287 lines
10 KiB
Java
287 lines
10 KiB
Java
|
package org.bouncycastle.math.ec.custom.sec;
|
||
|
|
|
||
|
|
import io.flutter.embedding.android.KeyboardMap;
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import org.bouncycastle.math.raw.Interleave;
|
||
|
|
import org.bouncycastle.math.raw.Nat256;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class SecT239Field {
|
||
|
|
private static final long M47 = 140737488355327L;
|
||
|
|
private static final long M60 = 1152921504606846975L;
|
||
|
|
|
||
|
|
public static int trace(long[] jArr) {
|
||
|
|
return ((int) ((jArr[0] ^ (jArr[1] >>> 17)) ^ (jArr[2] >>> 34))) & 1;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void squareN(long[] jArr, int i, long[] jArr2) {
|
||
|
|
long[] createExt64 = Nat256.createExt64();
|
||
|
|
implSquare(jArr, createExt64);
|
||
|
|
while (true) {
|
||
|
|
reduce(createExt64, jArr2);
|
||
|
|
i--;
|
||
|
|
if (i <= 0) {
|
||
|
|
return;
|
||
|
|
} else {
|
||
|
|
implSquare(jArr2, createExt64);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void squareAddToExt(long[] jArr, long[] jArr2) {
|
||
|
|
long[] createExt64 = Nat256.createExt64();
|
||
|
|
implSquare(jArr, createExt64);
|
||
|
|
addExt(jArr2, createExt64, jArr2);
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void square(long[] jArr, long[] jArr2) {
|
||
|
|
long[] createExt64 = Nat256.createExt64();
|
||
|
|
implSquare(jArr, createExt64);
|
||
|
|
reduce(createExt64, jArr2);
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void sqrt(long[] jArr, long[] jArr2) {
|
||
|
|
long unshuffle = Interleave.unshuffle(jArr[0]);
|
||
|
|
long unshuffle2 = Interleave.unshuffle(jArr[1]);
|
||
|
|
long j = (unshuffle >>> 32) | (unshuffle2 & (-4294967296L));
|
||
|
|
int i = 2;
|
||
|
|
long unshuffle3 = Interleave.unshuffle(jArr[2]);
|
||
|
|
long unshuffle4 = Interleave.unshuffle(jArr[3]);
|
||
|
|
long j2 = ((-4294967296L) & unshuffle4) | (unshuffle3 >>> 32);
|
||
|
|
long j3 = j2 >>> 49;
|
||
|
|
long j4 = (j >>> 49) | (j2 << 15);
|
||
|
|
long j5 = j2 ^ (j << 15);
|
||
|
|
long[] createExt64 = Nat256.createExt64();
|
||
|
|
int[] iArr = {39, 120};
|
||
|
|
int i2 = 0;
|
||
|
|
while (i2 < i) {
|
||
|
|
int i3 = iArr[i2];
|
||
|
|
int i4 = i3 >>> 6;
|
||
|
|
int i5 = i3 & 63;
|
||
|
|
createExt64[i4] = createExt64[i4] ^ (j << i5);
|
||
|
|
int i6 = i4 + 1;
|
||
|
|
int[] iArr2 = iArr;
|
||
|
|
int i7 = -i5;
|
||
|
|
createExt64[i6] = createExt64[i6] ^ ((j5 << i5) | (j >>> i7));
|
||
|
|
int i8 = i4 + 2;
|
||
|
|
createExt64[i8] = createExt64[i8] ^ ((j4 << i5) | (j5 >>> i7));
|
||
|
|
int i9 = i4 + 3;
|
||
|
|
createExt64[i9] = createExt64[i9] ^ ((j3 << i5) | (j4 >>> i7));
|
||
|
|
int i10 = i4 + 4;
|
||
|
|
createExt64[i10] = createExt64[i10] ^ (j3 >>> i7);
