1/* sha512.c - SHA384 and SHA512 hash functions 2 * Copyright (C) 2003, 2008, 2009 Free Software Foundation, Inc. 3 * 4 * This file is part of Libgcrypt. 5 * 6 * Libgcrypt is free software; you can redistribute it and/or modify 7 * it under the terms of the GNU Lesser general Public License as 8 * published by the Free Software Foundation; either version 2.1 of 9 * the License, or (at your option) any later version. 10 * 11 * Libgcrypt is distributed in the hope that it will be useful, 12 * but WITHOUT ANY WARRANTY; without even the implied warranty of 13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 * GNU Lesser General Public License for more details. 15 * 16 * You should have received a copy of the GNU Lesser General Public 17 * License along with this program; if not, see <http://www.gnu.org/licenses/>. 18 */ 19 20 21/* Test vectors from FIPS-180-2: 22 * 23 * "abc" 24 * 384: 25 * CB00753F 45A35E8B B5A03D69 9AC65007 272C32AB 0EDED163 26 * 1A8B605A 43FF5BED 8086072B A1E7CC23 58BAECA1 34C825A7 27 * 512: 28 * DDAF35A1 93617ABA CC417349 AE204131 12E6FA4E 89A97EA2 0A9EEEE6 4B55D39A 29 * 2192992A 274FC1A8 36BA3C23 A3FEEBBD 454D4423 643CE80E 2A9AC94F A54CA49F 30 * 31 * "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmnhijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu" 32 * 384: 33 * 09330C33 F71147E8 3D192FC7 82CD1B47 53111B17 3B3B05D2 34 * 2FA08086 E3B0F712 FCC7C71A 557E2DB9 66C3E9FA 91746039 35 * 512: 36 * 8E959B75 DAE313DA 8CF4F728 14FC143F 8F7779C6 EB9F7FA1 7299AEAD B6889018 37 * 501D289E 4900F7E4 331B99DE C4B5433A C7D329EE B6DD2654 5E96E55B 874BE909 38 * 39 * "a" x 1000000 40 * 384: 41 * 9D0E1809 716474CB 086E834E 310A4A1C ED149E9C 00F24852 42 * 7972CEC5 704C2A5B 07B8B3DC 38ECC4EB AE97DDD8 7F3D8985 43 * 512: 44 * E718483D 0CE76964 4E2E42C7 BC15B463 8E1F98B1 3B204428 5632A803 AFA973EB 45 * DE0FF244 877EA60A 4CB0432C E577C31B EB009C5C 2C49AA2E 4EADB217 AD8CC09B 46 */ 47 48 49#include <config.h> 50#include <string.h> 51#include "g10lib.h" 52#include "bithelp.h" 53#include "cipher.h" 54#include "hash-common.h" 55 56typedef struct 57{ 58 u64 h0, h1, h2, h3, h4, h5, h6, h7; 59 u64 nblocks; 60 byte buf[128]; 61 int count; 62} SHA512_CONTEXT; 63 64static void 65sha512_init (void *context) 66{ 67 SHA512_CONTEXT *hd = context; 68 69 hd->h0 = U64_C(0x6a09e667f3bcc908); 70 hd->h1 = U64_C(0xbb67ae8584caa73b); 71 hd->h2 = U64_C(0x3c6ef372fe94f82b); 72 hd->h3 = U64_C(0xa54ff53a5f1d36f1); 73 hd->h4 = U64_C(0x510e527fade682d1); 74 hd->h5 = U64_C(0x9b05688c2b3e6c1f); 75 hd->h6 = U64_C(0x1f83d9abfb41bd6b); 76 hd->h7 = U64_C(0x5be0cd19137e2179); 77 78 hd->nblocks = 0; 79 hd->count = 0; 80} 81 82static void 83sha384_init (void *context) 84{ 85 SHA512_CONTEXT *hd = context; 86 87 hd->h0 = U64_C(0xcbbb9d5dc1059ed8); 88 hd->h1 = U64_C(0x629a292a367cd507); 89 hd->h2 = U64_C(0x9159015a3070dd17); 90 hd->h3 = U64_C(0x152fecd8f70e5939); 91 hd->h4 = U64_C(0x67332667ffc00b31); 92 