trezor-firmware/crypto/hasher.c

/**
 * Copyright (c) 2017 Saleem Rashid
 *
 * Permission is hereby granted, free of charge, to any person obtaining
 * a copy of this software and associated documentation files (the "Software"),
 * to deal in the Software without restriction, including without limitation
 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
 * and/or sell copies of the Software, and to permit persons to whom the
 * Software is furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included
 * in all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES
 * OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
 * OTHER DEALINGS IN THE SOFTWARE.
 */

#include "hasher.h"
#include "ripemd160.h"

const uint32_t sha256_initial_tapsighash_state[8] = {
    0xf504a425UL, 0xd7f8783bUL, 0x1363868aUL, 0xe3e55658UL,
    0x6eee945dUL, 0xbc7888ddUL, 0x02a6e2c3UL, 0x1873fe9fUL,
};

void hasher_InitParam(Hasher *hasher, HasherType type, const void *param,
                      uint32_t param_size) {
  hasher->type = type;
  hasher->param = param;
  hasher->param_size = param_size;

  switch (hasher->type) {
    case HASHER_SHA2:
    case HASHER_SHA2D:
    case HASHER_SHA2_RIPEMD:
      sha256_Init(&hasher->ctx.sha2);
      break;
    case HASHER_SHA2_TAPSIGHASH:
      sha256_Init_ex(&hasher->ctx.sha2, sha256_initial_tapsighash_state, 512);
      break;
    case HASHER_SHA3:
#if USE_KECCAK
    case HASHER_SHA3K:
#endif
      sha3_256_Init(&hasher->ctx.sha3);
      break;
    case HASHER_BLAKE:
    case HASHER_BLAKED:
    case HASHER_BLAKE_RIPEMD:
      blake256_Init(&hasher->ctx.blake);
      break;
    case HASHER_GROESTLD_TRUNC:
      groestl512_Init(&hasher->ctx.groestl);
      break;
    case HASHER_BLAKE2B:
      blake2b_Init(&hasher->ctx.blake2b, 32);
      break;
    case HASHER_BLAKE2B_PERSONAL:
      blake2b_InitPersonal(&hasher->ctx.blake2b, 32, hasher->param,
                           hasher->param_size);
      break;
  }
}

void hasher_Init(Hasher *hasher, HasherType type) {
  hasher_InitParam(hasher, type, NULL, 0);
}

void hasher_Reset(Hasher *hasher) {
  hasher_InitParam(hasher, hasher->type, hasher->param, hasher->param_size);
}

void hasher_Update(Hasher *hasher, const uint8_t *data, size_t length) {
  switch (hasher->type) {
    case HASHER_SHA2:
    case HASHER_SHA2D:
    case HASHER_SHA2_RIPEMD:
    case HASHER_SHA2_TAPSIGHASH:
      sha256_Update(&hasher->ctx.sha2, data, length);
      break;
    case HASHER_SHA3:
#if USE_KECCAK
    case HASHER_SHA3K:
#endif
      sha3_Update(&hasher->ctx.sha3, data, length);
      break;
    case HASHER_BLAKE:
    case HASHER_BLAKED:
    case HASHER_BLAKE_RIPEMD:
      blake256_Update(&hasher->ctx.blake, data, length);
      break;
    case HASHER_GROESTLD_TRUNC:
      groestl512_Update(&hasher->ctx.groestl, data, length);
      break;
    case HASHER_BLAKE2B:
    case HASHER_BLAKE2B_PERSONAL:
      blake2b_Update(&hasher->ctx.blake2b, data, length);
      break;
  }
}

void hasher_Final(Hasher *hasher, uint8_t hash[HASHER_DIGEST_LENGTH]) {
  switch (hasher->type) {
    case HASHER_SHA2:
    case HASHER_SHA2_TAPSIGHASH:
      sha256_Final(&hasher->ctx.sha2, hash);
      break;
    case HASHER_SHA2D:
      sha256_Final(&hasher->ctx.sha2, hash);
      hasher_Raw(HASHER_SHA2, hash, HASHER_DIGEST_LENGTH, hash);
      break;
    case HASHER_SHA2_RIPEMD:
      sha256_Final(&hasher->ctx.sha2, hash);
      ripemd160(hash, HASHER_DIGEST_LENGTH, hash);
      break;
    case HASHER_SHA3:
      sha3_Final(&hasher->ctx.sha3, hash);
      break;
#if USE_KECCAK
    case HASHER_SHA3K:
      keccak_Final(&hasher->ctx.sha3, hash);
      break;
#endif
    case HASHER_BLAKE:
      blake256_Final(&hasher->ctx.blake, hash);
      break;
    case HASHER_BLAKED:
      blake256_Final(&hasher->ctx.blake, hash);
      hasher_Raw(HASHER_BLAKE, hash, HASHER_DIGEST_LENGTH, hash);
      break;
    case HASHER_BLAKE_RIPEMD:
      blake256_Final(&hasher->ctx.blake, hash);
      ripemd160(hash, HASHER_DIGEST_LENGTH, hash);
      break;
    case HASHER_GROESTLD_TRUNC:
      groestl512_DoubleTrunc(&hasher->ctx.groestl, hash);
      break;
    case HASHER_BLAKE2B:
    case HASHER_BLAKE2B_PERSONAL:
      blake2b_Final(&hasher->ctx.blake2b, hash, 32);
      break;
  }
}

void hasher_Raw(HasherType type, const uint8_t *data, size_t length,
                uint8_t hash[HASHER_DIGEST_LENGTH]) {
  Hasher hasher = {0};

  hasher_Init(&hasher, type);
  hasher_Update(&hasher, data, length);
  hasher_Final(&hasher, hash);
}