|
|
|
|
@@ -12,114 +12,114 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
|
|
|
|
|
private static readonly byte[] Logtable =
|
|
|
|
|
{
|
|
|
|
|
0, 0, 25, 1, 50, 2, 26, 198,
|
|
|
|
|
75, 199, 27, 104, 51, 238, 223, 3,
|
|
|
|
|
100, 4, 224, 14, 52, 141, 129, 239,
|
|
|
|
|
76, 113, 8, 200, 248, 105, 28, 193,
|
|
|
|
|
125, 194, 29, 181, 249, 185, 39, 106,
|
|
|
|
|
77, 228, 166, 114, 154, 201, 9, 120,
|
|
|
|
|
101, 47, 138, 5, 33, 15, 225, 36,
|
|
|
|
|
18, 240, 130, 69, 53, 147, 218, 142,
|
|
|
|
|
150, 143, 219, 189, 54, 208, 206, 148,
|
|
|
|
|
19, 92, 210, 241, 64, 70, 131, 56,
|
|
|
|
|
102, 221, 253, 48, 191, 6, 139, 98,
|
|
|
|
|
179, 37, 226, 152, 34, 136, 145, 16,
|
|
|
|
|
126, 110, 72, 195, 163, 182, 30, 66,
|
|
|
|
|
58, 107, 40, 84, 250, 133, 61, 186,
|
|
|
|
|
43, 121, 10, 21, 155, 159, 94, 202,
|
|
|
|
|
78, 212, 172, 229, 243, 115, 167, 87,
|
|
|
|
|
175, 88, 168, 80, 244, 234, 214, 116,
|
|
|
|
|
79, 174, 233, 213, 231, 230, 173, 232,
|
|
|
|
|
44, 215, 117, 122, 235, 22, 11, 245,
|
|
|
|
|
89, 203, 95, 176, 156, 169, 81, 160,
|
|
|
|
|
127, 12, 246, 111, 23, 196, 73, 236,
|
|
|
|
|
216, 67, 31, 45, 164, 118, 123, 183,
|
|
|
|
|
204, 187, 62, 90, 251, 96, 177, 134,
|
|
|
|
|
59, 82, 161, 108, 170, 85, 41, 157,
|
|
|
|
|
151, 178, 135, 144, 97, 190, 220, 252,
|
|
|
|
|
188, 149, 207, 205, 55, 63, 91, 209,
|
|
|
|
|
83, 57, 132, 60, 65, 162, 109, 71,
|
|
|
|
|
20, 42, 158, 93, 86, 242, 211, 171,
|
|
|
|
|
68, 17, 146, 217, 35, 32, 46, 137,
|
|
|
|
|
180, 124, 184, 38, 119, 153, 227, 165,
|
|
|
|
|
103, 74, 237, 222, 197, 49, 254, 24,
|
|
|
|
|
13, 99, 140, 128, 192, 247, 112, 7
|
|
|
|
|
0, 0, 25, 1, 50, 2, 26, 198,
|
|
|
|
|
75, 199, 27, 104, 51, 238, 223, 3,
|
|
|
|
|
100, 4, 224, 14, 52, 141, 129, 239,
|
|
|
|
|
76, 113, 8, 200, 248, 105, 28, 193,
|
|
|
|
|
125, 194, 29, 181, 249, 185, 39, 106,
|
|
|
|
|
77, 228, 166, 114, 154, 201, 9, 120,
|
|
|
|
|
101, 47, 138, 5, 33, 15, 225, 36,
|
|
|
|
|
18, 240, 130, 69, 53, 147, 218, 142,
|
|
|
|
|
150, 143, 219, 189, 54, 208, 206, 148,
|
|
|
|
|
19, 92, 210, 241, 64, 70, 131, 56,
|
|
|
|
|
102, 221, 253, 48, 191, 6, 139, 98,
|
|
|
|
|
179, 37, 226, 152, 34, 136, 145, 16,
|
|
|
|
|
126, 110, 72, 195, 163, 182, 30, 66,
|
|
|
|
|
58, 107, 40, 84, 250, 133, 61, 186,
|
|
|
|
|
43, 121, 10, 21, 155, 159, 94, 202,
|
|
|
|
|
78, 212, 172, 229, 243, 115, 167, 87,
|
|
|
|
|
175, 88, 168, 80, 244, 234, 214, 116,
|
|
|
|
|
79, 174, 233, 213, 231, 230, 173, 232,
|
|
|
|
|
44, 215, 117, 122, 235, 22, 11, 245,
|
|
|
|
|
89, 203, 95, 176, 156, 169, 81, 160,
|
|
|
|
|
127, 12, 246, 111, 23, 196, 73, 236,
|
|
|
|
|
216, 67, 31, 45, 164, 118, 123, 183,
|
|
|
|
|
204, 187, 62, 90, 251, 96, 177, 134,
|
|
|
|
|
59, 82, 161, 108, 170, 85, 41, 157,
