1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
/*
* XMSS Hash
* A collection of pseudorandom hash functions required for XMSS and WOTS
* computations.
* (C) 2016 Matthias Gierlings
*
* Botan is released under the Simplified BSD License (see license.txt)
**/
#include <botan/xmss_hash.h>
#include <botan/exceptn.h>
namespace Botan {
XMSS_Hash::XMSS_Hash(const XMSS_Hash& hash)
: XMSS_Hash(hash.m_hash_func_name)
{
}
XMSS_Hash::XMSS_Hash(const std::string& h_func_name) :
m_hash_func_name(h_func_name),
m_hash(HashFunction::create(h_func_name))
{
if(!m_hash)
throw Lookup_Error("XMSS cannot use hash " + h_func_name +
" because it is unavailable");
m_output_length = m_hash->output_length();
BOTAN_ASSERT(m_output_length > 0, "Hash output length of zero is invalid.");
m_zero_padding.resize(m_output_length - 1);
m_msg_hash.reset(m_hash->clone());
}
void
XMSS_Hash::h(secure_vector<byte>& result,
const secure_vector<byte>& key,
const secure_vector<byte>& data)
{
m_hash->update(m_zero_padding);
m_hash->update(m_id_h);
m_hash->update(key);
m_hash->update(data);
m_hash->final(result);
}
void XMSS_Hash::h_msg_init(const secure_vector<byte>& randomness,
const secure_vector<byte>& root,
const secure_vector<byte>& index_bytes)
{
m_msg_hash->clear();
m_msg_hash->update(m_zero_padding);
m_msg_hash->update(m_id_hmsg);
m_msg_hash->update(randomness);
m_msg_hash->update(root);
m_msg_hash->update(index_bytes);
}
void XMSS_Hash::h_msg_update(const secure_vector<byte>& data)
{
m_msg_hash->update(data);
}
void XMSS_Hash::h_msg_update(const byte data[], size_t size)
{
m_msg_hash->update(data, size);
}
secure_vector<byte> XMSS_Hash::h_msg_final()
{
return m_msg_hash->final();
}
secure_vector<byte>
XMSS_Hash::h_msg(const secure_vector<byte>& randomness,
const secure_vector<byte>& root,
const secure_vector<byte>& index_bytes,
const secure_vector<byte>& data)
{
h_msg_init(randomness, root, index_bytes);
m_msg_hash->update(data);
return m_msg_hash->final();
}
}
|
