hash.c

/* hash.c
 *
 * Copyright (C) 2006-2026 wolfSSL Inc.
 *
 * This file is part of wolfSSL.
 *
 * wolfSSL is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * wolfSSL is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
 */

#include <wolfssl/wolfcrypt/libwolfssl_sources.h>

#ifndef NO_ASN
#include <wolfssl/wolfcrypt/asn.h>
#endif

#include <wolfssl/wolfcrypt/hash.h>
#include <wolfssl/wolfcrypt/hmac.h>
#include <wolfssl/wolfcrypt/cryptocb.h>

#ifdef NO_INLINE
    #include <wolfssl/wolfcrypt/misc.h>
#else
    #define WOLFSSL_MISC_INCLUDED
    #include <wolfcrypt/src/misc.c>
#endif


#if !defined(NO_PWDBASED) || !defined(NO_ASN)
/* function converts int hash type to enum */
enum wc_HashType wc_HashTypeConvert(int hashType)
{
    /* Default to hash type none as error */
    enum wc_HashType eHashType = WC_HASH_TYPE_NONE;
#if defined(HAVE_FIPS) || defined(HAVE_SELFTEST)
    /* original FIPSv1  and CAVP selftest require a mapping for unique hash
       type to wc_HashType */
    switch (hashType) {
    #ifndef NO_MD5
        case WC_MD5:
            eHashType = WC_HASH_TYPE_MD5;
            break;
    #endif /* !NO_MD5 */
    #ifndef NO_SHA
        case WC_SHA:
            eHashType = WC_HASH_TYPE_SHA;
            break;
    #endif /* !NO_SHA */

    #ifdef WOLFSSL_SHA224
        case WC_SHA224:
            eHashType = WC_HASH_TYPE_SHA224;
            break;
    #endif /* WOLFSSL_SHA224 */

    #ifndef NO_SHA256
        case WC_SHA256:
            eHashType = WC_HASH_TYPE_SHA256;
            break;
    #endif /* !NO_SHA256 */

    #ifdef WOLFSSL_SHA384
        case WC_SHA384:
            eHashType = WC_HASH_TYPE_SHA384;
            break;
    #endif /* WOLFSSL_SHA384 */
    #ifdef WOLFSSL_SHA512
        case WC_SHA512:
            eHashType = WC_HASH_TYPE_SHA512;
            break;
    #if !defined(WOLFSSL_NOSHA512_224)
        case WC_SHA512_224:
            eHashType = WC_HASH_TYPE_SHA512_224;
            break;
    #endif
    #if !defined(WOLFSSL_NOSHA512_256)
        case WC_SHA512_256:
            eHashType = WC_HASH_TYPE_SHA512_256;
            break;
    #endif
    #endif /* WOLFSSL_SHA512 */
    #ifdef WOLFSSL_SHA3
        case WC_SHA3_224:
            eHashType = WC_HASH_TYPE_SHA3_224;
            break;
        case WC_SHA3_256:
            eHashType = WC_HASH_TYPE_SHA3_256;
            break;
        case WC_SHA3_384:
            eHashType = WC_HASH_TYPE_SHA3_384;
            break;
        case WC_SHA3_512:
            eHashType = WC_HASH_TYPE_SHA3_512;
            break;
    #endif /* WOLFSSL_SHA3 */
    #ifdef WOLFSSL_SM3
        case WC_SM3:
            eHashType = WC_HASH_TYPE_SM3;
            break;
    #endif
        default:
            eHashType = WC_HASH_TYPE_NONE;
            break;
    }
#else
    /* current master uses same unique types as wc_HashType */
    if (hashType > 0 && hashType <= WC_HASH_TYPE_MAX) {
        eHashType = (enum wc_HashType)hashType;
    }
#endif
    return eHashType;
}
#endif /* !NO_PWDBASED || !NO_ASN */

#if !defined(NO_ASN) || !defined(NO_DH) || defined(HAVE_ECC)

int wc_HashGetOID(enum wc_HashType hash_type)
{
    int oid;
    switch(hash_type)
    {
        case WC_HASH_TYPE_MD2:
        #ifdef WOLFSSL_MD2
            oid = MD2h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD5_SHA:
        #if !defined(NO_MD5) && !defined(NO_SHA)
            oid = MD5h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD5:
        #ifndef NO_MD5
            oid = MD5h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA:
        #ifndef NO_SHA
            oid = SHAh;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA224:
        #ifdef WOLFSSL_SHA224
            oid = SHA224h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA256:
        #ifndef NO_SHA256
            oid = SHA256h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA384:
        #ifdef WOLFSSL_SHA384
            oid = SHA384h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512:
        #ifdef WOLFSSL_SHA512
            oid = SHA512h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512_224:
        #if defined(WOLFSSL_SHA512) && !defined(WOLFSSL_NOSHA512_224)
            oid = SHA512_224h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512_256:
        #if defined(WOLFSSL_SHA512) && !defined(WOLFSSL_NOSHA512_256)
            oid = SHA512_256h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_224:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            oid = SHA3_224h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_256:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            oid = SHA3_256h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_384:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            oid = SHA3_384h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_512:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            oid = SHA3_512h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHAKE128:
        #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
            oid = SHAKE128h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHAKE256:
        #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
            oid = SHAKE256h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SM3:
        #ifdef WOLFSSL_SM3
            oid = SM3h;
        #else
            oid = HASH_TYPE_E;
        #endif
            break;

        /* Not Supported */
        case WC_HASH_TYPE_MD4:
            oid = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_BLAKE2B:
            oid = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_BLAKE2S:
            oid = HASH_TYPE_E;
            break;

        case WC_HASH_TYPE_NONE:
            oid = BAD_FUNC_ARG;
            break;
        default:
            oid = BAD_FUNC_ARG;
            break;
    }
    return oid;
}

