FreeRTOS-Plus/Source/CyaSSL/ctaocrypt/src/ripemd.c - nest-detect/1.0.1/freertos - Git at Google

 /* ripemd.c
  *
  * Copyright (C) 2006-2012 Sawtooth Consulting Ltd.
  *
  * This file is part of CyaSSL.
  *
  * CyaSSL is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
  * the Free Software Foundation; either version 2 of the License, or
  * (at your option) any later version.
  *
  * CyaSSL is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  * GNU General Public License for more details.
  *
  * You should have received a copy of the GNU General Public License
  * along with this program; if not, write to the Free Software
  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
  */


 #ifdef HAVE_CONFIG_H
     #include <config.h>
 #endif

 #ifdef CYASSL_RIPEMD

 #include <cyassl/ctaocrypt/ripemd.h>
 #ifdef NO_INLINE
     #include <cyassl/ctaocrypt/misc.h>
 #else
     #include <ctaocrypt/src/misc.c>
 #endif


 #ifndef min

     static INLINE word32 min(word32 a, word32 b)
     {
         return a > b ? b : a;
     }

 #endif /* min */


 void InitRipeMd(RipeMd* ripemd)
 {
     ripemd->digest[0] = 0x67452301L;
     ripemd->digest[1] = 0xEFCDAB89L;
     ripemd->digest[2] = 0x98BADCFEL;
     ripemd->digest[3] = 0x10325476L;
     ripemd->digest[4] = 0xC3D2E1F0L;

     ripemd->buffLen = 0;
     ripemd->loLen   = 0;
     ripemd->hiLen   = 0;
 }


 /* for all */
 #define F(x, y, z)    (x ^ y ^ z)
 #define G(x, y, z)    (z ^ (x & (y^z)))
 #define H(x, y, z)    (z ^ (x | ~y))
 #define I(x, y, z)    (y ^ (z & (x^y)))
 #define J(x, y, z)    (x ^ (y | ~z))

 #define k0 0
 #define k1 0x5a827999
 #define k2 0x6ed9eba1
 #define k3 0x8f1bbcdc
 #define k4 0xa953fd4e
 #define k5 0x50a28be6
 #define k6 0x5c4dd124
 #define k7 0x6d703ef3
 #define k8 0x7a6d76e9
 #define k9 0

 /* for 160 and 320 */
 #define Subround(f, a, b, c, d, e, x, s, k) \
     a += f(b, c, d) + x + k;\
     a = rotlFixed((word32)a, s) + e;\
     c = rotlFixed((word32)c, 10U)

 static void Transform(RipeMd* ripemd)
 {
     word32 a1, b1, c1, d1, e1, a2, b2, c2, d2, e2;
     a1 = a2 = ripemd->digest[0];
     b1 = b2 = ripemd->digest[1];
     c1 = c2 = ripemd->digest[2];
     d1 = d2 = ripemd->digest[3];
     e1 = e2 = ripemd->digest[4];

     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 11, k0);
     Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 1], 14, k0);
     Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 2], 15, k0);
     Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 12, k0);
     Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 4],  5, k0);
     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 5],  8, k0);
     Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 6],  7, k0);
     Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 7],  9, k0);
     Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 11, k0);
     Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 13, k0);
     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[10], 14, k0);
     Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[11], 15, k0);
     Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[12],  6, k0);
     Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[13],  7, k0);
     Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[14],  9, k0);
     Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[15],  8, k0);

     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 7],  7, k1);
     Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 4],  6, k1);
     Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[13],  8, k1);
     Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 13, k1);
     Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[10], 11, k1);
     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 6],  9, k1);
     Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[15],  7, k1);
     Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 15, k1);
     Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[12],  7, k1);
     Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 12, k1);
     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 15, k1);
     Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 5],  9, k1);
     Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 11, k1);
     Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[14],  7, k1);
     Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[11], 13, k1);
     Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 8], 12, k1);

     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 11, k2);
     Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[10], 13, k2);
     Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[14],  6, k2);
     Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 4],  7, k2);
     Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 14, k2);
     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[15],  9, k2);
     Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 13, k2);
     Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 15, k2);
     Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 14, k2);
     Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 7],  8, k2);
     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 13, k2);
     Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 6],  6, k2);
     Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[13],  5, k2);
     Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[11], 12, k2);
     Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 5],  7, k2);
     Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[12],  5, k2);

