@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Poly1305', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | /** |
@@ -9,51 +9,51 @@ discard block |
||
9 | 9 | */ |
10 | 10 | abstract class ParagonIE_Sodium_Core32_Poly1305 extends ParagonIE_Sodium_Core32_Util |
11 | 11 | { |
12 | - const BLOCK_SIZE = 16; |
|
12 | + const BLOCK_SIZE = 16; |
|
13 | 13 | |
14 | - /** |
|
15 | - * @internal You should not use this directly from another application |
|
16 | - * |
|
17 | - * @param string $m |
|
18 | - * @param string $key |
|
19 | - * @return string |
|
20 | - */ |
|
21 | - public static function onetimeauth($m, $key) |
|
22 | - { |
|
23 | - if (self::strlen($key) < 32) { |
|
24 | - throw new InvalidArgumentException( |
|
25 | - 'Key must be 32 bytes long.' |
|
26 | - ); |
|
27 | - } |
|
28 | - $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
29 | - self::substr($key, 0, 32) |
|
30 | - ); |
|
31 | - return $state |
|
32 | - ->update($m) |
|
33 | - ->finish(); |
|
34 | - } |
|
14 | + /** |
|
15 | + * @internal You should not use this directly from another application |
|
16 | + * |
|
17 | + * @param string $m |
|
18 | + * @param string $key |
|
19 | + * @return string |
|
20 | + */ |
|
21 | + public static function onetimeauth($m, $key) |
|
22 | + { |
|
23 | + if (self::strlen($key) < 32) { |
|
24 | + throw new InvalidArgumentException( |
|
25 | + 'Key must be 32 bytes long.' |
|
26 | + ); |
|
27 | + } |
|
28 | + $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
29 | + self::substr($key, 0, 32) |
|
30 | + ); |
|
31 | + return $state |
|
32 | + ->update($m) |
|
33 | + ->finish(); |
|
34 | + } |
|
35 | 35 | |
36 | - /** |
|
37 | - * @internal You should not use this directly from another application |
|
38 | - * |
|
39 | - * @param string $mac |
|
40 | - * @param string $m |
|
41 | - * @param string $key |
|
42 | - * @return bool |
|
43 | - */ |
|
44 | - public static function onetimeauth_verify($mac, $m, $key) |
|
45 | - { |
|
46 | - if (self::strlen($key) < 32) { |
|
47 | - throw new InvalidArgumentException( |
|
48 | - 'Key must be 32 bytes long.' |
|
49 | - ); |
|
50 | - } |
|
51 | - $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
52 | - self::substr($key, 0, 32) |
|
53 | - ); |
|
54 | - $calc = $state |
|
55 | - ->update($m) |
|
56 | - ->finish(); |
|
57 | - return self::verify_16($calc, $mac); |
|
58 | - } |
|
36 | + /** |
|
37 | + * @internal You should not use this directly from another application |
|
38 | + * |
|
39 | + * @param string $mac |
|
40 | + * @param string $m |
|
41 | + * @param string $key |
|
42 | + * @return bool |
|
43 | + */ |
|
44 | + public static function onetimeauth_verify($mac, $m, $key) |
|
45 | + { |
|
46 | + if (self::strlen($key) < 32) { |
|
47 | + throw new InvalidArgumentException( |
|
48 | + 'Key must be 32 bytes long.' |
|
49 | + ); |
|
50 | + } |
|
51 | + $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
52 | + self::substr($key, 0, 32) |
|
53 | + ); |
|
54 | + $calc = $state |
|
55 | + ->update($m) |
|
56 | + ->finish(); |
|
57 | + return self::verify_16($calc, $mac); |
|
58 | + } |
|
59 | 59 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Poly1305', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Poly1305', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | |
@@ -18,18 +18,18 @@ discard block |
||
18 | 18 | * @param string $key |
19 | 19 | * @return string |
20 | 20 | */ |
21 | - public static function onetimeauth($m, $key) |
|
21 | + public static function onetimeauth( $m, $key ) |
|
22 | 22 | { |
23 | - if (self::strlen($key) < 32) { |
|
23 | + if ( self::strlen( $key ) < 32 ) { |
|
24 | 24 | throw new InvalidArgumentException( |
25 | 25 | 'Key must be 32 bytes long.' |
26 | 26 | ); |
27 | 27 | } |
28 | 28 | $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
29 | - self::substr($key, 0, 32) |
|
29 | + self::substr( $key, 0, 32 ) |
|
30 | 30 | ); |
31 | 31 | return $state |
32 | - ->update($m) |
|
32 | + ->update( $m ) |
|
33 | 33 | ->finish(); |
34 | 34 | } |
35 | 35 | |
@@ -41,19 +41,19 @@ discard block |
||
41 | 41 | * @param string $key |
42 | 42 | * @return bool |
43 | 43 | */ |
44 | - public static function onetimeauth_verify($mac, $m, $key) |
|
44 | + public static function onetimeauth_verify( $mac, $m, $key ) |
|
45 | 45 | { |
46 | - if (self::strlen($key) < 32) { |
|
46 | + if ( self::strlen( $key ) < 32 ) { |
|
47 | 47 | throw new InvalidArgumentException( |
48 | 48 | 'Key must be 32 bytes long.' |
49 | 49 | ); |
50 | 50 | } |
51 | 51 | $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
52 | - self::substr($key, 0, 32) |
|
52 | + self::substr( $key, 0, 32 ) |
|
53 | 53 | ); |
54 | 54 | $calc = $state |
55 | - ->update($m) |
|
55 | + ->update( $m ) |
|
56 | 56 | ->finish(); |
57 | - return self::verify_16($calc, $mac); |
|
57 | + return self::verify_16( $calc, $mac ); |
|
58 | 58 | } |
59 | 59 | } |
@@ -7,8 +7,7 @@ discard block |
||
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Poly1305 |
9 | 9 | */ |
10 | -abstract class ParagonIE_Sodium_Core32_Poly1305 extends ParagonIE_Sodium_Core32_Util |
|
11 | -{ |
|
10 | +abstract class ParagonIE_Sodium_Core32_Poly1305 extends ParagonIE_Sodium_Core32_Util { |
|
12 | 11 | const BLOCK_SIZE = 16; |
13 | 12 | |
14 | 13 | /** |
@@ -18,8 +17,7 @@ discard block |
||
18 | 17 | * @param string $key |
19 | 18 | * @return string |
20 | 19 | */ |
21 | - public static function onetimeauth($m, $key) |
|
22 | - { |
|
20 | + public static function onetimeauth($m, $key) { |
|
23 | 21 | if (self::strlen($key) < 32) { |
24 | 22 | throw new InvalidArgumentException( |
25 | 23 | 'Key must be 32 bytes long.' |
@@ -41,8 +39,7 @@ discard block |
||
41 | 39 | * @param string $key |
42 | 40 | * @return bool |
43 | 41 | */ |
44 | - public static function onetimeauth_verify($mac, $m, $key) |
|
45 | - { |
|
42 | + public static function onetimeauth_verify($mac, $m, $key) { |
|
46 | 43 | if (self::strlen($key) < 32) { |
47 | 44 | throw new InvalidArgumentException( |
48 | 45 | 'Key must be 32 bytes long.' |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Ed25519', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | /** |
@@ -9,410 +9,410 @@ discard block |
||
9 | 9 | */ |
10 | 10 | abstract class ParagonIE_Sodium_Core32_Ed25519 extends ParagonIE_Sodium_Core32_Curve25519 |
11 | 11 | { |
12 | - const KEYPAIR_BYTES = 96; |
|
13 | - const SEED_BYTES = 32; |
|
14 | - |
|
15 | - /** |
|
16 | - * @internal You should not use this directly from another application |
|
17 | - * |
|
18 | - * @return string (96 bytes) |
|
19 | - */ |
|
20 | - public static function keypair() |
|
21 | - { |
|
22 | - $seed = random_bytes(self::SEED_BYTES); |
|
23 | - $pk = ''; |
|
24 | - $sk = ''; |
|
25 | - self::seed_keypair($pk, $sk, $seed); |
|
26 | - return $sk . $pk; |
|
27 | - } |
|
28 | - |
|
29 | - /** |
|
30 | - * @internal You should not use this directly from another application |
|
31 | - * |
|
32 | - * @param string $pk |
|
33 | - * @param string $sk |
|
34 | - * @param string $seed |
|
35 | - * @return string |
|
36 | - */ |
|
37 | - public static function seed_keypair(&$pk, &$sk, $seed) |
|
38 | - { |
|
39 | - if (self::strlen($seed) !== self::SEED_BYTES) { |
|
40 | - throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
|
41 | - } |
|
42 | - |
|
43 | - /** @var string $pk */ |
|
44 | - $pk = self::publickey_from_secretkey($seed); |
|
45 | - $sk = $seed . $pk; |
|
46 | - return $sk; |
|
47 | - } |
|
48 | - |
|
49 | - /** |
|
50 | - * @internal You should not use this directly from another application |
|
51 | - * |
|
52 | - * @param string $keypair |
|
53 | - * @return string |
|
54 | - */ |
|
55 | - public static function secretkey($keypair) |
|
56 | - { |
|
57 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
58 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
59 | - } |
|
60 | - return self::substr($keypair, 0, 64); |
|
61 | - } |
|
62 | - |
|
63 | - /** |
|
64 | - * @internal You should not use this directly from another application |
|
65 | - * |
|
66 | - * @param string $keypair |
|
67 | - * @return string |
|
68 | - */ |
|
69 | - public static function publickey($keypair) |
|
70 | - { |
|
71 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
72 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
73 | - } |
|
74 | - return self::substr($keypair, 64, 32); |
|
75 | - } |
|
76 | - |
|
77 | - /** |
|
78 | - * @internal You should not use this directly from another application |
|
79 | - * |
|
80 | - * @param string $sk |
|
81 | - * @return string |
|
82 | - */ |
|
83 | - public static function publickey_from_secretkey($sk) |
|
84 | - { |
|
85 | - /** @var string $sk */ |
|
86 | - $sk = hash('sha512', self::substr($sk, 0, 32), true); |
|
87 | - $sk[0] = self::intToChr( |
|
88 | - self::chrToInt($sk[0]) & 248 |
|
89 | - ); |
|
90 | - $sk[31] = self::intToChr( |
|
91 | - (self::chrToInt($sk[31]) & 63) | 64 |
|
92 | - ); |
|
93 | - return self::sk_to_pk($sk); |
|
94 | - } |
|
95 | - |
|
96 | - /** |
|
97 | - * @internal You should not use this directly from another application |
|
98 | - * |
|
99 | - * @param string $sk |
|
100 | - * @return string |
|
101 | - */ |
|
102 | - public static function sk_to_pk($sk) |
|
103 | - { |
|
104 | - return self::ge_p3_tobytes( |
|
105 | - self::ge_scalarmult_base( |
|
106 | - self::substr($sk, 0, 32) |
|
107 | - ) |
|
108 | - ); |
|
109 | - } |
|
110 | - |
|
111 | - /** |
|
112 | - * @internal You should not use this directly from another application |
|
113 | - * |
|
114 | - * @param string $message |
|
115 | - * @param string $sk |
|
116 | - * @return string |
|
117 | - */ |
|
118 | - public static function sign($message, $sk) |
|
119 | - { |
|
120 | - /** @var string $signature */ |
|
121 | - $signature = self::sign_detached($message, $sk); |
|
122 | - return $signature . $message; |
|
123 | - } |
|
124 | - |
|
125 | - /** |
|
126 | - * @internal You should not use this directly from another application |
|
127 | - * |
|
128 | - * @param string $message A signed message |
|
129 | - * @param string $pk Public key |
|
130 | - * @return string Message (without signature) |
|
131 | - * @throws Exception |
|
132 | - */ |
|
133 | - public static function sign_open($message, $pk) |
|
134 | - { |
|
135 | - /** @var string $signature */ |
|
136 | - $signature = self::substr($message, 0, 64); |
|
137 | - |
|
138 | - /** @var string $message */ |
|
139 | - $message = self::substr($message, 64); |
|
140 | - |
|
141 | - if (self::verify_detached($signature, $message, $pk)) { |
|
142 | - return $message; |
|
143 | - } |
|
144 | - throw new Exception('Invalid signature'); |
|
145 | - } |
|
146 | - |
|
147 | - /** |
|
148 | - * @internal You should not use this directly from another application |
|
149 | - * |
|
150 | - * @param string $message |
|
151 | - * @param string $sk |
|
152 | - * @return string |
|
153 | - */ |
|
154 | - public static function sign_detached($message, $sk) |
|
155 | - { |
|
156 | - # crypto_hash_sha512(az, sk, 32); |
|
157 | - $az = hash('sha512', self::substr($sk, 0, 32), true); |
|
158 | - |
|
159 | - # az[0] &= 248; |
|
160 | - # az[31] &= 63; |
|
161 | - # az[31] |= 64; |
|
162 | - $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); |
|
163 | - $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); |
|
164 | - |
|
165 | - # crypto_hash_sha512_init(&hs); |
|
166 | - # crypto_hash_sha512_update(&hs, az + 32, 32); |
|
167 | - # crypto_hash_sha512_update(&hs, m, mlen); |
|
168 | - # crypto_hash_sha512_final(&hs, nonce); |
|
169 | - $hs = hash_init('sha512'); |
|
170 | - hash_update($hs, self::substr($az, 32, 32)); |
|
171 | - hash_update($hs, $message); |
|
172 | - $nonceHash = hash_final($hs, true); |
|
173 | - |
|
174 | - # memmove(sig + 32, sk + 32, 32); |
|
175 | - $pk = self::substr($sk, 32, 32); |
|
176 | - |
|
177 | - # sc_reduce(nonce); |
|
178 | - # ge_scalarmult_base(&R, nonce); |
|
179 | - # ge_p3_tobytes(sig, &R); |
|
180 | - $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); |
|
181 | - $sig = self::ge_p3_tobytes( |
|
182 | - self::ge_scalarmult_base($nonce) |
|
183 | - ); |
|
184 | - |
|
185 | - # crypto_hash_sha512_init(&hs); |
|
186 | - # crypto_hash_sha512_update(&hs, sig, 64); |
|
187 | - # crypto_hash_sha512_update(&hs, m, mlen); |
|
188 | - # crypto_hash_sha512_final(&hs, hram); |
|
189 | - $hs = hash_init('sha512'); |
|
190 | - hash_update($hs, self::substr($sig, 0, 32)); |
|
191 | - hash_update($hs, self::substr($pk, 0, 32)); |
|
192 | - hash_update($hs, $message); |
|
193 | - $hramHash = hash_final($hs, true); |
|
194 | - |
|
195 | - # sc_reduce(hram); |
|
196 | - # sc_muladd(sig + 32, hram, az, nonce); |
|
197 | - $hram = self::sc_reduce($hramHash); |
|
198 | - $sigAfter = self::sc_muladd($hram, $az, $nonce); |
|
199 | - $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); |
|
200 | - |
|
201 | - try { |
|
202 | - ParagonIE_Sodium_Compat::memzero($az); |
|
203 | - } catch (Error $ex) { |
|
204 | - $az = null; |
|
205 | - } |
|
206 | - return $sig; |
|
207 | - } |
|
208 | - |
|
209 | - /** |
|
210 | - * @internal You should not use this directly from another application |
|
211 | - * |
|
212 | - * @param string $sig |
|
213 | - * @param string $message |
|
214 | - * @param string $pk |
|
215 | - * @return bool |
|
216 | - * @throws Exception |
|
217 | - */ |
|
218 | - public static function verify_detached($sig, $message, $pk) |
|
219 | - { |
|
220 | - if (self::strlen($sig) < 64) { |
|
221 | - throw new Exception('Signature is too short'); |
|
222 | - } |
|
223 | - if (self::check_S_lt_L(self::substr($sig, 32, 32))) { |
|
224 | - throw new Exception('S < L - Invalid signature'); |
|
225 | - } |
|
226 | - if (self::small_order($sig)) { |
|
227 | - throw new Exception('Signature is on too small of an order'); |
|
228 | - } |
|
229 | - if ((self::chrToInt($sig[63]) & 224) !== 0) { |
|
230 | - throw new Exception('Invalid signature'); |
|
231 | - } |
|
232 | - $d = 0; |
|
233 | - for ($i = 0; $i < 32; ++$i) { |
|
234 | - $d |= self::chrToInt($pk[$i]); |
|
235 | - } |
|
236 | - if ($d === 0) { |
|
237 | - throw new Exception('All zero public key'); |
|
238 | - } |
|
239 | - |
|
240 | - /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ |
|
241 | - $orig = ParagonIE_Sodium_Compat::$fastMult; |
|
242 | - |
|
243 | - // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. |
|
244 | - ParagonIE_Sodium_Compat::$fastMult = true; |
|
245 | - |
|
246 | - /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ |
|
247 | - $A = self::ge_frombytes_negate_vartime($pk); |
|
248 | - |
|
249 | - /** @var string $hDigest */ |
|
250 | - $hDigest = hash( |
|
251 | - 'sha512', |
|
252 | - self::substr($sig, 0, 32) . |
|
253 | - self::substr($pk, 0, 32) . |
|
254 | - $message, |
|
255 | - true |
|
256 | - ); |
|
257 | - |
|
258 | - /** @var string $h */ |
|
259 | - $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); |
|
260 | - |
|
261 | - /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ |
|
262 | - $R = self::ge_double_scalarmult_vartime( |
|
263 | - $h, |
|
264 | - $A, |
|
265 | - self::substr($sig, 32) |
|
266 | - ); |
|
267 | - |
|
268 | - /** @var string $rcheck */ |
|
269 | - $rcheck = self::ge_tobytes($R); |
|
270 | - |
|
271 | - // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. |
|
272 | - ParagonIE_Sodium_Compat::$fastMult = $orig; |
|
273 | - |
|
274 | - return self::verify_32($rcheck, self::substr($sig, 0, 32)); |
|
275 | - } |
|
276 | - |
|
277 | - /** |
|
278 | - * @internal You should not use this directly from another application |
|
279 | - * |
|
280 | - * @param string $S |
|
281 | - * @return bool |
|
282 | - * @throws Exception |
|
283 | - */ |
|
284 | - public static function check_S_lt_L($S) |
|
285 | - { |
|
286 | - if (self::strlen($S) < 32) { |
|
287 | - throw new Exception('Signature must be 32 bytes'); |
|
288 | - } |
|
289 | - static $L = array( |
|
290 | - 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, |
|
291 | - 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, |
|
292 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
293 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10 |
|
294 | - ); |
|
295 | - $c = 0; |
|
296 | - $n = 1; |
|
297 | - $i = 32; |
|
298 | - |
|
299 | - do { |
|
300 | - --$i; |
|
301 | - $x = self::chrToInt($S[$i]); |
|
302 | - $c |= ( |
|
303 | - (($x - $L[$i]) >> 8) & $n |
|
304 | - ); |
|
305 | - $n &= ( |
|
306 | - (($x ^ $L[$i]) - 1) >> 8 |
|
307 | - ); |
|
308 | - } while ($i !== 0); |
|
309 | - |
|
310 | - return $c === 0; |
|
311 | - } |
|
312 | - |
|
313 | - /** |
|
314 | - * @param string $R |
|
315 | - * @return bool |
|
316 | - */ |
|
317 | - public static function small_order($R) |
|
318 | - { |
|
319 | - static $blacklist = array( |
|
320 | - /* 0 (order 4) */ |
|
321 | - array( |
|
322 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
323 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
324 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
325 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
326 | - ), |
|
327 | - /* 1 (order 1) */ |
|
328 | - array( |
|
329 | - 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
330 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
331 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
332 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
333 | - ), |
|
334 | - /* 2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
335 | - array( |
|
336 | - 0x26, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
337 | - 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
338 | - 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
339 | - 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x05 |
|
340 | - ), |
|
341 | - /* 55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
342 | - array( |
|
343 | - 0xc7, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
344 | - 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
345 | - 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
346 | - 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0x7a |
|
347 | - ), |
|
348 | - /* p-1 (order 2) */ |
|
349 | - array( |
|
350 | - 0x13, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
351 | - 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
352 | - 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
353 | - 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x85 |
|
354 | - ), |
|
355 | - /* p (order 4) */ |
|
356 | - array( |
|
357 | - 0xb4, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
358 | - 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
359 | - 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
360 | - 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0xfa |
|
361 | - ), |
|
362 | - /* p+1 (order 1) */ |
|
363 | - array( |
|
364 | - 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
365 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
366 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
367 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
368 | - ), |
|
369 | - /* p+2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
370 | - array( |
|
371 | - 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
372 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
373 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
374 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
375 | - ), |
|
376 | - /* p+55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
377 | - array( |
|
378 | - 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
379 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
