1 |
/* |
---|
2 |
*********************************************************************** |
---|
3 |
** md5.c -- the source code for MD5 routines ** |
---|
4 |
** RSA Data Security, Inc. MD5 Message-Digest Algorithm ** |
---|
5 |
** Created: 2/17/90 RLR ** |
---|
6 |
** Revised: 1/91 SRD,AJ,BSK,JT Reference C ver., 7/10 constant corr. ** |
---|
7 |
*********************************************************************** |
---|
8 |
*/ |
---|
9 |
|
---|
10 |
/* |
---|
11 |
*********************************************************************** |
---|
12 |
** Copyright (C) 1990, RSA Data Security, Inc. All rights reserved. ** |
---|
13 |
** ** |
---|
14 |
** License to copy and use this software is granted provided that ** |
---|
15 |
** it is identified as the "RSA Data Security, Inc. MD5 Message- ** |
---|
16 |
** Digest Algorithm" in all material mentioning or referencing this ** |
---|
17 |
** software or this function. ** |
---|
18 |
** ** |
---|
19 |
** License is also granted to make and use derivative works ** |
---|
20 |
** provided that such works are identified as "derived from the RSA ** |
---|
21 |
** Data Security, Inc. MD5 Message-Digest Algorithm" in all ** |
---|
22 |
** material mentioning or referencing the derived work. ** |
---|
23 |
** ** |
---|
24 |
** RSA Data Security, Inc. makes no representations concerning ** |
---|
25 |
** either the merchantability of this software or the suitability ** |
---|
26 |
** of this software for any particular purpose. It is provided "as ** |
---|
27 |
** is" without express or implied warranty of any kind. ** |
---|
28 |
** ** |
---|
29 |
** These notices must be retained in any copies of any part of this ** |
---|
30 |
** documentation and/or software. ** |
---|
31 |
*********************************************************************** |
---|
32 |
*/ |
---|
33 |
|
---|
34 |
#include "ppp.h" |
---|
35 |
#include "md5.h" |
---|
36 |
#include "pppdebug.h" |
---|
37 |
|
---|
38 |
#if CHAP_SUPPORT > 0 || MD5_SUPPORT > 0 |
---|
39 |
|
---|
40 |
/* |
---|
41 |
*********************************************************************** |
---|
42 |
** Message-digest routines: ** |
---|
43 |
** To form the message digest for a message M ** |
---|
44 |
** (1) Initialize a context buffer mdContext using MD5Init ** |
---|
45 |
** (2) Call MD5Update on mdContext and M ** |
---|
46 |
** (3) Call MD5Final on mdContext ** |
---|
47 |
** The message digest is now in mdContext->digest[0...15] ** |
---|
48 |
*********************************************************************** |
---|
49 |
*/ |
---|
50 |
|
---|
51 |
/* forward declaration */ |
---|
52 |
static void Transform (u32_t *buf, u32_t *in); |
---|
53 |
|
---|
54 |
static unsigned char PADDING[64] = { |
---|
55 |
0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
---|
56 |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
