@@ -1,7 +1,7 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core_ChaCha20_Ctx', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | |
| 7 | 7 | /** |
@@ -9,115 +9,115 @@ discard block |
||
| 9 | 9 | */ |
| 10 | 10 | class ParagonIE_Sodium_Core_ChaCha20_Ctx extends ParagonIE_Sodium_Core_Util implements ArrayAccess |
| 11 | 11 | { |
| 12 | - /** |
|
| 13 | - * @var SplFixedArray internally, <int, int> |
|
| 14 | - */ |
|
| 15 | - protected $container; |
|
| 12 | + /** |
|
| 13 | + * @var SplFixedArray internally, <int, int> |
|
| 14 | + */ |
|
| 15 | + protected $container; |
|
| 16 | 16 | |
| 17 | - /** |
|
| 18 | - * ParagonIE_Sodium_Core_ChaCha20_Ctx constructor. |
|
| 19 | - * |
|
| 20 | - * @internal You should not use this directly from another application |
|
| 21 | - * |
|
| 22 | - * @param string $key ChaCha20 key. |
|
| 23 | - * @param string $iv Initialization Vector (a.k.a. nonce). |
|
| 24 | - * @param string $counter The initial counter value. |
|
| 25 | - * Defaults to 8 0x00 bytes. |
|
| 26 | - * @throws InvalidArgumentException |
|
| 27 | - * @throws TypeError |
|
| 28 | - */ |
|
| 29 | - public function __construct($key = '', $iv = '', $counter = '') |
|
| 30 | - { |
|
| 31 | - if (self::strlen($key) !== 32) { |
|
| 32 | - throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.'); |
|
| 33 | - } |
|
| 34 | - if (self::strlen($iv) !== 8) { |
|
| 35 | - throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.'); |
|
| 36 | - } |
|
| 37 | - $this->container = new SplFixedArray(16); |
|
| 17 | + /** |
|
| 18 | + * ParagonIE_Sodium_Core_ChaCha20_Ctx constructor. |
|
| 19 | + * |
|
| 20 | + * @internal You should not use this directly from another application |
|
| 21 | + * |
|
| 22 | + * @param string $key ChaCha20 key. |
|
| 23 | + * @param string $iv Initialization Vector (a.k.a. nonce). |
|
| 24 | + * @param string $counter The initial counter value. |
|
| 25 | + * Defaults to 8 0x00 bytes. |
|
| 26 | + * @throws InvalidArgumentException |
|
| 27 | + * @throws TypeError |
|
| 28 | + */ |
|
| 29 | + public function __construct($key = '', $iv = '', $counter = '') |
|
| 30 | + { |
|
| 31 | + if (self::strlen($key) !== 32) { |
|
| 32 | + throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.'); |
|
| 33 | + } |
|
| 34 | + if (self::strlen($iv) !== 8) { |
|
| 35 | + throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.'); |
|
| 36 | + } |
|
| 37 | + $this->container = new SplFixedArray(16); |
|
| 38 | 38 | |
| 39 | - /* "expand 32-byte k" as per ChaCha20 spec */ |
|
| 40 | - $this->container[0] = 0x61707865; |
|
| 41 | - $this->container[1] = 0x3320646e; |
|
| 42 | - $this->container[2] = 0x79622d32; |
|
| 43 | - $this->container[3] = 0x6b206574; |
|
| 44 | - $this->container[4] = self::load_4(self::substr($key, 0, 4)); |
|
| 45 | - $this->container[5] = self::load_4(self::substr($key, 4, 4)); |
|
| 46 | - $this->container[6] = self::load_4(self::substr($key, 8, 4)); |
|
| 47 | - $this->container[7] = self::load_4(self::substr($key, 12, 4)); |
|
| 48 | - $this->container[8] = self::load_4(self::substr($key, 16, 4)); |
|
| 49 | - $this->container[9] = self::load_4(self::substr($key, 20, 4)); |
|
| 50 | - $this->container[10] = self::load_4(self::substr($key, 24, 4)); |
|
| 51 | - $this->container[11] = self::load_4(self::substr($key, 28, 4)); |
|
| 39 | + /* "expand 32-byte k" as per ChaCha20 spec */ |
|
| 40 | + $this->container[0] = 0x61707865; |
|
| 41 | + $this->container[1] = 0x3320646e; |
|
| 42 | + $this->container[2] = 0x79622d32; |
|
| 43 | + $this->container[3] = 0x6b206574; |
|
| 44 | + $this->container[4] = self::load_4(self::substr($key, 0, 4)); |
|
| 45 | + $this->container[5] = self::load_4(self::substr($key, 4, 4)); |
|
| 46 | + $this->container[6] = self::load_4(self::substr($key, 8, 4)); |
|
| 47 | + $this->container[7] = self::load_4(self::substr($key, 12, 4)); |
|
| 48 | + $this->container[8] = self::load_4(self::substr($key, 16, 4)); |
|
| 49 | + $this->container[9] = self::load_4(self::substr($key, 20, 4)); |
|
| 50 | + $this->container[10] = self::load_4(self::substr($key, 24, 4)); |
|
| 51 | + $this->container[11] = self::load_4(self::substr($key, 28, 4)); |
|
| 52 | 52 | |
| 53 | - if (empty($counter)) { |
|
| 54 | - $this->container[12] = 0; |
|
| 55 | - $this->container[13] = 0; |
|
| 56 | - } else { |
|
| 57 | - $this->container[12] = self::load_4(self::substr($counter, 0, 4)); |
|
| 58 | - $this->container[13] = self::load_4(self::substr($counter, 4, 4)); |
|
| 59 | - } |
|
| 60 | - $this->container[14] = self::load_4(self::substr($iv, 0, 4)); |
|
| 61 | - $this->container[15] = self::load_4(self::substr($iv, 4, 4)); |
|
| 62 | - } |
|
| 53 | + if (empty($counter)) { |
|
| 54 | + $this->container[12] = 0; |
|
| 55 | + $this->container[13] = 0; |
|
| 56 | + } else { |
|
| 57 | + $this->container[12] = self::load_4(self::substr($counter, 0, 4)); |
|
| 58 | + $this->container[13] = self::load_4(self::substr($counter, 4, 4)); |
|
| 59 | + } |
|
| 60 | + $this->container[14] = self::load_4(self::substr($iv, 0, 4)); |
|
| 61 | + $this->container[15] = self::load_4(self::substr($iv, 4, 4)); |
|
| 62 | + } |
|
| 63 | 63 | |
| 64 | - /** |
|
| 65 | - * @internal You should not use this directly from another application |
|
| 66 | - * |
|
| 67 | - * @param int $offset |
|
| 68 | - * @param int $value |
|
| 69 | - * @return void |
|
| 70 | - * @psalm-suppress MixedArrayOffset |
|
| 71 | - */ |
|
| 72 | - #[ReturnTypeWillChange] |
|
| 73 | - public function offsetSet($offset, $value) |
|
| 74 | - { |
|
| 75 | - if (!is_int($offset)) { |
|
| 76 | - throw new InvalidArgumentException('Expected an integer'); |
|
| 77 | - } |
|
| 78 | - if (!is_int($value)) { |
|
| 79 | - throw new InvalidArgumentException('Expected an integer'); |
|
| 80 | - } |
|
| 81 | - $this->container[$offset] = $value; |
|
| 82 | - } |
|
| 64 | + /** |
|
| 65 | + * @internal You should not use this directly from another application |
|
| 66 | + * |
|
| 67 | + * @param int $offset |
|
| 68 | + * @param int $value |
|
| 69 | + * @return void |
|
| 70 | + * @psalm-suppress MixedArrayOffset |
|
| 71 | + */ |
|
| 72 | + #[ReturnTypeWillChange] |
|
| 73 | + public function offsetSet($offset, $value) |
|
| 74 | + { |
|
| 75 | + if (!is_int($offset)) { |
|
| 76 | + throw new InvalidArgumentException('Expected an integer'); |
|
| 77 | + } |
|
| 78 | + if (!is_int($value)) { |
|
| 79 | + throw new InvalidArgumentException('Expected an integer'); |
|
| 80 | + } |
|
| 81 | + $this->container[$offset] = $value; |
|
| 82 | + } |
|
| 83 | 83 | |
| 84 | - /** |
|
| 85 | - * @internal You should not use this directly from another application |
|
| 86 | - * |
|
| 87 | - * @param int $offset |
|
| 88 | - * @return bool |
|
| 89 | - */ |
|
| 90 | - #[ReturnTypeWillChange] |
|
| 91 | - public function offsetExists($offset) |
|
| 92 | - { |
|
| 93 | - return isset($this->container[$offset]); |
|
| 94 | - } |
|
| 84 | + /** |
|
| 85 | + * @internal You should not use this directly from another application |
|
| 86 | + * |
|
| 87 | + * @param int $offset |
|
| 88 | + * @return bool |
|
| 89 | + */ |
|
| 90 | + #[ReturnTypeWillChange] |
|
| 91 | + public function offsetExists($offset) |
|
| 92 | + { |
|
| 93 | + return isset($this->container[$offset]); |
|
| 94 | + } |
|
| 95 | 95 | |
| 96 | - /** |
|
| 97 | - * @internal You should not use this directly from another application |
|
| 98 | - * |
|
| 99 | - * @param int $offset |
|
| 100 | - * @return void |
|
| 101 | - * @psalm-suppress MixedArrayOffset |
|
| 102 | - */ |
|
| 103 | - #[ReturnTypeWillChange] |
|
| 104 | - public function offsetUnset($offset) |
|
| 105 | - { |
|
| 106 | - unset($this->container[$offset]); |
|
| 107 | - } |
|
| 96 | + /** |
|
| 97 | + * @internal You should not use this directly from another application |
|
| 98 | + * |
|
| 99 | + * @param int $offset |
|
| 100 | + * @return void |
|
| 101 | + * @psalm-suppress MixedArrayOffset |
|
| 102 | + */ |
|
| 103 | + #[ReturnTypeWillChange] |
|
| 104 | + public function offsetUnset($offset) |
|
| 105 | + { |
|
| 106 | + unset($this->container[$offset]); |
|
| 107 | + } |
|
| 108 | 108 | |
| 109 | - /** |
|
| 110 | - * @internal You should not use this directly from another application |
|
| 111 | - * |
|
| 112 | - * @param int $offset |
|
| 113 | - * @return mixed|null |
|
| 114 | - * @psalm-suppress MixedArrayOffset |
|
| 115 | - */ |
|
| 116 | - #[ReturnTypeWillChange] |
|
| 117 | - public function offsetGet($offset) |
|
| 118 | - { |
|
| 119 | - return isset($this->container[$offset]) |
|
| 120 | - ? $this->container[$offset] |
|
| 121 | - : null; |
|
| 122 | - } |
|
| 109 | + /** |
|
| 110 | + * @internal You should not use this directly from another application |
|
| 111 | + * |
|
| 112 | + * @param int $offset |
|
| 113 | + * @return mixed|null |
|
| 114 | + * @psalm-suppress MixedArrayOffset |
|
| 115 | + */ |
|
| 116 | + #[ReturnTypeWillChange] |
|
| 117 | + public function offsetGet($offset) |
|
| 118 | + { |
|
| 119 | + return isset($this->container[$offset]) |
|
| 120 | + ? $this->container[$offset] |
|
| 121 | + : null; |
|
| 122 | + } |
|
| 123 | 123 | } |
@@ -7,8 +7,7 @@ discard block |
||
| 7 | 7 | /** |
| 8 | 8 | * Class ParagonIE_Sodium_Core_ChaCha20_Ctx |
| 9 | 9 | */ |
| 10 | -class ParagonIE_Sodium_Core_ChaCha20_Ctx extends ParagonIE_Sodium_Core_Util implements ArrayAccess |
|
| 11 | -{ |
|
| 10 | +class ParagonIE_Sodium_Core_ChaCha20_Ctx extends ParagonIE_Sodium_Core_Util implements ArrayAccess { |
|
| 12 | 11 | /** |
| 13 | 12 | * @var SplFixedArray internally, <int, int> |
| 14 | 13 | */ |
@@ -26,8 +25,7 @@ discard block |
||
| 26 | 25 | * @throws InvalidArgumentException |
| 27 | 26 | * @throws TypeError |
| 28 | 27 | */ |
| 29 | - public function __construct($key = '', $iv = '', $counter = '') |
|
| 30 | - { |
|
| 28 | + public function __construct($key = '', $iv = '', $counter = '') { |
|
| 31 | 29 | if (self::strlen($key) !== 32) { |
| 32 | 30 | throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.'); |
| 33 | 31 | } |
@@ -70,8 +68,7 @@ discard block |
||
| 70 | 68 | * @psalm-suppress MixedArrayOffset |
| 71 | 69 | */ |
| 72 | 70 | #[ReturnTypeWillChange] |
| 73 | - public function offsetSet($offset, $value) |
|
| 74 | - { |
|
| 71 | + public function offsetSet($offset, $value) { |
|
| 75 | 72 | if (!is_int($offset)) { |
| 76 | 73 | throw new InvalidArgumentException('Expected an integer'); |
| 77 | 74 | } |
@@ -88,8 +85,7 @@ discard block |
||
| 88 | 85 | * @return bool |
| 89 | 86 | */ |
| 90 | 87 | #[ReturnTypeWillChange] |
| 91 | - public function offsetExists($offset) |
|
| 92 | - { |
|
| 88 | + public function offsetExists($offset) { |
|
| 93 | 89 | return isset($this->container[$offset]); |
| 94 | 90 | } |
| 95 | 91 | |
@@ -101,8 +97,7 @@ discard block |
||
| 101 | 97 | * @psalm-suppress MixedArrayOffset |
| 102 | 98 | */ |
| 103 | 99 | #[ReturnTypeWillChange] |
| 104 | - public function offsetUnset($offset) |
|
| 105 | - { |
|
| 100 | + public function offsetUnset($offset) { |
|
| 106 | 101 | unset($this->container[$offset]); |
| 107 | 102 | } |
| 108 | 103 | |
@@ -114,8 +109,7 @@ discard block |
||
| 114 | 109 | * @psalm-suppress MixedArrayOffset |
| 115 | 110 | */ |
| 116 | 111 | #[ReturnTypeWillChange] |
| 117 | - public function offsetGet($offset) |
|
| 118 | - { |
|
| 112 | + public function offsetGet($offset) { |
|
| 119 | 113 | return isset($this->container[$offset]) |
| 120 | 114 | ? $this->container[$offset] |
| 121 | 115 | : null; |
@@ -1,6 +1,6 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core_ChaCha20_Ctx', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core_ChaCha20_Ctx', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | 6 | |
@@ -26,39 +26,39 @@ discard block |
||
| 26 | 26 | * @throws InvalidArgumentException |
| 27 | 27 | * @throws TypeError |
| 28 | 28 | */ |
| 29 | - public function __construct($key = '', $iv = '', $counter = '') |
|
| 29 | + public function __construct( $key = '', $iv = '', $counter = '' ) |
|
| 30 | 30 | { |
| 31 | - if (self::strlen($key) !== 32) { |
|
| 32 | - throw new InvalidArgumentException('ChaCha20 expects a 256-bit key.'); |
|
| 31 | + if ( self::strlen( $key ) !== 32 ) { |
|
| 32 | + throw new InvalidArgumentException( 'ChaCha20 expects a 256-bit key.' ); |
|
| 33 | 33 | } |
| 34 | - if (self::strlen($iv) !== 8) { |
|
| 35 | - throw new InvalidArgumentException('ChaCha20 expects a 64-bit nonce.'); |
|
| 34 | + if ( self::strlen( $iv ) !== 8 ) { |
|
| 35 | + throw new InvalidArgumentException( 'ChaCha20 expects a 64-bit nonce.' ); |
|
| 36 | 36 | } |
| 37 | - $this->container = new SplFixedArray(16); |
|
| 37 | + $this->container = new SplFixedArray( 16 ); |
|
| 38 | 38 | |
| 39 | 39 | /* "expand 32-byte k" as per ChaCha20 spec */ |
| 40 | - $this->container[0] = 0x61707865; |
|
| 41 | - $this->container[1] = 0x3320646e; |
|
| 42 | - $this->container[2] = 0x79622d32; |
|
| 43 | - $this->container[3] = 0x6b206574; |
|
| 44 | - $this->container[4] = self::load_4(self::substr($key, 0, 4)); |
|
| 45 | - $this->container[5] = self::load_4(self::substr($key, 4, 4)); |
|
| 46 | - $this->container[6] = self::load_4(self::substr($key, 8, 4)); |
|
| 47 | - $this->container[7] = self::load_4(self::substr($key, 12, 4)); |
|
| 48 | - $this->container[8] = self::load_4(self::substr($key, 16, 4)); |
|
| 49 | - $this->container[9] = self::load_4(self::substr($key, 20, 4)); |
|
| 50 | - $this->container[10] = self::load_4(self::substr($key, 24, 4)); |
|
| 51 | - $this->container[11] = self::load_4(self::substr($key, 28, 4)); |
|
| 40 | + $this->container[ 0 ] = 0x61707865; |
|
| 41 | + $this->container[ 1 ] = 0x3320646e; |
|
| 42 | + $this->container[ 2 ] = 0x79622d32; |
|
| 43 | + $this->container[ 3 ] = 0x6b206574; |
|
| 44 | + $this->container[ 4 ] = self::load_4( self::substr( $key, 0, 4 ) ); |
|
| 45 | + $this->container[ 5 ] = self::load_4( self::substr( $key, 4, 4 ) ); |
|
| 46 | + $this->container[ 6 ] = self::load_4( self::substr( $key, 8, 4 ) ); |
|
| 47 | + $this->container[ 7 ] = self::load_4( self::substr( $key, 12, 4 ) ); |
|
| 48 | + $this->container[ 8 ] = self::load_4( self::substr( $key, 16, 4 ) ); |
|
| 49 | + $this->container[ 9 ] = self::load_4( self::substr( $key, 20, 4 ) ); |
|
| 50 | + $this->container[ 10 ] = self::load_4( self::substr( $key, 24, 4 ) ); |
|
| 51 | + $this->container[ 11 ] = self::load_4( self::substr( $key, 28, 4 ) ); |
|
| 52 | 52 | |
| 53 | - if (empty($counter)) { |
|
| 54 | - $this->container[12] = 0; |
|
| 55 | - $this->container[13] = 0; |
|
| 53 | + if ( empty( $counter ) ) { |
|
| 54 | + $this->container[ 12 ] = 0; |
|
| 55 | + $this->container[ 13 ] = 0; |
|
| 56 | 56 | } else { |
| 57 | - $this->container[12] = self::load_4(self::substr($counter, 0, 4)); |
|
| 58 | - $this->container[13] = self::load_4(self::substr($counter, 4, 4)); |
|
| 57 | + $this->container[ 12 ] = self::load_4( self::substr( $counter, 0, 4 ) ); |
|
| 58 | + $this->container[ 13 ] = self::load_4( self::substr( $counter, 4, 4 ) ); |
|
| 59 | 59 | } |
| 60 | - $this->container[14] = self::load_4(self::substr($iv, 0, 4)); |
|
| 61 | - $this->container[15] = self::load_4(self::substr($iv, 4, 4)); |
|
| 60 | + $this->container[ 14 ] = self::load_4( self::substr( $iv, 0, 4 ) ); |
|
| 61 | + $this->container[ 15 ] = self::load_4( self::substr( $iv, 4, 4 ) ); |
|
| 62 | 62 | } |
| 63 | 63 | |
| 64 | 64 | /** |
@@ -69,16 +69,16 @@ discard block |
||
| 69 | 69 | * @return void |
| 70 | 70 | * @psalm-suppress MixedArrayOffset |
| 71 | 71 | */ |
| 72 | - #[ReturnTypeWillChange] |
|
| 73 | - public function offsetSet($offset, $value) |
|
| 72 | + #[ReturnTypeWillChange ] |
|
| 73 | + public function offsetSet( $offset, $value ) |
|
| 74 | 74 | { |
| 75 | - if (!is_int($offset)) { |
|
| 76 | - throw new InvalidArgumentException('Expected an integer'); |
|
| 75 | + if ( ! is_int( $offset ) ) { |
|
| 76 | + throw new InvalidArgumentException( 'Expected an integer' ); |
|
| 77 | 77 | } |
| 78 | - if (!is_int($value)) { |
|
| 79 | - throw new InvalidArgumentException('Expected an integer'); |
|
| 78 | + if ( ! is_int( $value ) ) { |
|
| 79 | + throw new InvalidArgumentException( 'Expected an integer' ); |
|
| 80 | 80 | } |
| 81 | - $this->container[$offset] = $value; |
|
| 81 | + $this->container[ $offset ] = $value; |
|
| 82 | 82 | } |
| 83 | 83 | |
| 84 | 84 | /** |
@@ -87,10 +87,10 @@ discard block |
||
| 87 | 87 | * @param int $offset |
| 88 | 88 | * @return bool |
| 89 | 89 | */ |
| 90 | - #[ReturnTypeWillChange] |
|
| 91 | - public function offsetExists($offset) |
|
| 90 | + #[ReturnTypeWillChange ] |
|
| 91 | + public function offsetExists( $offset ) |
|
| 92 | 92 | { |
| 93 | - return isset($this->container[$offset]); |
|
| 93 | + return isset( $this->container[ $offset ] ); |
|
| 94 | 94 | } |
| 95 | 95 | |
| 96 | 96 | /** |
@@ -100,10 +100,10 @@ discard block |
||
| 100 | 100 | * @return void |
| 101 | 101 | * @psalm-suppress MixedArrayOffset |
| 102 | 102 | */ |
| 103 | - #[ReturnTypeWillChange] |
|
| 104 | - public function offsetUnset($offset) |
|
| 103 | + #[ReturnTypeWillChange ] |
|
| 104 | + public function offsetUnset( $offset ) |
|
| 105 | 105 | { |
| 106 | - unset($this->container[$offset]); |
|
| 106 | + unset( $this->container[ $offset ] ); |
|
| 107 | 107 | } |
| 108 | 108 | |
| 109 | 109 | /** |
@@ -113,11 +113,11 @@ discard block |
||
| 113 | 113 | * @return mixed|null |
| 114 | 114 | * @psalm-suppress MixedArrayOffset |
| 115 | 115 | */ |
| 116 | - #[ReturnTypeWillChange] |
|
| 117 | - public function offsetGet($offset) |
|
| 116 | + #[ReturnTypeWillChange ] |
|
| 117 | + public function offsetGet( $offset ) |
|
| 118 | 118 | { |
| 119 | - return isset($this->container[$offset]) |
|
| 120 | - ? $this->container[$offset] |
|
| 119 | + return isset( $this->container[ $offset ] ) |
|
| 120 | + ? $this->container[ $offset ] |
|
| 121 | 121 | : null; |
| 122 | 122 | } |
| 123 | 123 | } |
@@ -1,7 +1,7 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core_ChaCha20_IetfCtx', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | |
| 7 | 7 | /** |
@@ -9,30 +9,30 @@ discard block |
||
| 9 | 9 | */ |
| 10 | 10 | class ParagonIE_Sodium_Core_ChaCha20_IetfCtx extends ParagonIE_Sodium_Core_ChaCha20_Ctx |
| 11 | 11 | { |
| 12 | - /** |
|
| 13 | - * ParagonIE_Sodium_Core_ChaCha20_IetfCtx constructor. |
|
| 14 | - * |
|
| 15 | - * @internal You should not use this directly from another application |
|
| 16 | - * |
|
| 17 | - * @param string $key ChaCha20 key. |
|
| 18 | - * @param string $iv Initialization Vector (a.k.a. nonce). |
|
| 19 | - * @param string $counter The initial counter value. |
|
| 20 | - * Defaults to 4 0x00 bytes. |
|
| 21 | - * @throws InvalidArgumentException |
|
| 22 | - * @throws TypeError |
|
| 23 | - */ |
|
| 24 | - public function __construct($key = '', $iv = '', $counter = '') |
|
| 25 | - { |
|
| 26 | - if (self::strlen($iv) !== 12) { |
|
| 27 | - throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.'); |
|
| 28 | - } |
|
| 29 | - parent::__construct($key, self::substr($iv, 0, 8), $counter); |
|
| 12 | + /** |
|
| 13 | + * ParagonIE_Sodium_Core_ChaCha20_IetfCtx constructor. |
|
| 14 | + * |
|
| 15 | + * @internal You should not use this directly from another application |
|
| 16 | + * |
|
| 17 | + * @param string $key ChaCha20 key. |
|
| 18 | + * @param string $iv Initialization Vector (a.k.a. nonce). |
|
| 19 | + * @param string $counter The initial counter value. |
|
| 20 | + * Defaults to 4 0x00 bytes. |
|
| 21 | + * @throws InvalidArgumentException |
|
| 22 | + * @throws TypeError |
|
| 23 | + */ |
|
| 24 | + public function __construct($key = '', $iv = '', $counter = '') |
|
| 25 | + { |
|
| 26 | + if (self::strlen($iv) !== 12) { |
|
| 27 | + throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.'); |
|
| 28 | + } |
|
| 29 | + parent::__construct($key, self::substr($iv, 0, 8), $counter); |
|
| 30 | 30 | |
| 31 | - if (!empty($counter)) { |
|
| 32 | - $this->container[12] = self::load_4(self::substr($counter, 0, 4)); |
|
| 33 | - } |
|
| 34 | - $this->container[13] = self::load_4(self::substr($iv, 0, 4)); |
|
| 35 | - $this->container[14] = self::load_4(self::substr($iv, 4, 4)); |
|
| 36 | - $this->container[15] = self::load_4(self::substr($iv, 8, 4)); |
|
| 37 | - } |
|
| 31 | + if (!empty($counter)) { |
|
| 32 | + $this->container[12] = self::load_4(self::substr($counter, 0, 4)); |
|
| 33 | + } |
|
| 34 | + $this->container[13] = self::load_4(self::substr($iv, 0, 4)); |
|
| 35 | + $this->container[14] = self::load_4(self::substr($iv, 4, 4)); |
|
| 36 | + $this->container[15] = self::load_4(self::substr($iv, 8, 4)); |
|
| 37 | + } |
|
| 38 | 38 | } |
@@ -1,6 +1,6 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core_ChaCha20_IetfCtx', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core_ChaCha20_IetfCtx', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | 6 | |
@@ -21,18 +21,18 @@ discard block |
||
| 21 | 21 | * @throws InvalidArgumentException |
| 22 | 22 | * @throws TypeError |
| 23 | 23 | */ |
| 24 | - public function __construct($key = '', $iv = '', $counter = '') |
|
| 24 | + public function __construct( $key = '', $iv = '', $counter = '' ) |
|
| 25 | 25 | { |
| 26 | - if (self::strlen($iv) !== 12) { |
|
| 27 | - throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.'); |
|
| 26 | + if ( self::strlen( $iv ) !== 12 ) { |
|
| 27 | + throw new InvalidArgumentException( 'ChaCha20 expects a 96-bit nonce in IETF mode.' ); |
|
| 28 | 28 | } |
| 29 | - parent::__construct($key, self::substr($iv, 0, 8), $counter); |
|
| 29 | + parent::__construct( $key, self::substr( $iv, 0, 8 ), $counter ); |
|
| 30 | 30 | |
| 31 | - if (!empty($counter)) { |
|
| 32 | - $this->container[12] = self::load_4(self::substr($counter, 0, 4)); |
|
| 31 | + if ( ! empty( $counter ) ) { |
|
| 32 | + $this->container[ 12 ] = self::load_4( self::substr( $counter, 0, 4 ) ); |
|
| 33 | 33 | } |
| 34 | - $this->container[13] = self::load_4(self::substr($iv, 0, 4)); |
|
| 35 | - $this->container[14] = self::load_4(self::substr($iv, 4, 4)); |
|
| 36 | - $this->container[15] = self::load_4(self::substr($iv, 8, 4)); |
|
| 34 | + $this->container[ 13 ] = self::load_4( self::substr( $iv, 0, 4 ) ); |
|
| 35 | + $this->container[ 14 ] = self::load_4( self::substr( $iv, 4, 4 ) ); |
|
| 36 | + $this->container[ 15 ] = self::load_4( self::substr( $iv, 8, 4 ) ); |
|
| 37 | 37 | } |
| 38 | 38 | } |
@@ -7,8 +7,7 @@ discard block |
||
| 7 | 7 | /** |
| 8 | 8 | * Class ParagonIE_Sodium_Core_ChaCha20_IetfCtx |
| 9 | 9 | */ |
| 10 | -class ParagonIE_Sodium_Core_ChaCha20_IetfCtx extends ParagonIE_Sodium_Core_ChaCha20_Ctx |
|
| 11 | -{ |
|
| 10 | +class ParagonIE_Sodium_Core_ChaCha20_IetfCtx extends ParagonIE_Sodium_Core_ChaCha20_Ctx { |
|
| 12 | 11 | /** |
| 13 | 12 | * ParagonIE_Sodium_Core_ChaCha20_IetfCtx constructor. |
| 14 | 13 | * |
@@ -21,8 +20,7 @@ discard block |
||
| 21 | 20 | * @throws InvalidArgumentException |
| 22 | 21 | * @throws TypeError |
| 23 | 22 | */ |
| 24 | - public function __construct($key = '', $iv = '', $counter = '') |
|
| 25 | - { |
|
| 23 | + public function __construct($key = '', $iv = '', $counter = '') { |
|
| 26 | 24 | if (self::strlen($iv) !== 12) { |
| 27 | 25 | throw new InvalidArgumentException('ChaCha20 expects a 96-bit nonce in IETF mode.'); |
| 28 | 26 | } |
@@ -1,11 +1,11 @@ |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (!class_exists('SodiumException', false)) { |
| 4 | - /** |
|
| 5 | - * Class SodiumException |
|
| 6 | - */ |
|
| 7 | - class SodiumException extends Exception |
|
| 8 | - { |
|
| 4 | + /** |
|
| 5 | + * Class SodiumException |
|
| 6 | + */ |
|
| 7 | + class SodiumException extends Exception |
|
| 8 | + { |
|
| 9 | 9 | |
| 10 | - } |
|
| 10 | + } |
|
| 11 | 11 | } |
@@ -1,6 +1,6 @@ |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (!class_exists('SodiumException', false)) { |
|
| 3 | +if ( ! class_exists( 'SodiumException', false ) ) { |
|
| 4 | 4 | /** |
| 5 | 5 | * Class SodiumException |
| 6 | 6 | */ |
@@ -4,8 +4,7 @@ |
||
| 4 | 4 | /** |
| 5 | 5 | * Class SodiumException |
| 6 | 6 | */ |
| 7 | - class SodiumException extends Exception |
|
| 8 | - { |
|
| 7 | + class SodiumException extends Exception { |
|
| 9 | 8 | |
| 10 | 9 | } |
| 11 | 10 | } |
@@ -1,7 +1,7 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core_BLAKE2b', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | |
| 7 | 7 | /** |
@@ -11,709 +11,709 @@ discard block |
||
| 11 | 11 | */ |
| 12 | 12 | abstract class ParagonIE_Sodium_Core32_BLAKE2b extends ParagonIE_Sodium_Core_Util |
| 13 | 13 | { |
| 14 | - /** |
|
| 15 | - * @var SplFixedArray |
|
| 16 | - */ |
|
| 17 | - public static $iv; |
|
| 18 | - |
|
| 19 | - /** |
|
| 20 | - * @var array<int, array<int, int>> |
|
| 21 | - */ |
|
| 22 | - public static $sigma = array( |
|
| 23 | - array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), |
|
| 24 | - array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3), |
|
| 25 | - array( 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4), |
|
| 26 | - array( 7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8), |
|
| 27 | - array( 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13), |
|
| 28 | - array( 2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9), |