enum wc_HashType wc_OidGetHash(int oid)
{
    enum wc_HashType hash_type;
    switch (oid)
    {
        case MD2h:
        #ifdef WOLFSSL_MD2
            hash_type = WC_HASH_TYPE_MD2;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case MD5h:
        #ifndef NO_MD5
            hash_type = WC_HASH_TYPE_MD5;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHAh:
        #ifndef NO_SHA
            hash_type = WC_HASH_TYPE_SHA;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA224h:
        #ifdef WOLFSSL_SHA224
            hash_type = WC_HASH_TYPE_SHA224;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA256h:
        #ifndef NO_SHA256
            hash_type = WC_HASH_TYPE_SHA256;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA384h:
        #ifdef WOLFSSL_SHA384
            hash_type = WC_HASH_TYPE_SHA384;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA512h:
        #ifdef WOLFSSL_SHA512
            hash_type = WC_HASH_TYPE_SHA512;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA3_224h:
        #ifdef WOLFSSL_SHA3
            hash_type = WC_HASH_TYPE_SHA3_224;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA3_256h:
        #ifdef WOLFSSL_SHA3
            hash_type = WC_HASH_TYPE_SHA3_256;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA3_384h:
        #ifdef WOLFSSL_SHA3
            hash_type = WC_HASH_TYPE_SHA3_384;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHA3_512h:
        #ifdef WOLFSSL_SHA3
            hash_type = WC_HASH_TYPE_SHA3_512;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHAKE128h:
        #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
            hash_type = WC_HASH_TYPE_SHAKE128;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SHAKE256h:
        #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
            hash_type = WC_HASH_TYPE_SHAKE256;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        case SM3h:
        #ifdef WOLFSSL_SM3
            hash_type = WC_HASH_TYPE_SM3;
        #else
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
        #endif
            break;
        default:
            hash_type = WC_ERR_TRACE(WC_HASH_TYPE_NONE);
            break;
    }
    return hash_type;
}
#endif /* !NO_ASN || !NO_DH || HAVE_ECC */

#ifndef NO_HASH_WRAPPER

/* Get Hash digest size */
int wc_HashGetDigestSize(enum wc_HashType hash_type)
{
    int dig_size;
    switch(hash_type)
    {
        case WC_HASH_TYPE_MD2:
        #ifdef WOLFSSL_MD2
            dig_size = WC_MD2_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD4:
        #ifndef NO_MD4
            dig_size = WC_MD4_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD5:
        #ifndef NO_MD5
            dig_size = WC_MD5_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA:
        #ifndef NO_SHA
            dig_size = WC_SHA_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA224:
        #ifdef WOLFSSL_SHA224
            dig_size = WC_SHA224_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA256:
        #ifndef NO_SHA256
            dig_size = WC_SHA256_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA384:
        #ifdef WOLFSSL_SHA384
            dig_size = WC_SHA384_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512:
        #ifdef WOLFSSL_SHA512
            dig_size = WC_SHA512_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512_224:
        #if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
            !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
            !defined(WOLFSSL_NOSHA512_224)
            dig_size = WC_SHA512_224_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512_256:
        #if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
            !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
            !defined(WOLFSSL_NOSHA512_256)
            dig_size = WC_SHA512_256_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD5_SHA: /* Old TLS Specific */
        #if !defined(NO_MD5) && !defined(NO_SHA)
            dig_size = (int)WC_MD5_DIGEST_SIZE + (int)WC_SHA_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;

        case WC_HASH_TYPE_SHA3_224:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            dig_size = WC_SHA3_224_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_256:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            dig_size = WC_SHA3_256_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_384:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            dig_size = WC_SHA3_384_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_512:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            dig_size = WC_SHA3_512_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_BLAKE2B:
        #if defined(HAVE_BLAKE2B)
            dig_size = BLAKE2B_OUTBYTES;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_BLAKE2S:
        #if defined(HAVE_BLAKE2S)
            dig_size = BLAKE2S_OUTBYTES;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;

        case WC_HASH_TYPE_SM3:
        #ifdef WOLFSSL_SM3
            dig_size = WC_SM3_DIGEST_SIZE;
        #else
            dig_size = HASH_TYPE_E;
        #endif
            break;

    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
        /* SHAKE is an XOF; default output here is 2x the security level
         * (256 bits for SHAKE128, 512 bits for SHAKE256). The SHA3 digest
         * macros are reused only for their bit-length value. */
        case WC_HASH_TYPE_SHAKE128:
            dig_size = WC_SHA3_256_DIGEST_SIZE;
            break;
    #else
        case WC_HASH_TYPE_SHAKE128:
            dig_size = HASH_TYPE_E;
            break;
    #endif
    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
        case WC_HASH_TYPE_SHAKE256:
            dig_size = WC_SHA3_512_DIGEST_SIZE;
            break;
    #else
        case WC_HASH_TYPE_SHAKE256:
            dig_size = HASH_TYPE_E;
            break;
    #endif

        /* Not Supported */
        case WC_HASH_TYPE_NONE:
            dig_size = BAD_FUNC_ARG;
            break;
        default:
            dig_size = BAD_FUNC_ARG;
            break;
    }
    return dig_size;
}


/* Get Hash block size */
int wc_HashGetBlockSize(enum wc_HashType hash_type)
{
    int block_size;
    switch (hash_type)
    {
        case WC_HASH_TYPE_MD2:
        #ifdef WOLFSSL_MD2
            block_size = WC_MD2_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD4:
        #ifndef NO_MD4
            block_size = WC_MD4_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD5:
        #ifndef NO_MD5
            block_size = WC_MD5_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA:
        #ifndef NO_SHA
            block_size = WC_SHA_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA224:
        #ifdef WOLFSSL_SHA224
            block_size = WC_SHA224_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA256:
        #ifndef NO_SHA256
            block_size = WC_SHA256_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA384:
        #ifdef WOLFSSL_SHA384
            block_size = WC_SHA384_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512:
        #ifdef WOLFSSL_SHA512
            block_size = WC_SHA512_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512_224:
        #if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
            !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
            !defined(WOLFSSL_NOSHA512_224)
            block_size = WC_SHA512_224_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA512_256:
        #if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
            !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
            !defined(WOLFSSL_NOSHA512_256)
            block_size = WC_SHA512_256_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_MD5_SHA: /* Old TLS Specific */
        #if !defined(NO_MD5) && !defined(NO_SHA)
            block_size = (int)WC_MD5_BLOCK_SIZE + (int)WC_SHA_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;

        case WC_HASH_TYPE_SHA3_224:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            block_size = WC_SHA3_224_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_256:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            block_size = WC_SHA3_256_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_384:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            block_size = WC_SHA3_384_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_SHA3_512:
        #if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            block_size = WC_SHA3_512_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_BLAKE2B:
        #if defined(HAVE_BLAKE2B)
            block_size = BLAKE2B_BLOCKBYTES;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;
        case WC_HASH_TYPE_BLAKE2S:
        #if defined(HAVE_BLAKE2S)
            block_size = BLAKE2S_BLOCKBYTES;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;

        case WC_HASH_TYPE_SM3:
        #ifdef WOLFSSL_SM3
            block_size = WC_SM3_BLOCK_SIZE;
        #else
            block_size = HASH_TYPE_E;
        #endif
            break;