---|
57 |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
---|
58 |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
---|
59 |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
---|
60 |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
---|
61 |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
---|
62 |
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
---|
63 |
}; |
---|
64 |
|
---|
65 |
/* F, G, H and I are basic MD5 functions */ |
---|
66 |
#define F(x, y, z) (((x) & (y)) | ((~x) & (z))) |
---|
67 |
#define G(x, y, z) (((x) & (z)) | ((y) & (~z))) |
---|
68 |
#define H(x, y, z) ((x) ^ (y) ^ (z)) |
---|
69 |
#define I(x, y, z) ((y) ^ ((x) | (~z))) |
---|
70 |
|
---|
71 |
/* ROTATE_LEFT rotates x left n bits */ |
---|
72 |
#define ROTATE_LEFT(x, n) (((x) << (n)) | ((x) >> (32-(n)))) |
---|
73 |
|
---|
74 |
/* FF, GG, HH, and II transformations for rounds 1, 2, 3, and 4 */ |
---|
75 |
/* Rotation is separate from addition to prevent recomputation */ |
---|
76 |
#define FF(a, b, c, d, x, s, ac) \ |
---|
77 |
{(a) += F ((b), (c), (d)) + (x) + (u32_t)(ac); \ |
---|
78 |
(a) = ROTATE_LEFT ((a), (s)); \ |
---|
79 |
(a) += (b); \ |
---|
80 |
} |
---|
81 |
#define GG(a, b, c, d, x, s, ac) \ |
---|
82 |
{(a) += G ((b), (c), (d)) + (x) + (u32_t)(ac); \ |
---|
83 |
(a) = ROTATE_LEFT ((a), (s)); \ |
---|
84 |
(a) += (b); \ |
---|
85 |
} |
---|
86 |
#define HH(a, b, c, d, x, s, ac) \ |
---|
87 |
{(a) += H ((b), (c), (d)) + (x) + (u32_t)(ac); \ |
---|
88 |
(a) = ROTATE_LEFT ((a), (s)); \ |
---|
89 |
(a) += (b); \ |
---|
90 |
} |
---|
91 |
#define II(a, b, c, d, x, s, ac) \ |
---|
92 |
{(a) += I ((b), (c), (d)) + (x) + (u32_t)(ac); \ |
---|
93 |
(a) = ROTATE_LEFT ((a), (s)); \ |
---|
94 |
(a) += (b); \ |
---|
95 |
} |
---|
96 |
|
---|
97 |
#ifdef __STDC__ |
---|
98 |
#define UL(x) x##UL |
---|
99 |
#else |
---|
100 |
#ifdef WIN32 |
---|
101 |
#define UL(x) x##UL |
---|
102 |
#else |
---|
103 |
#define UL(x) x |
---|
104 |
#endif |
---|
105 |
#endif |
---|
106 |
|
---|
107 |
/* The routine MD5Init initializes the message-digest context |
---|
108 |
mdContext. All fields are set to zero. |
---|
109 |
*/ |
---|
110 |
void MD5Init (MD5_CTX *mdContext) |
---|
111 |
{ |
---|
112 |
mdContext->i[0] = mdContext->i[1] = (u32_t)0; |
---|
113 |
|
---|
114 |
/* Load magic initialization constants. |
---|
115 |
*/ |
---|
116 |
mdContext->buf[0] = (u32_t)0x67452301UL; |
---|
117 |
mdContext->buf[1] = (u32_t)0xefcdab89UL; |
---|
118 |
mdContext->buf[2] = (u32_t)0x98badcfeUL; |
---|
119 |
mdContext->buf[3] = (u32_t)0x10325476UL; |
---|
120 |
} |
---|
121 |
|
---|
122 |
/* The routine MD5Update updates the message-digest context to |
---|
123 |
account for the presence of each of the characters inBuf[0..inLen-1] |
---|
124 |
in the message whose digest is being computed. |
---|
125 |
*/ |
---|
126 |