|
||
|
|
i2++;
|
||
|
|
i = 2;
|
||
|
|
iArr = iArr2;
|
||
|
|
}
|
||
|
|
reduce(createExt64, jArr2);
|
||
|
|
jArr2[0] = ((unshuffle & KeyboardMap.kValueMask) | (unshuffle2 << 32)) ^ jArr2[0];
|
||
|
|
jArr2[1] = jArr2[1] ^ ((unshuffle3 & KeyboardMap.kValueMask) | (unshuffle4 << 32));
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void reduce17(long[] jArr, int i) {
|
||
|
|
int i2 = i + 3;
|
||
|
|
long j = jArr[i2];
|
||
|
|
long j2 = j >>> 47;
|
||
|
|
jArr[i] = jArr[i] ^ j2;
|
||
|
|
int i3 = i + 2;
|
||
|
|
jArr[i3] = (j2 << 30) ^ jArr[i3];
|
||
|
|
jArr[i2] = j & M47;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void reduce(long[] jArr, long[] jArr2) {
|
||
|
|
long j = jArr[0];
|
||
|
|
long j2 = jArr[1];
|
||
|
|
long j3 = jArr[2];
|
||
|
|
long j4 = jArr[3];
|
||
|
|
long j5 = jArr[4];
|
||
|
|
long j6 = jArr[5];
|
||
|
|
long j7 = jArr[6];
|
||
|
|
long j8 = jArr[7];
|
||
|
|
long j9 = j7 ^ (j8 >>> 17);
|
||
|
|
long j10 = (j6 ^ (j8 << 47)) ^ (j9 >>> 17);
|
||
|
|
long j11 = ((j5 ^ (j8 >>> 47)) ^ (j9 << 47)) ^ (j10 >>> 17);
|
||
|
|
long j12 = (((j4 ^ (j8 << 17)) ^ (j9 >>> 47)) ^ (j10 << 47)) ^ (j11 >>> 17);
|
||
|
|
long j13 = j12 >>> 47;
|
||
|
|
jArr2[0] = (j ^ (j11 << 17)) ^ j13;
|
||
|
|
jArr2[1] = ((j10 << 17) ^ j2) ^ (j11 >>> 47);
|
||
|
|
jArr2[2] = (j13 << 30) ^ ((((j9 << 17) ^ j3) ^ (j10 >>> 47)) ^ (j11 << 47));
|
||
|
|
jArr2[3] = M47 & j12;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void multiplyAddToExt(long[] jArr, long[] jArr2, long[] jArr3) {
|
||
|
|
long[] createExt64 = Nat256.createExt64();
|
||
|
|
implMultiply(jArr, jArr2, createExt64);
|
||
|
|
addExt(jArr3, createExt64, jArr3);
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void multiply(long[] jArr, long[] jArr2, long[] jArr3) {
|
||
|
|
long[] createExt64 = Nat256.createExt64();
|
||
|
|
implMultiply(jArr, jArr2, createExt64);
|
||
|
|
reduce(createExt64, jArr3);
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void invert(long[] jArr, long[] jArr2) {
|
||
|
|
if (Nat256.isZero64(jArr)) {
|
||
|
|
throw new IllegalStateException();
|
||
|
|
}
|
||
|
|
long[] create64 = Nat256.create64();
|
||
|
|
long[] create642 = Nat256.create64();
|
||
|
|
square(jArr, create64);
|
||
|
|
multiply(create64, jArr, create64);
|
||
|
|
square(create64, create64);
|
||
|
|
multiply(create64, jArr, create64);
|
||
|
|
squareN(create64, 3, create642);
|
||
|
|
multiply(create642, create64, create642);
|
||
|
|
square(create642, create642);
|
||
|
|
multiply(create642, jArr, create642);
|
||
|
|
squareN(create642, 7, create64);
|
||
|
|
multiply(create64, create642, create64);
|
||
|
|
squareN(create64, 14, create642);
|
||
|
|
multiply(create642, create64, create642);
|
||
|
|
square(create642, create642);