|
|
|
|
|
151, 178, 135, 144, 97, 190, 220, 252,
|
|
|
|
|
188, 149, 207, 205, 55, 63, 91, 209,
|
|
|
|
|
83, 57, 132, 60, 65, 162, 109, 71,
|
|
|
|
|
20, 42, 158, 93, 86, 242, 211, 171,
|
|
|
|
|
68, 17, 146, 217, 35, 32, 46, 137,
|
|
|
|
|
180, 124, 184, 38, 119, 153, 227, 165,
|
|
|
|
|
103, 74, 237, 222, 197, 49, 254, 24,
|
|
|
|
|
13, 99, 140, 128, 192, 247, 112, 7
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
private static readonly byte[] Alogtable =
|
|
|
|
|
{
|
|
|
|
|
0, 3, 5, 15, 17, 51, 85, 255, 26, 46, 114, 150, 161, 248, 19, 53,
|
|
|
|
|
95, 225, 56, 72, 216, 115, 149, 164, 247, 2, 6, 10, 30, 34, 102, 170,
|
|
|
|
|
229, 52, 92, 228, 55, 89, 235, 38, 106, 190, 217, 112, 144, 171, 230, 49,
|
|
|
|
|
83, 245, 4, 12, 20, 60, 68, 204, 79, 209, 104, 184, 211, 110, 178, 205,
|
|
|
|
|
76, 212, 103, 169, 224, 59, 77, 215, 98, 166, 241, 8, 24, 40, 120, 136,
|
|
|
|
|
131, 158, 185, 208, 107, 189, 220, 127, 129, 152, 179, 206, 73, 219, 118, 154,
|
|
|
|
|
181, 196, 87, 249, 16, 48, 80, 240, 11, 29, 39, 105, 187, 214, 97, 163,
|
|
|
|
|
254, 25, 43, 125, 135, 146, 173, 236, 47, 113, 147, 174, 233, 32, 96, 160,
|
|
|
|
|
251, 22, 58, 78, 210, 109, 183, 194, 93, 231, 50, 86, 250, 21, 63, 65,
|
|
|
|
|
195, 94, 226, 61, 71, 201, 64, 192, 91, 237, 44, 116, 156, 191, 218, 117,
|
|
|
|
|
159, 186, 213, 100, 172, 239, 42, 126, 130, 157, 188, 223, 122, 142, 137, 128,
|
|
|
|
|
155, 182, 193, 88, 232, 35, 101, 175, 234, 37, 111, 177, 200, 67, 197, 84,
|
|
|
|
|
252, 31, 33, 99, 165, 244, 7, 9, 27, 45, 119, 153, 176, 203, 70, 202,
|
|
|
|
|
69, 207, 74, 222, 121, 139, 134, 145, 168, 227, 62, 66, 198, 81, 243, 14,
|
|
|
|
|
18, 54, 90, 238, 41, 123, 141, 140, 143, 138, 133, 148, 167, 242, 13, 23,
|
|
|
|
|
57, 75, 221, 124, 132, 151, 162, 253, 28, 36, 108, 180, 199, 82, 246, 1,
|
|
|
|
|
3, 5, 15, 17, 51, 85, 255, 26, 46, 114, 150, 161, 248, 19, 53,
|
|
|
|
|
95, 225, 56, 72, 216, 115, 149, 164, 247, 2, 6, 10, 30, 34, 102, 170,
|
|
|
|
|
229, 52, 92, 228, 55, 89, 235, 38, 106, 190, 217, 112, 144, 171, 230, 49,
|
|
|
|
|
83, 245, 4, 12, 20, 60, 68, 204, 79, 209, 104, 184, 211, 110, 178, 205,
|
|
|
|
|
76, 212, 103, 169, 224, 59, 77, 215, 98, 166, 241, 8, 24, 40, 120, 136,
|
|
|
|
|
131, 158, 185, 208, 107, 189, 220, 127, 129, 152, 179, 206, 73, 219, 118, 154,
|
|
|
|
|
181, 196, 87, 249, 16, 48, 80, 240, 11, 29, 39, 105, 187, 214, 97, 163,
|
|
|
|
|
254, 25, 43, 125, 135, 146, 173, 236, 47, 113, 147, 174, 233, 32, 96, 160,
|
|
|
|
|
251, 22, 58, 78, 210, 109, 183, 194, 93, 231, 50, 86, 250, 21, 63, 65,
|
|
|
|
|
195, 94, 226, 61, 71, 201, 64, 192, 91, 237, 44, 116, 156, 191, 218, 117,
|
|
|
|
|
159, 186, 213, 100, 172, 239, 42, 126, 130, 157, 188, 223, 122, 142, 137, 128,