|
| 29 | - array( 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11), |
|
| 30 | - array( 13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10), |
|
| 31 | - array( 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5), |
|
| 32 | - array( 10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13 , 0), |
|
| 33 | - array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), |
|
| 34 | - array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3) |
|
| 35 | - ); |
|
| 36 | - |
|
| 37 | - const BLOCKBYTES = 128; |
|
| 38 | - const OUTBYTES = 64; |
|
| 39 | - const KEYBYTES = 64; |
|
| 40 | - |
|
| 41 | - /** |
|
| 42 | - * Turn two 32-bit integers into a fixed array representing a 64-bit integer. |
|
| 43 | - * |
|
| 44 | - * @internal You should not use this directly from another application |
|
| 45 | - * |
|
| 46 | - * @param int $high |
|
| 47 | - * @param int $low |
|
| 48 | - * @return ParagonIE_Sodium_Core32_Int64 |
|
| 49 | - * @throws SodiumException |
|
| 50 | - * @throws TypeError |
|
| 51 | - */ |
|
| 52 | - public static function new64($high, $low) |
|
| 53 | - { |
|
| 54 | - return ParagonIE_Sodium_Core32_Int64::fromInts($low, $high); |
|
| 55 | - } |
|
| 56 | - |
|
| 57 | - /** |
|
| 58 | - * Convert an arbitrary number into an SplFixedArray of two 32-bit integers |
|
| 59 | - * that represents a 64-bit integer. |
|
| 60 | - * |
|
| 61 | - * @internal You should not use this directly from another application |
|
| 62 | - * |
|
| 63 | - * @param int $num |
|
| 64 | - * @return ParagonIE_Sodium_Core32_Int64 |
|
| 65 | - * @throws SodiumException |
|
| 66 | - * @throws TypeError |
|
| 67 | - */ |
|
| 68 | - protected static function to64($num) |
|
| 69 | - { |
|
| 70 | - list($hi, $lo) = self::numericTo64BitInteger($num); |
|
| 71 | - return self::new64($hi, $lo); |
|
| 72 | - } |
|
| 73 | - |
|
| 74 | - /** |
|
| 75 | - * Adds two 64-bit integers together, returning their sum as a SplFixedArray |
|
| 76 | - * containing two 32-bit integers (representing a 64-bit integer). |
|
| 77 | - * |
|
| 78 | - * @internal You should not use this directly from another application |
|
| 79 | - * |
|
| 80 | - * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 81 | - * @param ParagonIE_Sodium_Core32_Int64 $y |
|
| 82 | - * @return ParagonIE_Sodium_Core32_Int64 |
|
| 83 | - */ |
|
| 84 | - protected static function add64($x, $y) |
|
| 85 | - { |
|
| 86 | - return $x->addInt64($y); |
|
| 87 | - } |
|
| 88 | - |
|
| 89 | - /** |
|
| 90 | - * @internal You should not use this directly from another application |
|
| 91 | - * |
|
| 92 | - * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 93 | - * @param ParagonIE_Sodium_Core32_Int64 $y |
|
| 94 | - * @param ParagonIE_Sodium_Core32_Int64 $z |
|
| 95 | - * @return ParagonIE_Sodium_Core32_Int64 |
|
| 96 | - */ |
|
| 97 | - public static function add364($x, $y, $z) |
|
| 98 | - { |
|
| 99 | - return $x->addInt64($y)->addInt64($z); |
|
| 100 | - } |
|
| 101 | - |
|
| 102 | - /** |
|
| 103 | - * @internal You should not use this directly from another application |
|
| 104 | - * |
|
| 105 | - * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 106 | - * @param ParagonIE_Sodium_Core32_Int64 $y |
|
| 107 | - * @return ParagonIE_Sodium_Core32_Int64 |
|
| 108 | - * @throws TypeError |
|
| 109 | - */ |
|
| 110 | - public static function xor64(ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y) |
|
| 111 | - { |
|
| 112 | - return $x->xorInt64($y); |
|
| 113 | - } |
|
| 114 | - |
|
| 115 | - /** |
|
| 116 | - * @internal You should not use this directly from another application |
|
| 117 | - * |
|
| 118 | - * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 119 | - * @param int $c |
|
| 120 | - * @return ParagonIE_Sodium_Core32_Int64 |
|
| 121 | - * @throws SodiumException |
|
| 122 | - * @throws TypeError |
|
| 123 | - */ |
|
| 124 | - public static function rotr64(ParagonIE_Sodium_Core32_Int64 $x, $c) |
|
| 125 | - { |
|
| 126 | - return $x->rotateRight($c); |
|
| 127 | - } |
|
| 128 | - |
|
| 129 | - /** |
|
| 130 | - * @internal You should not use this directly from another application |
|
| 131 | - * |
|
| 132 | - * @param SplFixedArray $x |
|
| 133 | - * @param int $i |
|
| 134 | - * @return ParagonIE_Sodium_Core32_Int64 |
|
| 135 | - * @throws SodiumException |
|
| 136 | - * @throws TypeError |
|
| 137 | - */ |
|
| 138 | - public static function load64($x, $i) |
|
| 139 | - { |
|
| 140 | - /** @var int $l */ |
|
| 141 | - $l = (int) ($x[$i]) |
|
| 142 | - | ((int) ($x[$i+1]) << 8) |
|
| 143 | - | ((int) ($x[$i+2]) << 16) |
|
| 144 | - | ((int) ($x[$i+3]) << 24); |
|
| 145 | - /** @var int $h */ |
|
| 146 | - $h = (int) ($x[$i+4]) |
|
| 147 | - | ((int) ($x[$i+5]) << 8) |
|
| 148 | - | ((int) ($x[$i+6]) << 16) |
|
| 149 | - | ((int) ($x[$i+7]) << 24); |
|
| 150 | - return self::new64($h, $l); |
|
| 151 | - } |
|
| 152 | - |
|
| 153 | - /** |
|
| 154 | - * @internal You should not use this directly from another application |
|
| 155 | - * |
|
| 156 | - * @param SplFixedArray $x |
|
| 157 | - * @param int $i |
|
| 158 | - * @param ParagonIE_Sodium_Core32_Int64 $u |
|
| 159 | - * @return void |
|
| 160 | - * @throws TypeError |
|
| 161 | - * @psalm-suppress MixedArgument |
|
| 162 | - * @psalm-suppress MixedAssignment |
|
| 163 | - * @psalm-suppress MixedArrayAccess |
|
| 164 | - * @psalm-suppress MixedArrayAssignment |
|
| 165 | - * @psalm-suppress MixedArrayOffset |
|
| 166 | - */ |
|
| 167 | - public static function store64(SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u) |
|
| 168 | - { |
|
| 169 | - $v = clone $u; |
|
| 170 | - $maxLength = $x->getSize() - 1; |
|
| 171 | - for ($j = 0; $j < 8; ++$j) { |
|
| 172 | - $k = 3 - ($j >> 1); |
|
| 173 | - $x[$i] = $v->limbs[$k] & 0xff; |
|
| 174 | - if (++$i > $maxLength) { |
|
| 175 | - return; |
|
| 176 | - } |
|
| 177 | - $v->limbs[$k] >>= 8; |
|
| 178 | - } |
|
| 179 | - } |
|
| 180 | - |
|
| 181 | - /** |
|
| 182 | - * This just sets the $iv static variable. |
|
| 183 | - * |
|
| 184 | - * @internal You should not use this directly from another application |
|
| 185 | - * |
|
| 186 | - * @return void |
|
| 187 | - * @throws SodiumException |
|
| 188 | - * @throws TypeError |
|
| 189 | - */ |
|
| 190 | - public static function pseudoConstructor() |
|
| 191 | - { |
|
| 192 | - static $called = false; |
|
| 193 | - if ($called) { |
|
| 194 | - return; |
|
| 195 | - } |
|
| 196 | - self::$iv = new SplFixedArray(8); |
|
| 197 | - self::$iv[0] = self::new64(0x6a09e667, 0xf3bcc908); |
|
| 198 | - self::$iv[1] = self::new64(0xbb67ae85, 0x84caa73b); |
|
| 199 | - self::$iv[2] = self::new64(0x3c6ef372, 0xfe94f82b); |
|
| 200 | - self::$iv[3] = self::new64(0xa54ff53a, 0x5f1d36f1); |
|
| 201 | - self::$iv[4] = self::new64(0x510e527f, 0xade682d1); |
|
| 202 | - self::$iv[5] = self::new64(0x9b05688c, 0x2b3e6c1f); |
|
| 203 | - self::$iv[6] = self::new64(0x1f83d9ab, 0xfb41bd6b); |
|
| 204 | - self::$iv[7] = self::new64(0x5be0cd19, 0x137e2179); |
|
| 205 | - |
|
| 206 | - $called = true; |
|
| 207 | - } |
|
| 208 | - |
|
| 209 | - /** |
|
| 210 | - * Returns a fresh BLAKE2 context. |
|
| 211 | - * |
|
| 212 | - * @internal You should not use this directly from another application |
|
| 213 | - * |
|
| 214 | - * @return SplFixedArray |
|
| 215 | - * @throws TypeError |
|
| 216 | - * @psalm-suppress MixedArgument |
|
| 217 | - * @psalm-suppress MixedAssignment |
|
| 218 | - * @psalm-suppress MixedArrayAccess |
|
| 219 | - * @psalm-suppress MixedArrayAssignment |
|
| 220 | - * @psalm-suppress MixedArrayOffset |
|
| 221 | - * @throws SodiumException |
|
| 222 | - * @throws TypeError |
|
| 223 | - */ |
|
| 224 | - protected static function context() |
|
| 225 | - { |
|
| 226 | - $ctx = new SplFixedArray(6); |
|
| 227 | - $ctx[0] = new SplFixedArray(8); // h |
|
| 228 | - $ctx[1] = new SplFixedArray(2); // t |
|
| 229 | - $ctx[2] = new SplFixedArray(2); // f |
|
| 230 | - $ctx[3] = new SplFixedArray(256); // buf |
|
| 231 | - $ctx[4] = 0; // buflen |
|
| 232 | - $ctx[5] = 0; // last_node (uint8_t) |
|
| 233 | - |
|
| 234 | - for ($i = 8; $i--;) { |
|
| 235 | - $ctx[0][$i] = self::$iv[$i]; |
|
| 236 | - } |
|
| 237 | - for ($i = 256; $i--;) { |
|
| 238 | - $ctx[3][$i] = 0; |
|
| 239 | - } |
|
| 240 | - |
|
| 241 | - $zero = self::new64(0, 0); |
|
| 242 | - $ctx[1][0] = $zero; |
|
| 243 | - $ctx[1][1] = $zero; |
|
| 244 | - $ctx[2][0] = $zero; |
|
| 245 | - $ctx[2][1] = $zero; |
|
| 246 | - |
|
| 247 | - return $ctx; |
|
| 248 | - } |
|
| 249 | - |
|
| 250 | - /** |
|
| 251 | - * @internal You should not use this directly from another application |
|
| 252 | - * |
|
| 253 | - * @param SplFixedArray $ctx |
|
| 254 | - * @param SplFixedArray $buf |
|
| 255 | - * @return void |
|
| 256 | - * @throws SodiumException |
|
| 257 | - * @throws TypeError |
|
| 258 | - * @psalm-suppress MixedArgument |
|
| 259 | - * @psalm-suppress MixedArrayAccess |
|
| 260 | - * @psalm-suppress MixedArrayAssignment |
|
| 261 | - * @psalm-suppress MixedAssignment |
|
| 262 | - */ |
|
| 263 | - protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) |
|
| 264 | - { |
|
| 265 | - $m = new SplFixedArray(16); |
|
| 266 | - $v = new SplFixedArray(16); |
|
| 267 | - |
|
| 268 | - for ($i = 16; $i--;) { |
|
| 269 | - $m[$i] = self::load64($buf, $i << 3); |
|
| 270 | - } |
|
| 271 | - |
|
| 272 | - for ($i = 8; $i--;) { |
|
| 273 | - $v[$i] = $ctx[0][$i]; |
|
| 274 | - } |
|
| 275 | - |
|
| 276 | - $v[ 8] = self::$iv[0]; |
|
| 277 | - $v[ 9] = self::$iv[1]; |
|
| 278 | - $v[10] = self::$iv[2]; |
|
| 279 | - $v[11] = self::$iv[3]; |
|
| 280 | - |
|
| 281 | - $v[12] = self::xor64($ctx[1][0], self::$iv[4]); |
|
| 282 | - $v[13] = self::xor64($ctx[1][1], self::$iv[5]); |
|
| 283 | - $v[14] = self::xor64($ctx[2][0], self::$iv[6]); |
|
| 284 | - $v[15] = self::xor64($ctx[2][1], self::$iv[7]); |
|
| 285 | - |
|
| 286 | - for ($r = 0; $r < 12; ++$r) { |
|
| 287 | - $v = self::G($r, 0, 0, 4, 8, 12, $v, $m); |
|
| 288 | - $v = self::G($r, 1, 1, 5, 9, 13, $v, $m); |
|
| 289 | - $v = self::G($r, 2, 2, 6, 10, 14, $v, $m); |
|
| 290 | - $v = self::G($r, 3, 3, 7, 11, 15, $v, $m); |
|
| 291 | - $v = self::G($r, 4, 0, 5, 10, 15, $v, $m); |
|
| 292 | - $v = self::G($r, 5, 1, 6, 11, 12, $v, $m); |
|
| 293 | - $v = self::G($r, 6, 2, 7, 8, 13, $v, $m); |
|
| 294 | - $v = self::G($r, 7, 3, 4, 9, 14, $v, $m); |
|
| 295 | - } |
|
| 296 | - |
|
| 297 | - for ($i = 8; $i--;) { |
|
| 298 | - $ctx[0][$i] = self::xor64( |
|
| 299 | - $ctx[0][$i], self::xor64($v[$i], $v[$i+8]) |
|
| 300 | - ); |
|
| 301 | - } |
|
| 302 | - } |
|
| 303 | - |
|
| 304 | - /** |
|
| 305 | - * @internal You should not use this directly from another application |
|
| 306 | - * |
|
| 307 | - * @param int $r |
|
| 308 | - * @param int $i |
|
| 309 | - * @param int $a |
|
| 310 | - * @param int $b |
|
| 311 | - * @param int $c |
|
| 312 | - * @param int $d |
|
| 313 | - * @param SplFixedArray $v |
|
| 314 | - * @param SplFixedArray $m |
|
| 315 | - * @return SplFixedArray |
|
| 316 | - * @throws SodiumException |
|
| 317 | - * @throws TypeError |
|
| 318 | - * @psalm-suppress MixedArgument |
|
| 319 | - * @psalm-suppress MixedArrayOffset |
|
| 320 | - */ |
|
| 321 | - public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) |
|
| 322 | - { |
|
| 323 | - $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][$i << 1]]); |
|
| 324 | - $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 32); |
|
| 325 | - $v[$c] = self::add64($v[$c], $v[$d]); |
|
| 326 | - $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 24); |
|
| 327 | - $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][($i << 1) + 1]]); |
|
| 328 | - $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 16); |
|
| 329 | - $v[$c] = self::add64($v[$c], $v[$d]); |
|
| 330 | - $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 63); |
|
| 331 | - return $v; |
|
| 332 | - } |
|
| 333 | - |
|
| 334 | - /** |
|
| 335 | - * @internal You should not use this directly from another application |
|
| 336 | - * |
|
| 337 | - * @param SplFixedArray $ctx |
|
| 338 | - * @param int $inc |
|
| 339 | - * @return void |
|
| 340 | - * @throws SodiumException |
|
| 341 | - * @throws TypeError |
|
| 342 | - * @psalm-suppress MixedArgument |
|
| 343 | - * @psalm-suppress MixedArrayAccess |
|
| 344 | - * @psalm-suppress MixedArrayAssignment |
|
| 345 | - */ |
|
| 346 | - public static function increment_counter($ctx, $inc) |
|
| 347 | - { |
|
| 348 | - if ($inc < 0) { |
|
| 349 | - throw new SodiumException('Increasing by a negative number makes no sense.'); |
|
| 350 | - } |
|
| 351 | - $t = self::to64($inc); |
|
| 352 | - # S->t is $ctx[1] in our implementation |
|
| 353 | - |
|
| 354 | - # S->t[0] = ( uint64_t )( t >> 0 ); |
|
| 355 | - $ctx[1][0] = self::add64($ctx[1][0], $t); |
|
| 356 | - |
|
| 357 | - # S->t[1] += ( S->t[0] < inc ); |
|
| 358 | - if (!($ctx[1][0] instanceof ParagonIE_Sodium_Core32_Int64)) { |
|
| 359 | - throw new TypeError('Not an int64'); |
|
| 360 | - } |
|
| 361 | - /** @var ParagonIE_Sodium_Core32_Int64 $c*/ |
|
| 362 | - $c = $ctx[1][0]; |
|
| 363 | - if ($c->isLessThanInt($inc)) { |
|
| 364 | - $ctx[1][1] = self::add64($ctx[1][1], self::to64(1)); |
|
| 365 | - } |
|
| 366 | - } |
|
| 367 | - |
|
| 368 | - /** |
|
| 369 | - * @internal You should not use this directly from another application |
|
| 370 | - * |
|
| 371 | - * @param SplFixedArray $ctx |
|
| 372 | - * @param SplFixedArray $p |
|
| 373 | - * @param int $plen |
|
| 374 | - * @return void |
|
| 375 | - * @throws SodiumException |
|
| 376 | - * @throws TypeError |
|
| 377 | - * @psalm-suppress MixedArgument |
|
| 378 | - * @psalm-suppress MixedAssignment |
|
| 379 | - * @psalm-suppress MixedArrayAccess |
|
| 380 | - * @psalm-suppress MixedArrayAssignment |
|
| 381 | - * @psalm-suppress MixedArrayOffset |
|
| 382 | - * @psalm-suppress MixedMethodCall |
|
| 383 | - * @psalm-suppress MixedOperand |
|
| 384 | - */ |
|
| 385 | - public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) |
|
| 386 | - { |
|
| 387 | - self::pseudoConstructor(); |
|
| 388 | - |
|
| 389 | - $offset = 0; |
|
| 390 | - while ($plen > 0) { |
|
| 391 | - $left = $ctx[4]; |
|
| 392 | - $fill = 256 - $left; |
|
| 393 | - |
|
| 394 | - if ($plen > $fill) { |
|
| 395 | - # memcpy( S->buf + left, in, fill ); /* Fill buffer */ |
|
| 396 | - for ($i = $fill; $i--;) { |
|
| 397 | - $ctx[3][$i + $left] = $p[$i + $offset]; |
|
| 398 | - } |
|
| 399 | - |
|
| 400 | - # S->buflen += fill; |
|
| 401 | - $ctx[4] += $fill; |
|
| 402 | - |
|
| 403 | - # blake2b_increment_counter( S, BLAKE2B_BLOCKBYTES ); |
|
| 404 | - self::increment_counter($ctx, 128); |
|
| 405 | - |
|
| 406 | - # blake2b_compress( S, S->buf ); /* Compress */ |
|
| 407 | - self::compress($ctx, $ctx[3]); |
|
| 408 | - |
|
| 409 | - # memcpy( S->buf, S->buf + BLAKE2B_BLOCKBYTES, BLAKE2B_BLOCKBYTES ); /* Shift buffer left */ |
|
| 410 | - for ($i = 128; $i--;) { |
|
| 411 | - $ctx[3][$i] = $ctx[3][$i + 128]; |
|
| 412 | - } |
|
| 413 | - |
|
| 414 | - # S->buflen -= BLAKE2B_BLOCKBYTES; |
|
| 415 | - $ctx[4] -= 128; |
|
| 416 | - |
|
| 417 | - # in += fill; |
|
| 418 | - $offset += $fill; |
|
| 419 | - |
|
| 420 | - # inlen -= fill; |
|
| 421 | - $plen -= $fill; |
|
| 422 | - } else { |
|
| 423 | - for ($i = $plen; $i--;) { |
|
| 424 | - $ctx[3][$i + $left] = $p[$i + $offset]; |
|
| 425 | - } |
|
| 426 | - $ctx[4] += $plen; |
|
| 427 | - $offset += $plen; |
|
| 428 | - $plen -= $plen; |
|
| 429 | - } |
|
| 430 | - } |
|
| 431 | - } |
|
| 432 | - |
|
| 433 | - /** |
|
| 434 | - * @internal You should not use this directly from another application |
|
| 435 | - * |
|
| 436 | - * @param SplFixedArray $ctx |
|
| 437 | - * @param SplFixedArray $out |
|
| 438 | - * @return SplFixedArray |
|
| 439 | - * @throws SodiumException |
|
| 440 | - * @throws TypeError |
|
| 441 | - * @psalm-suppress MixedArgument |
|
| 442 | - * @psalm-suppress MixedAssignment |
|
| 443 | - * @psalm-suppress MixedArrayAccess |
|
| 444 | - * @psalm-suppress MixedArrayAssignment |
|
| 445 | - * @psalm-suppress MixedArrayOffset |
|
| 446 | - * @psalm-suppress MixedMethodCall |
|
| 447 | - * @psalm-suppress MixedOperand |
|
| 448 | - */ |
|
| 449 | - public static function finish(SplFixedArray $ctx, SplFixedArray $out) |
|
| 450 | - { |
|
| 451 | - self::pseudoConstructor(); |
|
| 452 | - if ($ctx[4] > 128) { |
|
| 453 | - self::increment_counter($ctx, 128); |
|
| 454 | - self::compress($ctx, $ctx[3]); |
|
| 455 | - $ctx[4] -= 128; |
|
| 456 | - if ($ctx[4] > 128) { |
|
| 457 | - throw new SodiumException('Failed to assert that buflen <= 128 bytes'); |
|
| 458 | - } |
|
| 459 | - for ($i = $ctx[4]; $i--;) { |
|
| 460 | - $ctx[3][$i] = $ctx[3][$i + 128]; |
|
| 461 | - } |
|
| 462 | - } |
|
| 463 | - |
|
| 464 | - self::increment_counter($ctx, $ctx[4]); |
|
| 465 | - $ctx[2][0] = self::new64(0xffffffff, 0xffffffff); |
|
| 466 | - |
|
| 467 | - for ($i = 256 - $ctx[4]; $i--;) { |
|
| 468 | - /** @var int $i */ |
|
| 469 | - $ctx[3][$i + $ctx[4]] = 0; |
|
| 470 | - } |
|
| 471 | - |
|
| 472 | - self::compress($ctx, $ctx[3]); |
|
| 473 | - |
|
| 474 | - $i = (int) (($out->getSize() - 1) / 8); |
|
| 475 | - for (; $i >= 0; --$i) { |
|
| 476 | - self::store64($out, $i << 3, $ctx[0][$i]); |
|
| 477 | - } |
|
| 478 | - return $out; |
|
| 479 | - } |
|
| 480 | - |
|
| 481 | - /** |
|
| 482 | - * @internal You should not use this directly from another application |
|
| 483 | - * |
|
| 484 | - * @param SplFixedArray|null $key |
|
| 485 | - * @param int $outlen |
|
| 486 | - * @param SplFixedArray|null $salt |
|
| 487 | - * @param SplFixedArray|null $personal |
|
| 488 | - * @return SplFixedArray |
|
| 489 | - * @throws SodiumException |
|
| 490 | - * @throws TypeError |
|
| 491 | - * @psalm-suppress MixedArgument |
|
| 492 | - * @psalm-suppress MixedAssignment |
|
| 493 | - * @psalm-suppress MixedArrayAccess |
|
| 494 | - * @psalm-suppress MixedArrayAssignment |
|
| 495 | - * @psalm-suppress MixedMethodCall |
|
| 496 | - */ |
|
| 497 | - public static function init( |
|
| 498 | - $key = null, |
|
| 499 | - $outlen = 64, |
|
| 500 | - $salt = null, |
|
| 501 | - $personal = null |
|
| 502 | - ) { |
|
| 503 | - self::pseudoConstructor(); |
|
| 504 | - $klen = 0; |
|
| 505 | - |
|
| 506 | - if ($key !== null) { |
|
| 507 | - if (count($key) > 64) { |
|
| 508 | - throw new SodiumException('Invalid key size'); |
|
| 509 | - } |
|
| 510 | - $klen = count($key); |
|
| 511 | - } |
|
| 512 | - |
|
| 513 | - if ($outlen > 64) { |
|
| 514 | - throw new SodiumException('Invalid output size'); |
|
| 515 | - } |
|
| 516 | - |
|
| 517 | - $ctx = self::context(); |
|
| 518 | - |
|
| 519 | - $p = new SplFixedArray(64); |
|
| 520 | - // Zero our param buffer... |
|
| 521 | - for ($i = 64; --$i;) { |
|
| 522 | - $p[$i] = 0; |
|
| 523 | - } |
|
| 524 | - |
|
| 525 | - $p[0] = $outlen; // digest_length |
|
| 526 | - $p[1] = $klen; // key_length |
|
| 527 | - $p[2] = 1; // fanout |
|
| 528 | - $p[3] = 1; // depth |
|
| 529 | - |
|
| 530 | - if ($salt instanceof SplFixedArray) { |
|
| 531 | - // salt: [32] through [47] |
|
| 532 | - for ($i = 0; $i < 16; ++$i) { |
|
| 533 | - $p[32 + $i] = (int) $salt[$i]; |
|
| 534 | - } |
|
| 535 | - } |
|
| 536 | - if ($personal instanceof SplFixedArray) { |
|
| 537 | - // personal: [48] through [63] |
|
| 538 | - for ($i = 0; $i < 16; ++$i) { |
|
| 539 | - $p[48 + $i] = (int) $personal[$i]; |
|
| 540 | - } |
|
| 541 | - } |
|
| 542 | - |
|
| 543 | - $ctx[0][0] = self::xor64( |
|
| 544 | - $ctx[0][0], |
|
| 545 | - self::load64($p, 0) |
|
| 546 | - ); |
|
| 547 | - |
|
| 548 | - if ($salt instanceof SplFixedArray || $personal instanceof SplFixedArray) { |
|
| 549 | - // We need to do what blake2b_init_param() does: |
|
| 550 | - for ($i = 1; $i < 8; ++$i) { |
|
| 551 | - $ctx[0][$i] = self::xor64( |
|
| 552 | - $ctx[0][$i], |
|
| 553 | - self::load64($p, $i << 3) |
|
| 554 | - ); |
|
| 555 | - } |
|
| 556 | - } |
|
| 557 | - |
|
| 558 | - if ($klen > 0 && $key instanceof SplFixedArray) { |
|
| 559 | - $block = new SplFixedArray(128); |
|
| 560 | - for ($i = 128; $i--;) { |
|
| 561 | - $block[$i] = 0; |
|
| 562 | - } |
|
| 563 | - for ($i = $klen; $i--;) { |
|
| 564 | - $block[$i] = $key[$i]; |
|
| 565 | - } |
|
| 566 | - self::update($ctx, $block, 128); |
|
| 567 | - $ctx[4] = 128; |
|
| 568 | - } |
|
| 569 | - |
|
| 570 | - return $ctx; |
|
| 571 | - } |
|
| 572 | - |
|
| 573 | - /** |
|
| 574 | - * Convert a string into an SplFixedArray of integers |
|
| 575 | - * |
|
| 576 | - * @internal You should not use this directly from another application |
|
| 577 | - * |
|
| 578 | - * @param string $str |
|
| 579 | - * @return SplFixedArray |
|
| 580 | - * @psalm-suppress MixedArgumentTypeCoercion |
|
| 581 | - */ |
|
| 582 | - public static function stringToSplFixedArray($str = '') |
|
| 583 | - { |
|
| 584 | - $values = unpack('C*', $str); |
|
| 585 | - return SplFixedArray::fromArray(array_values($values)); |
|
| 586 | - } |
|
| 587 | - |
|
| 588 | - /** |
|
| 589 | - * Convert an SplFixedArray of integers into a string |
|
| 590 | - * |
|
| 591 | - * @internal You should not use this directly from another application |
|
| 592 | - * |
|
| 593 | - * @param SplFixedArray $a |
|
| 594 | - * @return string |
|
| 595 | - */ |
|
| 596 | - public static function SplFixedArrayToString(SplFixedArray $a) |
|
| 597 | - { |
|
| 598 | - /** |
|
| 599 | - * @var array<int, string|int> |
|
| 600 | - */ |
|
| 601 | - $arr = $a->toArray(); |
|
| 602 | - $c = $a->count(); |
|
| 603 | - array_unshift($arr, str_repeat('C', $c)); |
|
| 604 | - return (string) (call_user_func_array('pack', $arr)); |
|
| 605 | - } |
|
| 606 | - |
|
| 607 | - /** |
|
| 608 | - * @internal You should not use this directly from another application |
|
| 609 | - * |
|
| 610 | - * @param SplFixedArray $ctx |
|
| 611 | - * @return string |
|
| 612 | - * @throws TypeError |
|
| 613 | - * @psalm-suppress MixedArgument |
|
| 614 | - * @psalm-suppress MixedArrayAccess |
|
| 615 | - * @psalm-suppress MixedArrayAssignment |
|
| 616 | - * @psalm-suppress MixedMethodCall |
|
| 617 | - */ |
|
| 618 | - public static function contextToString(SplFixedArray $ctx) |
|
| 619 | - { |
|
| 620 | - $str = ''; |
|
| 621 | - /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */ |
|
| 622 | - $ctxA = $ctx[0]->toArray(); |
|
| 623 | - |
|
| 624 | - # uint64_t h[8]; |
|
| 625 | - for ($i = 0; $i < 8; ++$i) { |
|
| 626 | - if (!($ctxA[$i] instanceof ParagonIE_Sodium_Core32_Int64)) { |
|
| 627 | - throw new TypeError('Not an instance of Int64'); |
|
| 628 | - } |
|
| 629 | - /** @var ParagonIE_Sodium_Core32_Int64 $ctxAi */ |
|
| 630 | - $ctxAi = $ctxA[$i]; |
|
| 631 | - $str .= $ctxAi->toReverseString(); |
|
| 632 | - } |
|
| 633 | - |
|
| 634 | - # uint64_t t[2]; |
|
| 635 | - # uint64_t f[2]; |
|
| 636 | - for ($i = 1; $i < 3; ++$i) { |
|
| 637 | - /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */ |
|
| 638 | - $ctxA = $ctx[$i]->toArray(); |
|
| 639 | - /** @var ParagonIE_Sodium_Core32_Int64 $ctxA1 */ |
|
| 640 | - $ctxA1 = $ctxA[0]; |
|
| 641 | - /** @var ParagonIE_Sodium_Core32_Int64 $ctxA2 */ |
|
| 642 | - $ctxA2 = $ctxA[1]; |
|
| 643 | - |
|
| 644 | - $str .= $ctxA1->toReverseString(); |
|
| 645 | - $str .= $ctxA2->toReverseString(); |
|
| 646 | - } |
|
| 647 | - |
|
| 648 | - # uint8_t buf[2 * 128]; |
|
| 649 | - $str .= self::SplFixedArrayToString($ctx[3]); |
|
| 650 | - |
|
| 651 | - /** @var int $ctx4 */ |
|
| 652 | - $ctx4 = $ctx[4]; |
|
| 653 | - |
|
| 654 | - # size_t buflen; |
|
| 655 | - $str .= implode('', array( |
|
| 656 | - self::intToChr($ctx4 & 0xff), |
|
| 657 | - self::intToChr(($ctx4 >> 8) & 0xff), |
|
| 658 | - self::intToChr(($ctx4 >> 16) & 0xff), |
|
| 659 | - self::intToChr(($ctx4 >> 24) & 0xff), |
|
| 660 | - "\x00\x00\x00\x00" |
|
| 661 | - /* |
|
| 14 | + /** |
|
| 15 | + * @var SplFixedArray |
|
| 16 | + */ |
|
| 17 | + public static $iv; |
|
| 18 | + |
|
| 19 | + /** |
|
| 20 | + * @var array<int, array<int, int>> |
|
| 21 | + */ |
|
| 22 | + public static $sigma = array( |
|
| 23 | + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), |
|
| 24 | + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3), |
|
| 25 | + array( 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4), |
|
| 26 | + array( 7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8), |
|
| 27 | + array( 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13), |
|
| 28 | + array( 2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9), |
|
| 29 | + array( 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11), |
|
| 30 | + array( 13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10), |
|
| 31 | + array( 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5), |
|
| 32 | + array( 10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13 , 0), |
|
| 33 | + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), |
|
| 34 | + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3) |
|
| 35 | + ); |
|
| 36 | + |
|
| 37 | + const BLOCKBYTES = 128; |
|
| 38 | + const OUTBYTES = 64; |
|
| 39 | + const KEYBYTES = 64; |
|
| 40 | + |
|
| 41 | + /** |
|
| 42 | + * Turn two 32-bit integers into a fixed array representing a 64-bit integer. |
|
| 43 | + * |
|
| 44 | + * @internal You should not use this directly from another application |
