259 lines
8.6 KiB
Java
259 lines
8.6 KiB
Java
|
package org.bouncycastle.crypto.engines;
|
||
|
|
|
||
|
|
import io.flutter.embedding.android.KeyboardMap;
|
||
|
|
import org.bouncycastle.util.Pack;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class ChaChaEngine extends Salsa20Engine {
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected void setKey(byte[] bArr, byte[] bArr2) {
|
||
|
|
if (bArr != null) {
|
||
|
|
if (bArr.length != 16 && bArr.length != 32) {
|
||
|
|
StringBuilder sb = new StringBuilder();
|
||
|
|
sb.append(getAlgorithmName());
|
||
|
|
sb.append(" requires 128 bit or 256 bit key");
|
||
|
|
throw new IllegalArgumentException(sb.toString());
|
||
|
|
}
|
||
|
|
packTauOrSigma(bArr.length, this.engineState, 0);
|
||
|
|
Pack.littleEndianToInt(bArr, 0, this.engineState, 4, 4);
|
||
|
|
Pack.littleEndianToInt(bArr, bArr.length - 16, this.engineState, 8, 4);
|
||
|
|
}
|
||
|
|
Pack.littleEndianToInt(bArr2, 0, this.engineState, 14, 2);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected void retreatCounter(long j) {
|
||
|
|
int i = (int) (j >>> 32);
|
||
|
|
int i2 = (int) j;
|
||
|
|
if (i != 0) {
|
||
|
|
if ((this.engineState[13] & KeyboardMap.kValueMask) < (i & KeyboardMap.kValueMask)) {
|
||
|
|
throw new IllegalStateException("attempt to reduce counter past zero.");
|
||
|
|
}
|
||
|
|
int[] iArr = this.engineState;
|
||
|
|
iArr[13] = iArr[13] - i;
|
||
|
|
}
|
||
|
|
if ((this.engineState[12] & KeyboardMap.kValueMask) >= (i2 & KeyboardMap.kValueMask)) {
|
||
|
|
int[] iArr2 = this.engineState;
|
||
|
|
iArr2[12] = iArr2[12] - i2;
|
||
|
|
} else {
|
||
|
|
if (this.engineState[13] == 0) {
|
||
|
|
throw new IllegalStateException("attempt to reduce counter past zero.");
|
||
|
|
}
|
||
|
|
this.engineState[13] = r11[13] - 1;
|
||
|
|
int[] iArr3 = this.engineState;
|
||
|
|
iArr3[12] = iArr3[12] - i2;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected void retreatCounter() {
|
||
|
|
if (this.engineState[12] == 0 && this.engineState[13] == 0) {
|
||
|
|
throw new IllegalStateException("attempt to reduce counter past zero.");
|
||
|
|
}
|
||
|
|
int[] iArr = this.engineState;
|
||
|
|
int i = iArr[12] - 1;
|
||
|
|
iArr[12] = i;
|
||
|
|
if (i == -1) {
|
||
|
|
this.engineState[13] = r0[13] - 1;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected void resetCounter() {
|
||
|
|
int[] iArr = this.engineState;
|
||
|
|
this.engineState[13] = 0;
|
||
|
|
iArr[12] = 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected long getCounter() {
|
||
|
|
return (this.engineState[13] << 32) | (this.engineState[12] & KeyboardMap.kValueMask);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine, org.bouncycastle.crypto.StreamCipher
|
||
|
|
public String getAlgorithmName() {
|
||
|
|
StringBuilder sb = new StringBuilder("ChaCha");
|
||
|
|
