--- /dev/null
+! Copyright (C) 2017 Jon Harper.
+! See http://factorcode.org/license.txt for BSD license.
+USING: accessors alien.c-types alien.data byte-arrays checksums
+checksums.common combinators fry grouping hints kernel
+kernel.private literals locals macros math math.bitwise
+math.functions sequences sequences.private specialized-arrays ;
+SPECIALIZED-ARRAY: uint
+IN: checksums.ripemd
+
+SINGLETON: ripemd-160
+
+INSTANCE: ripemd-160 block-checksum
+
+TUPLE: ripemd-160-state < block-checksum-state
+{ state1 uint-array }
+{ state2 uint-array }
+{ old-state uint-array } ;
+
+: <ripemd-160-state> ( -- ripemd-160 )
+ ripemd-160-state new-checksum-state
+ 64 >>block-size
+ uint-array{ 0x67452301 0xefcdab89 0x98badcfe 0x10325476 0xc3d2e1f0 }
+ [ clone >>state1 ] [ clone >>state2 ] [ >>old-state ] tri ;
+
+M: ripemd-160 initialize-checksum-state drop <ripemd-160-state> ;
+
+<PRIVATE
+
+: combine-ripemd-160 ( ripemd-160-state -- new-state )
+ [ old-state>> 1 cut prepend ]
+ [ state1>> 2 cut prepend ]
+ [ state2>> 3 cut prepend ] tri
+ [ w+ ] 2map [ w+ ] 2map ; inline
+
+: update-ripemd-160 ( ripemd-160 -- )
+ [ combine-ripemd-160 dup clone dup clone ] [ ] bi
+ [ old-state<< ] [ state1<< ] [ state2<< ] tri ; inline
+
+: F ( x y z -- out ) bitxor bitxor ; inline
+: G ( x y z -- out ) pick bitnot swap [ bitand ] 2bi@ bitor ; inline
+: H ( x y z -- out ) [ bitnot bitor ] [ bitxor ] bi* ; inline
+: I ( x y z -- out ) swap over bitnot [ bitand ] 2bi@ bitor ; inline
+: J ( x y z -- out ) bitnot bitor bitxor ; inline
+
+CONSTANT: T11 0x00000000
+CONSTANT: T12 0x5A827999
+CONSTANT: T13 0x6ED9EBA1
+CONSTANT: T14 0x8F1BBCDC
+CONSTANT: T15 0xA953FD4E
+
+CONSTANT: T21 0x50A28BE6
+CONSTANT: T22 0x5C4DD124
+CONSTANT: T23 0x6D703EF3
+CONSTANT: T24 0x7A6D76E9
+CONSTANT: T25 0x00000000
+
+CONSTANT: a 0
+CONSTANT: b 1
+CONSTANT: c 2
+CONSTANT: d 3
+CONSTANT: e 4
+
+CONSTANT: S1 uint-array{
+11 14 15 12 5 8 7 9 11 13 14 15 6 7 9 8
+7 6 8 13 11 9 7 15 7 12 15 9 11 7 13 12
+11 13 6 7 14 9 13 15 14 8 13 6 5 12 7 5
+11 12 14 15 14 15 9 8 9 14 5 6 8 6 5 12
+9 15 5 11 6 8 13 12 5 12 13 14 11 8 5 6
+}
+
+CONSTANT: S2 uint-array{
+8 9 9 11 13 15 15 5 7 7 8 11 14 14 12 6
+9 13 15 7 12 8 9 11 7 7 12 7 6 15 13 11
+9 7 15 11 8 6 6 14 12 13 5 14 13 13 7 5
+15 5 8 11 14 14 6 14 6 9 12 9 12 5 15 8
+8 5 12 9 12 5 14 6 8 13 6 5 15 13 11 11
+}
+
+:: (ABCDE) ( x state a b c d e k S s T quot -- )
+ ! a = e + ((a + F(b,c,d) + X[k] + T) <<< S[s])
