crypt.c 37 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110
  1. /*
  2. crypt.c - Base-64 encoding and decoding and MD5 support.
  3. Copyright (c) All Rights Reserved. See details at the end of the file.
  4. */
  5. /********************************* Includes ***********************************/
  6. #include "goahead.h"
  7. /*********************************** Locals ***********************************/
  8. #define BLOWFISH_SALT_LENGTH 16
  9. #define BLOWFISH_ROUNDS 128
  10. /*
  11. Constants for transform routine
  12. */
  13. #define S11 7
  14. #define S12 12
  15. #define S13 17
  16. #define S14 22
  17. #define S21 5
  18. #define S22 9
  19. #define S23 14
  20. #define S24 20
  21. #define S31 4
  22. #define S32 11
  23. #define S33 16
  24. #define S34 23
  25. #define S41 6
  26. #define S42 10
  27. #define S43 15
  28. #define S44 21
  29. static uchar PADDING[64] = {
  30. 0x80, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  31. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
  32. 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
  33. };
  34. /*
  35. F, G, H and I are basic MD5 functions.
  36. */
  37. #define F(x, y, z) (((x) & (y)) | ((~x) & (z)))
  38. #define G(x, y, z) (((x) & (z)) | ((y) & (~z)))
  39. #define H(x, y, z) ((x) ^ (y) ^ (z))
  40. #define I(x, y, z) ((y) ^ ((x) | (~z)))
  41. /*
  42. ROTATE_LEFT rotates x left n bits.
  43. */
  44. #define ROTATE_LEFT(x, n) (((x) << (n)) | ((x) >> (32-(n))))
  45. /*
  46. FF, GG, HH, and II transformations for rounds 1, 2, 3, and 4.
  47. Rotation is separate from addition to prevent recomputation.
  48. */
  49. #define FF(a, b, c, d, x, s, ac) { \
  50. (a) += F ((b), (c), (d)) + (x) + (uint)(ac); \
  51. (a) = ROTATE_LEFT ((a), (s)); \
  52. (a) += (b); \
  53. }
  54. #define GG(a, b, c, d, x, s, ac) { \
  55. (a) += G ((b), (c), (d)) + (x) + (uint)(ac); \
  56. (a) = ROTATE_LEFT ((a), (s)); \
  57. (a) += (b); \
  58. }
  59. #define HH(a, b, c, d, x, s, ac) { \
  60. (a) += H ((b), (c), (d)) + (x) + (uint)(ac); \
  61. (a) = ROTATE_LEFT ((a), (s)); \
  62. (a) += (b); \
  63. }
  64. #define II(a, b, c, d, x, s, ac) { \
  65. (a) += I ((b), (c), (d)) + (x) + (uint)(ac); \
  66. (a) = ROTATE_LEFT ((a), (s)); \
  67. (a) += (b); \
  68. }
  69. typedef struct {
  70. uint state[4];
  71. uint count[2];
  72. uchar buffer[64];
  73. } MD5CONTEXT;
  74. /******************************* Base 64 Data *********************************/
  75. #define CRYPT_HASH_SIZE 16
  76. /*
  77. Encoding map lookup
  78. */
  79. static char encodeMap[] = {
  80. 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H',
  81. 'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P',
  82. 'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X',
  83. 'Y', 'Z', 'a', 'b', 'c', 'd', 'e', 'f',
  84. 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n',
  85. 'o', 'p', 'q', 'r', 's', 't', 'u', 'v',
  86. 'w', 'x', 'y', 'z', '0', '1', '2', '3',
  87. '4', '5', '6', '7', '8', '9', '+', '/',
  88. };
  89. /*
  90. Decode map
  91. */
  92. static signed char decodeMap[] = {
  93. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  94. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  95. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63,
  96. 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, -1, -1, -1, -1, -1, -1,
  97. -1, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14,
  98. 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1,
  99. -1, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
  100. 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, -1, -1, -1, -1, -1,
  101. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  102. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  103. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  104. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  105. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  106. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  107. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  108. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  109. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  110. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  111. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  112. -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
  113. };
  114. /*************************** Forward Declarations *****************************/
  115. static void decode(uint *output, uchar *input, uint len);
  116. static void encode(uchar *output, uint *input, uint len);
  117. static void finalizeMD5(uchar digest[16], MD5CONTEXT *context);
  118. static void initMD5(MD5CONTEXT *context);
  119. static void transform(uint state[4], uchar block[64]);
  120. static void update(MD5CONTEXT *context, uchar *input, uint inputLen);
  121. /*********************************** Code *************************************/
  122. /*
  123. Decode a null terminated string and returns a null terminated string.
  124. Stops decoding at the end of string or '='
  125. */
  126. PUBLIC char *websDecode64(char *s)
  127. {
  128. return websDecode64Block(s, NULL, WEBS_DECODE_TOKEQ);
  129. }
  130. /*
  131. Decode a null terminated string and return a block with length.
  132. Stops decoding at the end of the block or '=' if WEBS_DECODE_TOKEQ is specified.
  133. */
  134. PUBLIC char *websDecode64Block(char *s, ssize *len, int flags)
  135. {
  136. uint bitBuf;
  137. char *buffer, *bp;
  138. char *end;
  139. ssize size;
  140. int c, i, j, shift;
  141. size = strlen(s);
  142. if ((buffer = walloc(size + 1)) == 0) {
  143. return NULL;
  144. }
  145. bp = buffer;
  146. *bp = '\0';
  147. end = &s[size];
  148. while (s < end && (*s != '=' || !(flags & WEBS_DECODE_TOKEQ))) {
  149. bitBuf = 0;
  150. shift = 18;
  151. for (i = 0; i < 4 && (s < end && (*s != '=' || !(flags & WEBS_DECODE_TOKEQ))); i++, s++) {
  152. c = decodeMap[*s & 0xff];
  153. if (c == -1) {
  154. wfree(buffer);
  155. return NULL;
  156. }
  157. bitBuf = bitBuf | (c << shift);
  158. shift -= 6;
  159. }
  160. --i;
  161. assert((bp + i) < &buffer[size]);
  162. for (j = 0; j < i; j++) {
  163. *bp++ = (char) ((bitBuf >> (8 * (2 - j))) & 0xff);
  164. }
  165. *bp = '\0';
  166. }
  167. if (len) {
  168. *len = bp - buffer;
  169. }
  170. return buffer;
  171. }
  172. PUBLIC char *websMD5(cchar *s)
  173. {
  174. return websMD5Block(s, strlen(s), NULL);
  175. }
  176. /*
  177. Return the MD5 hash of a block. Returns allocated string. A prefix for the result can be supplied.
  178. */
  179. PUBLIC char *websMD5Block(cchar *buf, ssize length, cchar *prefix)
  180. {
  181. MD5CONTEXT context;
  182. uchar hash[CRYPT_HASH_SIZE];
  183. cchar *hex = "0123456789abcdef";
  184. char *r, *str;
  185. char result[(CRYPT_HASH_SIZE * 2) + 1];
  186. ssize len;
  187. int i;
  188. if (length < 0) {
  189. length = strlen(buf);
  190. }
  191. initMD5(&context);
  192. update(&context, (uchar*) buf, (uint) length);
  193. finalizeMD5(hash, &context);
  194. for (i = 0, r = result; i < 16; i++) {
  195. *r++ = hex[hash[i] >> 4];
  196. *r++ = hex[hash[i] & 0xF];
  197. }
  198. *r = '\0';
  199. len = (prefix) ? strlen(prefix) : 0;
  200. str = walloc(sizeof(result) + len);
  201. if (str) {
  202. if (prefix) {
  203. strcpy(str, prefix);
  204. }
  205. strcpy(str + len, result);
  206. }
  207. return str;
  208. }
  209. /*
  210. MD5 initialization. Begins an MD5 operation, writing a new context.
  211. */
  212. static void initMD5(MD5CONTEXT *context)
  213. {
  214. context->count[0] = context->count[1] = 0;
  215. context->state[0] = 0x67452301;
  216. context->state[1] = 0xefcdab89;
  217. context->state[2] = 0x98badcfe;
  218. context->state[3] = 0x10325476;
  219. }
  220. /*
  221. MD5 block update operation. Continues an MD5 message-digest operation, processing another message block,
  222. and updating the context.
