| 1 |
281 |
jeremybenn |
------------------------------------------------------------------------------
|
| 2 |
|
|
-- --
|
| 3 |
|
|
-- GNAT LIBRARY COMPONENTS --
|
| 4 |
|
|
-- --
|
| 5 |
|
|
-- G N A T . S E C U R E _ H A S H E S . S H A 2 _ 6 4 --
|
| 6 |
|
|
-- --
|
| 7 |
|
|
-- S p e c --
|
| 8 |
|
|
-- --
|
| 9 |
|
|
-- Copyright (C) 2009, Free Software Foundation, Inc. --
|
| 10 |
|
|
-- --
|
| 11 |
|
|
-- GNAT is free software; you can redistribute it and/or modify it under --
|
| 12 |
|
|
-- terms of the GNU General Public License as published by the Free Soft- --
|
| 13 |
|
|
-- ware Foundation; either version 3, or (at your option) any later ver- --
|
| 14 |
|
|
-- sion. GNAT is distributed in the hope that it will be useful, but WITH- --
|
| 15 |
|
|
-- OUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY --
|
| 16 |
|
|
-- or FITNESS FOR A PARTICULAR PURPOSE. --
|
| 17 |
|
|
-- --
|
| 18 |
|
|
-- As a special exception under Section 7 of GPL version 3, you are granted --
|
| 19 |
|
|
-- additional permissions described in the GCC Runtime Library Exception, --
|
| 20 |
|
|
-- version 3.1, as published by the Free Software Foundation. --
|
| 21 |
|
|
-- --
|
| 22 |
|
|
-- You should have received a copy of the GNU General Public License and --
|
| 23 |
|
|
-- a copy of the GCC Runtime Library Exception along with this program; --
|
| 24 |
|
|
-- see the files COPYING3 and COPYING.RUNTIME respectively. If not, see --
|
| 25 |
|
|
-- <http://www.gnu.org/licenses/>. --
|
| 26 |
|
|
-- --
|
| 27 |
|
|
-- GNAT was originally developed by the GNAT team at New York University. --
|
| 28 |
|
|
-- Extensive contributions were provided by Ada Core Technologies Inc. --
|
| 29 |
|
|
-- --
|
| 30 |
|
|
------------------------------------------------------------------------------
|
| 31 |
|
|
|
| 32 |
|
|
-- This pacakge provides support for the 64-bit FIPS PUB 180-3 functions
|
| 33 |
|
|
-- SHA-384 and SHA-512.
|
| 34 |
|
|
|
| 35 |
|
|
-- This is an internal unit and should not be used directly in applications.
|
| 36 |
|
|
-- Use GNAT.SHA384 and GNAT.SHA512 instead.
|
| 37 |
|
|
|
| 38 |
|
|
with Interfaces;
|
| 39 |
|
|
with GNAT.Byte_Swapping;
|
| 40 |
|
|
|
| 41 |
|
|
with GNAT.Secure_Hashes.SHA2_Common;
|
| 42 |
|
|
|
| 43 |
|
|
package GNAT.Secure_Hashes.SHA2_64 is
|
| 44 |
|
|
subtype Word is Interfaces.Unsigned_64;
|
| 45 |
|
|
|
| 46 |
|
|
package Hash_State is new Hash_Function_State
|
| 47 |
|
|
(Word => Word,
|
| 48 |
|
|
Swap => GNAT.Byte_Swapping.Swap8,
|
| 49 |
|
|
Hash_Bit_Order => System.High_Order_First);
|
| 50 |
|
|
-- SHA-384 and SHA-512 operate on 64-bit big endian words
|
| 51 |
|
|
|
| 52 |
|
|
K : Hash_State.State (0 .. 79) :=
|
| 53 |
|
|
(16#428a2f98d728ae22#, 16#7137449123ef65cd#,
|
| 54 |
|
|
16#b5c0fbcfec4d3b2f#, 16#e9b5dba58189dbbc#,
|
| 55 |
|
|
16#3956c25bf348b538#, 16#59f111f1b605d019#,
|
| 56 |
|
|
16#923f82a4af194f9b#, 16#ab1c5ed5da6d8118#,
|
| 57 |
|
|
16#d807aa98a3030242#, 16#12835b0145706fbe#,
|
| 58 |
|
|
16#243185be4ee4b28c#, 16#550c7dc3d5ffb4e2#,
|
| 59 |
|
|
16#72be5d74f27b896f#, 16#80deb1fe3b1696b1#,
|
| 60 |
|
|
16#9bdc06a725c71235#, 16#c19bf174cf692694#,
|
| 61 |
|
|
16#e49b69c19ef14ad2#, 16#efbe4786384f25e3#,
|
| 62 |
|
|
16#0fc19dc68b8cd5b5#, 16#240ca1cc77ac9c65#,
|
| 63 |
|
|
16#2de92c6f592b0275#, 16#4a7484aa6ea6e483#,