void MD5Update(MD5_CTX *mdContext, unsigned char *inBuf, unsigned int inLen) |
---|
127 |
{ |
---|
128 |
u32_t in[16]; |
---|
129 |
int mdi; |
---|
130 |
unsigned int i, ii; |
---|
131 |
|
---|
132 |
#if 0 |
---|
133 |
ppp_trace(LOG_INFO, "MD5Update: %u:%.*H\n", inLen, MIN(inLen, 20) * 2, inBuf); |
---|
134 |
ppp_trace(LOG_INFO, "MD5Update: %u:%s\n", inLen, inBuf); |
---|
135 |
#endif |
---|
136 |
|
---|
137 |
/* compute number of bytes mod 64 */ |
---|
138 |
mdi = (int)((mdContext->i[0] >> 3) & 0x3F); |
---|
139 |
|
---|
140 |
/* update number of bits */ |
---|
141 |
if ((mdContext->i[0] + ((u32_t)inLen << 3)) < mdContext->i[0]) |
---|
142 |
mdContext->i[1]++; |
---|
143 |
mdContext->i[0] += ((u32_t)inLen << 3); |
---|
144 |
mdContext->i[1] += ((u32_t)inLen >> 29); |
---|
145 |
|
---|
146 |
while (inLen--) { |
---|
147 |
/* add new character to buffer, increment mdi */ |
---|
148 |
mdContext->in[mdi++] = *inBuf++; |
---|
149 |
|
---|
150 |
/* transform if necessary */ |
---|
151 |
if (mdi == 0x40) { |
---|
152 |
for (i = 0, ii = 0; i < 16; i++, ii += 4) |
---|
153 |
in[i] = (((u32_t)mdContext->in[ii+3]) << 24) | |
---|
154 |
(((u32_t)mdContext->in[ii+2]) << 16) | |
---|
155 |
(((u32_t)mdContext->in[ii+1]) << 8) | |
---|
156 |
((u32_t)mdContext->in[ii]); |
---|
157 |
Transform (mdContext->buf, in); |
---|
158 |
mdi = 0; |
---|
159 |
} |
---|
160 |
} |
---|
161 |
} |
---|
162 |
|
---|
163 |
/* The routine MD5Final terminates the message-digest computation and |
---|
164 |
ends with the desired message digest in mdContext->digest[0...15]. |
---|
165 |
*/ |
---|
166 |
void MD5Final (unsigned char hash[], MD5_CTX *mdContext) |
---|
167 |
{ |
---|
168 |
u32_t in[16]; |
---|
169 |
int mdi; |
---|
170 |
unsigned int i, ii; |
---|
171 |
unsigned int padLen; |
---|
172 |
|
---|
173 |
/* save number of bits */ |
---|
174 |
in[14] = mdContext->i[0]; |
---|
175 |
in[15] = mdContext->i[1]; |
---|
176 |
|
---|
177 |
/* compute number of bytes mod 64 */ |
---|
178 |
mdi = (int)((mdContext->i[0] >> 3) & 0x3F); |
---|
179 |
|
---|
180 |
/* pad out to 56 mod 64 */ |
---|
181 |
padLen = (mdi < 56) ? (56 - mdi) : (120 - mdi); |
---|
182 |
MD5Update (mdContext, PADDING, padLen); |
---|
183 |
|
---|
184 |
/* append length in bits and transform */ |
---|
185 |
for (i = 0, ii = 0; i < 14; i++, ii += 4) |
---|
186 |
in[i] = (((u32_t)mdContext->in[ii+3]) << 24) | |
---|
187 |
(((u32_t)mdContext->in[ii+2]) << 16) | |
---|
188 |
(((u32_t)mdContext->in[ii+1]) << 8) | |
---|
189 |
((u32_t)mdContext->in[ii]); |
---|
190 |
Transform (mdContext->buf, in); |
---|
191 |
|
---|
192 |
/* store buffer in digest */ |
---|
193 |
for (i = 0, ii = 0; i < 4; i++, ii += 4) { |
---|
194 |
mdContext->digest[ii] = (unsigned char)(mdContext->buf[i] & 0xFF); |
---|
195 |
mdContext->digest[ii+1] = |
---|
196 |
(unsigned char)((mdContext->buf[i] >> 8) & 0xFF); |