  223. */
  224. static void update(MD5CONTEXT *context, uchar *input, uint inputLen)
  225. {
  226. uint i, index, partLen;
  227. index = (uint) ((context->count[0] >> 3) & 0x3F);
  228. if ((context->count[0] += ((uint)inputLen << 3)) < ((uint)inputLen << 3)){
  229. context->count[1]++;
  230. }
  231. context->count[1] += ((uint)inputLen >> 29);
  232. partLen = 64 - index;
  233. if (inputLen >= partLen) {
  234. memcpy((uchar*) &context->buffer[index], (uchar*) input, partLen);
  235. transform(context->state, context->buffer);
  236. for (i = partLen; i + 63 < inputLen; i += 64) {
  237. transform(context->state, &input[i]);
  238. }
  239. index = 0;
  240. } else {
  241. i = 0;
  242. }
  243. memcpy((uchar*) &context->buffer[index], (uchar*) &input[i], inputLen-i);
  244. }
  245. /*
  246. MD5 finalization. Ends an MD5 message-digest operation, writing the message digest and zeroizing the context.
  247. */
  248. static void finalizeMD5(uchar digest[16], MD5CONTEXT *context)
  249. {
  250. uchar bits[8];
  251. uint index, padLen;
  252. /* Save number of bits */
  253. encode(bits, context->count, 8);
  254. /* Pad out to 56 mod 64. */
  255. index = (uint)((context->count[0] >> 3) & 0x3f);
  256. padLen = (index < 56) ? (56 - index) : (120 - index);
  257. update(context, PADDING, padLen);
  258. /* Append length (before padding) */
  259. update(context, bits, 8);
  260. /* Store state in digest */
  261. encode(digest, context->state, 16);
  262. /* Zero sensitive information. */
  263. memset((uchar*)context, 0, sizeof (*context));
  264. }
  265. /*
  266. MD5 basic transformation. Transforms state based on block.
  267. */
  268. static void transform(uint state[4], uchar block[64])
  269. {
  270. uint a = state[0], b = state[1], c = state[2], d = state[3], x[16];
  271. decode(x, block, 64);
  272. /* Round 1 */
  273. FF(a, b, c, d, x[ 0], S11, 0xd76aa478); /* 1 */
  274. FF(d, a, b, c, x[ 1], S12, 0xe8c7b756); /* 2 */
  275. FF(c, d, a, b, x[ 2], S13, 0x242070db); /* 3 */
  276. FF(b, c, d, a, x[ 3], S14, 0xc1bdceee); /* 4 */
  277. FF(a, b, c, d, x[ 4], S11, 0xf57c0faf); /* 5 */
  278. FF(d, a, b, c, x[ 5], S12, 0x4787c62a); /* 6 */
  279. FF(c, d, a, b, x[ 6], S13, 0xa8304613); /* 7 */
  280. FF(b, c, d, a, x[ 7], S14, 0xfd469501); /* 8 */
  281. FF(a, b, c, d, x[ 8], S11, 0x698098d8); /* 9 */
  282. FF(d, a, b, c, x[ 9], S12, 0x8b44f7af); /* 10 */
  283. FF(c, d, a, b, x[10], S13, 0xffff5bb1); /* 11 */
  284. FF(b, c, d, a, x[11], S14, 0x895cd7be); /* 12 */
  285. FF(a, b, c, d, x[12], S11, 0x6b901122); /* 13 */
  286. FF(d, a, b, c, x[13], S12, 0xfd987193); /* 14 */
  287. FF(c, d, a, b, x[14], S13, 0xa679438e); /* 15 */
  288. FF(b, c, d, a, x[15], S14, 0x49b40821); /* 16 */
  289. /* Round 2 */
  290. GG(a, b, c, d, x[ 1], S21, 0xf61e2562); /* 17 */
  291. GG(d, a, b, c, x[ 6], S22, 0xc040b340); /* 18 */
  292. GG(c, d, a, b, x[11], S23, 0x265e5a51); /* 19 */
  293. GG(b, c, d, a, x[ 0], S24, 0xe9b6c7aa); /* 20 */
  294. GG(a, b, c, d, x[ 5], S21, 0xd62f105d); /* 21 */
  295. GG(d, a, b, c, x[10], S22, 0x2441453); /* 22 */
  296. GG(c, d, a, b, x[15], S23, 0xd8a1e681); /* 23 */
  297. GG(b, c, d, a, x[ 4], S24, 0xe7d3fbc8); /* 24 */
  298. GG(a, b, c, d, x[ 9], S21, 0x21e1cde6); /* 25 */
  299. GG(d, a, b, c, x[14], S22, 0xc33707d6); /* 26 */
  300. GG(c, d, a, b, x[ 3], S23, 0xf4d50d87); /* 27 */
  301. GG(b, c, d, a, x[ 8], S24, 0x455a14ed); /* 28 */
  302. GG(a, b, c, d, x[13], S21, 0xa9e3e905); /* 29 */
  303. GG(d, a, b, c, x[ 2], S22, 0xfcefa3f8); /* 30 */
  304. GG(c, d, a, b, x[ 7], S23, 0x676f02d9); /* 31 */
  305. GG(b, c, d, a, x[12], S24, 0x8d2a4c8a); /* 32 */
  306. /* Round 3 */
  307. HH(a, b, c, d, x[ 5], S31, 0xfffa3942); /* 33 */
  308. HH(d, a, b, c, x[ 8], S32, 0x8771f681); /* 34 */
  309. HH(c, d, a, b, x[11], S33, 0x6d9d6122); /* 35 */
  310. HH(b, c, d, a, x[14], S34, 0xfde5380c); /* 36 */
  311. HH(a, b, c, d, x[ 1], S31, 0xa4beea44); /* 37 */
  312. HH(d, a, b, c, x[ 4], S32, 0x4bdecfa9); /* 38 */
  313. HH(c, d, a, b, x[ 7], S33, 0xf6bb4b60); /* 39 */
  314. HH(b, c, d, a, x[10], S34, 0xbebfbc70); /* 40 */
  315. HH(a, b, c, d, x[13], S31, 0x289b7ec6); /* 41 */
  316. HH(d, a, b, c, x[ 0], S32, 0xeaa127fa); /* 42 */
  317. HH(c, d, a, b, x[ 3], S33, 0xd4ef3085); /* 43 */
  318. HH(b, c, d, a, x[ 6], S34, 0x4881d05); /* 44 */
  319. HH(a, b, c, d, x[ 9], S31, 0xd9d4d039); /* 45 */
  320. HH(d, a, b, c, x[12], S32, 0xe6db99e5); /* 46 */
  321. HH(c, d, a, b, x[15], S33, 0x1fa27cf8); /* 47 */
  322. HH(b, c, d, a, x[ 2], S34, 0xc4ac5665); /* 48 */
  323. /* Round 4 */
  324. II(a, b, c, d, x[ 0], S41, 0xf4292244); /* 49 */
  325. II(d, a, b, c, x[ 7], S42, 0x432aff97); /* 50 */
  326. II(c, d, a, b, x[14], S43, 0xab9423a7); /* 51 */
  327. II(b, c, d, a, x[ 5], S44, 0xfc93a039); /* 52 */
  328. II(a, b, c, d, x[12], S41, 0x655b59c3); /* 53 */
  329. II(d, a, b, c, x[ 3], S42, 0x8f0ccc92); /* 54 */
  330. II(c, d, a, b, x[10], S43, 0xffeff47d); /* 55 */
  331. II(b, c, d, a, x[ 1], S44, 0x85845dd1); /* 56 */
  332. II(a, b, c, d, x[ 8], S41, 0x6fa87e4f); /* 57 */
  333. II(d, a, b, c, x[15], S42, 0xfe2ce6e0); /* 58 */
  334. II(c, d, a, b, x[ 6], S43, 0xa3014314); /* 59 */
  335. II(b, c, d, a, x[13], S44, 0x4e0811a1); /* 60 */
  336. II(a, b, c, d, x[ 4], S41, 0xf7537e82); /* 61 */
  337. II(d, a, b, c, x[11], S42, 0xbd3af235); /* 62 */
  338. II(c, d, a, b, x[ 2], S43, 0x2ad7d2bb); /* 63 */
  339. II(b, c, d, a, x[ 9], S44, 0xeb86d391); /* 64 */
  340. state[0] += a;
  341. state[1] += b;
  342. state[2] += c;
  343. state[3] += d;
  344. /* Zero sensitive information. */
  345. memset((uchar*) x, 0, sizeof(x));