+ ! c = c <<< 10
+ a state [
+ b state nth-unsafe
+ c state nth-unsafe
+ d state nth-unsafe quot call w+
+ k x nth-unsafe w+
+ T w+
+ s S nth-unsafe bitroll-32
+ e state nth-unsafe w+
+ ] change-nth-unsafe
+ c state [ 10 bitroll-32 ] change-nth-unsafe ; inline
+
+MACRO: with-ripemd-160-round ( ops quot -- quot )
+ '[ [ _ (ABCDE) ] compose ] map '[ _ 2cleave ] ;
+
+: (process-ripemd-160-block-F1) ( block state1 -- )
+ { uint-array uint-array } declare {
+ [ a b c d e 0 S1 0 T11 ]
+ [ e a b c d 1 S1 1 T11 ]
+ [ d e a b c 2 S1 2 T11 ]
+ [ c d e a b 3 S1 3 T11 ]
+ [ b c d e a 4 S1 4 T11 ]
+ [ a b c d e 5 S1 5 T11 ]
+ [ e a b c d 6 S1 6 T11 ]
+ [ d e a b c 7 S1 7 T11 ]
+ [ c d e a b 8 S1 8 T11 ]
+ [ b c d e a 9 S1 9 T11 ]
+ [ a b c d e 10 S1 10 T11 ]
+ [ e a b c d 11 S1 11 T11 ]
+ [ d e a b c 12 S1 12 T11 ]
+ [ c d e a b 13 S1 13 T11 ]
+ [ b c d e a 14 S1 14 T11 ]
+ [ a b c d e 15 S1 15 T11 ]
+ } [ F ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-G1) ( block state1 -- )
+ { uint-array uint-array } declare {
+ [ e a b c d 7 S1 16 T12 ]
+ [ d e a b c 4 S1 17 T12 ]
+ [ c d e a b 13 S1 18 T12 ]
+ [ b c d e a 1 S1 19 T12 ]
+ [ a b c d e 10 S1 20 T12 ]
+ [ e a b c d 6 S1 21 T12 ]
+ [ d e a b c 15 S1 22 T12 ]
+ [ c d e a b 3 S1 23 T12 ]
+ [ b c d e a 12 S1 24 T12 ]
+ [ a b c d e 0 S1 25 T12 ]
+ [ e a b c d 9 S1 26 T12 ]
+ [ d e a b c 5 S1 27 T12 ]
+ [ c d e a b 2 S1 28 T12 ]
+ [ b c d e a 14 S1 29 T12 ]
+ [ a b c d e 11 S1 30 T12 ]
+ [ e a b c d 8 S1 31 T12 ]
+ } [ G ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-H1) ( block state1 -- )
+ { uint-array uint-array } declare {
+ [ d e a b c 3 S1 32 T13 ]
+ [ c d e a b 10 S1 33 T13 ]
+ [ b c d e a 14 S1 34 T13 ]
+ [ a b c d e 4 S1 35 T13 ]
+ [ e a b c d 9 S1 36 T13 ]
+ [ d e a b c 15 S1 37 T13 ]
+ [ c d e a b 8 S1 38 T13 ]
+ [ b c d e a 1 S1 39 T13 ]
+ [ a b c d e 2 S1 40 T13 ]
+ [ e a b c d 7 S1 41 T13 ]
+ [ d e a b c 0 S1 42 T13 ]
+ [ c d e a b 6 S1 43 T13 ]
+ [ b c d e a 13 S1 44 T13 ]
+ [ a b c d e 11 S1 45 T13 ]
+ [ e a b c d 5 S1 46 T13 ]
+ [ d e a b c 12 S1 47 T13 ]
+ } [ H ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-I1) ( block state1 -- )
+ { uint-array uint-array } declare {
+ [ c d e a b 1 S1 48 T14 ]
+ [ b c d e a 9 S1 49 T14 ]
+ [ a b c d e 11 S1 50 T14 ]
+ [ e a b c d 10 S1 51 T14 ]
+ [ d e a b c 0 S1 52 T14 ]
+ [ c d e a b 8 S1 53 T14 ]
+ [ b c d e a 12 S1 54 T14 ]
+ [ a b c d e 4 S1 55 T14 ]
+ [ e a b c d 13 S1 56 T14 ]
+ [ d e a b c 3 S1 57 T14 ]
+ [ c d e a b 7 S1 58 T14 ]
+ [ b c d e a 15 S1 59 T14 ]
+ [ a b c d e 14 S1 60 T14 ]
+ [ e a b c d 5 S1 61 T14 ]
+ [ d e a b c 6 S1 62 T14 ]
+ [ c d e a b 2 S1 63 T14 ]
+ } [ I ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-J1) ( block state1 -- )
+ { uint-array uint-array } declare {
+ [ b c d e a 4 S1 64 T15 ]
+ [ a b c d e 0 S1 65 T15 ]
+ [ e a b c d 5 S1 66 T15 ]
+ [ d e a b c 9 S1 67 T15 ]
+ [ c d e a b 7 S1 68 T15 ]
+ [ b c d e a 12 S1 69 T15 ]
+ [ a b c d e 2 S1 70 T15 ]
+ [ e a b c d 10 S1 71 T15 ]
+ [ d e a b c 14 S1 72 T15 ]
+ [ c d e a b 1 S1 73 T15 ]
+ [ b c d e a 3 S1 74 T15 ]
+ [ a b c d e 8 S1 75 T15 ]
+ [ e a b c d 11 S1 76 T15 ]
+ [ d e a b c 6 S1 77 T15 ]
+ [ c d e a b 15 S1 78 T15 ]
+ [ b c d e a 13 S1 79 T15 ]
+ } [ J ] with-ripemd-160-round ;
+
+
+: (process-ripemd-160-block-J2) ( block state2 -- )
+ { uint-array uint-array } declare {
+ [ a b c d e 5 S2 0 T21 ]
+ [ e a b c d 14 S2 1 T21 ]
+ [ d e a b c 7 S2 2 T21 ]
+ [ c d e a b 0 S2 3 T21 ]
+ [ b c d e a 9 S2 4 T21 ]
+ [ a b c d e 2 S2 5 T21 ]
+ [ e a b c d 11 S2 6 T21 ]
+ [ d e a b c 4 S2 7 T21 ]
+ [ c d e a b 13 S2 8 T21 ]
+ [ b c d e a 6 S2 9 T21 ]
+ [ a b c d e 15 S2 10 T21 ]
+ [ e a b c d 8 S2 11 T21 ]
+ [ d e a b c 1 S2 12 T21 ]
+ [ c d e a b 10 S2 13 T21 ]
+ [ b c d e a 3 S2 14 T21 ]
+ [ a b c d e 12 S2 15 T21 ]
+ } [ J ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-I2) ( block state2 -- )
+ { uint-array uint-array } declare {
+ [ e a b c d 6 S2 16 T22 ]
+ [ d e a b c 11 S2 17 T22 ]
+ [ c d e a b 3 S2 18 T22 ]
+ [ b c d e a 7 S2 19 T22 ]
+ [ a b c d e 0 S2 20 T22 ]
+ [ e a b c d 13 S2 21 T22 ]
+ [ d e a b c 5 S2 22 T22 ]
+ [ c d e a b 10 S2 23 T22 ]
+ [ b c d e a 14 S2 24 T22 ]
+ [ a b c d e 15 S2 25 T22 ]
+ [ e a b c d 8 S2 26 T22 ]
+ [ d e a b c 12 S2 27 T22 ]
+ [ c d e a b 4 S2 28 T22 ]
+ [ b c d e a 9 S2 29 T22 ]
+ [ a b c d e 1 S2 30 T22 ]
+ [ e a b c d 2 S2 31 T22 ]
+ } [ I ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-H2) ( block state2 -- )
+ { uint-array uint-array } declare {
+ [ d e a b c 15 S2 32 T23 ]
+ [ c d e a b 5 S2 33 T23 ]
+ [ b c d e a 1 S2 34 T23 ]
+ [ a b c d e 3 S2 35 T23 ]
+ [ e a b c d 7 S2 36 T23 ]
+ [ d e a b c 14 S2 37 T23 ]
+ [ c d e a b 6 S2 38 T23 ]
+ [ b c d e a 9 S2 39 T23 ]
+ [ a b c d e 11 S2 40 T23 ]
+ [ e a b c d 8 S2 41 T23 ]
+ [ d e a b c 12 S2 42 T23 ]
+ [ c d e a b 2 S2 43 T23 ]
+ [ b c d e a 10 S2 44 T23 ]
