You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
129 lines
3.4 KiB
129 lines
3.4 KiB
1 year ago
|
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
|
||
|
#pragma warning disable
|
||
|
using System;
|
||
|
using System.Diagnostics;
|
||
|
|
||
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities;
|
||
|
|
||
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Digests
|
||
|
{
|
||
|
/// <summary>
|
||
|
/// Implementation of SHAKE based on following KeccakNISTInterface.c from http://keccak.noekeon.org/
|
||
|
/// </summary>
|
||
|
/// <remarks>
|
||
|
/// Following the naming conventions used in the C source code to enable easy review of the implementation.
|
||
|
/// </remarks>
|
||
|
public class ShakeDigest
|
||
|
: KeccakDigest, IXof
|
||
|
{
|
||
|
private static int CheckBitLength(int bitLength)
|
||
|
{
|
||
|
switch (bitLength)
|
||
|
{
|
||
|
case 128:
|
||
|
case 256:
|
||
|
return bitLength;
|
||
|
default:
|
||
|
throw new ArgumentException(bitLength + " not supported for SHAKE", "bitLength");
|
||
|
}
|
||
|
}
|
||
|
|
||
|
public ShakeDigest()
|
||
|
: this(128)
|
||
|
{
|
||
|
}
|
||
|
|
||
|
public ShakeDigest(int bitLength)
|
||
|
: base(CheckBitLength(bitLength))
|
||
|
{
|
||
|
}
|
||
|
|
||
|
public ShakeDigest(ShakeDigest source)
|
||
|
: base(source)
|
||
|
{
|
||
|
}
|
||
|
|
||
|
public override string AlgorithmName
|
||
|
{
|
||
|
get { return "SHAKE" + fixedOutputLength; }
|
||
|
}
|
||
|
|
||
|
public override int GetDigestSize()
|
||
|
{
|
||
|
return fixedOutputLength >> 2;
|
||
|
}
|
||
|
|
||
|
public override int DoFinal(byte[] output, int outOff)
|
||
|
{
|
||
|
return DoFinal(output, outOff, GetDigestSize());
|
||
|
}
|
||
|
|
||
|
public virtual int DoFinal(byte[] output, int outOff, int outLen)
|
||
|
{
|
||
|
int length = DoOutput(output, outOff, outLen);
|
||
|
|
||
|
Reset();
|
||
|
|
||
|
return length;
|
||
|
}
|
||
|
|
||
|
public virtual int DoOutput(byte[] output, int outOff, int outLen)
|
||
|
{
|
||
|
if (!squeezing)
|
||
|
{
|
||
|
AbsorbBits(0x0F, 4);
|
||
|
}
|
||
|
|
||
|
Squeeze(output, outOff, (long)outLen << 3);
|
||
|
|
||
|
return outLen;
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* TODO Possible API change to support partial-byte suffixes.
|
||
|
*/
|
||
|
protected override int DoFinal(byte[] output, int outOff, byte partialByte, int partialBits)
|
||
|
{
|
||
|
return DoFinal(output, outOff, GetDigestSize(), partialByte, partialBits);
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* TODO Possible API change to support partial-byte suffixes.
|
||
|
*/
|
||
|
protected virtual int DoFinal(byte[] output, int outOff, int outLen, byte partialByte, int partialBits)
|
||
|
{
|
||
|
if (partialBits < 0 || partialBits > 7)
|
||
|
throw new ArgumentException("must be in the range [0,7]", "partialBits");
|
||
|
|
||
|
int finalInput = (partialByte & ((1 << partialBits) - 1)) | (0x0F << partialBits);
|
||
|
Debug.Assert(finalInput >= 0);
|
||
|
int finalBits = partialBits + 4;
|
||
|
|
||
|
if (finalBits >= 8)
|
||
|
{
|
||
|
Absorb((byte)finalInput);
|
||
|
finalBits -= 8;
|
||
|
finalInput >>= 8;
|
||
|
}
|
||
|
|
||
|
if (finalBits > 0)
|
||
|
{
|
||
|
AbsorbBits(finalInput, finalBits);
|
||
|
}
|
||
|
|
||
|
Squeeze(output, outOff, (long)outLen << 3);
|
||
|
|
||
|
Reset();
|
||
|
|
||
|
return outLen;
|
||
|
}
|
||
|
|
||
|
public override IMemoable Copy()
|
||
|
{
|
||
|
return new ShakeDigest(this);
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
#pragma warning restore
|
||
|
#endif
|