  346. }
  347. /*
  348. Encodes input(uint) into output(uchar). Assumes len is a multiple of 4.
  349. */
  350. static void encode(uchar *output, uint *input, uint len)
  351. {
  352. uint i, j;
  353. for (i = 0, j = 0; j < len; i++, j += 4) {
  354. output[j] = (uchar) (input[i] & 0xff);
  355. output[j+1] = (uchar) ((input[i] >> 8) & 0xff);
  356. output[j+2] = (uchar) ((input[i] >> 16) & 0xff);
  357. output[j+3] = (uchar) ((input[i] >> 24) & 0xff);
  358. }
  359. }
  360. /*
  361. Decodes input(uchar) into output(uint). Assumes len is a multiple of 4.
  362. */
  363. static void decode(uint *output, uchar *input, uint len)
  364. {
  365. uint i, j;
  366. for (i = 0, j = 0; j < len; i++, j += 4)
  367. output[i] = ((uint) input[j]) | (((uint) input[j+1]) << 8) | (((uint) input[j+2]) << 16) |
  368. (((uint) input[j+3]) << 24);
  369. }
  370. /*
  371. Encode a null terminated string.
  372. Returns a null terminated block
  373. */
  374. PUBLIC char *websEncode64(char *s)
  375. {
  376. return websEncode64Block(s, slen(s));
  377. }
  378. /*
  379. Encode a block of a given length
  380. Returns a null terminated block
  381. */
  382. PUBLIC char *websEncode64Block(char *s, ssize len)
  383. {
  384. uint shiftbuf;
  385. char *buffer, *bp;
  386. cchar *end;
  387. ssize size;
  388. int i, j, shift;
  389. size = len * 2;
  390. if ((buffer = walloc(size + 1)) == 0) {
  391. return NULL;
  392. }
  393. bp = buffer;
  394. *bp = '\0';
  395. end = &s[len];
  396. while (s < end) {
  397. shiftbuf = 0;
  398. for (j = 2; j >= 0 && *s; j--, s++) {
  399. shiftbuf |= ((*s & 0xff) << (j * 8));
  400. }
  401. shift = 18;
  402. for (i = ++j; i < 4 && bp < &buffer[size] ; i++) {
  403. *bp++ = encodeMap[(shiftbuf >> shift) & 0x3f];
  404. shift -= 6;
  405. }
  406. while (j-- > 0) {
  407. *bp++ = '=';
  408. }
  409. *bp = '\0';
  410. }
  411. return buffer;
  412. }
  413. /************************************ Blowfish *******************************/
  414. #define BF_ROUNDS 16
  415. typedef struct {
  416. uint P[16 + 2];
  417. uint S[4][256];
  418. } WebsBlowfish;
  419. static const uint ORIG_P[16 + 2] = {
  420. 0x243F6A88L, 0x85A308D3L, 0x13198A2EL, 0x03707344L,
  421. 0xA4093822L, 0x299F31D0L, 0x082EFA98L, 0xEC4E6C89L,
  422. 0x452821E6L, 0x38D01377L, 0xBE5466CFL, 0x34E90C6CL,
  423. 0xC0AC29B7L, 0xC97C50DDL, 0x3F84D5B5L, 0xB5470917L,
  424. 0x9216D5D9L, 0x8979FB1BL
  425. };
  426. /*
  427. Digits of PI
  428. */
  429. static const uint ORIG_S[4][256] = {
  430. { 0xD1310BA6L, 0x98DFB5ACL, 0x2FFD72DBL, 0xD01ADFB7L,
  431. 0xB8E1AFEDL, 0x6A267E96L, 0xBA7C9045L, 0xF12C7F99L,
  432. 0x24A19947L, 0xB3916CF7L, 0x0801F2E2L, 0x858EFC16L,
  433. 0x636920D8L, 0x71574E69L, 0xA458FEA3L, 0xF4933D7EL,
  434. 0x0D95748FL, 0x728EB658L, 0x718BCD58L, 0x82154AEEL,
  435. 0x7B54A41DL, 0xC25A59B5L, 0x9C30D539L, 0x2AF26013L,
  436. 0xC5D1B023L, 0x286085F0L, 0xCA417918L, 0xB8DB38EFL,
  437. 0x8E79DCB0L, 0x603A180EL, 0x6C9E0E8BL, 0xB01E8A3EL,
  438. 0xD71577C1L, 0xBD314B27L, 0x78AF2FDAL, 0x55605C60L,
  439. 0xE65525F3L, 0xAA55AB94L, 0x57489862L, 0x63E81440L,
  440. 0x55CA396AL, 0x2AAB10B6L, 0xB4CC5C34L, 0x1141E8CEL,
  441. 0xA15486AFL, 0x7C72E993L, 0xB3EE1411L, 0x636FBC2AL,
  442. 0x2BA9C55DL, 0x741831F6L, 0xCE5C3E16L, 0x9B87931EL,
  443. 0xAFD6BA33L, 0x6C24CF5CL, 0x7A325381L, 0x28958677L,
  444. 0x3B8F4898L, 0x6B4BB9AFL, 0xC4BFE81BL, 0x66282193L,
  445. 0x61D809CCL, 0xFB21A991L, 0x487CAC60L, 0x5DEC8032L,
  446. 0xEF845D5DL, 0xE98575B1L, 0xDC262302L, 0xEB651B88L,
  447. 0x23893E81L, 0xD396ACC5L, 0x0F6D6FF3L, 0x83F44239L,
  448. 0x2E0B4482L, 0xA4842004L, 0x69C8F04AL, 0x9E1F9B5EL,
  449. 0x21C66842L, 0xF6E96C9AL, 0x670C9C61L, 0xABD388F0L,
  450. 0x6A51A0D2L, 0xD8542F68L, 0x960FA728L, 0xAB5133A3L,
  451. 0x6EEF0B6CL, 0x137A3BE4L, 0xBA3BF050L, 0x7EFB2A98L,
  452. 0xA1F1651DL, 0x39AF0176L, 0x66CA593EL, 0x82430E88L,
  453. 0x8CEE8619L, 0x456F9FB4L, 0x7D84A5C3L, 0x3B8B5EBEL,
  454. 0xE06F75D8L, 0x85C12073L, 0x401A449FL, 0x56C16AA6L,
  455. 0x4ED3AA62L, 0x363F7706L, 0x1BFEDF72L, 0x429B023DL,
  456. 0x37D0D724L, 0xD00A1248L, 0xDB0FEAD3L, 0x49F1C09BL,
  457. 0x075372C9L, 0x80991B7BL, 0x25D479D8L, 0xF6E8DEF7L,
  458. 0xE3FE501AL, 0xB6794C3BL, 0x976CE0BDL, 0x04C006BAL,
  459. 0xC1A94FB6L, 0x409F60C4L, 0x5E5C9EC2L, 0x196A2463L,
  460. 0x68FB6FAFL, 0x3E6C53B5L, 0x1339B2EBL, 0x3B52EC6FL,
