446 lines
22 KiB
Java
446 lines
22 KiB
Java
package org.bouncycastle.crypto.engines;
|
|
|
|
import com.google.common.base.Ascii;
|
|
import com.google.common.primitives.SignedBytes;
|
|
import com.google.common.primitives.UnsignedBytes;
|
|
import net.sf.scuba.smartcards.ISO7816;
|
|
import net.sf.scuba.smartcards.ISOFileInfo;
|
|
import org.bouncycastle.crypto.BlockCipher;
|
|
import org.bouncycastle.crypto.CipherParameters;
|
|
import org.bouncycastle.crypto.DataLengthException;
|
|
import org.bouncycastle.crypto.OutputLengthException;
|
|
import org.bouncycastle.crypto.params.KeyParameter;
|
|
import org.bouncycastle.crypto.signers.PSSSigner;
|
|
import org.bouncycastle.crypto.tls.CipherSuite;
|
|
import org.jmrtd.lds.CVCAFile;
|
|
|
|
/* loaded from: classes6.dex */
|
|
public final class TwofishEngine implements BlockCipher {
|
|
private static final int BLOCK_SIZE = 16;
|
|
private static final int GF256_FDBK = 361;
|
|
private static final int GF256_FDBK_2 = 180;
|
|
private static final int GF256_FDBK_4 = 90;
|
|
private static final int INPUT_WHITEN = 0;
|
|
private static final int MAX_KEY_BITS = 256;
|
|
private static final int MAX_ROUNDS = 16;
|
|
private static final int OUTPUT_WHITEN = 4;
|
|
private static final byte[][] P = {new byte[]{-87, 103, ISO7816.INS_READ_RECORD2, -24, 4, -3, -93, 118, -102, -110, Byte.MIN_VALUE, 120, ISO7816.INS_DELETE_FILE, -35, -47, 56, 13, -58, 53, -104, Ascii.CAN, -9, -20, 108, 67, 117, 55, 38, -6, 19, -108, 72, -14, ISO7816.INS_WRITE_BINARY, ISOFileInfo.SECURITY_ATTR_EXP, ISO7816.INS_DECREASE, -124, 84, -33, 35, Ascii.EM, 91, 61, 89, -13, -82, -94, -126, 99, 1, ISOFileInfo.FILE_IDENTIFIER, 46, -39, 81, -101, 124, -90, -21, ISOFileInfo.A5, -66, Ascii.SYN, 12, -29, 97, ISO7816.INS_GET_RESPONSE, ISOFileInfo.SECURITY_ATTR_COMPACT, 58, -11, 115, ISO7816.INS_UNBLOCK_CHV, 37, 11, -69, 78, -119, 107, 83, 106, ISO7816.INS_READ_BINARY_STAMPED, -15, -31, -26, -67, 69, ISO7816.INS_APPEND_RECORD, -12, ISO7816.INS_READ_RECORD_STAMPED, 102, -52, -107, 3, 86, -44, 28, 30, -41, -5, -61, ISOFileInfo.CHANNEL_SECURITY, -75, -23, -49, -65, -70, -22, 119, 57, -81, 51, -55, ISOFileInfo.FCP_BYTE, 113, ISOFileInfo.DATA_BYTES2, 121, 9, -83, ISO7816.INS_CHANGE_CHV, -51, -7, ISO7816.INS_LOAD_KEY_FILE, -27, -59, -71, 77, ISO7816.INS_REHABILITATE_CHV, 8, -122, -25, ISOFileInfo.A1, 29, -86, -19, 6, ISO7816.INS_MANAGE_CHANNEL, -78, ISO7816.INS_WRITE_RECORD, 65, 123, ISOFileInfo.A0, 17, 49, ISO7816.INS_ENVELOPE, 39, -112, 32, -10, 96, -1, -106, 92, ISO7816.INS_READ_BINARY2, ISOFileInfo.AB, -98, -100, 82, Ascii.ESC, 95, -109, 10, -17, -111, ISOFileInfo.PROP_INFO, 73, -18, 45, 