2 * Copyright (C) 2007 Michael Niedermayer <michaelni@gmx.at>
3 * Copyright (C) 2013 James Almer
5 * This file is part of FFmpeg.
7 * FFmpeg is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
12 * FFmpeg is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with FFmpeg; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
24 #include "attributes.h"
27 #include "intreadwrite.h"
32 typedef struct AVRIPEMD {
33 uint8_t digest_len; ///< digest length in 32-bit words
34 uint64_t count; ///< number of bytes in buffer
35 uint8_t buffer[64]; ///< 512-bit buffer of input values used in hash updating
36 uint32_t state[10]; ///< current hash value
37 /** function used to update hash for 512-bit input block */
38 void (*transform)(uint32_t *state, const uint8_t buffer[64]);
41 const int av_ripemd_size = sizeof(AVRIPEMD);
43 struct AVRIPEMD *av_ripemd_alloc(void)
45 return av_mallocz(sizeof(struct AVRIPEMD));
48 static const uint32_t KA[4] = {
49 0x5a827999, 0x6ed9eba1, 0x8f1bbcdc, 0xa953fd4e
52 static const uint32_t KB[4] = {
53 0x50a28be6, 0x5c4dd124, 0x6d703ef3, 0x7a6d76e9
56 static const int ROTA[80] = {
57 11, 14, 15, 12, 5, 8, 7 , 9, 11, 13, 14, 15, 6, 7, 9, 8,
58 7 , 6, 8, 13, 11, 9, 7, 15, 7, 12, 15, 9, 11, 7, 13, 12,
59 11, 13, 6, 7, 14, 9, 13, 15, 14, 8, 13, 6, 5, 12, 7, 5,
60 11, 12, 14, 15, 14, 15, 9, 8, 9, 14, 5, 6, 8, 6, 5, 12,
61 9, 15, 5, 11, 6, 8, 13, 12, 5, 12, 13, 14, 11, 8, 5, 6
64 static const int ROTB[80] = {
65 8, 9, 9, 11, 13, 15, 15, 5, 7, 7, 8, 11, 14, 14, 12, 6,
66 9, 13, 15, 7, 12, 8, 9, 11, 7, 7, 12, 7, 6, 15, 13, 11,
67 9, 7, 15, 11, 8, 6, 6, 14, 12, 13, 5, 14, 13, 13, 7, 5,
68 15, 5, 8, 11, 14, 14, 6, 14, 6, 9, 12, 9, 12, 5, 15, 8,
69 8, 5, 12, 9, 12, 5, 14, 6, 8, 13, 6, 5, 15, 13, 11, 11
72 static const int WA[80] = {
73 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
74 7, 4, 13, 1, 10, 6, 15, 3, 12, 0, 9, 5, 2, 14, 11, 8,
75 3, 10, 14, 4, 9, 15, 8, 1, 2, 7, 0, 6, 13, 11, 5, 12,
76 1, 9, 11, 10, 0, 8, 12, 4, 13, 3, 7, 15, 14, 5, 6, 2,
77 4, 0, 5, 9, 7, 12, 2, 10, 14, 1, 3, 8, 11, 6, 15, 13
80 static const int WB[80] = {
81 5, 14, 7, 0, 9, 2, 11, 4, 13, 6, 15, 8, 1, 10, 3, 12,
82 6, 11, 3, 7, 0, 13, 5, 10, 14, 15, 8, 12, 4, 9, 1, 2,
83 15, 5, 1, 3, 7, 14, 6, 9, 11, 8, 12, 2, 10, 0, 4, 13,
84 8, 6, 4, 1, 3, 11, 15, 0, 5, 12, 2, 13, 9, 7, 10, 14,
85 12, 15, 10, 4, 1, 5, 8, 7, 6, 2, 13, 14, 0, 3, 9, 11
88 #define rol(value, bits) (((value) << (bits)) | ((value) >> (32 - (bits))))
90 #define ROUND128_0_TO_15(a,b,c,d,e,f,g,h) \
