• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

randombit / botan / 19012754211

02 Nov 2025 01:10PM UTC coverage: 90.677% (+0.006%) from 90.671%
19012754211

push

github

web-flow
Merge pull request #5137 from randombit/jack/clang-tidy-includes

Remove various unused includes flagged by clang-tidy misc-include-cleaner

100457 of 110786 relevant lines covered (90.68%)

12189873.8 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

99.07
/src/lib/hash/blake2/blake2b.cpp
1
/*
2
* BLAKE2b
3
* (C) 2016 cynecx
4
* (C) 2017 Jack Lloyd
5
*
6
* Botan is released under the Simplified BSD License (see license.txt)
7
*/
8

9
#include <botan/internal/blake2b.h>
10

11
#include <botan/exceptn.h>
12
#include <botan/mem_ops.h>
13
#include <botan/internal/fmt.h>
14
#include <botan/internal/loadstor.h>
15
#include <botan/internal/rotate.h>
16
#include <botan/internal/stl_util.h>
17
#include <array>
18

19
namespace Botan {
20

21
namespace {
22

23
constexpr std::array<uint64_t, 8> blake2b_IV{0x6a09e667f3bcc908,
24
                                             0xbb67ae8584caa73b,
25
                                             0x3c6ef372fe94f82b,
26
                                             0xa54ff53a5f1d36f1,
27
                                             0x510e527fade682d1,
28
                                             0x9b05688c2b3e6c1f,
29
                                             0x1f83d9abfb41bd6b,
30
                                             0x5be0cd19137e2179};
31

32
}  // namespace
33

34
BLAKE2b::BLAKE2b(size_t output_bits) : m_output_bits(output_bits), m_H(blake2b_IV.size()), m_T(), m_F(), m_key_size(0) {
18,732✔
35
   if(output_bits == 0 || output_bits > 512 || output_bits % 8 != 0) {
6,244✔
36
      throw Invalid_Argument("Bad output bits size for BLAKE2b");
1✔
37
   }
38

39
   state_init();
6,243✔
40
}
6,245✔
41

42
void BLAKE2b::state_init() {
229,658✔
43
   copy_mem(m_H.data(), blake2b_IV.data(), blake2b_IV.size());
229,658✔
44
   m_H[0] ^= (0x01010000 | (static_cast<uint8_t>(m_key_size) << 8) | static_cast<uint8_t>(output_length()));
229,658✔
45
   m_T[0] = m_T[1] = 0;
229,658✔
46
   m_F = 0;
229,658✔
47

48
   m_buffer.clear();
229,658✔
49
   if(m_key_size > 0) {
229,658✔
50
      m_buffer.append(m_padded_key_buffer);
4,597✔
51
   }
52
}
229,658✔
53

54
namespace {
55

56
BOTAN_FORCE_INLINE void G(uint64_t& a, uint64_t& b, uint64_t& c, uint64_t& d, uint64_t M0, uint64_t M1) {
236,527✔
57
   a = a + b + M0;
236,527✔
58
   d = rotr<32>(d ^ a);
236,527✔
59
   c = c + d;
236,527✔
60
   b = rotr<24>(b ^ c);
236,527✔
61
   a = a + b + M1;
236,527✔
62
   d = rotr<16>(d ^ a);
236,527✔
63
   c = c + d;
236,527✔
64
   b = rotr<63>(b ^ c);
236,527✔
65
}
66

67
template <size_t i0,
68
          size_t i1,
69
          size_t i2,
70
          size_t i3,
71
          size_t i4,
72
          size_t i5,
73
          size_t i6,
74
          size_t i7,
75
          size_t i8,
76
          size_t i9,
77
          size_t iA,
78
          size_t iB,
79
          size_t iC,
80
          size_t iD,
81
          size_t iE,
82
          size_t iF>
83
BOTAN_FORCE_INLINE void ROUND(uint64_t* v, const uint64_t* M) {
236,527✔
84
   G(v[0], v[4], v[8], v[12], M[i0], M[i1]);
236,527✔
85
   G(v[1], v[5], v[9], v[13], M[i2], M[i3]);
236,527✔
86
   G(v[2], v[6], v[10], v[14], M[i4], M[i5]);
236,527✔
87
   G(v[3], v[7], v[11], v[15], M[i6], M[i7]);
236,527✔
88
   G(v[0], v[5], v[10], v[15], M[i8], M[i9]);
236,527✔
89
   G(v[1], v[6], v[11], v[12], M[iA], M[iB]);
236,527✔
90
   G(v[2], v[7], v[8], v[13], M[iC], M[iD]);
236,527✔
91
   G(v[3], v[4], v[9], v[14], M[iE], M[iF]);
236,527✔
92
}
93

94
}  // namespace
95

96
void BLAKE2b::compress(const uint8_t* input, size_t blocks, uint64_t increment) {
236,303✔
97
   for(size_t b = 0; b != blocks; ++b) {
472,830✔
98
      m_T[0] += increment;
236,527✔
99
      if(m_T[0] < increment) {
236,527✔
100
         m_T[1]++;
×
101
      }
102

