MHash-384

Yet another simple fast portable secure hashing library

1 Introduction

MHash-384 is a fast, portable and secure hashing library, released under the MIT license.

The MHash-384 core library has been written in plain C, and the CLI front-end has been written in C++. The core library provides a simple "stream processing" API, that is available in two flavors: a plain C99 version and an object-oriented C++ wrapper. Either way, the MHash-384 library produces hash values with a fixed length of 384 bits (48 bytes).

MHash-384 supports a wide range of compilers, including MSVC++, GCC, MinGW/Cygwin, Clang/LLVM and Intel C++. It also runs on many platforms, including Windows, Linux, BSD and Solaris. Furthermore, the MHash-384 library has already been ported to various other programming languages, including Java, Microsoft.NET, Python as well as Delphi.

2 Quick Start Guide

In order to use the MHash-384 library, simply include the header file mhash384.h in your code:

#include <mhash384.h>

2.1 Example for C language

If you source code is written in C, use the mhash384_t struct and the mhash384_XYZ() functions:

/*variables*/
uint8_t buffer[BUFFSIZE];
size_t len;
uint8_t result[MHASH384_SIZE];
mhash384_t mhash384;

/*initialization*/
mhash384_init(&mhash384);

/*input data processing*/
while(more_data())
{
    len = read_data(buffer, BUFFSIZE);
    mhash384_update(&mhash384, buffer, len);
}

/*finalization*/
mhash384_final(&mhash384, result);

2.2 Example for C++ language

Or, if you source code is written in C++, use the provided MHash384 wrapper class:

/*instance*/
MHash384 mhash384;

/*input data processing*/
while(more_data())
{
    const std::vector<uint8_t> buffer = read_data();
    mhash384.update(buffer);
}

/*finalization*/
const uint8_t *result = mhash384.finish();

3 Command-line Usage

MHash-384 comes with a simple "standalone" command-line application, similar to the sha1sum orsha256sum utilities.

3.1 Synopsis

The MHash-384 command-line application takes a number of optional options followed by an one or more input files.

If no input file is specified, input will be read from standard input (stdin).

The digest will be written to the standard output (stdout). Diagnostic message are written to the standard error (stderr).

mhash384 [OPTIONS] [<FILE_1> <FILE_2> ... <FILE_N>]

3.2 Options

MHash-384 supports the following options:

3.3 Output Format

In default operation mode, MHash-384 writes one line per input file to the standard output:

<HASH_VALUE> [SPACE SPACE <FILE_NAME>]

The format of the hash value is either Hex (hexadecimal) or Base64 (RFC-4648), depending on the specified options.

Also, the file name will be printed, unless "short" format was requested. File names may contain a path!

Sample output

BD41A203A61FE74178A8D507...33E553FD1569ED733C52BE8B  debian-7.9.0-amd64-DVD-1.iso
EE328DDD4E116165252F1FF8...11729801097C51FB61D20184  debian-7.9.0-i386-DVD-1.iso
A8B2007537867BDA0C18A264...45A1379AB8B4A77F9D8C8B24  debian-10.0.0-amd64-DVD-1.iso

3.4 Exit Code

On success, zero is returned. On error or user interruption, a non-zero error code is returned.

Note that, with "keep going" mode enabled, the exit code reflects whether at least one file was processed successfully.

3.5 Examples

Compute MHash-384 hash of a single file:

mhash384 "C:\Images\debian-8.3.0-amd64-DVD-1.iso"

Compute MHash-384 hash of two files:

mhash384 "C:\Images\debian-8.3.0-amd64-DVD-1.iso" "C:\Images\debian-8.3.0-i386-DVD-1.iso"

Compute MHash-384 hash of multiple files, using wildcard expansion (globbing):

mhash384 "C:\Images\*.iso"

Compute MHash-384 hash from data passed directly via pipeline:

dd if=/dev/urandom bs=100 count=1 | mhash384

4 API Specification

4.1 Global definitions

Global definitions for both, the C and C++, API's.

4.1.1 MHASH384_SIZE

The size of the final MHash-384 hash value (digest), in bytes. This value is qual to 48U.

4.1.2 MHASH384_WORDS

The number of words per MHash-384 hash. Each word has a size of 64 bits (uint64_t). This value is qual to 6U.

4.2 API for C language

All functions described in the following are reentrant and thread-safe. A single thread may compute multiple MHash-384 hashes in an "interleaved" fashion, provided that a separate MHash-384 context is used for each ongoing hash computation. Multiple threads may compute multiple MHash-384 hashes in parallel, provided that each thread uses its own separate MHash-384 context; no synchronization is required. However, sharing the same MHash-384 context between multiple threads is not safe in the general case. If the same MHash-384 context needs to be accessed from multiple threads, then the threads need to be synchronized explicitly (e.g. via Mutex lock), ensuring that all access to the shared context is rigorously serialized!