|
| 64 |
|
|
16#5cb0a9dcbd41fbd4#, 16#76f988da831153b5#,
|
| 65 |
|
|
16#983e5152ee66dfab#, 16#a831c66d2db43210#,
|
| 66 |
|
|
16#b00327c898fb213f#, 16#bf597fc7beef0ee4#,
|
| 67 |
|
|
16#c6e00bf33da88fc2#, 16#d5a79147930aa725#,
|
| 68 |
|
|
16#06ca6351e003826f#, 16#142929670a0e6e70#,
|
| 69 |
|
|
16#27b70a8546d22ffc#, 16#2e1b21385c26c926#,
|
| 70 |
|
|
16#4d2c6dfc5ac42aed#, 16#53380d139d95b3df#,
|
| 71 |
|
|
16#650a73548baf63de#, 16#766a0abb3c77b2a8#,
|
| 72 |
|
|
16#81c2c92e47edaee6#, 16#92722c851482353b#,
|
| 73 |
|
|
16#a2bfe8a14cf10364#, 16#a81a664bbc423001#,
|
| 74 |
|
|
16#c24b8b70d0f89791#, 16#c76c51a30654be30#,
|
| 75 |
|
|
16#d192e819d6ef5218#, 16#d69906245565a910#,
|
| 76 |
|
|
16#f40e35855771202a#, 16#106aa07032bbd1b8#,
|
| 77 |
|
|
16#19a4c116b8d2d0c8#, 16#1e376c085141ab53#,
|
| 78 |
|
|
16#2748774cdf8eeb99#, 16#34b0bcb5e19b48a8#,
|
| 79 |
|
|
16#391c0cb3c5c95a63#, 16#4ed8aa4ae3418acb#,
|
| 80 |
|
|
16#5b9cca4f7763e373#, 16#682e6ff3d6b2b8a3#,
|
| 81 |
|
|
16#748f82ee5defb2fc#, 16#78a5636f43172f60#,
|
| 82 |
|
|
16#84c87814a1f0ab72#, 16#8cc702081a6439ec#,
|
| 83 |
|
|
16#90befffa23631e28#, 16#a4506cebde82bde9#,
|
| 84 |
|
|
16#bef9a3f7b2c67915#, 16#c67178f2e372532b#,
|
| 85 |
|
|
16#ca273eceea26619c#, 16#d186b8c721c0c207#,
|
| 86 |
|
|
16#eada7dd6cde0eb1e#, 16#f57d4f7fee6ed178#,
|
| 87 |
|
|
16#06f067aa72176fba#, 16#0a637dc5a2c898a6#,
|
| 88 |
|
|
16#113f9804bef90dae#, 16#1b710b35131c471b#,
|
| 89 |
|
|
16#28db77f523047d84#, 16#32caab7b40c72493#,
|
| 90 |
|
|
16#3c9ebe0a15c9bebc#, 16#431d67c49c100d4c#,
|
| 91 |
|
|
16#4cc5d4becb3e42b6#, 16#597f299cfc657e2a#,
|
| 92 |
|
|
16#5fcb6fab3ad6faec#, 16#6c44198c4a475817#);
|
| 93 |
|
|
-- Constants from FIPS PUB 180-3
|
| 94 |
|
|
|
| 95 |
|
|
function Sigma0 (X : Word) return Word;
|
| 96 |
|
|
function Sigma1 (X : Word) return Word;
|
| 97 |
|
|
function S0 (X : Word) return Word;
|
| 98 |
|
|
function S1 (X : Word) return Word;
|
| 99 |
|
|
pragma Inline (Sigma0, Sigma1, S0, S1);
|
| 100 |
|
|
-- Elementary functions Sigma^512_0, Sigma^512_1, sigma^512_0, sigma^512_1
|
| 101 |
|
|
-- from FIPS PUB 180-3.
|
| 102 |
|
|
|
| 103 |
|
|
procedure Transform is new SHA2_Common.Transform
|
| 104 |
|
|
(Hash_State => Hash_State,
|
| 105 |
|
|
K => K,
|
| 106 |
|
|
Rounds => 80,
|
| 107 |
|
|
Sigma0 => Sigma0,
|
| 108 |
|
|
Sigma1 => Sigma1,
|
| 109 |
|
|
S0 => S0,
|
| 110 |
|
|
S1 => S1);
|
| 111 |
|
|
|
| 112 |
|
|
SHA384_Init_State : constant Hash_State.State :=
|
| 113 |
|
|
(0 => 16#cbbb9d5dc1059ed8#,
|
| 114 |
|
|
1 => 16#629a292a367cd507#,
|
| 115 |
|
|
2 => 16#9159015a3070dd17#,
|
| 116 |
|
|
3 => 16#152fecd8f70e5939#,
|
| 117 |
|
|
4 => 16#67332667ffc00b31#,
|
| 118 |
|
|
5 => 16#8eb44a8768581511#,
|
| 119 |
|
|
6 => 16#db0c2e0d64f98fa7#,
|
| 120 |
|
|
7 => 16#47b5481dbefa4fa4#);
|
| 121 |
|
|
SHA512_Init_State : constant Hash_State.State :=
|
| 122 |
|
|
(0 => 16#6a09e667f3bcc908#,
|
| 123 |
|
|
1 => 16#bb67ae8584caa73b#,
|
| 124 |
|
|
2 => 16#3c6ef372fe94f82b#,
|
| 125 |
|
|
3 => 16#a54ff53a5f1d36f1#,
|
| 126 |
|
|
4 => 16#510e527fade682d1#,
|
| 127 |
|
|
5 => 16#9b05688c2b3e6c1f#,
|
| 128 |
|
|
6 => 16#1f83d9abfb41bd6b#,
|
| 129 |
|
|
7 => 16#5be0cd19137e2179#);
|
| 130 |
|
|
-- Initialization vectors from FIPS PUB 180-3
|
| 131 |
|
|
|
| 132 |
|
|
end GNAT.Secure_Hashes.SHA2_64;
|