91 a = rol(a + (( b ^ c ^ d) + block[WA[n]]), ROTA[n]); \
92 e = rol(e + ((((f ^ g) & h) ^ g) + block[WB[n]] + KB[0]), ROTB[n]); \
95 #define ROUND128_16_TO_31(a,b,c,d,e,f,g,h) \
96 a = rol(a + ((((c ^ d) & b) ^ d) + block[WA[n]] + KA[0]), ROTA[n]); \
97 e = rol(e + (((~g | f) ^ h) + block[WB[n]] + KB[1]), ROTB[n]); \
100 #define ROUND128_32_TO_47(a,b,c,d,e,f,g,h) \
101 a = rol(a + (((~c | b) ^ d) + block[WA[n]] + KA[1]), ROTA[n]); \
102 e = rol(e + ((((g ^ h) & f) ^ h) + block[WB[n]] + KB[2]), ROTB[n]); \
105 #define ROUND128_48_TO_63(a,b,c,d,e,f,g,h) \
106 a = rol(a + ((((b ^ c) & d) ^ c) + block[WA[n]] + KA[2]), ROTA[n]); \
107 e = rol(e + (( f ^ g ^ h) + block[WB[n]]), ROTB[n]); \
111 ROUND128_0_TO_15(a,b,c,d,e,f,g,h); \
112 ROUND128_0_TO_15(d,a,b,c,h,e,f,g); \
113 ROUND128_0_TO_15(c,d,a,b,g,h,e,f); \
114 ROUND128_0_TO_15(b,c,d,a,f,g,h,e)
117 ROUND128_16_TO_31(a,b,c,d,e,f,g,h); \
118 ROUND128_16_TO_31(d,a,b,c,h,e,f,g); \
119 ROUND128_16_TO_31(c,d,a,b,g,h,e,f); \
120 ROUND128_16_TO_31(b,c,d,a,f,g,h,e)
123 ROUND128_32_TO_47(a,b,c,d,e,f,g,h); \
124 ROUND128_32_TO_47(d,a,b,c,h,e,f,g); \
125 ROUND128_32_TO_47(c,d,a,b,g,h,e,f); \
126 ROUND128_32_TO_47(b,c,d,a,f,g,h,e)
129 ROUND128_48_TO_63(a,b,c,d,e,f,g,h); \
130 ROUND128_48_TO_63(d,a,b,c,h,e,f,g); \
131 ROUND128_48_TO_63(c,d,a,b,g,h,e,f); \
132 ROUND128_48_TO_63(b,c,d,a,f,g,h,e)
134 static void ripemd128_transform(uint32_t *state, const uint8_t buffer[64])
136 uint32_t a, b, c, d, e, f, g, h, av_unused t;
145 for (n = 0; n < 16; n++)
146 block[n] = AV_RL32(buffer + 4 * n);
151 ROUND128_0_TO_15(a,b,c,d,e,f,g,h);
152 t = d; d = c; c = b; b = a; a = t;
153 t = h; h = g; g = f; f = e; e = t;
157 ROUND128_16_TO_31(a,b,c,d,e,f,g,h);
158 t = d; d = c; c = b; b = a; a = t;
159 t = h; h = g; g = f; f = e; e = t;
163 ROUND128_32_TO_47(a,b,c,d,e,f,g,h);
164 t = d; d = c; c = b; b = a; a = t;
165 t = h; h = g; g = f; f = e; e = t;
169 ROUND128_48_TO_63(a,b,c,d,e,f,g,h);
170 t = d; d = c; c = b; b = a; a = t;
171 t = h; h = g; g = f; f = e; e = t;
175 R128_0; R128_0; R128_0; R128_0;
177 R128_16; R128_16; R128_16; R128_16;
179 R128_32; R128_32; R128_32; R128_32;
181 R128_48; R128_48; R128_48; R128_48;
185 state[1] = state[2] + d + e;
186 state[2] = state[3] + a + f;
187 state[3] = state[0] + b + g;
191 static void ripemd256_transform(uint32_t *state, const uint8_t buffer[64])
193 uint32_t a, b, c, d, e, f, g, h, av_unused t;
197 a = state[0]; b = state[1]; c = state[2]; d = state[3];
198 e = state[4]; f = state[5]; g = state[6]; h = state[7];
