1/* SHA512 module */
2
3/* This module provides an interface to NIST's SHA-512 and SHA-384 Algorithms */
4
5/* See below for information about the original code this module was
6   based upon. Additional work performed by:
7
8   Andrew Kuchling (amk@amk.ca)
9   Greg Stein (gstein@lyra.org)
10   Trevor Perrin (trevp@trevp.net)
11
12   Copyright (C) 2005   Gregory P. Smith (greg@krypto.org)
13   Licensed to PSF under a Contributor Agreement.
14
15*/
16
17/* SHA objects */
18
19#include "Python.h"
20#include "structmember.h"
21
22#ifdef PY_LONG_LONG /* If no PY_LONG_LONG, don't compile anything! */
23
24/* Endianness testing and definitions */
25#define TestEndianness(variable) {int i=1; variable=PCT_BIG_ENDIAN;\
26        if (*((char*)&i)==1) variable=PCT_LITTLE_ENDIAN;}
27
28#define PCT_LITTLE_ENDIAN 1
29#define PCT_BIG_ENDIAN 0
30
31/* Some useful types */
32
33typedef unsigned char SHA_BYTE;
34
35#if SIZEOF_INT == 4
36typedef unsigned int SHA_INT32; /* 32-bit integer */
37typedef unsigned PY_LONG_LONG SHA_INT64;        /* 64-bit integer */
38#else
39/* not defined. compilation will die. */
40#endif
41
42/* The SHA block size and message digest sizes, in bytes */
43
44#define SHA_BLOCKSIZE   128
45#define SHA_DIGESTSIZE  64
46
47/* The structure for storing SHA info */
48
49typedef struct {
50    PyObject_HEAD
51    SHA_INT64 digest[8];                /* Message digest */
52    SHA_INT32 count_lo, count_hi;       /* 64-bit bit count */
53    SHA_BYTE data[SHA_BLOCKSIZE];       /* SHA data buffer */
54    int Endianness;
55    int local;                          /* unprocessed amount in data */
56    int digestsize;
57} SHAobject;
58
59/* When run on a little-endian CPU we need to perform byte reversal on an
60   array of longwords. */
61
62static void longReverse(SHA_INT64 *buffer, int byteCount, int Endianness)
63{
64    SHA_INT64 value;
65
66    if ( Endianness == PCT_BIG_ENDIAN )
67        return;
68
69    byteCount /= sizeof(*buffer);
70    while (byteCount--) {
71        value = *buffer;
72
73                ((unsigned char*)buffer)[0] = (unsigned char)(value >> 56) & 0xff;
74                ((unsigned char*)buffer)[1] = (unsigned char)(value >> 48) & 0xff;
75                ((unsigned char*)buffer)[2] = (unsigned char)(value >> 40) & 0xff;
76                ((unsigned char*)buffer)[3] = (unsigned char)(value >> 32) & 0xff;
77                ((unsigned char*)buffer)[4] = (unsigned char)(value >> 24) & 0xff;
78                ((unsigned char*)buffer)[5] = (unsigned char)(value >> 16) & 0xff;
79                ((unsigned char*)buffer)[6] = (unsigned char)(value >>  8) & 0xff;
80                ((unsigned char*)buffer)[7] = (unsigned char)(value      ) & 0xff;
81
82                buffer++;
83    }
84}
85
86static void SHAcopy(SHAobject *src, SHAobject *dest)
87{
88    dest->Endianness = src->Endianness;
89    dest->local = src->local;
90    dest->digestsize = src->digestsize;
91    dest->count_lo = src->count_lo;
92    dest->count_hi = src->count_hi;
93    memcpy(dest->digest, src->digest, sizeof(src->digest));
94    memcpy(dest->data, src->data, sizeof(src->data));
95}
96
97
98/* ------------------------------------------------------------------------
99 *
100 * This code for the SHA-512 algorithm was noted as public domain. The
101 * original headers are pasted below.
102 *
103 * Several changes have been made to make it more compatible with the
104 * Python environment and desired interface.
105 *
106 */
107
108/* LibTomCrypt, modular cryptographic library -- Tom St Denis
109 *
110 * LibTomCrypt is a library that provides various cryptographic
111 * algorithms in a highly modular and flexible manner.
112 *
113 * The library is free for all purposes without any express
114 * gurantee it works.