|
| 45 | + * |
|
| 46 | + * @param int $high |
|
| 47 | + * @param int $low |
|
| 48 | + * @return ParagonIE_Sodium_Core32_Int64 |
|
| 49 | + * @throws SodiumException |
|
| 50 | + * @throws TypeError |
|
| 51 | + */ |
|
| 52 | + public static function new64($high, $low) |
|
| 53 | + { |
|
| 54 | + return ParagonIE_Sodium_Core32_Int64::fromInts($low, $high); |
|
| 55 | + } |
|
| 56 | + |
|
| 57 | + /** |
|
| 58 | + * Convert an arbitrary number into an SplFixedArray of two 32-bit integers |
|
| 59 | + * that represents a 64-bit integer. |
|
| 60 | + * |
|
| 61 | + * @internal You should not use this directly from another application |
|
| 62 | + * |
|
| 63 | + * @param int $num |
|
| 64 | + * @return ParagonIE_Sodium_Core32_Int64 |
|
| 65 | + * @throws SodiumException |
|
| 66 | + * @throws TypeError |
|
| 67 | + */ |
|
| 68 | + protected static function to64($num) |
|
| 69 | + { |
|
| 70 | + list($hi, $lo) = self::numericTo64BitInteger($num); |
|
| 71 | + return self::new64($hi, $lo); |
|
| 72 | + } |
|
| 73 | + |
|
| 74 | + /** |
|
| 75 | + * Adds two 64-bit integers together, returning their sum as a SplFixedArray |
|
| 76 | + * containing two 32-bit integers (representing a 64-bit integer). |
|
| 77 | + * |
|
| 78 | + * @internal You should not use this directly from another application |
|
| 79 | + * |
|
| 80 | + * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 81 | + * @param ParagonIE_Sodium_Core32_Int64 $y |
|
| 82 | + * @return ParagonIE_Sodium_Core32_Int64 |
|
| 83 | + */ |
|
| 84 | + protected static function add64($x, $y) |
|
| 85 | + { |
|
| 86 | + return $x->addInt64($y); |
|
| 87 | + } |
|
| 88 | + |
|
| 89 | + /** |
|
| 90 | + * @internal You should not use this directly from another application |
|
| 91 | + * |
|
| 92 | + * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 93 | + * @param ParagonIE_Sodium_Core32_Int64 $y |
|
| 94 | + * @param ParagonIE_Sodium_Core32_Int64 $z |
|
| 95 | + * @return ParagonIE_Sodium_Core32_Int64 |
|
| 96 | + */ |
|
| 97 | + public static function add364($x, $y, $z) |
|
| 98 | + { |
|
| 99 | + return $x->addInt64($y)->addInt64($z); |
|
| 100 | + } |
|
| 101 | + |
|
| 102 | + /** |
|
| 103 | + * @internal You should not use this directly from another application |
|
| 104 | + * |
|
| 105 | + * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 106 | + * @param ParagonIE_Sodium_Core32_Int64 $y |
|
| 107 | + * @return ParagonIE_Sodium_Core32_Int64 |
|
| 108 | + * @throws TypeError |
|
| 109 | + */ |
|
| 110 | + public static function xor64(ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y) |
|
| 111 | + { |
|
| 112 | + return $x->xorInt64($y); |
|
| 113 | + } |
|
| 114 | + |
|
| 115 | + /** |
|
| 116 | + * @internal You should not use this directly from another application |
|
| 117 | + * |
|
| 118 | + * @param ParagonIE_Sodium_Core32_Int64 $x |
|
| 119 | + * @param int $c |
|
| 120 | + * @return ParagonIE_Sodium_Core32_Int64 |
|
| 121 | + * @throws SodiumException |
|
| 122 | + * @throws TypeError |
|
| 123 | + */ |
|
| 124 | + public static function rotr64(ParagonIE_Sodium_Core32_Int64 $x, $c) |
|
| 125 | + { |
|
| 126 | + return $x->rotateRight($c); |
|
| 127 | + } |
|
| 128 | + |
|
| 129 | + /** |
|
| 130 | + * @internal You should not use this directly from another application |
|
| 131 | + * |
|
| 132 | + * @param SplFixedArray $x |
|
| 133 | + * @param int $i |
|
| 134 | + * @return ParagonIE_Sodium_Core32_Int64 |
|
| 135 | + * @throws SodiumException |
|
| 136 | + * @throws TypeError |
|
| 137 | + */ |
|
| 138 | + public static function load64($x, $i) |
|
| 139 | + { |
|
| 140 | + /** @var int $l */ |
|
| 141 | + $l = (int) ($x[$i]) |
|
| 142 | + | ((int) ($x[$i+1]) << 8) |
|
| 143 | + | ((int) ($x[$i+2]) << 16) |
|
| 144 | + | ((int) ($x[$i+3]) << 24); |
|
| 145 | + /** @var int $h */ |
|
| 146 | + $h = (int) ($x[$i+4]) |
|
| 147 | + | ((int) ($x[$i+5]) << 8) |
|
| 148 | + | ((int) ($x[$i+6]) << 16) |
|
| 149 | + | ((int) ($x[$i+7]) << 24); |
|
| 150 | + return self::new64($h, $l); |
|
| 151 | + } |
|
| 152 | + |
|
| 153 | + /** |
|
| 154 | + * @internal You should not use this directly from another application |
|
| 155 | + * |
|
| 156 | + * @param SplFixedArray $x |
|
| 157 | + * @param int $i |
|
| 158 | + * @param ParagonIE_Sodium_Core32_Int64 $u |
|
| 159 | + * @return void |
|
| 160 | + * @throws TypeError |
|
| 161 | + * @psalm-suppress MixedArgument |
|
| 162 | + * @psalm-suppress MixedAssignment |
|
| 163 | + * @psalm-suppress MixedArrayAccess |
|
| 164 | + * @psalm-suppress MixedArrayAssignment |
|
| 165 | + * @psalm-suppress MixedArrayOffset |
|
| 166 | + */ |
|
| 167 | + public static function store64(SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u) |
|
| 168 | + { |
|
| 169 | + $v = clone $u; |
|
| 170 | + $maxLength = $x->getSize() - 1; |
|
| 171 | + for ($j = 0; $j < 8; ++$j) { |
|
| 172 | + $k = 3 - ($j >> 1); |
|
| 173 | + $x[$i] = $v->limbs[$k] & 0xff; |
|
| 174 | + if (++$i > $maxLength) { |
|
| 175 | + return; |
|
| 176 | + } |
|
| 177 | + $v->limbs[$k] >>= 8; |
|
| 178 | + } |
|
| 179 | + } |
|
| 180 | + |
|
| 181 | + /** |
|
| 182 | + * This just sets the $iv static variable. |
|
| 183 | + * |
|
| 184 | + * @internal You should not use this directly from another application |
|
| 185 | + * |
|
| 186 | + * @return void |
|
| 187 | + * @throws SodiumException |
|
| 188 | + * @throws TypeError |
|
| 189 | + */ |
|
| 190 | + public static function pseudoConstructor() |
|
| 191 | + { |
|
| 192 | + static $called = false; |
|
| 193 | + if ($called) { |
|
| 194 | + return; |
|
| 195 | + } |
|
| 196 | + self::$iv = new SplFixedArray(8); |
|
| 197 | + self::$iv[0] = self::new64(0x6a09e667, 0xf3bcc908); |
|
| 198 | + self::$iv[1] = self::new64(0xbb67ae85, 0x84caa73b); |
|
| 199 | + self::$iv[2] = self::new64(0x3c6ef372, 0xfe94f82b); |
|
| 200 | + self::$iv[3] = self::new64(0xa54ff53a, 0x5f1d36f1); |
|
| 201 | + self::$iv[4] = self::new64(0x510e527f, 0xade682d1); |
|
| 202 | + self::$iv[5] = self::new64(0x9b05688c, 0x2b3e6c1f); |
|
| 203 | + self::$iv[6] = self::new64(0x1f83d9ab, 0xfb41bd6b); |
|
| 204 | + self::$iv[7] = self::new64(0x5be0cd19, 0x137e2179); |
|
| 205 | + |
|
| 206 | + $called = true; |
|
| 207 | + } |
|
| 208 | + |
|
| 209 | + /** |
|
| 210 | + * Returns a fresh BLAKE2 context. |
|
| 211 | + * |
|
| 212 | + * @internal You should not use this directly from another application |
|
| 213 | + * |
|
| 214 | + * @return SplFixedArray |
|
| 215 | + * @throws TypeError |
|
| 216 | + * @psalm-suppress MixedArgument |
|
| 217 | + * @psalm-suppress MixedAssignment |
|
| 218 | + * @psalm-suppress MixedArrayAccess |
|
| 219 | + * @psalm-suppress MixedArrayAssignment |
|
| 220 | + * @psalm-suppress MixedArrayOffset |
|
| 221 | + * @throws SodiumException |
|
| 222 | + * @throws TypeError |
|
| 223 | + */ |
|
| 224 | + protected static function context() |
|
| 225 | + { |
|
| 226 | + $ctx = new SplFixedArray(6); |
|
| 227 | + $ctx[0] = new SplFixedArray(8); // h |
|
| 228 | + $ctx[1] = new SplFixedArray(2); // t |
|
| 229 | + $ctx[2] = new SplFixedArray(2); // f |
|
| 230 | + $ctx[3] = new SplFixedArray(256); // buf |
|
| 231 | + $ctx[4] = 0; // buflen |
|
| 232 | + $ctx[5] = 0; // last_node (uint8_t) |
|
| 233 | + |
|
| 234 | + for ($i = 8; $i--;) { |
|
| 235 | + $ctx[0][$i] = self::$iv[$i]; |
|
| 236 | + } |
|
| 237 | + for ($i = 256; $i--;) { |
|
| 238 | + $ctx[3][$i] = 0; |
|
| 239 | + } |
|
| 240 | + |
|
| 241 | + $zero = self::new64(0, 0); |
|
| 242 | + $ctx[1][0] = $zero; |
|
| 243 | + $ctx[1][1] = $zero; |
|
| 244 | + $ctx[2][0] = $zero; |
|
| 245 | + $ctx[2][1] = $zero; |
|
| 246 | + |
|
| 247 | + return $ctx; |
|
| 248 | + } |
|
| 249 | + |
|
| 250 | + /** |
|
| 251 | + * @internal You should not use this directly from another application |
|
| 252 | + * |
|
| 253 | + * @param SplFixedArray $ctx |
|
| 254 | + * @param SplFixedArray $buf |
|
| 255 | + * @return void |
|
| 256 | + * @throws SodiumException |
|
| 257 | + * @throws TypeError |
|
| 258 | + * @psalm-suppress MixedArgument |
|
| 259 | + * @psalm-suppress MixedArrayAccess |
|
| 260 | + * @psalm-suppress MixedArrayAssignment |
|
| 261 | + * @psalm-suppress MixedAssignment |
|
| 262 | + */ |
|
| 263 | + protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) |
|
| 264 | + { |
|
| 265 | + $m = new SplFixedArray(16); |
|
| 266 | + $v = new SplFixedArray(16); |
|
| 267 | + |
|
| 268 | + for ($i = 16; $i--;) { |
|
| 269 | + $m[$i] = self::load64($buf, $i << 3); |
|
| 270 | + } |
|
| 271 | + |
|
| 272 | + for ($i = 8; $i--;) { |
|
| 273 | + $v[$i] = $ctx[0][$i]; |
|
| 274 | + } |
|
| 275 | + |
|
| 276 | + $v[ 8] = self::$iv[0]; |
|
| 277 | + $v[ 9] = self::$iv[1]; |
|
| 278 | + $v[10] = self::$iv[2]; |
|
| 279 | + $v[11] = self::$iv[3]; |
|
| 280 | + |
|
| 281 | + $v[12] = self::xor64($ctx[1][0], self::$iv[4]); |
|
| 282 | + $v[13] = self::xor64($ctx[1][1], self::$iv[5]); |
|
| 283 | + $v[14] = self::xor64($ctx[2][0], self::$iv[6]); |
|
| 284 | + $v[15] = self::xor64($ctx[2][1], self::$iv[7]); |
|
| 285 | + |
|
| 286 | + for ($r = 0; $r < 12; ++$r) { |
|
| 287 | + $v = self::G($r, 0, 0, 4, 8, 12, $v, $m); |
|
| 288 | + $v = self::G($r, 1, 1, 5, 9, 13, $v, $m); |
|
| 289 | + $v = self::G($r, 2, 2, 6, 10, 14, $v, $m); |
|
| 290 | + $v = self::G($r, 3, 3, 7, 11, 15, $v, $m); |
|
| 291 | + $v = self::G($r, 4, 0, 5, 10, 15, $v, $m); |
|
| 292 | + $v = self::G($r, 5, 1, 6, 11, 12, $v, $m); |
|
| 293 | + $v = self::G($r, 6, 2, 7, 8, 13, $v, $m); |
|
| 294 | + $v = self::G($r, 7, 3, 4, 9, 14, $v, $m); |
|
| 295 | + } |
|
| 296 | + |
|
| 297 | + for ($i = 8; $i--;) { |
|
| 298 | + $ctx[0][$i] = self::xor64( |
|
| 299 | + $ctx[0][$i], self::xor64($v[$i], $v[$i+8]) |
|
| 300 | + ); |
|
| 301 | + } |
|
| 302 | + } |
|
| 303 | + |
|
| 304 | + /** |
|
| 305 | + * @internal You should not use this directly from another application |
|
| 306 | + * |
|
| 307 | + * @param int $r |
|
| 308 | + * @param int $i |
|
| 309 | + * @param int $a |
|
| 310 | + * @param int $b |
|
| 311 | + * @param int $c |
|
| 312 | + * @param int $d |
|
| 313 | + * @param SplFixedArray $v |
|
| 314 | + * @param SplFixedArray $m |
|
| 315 | + * @return SplFixedArray |
|
| 316 | + * @throws SodiumException |
|
| 317 | + * @throws TypeError |
|
| 318 | + * @psalm-suppress MixedArgument |
|
| 319 | + * @psalm-suppress MixedArrayOffset |
|
| 320 | + */ |
|
| 321 | + public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) |
|
| 322 | + { |
|
| 323 | + $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][$i << 1]]); |
|
| 324 | + $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 32); |
|
| 325 | + $v[$c] = self::add64($v[$c], $v[$d]); |
|
| 326 | + $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 24); |
|
| 327 | + $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][($i << 1) + 1]]); |
|
| 328 | + $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 16); |
|
| 329 | + $v[$c] = self::add64($v[$c], $v[$d]); |
|
| 330 | + $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 63); |
|
| 331 | + return $v; |
|
| 332 | + } |
|
| 333 | + |
|
| 334 | + /** |
|
| 335 | + * @internal You should not use this directly from another application |
|
| 336 | + * |
|
| 337 | + * @param SplFixedArray $ctx |
|
| 338 | + * @param int $inc |
|
| 339 | + * @return void |
|
| 340 | + * @throws SodiumException |
|
| 341 | + * @throws TypeError |
|
| 342 | + * @psalm-suppress MixedArgument |
|
| 343 | + * @psalm-suppress MixedArrayAccess |
|
| 344 | + * @psalm-suppress MixedArrayAssignment |
|
| 345 | + */ |
|
| 346 | + public static function increment_counter($ctx, $inc) |
|
| 347 | + { |
|
| 348 | + if ($inc < 0) { |
|
| 349 | + throw new SodiumException('Increasing by a negative number makes no sense.'); |
|
| 350 | + } |
|
| 351 | + $t = self::to64($inc); |
|
| 352 | + # S->t is $ctx[1] in our implementation |
|
| 353 | + |
|
| 354 | + # S->t[0] = ( uint64_t )( t >> 0 ); |
|
| 355 | + $ctx[1][0] = self::add64($ctx[1][0], $t); |
|
| 356 | + |
|
| 357 | + # S->t[1] += ( S->t[0] < inc ); |
|
| 358 | + if (!($ctx[1][0] instanceof ParagonIE_Sodium_Core32_Int64)) { |
|
| 359 | + throw new TypeError('Not an int64'); |
|
| 360 | + } |
|
| 361 | + /** @var ParagonIE_Sodium_Core32_Int64 $c*/ |
|
| 362 | + $c = $ctx[1][0]; |
|
| 363 | + if ($c->isLessThanInt($inc)) { |
|
| 364 | + $ctx[1][1] = self::add64($ctx[1][1], self::to64(1)); |
|
| 365 | + } |
|
| 366 | + } |
|
| 367 | + |
|
| 368 | + /** |
|
| 369 | + * @internal You should not use this directly from another application |
|
| 370 | + * |
|
| 371 | + * @param SplFixedArray $ctx |
|
| 372 | + * @param SplFixedArray $p |
|
| 373 | + * @param int $plen |
|
| 374 | + * @return void |
|
| 375 | + * @throws SodiumException |
|
| 376 | + * @throws TypeError |
|
| 377 | + * @psalm-suppress MixedArgument |
|
| 378 | + * @psalm-suppress MixedAssignment |
|
| 379 | + * @psalm-suppress MixedArrayAccess |
|
| 380 | + * @psalm-suppress MixedArrayAssignment |
|
| 381 | + * @psalm-suppress MixedArrayOffset |
|
| 382 | + * @psalm-suppress MixedMethodCall |
|
| 383 | + * @psalm-suppress MixedOperand |
|
| 384 | + */ |
|
| 385 | + public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) |
|
| 386 | + { |
|
| 387 | + self::pseudoConstructor(); |
|
| 388 | + |
|
| 389 | + $offset = 0; |
|
| 390 | + while ($plen > 0) { |
|
| 391 | + $left = $ctx[4]; |
|
| 392 | + $fill = 256 - $left; |
|
| 393 | + |
|
| 394 | + if ($plen > $fill) { |
|
| 395 | + # memcpy( S->buf + left, in, fill ); /* Fill buffer */ |
|
| 396 | + for ($i = $fill; $i--;) { |
|
| 397 | + $ctx[3][$i + $left] = $p[$i + $offset]; |
|
| 398 | + } |
|
| 399 | + |
|
| 400 | + # S->buflen += fill; |
|
| 401 | + $ctx[4] += $fill; |
|
| 402 | + |
|
| 403 | + # blake2b_increment_counter( S, BLAKE2B_BLOCKBYTES ); |
|
| 404 | + self::increment_counter($ctx, 128); |
|
| 405 | + |
|
| 406 | + # blake2b_compress( S, S->buf ); /* Compress */ |
|
| 407 | + self::compress($ctx, $ctx[3]); |
|
| 408 | + |
|
| 409 | + # memcpy( S->buf, S->buf + BLAKE2B_BLOCKBYTES, BLAKE2B_BLOCKBYTES ); /* Shift buffer left */ |
|
| 410 | + for ($i = 128; $i--;) { |
|
| 411 | + $ctx[3][$i] = $ctx[3][$i + 128]; |
|
| 412 | + } |
|
| 413 | + |
|
| 414 | + # S->buflen -= BLAKE2B_BLOCKBYTES; |
|
| 415 | + $ctx[4] -= 128; |
|
| 416 | + |
|
| 417 | + # in += fill; |
|
| 418 | + $offset += $fill; |
|
| 419 | + |
|
| 420 | + # inlen -= fill; |
|
| 421 | + $plen -= $fill; |
|
| 422 | + } else { |
|
| 423 | + for ($i = $plen; $i--;) { |
|
| 424 | + $ctx[3][$i + $left] = $p[$i + $offset]; |
|
| 425 | + } |
|
| 426 | + $ctx[4] += $plen; |
|
| 427 | + $offset += $plen; |
|
| 428 | + $plen -= $plen; |
|
| 429 | + } |
|
| 430 | + } |
|
| 431 | + } |
|
| 432 | + |
|
| 433 | + /** |
|
| 434 | + * @internal You should not use this directly from another application |
|
| 435 | + * |
|
| 436 | + * @param SplFixedArray $ctx |
|
| 437 | + * @param SplFixedArray $out |
|
| 438 | + * @return SplFixedArray |
|
| 439 | + * @throws SodiumException |
|
| 440 | + * @throws TypeError |
|
| 441 | + * @psalm-suppress MixedArgument |
|
| 442 | + * @psalm-suppress MixedAssignment |
|
| 443 | + * @psalm-suppress MixedArrayAccess |
|
| 444 | + * @psalm-suppress MixedArrayAssignment |
|
| 445 | + * @psalm-suppress MixedArrayOffset |
|
| 446 | + * @psalm-suppress MixedMethodCall |
|
| 447 | + * @psalm-suppress MixedOperand |
|
| 448 | + */ |
|
| 449 | + public static function finish(SplFixedArray $ctx, SplFixedArray $out) |
|
| 450 | + { |
|
| 451 | + self::pseudoConstructor(); |
|
| 452 | + if ($ctx[4] > 128) { |
|
| 453 | + self::increment_counter($ctx, 128); |
|
| 454 | + self::compress($ctx, $ctx[3]); |
|
| 455 | + $ctx[4] -= 128; |
|
| 456 | + if ($ctx[4] > 128) { |
|
| 457 | + throw new SodiumException('Failed to assert that buflen <= 128 bytes'); |
|
| 458 | + } |
|
| 459 | + for ($i = $ctx[4]; $i--;) { |
|
| 460 | + $ctx[3][$i] = $ctx[3][$i + 128]; |
|
| 461 | + } |
|
| 462 | + } |
|
| 463 | + |
|
| 464 | + self::increment_counter($ctx, $ctx[4]); |
|
| 465 | + $ctx[2][0] = self::new64(0xffffffff, 0xffffffff); |
|
| 466 | + |
|
| 467 | + for ($i = 256 - $ctx[4]; $i--;) { |
|
| 468 | + /** @var int $i */ |
|
| 469 | + $ctx[3][$i + $ctx[4]] = 0; |
|
| 470 | + } |
|
| 471 | + |
|
| 472 | + self::compress($ctx, $ctx[3]); |
|
| 473 | + |
|
| 474 | + $i = (int) (($out->getSize() - 1) / 8); |
|
| 475 | + for (; $i >= 0; --$i) { |
|
| 476 | + self::store64($out, $i << 3, $ctx[0][$i]); |
|
| 477 | + } |
|
| 478 | + return $out; |
|
| 479 | + } |
|
| 480 | + |
|
| 481 | + /** |
|
| 482 | + * @internal You should not use this directly from another application |
|
| 483 | + * |
|
| 484 | + * @param SplFixedArray|null $key |
|
| 485 | + * @param int $outlen |
|
| 486 | + * @param SplFixedArray|null $salt |
|
| 487 | + * @param SplFixedArray|null $personal |
|
| 488 | + * @return SplFixedArray |
|
| 489 | + * @throws SodiumException |
|
| 490 | + * @throws TypeError |
|
| 491 | + * @psalm-suppress MixedArgument |
|
| 492 | + * @psalm-suppress MixedAssignment |
|
| 493 | + * @psalm-suppress MixedArrayAccess |
|
| 494 | + * @psalm-suppress MixedArrayAssignment |
|
| 495 | + * @psalm-suppress MixedMethodCall |
|
| 496 | + */ |
|
| 497 | + public static function init( |
|
| 498 | + $key = null, |
|
| 499 | + $outlen = 64, |
|
| 500 | + $salt = null, |
|
| 501 | + $personal = null |
|
| 502 | + ) { |
|
| 503 | + self::pseudoConstructor(); |
|
| 504 | + $klen = 0; |
|
| 505 | + |
|
| 506 | + if ($key !== null) { |
|
| 507 | + if (count($key) > 64) { |
|
| 508 | + throw new SodiumException('Invalid key size'); |
|
| 509 | + } |
|
| 510 | + $klen = count($key); |
|
| 511 | + } |
|
| 512 | + |
|
| 513 | + if ($outlen > 64) { |
|
| 514 | + throw new SodiumException('Invalid output size'); |
|
| 515 | + } |
|
| 516 | + |
|
| 517 | + $ctx = self::context(); |
|
| 518 | + |
|
| 519 | + $p = new SplFixedArray(64); |
|
| 520 | + // Zero our param buffer... |
|
| 521 | + for ($i = 64; --$i;) { |
|
| 522 | + $p[$i] = 0; |
|
| 523 | + } |
|
| 524 | + |
|
| 525 | + $p[0] = $outlen; // digest_length |
|
| 526 | + $p[1] = $klen; // key_length |
|
| 527 | + $p[2] = 1; // fanout |
|
| 528 | + $p[3] = 1; // depth |
|
| 529 | + |
|
| 530 | + if ($salt instanceof SplFixedArray) { |
|
| 531 | + // salt: [32] through [47] |
|
| 532 | + for ($i = 0; $i < 16; ++$i) { |
|
| 533 | + $p[32 + $i] = (int) $salt[$i]; |
|
| 534 | + } |
|
| 535 | + } |
|
| 536 | + if ($personal instanceof SplFixedArray) { |
|
| 537 | + // personal: [48] through [63] |
|
| 538 | + for ($i = 0; $i < 16; ++$i) { |
|
| 539 | + $p[48 + $i] = (int) $personal[$i]; |
|
| 540 | + } |
|
| 541 | + } |
|
| 542 | + |
|
| 543 | + $ctx[0][0] = self::xor64( |
|
| 544 | + $ctx[0][0], |
|
| 545 | + self::load64($p, 0) |
|
| 546 | + ); |
|
| 547 | + |
|
| 548 | + if ($salt instanceof SplFixedArray || $personal instanceof SplFixedArray) { |
|
| 549 | + // We need to do what blake2b_init_param() does: |
|
| 550 | + for ($i = 1; $i < 8; ++$i) { |
|
| 551 | + $ctx[0][$i] = self::xor64( |
|
| 552 | + $ctx[0][$i], |
|
| 553 | + self::load64($p, $i << 3) |
|
| 554 | + ); |
|
| 555 | + } |
|
| 556 | + } |
|
| 557 | + |
|
| 558 | + if ($klen > 0 && $key instanceof SplFixedArray) { |
|
| 559 | + $block = new SplFixedArray(128); |
|
| 560 | + for ($i = 128; $i--;) { |
|
| 561 | + $block[$i] = 0; |
|
| 562 | + } |
|
| 563 | + for ($i = $klen; $i--;) { |
|
| 564 | + $block[$i] = $key[$i]; |
|
| 565 | + } |
|
| 566 | + self::update($ctx, $block, 128); |
|
| 567 | + $ctx[4] = 128; |
|
| 568 | + } |
|
| 569 | + |
|
| 570 | + return $ctx; |
|
| 571 | + } |
|
| 572 | + |
|
| 573 | + /** |
|
| 574 | + * Convert a string into an SplFixedArray of integers |
|
| 575 | + * |
|
| 576 | + * @internal You should not use this directly from another application |
|
| 577 | + * |
|
| 578 | + * @param string $str |
|
| 579 | + * @return SplFixedArray |
|
| 580 | + * @psalm-suppress MixedArgumentTypeCoercion |
|
| 581 | + */ |
|
| 582 | + public static function stringToSplFixedArray($str = '') |
|
| 583 | + { |
|
| 584 | + $values = unpack('C*', $str); |
|
| 585 | + return SplFixedArray::fromArray(array_values($values)); |
|
| 586 | + } |
|
| 587 | + |
|
| 588 | + /** |
|
| 589 | + * Convert an SplFixedArray of integers into a string |
|
| 590 | + * |
|
| 591 | + * @internal You should not use this directly from another application |
|
| 592 | + * |
|
| 593 | + * @param SplFixedArray $a |
|
| 594 | + * @return string |
|
| 595 | + */ |
|
| 596 | + public static function SplFixedArrayToString(SplFixedArray $a) |
|
| 597 | + { |
|
| 598 | + /** |
|
| 599 | + * @var array<int, string|int> |
|
| 600 | + */ |
|
| 601 | + $arr = $a->toArray(); |
|
| 602 | + $c = $a->count(); |
|
| 603 | + array_unshift($arr, str_repeat('C', $c)); |
|
| 604 | + return (string) (call_user_func_array('pack', $arr)); |
|
| 605 | + } |
|
| 606 | + |
|
| 607 | + /** |
|
| 608 | + * @internal You should not use this directly from another application |
|
| 609 | + * |
|
| 610 | + * @param SplFixedArray $ctx |
|
| 611 | + * @return string |
|
| 612 | + * @throws TypeError |
|
| 613 | + * @psalm-suppress MixedArgument |
|
| 614 | + * @psalm-suppress MixedArrayAccess |
|
| 615 | + * @psalm-suppress MixedArrayAssignment |
|
| 616 | + * @psalm-suppress MixedMethodCall |
|
| 617 | + */ |
|
| 618 | + public static function contextToString(SplFixedArray $ctx) |
|
| 619 | + { |
|
| 620 | + $str = ''; |
|
| 621 | + /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */ |
|
| 622 | + $ctxA = $ctx[0]->toArray(); |
|
| 623 | + |
|
| 624 | + # uint64_t h[8]; |
|
| 625 | + for ($i = 0; $i < 8; ++$i) { |
|
| 626 | + if (!($ctxA[$i] instanceof ParagonIE_Sodium_Core32_Int64)) { |
|
| 627 | + throw new TypeError('Not an instance of Int64'); |
|
| 628 | + } |
|
| 629 | + /** @var ParagonIE_Sodium_Core32_Int64 $ctxAi */ |
|
| 630 | + $ctxAi = $ctxA[$i]; |
|
| 631 | + $str .= $ctxAi->toReverseString(); |
|
| 632 | + } |
|
| 633 | + |
|
| 634 | + # uint64_t t[2]; |
|
| 635 | + # uint64_t f[2]; |
|
| 636 | + for ($i = 1; $i < 3; ++$i) { |
|
| 637 | + /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */ |
|
| 638 | + $ctxA = $ctx[$i]->toArray(); |
|
| 639 | + /** @var ParagonIE_Sodium_Core32_Int64 $ctxA1 */ |
|
| 640 | + $ctxA1 = $ctxA[0]; |
|
| 641 | + /** @var ParagonIE_Sodium_Core32_Int64 $ctxA2 */ |
|
| 642 | + $ctxA2 = $ctxA[1]; |
|
| 643 | + |
|
| 644 | + $str .= $ctxA1->toReverseString(); |
|
| 645 | + $str .= $ctxA2->toReverseString(); |
|
| 646 | + } |
|
| 647 | + |
|
| 648 | + # uint8_t buf[2 * 128]; |
|
| 649 | + $str .= self::SplFixedArrayToString($ctx[3]); |
|
| 650 | + |
|
| 651 | + /** @var int $ctx4 */ |
|
| 652 | + $ctx4 = $ctx[4]; |
|
| 653 | + |
|
| 654 | + # size_t buflen; |
|
| 655 | + $str .= implode('', array( |
|
| 656 | + self::intToChr($ctx4 & 0xff), |
|
| 657 | + self::intToChr(($ctx4 >> 8) & 0xff), |
|
| 658 | + self::intToChr(($ctx4 >> 16) & 0xff), |
|
| 659 | + self::intToChr(($ctx4 >> 24) & 0xff), |
|
| 660 | + "\x00\x00\x00\x00" |
|
| 661 | + /* |
|
| 662 | 662 | self::intToChr(($ctx4 >> 32) & 0xff), |
| 663 | 663 | self::intToChr(($ctx4 >> 40) & 0xff), |
| 664 | 664 | self::intToChr(($ctx4 >> 48) & 0xff), |
| 665 | 665 | self::intToChr(($ctx4 >> 56) & 0xff) |
| 666 | 666 | */ |
| 667 | - )); |
|
| 668 | - # uint8_t last_node; |
|
| 669 | - return $str . self::intToChr($ctx[5]) . str_repeat("\x00", 23); |
|
| 670 | - } |
|
| 671 | - |
|
| 672 | - /** |
|
| 673 | - * Creates an SplFixedArray containing other SplFixedArray elements, from |
|
| 674 | - * a string (compatible with \Sodium\crypto_generichash_{init, update, final}) |
|
| 675 | - * |
|
| 676 | - * @internal You should not use this directly from another application |
|
| 677 | - * |
|
| 678 | - * @param string $string |
|
| 679 | - * @return SplFixedArray |
|
| 680 | - * @throws SodiumException |
|
| 681 | - * @throws TypeError |
|
| 682 | - * @psalm-suppress MixedArrayAccess |
|
| 683 | - * @psalm-suppress MixedArrayAssignment |
|
| 684 | - */ |
|
| 685 | - public static function stringToContext($string) |
|
| 686 | - { |
|
| 687 | - $ctx = self::context(); |
|
| 688 | - |
|
| 689 | - # uint64_t h[8]; |
|
| 690 | - for ($i = 0; $i < 8; ++$i) { |
|
| 691 | - $ctx[0][$i] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 692 | - self::substr($string, (($i << 3) + 0), 8) |
|
| 693 | - ); |
|
| 694 | - } |
|
| 695 | - |
|
| 696 | - # uint64_t t[2]; |
|
| 697 | - # uint64_t f[2]; |
|
| 698 | - for ($i = 1; $i < 3; ++$i) { |
|
| 699 | - $ctx[$i][1] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 700 | - self::substr($string, 72 + (($i - 1) << 4), 8) |
|
| 701 | - ); |
|
| 702 | - $ctx[$i][0] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 703 | - self::substr($string, 64 + (($i - 1) << 4), 8) |
|
| 704 | - ); |
|
| 705 | - } |
|
| 706 | - |
|
| 707 | - # uint8_t buf[2 * 128]; |
|
| 708 | - $ctx[3] = self::stringToSplFixedArray(self::substr($string, 96, 256)); |
|
| 709 | - |
|
| 710 | - # uint8_t buf[2 * 128]; |
|
| 711 | - $int = 0; |
|
| 712 | - for ($i = 0; $i < 8; ++$i) { |
|
| 713 | - $int |= self::chrToInt($string[352 + $i]) << ($i << 3); |
|
| 714 | - } |
|
| 715 | - $ctx[4] = $int; |
|
| 716 | - |
|
| 717 | - return $ctx; |
|
| 718 | - } |
|
| 667 | + )); |
|
| 668 | + # uint8_t last_node; |
|