  461. 0x6DFC511FL, 0x9B30952CL, 0xCC814544L, 0xAF5EBD09L,
  462. 0xBEE3D004L, 0xDE334AFDL, 0x660F2807L, 0x192E4BB3L,
  463. 0xC0CBA857L, 0x45C8740FL, 0xD20B5F39L, 0xB9D3FBDBL,
  464. 0x5579C0BDL, 0x1A60320AL, 0xD6A100C6L, 0x402C7279L,
  465. 0x679F25FEL, 0xFB1FA3CCL, 0x8EA5E9F8L, 0xDB3222F8L,
  466. 0x3C7516DFL, 0xFD616B15L, 0x2F501EC8L, 0xAD0552ABL,
  467. 0x323DB5FAL, 0xFD238760L, 0x53317B48L, 0x3E00DF82L,
  468. 0x9E5C57BBL, 0xCA6F8CA0L, 0x1A87562EL, 0xDF1769DBL,
  469. 0xD542A8F6L, 0x287EFFC3L, 0xAC6732C6L, 0x8C4F5573L,
  470. 0x695B27B0L, 0xBBCA58C8L, 0xE1FFA35DL, 0xB8F011A0L,
  471. 0x10FA3D98L, 0xFD2183B8L, 0x4AFCB56CL, 0x2DD1D35BL,
  472. 0x9A53E479L, 0xB6F84565L, 0xD28E49BCL, 0x4BFB9790L,
  473. 0xE1DDF2DAL, 0xA4CB7E33L, 0x62FB1341L, 0xCEE4C6E8L,
  474. 0xEF20CADAL, 0x36774C01L, 0xD07E9EFEL, 0x2BF11FB4L,
  475. 0x95DBDA4DL, 0xAE909198L, 0xEAAD8E71L, 0x6B93D5A0L,
  476. 0xD08ED1D0L, 0xAFC725E0L, 0x8E3C5B2FL, 0x8E7594B7L,
  477. 0x8FF6E2FBL, 0xF2122B64L, 0x8888B812L, 0x900DF01CL,
  478. 0x4FAD5EA0L, 0x688FC31CL, 0xD1CFF191L, 0xB3A8C1ADL,
  479. 0x2F2F2218L, 0xBE0E1777L, 0xEA752DFEL, 0x8B021FA1L,
  480. 0xE5A0CC0FL, 0xB56F74E8L, 0x18ACF3D6L, 0xCE89E299L,
  481. 0xB4A84FE0L, 0xFD13E0B7L, 0x7CC43B81L, 0xD2ADA8D9L,
  482. 0x165FA266L, 0x80957705L, 0x93CC7314L, 0x211A1477L,
  483. 0xE6AD2065L, 0x77B5FA86L, 0xC75442F5L, 0xFB9D35CFL,
  484. 0xEBCDAF0CL, 0x7B3E89A0L, 0xD6411BD3L, 0xAE1E7E49L,
  485. 0x00250E2DL, 0x2071B35EL, 0x226800BBL, 0x57B8E0AFL,
  486. 0x2464369BL, 0xF009B91EL, 0x5563911DL, 0x59DFA6AAL,
  487. 0x78C14389L, 0xD95A537FL, 0x207D5BA2L, 0x02E5B9C5L,
  488. 0x83260376L, 0x6295CFA9L, 0x11C81968L, 0x4E734A41L,
  489. 0xB3472DCAL, 0x7B14A94AL, 0x1B510052L, 0x9A532915L,
  490. 0xD60F573FL, 0xBC9BC6E4L, 0x2B60A476L, 0x81E67400L,
  491. 0x08BA6FB5L, 0x571BE91FL, 0xF296EC6BL, 0x2A0DD915L,
  492. 0xB6636521L, 0xE7B9F9B6L, 0xFF34052EL, 0xC5855664L,
  493. 0x53B02D5DL, 0xA99F8FA1L, 0x08BA4799L, 0x6E85076AL
  494. }, {
  495. 0x4B7A70E9L, 0xB5B32944L, 0xDB75092EL, 0xC4192623L,
  496. 0xAD6EA6B0L, 0x49A7DF7DL, 0x9CEE60B8L, 0x8FEDB266L,
  497. 0xECAA8C71L, 0x699A17FFL, 0x5664526CL, 0xC2B19EE1L,
  498. 0x193602A5L, 0x75094C29L, 0xA0591340L, 0xE4183A3EL,
  499. 0x3F54989AL, 0x5B429D65L, 0x6B8FE4D6L, 0x99F73FD6L,
  500. 0xA1D29C07L, 0xEFE830F5L, 0x4D2D38E6L, 0xF0255DC1L,
  501. 0x4CDD2086L, 0x8470EB26L, 0x6382E9C6L, 0x021ECC5EL,
  502. 0x09686B3FL, 0x3EBAEFC9L, 0x3C971814L, 0x6B6A70A1L,
  503. 0x687F3584L, 0x52A0E286L, 0xB79C5305L, 0xAA500737L,
  504. 0x3E07841CL, 0x7FDEAE5CL, 0x8E7D44ECL, 0x5716F2B8L,
  505. 0xB03ADA37L, 0xF0500C0DL, 0xF01C1F04L, 0x0200B3FFL,
  506. 0xAE0CF51AL, 0x3CB574B2L, 0x25837A58L, 0xDC0921BDL,
  507. 0xD19113F9L, 0x7CA92FF6L, 0x94324773L, 0x22F54701L,
  508. 0x3AE5E581L, 0x37C2DADCL, 0xC8B57634L, 0x9AF3DDA7L,
  509. 0xA9446146L, 0x0FD0030EL, 0xECC8C73EL, 0xA4751E41L,
  510. 0xE238CD99L, 0x3BEA0E2FL, 0x3280BBA1L, 0x183EB331L,
  511. 0x4E548B38L, 0x4F6DB908L, 0x6F420D03L, 0xF60A04BFL,
  512. 0x2CB81290L, 0x24977C79L, 0x5679B072L, 0xBCAF89AFL,
  513. 0xDE9A771FL, 0xD9930810L, 0xB38BAE12L, 0xDCCF3F2EL,
  514. 0x5512721FL, 0x2E6B7124L, 0x501ADDE6L, 0x9F84CD87L,
  515. 0x7A584718L, 0x7408DA17L, 0xBC9F9ABCL, 0xE94B7D8CL,
  516. 0xEC7AEC3AL, 0xDB851DFAL, 0x63094366L, 0xC464C3D2L,
  517. 0xEF1C1847L, 0x3215D908L, 0xDD433B37L, 0x24C2BA16L,
  518. 0x12A14D43L, 0x2A65C451L, 0x50940002L, 0x133AE4DDL,
  519. 0x71DFF89EL, 0x10314E55L, 0x81AC77D6L, 0x5F11199BL,
  520. 0x043556F1L, 0xD7A3C76BL, 0x3C11183BL, 0x5924A509L,
  521. 0xF28FE6EDL, 0x97F1FBFAL, 0x9EBABF2CL, 0x1E153C6EL,
  522. 0x86E34570L, 0xEAE96FB1L, 0x860E5E0AL, 0x5A3E2AB3L,
  523. 0x771FE71CL, 0x4E3D06FAL, 0x2965DCB9L, 0x99E71D0FL,
  524. 0x803E89D6L, 0x5266C825L, 0x2E4CC978L, 0x9C10B36AL,
  525. 0xC6150EBAL, 0x94E2EA78L, 0xA5FC3C53L, 0x1E0A2DF4L,
  526. 0xF2F74EA7L, 0x361D2B3DL, 0x1939260FL, 0x19C27960L,
  527. 0x5223A708L, 0xF71312B6L, 0xEBADFE6EL, 0xEAC31F66L,
  528. 0xE3BC4595L, 0xA67BC883L, 0xB17F37D1L, 0x018CFF28L,
  529. 0xC332DDEFL, 0xBE6C5AA5L, 0x65582185L, 0x68AB9802L,
  530. 0xEECEA50FL, 0xDB2F953BL, 0x2AEF7DADL, 0x5B6E2F84L,
  531. 0x1521B628L, 0x29076170L, 0xECDD4775L, 0x619F1510L,
  532. 0x13CCA830L, 0xEB61BD96L, 0x0334FE1EL, 0xAA0363CFL,
  533. 0xB5735C90L, 0x4C70A239L, 0xD59E9E0BL, 0xCBAADE14L,
  534. 0xEECC86BCL, 0x60622CA7L, 0x9CAB5CABL, 0xB2F3846EL,
  535. 0x648B1EAFL, 0x19BDF0CAL, 0xA02369B9L, 0x655ABB50L,