115 *
116 * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
117 */
118
119
120/* SHA512 by Tom St Denis */
121
122/* Various logical functions */
123#define ROR64(x, y) \
124    ( ((((x) & Py_ULL(0xFFFFFFFFFFFFFFFF))>>((unsigned PY_LONG_LONG)(y) & 63)) | \
125      ((x)<<((unsigned PY_LONG_LONG)(64-((y) & 63))))) & Py_ULL(0xFFFFFFFFFFFFFFFF))
126#define Ch(x,y,z)       (z ^ (x & (y ^ z)))
127#define Maj(x,y,z)      (((x | y) & z) | (x & y))
128#define S(x, n)         ROR64((x),(n))
129#define R(x, n)         (((x) & Py_ULL(0xFFFFFFFFFFFFFFFF)) >> ((unsigned PY_LONG_LONG)n))
130#define Sigma0(x)       (S(x, 28) ^ S(x, 34) ^ S(x, 39))
131#define Sigma1(x)       (S(x, 14) ^ S(x, 18) ^ S(x, 41))
132#define Gamma0(x)       (S(x, 1) ^ S(x, 8) ^ R(x, 7))
133#define Gamma1(x)       (S(x, 19) ^ S(x, 61) ^ R(x, 6))
134
135
136static void
137sha512_transform(SHAobject *sha_info)
138{
139    int i;
140    SHA_INT64 S[8], W[80], t0, t1;
141
142    memcpy(W, sha_info->data, sizeof(sha_info->data));
143    longReverse(W, (int)sizeof(sha_info->data), sha_info->Endianness);
144
145    for (i = 16; i < 80; ++i) {
146                W[i] = Gamma1(W[i - 2]) + W[i - 7] + Gamma0(W[i - 15]) + W[i - 16];
147    }
148    for (i = 0; i < 8; ++i) {
149        S[i] = sha_info->digest[i];
150    }
151
152    /* Compress */
153#define RND(a,b,c,d,e,f,g,h,i,ki)                    \
154     t0 = h + Sigma1(e) + Ch(e, f, g) + ki + W[i];   \
155     t1 = Sigma0(a) + Maj(a, b, c);                  \
156     d += t0;                                        \
157     h  = t0 + t1;
158
159    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],0,Py_ULL(0x428a2f98d728ae22));
160    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],1,Py_ULL(0x7137449123ef65cd));
161    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],2,Py_ULL(0xb5c0fbcfec4d3b2f));
162    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],3,Py_ULL(0xe9b5dba58189dbbc));
163    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],4,Py_ULL(0x3956c25bf348b538));
164    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],5,Py_ULL(0x59f111f1b605d019));
165    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],6,Py_ULL(0x923f82a4af194f9b));
166    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],7,Py_ULL(0xab1c5ed5da6d8118));
167    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],8,Py_ULL(0xd807aa98a3030242));
168    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],9,Py_ULL(0x12835b0145706fbe));
169    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],10,Py_ULL(0x243185be4ee4b28c));
170    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],11,Py_ULL(0x550c7dc3d5ffb4e2));
171    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],12,Py_ULL(0x72be5d74f27b896f));
172    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],13,Py_ULL(0x80deb1fe3b1696b1));
173    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],14,Py_ULL(0x9bdc06a725c71235));
174    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],15,Py_ULL(0xc19bf174cf692694));
175    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],16,Py_ULL(0xe49b69c19ef14ad2));
176    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],17,Py_ULL(0xefbe4786384f25e3));
177    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],18,Py_ULL(0x0fc19dc68b8cd5b5));
178    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],19,Py_ULL(0x240ca1cc77ac9c65));
179    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],20,Py_ULL(0x2de92c6f592b0275));
180    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],21,Py_ULL(0x4a7484aa6ea6e483));
181    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],22,Py_ULL(0x5cb0a9dcbd41fbd4));
182    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],23,Py_ULL(0x76f988da831153b5));
183    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],24,Py_ULL(0x983e5152ee66dfab));
184    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],25,Py_ULL(0xa831c66d2db43210));
