Sha1Digest.cs 8.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314
  1. #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
  2. #pragma warning disable
  3. using System;
  4. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Crypto.Utilities;
  5. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Utilities;
  6. namespace Best.HTTP.SecureProtocol.Org.BouncyCastle.Crypto.Digests
  7. {
  8. /**
  9. * implementation of SHA-1 as outlined in "Handbook of Applied Cryptography", pages 346 - 349.
  10. *
  11. * It is interesting to ponder why the, apart from the extra IV, the other difference here from MD5
  12. * is the "endianness" of the word processing!
  13. */
  14. public class Sha1Digest
  15. : GeneralDigest
  16. {
  17. private const int DigestLength = 20;
  18. private uint H1, H2, H3, H4, H5;
  19. private uint[] X = new uint[80];
  20. private int xOff;
  21. public Sha1Digest()
  22. {
  23. Reset();
  24. }
  25. /**
  26. * Copy constructor. This will copy the state of the provided
  27. * message digest.
  28. */
  29. public Sha1Digest(Sha1Digest t)
  30. : base(t)
  31. {
  32. CopyIn(t);
  33. }
  34. private void CopyIn(Sha1Digest t)
  35. {
  36. base.CopyIn(t);
  37. H1 = t.H1;
  38. H2 = t.H2;
  39. H3 = t.H3;
  40. H4 = t.H4;
  41. H5 = t.H5;
  42. Array.Copy(t.X, 0, X, 0, t.X.Length);
  43. xOff = t.xOff;
  44. }
  45. public override string AlgorithmName
  46. {
  47. get { return "SHA-1"; }
  48. }
  49. public override int GetDigestSize()
  50. {
  51. return DigestLength;
  52. }
  53. internal override void ProcessWord(byte[] input, int inOff)
  54. {
  55. X[xOff] = Pack.BE_To_UInt32(input, inOff);
  56. if (++xOff == 16)
  57. {
  58. ProcessBlock();
  59. }
  60. }
  61. #if NETCOREAPP2_1_OR_GREATER || NETSTANDARD2_1_OR_GREATER || UNITY_2021_2_OR_NEWER
  62. internal override void ProcessWord(ReadOnlySpan<byte> word)
  63. {
  64. X[xOff] = Pack.BE_To_UInt32(word);
  65. if (++xOff == 16)
  66. {
  67. ProcessBlock();
  68. }
  69. }
  70. #endif
  71. internal override void ProcessLength(long bitLength)
  72. {
  73. if (xOff > 14)
  74. {
  75. ProcessBlock();
  76. }
  77. X[14] = (uint)((ulong)bitLength >> 32);
  78. X[15] = (uint)((ulong)bitLength);
  79. }
  80. public override int DoFinal(
  81. byte[] output,
  82. int outOff)
  83. {
  84. Finish();
  85. Pack.UInt32_To_BE(H1, output, outOff);
  86. Pack.UInt32_To_BE(H2, output, outOff + 4);
  87. Pack.UInt32_To_BE(H3, output, outOff + 8);
  88. Pack.UInt32_To_BE(H4, output, outOff + 12);
  89. Pack.UInt32_To_BE(H5, output, outOff + 16);
  90. Reset();
  91. return DigestLength;
  92. }
  93. #if NETCOREAPP2_1_OR_GREATER || NETSTANDARD2_1_OR_GREATER || UNITY_2021_2_OR_NEWER
  94. public override int DoFinal(Span<byte> output)
  95. {
  96. Finish();
  97. Pack.UInt32_To_BE(H1, output);
  98. Pack.UInt32_To_BE(H2, output[4..]);
  99. Pack.UInt32_To_BE(H3, output[8..]);
  100. Pack.UInt32_To_BE(H4, output[12..]);
  101. Pack.UInt32_To_BE(H5, output[16..]);
  102. Reset();
  103. return DigestLength;
  104. }
  105. #endif
  106. /**
  107. * reset the chaining variables
  108. */
  109. public override void Reset()
  110. {
  111. base.Reset();
  112. H1 = 0x67452301;
  113. H2 = 0xefcdab89;
  114. H3 = 0x98badcfe;
  115. H4 = 0x10325476;
  116. H5 = 0xc3d2e1f0;
  117. xOff = 0;
  118. Array.Clear(X, 0, X.Length);
  119. }
  120. //
  121. // Additive constants
  122. //
  123. private const uint Y1 = 0x5a827999;
  124. private const uint Y2 = 0x6ed9eba1;
  125. private const uint Y3 = 0x8f1bbcdc;
  126. private const uint Y4 = 0xca62c1d6;
  127. private static uint F(uint u, uint v, uint w)
  128. {
  129. return (u & v) | (~u & w);
  130. }
  131. private static uint H(uint u, uint v, uint w)
  132. {
  133. return u ^ v ^ w;
  134. }
  135. private static uint G(uint u, uint v, uint w)
  136. {
  137. return (u & v) | (u & w) | (v & w);
  138. }
  139. internal override void ProcessBlock()
  140. {
  141. //
  142. // expand 16 word block into 80 word block.