4.2.1 mhash384_t

typedef struct mhash384_t;

The MHash-384 context. It represents all state of an ongoing MHash-384 hash computation. Each MHash-384 hash computation needs a corresponding MHash-384 context. It is possible to re-use an MHash-384 context for multiple MHash-384 hash computations, provided that those hash computations are strictly serialized. If multiple MHash-384 hash computations need to be performed in an "interleaved" fashion, each ongoing hash computation needs to use its own separate MHash-384 context. In any case, the memory for the mhash384_t instance(s) must be allocated by the calling application. If the MHash-384 context was allocated on the heap space, the calling application also is responsible for freeing up that memory.

Note: Applications should treat this data-type as opaque, i.e. the application must not access the fields of the struct directly!

4.2.2 mhash384_init()

void mhash384_init(mhash384_t *const ctx);

Set up the MHash-384 hash computation. This function initializes the MHash-384 context; it prepares the state for the upcoming hash computation. The application is required to call this function once for each MHash-384 hash computation. The function must to be called before any input data can be processed in a specific MHash-384 context! The application may call this function again, on the same MHash-384 context, which will reset that context and start a new hash computation.

Parameters:

4.2.3 mhash384_update()

void mhash384_update(mhash384_t *const ctx, const uint8_t *const data_in, const size_t len);

Process next chunk of input data. This function performs the actual MHash-384 hash computation, in an incremental way. The function processes the next N bytes of input data and updates the MHash-384 context (mhash384_t) accordingly. The application is supposed to call this function in a loop, with the same MHash-384 context, until all input has been processed.

Parameters:

4.2.4 mhash384_final()

void mhash384_final(mhash384_t *const ctx, uint8_t *const digest_out);

Retrieve final hash value. This function completes the MHash-384 hash computation and returns the computed hash value. The function finalizes the MHash-384 context (mhash384_t) and writes the resulting hash value to the output buffer. Once this function has been called, the corresponding MHash-384 context will be in an undefined state, until it is reset!

Parameters:

4.2.5 mhash384_compute()

void mhash384_compute(uint8_t *const digest_out, const uint8_t *const data_in, const size_t len);

Compute hash value at once. This is a convenience function that can be used to compute an MHash-384 hash value with just a single invocation. The function processes a block of N input bytes and writes the resulting hash value to the output buffer. This function does not required the caller to provide an MHash-384 context; it internally uses a "transient" context. Anyway, this function is fully thread-safe. Naturally, this function is only applicable where all input data is available at once.

Parameters:

4.2.6 mhash384_version()

void mhash384_version (uint16_t *const major, uint16_t *const minor, uint16_t *const patch);

Retrieve version information. This function returns the current version of the MHash-384 library.

Parameters:

4.2.7 mhash384_selftest()

bool mhash384_selftest(void);

Self-test routine. This function runs the built-in self-test of the MHash-384 library; intended for debugging purposes.

Return value:

4.3 API for C++ language

For the C++ langauge, the MHash384 class is provided, as a convenience wrapper around the C-API. All functions of the MHash384 class are reentrant and thread-safe. A single thread may compute multiple MHash-384 hashes in an "interleaved" fashion, provided that a separate MHash384 instance (object) is used for each ongoing hash computation. Multiple threads may compute multiple MHash-384 hashes in parallel, provided that each thread uses its own separate MHash384 instance; no synchronization is required. However, sharing the same MHash384 instance between multiple threads is not safe in the general case. If the same MHash384 instance needs to be accessed from multiple threads, then the threads need to be synchronized explicitly (e.g. via Mutex lock), ensuring that all access to the shared instance is rigorously serialized!

4.3.1 MHash384()

MHash384(void)

Constructor. Creates a new MHash384 instance (object) and prepares the state for the upcoming hash computation. Each instance internally maintains the corresponding MHash-384 context. The application is required to create a separate MHash384 instance for each ongoing MHash-384 hash computation; it is possible to re-use an MHash384 instance for multiple MHash-384 hash computations, provided that those hash computations are strictly serialized.
Note: The application is required to allocate the memory for the MHash384 instance. If the instance was allocated on the heap (dynamic storage duration), the application is also required to explicitly destroy the instance, when no longer needed.

4.3.2 MHash384::update() [1]

void MHash384::update(const std::uint8_t *const data, const size_t len)

Process next chunk of input data. This function performs the actual MHash-384 hash computation, in an incremental way. The function processes the next N bytes of input data and updates the internal MHash-384 context accordingly. The application is supposed to call this function in a loop, on the same MHash384 instance, until all input has been processed.

