Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

karm-crypto: add sha2 #432

Merged
merged 1 commit into from
Nov 30, 2024
Merged

karm-crypto: add sha2 #432

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
273 changes: 273 additions & 0 deletions src/libs/karm-crypto/sha2.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,273 @@
#include <karm-base/array.h>
#include <karm-base/base.h>
#include <karm-base/slice.h>

#include "sha2.h"

namespace Karm::Crypto {

static constexpr Array<u32, 8> SHA224_INITIAL = {
0xc1059ed8, 0x367cd507, 0x3070dd17, 0xf70e5939,
0xffc00b31, 0x68581511, 0x64f98fa7, 0xbefa4fa4
};

static constexpr Array<u32, 8> SHA256_INITIAL = {
0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a,
0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19
};

static constexpr Array<u32, 64> SHA256_K = {
0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
};

static constexpr Array<u64, 8> SHA384_INITIAL = {
0xcbbb9d5dc1059ed8, 0x629a292a367cd507,
0x9159015a3070dd17, 0x152fecd8f70e5939,
0x67332667ffc00b31, 0x8eb44a8768581511,
0xdb0c2e0d64f98fa7, 0x47b5481dbefa4fa4
};

static constexpr Array<u64, 8> SHA512_INITIAL = {
0x6a09e667f3bcc908, 0xbb67ae8584caa73b,
0x3c6ef372fe94f82b, 0xa54ff53a5f1d36f1,
0x510e527fade682d1, 0x9b05688c2b3e6c1f,
0x1f83d9abfb41bd6b, 0x5be0cd19137e2179
};

static constexpr Array<u64, 80> SHA512_K = {
0x428a2f98d728ae22, 0x7137449123ef65cd, 0xb5c0fbcfec4d3b2f,
0xe9b5dba58189dbbc, 0x3956c25bf348b538, 0x59f111f1b605d019,
0x923f82a4af194f9b, 0xab1c5ed5da6d8118, 0xd807aa98a3030242,
0x12835b0145706fbe, 0x243185be4ee4b28c, 0x550c7dc3d5ffb4e2,
0x72be5d74f27b896f, 0x80deb1fe3b1696b1, 0x9bdc06a725c71235,
0xc19bf174cf692694, 0xe49b69c19ef14ad2, 0xefbe4786384f25e3,
0x0fc19dc68b8cd5b5, 0x240ca1cc77ac9c65, 0x2de92c6f592b0275,
0x4a7484aa6ea6e483, 0x5cb0a9dcbd41fbd4, 0x76f988da831153b5,
0x983e5152ee66dfab, 0xa831c66d2db43210, 0xb00327c898fb213f,
0xbf597fc7beef0ee4, 0xc6e00bf33da88fc2, 0xd5a79147930aa725,
0x06ca6351e003826f, 0x142929670a0e6e70, 0x27b70a8546d22ffc,
0x2e1b21385c26c926, 0x4d2c6dfc5ac42aed, 0x53380d139d95b3df,
0x650a73548baf63de, 0x766a0abb3c77b2a8, 0x81c2c92e47edaee6,
0x92722c851482353b, 0xa2bfe8a14cf10364, 0xa81a664bbc423001,
0xc24b8b70d0f89791, 0xc76c51a30654be30, 0xd192e819d6ef5218,
0xd69906245565a910, 0xf40e35855771202a, 0x106aa07032bbd1b8,
0x19a4c116b8d2d0c8, 0x1e376c085141ab53, 0x2748774cdf8eeb99,
0x34b0bcb5e19b48a8, 0x391c0cb3c5c95a63, 0x4ed8aa4ae3418acb,
0x5b9cca4f7763e373, 0x682e6ff3d6b2b8a3, 0x748f82ee5defb2fc,
0x78a5636f43172f60, 0x84c87814a1f0ab72, 0x8cc702081a6439ec,
0x90befffa23631e28, 0xa4506cebde82bde9, 0xbef9a3f7b2c67915,
0xc67178f2e372532b, 0xca273eceea26619c, 0xd186b8c721c0c207,
0xeada7dd6cde0eb1e, 0xf57d4f7fee6ed178, 0x06f067aa72176fba,
0x0a637dc5a2c898a6, 0x113f9804bef90dae, 0x1b710b35131c471b,
0x28db77f523047d84, 0x32caab7b40c72493, 0x3c9ebe0a15c9bebc,
0x431d67c49c100d4c, 0x4cc5d4becb3e42b6, 0x597f299cfc657e2a,
0x5fcb6fab3ad6faec, 0x6c44198c4a475817
};