    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
        /* WC_SHA3_*_BLOCK_SIZE names the Keccak rate by capacity, not a
         * specific SHA-3 hash. SHAKE128 uses the 1344-bit rate (168 B);
         * SHAKE256 uses the 1088-bit rate (136 B), shared with SHA3-256.
         * Per FIPS 202. */
        case WC_HASH_TYPE_SHAKE128:
            block_size = WC_SHA3_128_BLOCK_SIZE;
            break;
    #else
        case WC_HASH_TYPE_SHAKE128:
            block_size = HASH_TYPE_E;
            break;
    #endif
    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
        case WC_HASH_TYPE_SHAKE256:
            block_size = WC_SHA3_256_BLOCK_SIZE;
            break;
    #else
        case WC_HASH_TYPE_SHAKE256:
            block_size = HASH_TYPE_E;
            break;
    #endif

        /* Not Supported */
        case WC_HASH_TYPE_NONE:
            block_size = BAD_FUNC_ARG;
            break;
        default:
            block_size = BAD_FUNC_ARG;
            break;
    }
    return block_size;
}

/* Generic Hashing Wrapper */
int wc_Hash_ex(enum wc_HashType hash_type, const byte* data,
    word32 data_len, byte* hash, word32 hash_len, void* heap, int devId)
{
    int ret;
    int dig_size;

    /* Validate hash buffer size */
    dig_size = wc_HashGetDigestSize(hash_type);
    if (dig_size < 0) {
        return dig_size;
    }

    if (hash_len < (word32)dig_size) {
        return BUFFER_E;
    }

    /* Suppress possible unused arg if all hashing is disabled */
    (void)data;
    (void)data_len;
    (void)hash;
    (void)hash_len;

    switch(hash_type)
    {
        case WC_HASH_TYPE_MD5:
#ifndef NO_MD5
            ret = wc_Md5Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA:
#ifndef NO_SHA
            ret = wc_ShaHash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA224:
#ifdef WOLFSSL_SHA224
            ret = wc_Sha224Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA256:
#ifndef NO_SHA256
            ret = wc_Sha256Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA384:
#ifdef WOLFSSL_SHA384
            ret = wc_Sha384Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512:
#ifdef WOLFSSL_SHA512
            ret = wc_Sha512Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_224:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_224)
            ret = wc_Sha512_224Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_256:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_256)
            ret = wc_Sha512_256Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_MD5_SHA:
#if !defined(NO_MD5) && !defined(NO_SHA)
            ret = wc_Md5Hash_ex(data, data_len, hash, heap, devId);
            if (ret == 0) {
                ret = wc_ShaHash_ex(data, data_len, &hash[WC_MD5_DIGEST_SIZE],
                    heap, devId);
            }
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHA3_224:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            ret = wc_Sha3_224Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_256:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            ret = wc_Sha3_256Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_384:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            ret = wc_Sha3_384Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_512:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            ret = wc_Sha3_512Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SM3:
#ifdef WOLFSSL_SM3
            ret = wc_Sm3Hash_ex(data, data_len, hash, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;

    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
        case WC_HASH_TYPE_SHAKE128:
        {
            WC_DECLARE_VAR(shake, wc_Shake, 1, heap);
            WC_ALLOC_VAR_EX(shake, wc_Shake, 1, heap, DYNAMIC_TYPE_TMP_BUFFER,
                ret = MEMORY_E);
            if (WC_VAR_OK(shake)) {
                ret = wc_InitShake128(shake, heap, devId);
                if (ret == 0) {
                    ret = wc_Shake128_Update(shake, data, data_len);
                    if (ret == 0)
                        ret = wc_Shake128_Final(shake, hash,
                            WC_SHA3_256_DIGEST_SIZE);
                    wc_Shake128_Free(shake);
                }
            }
            WC_FREE_VAR_EX(shake, heap, DYNAMIC_TYPE_TMP_BUFFER);
            break;
        }
    #else
        case WC_HASH_TYPE_SHAKE128:
            ret = HASH_TYPE_E;
            break;
    #endif
    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
        case WC_HASH_TYPE_SHAKE256:
        {
            WC_DECLARE_VAR(shake, wc_Shake, 1, heap);
            WC_ALLOC_VAR_EX(shake, wc_Shake, 1, heap, DYNAMIC_TYPE_TMP_BUFFER,
                ret = MEMORY_E);
            if (WC_VAR_OK(shake)) {
                ret = wc_InitShake256(shake, heap, devId);
                if (ret == 0) {
                    ret = wc_Shake256_Update(shake, data, data_len);
                    if (ret == 0)
                        ret = wc_Shake256_Final(shake, hash,
                            WC_SHA3_512_DIGEST_SIZE);
                    wc_Shake256_Free(shake);
                }
            }
            WC_FREE_VAR_EX(shake, heap, DYNAMIC_TYPE_TMP_BUFFER);
            break;
        }
    #else
        case WC_HASH_TYPE_SHAKE256:
            ret = HASH_TYPE_E;
            break;
    #endif

        /* Not Supported */
        case WC_HASH_TYPE_MD2:
        case WC_HASH_TYPE_MD4:
        case WC_HASH_TYPE_BLAKE2B:
        case WC_HASH_TYPE_BLAKE2S:
            ret = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_NONE:
            ret = BAD_FUNC_ARG;
            break;
        default:
            ret = BAD_FUNC_ARG;
            break;
    }
    return ret;
}
int wc_Hash(enum wc_HashType hash_type, const byte* data,
    word32 data_len, byte* hash, word32 hash_len)
{
    return wc_Hash_ex(hash_type, data, data_len, hash, hash_len,
        NULL, INVALID_DEVID);
}

#ifndef WC_NO_CONSTRUCTORS
wc_HashAlg* wc_HashNew(enum wc_HashType type, void* heap, int devId,
                       int *result_code)
{
    int ret;
    wc_HashAlg* hash = (wc_HashAlg*)XMALLOC(sizeof(wc_HashAlg), heap,
                        DYNAMIC_TYPE_HASHES);
    if (hash == NULL) {
        ret = MEMORY_E;
    }
    else {
        ret = wc_HashInit_ex(hash, type, heap, devId);
        if (ret != 0) {
            XFREE(hash, heap, DYNAMIC_TYPE_HASHES);
            hash = NULL;
        }
    }

    if (result_code != NULL)
        *result_code = ret;

    return hash;
}

int wc_HashDelete(wc_HashAlg *hash, wc_HashAlg **hash_p) {
    int ret;
    void* heap;
    if (hash == NULL)
        return BAD_FUNC_ARG;
    heap = hash->heap;
    ret = wc_HashFree(hash, hash->type);
    if (ret < 0)
        return ret;
    XFREE(hash, heap, DYNAMIC_TYPE_HASHES);
    if (hash_p != NULL)
        *hash_p = NULL;
    return 0;
}
#endif /* !WC_NO_CONSTRUCTORS */

int wc_HashInit_ex(wc_HashAlg* hash, enum wc_HashType type, void* heap,
    int devId)
{
    int ret;

    if (hash == NULL)
        return BAD_FUNC_ARG;

    hash->type = type;