380 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
381 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
382 | - ), |
|
383 | - /* 2p-1 (order 2) */ |
|
384 | - array( |
|
385 | - 0xd9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
386 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
387 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
388 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
389 | - ), |
|
390 | - /* 2p (order 4) */ |
|
391 | - array( |
|
392 | - 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
393 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
394 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
395 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
396 | - ), |
|
397 | - /* 2p+1 (order 1) */ |
|
398 | - array( |
|
399 | - 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
400 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
401 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
402 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
403 | - ) |
|
404 | - ); |
|
405 | - $countBlacklist = count($blacklist); |
|
406 | - |
|
407 | - for ($i = 0; $i < $countBlacklist; ++$i) { |
|
408 | - $c = 0; |
|
409 | - for ($j = 0; $j < 32; ++$j) { |
|
410 | - $c |= self::chrToInt($R[$j]) ^ $blacklist[$i][$j]; |
|
411 | - } |
|
412 | - if ($c === 0) { |
|
413 | - return true; |
|
414 | - } |
|
415 | - } |
|
416 | - return false; |
|
417 | - } |
|
12 | + const KEYPAIR_BYTES = 96; |
|
13 | + const SEED_BYTES = 32; |
|
14 | + |
|
15 | + /** |
|
16 | + * @internal You should not use this directly from another application |
|
17 | + * |
|
18 | + * @return string (96 bytes) |
|
19 | + */ |
|
20 | + public static function keypair() |
|
21 | + { |
|
22 | + $seed = random_bytes(self::SEED_BYTES); |
|
23 | + $pk = ''; |
|
24 | + $sk = ''; |
|
25 | + self::seed_keypair($pk, $sk, $seed); |
|
26 | + return $sk . $pk; |
|
27 | + } |
|
28 | + |
|
29 | + /** |
|
30 | + * @internal You should not use this directly from another application |
|
31 | + * |
|
32 | + * @param string $pk |
|
33 | + * @param string $sk |
|
34 | + * @param string $seed |
|
35 | + * @return string |
|
36 | + */ |
|
37 | + public static function seed_keypair(&$pk, &$sk, $seed) |
|
38 | + { |
|
39 | + if (self::strlen($seed) !== self::SEED_BYTES) { |
|
40 | + throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
|
41 | + } |
|
42 | + |
|
43 | + /** @var string $pk */ |
|
44 | + $pk = self::publickey_from_secretkey($seed); |
|
45 | + $sk = $seed . $pk; |
|
46 | + return $sk; |
|
47 | + } |
|
48 | + |
|
49 | + /** |
|
50 | + * @internal You should not use this directly from another application |
|
51 | + * |
|
52 | + * @param string $keypair |
|
53 | + * @return string |
|
54 | + */ |
|
55 | + public static function secretkey($keypair) |
|
56 | + { |
|
57 | + if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
58 | + throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
59 | + } |
|
60 | + return self::substr($keypair, 0, 64); |
|
61 | + } |
|
62 | + |
|
63 | + /** |
|
64 | + * @internal You should not use this directly from another application |
|
65 | + * |
|
66 | + * @param string $keypair |
|
67 | + * @return string |
|
68 | + */ |
|
69 | + public static function publickey($keypair) |
|
70 | + { |
|
71 | + if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
72 | + throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
73 | + } |
|
74 | + return self::substr($keypair, 64, 32); |
|
75 | + } |
|
76 | + |
|
77 | + /** |
|
78 | + * @internal You should not use this directly from another application |
|
79 | + * |
|
80 | + * @param string $sk |
|
81 | + * @return string |
|
82 | + */ |
|
83 | + public static function publickey_from_secretkey($sk) |
|
84 | + { |
|
85 | + /** @var string $sk */ |
|
86 | + $sk = hash('sha512', self::substr($sk, 0, 32), true); |
|
87 | + $sk[0] = self::intToChr( |
|
88 | + self::chrToInt($sk[0]) & 248 |
|
89 | + ); |
|
90 | + $sk[31] = self::intToChr( |
|
91 | + (self::chrToInt($sk[31]) & 63) | 64 |
|
92 | + ); |
|
93 | + return self::sk_to_pk($sk); |
|
94 | + } |
|
95 | + |
|
96 | + /** |
|
97 | + * @internal You should not use this directly from another application |
|
98 | + * |
|
99 | + * @param string $sk |
|
100 | + * @return string |
|
101 | + */ |
|
102 | + public static function sk_to_pk($sk) |
|
103 | + { |
|
104 | + return self::ge_p3_tobytes( |
|
105 | + self::ge_scalarmult_base( |
|
106 | + self::substr($sk, 0, 32) |
|
107 | + ) |
|
108 | + ); |
|
109 | + } |
|
110 | + |
|
111 | + /** |
|
112 | + * @internal You should not use this directly from another application |
|
113 | + * |
|
114 | + * @param string $message |
|
115 | + * @param string $sk |
|
116 | + * @return string |
|
117 | + */ |
|
118 | + public static function sign($message, $sk) |
|
119 | + { |
|
120 | + /** @var string $signature */ |
|
121 | + $signature = self::sign_detached($message, $sk); |
|
122 | + return $signature . $message; |
|
123 | + } |
|
124 | + |
|
125 | + /** |
|
126 | + * @internal You should not use this directly from another application |
|
127 | + * |
|
128 | + * @param string $message A signed message |
|
129 | + * @param string $pk Public key |
|
130 | + * @return string Message (without signature) |
|
131 | + * @throws Exception |
|
132 | + */ |
|
133 | + public static function sign_open($message, $pk) |
|
134 | + { |
|
135 | + /** @var string $signature */ |
|
136 | + $signature = self::substr($message, 0, 64); |
|
137 | + |
|
138 | + /** @var string $message */ |
|
139 | + $message = self::substr($message, 64); |
|
140 | + |
|
141 | + if (self::verify_detached($signature, $message, $pk)) { |
|
142 | + return $message; |
|
143 | + } |
|
144 | + throw new Exception('Invalid signature'); |
|
145 | + } |
|
146 | + |
|
147 | + /** |
|
148 | + * @internal You should not use this directly from another application |
|
149 | + * |
|
150 | + * @param string $message |
|
151 | + * @param string $sk |
|
152 | + * @return string |
|
153 | + */ |
|
154 | + public static function sign_detached($message, $sk) |
|
155 | + { |
|
156 | + # crypto_hash_sha512(az, sk, 32); |
|
157 | + $az = hash('sha512', self::substr($sk, 0, 32), true); |
|
158 | + |
|
159 | + # az[0] &= 248; |
|
160 | + # az[31] &= 63; |
|
161 | + # az[31] |= 64; |
|
162 | + $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); |
|
163 | + $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); |
|
164 | + |
|
165 | + # crypto_hash_sha512_init(&hs); |
|
166 | + # crypto_hash_sha512_update(&hs, az + 32, 32); |
|
167 | + # crypto_hash_sha512_update(&hs, m, mlen); |
|
168 | + # crypto_hash_sha512_final(&hs, nonce); |
|
169 | + $hs = hash_init('sha512'); |
|
170 | + hash_update($hs, self::substr($az, 32, 32)); |
|
171 | + hash_update($hs, $message); |
|
172 | + $nonceHash = hash_final($hs, true); |
|
173 | + |
|
174 | + # memmove(sig + 32, sk + 32, 32); |
|
175 | + $pk = self::substr($sk, 32, 32); |
|
176 | + |
|
177 | + # sc_reduce(nonce); |
|
178 | + # ge_scalarmult_base(&R, nonce); |
|
179 | + # ge_p3_tobytes(sig, &R); |
|
180 | + $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); |
|
181 | + $sig = self::ge_p3_tobytes( |
|
182 | + self::ge_scalarmult_base($nonce) |
|
183 | + ); |
|
184 | + |
|
185 | + # crypto_hash_sha512_init(&hs); |
|
186 | + # crypto_hash_sha512_update(&hs, sig, 64); |
|
187 | + # crypto_hash_sha512_update(&hs, m, mlen); |
|
188 | + # crypto_hash_sha512_final(&hs, hram); |
|
189 | + $hs = hash_init('sha512'); |
|
190 | + hash_update($hs, self::substr($sig, 0, 32)); |
|
191 | + hash_update($hs, self::substr($pk, 0, 32)); |
|
192 | + hash_update($hs, $message); |
|
193 | + $hramHash = hash_final($hs, true); |
|
194 | + |
|
195 | + # sc_reduce(hram); |
|
196 | + # sc_muladd(sig + 32, hram, az, nonce); |
|
197 | + $hram = self::sc_reduce($hramHash); |
|
198 | + $sigAfter = self::sc_muladd($hram, $az, $nonce); |
|
199 | + $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); |
|
200 | + |
|
201 | + try { |
|
202 | + ParagonIE_Sodium_Compat::memzero($az); |
|
203 | + } catch (Error $ex) { |
|
204 | + $az = null; |
|
205 | + } |
|
206 | + return $sig; |
|
207 | + } |
|
208 | + |
|
209 | + /** |
|
210 | + * @internal You should not use this directly from another application |
|
211 | + * |
|
212 | + * @param string $sig |
|
213 | + * @param string $message |
|
214 | + * @param string $pk |
|
215 | + * @return bool |
|
216 | + * @throws Exception |
|
217 | + */ |
|
218 | + public static function verify_detached($sig, $message, $pk) |
|
219 | + { |
|
220 | + if (self::strlen($sig) < 64) { |
|
221 | + throw new Exception('Signature is too short'); |
|
222 | + } |
|
223 | + if (self::check_S_lt_L(self::substr($sig, 32, 32))) { |
|
224 | + throw new Exception('S < L - Invalid signature'); |
|
225 | + } |
|
226 | + if (self::small_order($sig)) { |
|
227 | + throw new Exception('Signature is on too small of an order'); |
|
228 | + } |
|
229 | + if ((self::chrToInt($sig[63]) & 224) !== 0) { |
|
230 | + throw new Exception('Invalid signature'); |
|
231 | + } |
|
232 | + $d = 0; |
|
233 | + for ($i = 0; $i < 32; ++$i) { |
|
234 | + $d |= self::chrToInt($pk[$i]); |
|
235 | + } |
|
236 | + if ($d === 0) { |
|
237 | + throw new Exception('All zero public key'); |
|
238 | + } |
|
239 | + |
|
240 | + /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ |
|
241 | + $orig = ParagonIE_Sodium_Compat::$fastMult; |
|
242 | + |
|
243 | + // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. |
|
244 | + ParagonIE_Sodium_Compat::$fastMult = true; |
|
245 | + |
|
246 | + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ |
|
247 | + $A = self::ge_frombytes_negate_vartime($pk); |
|
248 | + |
|
249 | + /** @var string $hDigest */ |
|
250 | + $hDigest = hash( |
|
251 | + 'sha512', |
|
252 | + self::substr($sig, 0, 32) . |
|
253 | + self::substr($pk, 0, 32) . |
|
254 | + $message, |
|
255 | + true |
|
256 | + ); |
|
257 | + |
|
258 | + /** @var string $h */ |
|
259 | + $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); |
|
260 | + |
|
261 | + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ |
|
262 | + $R = self::ge_double_scalarmult_vartime( |
|
263 | + $h, |
|
264 | + $A, |
|
265 | + self::substr($sig, 32) |
|
266 | + ); |
|
267 | + |
|
268 | + /** @var string $rcheck */ |
|
269 | + $rcheck = self::ge_tobytes($R); |
|
270 | + |
|
271 | + // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. |
|
272 | + ParagonIE_Sodium_Compat::$fastMult = $orig; |
|
273 | + |
|
274 | + return self::verify_32($rcheck, self::substr($sig, 0, 32)); |
|
275 | + } |
|
276 | + |
|
277 | + /** |
|
278 | + * @internal You should not use this directly from another application |
|
279 | + * |
|
280 | + * @param string $S |
|
281 | + * @return bool |
|
282 | + * @throws Exception |
|
283 | + */ |
|
284 | + public static function check_S_lt_L($S) |
|
285 | + { |
|
286 | + if (self::strlen($S) < 32) { |
|
287 | + throw new Exception('Signature must be 32 bytes'); |
|
288 | + } |
|
289 | + static $L = array( |
|
290 | + 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, |
|
291 | + 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, |
|
292 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
293 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10 |
|
294 | + ); |
|
295 | + $c = 0; |
|
296 | + $n = 1; |
|
297 | + $i = 32; |
|
298 | + |
|
299 | + do { |
|
300 | + --$i; |
|
301 | + $x = self::chrToInt($S[$i]); |
|
302 | + $c |= ( |
|
303 | + (($x - $L[$i]) >> 8) & $n |
|
304 | + ); |
|
305 | + $n &= ( |
|
306 | + (($x ^ $L[$i]) - 1) >> 8 |
|
307 | + ); |
|
308 | + } while ($i !== 0); |
|
309 | + |
|
310 | + return $c === 0; |
|
311 | + } |
|
312 | + |
|
313 | + /** |
|
314 | + * @param string $R |
|
315 | + * @return bool |
|
316 | + */ |
|
317 | + public static function small_order($R) |
|
318 | + { |
|
319 | + static $blacklist = array( |
|
320 | + /* 0 (order 4) */ |
|
321 | + array( |
|
322 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
323 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
324 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
325 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
326 | + ), |
|
327 | + /* 1 (order 1) */ |
|
328 | + array( |
|
329 | + 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
330 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
331 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
332 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
333 | + ), |
|
334 | + /* 2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
335 | + array( |
|
336 | + 0x26, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
337 | + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
338 | + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
339 | + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x05 |
|
340 | + ), |
|
341 | + /* 55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
342 | + array( |
|
343 | + 0xc7, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
344 | + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
345 | + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
346 | + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0x7a |
|
347 | + ), |
|
348 | + /* p-1 (order 2) */ |
|
349 | + array( |
|
350 | + 0x13, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
351 | + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
352 | + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
353 | + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x85 |
|
354 | + ), |
|
355 | + /* p (order 4) */ |
|
356 | + array( |
|
357 | + 0xb4, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
358 | + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
359 | + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
360 | + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0xfa |
|
361 | + ), |
|
362 | + /* p+1 (order 1) */ |
|
363 | + array( |
|
364 | + 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
365 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
366 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
367 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
368 | + ), |
|
369 | + /* p+2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
370 | + array( |
|
371 | + 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
372 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
373 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
374 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
375 | + ), |
|
376 | + /* p+55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
377 | + array( |
|
378 | + 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
379 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
380 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
381 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
382 | + ), |
|
383 | + /* 2p-1 (order 2) */ |
|
384 | + array( |
|
385 | + 0xd9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
386 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
387 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
388 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
389 | + ), |
|
390 | + /* 2p (order 4) */ |
|
391 | + array( |
|
392 | + 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
393 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
394 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
395 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
396 | + ), |
|
397 | + /* 2p+1 (order 1) */ |
|
398 | + array( |
|
399 | + 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
400 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
401 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
402 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
403 | + ) |
|
404 | + ); |
|
405 | + $countBlacklist = count($blacklist); |
|
406 | + |
|
407 | + for ($i = 0; $i < $countBlacklist; ++$i) { |
|
408 | + $c = 0; |
|
409 | + for ($j = 0; $j < 32; ++$j) { |
|
410 | + $c |= self::chrToInt($R[$j]) ^ $blacklist[$i][$j]; |
|
411 | + } |
|
412 | + if ($c === 0) { |
|
413 | + return true; |
|
414 | + } |
|
415 | + } |
|
416 | + return false; |
|
417 | + } |
|
418 | 418 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Ed25519', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Ed25519', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | |
@@ -19,10 +19,10 @@ discard block |
||
19 | 19 | */ |
20 | 20 | public static function keypair() |
21 | 21 | { |
22 | - $seed = random_bytes(self::SEED_BYTES); |
|
22 | + $seed = random_bytes( self::SEED_BYTES ); |
|
23 | 23 | $pk = ''; |
24 | 24 | $sk = ''; |
25 | - self::seed_keypair($pk, $sk, $seed); |
|
25 | + self::seed_keypair( $pk, $sk, $seed ); |
|
26 | 26 | return $sk . $pk; |
27 | 27 | } |
28 | 28 | |
@@ -34,14 +34,14 @@ discard block |
||
34 | 34 | * @param string $seed |
35 | 35 | * @return string |
36 | 36 | */ |
37 | - public static function seed_keypair(&$pk, &$sk, $seed) |
|
37 | + public static function seed_keypair( &$pk, &$sk, $seed ) |
|
38 | 38 | { |
39 | - if (self::strlen($seed) !== self::SEED_BYTES) { |
|
40 | - throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
|
39 | + if ( self::strlen( $seed ) !== self::SEED_BYTES ) { |
|
40 | + throw new RangeException( 'crypto_sign keypair seed must be 32 bytes long' ); |
|
41 | 41 | } |
42 | 42 | |
43 | 43 | /** @var string $pk */ |
44 | - $pk = self::publickey_from_secretkey($seed); |
|
44 | + $pk = self::publickey_from_secretkey( $seed ); |
|
45 | 45 | $sk = $seed . $pk; |
46 | 46 | return $sk; |
47 | 47 | } |
@@ -52,12 +52,12 @@ discard block |
||
52 | 52 | * @param string $keypair |
53 | 53 | * @return string |
54 | 54 | */ |
55 | - public static function secretkey($keypair) |
|
55 | + public static function secretkey( $keypair ) |
|
56 | 56 | { |
57 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
58 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
57 | + if ( self::strlen( $keypair ) !== self::KEYPAIR_BYTES ) { |
|
58 | + throw new RangeException( 'crypto_sign keypair must be 96 bytes long' ); |
|
59 | 59 | } |
60 | - return self::substr($keypair, 0, 64); |
|
60 | + return self::substr( $keypair, 0, 64 ); |
|
61 | 61 | } |
62 | 62 | |
63 | 63 | /** |
@@ -66,12 +66,12 @@ discard block |
||
66 | 66 | * @param string $keypair |
67 | 67 | * @return string |
68 | 68 | */ |
69 | - public static function publickey($keypair) |
|
69 | + public static function publickey( $keypair ) |
|
70 | 70 | { |
71 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
72 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
71 | + if ( self::strlen( $keypair ) !== self::KEYPAIR_BYTES ) { |
|
72 | + throw new RangeException( 'crypto_sign keypair must be 96 bytes long' ); |
|
73 | 73 | } |
74 | - return self::substr($keypair, 64, 32); |
|
74 | + return self::substr( $keypair, 64, 32 ); |
|
75 | 75 | } |
76 | 76 | |
77 | 77 | /** |
@@ -80,17 +80,17 @@ discard block |
||
80 | 80 | * @param string $sk |
81 | 81 | * @return string |
82 | 82 | */ |
83 | - public static function publickey_from_secretkey($sk) |
|
83 | + public static function publickey_from_secretkey( $sk ) |
|
84 | 84 | { |
85 | 85 | /** @var string $sk */ |
86 | - $sk = hash('sha512', self::substr($sk, 0, 32), true); |
|
86 | + $sk = hash( 'sha512', self::substr( $sk, 0, 32 ), true ); |
|
87 | 87 | $sk[0] = self::intToChr( |
88 | - self::chrToInt($sk[0]) & 248 |
|
88 | + self::chrToInt( $sk[0] ) & 248 |
|
89 | 89 | ); |
90 | 90 | $sk[31] = self::intToChr( |
91 | - (self::chrToInt($sk[31]) & 63) | 64 |
|
91 | + ( self::chrToInt( $sk[31] ) & 63 ) | 64 |
|
92 | 92 | ); |
93 | - return self::sk_to_pk($sk); |
|