     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 11, k3);
     Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 12, k3);
     Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[11], 14, k3);
     Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[10], 15, k3);
     Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 14, k3);
     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 15, k3);
     Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[12],  9, k3);
     Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[ 4],  8, k3);
     Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[13],  9, k3);
     Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 14, k3);
     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 7],  5, k3);
     Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[15],  6, k3);
     Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[14],  8, k3);
     Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[ 5],  6, k3);
     Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 6],  5, k3);
     Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 12, k3);

     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 4],  9, k4);
     Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 15, k4);
     Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[ 5],  5, k4);
     Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 9], 11, k4);
     Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 7],  6, k4);
     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[12],  8, k4);
     Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 13, k4);
     Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[10], 12, k4);
     Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[14],  5, k4);
     Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 12, k4);
     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 3], 13, k4);
     Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 8], 14, k4);
     Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[11], 11, k4);
     Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 6],  8, k4);
     Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[15],  5, k4);
     Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[13],  6, k4);

     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 5],  8, k5);
     Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[14],  9, k5);
     Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 7],  9, k5);
     Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[ 0], 11, k5);
     Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 13, k5);
     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 2], 15, k5);
     Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[11], 15, k5);
     Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 4],  5, k5);
     Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[13],  7, k5);
     Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 6],  7, k5);
     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[15],  8, k5);
     Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 11, k5);
     Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 1], 14, k5);
     Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[10], 14, k5);
     Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 3], 12, k5);
     Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[12],  6, k5);

     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 6],  9, k6);
     Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[11], 13, k6);
     Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 3], 15, k6);
     Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 7],  7, k6);
     Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 12, k6);
     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[13],  8, k6);
     Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[ 5],  9, k6);
     Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[10], 11, k6);
     Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[14],  7, k6);
     Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[15],  7, k6);
     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 12, k6);
     Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[12],  7, k6);
     Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 4],  6, k6);
     Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 15, k6);
     Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 1], 13, k6);
     Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 2], 11, k6);

     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[15],  9, k7);
     Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 5],  7, k7);
     Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 1], 15, k7);
     Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 3], 11, k7);
     Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 7],  8, k7);
     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[14],  6, k7);
     Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 6],  6, k7);
     Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 14, k7);
     Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[11], 12, k7);
     Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 13, k7);
     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[12],  5, k7);
     Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 14, k7);
     Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[10], 13, k7);
     Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 13, k7);
     Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 4],  7, k7);
     Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[13],  5, k7);

     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 8], 15, k8);
     Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[ 6],  5, k8);
     Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 4],  8, k8);
     Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 1], 11, k8);
     Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 14, k8);
     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[11], 14, k8);
     Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[15],  6, k8);
     Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 14, k8);
     Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 5],  6, k8);
     Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[12],  9, k8);
     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 12, k8);
     Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[13],  9, k8);
     Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 9], 12, k8);
     Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 7],  5, k8);
     Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[10], 15, k8);
     Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[14],  8, k8);

     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[12],  8, k9);
     Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[15],  5, k9);
     Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[10], 12, k9);
     Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 4],  9, k9);
     Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 1], 12, k9);
     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[ 5],  5, k9);
     Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[ 8], 14, k9);
     Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 7],  6, k9);
     Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 6],  8, k9);
     Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 13, k9);
     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[13],  6, k9);
     Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[14],  5, k9);
     Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 0], 15, k9);
     Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 13, k9);
     Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 9], 11, k9);
     Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[11], 11, k9);

     c1                = ripemd->digest[1] + c1 + d2;
     ripemd->digest[1] = ripemd->digest[2] + d1 + e2;
     ripemd->digest[2] = ripemd->digest[3] + e1 + a2;
     ripemd->digest[3] = ripemd->digest[4] + a1 + b2;
     ripemd->digest[4] = ripemd->digest[0] + b1 + c2;
     ripemd->digest[0] = c1;
 }


 static INLINE void AddLength(RipeMd* ripemd, word32 len)
 {
     word32 tmp = ripemd->loLen;
     if ( (ripemd->loLen += len) < tmp)
         ripemd->hiLen++;                       /* carry low to high */
 }


 void RipeMdUpdate(RipeMd* ripemd, const byte* data, word32 len)
 {
     /* do block size increments */
     byte* local = (byte*)ripemd->buffer;

     while (len) {
         word32 add = min(len, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
         XMEMCPY(&local[ripemd->buffLen], data, add);

         ripemd->buffLen += add;
         data         += add;
         len          -= add;

         if (ripemd->buffLen == RIPEMD_BLOCK_SIZE) {
             #ifdef BIG_ENDIAN_ORDER
                 ByteReverseBytes(local, local, RIPEMD_BLOCK_SIZE);
             #endif
             Transform(ripemd);
             AddLength(ripemd, RIPEMD_BLOCK_SIZE);
             ripemd->buffLen = 0;
         }
     }
 }


 void RipeMdFinal(RipeMd* ripemd, byte* hash)
 {
     byte* local = (byte*)ripemd->buffer;

