1/* $NetBSD$ */ 2 3/* 4 * Copyright (c) 2006 Kungliga Tekniska H��gskolan 5 * (Royal Institute of Technology, Stockholm, Sweden). 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * 3. Neither the name of the Institute nor the names of its contributors 20 * may be used to endorse or promote products derived from this software 21 * without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33 * SUCH DAMAGE. 34 */ 35 36#include "config.h" 37 38#include "hash.h" 39#include "md2.h" 40 41static const unsigned char subst[256] = { 42 41, 46, 67, 201, 162, 216, 124, 1, 61, 54, 84, 161, 236, 240, 6, 43 19, 98, 167, 5, 243, 192, 199, 115, 140, 152, 147, 43, 217, 188, 44 76, 130, 202, 30, 155, 87, 60, 253, 212, 224, 22, 103, 66, 111, 24, 45 138, 23, 229, 18, 190, 78, 196, 214, 218, 158, 222, 73, 160, 251, 46 245, 142, 187, 47, 238, 122, 169, 104, 121, 145, 21, 178, 7, 63, 47 148, 194, 16, 137, 11, 34, 95, 33, 128, 127, 93, 154, 90, 144, 50, 48 39, 53, 62, 204, 231, 191, 247, 151, 3, 255, 25, 48, 179, 72, 165, 49 181, 209, 215, 94, 146, 42, 172, 86, 170, 198, 79, 184, 56, 210, 50 150, 164, 125, 182, 118, 252, 107, 226, 156, 116, 4, 241, 69, 157, 51 112, 89, 100, 113, 135, 32, 134, 91, 207, 101, 230, 45, 168, 2, 27, 52 96, 37, 173, 174, 176, 185, 246, 28, 70, 97, 105, 52, 64, 126, 15, 53 85, 71, 163, 35, 221, 81, 175, 58, 195, 92, 249, 206, 186, 197, 54 234, 38, 44, 83, 13, 110, 133, 40, 132, 9, 211, 223, 205, 244, 65, 55 129, 77, 82, 106, 220, 55, 200, 108, 193, 171, 250, 36, 225, 123, 56 8, 12, 189, 177, 74, 120, 136, 149, 139, 227, 99, 232, 109, 233, 57 203, 213, 254, 59, 0, 29, 57, 242, 239, 183, 14, 102, 88, 208, 228, 58 166, 119, 114, 248, 235, 117, 75, 10, 49, 68, 80, 180, 143, 237, 59 31, 26, 219, 153, 141, 51, 159, 17, 131, 20 60}; 61 62void 63MD2_Init (struct md2 *m) 64{ 65 memset(m, 0, sizeof(*m)); 66} 67 68static void 69calc(struct md2 *m, const void *v) 70{ 71 unsigned char x[48], L; 72 const unsigned char *p = v; 73 int i, j, t; 74 75 L = m->checksum[15]; 76 for (i = 0; i < 16; i++) 77 L = m->checksum[i] ^= subst[p[i] ^ L]; 78 79 for (i = 0; i < 16; i++) { 80 x[i] = m->state[i]; 81 x[i + 16] = p[i]; 82 x[i + 32] = x[i] ^ p[i]; 83 } 84 85 t = 0; 86 for (i = 0; i < 18; i++) { 87 for (j = 0; j < 48; j++) 88 t = x[j] ^= subst[t]; 89 t = (t + i) & 0xff; 90 } 91 92 memcpy(m->state, x, 16); 93 memset(x, 0, sizeof(x)); 94} 95 96void 97MD2_Update (struct md2 *m, const void *v, size_t len) 98{ 99 size_t idx = m->len & 0xf; 100 const unsigned char *p = v; 101 102 m->len += len; 103 if (len + idx >= 16) { 104 if (idx) { 105 memcpy(m->data + idx, p, 16 - idx); 106 calc(m, m->data); 107 p += 16; 108 len -= 16 - idx; 109 } 110 while (len >= 16) { 111 calc(m, p); 112 p += 16; 113 len -= 16; 114 } 115 idx = 0; 116 } 117 118 memcpy(m->data + idx, p, len); 119} 120 121void 122MD2_Final (void *res, struct md2 *m) 123{ 124 unsigned char pad[16]; 125 size_t padlen; 126 127 padlen = 16 - (m->len % 16); 128 memset(pad, padlen, padlen); 129 130 MD2_Update(m, pad, padlen); 131 memcpy(pad, m->checksum, 16); 132 MD2_Update(m, pad, 16); 133 134 memcpy(res, m->state, MD2_DIGEST_LENGTH); 135 memset(m, 0, sizeof(m)); 136} 137