#ifdef WC_NO_CONSTRUCTORS
    (void)heap;
#else
    hash->heap = heap;
#endif

    switch (type) {
        case WC_HASH_TYPE_MD5:
#ifndef NO_MD5
            ret = wc_InitMd5_ex(&hash->alg.md5, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA:
#ifndef NO_SHA
            ret = wc_InitSha_ex(&hash->alg.sha, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA224:
#ifdef WOLFSSL_SHA224
            ret = wc_InitSha224_ex(&hash->alg.sha224, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA256:
#ifndef NO_SHA256
            ret = wc_InitSha256_ex(&hash->alg.sha256, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA384:
#ifdef WOLFSSL_SHA384
            ret = wc_InitSha384_ex(&hash->alg.sha384, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512:
#ifdef WOLFSSL_SHA512
            ret = wc_InitSha512_ex(&hash->alg.sha512, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_224:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_224)
            ret = wc_InitSha512_224_ex(&hash->alg.sha512, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_256:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_256)
            ret = wc_InitSha512_256_ex(&hash->alg.sha512, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_224:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            ret = wc_InitSha3_224(&hash->alg.sha3, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_256:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            ret = wc_InitSha3_256(&hash->alg.sha3, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_384:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            ret = wc_InitSha3_384(&hash->alg.sha3, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_512:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            ret = wc_InitSha3_512(&hash->alg.sha3, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SM3:
#ifdef WOLFSSL_SM3
            ret = wc_InitSm3(&hash->alg.sm3, heap, devId);
#else
            ret = HASH_TYPE_E;
#endif
            break;

    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
        case WC_HASH_TYPE_SHAKE128:
            ret = wc_InitShake128(&hash->alg.sha3, heap, devId);
            break;
    #else
        case WC_HASH_TYPE_SHAKE128:
            ret = HASH_TYPE_E;
            break;
    #endif
    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
        case WC_HASH_TYPE_SHAKE256:
            ret = wc_InitShake256(&hash->alg.sha3, heap, devId);
            break;
    #else
        case WC_HASH_TYPE_SHAKE256:
            ret = HASH_TYPE_E;
            break;
    #endif

        /* not supported */
        case WC_HASH_TYPE_MD5_SHA:
        case WC_HASH_TYPE_MD2:
        case WC_HASH_TYPE_MD4:
        case WC_HASH_TYPE_BLAKE2B:
        case WC_HASH_TYPE_BLAKE2S:
            ret = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_NONE:
            ret = BAD_FUNC_ARG;
            break;
        default:
            ret = BAD_FUNC_ARG;
    };

    (void)devId;

    return ret;
}

int wc_HashInit(wc_HashAlg* hash, enum wc_HashType type)
{
    return wc_HashInit_ex(hash, type, NULL, INVALID_DEVID);
}

int wc_HashUpdate(wc_HashAlg* hash, enum wc_HashType type, const byte* data,
                  word32 dataSz)
{
    int ret;

    if (hash == NULL || (data == NULL && dataSz > 0))
        return BAD_FUNC_ARG;

#ifdef DEBUG_WOLFSSL
    if (hash->type != type) {
        WOLFSSL_MSG("Hash update type mismatch!");
        return BAD_FUNC_ARG;
    }
#endif

    switch (type) {
        case WC_HASH_TYPE_MD5:
#ifndef NO_MD5
            ret = wc_Md5Update(&hash->alg.md5, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA:
#ifndef NO_SHA
            ret = wc_ShaUpdate(&hash->alg.sha, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA224:
#ifdef WOLFSSL_SHA224
            ret = wc_Sha224Update(&hash->alg.sha224, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA256:
#ifndef NO_SHA256
            ret = wc_Sha256Update(&hash->alg.sha256, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA384:
#ifdef WOLFSSL_SHA384
            ret = wc_Sha384Update(&hash->alg.sha384, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512:
#ifdef WOLFSSL_SHA512
            ret = wc_Sha512Update(&hash->alg.sha512, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_224:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_224)
            ret = wc_Sha512_224Update(&hash->alg.sha512, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_256:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_256)
            ret = wc_Sha512_256Update(&hash->alg.sha512, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_224:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            ret = wc_Sha3_224_Update(&hash->alg.sha3, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_256:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            ret = wc_Sha3_256_Update(&hash->alg.sha3, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_384:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            ret = wc_Sha3_384_Update(&hash->alg.sha3, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_512:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            ret = wc_Sha3_512_Update(&hash->alg.sha3, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SM3:
#ifdef WOLFSSL_SM3
            ret = wc_Sm3Update(&hash->alg.sm3, data, dataSz);
#else
            ret = HASH_TYPE_E;
#endif
            break;

    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
        case WC_HASH_TYPE_SHAKE128:
            ret = wc_Shake128_Update(&hash->alg.sha3, data, dataSz);
            break;
    #else
        case WC_HASH_TYPE_SHAKE128:
            ret = HASH_TYPE_E;
            break;
    #endif
    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
        case WC_HASH_TYPE_SHAKE256:
            ret = wc_Shake256_Update(&hash->alg.sha3, data, dataSz);
            break;
    #else
        case WC_HASH_TYPE_SHAKE256:
            ret = HASH_TYPE_E;
            break;
    #endif

        /* not supported */
        case WC_HASH_TYPE_MD5_SHA:
        case WC_HASH_TYPE_MD2:
        case WC_HASH_TYPE_MD4:
        case WC_HASH_TYPE_BLAKE2B:
        case WC_HASH_TYPE_BLAKE2S:
            ret = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_NONE:
            ret = BAD_FUNC_ARG;
            break;
        default:
            ret = BAD_FUNC_ARG;
    };

    return ret;
}

int wc_HashFinal(wc_HashAlg* hash, enum wc_HashType type, byte* out)
{
    int ret;

    if (hash == NULL || out == NULL)
        return BAD_FUNC_ARG;