185    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],26,Py_ULL(0xb00327c898fb213f));
186    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],27,Py_ULL(0xbf597fc7beef0ee4));
187    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],28,Py_ULL(0xc6e00bf33da88fc2));
188    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],29,Py_ULL(0xd5a79147930aa725));
189    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],30,Py_ULL(0x06ca6351e003826f));
190    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],31,Py_ULL(0x142929670a0e6e70));
191    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],32,Py_ULL(0x27b70a8546d22ffc));
192    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],33,Py_ULL(0x2e1b21385c26c926));
193    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],34,Py_ULL(0x4d2c6dfc5ac42aed));
194    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],35,Py_ULL(0x53380d139d95b3df));
195    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],36,Py_ULL(0x650a73548baf63de));
196    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],37,Py_ULL(0x766a0abb3c77b2a8));
197    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],38,Py_ULL(0x81c2c92e47edaee6));
198    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],39,Py_ULL(0x92722c851482353b));
199    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],40,Py_ULL(0xa2bfe8a14cf10364));
200    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],41,Py_ULL(0xa81a664bbc423001));
201    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],42,Py_ULL(0xc24b8b70d0f89791));
202    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],43,Py_ULL(0xc76c51a30654be30));
203    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],44,Py_ULL(0xd192e819d6ef5218));
204    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],45,Py_ULL(0xd69906245565a910));
205    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],46,Py_ULL(0xf40e35855771202a));
206    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],47,Py_ULL(0x106aa07032bbd1b8));
207    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],48,Py_ULL(0x19a4c116b8d2d0c8));
208    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],49,Py_ULL(0x1e376c085141ab53));
209    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],50,Py_ULL(0x2748774cdf8eeb99));
210    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],51,Py_ULL(0x34b0bcb5e19b48a8));
211    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],52,Py_ULL(0x391c0cb3c5c95a63));
212    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],53,Py_ULL(0x4ed8aa4ae3418acb));
213    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],54,Py_ULL(0x5b9cca4f7763e373));
214    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],55,Py_ULL(0x682e6ff3d6b2b8a3));
215    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],56,Py_ULL(0x748f82ee5defb2fc));
216    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],57,Py_ULL(0x78a5636f43172f60));
217    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],58,Py_ULL(0x84c87814a1f0ab72));
218    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],59,Py_ULL(0x8cc702081a6439ec));
219    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],60,Py_ULL(0x90befffa23631e28));
220    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],61,Py_ULL(0xa4506cebde82bde9));
221    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],62,Py_ULL(0xbef9a3f7b2c67915));
222    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],63,Py_ULL(0xc67178f2e372532b));
223    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],64,Py_ULL(0xca273eceea26619c));
224    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],65,Py_ULL(0xd186b8c721c0c207));
225    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],66,Py_ULL(0xeada7dd6cde0eb1e));
226    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],67,Py_ULL(0xf57d4f7fee6ed178));
227    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],68,Py_ULL(0x06f067aa72176fba));
