summary refs log tree commit diff
path: root/crypto
diff options
context:
space:
mode:
authorPeter Dettman <peter.dettman@bouncycastle.org>2021-02-11 01:12:10 +0700
committerPeter Dettman <peter.dettman@bouncycastle.org>2021-02-11 01:12:10 +0700
commit52707d5c2fb465ab5ccc7d4d0d4a15b43045e492 (patch)
tree2a044d93d0c2d210329d68a6d3894a0de6645f09 /crypto
parentAdd more digest test cases (diff)
downloadBouncyCastle.NET-ed25519-52707d5c2fb465ab5ccc7d4d0d4a15b43045e492.tar.xz
Refactoring CShake
Diffstat (limited to 'crypto')
-rw-r--r--crypto/src/crypto/digests/CSHAKEDigest.cs63
-rw-r--r--crypto/src/crypto/digests/ShakeDigest.cs4
2 files changed, 27 insertions, 40 deletions
diff --git a/crypto/src/crypto/digests/CSHAKEDigest.cs b/crypto/src/crypto/digests/CSHAKEDigest.cs
index c070a47c2..30d532089 100644
--- a/crypto/src/crypto/digests/CSHAKEDigest.cs
+++ b/crypto/src/crypto/digests/CSHAKEDigest.cs
@@ -7,9 +7,21 @@ namespace Org.BouncyCastle.Crypto.Digests
     /// <summary>
     /// Customizable SHAKE function.
     /// </summary>
-    public class CShakeDigest : ShakeDigest
+    public class CShakeDigest
+        : ShakeDigest
     {
         private static readonly byte[] padding = new byte[100];
+
+        private static byte[] EncodeString(byte[] str)
+        {
+            if (Arrays.IsNullOrEmpty(str))
+            {
+                return XofUtilities.LeftEncode(0L);
+            }
+
+            return Arrays.Concatenate(XofUtilities.LeftEncode(str.Length * 8L), str);
+        }
+
         private readonly byte[] diff;
 
         /// <summary>
@@ -18,7 +30,8 @@ namespace Org.BouncyCastle.Crypto.Digests
         /// <param name="bitLength">bit length of the underlying SHAKE function, 128 or 256.</param>
         /// <param name="N">the function name string, note this is reserved for use by NIST. Avoid using it if not required.</param>
         /// <param name="S">the customization string - available for local use.</param>
-        public CShakeDigest(int bitLength, byte[] N, byte[] S) : base(bitLength)
+        public CShakeDigest(int bitLength, byte[] N, byte[] S)
+            : base(bitLength)
         {
             if ((N == null || N.Length == 0) && (S == null || S.Length == 0))
             {
@@ -26,7 +39,7 @@ namespace Org.BouncyCastle.Crypto.Digests
             }
             else
             {
-                diff = Arrays.ConcatenateAll(XofUtilities.LeftEncode(rate / 8), encodeString(N), encodeString(S));
+                diff = Arrays.ConcatenateAll(XofUtilities.LeftEncode(rate / 8), EncodeString(N), EncodeString(S));
                 DiffPadAndAbsorb();
             }
         }
@@ -54,52 +67,26 @@ namespace Org.BouncyCastle.Crypto.Digests
             }
         }
 
-        private byte[] encodeString(byte[] str)
-        {
-            if (str == null || str.Length == 0)
-            {
-                return XofUtilities.LeftEncode(0);
-            }
-
-            return Arrays.Concatenate(XofUtilities.LeftEncode(str.Length * 8L), str);
-        }
-
         public override string AlgorithmName
         {
             get { return "CSHAKE" + fixedOutputLength; }
         }
 
-        public override int DoFinal(byte[] output, int outOff)
-        {           
-            return DoFinal(output, outOff,GetDigestSize());
-        }
-
-        public override int DoFinal(byte[] output, int outOff, int outLen)
-        {
-            int length = DoOutput(output, outOff, outLen);
-
-            Reset();
-
-            return length;
-        }
-
         public override int DoOutput(byte[] output, int outOff, int outLen)
         {
-            if (diff != null)
+            if (diff == null)
             {
-                if (!squeezing)
-                {
-                    AbsorbBits(0x00, 2);
-                }
-
-                Squeeze(output, outOff, ((long)outLen) * 8);
-
-                return outLen;
+                return base.DoOutput(output, outOff, outLen);
             }
-            else
+
+            if (!squeezing)
             {
-                return base.DoOutput(output, outOff, outLen);
+                AbsorbBits(0x00, 2);
             }
+
+            Squeeze(output, outOff, ((long)outLen) << 3);
+
+            return outLen;
         }
 
         public override void Reset()
diff --git a/crypto/src/crypto/digests/ShakeDigest.cs b/crypto/src/crypto/digests/ShakeDigest.cs
index c913ce08b..b38e29dc3 100644
--- a/crypto/src/crypto/digests/ShakeDigest.cs
+++ b/crypto/src/crypto/digests/ShakeDigest.cs
@@ -53,11 +53,11 @@ namespace Org.BouncyCastle.Crypto.Digests
 
         public virtual int DoFinal(byte[] output, int outOff, int outLen)
         {
-            DoOutput(output, outOff, outLen);
+            int length = DoOutput(output, outOff, outLen);
 
             Reset();
 
-            return outLen;
+            return length;
         }
 
         public virtual int DoOutput(byte[] output, int outOff, int outLen)