|
|
|
|
|
155, 182, 193, 88, 232, 35, 101, 175, 234, 37, 111, 177, 200, 67, 197, 84,
|
|
|
|
|
252, 31, 33, 99, 165, 244, 7, 9, 27, 45, 119, 153, 176, 203, 70, 202,
|
|
|
|
|
69, 207, 74, 222, 121, 139, 134, 145, 168, 227, 62, 66, 198, 81, 243, 14,
|
|
|
|
|
18, 54, 90, 238, 41, 123, 141, 140, 143, 138, 133, 148, 167, 242, 13, 23,
|
|
|
|
|
57, 75, 221, 124, 132, 151, 162, 253, 28, 36, 108, 180, 199, 82, 246, 1,
|
|
|
|
|
0, 3, 5, 15, 17, 51, 85, 255, 26, 46, 114, 150, 161, 248, 19, 53,
|
|
|
|
|
95, 225, 56, 72, 216, 115, 149, 164, 247, 2, 6, 10, 30, 34, 102, 170,
|
|
|
|
|
229, 52, 92, 228, 55, 89, 235, 38, 106, 190, 217, 112, 144, 171, 230, 49,
|
|
|
|
|
83, 245, 4, 12, 20, 60, 68, 204, 79, 209, 104, 184, 211, 110, 178, 205,
|
|
|
|
|
76, 212, 103, 169, 224, 59, 77, 215, 98, 166, 241, 8, 24, 40, 120, 136,
|
|
|
|
|
131, 158, 185, 208, 107, 189, 220, 127, 129, 152, 179, 206, 73, 219, 118, 154,
|
|
|
|
|
181, 196, 87, 249, 16, 48, 80, 240, 11, 29, 39, 105, 187, 214, 97, 163,
|
|
|
|
|
254, 25, 43, 125, 135, 146, 173, 236, 47, 113, 147, 174, 233, 32, 96, 160,
|
|
|
|
|
251, 22, 58, 78, 210, 109, 183, 194, 93, 231, 50, 86, 250, 21, 63, 65,
|
|
|
|
|
195, 94, 226, 61, 71, 201, 64, 192, 91, 237, 44, 116, 156, 191, 218, 117,
|
|
|
|
|
159, 186, 213, 100, 172, 239, 42, 126, 130, 157, 188, 223, 122, 142, 137, 128,
|
|
|
|
|
155, 182, 193, 88, 232, 35, 101, 175, 234, 37, 111, 177, 200, 67, 197, 84,
|
|
|
|
|
252, 31, 33, 99, 165, 244, 7, 9, 27, 45, 119, 153, 176, 203, 70, 202,
|
|
|
|
|
69, 207, 74, 222, 121, 139, 134, 145, 168, 227, 62, 66, 198, 81, 243, 14,
|
|
|
|
|
18, 54, 90, 238, 41, 123, 141, 140, 143, 138, 133, 148, 167, 242, 13, 23,
|
|
|
|
|
57, 75, 221, 124, 132, 151, 162, 253, 28, 36, 108, 180, 199, 82, 246, 1,
|
|
|
|
|
3, 5, 15, 17, 51, 85, 255, 26, 46, 114, 150, 161, 248, 19, 53,
|
|
|
|
|
95, 225, 56, 72, 216, 115, 149, 164, 247, 2, 6, 10, 30, 34, 102, 170,
|
|
|
|
|
229, 52, 92, 228, 55, 89, 235, 38, 106, 190, 217, 112, 144, 171, 230, 49,
|
|
|
|
|
83, 245, 4, 12, 20, 60, 68, 204, 79, 209, 104, 184, 211, 110, 178, 205,
|
|
|
|
|
76, 212, 103, 169, 224, 59, 77, 215, 98, 166, 241, 8, 24, 40, 120, 136,
|
|
|
|
|
131, 158, 185, 208, 107, 189, 220, 127, 129, 152, 179, 206, 73, 219, 118, 154,
|
|
|
|
|
181, 196, 87, 249, 16, 48, 80, 240, 11, 29, 39, 105, 187, 214, 97, 163,
|
|
|
|
|
254, 25, 43, 125, 135, 146, 173, 236, 47, 113, 147, 174, 233, 32, 96, 160,
|
|
|
|
|
251, 22, 58, 78, 210, 109, 183, 194, 93, 231, 50, 86, 250, 21, 63, 65,
|
|
|
|
|
195, 94, 226, 61, 71, 201, 64, 192, 91, 237, 44, 116, 156, 191, 218, 117,
|
|
|
|
|
159, 186, 213, 100, 172, 239, 42, 126, 130, 157, 188, 223, 122, 142, 137, 128,
|
|
|
|
|
155, 182, 193, 88, 232, 35, 101, 175, 234, 37, 111, 177, 200, 67, 197, 84,