#ifdef DEBUG_WOLFSSL
    if (hash->type != type) {
        WOLFSSL_MSG("Hash final type mismatch!");
        return BAD_FUNC_ARG;
    }
#endif

    switch (type) {
        case WC_HASH_TYPE_MD5:
#ifndef NO_MD5
            ret = wc_Md5Final(&hash->alg.md5, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA:
#ifndef NO_SHA
            ret = wc_ShaFinal(&hash->alg.sha, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA224:
#ifdef WOLFSSL_SHA224
            ret = wc_Sha224Final(&hash->alg.sha224, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA256:
#ifndef NO_SHA256
            ret = wc_Sha256Final(&hash->alg.sha256, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA384:
#ifdef WOLFSSL_SHA384
            ret = wc_Sha384Final(&hash->alg.sha384, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512:
#ifdef WOLFSSL_SHA512
            ret = wc_Sha512Final(&hash->alg.sha512, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_224:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_224)
            ret = wc_Sha512_224Final(&hash->alg.sha512, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_256:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_256)
            ret = wc_Sha512_256Final(&hash->alg.sha512, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_224:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            ret = wc_Sha3_224_Final(&hash->alg.sha3, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_256:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            ret = wc_Sha3_256_Final(&hash->alg.sha3, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_384:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            ret = wc_Sha3_384_Final(&hash->alg.sha3, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_512:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            ret = wc_Sha3_512_Final(&hash->alg.sha3, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SM3:
#ifdef WOLFSSL_SM3
            ret = wc_Sm3Final(&hash->alg.sm3, out);
#else
            ret = HASH_TYPE_E;
#endif
            break;

    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
        case WC_HASH_TYPE_SHAKE128:
            ret = wc_Shake128_Final(&hash->alg.sha3, out,
                WC_SHA3_256_DIGEST_SIZE);
            break;
    #else
        case WC_HASH_TYPE_SHAKE128:
            ret = HASH_TYPE_E;
            break;
    #endif
    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
        case WC_HASH_TYPE_SHAKE256:
            ret = wc_Shake256_Final(&hash->alg.sha3, out,
                WC_SHA3_512_DIGEST_SIZE);
            break;
    #else
        case WC_HASH_TYPE_SHAKE256:
            ret = HASH_TYPE_E;
            break;
    #endif

        /* not supported */
        case WC_HASH_TYPE_MD5_SHA:
        case WC_HASH_TYPE_MD2:
        case WC_HASH_TYPE_MD4:
        case WC_HASH_TYPE_BLAKE2B:
        case WC_HASH_TYPE_BLAKE2S:
            ret = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_NONE:
            ret = BAD_FUNC_ARG;
            break;
        default:
            ret = BAD_FUNC_ARG;
    };

    return ret;
}

int wc_HashFree(wc_HashAlg* hash, enum wc_HashType type)
{
    int ret;

    if (hash == NULL)
        return BAD_FUNC_ARG;

#ifdef DEBUG_WOLFSSL
    if (hash->type != type) {
        WOLFSSL_MSG("Hash free type mismatch!");
        return BAD_FUNC_ARG;
    }
#endif

    switch (type) {
        case WC_HASH_TYPE_MD5:
#ifndef NO_MD5
            wc_Md5Free(&hash->alg.md5);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA:
#ifndef NO_SHA
            wc_ShaFree(&hash->alg.sha);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA224:
#ifdef WOLFSSL_SHA224
            wc_Sha224Free(&hash->alg.sha224);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA256:
#ifndef NO_SHA256
            wc_Sha256Free(&hash->alg.sha256);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA384:
#ifdef WOLFSSL_SHA384
            wc_Sha384Free(&hash->alg.sha384);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512:
#ifdef WOLFSSL_SHA512
            wc_Sha512Free(&hash->alg.sha512);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_224:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_224)
            wc_Sha512_224Free(&hash->alg.sha512);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_256:
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
    !defined(HAVE_SELFTEST) && defined(WOLFSSL_SHA512) && \
    !defined(WOLFSSL_NOSHA512_256)
            wc_Sha512_256Free(&hash->alg.sha512);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_224:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_224)
            wc_Sha3_224_Free(&hash->alg.sha3);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_256:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_256)
            wc_Sha3_256_Free(&hash->alg.sha3);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_384:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_384)
            wc_Sha3_384_Free(&hash->alg.sha3);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA3_512:
#if defined(WOLFSSL_SHA3) && !defined(WOLFSSL_NOSHA3_512)
            wc_Sha3_512_Free(&hash->alg.sha3);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SM3:
#ifdef WOLFSSL_SM3
            wc_Sm3Free(&hash->alg.sm3);
            ret = 0;
#else
            ret = HASH_TYPE_E;
#endif
            break;

    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
        case WC_HASH_TYPE_SHAKE128:
            wc_Shake128_Free(&hash->alg.sha3);
            ret = 0;
            break;
    #else
        case WC_HASH_TYPE_SHAKE128:
            ret = HASH_TYPE_E;
            break;
    #endif
    #if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
        case WC_HASH_TYPE_SHAKE256:
            wc_Shake256_Free(&hash->alg.sha3);
            ret = 0;
            break;
    #else
        case WC_HASH_TYPE_SHAKE256:
            ret = HASH_TYPE_E;
            break;
    #endif

        /* not supported */
        case WC_HASH_TYPE_MD5_SHA:
        case WC_HASH_TYPE_MD2:
        case WC_HASH_TYPE_MD4:
        case WC_HASH_TYPE_BLAKE2B:
        case WC_HASH_TYPE_BLAKE2S:
            ret = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_NONE:
            ret = BAD_FUNC_ARG;
            break;
        default:
            ret = BAD_FUNC_ARG;
    };

    return ret;
}

#ifdef WOLFSSL_HASH_FLAGS
int wc_HashSetFlags(wc_HashAlg* hash, enum wc_HashType type, word32 flags)
{
    int ret;

    if (hash == NULL)
        return BAD_FUNC_ARG;