---|
197 |
mdContext->digest[ii+2] = |
---|
198 |
(unsigned char)((mdContext->buf[i] >> 16) & 0xFF); |
---|
199 |
mdContext->digest[ii+3] = |
---|
200 |
(unsigned char)((mdContext->buf[i] >> 24) & 0xFF); |
---|
201 |
} |
---|
202 |
memcpy(hash, mdContext->digest, 16); |
---|
203 |
} |
---|
204 |
|
---|
205 |
/* Basic MD5 step. Transforms buf based on in. |
---|
206 |
*/ |
---|
207 |
static void Transform (u32_t *buf, u32_t *in) |
---|
208 |
{ |
---|
209 |
u32_t a = buf[0], b = buf[1], c = buf[2], d = buf[3]; |
---|
210 |
|
---|
211 |
/* Round 1 */ |
---|
212 |
#define S11 7 |
---|
213 |
#define S12 12 |
---|
214 |
#define S13 17 |
---|
215 |
#define S14 22 |
---|
216 |
FF ( a, b, c, d, in[ 0], S11, UL(3614090360)); /* 1 */ |
---|
217 |
FF ( d, a, b, c, in[ 1], S12, UL(3905402710)); /* 2 */ |
---|
218 |
FF ( c, d, a, b, in[ 2], S13, UL( 606105819)); /* 3 */ |
---|
219 |
FF ( b, c, d, a, in[ 3], S14, UL(3250441966)); /* 4 */ |
---|
220 |
FF ( a, b, c, d, in[ 4], S11, UL(4118548399)); /* 5 */ |
---|
221 |
FF ( d, a, b, c, in[ 5], S12, UL(1200080426)); /* 6 */ |
---|
222 |
FF ( c, d, a, b, in[ 6], S13, UL(2821735955)); /* 7 */ |
---|
223 |
FF ( b, c, d, a, in[ 7], S14, UL(4249261313)); /* 8 */ |
---|
224 |
FF ( a, b, c, d, in[ 8], S11, UL(1770035416)); /* 9 */ |
---|
225 |
FF ( d, a, b, c, in[ 9], S12, UL(2336552879)); /* 10 */ |
---|
226 |
FF ( c, d, a, b, in[10], S13, UL(4294925233)); /* 11 */ |
---|
227 |
FF ( b, c, d, a, in[11], S14, UL(2304563134)); /* 12 */ |
---|
228 |
FF ( a, b, c, d, in[12], S11, UL(1804603682)); /* 13 */ |
---|
229 |
FF ( d, a, b, c, in[13], S12, UL(4254626195)); /* 14 */ |
---|
230 |
FF ( c, d, a, b, in[14], S13, UL(2792965006)); /* 15 */ |
---|
231 |
FF ( b, c, d, a, in[15], S14, UL(1236535329)); /* 16 */ |
---|
232 |
|
---|
233 |
/* Round 2 */ |
---|
234 |
#define S21 5 |
---|
235 |
#define S22 9 |
---|
236 |
#define S23 14 |
---|
237 |
#define S24 20 |
---|
238 |
GG ( a, b, c, d, in[ 1], S21, UL(4129170786)); /* 17 */ |
---|
239 |
GG ( d, a, b, c, in[ 6], S22, UL(3225465664)); /* 18 */ |
---|
240 |
GG ( c, d, a, b, in[11], S23, UL( 643717713)); /* 19 */ |
---|
241 |
GG ( b, c, d, a, in[ 0], S24, UL(3921069994)); /* 20 */ |
---|
242 |
GG ( a, b, c, d, in[ 5], S21, UL(3593408605)); /* 21 */ |
---|
243 |
GG ( d, a, b, c, in[10], S22, UL( 38016083)); /* 22 */ |
---|
244 |
GG ( c, d, a, b, in[15], S23, UL(3634488961)); /* 23 */ |
---|
245 |
GG ( b, c, d, a, in[ 4], S24, UL(3889429448)); /* 24 */ |
---|
246 |
GG ( a, b, c, d, in[ 9], S21, UL( 568446438)); /* 25 */ |
---|
247 |
GG ( d, a, b, c, in[14], S22, UL(3275163606)); /* 26 */ |
---|
248 |
GG ( c, d, a, b, in[ 3], S23, UL(4107603335)); /* 27 */ |
---|
249 |
GG ( b, c, d, a, in[ 8], S24, UL(1163531501)); /* 28 */ |
---|
250 |
GG ( a, b, c, d, in[13], S21, UL(2850285829)); /* 29 */ |
---|
251 |
GG ( d, a, b, c, in[ 2], S22, UL(4243563512)); /* 30 */ |