| 669 | + return $str . self::intToChr($ctx[5]) . str_repeat("\x00", 23); |
|
| 670 | + } |
|
| 671 | + |
|
| 672 | + /** |
|
| 673 | + * Creates an SplFixedArray containing other SplFixedArray elements, from |
|
| 674 | + * a string (compatible with \Sodium\crypto_generichash_{init, update, final}) |
|
| 675 | + * |
|
| 676 | + * @internal You should not use this directly from another application |
|
| 677 | + * |
|
| 678 | + * @param string $string |
|
| 679 | + * @return SplFixedArray |
|
| 680 | + * @throws SodiumException |
|
| 681 | + * @throws TypeError |
|
| 682 | + * @psalm-suppress MixedArrayAccess |
|
| 683 | + * @psalm-suppress MixedArrayAssignment |
|
| 684 | + */ |
|
| 685 | + public static function stringToContext($string) |
|
| 686 | + { |
|
| 687 | + $ctx = self::context(); |
|
| 688 | + |
|
| 689 | + # uint64_t h[8]; |
|
| 690 | + for ($i = 0; $i < 8; ++$i) { |
|
| 691 | + $ctx[0][$i] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 692 | + self::substr($string, (($i << 3) + 0), 8) |
|
| 693 | + ); |
|
| 694 | + } |
|
| 695 | + |
|
| 696 | + # uint64_t t[2]; |
|
| 697 | + # uint64_t f[2]; |
|
| 698 | + for ($i = 1; $i < 3; ++$i) { |
|
| 699 | + $ctx[$i][1] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 700 | + self::substr($string, 72 + (($i - 1) << 4), 8) |
|
| 701 | + ); |
|
| 702 | + $ctx[$i][0] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 703 | + self::substr($string, 64 + (($i - 1) << 4), 8) |
|
| 704 | + ); |
|
| 705 | + } |
|
| 706 | + |
|
| 707 | + # uint8_t buf[2 * 128]; |
|
| 708 | + $ctx[3] = self::stringToSplFixedArray(self::substr($string, 96, 256)); |
|
| 709 | + |
|
| 710 | + # uint8_t buf[2 * 128]; |
|
| 711 | + $int = 0; |
|
| 712 | + for ($i = 0; $i < 8; ++$i) { |
|
| 713 | + $int |= self::chrToInt($string[352 + $i]) << ($i << 3); |
|
| 714 | + } |
|
| 715 | + $ctx[4] = $int; |
|
| 716 | + |
|
| 717 | + return $ctx; |
|
| 718 | + } |
|
| 719 | 719 | } |
@@ -1,6 +1,6 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core_BLAKE2b', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core_BLAKE2b', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | 6 | |
@@ -20,18 +20,18 @@ discard block |
||
| 20 | 20 | * @var array<int, array<int, int>> |
| 21 | 21 | */ |
| 22 | 22 | public static $sigma = array( |
| 23 | - array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), |
|
| 24 | - array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3), |
|
| 25 | - array( 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4), |
|
| 26 | - array( 7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8), |
|
| 27 | - array( 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13), |
|
| 28 | - array( 2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9), |
|
| 29 | - array( 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11), |
|
| 30 | - array( 13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10), |
|
| 31 | - array( 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5), |
|
| 32 | - array( 10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13 , 0), |
|
| 33 | - array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15), |
|
| 34 | - array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3) |
|
| 23 | + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 ), |
|
| 24 | + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3 ), |
|
| 25 | + array( 11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4 ), |
|
| 26 | + array( 7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8 ), |
|
| 27 | + array( 9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13 ), |
|
| 28 | + array( 2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9 ), |
|
| 29 | + array( 12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11 ), |
|
| 30 | + array( 13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10 ), |
|
| 31 | + array( 6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5 ), |
|
| 32 | + array( 10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0 ), |
|
| 33 | + array( 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 ), |
|
| 34 | + array( 14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3 ) |
|
| 35 | 35 | ); |
| 36 | 36 | |
| 37 | 37 | const BLOCKBYTES = 128; |
@@ -49,9 +49,9 @@ discard block |
||
| 49 | 49 | * @throws SodiumException |
| 50 | 50 | * @throws TypeError |
| 51 | 51 | */ |
| 52 | - public static function new64($high, $low) |
|
| 52 | + public static function new64( $high, $low ) |
|
| 53 | 53 | { |
| 54 | - return ParagonIE_Sodium_Core32_Int64::fromInts($low, $high); |
|
| 54 | + return ParagonIE_Sodium_Core32_Int64::fromInts( $low, $high ); |
|
| 55 | 55 | } |
| 56 | 56 | |
| 57 | 57 | /** |
@@ -65,10 +65,10 @@ discard block |
||
| 65 | 65 | * @throws SodiumException |
| 66 | 66 | * @throws TypeError |
| 67 | 67 | */ |
| 68 | - protected static function to64($num) |
|
| 68 | + protected static function to64( $num ) |
|
| 69 | 69 | { |
| 70 | - list($hi, $lo) = self::numericTo64BitInteger($num); |
|
| 71 | - return self::new64($hi, $lo); |
|
| 70 | + list( $hi, $lo ) = self::numericTo64BitInteger( $num ); |
|
| 71 | + return self::new64( $hi, $lo ); |
|
| 72 | 72 | } |
| 73 | 73 | |
| 74 | 74 | /** |
@@ -81,9 +81,9 @@ discard block |
||
| 81 | 81 | * @param ParagonIE_Sodium_Core32_Int64 $y |
| 82 | 82 | * @return ParagonIE_Sodium_Core32_Int64 |
| 83 | 83 | */ |
| 84 | - protected static function add64($x, $y) |
|
| 84 | + protected static function add64( $x, $y ) |
|
| 85 | 85 | { |
| 86 | - return $x->addInt64($y); |
|
| 86 | + return $x->addInt64( $y ); |
|
| 87 | 87 | } |
| 88 | 88 | |
| 89 | 89 | /** |
@@ -94,9 +94,9 @@ discard block |
||
| 94 | 94 | * @param ParagonIE_Sodium_Core32_Int64 $z |
| 95 | 95 | * @return ParagonIE_Sodium_Core32_Int64 |
| 96 | 96 | */ |
| 97 | - public static function add364($x, $y, $z) |
|
| 97 | + public static function add364( $x, $y, $z ) |
|
| 98 | 98 | { |
| 99 | - return $x->addInt64($y)->addInt64($z); |
|
| 99 | + return $x->addInt64( $y )->addInt64( $z ); |
|
| 100 | 100 | } |
| 101 | 101 | |
| 102 | 102 | /** |
@@ -107,9 +107,9 @@ discard block |
||
| 107 | 107 | * @return ParagonIE_Sodium_Core32_Int64 |
| 108 | 108 | * @throws TypeError |
| 109 | 109 | */ |
| 110 | - public static function xor64(ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y) |
|
| 110 | + public static function xor64( ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y ) |
|
| 111 | 111 | { |
| 112 | - return $x->xorInt64($y); |
|
| 112 | + return $x->xorInt64( $y ); |
|
| 113 | 113 | } |
| 114 | 114 | |
| 115 | 115 | /** |
@@ -121,9 +121,9 @@ discard block |
||
| 121 | 121 | * @throws SodiumException |
| 122 | 122 | * @throws TypeError |
| 123 | 123 | */ |
| 124 | - public static function rotr64(ParagonIE_Sodium_Core32_Int64 $x, $c) |
|
| 124 | + public static function rotr64( ParagonIE_Sodium_Core32_Int64 $x, $c ) |
|
| 125 | 125 | { |
| 126 | - return $x->rotateRight($c); |
|
| 126 | + return $x->rotateRight( $c ); |
|
| 127 | 127 | } |
| 128 | 128 | |
| 129 | 129 | /** |
@@ -135,19 +135,19 @@ discard block |
||
| 135 | 135 | * @throws SodiumException |
| 136 | 136 | * @throws TypeError |
| 137 | 137 | */ |
| 138 | - public static function load64($x, $i) |
|
| 138 | + public static function load64( $x, $i ) |
|
| 139 | 139 | { |
| 140 | 140 | /** @var int $l */ |
| 141 | - $l = (int) ($x[$i]) |
|
| 142 | - | ((int) ($x[$i+1]) << 8) |
|
| 143 | - | ((int) ($x[$i+2]) << 16) |
|
| 144 | - | ((int) ($x[$i+3]) << 24); |
|
| 141 | + $l = (int)( $x[ $i ] ) |
|
| 142 | + | ( (int)( $x[ $i + 1 ] ) << 8 ) |
|
| 143 | + | ( (int)( $x[ $i + 2 ] ) << 16 ) |
|
| 144 | + | ( (int)( $x[ $i + 3 ] ) << 24 ); |
|
| 145 | 145 | /** @var int $h */ |
| 146 | - $h = (int) ($x[$i+4]) |
|
| 147 | - | ((int) ($x[$i+5]) << 8) |
|
| 148 | - | ((int) ($x[$i+6]) << 16) |
|
| 149 | - | ((int) ($x[$i+7]) << 24); |
|
| 150 | - return self::new64($h, $l); |
|
| 146 | + $h = (int)( $x[ $i + 4 ] ) |
|
| 147 | + | ( (int)( $x[ $i + 5 ] ) << 8 ) |
|
| 148 | + | ( (int)( $x[ $i + 6 ] ) << 16 ) |
|
| 149 | + | ( (int)( $x[ $i + 7 ] ) << 24 ); |
|
| 150 | + return self::new64( $h, $l ); |
|
| 151 | 151 | } |
| 152 | 152 | |
| 153 | 153 | /** |
@@ -164,17 +164,17 @@ discard block |
||
| 164 | 164 | * @psalm-suppress MixedArrayAssignment |
| 165 | 165 | * @psalm-suppress MixedArrayOffset |
| 166 | 166 | */ |
| 167 | - public static function store64(SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u) |
|
| 167 | + public static function store64( SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u ) |
|
| 168 | 168 | { |
| 169 | 169 | $v = clone $u; |
| 170 | 170 | $maxLength = $x->getSize() - 1; |
| 171 | - for ($j = 0; $j < 8; ++$j) { |
|
| 172 | - $k = 3 - ($j >> 1); |
|
| 173 | - $x[$i] = $v->limbs[$k] & 0xff; |
|
| 171 | + for ( $j = 0; $j < 8; ++$j ) { |
|
| 172 | + $k = 3 - ( $j >> 1 ); |
|
| 173 | + $x[ $i ] = $v->limbs[ $k ] & 0xff; |
|
| 174 | 174 | if (++$i > $maxLength) { |
| 175 | 175 | return; |
| 176 | 176 | } |
| 177 | - $v->limbs[$k] >>= 8; |
|
| 177 | + $v->limbs[ $k ] >>= 8; |
|
| 178 | 178 | } |
| 179 | 179 | } |
| 180 | 180 | |
@@ -190,18 +190,18 @@ discard block |
||
| 190 | 190 | public static function pseudoConstructor() |
| 191 | 191 | { |
| 192 | 192 | static $called = false; |
| 193 | - if ($called) { |
|
| 193 | + if ( $called ) { |
|
| 194 | 194 | return; |
| 195 | 195 | } |
| 196 | - self::$iv = new SplFixedArray(8); |
|
| 197 | - self::$iv[0] = self::new64(0x6a09e667, 0xf3bcc908); |
|
| 198 | - self::$iv[1] = self::new64(0xbb67ae85, 0x84caa73b); |
|
| 199 | - self::$iv[2] = self::new64(0x3c6ef372, 0xfe94f82b); |
|
| 200 | - self::$iv[3] = self::new64(0xa54ff53a, 0x5f1d36f1); |
|
| 201 | - self::$iv[4] = self::new64(0x510e527f, 0xade682d1); |
|
| 202 | - self::$iv[5] = self::new64(0x9b05688c, 0x2b3e6c1f); |
|
| 203 | - self::$iv[6] = self::new64(0x1f83d9ab, 0xfb41bd6b); |
|
| 204 | - self::$iv[7] = self::new64(0x5be0cd19, 0x137e2179); |
|
| 196 | + self::$iv = new SplFixedArray( 8 ); |
|
| 197 | + self::$iv[ 0 ] = self::new64( 0x6a09e667, 0xf3bcc908 ); |
|
| 198 | + self::$iv[ 1 ] = self::new64( 0xbb67ae85, 0x84caa73b ); |
|
| 199 | + self::$iv[ 2 ] = self::new64( 0x3c6ef372, 0xfe94f82b ); |
|
| 200 | + self::$iv[ 3 ] = self::new64( 0xa54ff53a, 0x5f1d36f1 ); |
|
| 201 | + self::$iv[ 4 ] = self::new64( 0x510e527f, 0xade682d1 ); |
|
| 202 | + self::$iv[ 5 ] = self::new64( 0x9b05688c, 0x2b3e6c1f ); |
|
| 203 | + self::$iv[ 6 ] = self::new64( 0x1f83d9ab, 0xfb41bd6b ); |
|
| 204 | + self::$iv[ 7 ] = self::new64( 0x5be0cd19, 0x137e2179 ); |
|
| 205 | 205 | |
| 206 | 206 | $called = true; |
| 207 | 207 | } |
@@ -223,26 +223,26 @@ discard block |
||
| 223 | 223 | */ |
| 224 | 224 | protected static function context() |
| 225 | 225 | { |
| 226 | - $ctx = new SplFixedArray(6); |
|
| 227 | - $ctx[0] = new SplFixedArray(8); // h |
|
| 228 | - $ctx[1] = new SplFixedArray(2); // t |
|
| 229 | - $ctx[2] = new SplFixedArray(2); // f |
|
| 230 | - $ctx[3] = new SplFixedArray(256); // buf |
|
| 231 | - $ctx[4] = 0; // buflen |
|
| 232 | - $ctx[5] = 0; // last_node (uint8_t) |
|
| 233 | - |
|
| 234 | - for ($i = 8; $i--;) { |
|
| 235 | - $ctx[0][$i] = self::$iv[$i]; |
|
| 226 | + $ctx = new SplFixedArray( 6 ); |
|
| 227 | + $ctx[ 0 ] = new SplFixedArray( 8 ); // h |
|
| 228 | + $ctx[ 1 ] = new SplFixedArray( 2 ); // t |
|
| 229 | + $ctx[ 2 ] = new SplFixedArray( 2 ); // f |
|
| 230 | + $ctx[ 3 ] = new SplFixedArray( 256 ); // buf |
|
| 231 | + $ctx[ 4 ] = 0; // buflen |
|
| 232 | + $ctx[ 5 ] = 0; // last_node (uint8_t) |
|
| 233 | + |
|
| 234 | + for ( $i = 8; $i--; ) { |
|
| 235 | + $ctx[ 0 ][ $i ] = self::$iv[ $i ]; |
|
| 236 | 236 | } |
| 237 | - for ($i = 256; $i--;) { |
|
| 238 | - $ctx[3][$i] = 0; |
|
| 237 | + for ( $i = 256; $i--; ) { |
|
| 238 | + $ctx[ 3 ][ $i ] = 0; |
|
| 239 | 239 | } |
| 240 | 240 | |
| 241 | - $zero = self::new64(0, 0); |
|
| 242 | - $ctx[1][0] = $zero; |
|
| 243 | - $ctx[1][1] = $zero; |
|
| 244 | - $ctx[2][0] = $zero; |
|
| 245 | - $ctx[2][1] = $zero; |
|
| 241 | + $zero = self::new64( 0, 0 ); |
|
| 242 | + $ctx[ 1 ][ 0 ] = $zero; |
|
| 243 | + $ctx[ 1 ][ 1 ] = $zero; |
|
| 244 | + $ctx[ 2 ][ 0 ] = $zero; |
|
| 245 | + $ctx[ 2 ][ 1 ] = $zero; |
|
| 246 | 246 | |
| 247 | 247 | return $ctx; |
| 248 | 248 | } |
@@ -260,43 +260,43 @@ discard block |
||
| 260 | 260 | * @psalm-suppress MixedArrayAssignment |
| 261 | 261 | * @psalm-suppress MixedAssignment |
| 262 | 262 | */ |
| 263 | - protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) |
|
| 263 | + protected static function compress( SplFixedArray $ctx, SplFixedArray $buf ) |
|
| 264 | 264 | { |
| 265 | - $m = new SplFixedArray(16); |
|
| 266 | - $v = new SplFixedArray(16); |
|
| 265 | + $m = new SplFixedArray( 16 ); |
|
| 266 | + $v = new SplFixedArray( 16 ); |
|
| 267 | 267 | |
| 268 | - for ($i = 16; $i--;) { |
|
| 269 | - $m[$i] = self::load64($buf, $i << 3); |
|
| 268 | + for ( $i = 16; $i--; ) { |
|
| 269 | + $m[ $i ] = self::load64( $buf, $i << 3 ); |
|
| 270 | 270 | } |
| 271 | 271 | |
| 272 | - for ($i = 8; $i--;) { |
|
| 273 | - $v[$i] = $ctx[0][$i]; |
|
| 272 | + for ( $i = 8; $i--; ) { |
|
| 273 | + $v[ $i ] = $ctx[ 0 ][ $i ]; |
|
| 274 | 274 | } |
| 275 | 275 | |
| 276 | - $v[ 8] = self::$iv[0]; |
|
| 277 | - $v[ 9] = self::$iv[1]; |
|
| 278 | - $v[10] = self::$iv[2]; |
|
| 279 | - $v[11] = self::$iv[3]; |
|
| 280 | - |
|
| 281 | - $v[12] = self::xor64($ctx[1][0], self::$iv[4]); |
|
| 282 | - $v[13] = self::xor64($ctx[1][1], self::$iv[5]); |
|
| 283 | - $v[14] = self::xor64($ctx[2][0], self::$iv[6]); |
|
| 284 | - $v[15] = self::xor64($ctx[2][1], self::$iv[7]); |
|
| 285 | - |
|
| 286 | - for ($r = 0; $r < 12; ++$r) { |
|
| 287 | - $v = self::G($r, 0, 0, 4, 8, 12, $v, $m); |
|
| 288 | - $v = self::G($r, 1, 1, 5, 9, 13, $v, $m); |
|
| 289 | - $v = self::G($r, 2, 2, 6, 10, 14, $v, $m); |
|
| 290 | - $v = self::G($r, 3, 3, 7, 11, 15, $v, $m); |
|
| 291 | - $v = self::G($r, 4, 0, 5, 10, 15, $v, $m); |
|
| 292 | - $v = self::G($r, 5, 1, 6, 11, 12, $v, $m); |
|
| 293 | - $v = self::G($r, 6, 2, 7, 8, 13, $v, $m); |
|
| 294 | - $v = self::G($r, 7, 3, 4, 9, 14, $v, $m); |
|
| 276 | + $v[ 8 ] = self::$iv[ 0 ]; |
|
| 277 | + $v[ 9 ] = self::$iv[ 1 ]; |
|
| 278 | + $v[ 10 ] = self::$iv[ 2 ]; |
|
| 279 | + $v[ 11 ] = self::$iv[ 3 ]; |
|
| 280 | + |
|
| 281 | + $v[ 12 ] = self::xor64( $ctx[ 1 ][ 0 ], self::$iv[ 4 ] ); |
|
| 282 | + $v[ 13 ] = self::xor64( $ctx[ 1 ][ 1 ], self::$iv[ 5 ] ); |
|
| 283 | + $v[ 14 ] = self::xor64( $ctx[ 2 ][ 0 ], self::$iv[ 6 ] ); |
|
| 284 | + $v[ 15 ] = self::xor64( $ctx[ 2 ][ 1 ], self::$iv[ 7 ] ); |
|
| 285 | + |
|
| 286 | + for ( $r = 0; $r < 12; ++$r ) { |
|
| 287 | + $v = self::G( $r, 0, 0, 4, 8, 12, $v, $m ); |
|
| 288 | + $v = self::G( $r, 1, 1, 5, 9, 13, $v, $m ); |
|
| 289 | + $v = self::G( $r, 2, 2, 6, 10, 14, $v, $m ); |
|
| 290 | + $v = self::G( $r, 3, 3, 7, 11, 15, $v, $m ); |
|
| 291 | + $v = self::G( $r, 4, 0, 5, 10, 15, $v, $m ); |
|
| 292 | + $v = self::G( $r, 5, 1, 6, 11, 12, $v, $m ); |
|
| 293 | + $v = self::G( $r, 6, 2, 7, 8, 13, $v, $m ); |
|
| 294 | + $v = self::G( $r, 7, 3, 4, 9, 14, $v, $m ); |
|
| 295 | 295 | } |
| 296 | 296 | |
| 297 | - for ($i = 8; $i--;) { |
|
| 298 | - $ctx[0][$i] = self::xor64( |
|
| 299 | - $ctx[0][$i], self::xor64($v[$i], $v[$i+8]) |
|
| 297 | + for ( $i = 8; $i--; ) { |
|
| 298 | + $ctx[ 0 ][ $i ] = self::xor64( |
|
| 299 | + $ctx[ 0 ][ $i ], self::xor64( $v[ $i ], $v[ $i + 8 ] ) |
|
| 300 | 300 | ); |
| 301 | 301 | } |
| 302 | 302 | } |
@@ -318,16 +318,16 @@ discard block |
||
| 318 | 318 | * @psalm-suppress MixedArgument |
| 319 | 319 | * @psalm-suppress MixedArrayOffset |
| 320 | 320 | */ |
| 321 | - public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) |
|
| 321 | + public static function G( $r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m ) |
|
| 322 | 322 | { |
| 323 | - $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][$i << 1]]); |
|
| 324 | - $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 32); |
|
| 325 | - $v[$c] = self::add64($v[$c], $v[$d]); |
|
| 326 | - $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 24); |
|
| 327 | - $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][($i << 1) + 1]]); |
|
| 328 | - $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 16); |
|
| 329 | - $v[$c] = self::add64($v[$c], $v[$d]); |
|
| 330 | - $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 63); |
|
| 323 | + $v[ $a ] = self::add364( $v[ $a ], $v[ $b ], $m[ self::$sigma[ $r ][ $i << 1 ] ] ); |
|
| 324 | + $v[ $d ] = self::rotr64( self::xor64( $v[ $d ], $v[ $a ] ), 32 ); |
|
| 325 | + $v[ $c ] = self::add64( $v[ $c ], $v[ $d ] ); |
|
| 326 | + $v[ $b ] = self::rotr64( self::xor64( $v[ $b ], $v[ $c ] ), 24 ); |
|
| 327 | + $v[ $a ] = self::add364( $v[ $a ], $v[ $b ], $m[ self::$sigma[ $r ][ ( $i << 1 ) + 1 ] ] ); |
|
| 328 | + $v[ $d ] = self::rotr64( self::xor64( $v[ $d ], $v[ $a ] ), 16 ); |
|
| 329 | + $v[ $c ] = self::add64( $v[ $c ], $v[ $d ] ); |
|
| 330 | + $v[ $b ] = self::rotr64( self::xor64( $v[ $b ], $v[ $c ] ), 63 ); |
|
| 331 | 331 | return $v; |
| 332 | 332 | } |
| 333 | 333 | |
@@ -343,25 +343,25 @@ discard block |
||
| 343 | 343 | * @psalm-suppress MixedArrayAccess |
| 344 | 344 | * @psalm-suppress MixedArrayAssignment |
| 345 | 345 | */ |
| 346 | - public static function increment_counter($ctx, $inc) |
|
| 346 | + public static function increment_counter( $ctx, $inc ) |
|
| 347 | 347 | { |
| 348 | - if ($inc < 0) { |
|
| 349 | - throw new SodiumException('Increasing by a negative number makes no sense.'); |
|
| 348 | + if ( $inc < 0 ) { |
|
| 349 | + throw new SodiumException( 'Increasing by a negative number makes no sense.' ); |
|
| 350 | 350 | } |
| 351 | - $t = self::to64($inc); |
|
| 351 | + $t = self::to64( $inc ); |
|
| 352 | 352 | # S->t is $ctx[1] in our implementation |
| 353 | 353 | |
| 354 | 354 | # S->t[0] = ( uint64_t )( t >> 0 ); |
| 355 | - $ctx[1][0] = self::add64($ctx[1][0], $t); |
|
| 355 | + $ctx[ 1 ][ 0 ] = self::add64( $ctx[ 1 ][ 0 ], $t ); |
|
| 356 | 356 | |
| 357 | 357 | # S->t[1] += ( S->t[0] < inc ); |
| 358 | - if (!($ctx[1][0] instanceof ParagonIE_Sodium_Core32_Int64)) { |
|
| 359 | - throw new TypeError('Not an int64'); |
|
| 358 | + if ( ! ( $ctx[ 1 ][ 0 ] instanceof ParagonIE_Sodium_Core32_Int64 ) ) { |
|
| 359 | + throw new TypeError( 'Not an int64' ); |
|
| 360 | 360 | } |
| 361 | 361 | /** @var ParagonIE_Sodium_Core32_Int64 $c*/ |
| 362 | - $c = $ctx[1][0]; |
|
| 363 | - if ($c->isLessThanInt($inc)) { |
|
| 364 | - $ctx[1][1] = self::add64($ctx[1][1], self::to64(1)); |
|
| 362 | + $c = $ctx[ 1 ][ 0 ]; |
|
| 363 | + if ( $c->isLessThanInt( $inc ) ) { |
|
| 364 | + $ctx[ 1 ][ 1 ] = self::add64( $ctx[ 1 ][ 1 ], self::to64( 1 ) ); |
|
| 365 | 365 | } |
| 366 | 366 | } |
| 367 | 367 | |
@@ -382,37 +382,37 @@ discard block |
||
| 382 | 382 | * @psalm-suppress MixedMethodCall |
| 383 | 383 | * @psalm-suppress MixedOperand |
| 384 | 384 | */ |
| 385 | - public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) |
|
| 385 | + public static function update( SplFixedArray $ctx, SplFixedArray $p, $plen ) |
|
| 386 | 386 | { |
| 387 | 387 | self::pseudoConstructor(); |
| 388 | 388 | |
| 389 | 389 | $offset = 0; |
| 390 | - while ($plen > 0) { |
|
| 391 | - $left = $ctx[4]; |
|
| 390 | + while ( $plen > 0 ) { |
|
| 391 | + $left = $ctx[ 4 ]; |
|
| 392 | 392 | $fill = 256 - $left; |
| 393 | 393 | |
| 394 | - if ($plen > $fill) { |
|
| 394 | + if ( $plen > $fill ) { |
|
| 395 | 395 | # memcpy( S->buf + left, in, fill ); /* Fill buffer */ |
| 396 | - for ($i = $fill; $i--;) { |
|
| 397 | - $ctx[3][$i + $left] = $p[$i + $offset]; |
|
| 396 | + for ( $i = $fill; $i--; ) { |
|
| 397 | + $ctx[ 3 ][ $i + $left ] = $p[ $i + $offset ]; |
|
| 398 | 398 | } |
| 399 | 399 | |
| 400 | 400 | # S->buflen += fill; |
| 401 | - $ctx[4] += $fill; |
|
| 401 | + $ctx[ 4 ] += $fill; |
|
| 402 | 402 | |
| 403 | 403 | # blake2b_increment_counter( S, BLAKE2B_BLOCKBYTES ); |
| 404 | - self::increment_counter($ctx, 128); |
|
| 404 | + self::increment_counter( $ctx, 128 ); |
|
| 405 | 405 | |
| 406 | 406 | # blake2b_compress( S, S->buf ); /* Compress */ |
| 407 | - self::compress($ctx, $ctx[3]); |
|
| 407 | + self::compress( $ctx, $ctx[ 3 ] ); |
|
| 408 | 408 | |
| 409 | 409 | # memcpy( S->buf, S->buf + BLAKE2B_BLOCKBYTES, BLAKE2B_BLOCKBYTES ); /* Shift buffer left */ |
| 410 | - for ($i = 128; $i--;) { |
|
| 411 | - $ctx[3][$i] = $ctx[3][$i + 128]; |
|
| 410 | + for ( $i = 128; $i--; ) { |
|
| 411 | + $ctx[ 3 ][ $i ] = $ctx[ 3 ][ $i + 128 ]; |
|
| 412 | 412 | } |
| 413 | 413 | |
| 414 | 414 | # S->buflen -= BLAKE2B_BLOCKBYTES; |
| 415 | - $ctx[4] -= 128; |
|
| 415 | + $ctx[ 4 ] -= 128; |
|
| 416 | 416 | |
| 417 | 417 | # in += fill; |
| 418 | 418 | $offset += $fill; |
@@ -420,10 +420,10 @@ discard block |
||
| 420 | 420 | # inlen -= fill; |
| 421 | 421 | $plen -= $fill; |
| 422 | 422 | } else { |
| 423 | - for ($i = $plen; $i--;) { |
|
| 424 | - $ctx[3][$i + $left] = $p[$i + $offset]; |
|
| 423 | + for ( $i = $plen; $i--; ) { |
|
| 424 | + $ctx[ 3 ][ $i + $left ] = $p[ $i + $offset ]; |
|
| 425 | 425 | } |
| 426 | - $ctx[4] += $plen; |
|
| 426 | + $ctx[ 4 ] += $plen; |
|
| 427 | 427 | $offset += $plen; |
| 428 | 428 | $plen -= $plen; |
| 429 | 429 | } |
@@ -446,34 +446,34 @@ discard block |
||
| 446 | 446 | * @psalm-suppress MixedMethodCall |
| 447 | 447 | * @psalm-suppress MixedOperand |
| 448 | 448 | */ |
| 449 | - public static function finish(SplFixedArray $ctx, SplFixedArray $out) |
|
| 449 | + public static function finish( SplFixedArray $ctx, SplFixedArray $out ) |
|
| 450 | 450 | { |
| 451 | 451 | self::pseudoConstructor(); |
| 452 | - if ($ctx[4] > 128) { |
|
| 453 | - self::increment_counter($ctx, 128); |
|
| 454 | - self::compress($ctx, $ctx[3]); |
|
| 455 | - $ctx[4] -= 128; |
|
| 456 | - if ($ctx[4] > 128) { |
|
| 457 | - throw new SodiumException('Failed to assert that buflen <= 128 bytes'); |
|
| 452 | + if ( $ctx[ 4 ] > 128 ) { |
|
| 453 | + self::increment_counter( $ctx, 128 ); |
|
| 454 | + self::compress( $ctx, $ctx[ 3 ] ); |
|
| 455 | + $ctx[ 4 ] -= 128; |
|
| 456 | + if ( $ctx[ 4 ] > 128 ) { |
|
| 457 | + throw new SodiumException( 'Failed to assert that buflen <= 128 bytes' ); |
|
| 458 | 458 | } |
| 459 | - for ($i = $ctx[4]; $i--;) { |
|
| 460 | - $ctx[3][$i] = $ctx[3][$i + 128]; |
|
| 459 | + for ( $i = $ctx[ 4 ]; $i--; ) { |
|
| 460 | + $ctx[ 3 ][ $i ] = $ctx[ 3 ][ $i + 128 ]; |
|
| 461 | 461 | } |
| 462 | 462 | } |
| 463 | 463 | |
| 464 | - self::increment_counter($ctx, $ctx[4]); |
|
| 465 | - $ctx[2][0] = self::new64(0xffffffff, 0xffffffff); |
|
| 464 | + self::increment_counter( $ctx, $ctx[ 4 ] ); |
|
| 465 | + $ctx[ 2 ][ 0 ] = self::new64( 0xffffffff, 0xffffffff ); |
|
| 466 | 466 | |
| 467 | - for ($i = 256 - $ctx[4]; $i--;) { |
|
| 467 | + for ( $i = 256 - $ctx[ 4 ]; $i--; ) { |
|
| 468 | 468 | /** @var int $i */ |
| 469 | - $ctx[3][$i + $ctx[4]] = 0; |
|
| 469 | + $ctx[ 3 ][ $i + $ctx[ 4 ] ] = 0; |
|
| 470 | 470 | } |
| 471 | 471 | |
| 472 | - self::compress($ctx, $ctx[3]); |
|
| 472 | + self::compress( $ctx, $ctx[ 3 ] ); |
|
| 473 | 473 | |
| 474 | - $i = (int) (($out->getSize() - 1) / 8); |
|
| 475 | - for (; $i >= 0; --$i) { |
|
| 476 | - self::store64($out, $i << 3, $ctx[0][$i]); |
|
| 474 | + $i = (int)( ( $out->getSize() - 1 ) / 8 ); |
|
| 475 | + for ( ; $i >= 0; --$i ) { |
|
| 476 | + self::store64( $out, $i << 3, $ctx[ 0 ][ $i ] ); |
|
| 477 | 477 | } |
| 478 | 478 | return $out; |
| 479 | 479 | } |
@@ -503,68 +503,68 @@ discard block |
||
| 503 | 503 | self::pseudoConstructor(); |
| 504 | 504 | $klen = 0; |
| 505 | 505 | |
| 506 | - if ($key !== null) { |
|
| 507 | - if (count($key) > 64) { |
|
| 508 | - throw new SodiumException('Invalid key size'); |
|
| 506 | + if ( $key !== null ) { |
|
| 507 | + if ( count( $key ) > 64 ) { |
|
| 508 | + throw new SodiumException( 'Invalid key size' ); |
|
| 509 | 509 | } |
| 510 | - $klen = count($key); |
|
| 510 | + $klen = count( $key ); |
|
| 511 | 511 | } |
| 512 | 512 | |
| 513 | - if ($outlen > 64) { |
|
| 514 | - throw new SodiumException('Invalid output size'); |
|
| 513 | + if ( $outlen > 64 ) { |
|
| 514 | + throw new SodiumException( 'Invalid output size' ); |
|
| 515 | 515 | } |
| 516 | 516 | |
| 517 | 517 | $ctx = self::context(); |
| 518 | 518 | |
| 519 | - $p = new SplFixedArray(64); |
|
| 519 | + $p = new SplFixedArray( 64 ); |
|
| 520 | 520 | // Zero our param buffer... |
| 521 | - for ($i = 64; --$i;) { |
|
| 522 | - $p[$i] = 0; |
|
| 521 | + for ( $i = 64; --$i; ) { |
|
| 522 | + $p[ $i ] = 0; |
|
| 523 | 523 | } |
| 524 | 524 | |
| 525 | - $p[0] = $outlen; // digest_length |
|
| 526 | - $p[1] = $klen; // key_length |
|
| 527 | - $p[2] = 1; // fanout |
|
| 528 | - $p[3] = 1; // depth |
|
| 525 | + $p[ 0 ] = $outlen; // digest_length |
|
| 526 | + $p[ 1 ] = $klen; // key_length |
|
| 527 | + $p[ 2 ] = 1; // fanout |
|
| 528 | + $p[ 3 ] = 1; // depth |
|
| 529 | 529 | |
| 530 | - if ($salt instanceof SplFixedArray) { |
|
| 530 | + if ( $salt instanceof SplFixedArray ) { |
|
| 531 | 531 | // salt: [32] through [47] |
| 532 | - for ($i = 0; $i < 16; ++$i) { |
|
| 533 | - $p[32 + $i] = (int) $salt[$i]; |
|
| 532 | + for ( $i = 0; $i < 16; ++$i ) { |
|
| 533 | + $p[ 32 + $i ] = (int)$salt[ $i ]; |
|
| 534 | 534 | } |
| 535 | 535 | } |