228    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],69,Py_ULL(0x0a637dc5a2c898a6));
229    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],70,Py_ULL(0x113f9804bef90dae));
230    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],71,Py_ULL(0x1b710b35131c471b));
231    RND(S[0],S[1],S[2],S[3],S[4],S[5],S[6],S[7],72,Py_ULL(0x28db77f523047d84));
232    RND(S[7],S[0],S[1],S[2],S[3],S[4],S[5],S[6],73,Py_ULL(0x32caab7b40c72493));
233    RND(S[6],S[7],S[0],S[1],S[2],S[3],S[4],S[5],74,Py_ULL(0x3c9ebe0a15c9bebc));
234    RND(S[5],S[6],S[7],S[0],S[1],S[2],S[3],S[4],75,Py_ULL(0x431d67c49c100d4c));
235    RND(S[4],S[5],S[6],S[7],S[0],S[1],S[2],S[3],76,Py_ULL(0x4cc5d4becb3e42b6));
236    RND(S[3],S[4],S[5],S[6],S[7],S[0],S[1],S[2],77,Py_ULL(0x597f299cfc657e2a));
237    RND(S[2],S[3],S[4],S[5],S[6],S[7],S[0],S[1],78,Py_ULL(0x5fcb6fab3ad6faec));
238    RND(S[1],S[2],S[3],S[4],S[5],S[6],S[7],S[0],79,Py_ULL(0x6c44198c4a475817));
239
240#undef RND
241
242    /* feedback */
243    for (i = 0; i < 8; i++) {
244        sha_info->digest[i] = sha_info->digest[i] + S[i];
245    }
246
247}
248
249
250
251/* initialize the SHA digest */
252
253static void
254sha512_init(SHAobject *sha_info)
255{
256    TestEndianness(sha_info->Endianness)
257    sha_info->digest[0] = Py_ULL(0x6a09e667f3bcc908);
258    sha_info->digest[1] = Py_ULL(0xbb67ae8584caa73b);
259    sha_info->digest[2] = Py_ULL(0x3c6ef372fe94f82b);
260    sha_info->digest[3] = Py_ULL(0xa54ff53a5f1d36f1);
261    sha_info->digest[4] = Py_ULL(0x510e527fade682d1);
262    sha_info->digest[5] = Py_ULL(0x9b05688c2b3e6c1f);
263    sha_info->digest[6] = Py_ULL(0x1f83d9abfb41bd6b);
264    sha_info->digest[7] = Py_ULL(0x5be0cd19137e2179);
265    sha_info->count_lo = 0L;
266    sha_info->count_hi = 0L;
267    sha_info->local = 0;
268    sha_info->digestsize = 64;
269}
270
271static void
272sha384_init(SHAobject *sha_info)
273{
274    TestEndianness(sha_info->Endianness)
275    sha_info->digest[0] = Py_ULL(0xcbbb9d5dc1059ed8);
276    sha_info->digest[1] = Py_ULL(0x629a292a367cd507);
277    sha_info->digest[2] = Py_ULL(0x9159015a3070dd17);
278    sha_info->digest[3] = Py_ULL(0x152fecd8f70e5939);
279    sha_info->digest[4] = Py_ULL(0x67332667ffc00b31);
280    sha_info->digest[5] = Py_ULL(0x8eb44a8768581511);
281    sha_info->digest[6] = Py_ULL(0xdb0c2e0d64f98fa7);
282    sha_info->digest[7] = Py_ULL(0x47b5481dbefa4fa4);
283    sha_info->count_lo = 0L;
284    sha_info->count_hi = 0L;
285    sha_info->local = 0;
286    sha_info->digestsize = 48;
287}
288
289
290/* update the SHA digest */
291
292static void
293sha512_update(SHAobject *sha_info, SHA_BYTE *buffer, int count)
294{
295    int i;
296    SHA_INT32 clo;
297
298    clo = sha_info->count_lo + ((SHA_INT32) count << 3);
299    if (clo < sha_info->count_lo) {
300        ++sha_info->count_hi;
301    }
302    sha_info->count_lo = clo;
303    sha_info->count_hi += (SHA_INT32) count >> 29;
304    if (sha_info->local) {
305        i = SHA_BLOCKSIZE - sha_info->local;
306        if (i > count) {
307            i = count;
308        }
309        memcpy(((SHA_BYTE *) sha_info->data) + sha_info->local, buffer, i);
310        count -= i;
311        buffer += i;
312        sha_info->local += i;
313        if (sha_info->local == SHA_BLOCKSIZE) {
314            sha512_transform(sha_info);
315        }
316        else {
317            return;
318        }
319    }
320    while (count >= SHA_BLOCKSIZE) {
321        memcpy(sha_info->data, buffer, SHA_BLOCKSIZE);
322        buffer += SHA_BLOCKSIZE;
323        count -= SHA_BLOCKSIZE;
324        sha512_transform(sha_info);
325    }
326    memcpy(sha_info->data, buffer, count);
327    sha_info->local = count;
328}
329
330/* finish computing the SHA digest */
331
332static void
333sha512_final(unsigned char digest[SHA_DIGESTSIZE], SHAobject *sha_info)
334{
335    int count;
336    SHA_INT32 lo_bit_count, hi_bit_count;
337
338    lo_bit_count = sha_info->count_lo;
339    hi_bit_count = sha_info->count_hi;
