7#ifndef SECP256K1_HASH_IMPL_H
8#define SECP256K1_HASH_IMPL_H
17#define Ch(x,y,z) ((z) ^ ((x) & ((y) ^ (z))))
18#define Maj(x,y,z) (((x) & (y)) | ((z) & ((x) | (y))))
19#define Sigma0(x) (((x) >> 2 | (x) << 30) ^ ((x) >> 13 | (x) << 19) ^ ((x) >> 22 | (x) << 10))
20#define Sigma1(x) (((x) >> 6 | (x) << 26) ^ ((x) >> 11 | (x) << 21) ^ ((x) >> 25 | (x) << 7))
21#define sigma0(x) (((x) >> 7 | (x) << 25) ^ ((x) >> 18 | (x) << 14) ^ ((x) >> 3))
22#define sigma1(x) (((x) >> 17 | (x) << 15) ^ ((x) >> 19 | (x) << 13) ^ ((x) >> 10))
24#define Round(a,b,c,d,e,f,g,h,k,w) do { \
25 uint32_t t1 = (h) + Sigma1(e) + Ch((e), (f), (g)) + (k) + (w); \
26 uint32_t t2 = Sigma0(a) + Maj((a), (b), (c)); \
32 hash->
s[0] = 0x6a09e667ul;
33 hash->
s[1] = 0xbb67ae85ul;
34 hash->
s[2] = 0x3c6ef372ul;
35 hash->
s[3] = 0xa54ff53aul;
36 hash->
s[4] = 0x510e527ful;
37 hash->
s[5] = 0x9b05688cul;
38 hash->
s[6] = 0x1f83d9abul;
39 hash->
s[7] = 0x5be0cd19ul;
45 uint32_t a =
s[0], b =
s[1], c =
s[2], d =
s[3], e =
s[4], f =
s[5],
g =
s[6], h =
s[7];
46 uint32_t w0, w1, w2, w3, w4, w5, w6, w7, w8, w9, w10, w11, w12, w13, w14, w15;
127 size_t bufsize = hash->
bytes & 0x3F;
130 while (len >= 64 - bufsize) {
132 size_t chunk_len = 64 - bufsize;
133 memcpy(hash->
buf + bufsize,
data, chunk_len);
141 memcpy(hash->
buf + bufsize,
data, len);
146 static const unsigned char pad[64] = {0x80};
147 unsigned char sizedesc[8];
155 for (i = 0; i < 8; i++) {
164 unsigned char buf[32];
180 unsigned char rkey[64];
181 if (keylen <=
sizeof(rkey)) {
182 memcpy(rkey, key, keylen);
183 memset(rkey + keylen, 0,
sizeof(rkey) - keylen);
189 memset(rkey + 32, 0, 32);
193 for (n = 0; n <
sizeof(rkey); n++) {
199 for (n = 0; n <
sizeof(rkey); n++) {
200 rkey[n] ^= 0x5c ^ 0x36;
211 unsigned char temp[32];
224 static const unsigned char zero[1] = {0x00};
225 static const unsigned char one[1] = {0x01};
227 memset(rng->
v, 0x01, 32);
228 memset(rng->
k, 0x00, 32);
254 static const unsigned char zero[1] = {0x00};
275 memcpy(
out, rng->
v, now);
static void secp256k1_sha256_initialize(secp256k1_sha256 *hash)
static void secp256k1_rfc6979_hmac_sha256_generate(secp256k1_rfc6979_hmac_sha256 *rng, unsigned char *out, size_t outlen)
static void secp256k1_sha256_transform(uint32_t *s, const unsigned char *buf)
Perform one SHA-256 transformation, processing 16 big endian 32-bit words.
static void secp256k1_hmac_sha256_finalize(secp256k1_hmac_sha256 *hash, unsigned char *out32)
static void secp256k1_hmac_sha256_clear(secp256k1_hmac_sha256 *hash)
#define Round(a, b, c, d, e, f, g, h, k, w)
static void secp256k1_sha256_finalize(secp256k1_sha256 *hash, unsigned char *out32)
static void secp256k1_rfc6979_hmac_sha256_clear(secp256k1_rfc6979_hmac_sha256 *rng)
static void secp256k1_rfc6979_hmac_sha256_initialize(secp256k1_rfc6979_hmac_sha256 *rng, const unsigned char *key, size_t keylen)
static void secp256k1_rfc6979_hmac_sha256_finalize(secp256k1_rfc6979_hmac_sha256 *rng)
static void secp256k1_sha256_write(secp256k1_sha256 *hash, const unsigned char *data, size_t len)
static void secp256k1_hmac_sha256_write(secp256k1_hmac_sha256 *hash, const unsigned char *data, size_t size)
static void secp256k1_sha256_initialize_tagged(secp256k1_sha256 *hash, const unsigned char *tag, size_t taglen)
static void secp256k1_sha256_clear(secp256k1_sha256 *hash)
static void secp256k1_hmac_sha256_initialize(secp256k1_hmac_sha256 *hash, const unsigned char *key, size_t keylen)
Internal SHA-256 implementation.
static SECP256K1_INLINE uint32_t secp256k1_read_be32(const unsigned char *p)
static SECP256K1_INLINE void secp256k1_write_be32(unsigned char *p, uint32_t x)
static SECP256K1_INLINE void secp256k1_memclear(void *ptr, size_t len)
#define VERIFY_CHECK(cond)