79, -113, 59, 71, ISOFileInfo.FCI_EXT, 109, 70, ISO7816.INS_UPDATE_BINARY, 62, 105, ISOFileInfo.FMD_BYTE, ISO7816.INS_PSO, -50, -53, 47, -4, -105, 5, 122, -84, Ascii.DEL, -43, Ascii.SUB, 75, 14, -89, 90, 40, Ascii.DC4, 63, 41, -120, 60, 76, 2, -72, ISO7816.INS_PUT_DATA, ISO7816.INS_READ_BINARY, Ascii.ETB, 85, Ascii.US, ISOFileInfo.LCS_BYTE, 125, 87, -57, ISOFileInfo.ENV_TEMP_EF, 116, -73, -60, -97, 114, 126, Ascii.NAK, ISO7816.INS_MSE, Ascii.DC2, 88, 7, -103, ISO7816.INS_DECREASE_STAMPED, 110, 80, -34, 104, 101, PSSSigner.TRAILER_IMPLICIT, -37, -8, -56, -88, 43, SignedBytes.MAX_POWER_OF_TWO, ISO7816.INS_UPDATE_RECORD, -2, ISO7816.INS_INCREASE, -92, ISO7816.INS_GET_DATA, 16, 33, -16, -45, 93, 15, 0, ISOFileInfo.FCI_BYTE, -99, 54, CVCAFile.CAR_TAG, 74, 94, -63, ISO7816.INS_CREATE_FILE}, new byte[]{117, -13, -58, -12, -37, 123, -5, -56, 74, -45, -26, 107, 69, 125, -24, 75, ISO7816.INS_UPDATE_BINARY, ISO7816.INS_INCREASE, ISO7816.INS_LOAD_KEY_FILE, -3, 55, 113, -15, -31, ISO7816.INS_DECREASE, 15, -8, Ascii.ESC, ISOFileInfo.FCI_EXT, -6, 6, 63, 94, -70, -82, 91, ISOFileInfo.LCS_BYTE, 0, PSSSigner.TRAILER_IMPLICIT, -99, 109, -63, ISO7816.INS_READ_BINARY2, 14, Byte.MIN_VALUE, 93, ISO7816.INS_WRITE_RECORD, -43, ISOFileInfo.A0, -124, 7, Ascii.DC4, -75, -112, ISO7816.INS_UNBLOCK_CHV, -93, -78, 115, 76, 84, -110, 116, 54, 81, 56, ISO7816.INS_READ_BINARY, -67, 90, -4, 96, ISOFileInfo.FCP_BYTE, -106, 108, CVCAFile.CAR_TAG, -9, 16, 124, 40, 39, ISOFileInfo.SECURITY_ATTR_COMPACT, 19, -107, -100, -57, ISO7816.INS_CHANGE_CHV, 70, 59, ISO7816.INS_MANAGE_CHANNEL, ISO7816.INS_GET_DATA, -29, ISOFileInfo.PROP_INFO, -53, 17, ISO7816.INS_WRITE_BINARY, -109, -72, -90, ISOFileInfo.FILE_IDENTIFIER, 32, -1, -97, 119, -61, -52, 3, ISOFileInfo.FCI_BYTE, 8, -65, SignedBytes.MAX_POWER_OF_TWO, -25, 43, ISO7816.INS_APPEND_RECORD, 121, 12, -86, -126, 65, 58, -22, -71, ISO7816.INS_DELETE_FILE, -102, -92, -105, 126, ISO7816.INS_PUT_DATA, 122, Ascii.ETB, 102, -108, ISOFileInfo.A1, 29, 61, -16, -34, ISO7816.INS_READ_RECORD2, 11, 114, -89, 28, -17, -47, 83, 62, -113, 51, 38, 95, -20, 118, ISO7816.INS_PSO, 73, ISOFileInfo.DATA_BYTES2, -120, -18, 33, -60, Ascii.SUB, -21, -39, -59, 57, -103, -51, -83, 49, ISOFileInfo.SECURITY_ATTR_EXP, 1, Ascii.CAN, 35, -35, Ascii.US, 78, 45, -7, 72, 79, -14, 101, ISOFileInfo.CHANNEL_SECURITY, 120, 92, 88, Ascii.EM, ISOFileInfo.ENV_TEMP_EF, -27, -104, 87, 103, Ascii.DEL, 5, ISOFileInfo.FMD_BYTE, -81, 99, ISO7816.INS_READ_RECORD_STAMPED, -2, -11, -73, 60, ISOFileInfo.A5, -50, -23, 104, ISO7816.INS_REHABILITATE_CHV, ISO7816.INS_CREATE_FILE, 77, 67, 105, 41, 46, -84, Ascii.NAK, 89, -88, 10, -98, 110, 71, -33, ISO7816.INS_DECREASE_STAMPED, 53, 106, -49, ISO7816.INS_UPDATE_RECORD, ISO7816.INS_MSE, -55, ISO7816.INS_GET_RESPONSE, -101, -119, -44, -19, ISOFileInfo.AB, Ascii.DC2, -94, 13, 82, -69, 2, 47, -87, -41, 97, 30, ISO7816.INS_READ_BINARY_STAMPED, 80, 4, -10, ISO7816.INS_ENVELOPE, Ascii.SYN, 37, -122, 86, 85, 9, -66, -111}};