| 536 | - if ($personal instanceof SplFixedArray) { |
|
| 536 | + if ( $personal instanceof SplFixedArray ) { |
|
| 537 | 537 | // personal: [48] through [63] |
| 538 | - for ($i = 0; $i < 16; ++$i) { |
|
| 539 | - $p[48 + $i] = (int) $personal[$i]; |
|
| 538 | + for ( $i = 0; $i < 16; ++$i ) { |
|
| 539 | + $p[ 48 + $i ] = (int)$personal[ $i ]; |
|
| 540 | 540 | } |
| 541 | 541 | } |
| 542 | 542 | |
| 543 | - $ctx[0][0] = self::xor64( |
|
| 544 | - $ctx[0][0], |
|
| 545 | - self::load64($p, 0) |
|
| 543 | + $ctx[ 0 ][ 0 ] = self::xor64( |
|
| 544 | + $ctx[ 0 ][ 0 ], |
|
| 545 | + self::load64( $p, 0 ) |
|
| 546 | 546 | ); |
| 547 | 547 | |
| 548 | - if ($salt instanceof SplFixedArray || $personal instanceof SplFixedArray) { |
|
| 548 | + if ( $salt instanceof SplFixedArray || $personal instanceof SplFixedArray ) { |
|
| 549 | 549 | // We need to do what blake2b_init_param() does: |
| 550 | - for ($i = 1; $i < 8; ++$i) { |
|
| 551 | - $ctx[0][$i] = self::xor64( |
|
| 552 | - $ctx[0][$i], |
|
| 553 | - self::load64($p, $i << 3) |
|
| 550 | + for ( $i = 1; $i < 8; ++$i ) { |
|
| 551 | + $ctx[ 0 ][ $i ] = self::xor64( |
|
| 552 | + $ctx[ 0 ][ $i ], |
|
| 553 | + self::load64( $p, $i << 3 ) |
|
| 554 | 554 | ); |
| 555 | 555 | } |
| 556 | 556 | } |
| 557 | 557 | |
| 558 | - if ($klen > 0 && $key instanceof SplFixedArray) { |
|
| 559 | - $block = new SplFixedArray(128); |
|
| 560 | - for ($i = 128; $i--;) { |
|
| 561 | - $block[$i] = 0; |
|
| 558 | + if ( $klen > 0 && $key instanceof SplFixedArray ) { |
|
| 559 | + $block = new SplFixedArray( 128 ); |
|
| 560 | + for ( $i = 128; $i--; ) { |
|
| 561 | + $block[ $i ] = 0; |
|
| 562 | 562 | } |
| 563 | - for ($i = $klen; $i--;) { |
|
| 564 | - $block[$i] = $key[$i]; |
|
| 563 | + for ( $i = $klen; $i--; ) { |
|
| 564 | + $block[ $i ] = $key[ $i ]; |
|
| 565 | 565 | } |
| 566 | - self::update($ctx, $block, 128); |
|
| 567 | - $ctx[4] = 128; |
|
| 566 | + self::update( $ctx, $block, 128 ); |
|
| 567 | + $ctx[ 4 ] = 128; |
|
| 568 | 568 | } |
| 569 | 569 | |
| 570 | 570 | return $ctx; |
@@ -579,10 +579,10 @@ discard block |
||
| 579 | 579 | * @return SplFixedArray |
| 580 | 580 | * @psalm-suppress MixedArgumentTypeCoercion |
| 581 | 581 | */ |
| 582 | - public static function stringToSplFixedArray($str = '') |
|
| 582 | + public static function stringToSplFixedArray( $str = '' ) |
|
| 583 | 583 | { |
| 584 | - $values = unpack('C*', $str); |
|
| 585 | - return SplFixedArray::fromArray(array_values($values)); |
|
| 584 | + $values = unpack( 'C*', $str ); |
|
| 585 | + return SplFixedArray::fromArray( array_values( $values ) ); |
|
| 586 | 586 | } |
| 587 | 587 | |
| 588 | 588 | /** |
@@ -593,15 +593,15 @@ discard block |
||
| 593 | 593 | * @param SplFixedArray $a |
| 594 | 594 | * @return string |
| 595 | 595 | */ |
| 596 | - public static function SplFixedArrayToString(SplFixedArray $a) |
|
| 596 | + public static function SplFixedArrayToString( SplFixedArray $a ) |
|
| 597 | 597 | { |
| 598 | 598 | /** |
| 599 | 599 | * @var array<int, string|int> |
| 600 | 600 | */ |
| 601 | 601 | $arr = $a->toArray(); |
| 602 | 602 | $c = $a->count(); |
| 603 | - array_unshift($arr, str_repeat('C', $c)); |
|
| 604 | - return (string) (call_user_func_array('pack', $arr)); |
|
| 603 | + array_unshift( $arr, str_repeat( 'C', $c ) ); |
|
| 604 | + return (string)( call_user_func_array( 'pack', $arr ) ); |
|
| 605 | 605 | } |
| 606 | 606 | |
| 607 | 607 | /** |
@@ -615,48 +615,48 @@ discard block |
||
| 615 | 615 | * @psalm-suppress MixedArrayAssignment |
| 616 | 616 | * @psalm-suppress MixedMethodCall |
| 617 | 617 | */ |
| 618 | - public static function contextToString(SplFixedArray $ctx) |
|
| 618 | + public static function contextToString( SplFixedArray $ctx ) |
|
| 619 | 619 | { |
| 620 | 620 | $str = ''; |
| 621 | 621 | /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */ |
| 622 | - $ctxA = $ctx[0]->toArray(); |
|
| 622 | + $ctxA = $ctx[ 0 ]->toArray(); |
|
| 623 | 623 | |
| 624 | 624 | # uint64_t h[8]; |
| 625 | - for ($i = 0; $i < 8; ++$i) { |
|
| 626 | - if (!($ctxA[$i] instanceof ParagonIE_Sodium_Core32_Int64)) { |
|
| 627 | - throw new TypeError('Not an instance of Int64'); |
|
| 625 | + for ( $i = 0; $i < 8; ++$i ) { |
|
| 626 | + if ( ! ( $ctxA[ $i ] instanceof ParagonIE_Sodium_Core32_Int64 ) ) { |
|
| 627 | + throw new TypeError( 'Not an instance of Int64' ); |
|
| 628 | 628 | } |
| 629 | 629 | /** @var ParagonIE_Sodium_Core32_Int64 $ctxAi */ |
| 630 | - $ctxAi = $ctxA[$i]; |
|
| 630 | + $ctxAi = $ctxA[ $i ]; |
|
| 631 | 631 | $str .= $ctxAi->toReverseString(); |
| 632 | 632 | } |
| 633 | 633 | |
| 634 | 634 | # uint64_t t[2]; |
| 635 | 635 | # uint64_t f[2]; |
| 636 | - for ($i = 1; $i < 3; ++$i) { |
|
| 636 | + for ( $i = 1; $i < 3; ++$i ) { |
|
| 637 | 637 | /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */ |
| 638 | - $ctxA = $ctx[$i]->toArray(); |
|
| 638 | + $ctxA = $ctx[ $i ]->toArray(); |
|
| 639 | 639 | /** @var ParagonIE_Sodium_Core32_Int64 $ctxA1 */ |
| 640 | - $ctxA1 = $ctxA[0]; |
|
| 640 | + $ctxA1 = $ctxA[ 0 ]; |
|
| 641 | 641 | /** @var ParagonIE_Sodium_Core32_Int64 $ctxA2 */ |
| 642 | - $ctxA2 = $ctxA[1]; |
|
| 642 | + $ctxA2 = $ctxA[ 1 ]; |
|
| 643 | 643 | |
| 644 | 644 | $str .= $ctxA1->toReverseString(); |
| 645 | 645 | $str .= $ctxA2->toReverseString(); |
| 646 | 646 | } |
| 647 | 647 | |
| 648 | 648 | # uint8_t buf[2 * 128]; |
| 649 | - $str .= self::SplFixedArrayToString($ctx[3]); |
|
| 649 | + $str .= self::SplFixedArrayToString( $ctx[ 3 ] ); |
|
| 650 | 650 | |
| 651 | 651 | /** @var int $ctx4 */ |
| 652 | - $ctx4 = $ctx[4]; |
|
| 652 | + $ctx4 = $ctx[ 4 ]; |
|
| 653 | 653 | |
| 654 | 654 | # size_t buflen; |
| 655 | - $str .= implode('', array( |
|
| 656 | - self::intToChr($ctx4 & 0xff), |
|
| 657 | - self::intToChr(($ctx4 >> 8) & 0xff), |
|
| 658 | - self::intToChr(($ctx4 >> 16) & 0xff), |
|
| 659 | - self::intToChr(($ctx4 >> 24) & 0xff), |
|
| 655 | + $str .= implode( '', array( |
|
| 656 | + self::intToChr( $ctx4 & 0xff ), |
|
| 657 | + self::intToChr( ( $ctx4 >> 8 ) & 0xff ), |
|
| 658 | + self::intToChr( ( $ctx4 >> 16 ) & 0xff ), |
|
| 659 | + self::intToChr( ( $ctx4 >> 24 ) & 0xff ), |
|
| 660 | 660 | "\x00\x00\x00\x00" |
| 661 | 661 | /* |
| 662 | 662 | self::intToChr(($ctx4 >> 32) & 0xff), |
@@ -664,9 +664,9 @@ discard block |
||
| 664 | 664 | self::intToChr(($ctx4 >> 48) & 0xff), |
| 665 | 665 | self::intToChr(($ctx4 >> 56) & 0xff) |
| 666 | 666 | */ |
| 667 | - )); |
|
| 667 | + ) ); |
|
| 668 | 668 | # uint8_t last_node; |
| 669 | - return $str . self::intToChr($ctx[5]) . str_repeat("\x00", 23); |
|
| 669 | + return $str . self::intToChr( $ctx[ 5 ] ) . str_repeat( "\x00", 23 ); |
|
| 670 | 670 | } |
| 671 | 671 | |
| 672 | 672 | /** |
@@ -682,37 +682,37 @@ discard block |
||
| 682 | 682 | * @psalm-suppress MixedArrayAccess |
| 683 | 683 | * @psalm-suppress MixedArrayAssignment |
| 684 | 684 | */ |
| 685 | - public static function stringToContext($string) |
|
| 685 | + public static function stringToContext( $string ) |
|
| 686 | 686 | { |
| 687 | 687 | $ctx = self::context(); |
| 688 | 688 | |
| 689 | 689 | # uint64_t h[8]; |
| 690 | - for ($i = 0; $i < 8; ++$i) { |
|
| 691 | - $ctx[0][$i] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 692 | - self::substr($string, (($i << 3) + 0), 8) |
|
| 690 | + for ( $i = 0; $i < 8; ++$i ) { |
|
| 691 | + $ctx[ 0 ][ $i ] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 692 | + self::substr( $string, ( ( $i << 3 ) + 0 ), 8 ) |
|
| 693 | 693 | ); |
| 694 | 694 | } |
| 695 | 695 | |
| 696 | 696 | # uint64_t t[2]; |
| 697 | 697 | # uint64_t f[2]; |
| 698 | - for ($i = 1; $i < 3; ++$i) { |
|
| 699 | - $ctx[$i][1] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 700 | - self::substr($string, 72 + (($i - 1) << 4), 8) |
|
| 698 | + for ( $i = 1; $i < 3; ++$i ) { |
|
| 699 | + $ctx[ $i ][ 1 ] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 700 | + self::substr( $string, 72 + ( ( $i - 1 ) << 4 ), 8 ) |
|
| 701 | 701 | ); |
| 702 | - $ctx[$i][0] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 703 | - self::substr($string, 64 + (($i - 1) << 4), 8) |
|
| 702 | + $ctx[ $i ][ 0 ] = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 703 | + self::substr( $string, 64 + ( ( $i - 1 ) << 4 ), 8 ) |
|
| 704 | 704 | ); |
| 705 | 705 | } |
| 706 | 706 | |
| 707 | 707 | # uint8_t buf[2 * 128]; |
| 708 | - $ctx[3] = self::stringToSplFixedArray(self::substr($string, 96, 256)); |
|
| 708 | + $ctx[ 3 ] = self::stringToSplFixedArray( self::substr( $string, 96, 256 ) ); |
|
| 709 | 709 | |
| 710 | 710 | # uint8_t buf[2 * 128]; |
| 711 | 711 | $int = 0; |
| 712 | - for ($i = 0; $i < 8; ++$i) { |
|
| 713 | - $int |= self::chrToInt($string[352 + $i]) << ($i << 3); |
|
| 712 | + for ( $i = 0; $i < 8; ++$i ) { |
|
| 713 | + $int |= self::chrToInt( $string[ 352 + $i ] ) << ( $i << 3 ); |
|
| 714 | 714 | } |
| 715 | - $ctx[4] = $int; |
|
| 715 | + $ctx[ 4 ] = $int; |
|
| 716 | 716 | |
| 717 | 717 | return $ctx; |
| 718 | 718 | } |
@@ -9,8 +9,7 @@ discard block |
||
| 9 | 9 | * |
| 10 | 10 | * Based on the work of Devi Mandiri in devi/salt. |
| 11 | 11 | */ |
| 12 | -abstract class ParagonIE_Sodium_Core32_BLAKE2b extends ParagonIE_Sodium_Core_Util |
|
| 13 | -{ |
|
| 12 | +abstract class ParagonIE_Sodium_Core32_BLAKE2b extends ParagonIE_Sodium_Core_Util { |
|
| 14 | 13 | /** |
| 15 | 14 | * @var SplFixedArray |
| 16 | 15 | */ |
@@ -49,8 +48,7 @@ discard block |
||
| 49 | 48 | * @throws SodiumException |
| 50 | 49 | * @throws TypeError |
| 51 | 50 | */ |
| 52 | - public static function new64($high, $low) |
|
| 53 | - { |
|
| 51 | + public static function new64($high, $low) { |
|
| 54 | 52 | return ParagonIE_Sodium_Core32_Int64::fromInts($low, $high); |
| 55 | 53 | } |
| 56 | 54 | |
@@ -65,8 +63,7 @@ discard block |
||
| 65 | 63 | * @throws SodiumException |
| 66 | 64 | * @throws TypeError |
| 67 | 65 | */ |
| 68 | - protected static function to64($num) |
|
| 69 | - { |
|
| 66 | + protected static function to64($num) { |
|
| 70 | 67 | list($hi, $lo) = self::numericTo64BitInteger($num); |
| 71 | 68 | return self::new64($hi, $lo); |
| 72 | 69 | } |
@@ -81,8 +78,7 @@ discard block |
||
| 81 | 78 | * @param ParagonIE_Sodium_Core32_Int64 $y |
| 82 | 79 | * @return ParagonIE_Sodium_Core32_Int64 |
| 83 | 80 | */ |
| 84 | - protected static function add64($x, $y) |
|
| 85 | - { |
|
| 81 | + protected static function add64($x, $y) { |
|
| 86 | 82 | return $x->addInt64($y); |
| 87 | 83 | } |
| 88 | 84 | |
@@ -94,8 +90,7 @@ discard block |
||
| 94 | 90 | * @param ParagonIE_Sodium_Core32_Int64 $z |
| 95 | 91 | * @return ParagonIE_Sodium_Core32_Int64 |
| 96 | 92 | */ |
| 97 | - public static function add364($x, $y, $z) |
|
| 98 | - { |
|
| 93 | + public static function add364($x, $y, $z) { |
|
| 99 | 94 | return $x->addInt64($y)->addInt64($z); |
| 100 | 95 | } |
| 101 | 96 | |
@@ -107,8 +102,7 @@ discard block |
||
| 107 | 102 | * @return ParagonIE_Sodium_Core32_Int64 |
| 108 | 103 | * @throws TypeError |
| 109 | 104 | */ |
| 110 | - public static function xor64(ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y) |
|
| 111 | - { |
|
| 105 | + public static function xor64(ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y) { |
|
| 112 | 106 | return $x->xorInt64($y); |
| 113 | 107 | } |
| 114 | 108 | |
@@ -121,8 +115,7 @@ discard block |
||
| 121 | 115 | * @throws SodiumException |
| 122 | 116 | * @throws TypeError |
| 123 | 117 | */ |
| 124 | - public static function rotr64(ParagonIE_Sodium_Core32_Int64 $x, $c) |
|
| 125 | - { |
|
| 118 | + public static function rotr64(ParagonIE_Sodium_Core32_Int64 $x, $c) { |
|
| 126 | 119 | return $x->rotateRight($c); |
| 127 | 120 | } |
| 128 | 121 | |
@@ -135,8 +128,7 @@ discard block |
||
| 135 | 128 | * @throws SodiumException |
| 136 | 129 | * @throws TypeError |
| 137 | 130 | */ |
| 138 | - public static function load64($x, $i) |
|
| 139 | - { |
|
| 131 | + public static function load64($x, $i) { |
|
| 140 | 132 | /** @var int $l */ |
| 141 | 133 | $l = (int) ($x[$i]) |
| 142 | 134 | | ((int) ($x[$i+1]) << 8) |
@@ -164,8 +156,7 @@ discard block |
||
| 164 | 156 | * @psalm-suppress MixedArrayAssignment |
| 165 | 157 | * @psalm-suppress MixedArrayOffset |
| 166 | 158 | */ |
| 167 | - public static function store64(SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u) |
|
| 168 | - { |
|
| 159 | + public static function store64(SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u) { |
|
| 169 | 160 | $v = clone $u; |
| 170 | 161 | $maxLength = $x->getSize() - 1; |
| 171 | 162 | for ($j = 0; $j < 8; ++$j) { |
@@ -187,8 +178,7 @@ discard block |
||
| 187 | 178 | * @throws SodiumException |
| 188 | 179 | * @throws TypeError |
| 189 | 180 | */ |
| 190 | - public static function pseudoConstructor() |
|
| 191 | - { |
|
| 181 | + public static function pseudoConstructor() { |
|
| 192 | 182 | static $called = false; |
| 193 | 183 | if ($called) { |
| 194 | 184 | return; |
@@ -221,8 +211,7 @@ discard block |
||
| 221 | 211 | * @throws SodiumException |
| 222 | 212 | * @throws TypeError |
| 223 | 213 | */ |
| 224 | - protected static function context() |
|
| 225 | - { |
|
| 214 | + protected static function context() { |
|
| 226 | 215 | $ctx = new SplFixedArray(6); |
| 227 | 216 | $ctx[0] = new SplFixedArray(8); // h |
| 228 | 217 | $ctx[1] = new SplFixedArray(2); // t |
@@ -260,8 +249,7 @@ discard block |
||
| 260 | 249 | * @psalm-suppress MixedArrayAssignment |
| 261 | 250 | * @psalm-suppress MixedAssignment |
| 262 | 251 | */ |
| 263 | - protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) |
|
| 264 | - { |
|
| 252 | + protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) { |
|
| 265 | 253 | $m = new SplFixedArray(16); |
| 266 | 254 | $v = new SplFixedArray(16); |
| 267 | 255 | |
@@ -318,8 +306,7 @@ discard block |
||
| 318 | 306 | * @psalm-suppress MixedArgument |
| 319 | 307 | * @psalm-suppress MixedArrayOffset |
| 320 | 308 | */ |
| 321 | - public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) |
|
| 322 | - { |
|
| 309 | + public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) { |
|
| 323 | 310 | $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][$i << 1]]); |
| 324 | 311 | $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 32); |
| 325 | 312 | $v[$c] = self::add64($v[$c], $v[$d]); |
@@ -343,8 +330,7 @@ discard block |
||
| 343 | 330 | * @psalm-suppress MixedArrayAccess |
| 344 | 331 | * @psalm-suppress MixedArrayAssignment |
| 345 | 332 | */ |
| 346 | - public static function increment_counter($ctx, $inc) |
|
| 347 | - { |
|
| 333 | + public static function increment_counter($ctx, $inc) { |
|
| 348 | 334 | if ($inc < 0) { |
| 349 | 335 | throw new SodiumException('Increasing by a negative number makes no sense.'); |
| 350 | 336 | } |
@@ -382,8 +368,7 @@ discard block |
||
| 382 | 368 | * @psalm-suppress MixedMethodCall |
| 383 | 369 | * @psalm-suppress MixedOperand |
| 384 | 370 | */ |
| 385 | - public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) |
|
| 386 | - { |
|
| 371 | + public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) { |
|
| 387 | 372 | self::pseudoConstructor(); |
| 388 | 373 | |
| 389 | 374 | $offset = 0; |
@@ -446,8 +431,7 @@ discard block |
||
| 446 | 431 | * @psalm-suppress MixedMethodCall |
| 447 | 432 | * @psalm-suppress MixedOperand |
| 448 | 433 | */ |
| 449 | - public static function finish(SplFixedArray $ctx, SplFixedArray $out) |
|
| 450 | - { |
|
| 434 | + public static function finish(SplFixedArray $ctx, SplFixedArray $out) { |
|
| 451 | 435 | self::pseudoConstructor(); |
| 452 | 436 | if ($ctx[4] > 128) { |
| 453 | 437 | self::increment_counter($ctx, 128); |
@@ -579,8 +563,7 @@ discard block |
||
| 579 | 563 | * @return SplFixedArray |
| 580 | 564 | * @psalm-suppress MixedArgumentTypeCoercion |
| 581 | 565 | */ |
| 582 | - public static function stringToSplFixedArray($str = '') |
|
| 583 | - { |
|
| 566 | + public static function stringToSplFixedArray($str = '') { |
|
| 584 | 567 | $values = unpack('C*', $str); |
| 585 | 568 | return SplFixedArray::fromArray(array_values($values)); |
| 586 | 569 | } |
@@ -593,8 +576,7 @@ discard block |
||
| 593 | 576 | * @param SplFixedArray $a |
| 594 | 577 | * @return string |
| 595 | 578 | */ |
| 596 | - public static function SplFixedArrayToString(SplFixedArray $a) |
|
| 597 | - { |
|
| 579 | + public static function SplFixedArrayToString(SplFixedArray $a) { |
|
| 598 | 580 | /** |
| 599 | 581 | * @var array<int, string|int> |
| 600 | 582 | */ |
@@ -615,8 +597,7 @@ discard block |
||
| 615 | 597 | * @psalm-suppress MixedArrayAssignment |
| 616 | 598 | * @psalm-suppress MixedMethodCall |
| 617 | 599 | */ |
| 618 | - public static function contextToString(SplFixedArray $ctx) |
|
| 619 | - { |
|
| 600 | + public static function contextToString(SplFixedArray $ctx) { |
|
| 620 | 601 | $str = ''; |
| 621 | 602 | /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */ |
| 622 | 603 | $ctxA = $ctx[0]->toArray(); |
@@ -682,8 +663,7 @@ discard block |
||
| 682 | 663 | * @psalm-suppress MixedArrayAccess |
| 683 | 664 | * @psalm-suppress MixedArrayAssignment |
| 684 | 665 | */ |
| 685 | - public static function stringToContext($string) |
|
| 686 | - { |
|
| 666 | + public static function stringToContext($string) { |
|
| 687 | 667 | $ctx = self::context(); |
| 688 | 668 | |
| 689 | 669 | # uint64_t h[8]; |
@@ -7,8 +7,7 @@ discard block |
||
| 7 | 7 | /** |
| 8 | 8 | * Class ParagonIE_Sodium_Core32_Ed25519 |
| 9 | 9 | */ |
| 10 | -abstract class ParagonIE_Sodium_Core32_Ed25519 extends ParagonIE_Sodium_Core32_Curve25519 |
|
| 11 | -{ |
|
| 10 | +abstract class ParagonIE_Sodium_Core32_Ed25519 extends ParagonIE_Sodium_Core32_Curve25519 { |
|
| 12 | 11 | const KEYPAIR_BYTES = 96; |
| 13 | 12 | const SEED_BYTES = 32; |
| 14 | 13 | |
@@ -20,8 +19,7 @@ discard block |
||
| 20 | 19 | * @throws SodiumException |
| 21 | 20 | * @throws TypeError |
| 22 | 21 | */ |
| 23 | - public static function keypair() |
|
| 24 | - { |
|
| 22 | + public static function keypair() { |
|
| 25 | 23 | $seed = random_bytes(self::SEED_BYTES); |
| 26 | 24 | $pk = ''; |
| 27 | 25 | $sk = ''; |
@@ -39,8 +37,7 @@ discard block |
||
| 39 | 37 | * @throws SodiumException |
| 40 | 38 | * @throws TypeError |
| 41 | 39 | */ |
| 42 | - public static function seed_keypair(&$pk, &$sk, $seed) |
|
| 43 | - { |
|
| 40 | + public static function seed_keypair(&$pk, &$sk, $seed) { |
|
| 44 | 41 | if (self::strlen($seed) !== self::SEED_BYTES) { |
| 45 | 42 | throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
| 46 | 43 | } |
@@ -58,8 +55,7 @@ discard block |
||
| 58 | 55 | * @return string |
| 59 | 56 | * @throws TypeError |
| 60 | 57 | */ |
| 61 | - public static function secretkey($keypair) |
|
| 62 | - { |
|
| 58 | + public static function secretkey($keypair) { |
|
| 63 | 59 | if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
| 64 | 60 | throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
| 65 | 61 | } |
@@ -74,8 +70,7 @@ discard block |
||
| 74 | 70 | * @throws RangeException |
| 75 | 71 | * @throws TypeError |
| 76 | 72 | */ |
| 77 | - public static function publickey($keypair) |
|
| 78 | - { |
|
| 73 | + public static function publickey($keypair) { |
|
| 79 | 74 | if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
| 80 | 75 | throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
| 81 | 76 | } |
@@ -90,8 +85,7 @@ discard block |
||
| 90 | 85 | * @throws SodiumException |
| 91 | 86 | * @throws TypeError |
| 92 | 87 | */ |
| 93 | - public static function publickey_from_secretkey($sk) |
|
| 94 | - { |
|
| 88 | + public static function publickey_from_secretkey($sk) { |
|
| 95 | 89 | /** @var string $sk */ |
| 96 | 90 | $sk = hash('sha512', self::substr($sk, 0, 32), true); |
| 97 | 91 | $sk[0] = self::intToChr( |
@@ -109,8 +103,7 @@ discard block |
||
| 109 | 103 | * @throws SodiumException |
| 110 | 104 | * @throws TypeError |
| 111 | 105 | */ |
| 112 | - public static function pk_to_curve25519($pk) |
|
| 113 | - { |
|
| 106 | + public static function pk_to_curve25519($pk) { |
|
| 114 | 107 | if (self::small_order($pk)) { |
| 115 | 108 | throw new SodiumException('Public key is on a small order'); |
| 116 | 109 | } |
@@ -151,8 +144,7 @@ discard block |
||
| 151 | 144 | * @throws SodiumException |
| 152 | 145 | * @throws TypeError |
| 153 | 146 | */ |
| 154 | - public static function sk_to_pk($sk) |
|
| 155 | - { |
|
| 147 | + public static function sk_to_pk($sk) { |
|
| 156 | 148 | return self::ge_p3_tobytes( |
| 157 | 149 | self::ge_scalarmult_base( |
| 158 | 150 | self::substr($sk, 0, 32) |
@@ -169,8 +161,7 @@ discard block |
||
| 169 | 161 | * @throws SodiumException |
| 170 | 162 | * @throws TypeError |
| 171 | 163 | */ |
| 172 | - public static function sign($message, $sk) |
|
| 173 | - { |
|
| 164 | + public static function sign($message, $sk) { |
|
| 174 | 165 | /** @var string $signature */ |
| 175 | 166 | $signature = self::sign_detached($message, $sk); |
| 176 | 167 | return $signature . $message; |
@@ -185,8 +176,7 @@ discard block |
||
| 185 | 176 | * @throws SodiumException |
| 186 | 177 | * @throws TypeError |
| 187 | 178 | */ |
| 188 | - public static function sign_open($message, $pk) |
|
| 189 | - { |
|
| 179 | + public static function sign_open($message, $pk) { |
|
| 190 | 180 | /** @var string $signature */ |
| 191 | 181 | $signature = self::substr($message, 0, 64); |
| 192 | 182 | |
@@ -209,8 +199,7 @@ discard block |
||
| 209 | 199 | * @throws TypeError |
| 210 | 200 | * @psalm-suppress PossiblyInvalidArgument |
| 211 | 201 | */ |
| 212 | - public static function sign_detached($message, $sk) |
|
| 213 | - { |
|
| 202 | + public static function sign_detached($message, $sk) { |
|
| 214 | 203 | # crypto_hash_sha512(az, sk, 32); |
| 215 | 204 | $az = hash('sha512', self::substr($sk, 0, 32), true); |
| 216 | 205 | |
@@ -274,8 +263,7 @@ discard block |
||
| 274 | 263 | * @throws SodiumException |
| 275 | 264 | * @throws TypeError |
| 276 | 265 | */ |
| 277 | - public static function verify_detached($sig, $message, $pk) |
|
| 278 | - { |
|
| 266 | + public static function verify_detached($sig, $message, $pk) { |
|
| 279 | 267 | if (self::strlen($sig) < 64) { |
| 280 | 268 | throw new SodiumException('Signature is too short'); |
| 281 | 269 | } |
@@ -341,8 +329,7 @@ discard block |
||
| 341 | 329 | * @throws SodiumException |
| 342 | 330 | * @throws TypeError |
| 343 | 331 | */ |
| 344 | - public static function check_S_lt_L($S) |
|
| 345 | - { |
|
| 332 | + public static function check_S_lt_L($S) { |
|
| 346 | 333 | if (self::strlen($S) < 32) { |
| 347 | 334 | throw new SodiumException('Signature must be 32 bytes'); |
| 348 | 335 | } |
@@ -377,8 +364,7 @@ discard block |
||
| 377 | 364 | * @throws SodiumException |
| 378 | 365 | * @throws TypeError |
| 379 | 366 | */ |
| 380 | - public static function small_order($R) |
|
| 381 | - { |
|
| 367 | + public static function small_order($R) { |
|
| 382 | 368 | static $blocklist = array( |
| 383 | 369 | /* 0 (order 4) */ |
| 384 | 370 | array( |
@@ -1,10 +1,10 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Ed25519', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | if (!class_exists('ParagonIE_Sodium_Core32_Curve25519')) { |
| 7 | - require_once dirname(__FILE__) . '/Curve25519.php'; |
|
| 7 | + require_once dirname(__FILE__) . '/Curve25519.php'; |
|
| 8 | 8 | } |
| 9 | 9 | |
| 10 | 10 | /** |
@@ -12,474 +12,474 @@ discard block |
||
| 12 | 12 | */ |
| 13 | 13 | abstract class ParagonIE_Sodium_Core32_Ed25519 extends ParagonIE_Sodium_Core32_Curve25519 |
| 14 | 14 | { |
| 15 | - const KEYPAIR_BYTES = 96; |
|
| 16 | - const SEED_BYTES = 32; |
|
| 17 | - |
|
| 18 | - /** |
|
| 19 | - * @internal You should not use this directly from another application |
|
| 20 | - * |
|
| 21 | - * @return string (96 bytes) |
|
| 22 | - * @throws Exception |
|
| 23 | - * @throws SodiumException |
|
| 24 | - * @throws TypeError |
|
| 25 | - */ |
|
| 26 | - public static function keypair() |
|
| 27 | - { |
|
| 28 | - $seed = random_bytes(self::SEED_BYTES); |
|
| 29 | - $pk = ''; |
|
| 30 | - $sk = ''; |
|
| 31 | - self::seed_keypair($pk, $sk, $seed); |
|
| 32 | - return $sk . $pk; |
|
| 33 | - } |
|
| 34 | - |
|
| 35 | - /** |
|
| 36 | - * @internal You should not use this directly from another application |
|
| 37 | - * |
|
| 38 | - * @param string $pk |
|
| 39 | - * @param string $sk |
|
| 40 | - * @param string $seed |
|
| 41 | - * @return string |
|
| 42 | - * @throws SodiumException |
|
| 43 | - * @throws TypeError |
|
| 44 | - */ |
|
| 45 | - public static function seed_keypair(&$pk, &$sk, $seed) |
|
| 46 | - { |
|
| 47 | - if (self::strlen($seed) !== self::SEED_BYTES) { |
|
| 48 | - throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
|
| 49 | - } |
|
| 50 | - |
|
| 51 | - /** @var string $pk */ |
|
| 52 | - $pk = self::publickey_from_secretkey($seed); |
|
| 53 | - $sk = $seed . $pk; |
|
| 54 | - return $sk; |
|
| 55 | - } |
|
| 56 | - |
|
| 57 | - /** |
|
| 58 | - * @internal You should not use this directly from another application |
|
| 59 | - * |
|
| 60 | - * @param string $keypair |
|
| 61 | - * @return string |
|
| 62 | - * @throws TypeError |
|
| 63 | - */ |
|
| 64 | - public static function secretkey($keypair) |
|
| 65 | - { |
|
