You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
128 lines
3.4 KiB
128 lines
3.4 KiB
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR) |
|
#pragma warning disable |
|
using System; |
|
using System.Diagnostics; |
|
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities; |
|
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Crypto.Digests |
|
{ |
|
/// <summary> |
|
/// Implementation of SHAKE based on following KeccakNISTInterface.c from http://keccak.noekeon.org/ |
|
/// </summary> |
|
/// <remarks> |
|
/// Following the naming conventions used in the C source code to enable easy review of the implementation. |
|
/// </remarks> |
|
public class ShakeDigest |
|
: KeccakDigest, IXof |
|
{ |
|
private static int CheckBitLength(int bitLength) |
|
{ |
|
switch (bitLength) |
|
{ |
|
case 128: |
|
case 256: |
|
return bitLength; |
|
default: |
|
throw new ArgumentException(bitLength + " not supported for SHAKE", "bitLength"); |
|
} |
|
} |
|
|
|
public ShakeDigest() |
|
: this(128) |
|
{ |
|
} |
|
|
|
public ShakeDigest(int bitLength) |
|
: base(CheckBitLength(bitLength)) |
|
{ |
|
} |
|
|
|
public ShakeDigest(ShakeDigest source) |
|
: base(source) |
|
{ |
|
} |
|
|
|
public override string AlgorithmName |
|
{ |
|
get { return "SHAKE" + fixedOutputLength; } |
|
} |
|
|
|
public override int GetDigestSize() |
|
{ |
|
return fixedOutputLength >> 2; |
|
} |
|
|
|
public override int DoFinal(byte[] output, int outOff) |
|
{ |
|
return DoFinal(output, outOff, GetDigestSize()); |
|
} |
|
|
|
public virtual int DoFinal(byte[] output, int outOff, int outLen) |
|
{ |
|
int length = DoOutput(output, outOff, outLen); |
|
|
|
Reset(); |
|
|
|
return length; |
|
} |
|
|
|
public virtual int DoOutput(byte[] output, int outOff, int outLen) |
|
{ |
|
if (!squeezing) |
|
{ |
|
AbsorbBits(0x0F, 4); |
|
} |
|
|
|
Squeeze(output, outOff, (long)outLen << 3); |
|
|
|
return outLen; |
|
} |
|
|
|
/* |
|
* TODO Possible API change to support partial-byte suffixes. |
|
*/ |
|
protected override int DoFinal(byte[] output, int outOff, byte partialByte, int partialBits) |
|
{ |
|
return DoFinal(output, outOff, GetDigestSize(), partialByte, partialBits); |
|
} |
|
|
|
/* |
|
* TODO Possible API change to support partial-byte suffixes. |
|
*/ |
|
protected virtual int DoFinal(byte[] output, int outOff, int outLen, byte partialByte, int partialBits) |
|
{ |
|
if (partialBits < 0 || partialBits > 7) |
|
throw new ArgumentException("must be in the range [0,7]", "partialBits"); |
|
|
|
int finalInput = (partialByte & ((1 << partialBits) - 1)) | (0x0F << partialBits); |
|
Debug.Assert(finalInput >= 0); |
|
int finalBits = partialBits + 4; |
|
|
|
if (finalBits >= 8) |
|
{ |
|
Absorb((byte)finalInput); |
|
finalBits -= 8; |
|
finalInput >>= 8; |
|
} |
|
|
|
if (finalBits > 0) |
|
{ |
|
AbsorbBits(finalInput, finalBits); |
|
} |
|
|
|
Squeeze(output, outOff, (long)outLen << 3); |
|
|
|
Reset(); |
|
|
|
return outLen; |
|
} |
|
|
|
public override IMemoable Copy() |
|
{ |
|
return new ShakeDigest(this); |
|
} |
|
} |
|
} |
|
#pragma warning restore |
|
#endif
|
|
|