200 for (n = 0; n < 16; n++)
201 block[n] = AV_RL32(buffer + 4 * n);
206 ROUND128_0_TO_15(a,b,c,d,e,f,g,h);
207 t = d; d = c; c = b; b = a; a = t;
208 t = h; h = g; g = f; f = e; e = t;
210 FFSWAP(uint32_t, a, e);
213 ROUND128_16_TO_31(a,b,c,d,e,f,g,h);
214 t = d; d = c; c = b; b = a; a = t;
215 t = h; h = g; g = f; f = e; e = t;
217 FFSWAP(uint32_t, b, f);
220 ROUND128_32_TO_47(a,b,c,d,e,f,g,h);
221 t = d; d = c; c = b; b = a; a = t;
222 t = h; h = g; g = f; f = e; e = t;
224 FFSWAP(uint32_t, c, g);
227 ROUND128_48_TO_63(a,b,c,d,e,f,g,h);
228 t = d; d = c; c = b; b = a; a = t;
229 t = h; h = g; g = f; f = e; e = t;
231 FFSWAP(uint32_t, d, h);
234 R128_0; R128_0; R128_0; R128_0;
235 FFSWAP(uint32_t, a, e);
237 R128_16; R128_16; R128_16; R128_16;
238 FFSWAP(uint32_t, b, f);
240 R128_32; R128_32; R128_32; R128_32;
241 FFSWAP(uint32_t, c, g);
243 R128_48; R128_48; R128_48; R128_48;
244 FFSWAP(uint32_t, d, h);
247 state[0] += a; state[1] += b; state[2] += c; state[3] += d;
248 state[4] += e; state[5] += f; state[6] += g; state[7] += h;
251 #define ROTATE(x,y) \
256 #define ROUND160_0_TO_15(a,b,c,d,e,f,g,h,i,j) \
257 a = rol(a + (( b ^ c ^ d) + block[WA[n]]), ROTA[n]) + e; \
258 f = rol(f + (((~i | h) ^ g) + block[WB[n]] + KB[0]), ROTB[n]) + j; \
261 #define ROUND160_16_TO_31(a,b,c,d,e,f,g,h,i,j) \
262 a = rol(a + ((((c ^ d) & b) ^ d) + block[WA[n]] + KA[0]), ROTA[n]) + e; \
263 f = rol(f + ((((g ^ h) & i) ^ h) + block[WB[n]] + KB[1]), ROTB[n]) + j; \
266 #define ROUND160_32_TO_47(a,b,c,d,e,f,g,h,i,j) \
267 a = rol(a + (((~c | b) ^ d) + block[WA[n]] + KA[1]), ROTA[n]) + e; \
268 f = rol(f + (((~h | g) ^ i) + block[WB[n]] + KB[2]), ROTB[n]) + j; \
271 #define ROUND160_48_TO_63(a,b,c,d,e,f,g,h,i,j) \
272 a = rol(a + ((((b ^ c) & d) ^ c) + block[WA[n]] + KA[2]), ROTA[n]) + e; \
273 f = rol(f + ((((h ^ i) & g) ^ i) + block[WB[n]] + KB[3]), ROTB[n]) + j; \
276 #define ROUND160_64_TO_79(a,b,c,d,e,f,g,h,i,j) \
277 a = rol(a + (((~d | c) ^ b) + block[WA[n]] + KA[3]), ROTA[n]) + e; \
278 f = rol(f + (( g ^ h ^ i) + block[WB[n]]), ROTB[n]) + j; \
282 ROUND160_0_TO_15(a,b,c,d,e,f,g,h,i,j); \
283 ROUND160_0_TO_15(e,a,b,c,d,j,f,g,h,i); \
284 ROUND160_0_TO_15(d,e,a,b,c,i,j,f,g,h); \
285 ROUND160_0_TO_15(c,d,e,a,b,h,i,j,f,g); \
286 ROUND160_0_TO_15(b,c,d,e,a,g,h,i,j,f)
289 ROUND160_16_TO_31(e,a,b,c,d,j,f,g,h,i); \
290 ROUND160_16_TO_31(d,e,a,b,c,i,j,f,g,h); \
291 ROUND160_16_TO_31(c,d,e,a,b,h,i,j,f,g); \
292 ROUND160_16_TO_31(b,c,d,e,a,g,h,i,j,f); \
293 ROUND160_16_TO_31(a,b,c,d,e,f,g,h,i,j)