| 66 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
| 67 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
| 68 | - } |
|
| 69 | - return self::substr($keypair, 0, 64); |
|
| 70 | - } |
|
| 71 | - |
|
| 72 | - /** |
|
| 73 | - * @internal You should not use this directly from another application |
|
| 74 | - * |
|
| 75 | - * @param string $keypair |
|
| 76 | - * @return string |
|
| 77 | - * @throws RangeException |
|
| 78 | - * @throws TypeError |
|
| 79 | - */ |
|
| 80 | - public static function publickey($keypair) |
|
| 81 | - { |
|
| 82 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
| 83 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
| 84 | - } |
|
| 85 | - return self::substr($keypair, 64, 32); |
|
| 86 | - } |
|
| 87 | - |
|
| 88 | - /** |
|
| 89 | - * @internal You should not use this directly from another application |
|
| 90 | - * |
|
| 91 | - * @param string $sk |
|
| 92 | - * @return string |
|
| 93 | - * @throws SodiumException |
|
| 94 | - * @throws TypeError |
|
| 95 | - */ |
|
| 96 | - public static function publickey_from_secretkey($sk) |
|
| 97 | - { |
|
| 98 | - /** @var string $sk */ |
|
| 99 | - $sk = hash('sha512', self::substr($sk, 0, 32), true); |
|
| 100 | - $sk[0] = self::intToChr( |
|
| 101 | - self::chrToInt($sk[0]) & 248 |
|
| 102 | - ); |
|
| 103 | - $sk[31] = self::intToChr( |
|
| 104 | - (self::chrToInt($sk[31]) & 63) | 64 |
|
| 105 | - ); |
|
| 106 | - return self::sk_to_pk($sk); |
|
| 107 | - } |
|
| 108 | - |
|
| 109 | - /** |
|
| 110 | - * @param string $pk |
|
| 111 | - * @return string |
|
| 112 | - * @throws SodiumException |
|
| 113 | - * @throws TypeError |
|
| 114 | - */ |
|
| 115 | - public static function pk_to_curve25519($pk) |
|
| 116 | - { |
|
| 117 | - if (self::small_order($pk)) { |
|
| 118 | - throw new SodiumException('Public key is on a small order'); |
|
| 119 | - } |
|
| 120 | - $A = self::ge_frombytes_negate_vartime($pk); |
|
| 121 | - $p1 = self::ge_mul_l($A); |
|
| 122 | - if (!self::fe_isnonzero($p1->X)) { |
|
| 123 | - throw new SodiumException('Unexpected zero result'); |
|
| 124 | - } |
|
| 125 | - |
|
| 126 | - # fe_1(one_minus_y); |
|
| 127 | - # fe_sub(one_minus_y, one_minus_y, A.Y); |
|
| 128 | - # fe_invert(one_minus_y, one_minus_y); |
|
| 129 | - $one_minux_y = self::fe_invert( |
|
| 130 | - self::fe_sub( |
|
| 131 | - self::fe_1(), |
|
| 132 | - $A->Y |
|
| 133 | - ) |
|
| 134 | - ); |
|
| 135 | - |
|
| 136 | - |
|
| 137 | - # fe_1(x); |
|
| 138 | - # fe_add(x, x, A.Y); |
|
| 139 | - # fe_mul(x, x, one_minus_y); |
|
| 140 | - $x = self::fe_mul( |
|
| 141 | - self::fe_add(self::fe_1(), $A->Y), |
|
| 142 | - $one_minux_y |
|
| 143 | - ); |
|
| 144 | - |
|
| 145 | - # fe_tobytes(curve25519_pk, x); |
|
| 146 | - return self::fe_tobytes($x); |
|
| 147 | - } |
|
| 148 | - |
|
| 149 | - /** |
|
| 150 | - * @internal You should not use this directly from another application |
|
| 151 | - * |
|
| 152 | - * @param string $sk |
|
| 153 | - * @return string |
|
| 154 | - * @throws SodiumException |
|
| 155 | - * @throws TypeError |
|
| 156 | - */ |
|
| 157 | - public static function sk_to_pk($sk) |
|
| 158 | - { |
|
| 159 | - return self::ge_p3_tobytes( |
|
| 160 | - self::ge_scalarmult_base( |
|
| 161 | - self::substr($sk, 0, 32) |
|
| 162 | - ) |
|
| 163 | - ); |
|
| 164 | - } |
|
| 165 | - |
|
| 166 | - /** |
|
| 167 | - * @internal You should not use this directly from another application |
|
| 168 | - * |
|
| 169 | - * @param string $message |
|
| 170 | - * @param string $sk |
|
| 171 | - * @return string |
|
| 172 | - * @throws SodiumException |
|
| 173 | - * @throws TypeError |
|
| 174 | - */ |
|
| 175 | - public static function sign($message, $sk) |
|
| 176 | - { |
|
| 177 | - /** @var string $signature */ |
|
| 178 | - $signature = self::sign_detached($message, $sk); |
|
| 179 | - return $signature . $message; |
|
| 180 | - } |
|
| 181 | - |
|
| 182 | - /** |
|
| 183 | - * @internal You should not use this directly from another application |
|
| 184 | - * |
|
| 185 | - * @param string $message A signed message |
|
| 186 | - * @param string $pk Public key |
|
| 187 | - * @return string Message (without signature) |
|
| 188 | - * @throws SodiumException |
|
| 189 | - * @throws TypeError |
|
| 190 | - */ |
|
| 191 | - public static function sign_open($message, $pk) |
|
| 192 | - { |
|
| 193 | - /** @var string $signature */ |
|
| 194 | - $signature = self::substr($message, 0, 64); |
|
| 195 | - |
|
| 196 | - /** @var string $message */ |
|
| 197 | - $message = self::substr($message, 64); |
|
| 198 | - |
|
| 199 | - if (self::verify_detached($signature, $message, $pk)) { |
|
| 200 | - return $message; |
|
| 201 | - } |
|
| 202 | - throw new SodiumException('Invalid signature'); |
|
| 203 | - } |
|
| 204 | - |
|
| 205 | - /** |
|
| 206 | - * @internal You should not use this directly from another application |
|
| 207 | - * |
|
| 208 | - * @param string $message |
|
| 209 | - * @param string $sk |
|
| 210 | - * @return string |
|
| 211 | - * @throws SodiumException |
|
| 212 | - * @throws TypeError |
|
| 213 | - * @psalm-suppress PossiblyInvalidArgument |
|
| 214 | - */ |
|
| 215 | - public static function sign_detached($message, $sk) |
|
| 216 | - { |
|
| 217 | - # crypto_hash_sha512(az, sk, 32); |
|
| 218 | - $az = hash('sha512', self::substr($sk, 0, 32), true); |
|
| 219 | - |
|
| 220 | - # az[0] &= 248; |
|
| 221 | - # az[31] &= 63; |
|
| 222 | - # az[31] |= 64; |
|
| 223 | - $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); |
|
| 224 | - $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); |
|
| 225 | - |
|
| 226 | - # crypto_hash_sha512_init(&hs); |
|
| 227 | - # crypto_hash_sha512_update(&hs, az + 32, 32); |
|
| 228 | - # crypto_hash_sha512_update(&hs, m, mlen); |
|
| 229 | - # crypto_hash_sha512_final(&hs, nonce); |
|
| 230 | - $hs = hash_init('sha512'); |
|
| 231 | - self::hash_update($hs, self::substr($az, 32, 32)); |
|
| 232 | - self::hash_update($hs, $message); |
|
| 233 | - $nonceHash = hash_final($hs, true); |
|
| 234 | - |
|
| 235 | - # memmove(sig + 32, sk + 32, 32); |
|
| 236 | - $pk = self::substr($sk, 32, 32); |
|
| 237 | - |
|
| 238 | - # sc_reduce(nonce); |
|
| 239 | - # ge_scalarmult_base(&R, nonce); |
|
| 240 | - # ge_p3_tobytes(sig, &R); |
|
| 241 | - $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); |
|
| 242 | - $sig = self::ge_p3_tobytes( |
|
| 243 | - self::ge_scalarmult_base($nonce) |
|
| 244 | - ); |
|
| 245 | - |
|
| 246 | - # crypto_hash_sha512_init(&hs); |
|
| 247 | - # crypto_hash_sha512_update(&hs, sig, 64); |
|
| 248 | - # crypto_hash_sha512_update(&hs, m, mlen); |
|
| 249 | - # crypto_hash_sha512_final(&hs, hram); |
|
| 250 | - $hs = hash_init('sha512'); |
|
| 251 | - self::hash_update($hs, self::substr($sig, 0, 32)); |
|
| 252 | - self::hash_update($hs, self::substr($pk, 0, 32)); |
|
| 253 | - self::hash_update($hs, $message); |
|
| 254 | - $hramHash = hash_final($hs, true); |
|
| 255 | - |
|
| 256 | - # sc_reduce(hram); |
|
| 257 | - # sc_muladd(sig + 32, hram, az, nonce); |
|
| 258 | - $hram = self::sc_reduce($hramHash); |
|
| 259 | - $sigAfter = self::sc_muladd($hram, $az, $nonce); |
|
| 260 | - $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); |
|
| 261 | - |
|
| 262 | - try { |
|
| 263 | - ParagonIE_Sodium_Compat::memzero($az); |
|
| 264 | - } catch (SodiumException $ex) { |
|
| 265 | - $az = null; |
|
| 266 | - } |
|
| 267 | - return $sig; |
|
| 268 | - } |
|
| 269 | - |
|
| 270 | - /** |
|
| 271 | - * @internal You should not use this directly from another application |
|
| 272 | - * |
|
| 273 | - * @param string $sig |
|
| 274 | - * @param string $message |
|
| 275 | - * @param string $pk |
|
| 276 | - * @return bool |
|
| 277 | - * @throws SodiumException |
|
| 278 | - * @throws TypeError |
|
| 279 | - */ |
|
| 280 | - public static function verify_detached($sig, $message, $pk) |
|
| 281 | - { |
|
| 282 | - if (self::strlen($sig) < 64) { |
|
| 283 | - throw new SodiumException('Signature is too short'); |
|
| 284 | - } |
|
| 285 | - if ((self::chrToInt($sig[63]) & 240) && self::check_S_lt_L(self::substr($sig, 32, 32))) { |
|
| 286 | - throw new SodiumException('S < L - Invalid signature'); |
|
| 287 | - } |
|
| 288 | - if (self::small_order($sig)) { |
|
| 289 | - throw new SodiumException('Signature is on too small of an order'); |
|
| 290 | - } |
|
| 291 | - if ((self::chrToInt($sig[63]) & 224) !== 0) { |
|
| 292 | - throw new SodiumException('Invalid signature'); |
|
| 293 | - } |
|
| 294 | - $d = 0; |
|
| 295 | - for ($i = 0; $i < 32; ++$i) { |
|
| 296 | - $d |= self::chrToInt($pk[$i]); |
|
| 297 | - } |
|
| 298 | - if ($d === 0) { |
|
| 299 | - throw new SodiumException('All zero public key'); |
|
| 300 | - } |
|
| 301 | - |
|
| 302 | - /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ |
|
| 303 | - $orig = ParagonIE_Sodium_Compat::$fastMult; |
|
| 304 | - |
|
| 305 | - // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. |
|
| 306 | - ParagonIE_Sodium_Compat::$fastMult = true; |
|
| 307 | - |
|
| 308 | - /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ |
|
| 309 | - $A = self::ge_frombytes_negate_vartime($pk); |
|
| 310 | - |
|
| 311 | - /** @var string $hDigest */ |
|
| 312 | - $hDigest = hash( |
|
| 313 | - 'sha512', |
|
| 314 | - self::substr($sig, 0, 32) . |
|
| 315 | - self::substr($pk, 0, 32) . |
|
| 316 | - $message, |
|
| 317 | - true |
|
| 318 | - ); |
|
| 319 | - |
|
| 320 | - /** @var string $h */ |
|
| 321 | - $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); |
|
| 322 | - |
|
| 323 | - /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ |
|
| 324 | - $R = self::ge_double_scalarmult_vartime( |
|
| 325 | - $h, |
|
| 326 | - $A, |
|
| 327 | - self::substr($sig, 32) |
|
| 328 | - ); |
|
| 329 | - |
|
| 330 | - /** @var string $rcheck */ |
|
| 331 | - $rcheck = self::ge_tobytes($R); |
|
| 332 | - |
|
| 333 | - // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. |
|
| 334 | - ParagonIE_Sodium_Compat::$fastMult = $orig; |
|
| 335 | - |
|
| 336 | - return self::verify_32($rcheck, self::substr($sig, 0, 32)); |
|
| 337 | - } |
|
| 338 | - |
|
| 339 | - /** |
|
| 340 | - * @internal You should not use this directly from another application |
|
| 341 | - * |
|
| 342 | - * @param string $S |
|
| 343 | - * @return bool |
|
| 344 | - * @throws SodiumException |
|
| 345 | - * @throws TypeError |
|
| 346 | - */ |
|
| 347 | - public static function check_S_lt_L($S) |
|
| 348 | - { |
|
| 349 | - if (self::strlen($S) < 32) { |
|
| 350 | - throw new SodiumException('Signature must be 32 bytes'); |
|
| 351 | - } |
|
| 352 | - static $L = array( |
|
| 353 | - 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, |
|
| 354 | - 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, |
|
| 355 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 356 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10 |
|
| 357 | - ); |
|
| 358 | - /** @var array<int, int> $L */ |
|
| 359 | - $c = 0; |
|
| 360 | - $n = 1; |
|
| 361 | - $i = 32; |
|
| 362 | - |
|
| 363 | - do { |
|
| 364 | - --$i; |
|
| 365 | - $x = self::chrToInt($S[$i]); |
|
| 366 | - $c |= ( |
|
| 367 | - (($x - $L[$i]) >> 8) & $n |
|
| 368 | - ); |
|
| 369 | - $n &= ( |
|
| 370 | - (($x ^ $L[$i]) - 1) >> 8 |
|
| 371 | - ); |
|
| 372 | - } while ($i !== 0); |
|
| 373 | - |
|
| 374 | - return $c === 0; |
|
| 375 | - } |
|
| 376 | - |
|
| 377 | - /** |
|
| 378 | - * @param string $R |
|
| 379 | - * @return bool |
|
| 380 | - * @throws SodiumException |
|
| 381 | - * @throws TypeError |
|
| 382 | - */ |
|
| 383 | - public static function small_order($R) |
|
| 384 | - { |
|
| 385 | - static $blocklist = array( |
|
| 386 | - /* 0 (order 4) */ |
|
| 387 | - array( |
|
| 388 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 389 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 390 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 391 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
| 392 | - ), |
|
| 393 | - /* 1 (order 1) */ |
|
| 394 | - array( |
|
| 395 | - 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 396 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 397 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 398 | - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
| 399 | - ), |
|
| 400 | - /* 2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
| 401 | - array( |
|
| 402 | - 0x26, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
| 403 | - 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
| 404 | - 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
| 405 | - 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x05 |
|
| 406 | - ), |
|
| 407 | - /* 55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
| 408 | - array( |
|
| 409 | - 0xc7, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
| 410 | - 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
| 411 | - 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
| 412 | - 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0x7a |
|
| 413 | - ), |
|
| 414 | - /* p-1 (order 2) */ |
|
| 415 | - array( |
|
| 416 | - 0x13, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
| 417 | - 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
| 418 | - 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
| 419 | - 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x85 |
|
| 420 | - ), |
|
| 421 | - /* p (order 4) */ |
|
| 422 | - array( |
|
| 423 | - 0xb4, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
| 424 | - 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
| 425 | - 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
| 426 | - 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0xfa |
|
| 427 | - ), |
|
| 428 | - /* p+1 (order 1) */ |
|
| 429 | - array( |
|
| 430 | - 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 431 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 432 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 433 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
| 434 | - ), |
|
| 435 | - /* p+2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
| 436 | - array( |
|
| 437 | - 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 438 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 439 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 440 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
| 441 | - ), |
|
| 442 | - /* p+55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
| 443 | - array( |
|
| 444 | - 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 445 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 446 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 447 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
| 448 | - ), |
|
| 449 | - /* 2p-1 (order 2) */ |
|
| 450 | - array( |
|
| 451 | - 0xd9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 452 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 453 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 454 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
| 455 | - ), |
|
| 456 | - /* 2p (order 4) */ |
|
| 457 | - array( |
|
| 458 | - 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 459 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 460 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 461 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
| 462 | - ), |
|
| 463 | - /* 2p+1 (order 1) */ |
|
| 464 | - array( |
|
| 465 | - 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 466 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 467 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 468 | - 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
| 469 | - ) |
|
| 470 | - ); |
|
| 471 | - /** @var array<int, array<int, int>> $blocklist */ |
|
| 472 | - $countBlocklist = count($blocklist); |
|
| 473 | - |
|
| 474 | - for ($i = 0; $i < $countBlocklist; ++$i) { |
|
| 475 | - $c = 0; |
|
| 476 | - for ($j = 0; $j < 32; ++$j) { |
|
| 477 | - $c |= self::chrToInt($R[$j]) ^ $blocklist[$i][$j]; |
|
| 478 | - } |
|
| 479 | - if ($c === 0) { |
|
| 480 | - return true; |
|
| 481 | - } |
|
| 482 | - } |
|
| 483 | - return false; |
|
| 484 | - } |
|
| 15 | + const KEYPAIR_BYTES = 96; |
|
| 16 | + const SEED_BYTES = 32; |
|
| 17 | + |
|
| 18 | + /** |
|
| 19 | + * @internal You should not use this directly from another application |
|
| 20 | + * |
|
| 21 | + * @return string (96 bytes) |
|
| 22 | + * @throws Exception |
|
| 23 | + * @throws SodiumException |
|
| 24 | + * @throws TypeError |
|
| 25 | + */ |
|
| 26 | + public static function keypair() |
|
| 27 | + { |
|
| 28 | + $seed = random_bytes(self::SEED_BYTES); |
|
| 29 | + $pk = ''; |
|
| 30 | + $sk = ''; |
|
| 31 | + self::seed_keypair($pk, $sk, $seed); |
|
| 32 | + return $sk . $pk; |
|
| 33 | + } |
|
| 34 | + |
|
| 35 | + /** |
|
| 36 | + * @internal You should not use this directly from another application |
|
| 37 | + * |
|
| 38 | + * @param string $pk |
|
| 39 | + * @param string $sk |
|
| 40 | + * @param string $seed |
|
| 41 | + * @return string |
|
| 42 | + * @throws SodiumException |
|
| 43 | + * @throws TypeError |
|
| 44 | + */ |
|
| 45 | + public static function seed_keypair(&$pk, &$sk, $seed) |
|
| 46 | + { |
|
| 47 | + if (self::strlen($seed) !== self::SEED_BYTES) { |
|
| 48 | + throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
|
| 49 | + } |
|
| 50 | + |
|
| 51 | + /** @var string $pk */ |
|
| 52 | + $pk = self::publickey_from_secretkey($seed); |
|
| 53 | + $sk = $seed . $pk; |
|
| 54 | + return $sk; |
|
| 55 | + } |
|
| 56 | + |
|
| 57 | + /** |
|
| 58 | + * @internal You should not use this directly from another application |
|
| 59 | + * |
|
| 60 | + * @param string $keypair |
|
| 61 | + * @return string |
|
| 62 | + * @throws TypeError |
|
| 63 | + */ |
|
| 64 | + public static function secretkey($keypair) |
|
| 65 | + { |
|
| 66 | + if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
| 67 | + throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
| 68 | + } |
|
| 69 | + return self::substr($keypair, 0, 64); |
|
| 70 | + } |
|
| 71 | + |
|
| 72 | + /** |
|
| 73 | + * @internal You should not use this directly from another application |
|
| 74 | + * |
|
| 75 | + * @param string $keypair |
|
| 76 | + * @return string |
|
| 77 | + * @throws RangeException |
|
| 78 | + * @throws TypeError |
|
| 79 | + */ |
|
| 80 | + public static function publickey($keypair) |
|
| 81 | + { |
|
| 82 | + if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
| 83 | + throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
| 84 | + } |
|
| 85 | + return self::substr($keypair, 64, 32); |
|
| 86 | + } |
|
| 87 | + |
|
| 88 | + /** |
|
| 89 | + * @internal You should not use this directly from another application |
|
| 90 | + * |
|
| 91 | + * @param string $sk |
|
| 92 | + * @return string |
|
| 93 | + * @throws SodiumException |
|
| 94 | + * @throws TypeError |
|
| 95 | + */ |
|
| 96 | + public static function publickey_from_secretkey($sk) |
|
| 97 | + { |
|
| 98 | + /** @var string $sk */ |
|
| 99 | + $sk = hash('sha512', self::substr($sk, 0, 32), true); |
|
| 100 | + $sk[0] = self::intToChr( |
|
| 101 | + self::chrToInt($sk[0]) & 248 |
|
| 102 | + ); |
|
| 103 | + $sk[31] = self::intToChr( |
|
| 104 | + (self::chrToInt($sk[31]) & 63) | 64 |
|
| 105 | + ); |
|
| 106 | + return self::sk_to_pk($sk); |
|
| 107 | + } |
|
| 108 | + |
|
| 109 | + /** |
|
| 110 | + * @param string $pk |
|
| 111 | + * @return string |
|
| 112 | + * @throws SodiumException |
|
| 113 | + * @throws TypeError |
|
| 114 | + */ |
|
| 115 | + public static function pk_to_curve25519($pk) |
|
| 116 | + { |
|
| 117 | + if (self::small_order($pk)) { |
|
| 118 | + throw new SodiumException('Public key is on a small order'); |
|
| 119 | + } |
|
| 120 | + $A = self::ge_frombytes_negate_vartime($pk); |
|
| 121 | + $p1 = self::ge_mul_l($A); |
|
| 122 | + if (!self::fe_isnonzero($p1->X)) { |
|
| 123 | + throw new SodiumException('Unexpected zero result'); |
|
| 124 | + } |
|
| 125 | + |
|
| 126 | + # fe_1(one_minus_y); |
|
| 127 | + # fe_sub(one_minus_y, one_minus_y, A.Y); |
|
| 128 | + # fe_invert(one_minus_y, one_minus_y); |
|
| 129 | + $one_minux_y = self::fe_invert( |
|
| 130 | + self::fe_sub( |
|
| 131 | + self::fe_1(), |
|
| 132 | + $A->Y |
|
| 133 | + ) |
|
| 134 | + ); |
|
| 135 | + |
|
| 136 | + |
|
| 137 | + # fe_1(x); |
|
| 138 | + # fe_add(x, x, A.Y); |
|
| 139 | + # fe_mul(x, x, one_minus_y); |
|
| 140 | + $x = self::fe_mul( |
|
| 141 | + self::fe_add(self::fe_1(), $A->Y), |
|
| 142 | + $one_minux_y |
|
| 143 | + ); |
|
| 144 | + |
|
| 145 | + # fe_tobytes(curve25519_pk, x); |
|
| 146 | + return self::fe_tobytes($x); |
|
| 147 | + } |
|
| 148 | + |
|
| 149 | + /** |
|
| 150 | + * @internal You should not use this directly from another application |
|
| 151 | + * |
|
| 152 | + * @param string $sk |
|
| 153 | + * @return string |
|
| 154 | + * @throws SodiumException |
|
| 155 | + * @throws TypeError |
|
| 156 | + */ |
|
| 157 | + public static function sk_to_pk($sk) |
|
| 158 | + { |
|
| 159 | + return self::ge_p3_tobytes( |
|
| 160 | + self::ge_scalarmult_base( |
|
| 161 | + self::substr($sk, 0, 32) |
|
| 162 | + ) |
|
| 163 | + ); |
|
| 164 | + } |
|
| 165 | + |
|
| 166 | + /** |
|
| 167 | + * @internal You should not use this directly from another application |
|
| 168 | + * |
|
| 169 | + * @param string $message |
|
| 170 | + * @param string $sk |
|
| 171 | + * @return string |
|
| 172 | + * @throws SodiumException |
|
| 173 | + * @throws TypeError |
|
| 174 | + */ |
|
| 175 | + public static function sign($message, $sk) |
|
| 176 | + { |
|
| 177 | + /** @var string $signature */ |
|
| 178 | + $signature = self::sign_detached($message, $sk); |
|
| 179 | + return $signature . $message; |
|
| 180 | + } |
|
| 181 | + |
|
| 182 | + /** |
|
| 183 | + * @internal You should not use this directly from another application |
|
| 184 | + * |
|
| 185 | + * @param string $message A signed message |
|
| 186 | + * @param string $pk Public key |
|
| 187 | + * @return string Message (without signature) |
|
| 188 | + * @throws SodiumException |
|
| 189 | + * @throws TypeError |
|
| 190 | + */ |
|
| 191 | + public static function sign_open($message, $pk) |
|
| 192 | + { |
|
| 193 | + /** @var string $signature */ |
|
| 194 | + $signature = self::substr($message, 0, 64); |
|
| 195 | + |
|
| 196 | + /** @var string $message */ |
|
| 197 | + $message = self::substr($message, 64); |
|
| 198 | + |
|
| 199 | + if (self::verify_detached($signature, $message, $pk)) { |
|
| 200 | + return $message; |
|
| 201 | + } |
|
| 202 | + throw new SodiumException('Invalid signature'); |
|
| 203 | + } |
|
| 204 | + |
|
| 205 | + /** |
|
| 206 | + * @internal You should not use this directly from another application |
|
| 207 | + * |
|
| 208 | + * @param string $message |
|
| 209 | + * @param string $sk |
|
| 210 | + * @return string |
|
| 211 | + * @throws SodiumException |
|
| 212 | + * @throws TypeError |
|
| 213 | + * @psalm-suppress PossiblyInvalidArgument |
|
| 214 | + */ |
|
| 215 | + public static function sign_detached($message, $sk) |
|
| 216 | + { |
|
| 217 | + # crypto_hash_sha512(az, sk, 32); |
|
| 218 | + $az = hash('sha512', self::substr($sk, 0, 32), true); |
|
| 219 | + |
|
| 220 | + # az[0] &= 248; |
|
| 221 | + # az[31] &= 63; |
|
| 222 | + # az[31] |= 64; |
|
| 223 | + $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); |
|
| 224 | + $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); |
|
| 225 | + |
|
| 226 | + # crypto_hash_sha512_init(&hs); |
|
| 227 | + # crypto_hash_sha512_update(&hs, az + 32, 32); |
|
| 228 | + # crypto_hash_sha512_update(&hs, m, mlen); |
|
| 229 | + # crypto_hash_sha512_final(&hs, nonce); |
|
| 230 | + $hs = hash_init('sha512'); |
|
| 231 | + self::hash_update($hs, self::substr($az, 32, 32)); |
|
| 232 | + self::hash_update($hs, $message); |
|
| 233 | + $nonceHash = hash_final($hs, true); |
|
| 234 | + |
|
| 235 | + # memmove(sig + 32, sk + 32, 32); |
|
| 236 | + $pk = self::substr($sk, 32, 32); |
|
| 237 | + |
|
| 238 | + # sc_reduce(nonce); |
|
| 239 | + # ge_scalarmult_base(&R, nonce); |
|
| 240 | + # ge_p3_tobytes(sig, &R); |
|
| 241 | + $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); |
|
| 242 | + $sig = self::ge_p3_tobytes( |
|
| 243 | + self::ge_scalarmult_base($nonce) |
|
| 244 | + ); |
|
| 245 | + |
|
| 246 | + # crypto_hash_sha512_init(&hs); |
|
| 247 | + # crypto_hash_sha512_update(&hs, sig, 64); |
|
| 248 | + # crypto_hash_sha512_update(&hs, m, mlen); |
|
| 249 | + # crypto_hash_sha512_final(&hs, hram); |
|
| 250 | + $hs = hash_init('sha512'); |
|
| 251 | + self::hash_update($hs, self::substr($sig, 0, 32)); |
|
| 252 | + self::hash_update($hs, self::substr($pk, 0, 32)); |
|
| 253 | + self::hash_update($hs, $message); |
|
| 254 | + $hramHash = hash_final($hs, true); |
|
| 255 | + |
|
| 256 | + # sc_reduce(hram); |
|
| 257 | + # sc_muladd(sig + 32, hram, az, nonce); |
|
| 258 | + $hram = self::sc_reduce($hramHash); |
|
| 259 | + $sigAfter = self::sc_muladd($hram, $az, $nonce); |
|
| 260 | + $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); |
|
| 261 | + |
|
| 262 | + try { |
|
| 263 | + ParagonIE_Sodium_Compat::memzero($az); |
|
| 264 | + } catch (SodiumException $ex) { |
|
| 265 | + $az = null; |
|
| 266 | + } |
|
| 267 | + return $sig; |
|
| 268 | + } |
|
| 269 | + |
|