hd->h5 = U64_C(0x8eb44a8768581511); 93 hd->h6 = U64_C(0xdb0c2e0d64f98fa7); 94 hd->h7 = U64_C(0x47b5481dbefa4fa4); 95 96 hd->nblocks = 0; 97 hd->count = 0; 98} 99 100 101static inline u64 102ROTR (u64 x, u64 n) 103{ 104 return ((x >> n) | (x << (64 - n))); 105} 106 107static inline u64 108Ch (u64 x, u64 y, u64 z) 109{ 110 return ((x & y) ^ ( ~x & z)); 111} 112 113static inline u64 114Maj (u64 x, u64 y, u64 z) 115{ 116 return ((x & y) ^ (x & z) ^ (y & z)); 117} 118 119static inline u64 120Sum0 (u64 x) 121{ 122 return (ROTR (x, 28) ^ ROTR (x, 34) ^ ROTR (x, 39)); 123} 124 125static inline u64 126Sum1 (u64 x) 127{ 128 return (ROTR (x, 14) ^ ROTR (x, 18) ^ ROTR (x, 41)); 129} 130 131/**************** 132 * Transform the message W which consists of 16 64-bit-words 133 */ 134static void 135transform (SHA512_CONTEXT *hd, const unsigned char *data) 136{ 137 u64 a, b, c, d, e, f, g, h; 138 u64 w[80]; 139 int t; 140 static const u64 k[] = 141 { 142 U64_C(0x428a2f98d728ae22), U64_C(0x7137449123ef65cd), 143 U64_C(0xb5c0fbcfec4d3b2f), U64_C(0xe9b5dba58189dbbc), 144 U64_C(0x3956c25bf348b538), U64_C(0x59f111f1b605d019), 145 U64_C(0x923f82a4af194f9b), U64_C(0xab1c5ed5da6d8118), 146 U64_C(0xd807aa98a3030242), U64_C(0x12835b0145706fbe), 147 U64_C(0x243185be4ee4b28c), U64_C(0x550c7dc3d5ffb4e2), 148 U64_C(0x72be5d74f27b896f), U64_C(0x80deb1fe3b1696b1), 149 U64_C(0x9bdc06a725c71235), U64_C(0xc19bf174cf692694), 150 U64_C(0xe49b69c19ef14ad2), U64_C(0xefbe4786384f25e3), 151 U64_C(0x0fc19dc68b8cd5b5), U64_C(0x240ca1cc77ac9c65), 152 U64_C(0x2de92c6f592b0275), U64_C(0x4a7484aa6ea6e483), 153 U64_C(0x5cb0a9dcbd41fbd4), U64_C(0x76f988da831153b5), 154 U64_C(0x983e5152ee66dfab), U64_C(0xa831c66d2db43210), 155 U64_C(0xb00327c898fb213f), U64_C(0xbf597fc7beef0ee4), 156 U64_C(0xc6e00bf33da88fc2), U64_C(0xd5a79147930aa725), 157 U64_C(0x06ca6351e003826f), U64_C(0x142929670a0e6e70), 158 U64_C(0x27b70a8546d22ffc), U64_C(0x2e1b21385c26c926), 159 U64_C(0x4d2c6dfc5ac42aed), U64_C(0x53380d139d95b3df), 160 U64_C(0x650a73548baf63de), U64_C(0x766a0abb3c77b2a8), 161 U64_C(0x81c2c92e47edaee6), U64_C(0x92722c851482353b), 162 U64_C(0xa2bfe8a14cf10364), U64_C(0xa81a664bbc423001), 163 U64_C(0xc24b8b70d0f89791), U64_C(0xc76c51a30654be30), 164 U64_C(0xd192e819d6ef5218), U64_C(0xd69906245565a910), 165 U64_C(0xf40e35855771202a), U64_C(0x106aa07032bbd1b8), 166 U64_C(0x19a4c116b8d2d0c8), U64_C(0x1e376c085141ab53), 167 U64_C(0x2748774cdf8eeb99), U64_C(0x34b0bcb5e19b48a8), 168 U64_C(0x391c0cb3c5c95a63), U64_C(0x4ed8aa4ae3418acb), 169 U64_C(0x5b9cca4f7763e373), U64_C(0x682e6ff3d6b2b8a3), 170 U64_C(0x748f82ee5defb2fc), U64_C(0x78a5636f43172f60), 171 U64_C(0x84c87814a1f0ab72), U64_C(0x8cc702081a6439ec), 172 U64_C(0x90befffa23631e28), U64_C(0xa4506cebde82bde9), 173 U64_C(0xbef9a3f7b2c67915), U64_C(0xc67178f2e372532b), 174 U64_C(0xca273eceea26619c), U64_C(0xd186b8c721c0c207), 175 U64_C(0xeada7dd6cde0eb1e), U64_C(0xf57d4f7fee6ed178), 176 