Parameters:

4.3.3 MHash384::update() [2]

template<size_t size>
void MHash384::update(const std::array<std::uint8_t, size> &data)

A convenience overload of the MHash384::update() function, which processes an std::array<uint8_t, N> as input.

Parameters:

4.3.4 MHash384::update() [3]

void MHash384::update(const std::vector<std::uint8_t> &data)

A convenience overload of the MHash384::update() function, which processes an std::vector<uint8_t> as input.

Parameters:

4.3.5 MHash384::update() [4]

void MHash384::update(const std::string &text)

A convenience overload of the MHash384::update() function, which processes an std::string as input.

Parameters:

4.3.6 MHash384::update() [5]

void MHash384::update(const char *const text)

A convenience overload of the MHash384::update() function, which processes a NULL-terminated C string as input.

Parameters:

4.3.7 MHash384::update() [6]

template<typename element_type>
void MHash384::update(const element_type *const address);

A convenience overload of the MHash384::update() function, which processes an object designated by a pointer.

Parameters:

4.3.8 MHash384::update() [7]

template<typename element_type>
void MHash384::update(const element_type &element);

A convenience overload of the MHash384::update() function, which processes an object designated by a reference.

Parameters:

4.3.9 MHash384::update() [8]

template<typename iterator_type>
void MHash384::update(const iterator_type &first, const iterator_type &last)

A convenience overload of the MHash384::update() function, which processes a sequence of elements via iterators.

Parameters:

4.3.10 MHash384::finish()

const std::uint8_t *MHash384::finish(void)

Retrieve final hash value. This function completes the MHash-384 hash computation. The function finalizes the internal MHash-384 context, if it was not finalized yet, and returns a pointer to the buffer containing the resulting hash value. Once this function has been called, the MHash384 instance remains in the finalized state, until it is reset.

Warning: Trying to process more input data while the MHash384 instance is in finalized state will throw an exception!

Return value:

4.3.11 MHash384::reset()

void MHash384::reset(void)

Reset the MHash-384 hash computation. This function re-initializes the internal MHash-384 context, thus starting a new MHash-384 hash computation. It is not necessary to explicitly call this function on a new MHash384 instance; it is called implicitly by the constructor. However, it is possible to re-use an existing MHash384 instance for multiple (strictly serialized) MHash-384 hash computations, by calling this function in between each pair of consecutive hash computations.

5 Supported platforms

MHash-384 has been tested to successfully build and run on (at least) the following platforms:

5.1 C/C++ library and CLI front-end

5.2 Ports to other lanuguages

6 Build instructions

The MHash-384 C/C++ library and CLI front-end can be built using (at least) one of the following build systems:

6.1 Microsoft Visual C++

MHash-384 can be built for the Windows platform using the Microsoft Visual C++ compiler, version 16.00 or later.

The provided project/solution files should build successfully with Visual Studio 2010 or later. However, be aware that it may be necessary to adjust the "Platform Toolset" to your specific version of Visual Studio in all projects! Build configurations are available for both, 32-Bit (Win32) and 64-Bit (x64) Windows, but the 64-Bit flavor is recommended for best performance.

Note: You can download the latest version of the Visual Studio "Community" edition for free from the official web-site.

6.1.1 Command-line usage

Building MHash-384 from the developer command prompt is supported via the MSBuild tool:

MSBuild.exe /property:Configuration=Release /property:Platform=x64 /target:Rebuild "MHash384.sln"

6.2 GNU C/C++ compiler

MHash-384 can be built using the GNU C/C++ compiler (GCC), version 4.8 or later, or any GCC-compatible compiler, such as Clang/LLVM, on a wide range of platforms; supported platforms include Linux, the BSD family, Solaris and Windows.

The provided makefiles should build successfully with GNUmake on any supported platform. GNUmake is the default make implementation on Linux/GNU, but may need to be installed separately and invoked as gmake on BSD and Solaris. GCC or a GCC-compatible compiler (e.g. Clang/LLVM) is available out-of-the-box on most supported platforms; otherwise it can usually be installed from the system's package manager. Please see the documentation of your specific distribution for details!

6.2.1 Command-line usage

In order to build MHash-384, simply run make from the MHash-384 base directory, for example:

$ make -B MARCH=x86-64 MTUNE=intel STATIC=1

6.2.2 Make file parameters

The following options can be used to tweak the behavior of the provided makefiles:

The following options can be used to override the default tools used by the makefiles:

6.2.3 Windows support

It is possible to build MHash-384 with GCC or Clang/LLVM on the Windows platform thanks to Cygwin or MinGW/MSYS. However, if you want to build with GCC or Clang/LLVM on Windows nowadays, then it is highly recommended to use MSYS2 in conjunction with Mingw-w64 – even for 32-Bit targets! The “old” Mingw.org (Mingw32) project is considered deprecated.

