SHA256.cpp 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156
  1. #include "pch.h"
  2. #include "SHA256.h"
  3. #include <cstring>
  4. #include <sstream>
  5. #include <iomanip>
  6. constexpr std::array<uint32_t, 64> SHA256::K;
  7. SHA256::SHA256(): m_blocklen(0), m_bitlen(0) {
  8. m_state[0] = 0x6a09e667;
  9. m_state[1] = 0xbb67ae85;
  10. m_state[2] = 0x3c6ef372;
  11. m_state[3] = 0xa54ff53a;
  12. m_state[4] = 0x510e527f;
  13. m_state[5] = 0x9b05688c;
  14. m_state[6] = 0x1f83d9ab;
  15. m_state[7] = 0x5be0cd19;
  16. }
  17. void SHA256::update(const uint8_t * data, size_t length) {
  18. for (size_t i = 0 ; i < length ; i++) {
  19. m_data[m_blocklen++] = data[i];
  20. if (m_blocklen == 64) {
  21. transform();
  22. // End of the block
  23. m_bitlen += 512;
  24. m_blocklen = 0;
  25. }
  26. }
  27. }
  28. void SHA256::update(const std::string &data) {
  29. update(reinterpret_cast<const uint8_t*> (data.c_str()), data.size());
  30. }
  31. std::array<uint8_t,32> SHA256::digest() {
  32. std::array<uint8_t,32> hash;
  33. pad();
  34. revert(hash);
  35. return hash;
  36. }
  37. uint32_t SHA256::rotr(uint32_t x, uint32_t n) {
  38. return (x >> n) | (x << (32 - n));
  39. }
  40. uint32_t SHA256::choose(uint32_t e, uint32_t f, uint32_t g) {
  41. return (e & f) ^ (~e & g);
  42. }
  43. uint32_t SHA256::majority(uint32_t a, uint32_t b, uint32_t c) {
  44. return (a & (b | c)) | (b & c);
  45. }
  46. uint32_t SHA256::sig0(uint32_t x) {
  47. return SHA256::rotr(x, 7) ^ SHA256::rotr(x, 18) ^ (x >> 3);
  48. }
  49. uint32_t SHA256::sig1(uint32_t x) {
  50. return SHA256::rotr(x, 17) ^ SHA256::rotr(x, 19) ^ (x >> 10);
  51. }
  52. void SHA256::transform() {
  53. uint32_t maj, xorA, ch, xorE, sum, newA, newE, m[64];
  54. uint32_t state[8];
  55. for (uint8_t i = 0, j = 0; i < 16; i++, j += 4) { // Split data in 32 bit blocks for the 16 first words
  56. m[i] = (m_data[j] << 24) | (m_data[j + 1] << 16) | (m_data[j + 2] << 8) | (m_data[j + 3]);
  57. }
  58. for (uint8_t k = 16 ; k < 64; k++) { // Remaining 48 blocks
  59. m[k] = SHA256::sig1(m[k - 2]) + m[k - 7] + SHA256::sig0(m[k - 15]) + m[k - 16];
  60. }
  61. for(uint8_t i = 0 ; i < 8 ; i++) {
  62. state[i] = m_state[i];
  63. }
  64. for (uint8_t i = 0; i < 64; i++) {
  65. maj = SHA256::majority(state[0], state[1], state[2]);
  66. xorA = SHA256::rotr(state[0], 2) ^ SHA256::rotr(state[0], 13) ^ SHA256::rotr(state[0], 22);
  67. ch = choose(state[4], state[5], state[6]);
  68. xorE = SHA256::rotr(state[4], 6) ^ SHA256::rotr(state[4], 11) ^ SHA256::rotr(state[4], 25);
  69. sum = m[i] + K[i] + state[7] + ch + xorE;
  70. newA = xorA + maj + sum;
  71. newE = state[3] + sum;
  72. state[7] = state[6];
  73. state[6] = state[5];
  74. state[5] = state[4];
  75. state[4] = newE;
  76. state[3] = state[2];
  77. state[2] = state[1];
  78. state[1] = state[0];
  79. state[0] = newA;
  80. }
  81. for(uint8_t i = 0 ; i < 8 ; i++) {
  82. m_state[i] += state[i];
  83. }
  84. }
  85. void SHA256::pad() {
  86. uint64_t i = m_blocklen;
  87. uint8_t end = m_blocklen < 56 ? 56 : 64;
  88. m_data[i++] = 0x80; // Append a bit 1
  89. while (i < end) {
  90. m_data[i++] = 0x00; // Pad with zeros
  91. }
  92. if(m_blocklen >= 56) {
  93. transform();
  94. memset(m_data, 0, 56);
  95. }
  96. // Append to the padding the total message's length in bits and transform.
  97. m_bitlen += m_blocklen * 8;
  98. m_data[63] = (uint8_t)m_bitlen;
  99. m_data[62] = (uint8_t)(m_bitlen >> 8);
  100. m_data[61] = (uint8_t)(m_bitlen >> 16);
  101. m_data[60] = (uint8_t)(m_bitlen >> 24);
  102. m_data[59] = (uint8_t)(m_bitlen >> 32);
  103. m_data[58] = (uint8_t)(m_bitlen >> 40);
  104. m_data[57] = (uint8_t)(m_bitlen >> 48);
  105. m_data[56] = (uint8_t)(m_bitlen >> 56);
  106. transform();
  107. }
  108. void SHA256::revert(std::array<uint8_t, 32> & hash) {
  109. // SHA uses big endian byte ordering
  110. // Revert all bytes
  111. for (uint8_t i = 0 ; i < 4 ; i++) {
  112. for(uint8_t j = 0 ; j < 8 ; j++) {
  113. hash[i + (j * 4)] = (m_state[j] >> (24 - i * 8)) & 0x000000ff;
  114. }
  115. }
  116. }
  117. std::string SHA256::toString(const std::array<uint8_t, 32> & digest) {
  118. std::stringstream s;
  119. s << std::setfill('0') << std::hex;
  120. for(uint8_t i = 0 ; i < 32 ; i++) {
  121. s << std::setw(2) << (unsigned int) digest[i];
  122. }
  123. return s.str();
  124. }