93 | + return self::sk_to_pk( $sk ); |
|
94 | 94 | } |
95 | 95 | |
96 | 96 | /** |
@@ -99,11 +99,11 @@ discard block |
||
99 | 99 | * @param string $sk |
100 | 100 | * @return string |
101 | 101 | */ |
102 | - public static function sk_to_pk($sk) |
|
102 | + public static function sk_to_pk( $sk ) |
|
103 | 103 | { |
104 | 104 | return self::ge_p3_tobytes( |
105 | 105 | self::ge_scalarmult_base( |
106 | - self::substr($sk, 0, 32) |
|
106 | + self::substr( $sk, 0, 32 ) |
|
107 | 107 | ) |
108 | 108 | ); |
109 | 109 | } |
@@ -115,10 +115,10 @@ discard block |
||
115 | 115 | * @param string $sk |
116 | 116 | * @return string |
117 | 117 | */ |
118 | - public static function sign($message, $sk) |
|
118 | + public static function sign( $message, $sk ) |
|
119 | 119 | { |
120 | 120 | /** @var string $signature */ |
121 | - $signature = self::sign_detached($message, $sk); |
|
121 | + $signature = self::sign_detached( $message, $sk ); |
|
122 | 122 | return $signature . $message; |
123 | 123 | } |
124 | 124 | |
@@ -130,18 +130,18 @@ discard block |
||
130 | 130 | * @return string Message (without signature) |
131 | 131 | * @throws Exception |
132 | 132 | */ |
133 | - public static function sign_open($message, $pk) |
|
133 | + public static function sign_open( $message, $pk ) |
|
134 | 134 | { |
135 | 135 | /** @var string $signature */ |
136 | - $signature = self::substr($message, 0, 64); |
|
136 | + $signature = self::substr( $message, 0, 64 ); |
|
137 | 137 | |
138 | 138 | /** @var string $message */ |
139 | - $message = self::substr($message, 64); |
|
139 | + $message = self::substr( $message, 64 ); |
|
140 | 140 | |
141 | - if (self::verify_detached($signature, $message, $pk)) { |
|
141 | + if ( self::verify_detached( $signature, $message, $pk ) ) { |
|
142 | 142 | return $message; |
143 | 143 | } |
144 | - throw new Exception('Invalid signature'); |
|
144 | + throw new Exception( 'Invalid signature' ); |
|
145 | 145 | } |
146 | 146 | |
147 | 147 | /** |
@@ -151,56 +151,56 @@ discard block |
||
151 | 151 | * @param string $sk |
152 | 152 | * @return string |
153 | 153 | */ |
154 | - public static function sign_detached($message, $sk) |
|
154 | + public static function sign_detached( $message, $sk ) |
|
155 | 155 | { |
156 | 156 | # crypto_hash_sha512(az, sk, 32); |
157 | - $az = hash('sha512', self::substr($sk, 0, 32), true); |
|
157 | + $az = hash( 'sha512', self::substr( $sk, 0, 32 ), true ); |
|
158 | 158 | |
159 | 159 | # az[0] &= 248; |
160 | 160 | # az[31] &= 63; |
161 | 161 | # az[31] |= 64; |
162 | - $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); |
|
163 | - $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); |
|
162 | + $az[0] = self::intToChr( self::chrToInt( $az[0] ) & 248 ); |
|
163 | + $az[31] = self::intToChr( ( self::chrToInt( $az[31] ) & 63 ) | 64 ); |
|
164 | 164 | |
165 | 165 | # crypto_hash_sha512_init(&hs); |
166 | 166 | # crypto_hash_sha512_update(&hs, az + 32, 32); |
167 | 167 | # crypto_hash_sha512_update(&hs, m, mlen); |
168 | 168 | # crypto_hash_sha512_final(&hs, nonce); |
169 | - $hs = hash_init('sha512'); |
|
170 | - hash_update($hs, self::substr($az, 32, 32)); |
|
171 | - hash_update($hs, $message); |
|
172 | - $nonceHash = hash_final($hs, true); |
|
169 | + $hs = hash_init( 'sha512' ); |
|
170 | + hash_update( $hs, self::substr( $az, 32, 32 ) ); |
|
171 | + hash_update( $hs, $message ); |
|
172 | + $nonceHash = hash_final( $hs, true ); |
|
173 | 173 | |
174 | 174 | # memmove(sig + 32, sk + 32, 32); |
175 | - $pk = self::substr($sk, 32, 32); |
|
175 | + $pk = self::substr( $sk, 32, 32 ); |
|
176 | 176 | |
177 | 177 | # sc_reduce(nonce); |
178 | 178 | # ge_scalarmult_base(&R, nonce); |
179 | 179 | # ge_p3_tobytes(sig, &R); |
180 | - $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); |
|
180 | + $nonce = self::sc_reduce( $nonceHash ) . self::substr( $nonceHash, 32 ); |
|
181 | 181 | $sig = self::ge_p3_tobytes( |
182 | - self::ge_scalarmult_base($nonce) |
|
182 | + self::ge_scalarmult_base( $nonce ) |
|
183 | 183 | ); |
184 | 184 | |
185 | 185 | # crypto_hash_sha512_init(&hs); |
186 | 186 | # crypto_hash_sha512_update(&hs, sig, 64); |
187 | 187 | # crypto_hash_sha512_update(&hs, m, mlen); |
188 | 188 | # crypto_hash_sha512_final(&hs, hram); |
189 | - $hs = hash_init('sha512'); |
|
190 | - hash_update($hs, self::substr($sig, 0, 32)); |
|
191 | - hash_update($hs, self::substr($pk, 0, 32)); |
|
192 | - hash_update($hs, $message); |
|
193 | - $hramHash = hash_final($hs, true); |
|
189 | + $hs = hash_init( 'sha512' ); |
|
190 | + hash_update( $hs, self::substr( $sig, 0, 32 ) ); |
|
191 | + hash_update( $hs, self::substr( $pk, 0, 32 ) ); |
|
192 | + hash_update( $hs, $message ); |
|
193 | + $hramHash = hash_final( $hs, true ); |
|
194 | 194 | |
195 | 195 | # sc_reduce(hram); |
196 | 196 | # sc_muladd(sig + 32, hram, az, nonce); |
197 | - $hram = self::sc_reduce($hramHash); |
|
198 | - $sigAfter = self::sc_muladd($hram, $az, $nonce); |
|
199 | - $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); |
|
197 | + $hram = self::sc_reduce( $hramHash ); |
|
198 | + $sigAfter = self::sc_muladd( $hram, $az, $nonce ); |
|
199 | + $sig = self::substr( $sig, 0, 32 ) . self::substr( $sigAfter, 0, 32 ); |
|
200 | 200 | |
201 | 201 | try { |
202 | - ParagonIE_Sodium_Compat::memzero($az); |
|
203 | - } catch (Error $ex) { |
|
202 | + ParagonIE_Sodium_Compat::memzero( $az ); |
|
203 | + } catch ( Error $ex ) { |
|
204 | 204 | $az = null; |
205 | 205 | } |
206 | 206 | return $sig; |
@@ -215,26 +215,26 @@ discard block |
||
215 | 215 | * @return bool |
216 | 216 | * @throws Exception |
217 | 217 | */ |
218 | - public static function verify_detached($sig, $message, $pk) |
|
218 | + public static function verify_detached( $sig, $message, $pk ) |
|
219 | 219 | { |
220 | - if (self::strlen($sig) < 64) { |
|
221 | - throw new Exception('Signature is too short'); |
|
220 | + if ( self::strlen( $sig ) < 64 ) { |
|
221 | + throw new Exception( 'Signature is too short' ); |
|
222 | 222 | } |
223 | - if (self::check_S_lt_L(self::substr($sig, 32, 32))) { |
|
224 | - throw new Exception('S < L - Invalid signature'); |
|
223 | + if ( self::check_S_lt_L( self::substr( $sig, 32, 32 ) ) ) { |
|
224 | + throw new Exception( 'S < L - Invalid signature' ); |
|
225 | 225 | } |
226 | - if (self::small_order($sig)) { |
|
227 | - throw new Exception('Signature is on too small of an order'); |
|
226 | + if ( self::small_order( $sig ) ) { |
|
227 | + throw new Exception( 'Signature is on too small of an order' ); |
|
228 | 228 | } |
229 | - if ((self::chrToInt($sig[63]) & 224) !== 0) { |
|
230 | - throw new Exception('Invalid signature'); |
|
229 | + if ( ( self::chrToInt( $sig[63] ) & 224 ) !== 0 ) { |
|
230 | + throw new Exception( 'Invalid signature' ); |
|
231 | 231 | } |
232 | 232 | $d = 0; |
233 | - for ($i = 0; $i < 32; ++$i) { |
|
234 | - $d |= self::chrToInt($pk[$i]); |
|
233 | + for ( $i = 0; $i < 32; ++$i ) { |
|
234 | + $d |= self::chrToInt( $pk[$i] ); |
|
235 | 235 | } |
236 | - if ($d === 0) { |
|
237 | - throw new Exception('All zero public key'); |
|
236 | + if ( $d === 0 ) { |
|
237 | + throw new Exception( 'All zero public key' ); |
|
238 | 238 | } |
239 | 239 | |
240 | 240 | /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ |
@@ -244,34 +244,34 @@ discard block |
||
244 | 244 | ParagonIE_Sodium_Compat::$fastMult = true; |
245 | 245 | |
246 | 246 | /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ |
247 | - $A = self::ge_frombytes_negate_vartime($pk); |
|
247 | + $A = self::ge_frombytes_negate_vartime( $pk ); |
|
248 | 248 | |
249 | 249 | /** @var string $hDigest */ |
250 | 250 | $hDigest = hash( |
251 | 251 | 'sha512', |
252 | - self::substr($sig, 0, 32) . |
|
253 | - self::substr($pk, 0, 32) . |
|
252 | + self::substr( $sig, 0, 32 ) . |
|
253 | + self::substr( $pk, 0, 32 ) . |
|
254 | 254 | $message, |
255 | 255 | true |
256 | 256 | ); |
257 | 257 | |
258 | 258 | /** @var string $h */ |
259 | - $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); |
|
259 | + $h = self::sc_reduce( $hDigest ) . self::substr( $hDigest, 32 ); |
|
260 | 260 | |
261 | 261 | /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ |
262 | 262 | $R = self::ge_double_scalarmult_vartime( |
263 | 263 | $h, |
264 | 264 | $A, |
265 | - self::substr($sig, 32) |
|
265 | + self::substr( $sig, 32 ) |
|
266 | 266 | ); |
267 | 267 | |
268 | 268 | /** @var string $rcheck */ |
269 | - $rcheck = self::ge_tobytes($R); |
|
269 | + $rcheck = self::ge_tobytes( $R ); |
|
270 | 270 | |
271 | 271 | // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. |
272 | 272 | ParagonIE_Sodium_Compat::$fastMult = $orig; |
273 | 273 | |
274 | - return self::verify_32($rcheck, self::substr($sig, 0, 32)); |
|
274 | + return self::verify_32( $rcheck, self::substr( $sig, 0, 32 ) ); |
|
275 | 275 | } |
276 | 276 | |
277 | 277 | /** |
@@ -281,10 +281,10 @@ discard block |
||
281 | 281 | * @return bool |
282 | 282 | * @throws Exception |
283 | 283 | */ |
284 | - public static function check_S_lt_L($S) |
|
284 | + public static function check_S_lt_L( $S ) |
|
285 | 285 | { |
286 | - if (self::strlen($S) < 32) { |
|
287 | - throw new Exception('Signature must be 32 bytes'); |
|
286 | + if ( self::strlen( $S ) < 32 ) { |
|
287 | + throw new Exception( 'Signature must be 32 bytes' ); |
|
288 | 288 | } |
289 | 289 | static $L = array( |
290 | 290 | 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, |
@@ -298,14 +298,14 @@ discard block |
||
298 | 298 | |
299 | 299 | do { |
300 | 300 | --$i; |
301 | - $x = self::chrToInt($S[$i]); |
|
301 | + $x = self::chrToInt( $S[$i] ); |
|
302 | 302 | $c |= ( |
303 | - (($x - $L[$i]) >> 8) & $n |
|
303 | + ( ( $x - $L[$i] ) >> 8 ) & $n |
|
304 | 304 | ); |
305 | 305 | $n &= ( |
306 | - (($x ^ $L[$i]) - 1) >> 8 |
|
306 | + ( ( $x ^ $L[$i] ) - 1 ) >> 8 |
|
307 | 307 | ); |
308 | - } while ($i !== 0); |
|
308 | + } while ( $i !== 0 ); |
|
309 | 309 | |
310 | 310 | return $c === 0; |
311 | 311 | } |
@@ -314,7 +314,7 @@ discard block |
||
314 | 314 | * @param string $R |
315 | 315 | * @return bool |
316 | 316 | */ |
317 | - public static function small_order($R) |
|
317 | + public static function small_order( $R ) |
|
318 | 318 | { |
319 | 319 | static $blacklist = array( |
320 | 320 | /* 0 (order 4) */ |
@@ -402,14 +402,14 @@ discard block |
||
402 | 402 | 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
403 | 403 | ) |
404 | 404 | ); |
405 | - $countBlacklist = count($blacklist); |
|
405 | + $countBlacklist = count( $blacklist ); |
|
406 | 406 | |
407 | - for ($i = 0; $i < $countBlacklist; ++$i) { |
|
407 | + for ( $i = 0; $i < $countBlacklist; ++$i ) { |
|
408 | 408 | $c = 0; |
409 | - for ($j = 0; $j < 32; ++$j) { |
|
410 | - $c |= self::chrToInt($R[$j]) ^ $blacklist[$i][$j]; |
|
409 | + for ( $j = 0; $j < 32; ++$j ) { |
|
410 | + $c |= self::chrToInt( $R[$j] ) ^ $blacklist[$i][$j]; |
|
411 | 411 | } |
412 | - if ($c === 0) { |
|
412 | + if ( $c === 0 ) { |
|
413 | 413 | return true; |
414 | 414 | } |
415 | 415 | } |
@@ -7,8 +7,7 @@ discard block |
||
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Ed25519 |
9 | 9 | */ |
10 | -abstract class ParagonIE_Sodium_Core32_Ed25519 extends ParagonIE_Sodium_Core32_Curve25519 |
|
11 | -{ |
|
10 | +abstract class ParagonIE_Sodium_Core32_Ed25519 extends ParagonIE_Sodium_Core32_Curve25519 { |
|
12 | 11 | const KEYPAIR_BYTES = 96; |
13 | 12 | const SEED_BYTES = 32; |
14 | 13 | |
@@ -17,8 +16,7 @@ discard block |
||
17 | 16 | * |
18 | 17 | * @return string (96 bytes) |
19 | 18 | */ |
20 | - public static function keypair() |
|
21 | - { |
|
19 | + public static function keypair() { |
|
22 | 20 | $seed = random_bytes(self::SEED_BYTES); |
23 | 21 | $pk = ''; |
24 | 22 | $sk = ''; |
@@ -34,8 +32,7 @@ discard block |
||
34 | 32 | * @param string $seed |
35 | 33 | * @return string |
36 | 34 | */ |
37 | - public static function seed_keypair(&$pk, &$sk, $seed) |
|
38 | - { |
|
35 | + public static function seed_keypair(&$pk, &$sk, $seed) { |
|
39 | 36 | if (self::strlen($seed) !== self::SEED_BYTES) { |
40 | 37 | throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
41 | 38 | } |
@@ -52,8 +49,7 @@ discard block |
||
52 | 49 | * @param string $keypair |
53 | 50 | * @return string |
54 | 51 | */ |
55 | - public static function secretkey($keypair) |
|
56 | - { |
|
52 | + public static function secretkey($keypair) { |
|
57 | 53 | if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
58 | 54 | throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
59 | 55 | } |
@@ -66,8 +62,7 @@ discard block |
||
66 | 62 | * @param string $keypair |
67 | 63 | * @return string |
68 | 64 | */ |
69 | - public static function publickey($keypair) |
|
70 | - { |
|
65 | + public static function publickey($keypair) { |
|
71 | 66 | if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
72 | 67 | throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
73 | 68 | } |
@@ -80,8 +75,7 @@ discard block |
||
80 | 75 | * @param string $sk |
81 | 76 | * @return string |
82 | 77 | */ |
83 | - public static function publickey_from_secretkey($sk) |
|
84 | - { |
|
78 | + public static function publickey_from_secretkey($sk) { |
|
85 | 79 | /** @var string $sk */ |
86 | 80 | $sk = hash('sha512', self::substr($sk, 0, 32), true); |
87 | 81 | $sk[0] = self::intToChr( |
@@ -99,8 +93,7 @@ discard block |
||
99 | 93 | * @param string $sk |
100 | 94 | * @return string |
101 | 95 | */ |
102 | - public static function sk_to_pk($sk) |
|
103 | - { |
|
96 | + public static function sk_to_pk($sk) { |
|
104 | 97 | return self::ge_p3_tobytes( |
105 | 98 | self::ge_scalarmult_base( |
106 | 99 | self::substr($sk, 0, 32) |
@@ -115,8 +108,7 @@ discard block |
||
115 | 108 | * @param string $sk |
116 | 109 | * @return string |
117 | 110 | */ |
118 | - public static function sign($message, $sk) |
|
119 | - { |
|
111 | + public static function sign($message, $sk) { |
|
120 | 112 | /** @var string $signature */ |
121 | 113 | $signature = self::sign_detached($message, $sk); |
122 | 114 | return $signature . $message; |
@@ -130,8 +122,7 @@ discard block |
||
130 | 122 | * @return string Message (without signature) |
131 | 123 | * @throws Exception |
132 | 124 | */ |
133 | - public static function sign_open($message, $pk) |
|
134 | - { |
|
125 | + public static function sign_open($message, $pk) { |
|
135 | 126 | /** @var string $signature */ |
136 | 127 | $signature = self::substr($message, 0, 64); |
137 | 128 | |
@@ -151,8 +142,7 @@ discard block |
||
151 | 142 | * @param string $sk |
152 | 143 | * @return string |
153 | 144 | */ |
154 | - public static function sign_detached($message, $sk) |
|
155 | - { |
|
145 | + public static function sign_detached($message, $sk) { |
|
156 | 146 | # crypto_hash_sha512(az, sk, 32); |
157 | 147 | $az = hash('sha512', self::substr($sk, 0, 32), true); |
158 | 148 | |
@@ -215,8 +205,7 @@ discard block |
||
215 | 205 | * @return bool |
216 | 206 | * @throws Exception |
217 | 207 | */ |
218 | - public static function verify_detached($sig, $message, $pk) |
|
219 | - { |
|
208 | + public static function verify_detached($sig, $message, $pk) { |
|
220 | 209 | if (self::strlen($sig) < 64) { |
221 | 210 | throw new Exception('Signature is too short'); |
222 | 211 | } |
@@ -281,8 +270,7 @@ discard block |
||
281 | 270 | * @return bool |
282 | 271 | * @throws Exception |
283 | 272 | */ |
284 | - public static function check_S_lt_L($S) |
|
285 | - { |
|
273 | + public static function check_S_lt_L($S) { |
|
286 | 274 | if (self::strlen($S) < 32) { |
287 | 275 | throw new Exception('Signature must be 32 bytes'); |
288 | 276 | } |
@@ -314,8 +302,7 @@ discard block |
||
314 | 302 | * @param string $R |
315 | 303 | * @return bool |
316 | 304 | */ |
317 | - public static function small_order($R) |
|
318 | - { |
|
305 | + public static function small_order($R) { |
|
319 | 306 | static $blacklist = array( |
320 | 307 | /* 0 (order 4) */ |
321 | 308 | array( |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Poly1305_State', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | /** |
@@ -9,421 +9,421 @@ discard block |
||
9 | 9 | */ |
10 | 10 | class ParagonIE_Sodium_Core32_Poly1305_State extends ParagonIE_Sodium_Core32_Util |
11 | 11 | { |
12 | - /** |
|
13 | - * @var array<int, int> |
|
14 | - */ |
|
15 | - protected $buffer = array(); |
|
16 | - |
|
17 | - /** |
|
18 | - * @var bool |
|
19 | - */ |
|
20 | - protected $final = false; |
|
21 | - |
|
22 | - /** |
|
23 | - * @var array<int, ParagonIE_Sodium_Core32_Int32> |
|
24 | - */ |
|
25 | - public $h; |
|
26 | - |
|
27 | - /** |
|
28 | - * @var int |
|
29 | - */ |
|
30 | - protected $leftover = 0; |
|
31 | - |
|
32 | - /** |
|
33 | - * @var array<int, ParagonIE_Sodium_Core32_Int32> |
|
34 | - */ |
|
35 | - public $r; |
|
36 | - |
|
37 | - /** |
|
38 | - * @var array<int, ParagonIE_Sodium_Core32_Int64> |
|
39 | - */ |
|
40 | - public $pad; |
|
41 | - |
|
42 | - /** |
|
43 | - * ParagonIE_Sodium_Core32_Poly1305_State constructor. |
|
44 | - * |
|
45 | - * @internal You should not use this directly from another application |
|
46 | - * |
|
47 | - * @param string $key |
|
48 | - * @throws InvalidArgumentException |
|
49 | - */ |
|
50 | - public function __construct($key = '') |
|
51 | - { |
|
52 | - if (self::strlen($key) < 32) { |
|
53 | - throw new InvalidArgumentException( |
|
54 | - 'Poly1305 requires a 32-byte key' |
|
55 | - ); |
|
56 | - } |
|
57 | - /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */ |
|
58 | - $this->r = array( |
|
59 | - // st->r[0] = ... |
|
60 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 0, 4)) |
|
61 | - ->mask(0x3ffffff), |
|
62 | - // st->r[1] = ... |
|
63 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 3, 4)) |
|
64 | - ->shiftRight(2) |
|
65 | - ->mask(0x3ffff03), |
|
66 | - // st->r[2] = ... |
|
67 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 6, 4)) |
|
68 | - ->shiftRight(4) |
|
69 | - ->mask(0x3ffc0ff), |
|
70 | - // st->r[3] = ... |
|
71 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 9, 4)) |
|
72 | - ->shiftRight(6) |
|
73 | - ->mask(0x3f03fff), |
|
74 | - // st->r[4] = ... |
|
75 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 12, 4)) |
|
76 | - ->shiftRight(8) |
|
77 | - ->mask(0x00fffff) |
|
78 | - ); |
|
79 | - |
|
80 | - /* h = 0 */ |
|
81 | - $this->h = array( |
|
82 | - new ParagonIE_Sodium_Core32_Int32(), |
|
83 | - new ParagonIE_Sodium_Core32_Int32(), |
|
84 | - new ParagonIE_Sodium_Core32_Int32(), |
|
85 | - new ParagonIE_Sodium_Core32_Int32(), |
|
86 | - new ParagonIE_Sodium_Core32_Int32() |
|
87 | - ); |
|
88 | - |
|
89 | - /* save pad for later */ |
|
90 | - $this->pad = array( |
|
91 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 16, 4))->toInt64(), |
|
92 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 20, 4))->toInt64(), |
|
93 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 24, 4))->toInt64(), |
|
94 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 28, 4))->toInt64(), |
|
95 | - ); |
|
96 | - |
|
97 | - $this->leftover = 0; |
|
98 | - $this->final = false; |
|
99 | - } |
|
100 | - |
|
101 | - /** |
|
102 | - * @internal You should not use this directly from another application |
|
103 | - * |
|
104 | - * @param string $message |
|
105 | - * @return self |
|
106 | - */ |
|
107 | - public function update($message = '') |
|
108 | - { |
|
109 | - $bytes = self::strlen($message); |
|
110 | - |
|
111 | - /* handle leftover */ |
|
112 | - if ($this->leftover) { |
|
113 | - $want = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - $this->leftover; |
|