    switch (type) {
        case WC_HASH_TYPE_MD5:
#ifndef NO_MD5
            ret = wc_Md5SetFlags(&hash->alg.md5, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA:
#ifndef NO_SHA
            ret = wc_ShaSetFlags(&hash->alg.sha, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA224:
#ifdef WOLFSSL_SHA224
            ret = wc_Sha224SetFlags(&hash->alg.sha224, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA256:
#ifndef NO_SHA256
            ret = wc_Sha256SetFlags(&hash->alg.sha256, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA384:
#ifdef WOLFSSL_SHA384
            ret = wc_Sha384SetFlags(&hash->alg.sha384, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512:
#ifdef WOLFSSL_SHA512
            ret = wc_Sha512SetFlags(&hash->alg.sha512, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHA512_224:
#if defined(WOLFSSL_SHA512) && !defined(WOLFSSL_NOSHA512_224)
            ret = wc_Sha512SetFlags(&hash->alg.sha512, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHA512_256:
#if defined(WOLFSSL_SHA512) && !defined(WOLFSSL_NOSHA512_256)
            ret = wc_Sha512SetFlags(&hash->alg.sha512, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHA3_224:
        case WC_HASH_TYPE_SHA3_256:
        case WC_HASH_TYPE_SHA3_384:
        case WC_HASH_TYPE_SHA3_512:
#ifdef WOLFSSL_SHA3
            ret = wc_Sha3_SetFlags(&hash->alg.sha3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHAKE128:
#if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
            ret = wc_Sha3_SetFlags(&hash->alg.sha3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHAKE256:
#if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
            ret = wc_Sha3_SetFlags(&hash->alg.sha3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SM3:
#ifdef WOLFSSL_SM3
            ret = wc_Sm3SetFlags(&hash->alg.sm3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        /* not supported */
        case WC_HASH_TYPE_MD5_SHA:
        case WC_HASH_TYPE_MD2:
        case WC_HASH_TYPE_MD4:
        case WC_HASH_TYPE_BLAKE2B:
        case WC_HASH_TYPE_BLAKE2S:
            ret = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_NONE:
        default:
            ret = BAD_FUNC_ARG;
    };

    return ret;
}
int wc_HashGetFlags(wc_HashAlg* hash, enum wc_HashType type, word32* flags)
{
    int ret;

    if (hash == NULL)
        return BAD_FUNC_ARG;

    switch (type) {
        case WC_HASH_TYPE_MD5:
#ifndef NO_MD5
            ret = wc_Md5GetFlags(&hash->alg.md5, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA:
#ifndef NO_SHA
            ret = wc_ShaGetFlags(&hash->alg.sha, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA224:
#ifdef WOLFSSL_SHA224
            ret = wc_Sha224GetFlags(&hash->alg.sha224, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA256:
#ifndef NO_SHA256
            ret = wc_Sha256GetFlags(&hash->alg.sha256, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA384:
#ifdef WOLFSSL_SHA384
            ret = wc_Sha384GetFlags(&hash->alg.sha384, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512:
#ifdef WOLFSSL_SHA512
            ret = wc_Sha512GetFlags(&hash->alg.sha512, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_224:
#if defined(WOLFSSL_SHA512) && !defined(WOLFSSL_NOSHA512_224)
            ret = wc_Sha512GetFlags(&hash->alg.sha512, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;
        case WC_HASH_TYPE_SHA512_256:
#if defined(WOLFSSL_SHA512) && !defined(WOLFSSL_NOSHA512_256)
            ret = wc_Sha512GetFlags(&hash->alg.sha512, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHA3_224:
        case WC_HASH_TYPE_SHA3_256:
        case WC_HASH_TYPE_SHA3_384:
        case WC_HASH_TYPE_SHA3_512:
#ifdef WOLFSSL_SHA3
            ret = wc_Sha3_GetFlags(&hash->alg.sha3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHAKE128:
#if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE128)
            ret = wc_Sha3_GetFlags(&hash->alg.sha3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SHAKE256:
#if defined(WOLFSSL_SHA3) && defined(WOLFSSL_SHAKE256)
            ret = wc_Sha3_GetFlags(&hash->alg.sha3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        case WC_HASH_TYPE_SM3:
#ifdef WOLFSSL_SM3
            ret = wc_Sm3GetFlags(&hash->alg.sm3, flags);
#else
            ret = HASH_TYPE_E;
#endif
            break;

        /* not supported */
        case WC_HASH_TYPE_MD5_SHA:
        case WC_HASH_TYPE_MD2:
        case WC_HASH_TYPE_MD4:
        case WC_HASH_TYPE_BLAKE2B:
        case WC_HASH_TYPE_BLAKE2S:
            ret = HASH_TYPE_E;
            break;
        case WC_HASH_TYPE_NONE:
            ret = BAD_FUNC_ARG;
            break;
        default:
            ret = BAD_FUNC_ARG;
    };

    return ret;
}
#endif /* WOLFSSL_HASH_FLAGS */


#if !defined(WOLFSSL_TI_HASH)

#if !defined(NO_MD5)
    int wc_Md5Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret;
        WC_DECLARE_VAR(md5, wc_Md5, 1, 0);

        WC_ALLOC_VAR_EX(md5, wc_Md5, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitMd5_ex(md5, heap, devId)) != 0) {
            WOLFSSL_MSG("InitMd5 failed");
        }
        else {
            if ((ret = wc_Md5Update(md5, data, len)) != 0) {
                WOLFSSL_MSG("Md5Update failed");
            }
            else if ((ret = wc_Md5Final(md5, hash)) != 0) {
                WOLFSSL_MSG("Md5Final failed");
            }
            wc_Md5Free(md5);
        }

        WC_FREE_VAR_EX(md5, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Md5Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Md5Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !NO_MD5 */

#if !defined(NO_SHA)
    int wc_ShaHash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha, wc_Sha, 1, 0);

        WC_ALLOC_VAR_EX(sha, wc_Sha, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha_ex(sha, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha failed");
        }
        else {
            if ((ret = wc_ShaUpdate(sha, data, len)) != 0) {
                WOLFSSL_MSG("ShaUpdate failed");
            }
            else if ((ret = wc_ShaFinal(sha, hash)) != 0) {
                WOLFSSL_MSG("ShaFinal failed");
            }
            wc_ShaFree(sha);
        }

        WC_FREE_VAR_EX(sha, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_ShaHash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_ShaHash_ex(data, len, hash, NULL, devId);
    }
#endif /* !NO_SHA */

#if defined(WOLFSSL_SHA224)
    int wc_Sha224Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha224, wc_Sha224, 1, 0);

        WC_ALLOC_VAR_EX(sha224, wc_Sha224, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha224_ex(sha224, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha224 failed");
        }
        else {
            if ((ret = wc_Sha224Update(sha224, data, len)) != 0) {
                WOLFSSL_MSG("Sha224Update failed");
            }
            else if ((ret = wc_Sha224Final(sha224, hash)) != 0) {
                WOLFSSL_MSG("Sha224Final failed");
            }
            wc_Sha224Free(sha224);
        }

        WC_FREE_VAR_EX(sha224, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha224Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha224Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* WOLFSSL_SHA224 */