sb.append(this.rounds);
|
||
|
|
return sb.toString();
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected void generateKeyStream(byte[] bArr) {
|
||
|
|
chachaCore(this.rounds, this.engineState, this.x);
|
||
|
|
Pack.intToLittleEndian(this.x, bArr, 0);
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected void advanceCounter(long j) {
|
||
|
|
int i = (int) (j >>> 32);
|
||
|
|
int i2 = (int) j;
|
||
|
|
if (i > 0) {
|
||
|
|
int[] iArr = this.engineState;
|
||
|
|
iArr[13] = iArr[13] + i;
|
||
|
|
}
|
||
|
|
int i3 = this.engineState[12];
|
||
|
|
int[] iArr2 = this.engineState;
|
||
|
|
iArr2[12] = iArr2[12] + i2;
|
||
|
|
if (i3 == 0 || this.engineState[12] >= i3) {
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
int[] iArr3 = this.engineState;
|
||
|
|
iArr3[13] = iArr3[13] + 1;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.engines.Salsa20Engine
|
||
|
|
protected void advanceCounter() {
|
||
|
|
int[] iArr = this.engineState;
|
||
|
|
int i = iArr[12] + 1;
|
||
|
|
iArr[12] = i;
|
||
|
|
if (i == 0) {
|
||
|
|
int[] iArr2 = this.engineState;
|
||
|
|
iArr2[13] = iArr2[13] + 1;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public static void chachaCore(int i, int[] iArr, int[] iArr2) {
|
||
|
|
int i2 = 16;
|
||
|
|
if (iArr.length != 16) {
|
||
|
|
throw new IllegalArgumentException();
|
||
|
|
}
|
||
|
|
if (iArr2.length != 16) {
|
||
|
|
throw new IllegalArgumentException();
|
||
|
|
}
|
||
|
|
if (i % 2 != 0) {
|
||
|
|
throw new IllegalArgumentException("Number of rounds must be even");
|
||
|
|
}
|
||
|
|
char c = 0;
|
||
|
|
int i3 = iArr[0];
|
||
|
|
int i4 = iArr[1];
|
||
|
|
int i5 = iArr[2];
|
||
|
|
int i6 = iArr[3];
|
||
|
|
int i7 = iArr[4];
|
||
|
|
int i8 = iArr[5];
|
||
|
|
int i9 = iArr[6];
|
||
|
|
int i10 = 7;
|
||
|
|
int i11 = iArr[7];
|
||
|
|
int i12 = 8;
|
||
|
|
int i13 = iArr[8];
|
||
|
|
int i14 = iArr[9];
|
||
|
|
int i15 = iArr[10];
|
||
|
|
int i16 = iArr[11];
|
||
|
|
int i17 = 12;
|
||
|
|
int i18 = iArr[12];
|
||
|
|
int i19 = iArr[13];
|
||
|
|
int i20 = iArr[14];
|
||
|
|
int i21 = iArr[15];
|
||
|
|
int i22 = i20;
|
||
|
|
int i23 = i19;
|
||
|
|
int i24 = i18;
|
||
|
|
int i25 = i16;
|
||
|
|
int i26 = i15;
|
||
|
|
int i27 = i14;
|
||
|
|
int i28 = i13;
|
||
|
|
int i29 = i11;
|
||
|
|
int i30 = i9;
|
||
|
|
int i31 = i8;
|
||
|
|
int i32 = i7;
|
||
|
|
int i33 = i6;
|
||
|
|
int i34 = i5;
|
||
|
|
int i35 = i4;
|
||
|
|
int i36 = i3;
|
||
|
|
int i37 = i;
|
||
|
|
while (i37 > 0) {
|
||
|
|
int i38 = i36 + i32;
|
||
|
|
int rotl = rotl(i24 ^ i38, i2);
|
||
|
|
int i39 = i28 + rotl;
|
||
|
|
int rotl2 = rotl(i32 ^ i39, i17);
|
||
|
|
int i40 = i38 + rotl2;
|
||
|
|
int rotl3 = rotl(rotl ^ i40, i12);
|
||
|
|
int i41 = i39 + rotl3;
|
||
|
|
int rotl4 = rotl(rotl2 ^ i41, i10);
|
||
|
|
int i42 = i35 + i31;
|
||
|
|
int rotl5 = rotl(i23 ^ i42, i2);