|
|
private static final int P_00 = 1;
|
|
private static final int P_01 = 0;
|
|
private static final int P_02 = 0;
|
|
private static final int P_03 = 1;
|
|
private static final int P_04 = 1;
|
|
private static final int P_10 = 0;
|
|
private static final int P_11 = 0;
|
|
private static final int P_12 = 1;
|
|
private static final int P_13 = 1;
|
|
private static final int P_14 = 0;
|
|
private static final int P_20 = 1;
|
|
private static final int P_21 = 1;
|
|
private static final int P_22 = 0;
|
|
private static final int P_23 = 0;
|
|
private static final int P_24 = 0;
|
|
private static final int P_30 = 0;
|
|
private static final int P_31 = 1;
|
|
private static final int P_32 = 1;
|
|
private static final int P_33 = 0;
|
|
private static final int P_34 = 1;
|
|
private static final int ROUNDS = 16;
|
|
private static final int ROUND_SUBKEYS = 8;
|
|
private static final int RS_GF_FDBK = 333;
|
|
private static final int SK_BUMP = 16843009;
|
|
private static final int SK_ROTL = 9;
|
|
private static final int SK_STEP = 33686018;
|
|
private static final int TOTAL_SUBKEYS = 40;
|
|
private int[] gSBox;
|
|
private int[] gSubKeys;
|
|
private boolean encrypting = false;
|
|
private int[] gMDS0 = new int[256];
|
|
private int[] gMDS1 = new int[256];
|
|
private int[] gMDS2 = new int[256];
|
|
private int[] gMDS3 = new int[256];
|
|
private int k64Cnt = 0;
|
|
private byte[] workingKey = null;
|
|
|
|
private int LFSR1(int i) {
|
|
return (i >> 1) ^ ((i & 1) != 0 ? 180 : 0);
|
|
}
|
|
|
|
private int LFSR2(int i) {
|
|
return ((i >> 2) ^ ((i & 2) != 0 ? 180 : 0)) ^ ((i & 1) != 0 ? 90 : 0);
|
|
}
|
|
|
|
private int RS_rem(int i) {
|
|
int i2 = i >>> 24;
|
|
int i3 = i2 & 255;
|
|
int i4 = (((i2 & 128) != 0 ? RS_GF_FDBK : 0) ^ (i3 << 1)) & 255;
|
|
int i5 = ((i3 >>> 1) ^ ((i2 & 1) != 0 ? CipherSuite.TLS_DH_anon_WITH_AES_128_GCM_SHA256 : 0)) ^ i4;
|
|
return ((((i << 8) ^ (i5 << 24)) ^ (i4 << 16)) ^ (i5 << 8)) ^ i3;
|
|
}
|
|
|
|
private int b0(int i) {
|
|
return i & 255;
|
|
}
|
|
|
|
private int b1(int i) {
|
|
return (i >>> 8) & 255;
|
|
}
|
|
|
|
private int b2(int i) {
|
|
return (i >>> 16) & 255;
|
|
}
|
|
|
|
private int b3(int i) {
|
|
return i >>> 24;
|
|
}
|
|
|
|
@Override // org.bouncycastle.crypto.BlockCipher
|
|
public final int getBlockSize() {
|
|
return 16;
|
|
}
|
|
|
|
@Override // org.bouncycastle.crypto.BlockCipher
|
|
public final void reset() {
|
|
byte[] bArr = this.workingKey;
|
|
if (bArr != null) {
|
|
setKey(bArr);
|
|
}
|
|
}
|
|
|
|
@Override // org.bouncycastle.crypto.BlockCipher
|
|
public final int processBlock(byte[] bArr, int i, byte[] bArr2, int i2) {
|
|
if (this.workingKey == null) {
|
|
throw new IllegalStateException("Twofish not initialised");
|
|
}
|
|
if (i + 16 > bArr.length) {
|
|
throw new DataLengthException("input buffer too short");
|
|
}
|
|
if (i2 + 16 > bArr2.length) {
|
|
throw new OutputLengthException("output buffer too short");
|
|
}
|
|
if (this.encrypting) {
|
|
encryptBlock(bArr, i, bArr2, i2);
|
|
return 16;
|
|
}
|
|
decryptBlock(bArr, i, bArr2, i2);
|
|
return 16;
|
|
}
|
|
|
|
@Override // org.bouncycastle.crypto.BlockCipher
|
|
public final void init(boolean z, CipherParameters cipherParameters) {
|
|
if (!(cipherParameters instanceof KeyParameter)) {
|
|
StringBuilder sb = new StringBuilder("invalid parameter passed to Twofish init - ");
|
|
sb.append(cipherParameters.getClass().getName());
|
|
throw new IllegalArgumentException(sb.toString());
|
|
}
|
|
this.encrypting = z;
|
|
byte[] key = ((KeyParameter) cipherParameters).getKey();
|
|
this.workingKey = key;
|
|
this.k64Cnt = key.length / 8;
|
|
setKey(key);
|
|
}
|
|
|
|
@Override // org.bouncycastle.crypto.BlockCipher
|
|
public final String getAlgorithmName() {
|
|
return "Twofish";
|
|
}
|
|
|
|
private void setKey(byte[] bArr) {
|
|
int b0;
|
|
int b1;
|
|
int b2;
|
|
int b3;
|
|
int i;
|
|
int i2;
|
|
int i3;
|
|
int i4;
|
|
int[] iArr = new int[4];
|
|
int[] iArr2 = new int[4];
|
|
int[] iArr3 = new int[4];
|
|
this.gSubKeys = new int[40];
|
|
int i5 = this.k64Cnt;
|
|
if (i5 <= 0) {
|
|
throw new IllegalArgumentException("Key size less than 64 bits");
|
|
}
|
|
if (i5 > 4) {
|
|
throw new IllegalArgumentException("Key size larger than 256 bits");
|
|
}
|
|
for (int i6 = 0; i6 < this.k64Cnt; i6++) {
|
|
int i7 = i6 << 3;
|
|
iArr[i6] = BytesTo32Bits(bArr, i7);
|
|
int BytesTo32Bits = BytesTo32Bits(bArr, i7 + 4);
|
|
iArr2[i6] = BytesTo32Bits;
|
|
iArr3[(this.k64Cnt - 1) - i6] = RS_MDS_Encode(iArr[i6], BytesTo32Bits);
|
|
}
|
|
for (int i8 = 0; i8 < 20; i8++) {
|
|
int i9 = SK_STEP * i8;
|
|
int F32 = F32(i9, iArr);
|
|
int F322 = F32(i9 + 16843009, iArr2);
|
|
int i10 = (F322 << 8) | (F322 >>> 24);
|
|
int i11 = F32 + i10;
|
|
int[] iArr4 = this.gSubKeys;
|
|
int i12 = i8 << 1;
|
|
iArr4[i12] = i11;
|
|
int i13 = i11 + i10;
|
|
iArr4[i12 + 1] = (i13 << 9) | (i13 >>> 23);
|
|
}
|
|
int i14 = iArr3[0];
|
|
int i15 = iArr3[1];
|
|
int i16 = 2;
|
|
int i17 = iArr3[2];
|
|
int i18 = iArr3[3];
|
|
this.gSBox = new int[1024];
|
|
int i19 = 0;
|
|
while (i19 < 256) {
|
|
int i20 = this.k64Cnt & 3;
|
|
if (i20 != 0) {
|
|
if (i20 == 1) {
|
|
int[] iArr5 = this.gSBox;
|
|
int i21 = i19 << 1;
|
|
int[] iArr6 = this.gMDS0;
|
|
byte[][] bArr2 = P;
|
|
iArr5[i21] = iArr6[(bArr2[0][i19] & UnsignedBytes.MAX_VALUE) ^ b0(i14)];
|
|
this.gSBox[i21 + 1] = this.gMDS1[(bArr2[0][i19] & UnsignedBytes.MAX_VALUE) ^ b1(i14)];
|
|
this.gSBox[i21 + 512] = this.gMDS2[(bArr2[1][i19] & UnsignedBytes.MAX_VALUE) ^ b2(i14)];
|
|
this.gSBox[i21 + 513] = this.gMDS3[(bArr2[1][i19] & UnsignedBytes.MAX_VALUE) ^ b3(i14)];
|
|
} else if (i20 == i16) {
|
|
i4 = i19;
|
|
i3 = i4;
|
|
i2 = i3;
|
|
i = i2;
|
|
int[] iArr7 = this.gSBox;
|
|
int i22 = i19 << 1;
|
|
int[] iArr8 = this.gMDS0;
|
|
byte[][] bArr3 = P;
|
|
byte[] bArr4 = bArr3[0];
|
|
iArr7[i22] = iArr8[(bArr4[(bArr4[i3] & UnsignedBytes.MAX_VALUE) ^ b0(i15)] & UnsignedBytes.MAX_VALUE) ^ b0(i14)];
|
|
this.gSBox[i22 + 1] = this.gMDS1[(bArr3[0][(bArr3[1][i2] & UnsignedBytes.MAX_VALUE) ^ b1(i15)] & UnsignedBytes.MAX_VALUE) ^ b1(i14)];
|
|
this.gSBox[i22 + 512] = this.gMDS2[(bArr3[1][(bArr3[0][i] & UnsignedBytes.MAX_VALUE) ^ b2(i15)] & UnsignedBytes.MAX_VALUE) ^ b2(i14)];
|
|
int[] iArr9 = this.gSBox;
|
|
int[] iArr10 = this.gMDS3;
|
|
byte[] bArr5 = bArr3[1];
|
|
iArr9[i22 + 513] = iArr10[(bArr5[(bArr5[i4] & UnsignedBytes.MAX_VALUE) ^ b3(i15)] & UnsignedBytes.MAX_VALUE) ^ b3(i14)];
|
|
} else if (i20 == 3) {
|
|
b3 = i19;
|
|
b0 = b3;
|
|
b1 = b0;
|
|
b2 = b1;
|
|
}
|
|
i19++;
|
|
i16 = 2;
|
|
} else {
|
|
byte[][] bArr6 = P;
|
|
b0 = (bArr6[1][i19] & UnsignedBytes.MAX_VALUE) ^ b0(i18);
|
|
b1 = (bArr6[0][i19] & UnsignedBytes.MAX_VALUE) ^ b1(i18);
|
|
b2 = (bArr6[0][i19] & UnsignedBytes.MAX_VALUE) ^ b2(i18);
|
|
b3 = (bArr6[1][i19] & UnsignedBytes.MAX_VALUE) ^ b3(i18);
|
|
}
|
|
byte[][] bArr7 = P;
|
|
i3 = (bArr7[1][b0] & UnsignedBytes.MAX_VALUE) ^ b0(i17);
|
|
i2 = (bArr7[1][b1] & UnsignedBytes.MAX_VALUE) ^ b1(i17);
|
|
i = (bArr7[0][b2] & UnsignedBytes.MAX_VALUE) ^ b2(i17);
|
|
i4 = (bArr7[0][b3] & UnsignedBytes.MAX_VALUE) ^ b3(i17);
|
|
int[] iArr72 = this.gSBox;
|
|
int i222 = i19 << 1;
|
|
int[] iArr82 = this.gMDS0;
|
|
byte[][] bArr32 = P;
|
|
byte[] bArr42 = bArr32[0];
|
|
iArr72[i222] = iArr82[(bArr42[(bArr42[i3] & UnsignedBytes.MAX_VALUE) ^ b0(i15)] & UnsignedBytes.MAX_VALUE) ^ b0(i14)];
|
|
this.gSBox[i222 + 1] = this.gMDS1[(bArr32[0][(bArr32[1][i2] & UnsignedBytes.MAX_VALUE) ^ b1(i15)] & UnsignedBytes.MAX_VALUE) ^ b1(i14)];
|
|
this.gSBox[i222 + 512] = this.gMDS2[(bArr32[1][(bArr32[0][i] & UnsignedBytes.MAX_VALUE) ^ b2(i15)] & UnsignedBytes.MAX_VALUE) ^ b2(i14)];
|
|
int[] iArr92 = this.gSBox;
|
|
int[] iArr102 = this.gMDS3;
|
|
byte[] bArr52 = bArr32[1];
|
|
iArr92[i222 + 513] = iArr102[(bArr52[(bArr52[i4] & UnsignedBytes.MAX_VALUE) ^ b3(i15)] & UnsignedBytes.MAX_VALUE) ^ b3(i14)];
|
|
i19++;
|
|
i16 = 2;
|
|
}
|
|
}
|
|
|
|
private void encryptBlock(byte[] bArr, int i, byte[] bArr2, int i2) {
|
|
int i3 = 0;
|
|
int BytesTo32Bits = BytesTo32Bits(bArr, i) ^ this.gSubKeys[0];
|
|
int BytesTo32Bits2 = BytesTo32Bits(bArr, i + 4) ^ this.gSubKeys[1];
|
|
int BytesTo32Bits3 = BytesTo32Bits(bArr, i + 8) ^ this.gSubKeys[2];
|
|
int BytesTo32Bits4 = BytesTo32Bits(bArr, i + 12) ^ this.gSubKeys[3];
|
|
int i4 = 8;
|
|
while (i3 < 16) {
|
|
int Fe32_0 = Fe32_0(BytesTo32Bits);
|
|
int Fe32_3 = Fe32_3(BytesTo32Bits2);
|
|
int[] iArr = this.gSubKeys;
|
|
int i5 = BytesTo32Bits3 ^ ((Fe32_0 + Fe32_3) + iArr[i4]);
|
|
BytesTo32Bits3 = (i5 >>> 1) | (i5 << 31);
|
|
BytesTo32Bits4 = ((BytesTo32Bits4 << 1) | (BytesTo32Bits4 >>> 31)) ^ ((Fe32_0 + (Fe32_3 << 1)) + iArr[i4 + 1]);
|
|
int Fe32_02 = Fe32_0(BytesTo32Bits3);
|
|
int Fe32_32 = Fe32_3(BytesTo32Bits4);
|
|
int[] iArr2 = this.gSubKeys;
|
|
int i6 = BytesTo32Bits ^ ((Fe32_02 + Fe32_32) + iArr2[i4 + 2]);
|
|
BytesTo32Bits = (i6 >>> 1) | (i6 << 31);
|
|
BytesTo32Bits2 = ((BytesTo32Bits2 << 1) | (BytesTo32Bits2 >>> 31)) ^ ((Fe32_02 + (Fe32_32 << 1)) + iArr2[i4 + 3]);
|
|
i3 += 2;
|
|
i4 += 4;
|
|
}
|
|
Bits32ToBytes(this.gSubKeys[4] ^ BytesTo32Bits3, bArr2, i2);
|
|
Bits32ToBytes(BytesTo32Bits4 ^ this.gSubKeys[5], bArr2, i2 + 4);
|
|
Bits32ToBytes(this.gSubKeys[6] ^ BytesTo32Bits, bArr2, i2 + 8);
|
|
Bits32ToBytes(this.gSubKeys[7] ^ BytesTo32Bits2, bArr2, i2 + 12);
|
|
}
|
|
|
|
private void decryptBlock(byte[] bArr, int i, byte[] bArr2, int i2) {
|
|
int BytesTo32Bits = BytesTo32Bits(bArr, i) ^ this.gSubKeys[4];
|
|
int BytesTo32Bits2 = BytesTo32Bits(bArr, i + 4) ^ this.gSubKeys[5];
|
|
int BytesTo32Bits3 = BytesTo32Bits(bArr, i + 8) ^ this.gSubKeys[6];
|
|
int BytesTo32Bits4 = BytesTo32Bits(bArr, i + 12) ^ this.gSubKeys[7];
|
|
int i3 = 39;
|
|
int i4 = 0;
|
|
while (i4 < 16) {
|
|
int Fe32_0 = Fe32_0(BytesTo32Bits);
|
|
int Fe32_3 = Fe32_3(BytesTo32Bits2);
|
|
int[] iArr = this.gSubKeys;
|
|
int i5 = BytesTo32Bits4 ^ (((Fe32_3 << 1) + Fe32_0) + iArr[i3]);
|
|
BytesTo32Bits3 = ((BytesTo32Bits3 << 1) | (BytesTo32Bits3 >>> 31)) ^ ((Fe32_0 + Fe32_3) + iArr[i3 - 1]);
|
|
BytesTo32Bits4 = (i5 >>> 1) | (i5 << 31);
|
|
int Fe32_02 = Fe32_0(BytesTo32Bits3);
|
|
int Fe32_32 = Fe32_3(BytesTo32Bits4);
|
|
int[] iArr2 = this.gSubKeys;
|
|
int i6 = BytesTo32Bits2 ^ (((Fe32_32 << 1) + Fe32_02) + iArr2[i3 - 2]);
|
|
BytesTo32Bits = ((BytesTo32Bits >>> 31) | (BytesTo32Bits << 1)) ^ ((Fe32_02 + Fe32_32) + iArr2[i3 - 3]);
|
|
BytesTo32Bits2 = (i6 >>> 1) | (i6 << 31);
|
|
i4 += 2;
|
|
i3 -= 4;
|
|
}
|
|
Bits32ToBytes(BytesTo32Bits3 ^ this.gSubKeys[0], bArr2, i2);
|
|
Bits32ToBytes(BytesTo32Bits4 ^ this.gSubKeys[1], bArr2, i2 + 4);
|
|
Bits32ToBytes(this.gSubKeys[2] ^ BytesTo32Bits, bArr2, i2 + 8);
|
|
Bits32ToBytes(this.gSubKeys[3] ^ BytesTo32Bits2, bArr2, i2 + 12);
|
|
}
|
|
|
|
private int RS_MDS_Encode(int i, int i2) {
|
|
for (int i3 = 0; i3 < 4; i3++) {
|
|
i2 = RS_rem(i2);
|
|
}
|
|
int i4 = i ^ i2;
|
|
for (int i5 = 0; i5 < 4; i5++) {
|
|
i4 = RS_rem(i4);
|
|
}
|
|
return i4;
|
|
}
|
|
|
|
private int Mx_Y(int i) {
|
|
int LFSR1 = LFSR1(i);
|
|
return (i ^ LFSR1) ^ LFSR2(i);
|
|
}
|
|
|
|
private int Mx_X(int i) {
|
|
return i ^ LFSR2(i);
|
|
}
|
|
|
|
private int Fe32_3(int i) {
|
|
int[] iArr = this.gSBox;
|
|
int i2 = iArr[(i >>> 24) << 1];
|
|
int i3 = iArr[((i & 255) << 1) + 1];
|
|
return iArr[(((i >>> 16) & 255) << 1) + 513] ^ ((i2 ^ i3) ^ iArr[(((i >>> 8) & 255) << 1) + 512]);
|
|
}
|
|
|
|
private int Fe32_0(int i) {
|
|
int[] iArr = this.gSBox;
|
|
int i2 = iArr[(i & 255) << 1];
|
|
int i3 = iArr[(((i >>> 8) & 255) << 1) + 1];
|
|
return iArr[((i >>> 24) << 1) + 513] ^ ((i2 ^ i3) ^ iArr[(((i >>> 16) & 255) << 1) + 512]);
|
|
}
|
|
|
|
private int F32(int i, int[] iArr) {
|
|
int i2;
|
|
int i3;
|
|
int b0 = b0(i);
|
|
int b1 = b1(i);
|
|
int b2 = b2(i);
|
|
int b3 = b3(i);
|
|
int i4 = iArr[0];
|
|
int i5 = iArr[1];
|
|
int i6 = iArr[2];
|
|
int i7 = iArr[3];
|
|
int i8 = this.k64Cnt & 3;
|
|
if (i8 != 0) {
|
|
if (i8 == 1) {
|
|
int[] iArr2 = this.gMDS0;
|
|
byte[][] bArr = P;
|
|
i2 = (iArr2[(bArr[0][b0] & UnsignedBytes.MAX_VALUE) ^ b0(i4)] ^ this.gMDS1[(bArr[0][b1] & UnsignedBytes.MAX_VALUE) ^ b1(i4)]) ^ this.gMDS2[(bArr[1][b2] & UnsignedBytes.MAX_VALUE) ^ b2(i4)];
|
|
i3 = this.gMDS3[(bArr[1][b3] & UnsignedBytes.MAX_VALUE) ^ b3(i4)];
|
|
return i2 ^ i3;
|
|
}
|
|
if (i8 != 2) {
|
|
if (i8 != 3) {
|
|
return 0;
|
|
}
|
|
}
|
|
int[] iArr3 = this.gMDS0;
|
|
byte[][] bArr2 = P;
|
|
byte[] bArr3 = bArr2[0];
|
|
i2 = (iArr3[(bArr3[(bArr3[b0] & UnsignedBytes.MAX_VALUE) ^ b0(i5)] & UnsignedBytes.MAX_VALUE) ^ b0(i4)] ^ this.gMDS1[(bArr2[0][(bArr2[1][b1] & UnsignedBytes.MAX_VALUE) ^ b1(i5)] & UnsignedBytes.MAX_VALUE) ^ b1(i4)]) ^ this.gMDS2[(bArr2[1][(bArr2[0][b2] & UnsignedBytes.MAX_VALUE) ^ b2(i5)] & UnsignedBytes.MAX_VALUE) ^ b2(i4)];
|
|
int[] iArr4 = this.gMDS3;
|
|
byte[] bArr4 = bArr2[1];
|
|