#if !defined(NO_SHA256)
    int wc_Sha256Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
    #if defined(WOLFSSL_SMALL_STACK) && !defined(WOLFSSL_NO_MALLOC)
        wc_Sha256* sha256;
    #else
        wc_Sha256 sha256[1];
    #endif

    #if defined(WOLFSSL_SMALL_STACK) && !defined(WOLFSSL_NO_MALLOC)
        sha256 = (wc_Sha256*)XMALLOC(sizeof(wc_Sha256), NULL,
            DYNAMIC_TYPE_TMP_BUFFER);
        if (sha256 == NULL)
            return MEMORY_E;
    #endif

        if ((ret = wc_InitSha256_ex(sha256, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha256 failed");
        }
        else {
            if ((ret = wc_Sha256Update(sha256, data, len)) != 0) {
                WOLFSSL_MSG("Sha256Update failed");
            }
            else if ((ret = wc_Sha256Final(sha256, hash)) != 0) {
                WOLFSSL_MSG("Sha256Final failed");
            }
            wc_Sha256Free(sha256);
        }


    #if defined(WOLFSSL_SMALL_STACK) && !defined(WOLFSSL_NO_MALLOC)
        XFREE(sha256, NULL, DYNAMIC_TYPE_TMP_BUFFER);
    #endif

        return ret;
    }
    int wc_Sha256Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha256Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !NO_SHA256 */

#endif /* !defined(WOLFSSL_TI_HASH) */


#if defined(WOLFSSL_SHA512)
    int wc_Sha512Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha512, wc_Sha512, 1, 0);

        WC_ALLOC_VAR_EX(sha512, wc_Sha512, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha512_ex(sha512, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha512 failed");
        }
        else {
            if ((ret = wc_Sha512Update(sha512, data, len)) != 0) {
                WOLFSSL_MSG("Sha512Update failed");
            }
            else if ((ret = wc_Sha512Final(sha512, hash)) != 0) {
                WOLFSSL_MSG("Sha512Final failed");
            }
            wc_Sha512Free(sha512);
        }

        WC_FREE_VAR_EX(sha512, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha512Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha512Hash_ex(data, len, hash, NULL, devId);
    }
#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && !defined(HAVE_SELFTEST)
#ifndef WOLFSSL_NOSHA512_224
    int wc_Sha512_224Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha512, wc_Sha512, 1, 0);

        WC_ALLOC_VAR_EX(sha512, wc_Sha512, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha512_224_ex(sha512, heap, devId)) != 0) {
            WOLFSSL_MSG("wc_InitSha512_224 failed");
        }
        else {
            if ((ret = wc_Sha512_224Update(sha512, data, len)) != 0) {
                WOLFSSL_MSG("wc_Sha512_224_Update failed");
            }
            else if ((ret = wc_Sha512_224Final(sha512, hash)) != 0) {
                WOLFSSL_MSG("wc_Sha512_224_Final failed");
            }
            wc_Sha512_224Free(sha512);
        }

        WC_FREE_VAR_EX(sha512, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha512_224Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha512_224Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !WOLFSSL_NOSHA512_224 */
#endif /* (!HAVE_FIPS || FIPS v7+) && !HAVE_SELFTEST */

#if (!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && !defined(HAVE_SELFTEST)
#ifndef WOLFSSL_NOSHA512_256
    int wc_Sha512_256Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha512, wc_Sha512, 1, 0);

        WC_ALLOC_VAR_EX(sha512, wc_Sha512, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha512_256_ex(sha512, heap, devId)) != 0) {
            WOLFSSL_MSG("wc_InitSha512_256 failed");
        }
        else {
            if ((ret = wc_Sha512_256Update(sha512, data, len)) != 0) {
                WOLFSSL_MSG("wc_Sha512_256_Update failed");
            }
            else if ((ret = wc_Sha512_256Final(sha512, hash)) != 0) {
                WOLFSSL_MSG("wc_Sha512_256_Final failed");
            }
            wc_Sha512_256Free(sha512);
        }

        WC_FREE_VAR_EX(sha512, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha512_256Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha512_256Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !WOLFSSL_NOSHA512_256 */
#endif /* (!HAVE_FIPS || FIPS v7+) && !HAVE_SELFTEST */

#endif /* WOLFSSL_SHA512 */

#if defined(WOLFSSL_SHA384)
    int wc_Sha384Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha384, wc_Sha384, 1, 0);

        WC_ALLOC_VAR_EX(sha384, wc_Sha384, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha384_ex(sha384, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha384 failed");
        }
        else {
            if ((ret = wc_Sha384Update(sha384, data, len)) != 0) {
                WOLFSSL_MSG("Sha384Update failed");
            }
            else if ((ret = wc_Sha384Final(sha384, hash)) != 0) {
                WOLFSSL_MSG("Sha384Final failed");
            }
            wc_Sha384Free(sha384);
        }

        WC_FREE_VAR_EX(sha384, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha384Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha384Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* WOLFSSL_SHA384 */

#if defined(WOLFSSL_SHA3)
#if !defined(WOLFSSL_NOSHA3_224)
    int wc_Sha3_224Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha3, wc_Sha3, 1, 0);

        WC_ALLOC_VAR_EX(sha3, wc_Sha3, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha3_224(sha3, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha3_224 failed");
        }
        else {
            if ((ret = wc_Sha3_224_Update(sha3, data, len)) != 0) {
                WOLFSSL_MSG("Sha3_224_Update failed");
            }
            else if ((ret = wc_Sha3_224_Final(sha3, hash)) != 0) {
                WOLFSSL_MSG("Sha3_224_Final failed");
            }
            wc_Sha3_224_Free(sha3);
        }

        WC_FREE_VAR_EX(sha3, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha3_224Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha3_224Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !WOLFSSL_NOSHA3_224 */

#if !defined(WOLFSSL_NOSHA3_256)
    int wc_Sha3_256Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha3, wc_Sha3, 1, 0);

        WC_ALLOC_VAR_EX(sha3, wc_Sha3, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha3_256(sha3, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha3_256 failed");
        }
        else {
            if ((ret = wc_Sha3_256_Update(sha3, data, len)) != 0) {
                WOLFSSL_MSG("Sha3_256_Update failed");
            }
            else if ((ret = wc_Sha3_256_Final(sha3, hash)) != 0) {
                WOLFSSL_MSG("Sha3_256_Final failed");
            }
            wc_Sha3_256_Free(sha3);
        }

        WC_FREE_VAR_EX(sha3, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha3_256Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha3_256Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !WOLFSSL_NOSHA3_256 */