296 ROUND160_32_TO_47(d,e,a,b,c,i,j,f,g,h); \
297 ROUND160_32_TO_47(c,d,e,a,b,h,i,j,f,g); \
298 ROUND160_32_TO_47(b,c,d,e,a,g,h,i,j,f); \
299 ROUND160_32_TO_47(a,b,c,d,e,f,g,h,i,j); \
300 ROUND160_32_TO_47(e,a,b,c,d,j,f,g,h,i)
303 ROUND160_48_TO_63(c,d,e,a,b,h,i,j,f,g); \
304 ROUND160_48_TO_63(b,c,d,e,a,g,h,i,j,f); \
305 ROUND160_48_TO_63(a,b,c,d,e,f,g,h,i,j); \
306 ROUND160_48_TO_63(e,a,b,c,d,j,f,g,h,i); \
307 ROUND160_48_TO_63(d,e,a,b,c,i,j,f,g,h)
310 ROUND160_64_TO_79(b,c,d,e,a,g,h,i,j,f); \
311 ROUND160_64_TO_79(a,b,c,d,e,f,g,h,i,j); \
312 ROUND160_64_TO_79(e,a,b,c,d,j,f,g,h,i); \
313 ROUND160_64_TO_79(d,e,a,b,c,i,j,f,g,h); \
314 ROUND160_64_TO_79(c,d,e,a,b,h,i,j,f,g)
316 static void ripemd160_transform(uint32_t *state, const uint8_t buffer[64])
318 uint32_t a, b, c, d, e, f, g, h, i, j, av_unused t;
328 for (n = 0; n < 16; n++)
329 block[n] = AV_RL32(buffer + 4 * n);
334 ROUND160_0_TO_15(a,b,c,d,e,f,g,h,i,j);
335 t = e; e = d; d = c; c = b; b = a; a = t;
336 t = j; j = i; i = h; h = g; g = f; f = t;
340 ROUND160_16_TO_31(a,b,c,d,e,f,g,h,i,j);
341 t = e; e = d; d = c; c = b; b = a; a = t;
342 t = j; j = i; i = h; h = g; g = f; f = t;
346 ROUND160_32_TO_47(a,b,c,d,e,f,g,h,i,j);
347 t = e; e = d; d = c; c = b; b = a; a = t;
348 t = j; j = i; i = h; h = g; g = f; f = t;
352 ROUND160_48_TO_63(a,b,c,d,e,f,g,h,i,j);
353 t = e; e = d; d = c; c = b; b = a; a = t;
354 t = j; j = i; i = h; h = g; g = f; f = t;
358 ROUND160_64_TO_79(a,b,c,d,e,f,g,h,i,j);
359 t = e; e = d; d = c; c = b; b = a; a = t;
360 t = j; j = i; i = h; h = g; g = f; f = t;
364 R160_0; R160_0; R160_0;
365 ROUND160_0_TO_15(a,b,c,d,e,f,g,h,i,j);
367 R160_16; R160_16; R160_16;
368 ROUND160_16_TO_31(e,a,b,c,d,j,f,g,h,i);
370 R160_32; R160_32; R160_32;
371 ROUND160_32_TO_47(d,e,a,b,c,i,j,f,g,h);
373 R160_48; R160_48; R160_48;
374 ROUND160_48_TO_63(c,d,e,a,b,h,i,j,f,g);
376 R160_64; R160_64; R160_64;
377 ROUND160_64_TO_79(b,c,d,e,a,g,h,i,j,f);
381 state[1] = state[2] + d + j;
382 state[2] = state[3] + e + f;
383 state[3] = state[4] + a + g;
384 state[4] = state[0] + b + h;
388 static void ripemd320_transform(uint32_t *state, const uint8_t buffer[64])
390 uint32_t a, b, c, d, e, f, g, h, i, j, av_unused t;
394 a = state[0]; b = state[1]; c = state[2]; d = state[3]; e = state[4];
395 f = state[5]; g = state[6]; h = state[7]; i = state[8]; j = state[9];
397 for (n = 0; n < 16; n++)
398 block[n] = AV_RL32(buffer + 4 * n);
403 ROUND160_0_TO_15(a,b,c,d,e,f,g,h,i,j);
404 t = e; e = d; d = c; c = b; b = a; a = t;