  143. //
  144. for (int i = 16; i < 80; i++)
  145. {
  146. uint t = X[i - 3] ^ X[i - 8] ^ X[i - 14] ^ X[i - 16];
  147. X[i] = t << 1 | t >> 31;
  148. }
  149. //
  150. // set up working variables.
  151. //
  152. uint A = H1;
  153. uint B = H2;
  154. uint C = H3;
  155. uint D = H4;
  156. uint E = H5;
  157. //
  158. // round 1
  159. //
  160. int idx = 0;
  161. for (int j = 0; j < 4; j++)
  162. {
  163. // E = rotateLeft(A, 5) + F(B, C, D) + E + X[idx++] + Y1
  164. // B = rotateLeft(B, 30)
  165. E += (A << 5 | (A >> 27)) + F(B, C, D) + X[idx++] + Y1;
  166. B = B << 30 | (B >> 2);
  167. D += (E << 5 | (E >> 27)) + F(A, B, C) + X[idx++] + Y1;
  168. A = A << 30 | (A >> 2);
  169. C += (D << 5 | (D >> 27)) + F(E, A, B) + X[idx++] + Y1;
  170. E = E << 30 | (E >> 2);
  171. B += (C << 5 | (C >> 27)) + F(D, E, A) + X[idx++] + Y1;
  172. D = D << 30 | (D >> 2);
  173. A += (B << 5 | (B >> 27)) + F(C, D, E) + X[idx++] + Y1;
  174. C = C << 30 | (C >> 2);
  175. }
  176. //
  177. // round 2
  178. //
  179. for (int j = 0; j < 4; j++)
  180. {
  181. // E = rotateLeft(A, 5) + H(B, C, D) + E + X[idx++] + Y2
  182. // B = rotateLeft(B, 30)
  183. E += (A << 5 | (A >> 27)) + H(B, C, D) + X[idx++] + Y2;
  184. B = B << 30 | (B >> 2);
  185. D += (E << 5 | (E >> 27)) + H(A, B, C) + X[idx++] + Y2;
  186. A = A << 30 | (A >> 2);
  187. C += (D << 5 | (D >> 27)) + H(E, A, B) + X[idx++] + Y2;
  188. E = E << 30 | (E >> 2);
  189. B += (C << 5 | (C >> 27)) + H(D, E, A) + X[idx++] + Y2;
  190. D = D << 30 | (D >> 2);
  191. A += (B << 5 | (B >> 27)) + H(C, D, E) + X[idx++] + Y2;
  192. C = C << 30 | (C >> 2);
  193. }
  194. //
  195. // round 3
  196. //
  197. for (int j = 0; j < 4; j++)
  198. {
  199. // E = rotateLeft(A, 5) + G(B, C, D) + E + X[idx++] + Y3
  200. // B = rotateLeft(B, 30)
  201. E += (A << 5 | (A >> 27)) + G(B, C, D) + X[idx++] + Y3;
  202. B = B << 30 | (B >> 2);
  203. D += (E << 5 | (E >> 27)) + G(A, B, C) + X[idx++] + Y3;
  204. A = A << 30 | (A >> 2);
  205. C += (D << 5 | (D >> 27)) + G(E, A, B) + X[idx++] + Y3;
  206. E = E << 30 | (E >> 2);
  207. B += (C << 5 | (C >> 27)) + G(D, E, A) + X[idx++] + Y3;
  208. D = D << 30 | (D >> 2);
  209. A += (B << 5 | (B >> 27)) + G(C, D, E) + X[idx++] + Y3;
  210. C = C << 30 | (C >> 2);
  211. }
  212. //
  213. // round 4
  214. //
  215. for (int j = 0; j < 4; j++)
  216. {
  217. // E = rotateLeft(A, 5) + H(B, C, D) + E + X[idx++] + Y4
  218. // B = rotateLeft(B, 30)
  219. E += (A << 5 | (A >> 27)) + H(B, C, D) + X[idx++] + Y4;
  220. B = B << 30 | (B >> 2);
  221. D += (E << 5 | (E >> 27)) + H(A, B, C) + X[idx++] + Y4;
  222. A = A << 30 | (A >> 2);
  223. C += (D << 5 | (D >> 27)) + H(E, A, B) + X[idx++] + Y4;
  224. E = E << 30 | (E >> 2);
  225. B += (C << 5 | (C >> 27)) + H(D, E, A) + X[idx++] + Y4;
  226. D = D << 30 | (D >> 2);
  227. A += (B << 5 | (B >> 27)) + H(C, D, E) + X[idx++] + Y4;
  228. C = C << 30 | (C >> 2);
  229. }
  230. H1 += A;
  231. H2 += B;
  232. H3 += C;
  233. H4 += D;
  234. H5 += E;
  235. //
  236. // reset start of the buffer.
  237. //
  238. xOff = 0;
  239. Array.Clear(X, 0, 16);
  240. }
  241. public override IMemoable Copy()
  242. {
  243. return new Sha1Digest(this);
  244. }
  245. public override void Reset(IMemoable other)
  246. {
  247. Sha1Digest d = (Sha1Digest)other;
  248. CopyIn(d);
  249. }
  250. }
  251. }
  252. #pragma warning restore
  253. #endif