114 | - if ($want > $bytes) { |
|
115 | - $want = $bytes; |
|
116 | - } |
|
117 | - for ($i = 0; $i < $want; ++$i) { |
|
118 | - $mi = self::chrToInt($message[$i]); |
|
119 | - $this->buffer[$this->leftover + $i] = $mi; |
|
120 | - } |
|
121 | - // We snip off the leftmost bytes. |
|
122 | - $message = self::substr($message, $want); |
|
123 | - $bytes = self::strlen($message); |
|
124 | - $this->leftover += $want; |
|
125 | - if ($this->leftover < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
126 | - // We still don't have enough to run $this->blocks() |
|
127 | - return $this; |
|
128 | - } |
|
129 | - |
|
130 | - $this->blocks( |
|
131 | - static::intArrayToString($this->buffer), |
|
132 | - ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
133 | - ); |
|
134 | - $this->leftover = 0; |
|
135 | - } |
|
136 | - |
|
137 | - /* process full blocks */ |
|
138 | - if ($bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
139 | - $want = $bytes & ~(ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - 1); |
|
140 | - if ($want >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
141 | - $block = self::substr($message, 0, $want); |
|
142 | - if (self::strlen($block) >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
143 | - $this->blocks($block, $want); |
|
144 | - $message = self::substr($message, $want); |
|
145 | - $bytes = self::strlen($message); |
|
146 | - } |
|
147 | - } |
|
148 | - } |
|
149 | - |
|
150 | - /* store leftover */ |
|
151 | - if ($bytes) { |
|
152 | - for ($i = 0; $i < $bytes; ++$i) { |
|
153 | - $mi = self::chrToInt($message[$i]); |
|
154 | - $this->buffer[$this->leftover + $i] = $mi; |
|
155 | - } |
|
156 | - $this->leftover = (int) $this->leftover + $bytes; |
|
157 | - } |
|
158 | - return $this; |
|
159 | - } |
|
160 | - |
|
161 | - /** |
|
162 | - * @internal You should not use this directly from another application |
|
163 | - * |
|
164 | - * @param string $message |
|
165 | - * @param int $bytes |
|
166 | - * @return self |
|
167 | - */ |
|
168 | - public function blocks($message, $bytes) |
|
169 | - { |
|
170 | - if (self::strlen($message) < 16) { |
|
171 | - $message = str_pad($message, 16, "\x00", STR_PAD_RIGHT); |
|
172 | - } |
|
173 | - $hibit = ParagonIE_Sodium_Core32_Int32::fromInt($this->final ? 0 : 1 << 24); /* 1 << 128 */ |
|
174 | - $zero = new ParagonIE_Sodium_Core32_Int64(); |
|
175 | - /** |
|
176 | - * @var ParagonIE_Sodium_Core32_Int64 $d0 |
|
177 | - * @var ParagonIE_Sodium_Core32_Int64 $d1 |
|
178 | - * @var ParagonIE_Sodium_Core32_Int64 $d2 |
|
179 | - * @var ParagonIE_Sodium_Core32_Int64 $d3 |
|
180 | - * @var ParagonIE_Sodium_Core32_Int64 $d4 |
|
181 | - * @var ParagonIE_Sodium_Core32_Int64 $r0 |
|
182 | - * @var ParagonIE_Sodium_Core32_Int64 $r1 |
|
183 | - * @var ParagonIE_Sodium_Core32_Int64 $r2 |
|
184 | - * @var ParagonIE_Sodium_Core32_Int64 $r3 |
|
185 | - * @var ParagonIE_Sodium_Core32_Int64 $r4 |
|
186 | - * |
|
187 | - * @var ParagonIE_Sodium_Core32_Int32 $h0 |
|
188 | - * @var ParagonIE_Sodium_Core32_Int32 $h1 |
|
189 | - * @var ParagonIE_Sodium_Core32_Int32 $h2 |
|
190 | - * @var ParagonIE_Sodium_Core32_Int32 $h3 |
|
191 | - * @var ParagonIE_Sodium_Core32_Int32 $h4 |
|
192 | - */ |
|
193 | - $r0 = $this->r[0]->toInt64(); |
|
194 | - $r1 = $this->r[1]->toInt64(); |
|
195 | - $r2 = $this->r[2]->toInt64(); |
|
196 | - $r3 = $this->r[3]->toInt64(); |
|
197 | - $r4 = $this->r[4]->toInt64(); |
|
198 | - |
|
199 | - $s1 = $r1->toInt64()->mulInt(5); |
|
200 | - $s2 = $r2->toInt64()->mulInt(5); |
|
201 | - $s3 = $r3->toInt64()->mulInt(5); |
|
202 | - $s4 = $r4->toInt64()->mulInt(5); |
|
203 | - |
|
204 | - $h0 = $this->h[0]; |
|
205 | - $h1 = $this->h[1]; |
|
206 | - $h2 = $this->h[2]; |
|
207 | - $h3 = $this->h[3]; |
|
208 | - $h4 = $this->h[4]; |
|
209 | - |
|
210 | - while ($bytes >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { |
|
211 | - /* h += m[i] */ |
|
212 | - $h0 = $h0->addInt32( |
|
213 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 0, 4)) |
|
214 | - ->mask(0x3ffffff) |
|
215 | - ); |
|
216 | - $h1 = $h1->addInt32( |
|
217 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 3, 4)) |
|
218 | - ->shiftRight(2) |
|
219 | - ->mask(0x3ffffff) |
|
220 | - ); |
|
221 | - $h2 = $h2->addInt32( |
|
222 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 6, 4)) |
|
223 | - ->shiftRight(4) |
|
224 | - ->mask(0x3ffffff) |
|
225 | - ); |
|
226 | - $h3 = $h3->addInt32( |
|
227 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 9, 4)) |
|
228 | - ->shiftRight(6) |
|
229 | - ->mask(0x3ffffff) |
|
230 | - ); |
|
231 | - $h4 = $h4->addInt32( |
|
232 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 12, 4)) |
|
233 | - ->shiftRight(8) |
|
234 | - ->orInt32($hibit) |
|
235 | - ); |
|
236 | - |
|
237 | - /* h *= r */ |
|
238 | - $d0 = $zero |
|
239 | - ->addInt64($h0->toInt64()->mulInt64($r0)) |
|
240 | - ->addInt64($h1->toInt64()->mulInt64($s4)) |
|
241 | - ->addInt64($h2->toInt64()->mulInt64($s3)) |
|
242 | - ->addInt64($h3->toInt64()->mulInt64($s2)) |
|
243 | - ->addInt64($h4->toInt64()->mulInt64($s1)); |
|
244 | - |
|
245 | - $d1 = $zero |
|
246 | - ->addInt64($h0->toInt64()->mulInt64($r1)) |
|
247 | - ->addInt64($h1->toInt64()->mulInt64($r0)) |
|
248 | - ->addInt64($h2->toInt64()->mulInt64($s4)) |
|
249 | - ->addInt64($h3->toInt64()->mulInt64($s3)) |
|
250 | - ->addInt64($h4->toInt64()->mulInt64($s2)); |
|
251 | - |
|
252 | - $d2 = $zero |
|
253 | - ->addInt64($h0->toInt64()->mulInt64($r2)) |
|
254 | - ->addInt64($h1->toInt64()->mulInt64($r1)) |
|
255 | - ->addInt64($h2->toInt64()->mulInt64($r0)) |
|
256 | - ->addInt64($h3->toInt64()->mulInt64($s4)) |
|
257 | - ->addInt64($h4->toInt64()->mulInt64($s3)); |
|
258 | - |
|
259 | - $d3 = $zero |
|
260 | - ->addInt64($h0->toInt64()->mulInt64($r3)) |
|
261 | - ->addInt64($h1->toInt64()->mulInt64($r2)) |
|
262 | - ->addInt64($h2->toInt64()->mulInt64($r1)) |
|
263 | - ->addInt64($h3->toInt64()->mulInt64($r0)) |
|
264 | - ->addInt64($h4->toInt64()->mulInt64($s4)); |
|
265 | - |
|
266 | - $d4 = $zero |
|
267 | - ->addInt64($h0->toInt64()->mulInt64($r4)) |
|
268 | - ->addInt64($h1->toInt64()->mulInt64($r3)) |
|
269 | - ->addInt64($h2->toInt64()->mulInt64($r2)) |
|
270 | - ->addInt64($h3->toInt64()->mulInt64($r1)) |
|
271 | - ->addInt64($h4->toInt64()->mulInt64($r0)); |
|
272 | - |
|
273 | - /* (partial) h %= p */ |
|
274 | - $c = $d0->shiftRight(26); |
|
275 | - $h0 = $d0->toInt32()->mask(0x3ffffff); |
|
276 | - $d1 = $d1->addInt64($c); |
|
277 | - |
|
278 | - $c = $d1->shiftRight(26); |
|
279 | - $h1 = $d1->toInt32()->mask(0x3ffffff); |
|
280 | - $d2 = $d2->addInt64($c); |
|
281 | - |
|
282 | - $c = $d2->shiftRight(26); |
|
283 | - $h2 = $d2->toInt32()->mask(0x3ffffff); |
|
284 | - $d3 = $d3->addInt64($c); |
|
285 | - |
|
286 | - $c = $d3->shiftRight(26); |
|
287 | - $h3 = $d3->toInt32()->mask(0x3ffffff); |
|
288 | - $d4 = $d4->addInt64($c); |
|
289 | - |
|
290 | - $c = $d4->shiftRight(26); |
|
291 | - $h4 = $d4->toInt32()->mask(0x3ffffff); |
|
292 | - $h0 = $h0->addInt32($c->toInt32()->mulInt(5)); |
|
293 | - |
|
294 | - $c = $h0->shiftRight(26); |
|
295 | - $h0 = $h0->mask(0x3ffffff); |
|
296 | - $h1 = $h1->addInt32($c); |
|
297 | - |
|
298 | - // Chop off the left 32 bytes. |
|
299 | - $message = self::substr( |
|
300 | - $message, |
|
301 | - ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
302 | - ); |
|
303 | - $bytes -= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; |
|
304 | - } |
|
305 | - |
|
306 | - /** @var array<int, ParagonIE_Sodium_Core32_Int32> $h */ |
|
307 | - $this->h = array($h0, $h1, $h2, $h3, $h4); |
|
308 | - return $this; |
|
309 | - } |
|
310 | - |
|
311 | - /** |
|
312 | - * @internal You should not use this directly from another application |
|
313 | - * |
|
314 | - * @return string |
|
315 | - */ |
|
316 | - public function finish() |
|
317 | - { |
|
318 | - /* process the remaining block */ |
|
319 | - if ($this->leftover) { |
|
320 | - $i = $this->leftover; |
|
321 | - $this->buffer[$i++] = 1; |
|
322 | - for (; $i < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; ++$i) { |
|
323 | - $this->buffer[$i] = 0; |
|
324 | - } |
|
325 | - $this->final = true; |
|
326 | - $this->blocks( |
|
327 | - self::substr( |
|
328 | - static::intArrayToString($this->buffer), |
|
329 | - 0, |
|
330 | - ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
331 | - ), |
|
332 | - $b = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
333 | - ); |
|
334 | - } |
|
335 | - |
|
336 | - /** |
|
337 | - * @var ParagonIE_Sodium_Core32_Int32 $f |
|
338 | - * @var ParagonIE_Sodium_Core32_Int32 $g0 |
|
339 | - * @var ParagonIE_Sodium_Core32_Int32 $g1 |
|
340 | - * @var ParagonIE_Sodium_Core32_Int32 $g2 |
|
341 | - * @var ParagonIE_Sodium_Core32_Int32 $g3 |
|
342 | - * @var ParagonIE_Sodium_Core32_Int32 $g4 |
|
343 | - * @var ParagonIE_Sodium_Core32_Int32 $h0 |
|
344 | - * @var ParagonIE_Sodium_Core32_Int32 $h1 |
|
345 | - * @var ParagonIE_Sodium_Core32_Int32 $h2 |
|
346 | - * @var ParagonIE_Sodium_Core32_Int32 $h3 |
|
347 | - * @var ParagonIE_Sodium_Core32_Int32 $h4 |
|
348 | - */ |
|
349 | - $h0 = $this->h[0]; |
|
350 | - $h1 = $this->h[1]; |
|
351 | - $h2 = $this->h[2]; |
|
352 | - $h3 = $this->h[3]; |
|
353 | - $h4 = $this->h[4]; |
|
354 | - |
|
355 | - $c = $h1->shiftRight(26); # $c = $h1 >> 26; |
|
356 | - $h1 = $h1->mask(0x3ffffff); # $h1 &= 0x3ffffff; |
|
357 | - |
|
358 | - $h2 = $h2->addInt32($c); # $h2 += $c; |
|
359 | - $c = $h2->shiftRight(26); # $c = $h2 >> 26; |
|
360 | - $h2 = $h2->mask(0x3ffffff); # $h2 &= 0x3ffffff; |
|
361 | - |
|
362 | - $h3 = $h3->addInt32($c); # $h3 += $c; |
|
363 | - $c = $h3->shiftRight(26); # $c = $h3 >> 26; |
|
364 | - $h3 = $h3->mask(0x3ffffff); # $h3 &= 0x3ffffff; |
|
365 | - |
|
366 | - $h4 = $h4->addInt32($c); # $h4 += $c; |
|
367 | - $c = $h4->shiftRight(26); # $c = $h4 >> 26; |
|
368 | - $h4 = $h4->mask(0x3ffffff); # $h4 &= 0x3ffffff; |
|
369 | - |
|
370 | - $h0 = $h0->addInt32($c->mulInt(5)); # $h0 += self::mul($c, 5); |
|
371 | - $c = $h0->shiftRight(26); # $c = $h0 >> 26; |
|
372 | - $h0 = $h0->mask(0x3ffffff); # $h0 &= 0x3ffffff; |
|
373 | - $h1 = $h1->addInt32($c); # $h1 += $c; |
|
374 | - |
|
375 | - /* compute h + -p */ |
|
376 | - $g0 = $h0->addInt(5); |
|
377 | - $c = $g0->shiftRight(26); |
|
378 | - $g0 = $g0->mask(0x3ffffff); |
|
379 | - $g1 = $h1->addInt32($c); |
|
380 | - $c = $g1->shiftRight(26); |
|
381 | - $g1 = $g1->mask(0x3ffffff); |
|
382 | - $g2 = $h2->addInt32($c); |
|
383 | - $c = $g2->shiftRight(26); |
|
384 | - $g2 = $g2->mask(0x3ffffff); |
|
385 | - $g3 = $h3->addInt32($c); |
|
386 | - $c = $g3->shiftRight(26); |
|
387 | - $g3 = $g3->mask(0x3ffffff); |
|
388 | - $g4 = $h4->addInt32($c)->subInt(1 << 26); |
|
389 | - |
|
390 | - # $mask = ($g4 >> 31) - 1; |
|
391 | - /* select h if h < p, or h + -p if h >= p */ |
|
392 | - $mask = (int) (($g4->toInt() >> 31) + 1); |
|
393 | - |
|
394 | - $g0 = $g0->mask($mask); |
|
395 | - $g1 = $g1->mask($mask); |
|
396 | - $g2 = $g2->mask($mask); |
|
397 | - $g3 = $g3->mask($mask); |
|
398 | - $g4 = $g4->mask($mask); |
|
399 | - |
|
400 | - $mask = (~$mask) & 0xffffffff; |
|
401 | - |
|
402 | - $h0 = $h0->mask($mask)->orInt32($g0); |
|
403 | - $h1 = $h1->mask($mask)->orInt32($g1); |
|
404 | - $h2 = $h2->mask($mask)->orInt32($g2); |
|
405 | - $h3 = $h3->mask($mask)->orInt32($g3); |
|
406 | - $h4 = $h4->mask($mask)->orInt32($g4); |
|
407 | - |
|
408 | - /* h = h % (2^128) */ |
|
409 | - $h0 = $h0->orInt32($h1->shiftLeft(26)); |
|
410 | - $h1 = $h1->shiftRight(6)->orInt32($h2->shiftLeft(20)); |
|
411 | - $h2 = $h2->shiftRight(12)->orInt32($h3->shiftLeft(14)); |
|
412 | - $h3 = $h3->shiftRight(18)->orInt32($h4->shiftLeft(8)); |
|
413 | - |
|
414 | - /* mac = (h + pad) % (2^128) */ |
|
415 | - $f = $h0->toInt64()->addInt64($this->pad[0]); |
|
416 | - $h0 = $f->toInt32(); |
|
417 | - $f = $h1->toInt64()->addInt64($this->pad[1])->addInt($h0->overflow); |
|
418 | - $h1 = $f->toInt32(); |
|
419 | - $f = $h2->toInt64()->addInt64($this->pad[2])->addInt($h1->overflow); |
|
420 | - $h2 = $f->toInt32(); |
|
421 | - $f = $h3->toInt64()->addInt64($this->pad[3])->addInt($h2->overflow); |
|
422 | - $h3 = $f->toInt32(); |
|
423 | - |
|
424 | - return $h0->toReverseString() . |
|
425 | - $h1->toReverseString() . |
|
426 | - $h2->toReverseString() . |
|
427 | - $h3->toReverseString(); |
|
428 | - } |
|
12 | + /** |
|
13 | + * @var array<int, int> |
|
14 | + */ |
|
15 | + protected $buffer = array(); |
|
16 | + |
|
17 | + /** |
|
18 | + * @var bool |
|
19 | + */ |
|
20 | + protected $final = false; |
|
21 | + |
|
22 | + /** |
|
23 | + * @var array<int, ParagonIE_Sodium_Core32_Int32> |
|
24 | + */ |
|
25 | + public $h; |
|
26 | + |
|
27 | + /** |
|
28 | + * @var int |
|
29 | + */ |
|
30 | + protected $leftover = 0; |
|
31 | + |
|
32 | + /** |
|
33 | + * @var array<int, ParagonIE_Sodium_Core32_Int32> |
|
34 | + */ |
|
35 | + public $r; |
|
36 | + |
|
37 | + /** |
|
38 | + * @var array<int, ParagonIE_Sodium_Core32_Int64> |
|
39 | + */ |
|
40 | + public $pad; |
|
41 | + |
|
42 | + /** |
|
43 | + * ParagonIE_Sodium_Core32_Poly1305_State constructor. |
|
44 | + * |
|
45 | + * @internal You should not use this directly from another application |
|
46 | + * |
|
47 | + * @param string $key |
|
48 | + * @throws InvalidArgumentException |
|
49 | + */ |
|
50 | + public function __construct($key = '') |
|
51 | + { |
|
52 | + if (self::strlen($key) < 32) { |
|
53 | + throw new InvalidArgumentException( |
|
54 | + 'Poly1305 requires a 32-byte key' |
|
55 | + ); |
|
56 | + } |
|
57 | + /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */ |
|
58 | + $this->r = array( |
|
59 | + // st->r[0] = ... |
|
60 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 0, 4)) |
|
61 | + ->mask(0x3ffffff), |
|
62 | + // st->r[1] = ... |
|
63 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 3, 4)) |
|
64 | + ->shiftRight(2) |
|
65 | + ->mask(0x3ffff03), |
|
66 | + // st->r[2] = ... |
|
67 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 6, 4)) |
|
68 | + ->shiftRight(4) |
|
69 | + ->mask(0x3ffc0ff), |
|
70 | + // st->r[3] = ... |
|
71 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 9, 4)) |
|
72 | + ->shiftRight(6) |
|
73 | + ->mask(0x3f03fff), |
|
74 | + // st->r[4] = ... |
|
75 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 12, 4)) |
|
76 | + ->shiftRight(8) |
|
77 | + ->mask(0x00fffff) |
|
78 | + ); |
|
79 | + |
|
80 | + /* h = 0 */ |
|
81 | + $this->h = array( |
|
82 | + new ParagonIE_Sodium_Core32_Int32(), |
|
83 | + new ParagonIE_Sodium_Core32_Int32(), |
|
84 | + new ParagonIE_Sodium_Core32_Int32(), |
|
85 | + new ParagonIE_Sodium_Core32_Int32(), |
|
86 | + new ParagonIE_Sodium_Core32_Int32() |
|
87 | + ); |
|
88 | + |
|
89 | + /* save pad for later */ |
|
90 | + $this->pad = array( |
|
91 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 16, 4))->toInt64(), |
|
92 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 20, 4))->toInt64(), |
|
93 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 24, 4))->toInt64(), |
|
94 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 28, 4))->toInt64(), |
|
95 | + ); |
|
96 | + |
|
97 | + $this->leftover = 0; |
|
98 | + $this->final = false; |
|
99 | + } |
|
100 | + |
|
101 | + /** |
|
102 | + * @internal You should not use this directly from another application |
|
103 | + * |
|
104 | + * @param string $message |
|
105 | + * @return self |
|
106 | + */ |
|
107 | + public function update($message = '') |
|
108 | + { |
|
109 | + $bytes = self::strlen($message); |
|
110 | + |
|
111 | + /* handle leftover */ |
|
112 | + if ($this->leftover) { |
|
113 | + $want = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - $this->leftover; |
|
114 | + if ($want > $bytes) { |
|
115 | + $want = $bytes; |
|
116 | + } |
|
117 | + for ($i = 0; $i < $want; ++$i) { |
|
118 | + $mi = self::chrToInt($message[$i]); |
|
119 | + $this->buffer[$this->leftover + $i] = $mi; |
|
120 | + } |
|
121 | + // We snip off the leftmost bytes. |
|
122 | + $message = self::substr($message, $want); |
|
123 | + $bytes = self::strlen($message); |
|
124 | + $this->leftover += $want; |
|
125 | + if ($this->leftover < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
126 | + // We still don't have enough to run $this->blocks() |
|
127 | + return $this; |
|
128 | + } |
|
129 | + |
|
130 | + $this->blocks( |
|
131 | + static::intArrayToString($this->buffer), |
|
132 | + ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
133 | + ); |
|
134 | + $this->leftover = 0; |
|
135 | + } |
|
136 | + |
|
137 | + /* process full blocks */ |
|
138 | + if ($bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
139 | + $want = $bytes & ~(ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - 1); |
|
140 | + if ($want >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
141 | + $block = self::substr($message, 0, $want); |
|
142 | + if (self::strlen($block) >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
143 | + $this->blocks($block, $want); |
|
144 | + $message = self::substr($message, $want); |
|
145 | + $bytes = self::strlen($message); |
|
146 | + } |
|
147 | + } |
|
148 | + } |
|
149 | + |
|
150 | + /* store leftover */ |
|
151 | + if ($bytes) { |
|
152 | + for ($i = 0; $i < $bytes; ++$i) { |
|
153 | + $mi = self::chrToInt($message[$i]); |
|
154 | + $this->buffer[$this->leftover + $i] = $mi; |
|
155 | + } |
|
156 | + $this->leftover = (int) $this->leftover + $bytes; |
|
157 | + } |
|
158 | + return $this; |
|
159 | + } |
|
160 | + |
|
161 | + /** |
|
162 | + * @internal You should not use this directly from another application |
|
163 | + * |
|
164 | + * @param string $message |
|
165 | + * @param int $bytes |
|
166 | + * @return self |
|
167 | + */ |
|
168 | + public function blocks($message, $bytes) |
|
169 | + { |
|
170 | + if (self::strlen($message) < 16) { |
|
171 | + $message = str_pad($message, 16, "\x00", STR_PAD_RIGHT); |
|
172 | + } |
|
173 | + $hibit = ParagonIE_Sodium_Core32_Int32::fromInt($this->final ? 0 : 1 << 24); /* 1 << 128 */ |
|
174 | + $zero = new ParagonIE_Sodium_Core32_Int64(); |
|
175 | + /** |
|
176 | + * @var ParagonIE_Sodium_Core32_Int64 $d0 |
|
177 | + * @var ParagonIE_Sodium_Core32_Int64 $d1 |
|
178 | + * @var ParagonIE_Sodium_Core32_Int64 $d2 |
|
179 | + * @var ParagonIE_Sodium_Core32_Int64 $d3 |
|
180 | + * @var ParagonIE_Sodium_Core32_Int64 $d4 |
|
181 | + * @var ParagonIE_Sodium_Core32_Int64 $r0 |
|
182 | + * @var ParagonIE_Sodium_Core32_Int64 $r1 |
|
183 | + * @var ParagonIE_Sodium_Core32_Int64 $r2 |
|
184 | + * @var ParagonIE_Sodium_Core32_Int64 $r3 |
|
185 | + * @var ParagonIE_Sodium_Core32_Int64 $r4 |
|
186 | + * |
|
187 | + * @var ParagonIE_Sodium_Core32_Int32 $h0 |
|
188 | + * @var ParagonIE_Sodium_Core32_Int32 $h1 |
|
189 | + * @var ParagonIE_Sodium_Core32_Int32 $h2 |
|
190 | + * @var ParagonIE_Sodium_Core32_Int32 $h3 |
|
191 | + * @var ParagonIE_Sodium_Core32_Int32 $h4 |
|
192 | + */ |
|
193 | + $r0 = $this->r[0]->toInt64(); |
|
194 | + $r1 = $this->r[1]->toInt64(); |
|
195 | + $r2 = $this->r[2]->toInt64(); |
|
196 | + $r3 = $this->r[3]->toInt64(); |
|
197 | + $r4 = $this->r[4]->toInt64(); |
|
198 | + |
|
199 | + $s1 = $r1->toInt64()->mulInt(5); |
|
200 | + $s2 = $r2->toInt64()->mulInt(5); |
|
201 | + $s3 = $r3->toInt64()->mulInt(5); |
|
202 | + $s4 = $r4->toInt64()->mulInt(5); |
|
203 | + |
|
204 | + $h0 = $this->h[0]; |
|
205 | + $h1 = $this->h[1]; |
|
206 | + $h2 = $this->h[2]; |
|
207 | + $h3 = $this->h[3]; |
|
208 | + $h4 = $this->h[4]; |
|
209 | + |
|
210 | + while ($bytes >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { |
|
211 | + /* h += m[i] */ |