---|
252 |
GG ( c, d, a, b, in[ 7], S23, UL(1735328473)); /* 31 */ |
---|
253 |
GG ( b, c, d, a, in[12], S24, UL(2368359562)); /* 32 */ |
---|
254 |
|
---|
255 |
/* Round 3 */ |
---|
256 |
#define S31 4 |
---|
257 |
#define S32 11 |
---|
258 |
#define S33 16 |
---|
259 |
#define S34 23 |
---|
260 |
HH ( a, b, c, d, in[ 5], S31, UL(4294588738)); /* 33 */ |
---|
261 |
HH ( d, a, b, c, in[ 8], S32, UL(2272392833)); /* 34 */ |
---|
262 |
HH ( c, d, a, b, in[11], S33, UL(1839030562)); /* 35 */ |
---|
263 |
HH ( b, c, d, a, in[14], S34, UL(4259657740)); /* 36 */ |
---|
264 |
HH ( a, b, c, d, in[ 1], S31, UL(2763975236)); /* 37 */ |
---|
265 |
HH ( d, a, b, c, in[ 4], S32, UL(1272893353)); /* 38 */ |
---|
266 |
HH ( c, d, a, b, in[ 7], S33, UL(4139469664)); /* 39 */ |
---|
267 |
HH ( b, c, d, a, in[10], S34, UL(3200236656)); /* 40 */ |
---|
268 |
HH ( a, b, c, d, in[13], S31, UL( 681279174)); /* 41 */ |
---|
269 |
HH ( d, a, b, c, in[ 0], S32, UL(3936430074)); /* 42 */ |
---|
270 |
HH ( c, d, a, b, in[ 3], S33, UL(3572445317)); /* 43 */ |
---|
271 |
HH ( b, c, d, a, in[ 6], S34, UL( 76029189)); /* 44 */ |
---|
272 |
HH ( a, b, c, d, in[ 9], S31, UL(3654602809)); /* 45 */ |
---|
273 |
HH ( d, a, b, c, in[12], S32, UL(3873151461)); /* 46 */ |
---|
274 |
HH ( c, d, a, b, in[15], S33, UL( 530742520)); /* 47 */ |
---|
275 |
HH ( b, c, d, a, in[ 2], S34, UL(3299628645)); /* 48 */ |
---|
276 |
|
---|
277 |
/* Round 4 */ |
---|
278 |
#define S41 6 |
---|
279 |
#define S42 10 |
---|
280 |
#define S43 15 |
---|
281 |
#define S44 21 |
---|
282 |
II ( a, b, c, d, in[ 0], S41, UL(4096336452)); /* 49 */ |
---|
283 |
II ( d, a, b, c, in[ 7], S42, UL(1126891415)); /* 50 */ |
---|
284 |
II ( c, d, a, b, in[14], S43, UL(2878612391)); /* 51 */ |
---|
285 |
II ( b, c, d, a, in[ 5], S44, UL(4237533241)); /* 52 */ |
---|
286 |
II ( a, b, c, d, in[12], S41, UL(1700485571)); /* 53 */ |
---|
287 |
II ( d, a, b, c, in[ 3], S42, UL(2399980690)); /* 54 */ |
---|
288 |
II ( c, d, a, b, in[10], S43, UL(4293915773)); /* 55 */ |
---|
289 |
II ( b, c, d, a, in[ 1], S44, UL(2240044497)); /* 56 */ |
---|
290 |
II ( a, b, c, d, in[ 8], S41, UL(1873313359)); /* 57 */ |
---|
291 |
II ( d, a, b, c, in[15], S42, UL(4264355552)); /* 58 */ |
---|
292 |
II ( c, d, a, b, in[ 6], S43, UL(2734768916)); /* 59 */ |
---|
293 |
II ( b, c, d, a, in[13], S44, UL(1309151649)); /* 60 */ |
---|
294 |
II ( a, b, c, d, in[ 4], S41, UL(4149444226)); /* 61 */ |
---|
295 |
II ( d, a, b, c, in[11], S42, UL(3174756917)); /* 62 */ |
---|
296 |
II ( c, d, a, b, in[ 2], S43, UL( 718787259)); /* 63 */ |
---|
297 |
II ( b, c, d, a, in[ 9], S44, UL(3951481745)); /* 64 */ |
---|
298 |
|
---|
299 |
buf[0] += a; |
---|
300 |
buf[1] += b; |
---|
301 |
buf[2] += c; |
---|
302 |
buf[3] += d; |
---|
303 |
} |
---|
304 |
|
---|
305 |
#endif |
---|
306 |
|
---|