARCH_IS_BIG_ENDIAN
  152. #define ARCH_IS_BIG_ENDIAN 1 /* slower, default implementation */
  153. #endif
  154. #if ARCH_IS_BIG_ENDIAN
  155. /*
  156. * On big-endian machines, we must arrange the bytes in the right
  157. * order. (This also works on machines of unknown byte order.)
  158. */
  159. md5_word_t X[16];
  160. const md5_byte_t *xp = data;
  161. int i;
  162. for (i = 0; i < 16; ++i, xp += 4)
  163. X[i] = xp[0] + (xp[1] << 8) + (xp[2] << 16) + (xp[3] << 24);
  164. #else /* !ARCH_IS_BIG_ENDIAN */
  165. /*
  166. * On little-endian machines, we can process properly aligned data
  167. * without copying it.
  168. */
  169. md5_word_t xbuf[16];
  170. const md5_word_t *X;
  171. if (!((data - (const md5_byte_t *)0) & 3)) {
  172. /* data are properly aligned */
  173. X = (const md5_word_t *)data;
  174. } else {
  175. /* not aligned */
  176. memcpy(xbuf, data, 64);
  177. X = xbuf;
  178. }
  179. #endif
  180. #define ROTATE_LEFT(x, n) (((x) << (n)) | ((x) >> (32 - (n))))
  181. /* Round 1. */
  182. /* Let [abcd k s i] denote the operation
  183. a = b + ((a + F(b,c,d) + X[k] + T[i]) <<< s). */
  184. #define F(x, y, z) (((x) & (y)) | (~(x) & (z)))
  185. #define SET(a, b, c, d, k, s, Ti) \
  186. t = a + F(b, c, d) + X[k] + Ti; \
  187. a = ROTATE_LEFT(t, s) + b
  188. /* Do the following 16 operations. */
  189. SET(a, b, c, d, 0, 7, T1);
  190. SET(d, a, b, c, 1, 12, T2);
  191. SET(c, d, a, b, 2, 17, T3);
  192. SET(b, c, d, a, 3, 22, T4);
  193. SET(a, b, c, d, 4, 7, T5);
  194. SET(d, a, b, c, 5, 12, T6);
  195. SET(c, d, a, b, 6, 17, T7);
  196. SET(b, c, d, a, 7, 22, T8);
  197. SET(a, b, c, d, 8, 7, T9);
  198. SET(d, a, b, c, 9, 12, T10);
  199. SET(c, d, a, b, 10, 17, T11);
  200. SET(b, c, d, a, 11, 22, T12);
  201. SET(a, b, c, d, 12, 7, T13);
  202. SET(d, a, b, c, 13, 12, T14);
  203. SET(c, d, a, b, 14, 17, T15);
  204. SET(b, c, d, a, 15, 22, T16);
  205. #undef SET
  206. /* Round 2. */
  207. /* Let [abcd k s i] denote the operation
  208. a = b + ((a + G(b,c,d) + X[k] + T[i]) <<< s). */
  209. #define G(x, y, z) (((x) & (z)) | ((y) & ~(z)))
  210. #define SET(a, b, c, d, k, s, Ti) \
  211. t = a + G(b, c, d) + X[k] + Ti; \
  212. a = ROTATE_LEFT(t, s) + b
  213. /* Do the following 16 operations. */
  214. SET(a, b, c, d, 1, 5, T17);
  215. SET(d, a, b, c, 6, 9, T18);
  216. SET(c, d, a, b, 11, 14, T19);
  217. SET(b, c, d, a, 0, 20, T20);
  218. SET(a, b, c, d, 5, 5, T21);
  219. SET(d, a, b, c, 10, 9, T22);
  220. SET(c, d, a, b, 15, 14, T23);
  221. SET(b, c, d, a, 4, 20, T24);
  222. SET(a, b, c, d, 9, 5, T25);
  223. SET(d, a, b, c, 14, 9, T26);
  224. SET(c, d, a, b, 3, 14, T27);
  225. SET(b, c, d, a, 8, 20, T28);
  226. SET(a, b, c, d, 13, 5, T29);
  227. SET(d, a, b, c, 2, 9, T30);
  228. SET(c, d, a, b, 7, 14, T31);
  229. SET(b, c, d, a, 12, 20, T32);
  230. #undef SET
  231. /* Round 3. */
  232. /* Let [abcd k s t] denote the operation
  233. a = b + ((a + H(b,c,d) + X[k] + T[i]) <<< s). */
  234. #define H(x, y, z) ((x) ^ (y) ^ (z))
  235. #define SET(a, b, c, d, k, s, Ti) \
  236. t = a + H(b, c, d) + X[k] + Ti; \
  237. a = ROTATE_LEFT(t, s) + b
  238. /* Do the following 16 operations. */
  239. SET(a, b, c, d, 5, 4, T33);
  240. SET(d, a, b, c, 8, 11, T34);
  241. SET(c, d, a, b, 11, 16, T35);
  242. SET(b, c, d, a, 14, 23, T36);
  243. SET(a, b, c, d, 1, 4, T37);
  244. SET(d, a, b, c, 4, 11, T38);
  245. SET(c, d, a, b, 7, 16, T39);
  246. SET(b, c, d, a, 10, 23, T40);
