15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// This is mozilla/security/manager/ssl/src/md4.c, CVS rev. 1.1, with trivial 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// changes to port it to our source tree. 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// WARNING: MD4 is cryptographically weak. Do not use MD4 except in NTLM 55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// authentication. 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* vim:set ts=2 sw=2 et cindent: */ 85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* ***** BEGIN LICENSE BLOCK ***** 95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * Version: MPL 1.1/GPL 2.0/LGPL 2.1 105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * The contents of this file are subject to the Mozilla Public License Version 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 1.1 (the "License"); you may not use this file except in compliance with 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * the License. You may obtain a copy of the License at 145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * http://www.mozilla.org/MPL/ 155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * Software distributed under the License is distributed on an "AS IS" basis, 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License 185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * for the specific language governing rights and limitations under the 195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * License. 205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * The Original Code is Mozilla. 225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * The Initial Developer of the Original Code is IBM Corporation. 245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * Portions created by IBM Corporation are Copyright (C) 2003 255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * IBM Corporation. All Rights Reserved. 265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * Contributor(s): 285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * Darin Fisher <darin@meer.net> 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * Alternatively, the contents of this file may be used under the terms of 315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * either the GNU General Public License Version 2 or later (the "GPL"), or 325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), 335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * in which case the provisions of the GPL or the LGPL are applicable instead 345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * of those above. If you wish to allow use of your version of this file only 355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * under the terms of either the GPL or the LGPL, and not to allow others to 365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * use your version of this file under the terms of the MPL, indicate your 375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * decision by deleting the provisions above and replace them with the notice 385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * and other provisions required by the GPL or the LGPL. If you do not delete 395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * the provisions above, a recipient may use your version of this file under 405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * the terms of any one of the MPL, the GPL or the LGPL. 415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * 425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * ***** END LICENSE BLOCK ***** */ 435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* 455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) * "clean room" MD4 implementation (see RFC 1320) 465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) */ 475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "net/http/md4.h" 495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <string.h> 515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)typedef uint32 Uint32; 535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)typedef uint8 Uint8; 545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* the "conditional" function */ 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define F(x,y,z) (((x) & (y)) | (~(x) & (z))) 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* the "majority" function */ 595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define G(x,y,z) (((x) & (y)) | ((x) & (z)) | ((y) & (z))) 605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* the "parity" function */ 625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define H(x,y,z) ((x) ^ (y) ^ (z)) 635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* rotate n-bits to the left */ 655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define ROTL(x,n) (((x) << (n)) | ((x) >> (0x20 - n))) 665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* round 1: [abcd k s]: a = (a + F(b,c,d) + X[k]) <<< s */ 685821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define RD1(a,b,c,d,k,s) a += F(b,c,d) + X[k]; a = ROTL(a,s) 695821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 705821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* round 2: [abcd k s]: a = (a + G(b,c,d) + X[k] + MAGIC) <<< s */ 715821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define RD2(a,b,c,d,k,s) a += G(b,c,d) + X[k] + 0x5A827999; a = ROTL(a,s) 725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* round 3: [abcd k s]: a = (a + H(b,c,d) + X[k] + MAGIC) <<< s */ 745821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define RD3(a,b,c,d,k,s) a += H(b,c,d) + X[k] + 0x6ED9EBA1; a = ROTL(a,s) 755821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* converts from word array to byte array, len is number of bytes */ 775821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)static void w2b(Uint8 *out, const Uint32 *in, Uint32 len) 785821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles){ 795821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) Uint8 *bp; const Uint32 *wp, *wpend; 805821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bp = out; 825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) wp = in; 835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) wpend = wp + (len >> 2); 845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (; wp != wpend; ++wp, bp += 4) 865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) { 875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bp[0] = (Uint8) ((*wp ) & 0xFF); 885821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bp[1] = (Uint8) ((*wp >> 8) & 0xFF); 895821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bp[2] = (Uint8) ((*wp >> 16) & 0xFF); 