  536. 0x40685A32L, 0x3C2AB4B3L, 0x319EE9D5L, 0xC021B8F7L,
  537. 0x9B540B19L, 0x875FA099L, 0x95F7997EL, 0x623D7DA8L,
  538. 0xF837889AL, 0x97E32D77L, 0x11ED935FL, 0x16681281L,
  539. 0x0E358829L, 0xC7E61FD6L, 0x96DEDFA1L, 0x7858BA99L,
  540. 0x57F584A5L, 0x1B227263L, 0x9B83C3FFL, 0x1AC24696L,
  541. 0xCDB30AEBL, 0x532E3054L, 0x8FD948E4L, 0x6DBC3128L,
  542. 0x58EBF2EFL, 0x34C6FFEAL, 0xFE28ED61L, 0xEE7C3C73L,
  543. 0x5D4A14D9L, 0xE864B7E3L, 0x42105D14L, 0x203E13E0L,
  544. 0x45EEE2B6L, 0xA3AAABEAL, 0xDB6C4F15L, 0xFACB4FD0L,
  545. 0xC742F442L, 0xEF6ABBB5L, 0x654F3B1DL, 0x41CD2105L,
  546. 0xD81E799EL, 0x86854DC7L, 0xE44B476AL, 0x3D816250L,
  547. 0xCF62A1F2L, 0x5B8D2646L, 0xFC8883A0L, 0xC1C7B6A3L,
  548. 0x7F1524C3L, 0x69CB7492L, 0x47848A0BL, 0x5692B285L,
  549. 0x095BBF00L, 0xAD19489DL, 0x1462B174L, 0x23820E00L,
  550. 0x58428D2AL, 0x0C55F5EAL, 0x1DADF43EL, 0x233F7061L,
  551. 0x3372F092L, 0x8D937E41L, 0xD65FECF1L, 0x6C223BDBL,
  552. 0x7CDE3759L, 0xCBEE7460L, 0x4085F2A7L, 0xCE77326EL,
  553. 0xA6078084L, 0x19F8509EL, 0xE8EFD855L, 0x61D99735L,
  554. 0xA969A7AAL, 0xC50C06C2L, 0x5A04ABFCL, 0x800BCADCL,
  555. 0x9E447A2EL, 0xC3453484L, 0xFDD56705L, 0x0E1E9EC9L,
  556. 0xDB73DBD3L, 0x105588CDL, 0x675FDA79L, 0xE3674340L,
  557. 0xC5C43465L, 0x713E38D8L, 0x3D28F89EL, 0xF16DFF20L,
  558. 0x153E21E7L, 0x8FB03D4AL, 0xE6E39F2BL, 0xDB83ADF7L
  559. }, {
  560. 0xE93D5A68L, 0x948140F7L, 0xF64C261CL, 0x94692934L,
  561. 0x411520F7L, 0x7602D4F7L, 0xBCF46B2EL, 0xD4A20068L,
  562. 0xD4082471L, 0x3320F46AL, 0x43B7D4B7L, 0x500061AFL,
  563. 0x1E39F62EL, 0x97244546L, 0x14214F74L, 0xBF8B8840L,
  564. 0x4D95FC1DL, 0x96B591AFL, 0x70F4DDD3L, 0x66A02F45L,
  565. 0xBFBC09ECL, 0x03BD9785L, 0x7FAC6DD0L, 0x31CB8504L,
  566. 0x96EB27B3L, 0x55FD3941L, 0xDA2547E6L, 0xABCA0A9AL,
  567. 0x28507825L, 0x530429F4L, 0x0A2C86DAL, 0xE9B66DFBL,
  568. 0x68DC1462L, 0xD7486900L, 0x680EC0A4L, 0x27A18DEEL,
  569. 0x4F3FFEA2L, 0xE887AD8CL, 0xB58CE006L, 0x7AF4D6B6L,
  570. 0xAACE1E7CL, 0xD3375FECL, 0xCE78A399L, 0x406B2A42L,
  571. 0x20FE9E35L, 0xD9F385B9L, 0xEE39D7ABL, 0x3B124E8BL,
  572. 0x1DC9FAF7L, 0x4B6D1856L, 0x26A36631L, 0xEAE397B2L,
  573. 0x3A6EFA74L, 0xDD5B4332L, 0x6841E7F7L, 0xCA7820FBL,
  574. 0xFB0AF54EL, 0xD8FEB397L, 0x454056ACL, 0xBA489527L,
  575. 0x55533A3AL, 0x20838D87L, 0xFE6BA9B7L, 0xD096954BL,
  576. 0x55A867BCL, 0xA1159A58L, 0xCCA92963L, 0x99E1DB33L,
  577. 0xA62A4A56L, 0x3F3125F9L, 0x5EF47E1CL, 0x9029317CL,
  578. 0xFDF8E802L, 0x04272F70L, 0x80BB155CL, 0x05282CE3L,
  579. 0x95C11548L, 0xE4C66D22L, 0x48C1133FL, 0xC70F86DCL,
  580. 0x07F9C9EEL, 0x41041F0FL, 0x404779A4L, 0x5D886E17L,
  581. 0x325F51EBL, 0xD59BC0D1L, 0xF2BCC18FL, 0x41113564L,
  582. 0x257B7834L, 0x602A9C60L, 0xDFF8E8A3L, 0x1F636C1BL,
  583. 0x0E12B4C2L, 0x02E1329EL, 0xAF664FD1L, 0xCAD18115L,
  584. 0x6B2395E0L, 0x333E92E1L, 0x3B240B62L, 0xEEBEB922L,
  585. 0x85B2A20EL, 0xE6BA0D99L, 0xDE720C8CL, 0x2DA2F728L,
  586. 0xD0127845L, 0x95B794FDL, 0x647D0862L, 0xE7CCF5F0L,
  587. 0x5449A36FL, 0x877D48FAL, 0xC39DFD27L, 0xF33E8D1EL,
  588. 0x0A476341L, 0x992EFF74L, 0x3A6F6EABL, 0xF4F8FD37L,
  589. 0xA812DC60L, 0xA1EBDDF8L, 0x991BE14CL, 0xDB6E6B0DL,
  590. 0xC67B5510L, 0x6D672C37L, 0x2765D43BL, 0xDCD0E804L,
  591. 0xF1290DC7L, 0xCC00FFA3L, 0xB5390F92L, 0x690FED0BL,
  592. 0x667B9FFBL, 0xCEDB7D9CL, 0xA091CF0BL, 0xD9155EA3L,
  593. 0xBB132F88L, 0x515BAD24L, 0x7B9479BFL, 0x763BD6EBL,
  594. 0x37392EB3L, 0xCC115979L, 0x8026E297L, 0xF42E312DL,
  595. 0x6842ADA7L, 0xC66A2B3BL, 0x12754CCCL, 0x782EF11CL,
  596. 0x6A124237L, 0xB79251E7L, 0x06A1BBE6L, 0x4BFB6350L,
  597. 0x1A6B1018L, 0x11CAEDFAL, 0x3D25BDD8L, 0xE2E1C3C9L,
  598. 0x44421659L, 0x0A121386L, 0xD90CEC6EL, 0xD5ABEA2AL,
  599. 0x64AF674EL, 0xDA86A85FL, 0xBEBFE988L, 0x64E4C3FEL,
  600. 0x9DBC8057L, 0xF0F7C086L, 0x60787BF8L, 0x6003604DL,
  601. 0xD1FD8346L, 0xF6381FB0L, 0x7745AE04L, 0xD736FCCCL,
  602. 0x83426B33L, 0xF01EAB71L, 0xB0804187L, 0x3C005E5FL,
  603. 0x77A057BEL, 0xBDE8AE24L, 0x55464299L, 0xBF582E61L,
  604. 0x4E58F48FL, 0xF2DDFDA2L, 0xF474EF38L, 0x8789BDC2L,
  605. 0x5366F9C3L, 0xC8B38E74L, 0xB475F255L, 0x46FCD9B9L,
  606. 0x7AEB2661L, 0x8B1DDF84L, 0x846A0E79L, 0x915F95E2L,
  607. 0x466E598EL, 0x20B45770L, 0x8CD55591L, 0xC902DE4CL,
  608. 0xB90BACE1L, 0xBB8205D0L, 0x11A86248L, 0x7574A99EL,
  609. 0xB77F19B6L, 0xE0A9DC09L, 0x662D09A1L, 0xC4324633L,
