md5mac.cpp

含有多种公开密钥算法、多种块加密、多种数据流加密、多种HASH函数、多种CheckSum校验、多种MAC校验等几十种加密算法的程序

/*************************************************
* MD5-MAC Source File                            *
* (C) 1999-2002 The Botan Project                *
*************************************************/

#include <botan/md5mac.h>

namespace Botan {

/*************************************************
* MD5-MAC MACing                                 *
*************************************************/
void MD5MAC::hash(const byte input[])
   {
   for(u32bit j = 0; j != 16; j++)
      M[j] = make_u32bit(input[4*j+3], input[4*j+2], input[4*j+1], input[4*j]);

   u32bit A = digest[0], B = digest[1], C = digest[2], D = digest[3];

   FF(A,B,C,D,M[ 0], 7,0xD76AA478);   FF(D,A,B,C,M[ 1],12,0xE8C7B756);
   FF(C,D,A,B,M[ 2],17,0x242070DB);   FF(B,C,D,A,M[ 3],22,0xC1BDCEEE);
   FF(A,B,C,D,M[ 4], 7,0xF57C0FAF);   FF(D,A,B,C,M[ 5],12,0x4787C62A);
   FF(C,D,A,B,M[ 6],17,0xA8304613);   FF(B,C,D,A,M[ 7],22,0xFD469501);
   FF(A,B,C,D,M[ 8], 7,0x698098D8);   FF(D,A,B,C,M[ 9],12,0x8B44F7AF);
   FF(C,D,A,B,M[10],17,0xFFFF5BB1);   FF(B,C,D,A,M[11],22,0x895CD7BE);
   FF(A,B,C,D,M[12], 7,0x6B901122);   FF(D,A,B,C,M[13],12,0xFD987193);
   FF(C,D,A,B,M[14],17,0xA679438E);   FF(B,C,D,A,M[15],22,0x49B40821);

   GG(A,B,C,D,M[ 1], 5,0xF61E2562);   GG(D,A,B,C,M[ 6], 9,0xC040B340);
   GG(C,D,A,B,M[11],14,0x265E5A51);   GG(B,C,D,A,M[ 0],20,0xE9B6C7AA);
   GG(A,B,C,D,M[ 5], 5,0xD62F105D);   GG(D,A,B,C,M[10], 9,0x02441453);
   GG(C,D,A,B,M[15],14,0xD8A1E681);   GG(B,C,D,A,M[ 4],20,0xE7D3FBC8);
   GG(A,B,C,D,M[ 9], 5,0x21E1CDE6);   GG(D,A,B,C,M[14], 9,0xC33707D6);
   GG(C,D,A,B,M[ 3],14,0xF4D50D87);   GG(B,C,D,A,M[ 8],20,0x455A14ED);
   GG(A,B,C,D,M[13], 5,0xA9E3E905);   GG(D,A,B,C,M[ 2], 9,0xFCEFA3F8);
   GG(C,D,A,B,M[ 7],14,0x676F02D9);   GG(B,C,D,A,M[12],20,0x8D2A4C8A);

   HH(A,B,C,D,M[ 5], 4,0xFFFA3942);   HH(D,A,B,C,M[ 8],11,0x8771F681);
   HH(C,D,A,B,M[11],16,0x6D9D6122);   HH(B,C,D,A,M[14],23,0xFDE5380C);
   HH(A,B,C,D,M[ 1], 4,0xA4BEEA44);   HH(D,A,B,C,M[ 4],11,0x4BDECFA9);
   HH(C,D,A,B,M[ 7],16,0xF6BB4B60);   HH(B,C,D,A,M[10],23,0xBEBFBC70);
   HH(A,B,C,D,M[13], 4,0x289B7EC6);   HH(D,A,B,C,M[ 0],11,0xEAA127FA);
   HH(C,D,A,B,M[ 3],16,0xD4EF3085);   HH(B,C,D,A,M[ 6],23,0x04881D05);
   HH(A,B,C,D,M[ 9], 4,0xD9D4D039);   HH(D,A,B,C,M[12],11,0xE6DB99E5);
   HH(C,D,A,B,M[15],16,0x1FA27CF8);   HH(B,C,D,A,M[ 2],23,0xC4AC5665);

   II(A,B,C,D,M[ 0], 6,0xF4292244);   II(D,A,B,C,M[ 7],10,0x432AFF97);
   II(C,D,A,B,M[14],15,0xAB9423A7);   II(B,C,D,A,M[ 5],21,0xFC93A039);
   II(A,B,C,D,M[12], 6,0x655B59C3);   II(D,A,B,C,M[ 3],10,0x8F0CCC92);
   II(C,D,A,B,M[10],15,0xFFEFF47D);   II(B,C,D,A,M[ 1],21,0x85845DD1);
   II(A,B,C,D,M[ 8], 6,0x6FA87E4F);   II(D,A,B,C,M[15],10,0xFE2CE6E0);
   II(C,D,A,B,M[ 6],15,0xA3014314);   II(B,C,D,A,M[13],21,0x4E0811A1);
   II(A,B,C,D,M[ 4], 6,0xF7537E82);   II(D,A,B,C,M[11],10,0xBD3AF235);
   II(C,D,A,B,M[ 2],15,0x2AD7D2BB);   II(B,C,D,A,M[ 9],21,0xEB86D391);

   digest[0] += A; digest[1] += B; digest[2] += C; digest[3] += D;
   }

/*************************************************
* MD5-MAC FF Function                            *
*************************************************/
void MD5MAC::FF(u32bit& A, u32bit B, u32bit C, u32bit D,
                u32bit msg, u32bit shift, u32bit magic) const
   {
   A += (D ^ (B & (C ^ D))) + msg + magic + K2[0];
   A  = rotate_left(A, shift) + B;
   }