340    count = (int) ((lo_bit_count >> 3) & 0x7f);
341    ((SHA_BYTE *) sha_info->data)[count++] = 0x80;
342    if (count > SHA_BLOCKSIZE - 16) {
343        memset(((SHA_BYTE *) sha_info->data) + count, 0,
344               SHA_BLOCKSIZE - count);
345        sha512_transform(sha_info);
346        memset((SHA_BYTE *) sha_info->data, 0, SHA_BLOCKSIZE - 16);
347    }
348    else {
349        memset(((SHA_BYTE *) sha_info->data) + count, 0,
350               SHA_BLOCKSIZE - 16 - count);
351    }
352
353    /* GJS: note that we add the hi/lo in big-endian. sha512_transform will
354       swap these values into host-order. */
355    sha_info->data[112] = 0;
356    sha_info->data[113] = 0;
357    sha_info->data[114] = 0;
358    sha_info->data[115] = 0;
359    sha_info->data[116] = 0;
360    sha_info->data[117] = 0;
361    sha_info->data[118] = 0;
362    sha_info->data[119] = 0;
363    sha_info->data[120] = (hi_bit_count >> 24) & 0xff;
364    sha_info->data[121] = (hi_bit_count >> 16) & 0xff;
365    sha_info->data[122] = (hi_bit_count >>  8) & 0xff;
366    sha_info->data[123] = (hi_bit_count >>  0) & 0xff;
367    sha_info->data[124] = (lo_bit_count >> 24) & 0xff;
368    sha_info->data[125] = (lo_bit_count >> 16) & 0xff;
369    sha_info->data[126] = (lo_bit_count >>  8) & 0xff;
370    sha_info->data[127] = (lo_bit_count >>  0) & 0xff;
371    sha512_transform(sha_info);
372    digest[ 0] = (unsigned char) ((sha_info->digest[0] >> 56) & 0xff);
373    digest[ 1] = (unsigned char) ((sha_info->digest[0] >> 48) & 0xff);
374    digest[ 2] = (unsigned char) ((sha_info->digest[0] >> 40) & 0xff);
375    digest[ 3] = (unsigned char) ((sha_info->digest[0] >> 32) & 0xff);
376    digest[ 4] = (unsigned char) ((sha_info->digest[0] >> 24) & 0xff);
377    digest[ 5] = (unsigned char) ((sha_info->digest[0] >> 16) & 0xff);
378    digest[ 6] = (unsigned char) ((sha_info->digest[0] >>  8) & 0xff);
379    digest[ 7] = (unsigned char) ((sha_info->digest[0]      ) & 0xff);
380    digest[ 8] = (unsigned char) ((sha_info->digest[1] >> 56) & 0xff);
381    digest[ 9] = (unsigned char) ((sha_info->digest[1] >> 48) & 0xff);
382    digest[10] = (unsigned char) ((sha_info->digest[1] >> 40) & 0xff);
383    digest[11] = (unsigned char) ((sha_info->digest[1] >> 32) & 0xff);
384    digest[12] = (unsigned char) ((sha_info->digest[1] >> 24) & 0xff);
385    digest[13] = (unsigned char) ((sha_info->digest[1] >> 16) & 0xff);
386    digest[14] = (unsigned char) ((sha_info->digest[1] >>  8) & 0xff);
387    digest[15] = (unsigned char) ((sha_info->digest[1]      ) & 0xff);
388    digest[16] = (unsigned char) ((sha_info->digest[2] >> 56) & 0xff);
389    digest[17] = (unsigned char) ((sha_info->digest[2] >> 48) & 0xff);
390    digest[18] = (unsigned char) ((sha_info->digest[2] >> 40) & 0xff);
391    digest[19] = (unsigned char) ((sha_info->digest[2] >> 32) & 0xff);
392    digest[20] = (unsigned char) ((sha_info->digest[2] >> 24) & 0xff);
393    digest[21] = (unsigned char) ((sha_info->digest[2] >> 16) & 0xff);
394    digest[22] = (unsigned char) ((sha_info->digest[2] >>  8) & 0xff);
395    digest[23] = (unsigned char) ((sha_info->digest[2]      ) & 0xff);
396    digest[24] = (unsigned char) ((sha_info->digest[3] >> 56) & 0xff);
397    digest[25] = (unsigned char) ((sha_info->digest[3] >> 48) & 0xff);
398    digest[26] = (unsigned char) ((sha_info->digest[3] >> 40) & 0xff);
399    digest[27] = (unsigned char) ((sha_info->digest[3] >> 32) & 0xff);
400    digest[28] = (unsigned char) ((sha_info->digest[3] >> 24) & 0xff);
401    digest[29] = (unsigned char) ((sha_info->digest[3] >> 16) & 0xff);
402    digest[30] = (unsigned char) ((sha_info->digest[3] >>  8) & 0xff);
403    digest[31] = (unsigned char) ((sha_info->digest[3]      ) & 0xff);
404    digest[32] = (unsigned char) ((sha_info->digest[4] >> 56) & 0xff);
405    digest[33] = (unsigned char) ((sha_info->digest[4] >> 48) & 0xff);
406    digest[34] = (unsigned char) ((sha_info->digest[4] >> 40) & 0xff);
407    digest[35] = (unsigned char) ((sha_info->digest[4] >> 32) & 0xff);