|
212 | + $h0 = $h0->addInt32( |
|
213 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 0, 4)) |
|
214 | + ->mask(0x3ffffff) |
|
215 | + ); |
|
216 | + $h1 = $h1->addInt32( |
|
217 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 3, 4)) |
|
218 | + ->shiftRight(2) |
|
219 | + ->mask(0x3ffffff) |
|
220 | + ); |
|
221 | + $h2 = $h2->addInt32( |
|
222 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 6, 4)) |
|
223 | + ->shiftRight(4) |
|
224 | + ->mask(0x3ffffff) |
|
225 | + ); |
|
226 | + $h3 = $h3->addInt32( |
|
227 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 9, 4)) |
|
228 | + ->shiftRight(6) |
|
229 | + ->mask(0x3ffffff) |
|
230 | + ); |
|
231 | + $h4 = $h4->addInt32( |
|
232 | + ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 12, 4)) |
|
233 | + ->shiftRight(8) |
|
234 | + ->orInt32($hibit) |
|
235 | + ); |
|
236 | + |
|
237 | + /* h *= r */ |
|
238 | + $d0 = $zero |
|
239 | + ->addInt64($h0->toInt64()->mulInt64($r0)) |
|
240 | + ->addInt64($h1->toInt64()->mulInt64($s4)) |
|
241 | + ->addInt64($h2->toInt64()->mulInt64($s3)) |
|
242 | + ->addInt64($h3->toInt64()->mulInt64($s2)) |
|
243 | + ->addInt64($h4->toInt64()->mulInt64($s1)); |
|
244 | + |
|
245 | + $d1 = $zero |
|
246 | + ->addInt64($h0->toInt64()->mulInt64($r1)) |
|
247 | + ->addInt64($h1->toInt64()->mulInt64($r0)) |
|
248 | + ->addInt64($h2->toInt64()->mulInt64($s4)) |
|
249 | + ->addInt64($h3->toInt64()->mulInt64($s3)) |
|
250 | + ->addInt64($h4->toInt64()->mulInt64($s2)); |
|
251 | + |
|
252 | + $d2 = $zero |
|
253 | + ->addInt64($h0->toInt64()->mulInt64($r2)) |
|
254 | + ->addInt64($h1->toInt64()->mulInt64($r1)) |
|
255 | + ->addInt64($h2->toInt64()->mulInt64($r0)) |
|
256 | + ->addInt64($h3->toInt64()->mulInt64($s4)) |
|
257 | + ->addInt64($h4->toInt64()->mulInt64($s3)); |
|
258 | + |
|
259 | + $d3 = $zero |
|
260 | + ->addInt64($h0->toInt64()->mulInt64($r3)) |
|
261 | + ->addInt64($h1->toInt64()->mulInt64($r2)) |
|
262 | + ->addInt64($h2->toInt64()->mulInt64($r1)) |
|
263 | + ->addInt64($h3->toInt64()->mulInt64($r0)) |
|
264 | + ->addInt64($h4->toInt64()->mulInt64($s4)); |
|
265 | + |
|
266 | + $d4 = $zero |
|
267 | + ->addInt64($h0->toInt64()->mulInt64($r4)) |
|
268 | + ->addInt64($h1->toInt64()->mulInt64($r3)) |
|
269 | + ->addInt64($h2->toInt64()->mulInt64($r2)) |
|
270 | + ->addInt64($h3->toInt64()->mulInt64($r1)) |
|
271 | + ->addInt64($h4->toInt64()->mulInt64($r0)); |
|
272 | + |
|
273 | + /* (partial) h %= p */ |
|
274 | + $c = $d0->shiftRight(26); |
|
275 | + $h0 = $d0->toInt32()->mask(0x3ffffff); |
|
276 | + $d1 = $d1->addInt64($c); |
|
277 | + |
|
278 | + $c = $d1->shiftRight(26); |
|
279 | + $h1 = $d1->toInt32()->mask(0x3ffffff); |
|
280 | + $d2 = $d2->addInt64($c); |
|
281 | + |
|
282 | + $c = $d2->shiftRight(26); |
|
283 | + $h2 = $d2->toInt32()->mask(0x3ffffff); |
|
284 | + $d3 = $d3->addInt64($c); |
|
285 | + |
|
286 | + $c = $d3->shiftRight(26); |
|
287 | + $h3 = $d3->toInt32()->mask(0x3ffffff); |
|
288 | + $d4 = $d4->addInt64($c); |
|
289 | + |
|
290 | + $c = $d4->shiftRight(26); |
|
291 | + $h4 = $d4->toInt32()->mask(0x3ffffff); |
|
292 | + $h0 = $h0->addInt32($c->toInt32()->mulInt(5)); |
|
293 | + |
|
294 | + $c = $h0->shiftRight(26); |
|
295 | + $h0 = $h0->mask(0x3ffffff); |
|
296 | + $h1 = $h1->addInt32($c); |
|
297 | + |
|
298 | + // Chop off the left 32 bytes. |
|
299 | + $message = self::substr( |
|
300 | + $message, |
|
301 | + ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
302 | + ); |
|
303 | + $bytes -= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; |
|
304 | + } |
|
305 | + |
|
306 | + /** @var array<int, ParagonIE_Sodium_Core32_Int32> $h */ |
|
307 | + $this->h = array($h0, $h1, $h2, $h3, $h4); |
|
308 | + return $this; |
|
309 | + } |
|
310 | + |
|
311 | + /** |
|
312 | + * @internal You should not use this directly from another application |
|
313 | + * |
|
314 | + * @return string |
|
315 | + */ |
|
316 | + public function finish() |
|
317 | + { |
|
318 | + /* process the remaining block */ |
|
319 | + if ($this->leftover) { |
|
320 | + $i = $this->leftover; |
|
321 | + $this->buffer[$i++] = 1; |
|
322 | + for (; $i < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; ++$i) { |
|
323 | + $this->buffer[$i] = 0; |
|
324 | + } |
|
325 | + $this->final = true; |
|
326 | + $this->blocks( |
|
327 | + self::substr( |
|
328 | + static::intArrayToString($this->buffer), |
|
329 | + 0, |
|
330 | + ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
331 | + ), |
|
332 | + $b = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
|
333 | + ); |
|
334 | + } |
|
335 | + |
|
336 | + /** |
|
337 | + * @var ParagonIE_Sodium_Core32_Int32 $f |
|
338 | + * @var ParagonIE_Sodium_Core32_Int32 $g0 |
|
339 | + * @var ParagonIE_Sodium_Core32_Int32 $g1 |
|
340 | + * @var ParagonIE_Sodium_Core32_Int32 $g2 |
|
341 | + * @var ParagonIE_Sodium_Core32_Int32 $g3 |
|
342 | + * @var ParagonIE_Sodium_Core32_Int32 $g4 |
|
343 | + * @var ParagonIE_Sodium_Core32_Int32 $h0 |
|
344 | + * @var ParagonIE_Sodium_Core32_Int32 $h1 |
|
345 | + * @var ParagonIE_Sodium_Core32_Int32 $h2 |
|
346 | + * @var ParagonIE_Sodium_Core32_Int32 $h3 |
|
347 | + * @var ParagonIE_Sodium_Core32_Int32 $h4 |
|
348 | + */ |
|
349 | + $h0 = $this->h[0]; |
|
350 | + $h1 = $this->h[1]; |
|
351 | + $h2 = $this->h[2]; |
|
352 | + $h3 = $this->h[3]; |
|
353 | + $h4 = $this->h[4]; |
|
354 | + |
|
355 | + $c = $h1->shiftRight(26); # $c = $h1 >> 26; |
|
356 | + $h1 = $h1->mask(0x3ffffff); # $h1 &= 0x3ffffff; |
|
357 | + |
|
358 | + $h2 = $h2->addInt32($c); # $h2 += $c; |
|
359 | + $c = $h2->shiftRight(26); # $c = $h2 >> 26; |
|
360 | + $h2 = $h2->mask(0x3ffffff); # $h2 &= 0x3ffffff; |
|
361 | + |
|
362 | + $h3 = $h3->addInt32($c); # $h3 += $c; |
|
363 | + $c = $h3->shiftRight(26); # $c = $h3 >> 26; |
|
364 | + $h3 = $h3->mask(0x3ffffff); # $h3 &= 0x3ffffff; |
|
365 | + |
|
366 | + $h4 = $h4->addInt32($c); # $h4 += $c; |
|
367 | + $c = $h4->shiftRight(26); # $c = $h4 >> 26; |
|
368 | + $h4 = $h4->mask(0x3ffffff); # $h4 &= 0x3ffffff; |
|
369 | + |
|
370 | + $h0 = $h0->addInt32($c->mulInt(5)); # $h0 += self::mul($c, 5); |
|
371 | + $c = $h0->shiftRight(26); # $c = $h0 >> 26; |
|
372 | + $h0 = $h0->mask(0x3ffffff); # $h0 &= 0x3ffffff; |
|
373 | + $h1 = $h1->addInt32($c); # $h1 += $c; |
|
374 | + |
|
375 | + /* compute h + -p */ |
|
376 | + $g0 = $h0->addInt(5); |
|
377 | + $c = $g0->shiftRight(26); |
|
378 | + $g0 = $g0->mask(0x3ffffff); |
|
379 | + $g1 = $h1->addInt32($c); |
|
380 | + $c = $g1->shiftRight(26); |
|
381 | + $g1 = $g1->mask(0x3ffffff); |
|
382 | + $g2 = $h2->addInt32($c); |
|
383 | + $c = $g2->shiftRight(26); |
|
384 | + $g2 = $g2->mask(0x3ffffff); |
|
385 | + $g3 = $h3->addInt32($c); |
|
386 | + $c = $g3->shiftRight(26); |
|
387 | + $g3 = $g3->mask(0x3ffffff); |
|
388 | + $g4 = $h4->addInt32($c)->subInt(1 << 26); |
|
389 | + |
|
390 | + # $mask = ($g4 >> 31) - 1; |
|
391 | + /* select h if h < p, or h + -p if h >= p */ |
|
392 | + $mask = (int) (($g4->toInt() >> 31) + 1); |
|
393 | + |
|
394 | + $g0 = $g0->mask($mask); |
|
395 | + $g1 = $g1->mask($mask); |
|
396 | + $g2 = $g2->mask($mask); |
|
397 | + $g3 = $g3->mask($mask); |
|
398 | + $g4 = $g4->mask($mask); |
|
399 | + |
|
400 | + $mask = (~$mask) & 0xffffffff; |
|
401 | + |
|
402 | + $h0 = $h0->mask($mask)->orInt32($g0); |
|
403 | + $h1 = $h1->mask($mask)->orInt32($g1); |
|
404 | + $h2 = $h2->mask($mask)->orInt32($g2); |
|
405 | + $h3 = $h3->mask($mask)->orInt32($g3); |
|
406 | + $h4 = $h4->mask($mask)->orInt32($g4); |
|
407 | + |
|
408 | + /* h = h % (2^128) */ |
|
409 | + $h0 = $h0->orInt32($h1->shiftLeft(26)); |
|
410 | + $h1 = $h1->shiftRight(6)->orInt32($h2->shiftLeft(20)); |
|
411 | + $h2 = $h2->shiftRight(12)->orInt32($h3->shiftLeft(14)); |
|
412 | + $h3 = $h3->shiftRight(18)->orInt32($h4->shiftLeft(8)); |
|
413 | + |
|
414 | + /* mac = (h + pad) % (2^128) */ |
|
415 | + $f = $h0->toInt64()->addInt64($this->pad[0]); |
|
416 | + $h0 = $f->toInt32(); |
|
417 | + $f = $h1->toInt64()->addInt64($this->pad[1])->addInt($h0->overflow); |
|
418 | + $h1 = $f->toInt32(); |
|
419 | + $f = $h2->toInt64()->addInt64($this->pad[2])->addInt($h1->overflow); |
|
420 | + $h2 = $f->toInt32(); |
|
421 | + $f = $h3->toInt64()->addInt64($this->pad[3])->addInt($h2->overflow); |
|
422 | + $h3 = $f->toInt32(); |
|
423 | + |
|
424 | + return $h0->toReverseString() . |
|
425 | + $h1->toReverseString() . |
|
426 | + $h2->toReverseString() . |
|
427 | + $h3->toReverseString(); |
|
428 | + } |
|
429 | 429 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Poly1305_State', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Poly1305_State', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | |
@@ -47,9 +47,9 @@ discard block |
||
47 | 47 | * @param string $key |
48 | 48 | * @throws InvalidArgumentException |
49 | 49 | */ |
50 | - public function __construct($key = '') |
|
50 | + public function __construct( $key = '' ) |
|
51 | 51 | { |
52 | - if (self::strlen($key) < 32) { |
|
52 | + if ( self::strlen( $key ) < 32 ) { |
|
53 | 53 | throw new InvalidArgumentException( |
54 | 54 | 'Poly1305 requires a 32-byte key' |
55 | 55 | ); |
@@ -57,24 +57,24 @@ discard block |
||
57 | 57 | /* r &= 0xffffffc0ffffffc0ffffffc0fffffff */ |
58 | 58 | $this->r = array( |
59 | 59 | // st->r[0] = ... |
60 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 0, 4)) |
|
61 | - ->mask(0x3ffffff), |
|
60 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 0, 4 ) ) |
|
61 | + ->mask( 0x3ffffff ), |
|
62 | 62 | // st->r[1] = ... |
63 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 3, 4)) |
|
64 | - ->shiftRight(2) |
|
65 | - ->mask(0x3ffff03), |
|
63 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 3, 4 ) ) |
|
64 | + ->shiftRight( 2 ) |
|
65 | + ->mask( 0x3ffff03 ), |
|
66 | 66 | // st->r[2] = ... |
67 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 6, 4)) |
|
68 | - ->shiftRight(4) |
|
69 | - ->mask(0x3ffc0ff), |
|
67 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 6, 4 ) ) |
|
68 | + ->shiftRight( 4 ) |
|
69 | + ->mask( 0x3ffc0ff ), |
|
70 | 70 | // st->r[3] = ... |
71 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 9, 4)) |
|
72 | - ->shiftRight(6) |
|
73 | - ->mask(0x3f03fff), |
|
71 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 9, 4 ) ) |
|
72 | + ->shiftRight( 6 ) |
|
73 | + ->mask( 0x3f03fff ), |
|
74 | 74 | // st->r[4] = ... |
75 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 12, 4)) |
|
76 | - ->shiftRight(8) |
|
77 | - ->mask(0x00fffff) |
|
75 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 12, 4 ) ) |
|
76 | + ->shiftRight( 8 ) |
|
77 | + ->mask( 0x00fffff ) |
|
78 | 78 | ); |
79 | 79 | |
80 | 80 | /* h = 0 */ |
@@ -88,10 +88,10 @@ discard block |
||
88 | 88 | |
89 | 89 | /* save pad for later */ |
90 | 90 | $this->pad = array( |
91 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 16, 4))->toInt64(), |
|
92 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 20, 4))->toInt64(), |
|
93 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 24, 4))->toInt64(), |
|
94 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 28, 4))->toInt64(), |
|
91 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 16, 4 ) )->toInt64(), |
|
92 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 20, 4 ) )->toInt64(), |
|
93 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 24, 4 ) )->toInt64(), |
|
94 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $key, 28, 4 ) )->toInt64(), |
|
95 | 95 | ); |
96 | 96 | |
97 | 97 | $this->leftover = 0; |
@@ -104,53 +104,53 @@ discard block |
||
104 | 104 | * @param string $message |
105 | 105 | * @return self |
106 | 106 | */ |
107 | - public function update($message = '') |
|
107 | + public function update( $message = '' ) |
|
108 | 108 | { |
109 | - $bytes = self::strlen($message); |
|
109 | + $bytes = self::strlen( $message ); |
|
110 | 110 | |
111 | 111 | /* handle leftover */ |
112 | - if ($this->leftover) { |
|
112 | + if ( $this->leftover ) { |
|
113 | 113 | $want = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - $this->leftover; |
114 | - if ($want > $bytes) { |
|
114 | + if ( $want > $bytes ) { |
|
115 | 115 | $want = $bytes; |
116 | 116 | } |
117 | - for ($i = 0; $i < $want; ++$i) { |
|
118 | - $mi = self::chrToInt($message[$i]); |
|
117 | + for ( $i = 0; $i < $want; ++$i ) { |
|
118 | + $mi = self::chrToInt( $message[$i] ); |
|
119 | 119 | $this->buffer[$this->leftover + $i] = $mi; |
120 | 120 | } |
121 | 121 | // We snip off the leftmost bytes. |
122 | - $message = self::substr($message, $want); |
|
123 | - $bytes = self::strlen($message); |
|
122 | + $message = self::substr( $message, $want ); |
|
123 | + $bytes = self::strlen( $message ); |
|
124 | 124 | $this->leftover += $want; |
125 | - if ($this->leftover < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
125 | + if ( $this->leftover < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE ) { |
|
126 | 126 | // We still don't have enough to run $this->blocks() |
127 | 127 | return $this; |
128 | 128 | } |
129 | 129 | |
130 | 130 | $this->blocks( |
131 | - static::intArrayToString($this->buffer), |
|
131 | + static::intArrayToString( $this->buffer ), |
|
132 | 132 | ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
133 | 133 | ); |
134 | 134 | $this->leftover = 0; |
135 | 135 | } |
136 | 136 | |
137 | 137 | /* process full blocks */ |
138 | - if ($bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
139 | - $want = $bytes & ~(ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - 1); |
|
140 | - if ($want >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
141 | - $block = self::substr($message, 0, $want); |
|
142 | - if (self::strlen($block) >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) { |
|
143 | - $this->blocks($block, $want); |
|
144 | - $message = self::substr($message, $want); |
|
145 | - $bytes = self::strlen($message); |
|
138 | + if ( $bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE ) { |
|
139 | + $want = $bytes & ~( ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - 1 ); |
|
140 | + if ( $want >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE ) { |
|
141 | + $block = self::substr( $message, 0, $want ); |
|
142 | + if ( self::strlen( $block ) >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE ) { |
|
143 | + $this->blocks( $block, $want ); |
|
144 | + $message = self::substr( $message, $want ); |
|
145 | + $bytes = self::strlen( $message ); |
|
146 | 146 | } |
147 | 147 | } |
148 | 148 | } |
149 | 149 | |
150 | 150 | /* store leftover */ |
151 | - if ($bytes) { |
|
152 | - for ($i = 0; $i < $bytes; ++$i) { |
|
153 | - $mi = self::chrToInt($message[$i]); |
|
151 | + if ( $bytes ) { |
|
152 | + for ( $i = 0; $i < $bytes; ++$i ) { |
|
153 | + $mi = self::chrToInt( $message[$i] ); |
|
154 | 154 | $this->buffer[$this->leftover + $i] = $mi; |
155 | 155 | } |
156 | 156 | $this->leftover = (int) $this->leftover + $bytes; |
@@ -165,12 +165,12 @@ discard block |
||
165 | 165 | * @param int $bytes |
166 | 166 | * @return self |
167 | 167 | */ |
168 | - public function blocks($message, $bytes) |
|
168 | + public function blocks( $message, $bytes ) |
|
169 | 169 | { |
170 | - if (self::strlen($message) < 16) { |
|
171 | - $message = str_pad($message, 16, "\x00", STR_PAD_RIGHT); |
|
170 | + if ( self::strlen( $message ) < 16 ) { |
|
171 | + $message = str_pad( $message, 16, "\x00", STR_PAD_RIGHT ); |
|
172 | 172 | } |
173 | - $hibit = ParagonIE_Sodium_Core32_Int32::fromInt($this->final ? 0 : 1 << 24); /* 1 << 128 */ |
|
173 | + $hibit = ParagonIE_Sodium_Core32_Int32::fromInt( $this->final ? 0 : 1 << 24 ); /* 1 << 128 */ |
|
174 | 174 | $zero = new ParagonIE_Sodium_Core32_Int64(); |
175 | 175 | /** |
176 | 176 | * @var ParagonIE_Sodium_Core32_Int64 $d0 |
@@ -196,10 +196,10 @@ discard block |
||
196 | 196 | $r3 = $this->r[3]->toInt64(); |
197 | 197 | $r4 = $this->r[4]->toInt64(); |
198 | 198 | |
199 | - $s1 = $r1->toInt64()->mulInt(5); |
|
200 | - $s2 = $r2->toInt64()->mulInt(5); |
|
201 | - $s3 = $r3->toInt64()->mulInt(5); |
|
202 | - $s4 = $r4->toInt64()->mulInt(5); |
|
199 | + $s1 = $r1->toInt64()->mulInt( 5 ); |
|
200 | + $s2 = $r2->toInt64()->mulInt( 5 ); |
|
201 | + $s3 = $r3->toInt64()->mulInt( 5 ); |
|
202 | + $s4 = $r4->toInt64()->mulInt( 5 ); |
|
203 | 203 | |
204 | 204 | $h0 = $this->h[0]; |
205 | 205 | $h1 = $this->h[1]; |
@@ -207,93 +207,93 @@ discard block |
||
207 | 207 | $h3 = $this->h[3]; |
208 | 208 | $h4 = $this->h[4]; |
209 | 209 | |
210 | - while ($bytes >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE) { |
|
210 | + while ( $bytes >= ParagonIE_Sodium_Core_Poly1305::BLOCK_SIZE ) { |
|
211 | 211 | /* h += m[i] */ |
212 | 212 | $h0 = $h0->addInt32( |
213 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 0, 4)) |
|
214 | - ->mask(0x3ffffff) |
|
213 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $message, 0, 4 ) ) |
|
214 | + ->mask( 0x3ffffff ) |
|
215 | 215 | ); |
216 | 216 | $h1 = $h1->addInt32( |
217 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 3, 4)) |
|
218 | - ->shiftRight(2) |
|
219 | - ->mask(0x3ffffff) |
|
217 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $message, 3, 4 ) ) |
|
218 | + ->shiftRight( 2 ) |
|
219 | + ->mask( 0x3ffffff ) |
|
220 | 220 | ); |
221 | 221 | $h2 = $h2->addInt32( |
222 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 6, 4)) |
|
223 | - ->shiftRight(4) |
|
224 | - ->mask(0x3ffffff) |
|
222 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $message, 6, 4 ) ) |
|
223 | + ->shiftRight( 4 ) |
|
224 | + ->mask( 0x3ffffff ) |
|
225 | 225 | ); |
226 | 226 | $h3 = $h3->addInt32( |
227 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 9, 4)) |
|
228 | - ->shiftRight(6) |
|
229 | - ->mask(0x3ffffff) |
|
227 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $message, 9, 4 ) ) |
|
228 | + ->shiftRight( 6 ) |
|
229 | + ->mask( 0x3ffffff ) |
|
230 | 230 | ); |
231 | 231 | $h4 = $h4->addInt32( |
232 | - ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 12, 4)) |
|
233 | - ->shiftRight(8) |
|
234 | - ->orInt32($hibit) |
|
232 | + ParagonIE_Sodium_Core32_Int32::fromReverseString( self::substr( $message, 12, 4 ) ) |
|
233 | + ->shiftRight( 8 ) |
|
234 | + ->orInt32( $hibit ) |
|
235 | 235 | ); |
236 | 236 | |
237 | 237 | /* h *= r */ |
238 | 238 | $d0 = $zero |
239 | - ->addInt64($h0->toInt64()->mulInt64($r0)) |
|
240 | - ->addInt64($h1->toInt64()->mulInt64($s4)) |
|
241 | - ->addInt64($h2->toInt64()->mulInt64($s3)) |
|
242 | - ->addInt64($h3->toInt64()->mulInt64($s2)) |
|
243 | - ->addInt64($h4->toInt64()->mulInt64($s1)); |
|
239 | + ->addInt64( $h0->toInt64()->mulInt64( $r0 ) ) |
|
240 | + ->addInt64( $h1->toInt64()->mulInt64( $s4 ) ) |
|
241 | + ->addInt64( $h2->toInt64()->mulInt64( $s3 ) ) |
|
242 | + ->addInt64( $h3->toInt64()->mulInt64( $s2 ) ) |
|
243 | + ->addInt64( $h4->toInt64()->mulInt64( $s1 ) ); |
|
244 | 244 | |
245 | 245 | $d1 = $zero |
246 | - ->addInt64($h0->toInt64()->mulInt64($r1)) |
|
247 | - ->addInt64($h1->toInt64()->mulInt64($r0)) |
|
248 | - ->addInt64($h2->toInt64()->mulInt64($s4)) |
|
249 | - ->addInt64($h3->toInt64()->mulInt64($s3)) |
|
250 | - ->addInt64($h4->toInt64()->mulInt64($s2)); |
|
246 | + ->addInt64( $h0->toInt64()->mulInt64( $r1 ) ) |
|
247 | + ->addInt64( $h1->toInt64()->mulInt64( $r0 ) ) |
|
248 | + ->addInt64( $h2->toInt64()->mulInt64( $s4 ) ) |
|
249 | + ->addInt64( $h3->toInt64()->mulInt64( $s3 ) ) |
|
250 | + ->addInt64( $h4->toInt64()->mulInt64( $s2 ) ); |
|
251 | 251 | |
252 | 252 | $d2 = $zero |
253 | - ->addInt64($h0->toInt64()->mulInt64($r2)) |
|