U64_C(0x06f067aa72176fba), U64_C(0x0a637dc5a2c898a6), 177 U64_C(0x113f9804bef90dae), U64_C(0x1b710b35131c471b), 178 U64_C(0x28db77f523047d84), U64_C(0x32caab7b40c72493), 179 U64_C(0x3c9ebe0a15c9bebc), U64_C(0x431d67c49c100d4c), 180 U64_C(0x4cc5d4becb3e42b6), U64_C(0x597f299cfc657e2a), 181 U64_C(0x5fcb6fab3ad6faec), U64_C(0x6c44198c4a475817) 182 }; 183 184 /* get values from the chaining vars */ 185 a = hd->h0; 186 b = hd->h1; 187 c = hd->h2; 188 d = hd->h3; 189 e = hd->h4; 190 f = hd->h5; 191 g = hd->h6; 192 h = hd->h7; 193 194#ifdef WORDS_BIGENDIAN 195 memcpy (w, data, 128); 196#else 197 { 198 int i; 199 byte *p2; 200 201 for (i = 0, p2 = (byte *) w; i < 16; i++, p2 += 8) 202 { 203 p2[7] = *data++; 204 p2[6] = *data++; 205 p2[5] = *data++; 206 p2[4] = *data++; 207 p2[3] = *data++; 208 p2[2] = *data++; 209 p2[1] = *data++; 210 p2[0] = *data++; 211 } 212 } 213#endif 214 215#define S0(x) (ROTR((x),1) ^ ROTR((x),8) ^ ((x)>>7)) 216#define S1(x) (ROTR((x),19) ^ ROTR((x),61) ^ ((x)>>6)) 217 218 for (t = 16; t < 80; t++) 219 w[t] = S1 (w[t - 2]) + w[t - 7] + S0 (w[t - 15]) + w[t - 16]; 220 221 222 for (t = 0; t < 80; ) 223 { 224 u64 t1, t2; 225 226 /* Performance on a AMD Athlon(tm) Dual Core Processor 4050e 227 with gcc 4.3.3 using gcry_md_hash_buffer of each 10000 bytes 228 initialized to 0,1,2,3...255,0,... and 1000 iterations: 229 230 Not unrolled with macros: 440ms 231 Unrolled with macros: 350ms 232 Unrolled with inline: 330ms 233 */ 234#if 0 /* Not unrolled. */ 235 t1 = h + Sum1 (e) + Ch (e, f, g) + k[t] + w[t]; 236 t2 = Sum0 (a) + Maj (a, b, c); 237 h = g; 238 g = f; 239 f = e; 240 e = d + t1; 241 d = c; 242 c = b; 243 b = a; 244 a = t1 + t2; 245 t++; 246#else /* Unrolled to interweave the chain variables. */ 247 t1 = h + Sum1 (e) + Ch (e, f, g) + k[t] + w[t]; 248 t2 = Sum0 (a) + Maj (a, b, c); 249 d += t1; 250 h = t1 + t2; 251 252 t1 = g + Sum1 (d) + Ch (d, e, f) + k[t+1] + w[t+1]; 253 t2 = Sum0 (h) + Maj (h, a, b); 254 c += t1; 255 g = t1 + t2; 256 257 t1 = f + Sum1 (c) + Ch (c, d, e) + k[t+2] + w[t+2]; 258 t2 = Sum0 (g) + Maj (g, h, a); 259 b += t1; 260 f = t1 + t2; 261 262 t1 = e + Sum1 (b) + Ch (b, c, d) + k[t+3] + w[t+3]; 263 t2 = Sum0 (f) + Maj (f, g, h); 264 a += t1; 265 e = t1 + t2; 266 267 t1 = d + Sum1 (a) + Ch (a, b, c) + k[t+4] + w[t+4]; 268 t2 = Sum0 (e) + Maj (e, f, g); 269 h += t1; 270 d = t1 + t2; 271 272 t1 = c + Sum1 (h) + Ch (h, a, b) + k[t+5] + w[t+5]; 273 t2 = Sum0 (d) + Maj (d, e, f); 274 g += t1; 275 c = t1 + t2; 276 277 t1 = b + Sum1 (g) + Ch (g, h, a) + k[t+6] + w[t+6]; 278 t2 = Sum0 (c) + Maj (c, d, e); 279 f += t1; 280 b = t1 + t2; 281 282 t1 = a + Sum1 (f) + Ch (f, g, h) + k[t+7] + w[t+7]; 283 t2 = Sum0 (b) + Maj (b, c, d); 284 e += t1; 285 a = t1 + t2; 286 287 t += 8; 288#endif 289 } 290 291 /* Update chaining vars. */ 292 hd->h0 += a; 293 hd->h1 += b; 294 hd->h2 += c; 295 hd->h3 += d; 296 hd->h4 += e; 297 hd->h5 += f; 298 hd->h6 += g; 299 hd->h7 += h; 300} 301 302 303/* Update the message digest with the contents 304 * of INBUF with length INLEN. 