+#if 1
+ len -= SHA_DIGEST_LENGTH; /* amend mac */
+ if (len>=(256+SHA_CBLOCK)) {
+ j = (len-(256+SHA_CBLOCK))&(0-SHA_CBLOCK);
+ j += SHA_CBLOCK-key->md.num;
+ SHA1_Update(&key->md,out,j);
+ out += j;
+ len -= j;
+ inp_len -= j;
+ }
+
+ /* but pretend as if we hashed padded payload */
+ bitlen = key->md.Nl+(inp_len<<3); /* at most 18 bits */
+ mac.c[0] = 0;
+ mac.c[1] = (unsigned char)(bitlen>>16);
+ mac.c[2] = (unsigned char)(bitlen>>8);
+ mac.c[3] = (unsigned char)bitlen;
+ bitlen = mac.u[0];
+
+ mac.u[0]=0;
+ mac.u[1]=0;
+ mac.u[2]=0;
+ mac.u[3]=0;
+ mac.u[4]=0;
+
+ for (res=key->md.num, j=0;j<len;j++) {
+ size_t c = out[j];
+ mask = (j-inp_len)>>(sizeof(j)*8-8);
+ c &= mask;
+ c |= 0x80&~mask&~((inp_len-j)>>(sizeof(j)*8-8));
+ data->c[res++]=(unsigned char)c;
+
+ if (res!=SHA_CBLOCK) continue;
+
+ mask = 0-((inp_len+8-j)>>(sizeof(j)*8-1));
+ data->u[SHA_LBLOCK-1] |= bitlen&mask;
+ sha1_block_data_order(&key->md,data,1);
+ mask &= 0-((j-inp_len-73)>>(sizeof(j)*8-1));
+ mac.u[0] |= key->md.h0 & mask;
+ mac.u[1] |= key->md.h1 & mask;
+ mac.u[2] |= key->md.h2 & mask;
+ mac.u[3] |= key->md.h3 & mask;
+ mac.u[4] |= key->md.h4 & mask;
+ res=0;
+ }
+
+ for(i=res;i<SHA_CBLOCK;i++,j++) data->c[i]=0;
+
+ if (res>SHA_CBLOCK-8) {
+ mask = 0-((inp_len+8-j)>>(sizeof(j)*8-1));
+ data->u[SHA_LBLOCK-1] |= bitlen&mask;
+ sha1_block_data_order(&key->md,data,1);
+ mask &= 0-((j-inp_len-73)>>(sizeof(j)*8-1));
+ mac.u[0] |= key->md.h0 & mask;
+ mac.u[1] |= key->md.h1 & mask;
+ mac.u[2] |= key->md.h2 & mask;
+ mac.u[3] |= key->md.h3 & mask;
+ mac.u[4] |= key->md.h4 & mask;
+
+ memset(data,0,SHA_CBLOCK);
+ j+=64;
+ }
+ data->u[SHA_LBLOCK-1] = bitlen;
+ sha1_block_data_order(&key->md,data,1);
+ mask = 0-((j-inp_len-73)>>(sizeof(j)*8-1));
+ mac.u[0] |= key->md.h0 & mask;
+ mac.u[1] |= key->md.h1 & mask;
+ mac.u[2] |= key->md.h2 & mask;
+ mac.u[3] |= key->md.h3 & mask;
+ mac.u[4] |= key->md.h4 & mask;
+
+#ifdef BSWAP
+ mac.u[0] = BSWAP(mac.u[0]);
+ mac.u[1] = BSWAP(mac.u[1]);
+ mac.u[2] = BSWAP(mac.u[2]);
+ mac.u[3] = BSWAP(mac.u[3]);
+ mac.u[4] = BSWAP(mac.u[4]);
+#else
+ for (i=0;i<5;i++) {
+ res = mac.u[i];
+ mac.c[4*i+0]=(unsigned char)(res>>24);
+ mac.c[4*i+1]=(unsigned char)(res>>16);
+ mac.c[4*i+2]=(unsigned char)(res>>8);
+ mac.c[4*i+3]=(unsigned char)res;
+ }
+#endif
+ len += SHA_DIGEST_LENGTH;
+#else
+ SHA1_Update(&key->md,out,inp_len);
+ res = key->md.num;
+ SHA1_Final(mac.c,&key->md);
+
+ {
+ unsigned int inp_blocks, pad_blocks;
+
+ /* but pretend as if we hashed padded payload */
+ inp_blocks = 1+((SHA_CBLOCK-9-res)>>(sizeof(res)*8-1));
+ res += (unsigned int)(len-inp_len);
+ pad_blocks = res / SHA_CBLOCK;
+ res %= SHA_CBLOCK;
+ pad_blocks += 1+((SHA_CBLOCK-9-res)>>(sizeof(res)*8-1));
+ for (;inp_blocks<pad_blocks;inp_blocks++)
+ sha1_block_data_order(&key->md,data,1);
+ }
+#endif