#if !defined(WOLFSSL_NOSHA3_384)
    int wc_Sha3_384Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha3, wc_Sha3, 1, 0);

        WC_ALLOC_VAR_EX(sha3, wc_Sha3, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha3_384(sha3, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha3_384 failed");
        }
        else {
            if ((ret = wc_Sha3_384_Update(sha3, data, len)) != 0) {
                WOLFSSL_MSG("Sha3_384_Update failed");
            }
            else if ((ret = wc_Sha3_384_Final(sha3, hash)) != 0) {
                WOLFSSL_MSG("Sha3_384_Final failed");
            }
            wc_Sha3_384_Free(sha3);
        }

        WC_FREE_VAR_EX(sha3, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha3_384Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha3_384Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !WOLFSSL_NOSHA3_384 */

#if !defined(WOLFSSL_NOSHA3_512)
    int wc_Sha3_512Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sha3, wc_Sha3, 1, 0);

        WC_ALLOC_VAR_EX(sha3, wc_Sha3, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSha3_512(sha3, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSha3_512 failed");
        }
        else {
            if ((ret = wc_Sha3_512_Update(sha3, data, len)) != 0) {
                WOLFSSL_MSG("Sha3_512_Update failed");
            }
            else if ((ret = wc_Sha3_512_Final(sha3, hash)) != 0) {
                WOLFSSL_MSG("Sha3_512_Final failed");
            }
            wc_Sha3_512_Free(sha3);
        }

        WC_FREE_VAR_EX(sha3, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sha3_512Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sha3_512Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !WOLFSSL_NOSHA3_512 */

#ifdef WOLFSSL_SHAKE128
    int wc_Shake128Hash_ex(const byte* data, word32 len, byte* hash,
                        word32 hashLen, void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(shake, wc_Shake, 1, 0);

        WC_ALLOC_VAR_EX(shake, wc_Shake, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitShake128(shake, heap, devId)) != 0) {
            WOLFSSL_MSG("InitShake128 failed");
        }
        else {
            if ((ret = wc_Shake128_Update(shake, data, len)) != 0) {
                WOLFSSL_MSG("Shake128_Update failed");
            }
            else if ((ret = wc_Shake128_Final(shake, hash, hashLen)) != 0) {
                WOLFSSL_MSG("Shake128_Final failed");
            }
            wc_Shake128_Free(shake);
        }

        WC_FREE_VAR_EX(shake, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Shake128Hash(const byte* data, word32 len, byte* hash,
                        word32 hashLen)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Shake128Hash_ex(data, len, hash, hashLen,
            NULL, devId);
    }
#endif /* WOLFSSL_SHAKE_128 */

#ifdef WOLFSSL_SHAKE256
    int wc_Shake256Hash_ex(const byte* data, word32 len, byte* hash,
                        word32 hashLen, void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(shake, wc_Shake, 1, 0);

        WC_ALLOC_VAR_EX(shake, wc_Shake, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitShake256(shake, heap, devId)) != 0) {
            WOLFSSL_MSG("InitShake256 failed");
        }
        else {
            if ((ret = wc_Shake256_Update(shake, data, len)) != 0) {
                WOLFSSL_MSG("Shake256_Update failed");
            }
            else if ((ret = wc_Shake256_Final(shake, hash, hashLen)) != 0) {
                WOLFSSL_MSG("Shake256_Final failed");
            }
            wc_Shake256_Free(shake);
        }

        WC_FREE_VAR_EX(shake, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Shake256Hash(const byte* data, word32 len, byte* hash,
                        word32 hashLen)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Shake256Hash_ex(data, len, hash, hashLen,
            NULL, devId);
    }
#endif /* WOLFSSL_SHAKE_256 */
#endif /* WOLFSSL_SHA3 */

#ifdef WOLFSSL_SM3
    int wc_Sm3Hash_ex(const byte* data, word32 len, byte* hash,
        void* heap, int devId)
    {
        int ret = 0;
        WC_DECLARE_VAR(sm3, wc_Sm3, 1, 0);

        WC_ALLOC_VAR_EX(sm3, wc_Sm3, 1, NULL, DYNAMIC_TYPE_TMP_BUFFER,
            return MEMORY_E);

        if ((ret = wc_InitSm3(sm3, heap, devId)) != 0) {
            WOLFSSL_MSG("InitSm3 failed");
        }
        else {
            if ((ret = wc_Sm3Update(sm3, data, len)) != 0) {
                WOLFSSL_MSG("Sm3Update failed");
            }
            else if ((ret = wc_Sm3Final(sm3, hash)) != 0) {
                WOLFSSL_MSG("Sm3Final failed");
            }
            wc_Sm3Free(sm3);
        }

        WC_FREE_VAR_EX(sm3, NULL, DYNAMIC_TYPE_TMP_BUFFER);

        return ret;
    }
    int wc_Sm3Hash(const byte* data, word32 len, byte* hash)
    {
        int devId = INVALID_DEVID;
    #ifdef WOLF_CRYPTO_CB
        /* find devId if its not an empty hash */
        if (data != NULL && len > 0) {
            devId = wc_CryptoCb_DefaultDevID();
        }
    #endif
        return wc_Sm3Hash_ex(data, len, hash, NULL, devId);
    }
#endif /* !WOLFSSL_NOSHA3_224 */

#endif /* !NO_HASH_WRAPPER */

#ifdef WOLFSSL_HASH_KEEP
int _wc_Hash_Grow(byte** msg, word32* used, word32* len, const byte* in,
                        int inSz, void* heap)
{
    word32 usedSz = 0;

    if (inSz < 0 || !WC_SAFE_SUM_WORD32(*used, (word32)inSz, usedSz))
        return BAD_FUNC_ARG;

    /* Allow zero-length input as a no-op. Some callers may pass zero-length
     * data during hash operations and this should not be treated as an error. */
    if (inSz == 0)
        return 0;

    if (*len < usedSz) {
        if (*msg == NULL) {
            *msg = (byte*)XMALLOC(usedSz, heap, DYNAMIC_TYPE_TMP_BUFFER);
        }
        else {
            byte* pt = (byte*)XREALLOC(*msg, usedSz, heap,
                    DYNAMIC_TYPE_TMP_BUFFER);
            if (pt == NULL) {
                return MEMORY_E;
            }
            *msg = pt;
        }
        if (*msg == NULL) {
            return MEMORY_E;
        }
        *len = usedSz;
    }
    XMEMCPY(*msg + *used, in, inSz);
    *used += inSz;
    return 0;
}
#endif /* WOLFSSL_HASH_KEEP */