using System; using Org.BouncyCastle.Crypto.Utilities; using Org.BouncyCastle.Utilities; namespace Org.BouncyCastle.Crypto.Digests; public class Sha256Digest : GeneralDigest { private const int DigestLength = 32; private uint H1; private uint H2; private uint H3; private uint H4; private uint H5; private uint H6; private uint H7; private uint H8; private uint[] X = new uint[64]; private int xOff; private static readonly uint[] K = new uint[64] { 1116352408u, 1899447441u, 3049323471u, 3921009573u, 961987163u, 1508970993u, 2453635748u, 2870763221u, 3624381080u, 310598401u, 607225278u, 1426881987u, 1925078388u, 2162078206u, 2614888103u, 3248222580u, 3835390401u, 4022224774u, 264347078u, 604807628u, 770255983u, 1249150122u, 1555081692u, 1996064986u, 2554220882u, 2821834349u, 2952996808u, 3210313671u, 3336571891u, 3584528711u, 113926993u, 338241895u, 666307205u, 773529912u, 1294757372u, 1396182291u, 1695183700u, 1986661051u, 2177026350u, 2456956037u, 2730485921u, 2820302411u, 3259730800u, 3345764771u, 3516065817u, 3600352804u, 4094571909u, 275423344u, 430227734u, 506948616u, 659060556u, 883997877u, 958139571u, 1322822218u, 1537002063u, 1747873779u, 1955562222u, 2024104815u, 2227730452u, 2361852424u, 2428436474u, 2756734187u, 3204031479u, 3329325298u }; public override string AlgorithmName => "SHA-256"; public Sha256Digest() { initHs(); } public Sha256Digest(Sha256Digest t) : base(t) { CopyIn(t); } private void CopyIn(Sha256Digest t) { CopyIn((GeneralDigest)t); H1 = t.H1; H2 = t.H2; H3 = t.H3; H4 = t.H4; H5 = t.H5; H6 = t.H6; H7 = t.H7; H8 = t.H8; Array.Copy(t.X, 0, X, 0, t.X.Length); xOff = t.xOff; } public override int GetDigestSize() { return 32; } internal override void ProcessWord(byte[] input, int inOff) { X[xOff] = Pack.BE_To_UInt32(input, inOff); if (++xOff == 16) { ProcessBlock(); } } internal override void ProcessLength(long bitLength) { if (xOff > 14) { ProcessBlock(); } X[14] = (uint)((ulong)bitLength >> 32); X[15] = (uint)bitLength; } public override int DoFinal(byte[] output, int outOff) { Finish(); Pack.UInt32_To_BE(H1, output, outOff); Pack.UInt32_To_BE(H2, output, outOff + 4); Pack.UInt32_To_BE(H3, output, outOff + 8); Pack.UInt32_To_BE(H4, output, outOff + 12); Pack.UInt32_To_BE(H5, output, outOff + 16); Pack.UInt32_To_BE(H6, output, outOff + 20); Pack.UInt32_To_BE(H7, output, outOff + 24); Pack.UInt32_To_BE(H8, output, outOff + 28); Reset(); return 32; } public override void Reset() { base.Reset(); initHs(); xOff = 0; Array.Clear(X, 0, X.Length); } private void initHs() { H1 = 1779033703u; H2 = 3144134277u; H3 = 1013904242u; H4 = 2773480762u; H5 = 1359893119u; H6 = 2600822924u; H7 = 528734635u; H8 = 1541459225u; } internal override void ProcessBlock() { for (int i = 16; i <= 63; i++) { X[i] = Theta1(X[i - 2]) + X[i - 7] + Theta0(X[i - 15]) + X[i - 16]; } uint num = H1; uint num2 = H2; uint num3 = H3; uint num4 = H4; uint num5 = H5; uint num6 = H6; uint num7 = H7; uint num8 = H8; int num9 = 0; for (int j = 0; j < 8; j++) { num8 += Sum1Ch(num5, num6, num7) + K[num9] + X[num9]; num4 += num8; num8 += Sum0Maj(num, num2, num3); num9++; num7 += Sum1Ch(num4, num5, num6) + K[num9] + X[num9]; num3 += num7; num7 += Sum0Maj(num8, num, num2); num9++; num6 += Sum1Ch(num3, num4, num5) + K[num9] + X[num9]; num2 += num6; num6 += Sum0Maj(num7, num8, num); num9++; num5 += Sum1Ch(num2, num3, num4) + K[num9] + X[num9]; num += num5; num5 += Sum0Maj(num6, num7, num8); num9++; num4 += Sum1Ch(num, num2, num3) + K[num9] + X[num9]; num8 += num4; num4 += Sum0Maj(num5, num6, num7); num9++; num3 += Sum1Ch(num8, num, num2) + K[num9] + X[num9]; num7 += num3; num3 += Sum0Maj(num4, num5, num6); num9++; num2 += Sum1Ch(num7, num8, num) + K[num9] + X[num9]; num6 += num2; num2 += Sum0Maj(num3, num4, num5); num9++; num += Sum1Ch(num6, num7, num8) + K[num9] + X[num9]; num5 += num; num += Sum0Maj(num2, num3, num4); num9++; } H1 += num; H2 += num2; H3 += num3; H4 += num4; H5 += num5; H6 += num6; H7 += num7; H8 += num8; xOff = 0; Array.Clear(X, 0, 16); } private static uint Sum1Ch(uint x, uint y, uint z) { return (((x >> 6) | (x << 26)) ^ ((x >> 11) | (x << 21)) ^ ((x >> 25) | (x << 7))) + ((x & y) ^ (~x & z)); } private static uint Sum0Maj(uint x, uint y, uint z) { return (((x >> 2) | (x << 30)) ^ ((x >> 13) | (x << 19)) ^ ((x >> 22) | (x << 10))) + ((x & y) ^ (x & z) ^ (y & z)); } private static uint Theta0(uint x) { return ((x >> 7) | (x << 25)) ^ ((x >> 18) | (x << 14)) ^ (x >> 3); } private static uint Theta1(uint x) { return ((x >> 17) | (x << 15)) ^ ((x >> 19) | (x << 13)) ^ (x >> 10); } public override IMemoable Copy() { return new Sha256Digest(this); } public override void Reset(IMemoable other) { Sha256Digest t = (Sha256Digest)other; CopyIn(t); } }