|
||
|
|
multiply(create642, jArr, create642);
|
||
|
|
squareN(create642, 29, create64);
|
||
|
|
multiply(create64, create642, create64);
|
||
|
|
square(create64, create64);
|
||
|
|
multiply(create64, jArr, create64);
|
||
|
|
squareN(create64, 59, create642);
|
||
|
|
multiply(create642, create64, create642);
|
||
|
|
square(create642, create642);
|
||
|
|
multiply(create642, jArr, create642);
|
||
|
|
squareN(create642, 119, create64);
|
||
|
|
multiply(create64, create642, create64);
|
||
|
|
square(create64, jArr2);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected static void implSquare(long[] jArr, long[] jArr2) {
|
||
|
|
Interleave.expand64To128(jArr[0], jArr2, 0);
|
||
|
|
Interleave.expand64To128(jArr[1], jArr2, 2);
|
||
|
|
Interleave.expand64To128(jArr[2], jArr2, 4);
|
||
|
|
jArr2[6] = Interleave.expand32to64((int) jArr[3]);
|
||
|
|
jArr2[7] = Interleave.expand16to32((int) (r0 >>> 32)) & KeyboardMap.kValueMask;
|
||
|
|
}
|
||
|
|
|
||
|
|
protected static void implMulwAcc(long j, long j2, long[] jArr, int i) {
|
||
|
|
long j3 = j2 << 1;
|
||
|
|
long j4 = j3 ^ j2;
|
||
|
|
int i2 = 3;
|
||
|
|
long j5 = j2 << 2;
|
||
|
|
long j6 = j4 << 1;
|
||
|
|
long[] jArr2 = {0, j2, j3, j4, j5, j5 ^ j2, j6, j6 ^ j2};
|
||
|
|
int i3 = (int) j;
|
||
|
|
long j7 = (jArr2[(i3 >>> 3) & 7] << 3) ^ jArr2[i3 & 7];
|
||
|
|
long j8 = 0;
|
||
|
|
int i4 = 54;
|
||
|
|
while (true) {
|
||
|
|
int i5 = (int) (j >>> i4);
|
||
|
|
long j9 = jArr2[i5 & 7] ^ (jArr2[(i5 >>> i2) & 7] << i2);
|
||
|
|
j7 ^= j9 << i4;
|
||
|
|
j8 ^= j9 >>> (-i4);
|
||
|
|
i4 -= 6;
|
||
|
|
if (i4 <= 0) {
|
||
|
|
jArr[i] = jArr[i] ^ (M60 & j7);
|
||
|
|
int i6 = i + 1;
|
||
|
|
jArr[i6] = ((((((j & 585610922974906400L) & ((j2 << 4) >> 63)) >>> 5) ^ j8) << 4) ^ (j7 >>> 60)) ^ jArr[i6];
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
i2 = 3;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
protected static void implMultiply(long[] jArr, long[] jArr2, long[] jArr3) {
|
||
|
|
long[] jArr4 = new long[4];
|
||
|
|
long[] jArr5 = new long[4];
|
||
|
|
implExpand(jArr, jArr4);
|
||
|
|
implExpand(jArr2, jArr5);
|
||
|
|
implMulwAcc(jArr4[0], jArr5[0], jArr3, 0);
|
||
|
|
implMulwAcc(jArr4[1], jArr5[1], jArr3, 1);
|
||
|
|
implMulwAcc(jArr4[2], jArr5[2], jArr3, 2);
|
||
|
|
implMulwAcc(jArr4[3], jArr5[3], jArr3, 3);
|
||
|
|
for (int i = 5; i > 0; i--) {
|
||
|
|
jArr3[i] = jArr3[i] ^ jArr3[i - 1];
|
||
|
|
}
|
||
|
|
implMulwAcc(jArr4[0] ^ jArr4[1], jArr5[0] ^ jArr5[1], jArr3, 1);
|
||
|
|
implMulwAcc(jArr4[2] ^ jArr4[3], jArr5[2] ^ jArr5[3], jArr3, 3);
|
||
|
|
for (int i2 = 7; i2 > 1; i2--) {
|
||
|
|
jArr3[i2] = jArr3[i2] ^ jArr3[i2 - 2];
|
||
|
|
}
|
||
|
|
long j = jArr4[0] ^ jArr4[2];
|
||
|
|
