| ------------------------------------------------------------------------------ |
| -- -- |
| -- GNAT LIBRARY COMPONENTS -- |
| -- -- |
| -- G N A T . S E C U R E _ H A S H E S . M D 5 -- |
| -- -- |
| -- B o d y -- |
| -- -- |
| -- Copyright (C) 2002-2021, Free Software Foundation, Inc. -- |
| -- -- |
| -- GNAT is free software; you can redistribute it and/or modify it under -- |
| -- terms of the GNU General Public License as published by the Free Soft- -- |
| -- ware Foundation; either version 3, or (at your option) any later ver- -- |
| -- sion. GNAT is distributed in the hope that it will be useful, but WITH- -- |
| -- OUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY -- |
| -- or FITNESS FOR A PARTICULAR PURPOSE. -- |
| -- -- |
| -- As a special exception under Section 7 of GPL version 3, you are granted -- |
| -- additional permissions described in the GCC Runtime Library Exception, -- |
| -- version 3.1, as published by the Free Software Foundation. -- |
| -- -- |
| -- You should have received a copy of the GNU General Public License and -- |
| -- a copy of the GCC Runtime Library Exception along with this program; -- |
| -- see the files COPYING3 and COPYING.RUNTIME respectively. If not, see -- |
| -- <http://www.gnu.org/licenses/>. -- |
| -- -- |
| -- GNAT was originally developed by the GNAT team at New York University. -- |
| -- Extensive contributions were provided by Ada Core Technologies Inc. -- |
| -- -- |
| ------------------------------------------------------------------------------ |
| |
| with GNAT.Byte_Swapping; use GNAT.Byte_Swapping; |
| |
| package body GNAT.Secure_Hashes.MD5 is |
| |
| use Interfaces; |
| |
| -- The sixteen values used to rotate the context words. Four for each |
| -- rounds. Used in procedure Transform. |
| |
| -- Round 1 |
| |
| S11 : constant := 7; |
| S12 : constant := 12; |
| S13 : constant := 17; |
| S14 : constant := 22; |
| |
| -- Round 2 |
| |
| S21 : constant := 5; |
| S22 : constant := 9; |
| S23 : constant := 14; |
| S24 : constant := 20; |
| |
| -- Round 3 |
| |
| S31 : constant := 4; |
| S32 : constant := 11; |
| S33 : constant := 16; |
| S34 : constant := 23; |
| |
| -- Round 4 |
| |
| S41 : constant := 6; |
| S42 : constant := 10; |
| S43 : constant := 15; |
| S44 : constant := 21; |
| |
| -- The following functions (F, FF, G, GG, H, HH, I and II) are the |
| -- equivalent of the macros of the same name in the example C |
| -- implementation in the annex of RFC 1321. |
| |
| function F (X, Y, Z : Unsigned_32) return Unsigned_32; |
| pragma Inline (F); |
| |
| procedure FF |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive); |
| pragma Inline (FF); |
| |
| function G (X, Y, Z : Unsigned_32) return Unsigned_32; |
| pragma Inline (G); |
| |
| procedure GG |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive); |
| pragma Inline (GG); |
| |
| function H (X, Y, Z : Unsigned_32) return Unsigned_32; |
| pragma Inline (H); |
| |
| procedure HH |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive); |
| pragma Inline (HH); |
| |
| function I (X, Y, Z : Unsigned_32) return Unsigned_32; |
| pragma Inline (I); |
| |