408    digest[36] = (unsigned char) ((sha_info->digest[4] >> 24) & 0xff);
409    digest[37] = (unsigned char) ((sha_info->digest[4] >> 16) & 0xff);
410    digest[38] = (unsigned char) ((sha_info->digest[4] >>  8) & 0xff);
411    digest[39] = (unsigned char) ((sha_info->digest[4]      ) & 0xff);
412    digest[40] = (unsigned char) ((sha_info->digest[5] >> 56) & 0xff);
413    digest[41] = (unsigned char) ((sha_info->digest[5] >> 48) & 0xff);
414    digest[42] = (unsigned char) ((sha_info->digest[5] >> 40) & 0xff);
415    digest[43] = (unsigned char) ((sha_info->digest[5] >> 32) & 0xff);
416    digest[44] = (unsigned char) ((sha_info->digest[5] >> 24) & 0xff);
417    digest[45] = (unsigned char) ((sha_info->digest[5] >> 16) & 0xff);
418    digest[46] = (unsigned char) ((sha_info->digest[5] >>  8) & 0xff);
419    digest[47] = (unsigned char) ((sha_info->digest[5]      ) & 0xff);
420    digest[48] = (unsigned char) ((sha_info->digest[6] >> 56) & 0xff);
421    digest[49] = (unsigned char) ((sha_info->digest[6] >> 48) & 0xff);
422    digest[50] = (unsigned char) ((sha_info->digest[6] >> 40) & 0xff);
423    digest[51] = (unsigned char) ((sha_info->digest[6] >> 32) & 0xff);
424    digest[52] = (unsigned char) ((sha_info->digest[6] >> 24) & 0xff);
425    digest[53] = (unsigned char) ((sha_info->digest[6] >> 16) & 0xff);
426    digest[54] = (unsigned char) ((sha_info->digest[6] >>  8) & 0xff);
427    digest[55] = (unsigned char) ((sha_info->digest[6]      ) & 0xff);
428    digest[56] = (unsigned char) ((sha_info->digest[7] >> 56) & 0xff);
429    digest[57] = (unsigned char) ((sha_info->digest[7] >> 48) & 0xff);
430    digest[58] = (unsigned char) ((sha_info->digest[7] >> 40) & 0xff);
431    digest[59] = (unsigned char) ((sha_info->digest[7] >> 32) & 0xff);
432    digest[60] = (unsigned char) ((sha_info->digest[7] >> 24) & 0xff);
433    digest[61] = (unsigned char) ((sha_info->digest[7] >> 16) & 0xff);
434    digest[62] = (unsigned char) ((sha_info->digest[7] >>  8) & 0xff);
435    digest[63] = (unsigned char) ((sha_info->digest[7]      ) & 0xff);
436}
437
438/*
439 * End of copied SHA code.
440 *
441 * ------------------------------------------------------------------------
442 */
443
444static PyTypeObject SHA384type;
445static PyTypeObject SHA512type;
446
447
448static SHAobject *
449newSHA384object(void)
450{
451    return (SHAobject *)PyObject_New(SHAobject, &SHA384type);
452}
453
454static SHAobject *
455newSHA512object(void)
456{
457    return (SHAobject *)PyObject_New(SHAobject, &SHA512type);
458}
459
460/* Internal methods for a hash object */
461
462static void
463SHA512_dealloc(PyObject *ptr)
464{
465    PyObject_Del(ptr);
466}
467
468
469/* External methods for a hash object */
470
471PyDoc_STRVAR(SHA512_copy__doc__, "Return a copy of the hash object.");
472
473static PyObject *
474SHA512_copy(SHAobject *self, PyObject *unused)
475{
476    SHAobject *newobj;
477
478    if (((PyObject*)self)->ob_type == &SHA512type) {
479        if ( (newobj = newSHA512object())==NULL)
480            return NULL;
481    } else {
482        if ( (newobj = newSHA384object())==NULL)
483            return NULL;
484    }
485
486    SHAcopy(self, newobj);
487    return (PyObject *)newobj;
488}
489
490PyDoc_STRVAR(SHA512_digest__doc__,
491"Return the digest value as a string of binary data.");
492
493static PyObject *
494SHA512_digest(SHAobject *self, PyObject *unused)
495{
496    unsigned char digest[SHA_DIGESTSIZE];
497    SHAobject temp;
498
499    SHAcopy(self, &temp);
500    sha512_final(digest, &temp);
501    return PyString_FromStringAndSize((const char *)digest, self->digestsize);
502}
503
504PyDoc_STRVAR(SHA512_hexdigest__doc__,
505"Return the digest value as a string of hexadecimal digits.");
506
507static PyObject *
508SHA512_hexdigest(SHAobject *self, PyObject *unused)
509{
510    unsigned char digest[SHA_DIGESTSIZE];
511    SHAobject temp;
512    PyObject *retval;
513    char *hex_digest;
514    int i, j;
515
