hash data using SHA512

rule:
  meta:
    name: hash data using SHA512
    namespace: data-manipulation/hashing/sha512
    authors:
      - william.ballenthin@mandiant.com
    scopes:
      static: function
      dynamic: thread
    references:
      - https://www.rfc-editor.org/rfc/rfc6234
    examples:
      - 1195d0d18be9362fb8dd9e1738404c9d:0x404FC0
      - 44d40faf3f1fe4ed969befab7afcd2f0:0x1003D2F0
  features:
    - or:
      - and:
        - number: 0x6a09e667f3bcc908 = H(0)0
        - number: 0xbb67ae8584caa73b = H(0)1
        - number: 0x3c6ef372fe94f82b = H(0)2
        - number: 0xa54ff53a5f1d36f1 = H(0)3
        - number: 0x510e527fade682d1 = H(0)4
        - number: 0x9b05688c2b3e6c1f = H(0)5
        - number: 0x1f83d9abfb41bd6b = H(0)6
        - number: 0x5be0cd19137e2179 = H(0)7
      - and:
        - or:
          - number: 0x428a2f98d728ae22
          - and:
            - number: 0x428a2f98
            - number: 0xd728ae22
        - or:
          - number: 0x7137449123ef65cd
          - and:
            - number: 0x71374491
            - number: 0x23ef65cd
        - or:
          - number: 0xb5c0fbcfec4d3b2f
          - and:
            - number: 0xb5c0fbcf
            - number: 0xec4d3b2f
        - or:
          - number: 0xe9b5dba58189dbbc
          - and:
            - number: 0xe9b5dba5
            - number: 0x8189dbbc
        - or:
          - number: 0x3956c25bf348b538
          - and:
            - number: 0x3956c25b
            - number: 0xf348b538
        - or:
          - number: 0x59f111f1b605d019
          - and:
            - number: 0x59f111f1
            - number: 0xb605d019
        - or:
          - number: 0x923f82a4af194f9b
          - and:
            - number: 0x923f82a4
            - number: 0xaf194f9b
        - or:
          - number: 0xab1c5ed5da6d8118
          - and:
            - number: 0xab1c5ed5
            - number: 0xda6d8118
      - bytes: 08 C9 BC F3 67 E6 09 6A 3B A7 CA 84 85 AE 67 BB 2B F8 94 FE 72 F3 6E 3C F1 36 1D 5F 3A F5 4F A5 D1 82 E6 AD 7F 52 0E 51 1F 6C 3E 2B 8C 68 05 9B 6B BD 41 FB AB D9 83 1F 79 21 7E 13 19 CD E0 5B = H(0)