static inline void _sha256ComputeBlock(Array<u32, 8> &state, u8 const *buf) {
Array<u32, 64> w;

for (usize idx = 0; idx < 16; idx++) {
w[idx] = toBe(reinterpret_cast<u32 const *>(buf)[idx]);
}

for (usize idx = 16; idx < 64; idx++) {
u32 s0 = rotr(w[idx - 15], 7) ^ rotr(w[idx - 15], 18) ^ (w[idx - 15] >> 3);
u32 s1 = rotr(w[idx - 2], 17) ^ rotr(w[idx - 2], 19) ^ (w[idx - 2] >> 10);
w[idx] = w[idx - 16] + s0 + w[idx - 7] + s1;
}

u32 a = state[0];
u32 b = state[1];
u32 c = state[2];
u32 d = state[3];
u32 e = state[4];
u32 f = state[5];
u32 g = state[6];
u32 h = state[7];

for (usize idx = 0; idx < 64; idx++) {
u32 s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
u32 ch = (e & f) ^ ((~e) & g);
u32 tmp1 = h + s1 + ch + SHA256_K[idx] + w[idx];
u32 s0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
u32 tmp2 = s0 + ((a & b) ^ (a & c) ^ (b & c));

h = g;
g = f;
f = e;
e = d + tmp1;
d = c;
c = b;
b = a;
a = tmp1 + tmp2;
}

state[0] += a;
state[1] += b;
state[2] += c;
state[3] += d;
state[4] += e;
state[5] += f;
state[6] += g;
state[7] += h;
}

static inline Array<u32, 8> _sha256Internal(Array<u32, 8> const &init, Bytes bytes) {
Array<u32, 8> state = init;
auto [buf, len] = bytes;
usize padlen = len << 3;

for (; len >= 64; len -= 64, buf += 64) {
_sha256ComputeBlock(state, buf);
}

Array<u8, 64> padding{};

for (usize idx = 0; idx < len; idx++) {
padding[idx] = buf[idx];
}
padding[len] = 0x80;

if (len >= 56) {
_sha256ComputeBlock(state, padding.buf());
for (usize idx = 0; idx < padding.len(); idx++) {
padding[idx] = 0;
}
}

padding[56] = padlen >> 56;
padding[57] = padlen >> 48;
padding[58] = padlen >> 40;
padding[59] = padlen >> 32;
padding[60] = padlen >> 24;
padding[61] = padlen >> 16;
padding[62] = padlen >> 8;
padding[63] = padlen;

_sha256ComputeBlock(state, padding.buf());

for (usize idx = 0; idx < state.len(); idx++) {
state[idx] = toBe(state[idx]);
}

return state;
}

Array<u8, SHA256_BYTES> sha256(Bytes bytes) {
return Array<u8, SHA256_BYTES>::from(_sha256Internal(SHA256_INITIAL, bytes).bytes());
}