|
|
|
|
|
252, 31, 33, 99, 165, 244, 7, 9, 27, 45, 119, 153, 176, 203, 70, 202,
|
|
|
|
|
69, 207, 74, 222, 121, 139, 134, 145, 168, 227, 62, 66, 198, 81, 243, 14,
|
|
|
|
|
18, 54, 90, 238, 41, 123, 141, 140, 143, 138, 133, 148, 167, 242, 13, 23,
|
|
|
|
|
57, 75, 221, 124, 132, 151, 162, 253, 28, 36, 108, 180, 199, 82, 246, 1
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
private static readonly byte[] S =
|
|
|
|
|
{
|
|
|
|
|
99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171, 118,
|
|
|
|
|
202, 130, 201, 125, 250, 89, 71, 240, 173, 212, 162, 175, 156, 164, 114, 192,
|
|
|
|
|
183, 253, 147, 38, 54, 63, 247, 204, 52, 165, 229, 241, 113, 216, 49, 21,
|
|
|
|
|
4, 199, 35, 195, 24, 150, 5, 154, 7, 18, 128, 226, 235, 39, 178, 117,
|
|
|
|
|
9, 131, 44, 26, 27, 110, 90, 160, 82, 59, 214, 179, 41, 227, 47, 132,
|
|
|
|
|
83, 209, 0, 237, 32, 252, 177, 91, 106, 203, 190, 57, 74, 76, 88, 207,
|
|
|
|
|
208, 239, 170, 251, 67, 77, 51, 133, 69, 249, 2, 127, 80, 60, 159, 168,
|
|
|
|
|
81, 163, 64, 143, 146, 157, 56, 245, 188, 182, 218, 33, 16, 255, 243, 210,
|
|
|
|
|
205, 12, 19, 236, 95, 151, 68, 23, 196, 167, 126, 61, 100, 93, 25, 115,
|
|
|
|
|
96, 129, 79, 220, 34, 42, 144, 136, 70, 238, 184, 20, 222, 94, 11, 219,
|
|
|
|
|
224, 50, 58, 10, 73, 6, 36, 92, 194, 211, 172, 98, 145, 149, 228, 121,
|
|
|
|
|
231, 200, 55, 109, 141, 213, 78, 169, 108, 86, 244, 234, 101, 122, 174, 8,
|
|
|
|
|
186, 120, 37, 46, 28, 166, 180, 198, 232, 221, 116, 31, 75, 189, 139, 138,
|
|
|
|
|
112, 62, 181, 102, 72, 3, 246, 14, 97, 53, 87, 185, 134, 193, 29, 158,
|
|
|
|
|
225, 248, 152, 17, 105, 217, 142, 148, 155, 30, 135, 233, 206, 85, 40, 223,
|
|
|
|
|
140, 161, 137, 13, 191, 230, 66, 104, 65, 153, 45, 15, 176, 84, 187, 22,
|
|
|
|
|
99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171, 118,
|
|
|
|
|
202, 130, 201, 125, 250, 89, 71, 240, 173, 212, 162, 175, 156, 164, 114, 192,
|
|
|
|
|
183, 253, 147, 38, 54, 63, 247, 204, 52, 165, 229, 241, 113, 216, 49, 21,
|
|
|
|
|
4, 199, 35, 195, 24, 150, 5, 154, 7, 18, 128, 226, 235, 39, 178, 117,
|
|
|
|
|
9, 131, 44, 26, 27, 110, 90, 160, 82, 59, 214, 179, 41, 227, 47, 132,
|
|
|
|
|
83, 209, 0, 237, 32, 252, 177, 91, 106, 203, 190, 57, 74, 76, 88, 207,
|
|
|
|
|
208, 239, 170, 251, 67, 77, 51, 133, 69, 249, 2, 127, 80, 60, 159, 168,
|
|
|
|
|
81, 163, 64, 143, 146, 157, 56, 245, 188, 182, 218, 33, 16, 255, 243, 210,
|
|
|
|
|
205, 12, 19, 236, 95, 151, 68, 23, 196, 167, 126, 61, 100, 93, 25, 115,
|
|
|
|
|
96, 129, 79, 220, 34, 42, 144, 136, 70, 238, 184, 20, 222, 94, 11, 219,
|
|
|
|
|
224, 50, 58, 10, 73, 6, 36, 92, 194, 211, 172, 98, 145, 149, 228, 121,
|
|
|
|
|
231, 200, 55, 109, 141, 213, 78, 169, 108, 86, 244, 234, 101, 122, 174, 8,