Just follow the basic MSYS2 setup procedure, as described on the official web-site, then install Mingw-w64:

pacman -S base-devel mingw-w64-i686-toolchain mingw-w64-x86_64-toolchain

7 Algorithm Description

This section contains a pseudo-code description of the MHash-384 algorithm:

7.1 Constants

Pre-defined constants for MHash-384 computation:

const
  MHASH384_SIZE := 48                                         /*size of the hash, in bytes*/
  MHASH384_WORDS := 6                                         /*size of the hash, in 64-Bit words*/
  MHASH384_INI: array[0..MHASH384_WORDS-1] of UInt64          /*the initial state vector*/
  MHASH384_FIN: array[0..MHASH384_SIZE-1] of Byte             /*byte indices for the finalization routine*/
  MHASH384_XOR: array[0..256, 0..MHASH384_WORDS-1] of UInt64  /*LUT for XOR (exclusive or) constants*/
  MHASH384_ADD: array[0..256, 0..MHASH384_WORDS-1] of UInt64  /*LUT for ADD (arithmetic addition) constants*/
  MHASH384_MIX: array[0..255, 0..MHASH384_WORDS-1] of Byte    /*LUT containing the "mixing" indices*/

Note: The lookup tables MHASH384_XOR and MHASH384_ADD have been pre-computed in such a way that each of the 257 rows (each with a size of 48 Bytes) has a hamming distance of at least 182 bits to any other row. This ensures that, for each possible value an input byte can take, a different set of state bits will be "flipped" by the XOR (exclusive or) operation.

7.2 State

The state of an ongoing MHash-384 computation:

type MHash384State = record
  rnd: UInt8
  hash: array[0..MHASH384_WORDS-1] of UInt64

7.3 Initialization

Set up the MHash-384 state for a new hash computation:

procedure MHash384_Initialize
  state.rnd ← 0
  state.hash ← MHASH384_INI

7.4 Update Routine

Update the MHash-384 state with the next N input (message) bytes:

procedure MHash384_Update
  input:
    message: array[0..N-1] of Byte
  for each Byte b in message do
    _MHash364_Iterate(MHASH384_XOR[b], MHASH384_ADD[b],  MHASH384_MIX[rnd])
    state.rnd ← (state.rnd + 1) mod 256

Note: This routine can be invoked multiple times in order to process in the input message in "chunks" of arbitrary size.

7.5 Finalization Routine

Compute the final hash value (digest), once all input has been processed:

procedure MHash384_Update
  var:
    previous: UInt16
  output:
    digest: array[0..MHASH384_SIZE-1] of Byte
  previous ← 256;
  for i = 0 to HASH384_SIZE-1 do
    _MHash364_Iterate(MHASH384_XOR[previous], MHASH384_ADD[previous],  MHASH384_MIX[rnd])
    state.rnd ← (state.rnd + 1) mod 256
    previous ← (digest[i] ← _MHash384_GetByte(MHASH384_FIN[i]))

7.6 Iteration Routine

Internal processing routine, used by the "update" and "finalization" routines:

procedure _MHash364_Iterate
  var:
    temp: array[0..MHASH384_WORDS-1] of UInt64
  input:
    xor_row: array[0..MHASH384_WORDS-1] of UInt64
    add_row: array[0..MHASH384_WORDS-1] of UInt64
    mix_row: array[0..MHASH384_WORDS-1] of Byte
  for i = 0 to HASH384_WORDS-1 do
    temp[i] ← Hash128to64(state.hash[i] + add_row[i], state.hash[mix_row[i]]) ⊻ xor_row[i]
  state.hash ← temp

Note: Here the symbol denotes the bit-wise XOR (exclusive or) operator. Furthermore, the Hash128to64() routine is adopted from the function of the same name that appears in Google's CityHash. Please see here for details!

7.7 Extract Byte

Internal routine to extract a specific byte from the current state:

procedure _MHash384_GetByte
  input:
    index: Byte
  output:
    value: Byte
  value ← (state.hash[index ÷ 8] ≫ ((index mod 8) × 8)) mod 256

Note: Here the ÷ symbol denotes integer division, i.e. an arithmetic division in which the fractional part (remainder) is discarded. Furthermore, the symbol denotes the bit-wise "right shift" operator (shift bits to the right by n places).

8 License

MHash-384 - Simple fast portable secure hashing library
© 2016-2020 LoRd_MuldeR

Permission is hereby granted, free of charge, to any person obtaining a copy of this software
and associated documentation files (the "Software"), to deal in the Software without
restriction, including without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the
Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or
substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

https://opensource.org/licenses/MIT

9 Version History

9.1 Version 2.0.0 [2020-04-26]