103
      uint64_t M[16];
236,527✔
104
      uint64_t v[16];
236,527✔
105
      load_le(M, input, 16);
236,527✔
106

107
      input += BLAKE2B_BLOCKBYTES;
236,527✔
108

109
      for(size_t i = 0; i < 8; i++) {
2,128,743✔
110
         v[i] = m_H[i];
1,892,216✔
111
      }
112
      for(size_t i = 0; i != 8; ++i) {
2,128,743✔
113
         v[i + 8] = blake2b_IV[i];
1,892,216✔
114
      }
115

116
      v[12] ^= m_T[0];
236,527✔
117
      v[13] ^= m_T[1];
236,527✔
118
      v[14] ^= m_F;
236,527✔
119

120
      ROUND<0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15>(v, M);
236,527✔
121
      ROUND<14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3>(v, M);
236,527✔
122
      ROUND<11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4>(v, M);
236,527✔
123
      ROUND<7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8>(v, M);
236,527✔
124
      ROUND<9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13>(v, M);
236,527✔
125
      ROUND<2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9>(v, M);
236,527✔
126
      ROUND<12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11>(v, M);
236,527✔
127
      ROUND<13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10>(v, M);
236,527✔
128
      ROUND<6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5>(v, M);
236,527✔
129
      ROUND<10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0>(v, M);
236,527✔
130
      ROUND<0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15>(v, M);
236,527✔
131
      ROUND<14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3>(v, M);
236,527✔
132

133
      for(size_t i = 0; i < 8; i++) {
2,128,743✔
134
         m_H[i] ^= v[i] ^ v[i + 8];
1,892,216✔
135
      }
136
   }
137
}
236,303✔
138

139
void BLAKE2b::add_data(std::span<const uint8_t> input) {
407,245✔
140
   BufferSlicer in(input);
407,245✔
141

142
   while(!in.empty()) {
1,233,548✔
143
      if(const auto one_block = m_buffer.handle_unaligned_data(in)) {
419,058✔
144
         compress(one_block->data(), 1, BLAKE2B_BLOCKBYTES);
13,016✔
145
      }
146

147
      if(m_buffer.in_alignment()) {
419,058✔
148
         const auto [aligned_data, full_blocks] = m_buffer.aligned_data_to_process(in);
15,400✔
149
         if(full_blocks > 0) {
15,400✔
150
            compress(aligned_data.data(), full_blocks, BLAKE2B_BLOCKBYTES);
3,351✔
151
         }
152
      }
153
   }
154
}
407,245✔
155

156
void BLAKE2b::final_result(std::span<uint8_t> output) {
219,936✔
157
   const auto pos = m_buffer.elements_in_buffer();
219,936✔
158
   m_buffer.fill_up_with_zeros();
219,936✔
159

160
   m_F = 0xFFFFFFFFFFFFFFFF;
219,936✔
161
   compress(m_buffer.consume().data(), 1, pos);
219,936✔
162
   copy_out_le(output.first(output_length()), m_H);
219,936✔
163
   state_init();
219,936✔
164
}
219,936✔
165

166
Key_Length_Specification BLAKE2b::key_spec() const {
4,324✔
167
   return Key_Length_Specification(1, 64);
4,324✔
168
}
169

170
std::string BLAKE2b::name() const {
3,951✔
171
   return fmt("BLAKE2b({})", m_output_bits);
3,951✔
172
}
173

174
std::unique_ptr<HashFunction> BLAKE2b::new_object() const {
771✔
175
   return std::make_unique<BLAKE2b>(m_output_bits);
771✔
176
}
177

178
std::unique_ptr<HashFunction> BLAKE2b::copy_state() const {
753✔
179
   return std::make_unique<BLAKE2b>(*this);
753✔
180
}
181

182
bool BLAKE2b::has_keying_material() const {
8,102✔
183
   return m_key_size > 0;
8,102✔
184
}
185

186
void BLAKE2b::key_schedule(std::span<const uint8_t> key) {
2,162✔
187
   BOTAN_ASSERT_NOMSG(key.size() <= m_buffer.size());
2,162✔
188

189
   m_key_size = key.size();
2,162✔
190
   m_padded_key_buffer.resize(m_buffer.size());
2,162✔
191

192
   if(m_padded_key_buffer.size() > m_key_size) {
2,162✔
193
      size_t padding = m_padded_key_buffer.size() - m_key_size;
2,162✔
194
      clear_mem(m_padded_key_buffer.data() + m_key_size, padding);
2,162✔
195
   }
196

197
   copy_mem(m_padded_key_buffer.data(), key.data(), key.size());
2,162✔
198
   state_init();
2,162✔
199
}
2,162✔
200

201
void BLAKE2b::clear() {
1,317✔
202
   zeroise(m_H);
1,317✔
203
   m_buffer.clear();
1,317✔
204
   zeroise(m_padded_key_buffer);
1,317✔
205
   m_key_size = 0;
1,317✔
206
   state_init();
1,317✔
207
}
1,317✔
208

209
}  // namespace Botan
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc