300 lines
13 KiB
Java
300 lines
13 KiB
Java
|
package org.bouncycastle.crypto.prng.drbg;
|
||
|
|
|
||
|
|
import java.math.BigInteger;
|
||
|
|
import org.bouncycastle.asn1.nist.NISTNamedCurves;
|
||
|
|
import org.bouncycastle.crypto.Digest;
|
||
|
|
import org.bouncycastle.crypto.prng.EntropySource;
|
||
|
|
import org.bouncycastle.math.ec.ECCurve;
|
||
|
|
import org.bouncycastle.math.ec.ECMultiplier;
|
||
|
|
import org.bouncycastle.math.ec.ECPoint;
|
||
|
|
import org.bouncycastle.util.Arrays;
|
||
|
|
import org.bouncycastle.util.BigIntegers;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class DualECSP800DRBG implements SP80090DRBG {
|
||
|
|
private static final int MAX_ADDITIONAL_INPUT = 4096;
|
||
|
|
private static final int MAX_ENTROPY_LENGTH = 4096;
|
||
|
|
private static final int MAX_PERSONALIZATION_STRING = 4096;
|
||
|
|
private static final long RESEED_MAX = 2147483648L;
|
||
|
|
private static final DualECPoints[] nistPoints;
|
||
|
|
private static final BigInteger p256_Px;
|
||
|
|
private static final BigInteger p256_Py;
|
||
|
|
private static final BigInteger p256_Qx;
|
||
|
|
private static final BigInteger p256_Qy;
|
||
|
|
private static final BigInteger p384_Px;
|
||
|
|
private static final BigInteger p384_Py;
|
||
|
|
private static final BigInteger p384_Qx;
|
||
|
|
private static final BigInteger p384_Qy;
|
||
|
|
private static final BigInteger p521_Px;
|
||
|
|
private static final BigInteger p521_Py;
|
||
|
|
private static final BigInteger p521_Qx;
|
||
|
|
private static final BigInteger p521_Qy;
|
||
|
|
private ECPoint _P;
|
||
|
|
private ECPoint _Q;
|
||
|
|
private ECCurve.Fp _curve;
|
||
|
|
private Digest _digest;
|
||
|
|
private EntropySource _entropySource;
|
||
|
|
private ECMultiplier _fixedPointMultiplier;
|
||
|
|
private int _outlen;
|
||
|
|
private long _reseedCounter;
|
||
|
|
private byte[] _s;
|
||
|
|
private int _sLength;
|
||
|
|
private int _securityStrength;
|
||
|
|
private int _seedlen;
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.prng.drbg.SP80090DRBG
|
||
|
|
public void reseed(byte[] bArr) {
|
||
|
|
if (Utils.isTooLarge(bArr, 512)) {
|
||
|
|
throw new IllegalArgumentException("Additional input string too large");
|
||
|
|
}
|
||
|
|
this._s = Utils.hash_df(this._digest, Arrays.concatenate(pad8(this._s, this._seedlen), getEntropy(), bArr), this._seedlen);
|
||
|
|
this._reseedCounter = 0L;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.prng.drbg.SP80090DRBG
|
||
|
|
public int getBlockSize() {
|
||
|
|
return this._outlen << 3;
|
||
|
|
}
|
||
|
|
|
||
|
|
@Override // org.bouncycastle.crypto.prng.drbg.SP80090DRBG
|
||
|
|
public int generate(byte[] bArr, byte[] bArr2, boolean z) {
|
||
|
|
int length;
|
||
|
|
int length2 = bArr.length;
|
||
|
|
int length3 = bArr.length / this._outlen;
|
||
|
|
if (Utils.isTooLarge(bArr2, 512)) {
|
||
|
|
throw new IllegalArgumentException("Additional input too large");
|
||
|
|
}
|
||
|
|
if (this._reseedCounter + length3 > RESEED_MAX) {
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
if (z) {
|
||
|
|
reseed(bArr2);
|
||
|
|
bArr2 = null;
|
||
|
|
}
|
||
|
|
BigInteger bigInteger = bArr2 != null ? new BigInteger(1, xor(this._s, Utils.hash_df(this._digest, bArr2, this._seedlen))) : new BigInteger(1, this._s);
|
||
|
|
int i = 0;
|
||
|
|
Arrays.fill(bArr, (byte) 0);
|
||
|
|
int i2 = 0;
|
||
|
|
for (int i3 = 0; i3 < length3; i3++) {
|
||
|
|
bigInteger = getScalarMultipleXCoord(this._P, bigInteger);
|
||
|
|
byte[] byteArray = getScalarMultipleXCoord(this._Q, bigInteger).toByteArray();
|
||
|
|
int length4 = byteArray.length;
|
||
|
|
int i4 = this._outlen;
|
||
|
|
if (length4 > i4) {
|
||
|
|
System.arraycopy(byteArray, byteArray.length - i4, bArr, i2, i4);
|
||
|
|
} else {
|
||
|
|
System.arraycopy(byteArray, 0, bArr, (i4 - byteArray.length) + i2, byteArray.length);
|
||
|
|
}
|
||
|
|
i2 += this._outlen;
|
||
|
|
this._reseedCounter++;
|
||
|
|
}
|
||
|
|
if (i2 < bArr.length) {
|
||
|
|
bigInteger = getScalarMultipleXCoord(this._P, bigInteger);
|
||
|
|
byte[] byteArray2 = getScalarMultipleXCoord(this._Q, bigInteger).toByteArray();
|
||
|
|
int length5 = bArr.length;
|
||
|
|
int length6 = byteArray2.length;
|
||
|
|
int i5 = this._outlen;
|
||
|
|
if (length6 > i5) {
|
||
|
|
i = byteArray2.length - i5;
|
||
|
|
length = i2;
|
||
|
|
} else {
|
||
|
|
length = (i5 - byteArray2.length) + i2;
|
||
|
|
}
|
||
|
|
System.arraycopy(byteArray2, i, bArr, length, length5 - i2);
|
||
|
|
this._reseedCounter++;
|
||
|
|
}
|
||
|
|
this._s = BigIntegers.asUnsignedByteArray(this._sLength, getScalarMultipleXCoord(this._P, bigInteger));
|
||
|
|
return length2 << 3;
|
||
|
|
}
|
||
|
|
|
||
|
|
private byte[] xor(byte[] bArr, byte[] bArr2) {
|
||
|
|
if (bArr2 == null) {
|
||
|
|
return bArr;
|
||
|
|
}
|
||
|
|
int length = bArr.length;
|
||
|
|
byte[] bArr3 = new byte[length];
|
||
|
|
for (int i = 0; i != length; i++) {
|
||
|
|
bArr3[i] = (byte) (bArr[i] ^ bArr2[i]);
|
||
|
|
}
|
||
|
|
return bArr3;
|
||
|
|
}
|
||
|
|
|
||
|
|
private byte[] pad8(byte[] bArr, int i) {
|
||
|
|
int i2 = i % 8;
|
||
|
|
if (i2 == 0) {
|
||
|
|
return bArr;
|
||
|
|
}
|
||
|
|
int i3 = 8 - i2;
|
||
|
|
int length = bArr.length - 1;
|
||
|
|
int i4 = 0;
|
||
|
|
while (length >= 0) {
|
||
|
|
int i5 = bArr[length] & 255;
|
||
|
|
bArr[length] = (byte) ((i4 >> (8 - i3)) | (i5 << i3));
|
||
|
|
length--;
|
||
|
|
i4 = i5;
|
||
|
|
}
|
||
|
|
return bArr;
|
||
|
|
}
|
||
|
|
|
||
|
|
private BigInteger getScalarMultipleXCoord(ECPoint eCPoint, BigInteger bigInteger) {
|
||
|
|
return this._fixedPointMultiplier.multiply(eCPoint, bigInteger).normalize().getAffineXCoord().toBigInteger();
|
||
|
|
}
|
||
|
|
|
||
|
|
private byte[] getEntropy() {
|
||
|
|
byte[] entropy = this._entropySource.getEntropy();
|
||
|
|
if (entropy.length >= (this._securityStrength + 7) / 8) {
|
||
|
|
return entropy;
|
||
|
|
}
|
||
|
|
throw new IllegalStateException("Insufficient entropy provided by entropy source");
|
||
|
|
}
|
||
|
|
|
||
|
|
/* JADX WARN: Code restructure failed: missing block: B:18:0x0076, code lost:
|
||
|
|
|
||
|
|
if (r1._P == null) goto L23;
|
||
|
|
*/
|
||
|
|
/* JADX WARN: Code restructure failed: missing block: B:19:0x0078, code lost:
|
||
|
|
|
||
|
|
r2 = org.bouncycastle.crypto.prng.drbg.Utils.hash_df(r1._digest, r5, r1._seedlen);
|
||
|
|
r1._s = r2;
|
||
|
|
r1._sLength = r2.length;
|
||
|
|
r1._reseedCounter = 0;
|
||
|
|
*/
|
||
|
|
/* JADX WARN: Code restructure failed: missing block: B:20:0x0089, code lost:
|
||
|
|
|
||
|
|
return;
|
||
|
|
*/
|
||
|
|
/* JADX WARN: Code restructure failed: missing block: B:23:0x0091, code lost:
|
||
|
|
|
||
|
|
throw new java.lang.IllegalArgumentException("security strength cannot be greater than 256 bits");
|
||
|
|
*/
|
||
|
|
/*
|
||
|
|
Code decompiled incorrectly, please refer to instructions dump.
|
||
|
|
To view partially-correct add '--show-bad-code' argument
|
||
|
|
*/
|
||
|
|
public DualECSP800DRBG(org.bouncycastle.crypto.prng.drbg.DualECPoints[] r2, org.bouncycastle.crypto.Digest r3, int r4, org.bouncycastle.crypto.prng.EntropySource r5, byte[] r6, byte[] r7) {
|
||
|
|
/*
|
||
|
|
r1 = this;
|
||
|
|
r1.<init>()
|
||
|
|
org.bouncycastle.math.ec.FixedPointCombMultiplier r0 = new org.bouncycastle.math.ec.FixedPointCombMultiplier
|
||
|
|
r0.<init>()
|
||
|
|
r1._fixedPointMultiplier = r0
|
||
|
|
r1._digest = r3
|
||
|
|
r1._entropySource = r5
|
||
|
|
r1._securityStrength = r4
|
||
|
|
r0 = 512(0x200, float:7.17E-43)
|
||
|
|
boolean r0 = org.bouncycastle.crypto.prng.drbg.Utils.isTooLarge(r6, r0)
|
||
|
|
if (r0 != 0) goto Lab
|
||
|
|
int r0 = r5.entropySize()
|
||
|
|
if (r0 < r4) goto L92
|
||
|
|
int r5 = r5.entropySize()
|
||
|
|
r0 = 4096(0x1000, float:5.74E-42)
|
||
|
|
if (r5 > r0) goto L92
|
||
|
|
byte[] r5 = r1.getEntropy()
|
||
|
|
byte[] r5 = org.bouncycastle.util.Arrays.concatenate(r5, r7, r6)
|
||
|
|
r6 = 0
|
||
|
|
L2f:
|
||
|
|
int r7 = r2.length
|
||
|
|
if (r6 == r7) goto L74
|
||
|
|
r7 = r2[r6]
|
||
|
|
int r7 = r7.getSecurityStrength()
|
||
|
|
if (r4 > r7) goto L71
|
||
|
|
int r3 = org.bouncycastle.crypto.prng.drbg.Utils.getMaxSecurityStrength(r3)
|
||
|
|
r4 = r2[r6]
|
||
|
|
int r4 = r4.getSecurityStrength()
|
||
|
|
if (r3 < r4) goto L69
|
||
|
|
r3 = r2[r6]
|
||
|
|
int r3 = r3.getSeedLen()
|
||
|
|
r1._seedlen = r3
|
||
|
|
r3 = r2[r6]
|
||
|
|
int r3 = r3.getMaxOutlen()
|
||
|
|
int r3 = r3 / 8
|
||
|
|
r1._outlen = r3
|
||
|
|
r3 = r2[r6]
|
||
|
|
org.bouncycastle.math.ec.ECPoint r3 = r3.getP()
|
||
|
|
r1._P = r3
|
||
|
|
r2 = r2[r6]
|
||
|
|
org.bouncycastle.math.ec.ECPoint r2 = r2.getQ()
|
||
|
|
r1._Q = r2
|
||
|
|
goto L74
|
||
|
|
L69:
|
||
|
|
java.lang.IllegalArgumentException r2 = new java.lang.IllegalArgumentException
|
||
|
|
java.lang.String r3 = "Requested security strength is not supported by digest"
|
||
|
|
r2.<init>(r3)
|
||
|
|
throw r2
|
||
|
|
L71:
|
||
|
|
int r6 = r6 + 1
|
||
|
|
goto L2f
|
||
|
|
L74:
|
||
|
|
org.bouncycastle.math.ec.ECPoint r2 = r1._P
|
||
|
|
if (r2 == 0) goto L8a
|
||
|
|
org.bouncycastle.crypto.Digest r2 = r1._digest
|
||
|
|
int r3 = r1._seedlen
|
||
|
|
byte[] r2 = org.bouncycastle.crypto.prng.drbg.Utils.hash_df(r2, r5, r3)
|
||
|
|
r1._s = r2
|
||
|
|
int r2 = r2.length
|
||
|
|
r1._sLength = r2
|
||
|
|
r2 = 0
|
||
|
|
r1._reseedCounter = r2
|
||
|
|
return
|
||
|
|
L8a:
|
||
|
|
java.lang.IllegalArgumentException r2 = new java.lang.IllegalArgumentException
|
||
|
|
java.lang.String r3 = "security strength cannot be greater than 256 bits"
|
||
|
|
r2.<init>(r3)
|
||
|
|
throw r2
|
||
|
|
L92:
|
||
|
|
java.lang.IllegalArgumentException r2 = new java.lang.IllegalArgumentException
|
||
|
|
java.lang.StringBuilder r3 = new java.lang.StringBuilder
|
||
|
|
java.lang.String r5 = "EntropySource must provide between "
|
||
|
|
r3.<init>(r5)
|
||
|
|
r3.append(r4)
|
||
|
|
java.lang.String r4 = " and 4096 bits"
|
||
|
|
r3.append(r4)
|
||
|
|
java.lang.String r3 = r3.toString()
|
||
|
|
r2.<init>(r3)
|
||
|
|
throw r2
|
||
|
|
Lab:
|
||
|
|
java.lang.IllegalArgumentException r2 = new java.lang.IllegalArgumentException
|
||
|
|
java.lang.String r3 = "Personalization string too large"
|
||
|
|
r2.<init>(r3)
|
||
|
|
throw r2
|
||
|
|
*/
|
||
|
|
throw new UnsupportedOperationException("Method not decompiled: org.bouncycastle.crypto.prng.drbg.DualECSP800DRBG.<init>(org.bouncycastle.crypto.prng.drbg.DualECPoints[], org.bouncycastle.crypto.Digest, int, org.bouncycastle.crypto.prng.EntropySource, byte[], byte[]):void");
|
||
|
|
}
|
||
|
|
|
||
|
|
public DualECSP800DRBG(Digest digest, int i, EntropySource entropySource, byte[] bArr, byte[] bArr2) {
|
||
|
|
this(nistPoints, digest, i, entropySource, bArr, bArr2);
|
||
|
|
}
|
||
|
|
|
||
|
|
static {
|
||
|
|
BigInteger bigInteger = new BigInteger("6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296", 16);
|
||
|
|
p256_Px = bigInteger;
|
||
|
|
BigInteger bigInteger2 = new BigInteger("4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5", 16);
|
||
|
|
p256_Py = bigInteger2;
|
||
|
|
BigInteger bigInteger3 = new BigInteger("c97445f45cdef9f0d3e05e1e585fc297235b82b5be8ff3efca67c59852018192", 16);
|
||
|
|
p256_Qx = bigInteger3;
|
||
|
|
BigInteger bigInteger4 = new BigInteger("b28ef557ba31dfcbdd21ac46e2a91e3c304f44cb87058ada2cb815151e610046", 16);
|
||
|
|
p256_Qy = bigInteger4;
|
||
|
|
BigInteger bigInteger5 = new BigInteger("aa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7", 16);
|
||
|
|
p384_Px = bigInteger5;
|
||
|
|
BigInteger bigInteger6 = new BigInteger("3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f", 16);
|
||
|
|
p384_Py = bigInteger6;
|
||
|
|
BigInteger bigInteger7 = new BigInteger("8e722de3125bddb05580164bfe20b8b432216a62926c57502ceede31c47816edd1e89769124179d0b695106428815065", 16);
|
||
|
|
p384_Qx = bigInteger7;
|
||
|
|
BigInteger bigInteger8 = new BigInteger("023b1660dd701d0839fd45eec36f9ee7b32e13b315dc02610aa1b636e346df671f790f84c5e09b05674dbb7e45c803dd", 16);
|
||
|
|
p384_Qy = bigInteger8;
|
||
|
|
BigInteger bigInteger9 = new BigInteger("c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66", 16);
|
||
|
|
p521_Px = bigInteger9;
|
||
|
|
BigInteger bigInteger10 = new BigInteger("11839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650", 16);
|
||
|
|
p521_Py = bigInteger10;
|
||
|
|
BigInteger bigInteger11 = new BigInteger("1b9fa3e518d683c6b65763694ac8efbaec6fab44f2276171a42726507dd08add4c3b3f4c1ebc5b1222ddba077f722943b24c3edfa0f85fe24d0c8c01591f0be6f63", 16);
|
||
|
|
p521_Qx = bigInteger11;
|
||
|
|
BigInteger bigInteger12 = new BigInteger("1f3bdba585295d9a1110d1df1f9430ef8442c5018976ff3437ef91b81dc0b8132c8d5c39c32d0e004a3092b7d327c0e7a4d26d2c7b69b58f9066652911e457779de", 16);
|
||
|
|
p521_Qy = bigInteger12;
|
||
|
|
nistPoints = r2;
|
||
|
|
ECCurve.Fp fp = (ECCurve.Fp) NISTNamedCurves.getByName("P-256").getCurve();
|
||
|
|
ECCurve.Fp fp2 = (ECCurve.Fp) NISTNamedCurves.getByName("P-384").getCurve();
|
||
|
|
ECCurve.Fp fp3 = (ECCurve.Fp) NISTNamedCurves.getByName("P-521").getCurve();
|
||
|
|
DualECPoints[] dualECPointsArr = {new DualECPoints(128, fp.createPoint(bigInteger, bigInteger2), fp.createPoint(bigInteger3, bigInteger4), 1), new DualECPoints(192, fp2.createPoint(bigInteger5, bigInteger6), fp2.createPoint(bigInteger7, bigInteger8), 1), new DualECPoints(256, fp3.createPoint(bigInteger9, bigInteger10), fp3.createPoint(bigInteger11, bigInteger12), 1)};
|
||
|
|
}
|
||
|
|
}
|