1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
|
/*
20180104
Jan Mojzis
Public domain.
*/
#include "crypto_stream_chacha20.h"
static unsigned long unpack32(const unsigned char *x) {
return
(unsigned long) (x[0]) \
| (((unsigned long) (x[1])) << 8) \
| (((unsigned long) (x[2])) << 16) \
| (((unsigned long) (x[3])) << 24);
}
static void pack32(unsigned char *x, unsigned long u) {
x[0] = u; u >>= 8;
x[1] = u; u >>= 8;
x[2] = u; u >>= 8;
x[3] = u;
}
#define ROTATE32(x, c) ((x) << (c)) | (((x) & 0xffffffff) >> (32 - (c)))
#define QUARTERROUND(a, b, c, d) \
a += b; d = ROTATE32(d ^ a, 16); \
c += d; b = ROTATE32(b ^ c, 12); \
a += b; d = ROTATE32(d ^ a, 8); \
c += d; b = ROTATE32(b ^ c, 7);
#define TWOROUNDS \
QUARTERROUND( x0, x4, x8, x12) \
QUARTERROUND( x1, x5, x9, x13) \
QUARTERROUND( x2, x6, x10, x14) \
QUARTERROUND( x3, x7, x11, x15) \
QUARTERROUND( x0, x5, x10, x15) \
QUARTERROUND( x1, x6, x11, x12) \
QUARTERROUND( x2, x7, x8, x13) \
QUARTERROUND( x3, x4, x9, x14)
#define XORBLOCK(o, i) \
x0 = s0; \
x1 = s1; \
x2 = s2; \
x3 = s3; \
x4 = k0; \
x5 = k1; \
x6 = k2; \
x7 = k3; \
x8 = k4; \
x9 = k5; \
x10 = k6; \
x11 = k7; \
x12 = n0; \
x13 = n1; \
x14 = n2; \
x15 = n3; \
\
TWOROUNDS /* round 1, 2 */ \
TWOROUNDS /* round 3, 4 */ \
TWOROUNDS /* round 5, 6 */ \
TWOROUNDS /* round 7, 8 */ \
TWOROUNDS /* round 9, 10 */ \
TWOROUNDS /* round 11, 12 */ \
TWOROUNDS /* round 13, 14 */ \
TWOROUNDS /* round 15, 16 */ \
TWOROUNDS /* round 17, 18 */ \
TWOROUNDS /* round 19, 20 */ \
\
pack32(o , (x0 + s0) ^ unpack32(i )); \
pack32(o + 4, (x1 + s1) ^ unpack32(i + 4)); \
pack32(o + 8, (x2 + s2) ^ unpack32(i + 8)); \
pack32(o + 12, (x3 + s3) ^ unpack32(i + 12)); \
pack32(o + 16, (x4 + k0) ^ unpack32(i + 16)); \
pack32(o + 20, (x5 + k1) ^ unpack32(i + 20)); \
pack32(o + 24, (x6 + k2) ^ unpack32(i + 24)); \
pack32(o + 28, (x7 + k3) ^ unpack32(i + 28)); \
pack32(o + 32, (x8 + k4) ^ unpack32(i + 32)); \
pack32(o + 36, (x9 + k5) ^ unpack32(i + 36)); \
pack32(o + 40, (x10 + k6) ^ unpack32(i + 40)); \
pack32(o + 44, (x11 + k7) ^ unpack32(i + 44)); \
pack32(o + 48, (x12 + n0) ^ unpack32(i + 48)); \
pack32(o + 52, (x13 + n1) ^ unpack32(i + 52)); \
pack32(o + 56, (x14 + n2) ^ unpack32(i + 56)); \
pack32(o + 60, (x15 + n3) ^ unpack32(i + 60));
#define _CRYPTO_STREAM_XOR(inttype, fcename) \
static int fcename( unsigned char *c, \
const unsigned char *m, \
unsigned long long l, \
const unsigned char *n, \
const unsigned char *k) { \
\
inttype x0, x1, x2, x3, x4, x5, x6, x7; \
inttype x8, x9, x10, x11, x12, x13, x14, x15; \
inttype k0 = unpack32(k ); \
inttype k1 = unpack32(k + 4); \
inttype k2 = unpack32(k + 8); \
inttype k3 = unpack32(k + 12); \
inttype k4 = unpack32(k + 16); \
inttype k5 = unpack32(k + 20); \
inttype k6 = unpack32(k + 24); \
inttype k7 = unpack32(k + 28); \
inttype n0 = 0; \
inttype n1 = 0; \
inttype n2 = unpack32(n ); \
inttype n3 = unpack32(n + 4); \
inttype s0 = 0x61707865; \
inttype s1 = 0x3320646E; \
inttype s2 = 0x79622D32; \
inttype s3 = 0x6B206574; \
unsigned long long u = 0; \
\
if (!l) return 0; \
\
while (l >= 64) { \
XORBLOCK(c, m); \
\
++u; \
if (!u) return -1; \
n0 = (inttype)(u & 0xffffffff); \
n1 = (inttype)(u >> 32); \
\
l -= 64; \
c += 64; \
m += 64; \
} \
if (l) { \
unsigned char b[64] = {0}; \
long long j; \
\
for (j = 0; j < l; ++j) b[j] = m[j]; \
XORBLOCK(b, b); \
for (j = 0; j < l; ++j) c[j] = b[j]; \
} \
return 0; \
}
_CRYPTO_STREAM_XOR(unsigned int, int_crypto_stream_xor)
_CRYPTO_STREAM_XOR(unsigned long, long_crypto_stream_xor)
int crypto_stream_chacha20_tinynacl_xor(unsigned char *c, const unsigned char *m, unsigned long long l, const unsigned char *n, const unsigned char *k) {
if (sizeof(int) == 4) return int_crypto_stream_xor(c, m, l, n, k);
return long_crypto_stream_xor(c, m, l, n, k);
}
int crypto_stream_chacha20_tinynacl(unsigned char *c, unsigned long long l, const unsigned char *n, const unsigned char *k) {
long long j;
unsigned char ncopy[8], kcopy[32];
for (j = 0; j < 32; ++j) kcopy[j] = k[j];
for (j = 0; j < 8; ++j) ncopy[j] = n[j];
for (j = 0; j < l; ++j) c[j] = 0;
return crypto_stream_chacha20_tinynacl_xor(c, c, l, ncopy, kcopy);
}
|