905821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bp[3] = (Uint8) ((*wp >> 24) & 0xFF); 915821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 925821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 935821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 945821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* converts from byte array to word array, len is number of bytes */ 955821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)static void b2w(Uint32 *out, const Uint8 *in, Uint32 len) 965821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles){ 975821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) Uint32 *wp; const Uint8 *bp, *bpend; 985821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 995821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) wp = out; 1005821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bp = in; 1015821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bpend = in + len; 1025821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1035821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (; bp != bpend; bp += 4, ++wp) 1045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) { 1055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) *wp = (Uint32) (bp[0] ) | 1065821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) (Uint32) (bp[1] << 8) | 1075821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) (Uint32) (bp[2] << 16) | 1085821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) (Uint32) (bp[3] << 24); 1095821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)/* update state: data is 64 bytes in length */ 1135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)static void md4step(Uint32 state[4], const Uint8 *data) 1145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles){ 1155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) Uint32 A, B, C, D, X[16]; 1165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) b2w(X, data, 64); 1185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) A = state[0]; 1205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) B = state[1]; 1215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) C = state[2]; 1225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) D = state[3]; 1235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD1(A,B,C,D, 0,3); RD1(D,A,B,C, 1,7); RD1(C,D,A,B, 2,11); RD1(B,C,D,A, 3,19); 1255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD1(A,B,C,D, 4,3); RD1(D,A,B,C, 5,7); RD1(C,D,A,B, 6,11); RD1(B,C,D,A, 7,19); 1265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD1(A,B,C,D, 8,3); RD1(D,A,B,C, 9,7); RD1(C,D,A,B,10,11); RD1(B,C,D,A,11,19); 1275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD1(A,B,C,D,12,3); RD1(D,A,B,C,13,7); RD1(C,D,A,B,14,11); RD1(B,C,D,A,15,19); 1285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD2(A,B,C,D, 0,3); RD2(D,A,B,C, 4,5); RD2(C,D,A,B, 8, 9); RD2(B,C,D,A,12,13); 1305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD2(A,B,C,D, 1,3); RD2(D,A,B,C, 5,5); RD2(C,D,A,B, 9, 9); RD2(B,C,D,A,13,13); 1315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD2(A,B,C,D, 2,3); RD2(D,A,B,C, 6,5); RD2(C,D,A,B,10, 9); RD2(B,C,D,A,14,13); 1325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD2(A,B,C,D, 3,3); RD2(D,A,B,C, 7,5); RD2(C,D,A,B,11, 9); RD2(B,C,D,A,15,13); 1335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD3(A,B,C,D, 0,3); RD3(D,A,B,C, 8,9); RD3(C,D,A,B, 4,11); RD3(B,C,D,A,12,15); 1355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD3(A,B,C,D, 2,3); RD3(D,A,B,C,10,9); RD3(C,D,A,B, 6,11); RD3(B,C,D,A,14,15); 1365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD3(A,B,C,D, 1,3); RD3(D,A,B,C, 9,9); RD3(C,D,A,B, 5,11); RD3(B,C,D,A,13,15); 1375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) RD3(A,B,C,D, 3,3); RD3(D,A,B,C,11,9); RD3(C,D,A,B, 7,11); RD3(B,C,D,A,15,15); 1385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[0] += A; 1405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[1] += B; 1415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[2] += C; 1425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[3] += D; 1435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace net { 1465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace weak_crypto { 1475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)void MD4Sum(const Uint8 *input, Uint32 inputLen, Uint8 *result) 1495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles){ 1505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) Uint8 final[128]; 1515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) Uint32 i, n, m, state[4]; 1525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) /* magic initial states */ 1545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[0] = 0x67452301; 1555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[1] = 0xEFCDAB89; 1565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[2] = 0x98BADCFE; 1575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) state[3] = 0x10325476; 1585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) /* compute number of complete 64-byte segments contained in input */ 1605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) m = inputLen >> 6; 1615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) /* digest first m segments */ 1635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) for (i=0; i<m; ++i) 1645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) md4step(state, (input + (i << 6))); 1655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) /* build final buffer */ 1675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) n = inputLen % 64; 1685821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) memcpy(final, input + (m << 6), n); 1695821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) final[n] = 0x80; 1705821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) memset(final + n + 1, 0, 120 - (n + 1)); 1715821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) inputLen = inputLen << 3; 1735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) w2b(final + (n >= 56 ? 120 : 56), &inputLen, 4); 1745821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1755821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) md4step(state, final); 1765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (n >= 56) 1775821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) md4step(state, final + 64); 1785821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1795821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) /* copy state to result */ 1805821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) w2b(result, state, 16); 1815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace net::weak_crypto 1845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace net 185