|
||
|
|
int i43 = i27 + rotl5;
|
||
|
|
int rotl6 = rotl(i31 ^ i43, i17);
|
||
|
|
int i44 = i42 + rotl6;
|
||
|
|
int rotl7 = rotl(rotl5 ^ i44, i12);
|
||
|
|
int i45 = i43 + rotl7;
|
||
|
|
int rotl8 = rotl(rotl6 ^ i45, i10);
|
||
|
|
int i46 = i34 + i30;
|
||
|
|
int rotl9 = rotl(i22 ^ i46, i2);
|
||
|
|
int i47 = i26 + rotl9;
|
||
|
|
int rotl10 = rotl(i30 ^ i47, i17);
|
||
|
|
int i48 = i46 + rotl10;
|
||
|
|
int rotl11 = rotl(rotl9 ^ i48, i12);
|
||
|
|
int i49 = i47 + rotl11;
|
||
|
|
int rotl12 = rotl(rotl10 ^ i49, i10);
|
||
|
|
int i50 = i33 + i29;
|
||
|
|
int rotl13 = rotl(i21 ^ i50, 16);
|
||
|
|
int i51 = i25 + rotl13;
|
||
|
|
int rotl14 = rotl(i29 ^ i51, i17);
|
||
|
|
int i52 = i50 + rotl14;
|
||
|
|
int rotl15 = rotl(rotl13 ^ i52, 8);
|
||
|
|
int i53 = i51 + rotl15;
|
||
|
|
int rotl16 = rotl(rotl14 ^ i53, 7);
|
||
|
|
int i54 = i40 + rotl8;
|
||
|
|
int rotl17 = rotl(rotl15 ^ i54, 16);
|
||
|
|
int i55 = i49 + rotl17;
|
||
|
|
int rotl18 = rotl(rotl8 ^ i55, 12);
|
||
|
|
i36 = i54 + rotl18;
|
||
|
|
i21 = rotl(rotl17 ^ i36, 8);
|
||
|
|
i26 = i55 + i21;
|
||
|
|
i31 = rotl(rotl18 ^ i26, 7);
|
||
|
|
int i56 = i44 + rotl12;
|
||
|
|
int rotl19 = rotl(rotl3 ^ i56, 16);
|
||
|
|
int i57 = i53 + rotl19;
|
||
|
|
int rotl20 = rotl(rotl12 ^ i57, 12);
|
||
|
|
i35 = i56 + rotl20;
|
||
|
|
i24 = rotl(rotl19 ^ i35, 8);
|
||
|
|
i25 = i57 + i24;
|
||
|
|
i30 = rotl(rotl20 ^ i25, 7);
|
||
|
|
int i58 = i48 + rotl16;
|
||
|
|
int rotl21 = rotl(rotl7 ^ i58, 16);
|
||
|
|
int i59 = i41 + rotl21;
|
||
|
|
int rotl22 = rotl(rotl16 ^ i59, 12);
|
||
|
|
i34 = i58 + rotl22;
|
||
|
|
i23 = rotl(rotl21 ^ i34, 8);
|
||
|
|
i28 = i59 + i23;
|
||
|
|
i29 = rotl(rotl22 ^ i28, 7);
|
||
|
|
int i60 = i52 + rotl4;
|
||
|
|
i2 = 16;
|
||
|
|
int rotl23 = rotl(rotl11 ^ i60, 16);
|
||
|
|
int i61 = i45 + rotl23;
|
||
|
|
int rotl24 = rotl(rotl4 ^ i61, 12);
|
||
|
|
i33 = i60 + rotl24;
|
||
|
|
i22 = rotl(rotl23 ^ i33, 8);
|
||
|
|
i27 = i61 + i22;
|
||
|
|
i32 = rotl(rotl24 ^ i27, 7);
|
||
|
|
i37 -= 2;
|
||
|
|
c = 0;
|
||
|
|
i17 = 12;
|
||
|
|
i12 = 8;
|
||
|
|
i10 = 7;
|
||
|
|
}
|
||
|
|
iArr2[c] = i36 + iArr[c];
|
||
|
|
iArr2[1] = i35 + iArr[1];
|
||
|
|
iArr2[2] = i34 + iArr[2];
|
||
|
|
iArr2[3] = i33 + iArr[3];
|
||
|
|
iArr2[4] = i32 + iArr[4];
|
||
|
|
iArr2[5] = i31 + iArr[5];
|
||
|
|
iArr2[6] = i30 + iArr[6];
|
||
|
|
iArr2[7] = i29 + iArr[7];
|
||
|
|
iArr2[8] = i28 + iArr[8];
|
||
|
|
iArr2[9] = i27 + iArr[9];
|
||
|
|
iArr2[10] = i26 + iArr[10];
|
||
|
|
iArr2[11] = i25 + iArr[11];
|
||
|
|
iArr2[12] = i24 + iArr[12];
|
||
|
|
iArr2[13] = i23 + iArr[13];
|
||
|
|
iArr2[14] = i22 + iArr[14];
|
||
|
|
iArr2[15] = i21 + iArr[15];
|
||
|
|
}
|
||
|
|
|
||
|
|
public ChaChaEngine(int i) {
|
||
|
|
super(i);
|
||
|
|
}
|
||
|
|
|
||
|
|
public ChaChaEngine() {
|
||
|
|
}
|
||
|
|
}
|