|
|
|
|
|
186, 120, 37, 46, 28, 166, 180, 198, 232, 221, 116, 31, 75, 189, 139, 138,
|
|
|
|
|
112, 62, 181, 102, 72, 3, 246, 14, 97, 53, 87, 185, 134, 193, 29, 158,
|
|
|
|
|
225, 248, 152, 17, 105, 217, 142, 148, 155, 30, 135, 233, 206, 85, 40, 223,
|
|
|
|
|
140, 161, 137, 13, 191, 230, 66, 104, 65, 153, 45, 15, 176, 84, 187, 22
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
private static readonly byte[] Si =
|
|
|
|
|
{
|
|
|
|
|
82, 9, 106, 213, 48, 54, 165, 56, 191, 64, 163, 158, 129, 243, 215, 251,
|
|
|
|
|
124, 227, 57, 130, 155, 47, 255, 135, 52, 142, 67, 68, 196, 222, 233, 203,
|
|
|
|
|
84, 123, 148, 50, 166, 194, 35, 61, 238, 76, 149, 11, 66, 250, 195, 78,
|
|
|
|
|
8, 46, 161, 102, 40, 217, 36, 178, 118, 91, 162, 73, 109, 139, 209, 37,
|
|
|
|
|
114, 248, 246, 100, 134, 104, 152, 22, 212, 164, 92, 204, 93, 101, 182, 146,
|
|
|
|
|
108, 112, 72, 80, 253, 237, 185, 218, 94, 21, 70, 87, 167, 141, 157, 132,
|
|
|
|
|
144, 216, 171, 0, 140, 188, 211, 10, 247, 228, 88, 5, 184, 179, 69, 6,
|
|
|
|
|
208, 44, 30, 143, 202, 63, 15, 2, 193, 175, 189, 3, 1, 19, 138, 107,
|
|
|
|
|
58, 145, 17, 65, 79, 103, 220, 234, 151, 242, 207, 206, 240, 180, 230, 115,
|
|
|
|
|
150, 172, 116, 34, 231, 173, 53, 133, 226, 249, 55, 232, 28, 117, 223, 110,
|
|
|
|
|
71, 241, 26, 113, 29, 41, 197, 137, 111, 183, 98, 14, 170, 24, 190, 27,
|
|
|
|
|
252, 86, 62, 75, 198, 210, 121, 32, 154, 219, 192, 254, 120, 205, 90, 244,
|
|
|
|
|
31, 221, 168, 51, 136, 7, 199, 49, 177, 18, 16, 89, 39, 128, 236, 95,
|
|
|
|
|
96, 81, 127, 169, 25, 181, 74, 13, 45, 229, 122, 159, 147, 201, 156, 239,
|
|
|
|
|
160, 224, 59, 77, 174, 42, 245, 176, 200, 235, 187, 60, 131, 83, 153, 97,
|
|
|
|
|
23, 43, 4, 126, 186, 119, 214, 38, 225, 105, 20, 99, 85, 33, 12, 125,
|
|
|
|
|
82, 9, 106, 213, 48, 54, 165, 56, 191, 64, 163, 158, 129, 243, 215, 251,
|
|
|
|
|
124, 227, 57, 130, 155, 47, 255, 135, 52, 142, 67, 68, 196, 222, 233, 203,
|
|
|
|
|
84, 123, 148, 50, 166, 194, 35, 61, 238, 76, 149, 11, 66, 250, 195, 78,
|
|
|
|
|
8, 46, 161, 102, 40, 217, 36, 178, 118, 91, 162, 73, 109, 139, 209, 37,
|
|
|
|
|
114, 248, 246, 100, 134, 104, 152, 22, 212, 164, 92, 204, 93, 101, 182, 146,
|
|
|
|
|
108, 112, 72, 80, 253, 237, 185, 218, 94, 21, 70, 87, 167, 141, 157, 132,
|
|
|
|
|
144, 216, 171, 0, 140, 188, 211, 10, 247, 228, 88, 5, 184, 179, 69, 6,
|
|
|
|
|
208, 44, 30, 143, 202, 63, 15, 2, 193, 175, 189, 3, 1, 19, 138, 107,
|
|
|
|
|
58, 145, 17, 65, 79, 103, 220, 234, 151, 242, 207, 206, 240, 180, 230, 115,
|
|
|
|
|
150, 172, 116, 34, 231, 173, 53, 133, 226, 249, 55, 232, 28, 117, 223, 110,
|
|
|
|
|
71, 241, 26, 113, 29, 41, 197, 137, 111, 183, 98, 14, 170, 24, 190, 27,
|
|
|
|
|
