C++ 使用cryptopp生成SHA3哈希的行为不正确

我看到RHEL7和Debian9上使用cryptopp生成SHA3哈希的行为有一个非常奇怪的差异。 如果使用SHA1或MD5散列，则两种平台上的输出是相同的。 我将其简化为以下最小程序：

#include <iostream>
#include <cryptopp/sha3.h>
#include <cryptopp/filters.h>
#include <cryptopp/hex.h>

using namespace CryptoPP;

int main(int argc, const char* argv[])
{
   {
      CryptoPP::SHA3_256 sha256;
      std::string hash = "";
      StringSource("", true, new HashFilter(sha256, new HexEncoder(new StringSink(hash))));
      std::cout << "hash='" << hash << "'\n";
   }
   {
      CryptoPP::SHA3_256 sha256;
      std::string hash = "";
      StringSource("{}", true, new HashFilter(sha256, new HexEncoder(new StringSink(hash))));
      std::cout << "hash='" << hash << "'\n";
   }
}

根据上的在线转换器，哪个是正确的

但在RHEL7上，输出是奇怪的：

hash='C5D2460186F7233C927E7DB2DCC703C0E500B653CA82273B7BFAD8045D85A470'
hash='B48D38F93EAA084033FC5970BF96E559C33C4CDC07D889AB00B4D63F9590739D'

所以，要么我做错了什么，要么库中有个bug，要么安装错误

我是不是误用了libcrytop？类似于缺少MessageEnd（）的内容

关于RHEL7：

>ldd ./hashtest 
    linux-vdso.so.1 =>  (0x00007ffecd1b1000)
    libcryptopp.so.6 => /lib64/libcryptopp.so.6 (0x00007f71c3707000)
    libstdc++.so.6 => /lib64/libstdc++.so.6 (0x00007f71c3400000)
    libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f71c31ea000)
    libc.so.6 => /lib64/libc.so.6 (0x00007f71c2e1d000)
    libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f71c2c01000)
    libm.so.6 => /lib64/libm.so.6 (0x00007f71c28ff000)
    /lib64/ld-linux-x86-64.so.2 (0x00007f71c3e2e000)
>file /lib64/libcryptopp.so.6.0.0 
/lib64/libcryptopp.so.6.0.0: ELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=4a0941023c6e957077cb555536a509a0ef93bf04, stripped

关于Debian：

>ldd ./hashtest 
    linux-vdso.so.1 (0x00007ffedc5e6000)
    libcrypto++.so.6 => /usr/lib/x86_64-linux-gnu/libcrypto++.so.6 (0x00007f1d3b79a000)
    libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f1d3b418000)
    libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f1d3b201000)
    libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f1d3ae62000)
    libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f1d3ac45000)
    libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f1d3a941000)
    /lib64/ld-linux-x86-64.so.2 (0x00007f1d3bf35000)
>file /usr/lib/x86_64-linux-gnu/libcrypto++.so.6.0.0 
/usr/lib/x86_64-linux-gnu/libcrypto++.so.6.0.0: ELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=5c6cb06479005d2ebfa40c75e5489c915d314b70, stripped

这两种平台上的版本似乎都是v6.0.0，但：

>apt-cache show crypto++
[snip]
Package: libcrypto++-dev
Source: libcrypto++
Version: 5.6.4-7

>yum info --enablerepo=epel cryptopp
Installed Packages
Name        : cryptopp
Arch        : x86_64
Version     : 5.6.2
Release     : 10.el7
Size        : 5.2 M
Repo        : installed
From repo   : epel
Summary     : C++ class library of cryptographic schemes
URL         : http://www.cryptopp.com/
Licence     : Boost
Description : Crypto++ Library is a free C++ class library of cryptographic schemes.
            : See http://www.cryptopp.com/ for a list of supported algorithms.
            : 
            : One purpose of Crypto++ is to act as a repository of public domain
            : (not copyrighted) source code. Although the library is copyrighted as a
            : compilation, the individual files in it are in the public domain.

---

您需要将RHEL框至少升级到cryptopp版本5.6.4，因为这就是“真正的”SHA3实现。在5.6.4之前，实施使用的是被选为SHA3基础的“Keccak”提案规定的原始填充方案，而不是批准的SHA3标准中定义的修改填充方案

---

有关5.6.4中的更改通知，请参阅的背景信息和底部的发行说明。

。如果没有谷歌搜索，我就不会知道“改为FIPS 202”意味着“改变实验实现以匹配发布的标准”！给文档作者的一个注释。令人惊讶的是，EPEL的版本也过时了。假设您的答案是正确的，我在这里将此作为一个错误提交给EPEL：

>apt-cache show crypto++
[snip]
Package: libcrypto++-dev
Source: libcrypto++
Version: 5.6.4-7

>yum info --enablerepo=epel cryptopp
Installed Packages
Name        : cryptopp
Arch        : x86_64
Version     : 5.6.2
Release     : 10.el7
Size        : 5.2 M
Repo        : installed
From repo   : epel
Summary     : C++ class library of cryptographic schemes
URL         : http://www.cryptopp.com/
Licence     : Boost
Description : Crypto++ Library is a free C++ class library of cryptographic schemes.
            : See http://www.cryptopp.com/ for a list of supported algorithms.
            : 
            : One purpose of Crypto++ is to act as a repository of public domain
            : (not copyrighted) source code. Although the library is copyrighted as a
            : compilation, the individual files in it are in the public domain.