+ [ a b c d e 0 S2 45 T23 ]
+ [ e a b c d 4 S2 46 T23 ]
+ [ d e a b c 13 S2 47 T23 ]
+ } [ H ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-G2) ( block state2 -- )
+ { uint-array uint-array } declare {
+ [ c d e a b 8 S2 48 T24 ]
+ [ b c d e a 6 S2 49 T24 ]
+ [ a b c d e 4 S2 50 T24 ]
+ [ e a b c d 1 S2 51 T24 ]
+ [ d e a b c 3 S2 52 T24 ]
+ [ c d e a b 11 S2 53 T24 ]
+ [ b c d e a 15 S2 54 T24 ]
+ [ a b c d e 0 S2 55 T24 ]
+ [ e a b c d 5 S2 56 T24 ]
+ [ d e a b c 12 S2 57 T24 ]
+ [ c d e a b 2 S2 58 T24 ]
+ [ b c d e a 13 S2 59 T24 ]
+ [ a b c d e 9 S2 60 T24 ]
+ [ e a b c d 7 S2 61 T24 ]
+ [ d e a b c 10 S2 62 T24 ]
+ [ c d e a b 14 S2 63 T24 ]
+ } [ G ] with-ripemd-160-round ;
+
+: (process-ripemd-160-block-F2) ( block state2 -- )
+ { uint-array uint-array } declare {
+ [ b c d e a 12 S2 64 T25 ]
+ [ a b c d e 15 S2 65 T25 ]
+ [ e a b c d 10 S2 66 T25 ]
+ [ d e a b c 4 S2 67 T25 ]
+ [ c d e a b 1 S2 68 T25 ]
+ [ b c d e a 5 S2 69 T25 ]
+ [ a b c d e 8 S2 70 T25 ]
+ [ e a b c d 7 S2 71 T25 ]
+ [ d e a b c 6 S2 72 T25 ]
+ [ c d e a b 2 S2 73 T25 ]
+ [ b c d e a 13 S2 74 T25 ]
+ [ a b c d e 14 S2 75 T25 ]
+ [ e a b c d 0 S2 76 T25 ]
+ [ d e a b c 3 S2 77 T25 ]
+ [ c d e a b 9 S2 78 T25 ]
+ [ b c d e a 11 S2 79 T25 ]
+ } [ F ] with-ripemd-160-round ;
+
+: byte-array>le ( byte-array -- byte-array )
+ little-endian? [
+ dup 4 <groups> [
+ [ [ 1 2 ] dip exchange-unsafe ]
+ [ [ 0 3 ] dip exchange-unsafe ] bi
+ ] each
+ ] unless ;
+
+HINTS: byte-array>le byte-array ;
+
+M: ripemd-160-state checksum-block
+ [
+ [ byte-array>le uint cast-array ] dip [
+ state1>> {
+ [ (process-ripemd-160-block-F1) ]
+ [ (process-ripemd-160-block-G1) ]
+ [ (process-ripemd-160-block-H1) ]
+ [ (process-ripemd-160-block-I1) ]
+ [ (process-ripemd-160-block-J1) ]
+ } 2cleave ] [
+ state2>> {
+ [ (process-ripemd-160-block-J2) ]
+ [ (process-ripemd-160-block-I2) ]
+ [ (process-ripemd-160-block-H2) ]
+ [ (process-ripemd-160-block-G2) ]
+ [ (process-ripemd-160-block-F2) ]
+ } 2cleave ] 2bi
+ ] [
+ update-ripemd-160
+ ] bi ;
+
+: ripemd-160>checksum ( ripemd-160 -- bytes )
+ old-state>> underlying>> byte-array>le ;
+
+M: ripemd-160-state clone
+ call-next-method
+ [ clone ] change-state1 [ clone ] change-state2
+ [ clone ] change-old-state ;
+
+M: ripemd-160-state get-checksum
+ clone
+ [ bytes>> f ] [ bytes-read>> pad-last-block ] [ ] tri
+ [ [ checksum-block ] curry each ] [ ripemd-160>checksum ] bi ;
+
+PRIVATE>