4  * RIPEMD-128 - RACE Integrity Primitives Evaluation Message Digest.
6  * Based on the reference implementation by Antoon Bosselaers, ESAT-COSIC
8  * Copyright (c) 2008 Adrian-Ken Rueegsegger <ken@codelabs.ch>
40 #define F1(x, y, z) (x ^ y ^ z)		/* XOR */  argument
41 #define F2(x, y, z) (z ^ (x & (y ^ z)))	/* x ? y : z */  argument
42 #define F3(x, y, z) ((x | ~y) ^ z)  argument
43 #define F4(x, y, z) (y ^ (z & (x ^ y)))	/* z ? x : y */  argument
45 #define ROUND(a, b, c, d, f, k, x, s)  { \  argument
46 	(a) += f((b), (c), (d)) + le32_to_cpup(&(x)) + (k);	\
47 	(a) = rol32((a), (s)); \
55 	aa = state[0];  in rmd128_transform()
61 	aaa = state[0];  in rmd128_transform()
67 	ROUND(aa, bb, cc, dd, F1, K1, in[0],  11);  in rmd128_transform()
74 	ROUND(bb, cc, dd, aa, F1, K1, in[7],   9);  in rmd128_transform()
76 	ROUND(dd, aa, bb, cc, F1, K1, in[9],  13);  in rmd128_transform()
81 	ROUND(cc, dd, aa, bb, F1, K1, in[14],  9);  in rmd128_transform()
90 	ROUND(dd, aa, bb, cc, F2, K2, in[6],   9);  in rmd128_transform()
94 	ROUND(dd, aa, bb, cc, F2, K2, in[0],  12);  in rmd128_transform()
95 	ROUND(cc, dd, aa, bb, F2, K2, in[9],  15);  in rmd128_transform()
96 	ROUND(bb, cc, dd, aa, F2, K2, in[5],   9);  in rmd128_transform()
107 	ROUND(aa, bb, cc, dd, F3, K3, in[9],  14);  in rmd128_transform()
108 	ROUND(dd, aa, bb, cc, F3, K3, in[15],  9);  in rmd128_transform()
113 	ROUND(cc, dd, aa, bb, F3, K3, in[0],  13);  in rmd128_transform()
122 	ROUND(dd, aa, bb, cc, F4, K4, in[9],  12);  in rmd128_transform()
125 	ROUND(aa, bb, cc, dd, F4, K4, in[0],  14);  in rmd128_transform()
127 	ROUND(cc, dd, aa, bb, F4, K4, in[12],  9);  in rmd128_transform()
129 	ROUND(aa, bb, cc, dd, F4, K4, in[13],  9);  in rmd128_transform()
140 	ROUND(ddd, aaa, bbb, ccc, F4, KK1, in[14],  9);  in rmd128_transform()
141 	ROUND(ccc, ddd, aaa, bbb, F4, KK1, in[7],   9);  in rmd128_transform()
142 	ROUND(bbb, ccc, ddd, aaa, F4, KK1, in[0],  11);  in rmd128_transform()
143 	ROUND(aaa, bbb, ccc, ddd, F4, KK1, in[9],  13);  in rmd128_transform()
157 	ROUND(aaa, bbb, ccc, ddd, F3, KK2, in[6],   9);  in rmd128_transform()
161 	ROUND(aaa, bbb, ccc, ddd, F3, KK2, in[0],  12);  in rmd128_transform()
163 	ROUND(ccc, ddd, aaa, bbb, F3, KK2, in[5],   9);  in rmd128_transform()
170 	ROUND(ddd, aaa, bbb, ccc, F3, KK2, in[9],  15);  in rmd128_transform()
175 	ROUND(aaa, bbb, ccc, ddd, F2, KK3, in[15],  9);  in rmd128_transform()
182 	ROUND(bbb, ccc, ddd, aaa, F2, KK3, in[9],  14);  in rmd128_transform()
188 	ROUND(ddd, aaa, bbb, ccc, F2, KK3, in[0],  13);  in rmd128_transform()
200 	ROUND(bbb, ccc, ddd, aaa, F1, KK4, in[0],  14);  in rmd128_transform()
202 	ROUND(ddd, aaa, bbb, ccc, F1, KK4, in[12],  9);  in rmd128_transform()
204 	ROUND(bbb, ccc, ddd, aaa, F1, KK4, in[13],  9);  in rmd128_transform()
205 	ROUND(aaa, bbb, ccc, ddd, F1, KK4, in[9],  12);  in rmd128_transform()
211 	ddd += cc + state[1];		/* final result for state[0] */  in rmd128_transform()
214 	state[3] = state[0] + bb + ccc;  in rmd128_transform()
215 	state[0] = ddd;  in rmd128_transform()
222 	rctx->byte_count = 0;  in rmd128_init()
224 	rctx->state[0] = RMD_H0;  in rmd128_init()
225 	rctx->state[1] = RMD_H1;  in rmd128_init()
226 	rctx->state[2] = RMD_H2;  in rmd128_init()
227 	rctx->state[3] = RMD_H3;  in rmd128_init()
229 	memset(rctx->buffer, 0, sizeof(rctx->buffer));  in rmd128_init()
231 	return 0;  in rmd128_init()
238 	const u32 avail = sizeof(rctx->buffer) - (rctx->byte_count & 0x3f);  in rmd128_update()
240 	rctx->byte_count += len;  in rmd128_update()
244 		memcpy((char *)rctx->buffer + (sizeof(rctx->buffer) - avail),  in rmd128_update()
249 	memcpy((char *)rctx->buffer + (sizeof(rctx->buffer) - avail),  in rmd128_update()
252 	rmd128_transform(rctx->state, rctx->buffer);  in rmd128_update()
254 	len -= avail;  in rmd128_update()
256 	while (len >= sizeof(rctx->buffer)) {  in rmd128_update()
257 		memcpy(rctx->buffer, data, sizeof(rctx->buffer));  in rmd128_update()
258 		rmd128_transform(rctx->state, rctx->buffer);  in rmd128_update()
259 		data += sizeof(rctx->buffer);  in rmd128_update()
260 		len -= sizeof(rctx->buffer);  in rmd128_update()
263 	memcpy(rctx->buffer, data, len);  in rmd128_update()
266 	return 0;  in rmd128_update()
276 	static const u8 padding[64] = { 0x80, };  in rmd128_final()
278 	bits = cpu_to_le64(rctx->byte_count << 3);  in rmd128_final()
281 	index = rctx->byte_count & 0x3f;  in rmd128_final()
282 	padlen = (index < 56) ? (56 - index) : ((64+56) - index);  in rmd128_final()
289 	for (i = 0; i < 4; i++)  in rmd128_final()
290 		dst[i] = cpu_to_le32p(&rctx->state[i]);  in rmd128_final()
293 	memset(rctx, 0, sizeof(*rctx));  in rmd128_final()
295 	return 0;  in rmd128_final()
325 MODULE_AUTHOR("Adrian-Ken Rueegsegger <ken@codelabs.ch>");
326 MODULE_DESCRIPTION("RIPEMD-128 Message Digest");