252, 86, 62, 75, 198, 210, 121, 32, 154, 219, 192, 254, 120, 205, 90, 244,
|
|
|
|
|
31, 221, 168, 51, 136, 7, 199, 49, 177, 18, 16, 89, 39, 128, 236, 95,
|
|
|
|
|
96, 81, 127, 169, 25, 181, 74, 13, 45, 229, 122, 159, 147, 201, 156, 239,
|
|
|
|
|
160, 224, 59, 77, 174, 42, 245, 176, 200, 235, 187, 60, 131, 83, 153, 97,
|
|
|
|
|
23, 43, 4, 126, 186, 119, 214, 38, 225, 105, 20, 99, 85, 33, 12, 125
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
private static readonly byte[] rcon =
|
|
|
|
|
@@ -128,28 +128,29 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
0x2f, 0x5e, 0xbc, 0x63, 0xc6, 0x97, 0x35, 0x6a, 0xd4, 0xb3, 0x7d, 0xfa, 0xef, 0xc5, 0x91
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
static readonly byte[][] shifts0 = new byte[][]
|
|
|
|
|
{
|
|
|
|
|
new byte[]{ 0, 8, 16, 24 },
|
|
|
|
|
new byte[]{ 0, 8, 16, 24 },
|
|
|
|
|
new byte[]{ 0, 8, 16, 24 },
|
|
|
|
|
new byte[]{ 0, 8, 16, 32 },
|
|
|
|
|
new byte[]{ 0, 8, 24, 32 }
|
|
|
|
|
};
|
|
|
|
|
static readonly byte[][] shifts0 =
|
|
|
|
|
{
|
|
|
|
|
new byte[] {0, 8, 16, 24},
|
|
|
|
|
new byte[] {0, 8, 16, 24},
|
|
|
|
|
new byte[] {0, 8, 16, 24},
|
|
|
|
|
new byte[] {0, 8, 16, 32},
|
|
|
|
|
new byte[] {0, 8, 24, 32}
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
static readonly byte[][] shifts1 =
|
|
|
|
|
{
|
|
|
|
|
new byte[]{ 0, 24, 16, 8 },
|
|
|
|
|
new byte[]{ 0, 32, 24, 16 },
|
|
|
|
|
new byte[]{ 0, 40, 32, 24 },
|
|
|
|
|
new byte[]{ 0, 48, 40, 24 },
|
|
|
|
|
new byte[]{ 0, 56, 40, 32 }
|
|
|
|
|
new byte[] {0, 24, 16, 8},
|
|
|
|
|
new byte[] {0, 32, 24, 16},
|
|
|
|
|
new byte[] {0, 40, 32, 24},
|
|
|
|
|
new byte[] {0, 48, 40, 24},
|
|
|
|
|
new byte[] {0, 56, 40, 32}
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* multiply two elements of GF(2^m)
|
|
|
|
|
* needed for MixColumn and InvMixColumn
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
private byte Mul0x2(
|
|
|
|
|
int b)
|
|
|
|
|
{
|
|
|
|
|
@@ -157,10 +158,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
return Alogtable[25 + (Logtable[b] & 0xff)];
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private byte Mul0x3(
|
|
|
|
|
@@ -170,10 +168,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
return Alogtable[1 + (Logtable[b] & 0xff)];
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private byte Mul0x9(
|
|
|
|
|
@@ -183,10 +178,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
return Alogtable[199 + b];
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private byte Mul0xb(
|
|
|
|
|
@@ -196,10 +188,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
return Alogtable[104 + b];
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private byte Mul0xd(
|
|
|
|
|
@@ -209,10 +198,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