254 | - ->addInt64($h1->toInt64()->mulInt64($r1)) |
|
255 | - ->addInt64($h2->toInt64()->mulInt64($r0)) |
|
256 | - ->addInt64($h3->toInt64()->mulInt64($s4)) |
|
257 | - ->addInt64($h4->toInt64()->mulInt64($s3)); |
|
253 | + ->addInt64( $h0->toInt64()->mulInt64( $r2 ) ) |
|
254 | + ->addInt64( $h1->toInt64()->mulInt64( $r1 ) ) |
|
255 | + ->addInt64( $h2->toInt64()->mulInt64( $r0 ) ) |
|
256 | + ->addInt64( $h3->toInt64()->mulInt64( $s4 ) ) |
|
257 | + ->addInt64( $h4->toInt64()->mulInt64( $s3 ) ); |
|
258 | 258 | |
259 | 259 | $d3 = $zero |
260 | - ->addInt64($h0->toInt64()->mulInt64($r3)) |
|
261 | - ->addInt64($h1->toInt64()->mulInt64($r2)) |
|
262 | - ->addInt64($h2->toInt64()->mulInt64($r1)) |
|
263 | - ->addInt64($h3->toInt64()->mulInt64($r0)) |
|
264 | - ->addInt64($h4->toInt64()->mulInt64($s4)); |
|
260 | + ->addInt64( $h0->toInt64()->mulInt64( $r3 ) ) |
|
261 | + ->addInt64( $h1->toInt64()->mulInt64( $r2 ) ) |
|
262 | + ->addInt64( $h2->toInt64()->mulInt64( $r1 ) ) |
|
263 | + ->addInt64( $h3->toInt64()->mulInt64( $r0 ) ) |
|
264 | + ->addInt64( $h4->toInt64()->mulInt64( $s4 ) ); |
|
265 | 265 | |
266 | 266 | $d4 = $zero |
267 | - ->addInt64($h0->toInt64()->mulInt64($r4)) |
|
268 | - ->addInt64($h1->toInt64()->mulInt64($r3)) |
|
269 | - ->addInt64($h2->toInt64()->mulInt64($r2)) |
|
270 | - ->addInt64($h3->toInt64()->mulInt64($r1)) |
|
271 | - ->addInt64($h4->toInt64()->mulInt64($r0)); |
|
267 | + ->addInt64( $h0->toInt64()->mulInt64( $r4 ) ) |
|
268 | + ->addInt64( $h1->toInt64()->mulInt64( $r3 ) ) |
|
269 | + ->addInt64( $h2->toInt64()->mulInt64( $r2 ) ) |
|
270 | + ->addInt64( $h3->toInt64()->mulInt64( $r1 ) ) |
|
271 | + ->addInt64( $h4->toInt64()->mulInt64( $r0 ) ); |
|
272 | 272 | |
273 | 273 | /* (partial) h %= p */ |
274 | - $c = $d0->shiftRight(26); |
|
275 | - $h0 = $d0->toInt32()->mask(0x3ffffff); |
|
276 | - $d1 = $d1->addInt64($c); |
|
274 | + $c = $d0->shiftRight( 26 ); |
|
275 | + $h0 = $d0->toInt32()->mask( 0x3ffffff ); |
|
276 | + $d1 = $d1->addInt64( $c ); |
|
277 | 277 | |
278 | - $c = $d1->shiftRight(26); |
|
279 | - $h1 = $d1->toInt32()->mask(0x3ffffff); |
|
280 | - $d2 = $d2->addInt64($c); |
|
278 | + $c = $d1->shiftRight( 26 ); |
|
279 | + $h1 = $d1->toInt32()->mask( 0x3ffffff ); |
|
280 | + $d2 = $d2->addInt64( $c ); |
|
281 | 281 | |
282 | - $c = $d2->shiftRight(26); |
|
283 | - $h2 = $d2->toInt32()->mask(0x3ffffff); |
|
284 | - $d3 = $d3->addInt64($c); |
|
282 | + $c = $d2->shiftRight( 26 ); |
|
283 | + $h2 = $d2->toInt32()->mask( 0x3ffffff ); |
|
284 | + $d3 = $d3->addInt64( $c ); |
|
285 | 285 | |
286 | - $c = $d3->shiftRight(26); |
|
287 | - $h3 = $d3->toInt32()->mask(0x3ffffff); |
|
288 | - $d4 = $d4->addInt64($c); |
|
286 | + $c = $d3->shiftRight( 26 ); |
|
287 | + $h3 = $d3->toInt32()->mask( 0x3ffffff ); |
|
288 | + $d4 = $d4->addInt64( $c ); |
|
289 | 289 | |
290 | - $c = $d4->shiftRight(26); |
|
291 | - $h4 = $d4->toInt32()->mask(0x3ffffff); |
|
292 | - $h0 = $h0->addInt32($c->toInt32()->mulInt(5)); |
|
290 | + $c = $d4->shiftRight( 26 ); |
|
291 | + $h4 = $d4->toInt32()->mask( 0x3ffffff ); |
|
292 | + $h0 = $h0->addInt32( $c->toInt32()->mulInt( 5 ) ); |
|
293 | 293 | |
294 | - $c = $h0->shiftRight(26); |
|
295 | - $h0 = $h0->mask(0x3ffffff); |
|
296 | - $h1 = $h1->addInt32($c); |
|
294 | + $c = $h0->shiftRight( 26 ); |
|
295 | + $h0 = $h0->mask( 0x3ffffff ); |
|
296 | + $h1 = $h1->addInt32( $c ); |
|
297 | 297 | |
298 | 298 | // Chop off the left 32 bytes. |
299 | 299 | $message = self::substr( |
@@ -304,7 +304,7 @@ discard block |
||
304 | 304 | } |
305 | 305 | |
306 | 306 | /** @var array<int, ParagonIE_Sodium_Core32_Int32> $h */ |
307 | - $this->h = array($h0, $h1, $h2, $h3, $h4); |
|
307 | + $this->h = array( $h0, $h1, $h2, $h3, $h4 ); |
|
308 | 308 | return $this; |
309 | 309 | } |
310 | 310 | |
@@ -316,16 +316,16 @@ discard block |
||
316 | 316 | public function finish() |
317 | 317 | { |
318 | 318 | /* process the remaining block */ |
319 | - if ($this->leftover) { |
|
319 | + if ( $this->leftover ) { |
|
320 | 320 | $i = $this->leftover; |
321 | 321 | $this->buffer[$i++] = 1; |
322 | - for (; $i < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; ++$i) { |
|
322 | + for ( ; $i < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; ++$i ) { |
|
323 | 323 | $this->buffer[$i] = 0; |
324 | 324 | } |
325 | 325 | $this->final = true; |
326 | 326 | $this->blocks( |
327 | 327 | self::substr( |
328 | - static::intArrayToString($this->buffer), |
|
328 | + static::intArrayToString( $this->buffer ), |
|
329 | 329 | 0, |
330 | 330 | ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE |
331 | 331 | ), |
@@ -352,73 +352,73 @@ discard block |
||
352 | 352 | $h3 = $this->h[3]; |
353 | 353 | $h4 = $this->h[4]; |
354 | 354 | |
355 | - $c = $h1->shiftRight(26); # $c = $h1 >> 26; |
|
356 | - $h1 = $h1->mask(0x3ffffff); # $h1 &= 0x3ffffff; |
|
355 | + $c = $h1->shiftRight( 26 ); # $c = $h1 >> 26; |
|
356 | + $h1 = $h1->mask( 0x3ffffff ); # $h1 &= 0x3ffffff; |
|
357 | 357 | |
358 | - $h2 = $h2->addInt32($c); # $h2 += $c; |
|
359 | - $c = $h2->shiftRight(26); # $c = $h2 >> 26; |
|
360 | - $h2 = $h2->mask(0x3ffffff); # $h2 &= 0x3ffffff; |
|
358 | + $h2 = $h2->addInt32( $c ); # $h2 += $c; |
|
359 | + $c = $h2->shiftRight( 26 ); # $c = $h2 >> 26; |
|
360 | + $h2 = $h2->mask( 0x3ffffff ); # $h2 &= 0x3ffffff; |
|
361 | 361 | |
362 | - $h3 = $h3->addInt32($c); # $h3 += $c; |
|
363 | - $c = $h3->shiftRight(26); # $c = $h3 >> 26; |
|
364 | - $h3 = $h3->mask(0x3ffffff); # $h3 &= 0x3ffffff; |
|
362 | + $h3 = $h3->addInt32( $c ); # $h3 += $c; |
|
363 | + $c = $h3->shiftRight( 26 ); # $c = $h3 >> 26; |
|
364 | + $h3 = $h3->mask( 0x3ffffff ); # $h3 &= 0x3ffffff; |
|
365 | 365 | |
366 | - $h4 = $h4->addInt32($c); # $h4 += $c; |
|
367 | - $c = $h4->shiftRight(26); # $c = $h4 >> 26; |
|
368 | - $h4 = $h4->mask(0x3ffffff); # $h4 &= 0x3ffffff; |
|
366 | + $h4 = $h4->addInt32( $c ); # $h4 += $c; |
|
367 | + $c = $h4->shiftRight( 26 ); # $c = $h4 >> 26; |
|
368 | + $h4 = $h4->mask( 0x3ffffff ); # $h4 &= 0x3ffffff; |
|
369 | 369 | |
370 | - $h0 = $h0->addInt32($c->mulInt(5)); # $h0 += self::mul($c, 5); |
|
371 | - $c = $h0->shiftRight(26); # $c = $h0 >> 26; |
|
372 | - $h0 = $h0->mask(0x3ffffff); # $h0 &= 0x3ffffff; |
|
373 | - $h1 = $h1->addInt32($c); # $h1 += $c; |
|
370 | + $h0 = $h0->addInt32( $c->mulInt( 5 ) ); # $h0 += self::mul($c, 5); |
|
371 | + $c = $h0->shiftRight( 26 ); # $c = $h0 >> 26; |
|
372 | + $h0 = $h0->mask( 0x3ffffff ); # $h0 &= 0x3ffffff; |
|
373 | + $h1 = $h1->addInt32( $c ); # $h1 += $c; |
|
374 | 374 | |
375 | 375 | /* compute h + -p */ |
376 | - $g0 = $h0->addInt(5); |
|
377 | - $c = $g0->shiftRight(26); |
|
378 | - $g0 = $g0->mask(0x3ffffff); |
|
379 | - $g1 = $h1->addInt32($c); |
|
380 | - $c = $g1->shiftRight(26); |
|
381 | - $g1 = $g1->mask(0x3ffffff); |
|
382 | - $g2 = $h2->addInt32($c); |
|
383 | - $c = $g2->shiftRight(26); |
|
384 | - $g2 = $g2->mask(0x3ffffff); |
|
385 | - $g3 = $h3->addInt32($c); |
|
386 | - $c = $g3->shiftRight(26); |
|
387 | - $g3 = $g3->mask(0x3ffffff); |
|
388 | - $g4 = $h4->addInt32($c)->subInt(1 << 26); |
|
376 | + $g0 = $h0->addInt( 5 ); |
|
377 | + $c = $g0->shiftRight( 26 ); |
|
378 | + $g0 = $g0->mask( 0x3ffffff ); |
|
379 | + $g1 = $h1->addInt32( $c ); |
|
380 | + $c = $g1->shiftRight( 26 ); |
|
381 | + $g1 = $g1->mask( 0x3ffffff ); |
|
382 | + $g2 = $h2->addInt32( $c ); |
|
383 | + $c = $g2->shiftRight( 26 ); |
|
384 | + $g2 = $g2->mask( 0x3ffffff ); |
|
385 | + $g3 = $h3->addInt32( $c ); |
|
386 | + $c = $g3->shiftRight( 26 ); |
|
387 | + $g3 = $g3->mask( 0x3ffffff ); |
|
388 | + $g4 = $h4->addInt32( $c )->subInt( 1 << 26 ); |
|
389 | 389 | |
390 | 390 | # $mask = ($g4 >> 31) - 1; |
391 | 391 | /* select h if h < p, or h + -p if h >= p */ |
392 | - $mask = (int) (($g4->toInt() >> 31) + 1); |
|
392 | + $mask = (int) ( ( $g4->toInt() >> 31 ) + 1 ); |
|
393 | 393 | |
394 | - $g0 = $g0->mask($mask); |
|
395 | - $g1 = $g1->mask($mask); |
|
396 | - $g2 = $g2->mask($mask); |
|
397 | - $g3 = $g3->mask($mask); |
|
398 | - $g4 = $g4->mask($mask); |
|
394 | + $g0 = $g0->mask( $mask ); |
|
395 | + $g1 = $g1->mask( $mask ); |
|
396 | + $g2 = $g2->mask( $mask ); |
|
397 | + $g3 = $g3->mask( $mask ); |
|
398 | + $g4 = $g4->mask( $mask ); |
|
399 | 399 | |
400 | - $mask = (~$mask) & 0xffffffff; |
|
400 | + $mask = ( ~$mask ) & 0xffffffff; |
|
401 | 401 | |
402 | - $h0 = $h0->mask($mask)->orInt32($g0); |
|
403 | - $h1 = $h1->mask($mask)->orInt32($g1); |
|
404 | - $h2 = $h2->mask($mask)->orInt32($g2); |
|
405 | - $h3 = $h3->mask($mask)->orInt32($g3); |
|
406 | - $h4 = $h4->mask($mask)->orInt32($g4); |
|
402 | + $h0 = $h0->mask( $mask )->orInt32( $g0 ); |
|
403 | + $h1 = $h1->mask( $mask )->orInt32( $g1 ); |
|
404 | + $h2 = $h2->mask( $mask )->orInt32( $g2 ); |
|
405 | + $h3 = $h3->mask( $mask )->orInt32( $g3 ); |
|
406 | + $h4 = $h4->mask( $mask )->orInt32( $g4 ); |
|
407 | 407 | |
408 | 408 | /* h = h % (2^128) */ |
409 | - $h0 = $h0->orInt32($h1->shiftLeft(26)); |
|
410 | - $h1 = $h1->shiftRight(6)->orInt32($h2->shiftLeft(20)); |
|
411 | - $h2 = $h2->shiftRight(12)->orInt32($h3->shiftLeft(14)); |
|
412 | - $h3 = $h3->shiftRight(18)->orInt32($h4->shiftLeft(8)); |
|
409 | + $h0 = $h0->orInt32( $h1->shiftLeft( 26 ) ); |
|
410 | + $h1 = $h1->shiftRight( 6 )->orInt32( $h2->shiftLeft( 20 ) ); |
|
411 | + $h2 = $h2->shiftRight( 12 )->orInt32( $h3->shiftLeft( 14 ) ); |
|
412 | + $h3 = $h3->shiftRight( 18 )->orInt32( $h4->shiftLeft( 8 ) ); |
|
413 | 413 | |
414 | 414 | /* mac = (h + pad) % (2^128) */ |
415 | - $f = $h0->toInt64()->addInt64($this->pad[0]); |
|
415 | + $f = $h0->toInt64()->addInt64( $this->pad[0] ); |
|
416 | 416 | $h0 = $f->toInt32(); |
417 | - $f = $h1->toInt64()->addInt64($this->pad[1])->addInt($h0->overflow); |
|
417 | + $f = $h1->toInt64()->addInt64( $this->pad[1] )->addInt( $h0->overflow ); |
|
418 | 418 | $h1 = $f->toInt32(); |
419 | - $f = $h2->toInt64()->addInt64($this->pad[2])->addInt($h1->overflow); |
|
419 | + $f = $h2->toInt64()->addInt64( $this->pad[2] )->addInt( $h1->overflow ); |
|
420 | 420 | $h2 = $f->toInt32(); |
421 | - $f = $h3->toInt64()->addInt64($this->pad[3])->addInt($h2->overflow); |
|
421 | + $f = $h3->toInt64()->addInt64( $this->pad[3] )->addInt( $h2->overflow ); |
|
422 | 422 | $h3 = $f->toInt32(); |
423 | 423 | |
424 | 424 | return $h0->toReverseString() . |
@@ -7,8 +7,7 @@ discard block |
||
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Poly1305_State |
9 | 9 | */ |
10 | -class ParagonIE_Sodium_Core32_Poly1305_State extends ParagonIE_Sodium_Core32_Util |
|
11 | -{ |
|
10 | +class ParagonIE_Sodium_Core32_Poly1305_State extends ParagonIE_Sodium_Core32_Util { |
|
12 | 11 | /** |
13 | 12 | * @var array<int, int> |
14 | 13 | */ |
@@ -47,8 +46,7 @@ discard block |
||
47 | 46 | * @param string $key |
48 | 47 | * @throws InvalidArgumentException |
49 | 48 | */ |
50 | - public function __construct($key = '') |
|
51 | - { |
|
49 | + public function __construct($key = '') { |
|
52 | 50 | if (self::strlen($key) < 32) { |
53 | 51 | throw new InvalidArgumentException( |
54 | 52 | 'Poly1305 requires a 32-byte key' |
@@ -104,8 +102,7 @@ discard block |
||
104 | 102 | * @param string $message |
105 | 103 | * @return self |
106 | 104 | */ |
107 | - public function update($message = '') |
|
108 | - { |
|
105 | + public function update($message = '') { |
|
109 | 106 | $bytes = self::strlen($message); |
110 | 107 | |
111 | 108 | /* handle leftover */ |
@@ -165,8 +162,7 @@ discard block |
||
165 | 162 | * @param int $bytes |
166 | 163 | * @return self |
167 | 164 | */ |
168 | - public function blocks($message, $bytes) |
|
169 | - { |
|
165 | + public function blocks($message, $bytes) { |
|
170 | 166 | if (self::strlen($message) < 16) { |
171 | 167 | $message = str_pad($message, 16, "\x00", STR_PAD_RIGHT); |
172 | 168 | } |
@@ -313,8 +309,7 @@ discard block |
||
313 | 309 | * |
314 | 310 | * @return string |
315 | 311 | */ |
316 | - public function finish() |
|
317 | - { |
|
312 | + public function finish() { |
|
318 | 313 | /* process the remaining block */ |
319 | 314 | if ($this->leftover) { |
320 | 315 | $i = $this->leftover; |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_P3', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | /** |
@@ -9,57 +9,57 @@ discard block |
||
9 | 9 | */ |
10 | 10 | class ParagonIE_Sodium_Core32_Curve25519_Ge_P3 |
11 | 11 | { |
12 | - /** |
|
13 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | - */ |
|
15 | - public $X; |
|
12 | + /** |
|
13 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | + */ |
|
15 | + public $X; |
|
16 | 16 | |
17 | - /** |
|
18 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | - */ |
|
20 | - public $Y; |
|
17 | + /** |
|
18 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | + */ |
|
20 | + public $Y; |
|
21 | 21 | |
22 | - /** |
|
23 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | - */ |
|
25 | - public $Z; |
|
22 | + /** |
|
23 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | + */ |
|
25 | + public $Z; |
|
26 | 26 | |
27 | - /** |
|
28 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
29 | - */ |
|
30 | - public $T; |
|
27 | + /** |
|
28 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
29 | + */ |
|
30 | + public $T; |
|
31 | 31 | |
32 | - /** |
|
33 | - * ParagonIE_Sodium_Core32_Curve25519_Ge_P3 constructor. |
|
34 | - * |
|
35 | - * @internal You should not use this directly from another application |
|
36 | - * |
|
37 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $x |
|
38 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $y |
|
39 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $z |
|
40 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $t |
|
41 | - */ |
|
42 | - public function __construct( |
|
43 | - ParagonIE_Sodium_Core32_Curve25519_Fe $x = null, |
|
44 | - ParagonIE_Sodium_Core32_Curve25519_Fe $y = null, |
|
45 | - ParagonIE_Sodium_Core32_Curve25519_Fe $z = null, |
|
46 | - ParagonIE_Sodium_Core32_Curve25519_Fe $t = null |
|
47 | - ) { |
|
48 | - if ($x === null) { |
|
49 | - $x = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
50 | - } |
|
51 | - $this->X = $x; |
|
52 | - if ($y === null) { |
|
53 | - $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
54 | - } |
|
55 | - $this->Y = $y; |
|
56 | - if ($z === null) { |
|
57 | - $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
58 | - } |
|
59 | - $this->Z = $z; |
|
60 | - if ($t === null) { |
|
61 | - $t = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
62 | - } |
|
63 | - $this->T = $t; |
|
64 | - } |
|
32 | + /** |
|
33 | + * ParagonIE_Sodium_Core32_Curve25519_Ge_P3 constructor. |
|
34 | + * |
|
35 | + * @internal You should not use this directly from another application |
|
36 | + * |
|
37 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $x |
|
38 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $y |
|
39 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $z |
|
40 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $t |
|
41 | + */ |
|
42 | + public function __construct( |
|
43 | + ParagonIE_Sodium_Core32_Curve25519_Fe $x = null, |
|
44 | + ParagonIE_Sodium_Core32_Curve25519_Fe $y = null, |
|
45 | + ParagonIE_Sodium_Core32_Curve25519_Fe $z = null, |
|
46 | + ParagonIE_Sodium_Core32_Curve25519_Fe $t = null |
|
47 | + ) { |
|
48 | + if ($x === null) { |
|
49 | + $x = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
50 | + } |
|
51 | + $this->X = $x; |
|
52 | + if ($y === null) { |
|
53 | + $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
54 | + } |
|
55 | + $this->Y = $y; |
|
56 | + if ($z === null) { |
|
57 | + $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
58 | + } |
|
59 | + $this->Z = $z; |
|
60 | + if ($t === null) { |
|
61 | + $t = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
62 | + } |
|
63 | + $this->T = $t; |
|
64 | + } |
|
65 | 65 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_P3', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Curve25519_Ge_P3', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | |
@@ -45,19 +45,19 @@ discard block |
||
45 | 45 | ParagonIE_Sodium_Core32_Curve25519_Fe $z = null, |
46 | 46 | ParagonIE_Sodium_Core32_Curve25519_Fe $t = null |
47 | 47 | ) { |
48 | - if ($x === null) { |
|
48 | + if ( $x === null ) { |
|
49 | 49 | $x = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
50 | 50 | } |
51 | 51 | $this->X = $x; |
52 | - if ($y === null) { |
|
52 | + if ( $y === null ) { |
|
53 | 53 | $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
54 | 54 | } |
55 | 55 | $this->Y = $y; |
56 | - if ($z === null) { |
|
56 | + if ( $z === null ) { |
|
57 | 57 | $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
58 | 58 | } |
59 | 59 | $this->Z = $z; |
60 | - if ($t === null) { |
|
60 | + if ( $t === null ) { |
|
61 | 61 | $t = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
62 | 62 | } |
63 | 63 | $this->T = $t; |
@@ -7,8 +7,7 @@ |
||
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Curve25519_Ge_P3 |
9 | 9 | */ |
10 | -class ParagonIE_Sodium_Core32_Curve25519_Ge_P3 |
|
11 | -{ |
|
10 | +class ParagonIE_Sodium_Core32_Curve25519_Ge_P3 { |
|
12 | 11 | /** |
13 | 12 | * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
14 | 13 | */ |
@@ -2,64 +2,64 @@ |
||
2 | 2 | |
3 | 3 | |
4 | 4 | if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_Cached', false)) { |
5 | - return; |
|
5 | + return; |
|
6 | 6 | } |
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Curve25519_Ge_Cached |
9 | 9 | */ |
10 | 10 | class ParagonIE_Sodium_Core32_Curve25519_Ge_Cached |
11 | 11 | { |
12 | - /** |
|
13 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | - */ |
|
15 | - public $YplusX; |
|
12 | + /** |
|
13 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | + */ |
|
15 | + public $YplusX; |
|
16 | 16 | |
17 | - /** |
|
18 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | - */ |
|
20 | - public $YminusX; |
|
17 | + /** |
|
18 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | + */ |
|
20 | + public $YminusX; |
|
21 | 21 | |
22 | - /** |
|
23 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | - */ |
|
25 | - public $Z; |
|
22 | + /** |
|
23 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | + */ |
|
25 | + public $Z; |
|
26 | 26 | |
27 | - /** |
|
28 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
29 | - */ |
|
30 | - public $T2d; |
|
27 | + /** |
|
28 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
29 | + */ |
|
30 | + public $T2d; |
|
31 | 31 | |
32 | - /** |
|
33 | - * ParagonIE_Sodium_Core32_Curve25519_Ge_Cached constructor. |
|
34 | - * |
|
35 | - * @internal You should not use this directly from another application |
|
36 | - * |
|
37 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $YplusX |
|
38 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $YminusX |
|
39 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $Z |
|
40 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $T2d |
|
41 | - */ |
|
42 | - public function __construct( |
|
43 | - ParagonIE_Sodium_Core32_Curve25519_Fe $YplusX = null, |
|
44 | - ParagonIE_Sodium_Core32_Curve25519_Fe $YminusX = null, |
|
45 | - ParagonIE_Sodium_Core32_Curve25519_Fe $Z = null, |
|
46 | - ParagonIE_Sodium_Core32_Curve25519_Fe $T2d = null |
|
47 | - ) { |
|
48 | - if ($YplusX === null) { |
|
49 | - $YplusX = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
50 | - } |
|
51 | - $this->YplusX = $YplusX; |
|
52 | - if ($YminusX === null) { |
|
53 | - $YminusX = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
54 | - } |
|
55 | - $this->YminusX = $YminusX; |
|
56 | - if ($Z === null) { |