Array<u8, SHA224_BYTES> sha224(Bytes bytes) {
auto state = _sha256Internal(SHA224_INITIAL, bytes);

return Array<u8, SHA224_BYTES>::from(state.bytes());
}

static inline void _sha512ComputeBlock(Array<u64, 8> &state, u8 const *buf) {
Array<u64, 80> w{};

for (usize idx = 0; idx < 16; idx++) {
w[idx] = toBe(reinterpret_cast<u64 const *>(buf)[idx]);
}

for (usize idx = 16; idx < 80; idx++) {
u64 s0 = rotr(w[idx - 15], 1) ^ rotr(w[idx - 15], 8) ^ (w[idx - 15] >> 7);
u64 s1 = rotr(w[idx - 2], 19) ^ rotr(w[idx - 2], 61) ^ (w[idx - 2] >> 6);
w[idx] = w[idx - 16] + s0 + w[idx - 7] + s1;
}

u64 a = state[0];
u64 b = state[1];
u64 c = state[2];
u64 d = state[3];
u64 e = state[4];
u64 f = state[5];
u64 g = state[6];
u64 h = state[7];

for (usize idx = 0; idx < 80; idx++) {
u64 s1 = rotr(e, 14) ^ rotr(e, 18) ^ rotr(e, 41);
u64 ch = (e & f) ^ ((~e) & g);
u64 tmp1 = h + s1 + ch + SHA512_K[idx] + w[idx];
u64 s0 = rotr(a, 28) ^ rotr(a, 34) ^ rotr(a, 39);
u64 tmp2 = s0 + ((a & b) ^ (a & c) ^ (b & c));

h = g;
g = f;
f = e;
e = d + tmp1;
d = c;
c = b;
b = a;
a = tmp1 + tmp2;
}

state[0] += a;
state[1] += b;
state[2] += c;
state[3] += d;
state[4] += e;
state[5] += f;
state[6] += g;
state[7] += h;
}

static inline Array<u64, 8> _sha512Internal(Array<u64, 8> const &init, Bytes bytes) {
Array<u64, 8> state = init;
auto [buf, len] = bytes;
usize padlen = len << 3;

for (; len >= 128; len -= 128, buf += 128) {
_sha512ComputeBlock(state, buf);
}

Array<u8, 128> padding{};

for (usize idx = 0; idx < len; idx++) {
padding[idx] = buf[idx];
}
padding[len] = 0x80;

if (len >= 112) {
_sha512ComputeBlock(state, padding.buf());
for (usize idx = 0; idx < padding.len(); idx++) {
padding[idx] = 0;
}
}

padding[120] = padlen >> 56;
padding[121] = padlen >> 48;
padding[122] = padlen >> 40;
padding[123] = padlen >> 32;
padding[124] = padlen >> 24;
padding[125] = padlen >> 16;
padding[126] = padlen >> 8;
padding[127] = padlen;

_sha512ComputeBlock(state, padding.buf());

for (usize idx = 0; idx < state.len(); idx++) {
state[idx] = toBe(state[idx]);
}
return state;
}

Array<u8, SHA512_BYTES> sha512(Bytes bytes) {
return Array<u8, SHA512_BYTES>::from(_sha512Internal(SHA512_INITIAL, bytes).bytes());
}

Array<u8, SHA384_BYTES> sha384(Bytes bytes) {
auto state = _sha512Internal(SHA384_INITIAL, bytes);

return Array<u8, SHA384_BYTES>::from(state.bytes());
}

} // namespace Karm::Crypto
18 changes: 18 additions & 0 deletions src/libs/karm-crypto/sha2.h
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
#pragma once

#include <karm-base/array.h>
#include <karm-base/slice.h>

namespace Karm::Crypto {

static constexpr usize SHA224_BYTES = 28;
static constexpr usize SHA256_BYTES = 32;
static constexpr usize SHA384_BYTES = 48;
static constexpr usize SHA512_BYTES = 64;

Array<u8, SHA224_BYTES> sha224(Bytes bytes);
Array<u8, SHA256_BYTES> sha256(Bytes bytes);
Array<u8, SHA384_BYTES> sha384(Bytes bytes);
Array<u8, SHA512_BYTES> sha512(Bytes bytes);

} // namespace Karm::Crypto
Loading
Loading