i3 = iArr4[(bArr4[(bArr4[b3] & UnsignedBytes.MAX_VALUE) ^ b3(i5)] & UnsignedBytes.MAX_VALUE) ^ b3(i4)];
|
|
return i2 ^ i3;
|
|
}
|
|
byte[][] bArr5 = P;
|
|
b0 = (bArr5[1][b0] & UnsignedBytes.MAX_VALUE) ^ b0(i7);
|
|
b1 = (bArr5[0][b1] & UnsignedBytes.MAX_VALUE) ^ b1(i7);
|
|
b2 = (bArr5[0][b2] & UnsignedBytes.MAX_VALUE) ^ b2(i7);
|
|
b3 = (bArr5[1][b3] & UnsignedBytes.MAX_VALUE) ^ b3(i7);
|
|
byte[][] bArr6 = P;
|
|
b0 = (bArr6[1][b0] & UnsignedBytes.MAX_VALUE) ^ b0(i6);
|
|
b1 = (bArr6[1][b1] & UnsignedBytes.MAX_VALUE) ^ b1(i6);
|
|
b2 = (bArr6[0][b2] & UnsignedBytes.MAX_VALUE) ^ b2(i6);
|
|
b3 = (bArr6[0][b3] & UnsignedBytes.MAX_VALUE) ^ b3(i6);
|
|
int[] iArr32 = this.gMDS0;
|
|
byte[][] bArr22 = P;
|
|
byte[] bArr32 = bArr22[0];
|
|
i2 = (iArr32[(bArr32[(bArr32[b0] & UnsignedBytes.MAX_VALUE) ^ b0(i5)] & UnsignedBytes.MAX_VALUE) ^ b0(i4)] ^ this.gMDS1[(bArr22[0][(bArr22[1][b1] & UnsignedBytes.MAX_VALUE) ^ b1(i5)] & UnsignedBytes.MAX_VALUE) ^ b1(i4)]) ^ this.gMDS2[(bArr22[1][(bArr22[0][b2] & UnsignedBytes.MAX_VALUE) ^ b2(i5)] & UnsignedBytes.MAX_VALUE) ^ b2(i4)];
|
|
int[] iArr42 = this.gMDS3;
|
|
byte[] bArr42 = bArr22[1];
|
|
i3 = iArr42[(bArr42[(bArr42[b3] & UnsignedBytes.MAX_VALUE) ^ b3(i5)] & UnsignedBytes.MAX_VALUE) ^ b3(i4)];
|
|
return i2 ^ i3;
|
|
}
|
|
|
|
private int BytesTo32Bits(byte[] bArr, int i) {
|
|
return ((bArr[i + 3] & UnsignedBytes.MAX_VALUE) << 24) | (bArr[i] & UnsignedBytes.MAX_VALUE) | ((bArr[i + 1] & UnsignedBytes.MAX_VALUE) << 8) | ((bArr[i + 2] & UnsignedBytes.MAX_VALUE) << 16);
|
|
}
|
|
|
|
private void Bits32ToBytes(int i, byte[] bArr, int i2) {
|
|
bArr[i2] = (byte) i;
|
|
bArr[i2 + 1] = (byte) (i >> 8);
|
|
bArr[i2 + 2] = (byte) (i >> 16);
|
|
bArr[i2 + 3] = (byte) (i >> 24);
|
|
}
|
|
|
|
public TwofishEngine() {
|
|
int[] iArr = new int[2];
|
|
int[] iArr2 = new int[2];
|
|
int[] iArr3 = new int[2];
|
|
for (int i = 0; i < 256; i++) {
|
|
byte[][] bArr = P;
|
|
int i2 = bArr[0][i] & UnsignedBytes.MAX_VALUE;
|
|
iArr[0] = i2;
|
|
iArr2[0] = Mx_X(i2) & 255;
|
|
iArr3[0] = Mx_Y(i2) & 255;
|
|
int i3 = bArr[1][i] & UnsignedBytes.MAX_VALUE;
|
|
iArr[1] = i3;
|
|
iArr2[1] = Mx_X(i3) & 255;
|
|
int Mx_Y = Mx_Y(i3) & 255;
|
|
iArr3[1] = Mx_Y;
|
|
this.gMDS0[i] = (Mx_Y << 16) | iArr[1] | (iArr2[1] << 8) | (Mx_Y << 24);
|
|
int[] iArr4 = this.gMDS1;
|
|
int i4 = iArr3[0];
|
|
iArr4[i] = i4 | (i4 << 8) | (iArr2[0] << 16) | (iArr[0] << 24);
|
|
int[] iArr5 = this.gMDS2;
|
|
int i5 = iArr2[1];
|
|
int i6 = iArr3[1];
|
|
iArr5[i] = (iArr[1] << 16) | i5 | (i6 << 8) | (i6 << 24);
|
|
int[] iArr6 = this.gMDS3;
|
|
int i7 = iArr2[0];
|
|
iArr6[i] = i7 | (iArr[0] << 8) | (iArr3[0] << 16) | (i7 << 24);
|
|
}
|
|
}
|
|
}
|