     AddLength(ripemd, ripemd->buffLen);               /* before adding pads */

     local[ripemd->buffLen++] = 0x80;  /* add 1 */

     /* pad with zeros */
     if (ripemd->buffLen > RIPEMD_PAD_SIZE) {
         XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
         ripemd->buffLen += RIPEMD_BLOCK_SIZE - ripemd->buffLen;

         #ifdef BIG_ENDIAN_ORDER
             ByteReverseBytes(local, local, RIPEMD_BLOCK_SIZE);
         #endif
         Transform(ripemd);
         ripemd->buffLen = 0;
     }
     XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_PAD_SIZE - ripemd->buffLen);

     /* put lengths in bits */
     ripemd->loLen = ripemd->loLen << 3;
     ripemd->hiLen = (ripemd->loLen >> (8*sizeof(ripemd->loLen) - 3)) +
                  (ripemd->hiLen << 3);

     /* store lengths */
     #ifdef BIG_ENDIAN_ORDER
         ByteReverseBytes(local, local, RIPEMD_BLOCK_SIZE);
     #endif
     /* ! length ordering dependent on digest endian type ! */
     XMEMCPY(&local[RIPEMD_PAD_SIZE], &ripemd->loLen, sizeof(word32));
     XMEMCPY(&local[RIPEMD_PAD_SIZE + sizeof(word32)], &ripemd->hiLen,
            sizeof(word32));

     Transform(ripemd);
     #ifdef BIG_ENDIAN_ORDER
         ByteReverseWords(ripemd->digest, ripemd->digest, RIPEMD_DIGEST_SIZE);
     #endif
     XMEMCPY(hash, ripemd->digest, RIPEMD_DIGEST_SIZE);

     InitRipeMd(ripemd);  /* reset state */
 }


 #endif /* CYASSL_RIPEMD */
	/* ripemd.c
	*
	* Copyright (C) 2006-2012 Sawtooth Consulting Ltd.
	*
	* This file is part of CyaSSL.
	*
	* CyaSSL is free software; you can redistribute it and/or modify
	* it under the terms of the GNU General Public License as published by
	* the Free Software Foundation; either version 2 of the License, or
	* (at your option) any later version.
	*
	* CyaSSL is distributed in the hope that it will be useful,
	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	* GNU General Public License for more details.
	*
	* You should have received a copy of the GNU General Public License
	* along with this program; if not, write to the Free Software
	* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
	*/


	#ifdef HAVE_CONFIG_H
	#include <config.h>
	#endif

	#ifdef CYASSL_RIPEMD

	#include <cyassl/ctaocrypt/ripemd.h>
	#ifdef NO_INLINE
	#include <cyassl/ctaocrypt/misc.h>
	#else
	#include <ctaocrypt/src/misc.c>
	#endif


	#ifndef min

	static INLINE word32 min(word32 a, word32 b)
	{
	return a > b ? b : a;
	}

	#endif /* min */


	void InitRipeMd(RipeMd* ripemd)
	{
	ripemd->digest[0] = 0x67452301L;
	ripemd->digest[1] = 0xEFCDAB89L;
	ripemd->digest[2] = 0x98BADCFEL;
	ripemd->digest[3] = 0x10325476L;
	ripemd->digest[4] = 0xC3D2E1F0L;

	ripemd->buffLen = 0;
	ripemd->loLen = 0;
	ripemd->hiLen = 0;
	}


	/* for all */
	#define F(x, y, z) (x ^ y ^ z)
	#define G(x, y, z) (z ^ (x & (y^z)))
	#define H(x, y, z) (z ^ (x \| ~y))
	#define I(x, y, z) (y ^ (z & (x^y)))
	#define J(x, y, z) (x ^ (y \| ~z))

