mirror of
https://github.com/openvswitch/ovs
synced 2025-08-31 06:15:47 +00:00
e8f557df33
Implementation of SHA1 in OpenSSL library is much faster and optimized for all available CPU architectures and instruction sets. OVS should use it instead of internal implementation if possible. Depending on compiler options OpenSSL's version finishes our sha1 unit tests from 3 to 12 times faster. Performance of OpenSSL's version is constant, but OVS's implementation highly depends on compiler. Interestingly, default build with '-g -O2' works faster than optimized '-march=native -Ofast'. Tests with ovsdb-server on big databases shows ~5-10% improvement of the time needed for database compaction (sha1 is only a part of this operation), depending on compiler options. We still need internal implementation, because OpenSSL can be not available on some platforms. Tests enhanced to check both versions of API. Reviewed-by: Dumitru Ceara <dceara@redhat.com> Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
86 lines
3.3 KiB
C
86 lines
3.3 KiB
C
/*
|
|
* This file is from the Apache Portable Runtime Library.
|
|
* The full upstream copyright and license statement is included below.
|
|
* Modifications copyright (c) 2009 Nicira, Inc.
|
|
*/
|
|
|
|
/* Licensed to the Apache Software Foundation (ASF) under one or more
|
|
* contributor license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright ownership.
|
|
* The ASF licenses this file to You under the Apache License, Version 2.0
|
|
* (the "License"); you may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
/* NIST Secure Hash Algorithm
|
|
* heavily modified by Uwe Hollerbach uh@alumni.caltech edu
|
|
* from Peter C. Gutmann's implementation as found in
|
|
* Applied Cryptography by Bruce Schneier
|
|
* This code is hereby placed in the public domain
|
|
*/
|
|
|
|
#ifndef SHA1_H
|
|
#define SHA1_H
|
|
|
|
#include <stdbool.h>
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
|
|
#ifdef HAVE_OPENSSL
|
|
#include <openssl/evp.h>
|
|
#endif
|
|
|
|
#define SHA1_DIGEST_SIZE 20 /* Size of the SHA1 digest. */
|
|
#define SHA1_HEX_DIGEST_LEN 40 /* Length of SHA1 digest as hex in ASCII. */
|
|
|
|
/* SHA1 context structure. */
|
|
struct sha1_ctx {
|
|
union {
|
|
#ifdef HAVE_OPENSSL
|
|
EVP_MD_CTX *ctx; /* OpenSSL context. */
|
|
#endif
|
|
struct {
|
|
uint32_t digest[5]; /* Message digest. */
|
|
uint32_t count_lo, count_hi; /* 64-bit bit counts. */
|
|
uint32_t data[16]; /* SHA data buffer */
|
|
int local; /* Unprocessed amount in data. */
|
|
};
|
|
};
|
|
};
|
|
|
|
void sha1_init(struct sha1_ctx *);
|
|
void sha1_update(struct sha1_ctx *, const void *, uint32_t size);
|
|
void sha1_final(struct sha1_ctx *, uint8_t digest[SHA1_DIGEST_SIZE]);
|
|
void sha1_bytes(const void *, uint32_t size, uint8_t digest[SHA1_DIGEST_SIZE]);
|
|
|
|
#define SHA1_FMT \
|
|
"%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x" \
|
|
"%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x"
|
|
#define SHA1_ARGS(DIGEST) \
|
|
((DIGEST)[0]), ((DIGEST)[1]), ((DIGEST)[2]), ((DIGEST)[3]), \
|
|
((DIGEST)[4]), ((DIGEST)[5]), ((DIGEST)[6]), ((DIGEST)[7]), \
|
|
((DIGEST)[8]), ((DIGEST)[9]), ((DIGEST)[10]), ((DIGEST)[11]), \
|
|
((DIGEST)[12]), ((DIGEST)[13]), ((DIGEST)[14]), ((DIGEST)[15]), \
|
|
((DIGEST)[16]), ((DIGEST)[17]), ((DIGEST)[18]), ((DIGEST)[19])
|
|
|
|
void sha1_to_hex(const uint8_t digest[SHA1_DIGEST_SIZE],
|
|
char hex[SHA1_HEX_DIGEST_LEN + 1]);
|
|
bool sha1_from_hex(uint8_t digest[SHA1_DIGEST_SIZE], const char *hex);
|
|
|
|
/* Generic implementation for the case where OpenSSL is not available.
|
|
* This API should not be used directly. Exposed for unit testing. */
|
|
void ovs_sha1_init(struct sha1_ctx *);
|
|
void ovs_sha1_update(struct sha1_ctx *, const void *, uint32_t size);
|
|
void ovs_sha1_final(struct sha1_ctx *, uint8_t digest[SHA1_DIGEST_SIZE]);
|
|
void ovs_sha1_bytes(const void *, uint32_t size,
|
|
uint8_t digest[SHA1_DIGEST_SIZE]);
|
|
|
|
#endif /* sha1.h */
|