return Alogtable[238 + b];
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private byte Mul0xe(
|
|
|
|
|
@@ -222,15 +208,13 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
return Alogtable[223 + b];
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* xor corresponding text input and round key input bytes
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
private void KeyAddition(
|
|
|
|
|
long[] rk)
|
|
|
|
|
{
|
|
|
|
|
@@ -261,6 +245,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
* Row 0 remains unchanged
|
|
|
|
|
* The other three rows are shifted a variable amount
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
private void ShiftRow(
|
|
|
|
|
byte[] shiftsSC)
|
|
|
|
|
{
|
|
|
|
|
@@ -287,6 +272,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
* Replace every byte of the input by the byte at that place
|
|
|
|
|
* in the nonlinear S-box
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
private void Substitution(
|
|
|
|
|
byte[] box)
|
|
|
|
|
{
|
|
|
|
|
@@ -299,6 +285,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
/**
|
|
|
|
|
* Mix the bytes of every column in a linear way
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
private void MixColumn()
|
|
|
|
|
{
|
|
|
|
|
long r0, r1, r2, r3;
|
|
|
|
|
@@ -331,6 +318,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
* Mix the bytes of every column in a linear way
|
|
|
|
|
* This is the opposite operation of Mixcolumn
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
private void InvMixColumn()
|
|
|
|
|
{
|
|
|
|
|
long r0, r1, r2, r3;
|
|
|
|
|
@@ -370,6 +358,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
* Calculate the necessary round keys
|
|
|
|
|
* The number of calculations depends on keyBits and blockBits
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
private long[][] GenerateWorkingKey(
|
|
|
|
|
byte[] key)
|
|
|
|
|
{
|
|
|
|
|
@@ -377,11 +366,14 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
int t, rconpointer = 0;
|
|
|
|
|
int keyBits = key.Length * 8;
|
|
|
|
|
byte[,] tk = new byte[4, MAXKC];
|
|
|
|
|
|
|
|
|
|
//long[,] W = new long[MAXROUNDS+1,4];
|
|
|
|
|
long[][] W = new long[MAXROUNDS + 1][];
|
|
|
|
|
|
|
|
|
|
for (int i = 0; i < MAXROUNDS + 1; i++)
|
|
|
|
|
{
|
|
|
|
|
W[i] = new long[4];
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
switch (keyBits)
|
|
|
|
|
{
|
|
|
|
|
@@ -446,7 +438,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
tk[i, 0] ^= S[tk[(i + 1) % 4, KC - 1] & 0xff];
|
|
|
|
|
}
|
|
|
|
|
tk[0, 0] ^= (byte)rcon[rconpointer++];
|
|
|
|
|
tk[0, 0] ^= rcon[rconpointer++];
|
|
|
|
|
|
|
|
|
|
if (KC <= 6)
|
|
|
|
|
{
|
|
|
|
|
@@ -494,26 +486,31 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