long j2 = jArr4[1] ^ jArr4[3];
|
||
|
|
long j3 = jArr5[0] ^ jArr5[2];
|
||
|
|
long j4 = jArr5[1] ^ jArr5[3];
|
||
|
|
implMulwAcc(j ^ j2, j3 ^ j4, jArr3, 3);
|
||
|
|
long[] jArr6 = new long[3];
|
||
|
|
implMulwAcc(j, j3, jArr6, 0);
|
||
|
|
implMulwAcc(j2, j4, jArr6, 1);
|
||
|
|
long j5 = jArr6[0];
|
||
|
|
long j6 = jArr6[1];
|
||
|
|
long j7 = jArr6[2];
|
||
|
|
jArr3[2] = jArr3[2] ^ j5;
|
||
|
|
jArr3[3] = (j5 ^ j6) ^ jArr3[3];
|
||
|
|
jArr3[4] = jArr3[4] ^ (j7 ^ j6);
|
||
|
|
jArr3[5] = jArr3[5] ^ j7;
|
||
|
|
implCompactExt(jArr3);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected static void implExpand(long[] jArr, long[] jArr2) {
|
||
|
|
long j = jArr[0];
|
||
|
|
long j2 = jArr[1];
|
||
|
|
long j3 = jArr[2];
|
||
|
|
long j4 = jArr[3];
|
||
|
|
jArr2[0] = j & M60;
|
||
|
|
jArr2[1] = ((j >>> 60) ^ (j2 << 4)) & M60;
|
||
|
|
jArr2[2] = ((j2 >>> 56) ^ (j3 << 8)) & M60;
|
||
|
|
jArr2[3] = (j3 >>> 52) ^ (j4 << 12);
|
||
|
|
}
|
||
|
|
|
||
|
|
protected static void implCompactExt(long[] jArr) {
|
||
|
|
long j = jArr[0];
|
||
|
|
long j2 = jArr[1];
|
||
|
|
long j3 = jArr[2];
|
||
|
|
long j4 = jArr[3];
|
||
|
|
long j5 = jArr[4];
|
||
|
|
long j6 = jArr[5];
|
||
|
|
long j7 = jArr[6];
|
||
|
|
long j8 = jArr[7];
|
||
|
|
jArr[0] = j ^ (j2 << 60);
|
||
|
|
jArr[1] = (j2 >>> 4) ^ (j3 << 56);
|
||
|
|
jArr[2] = (j3 >>> 8) ^ (j4 << 52);
|
||
|
|
jArr[3] = (j4 >>> 12) ^ (j5 << 48);
|
||
|
|
jArr[4] = (j5 >>> 16) ^ (j6 << 44);
|
||
|
|
jArr[5] = (j6 >>> 20) ^ (j7 << 40);
|
||
|
|
jArr[6] = (j7 >>> 24) ^ (j8 << 36);
|
||
|
|
jArr[7] = j8 >>> 28;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static long[] fromBigInteger(BigInteger bigInteger) {
|
||
|
|
long[] fromBigInteger64 = Nat256.fromBigInteger64(bigInteger);
|
||
|
|
reduce17(fromBigInteger64, 0);
|
||
|
|
return fromBigInteger64;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void addOne(long[] jArr, long[] jArr2) {
|
||
|
|
jArr2[0] = jArr[0] ^ 1;
|
||
|
|
jArr2[1] = jArr[1];
|
||
|
|
jArr2[2] = jArr[2];
|
||
|
|
jArr2[3] = jArr[3];
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void addExt(long[] jArr, long[] jArr2, long[] jArr3) {
|
||
|
|
jArr3[0] = jArr[0] ^ jArr2[0];
|
||
|
|
jArr3[1] = jArr[1] ^ jArr2[1];
|
||
|
|
jArr3[2] = jArr[2] ^ jArr2[2];
|
||
|
|
jArr3[3] = jArr[3] ^ jArr2[3];
|
||
|
|
jArr3[4] = jArr[4] ^ jArr2[4];
|
||
|
|
jArr3[5] = jArr[5] ^ jArr2[5];
|
||
|
|
jArr3[6] = jArr[6] ^ jArr2[6];
|
||
|
|
jArr3[7] = jArr2[7] ^ jArr[7];
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void add(long[] jArr, long[] jArr2, long[] jArr3) {
|
||
|
|
jArr3[0] = jArr[0] ^ jArr2[0];
|
||
|
|
jArr3[1] = jArr[1] ^ jArr2[1];
|
||
|
|
jArr3[2] = jArr[2] ^ jArr2[2];
|
||
|
|
jArr3[3] = jArr2[3] ^ jArr[3];
|
||
|
|
}
|
||
|
|
}
|