| procedure II |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive); |
| pragma Inline (II); |
| |
| ------- |
| -- F -- |
| ------- |
| |
| function F (X, Y, Z : Unsigned_32) return Unsigned_32 is |
| begin |
| return (X and Y) or ((not X) and Z); |
| end F; |
| |
| -------- |
| -- FF -- |
| -------- |
| |
| procedure FF |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive) |
| is |
| begin |
| A := A + F (B, C, D) + X + AC; |
| A := Rotate_Left (A, S); |
| A := A + B; |
| end FF; |
| |
| ------- |
| -- G -- |
| ------- |
| |
| function G (X, Y, Z : Unsigned_32) return Unsigned_32 is |
| begin |
| return (X and Z) or (Y and (not Z)); |
| end G; |
| |
| -------- |
| -- GG -- |
| -------- |
| |
| procedure GG |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive) |
| is |
| begin |
| A := A + G (B, C, D) + X + AC; |
| A := Rotate_Left (A, S); |
| A := A + B; |
| end GG; |
| |
| ------- |
| -- H -- |
| ------- |
| |
| function H (X, Y, Z : Unsigned_32) return Unsigned_32 is |
| begin |
| return X xor Y xor Z; |
| end H; |
| |
| -------- |
| -- HH -- |
| -------- |
| |
| procedure HH |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive) |
| is |
| begin |
| A := A + H (B, C, D) + X + AC; |
| A := Rotate_Left (A, S); |
| A := A + B; |
| end HH; |
| |
| ------- |
| -- I -- |
| ------- |
| |
| function I (X, Y, Z : Unsigned_32) return Unsigned_32 is |
| begin |
| return Y xor (X or (not Z)); |
| end I; |
| |
| -------- |
| -- II -- |
| -------- |
| |
| procedure II |
| (A : in out Unsigned_32; |
| B, C, D : Unsigned_32; |
| X : Unsigned_32; |
| AC : Unsigned_32; |
| S : Positive) |
| is |
| begin |
| A := A + I (B, C, D) + X + AC; |
| A := Rotate_Left (A, S); |
| A := A + B; |
| end II; |
| |
| --------------- |
| -- Transform -- |
| --------------- |
| |
| procedure Transform |
| (H : in out Hash_State.State; |
| M : in out Message_State) |
| is |
| use System; |
| |
| X : array (0 .. 15) of Interfaces.Unsigned_32; |
| for X'Address use M.Buffer'Address; |
| pragma Import (Ada, X); |
| |
| AA : Unsigned_32 := H (0); |
| BB : Unsigned_32 := H (1); |
| CC : Unsigned_32 := H (2); |
| DD : Unsigned_32 := H (3); |
| |
| begin |
| if Default_Bit_Order /= Low_Order_First then |
| for J in X'Range loop |
| Swap4 (X (J)'Address); |
| end loop; |
| end if; |
| |
| -- Round 1 |
| |
| FF (AA, BB, CC, DD, X (00), 16#D76aa478#, S11); -- 1 |
| FF (DD, AA, BB, CC, X (01), 16#E8c7b756#, S12); -- 2 |
| FF (CC, DD, AA, BB, X (02), 16#242070db#, S13); -- 3 |
| FF (BB, CC, DD, AA, X (03), 16#C1bdceee#, S14); -- 4 |
| |
| FF (AA, BB, CC, DD, X (04), 16#f57c0faf#, S11); -- 5 |
| FF (DD, AA, BB, CC, X (05), 16#4787c62a#, S12); -- 6 |
| FF (CC, DD, AA, BB, X (06), 16#a8304613#, S13); -- 7 |
| FF (BB, CC, DD, AA, X (07), 16#fd469501#, S14); -- 8 |
| |
| FF (AA, BB, CC, DD, X (08), 16#698098d8#, S11); -- 9 |
| FF (DD, AA, BB, CC, X (09), 16#8b44f7af#, S12); -- 10 |
| FF (CC, DD, AA, BB, X (10), 16#ffff5bb1#, S13); -- 11 |
| FF (BB, CC, DD, AA, X (11), 16#895cd7be#, S14); -- 12 |
| |
| FF (AA, BB, CC, DD, X (12), 16#6b901122#, S11); -- 13 |
| FF (DD, AA, BB, CC, X (13), 16#fd987193#, S12); -- 14 |