|
57 | - $Z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
58 | - } |
|
59 | - $this->Z = $Z; |
|
60 | - if ($T2d === null) { |
|
61 | - $T2d = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
62 | - } |
|
63 | - $this->T2d = $T2d; |
|
64 | - } |
|
32 | + /** |
|
33 | + * ParagonIE_Sodium_Core32_Curve25519_Ge_Cached constructor. |
|
34 | + * |
|
35 | + * @internal You should not use this directly from another application |
|
36 | + * |
|
37 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $YplusX |
|
38 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $YminusX |
|
39 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $Z |
|
40 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $T2d |
|
41 | + */ |
|
42 | + public function __construct( |
|
43 | + ParagonIE_Sodium_Core32_Curve25519_Fe $YplusX = null, |
|
44 | + ParagonIE_Sodium_Core32_Curve25519_Fe $YminusX = null, |
|
45 | + ParagonIE_Sodium_Core32_Curve25519_Fe $Z = null, |
|
46 | + ParagonIE_Sodium_Core32_Curve25519_Fe $T2d = null |
|
47 | + ) { |
|
48 | + if ($YplusX === null) { |
|
49 | + $YplusX = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
50 | + } |
|
51 | + $this->YplusX = $YplusX; |
|
52 | + if ($YminusX === null) { |
|
53 | + $YminusX = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
54 | + } |
|
55 | + $this->YminusX = $YminusX; |
|
56 | + if ($Z === null) { |
|
57 | + $Z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
58 | + } |
|
59 | + $this->Z = $Z; |
|
60 | + if ($T2d === null) { |
|
61 | + $T2d = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
62 | + } |
|
63 | + $this->T2d = $T2d; |
|
64 | + } |
|
65 | 65 | } |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | |
4 | -if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_Cached', false)) { |
|
4 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Curve25519_Ge_Cached', false ) ) { |
|
5 | 5 | return; |
6 | 6 | } |
7 | 7 | /** |
@@ -45,19 +45,19 @@ discard block |
||
45 | 45 | ParagonIE_Sodium_Core32_Curve25519_Fe $Z = null, |
46 | 46 | ParagonIE_Sodium_Core32_Curve25519_Fe $T2d = null |
47 | 47 | ) { |
48 | - if ($YplusX === null) { |
|
48 | + if ( $YplusX === null ) { |
|
49 | 49 | $YplusX = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
50 | 50 | } |
51 | 51 | $this->YplusX = $YplusX; |
52 | - if ($YminusX === null) { |
|
52 | + if ( $YminusX === null ) { |
|
53 | 53 | $YminusX = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
54 | 54 | } |
55 | 55 | $this->YminusX = $YminusX; |
56 | - if ($Z === null) { |
|
56 | + if ( $Z === null ) { |
|
57 | 57 | $Z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
58 | 58 | } |
59 | 59 | $this->Z = $Z; |
60 | - if ($T2d === null) { |
|
60 | + if ( $T2d === null ) { |
|
61 | 61 | $T2d = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
62 | 62 | } |
63 | 63 | $this->T2d = $T2d; |
@@ -7,8 +7,7 @@ |
||
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Curve25519_Ge_Cached |
9 | 9 | */ |
10 | -class ParagonIE_Sodium_Core32_Curve25519_Ge_Cached |
|
11 | -{ |
|
10 | +class ParagonIE_Sodium_Core32_Curve25519_Ge_Cached { |
|
12 | 11 | /** |
13 | 12 | * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
14 | 13 | */ |
@@ -1,64 +1,64 @@ |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | /** |
7 | 7 | * Class ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 |
8 | 8 | */ |
9 | 9 | class ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 |
10 | 10 | { |
11 | - /** |
|
12 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
13 | - */ |
|
14 | - public $X; |
|
11 | + /** |
|
12 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
13 | + */ |
|
14 | + public $X; |
|
15 | 15 | |
16 | - /** |
|
17 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
18 | - */ |
|
19 | - public $Y; |
|
16 | + /** |
|
17 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
18 | + */ |
|
19 | + public $Y; |
|
20 | 20 | |
21 | - /** |
|
22 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
23 | - */ |
|
24 | - public $Z; |
|
21 | + /** |
|
22 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
23 | + */ |
|
24 | + public $Z; |
|
25 | 25 | |
26 | - /** |
|
27 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
28 | - */ |
|
29 | - public $T; |
|
26 | + /** |
|
27 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
28 | + */ |
|
29 | + public $T; |
|
30 | 30 | |
31 | - /** |
|
32 | - * ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 constructor. |
|
33 | - * |
|
34 | - * @internal You should not use this directly from another application |
|
35 | - * |
|
36 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $x |
|
37 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $y |
|
38 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $z |
|
39 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $t |
|
40 | - */ |
|
41 | - public function __construct( |
|
42 | - ParagonIE_Sodium_Core32_Curve25519_Fe $x = null, |
|
43 | - ParagonIE_Sodium_Core32_Curve25519_Fe $y = null, |
|
44 | - ParagonIE_Sodium_Core32_Curve25519_Fe $z = null, |
|
45 | - ParagonIE_Sodium_Core32_Curve25519_Fe $t = null |
|
46 | - ) { |
|
47 | - if ($x === null) { |
|
48 | - $x = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
49 | - } |
|
50 | - $this->X = $x; |
|
51 | - if ($y === null) { |
|
52 | - $y = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
53 | - } |
|
54 | - $this->Y = $y; |
|
55 | - if ($z === null) { |
|
56 | - $z = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
57 | - } |
|
58 | - $this->Z = $z; |
|
59 | - if ($t === null) { |
|
60 | - $t = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
61 | - } |
|
62 | - $this->T = $t; |
|
63 | - } |
|
31 | + /** |
|
32 | + * ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 constructor. |
|
33 | + * |
|
34 | + * @internal You should not use this directly from another application |
|
35 | + * |
|
36 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $x |
|
37 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $y |
|
38 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $z |
|
39 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $t |
|
40 | + */ |
|
41 | + public function __construct( |
|
42 | + ParagonIE_Sodium_Core32_Curve25519_Fe $x = null, |
|
43 | + ParagonIE_Sodium_Core32_Curve25519_Fe $y = null, |
|
44 | + ParagonIE_Sodium_Core32_Curve25519_Fe $z = null, |
|
45 | + ParagonIE_Sodium_Core32_Curve25519_Fe $t = null |
|
46 | + ) { |
|
47 | + if ($x === null) { |
|
48 | + $x = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
49 | + } |
|
50 | + $this->X = $x; |
|
51 | + if ($y === null) { |
|
52 | + $y = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
53 | + } |
|
54 | + $this->Y = $y; |
|
55 | + if ($z === null) { |
|
56 | + $z = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
57 | + } |
|
58 | + $this->Z = $z; |
|
59 | + if ($t === null) { |
|
60 | + $t = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
61 | + } |
|
62 | + $this->T = $t; |
|
63 | + } |
|
64 | 64 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | /** |
@@ -44,19 +44,19 @@ discard block |
||
44 | 44 | ParagonIE_Sodium_Core32_Curve25519_Fe $z = null, |
45 | 45 | ParagonIE_Sodium_Core32_Curve25519_Fe $t = null |
46 | 46 | ) { |
47 | - if ($x === null) { |
|
47 | + if ( $x === null ) { |
|
48 | 48 | $x = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
49 | 49 | } |
50 | 50 | $this->X = $x; |
51 | - if ($y === null) { |
|
51 | + if ( $y === null ) { |
|
52 | 52 | $y = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
53 | 53 | } |
54 | 54 | $this->Y = $y; |
55 | - if ($z === null) { |
|
55 | + if ( $z === null ) { |
|
56 | 56 | $z = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
57 | 57 | } |
58 | 58 | $this->Z = $z; |
59 | - if ($t === null) { |
|
59 | + if ( $t === null ) { |
|
60 | 60 | $t = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
61 | 61 | } |
62 | 62 | $this->T = $t; |
@@ -6,8 +6,7 @@ |
||
6 | 6 | /** |
7 | 7 | * Class ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 |
8 | 8 | */ |
9 | -class ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 |
|
10 | -{ |
|
9 | +class ParagonIE_Sodium_Core32_Curve25519_Ge_P1p1 { |
|
11 | 10 | /** |
12 | 11 | * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
13 | 12 | */ |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | /** |
@@ -9,46 +9,46 @@ discard block |
||
9 | 9 | */ |
10 | 10 | class ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp |
11 | 11 | { |
12 | - /** |
|
13 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | - */ |
|
15 | - public $yplusx; |
|
12 | + /** |
|
13 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | + */ |
|
15 | + public $yplusx; |
|
16 | 16 | |
17 | - /** |
|
18 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | - */ |
|
20 | - public $yminusx; |
|
17 | + /** |
|
18 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | + */ |
|
20 | + public $yminusx; |
|
21 | 21 | |
22 | - /** |
|
23 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | - */ |
|
25 | - public $xy2d; |
|
22 | + /** |
|
23 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | + */ |
|
25 | + public $xy2d; |
|
26 | 26 | |
27 | - /** |
|
28 | - * ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp constructor. |
|
29 | - * |
|
30 | - * @internal You should not use this directly from another application |
|
31 | - * |
|
32 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $yplusx |
|
33 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $yminusx |
|
34 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $xy2d |
|
35 | - */ |
|
36 | - public function __construct( |
|
37 | - ParagonIE_Sodium_Core32_Curve25519_Fe $yplusx = null, |
|
38 | - ParagonIE_Sodium_Core32_Curve25519_Fe $yminusx = null, |
|
39 | - ParagonIE_Sodium_Core32_Curve25519_Fe $xy2d = null |
|
40 | - ) { |
|
41 | - if ($yplusx === null) { |
|
42 | - $yplusx = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
43 | - } |
|
44 | - $this->yplusx = $yplusx; |
|
45 | - if ($yminusx === null) { |
|
46 | - $yminusx = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
47 | - } |
|
48 | - $this->yminusx = $yminusx; |
|
49 | - if ($xy2d === null) { |
|
50 | - $xy2d = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
51 | - } |
|
52 | - $this->xy2d = $xy2d; |
|
53 | - } |
|
27 | + /** |
|
28 | + * ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp constructor. |
|
29 | + * |
|
30 | + * @internal You should not use this directly from another application |
|
31 | + * |
|
32 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $yplusx |
|
33 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $yminusx |
|
34 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $xy2d |
|
35 | + */ |
|
36 | + public function __construct( |
|
37 | + ParagonIE_Sodium_Core32_Curve25519_Fe $yplusx = null, |
|
38 | + ParagonIE_Sodium_Core32_Curve25519_Fe $yminusx = null, |
|
39 | + ParagonIE_Sodium_Core32_Curve25519_Fe $xy2d = null |
|
40 | + ) { |
|
41 | + if ($yplusx === null) { |
|
42 | + $yplusx = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
43 | + } |
|
44 | + $this->yplusx = $yplusx; |
|
45 | + if ($yminusx === null) { |
|
46 | + $yminusx = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
47 | + } |
|
48 | + $this->yminusx = $yminusx; |
|
49 | + if ($xy2d === null) { |
|
50 | + $xy2d = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
|
51 | + } |
|
52 | + $this->xy2d = $xy2d; |
|
53 | + } |
|
54 | 54 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | |
@@ -38,15 +38,15 @@ discard block |
||
38 | 38 | ParagonIE_Sodium_Core32_Curve25519_Fe $yminusx = null, |
39 | 39 | ParagonIE_Sodium_Core32_Curve25519_Fe $xy2d = null |
40 | 40 | ) { |
41 | - if ($yplusx === null) { |
|
41 | + if ( $yplusx === null ) { |
|
42 | 42 | $yplusx = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
43 | 43 | } |
44 | 44 | $this->yplusx = $yplusx; |
45 | - if ($yminusx === null) { |
|
45 | + if ( $yminusx === null ) { |
|
46 | 46 | $yminusx = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
47 | 47 | } |
48 | 48 | $this->yminusx = $yminusx; |
49 | - if ($xy2d === null) { |
|
49 | + if ( $xy2d === null ) { |
|
50 | 50 | $xy2d = ParagonIE_Sodium_Core32_Curve25519::fe_0(); |
51 | 51 | } |
52 | 52 | $this->xy2d = $xy2d; |
@@ -7,8 +7,7 @@ |
||
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp |
9 | 9 | */ |
10 | -class ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp |
|
11 | -{ |
|
10 | +class ParagonIE_Sodium_Core32_Curve25519_Ge_Precomp { |
|
12 | 11 | /** |
13 | 12 | * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
14 | 13 | */ |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_P2', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | /** |
@@ -9,46 +9,46 @@ discard block |
||
9 | 9 | */ |
10 | 10 | class ParagonIE_Sodium_Core32_Curve25519_Ge_P2 |
11 | 11 | { |
12 | - /** |
|
13 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | - */ |
|
15 | - public $X; |
|
12 | + /** |
|
13 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
14 | + */ |
|
15 | + public $X; |
|
16 | 16 | |
17 | - /** |
|
18 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | - */ |
|
20 | - public $Y; |
|
17 | + /** |
|
18 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
19 | + */ |
|
20 | + public $Y; |
|
21 | 21 | |
22 | - /** |
|
23 | - * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | - */ |
|
25 | - public $Z; |
|
22 | + /** |
|
23 | + * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
|
24 | + */ |
|
25 | + public $Z; |
|
26 | 26 | |
27 | - /** |
|
28 | - * ParagonIE_Sodium_Core32_Curve25519_Ge_P2 constructor. |
|
29 | - * |
|
30 | - * @internal You should not use this directly from another application |
|
31 | - * |
|
32 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $x |
|
33 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $y |
|
34 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $z |
|
35 | - */ |
|
36 | - public function __construct( |
|
37 | - ParagonIE_Sodium_Core32_Curve25519_Fe $x = null, |
|
38 | - ParagonIE_Sodium_Core32_Curve25519_Fe $y = null, |
|
39 | - ParagonIE_Sodium_Core32_Curve25519_Fe $z = null |
|
40 | - ) { |
|
41 | - if ($x === null) { |
|
42 | - $x = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
43 | - } |
|
44 | - $this->X = $x; |
|
45 | - if ($y === null) { |
|
46 | - $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
47 | - } |
|
48 | - $this->Y = $y; |
|
49 | - if ($z === null) { |
|
50 | - $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
51 | - } |
|
52 | - $this->Z = $z; |
|
53 | - } |
|
27 | + /** |
|
28 | + * ParagonIE_Sodium_Core32_Curve25519_Ge_P2 constructor. |
|
29 | + * |
|
30 | + * @internal You should not use this directly from another application |
|
31 | + * |
|
32 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $x |
|
33 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $y |
|
34 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe|null $z |
|
35 | + */ |
|
36 | + public function __construct( |
|
37 | + ParagonIE_Sodium_Core32_Curve25519_Fe $x = null, |
|
38 | + ParagonIE_Sodium_Core32_Curve25519_Fe $y = null, |
|
39 | + ParagonIE_Sodium_Core32_Curve25519_Fe $z = null |
|
40 | + ) { |
|
41 | + if ($x === null) { |
|
42 | + $x = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
43 | + } |
|
44 | + $this->X = $x; |
|
45 | + if ($y === null) { |
|
46 | + $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
47 | + } |
|
48 | + $this->Y = $y; |
|
49 | + if ($z === null) { |
|
50 | + $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
|
51 | + } |
|
52 | + $this->Z = $z; |
|
53 | + } |
|
54 | 54 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Ge_P2', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Curve25519_Ge_P2', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | |
@@ -38,15 +38,15 @@ discard block |
||
38 | 38 | ParagonIE_Sodium_Core32_Curve25519_Fe $y = null, |
39 | 39 | ParagonIE_Sodium_Core32_Curve25519_Fe $z = null |
40 | 40 | ) { |
41 | - if ($x === null) { |
|
41 | + if ( $x === null ) { |
|
42 | 42 | $x = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
43 | 43 | } |
44 | 44 | $this->X = $x; |
45 | - if ($y === null) { |
|
45 | + if ( $y === null ) { |
|
46 | 46 | $y = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
47 | 47 | } |
48 | 48 | $this->Y = $y; |
49 | - if ($z === null) { |
|
49 | + if ( $z === null ) { |
|
50 | 50 | $z = new ParagonIE_Sodium_Core32_Curve25519_Fe(); |
51 | 51 | } |
52 | 52 | $this->Z = $z; |
@@ -7,8 +7,7 @@ |
||
7 | 7 | /** |
8 | 8 | * Class ParagonIE_Sodium_Core32_Curve25519_Ge_P2 |
9 | 9 | */ |
10 | -class ParagonIE_Sodium_Core32_Curve25519_Ge_P2 |
|
11 | -{ |
|
10 | +class ParagonIE_Sodium_Core32_Curve25519_Ge_P2 { |
|
12 | 11 | /** |
13 | 12 | * @var ParagonIE_Sodium_Core32_Curve25519_Fe |
14 | 13 | */ |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Fe', false)) { |
4 | - return; |
|
4 | + return; |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | /** |
@@ -11,173 +11,173 @@ discard block |
||
11 | 11 | */ |
12 | 12 | class ParagonIE_Sodium_Core32_Curve25519_Fe implements ArrayAccess |
13 | 13 | { |
14 | - /** |
|
15 | - * @var array<int, ParagonIE_Sodium_Core32_Int32> |
|
16 | - */ |
|
17 | - protected $container = array(); |
|
14 | + /** |
|
15 | + * @var array<int, ParagonIE_Sodium_Core32_Int32> |
|
16 | + */ |
|
17 | + protected $container = array(); |
|
18 | 18 | |
19 | - /** |
|
20 | - * @var int |
|
21 | - */ |
|
22 | - protected $size = 10; |
|
19 | + /** |
|
20 | + * @var int |
|
21 | + */ |
|
22 | + protected $size = 10; |
|
23 | 23 | |
24 | - /** |
|
25 | - * ParagonIE_Sodium_Core32_Curve25519_Fe constructor. |
|
26 | - * @param int $size |
|
27 | - */ |
|
28 | - public function __construct($size = 10) |
|
29 | - { |
|
30 | - $this->size = 10; |
|
31 | - } |
|
24 | + /** |
|
25 | + * ParagonIE_Sodium_Core32_Curve25519_Fe constructor. |
|
26 | + * @param int $size |
|
27 | + */ |
|
28 | + public function __construct($size = 10) |
|
29 | + { |
|
30 | + $this->size = 10; |
|
31 | + } |
|
32 | 32 | |
33 | - /** |
|
34 | - * @internal You should not use this directly from another application |
|
35 | - * |
|
36 | - * @param array $array |
|
37 | - * @param bool $save_indexes |
|
38 | - * @return self |
|
39 | - */ |
|
40 | - public static function fromArray($array, $save_indexes = null) |
|
41 | - { |
|
42 | - $count = count($array); |
|
43 | - if ($save_indexes) { |
|
44 | - $keys = array_keys($array); |
|
45 | - } else { |
|
46 | - $keys = range(0, $count - 1); |
|
47 | - } |
|
48 | - $array = array_values($array); |
|
33 | + /** |
|
34 | + * @internal You should not use this directly from another application |
|
35 | + * |
|
36 | + * @param array $array |
|
37 | + * @param bool $save_indexes |
|
38 | + * @return self |
|
39 | + */ |
|
40 | + public static function fromArray($array, $save_indexes = null) |
|
41 | + { |
|
42 | + $count = count($array); |
|
43 | + if ($save_indexes) { |
|
44 | + $keys = array_keys($array); |
|
45 | + } else { |
|
46 | + $keys = range(0, $count - 1); |
|
47 | + } |
|
48 | + $array = array_values($array); |
|
49 | 49 | |
50 | - $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe($count); |
|
51 | - if ($save_indexes) { |
|
52 | - for ($i = 0; $i < $count; ++$i) { |
|
53 | - $array[$i]->overflow = 0; |
|
54 | - $obj->offsetSet($keys[$i], $array[$i]); |
|
55 | - } |
|
56 | - } else { |
|
57 | - for ($i = 0; $i < $count; ++$i) { |
|
58 | - $array[$i]->overflow = 0; |
|
59 | - $obj->offsetSet($i, $array[$i]); |
|
60 | - } |
|
61 | - } |
|
62 | - return $obj; |
|
63 | - } |
|