| 270 | + /** |
|
| 271 | + * @internal You should not use this directly from another application |
|
| 272 | + * |
|
| 273 | + * @param string $sig |
|
| 274 | + * @param string $message |
|
| 275 | + * @param string $pk |
|
| 276 | + * @return bool |
|
| 277 | + * @throws SodiumException |
|
| 278 | + * @throws TypeError |
|
| 279 | + */ |
|
| 280 | + public static function verify_detached($sig, $message, $pk) |
|
| 281 | + { |
|
| 282 | + if (self::strlen($sig) < 64) { |
|
| 283 | + throw new SodiumException('Signature is too short'); |
|
| 284 | + } |
|
| 285 | + if ((self::chrToInt($sig[63]) & 240) && self::check_S_lt_L(self::substr($sig, 32, 32))) { |
|
| 286 | + throw new SodiumException('S < L - Invalid signature'); |
|
| 287 | + } |
|
| 288 | + if (self::small_order($sig)) { |
|
| 289 | + throw new SodiumException('Signature is on too small of an order'); |
|
| 290 | + } |
|
| 291 | + if ((self::chrToInt($sig[63]) & 224) !== 0) { |
|
| 292 | + throw new SodiumException('Invalid signature'); |
|
| 293 | + } |
|
| 294 | + $d = 0; |
|
| 295 | + for ($i = 0; $i < 32; ++$i) { |
|
| 296 | + $d |= self::chrToInt($pk[$i]); |
|
| 297 | + } |
|
| 298 | + if ($d === 0) { |
|
| 299 | + throw new SodiumException('All zero public key'); |
|
| 300 | + } |
|
| 301 | + |
|
| 302 | + /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ |
|
| 303 | + $orig = ParagonIE_Sodium_Compat::$fastMult; |
|
| 304 | + |
|
| 305 | + // Set ParagonIE_Sodium_Compat::$fastMult to true to speed up verification. |
|
| 306 | + ParagonIE_Sodium_Compat::$fastMult = true; |
|
| 307 | + |
|
| 308 | + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ |
|
| 309 | + $A = self::ge_frombytes_negate_vartime($pk); |
|
| 310 | + |
|
| 311 | + /** @var string $hDigest */ |
|
| 312 | + $hDigest = hash( |
|
| 313 | + 'sha512', |
|
| 314 | + self::substr($sig, 0, 32) . |
|
| 315 | + self::substr($pk, 0, 32) . |
|
| 316 | + $message, |
|
| 317 | + true |
|
| 318 | + ); |
|
| 319 | + |
|
| 320 | + /** @var string $h */ |
|
| 321 | + $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); |
|
| 322 | + |
|
| 323 | + /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ |
|
| 324 | + $R = self::ge_double_scalarmult_vartime( |
|
| 325 | + $h, |
|
| 326 | + $A, |
|
| 327 | + self::substr($sig, 32) |
|
| 328 | + ); |
|
| 329 | + |
|
| 330 | + /** @var string $rcheck */ |
|
| 331 | + $rcheck = self::ge_tobytes($R); |
|
| 332 | + |
|
| 333 | + // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. |
|
| 334 | + ParagonIE_Sodium_Compat::$fastMult = $orig; |
|
| 335 | + |
|
| 336 | + return self::verify_32($rcheck, self::substr($sig, 0, 32)); |
|
| 337 | + } |
|
| 338 | + |
|
| 339 | + /** |
|
| 340 | + * @internal You should not use this directly from another application |
|
| 341 | + * |
|
| 342 | + * @param string $S |
|
| 343 | + * @return bool |
|
| 344 | + * @throws SodiumException |
|
| 345 | + * @throws TypeError |
|
| 346 | + */ |
|
| 347 | + public static function check_S_lt_L($S) |
|
| 348 | + { |
|
| 349 | + if (self::strlen($S) < 32) { |
|
| 350 | + throw new SodiumException('Signature must be 32 bytes'); |
|
| 351 | + } |
|
| 352 | + static $L = array( |
|
| 353 | + 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, |
|
| 354 | + 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, |
|
| 355 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 356 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10 |
|
| 357 | + ); |
|
| 358 | + /** @var array<int, int> $L */ |
|
| 359 | + $c = 0; |
|
| 360 | + $n = 1; |
|
| 361 | + $i = 32; |
|
| 362 | + |
|
| 363 | + do { |
|
| 364 | + --$i; |
|
| 365 | + $x = self::chrToInt($S[$i]); |
|
| 366 | + $c |= ( |
|
| 367 | + (($x - $L[$i]) >> 8) & $n |
|
| 368 | + ); |
|
| 369 | + $n &= ( |
|
| 370 | + (($x ^ $L[$i]) - 1) >> 8 |
|
| 371 | + ); |
|
| 372 | + } while ($i !== 0); |
|
| 373 | + |
|
| 374 | + return $c === 0; |
|
| 375 | + } |
|
| 376 | + |
|
| 377 | + /** |
|
| 378 | + * @param string $R |
|
| 379 | + * @return bool |
|
| 380 | + * @throws SodiumException |
|
| 381 | + * @throws TypeError |
|
| 382 | + */ |
|
| 383 | + public static function small_order($R) |
|
| 384 | + { |
|
| 385 | + static $blocklist = array( |
|
| 386 | + /* 0 (order 4) */ |
|
| 387 | + array( |
|
| 388 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 389 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 390 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 391 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
| 392 | + ), |
|
| 393 | + /* 1 (order 1) */ |
|
| 394 | + array( |
|
| 395 | + 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 396 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 397 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, |
|
| 398 | + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 |
|
| 399 | + ), |
|
| 400 | + /* 2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
| 401 | + array( |
|
| 402 | + 0x26, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
| 403 | + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
| 404 | + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
| 405 | + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x05 |
|
| 406 | + ), |
|
| 407 | + /* 55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
| 408 | + array( |
|
| 409 | + 0xc7, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
| 410 | + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
| 411 | + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
| 412 | + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0x7a |
|
| 413 | + ), |
|
| 414 | + /* p-1 (order 2) */ |
|
| 415 | + array( |
|
| 416 | + 0x13, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, |
|
| 417 | + 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0, |
|
| 418 | + 0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, |
|
| 419 | + 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x85 |
|
| 420 | + ), |
|
| 421 | + /* p (order 4) */ |
|
| 422 | + array( |
|
| 423 | + 0xb4, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, |
|
| 424 | + 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f, |
|
| 425 | + 0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, |
|
| 426 | + 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0xfa |
|
| 427 | + ), |
|
| 428 | + /* p+1 (order 1) */ |
|
| 429 | + array( |
|
| 430 | + 0xec, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 431 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 432 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 433 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
| 434 | + ), |
|
| 435 | + /* p+2707385501144840649318225287225658788936804267575313519463743609750303402022 (order 8) */ |
|
| 436 | + array( |
|
| 437 | + 0xed, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 438 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 439 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 440 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
| 441 | + ), |
|
| 442 | + /* p+55188659117513257062467267217118295137698188065244968500265048394206261417927 (order 8) */ |
|
| 443 | + array( |
|
| 444 | + 0xee, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 445 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 446 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 447 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x7f |
|
| 448 | + ), |
|
| 449 | + /* 2p-1 (order 2) */ |
|
| 450 | + array( |
|
| 451 | + 0xd9, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 452 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 453 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 454 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
| 455 | + ), |
|
| 456 | + /* 2p (order 4) */ |
|
| 457 | + array( |
|
| 458 | + 0xda, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 459 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 460 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 461 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
| 462 | + ), |
|
| 463 | + /* 2p+1 (order 1) */ |
|
| 464 | + array( |
|
| 465 | + 0xdb, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 466 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 467 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, |
|
| 468 | + 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff |
|
| 469 | + ) |
|
| 470 | + ); |
|
| 471 | + /** @var array<int, array<int, int>> $blocklist */ |
|
| 472 | + $countBlocklist = count($blocklist); |
|
| 473 | + |
|
| 474 | + for ($i = 0; $i < $countBlocklist; ++$i) { |
|
| 475 | + $c = 0; |
|
| 476 | + for ($j = 0; $j < 32; ++$j) { |
|
| 477 | + $c |= self::chrToInt($R[$j]) ^ $blocklist[$i][$j]; |
|
| 478 | + } |
|
| 479 | + if ($c === 0) { |
|
| 480 | + return true; |
|
| 481 | + } |
|
| 482 | + } |
|
| 483 | + return false; |
|
| 484 | + } |
|
| 485 | 485 | } |
@@ -1,10 +1,10 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core32_Ed25519', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Ed25519', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | -if (!class_exists('ParagonIE_Sodium_Core32_Curve25519')) { |
|
| 7 | - require_once dirname(__FILE__) . '/Curve25519.php'; |
|
| 6 | +if ( ! class_exists( 'ParagonIE_Sodium_Core32_Curve25519' ) ) { |
|
| 7 | + require_once dirname( __FILE__ ) . '/Curve25519.php'; |
|
| 8 | 8 | } |
| 9 | 9 | |
| 10 | 10 | /** |
@@ -25,10 +25,10 @@ discard block |
||
| 25 | 25 | */ |
| 26 | 26 | public static function keypair() |
| 27 | 27 | { |
| 28 | - $seed = random_bytes(self::SEED_BYTES); |
|
| 28 | + $seed = random_bytes( self::SEED_BYTES ); |
|
| 29 | 29 | $pk = ''; |
| 30 | 30 | $sk = ''; |
| 31 | - self::seed_keypair($pk, $sk, $seed); |
|
| 31 | + self::seed_keypair( $pk, $sk, $seed ); |
|
| 32 | 32 | return $sk . $pk; |
| 33 | 33 | } |
| 34 | 34 | |
@@ -42,14 +42,14 @@ discard block |
||
| 42 | 42 | * @throws SodiumException |
| 43 | 43 | * @throws TypeError |
| 44 | 44 | */ |
| 45 | - public static function seed_keypair(&$pk, &$sk, $seed) |
|
| 45 | + public static function seed_keypair( &$pk, &$sk, $seed ) |
|
| 46 | 46 | { |
| 47 | - if (self::strlen($seed) !== self::SEED_BYTES) { |
|
| 48 | - throw new RangeException('crypto_sign keypair seed must be 32 bytes long'); |
|
| 47 | + if ( self::strlen( $seed ) !== self::SEED_BYTES ) { |
|
| 48 | + throw new RangeException( 'crypto_sign keypair seed must be 32 bytes long' ); |
|
| 49 | 49 | } |
| 50 | 50 | |
| 51 | 51 | /** @var string $pk */ |
| 52 | - $pk = self::publickey_from_secretkey($seed); |
|
| 52 | + $pk = self::publickey_from_secretkey( $seed ); |
|
| 53 | 53 | $sk = $seed . $pk; |
| 54 | 54 | return $sk; |
| 55 | 55 | } |
@@ -61,12 +61,12 @@ discard block |
||
| 61 | 61 | * @return string |
| 62 | 62 | * @throws TypeError |
| 63 | 63 | */ |
| 64 | - public static function secretkey($keypair) |
|
| 64 | + public static function secretkey( $keypair ) |
|
| 65 | 65 | { |
| 66 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
| 67 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
| 66 | + if ( self::strlen( $keypair ) !== self::KEYPAIR_BYTES ) { |
|
| 67 | + throw new RangeException( 'crypto_sign keypair must be 96 bytes long' ); |
|
| 68 | 68 | } |
| 69 | - return self::substr($keypair, 0, 64); |
|
| 69 | + return self::substr( $keypair, 0, 64 ); |
|
| 70 | 70 | } |
| 71 | 71 | |
| 72 | 72 | /** |
@@ -77,12 +77,12 @@ discard block |
||
| 77 | 77 | * @throws RangeException |
| 78 | 78 | * @throws TypeError |
| 79 | 79 | */ |
| 80 | - public static function publickey($keypair) |
|
| 80 | + public static function publickey( $keypair ) |
|
| 81 | 81 | { |
| 82 | - if (self::strlen($keypair) !== self::KEYPAIR_BYTES) { |
|
| 83 | - throw new RangeException('crypto_sign keypair must be 96 bytes long'); |
|
| 82 | + if ( self::strlen( $keypair ) !== self::KEYPAIR_BYTES ) { |
|
| 83 | + throw new RangeException( 'crypto_sign keypair must be 96 bytes long' ); |
|
| 84 | 84 | } |
| 85 | - return self::substr($keypair, 64, 32); |
|
| 85 | + return self::substr( $keypair, 64, 32 ); |
|
| 86 | 86 | } |
| 87 | 87 | |
| 88 | 88 | /** |
@@ -93,17 +93,17 @@ discard block |
||
| 93 | 93 | * @throws SodiumException |
| 94 | 94 | * @throws TypeError |
| 95 | 95 | */ |
| 96 | - public static function publickey_from_secretkey($sk) |
|
| 96 | + public static function publickey_from_secretkey( $sk ) |
|
| 97 | 97 | { |
| 98 | 98 | /** @var string $sk */ |
| 99 | - $sk = hash('sha512', self::substr($sk, 0, 32), true); |
|
| 100 | - $sk[0] = self::intToChr( |
|
| 101 | - self::chrToInt($sk[0]) & 248 |
|
| 99 | + $sk = hash( 'sha512', self::substr( $sk, 0, 32 ), true ); |
|
| 100 | + $sk[ 0 ] = self::intToChr( |
|
| 101 | + self::chrToInt( $sk[ 0 ] ) & 248 |
|
| 102 | 102 | ); |
| 103 | - $sk[31] = self::intToChr( |
|
| 104 | - (self::chrToInt($sk[31]) & 63) | 64 |
|
| 103 | + $sk[ 31 ] = self::intToChr( |
|
| 104 | + ( self::chrToInt( $sk[ 31 ] ) & 63 ) | 64 |
|
| 105 | 105 | ); |
| 106 | - return self::sk_to_pk($sk); |
|
| 106 | + return self::sk_to_pk( $sk ); |
|
| 107 | 107 | } |
| 108 | 108 | |
| 109 | 109 | /** |
@@ -112,15 +112,15 @@ discard block |
||
| 112 | 112 | * @throws SodiumException |
| 113 | 113 | * @throws TypeError |
| 114 | 114 | */ |
| 115 | - public static function pk_to_curve25519($pk) |
|
| 115 | + public static function pk_to_curve25519( $pk ) |
|
| 116 | 116 | { |
| 117 | - if (self::small_order($pk)) { |
|
| 118 | - throw new SodiumException('Public key is on a small order'); |
|
| 117 | + if ( self::small_order( $pk ) ) { |
|
| 118 | + throw new SodiumException( 'Public key is on a small order' ); |
|
| 119 | 119 | } |
| 120 | - $A = self::ge_frombytes_negate_vartime($pk); |
|
| 121 | - $p1 = self::ge_mul_l($A); |
|
| 122 | - if (!self::fe_isnonzero($p1->X)) { |
|
| 123 | - throw new SodiumException('Unexpected zero result'); |
|
| 120 | + $A = self::ge_frombytes_negate_vartime( $pk ); |
|
| 121 | + $p1 = self::ge_mul_l( $A ); |
|
| 122 | + if ( ! self::fe_isnonzero( $p1->X ) ) { |
|
| 123 | + throw new SodiumException( 'Unexpected zero result' ); |
|
| 124 | 124 | } |
| 125 | 125 | |
| 126 | 126 | # fe_1(one_minus_y); |
@@ -138,12 +138,12 @@ discard block |
||
| 138 | 138 | # fe_add(x, x, A.Y); |
| 139 | 139 | # fe_mul(x, x, one_minus_y); |
| 140 | 140 | $x = self::fe_mul( |
| 141 | - self::fe_add(self::fe_1(), $A->Y), |
|
| 141 | + self::fe_add( self::fe_1(), $A->Y ), |
|
| 142 | 142 | $one_minux_y |
| 143 | 143 | ); |
| 144 | 144 | |
| 145 | 145 | # fe_tobytes(curve25519_pk, x); |
| 146 | - return self::fe_tobytes($x); |
|
| 146 | + return self::fe_tobytes( $x ); |
|
| 147 | 147 | } |
| 148 | 148 | |
| 149 | 149 | /** |
@@ -154,11 +154,11 @@ discard block |
||
| 154 | 154 | * @throws SodiumException |
| 155 | 155 | * @throws TypeError |
| 156 | 156 | */ |
| 157 | - public static function sk_to_pk($sk) |
|
| 157 | + public static function sk_to_pk( $sk ) |
|
| 158 | 158 | { |
| 159 | 159 | return self::ge_p3_tobytes( |
| 160 | 160 | self::ge_scalarmult_base( |
| 161 | - self::substr($sk, 0, 32) |
|
| 161 | + self::substr( $sk, 0, 32 ) |
|
| 162 | 162 | ) |
| 163 | 163 | ); |
| 164 | 164 | } |
@@ -172,10 +172,10 @@ discard block |
||
| 172 | 172 | * @throws SodiumException |
| 173 | 173 | * @throws TypeError |
| 174 | 174 | */ |
| 175 | - public static function sign($message, $sk) |
|
| 175 | + public static function sign( $message, $sk ) |
|
| 176 | 176 | { |
| 177 | 177 | /** @var string $signature */ |
| 178 | - $signature = self::sign_detached($message, $sk); |
|
| 178 | + $signature = self::sign_detached( $message, $sk ); |
|
| 179 | 179 | return $signature . $message; |
| 180 | 180 | } |
| 181 | 181 | |
@@ -188,18 +188,18 @@ discard block |
||
| 188 | 188 | * @throws SodiumException |
| 189 | 189 | * @throws TypeError |
| 190 | 190 | */ |
| 191 | - public static function sign_open($message, $pk) |
|
| 191 | + public static function sign_open( $message, $pk ) |
|
| 192 | 192 | { |
| 193 | 193 | /** @var string $signature */ |
| 194 | - $signature = self::substr($message, 0, 64); |
|
| 194 | + $signature = self::substr( $message, 0, 64 ); |
|
| 195 | 195 | |
| 196 | 196 | /** @var string $message */ |
| 197 | - $message = self::substr($message, 64); |
|
| 197 | + $message = self::substr( $message, 64 ); |
|
| 198 | 198 | |
| 199 | - if (self::verify_detached($signature, $message, $pk)) { |
|
| 199 | + if ( self::verify_detached( $signature, $message, $pk ) ) { |
|
| 200 | 200 | return $message; |
| 201 | 201 | } |
| 202 | - throw new SodiumException('Invalid signature'); |
|
| 202 | + throw new SodiumException( 'Invalid signature' ); |
|
| 203 | 203 | } |
| 204 | 204 | |
| 205 | 205 | /** |
@@ -212,56 +212,56 @@ discard block |
||
| 212 | 212 | * @throws TypeError |
| 213 | 213 | * @psalm-suppress PossiblyInvalidArgument |
| 214 | 214 | */ |
| 215 | - public static function sign_detached($message, $sk) |
|
| 215 | + public static function sign_detached( $message, $sk ) |
|
| 216 | 216 | { |
| 217 | 217 | # crypto_hash_sha512(az, sk, 32); |
| 218 | - $az = hash('sha512', self::substr($sk, 0, 32), true); |
|
| 218 | + $az = hash( 'sha512', self::substr( $sk, 0, 32 ), true ); |
|
| 219 | 219 | |
| 220 | 220 | # az[0] &= 248; |
| 221 | 221 | # az[31] &= 63; |
| 222 | 222 | # az[31] |= 64; |
| 223 | - $az[0] = self::intToChr(self::chrToInt($az[0]) & 248); |
|
| 224 | - $az[31] = self::intToChr((self::chrToInt($az[31]) & 63) | 64); |
|
| 223 | + $az[ 0 ] = self::intToChr( self::chrToInt( $az[ 0 ] ) & 248 ); |
|
| 224 | + $az[ 31 ] = self::intToChr( ( self::chrToInt( $az[ 31 ] ) & 63 ) | 64 ); |
|
| 225 | 225 | |
| 226 | 226 | # crypto_hash_sha512_init(&hs); |
| 227 | 227 | # crypto_hash_sha512_update(&hs, az + 32, 32); |
| 228 | 228 | # crypto_hash_sha512_update(&hs, m, mlen); |
| 229 | 229 | # crypto_hash_sha512_final(&hs, nonce); |
| 230 | - $hs = hash_init('sha512'); |
|
| 231 | - self::hash_update($hs, self::substr($az, 32, 32)); |
|
| 232 | - self::hash_update($hs, $message); |
|
| 233 | - $nonceHash = hash_final($hs, true); |
|
| 230 | + $hs = hash_init( 'sha512' ); |
|
| 231 | + self::hash_update( $hs, self::substr( $az, 32, 32 ) ); |
|
| 232 | + self::hash_update( $hs, $message ); |
|
| 233 | + $nonceHash = hash_final( $hs, true ); |
|
| 234 | 234 | |
| 235 | 235 | # memmove(sig + 32, sk + 32, 32); |
| 236 | - $pk = self::substr($sk, 32, 32); |
|
| 236 | + $pk = self::substr( $sk, 32, 32 ); |
|
| 237 | 237 | |
| 238 | 238 | # sc_reduce(nonce); |
| 239 | 239 | # ge_scalarmult_base(&R, nonce); |
| 240 | 240 | # ge_p3_tobytes(sig, &R); |
| 241 | - $nonce = self::sc_reduce($nonceHash) . self::substr($nonceHash, 32); |
|
| 241 | + $nonce = self::sc_reduce( $nonceHash ) . self::substr( $nonceHash, 32 ); |
|
| 242 | 242 | $sig = self::ge_p3_tobytes( |
| 243 | - self::ge_scalarmult_base($nonce) |
|
| 243 | + self::ge_scalarmult_base( $nonce ) |
|
| 244 | 244 | ); |
| 245 | 245 | |
| 246 | 246 | # crypto_hash_sha512_init(&hs); |
| 247 | 247 | # crypto_hash_sha512_update(&hs, sig, 64); |
| 248 | 248 | # crypto_hash_sha512_update(&hs, m, mlen); |
| 249 | 249 | # crypto_hash_sha512_final(&hs, hram); |
| 250 | - $hs = hash_init('sha512'); |
|
| 251 | - self::hash_update($hs, self::substr($sig, 0, 32)); |
|
| 252 | - self::hash_update($hs, self::substr($pk, 0, 32)); |
|
| 253 | - self::hash_update($hs, $message); |
|
| 254 | - $hramHash = hash_final($hs, true); |
|
| 250 | + $hs = hash_init( 'sha512' ); |
|
| 251 | + self::hash_update( $hs, self::substr( $sig, 0, 32 ) ); |
|
| 252 | + self::hash_update( $hs, self::substr( $pk, 0, 32 ) ); |
|
| 253 | + self::hash_update( $hs, $message ); |
|
| 254 | + $hramHash = hash_final( $hs, true ); |
|
| 255 | 255 | |
| 256 | 256 | # sc_reduce(hram); |
| 257 | 257 | # sc_muladd(sig + 32, hram, az, nonce); |
| 258 | - $hram = self::sc_reduce($hramHash); |
|
| 259 | - $sigAfter = self::sc_muladd($hram, $az, $nonce); |
|
| 260 | - $sig = self::substr($sig, 0, 32) . self::substr($sigAfter, 0, 32); |
|
| 258 | + $hram = self::sc_reduce( $hramHash ); |
|
| 259 | + $sigAfter = self::sc_muladd( $hram, $az, $nonce ); |
|
| 260 | + $sig = self::substr( $sig, 0, 32 ) . self::substr( $sigAfter, 0, 32 ); |
|
| 261 | 261 | |
| 262 | 262 | try { |
| 263 | - ParagonIE_Sodium_Compat::memzero($az); |
|
| 264 | - } catch (SodiumException $ex) { |
|
| 263 | + ParagonIE_Sodium_Compat::memzero( $az ); |
|
| 264 | + } catch ( SodiumException $ex ) { |
|
| 265 | 265 | $az = null; |
| 266 | 266 | } |
| 267 | 267 | return $sig; |
@@ -277,26 +277,26 @@ discard block |
||
| 277 | 277 | * @throws SodiumException |
| 278 | 278 | * @throws TypeError |
| 279 | 279 | */ |
| 280 | - public static function verify_detached($sig, $message, $pk) |
|
| 280 | + public static function verify_detached( $sig, $message, $pk ) |
|
| 281 | 281 | { |
| 282 | - if (self::strlen($sig) < 64) { |
|
| 283 | - throw new SodiumException('Signature is too short'); |
|
| 282 | + if ( self::strlen( $sig ) < 64 ) { |
|
| 283 | + throw new SodiumException( 'Signature is too short' ); |
|
| 284 | 284 | } |
| 285 | - if ((self::chrToInt($sig[63]) & 240) && self::check_S_lt_L(self::substr($sig, 32, 32))) { |
|
| 286 | - throw new SodiumException('S < L - Invalid signature'); |
|
| 285 | + if ( ( self::chrToInt( $sig[ 63 ] ) & 240 ) && self::check_S_lt_L( self::substr( $sig, 32, 32 ) ) ) { |
|
| 286 | + throw new SodiumException( 'S < L - Invalid signature' ); |
|
| 287 | 287 | } |
| 288 | - if (self::small_order($sig)) { |
|
| 289 | - throw new SodiumException('Signature is on too small of an order'); |
|
| 288 | + if ( self::small_order( $sig ) ) { |
|
| 289 | + throw new SodiumException( 'Signature is on too small of an order' ); |
|
| 290 | 290 | } |
| 291 | - if ((self::chrToInt($sig[63]) & 224) !== 0) { |
|
| 292 | - throw new SodiumException('Invalid signature'); |
|
| 291 | + if ( ( self::chrToInt( $sig[ 63 ] ) & 224 ) !== 0 ) { |
|
| 292 | + throw new SodiumException( 'Invalid signature' ); |
|
| 293 | 293 | } |
| 294 | 294 | $d = 0; |
| 295 | - for ($i = 0; $i < 32; ++$i) { |
|
| 296 | - $d |= self::chrToInt($pk[$i]); |
|
| 295 | + for ( $i = 0; $i < 32; ++$i ) { |
|
| 296 | + $d |= self::chrToInt( $pk[ $i ] ); |
|
| 297 | 297 | } |
| 298 | - if ($d === 0) { |
|
| 299 | - throw new SodiumException('All zero public key'); |
|
| 298 | + if ( $d === 0 ) { |
|
| 299 | + throw new SodiumException( 'All zero public key' ); |
|
| 300 | 300 | } |
| 301 | 301 | |
| 302 | 302 | /** @var bool The original value of ParagonIE_Sodium_Compat::$fastMult */ |
@@ -306,34 +306,34 @@ discard block |
||
| 306 | 306 | ParagonIE_Sodium_Compat::$fastMult = true; |
| 307 | 307 | |
| 308 | 308 | /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P3 $A */ |
| 309 | - $A = self::ge_frombytes_negate_vartime($pk); |
|
| 309 | + $A = self::ge_frombytes_negate_vartime( $pk ); |
|
| 310 | 310 | |
| 311 | 311 | /** @var string $hDigest */ |
| 312 | 312 | $hDigest = hash( |
| 313 | 313 | 'sha512', |
| 314 | - self::substr($sig, 0, 32) . |
|
| 315 | - self::substr($pk, 0, 32) . |
|
| 314 | + self::substr( $sig, 0, 32 ) . |
|
| 315 | + self::substr( $pk, 0, 32 ) . |
|
| 316 | 316 | $message, |
| 317 | 317 | true |
| 318 | 318 | ); |
| 319 | 319 | |
| 320 | 320 | /** @var string $h */ |
| 321 | - $h = self::sc_reduce($hDigest) . self::substr($hDigest, 32); |
|
| 321 | + $h = self::sc_reduce( $hDigest ) . self::substr( $hDigest, 32 ); |
|
| 322 | 322 | |
| 323 | 323 | /** @var ParagonIE_Sodium_Core32_Curve25519_Ge_P2 $R */ |
| 324 | 324 | $R = self::ge_double_scalarmult_vartime( |
| 325 | 325 | $h, |
| 326 | 326 | $A, |
| 327 | - self::substr($sig, 32) |
|
| 327 | + self::substr( $sig, 32 ) |
|
| 328 | 328 | ); |
| 329 | 329 | |
| 330 | 330 | /** @var string $rcheck */ |
| 331 | - $rcheck = self::ge_tobytes($R); |
|
| 331 | + $rcheck = self::ge_tobytes( $R ); |
|
| 332 | 332 | |
| 333 | 333 | // Reset ParagonIE_Sodium_Compat::$fastMult to what it was before. |
| 334 | 334 | ParagonIE_Sodium_Compat::$fastMult = $orig; |
| 335 | 335 | |
| 336 | - return self::verify_32($rcheck, self::substr($sig, 0, 32)); |
|
| 336 | + return self::verify_32( $rcheck, self::substr( $sig, 0, 32 ) ); |
|
| 337 | 337 | } |
| 338 | 338 | |
| 339 | 339 | /** |
@@ -344,10 +344,10 @@ discard block |
||
| 344 | 344 | * @throws SodiumException |
| 345 | 345 | * @throws TypeError |
| 346 | 346 | */ |
| 347 | - public static function check_S_lt_L($S) |
|
| 347 | + public static function check_S_lt_L( $S ) |
|
| 348 | 348 | { |
| 349 | - if (self::strlen($S) < 32) { |
|
| 350 | - throw new SodiumException('Signature must be 32 bytes'); |
|
| 349 | + if ( self::strlen( $S ) < 32 ) { |
|
| 350 | + throw new SodiumException( 'Signature must be 32 bytes' ); |
|
| 351 | 351 | } |
| 352 | 352 | static $L = array( |
| 353 | 353 | 0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, |
@@ -362,14 +362,14 @@ discard block |
||
| 362 | 362 | |
| 363 | 363 | do { |
| 364 | 364 | --$i; |
| 365 | - $x = self::chrToInt($S[$i]); |
|
| 365 | + $x = self::chrToInt( $S[ $i ] ); |
|
| 366 | 366 | $c |= ( |
| 367 | - (($x - $L[$i]) >> 8) & $n |
|
| 367 | + ( ( $x - $L[ $i ] ) >> 8 ) & $n |
|
| 368 | 368 | ); |
| 369 | 369 | $n &= ( |
| 370 | - (($x ^ $L[$i]) - 1) >> 8 |
|
| 370 | + ( ( $x ^ $L[ $i ] ) - 1 ) >> 8 |
|
| 371 | 371 | ); |
| 372 | - } while ($i !== 0); |
|