516    /* Get the raw (binary) digest value */
517    SHAcopy(self, &temp);
518    sha512_final(digest, &temp);
519
520    /* Create a new string */
521    retval = PyString_FromStringAndSize(NULL, self->digestsize * 2);
522    if (!retval)
523            return NULL;
524    hex_digest = PyString_AsString(retval);
525    if (!hex_digest) {
526            Py_DECREF(retval);
527            return NULL;
528    }
529
530    /* Make hex version of the digest */
531    for (i=j=0; i<self->digestsize; i++) {
532        char c;
533        c = (digest[i] >> 4) & 0xf;
534        c = (c>9) ? c+'a'-10 : c + '0';
535        hex_digest[j++] = c;
536        c = (digest[i] & 0xf);
537        c = (c>9) ? c+'a'-10 : c + '0';
538        hex_digest[j++] = c;
539    }
540    return retval;
541}
542
543PyDoc_STRVAR(SHA512_update__doc__,
544"Update this hash object's state with the provided string.");
545
546static PyObject *
547SHA512_update(SHAobject *self, PyObject *args)
548{
549    Py_buffer buf;
550
551    if (!PyArg_ParseTuple(args, "s*:update", &buf))
552        return NULL;
553
554    sha512_update(self, buf.buf, buf.len);
555
556    PyBuffer_Release(&buf);
557    Py_RETURN_NONE;
558}
559
560static PyMethodDef SHA_methods[] = {
561    {"copy",      (PyCFunction)SHA512_copy,      METH_NOARGS, SHA512_copy__doc__},
562    {"digest",    (PyCFunction)SHA512_digest,    METH_NOARGS, SHA512_digest__doc__},
563    {"hexdigest", (PyCFunction)SHA512_hexdigest, METH_NOARGS, SHA512_hexdigest__doc__},
564    {"update",    (PyCFunction)SHA512_update,    METH_VARARGS, SHA512_update__doc__},
565    {NULL,        NULL}         /* sentinel */
566};
567
568static PyObject *
569SHA512_get_block_size(PyObject *self, void *closure)
570{
571    return PyInt_FromLong(SHA_BLOCKSIZE);
572}
573
574static PyObject *
575SHA512_get_name(PyObject *self, void *closure)
576{
577    if (((SHAobject *)self)->digestsize == 64)
578        return PyString_FromStringAndSize("SHA512", 6);
579    else
580        return PyString_FromStringAndSize("SHA384", 6);
581}
582
583static PyGetSetDef SHA_getseters[] = {
584    {"block_size",
585     (getter)SHA512_get_block_size, NULL,
586     NULL,
587     NULL},
588    {"name",
589     (getter)SHA512_get_name, NULL,
590     NULL,
591     NULL},
592    {NULL}  /* Sentinel */
593};
594
595static PyMemberDef SHA_members[] = {
596    {"digest_size", T_INT, offsetof(SHAobject, digestsize), READONLY, NULL},
597    /* the old md5 and sha modules support 'digest_size' as in PEP 247.
598     * the old sha module also supported 'digestsize'.  ugh. */
599    {"digestsize", T_INT, offsetof(SHAobject, digestsize), READONLY, NULL},
600    {NULL}  /* Sentinel */
601};
602
603static PyTypeObject SHA384type = {
604    PyVarObject_HEAD_INIT(NULL, 0)
605    "_sha512.sha384",   /*tp_name*/
606    sizeof(SHAobject),  /*tp_size*/
607    0,                  /*tp_itemsize*/
608    /* methods */
609    SHA512_dealloc,     /*tp_dealloc*/
610    0,                  /*tp_print*/
611    0,                  /*tp_getattr*/
612    0,                  /*tp_setattr*/
613    0,                  /*tp_compare*/
614    0,                  /*tp_repr*/
615    0,                  /*tp_as_number*/
616    0,                  /*tp_as_sequence*/
617    0,                  /*tp_as_mapping*/
618    0,                  /*tp_hash*/
619    0,                  /*tp_call*/
620    0,                  /*tp_str*/
621    0,                  /*tp_getattro*/
622    0,                  /*tp_setattro*/
623    0,                  /*tp_as_buffer*/
624    Py_TPFLAGS_DEFAULT, /*tp_flags*/
625    0,                  /*tp_doc*/
626    0,                  /*tp_traverse*/
627    0,                  /*tp_clear*/
628    0,                  /*tp_richcompare*/
629    0,                  /*tp_weaklistoffset*/
630    0,                  /*tp_iter*/
631    0,                  /*tp_iternext*/
632    SHA_methods,        /* tp_methods */
633    SHA_members,        /* tp_members */
634    SHA_getseters,      /* tp_getset */
635};
636
637static PyTypeObject SHA512type = {