  247. SET(a, b, c, d, 13, 4, T41);
  248. SET(d, a, b, c, 0, 11, T42);
  249. SET(c, d, a, b, 3, 16, T43);
  250. SET(b, c, d, a, 6, 23, T44);
  251. SET(a, b, c, d, 9, 4, T45);
  252. SET(d, a, b, c, 12, 11, T46);
  253. SET(c, d, a, b, 15, 16, T47);
  254. SET(b, c, d, a, 2, 23, T48);
  255. #undef SET
  256. /* Round 4. */
  257. /* Let [abcd k s t] denote the operation
  258. a = b + ((a + I(b,c,d) + X[k] + T[i]) <<< s). */
  259. #define I(x, y, z) ((y) ^ ((x) | ~(z)))
  260. #define SET(a, b, c, d, k, s, Ti) \
  261. t = a + I(b, c, d) + X[k] + Ti; \
  262. a = ROTATE_LEFT(t, s) + b
  263. /* Do the following 16 operations. */
  264. SET(a, b, c, d, 0, 6, T49);
  265. SET(d, a, b, c, 7, 10, T50);
  266. SET(c, d, a, b, 14, 15, T51);
  267. SET(b, c, d, a, 5, 21, T52);
  268. SET(a, b, c, d, 12, 6, T53);
  269. SET(d, a, b, c, 3, 10, T54);
  270. SET(c, d, a, b, 10, 15, T55);
  271. SET(b, c, d, a, 1, 21, T56);
  272. SET(a, b, c, d, 8, 6, T57);
  273. SET(d, a, b, c, 15, 10, T58);
  274. SET(c, d, a, b, 6, 15, T59);
  275. SET(b, c, d, a, 13, 21, T60);
  276. SET(a, b, c, d, 4, 6, T61);
  277. SET(d, a, b, c, 11, 10, T62);
  278. SET(c, d, a, b, 2, 15, T63);
  279. SET(b, c, d, a, 9, 21, T64);
  280. #undef SET
  281. /* Then perform the following additions. (That is increment each
  282. of the four registers by the value it had before this block
  283. was started.) */
  284. pms->abcd[0] += a;
  285. pms->abcd[1] += b;
  286. pms->abcd[2] += c;
  287. pms->abcd[3] += d;
  288. }
  289. void md5_init(md5_state_t *pms) {
  290. pms->count[0] = pms->count[1] = 0;
  291. pms->abcd[0] = 0x67452301;
  292. pms->abcd[1] = 0xefcdab89;
  293. pms->abcd[2] = 0x98badcfe;
  294. pms->abcd[3] = 0x10325476;
  295. }
  296. void md5_append(md5_state_t *pms, const md5_byte_t *data, int nbytes) {
  297. const md5_byte_t *p = data;
  298. int left = nbytes;
  299. int offset = (pms->count[0] >> 3) & 63;
  300. md5_word_t nbits = (md5_word_t)(nbytes << 3);
  301. if (nbytes <= 0)
  302. return;
  303. /* Update the message length. */
  304. pms->count[1] += nbytes >> 29;
  305. pms->count[0] += nbits;
  306. if (pms->count[0] < nbits)
  307. pms->count[1]++;
  308. /* Process an initial partial block. */
  309. if (offset) {
  310. int copy = (offset + nbytes > 64 ? 64 - offset : nbytes);
  311. memcpy(pms->buf + offset, p, copy);
  312. if (offset + copy < 64)
  313. return;
  314. p += copy;
  315. left -= copy;
  316. md5_process(pms, pms->buf);
  317. }
  318. /* Process full blocks. */
  319. for (; left >= 64; p += 64, left -= 64)
  320. md5_process(pms, p);
  321. /* Process a final partial block. */
  322. if (left)
  323. memcpy(pms->buf, p, left);
  324. }
  325. void md5_finish(md5_state_t *pms, md5_byte_t digest[16]) {
  326. static const md5_byte_t pad[64] = {
  327. 0x80, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  328. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  329. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0};
  330. md5_byte_t data[8];
  331. int i;
  332. /* Save the length before padding. */
  333. for (i = 0; i < 8; ++i)
  334. data[i] = (md5_byte_t)(pms->count[i >> 2] >> ((i & 3) << 3));
  335. /* Pad to 56 bytes mod 64. */
  336. md5_append(pms, pad, ((55 - (pms->count[0] >> 3)) & 63) + 1);
  337. /* Append the length. */
  338. md5_append(pms, data, 8);
  339. for (i = 0; i < 16; ++i)
  340. digest[i] = (md5_byte_t)(pms->abcd[i >> 2] >> ((i & 3) << 3));
  341. }