| FF (CC, DD, AA, BB, X (14), 16#a679438e#, S13); -- 15 |
| FF (BB, CC, DD, AA, X (15), 16#49b40821#, S14); -- 16 |
| |
| -- Round 2 |
| |
| GG (AA, BB, CC, DD, X (01), 16#f61e2562#, S21); -- 17 |
| GG (DD, AA, BB, CC, X (06), 16#c040b340#, S22); -- 18 |
| GG (CC, DD, AA, BB, X (11), 16#265e5a51#, S23); -- 19 |
| GG (BB, CC, DD, AA, X (00), 16#e9b6c7aa#, S24); -- 20 |
| |
| GG (AA, BB, CC, DD, X (05), 16#d62f105d#, S21); -- 21 |
| GG (DD, AA, BB, CC, X (10), 16#02441453#, S22); -- 22 |
| GG (CC, DD, AA, BB, X (15), 16#d8a1e681#, S23); -- 23 |
| GG (BB, CC, DD, AA, X (04), 16#e7d3fbc8#, S24); -- 24 |
| |
| GG (AA, BB, CC, DD, X (09), 16#21e1cde6#, S21); -- 25 |
| GG (DD, AA, BB, CC, X (14), 16#c33707d6#, S22); -- 26 |
| GG (CC, DD, AA, BB, X (03), 16#f4d50d87#, S23); -- 27 |
| GG (BB, CC, DD, AA, X (08), 16#455a14ed#, S24); -- 28 |
| |
| GG (AA, BB, CC, DD, X (13), 16#a9e3e905#, S21); -- 29 |
| GG (DD, AA, BB, CC, X (02), 16#fcefa3f8#, S22); -- 30 |
| GG (CC, DD, AA, BB, X (07), 16#676f02d9#, S23); -- 31 |
| GG (BB, CC, DD, AA, X (12), 16#8d2a4c8a#, S24); -- 32 |
| |
| -- Round 3 |
| |
| HH (AA, BB, CC, DD, X (05), 16#fffa3942#, S31); -- 33 |
| HH (DD, AA, BB, CC, X (08), 16#8771f681#, S32); -- 34 |
| HH (CC, DD, AA, BB, X (11), 16#6d9d6122#, S33); -- 35 |
| HH (BB, CC, DD, AA, X (14), 16#fde5380c#, S34); -- 36 |
| |
| HH (AA, BB, CC, DD, X (01), 16#a4beea44#, S31); -- 37 |
| HH (DD, AA, BB, CC, X (04), 16#4bdecfa9#, S32); -- 38 |
| HH (CC, DD, AA, BB, X (07), 16#f6bb4b60#, S33); -- 39 |
| HH (BB, CC, DD, AA, X (10), 16#bebfbc70#, S34); -- 40 |
| |
| HH (AA, BB, CC, DD, X (13), 16#289b7ec6#, S31); -- 41 |
| HH (DD, AA, BB, CC, X (00), 16#eaa127fa#, S32); -- 42 |
| HH (CC, DD, AA, BB, X (03), 16#d4ef3085#, S33); -- 43 |
| HH (BB, CC, DD, AA, X (06), 16#04881d05#, S34); -- 44 |
| |
| HH (AA, BB, CC, DD, X (09), 16#d9d4d039#, S31); -- 45 |
| HH (DD, AA, BB, CC, X (12), 16#e6db99e5#, S32); -- 46 |
| HH (CC, DD, AA, BB, X (15), 16#1fa27cf8#, S33); -- 47 |
| HH (BB, CC, DD, AA, X (02), 16#c4ac5665#, S34); -- 48 |
| |
| -- Round 4 |
| |
| II (AA, BB, CC, DD, X (00), 16#f4292244#, S41); -- 49 |
| II (DD, AA, BB, CC, X (07), 16#432aff97#, S42); -- 50 |
| II (CC, DD, AA, BB, X (14), 16#ab9423a7#, S43); -- 51 |
| II (BB, CC, DD, AA, X (05), 16#fc93a039#, S44); -- 52 |
| |
| II (AA, BB, CC, DD, X (12), 16#655b59c3#, S41); -- 53 |
| II (DD, AA, BB, CC, X (03), 16#8f0ccc92#, S42); -- 54 |
| II (CC, DD, AA, BB, X (10), 16#ffeff47d#, S43); -- 55 |
| II (BB, CC, DD, AA, X (01), 16#85845dd1#, S44); -- 56 |
| |
| II (AA, BB, CC, DD, X (08), 16#6fa87e4f#, S41); -- 57 |
| II (DD, AA, BB, CC, X (15), 16#fe2ce6e0#, S42); -- 58 |
| II (CC, DD, AA, BB, X (06), 16#a3014314#, S43); -- 59 |
| II (BB, CC, DD, AA, X (13), 16#4e0811a1#, S44); -- 60 |
| |
| II (AA, BB, CC, DD, X (04), 16#f7537e82#, S41); -- 61 |
| II (DD, AA, BB, CC, X (11), 16#bd3af235#, S42); -- 62 |
| II (CC, DD, AA, BB, X (02), 16#2ad7d2bb#, S43); -- 63 |
| II (BB, CC, DD, AA, X (09), 16#eb86d391#, S44); -- 64 |
| |
| H (0) := H (0) + AA; |
| H (1) := H (1) + BB; |
| H (2) := H (2) + CC; |
| H (3) := H (3) + DD; |
| |
| end Transform; |
| |
| end GNAT.Secure_Hashes.MD5; |