305 */ 306static void 307sha512_write (void *context, const void *inbuf_arg, size_t inlen) 308{ 309 const unsigned char *inbuf = inbuf_arg; 310 SHA512_CONTEXT *hd = context; 311 312 if (hd->count == 128) 313 { /* flush the buffer */ 314 transform (hd, hd->buf); 315 _gcry_burn_stack (768); 316 hd->count = 0; 317 hd->nblocks++; 318 } 319 if (!inbuf) 320 return; 321 if (hd->count) 322 { 323 for (; inlen && hd->count < 128; inlen--) 324 hd->buf[hd->count++] = *inbuf++; 325 sha512_write (context, NULL, 0); 326 if (!inlen) 327 return; 328 } 329 330 while (inlen >= 128) 331 { 332 transform (hd, inbuf); 333 hd->count = 0; 334 hd->nblocks++; 335 inlen -= 128; 336 inbuf += 128; 337 } 338 _gcry_burn_stack (768); 339 for (; inlen && hd->count < 128; inlen--) 340 hd->buf[hd->count++] = *inbuf++; 341} 342 343 344/* The routine final terminates the computation and 345 * returns the digest. 346 * The handle is prepared for a new cycle, but adding bytes to the 347 * handle will the destroy the returned buffer. 348 * Returns: 64 bytes representing the digest. When used for sha384, 349 * we take the leftmost 48 of those bytes. 350 */ 351 352static void 353sha512_final (void *context) 354{ 355 SHA512_CONTEXT *hd = context; 356 u64 t, msb, lsb; 357 byte *p; 358 359 sha512_write (context, NULL, 0); /* flush */ ; 360 361 t = hd->nblocks; 362 /* multiply by 128 to make a byte count */ 363 lsb = t << 7; 364 msb = t >> 57; 365 /* add the count */ 366 t = lsb; 367 if ((lsb += hd->count) < t) 368 msb++; 369 /* multiply by 8 to make a bit count */ 370 t = lsb; 371 lsb <<= 3; 372 msb <<= 3; 373 msb |= t >> 61; 374 375 if (hd->count < 112) 376 { /* enough room */ 377 hd->buf[hd->count++] = 0x80; /* pad */ 378 while (hd->count < 112) 379 hd->buf[hd->count++] = 0; /* pad */ 380 } 381 else 382 { /* need one extra block */ 383 hd->buf[hd->count++] = 0x80; /* pad character */ 384 while (hd->count < 128) 385 hd->buf[hd->count++] = 0; 386 sha512_write (context, NULL, 0); /* flush */ ; 387 memset (hd->buf, 0, 112); /* fill next block with zeroes */ 388 } 389 /* append the 128 bit count */ 390 hd->buf[112] = msb >> 56; 391 hd->buf[113] = msb >> 48; 392 hd->buf[114] = msb >> 40; 393 hd->buf[115] = msb >> 32; 394 hd->buf[116] = msb >> 24; 395 hd->buf[117] = msb >> 16; 396 hd->buf[118] = msb >> 8; 397 hd->buf[119] = msb; 398 399 hd->buf[120] = lsb >> 56; 400 hd->buf[121] = lsb >> 48; 401 hd->buf[122] = lsb >> 40; 402 hd->buf[123] = lsb >> 32; 403 hd->buf[124] = lsb >> 24; 404 hd->buf[125] = lsb >> 16; 405 hd->buf[126] = lsb >> 8; 406 hd->buf[127] = lsb; 407 transform (hd, hd->buf); 408 _gcry_burn_stack (768); 409 410 p = hd->buf; 411#ifdef WORDS_BIGENDIAN 412#define X(a) do { *(u64*)p = hd->h##a ; p += 8; } while (0) 413#else /* little endian */ 414#define X(a) do { *p++ = hd->h##a >> 56; *p++ = hd->h##a >> 48; \ 415 *p++ = hd->h##a >> 40; *p++ = hd->h##a >> 32; \ 416 *p++ = hd->h##a >> 24; *p++ = hd->h##a >> 16; \ 417 *p++ = hd->h##a >> 8; *p++ = hd->h##a; } while (0) 418#endif 419 X (0); 420 X (1); 421 X (2); 422 X (3); 423 X (4); 424 X (5); 425 /* Note that these last two chunks are included even for SHA384. 