/*************************************************
* MD5-MAC GG Function                            *
*************************************************/
void MD5MAC::GG(u32bit& A, u32bit B, u32bit C, u32bit D,
                u32bit msg, u32bit shift, u32bit magic) const
   {
   A += (C ^ ((B ^ C) & D)) + msg + magic + K2[1];
   A  = rotate_left(A, shift) + B;
   }

/*************************************************
* MD5-MAC HH Function                            *
*************************************************/
void MD5MAC::HH(u32bit& A, u32bit B, u32bit C, u32bit D,
                u32bit msg, u32bit shift, u32bit magic) const
   {
   A += (B ^ C ^ D) + msg + magic + K2[2];
   A  = rotate_left(A, shift) + B;
   }

/*************************************************
* MD5-MAC II Function                            *
*************************************************/
void MD5MAC::II(u32bit& A, u32bit B, u32bit C, u32bit D,
                u32bit msg, u32bit shift, u32bit magic) const
   {
   A += (C ^ (B | ~D)) + msg + magic + K2[3];
   A  = rotate_left(A, shift) + B;
   }

/*************************************************
* Update a MD5-MAC Calculation                   *
*************************************************/
void MD5MAC::add_data(const byte input[], u32bit length)
   {
   count += length;
   buffer.copy(position, input, length);
   if(position + length >= 64)
      {
      hash(buffer);
      input += (64 - position);
      length -= (64 - position);
      while(length >= 64)
         {
         hash(input);
         input += 64;
         length -= 64;
         }
      buffer.copy(input, length);
      position = 0;
      }
   position += length;
   }

/*************************************************
* Finalize a MD5-MAC Calculation                 *
*************************************************/
void MD5MAC::final_result(byte mac[])
   {
   buffer[position] = 0x80;
   for(u32bit j = position+1; j != 64; j++)
      buffer[j] = 0;
   if(position >= 64 - 8)
      { hash(buffer); buffer.clear(); }
   for(u32bit j = 64 - 8; j != 64; j++)
      buffer[j] = get_byte(7 - (j % 8), 8 * count);
   hash(buffer);
   hash(K3);
   for(u32bit j = 0; j != OUTPUT_LENGTH; j++)
      mac[j] = get_byte(3 - (j % 4), digest[j/4]);
   count = position = 0; digest = K1;
   }

/*************************************************
* MD5-MAC Key Schedule                           *
*************************************************/
void MD5MAC::key(const byte key[], u32bit length)
   {
   static const byte T[3][16] = {
      { 0x97, 0xEF, 0x45, 0xAC, 0x29, 0x0F, 0x43, 0xCD,
        0x45, 0x7E, 0x1B, 0x55, 0x1C, 0x80, 0x11, 0x34 },
      { 0xB1, 0x77, 0xCE, 0x96, 0x2E, 0x72, 0x8E, 0x7C,
        0x5F, 0x5A, 0xAB, 0x0A, 0x36, 0x43, 0xBE, 0x18 },
      { 0x9D, 0x21, 0xB4, 0x21, 0xBC, 0x87, 0xB9, 0x4D,
        0xA2, 0x9D, 0x27, 0xBD, 0xC7, 0x5B, 0xD7, 0xC3 } };
   clear();
   SecureBuffer<u32bit, 12> EK;
   SecureBuffer<byte, 128> data;
   for(u32bit j = 0; j != 16; j++)
      data[j] = data[j+112] = key[j%length];
   for(u32bit j = 0; j != 3; j++)
      {
      digest[0] = 0x67452301; digest[1] = 0xEFCDAB89;
      digest[2] = 0x98BADCFE; digest[3] = 0x10325476;
      for(u32bit k = 16; k != 112; k++)
         data[k] = T[(j+(k-16)/16)%3][k%16];
      hash(data);
      hash(data + 64);
      EK[4*j  ] = digest[0]; EK[4*j+1] = digest[1];
      EK[4*j+2] = digest[2]; EK[4*j+3] = digest[3];
      }
   K1.copy(EK, 4);
   digest.copy(EK, 4);
   K2.copy(EK + 4, 4);
   for(u32bit j = 0; j != 16; j++)
      K3[j] = get_byte(3-j%4, EK[8+j/4]);
   for(u32bit j = 16; j != 64; j++)
      K3[j] = K3[j%16] ^ T[(j-16)/16][j%16];
   }

/*************************************************
* Clear memory of sensitive data                 *
*************************************************/
void MD5MAC::clear() throw()
   {
   M.clear();
   K1.clear();
   K2.clear();
   K3.clear();
   buffer.clear();
   digest.clear();
   count = position = 0;
   }

/*************************************************
* MD5-MAC Constructor                            *
*************************************************/
MD5MAC::MD5MAC() : MessageAuthenticationCode(16, 1, 16)
   {
   clear();
   }

}