return W;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private int BC;
|
|
|
|
|
private long BC_MASK;
|
|
|
|
|
private readonly int BC;
|
|
|
|
|
private readonly long BC_MASK;
|
|
|
|
|
private int ROUNDS;
|
|
|
|
|
private int blockBits;
|
|
|
|
|
private readonly int blockBits;
|
|
|
|
|
private long[][] workingKey;
|
|
|
|
|
private long A0, A1, A2, A3;
|
|
|
|
|
private bool forEncryption;
|
|
|
|
|
private byte[] shifts0SC;
|
|
|
|
|
private byte[] shifts1SC;
|
|
|
|
|
private readonly byte[] shifts0SC;
|
|
|
|
|
private readonly byte[] shifts1SC;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* default constructor - 128 bit block size.
|
|
|
|
|
*/
|
|
|
|
|
public RijndaelEngine() : this(128) { }
|
|
|
|
|
|
|
|
|
|
public RijndaelEngine()
|
|
|
|
|
: this(128)
|
|
|
|
|
{
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* basic constructor - set the cipher up for a given blocksize
|
|
|
|
|
*
|
|
|
|
|
* @param blocksize the blocksize in bits, must be 128, 192, or 256.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
public RijndaelEngine(
|
|
|
|
|
int blockBits)
|
|
|
|
|
{
|
|
|
|
|
@@ -564,6 +561,7 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
* @exception ArgumentException if the parameters argument is
|
|
|
|
|
* inappropriate.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
public void Init(
|
|
|
|
|
bool forEncryption,
|
|
|
|
|
ICipherParameters parameters)
|
|
|
|
|
@@ -576,18 +574,12 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
throw new ArgumentException("invalid parameter passed to Rijndael init - " + parameters.GetType().ToString());
|
|
|
|
|
throw new ArgumentException("invalid parameter passed to Rijndael init - " + parameters.GetType());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public string AlgorithmName
|
|
|
|
|
{
|
|
|
|
|
get { return "Rijndael"; }
|
|
|
|
|
}
|
|
|
|
|
public string AlgorithmName { get { return "Rijndael"; } }
|
|
|
|
|
|
|
|
|
|
public bool IsPartialBlockOkay
|
|
|
|
|
{
|
|
|
|
|
get { return false; }
|
|
|
|
|
}
|
|
|
|
|
public bool IsPartialBlockOkay { get { return false; } }
|
|
|
|
|
|
|
|
|
|
public int GetBlockSize()
|
|
|
|
|
{
|
|
|
|
|
@@ -641,10 +633,10 @@ namespace Org.BouncyCastle.Crypto.Engines
|
|
|
|
|
{
|
|
|
|
|
int index = off;
|
|
|
|
|
|
|
|
|
|
A0 = (long)(bytes[index++] & 0xff);
|
|
|
|
|
A1 = (long)(bytes[index++] & 0xff);
|
|
|
|
|
A2 = (long)(bytes[index++] & 0xff);
|
|
|
|
|
A3 = (long)(bytes[index++] & 0xff);
|
|
|
|
|
A0 = bytes[index++] & 0xff;
|
|
|
|
|
A1 = bytes[index++] & 0xff;
|
|
|
|
|
A2 = bytes[index++] & 0xff;
|
|
|
|
|
A3 = bytes[index++] & 0xff;
|
|
|
|
|
|
|
|
|
|
for (int j = 8; j != BC; j += 8)
|
|
|
|
|
{
|
|
|
|
|
|