426 We just ignore them. */ 427 X (6); 428 X (7); 429#undef X 430} 431 432static byte * 433sha512_read (void *context) 434{ 435 SHA512_CONTEXT *hd = (SHA512_CONTEXT *) context; 436 return hd->buf; 437} 438 439 440 441/* 442 Self-test section. 443 */ 444 445 446static gpg_err_code_t 447selftests_sha384 (int extended, selftest_report_func_t report) 448{ 449 const char *what; 450 const char *errtxt; 451 452 what = "short string"; 453 errtxt = _gcry_hash_selftest_check_one 454 (GCRY_MD_SHA384, 0, 455 "abc", 3, 456 "\xcb\x00\x75\x3f\x45\xa3\x5e\x8b\xb5\xa0\x3d\x69\x9a\xc6\x50\x07" 457 "\x27\x2c\x32\xab\x0e\xde\xd1\x63\x1a\x8b\x60\x5a\x43\xff\x5b\xed" 458 "\x80\x86\x07\x2b\xa1\xe7\xcc\x23\x58\xba\xec\xa1\x34\xc8\x25\xa7", 48); 459 if (errtxt) 460 goto failed; 461 462 if (extended) 463 { 464 what = "long string"; 465 errtxt = _gcry_hash_selftest_check_one 466 (GCRY_MD_SHA384, 0, 467 "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn" 468 "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu", 112, 469 "\x09\x33\x0C\x33\xF7\x11\x47\xE8\x3D\x19\x2F\xC7\x82\xCD\x1B\x47" 470 "\x53\x11\x1B\x17\x3B\x3B\x05\xD2\x2F\xA0\x80\x86\xE3\xB0\xF7\x12" 471 "\xFC\xC7\xC7\x1A\x55\x7E\x2D\xB9\x66\xC3\xE9\xFA\x91\x74\x60\x39", 472 48); 473 if (errtxt) 474 goto failed; 475 476 what = "one million \"a\""; 477 errtxt = _gcry_hash_selftest_check_one 478 (GCRY_MD_SHA384, 1, 479 NULL, 0, 480 "\x9D\x0E\x18\x09\x71\x64\x74\xCB\x08\x6E\x83\x4E\x31\x0A\x4A\x1C" 481 "\xED\x14\x9E\x9C\x00\xF2\x48\x52\x79\x72\xCE\xC5\x70\x4C\x2A\x5B" 482 "\x07\xB8\xB3\xDC\x38\xEC\xC4\xEB\xAE\x97\xDD\xD8\x7F\x3D\x89\x85", 483 48); 484 if (errtxt) 485 goto failed; 486 } 487 488 return 0; /* Succeeded. */ 489 490 failed: 491 if (report) 492 report ("digest", GCRY_MD_SHA384, what, errtxt); 493 return GPG_ERR_SELFTEST_FAILED; 494} 495 496static gpg_err_code_t 497selftests_sha512 (int extended, selftest_report_func_t report) 498{ 499 const char *what; 500 const char *errtxt; 501 502 what = "short string"; 503 errtxt = _gcry_hash_selftest_check_one 504 (GCRY_MD_SHA512, 0, 505 "abc", 3, 506 "\xDD\xAF\x35\xA1\x93\x61\x7A\xBA\xCC\x41\x73\x49\xAE\x20\x41\x31" 507 "\x12\xE6\xFA\x4E\x89\xA9\x7E\xA2\x0A\x9E\xEE\xE6\x4B\x55\xD3\x9A" 508 "\x21\x92\x99\x2A\x27\x4F\xC1\xA8\x36\xBA\x3C\x23\xA3\xFE\xEB\xBD" 509 "\x45\x4D\x44\x23\x64\x3C\xE8\x0E\x2A\x9A\xC9\x4F\xA5\x4C\xA4\x9F", 64); 510 if (errtxt) 511 goto failed; 512 513 if (extended) 514 { 515 what = "long string"; 516 errtxt = _gcry_hash_selftest_check_one 517 (GCRY_MD_SHA512, 0, 518 "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn" 519 "hijklmnoijklmnopjklmnopqklmnopqrlmnopqrsmnopqrstnopqrstu", 