405 t = j; j = i; i = h; h = g; g = f; f = t;
407 FFSWAP(uint32_t, b, g);
410 ROUND160_16_TO_31(a,b,c,d,e,f,g,h,i,j);
411 t = e; e = d; d = c; c = b; b = a; a = t;
412 t = j; j = i; i = h; h = g; g = f; f = t;
414 FFSWAP(uint32_t, d, i);
417 ROUND160_32_TO_47(a,b,c,d,e,f,g,h,i,j);
418 t = e; e = d; d = c; c = b; b = a; a = t;
419 t = j; j = i; i = h; h = g; g = f; f = t;
421 FFSWAP(uint32_t, a, f);
424 ROUND160_48_TO_63(a,b,c,d,e,f,g,h,i,j);
425 t = e; e = d; d = c; c = b; b = a; a = t;
426 t = j; j = i; i = h; h = g; g = f; f = t;
428 FFSWAP(uint32_t, c, h);
431 ROUND160_64_TO_79(a,b,c,d,e,f,g,h,i,j);
432 t = e; e = d; d = c; c = b; b = a; a = t;
433 t = j; j = i; i = h; h = g; g = f; f = t;
435 FFSWAP(uint32_t, e, j);
438 R160_0; R160_0; R160_0;
439 ROUND160_0_TO_15(a,b,c,d,e,f,g,h,i,j);
440 FFSWAP(uint32_t, a, f);
442 R160_16; R160_16; R160_16;
443 ROUND160_16_TO_31(e,a,b,c,d,j,f,g,h,i);
444 FFSWAP(uint32_t, b, g);
446 R160_32; R160_32; R160_32;
447 ROUND160_32_TO_47(d,e,a,b,c,i,j,f,g,h);
448 FFSWAP(uint32_t, c, h);
450 R160_48; R160_48; R160_48;
451 ROUND160_48_TO_63(c,d,e,a,b,h,i,j,f,g);
452 FFSWAP(uint32_t, d, i);
454 R160_64; R160_64; R160_64;
455 ROUND160_64_TO_79(b,c,d,e,a,g,h,i,j,f);
456 FFSWAP(uint32_t, e, j);
459 state[0] += a; state[1] += b; state[2] += c; state[3] += d; state[4] += e;
460 state[5] += f; state[6] += g; state[7] += h; state[8] += i; state[9] += j;
463 av_cold int av_ripemd_init(AVRIPEMD *ctx, int bits)
465 ctx->digest_len = bits >> 5;
467 case 128: // RIPEMD-128
468 ctx->state[0] = 0x67452301;
469 ctx->state[1] = 0xEFCDAB89;
470 ctx->state[2] = 0x98BADCFE;
471 ctx->state[3] = 0x10325476;
472 ctx->transform = ripemd128_transform;
474 case 160: // RIPEMD-160
475 ctx->state[0] = 0x67452301;
476 ctx->state[1] = 0xEFCDAB89;
477 ctx->state[2] = 0x98BADCFE;
478 ctx->state[3] = 0x10325476;
479 ctx->state[4] = 0xC3D2E1F0;
480 ctx->transform = ripemd160_transform;
482 case 256: // RIPEMD-256
483 ctx->state[0] = 0x67452301;
484 ctx->state[1] = 0xEFCDAB89;
485 ctx->state[2] = 0x98BADCFE;
486 ctx->state[3] = 0x10325476;
487 ctx->state[4] = 0x76543210;
488 ctx->state[5] = 0xFEDCBA98;
489 ctx->state[6] = 0x89ABCDEF;
490 ctx->state[7] = 0x01234567;
491 ctx->transform = ripemd256_transform;
493 case 320: // RIPEMD-320
494 ctx->state[0] = 0x67452301;
495 ctx->state[1] = 0xEFCDAB89;
496 ctx->state[2] = 0x98BADCFE;
497 ctx->state[3] = 0x10325476;
498 ctx->state[4] = 0xC3D2E1F0;
499 ctx->state[5] = 0x76543210;
500 ctx->state[6] = 0xFEDCBA98;
