// Copyright (c) 2014-present The Bitcoin Core developers

// Distributed under the MIT software license, see the accompanying

// file COPYING or http://www.opensource.org/licenses/mit-license.php.

#include <crypto/hmac_sha512.h>

#include <crypto/sha512.h>

#include <support/cleanse.h>

#include <cstring>

CHMAC_SHA512::CHMAC_SHA512(const unsigned char* key, size_t keylen)

{

    unsigned char rkey[128];

    if (keylen <= 128) {

  Branch (15:9): [True: 0, False: 0]

        memcpy(rkey, key, keylen);

        memset(rkey + keylen, 0, 128 - keylen);

    } else {

        CSHA512().Write(key, keylen).Finalize(rkey);

        memset(rkey + 64, 0, 64);

    }

    for (int n = 0; n < 128; n++)

  Branch (23:21): [True: 0, False: 0]

        rkey[n] ^= 0x5c;

    outer.Write(rkey, 128);

    for (int n = 0; n < 128; n++)

  Branch (27:21): [True: 0, False: 0]

        rkey[n] ^= 0x5c ^ 0x36;

    inner.Write(rkey, 128);

    memory_cleanse(rkey, sizeof(rkey));

}

void CHMAC_SHA512::Finalize(unsigned char hash[OUTPUT_SIZE])

{

    unsigned char temp[64];

    inner.Finalize(temp);

    outer.Write(temp, 64).Finalize(hash);

    memory_cleanse(temp, sizeof(temp));

}