  610. 0xE85A1F02L, 0x09F0BE8CL, 0x4A99A025L, 0x1D6EFE10L,
  611. 0x1AB93D1DL, 0x0BA5A4DFL, 0xA186F20FL, 0x2868F169L,
  612. 0xDCB7DA83L, 0x573906FEL, 0xA1E2CE9BL, 0x4FCD7F52L,
  613. 0x50115E01L, 0xA70683FAL, 0xA002B5C4L, 0x0DE6D027L,
  614. 0x9AF88C27L, 0x773F8641L, 0xC3604C06L, 0x61A806B5L,
  615. 0xF0177A28L, 0xC0F586E0L, 0x006058AAL, 0x30DC7D62L,
  616. 0x11E69ED7L, 0x2338EA63L, 0x53C2DD94L, 0xC2C21634L,
  617. 0xBBCBEE56L, 0x90BCB6DEL, 0xEBFC7DA1L, 0xCE591D76L,
  618. 0x6F05E409L, 0x4B7C0188L, 0x39720A3DL, 0x7C927C24L,
  619. 0x86E3725FL, 0x724D9DB9L, 0x1AC15BB4L, 0xD39EB8FCL,
  620. 0xED545578L, 0x08FCA5B5L, 0xD83D7CD3L, 0x4DAD0FC4L,
  621. 0x1E50EF5EL, 0xB161E6F8L, 0xA28514D9L, 0x6C51133CL,
  622. 0x6FD5C7E7L, 0x56E14EC4L, 0x362ABFCEL, 0xDDC6C837L,
  623. 0xD79A3234L, 0x92638212L, 0x670EFA8EL, 0x406000E0L
  624. }, {
  625. 0x3A39CE37L, 0xD3FAF5CFL, 0xABC27737L, 0x5AC52D1BL,
  626. 0x5CB0679EL, 0x4FA33742L, 0xD3822740L, 0x99BC9BBEL,
  627. 0xD5118E9DL, 0xBF0F7315L, 0xD62D1C7EL, 0xC700C47BL,
  628. 0xB78C1B6BL, 0x21A19045L, 0xB26EB1BEL, 0x6A366EB4L,
  629. 0x5748AB2FL, 0xBC946E79L, 0xC6A376D2L, 0x6549C2C8L,
  630. 0x530FF8EEL, 0x468DDE7DL, 0xD5730A1DL, 0x4CD04DC6L,
  631. 0x2939BBDBL, 0xA9BA4650L, 0xAC9526E8L, 0xBE5EE304L,
  632. 0xA1FAD5F0L, 0x6A2D519AL, 0x63EF8CE2L, 0x9A86EE22L,
  633. 0xC089C2B8L, 0x43242EF6L, 0xA51E03AAL, 0x9CF2D0A4L,
  634. 0x83C061BAL, 0x9BE96A4DL, 0x8FE51550L, 0xBA645BD6L,
  635. 0x2826A2F9L, 0xA73A3AE1L, 0x4BA99586L, 0xEF5562E9L,
  636. 0xC72FEFD3L, 0xF752F7DAL, 0x3F046F69L, 0x77FA0A59L,
  637. 0x80E4A915L, 0x87B08601L, 0x9B09E6ADL, 0x3B3EE593L,
  638. 0xE990FD5AL, 0x9E34D797L, 0x2CF0B7D9L, 0x022B8B51L,
  639. 0x96D5AC3AL, 0x017DA67DL, 0xD1CF3ED6L, 0x7C7D2D28L,
  640. 0x1F9F25CFL, 0xADF2B89BL, 0x5AD6B472L, 0x5A88F54CL,
  641. 0xE029AC71L, 0xE019A5E6L, 0x47B0ACFDL, 0xED93FA9BL,
  642. 0xE8D3C48DL, 0x283B57CCL, 0xF8D56629L, 0x79132E28L,
  643. 0x785F0191L, 0xED756055L, 0xF7960E44L, 0xE3D35E8CL,
  644. 0x15056DD4L, 0x88F46DBAL, 0x03A16125L, 0x0564F0BDL,
  645. 0xC3EB9E15L, 0x3C9057A2L, 0x97271AECL, 0xA93A072AL,
  646. 0x1B3F6D9BL, 0x1E6321F5L, 0xF59C66FBL, 0x26DCF319L,
  647. 0x7533D928L, 0xB155FDF5L, 0x03563482L, 0x8ABA3CBBL,
  648. 0x28517711L, 0xC20AD9F8L, 0xABCC5167L, 0xCCAD925FL,
  649. 0x4DE81751L, 0x3830DC8EL, 0x379D5862L, 0x9320F991L,
  650. 0xEA7A90C2L, 0xFB3E7BCEL, 0x5121CE64L, 0x774FBE32L,
  651. 0xA8B6E37EL, 0xC3293D46L, 0x48DE5369L, 0x6413E680L,
  652. 0xA2AE0810L, 0xDD6DB224L, 0x69852DFDL, 0x09072166L,
  653. 0xB39A460AL, 0x6445C0DDL, 0x586CDECFL, 0x1C20C8AEL,
  654. 0x5BBEF7DDL, 0x1B588D40L, 0xCCD2017FL, 0x6BB4E3BBL,
  655. 0xDDA26A7EL, 0x3A59FF45L, 0x3E350A44L, 0xBCB4CDD5L,
  656. 0x72EACEA8L, 0xFA6484BBL, 0x8D6612AEL, 0xBF3C6F47L,
  657. 0xD29BE463L, 0x542F5D9EL, 0xAEC2771BL, 0xF64E6370L,
  658. 0x740E0D8DL, 0xE75B1357L, 0xF8721671L, 0xAF537D5DL,
  659. 0x4040CB08L, 0x4EB4E2CCL, 0x34D2466AL, 0x0115AF84L,
  660. 0xE1B00428L, 0x95983A1DL, 0x06B89FB4L, 0xCE6EA048L,
  661. 0x6F3F3B82L, 0x3520AB82L, 0x011A1D4BL, 0x277227F8L,
  662. 0x611560B1L, 0xE7933FDCL, 0xBB3A792BL, 0x344525BDL,
  663. 0xA08839E1L, 0x51CE794BL, 0x2F32C9B7L, 0xA01FBAC9L,
  664. 0xE01CC87EL, 0xBCC7D1F6L, 0xCF0111C3L, 0xA1E8AAC7L,
  665. 0x1A908749L, 0xD44FBD9AL, 0xD0DADECBL, 0xD50ADA38L,
  666. 0x0339C32AL, 0xC6913667L, 0x8DF9317CL, 0xE0B12B4FL,
  667. 0xF79E59B7L, 0x43F5BB3AL, 0xF2D519FFL, 0x27D9459CL,
  668. 0xBF97222CL, 0x15E6FC2AL, 0x0F91FC71L, 0x9B941525L,
  669. 0xFAE59361L, 0xCEB69CEBL, 0xC2A86459L, 0x12BAA8D1L,
  670. 0xB6C1075EL, 0xE3056A0CL, 0x10D25065L, 0xCB03A442L,
  671. 0xE0EC6E0EL, 0x1698DB3BL, 0x4C98A0BEL, 0x3278E964L,
  672. 0x9F1F9532L, 0xE0D392DFL, 0xD3A0342BL, 0x8971F21EL,
  673. 0x1B0A7441L, 0x4BA3348CL, 0xC5BE7120L, 0xC37632D8L,
  674. 0xDF359F8DL, 0x9B992F2EL, 0xE60B6F47L, 0x0FE3F11DL,
  675. 0xE54CDA54L, 0x1EDAD891L, 0xCE6279CFL, 0xCD3E7E6FL,
  676. 0x1618B166L, 0xFD2C1D05L, 0x848FD2C5L, 0xF6FB2299L,
  677. 0xF523F357L, 0xA6327623L, 0x93A83531L, 0x56CCCD02L,
  678. 0xACF08162L, 0x5A75EBB5L, 0x6E163697L, 0x88D273CCL,
  679. 0xDE966292L, 0x81B949D0L, 0x4C50901BL, 0x71C65614L,
  680. 0xE6C6C7BDL, 0x327A140AL, 0x45E1D006L, 0xC3F27B9AL,
  681. 0xC9AA53FDL, 0x62A80F00L, 0xBB25BFE2L, 0x35BDD2F6L,
  682. 0x71126905L, 0xB2040222L, 0xB6CBCF7CL, 0xCD769C2BL,
  683. 0x53113EC0L, 0x1640E3D3L, 0x38ABBD60L, 0x2547ADF0L,
  684. 0xBA38209CL, 0xF746CE76L, 0x77AFA1C5L, 0x20756060L,
