SHA512_HMAC

[ruro]

Good day !

I am attempting to write a module where I derive a key from 2048 SHA512_HMAC iterations, however I cannot seem to get the hash correct after the initial hash.

This is what I am trying

Code:

  sha512_hmac_ctx_t ctx0;   sha512_hmac_init_swap(&ctx0, &pw, pwl);   sha512_hmac_update_swap(&ctx0, &salt, 12);   sha512_hmac_final(&ctx0);   print_u64_array_hex(&ctx0.opad.h, 8);     memcpy(&seed, &ctx0.opad.h, 64);   //xor_seed_with_round(&seed, &ctx0.opad.h);     u64 U[16] = {0};   memcpy(&U, &ctx0.opad.h, 64);   for(int x=1;x<2048;x++){     sha512_hmac_ctx_t ctx;     sha512_hmac_init_swap(&ctx, &pw, pwl);     sha512_hmac_update_swap(&ctx, U, 64);     sha512_hmac_final(&ctx);     if (x == 1) { print_u64_array_hex(&ctx.opad.h, 8); }     memcpy(&U, &ctx.opad.h, 64);     xor_seed_with_round(&seed, &U);   }

As I mentioned, the initial hash at ctx0 is correct, however just after one iteration in the loop, the hash is wrong. I know the hash is wrong because I have a working implementation in Golang.

The same issue I have with normal sha512 as well, where I can get the first hash as expected, but then it just works unexpectedly.

Would appreciate any help
Thanks !

[ruro]

Found the issue

seems like byte order is different for the output

my quick'n'dirty solution was to convert to uchar array after every iteration

Code:

for (int i=0; i<8; i++) { U[i*8] = (ctx0.opad.h[i] & 0xFF00000000000000) >> 56; U[i*8+1] = (ctx0.opad.h[i] & 0x00FF000000000000) >> 48; U[i*8+2] = (ctx0.opad.h[i] & 0x0000FF0000000000) >> 40; U[i*8+3] = (ctx0.opad.h[i] & 0x000000FF00000000) >> 32; U[i*8+4] = (ctx0.opad.h[i] & 0x00000000FF000000) >> 24; U[i*8+5] = (ctx0.opad.h[i] & 0x0000000000FF0000) >> 16; U[i*8+6] = (ctx0.opad.h[i] & 0x000000000000FF00) >> 8; U[i*8+7] = ctx0.opad.h[i] & 0x00000000000000FF; }

would still be interested to know if am mis-using the API, and if there are better fixes.