638    PyVarObject_HEAD_INIT(NULL, 0)
639    "_sha512.sha512",   /*tp_name*/
640    sizeof(SHAobject),  /*tp_size*/
641    0,                  /*tp_itemsize*/
642    /* methods */
643    SHA512_dealloc,     /*tp_dealloc*/
644    0,                  /*tp_print*/
645    0,                  /*tp_getattr*/
646    0,                  /*tp_setattr*/
647    0,                  /*tp_compare*/
648    0,                  /*tp_repr*/
649    0,                  /*tp_as_number*/
650    0,                  /*tp_as_sequence*/
651    0,                  /*tp_as_mapping*/
652    0,                  /*tp_hash*/
653    0,                  /*tp_call*/
654    0,                  /*tp_str*/
655    0,                  /*tp_getattro*/
656    0,                  /*tp_setattro*/
657    0,                  /*tp_as_buffer*/
658    Py_TPFLAGS_DEFAULT, /*tp_flags*/
659    0,                  /*tp_doc*/
660    0,                  /*tp_traverse*/
661    0,                  /*tp_clear*/
662    0,                  /*tp_richcompare*/
663    0,                  /*tp_weaklistoffset*/
664    0,                  /*tp_iter*/
665    0,                  /*tp_iternext*/
666    SHA_methods,        /* tp_methods */
667    SHA_members,        /* tp_members */
668    SHA_getseters,      /* tp_getset */
669};
670
671
672/* The single module-level function: new() */
673
674PyDoc_STRVAR(SHA512_new__doc__,
675"Return a new SHA-512 hash object; optionally initialized with a string.");
676
677static PyObject *
678SHA512_new(PyObject *self, PyObject *args, PyObject *kwdict)
679{
680    static char *kwlist[] = {"string", NULL};
681    SHAobject *new;
682    Py_buffer buf = { 0 };
683
684    if (!PyArg_ParseTupleAndKeywords(args, kwdict, "|s*:new", kwlist,
685                                     &buf)) {
686        return NULL;
687    }
688
689    if ((new = newSHA512object()) == NULL) {
690        PyBuffer_Release(&buf);
691        return NULL;
692    }
693
694    sha512_init(new);
695
696    if (PyErr_Occurred()) {
697        Py_DECREF(new);
698        PyBuffer_Release(&buf);
699        return NULL;
700    }
701    if (buf.len > 0) {
702        sha512_update(new, buf.buf, buf.len);
703    }
704    PyBuffer_Release(&buf);
705
706    return (PyObject *)new;
707}
708
709PyDoc_STRVAR(SHA384_new__doc__,
710"Return a new SHA-384 hash object; optionally initialized with a string.");
711
712static PyObject *
713SHA384_new(PyObject *self, PyObject *args, PyObject *kwdict)
714{
715    static char *kwlist[] = {"string", NULL};
716    SHAobject *new;
717    Py_buffer buf = { 0 };
718
719    if (!PyArg_ParseTupleAndKeywords(args, kwdict, "|s*:new", kwlist,
720                                     &buf)) {
721        return NULL;
722    }
723
724    if ((new = newSHA384object()) == NULL) {
725        PyBuffer_Release(&buf);
726        return NULL;
727    }
728
729    sha384_init(new);
730
731    if (PyErr_Occurred()) {
732        Py_DECREF(new);
733        PyBuffer_Release(&buf);
734        return NULL;
735    }
736    if (buf.len > 0) {
737        sha512_update(new, buf.buf, buf.len);
738    }
739    PyBuffer_Release(&buf);
740
741    return (PyObject *)new;
742}
743
744
745/* List of functions exported by this module */
746
747static struct PyMethodDef SHA_functions[] = {
748    {"sha512", (PyCFunction)SHA512_new, METH_VARARGS|METH_KEYWORDS, SHA512_new__doc__},
749    {"sha384", (PyCFunction)SHA384_new, METH_VARARGS|METH_KEYWORDS, SHA384_new__doc__},
750    {NULL,      NULL}            /* Sentinel */
751};
752
753
754/* Initialize this module. */
755
756#define insint(n,v) { PyModule_AddIntConstant(m,n,v); }
757
758PyMODINIT_FUNC
759init_sha512(void)
760{
761    PyObject *m;
762
763    Py_TYPE(&SHA384type) = &PyType_Type;
764    if (PyType_Ready(&SHA384type) < 0)
765        return;
766    Py_TYPE(&SHA512type) = &PyType_Type;
767    if (PyType_Ready(&SHA512type) < 0)
768        return;
769    m = Py_InitModule("_sha512", SHA_functions);
770    if (m == NULL)
771        return;
772}
773
774#endif
775