501 ctx->state[7] = 0x89ABCDEF;
502 ctx->state[8] = 0x01234567;
503 ctx->state[9] = 0x3C2D1E0F;
504 ctx->transform = ripemd320_transform;
507 return AVERROR(EINVAL);
513 void av_ripemd_update(AVRIPEMD* ctx, const uint8_t* data, unsigned int len)
520 for (i = 0; i < len; i++) {
521 ctx->buffer[j++] = data[i];
523 ctx->transform(ctx->state, ctx->buffer);
528 if ((j + len) > 63) {
529 memcpy(&ctx->buffer[j], data, (i = 64 - j));
530 ctx->transform(ctx->state, ctx->buffer);
531 for (; i + 63 < len; i += 64)
532 ctx->transform(ctx->state, &data[i]);
536 memcpy(&ctx->buffer[j], &data[i], len - i);
540 void av_ripemd_final(AVRIPEMD* ctx, uint8_t *digest)
543 uint64_t finalcount = av_le2ne64(ctx->count << 3);
545 av_ripemd_update(ctx, "\200", 1);
546 while ((ctx->count & 63) != 56)
547 av_ripemd_update(ctx, "", 1);
548 av_ripemd_update(ctx, (uint8_t *)&finalcount, 8); /* Should cause a transform() */
549 for (i = 0; i < ctx->digest_len; i++)
550 AV_WL32(digest + i*4, ctx->state[i]);
560 unsigned char digest[40];
561 static const int lengths[4] = { 128, 160, 256, 320 };
563 for (j = 0; j < 4; j++) {
564 printf("Testing RIPEMD-%d\n", lengths[j]);
565 for (k = 0; k < 3; k++) {
566 av_ripemd_init(&ctx, lengths[j]);
568 av_ripemd_update(&ctx, "abc", 3);
570 av_ripemd_update(&ctx, "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq", 56);
572 for (i = 0; i < 1000*1000; i++)
573 av_ripemd_update(&ctx, "a", 1);
574 av_ripemd_final(&ctx, digest);
575 for (i = 0; i < lengths[j] >> 3; i++)
576 printf("%02X", digest[i]);
579 switch (j) { //test vectors (from ISO:IEC 10118-3 (2004) and http://homes.esat.kuleuven.be/~bosselae/ripemd160.html)
581 printf("c14a1219 9c66e4ba 84636b0f 69144c77\n"
582 "a1aa0689 d0fafa2d dc22e88b 49133a06\n"
583 "4a7f5723 f954eba1 216c9d8f 6320431f\n");
586 printf("8eb208f7 e05d987a 9b044a8e 98c6b087 f15a0bfc\n"
587 "12a05338 4a9c0c88 e405a06c 27dcf49a da62eb2b\n"
588 "52783243 c1697bdb e16d37f9 7f68f083 25dc1528\n");
591 printf("afbd6e22 8b9d8cbb cef5ca2d 03e6dba1 0ac0bc7d cbe4680e 1e42d2e9 75459b65\n"
592 "38430455 83aac6c8 c8d91285 73e7a980 9afb2a0f 34ccc36e a9e72f16 f6368e3f\n"
593 "ac953744 e10e3151 4c150d4d 8d7b6773 42e33399 788296e4 3ae4850c e4f97978\n");
596 printf("de4c01b3 054f8930 a79d09ae 738e9230 1e5a1708 5beffdc1 b8d11671 3e74f82f a942d64c dbc4682d\n"
597 "d034a795 0cf72202 1ba4b84d f769a5de 2060e259 df4c9bb4 a4268c0e 935bbc74 70a969c9 d072a1ac\n"
598 "bdee37f4 371e2064 6b8b0d86 2dda1629 2ae36f40 965e8c85 09e63d1d bddecc50 3e2b63eb 9245bb66\n");