	#define k0 0
	#define k1 0x5a827999
	#define k2 0x6ed9eba1
	#define k3 0x8f1bbcdc
	#define k4 0xa953fd4e
	#define k5 0x50a28be6
	#define k6 0x5c4dd124
	#define k7 0x6d703ef3
	#define k8 0x7a6d76e9
	#define k9 0

	/* for 160 and 320 */
	#define Subround(f, a, b, c, d, e, x, s, k) \
	a += f(b, c, d) + x + k;\
	a = rotlFixed((word32)a, s) + e;\
	c = rotlFixed((word32)c, 10U)

	static void Transform(RipeMd* ripemd)
	{
	word32 a1, b1, c1, d1, e1, a2, b2, c2, d2, e2;
	a1 = a2 = ripemd->digest[0];
	b1 = b2 = ripemd->digest[1];
	c1 = c2 = ripemd->digest[2];
	d1 = d2 = ripemd->digest[3];
	e1 = e2 = ripemd->digest[4];

	Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 11, k0);
	Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 1], 14, k0);
	Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 2], 15, k0);
	Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 12, k0);
	Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 4], 5, k0);
	Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[ 5], 8, k0);
	Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[ 6], 7, k0);
	Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[ 7], 9, k0);
	Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 11, k0);
	Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 13, k0);
	Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[10], 14, k0);
	Subround(F, e1, a1, b1, c1, d1, ripemd->buffer[11], 15, k0);
	Subround(F, d1, e1, a1, b1, c1, ripemd->buffer[12], 6, k0);
	Subround(F, c1, d1, e1, a1, b1, ripemd->buffer[13], 7, k0);
	Subround(F, b1, c1, d1, e1, a1, ripemd->buffer[14], 9, k0);
	Subround(F, a1, b1, c1, d1, e1, ripemd->buffer[15], 8, k0);

	Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 7], 7, k1);
	Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 4], 6, k1);
	Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[13], 8, k1);
	Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 13, k1);
	Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[10], 11, k1);
	Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 6], 9, k1);
	Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[15], 7, k1);
	Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 3], 15, k1);
	Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[12], 7, k1);
	Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 12, k1);
	Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 15, k1);
	Subround(G, d1, e1, a1, b1, c1, ripemd->buffer[ 5], 9, k1);
	Subround(G, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 11, k1);
	Subround(G, b1, c1, d1, e1, a1, ripemd->buffer[14], 7, k1);
	Subround(G, a1, b1, c1, d1, e1, ripemd->buffer[11], 13, k1);
	Subround(G, e1, a1, b1, c1, d1, ripemd->buffer[ 8], 12, k1);

	Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 11, k2);
	Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[10], 13, k2);
	Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[14], 6, k2);
	Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 4], 7, k2);
	Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 9], 14, k2);
	Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[15], 9, k2);
	Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 13, k2);
	Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[ 1], 15, k2);
	Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 14, k2);
	Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 7], 8, k2);
	Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 13, k2);
	Subround(H, c1, d1, e1, a1, b1, ripemd->buffer[ 6], 6, k2);
	Subround(H, b1, c1, d1, e1, a1, ripemd->buffer[13], 5, k2);
	Subround(H, a1, b1, c1, d1, e1, ripemd->buffer[11], 12, k2);
	Subround(H, e1, a1, b1, c1, d1, ripemd->buffer[ 5], 7, k2);
	Subround(H, d1, e1, a1, b1, c1, ripemd->buffer[12], 5, k2);

	Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 11, k3);
	Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[ 9], 12, k3);
	Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[11], 14, k3);
	Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[10], 15, k3);
	Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 0], 14, k3);
	Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 8], 15, k3);
	Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[12], 9, k3);
	Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[ 4], 8, k3);
	Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[13], 9, k3);
	Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 3], 14, k3);
	Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 7], 5, k3);
	Subround(I, b1, c1, d1, e1, a1, ripemd->buffer[15], 6, k3);
	Subround(I, a1, b1, c1, d1, e1, ripemd->buffer[14], 8, k3);
	Subround(I, e1, a1, b1, c1, d1, ripemd->buffer[ 5], 6, k3);
	Subround(I, d1, e1, a1, b1, c1, ripemd->buffer[ 6], 5, k3);
	Subround(I, c1, d1, e1, a1, b1, ripemd->buffer[ 2], 12, k3);

	Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 4], 9, k4);
	Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 0], 15, k4);
	Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[ 5], 5, k4);
	Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 9], 11, k4);
	Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 7], 6, k4);
	Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[12], 8, k4);
	Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 2], 13, k4);
	Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[10], 12, k4);
	Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[14], 5, k4);
	Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[ 1], 12, k4);
	Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[ 3], 13, k4);
	Subround(J, a1, b1, c1, d1, e1, ripemd->buffer[ 8], 14, k4);
	Subround(J, e1, a1, b1, c1, d1, ripemd->buffer[11], 11, k4);
	Subround(J, d1, e1, a1, b1, c1, ripemd->buffer[ 6], 8, k4);
	Subround(J, c1, d1, e1, a1, b1, ripemd->buffer[15], 5, k4);
	Subround(J, b1, c1, d1, e1, a1, ripemd->buffer[13], 6, k4);

	Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 5], 8, k5);
	Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[14], 9, k5);
	Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 7], 9, k5);
	Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[ 0], 11, k5);
	Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 13, k5);
	Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[ 2], 15, k5);
	Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[11], 15, k5);
	Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 4], 5, k5);
	Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[13], 7, k5);
	Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 6], 7, k5);
	Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[15], 8, k5);
	Subround(J, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 11, k5);
	Subround(J, d2, e2, a2, b2, c2, ripemd->buffer[ 1], 14, k5);
	Subround(J, c2, d2, e2, a2, b2, ripemd->buffer[10], 14, k5);
	Subround(J, b2, c2, d2, e2, a2, ripemd->buffer[ 3], 12, k5);
	Subround(J, a2, b2, c2, d2, e2, ripemd->buffer[12], 6, k5);

	Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 6], 9, k6);
	Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[11], 13, k6);
	Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 3], 15, k6);
	Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 7], 7, k6);
	Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 12, k6);
	Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[13], 8, k6);
	Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[ 5], 9, k6);
	Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[10], 11, k6);
	Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[14], 7, k6);
	Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[15], 7, k6);
	Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 12, k6);
	Subround(I, d2, e2, a2, b2, c2, ripemd->buffer[12], 7, k6);
	Subround(I, c2, d2, e2, a2, b2, ripemd->buffer[ 4], 6, k6);
	Subround(I, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 15, k6);
	Subround(I, a2, b2, c2, d2, e2, ripemd->buffer[ 1], 13, k6);
	Subround(I, e2, a2, b2, c2, d2, ripemd->buffer[ 2], 11, k6);

	Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[15], 9, k7);
	Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 5], 7, k7);
	Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 1], 15, k7);
	Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 3], 11, k7);
	Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 7], 8, k7);
	Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[14], 6, k7);
	Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 6], 6, k7);
	Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[ 9], 14, k7);
	Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[11], 12, k7);
	Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 8], 13, k7);
	Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[12], 5, k7);
	Subround(H, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 14, k7);
	Subround(H, b2, c2, d2, e2, a2, ripemd->buffer[10], 13, k7);
	Subround(H, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 13, k7);
	Subround(H, e2, a2, b2, c2, d2, ripemd->buffer[ 4], 7, k7);
	Subround(H, d2, e2, a2, b2, c2, ripemd->buffer[13], 5, k7);

	Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 8], 15, k8);
	Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[ 6], 5, k8);
	Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 4], 8, k8);
	Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 1], 11, k8);
	Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 14, k8);
	Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[11], 14, k8);
	Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[15], 6, k8);
	Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 0], 14, k8);
	Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 5], 6, k8);
	Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[12], 9, k8);
	Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 12, k8);
	Subround(G, b2, c2, d2, e2, a2, ripemd->buffer[13], 9, k8);
	Subround(G, a2, b2, c2, d2, e2, ripemd->buffer[ 9], 12, k8);
	Subround(G, e2, a2, b2, c2, d2, ripemd->buffer[ 7], 5, k8);
	Subround(G, d2, e2, a2, b2, c2, ripemd->buffer[10], 15, k8);
	Subround(G, c2, d2, e2, a2, b2, ripemd->buffer[14], 8, k8);

	Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[12], 8, k9);
	Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[15], 5, k9);
	Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[10], 12, k9);
	Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 4], 9, k9);
	Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 1], 12, k9);
	Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[ 5], 5, k9);
	Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[ 8], 14, k9);
	Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 7], 6, k9);
	Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 6], 8, k9);
	Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 2], 13, k9);
	Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[13], 6, k9);
	Subround(F, a2, b2, c2, d2, e2, ripemd->buffer[14], 5, k9);
	Subround(F, e2, a2, b2, c2, d2, ripemd->buffer[ 0], 15, k9);
	Subround(F, d2, e2, a2, b2, c2, ripemd->buffer[ 3], 13, k9);
	Subround(F, c2, d2, e2, a2, b2, ripemd->buffer[ 9], 11, k9);
	Subround(F, b2, c2, d2, e2, a2, ripemd->buffer[11], 11, k9);

	c1 = ripemd->digest[1] + c1 + d2;
	ripemd->digest[1] = ripemd->digest[2] + d1 + e2;
	ripemd->digest[2] = ripemd->digest[3] + e1 + a2;
	ripemd->digest[3] = ripemd->digest[4] + a1 + b2;
	ripemd->digest[4] = ripemd->digest[0] + b1 + c2;
	ripemd->digest[0] = c1;
	}


	static INLINE void AddLength(RipeMd* ripemd, word32 len)
	{
	word32 tmp = ripemd->loLen;
	if ( (ripemd->loLen += len) < tmp)
	ripemd->hiLen++; /* carry low to high */
	}


	void RipeMdUpdate(RipeMd* ripemd, const byte* data, word32 len)
	{
	/* do block size increments */
	byte* local = (byte*)ripemd->buffer;

	while (len) {
	word32 add = min(len, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
	XMEMCPY(&local[ripemd->buffLen], data, add);

	ripemd->buffLen += add;
	data += add;
	len -= add;

	if (ripemd->buffLen == RIPEMD_BLOCK_SIZE) {
	#ifdef BIG_ENDIAN_ORDER
	ByteReverseBytes(local, local, RIPEMD_BLOCK_SIZE);
	#endif
	Transform(ripemd);
	AddLength(ripemd, RIPEMD_BLOCK_SIZE);
	ripemd->buffLen = 0;
	}
	}
	}


	void RipeMdFinal(RipeMd* ripemd, byte* hash)
	{
	byte* local = (byte*)ripemd->buffer;

	AddLength(ripemd, ripemd->buffLen); /* before adding pads */

	local[ripemd->buffLen++] = 0x80; /* add 1 */

	/* pad with zeros */
	if (ripemd->buffLen > RIPEMD_PAD_SIZE) {
	XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_BLOCK_SIZE - ripemd->buffLen);
	ripemd->buffLen += RIPEMD_BLOCK_SIZE - ripemd->buffLen;

	#ifdef BIG_ENDIAN_ORDER
	ByteReverseBytes(local, local, RIPEMD_BLOCK_SIZE);
	#endif
	Transform(ripemd);
	ripemd->buffLen = 0;
	}
	XMEMSET(&local[ripemd->buffLen], 0, RIPEMD_PAD_SIZE - ripemd->buffLen);

	/* put lengths in bits */
	ripemd->loLen = ripemd->loLen << 3;
	ripemd->hiLen = (ripemd->loLen >> (8*sizeof(ripemd->loLen) - 3)) +
	(ripemd->hiLen << 3);

	/* store lengths */
	#ifdef BIG_ENDIAN_ORDER
	ByteReverseBytes(local, local, RIPEMD_BLOCK_SIZE);
	#endif
	/* ! length ordering dependent on digest endian type ! */
	XMEMCPY(&local[RIPEMD_PAD_SIZE], &ripemd->loLen, sizeof(word32));
	XMEMCPY(&local[RIPEMD_PAD_SIZE + sizeof(word32)], &ripemd->hiLen,
	sizeof(word32));

	Transform(ripemd);
	#ifdef BIG_ENDIAN_ORDER
	ByteReverseWords(ripemd->digest, ripemd->digest, RIPEMD_DIGEST_SIZE);
	#endif
	XMEMCPY(hash, ripemd->digest, RIPEMD_DIGEST_SIZE);

	InitRipeMd(ripemd); /* reset state */
	}


	#endif /* CYASSL_RIPEMD */