  685. 0x85CBFE4EL, 0x8AE88DD8L, 0x7AAAF9B0L, 0x4CF9AA7EL,
  686. 0x1948C25CL, 0x02FB8A8CL, 0x01C36AE4L, 0xD6EBE1F9L,
  687. 0x90D4F869L, 0xA65CDEA0L, 0x3F09252DL, 0xC208E69FL,
  688. 0xB74E6132L, 0xCE77E25BL, 0x578FDFE3L, 0x3AC372E6L
  689. }
  690. };
  691. static uint BF(WebsBlowfish *bp, uint x)
  692. {
  693. ushort a, b, c, d;
  694. uint y;
  695. d = x & 0x00FF;
  696. x >>= 8;
  697. c = x & 0x00FF;
  698. x >>= 8;
  699. b = x & 0x00FF;
  700. x >>= 8;
  701. a = x & 0x00FF;
  702. y = bp->S[0][a] + bp->S[1][b];
  703. y = y ^ bp->S[2][c];
  704. y = y + bp->S[3][d];
  705. return y;
  706. }
  707. static void bencrypt(WebsBlowfish *bp, uint *xl, uint *xr)
  708. {
  709. uint Xl, Xr, temp;
  710. int i;
  711. Xl = *xl;
  712. Xr = *xr;
  713. for (i = 0; i < BF_ROUNDS; ++i) {
  714. Xl = Xl ^ bp->P[i];
  715. Xr = BF(bp, Xl) ^ Xr;
  716. temp = Xl;
  717. Xl = Xr;
  718. Xr = temp;
  719. }
  720. temp = Xl;
  721. Xl = Xr;
  722. Xr = temp;
  723. Xr = Xr ^ bp->P[BF_ROUNDS];
  724. Xl = Xl ^ bp->P[BF_ROUNDS + 1];
  725. *xl = Xl;
  726. *xr = Xr;
  727. }
  728. #if KEEP
  729. static void bdecrypt(WebsBlowfish *bp, uint *xl, uint *xr)
  730. {
  731. uint Xl, Xr, temp;
  732. int i;
  733. Xl = *xl;
  734. Xr = *xr;
  735. for (i = BF_ROUNDS + 1; i > 1; --i) {
  736. Xl = Xl ^ bp->P[i];
  737. Xr = BF(bp, Xl) ^ Xr;
  738. temp = Xl;
  739. Xl = Xr;
  740. Xr = temp;
  741. }
  742. temp = Xl;
  743. Xl = Xr;
  744. Xr = temp;
  745. Xr = Xr ^ bp->P[1];
  746. Xl = Xl ^ bp->P[0];
  747. *xl = Xl;
  748. *xr = Xr;
  749. }
  750. #endif
  751. static void binit(WebsBlowfish *bp, uchar *key, ssize keylen)
  752. {
  753. uint data, datal, datar;
  754. int i, j, k;
  755. for (i = 0; i < 4; i++) {
  756. for (j = 0; j < 256; j++) {
  757. bp->S[i][j] = ORIG_S[i][j];
  758. }
  759. }
  760. for (j = i = 0; i < BF_ROUNDS + 2; ++i) {
  761. for (data = 0, k = 0; k < 4; ++k) {
  762. data = (data << 8) | key[j];
  763. j = j + 1;
  764. if (j >= keylen) {
  765. j = 0;
  766. }
  767. }
  768. bp->P[i] = ORIG_P[i] ^ data;
  769. }
  770. datal = datar = 0;
  771. for (i = 0; i < BF_ROUNDS + 2; i += 2) {
  772. bencrypt(bp, &datal, &datar);
  773. bp->P[i] = datal;
  774. bp->P[i + 1] = datar;
  775. }
  776. for (i = 0; i < 4; ++i) {
  777. for (j = 0; j < 256; j += 2) {
  778. bencrypt(bp, &datal, &datar);
  779. bp->S[i][j] = datal;
  780. bp->S[i][j + 1] = datar;
  781. }
  782. }
  783. }
  784. /*
  785. Text: "OrpheanBeholderScryDoubt"
  786. */
  787. static uint cipherText[6] = {
  788. 0x4f727068, 0x65616e42, 0x65686f6c,
  789. 0x64657253, 0x63727944, 0x6f756274
  790. };
  791. PUBLIC int websGetRandomBytes(char *buf, ssize length, bool block)
  792. {
  793. #if ME_UNIX_LIKE
  794. ssize sofar, rc;
  795. int fd;
  796. if ((fd = open((block) ? "/dev/random" : "/dev/urandom", O_RDONLY, 0666)) < 0) {
  797. return -1;
  798. }
  799. sofar = 0;
  800. do {
  801. rc = read(fd, &buf[sofar], length);
  802. if (rc < 0) {
  803. assert(0);
  804. close(fd);
  805. return -1;
  806. }
  807. length -= rc;
  808. sofar += rc;
  809. } while (length > 0);
  810. close(fd);
  811. #elif ME_WIN_LIKE
  812. HCRYPTPROV prov;
  813. int rc;
  814. rc = 0;
  815. if (!CryptAcquireContext(&prov, NULL, NULL, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT | 0x40)) {
  816. return -1;
  817. }
  818. if (!CryptGenRandom(prov, (wsize) length, buf)) {
  819. rc = -1;
  820. }
  821. CryptReleaseContext(prov, 0);
  822. return rc;
  823. #else
  824. int i;
  825. for (i = 0; i < length; i++) {
  826. buf[i] = (char) (rand() & 0xff);
  827. }
  828. #endif
  829. return 0;
  830. }
  831. PUBLIC char *websCryptPassword(cchar *password, cchar *salt, int rounds)
  832. {
  833. WebsBlowfish bf;
  834. char *result, *key;
  835. uint *text;
  836. ssize len, limit;
  837. int i, j;
  838. if (slen(password) > WEBS_MAX_PASSWORD) {
  839. return 0;
  840. }
  841. key = sfmt("%s:%s", salt, password);
  842. binit(&bf, (uchar*) key, slen(key));
  843. len = sizeof(cipherText);
  844. text = wdup(cipherText, len);
  845. for (i = 0; i < rounds; i++) {
  846. limit = len / sizeof(uint);
  847. for (j = 0; j < limit; j += 2) {
  848. bencrypt(&bf, &text[j], &text[j + 1]);
  849. }
  850. }
  851. result = websEncode64Block((char*) text, len);
  852. memset(&bf, 0, sizeof(bf));
