mirror of
https://github.com/php/php-src.git
synced 2024-09-22 02:17:32 +00:00
ada776c84c
* Modify php_hash_ops to contain the algorithm name and serialize and unserialize methods. * Implement __serialize and __unserialize magic methods on HashContext. Note that serialized HashContexts are not necessarily portable between PHP versions or from architecture to architecture. (Most are, though Keccak and slow SHA3s are not.) An exception is thrown when an unsupported serialization is attempted. Because of security concerns, HASH_HMAC contexts are not currently serializable; attempting to serialize one throws an exception. Serialization exposes the state of HashContext memory, so ensure that memory is zeroed before use by allocating it with a new php_hash_alloc_context function. Performance impact is negligible. Some hash internal states have logical pointers into a buffer, or sponge, that absorbs input provided in bytes rather than chunks. The unserialize functions for these hash functions must validate that the logical pointers are all within bounds, lest future hash operations cause out-of-bounds memory accesses. * Adler32, CRC32, FNV, joaat: simple state, no buffer positions * Gost, MD2, SHA3, Snefru, Tiger, Whirlpool: buffer positions must be validated * MD4, MD5, SHA1, SHA2, haval, ripemd: buffer positions encoded bitwise, forced to within bounds on use; no need to validate
50 lines
1.9 KiB
C
50 lines
1.9 KiB
C
/*
|
|
+----------------------------------------------------------------------+
|
|
| Copyright (c) The PHP Group |
|
|
+----------------------------------------------------------------------+
|
|
| This source file is subject to version 3.01 of the PHP license, |
|
|
| that is bundled with this package in the file LICENSE, and is |
|
|
| available through the world-wide-web at the following url: |
|
|
| http://www.php.net/license/3_01.txt |
|
|
| If you did not receive a copy of the PHP license and are unable to |
|
|
| obtain it through the world-wide-web, please send a note to |
|
|
| license@php.net so we can mail you a copy immediately. |
|
|
+----------------------------------------------------------------------+
|
|
| Author: Alexander Peslyak (Solar Designer) <solar at openwall.com> |
|
|
| Rasmus Lerdorf <rasmus@lerdorf.on.ca> |
|
|
+----------------------------------------------------------------------+
|
|
*/
|
|
|
|
#ifndef MD5_H
|
|
#define MD5_H
|
|
|
|
PHPAPI void make_digest(char *md5str, const unsigned char *digest);
|
|
PHPAPI void make_digest_ex(char *md5str, const unsigned char *digest, int len);
|
|
|
|
#include "ext/standard/basic_functions.h"
|
|
|
|
/*
|
|
* This is an OpenSSL-compatible implementation of the RSA Data Security,
|
|
* Inc. MD5 Message-Digest Algorithm (RFC 1321).
|
|
*
|
|
* Written by Solar Designer <solar at openwall.com> in 2001, and placed
|
|
* in the public domain. There's absolutely no warranty.
|
|
*
|
|
* See md5.c for more information.
|
|
*/
|
|
|
|
/* MD5 context. */
|
|
typedef struct {
|
|
uint32_t lo, hi;
|
|
uint32_t a, b, c, d;
|
|
unsigned char buffer[64];
|
|
uint32_t block[16];
|
|
} PHP_MD5_CTX;
|
|
#define PHP_MD5_SPEC "llllllb64l16."
|
|
|
|
PHPAPI void PHP_MD5Init(PHP_MD5_CTX *ctx);
|
|
PHPAPI void PHP_MD5Update(PHP_MD5_CTX *ctx, const void *data, size_t size);
|
|
PHPAPI void PHP_MD5Final(unsigned char *result, PHP_MD5_CTX *ctx);
|
|
|
|
#endif
|