50 | + $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe($count); |
|
51 | + if ($save_indexes) { |
|
52 | + for ($i = 0; $i < $count; ++$i) { |
|
53 | + $array[$i]->overflow = 0; |
|
54 | + $obj->offsetSet($keys[$i], $array[$i]); |
|
55 | + } |
|
56 | + } else { |
|
57 | + for ($i = 0; $i < $count; ++$i) { |
|
58 | + $array[$i]->overflow = 0; |
|
59 | + $obj->offsetSet($i, $array[$i]); |
|
60 | + } |
|
61 | + } |
|
62 | + return $obj; |
|
63 | + } |
|
64 | 64 | |
65 | - /** |
|
66 | - * @internal You should not use this directly from another application |
|
67 | - * |
|
68 | - * @param array $array |
|
69 | - * @param bool $save_indexes |
|
70 | - * @return self |
|
71 | - */ |
|
72 | - public static function fromIntArray($array, $save_indexes = null) |
|
73 | - { |
|
74 | - $count = count($array); |
|
75 | - if ($save_indexes) { |
|
76 | - $keys = array_keys($array); |
|
77 | - } else { |
|
78 | - $keys = range(0, $count - 1); |
|
79 | - } |
|
80 | - $array = array_values($array); |
|
81 | - $set = array(); |
|
82 | - foreach ($array as $i => $v) { |
|
83 | - $set[$i] = ParagonIE_Sodium_Core32_Int32::fromInt($v); |
|
84 | - } |
|
65 | + /** |
|
66 | + * @internal You should not use this directly from another application |
|
67 | + * |
|
68 | + * @param array $array |
|
69 | + * @param bool $save_indexes |
|
70 | + * @return self |
|
71 | + */ |
|
72 | + public static function fromIntArray($array, $save_indexes = null) |
|
73 | + { |
|
74 | + $count = count($array); |
|
75 | + if ($save_indexes) { |
|
76 | + $keys = array_keys($array); |
|
77 | + } else { |
|
78 | + $keys = range(0, $count - 1); |
|
79 | + } |
|
80 | + $array = array_values($array); |
|
81 | + $set = array(); |
|
82 | + foreach ($array as $i => $v) { |
|
83 | + $set[$i] = ParagonIE_Sodium_Core32_Int32::fromInt($v); |
|
84 | + } |
|
85 | 85 | |
86 | - $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe($count); |
|
87 | - if ($save_indexes) { |
|
88 | - for ($i = 0; $i < $count; ++$i) { |
|
89 | - $set[$i]->overflow = 0; |
|
90 | - $obj->offsetSet($keys[$i], $set[$i]); |
|
91 | - } |
|
92 | - } else { |
|
93 | - for ($i = 0; $i < $count; ++$i) { |
|
94 | - $set[$i]->overflow = 0; |
|
95 | - $obj->offsetSet($i, $set[$i]); |
|
96 | - } |
|
97 | - } |
|
98 | - return $obj; |
|
99 | - } |
|
86 | + $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe($count); |
|
87 | + if ($save_indexes) { |
|
88 | + for ($i = 0; $i < $count; ++$i) { |
|
89 | + $set[$i]->overflow = 0; |
|
90 | + $obj->offsetSet($keys[$i], $set[$i]); |
|
91 | + } |
|
92 | + } else { |
|
93 | + for ($i = 0; $i < $count; ++$i) { |
|
94 | + $set[$i]->overflow = 0; |
|
95 | + $obj->offsetSet($i, $set[$i]); |
|
96 | + } |
|
97 | + } |
|
98 | + return $obj; |
|
99 | + } |
|
100 | 100 | |
101 | - /** |
|
102 | - * @internal You should not use this directly from another application |
|
103 | - * |
|
104 | - * @param mixed $offset |
|
105 | - * @param mixed $value |
|
106 | - * @return void |
|
107 | - */ |
|
108 | - public function offsetSet($offset, $value) |
|
109 | - { |
|
110 | - if (!($value instanceof ParagonIE_Sodium_Core32_Int32)) { |
|
111 | - throw new InvalidArgumentException('Expected an instance of ParagonIE_Sodium_Core32_Int32'); |
|
112 | - } |
|
113 | - if (is_null($offset)) { |
|
114 | - $this->container[] = $value; |
|
115 | - } else { |
|
116 | - ParagonIE_Sodium_Core32_Util::declareScalarType($offset, 'int', 1); |
|
117 | - $this->container[(int) $offset] = $value; |
|
118 | - } |
|
119 | - } |
|
101 | + /** |
|
102 | + * @internal You should not use this directly from another application |
|
103 | + * |
|
104 | + * @param mixed $offset |
|
105 | + * @param mixed $value |
|
106 | + * @return void |
|
107 | + */ |
|
108 | + public function offsetSet($offset, $value) |
|
109 | + { |
|
110 | + if (!($value instanceof ParagonIE_Sodium_Core32_Int32)) { |
|
111 | + throw new InvalidArgumentException('Expected an instance of ParagonIE_Sodium_Core32_Int32'); |
|
112 | + } |
|
113 | + if (is_null($offset)) { |
|
114 | + $this->container[] = $value; |
|
115 | + } else { |
|
116 | + ParagonIE_Sodium_Core32_Util::declareScalarType($offset, 'int', 1); |
|
117 | + $this->container[(int) $offset] = $value; |
|
118 | + } |
|
119 | + } |
|
120 | 120 | |
121 | - /** |
|
122 | - * @internal You should not use this directly from another application |
|
123 | - * |
|
124 | - * @param mixed $offset |
|
125 | - * @return bool |
|
126 | - */ |
|
127 | - public function offsetExists($offset) |
|
128 | - { |
|
129 | - return isset($this->container[$offset]); |
|
130 | - } |
|
121 | + /** |
|
122 | + * @internal You should not use this directly from another application |
|
123 | + * |
|
124 | + * @param mixed $offset |
|
125 | + * @return bool |
|
126 | + */ |
|
127 | + public function offsetExists($offset) |
|
128 | + { |
|
129 | + return isset($this->container[$offset]); |
|
130 | + } |
|
131 | 131 | |
132 | - /** |
|
133 | - * @internal You should not use this directly from another application |
|
134 | - * |
|
135 | - * @param mixed $offset |
|
136 | - * @return void |
|
137 | - */ |
|
138 | - public function offsetUnset($offset) |
|
139 | - { |
|
140 | - unset($this->container[$offset]); |
|
141 | - } |
|
132 | + /** |
|
133 | + * @internal You should not use this directly from another application |
|
134 | + * |
|
135 | + * @param mixed $offset |
|
136 | + * @return void |
|
137 | + */ |
|
138 | + public function offsetUnset($offset) |
|
139 | + { |
|
140 | + unset($this->container[$offset]); |
|
141 | + } |
|
142 | 142 | |
143 | - /** |
|
144 | - * @internal You should not use this directly from another application |
|
145 | - * |
|
146 | - * @param mixed $offset |
|
147 | - * @return mixed|null |
|
148 | - */ |
|
149 | - public function offsetGet($offset) |
|
150 | - { |
|
151 | - if (!isset($this->container[$offset])) { |
|
152 | - $this->container[(int) $offset] = new ParagonIE_Sodium_Core32_Int32(); |
|
153 | - } |
|
154 | - return $this->container[$offset]; |
|
155 | - } |
|
143 | + /** |
|
144 | + * @internal You should not use this directly from another application |
|
145 | + * |
|
146 | + * @param mixed $offset |
|
147 | + * @return mixed|null |
|
148 | + */ |
|
149 | + public function offsetGet($offset) |
|
150 | + { |
|
151 | + if (!isset($this->container[$offset])) { |
|
152 | + $this->container[(int) $offset] = new ParagonIE_Sodium_Core32_Int32(); |
|
153 | + } |
|
154 | + return $this->container[$offset]; |
|
155 | + } |
|
156 | 156 | |
157 | - /** |
|
158 | - * @internal You should not use this directly from another application |
|
159 | - * |
|
160 | - * @return array |
|
161 | - */ |
|
162 | - public function __debugInfo() |
|
163 | - { |
|
164 | - if (empty($this->container)) { |
|
165 | - return array(); |
|
166 | - } |
|
167 | - $c = array( |
|
168 | - (int) ($this->container[0]->toInt()), |
|
169 | - (int) ($this->container[1]->toInt()), |
|
170 | - (int) ($this->container[2]->toInt()), |
|
171 | - (int) ($this->container[3]->toInt()), |
|
172 | - (int) ($this->container[4]->toInt()), |
|
173 | - (int) ($this->container[5]->toInt()), |
|
174 | - (int) ($this->container[6]->toInt()), |
|
175 | - (int) ($this->container[7]->toInt()), |
|
176 | - (int) ($this->container[8]->toInt()), |
|
177 | - (int) ($this->container[9]->toInt()) |
|
178 | - ); |
|
157 | + /** |
|
158 | + * @internal You should not use this directly from another application |
|
159 | + * |
|
160 | + * @return array |
|
161 | + */ |
|
162 | + public function __debugInfo() |
|
163 | + { |
|
164 | + if (empty($this->container)) { |
|
165 | + return array(); |
|
166 | + } |
|
167 | + $c = array( |
|
168 | + (int) ($this->container[0]->toInt()), |
|
169 | + (int) ($this->container[1]->toInt()), |
|
170 | + (int) ($this->container[2]->toInt()), |
|
171 | + (int) ($this->container[3]->toInt()), |
|
172 | + (int) ($this->container[4]->toInt()), |
|
173 | + (int) ($this->container[5]->toInt()), |
|
174 | + (int) ($this->container[6]->toInt()), |
|
175 | + (int) ($this->container[7]->toInt()), |
|
176 | + (int) ($this->container[8]->toInt()), |
|
177 | + (int) ($this->container[9]->toInt()) |
|
178 | + ); |
|
179 | 179 | |
180 | - /* |
|
180 | + /* |
|
181 | 181 | $c = array( |
182 | 182 | ParagonIE_Sodium_Core_Util::bin2hex($this->container[0]->toReverseString()), |
183 | 183 | ParagonIE_Sodium_Core_Util::bin2hex($this->container[1]->toReverseString()), |
@@ -203,6 +203,6 @@ discard block |
||
203 | 203 | json_encode($this->container[9]->limbs) |
204 | 204 | ); |
205 | 205 | */ |
206 | - return array(implode(', ', $c)); |
|
207 | - } |
|
206 | + return array(implode(', ', $c)); |
|
207 | + } |
|
208 | 208 | } |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | |
3 | -if (class_exists('ParagonIE_Sodium_Core32_Curve25519_Fe', false)) { |
|
3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Curve25519_Fe', false ) ) { |
|
4 | 4 | return; |
5 | 5 | } |
6 | 6 | |
@@ -25,7 +25,7 @@ discard block |
||
25 | 25 | * ParagonIE_Sodium_Core32_Curve25519_Fe constructor. |
26 | 26 | * @param int $size |
27 | 27 | */ |
28 | - public function __construct($size = 10) |
|
28 | + public function __construct( $size = 10 ) |
|
29 | 29 | { |
30 | 30 | $this->size = 10; |
31 | 31 | } |
@@ -37,26 +37,26 @@ discard block |
||
37 | 37 | * @param bool $save_indexes |
38 | 38 | * @return self |
39 | 39 | */ |
40 | - public static function fromArray($array, $save_indexes = null) |
|
40 | + public static function fromArray( $array, $save_indexes = null ) |
|
41 | 41 | { |
42 | - $count = count($array); |
|
43 | - if ($save_indexes) { |
|
44 | - $keys = array_keys($array); |
|
42 | + $count = count( $array ); |
|
43 | + if ( $save_indexes ) { |
|
44 | + $keys = array_keys( $array ); |
|
45 | 45 | } else { |
46 | - $keys = range(0, $count - 1); |
|
46 | + $keys = range( 0, $count - 1 ); |
|
47 | 47 | } |
48 | - $array = array_values($array); |
|
48 | + $array = array_values( $array ); |
|
49 | 49 | |
50 | - $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe($count); |
|
51 | - if ($save_indexes) { |
|
52 | - for ($i = 0; $i < $count; ++$i) { |
|
50 | + $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe( $count ); |
|
51 | + if ( $save_indexes ) { |
|
52 | + for ( $i = 0; $i < $count; ++$i ) { |
|
53 | 53 | $array[$i]->overflow = 0; |
54 | - $obj->offsetSet($keys[$i], $array[$i]); |
|
54 | + $obj->offsetSet( $keys[$i], $array[$i] ); |
|
55 | 55 | } |
56 | 56 | } else { |
57 | - for ($i = 0; $i < $count; ++$i) { |
|
57 | + for ( $i = 0; $i < $count; ++$i ) { |
|
58 | 58 | $array[$i]->overflow = 0; |
59 | - $obj->offsetSet($i, $array[$i]); |
|
59 | + $obj->offsetSet( $i, $array[$i] ); |
|
60 | 60 | } |
61 | 61 | } |
62 | 62 | return $obj; |
@@ -69,30 +69,30 @@ discard block |
||
69 | 69 | * @param bool $save_indexes |
70 | 70 | * @return self |
71 | 71 | */ |
72 | - public static function fromIntArray($array, $save_indexes = null) |
|
72 | + public static function fromIntArray( $array, $save_indexes = null ) |
|
73 | 73 | { |
74 | - $count = count($array); |
|
75 | - if ($save_indexes) { |
|
76 | - $keys = array_keys($array); |
|
74 | + $count = count( $array ); |
|
75 | + if ( $save_indexes ) { |
|
76 | + $keys = array_keys( $array ); |
|
77 | 77 | } else { |
78 | - $keys = range(0, $count - 1); |
|
78 | + $keys = range( 0, $count - 1 ); |
|
79 | 79 | } |
80 | - $array = array_values($array); |
|
80 | + $array = array_values( $array ); |
|
81 | 81 | $set = array(); |
82 | - foreach ($array as $i => $v) { |
|
83 | - $set[$i] = ParagonIE_Sodium_Core32_Int32::fromInt($v); |
|
82 | + foreach ( $array as $i => $v ) { |
|
83 | + $set[$i] = ParagonIE_Sodium_Core32_Int32::fromInt( $v ); |
|
84 | 84 | } |
85 | 85 | |
86 | - $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe($count); |
|
87 | - if ($save_indexes) { |
|
88 | - for ($i = 0; $i < $count; ++$i) { |
|
86 | + $obj = new ParagonIE_Sodium_Core32_Curve25519_Fe( $count ); |
|
87 | + if ( $save_indexes ) { |
|
88 | + for ( $i = 0; $i < $count; ++$i ) { |
|
89 | 89 | $set[$i]->overflow = 0; |
90 | - $obj->offsetSet($keys[$i], $set[$i]); |
|
90 | + $obj->offsetSet( $keys[$i], $set[$i] ); |
|
91 | 91 | } |
92 | 92 | } else { |
93 | - for ($i = 0; $i < $count; ++$i) { |
|
93 | + for ( $i = 0; $i < $count; ++$i ) { |
|
94 | 94 | $set[$i]->overflow = 0; |
95 | - $obj->offsetSet($i, $set[$i]); |
|
95 | + $obj->offsetSet( $i, $set[$i] ); |
|
96 | 96 | } |
97 | 97 | } |
98 | 98 | return $obj; |
@@ -105,15 +105,15 @@ discard block |
||
105 | 105 | * @param mixed $value |
106 | 106 | * @return void |
107 | 107 | */ |
108 | - public function offsetSet($offset, $value) |
|
108 | + public function offsetSet( $offset, $value ) |
|
109 | 109 | { |
110 | - if (!($value instanceof ParagonIE_Sodium_Core32_Int32)) { |
|
111 | - throw new InvalidArgumentException('Expected an instance of ParagonIE_Sodium_Core32_Int32'); |
|
110 | + if ( ! ( $value instanceof ParagonIE_Sodium_Core32_Int32 ) ) { |
|
111 | + throw new InvalidArgumentException( 'Expected an instance of ParagonIE_Sodium_Core32_Int32' ); |
|
112 | 112 | } |
113 | - if (is_null($offset)) { |
|
113 | + if ( is_null( $offset ) ) { |
|
114 | 114 | $this->container[] = $value; |
115 | 115 | } else { |
116 | - ParagonIE_Sodium_Core32_Util::declareScalarType($offset, 'int', 1); |
|
116 | + ParagonIE_Sodium_Core32_Util::declareScalarType( $offset, 'int', 1 ); |
|
117 | 117 | $this->container[(int) $offset] = $value; |
118 | 118 | } |
119 | 119 | } |
@@ -124,9 +124,9 @@ discard block |
||
124 | 124 | * @param mixed $offset |
125 | 125 | * @return bool |
126 | 126 | */ |
127 | - public function offsetExists($offset) |
|
127 | + public function offsetExists( $offset ) |
|
128 | 128 | { |
129 | - return isset($this->container[$offset]); |
|
129 | + return isset( $this->container[$offset] ); |
|
130 | 130 | } |
131 | 131 | |
132 | 132 | /** |
@@ -135,9 +135,9 @@ discard block |
||
135 | 135 | * @param mixed $offset |
136 | 136 | * @return void |
137 | 137 | */ |
138 | - public function offsetUnset($offset) |
|
138 | + public function offsetUnset( $offset ) |
|
139 | 139 | { |
140 | - unset($this->container[$offset]); |
|
140 | + unset( $this->container[$offset] ); |
|
141 | 141 | } |
142 | 142 | |
143 | 143 | /** |
@@ -146,9 +146,9 @@ discard block |
||
146 | 146 | * @param mixed $offset |
147 | 147 | * @return mixed|null |
148 | 148 | */ |
149 | - public function offsetGet($offset) |
|
149 | + public function offsetGet( $offset ) |
|
150 | 150 | { |
151 | - if (!isset($this->container[$offset])) { |
|
151 | + if ( ! isset( $this->container[$offset] ) ) { |
|
152 | 152 | $this->container[(int) $offset] = new ParagonIE_Sodium_Core32_Int32(); |
153 | 153 | } |
154 | 154 | return $this->container[$offset]; |
@@ -161,20 +161,20 @@ discard block |
||
161 | 161 | */ |
162 | 162 | public function __debugInfo() |
163 | 163 | { |
164 | - if (empty($this->container)) { |
|
164 | + if ( empty( $this->container ) ) { |
|
165 | 165 | return array(); |
166 | 166 | } |
167 | 167 | $c = array( |
168 | - (int) ($this->container[0]->toInt()), |
|
169 | - (int) ($this->container[1]->toInt()), |
|
170 | - (int) ($this->container[2]->toInt()), |
|
171 | - (int) ($this->container[3]->toInt()), |
|
172 | - (int) ($this->container[4]->toInt()), |
|
173 | - (int) ($this->container[5]->toInt()), |
|
174 | - (int) ($this->container[6]->toInt()), |
|
175 | - (int) ($this->container[7]->toInt()), |
|
176 | - (int) ($this->container[8]->toInt()), |
|
177 | - (int) ($this->container[9]->toInt()) |
|
168 | + (int) ( $this->container[0]->toInt() ), |
|
169 | + (int) ( $this->container[1]->toInt() ), |
|
170 | + (int) ( $this->container[2]->toInt() ), |
|
171 | + (int) ( $this->container[3]->toInt() ), |
|
172 | + (int) ( $this->container[4]->toInt() ), |
|
173 | + (int) ( $this->container[5]->toInt() ), |
|
174 | + (int) ( $this->container[6]->toInt() ), |
|
175 | + (int) ( $this->container[7]->toInt() ), |
|
176 | + (int) ( $this->container[8]->toInt() ), |
|
177 | + (int) ( $this->container[9]->toInt() ) |
|
178 | 178 | ); |
179 | 179 | |
180 | 180 | /* |
@@ -203,6 +203,6 @@ discard block |
||
203 | 203 | json_encode($this->container[9]->limbs) |
204 | 204 | ); |
205 | 205 | */ |
206 | - return array(implode(', ', $c)); |
|
206 | + return array( implode( ', ', $c ) ); |
|
207 | 207 | } |
208 | 208 | } |
@@ -9,8 +9,7 @@ discard block |
||
9 | 9 | * |
10 | 10 | * This represents a Field Element |
11 | 11 | */ |
12 | -class ParagonIE_Sodium_Core32_Curve25519_Fe implements ArrayAccess |
|
13 | -{ |
|
12 | +class ParagonIE_Sodium_Core32_Curve25519_Fe implements ArrayAccess { |
|
14 | 13 | /** |
15 | 14 | * @var array<int, ParagonIE_Sodium_Core32_Int32> |
16 | 15 | */ |
@@ -25,8 +24,7 @@ discard block |
||
25 | 24 | * ParagonIE_Sodium_Core32_Curve25519_Fe constructor. |
26 | 25 | * @param int $size |
27 | 26 | */ |
28 | - public function __construct($size = 10) |
|
29 | - { |
|
27 | + public function __construct($size = 10) { |
|
30 | 28 | $this->size = 10; |
31 | 29 | } |
32 | 30 | |
@@ -37,8 +35,7 @@ discard block |
||
37 | 35 | * @param bool $save_indexes |
38 | 36 | * @return self |
39 | 37 | */ |
40 | - public static function fromArray($array, $save_indexes = null) |
|
41 | - { |
|
38 | + public static function fromArray($array, $save_indexes = null) { |
|
42 | 39 | $count = count($array); |
43 | 40 | if ($save_indexes) { |
44 | 41 | $keys = array_keys($array); |
@@ -69,8 +66,7 @@ discard block |
||
69 | 66 | * @param bool $save_indexes |
70 | 67 | * @return self |
71 | 68 | */ |
72 | - public static function fromIntArray($array, $save_indexes = null) |
|
73 | - { |
|
69 | + public static function fromIntArray($array, $save_indexes = null) { |
|
74 | 70 | $count = count($array); |
75 | 71 | if ($save_indexes) { |
76 | 72 | $keys = array_keys($array); |
@@ -105,8 +101,7 @@ discard block |
||
105 | 101 | * @param mixed $value |
106 | 102 | * @return void |
107 | 103 | */ |
108 | - public function offsetSet($offset, $value) |
|
109 | - { |
|
104 | + public function offsetSet($offset, $value) { |
|
110 | 105 | if (!($value instanceof ParagonIE_Sodium_Core32_Int32)) { |
111 | 106 | throw new InvalidArgumentException('Expected an instance of ParagonIE_Sodium_Core32_Int32'); |
112 | 107 | } |
@@ -124,8 +119,7 @@ discard block |
||
124 | 119 | * @param mixed $offset |
125 | 120 | * @return bool |
126 | 121 | */ |
127 | - public function offsetExists($offset) |
|
128 | - { |
|
122 | + public function offsetExists($offset) { |
|
129 | 123 | return isset($this->container[$offset]); |
130 | 124 | } |
131 | 125 | |
@@ -135,8 +129,7 @@ discard block |
||
135 | 129 | * @param mixed $offset |
136 | 130 | * @return void |
137 | 131 | */ |
138 | - public function offsetUnset($offset) |
|
139 | - { |
|
132 | + public function offsetUnset($offset) { |
|
140 | 133 | unset($this->container[$offset]); |
141 | 134 | } |
142 | 135 | |
@@ -146,8 +139,7 @@ discard block |
||
146 | 139 | * @param mixed $offset |
147 | 140 | * @return mixed|null |
148 | 141 | */ |
149 | - public function offsetGet($offset) |
|
150 | - { |
|
142 | + public function offsetGet($offset) { |
|
151 | 143 | if (!isset($this->container[$offset])) { |
152 | 144 | $this->container[(int) $offset] = new ParagonIE_Sodium_Core32_Int32(); |
153 | 145 | } |
@@ -159,8 +151,7 @@ discard block |
||
159 | 151 | * |
160 | 152 | * @return array |
161 | 153 | */ |
162 | - public function __debugInfo() |
|
163 | - { |
|
154 | + public function __debugInfo() { |
|
164 | 155 | if (empty($this->container)) { |
165 | 156 | return array(); |
166 | 157 | } |