  853. memset(text, 0, len);
  854. wfree(text);
  855. wfree(key);
  856. return result;
  857. }
  858. PUBLIC char *websMakeSalt(ssize size)
  859. {
  860. char *chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
  861. char *rp, *result, *random;
  862. ssize clen, i;
  863. size = (size + sizeof(int) - 1) & ~(sizeof(int) - 1);
  864. random = walloc(size + 1);
  865. result = walloc(size + 1);
  866. if (websGetRandomBytes(random, size, 0) < 0) {
  867. wfree(random);
  868. wfree(result);
  869. return 0;
  870. }
  871. clen = slen(chars);
  872. for (i = 0, rp = result; i < size; i++) {
  873. *rp++ = chars[(random[i] & 0x7F) % clen];
  874. }
  875. *rp = '\0';
  876. wfree(random);
  877. return result;
  878. }
  879. /*
  880. Format of hashed password is:
  881. Algorithm: Rounds: Salt: Hash
  882. */
  883. PUBLIC char *websMakePassword(cchar *password, int saltLength, int rounds)
  884. {
  885. char *salt;
  886. if (slen(password) > WEBS_MAX_PASSWORD) {
  887. return 0;
  888. }
  889. if (saltLength <= 0) {
  890. saltLength = BLOWFISH_SALT_LENGTH;
  891. }
  892. if (rounds <= 0) {
  893. rounds = BLOWFISH_ROUNDS;
  894. }
  895. salt = websMakeSalt(saltLength);
  896. return sfmt("BF1:%05d:%s:%s", rounds, salt, websCryptPassword(password, salt, rounds));
  897. }
  898. PUBLIC bool websCheckPassword(cchar *plainTextPassword, cchar *passwordHash)
  899. {
  900. char *given, *rounds, *salt, *s1, *s2, *tok, *hash, *ph;
  901. ssize match;
  902. if (!passwordHash || !plainTextPassword) {
  903. return 0;
  904. }
  905. if (slen(plainTextPassword) > WEBS_MAX_PASSWORD) {
  906. return 0;
  907. }
  908. ph = sclone(passwordHash);
  909. stok(ph, ":", &tok);
  910. rounds = stok(NULL, ":", &tok);
  911. salt = stok(NULL, ":", &tok);
  912. hash = stok(NULL, ":", &tok);
  913. if (!rounds || !salt || !hash) {
  914. wfree(ph);
  915. return 0;
  916. }
  917. given = websCryptPassword(plainTextPassword, salt, atoi(rounds));
  918. match = slen(given) ^ slen(hash);
  919. for (s1 = given, s2 = hash; *s1 && *s2; s1++, s2++) {
  920. match |= (*s1 & 0xFF) ^ (*s2 & 0xFF);
  921. }
  922. wfree(ph);
  923. return !match;
  924. }
  925. PUBLIC char *websReadPassword(cchar *prompt)
  926. {
  927. char *cp, *password, *result;
  928. #if ME_BSD_LIKE
  929. char passbuf[WEBS_MAX_PASSWORD];
  930. if (!prompt || !*prompt) {
  931. prompt = "Password: ";
  932. }
  933. if ((password = readpassphrase(prompt, passbuf, sizeof(passbuf), 0)) == 0) {
  934. return 0;
  935. }
  936. #elif ME_UNIX_LIKE
  937. if (!prompt || !*prompt) {
  938. prompt = "Password: ";
  939. }
  940. if ((password = getpass(prompt)) == 0) {
  941. return 0;
  942. }
  943. #elif ME_WIN_LIKE || VXWORKS
  944. char passbuf[WEBS_MAX_PASSWORD];
  945. int c, i;
  946. if (!prompt || !*prompt) {
  947. prompt = "Password: ";
  948. }
  949. fputs(prompt, stdout);
  950. for (i = 0; i < (int) sizeof(passbuf) - 1; i++) {
  951. #if VXWORKS
  952. c = getchar();
  953. #else
  954. c = _getch();
  955. #endif
  956. if (c == '\r' || c == EOF) {
  957. break;
  958. }
  959. if ((c == '\b' || c == 127) && i > 0) {
  960. passbuf[--i] = '\0';
  961. fputs("\b \b", stdout);
  962. i--;
  963. } else if (c == 26) { /* Control Z */
  964. c = EOF;
  965. break;
  966. } else if (c == 3) { /* Control C */
  967. fputs("^C\n", stdout);
  968. exit(255);
  969. } else if (!iscntrl((uchar) c) && (i < (int) sizeof(passbuf) - 1)) {
  970. passbuf[i] = c;
  971. fputc('*', stdout);
  972. } else {
  973. fputc('', stdout);
  974. i--;
  975. }
  976. }
  977. if (c == EOF) {
  978. return "";
  979. }
  980. fputc('\n', stdout);
  981. passbuf[i] = '\0';
  982. password = passbuf;
  983. #else
  984. return 0;
  985. #endif
  986. result = sclone(password);
  987. for (cp = password; *cp; cp++) {
  988. *cp = 0;
  989. }
  990. return result;
  991. }
  992. /*
  993. Copyright (c) Embedthis Software. All Rights Reserved.
  994. This software is distributed under commercial and open source licenses.
  995. You may use the Embedthis GoAhead open source license or you may acquire
  996. a commercial license from Embedthis Software. You agree to be fully bound
  997. by the terms of either license. Consult the LICENSE.md distributed with
  998. this software for full details and other copyrights.
  999. */