112, 520 "\x8E\x95\x9B\x75\xDA\xE3\x13\xDA\x8C\xF4\xF7\x28\x14\xFC\x14\x3F" 521 "\x8F\x77\x79\xC6\xEB\x9F\x7F\xA1\x72\x99\xAE\xAD\xB6\x88\x90\x18" 522 "\x50\x1D\x28\x9E\x49\x00\xF7\xE4\x33\x1B\x99\xDE\xC4\xB5\x43\x3A" 523 "\xC7\xD3\x29\xEE\xB6\xDD\x26\x54\x5E\x96\xE5\x5B\x87\x4B\xE9\x09", 524 64); 525 if (errtxt) 526 goto failed; 527 528 what = "one million \"a\""; 529 errtxt = _gcry_hash_selftest_check_one 530 (GCRY_MD_SHA512, 1, 531 NULL, 0, 532 "\xE7\x18\x48\x3D\x0C\xE7\x69\x64\x4E\x2E\x42\xC7\xBC\x15\xB4\x63" 533 "\x8E\x1F\x98\xB1\x3B\x20\x44\x28\x56\x32\xA8\x03\xAF\xA9\x73\xEB" 534 "\xDE\x0F\xF2\x44\x87\x7E\xA6\x0A\x4C\xB0\x43\x2C\xE5\x77\xC3\x1B" 535 "\xEB\x00\x9C\x5C\x2C\x49\xAA\x2E\x4E\xAD\xB2\x17\xAD\x8C\xC0\x9B", 536 64); 537 if (errtxt) 538 goto failed; 539 } 540 541 return 0; /* Succeeded. */ 542 543 failed: 544 if (report) 545 report ("digest", GCRY_MD_SHA512, what, errtxt); 546 return GPG_ERR_SELFTEST_FAILED; 547} 548 549 550/* Run a full self-test for ALGO and return 0 on success. */ 551static gpg_err_code_t 552run_selftests (int algo, int extended, selftest_report_func_t report) 553{ 554 gpg_err_code_t ec; 555 556 switch (algo) 557 { 558 case GCRY_MD_SHA384: 559 ec = selftests_sha384 (extended, report); 560 break; 561 case GCRY_MD_SHA512: 562 ec = selftests_sha512 (extended, report); 563 break; 564 default: 565 ec = GPG_ERR_DIGEST_ALGO; 566 break; 567 568 } 569 return ec; 570} 571 572 573 574 575static byte sha512_asn[] = /* Object ID is 2.16.840.1.101.3.4.2.3 */ 576 { 577 0x30, 0x51, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 578 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x03, 0x05, 579 0x00, 0x04, 0x40 580 }; 581 582static gcry_md_oid_spec_t oid_spec_sha512[] = 583 { 584 { "2.16.840.1.101.3.4.2.3" }, 585 586 /* PKCS#1 sha512WithRSAEncryption */ 587 { "1.2.840.113549.1.1.13" }, 588 589 { NULL } 590 }; 591 592gcry_md_spec_t _gcry_digest_spec_sha512 = 593 { 594 "SHA512", sha512_asn, DIM (sha512_asn), oid_spec_sha512, 64, 595 sha512_init, sha512_write, sha512_final, sha512_read, 596 sizeof (SHA512_CONTEXT), 597 }; 598md_extra_spec_t _gcry_digest_extraspec_sha512 = 599 { 600 run_selftests 601 }; 602 603static byte sha384_asn[] = /* Object ID is 2.16.840.1.101.3.4.2.2 */ 604 { 605 0x30, 0x41, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 606 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x02, 0x05, 607 0x00, 0x04, 0x30 608 }; 609 610static gcry_md_oid_spec_t oid_spec_sha384[] = 611 { 612 { "2.16.840.1.101.3.4.2.2" }, 613 614 /* PKCS#1 sha384WithRSAEncryption */ 615 { "1.2.840.113549.1.1.12" }, 616 617 { NULL }, 618 }; 619 620gcry_md_spec_t _gcry_digest_spec_sha384 = 621 { 622 "SHA384", sha384_asn, DIM (sha384_asn), oid_spec_sha384, 48, 623 sha384_init, sha512_write, sha512_final, sha512_read, 624 sizeof (SHA512_CONTEXT), 625 }; 626md_extra_spec_t _gcry_digest_extraspec_sha384 = 627 { 628 run_selftests 629 }; 630