You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
214 lines
5.8 KiB
214 lines
5.8 KiB
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR) |
|
#pragma warning disable |
|
using System; |
|
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities; |
|
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Digests |
|
{ |
|
/// <summary> |
|
/// ParallelHash - a hash designed to support the efficient hashing of very long strings, by taking advantage, |
|
/// of the parallelism available in modern processors with an optional XOF mode. |
|
/// <para> |
|
/// From NIST Special Publication 800-185 - SHA-3 Derived Functions:cSHAKE, KMAC, TupleHash and ParallelHash |
|
/// </para> |
|
/// </summary> |
|
public class ParallelHash |
|
: IXof, IDigest |
|
{ |
|
private static readonly byte[] N_PARALLEL_HASH = Strings.ToByteArray("ParallelHash"); |
|
|
|
private readonly CShakeDigest cshake; |
|
private readonly CShakeDigest compressor; |
|
private readonly int bitLength; |
|
private readonly int outputLength; |
|
private readonly int B; |
|
private readonly byte[] buffer; |
|
private readonly byte[] compressorBuffer; |
|
|
|
private bool firstOutput; |
|
private int nCount; |
|
private int bufOff; |
|
|
|
/** |
|
* Base constructor. |
|
* |
|
* @param bitLength bit length of the underlying SHAKE function, 128 or 256. |
|
* @param S the customization string - available for local use. |
|
* @param B the blocksize (in bytes) for hashing. |
|
*/ |
|
public ParallelHash(int bitLength, byte[] S, int B) |
|
: this(bitLength, S, B, bitLength * 2) |
|
{ |
|
|
|
} |
|
|
|
public ParallelHash(int bitLength, byte[] S, int B, int outputSize) |
|
{ |
|
this.cshake = new CShakeDigest(bitLength, N_PARALLEL_HASH, S); |
|
this.compressor = new CShakeDigest(bitLength, new byte[0], new byte[0]); |
|
this.bitLength = bitLength; |
|
this.B = B; |
|
this.outputLength = (outputSize + 7) / 8; |
|
this.buffer = new byte[B]; |
|
this.compressorBuffer = new byte[bitLength * 2 / 8]; |
|
|
|
Reset(); |
|
} |
|
|
|
public ParallelHash(ParallelHash source) |
|
{ |
|
this.cshake = new CShakeDigest(source.cshake); |
|
this.compressor = new CShakeDigest(source.compressor); |
|
this.bitLength = source.bitLength; |
|
this.B = source.B; |
|
this.outputLength = source.outputLength; |
|
this.buffer = Arrays.Clone(source.buffer); |
|
this.compressorBuffer = Arrays.Clone(source.compressorBuffer); |
|
} |
|
|
|
public virtual string AlgorithmName |
|
{ |
|
get { return "ParallelHash" + cshake.AlgorithmName.Substring(6); } |
|
} |
|
|
|
public virtual int GetByteLength() |
|
{ |
|
return cshake.GetByteLength(); |
|
} |
|
|
|
public virtual int GetDigestSize() |
|
{ |
|
return outputLength; |
|
} |
|
|
|
public virtual void Update(byte b) |
|
{ |
|
buffer[bufOff++] = b; |
|
if (bufOff == buffer.Length) |
|
{ |
|
compress(); |
|
} |
|
} |
|
|
|
public virtual void BlockUpdate(byte[] inBuf, int inOff, int len) |
|
{ |
|
len = System.Math.Max(0, len); |
|
|
|
// |
|
// fill the current word |
|
// |
|
int i = 0; |
|
if (bufOff != 0) |
|
{ |
|
while (i < len && bufOff != buffer.Length) |
|
{ |
|
buffer[bufOff++] = inBuf[inOff + i++]; |
|
} |
|
|
|
if (bufOff == buffer.Length) |
|
{ |
|
compress(); |
|
} |
|
} |
|
|
|
if (i < len) |
|
{ |
|
while (len - i > B) |
|
{ |
|
compress(inBuf, inOff + i, B); |
|
i += B; |
|
} |
|
} |
|
|
|
while (i < len) |
|
{ |
|
Update(inBuf[inOff + i++]); |
|
} |
|
} |
|
|
|
private void compress() |
|
{ |
|
compress(buffer, 0, bufOff); |
|
bufOff = 0; |
|
} |
|
|
|
private void compress(byte[] buf, int offSet, int len) |
|
{ |
|
compressor.BlockUpdate(buf, offSet, len); |
|
compressor.DoFinal(compressorBuffer, 0, compressorBuffer.Length); |
|
|
|
cshake.BlockUpdate(compressorBuffer, 0, compressorBuffer.Length); |
|
|
|
nCount++; |
|
} |
|
|
|
private void wrapUp(int outputSize) |
|
{ |
|
if (bufOff != 0) |
|
{ |
|
compress(); |
|
} |
|
byte[] nOut = XofUtilities.RightEncode(nCount); |
|
byte[] encOut = XofUtilities.RightEncode(outputSize * 8); |
|
|
|
cshake.BlockUpdate(nOut, 0, nOut.Length); |
|
cshake.BlockUpdate(encOut, 0, encOut.Length); |
|
|
|
firstOutput = false; |
|
} |
|
|
|
public virtual int DoFinal(byte[] outBuf, int outOff) |
|
{ |
|
if (firstOutput) |
|
{ |
|
wrapUp(outputLength); |
|
} |
|
|
|
int rv = cshake.DoFinal(outBuf, outOff, GetDigestSize()); |
|
|
|
Reset(); |
|
|
|
return rv; |
|
} |
|
|
|
public virtual int DoFinal(byte[] outBuf, int outOff, int outLen) |
|
{ |
|
if (firstOutput) |
|
{ |
|
wrapUp(outputLength); |
|
} |
|
|
|
int rv = cshake.DoFinal(outBuf, outOff, outLen); |
|
|
|
Reset(); |
|
|
|
return rv; |
|
} |
|
|
|
public virtual int DoOutput(byte[] outBuf, int outOff, int outLen) |
|
{ |
|
if (firstOutput) |
|
{ |
|
wrapUp(0); |
|
} |
|
|
|
return cshake.DoOutput(outBuf, outOff, outLen); |
|
} |
|
|
|
public virtual void Reset() |
|
{ |
|
cshake.Reset(); |
|
Arrays.Clear(buffer); |
|
|
|
byte[] hdr = XofUtilities.LeftEncode(B); |
|
cshake.BlockUpdate(hdr, 0, hdr.Length); |
|
|
|
nCount = 0; |
|
bufOff = 0; |
|
firstOutput = true; |
|
} |
|
} |
|
} |
|
#pragma warning restore |
|
#endif
|
|
|