| 372 | + } while ( $i !== 0 ); |
|
| 373 | 373 | |
| 374 | 374 | return $c === 0; |
| 375 | 375 | } |
@@ -380,7 +380,7 @@ discard block |
||
| 380 | 380 | * @throws SodiumException |
| 381 | 381 | * @throws TypeError |
| 382 | 382 | */ |
| 383 | - public static function small_order($R) |
|
| 383 | + public static function small_order( $R ) |
|
| 384 | 384 | { |
| 385 | 385 | static $blocklist = array( |
| 386 | 386 | /* 0 (order 4) */ |
@@ -469,14 +469,14 @@ discard block |
||
| 469 | 469 | ) |
| 470 | 470 | ); |
| 471 | 471 | /** @var array<int, array<int, int>> $blocklist */ |
| 472 | - $countBlocklist = count($blocklist); |
|
| 472 | + $countBlocklist = count( $blocklist ); |
|
| 473 | 473 | |
| 474 | - for ($i = 0; $i < $countBlocklist; ++$i) { |
|
| 474 | + for ( $i = 0; $i < $countBlocklist; ++$i ) { |
|
| 475 | 475 | $c = 0; |
| 476 | - for ($j = 0; $j < 32; ++$j) { |
|
| 477 | - $c |= self::chrToInt($R[$j]) ^ $blocklist[$i][$j]; |
|
| 476 | + for ( $j = 0; $j < 32; ++$j ) { |
|
| 477 | + $c |= self::chrToInt( $R[ $j ] ) ^ $blocklist[ $i ][ $j ]; |
|
| 478 | 478 | } |
| 479 | - if ($c === 0) { |
|
| 479 | + if ( $c === 0 ) { |
|
| 480 | 480 | return true; |
| 481 | 481 | } |
| 482 | 482 | } |
@@ -1,7 +1,7 @@ |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Util', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | |
| 7 | 7 | /** |
@@ -1,6 +1,6 @@ |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core32_Util', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Util', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | 6 | |
@@ -7,7 +7,6 @@ |
||
| 7 | 7 | /** |
| 8 | 8 | * Class ParagonIE_Sodium_Core_Util |
| 9 | 9 | */ |
| 10 | -abstract class ParagonIE_Sodium_Core32_Util extends ParagonIE_Sodium_Core_Util |
|
| 11 | -{ |
|
| 10 | +abstract class ParagonIE_Sodium_Core32_Util extends ParagonIE_Sodium_Core_Util { |
|
| 12 | 11 | |
| 13 | 12 | } |
@@ -1,7 +1,7 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_SipHash', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | |
| 7 | 7 | /** |
@@ -11,228 +11,228 @@ discard block |
||
| 11 | 11 | */ |
| 12 | 12 | class ParagonIE_Sodium_Core32_SipHash extends ParagonIE_Sodium_Core32_Util |
| 13 | 13 | { |
| 14 | - /** |
|
| 15 | - * @internal You should not use this directly from another application |
|
| 16 | - * |
|
| 17 | - * @param array<int, ParagonIE_Sodium_Core32_Int64> $v |
|
| 18 | - * @return array<int, ParagonIE_Sodium_Core32_Int64> |
|
| 19 | - */ |
|
| 20 | - public static function sipRound(array $v) |
|
| 21 | - { |
|
| 22 | - # v0 += v1; |
|
| 23 | - $v[0] = $v[0]->addInt64($v[1]); |
|
| 24 | - |
|
| 25 | - # v1 = ROTL(v1, 13); |
|
| 26 | - $v[1] = $v[1]->rotateLeft(13); |
|
| 27 | - |
|
| 28 | - # v1 ^= v0; |
|
| 29 | - $v[1] = $v[1]->xorInt64($v[0]); |
|
| 30 | - |
|
| 31 | - # v0=ROTL(v0,32); |
|
| 32 | - $v[0] = $v[0]->rotateLeft(32); |
|
| 33 | - |
|
| 34 | - # v2 += v3; |
|
| 35 | - $v[2] = $v[2]->addInt64($v[3]); |
|
| 36 | - |
|
| 37 | - # v3=ROTL(v3,16); |
|
| 38 | - $v[3] = $v[3]->rotateLeft(16); |
|
| 39 | - |
|
| 40 | - # v3 ^= v2; |
|
| 41 | - $v[3] = $v[3]->xorInt64($v[2]); |
|
| 42 | - |
|
| 43 | - # v0 += v3; |
|
| 44 | - $v[0] = $v[0]->addInt64($v[3]); |
|
| 45 | - |
|
| 46 | - # v3=ROTL(v3,21); |
|
| 47 | - $v[3] = $v[3]->rotateLeft(21); |
|
| 48 | - |
|
| 49 | - # v3 ^= v0; |
|
| 50 | - $v[3] = $v[3]->xorInt64($v[0]); |
|
| 51 | - |
|
| 52 | - # v2 += v1; |
|
| 53 | - $v[2] = $v[2]->addInt64($v[1]); |
|
| 54 | - |
|
| 55 | - # v1=ROTL(v1,17); |
|
| 56 | - $v[1] = $v[1]->rotateLeft(17); |
|
| 57 | - |
|
| 58 | - # v1 ^= v2; |
|
| 59 | - $v[1] = $v[1]->xorInt64($v[2]); |
|
| 60 | - |
|
| 61 | - # v2=ROTL(v2,32) |
|
| 62 | - $v[2] = $v[2]->rotateLeft(32); |
|
| 63 | - |
|
| 64 | - return $v; |
|
| 65 | - } |
|
| 66 | - |
|
| 67 | - /** |
|
| 68 | - * @internal You should not use this directly from another application |
|
| 69 | - * |
|
| 70 | - * @param string $in |
|
| 71 | - * @param string $key |
|
| 72 | - * @return string |
|
| 73 | - * @throws SodiumException |
|
| 74 | - * @throws TypeError |
|
| 75 | - */ |
|
| 76 | - public static function sipHash24($in, $key) |
|
| 77 | - { |
|
| 78 | - $inlen = self::strlen($in); |
|
| 79 | - |
|
| 80 | - # /* "somepseudorandomlygeneratedbytes" */ |
|
| 81 | - # u64 v0 = 0x736f6d6570736575ULL; |
|
| 82 | - # u64 v1 = 0x646f72616e646f6dULL; |
|
| 83 | - # u64 v2 = 0x6c7967656e657261ULL; |
|
| 84 | - # u64 v3 = 0x7465646279746573ULL; |
|
| 85 | - $v = array( |
|
| 86 | - new ParagonIE_Sodium_Core32_Int64( |
|
| 87 | - array(0x736f, 0x6d65, 0x7073, 0x6575) |
|
| 88 | - ), |
|
| 89 | - new ParagonIE_Sodium_Core32_Int64( |
|
| 90 | - array(0x646f, 0x7261, 0x6e64, 0x6f6d) |
|
| 91 | - ), |
|
| 92 | - new ParagonIE_Sodium_Core32_Int64( |
|
| 93 | - array(0x6c79, 0x6765, 0x6e65, 0x7261) |
|
| 94 | - ), |
|
| 95 | - new ParagonIE_Sodium_Core32_Int64( |
|
| 96 | - array(0x7465, 0x6462, 0x7974, 0x6573) |
|
| 97 | - ) |
|
| 98 | - ); |
|
| 99 | - |
|
| 100 | - # u64 k0 = LOAD64_LE( k ); |
|
| 101 | - # u64 k1 = LOAD64_LE( k + 8 ); |
|
| 102 | - $k = array( |
|
| 103 | - ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 104 | - self::substr($key, 0, 8) |
|
| 105 | - ), |
|
| 106 | - ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 107 | - self::substr($key, 8, 8) |
|
| 108 | - ) |
|
| 109 | - ); |
|
| 110 | - |
|
| 111 | - # b = ( ( u64 )inlen ) << 56; |
|
| 112 | - $b = new ParagonIE_Sodium_Core32_Int64( |
|
| 113 | - array(($inlen << 8) & 0xffff, 0, 0, 0) |
|
| 114 | - ); |
|
| 115 | - |
|
| 116 | - # v3 ^= k1; |
|
| 117 | - $v[3] = $v[3]->xorInt64($k[1]); |
|
| 118 | - # v2 ^= k0; |
|
| 119 | - $v[2] = $v[2]->xorInt64($k[0]); |
|
| 120 | - # v1 ^= k1; |
|
| 121 | - $v[1] = $v[1]->xorInt64($k[1]); |
|
| 122 | - # v0 ^= k0; |
|
| 123 | - $v[0] = $v[0]->xorInt64($k[0]); |
|
| 124 | - |
|
| 125 | - $left = $inlen; |
|
| 126 | - # for ( ; in != end; in += 8 ) |
|
| 127 | - while ($left >= 8) { |
|
| 128 | - # m = LOAD64_LE( in ); |
|
| 129 | - $m = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 130 | - self::substr($in, 0, 8) |
|
| 131 | - ); |
|
| 132 | - |
|
| 133 | - # v3 ^= m; |
|
| 134 | - $v[3] = $v[3]->xorInt64($m); |
|
| 135 | - |
|
| 136 | - # SIPROUND; |
|
| 137 | - # SIPROUND; |
|
| 138 | - $v = self::sipRound($v); |
|
| 139 | - $v = self::sipRound($v); |
|
| 140 | - |
|
| 141 | - # v0 ^= m; |
|
| 142 | - $v[0] = $v[0]->xorInt64($m); |
|
| 143 | - |
|
| 144 | - $in = self::substr($in, 8); |
|
| 145 | - $left -= 8; |
|
| 146 | - } |
|
| 147 | - |
|
| 148 | - # switch( left ) |
|
| 149 | - # { |
|
| 150 | - # case 7: b |= ( ( u64 )in[ 6] ) << 48; |
|
| 151 | - # case 6: b |= ( ( u64 )in[ 5] ) << 40; |
|
| 152 | - # case 5: b |= ( ( u64 )in[ 4] ) << 32; |
|
| 153 | - # case 4: b |= ( ( u64 )in[ 3] ) << 24; |
|
| 154 | - # case 3: b |= ( ( u64 )in[ 2] ) << 16; |
|
| 155 | - # case 2: b |= ( ( u64 )in[ 1] ) << 8; |
|
| 156 | - # case 1: b |= ( ( u64 )in[ 0] ); break; |
|
| 157 | - # case 0: break; |
|
| 158 | - # } |
|
| 159 | - switch ($left) { |
|
| 160 | - case 7: |
|
| 161 | - $b = $b->orInt64( |
|
| 162 | - ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 163 | - 0, self::chrToInt($in[6]) << 16 |
|
| 164 | - ) |
|
| 165 | - ); |
|
| 166 | - case 6: |
|
| 167 | - $b = $b->orInt64( |
|
| 168 | - ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 169 | - 0, self::chrToInt($in[5]) << 8 |
|
| 170 | - ) |
|
| 171 | - ); |
|
| 172 | - case 5: |
|
| 173 | - $b = $b->orInt64( |
|
| 174 | - ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 175 | - 0, self::chrToInt($in[4]) |
|
| 176 | - ) |
|
| 177 | - ); |
|
| 178 | - case 4: |
|
| 179 | - $b = $b->orInt64( |
|
| 180 | - ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 181 | - self::chrToInt($in[3]) << 24, 0 |
|
| 182 | - ) |
|
| 183 | - ); |
|
| 184 | - case 3: |
|
| 185 | - $b = $b->orInt64( |
|
| 186 | - ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 187 | - self::chrToInt($in[2]) << 16, 0 |
|
| 188 | - ) |
|
| 189 | - ); |
|
| 190 | - case 2: |
|
| 191 | - $b = $b->orInt64( |
|
| 192 | - ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 193 | - self::chrToInt($in[1]) << 8, 0 |
|
| 194 | - ) |
|
| 195 | - ); |
|
| 196 | - case 1: |
|
| 197 | - $b = $b->orInt64( |
|
| 198 | - ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 199 | - self::chrToInt($in[0]), 0 |
|
| 200 | - ) |
|
| 201 | - ); |
|
| 202 | - case 0: |
|
| 203 | - break; |
|
| 204 | - } |
|
| 205 | - |
|
| 206 | - # v3 ^= b; |
|
| 207 | - $v[3] = $v[3]->xorInt64($b); |
|
| 208 | - |
|
| 209 | - # SIPROUND; |
|
| 210 | - # SIPROUND; |
|
| 211 | - $v = self::sipRound($v); |
|
| 212 | - $v = self::sipRound($v); |
|
| 213 | - |
|
| 214 | - # v0 ^= b; |
|
| 215 | - $v[0] = $v[0]->xorInt64($b); |
|
| 216 | - |
|
| 217 | - // Flip the lower 8 bits of v2 which is ($v[4], $v[5]) in our implementation |
|
| 218 | - # v2 ^= 0xff; |
|
| 219 | - $v[2]->limbs[3] ^= 0xff; |
|
| 220 | - |
|
| 221 | - # SIPROUND; |
|
| 222 | - # SIPROUND; |
|
| 223 | - # SIPROUND; |
|
| 224 | - # SIPROUND; |
|
| 225 | - $v = self::sipRound($v); |
|
| 226 | - $v = self::sipRound($v); |
|
| 227 | - $v = self::sipRound($v); |
|
| 228 | - $v = self::sipRound($v); |
|
| 229 | - |
|
| 230 | - # b = v0 ^ v1 ^ v2 ^ v3; |
|
| 231 | - # STORE64_LE( out, b ); |
|
| 232 | - return $v[0] |
|
| 233 | - ->xorInt64($v[1]) |
|
| 234 | - ->xorInt64($v[2]) |
|
| 235 | - ->xorInt64($v[3]) |
|
| 236 | - ->toReverseString(); |
|
| 237 | - } |
|
| 14 | + /** |
|
| 15 | + * @internal You should not use this directly from another application |
|
| 16 | + * |
|
| 17 | + * @param array<int, ParagonIE_Sodium_Core32_Int64> $v |
|
| 18 | + * @return array<int, ParagonIE_Sodium_Core32_Int64> |
|
| 19 | + */ |
|
| 20 | + public static function sipRound(array $v) |
|
| 21 | + { |
|
| 22 | + # v0 += v1; |
|
| 23 | + $v[0] = $v[0]->addInt64($v[1]); |
|
| 24 | + |
|
| 25 | + # v1 = ROTL(v1, 13); |
|
| 26 | + $v[1] = $v[1]->rotateLeft(13); |
|
| 27 | + |
|
| 28 | + # v1 ^= v0; |
|
| 29 | + $v[1] = $v[1]->xorInt64($v[0]); |
|
| 30 | + |
|
| 31 | + # v0=ROTL(v0,32); |
|
| 32 | + $v[0] = $v[0]->rotateLeft(32); |
|
| 33 | + |
|
| 34 | + # v2 += v3; |
|
| 35 | + $v[2] = $v[2]->addInt64($v[3]); |
|
| 36 | + |
|
| 37 | + # v3=ROTL(v3,16); |
|
| 38 | + $v[3] = $v[3]->rotateLeft(16); |
|
| 39 | + |
|
| 40 | + # v3 ^= v2; |
|
| 41 | + $v[3] = $v[3]->xorInt64($v[2]); |
|
| 42 | + |
|
| 43 | + # v0 += v3; |
|
| 44 | + $v[0] = $v[0]->addInt64($v[3]); |
|
| 45 | + |
|
| 46 | + # v3=ROTL(v3,21); |
|
| 47 | + $v[3] = $v[3]->rotateLeft(21); |
|
| 48 | + |
|
| 49 | + # v3 ^= v0; |
|
| 50 | + $v[3] = $v[3]->xorInt64($v[0]); |
|
| 51 | + |
|
| 52 | + # v2 += v1; |
|
| 53 | + $v[2] = $v[2]->addInt64($v[1]); |
|
| 54 | + |
|
| 55 | + # v1=ROTL(v1,17); |
|
| 56 | + $v[1] = $v[1]->rotateLeft(17); |
|
| 57 | + |
|
| 58 | + # v1 ^= v2; |
|
| 59 | + $v[1] = $v[1]->xorInt64($v[2]); |
|
| 60 | + |
|
| 61 | + # v2=ROTL(v2,32) |
|
| 62 | + $v[2] = $v[2]->rotateLeft(32); |
|
| 63 | + |
|
| 64 | + return $v; |
|
| 65 | + } |
|
| 66 | + |
|
| 67 | + /** |
|
| 68 | + * @internal You should not use this directly from another application |
|
| 69 | + * |
|
| 70 | + * @param string $in |
|
| 71 | + * @param string $key |
|
| 72 | + * @return string |
|
| 73 | + * @throws SodiumException |
|
| 74 | + * @throws TypeError |
|
| 75 | + */ |
|
| 76 | + public static function sipHash24($in, $key) |
|
| 77 | + { |
|
| 78 | + $inlen = self::strlen($in); |
|
| 79 | + |
|
| 80 | + # /* "somepseudorandomlygeneratedbytes" */ |
|
| 81 | + # u64 v0 = 0x736f6d6570736575ULL; |
|
| 82 | + # u64 v1 = 0x646f72616e646f6dULL; |
|
| 83 | + # u64 v2 = 0x6c7967656e657261ULL; |
|
| 84 | + # u64 v3 = 0x7465646279746573ULL; |
|
| 85 | + $v = array( |
|
| 86 | + new ParagonIE_Sodium_Core32_Int64( |
|
| 87 | + array(0x736f, 0x6d65, 0x7073, 0x6575) |
|
| 88 | + ), |
|
| 89 | + new ParagonIE_Sodium_Core32_Int64( |
|
| 90 | + array(0x646f, 0x7261, 0x6e64, 0x6f6d) |
|
| 91 | + ), |
|
| 92 | + new ParagonIE_Sodium_Core32_Int64( |
|
| 93 | + array(0x6c79, 0x6765, 0x6e65, 0x7261) |
|
| 94 | + ), |
|
| 95 | + new ParagonIE_Sodium_Core32_Int64( |
|
| 96 | + array(0x7465, 0x6462, 0x7974, 0x6573) |
|
| 97 | + ) |
|
| 98 | + ); |
|
| 99 | + |
|
| 100 | + # u64 k0 = LOAD64_LE( k ); |
|
| 101 | + # u64 k1 = LOAD64_LE( k + 8 ); |
|
| 102 | + $k = array( |
|
| 103 | + ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 104 | + self::substr($key, 0, 8) |
|
| 105 | + ), |
|
| 106 | + ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 107 | + self::substr($key, 8, 8) |
|
| 108 | + ) |
|
| 109 | + ); |
|
| 110 | + |
|
| 111 | + # b = ( ( u64 )inlen ) << 56; |
|
| 112 | + $b = new ParagonIE_Sodium_Core32_Int64( |
|
| 113 | + array(($inlen << 8) & 0xffff, 0, 0, 0) |
|
| 114 | + ); |
|
| 115 | + |
|
| 116 | + # v3 ^= k1; |
|
| 117 | + $v[3] = $v[3]->xorInt64($k[1]); |
|
| 118 | + # v2 ^= k0; |
|
| 119 | + $v[2] = $v[2]->xorInt64($k[0]); |
|
| 120 | + # v1 ^= k1; |
|
| 121 | + $v[1] = $v[1]->xorInt64($k[1]); |
|
| 122 | + # v0 ^= k0; |
|
| 123 | + $v[0] = $v[0]->xorInt64($k[0]); |
|
| 124 | + |
|
| 125 | + $left = $inlen; |
|
| 126 | + # for ( ; in != end; in += 8 ) |
|
| 127 | + while ($left >= 8) { |
|
| 128 | + # m = LOAD64_LE( in ); |
|
| 129 | + $m = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
|
| 130 | + self::substr($in, 0, 8) |
|
| 131 | + ); |
|
| 132 | + |
|
| 133 | + # v3 ^= m; |
|
| 134 | + $v[3] = $v[3]->xorInt64($m); |
|
| 135 | + |
|
| 136 | + # SIPROUND; |
|
| 137 | + # SIPROUND; |
|
| 138 | + $v = self::sipRound($v); |
|
| 139 | + $v = self::sipRound($v); |
|
| 140 | + |
|
| 141 | + # v0 ^= m; |
|
| 142 | + $v[0] = $v[0]->xorInt64($m); |
|
| 143 | + |
|
| 144 | + $in = self::substr($in, 8); |
|
| 145 | + $left -= 8; |
|
| 146 | + } |
|
| 147 | + |
|
| 148 | + # switch( left ) |
|
| 149 | + # { |
|
| 150 | + # case 7: b |= ( ( u64 )in[ 6] ) << 48; |
|
| 151 | + # case 6: b |= ( ( u64 )in[ 5] ) << 40; |
|
| 152 | + # case 5: b |= ( ( u64 )in[ 4] ) << 32; |
|
| 153 | + # case 4: b |= ( ( u64 )in[ 3] ) << 24; |
|
| 154 | + # case 3: b |= ( ( u64 )in[ 2] ) << 16; |
|
| 155 | + # case 2: b |= ( ( u64 )in[ 1] ) << 8; |
|
| 156 | + # case 1: b |= ( ( u64 )in[ 0] ); break; |
|
| 157 | + # case 0: break; |
|
| 158 | + # } |
|
| 159 | + switch ($left) { |
|
| 160 | + case 7: |
|
| 161 | + $b = $b->orInt64( |
|
| 162 | + ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 163 | + 0, self::chrToInt($in[6]) << 16 |
|
| 164 | + ) |
|
| 165 | + ); |
|
| 166 | + case 6: |
|
| 167 | + $b = $b->orInt64( |
|
| 168 | + ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 169 | + 0, self::chrToInt($in[5]) << 8 |
|
| 170 | + ) |
|
| 171 | + ); |
|
| 172 | + case 5: |
|
| 173 | + $b = $b->orInt64( |
|
| 174 | + ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 175 | + 0, self::chrToInt($in[4]) |
|
| 176 | + ) |
|
| 177 | + ); |
|
| 178 | + case 4: |
|
| 179 | + $b = $b->orInt64( |
|
| 180 | + ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 181 | + self::chrToInt($in[3]) << 24, 0 |
|
| 182 | + ) |
|
| 183 | + ); |
|
| 184 | + case 3: |
|
| 185 | + $b = $b->orInt64( |
|
| 186 | + ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 187 | + self::chrToInt($in[2]) << 16, 0 |
|
| 188 | + ) |
|
| 189 | + ); |
|
| 190 | + case 2: |
|
| 191 | + $b = $b->orInt64( |
|
| 192 | + ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 193 | + self::chrToInt($in[1]) << 8, 0 |
|
| 194 | + ) |
|
| 195 | + ); |
|
| 196 | + case 1: |
|
| 197 | + $b = $b->orInt64( |
|
| 198 | + ParagonIE_Sodium_Core32_Int64::fromInts( |
|
| 199 | + self::chrToInt($in[0]), 0 |
|
| 200 | + ) |
|
| 201 | + ); |
|
| 202 | + case 0: |
|
| 203 | + break; |
|
| 204 | + } |
|
| 205 | + |
|
| 206 | + # v3 ^= b; |
|
| 207 | + $v[3] = $v[3]->xorInt64($b); |
|
| 208 | + |
|
| 209 | + # SIPROUND; |
|
| 210 | + # SIPROUND; |
|
| 211 | + $v = self::sipRound($v); |
|
| 212 | + $v = self::sipRound($v); |
|
| 213 | + |
|
| 214 | + # v0 ^= b; |
|
| 215 | + $v[0] = $v[0]->xorInt64($b); |
|
| 216 | + |
|
| 217 | + // Flip the lower 8 bits of v2 which is ($v[4], $v[5]) in our implementation |
|
| 218 | + # v2 ^= 0xff; |
|
| 219 | + $v[2]->limbs[3] ^= 0xff; |
|
| 220 | + |
|
| 221 | + # SIPROUND; |
|
| 222 | + # SIPROUND; |
|
| 223 | + # SIPROUND; |
|
| 224 | + # SIPROUND; |
|
| 225 | + $v = self::sipRound($v); |
|
| 226 | + $v = self::sipRound($v); |
|
| 227 | + $v = self::sipRound($v); |
|
| 228 | + $v = self::sipRound($v); |
|
| 229 | + |
|
| 230 | + # b = v0 ^ v1 ^ v2 ^ v3; |
|
| 231 | + # STORE64_LE( out, b ); |
|
| 232 | + return $v[0] |
|
| 233 | + ->xorInt64($v[1]) |
|
| 234 | + ->xorInt64($v[2]) |
|
| 235 | + ->xorInt64($v[3]) |
|
| 236 | + ->toReverseString(); |
|
| 237 | + } |
|
| 238 | 238 | } |
@@ -1,6 +1,6 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core32_SipHash', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_SipHash', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | 6 | |
@@ -17,49 +17,49 @@ discard block |
||
| 17 | 17 | * @param array<int, ParagonIE_Sodium_Core32_Int64> $v |
| 18 | 18 | * @return array<int, ParagonIE_Sodium_Core32_Int64> |
| 19 | 19 | */ |
| 20 | - public static function sipRound(array $v) |
|
| 20 | + public static function sipRound( array $v ) |
|
| 21 | 21 | { |
| 22 | 22 | # v0 += v1; |
| 23 | - $v[0] = $v[0]->addInt64($v[1]); |
|
| 23 | + $v[ 0 ] = $v[ 0 ]->addInt64( $v[ 1 ] ); |
|
| 24 | 24 | |
| 25 | 25 | # v1 = ROTL(v1, 13); |
| 26 | - $v[1] = $v[1]->rotateLeft(13); |
|
| 26 | + $v[ 1 ] = $v[ 1 ]->rotateLeft( 13 ); |
|
| 27 | 27 | |
| 28 | 28 | # v1 ^= v0; |
| 29 | - $v[1] = $v[1]->xorInt64($v[0]); |
|
| 29 | + $v[ 1 ] = $v[ 1 ]->xorInt64( $v[ 0 ] ); |
|
| 30 | 30 | |
| 31 | 31 | # v0=ROTL(v0,32); |
| 32 | - $v[0] = $v[0]->rotateLeft(32); |
|
| 32 | + $v[ 0 ] = $v[ 0 ]->rotateLeft( 32 ); |
|
| 33 | 33 | |
| 34 | 34 | # v2 += v3; |
| 35 | - $v[2] = $v[2]->addInt64($v[3]); |
|
| 35 | + $v[ 2 ] = $v[ 2 ]->addInt64( $v[ 3 ] ); |
|
| 36 | 36 | |
| 37 | 37 | # v3=ROTL(v3,16); |
| 38 | - $v[3] = $v[3]->rotateLeft(16); |
|
| 38 | + $v[ 3 ] = $v[ 3 ]->rotateLeft( 16 ); |
|
| 39 | 39 | |
| 40 | 40 | # v3 ^= v2; |
| 41 | - $v[3] = $v[3]->xorInt64($v[2]); |
|
| 41 | + $v[ 3 ] = $v[ 3 ]->xorInt64( $v[ 2 ] ); |
|
| 42 | 42 | |
| 43 | 43 | # v0 += v3; |
| 44 | - $v[0] = $v[0]->addInt64($v[3]); |
|
| 44 | + $v[ 0 ] = $v[ 0 ]->addInt64( $v[ 3 ] ); |
|
| 45 | 45 | |
| 46 | 46 | # v3=ROTL(v3,21); |
| 47 | - $v[3] = $v[3]->rotateLeft(21); |
|
| 47 | + $v[ 3 ] = $v[ 3 ]->rotateLeft( 21 ); |
|
| 48 | 48 | |
| 49 | 49 | # v3 ^= v0; |
| 50 | - $v[3] = $v[3]->xorInt64($v[0]); |
|
| 50 | + $v[ 3 ] = $v[ 3 ]->xorInt64( $v[ 0 ] ); |
|
| 51 | 51 | |
| 52 | 52 | # v2 += v1; |
| 53 | - $v[2] = $v[2]->addInt64($v[1]); |
|
| 53 | + $v[ 2 ] = $v[ 2 ]->addInt64( $v[ 1 ] ); |
|
| 54 | 54 | |
| 55 | 55 | # v1=ROTL(v1,17); |
| 56 | - $v[1] = $v[1]->rotateLeft(17); |
|
| 56 | + $v[ 1 ] = $v[ 1 ]->rotateLeft( 17 ); |
|
| 57 | 57 | |
| 58 | 58 | # v1 ^= v2; |
| 59 | - $v[1] = $v[1]->xorInt64($v[2]); |
|
| 59 | + $v[ 1 ] = $v[ 1 ]->xorInt64( $v[ 2 ] ); |
|
| 60 | 60 | |
| 61 | 61 | # v2=ROTL(v2,32) |
| 62 | - $v[2] = $v[2]->rotateLeft(32); |
|
| 62 | + $v[ 2 ] = $v[ 2 ]->rotateLeft( 32 ); |
|
| 63 | 63 | |
| 64 | 64 | return $v; |
| 65 | 65 | } |
@@ -73,9 +73,9 @@ discard block |
||
| 73 | 73 | * @throws SodiumException |
| 74 | 74 | * @throws TypeError |
| 75 | 75 | */ |
| 76 | - public static function sipHash24($in, $key) |
|
| 76 | + public static function sipHash24( $in, $key ) |
|
| 77 | 77 | { |
| 78 | - $inlen = self::strlen($in); |
|
| 78 | + $inlen = self::strlen( $in ); |
|
| 79 | 79 | |
| 80 | 80 | # /* "somepseudorandomlygeneratedbytes" */ |
| 81 | 81 | # u64 v0 = 0x736f6d6570736575ULL; |
@@ -84,16 +84,16 @@ discard block |
||
| 84 | 84 | # u64 v3 = 0x7465646279746573ULL; |
| 85 | 85 | $v = array( |
| 86 | 86 | new ParagonIE_Sodium_Core32_Int64( |
| 87 | - array(0x736f, 0x6d65, 0x7073, 0x6575) |
|
| 87 | + array( 0x736f, 0x6d65, 0x7073, 0x6575 ) |
|
| 88 | 88 | ), |
| 89 | 89 | new ParagonIE_Sodium_Core32_Int64( |
| 90 | - array(0x646f, 0x7261, 0x6e64, 0x6f6d) |
|
| 90 | + array( 0x646f, 0x7261, 0x6e64, 0x6f6d ) |
|
| 91 | 91 | ), |
| 92 | 92 | new ParagonIE_Sodium_Core32_Int64( |
| 93 | - array(0x6c79, 0x6765, 0x6e65, 0x7261) |
|
| 93 | + array( 0x6c79, 0x6765, 0x6e65, 0x7261 ) |
|
| 94 | 94 | ), |
| 95 | 95 | new ParagonIE_Sodium_Core32_Int64( |
| 96 | - array(0x7465, 0x6462, 0x7974, 0x6573) |
|
| 96 | + array( 0x7465, 0x6462, 0x7974, 0x6573 ) |
|
| 97 | 97 | ) |
| 98 | 98 | ); |
| 99 | 99 | |
@@ -101,47 +101,47 @@ discard block |
||
| 101 | 101 | # u64 k1 = LOAD64_LE( k + 8 ); |
| 102 | 102 | $k = array( |
| 103 | 103 | ParagonIE_Sodium_Core32_Int64::fromReverseString( |
| 104 | - self::substr($key, 0, 8) |
|
| 104 | + self::substr( $key, 0, 8 ) |
|
| 105 | 105 | ), |
| 106 | 106 | ParagonIE_Sodium_Core32_Int64::fromReverseString( |
| 107 | - self::substr($key, 8, 8) |
|
| 107 | + self::substr( $key, 8, 8 ) |
|
| 108 | 108 | ) |
| 109 | 109 | ); |
| 110 | 110 | |
| 111 | 111 | # b = ( ( u64 )inlen ) << 56; |
| 112 | 112 | $b = new ParagonIE_Sodium_Core32_Int64( |
| 113 | - array(($inlen << 8) & 0xffff, 0, 0, 0) |
|
| 113 | + array( ( $inlen << 8 ) & 0xffff, 0, 0, 0 ) |
|
| 114 | 114 | ); |
| 115 | 115 | |
| 116 | 116 | # v3 ^= k1; |
| 117 | - $v[3] = $v[3]->xorInt64($k[1]); |
|
| 117 | + $v[ 3 ] = $v[ 3 ]->xorInt64( $k[ 1 ] ); |
|
| 118 | 118 | # v2 ^= k0; |
| 119 | - $v[2] = $v[2]->xorInt64($k[0]); |
|
| 119 | + $v[ 2 ] = $v[ 2 ]->xorInt64( $k[ 0 ] ); |
|
| 120 | 120 | # v1 ^= k1; |
| 121 | - $v[1] = $v[1]->xorInt64($k[1]); |
|
| 121 | + $v[ 1 ] = $v[ 1 ]->xorInt64( $k[ 1 ] ); |
|
| 122 | 122 | # v0 ^= k0; |
| 123 | - $v[0] = $v[0]->xorInt64($k[0]); |
|
| 123 | + $v[ 0 ] = $v[ 0 ]->xorInt64( $k[ 0 ] ); |
|
| 124 | 124 | |
| 125 | 125 | $left = $inlen; |
| 126 | 126 | # for ( ; in != end; in += 8 ) |
| 127 | - while ($left >= 8) { |
|
| 127 | + while ( $left >= 8 ) { |
|
| 128 | 128 | # m = LOAD64_LE( in ); |
| 129 | 129 | $m = ParagonIE_Sodium_Core32_Int64::fromReverseString( |
| 130 | - self::substr($in, 0, 8) |
|
| 130 | + self::substr( $in, 0, 8 ) |
|
| 131 | 131 | ); |
| 132 | 132 | |
| 133 | 133 | # v3 ^= m; |
| 134 | - $v[3] = $v[3]->xorInt64($m); |
|
| 134 | + $v[ 3 ] = $v[ 3 ]->xorInt64( $m ); |
|
| 135 | 135 | |
| 136 | 136 | # SIPROUND; |
| 137 | 137 | # SIPROUND; |
| 138 | - $v = self::sipRound($v); |
|
| 139 | - $v = self::sipRound($v); |
|
| 138 | + $v = self::sipRound( $v ); |
|
| 139 | + $v = self::sipRound( $v ); |
|
| 140 | 140 | |
| 141 | 141 | # v0 ^= m; |
| 142 | - $v[0] = $v[0]->xorInt64($m); |
|
| 142 | + $v[ 0 ] = $v[ 0 ]->xorInt64( $m ); |
|
| 143 | 143 | |
| 144 | - $in = self::substr($in, 8); |
|
| 144 | + $in = self::substr( $in, 8 ); |
|
| 145 | 145 | $left -= 8; |
| 146 | 146 | } |
| 147 | 147 | |
@@ -156,47 +156,47 @@ discard block |
||
| 156 | 156 | # case 1: b |= ( ( u64 )in[ 0] ); break; |
| 157 | 157 | # case 0: break; |
| 158 | 158 | # } |
| 159 | - switch ($left) { |
|
| 159 | + switch ( $left ) { |
|
| 160 | 160 | case 7: |
| 161 | 161 | $b = $b->orInt64( |
| 162 | 162 | ParagonIE_Sodium_Core32_Int64::fromInts( |
| 163 | - 0, self::chrToInt($in[6]) << 16 |
|
| 163 | + 0, self::chrToInt( $in[ 6 ] ) << 16 |
|
| 164 | 164 | ) |
| 165 | 165 | ); |
| 166 | 166 | case 6: |
| 167 | 167 | $b = $b->orInt64( |
| 168 | 168 | ParagonIE_Sodium_Core32_Int64::fromInts( |
| 169 | - 0, self::chrToInt($in[5]) << 8 |
|
| 169 | + 0, self::chrToInt( $in[ 5 ] ) << 8 |
|
| 170 | 170 | ) |
| 171 | 171 | ); |
| 172 | 172 | case 5: |
| 173 | 173 | $b = $b->orInt64( |
| 174 | 174 | ParagonIE_Sodium_Core32_Int64::fromInts( |
| 175 | - 0, self::chrToInt($in[4]) |
|
| 175 | + 0, self::chrToInt( $in[ 4 ] ) |
|
| 176 | 176 | ) |
| 177 | 177 | ); |
| 178 | 178 | case 4: |
| 179 | 179 | $b = $b->orInt64( |
| 180 | 180 | ParagonIE_Sodium_Core32_Int64::fromInts( |
| 181 | - self::chrToInt($in[3]) << 24, 0 |
|
| 181 | + self::chrToInt( $in[ 3 ] ) << 24, 0 |
|
| 182 | 182 | ) |
| 183 | 183 | ); |
| 184 | 184 | case 3: |
| 185 | 185 | $b = $b->orInt64( |
| 186 | 186 | ParagonIE_Sodium_Core32_Int64::fromInts( |
| 187 | - self::chrToInt($in[2]) << 16, 0 |
|
| 187 | + self::chrToInt( $in[ 2 ] ) << 16, 0 |
|
| 188 | 188 | ) |
| 189 | 189 | ); |
| 190 | 190 | case 2: |
| 191 | 191 | $b = $b->orInt64( |
| 192 | 192 | ParagonIE_Sodium_Core32_Int64::fromInts( |
| 193 | - self::chrToInt($in[1]) << 8, 0 |
|
| 193 | + self::chrToInt( $in[ 1 ] ) << 8, 0 |
|
| 194 | 194 | ) |
| 195 | 195 | ); |
| 196 | 196 | case 1: |
| 197 | 197 | $b = $b->orInt64( |
| 198 | 198 | ParagonIE_Sodium_Core32_Int64::fromInts( |
| 199 | - self::chrToInt($in[0]), 0 |
|
| 199 | + self::chrToInt( $in[ 0 ] ), 0 |
|
| 200 | 200 | ) |
| 201 | 201 | ); |
| 202 | 202 | case 0: |
@@ -204,35 +204,35 @@ discard block |
||
| 204 | 204 | } |
| 205 | 205 | |
| 206 | 206 | # v3 ^= b; |
| 207 | - $v[3] = $v[3]->xorInt64($b); |
|
| 207 | + $v[ 3 ] = $v[ 3 ]->xorInt64( $b ); |
|
| 208 | 208 | |
| 209 | 209 | # SIPROUND; |
| 210 | 210 | # SIPROUND; |
| 211 | - $v = self::sipRound($v); |
|
| 212 | - $v = self::sipRound($v); |
|
| 211 | + $v = self::sipRound( $v ); |
|
| 212 | + $v = self::sipRound( $v ); |
|
| 213 | 213 | |
| 214 | 214 | # v0 ^= b; |
| 215 | - $v[0] = $v[0]->xorInt64($b); |
|
| 215 | + $v[ 0 ] = $v[ 0 ]->xorInt64( $b ); |
|
| 216 | 216 | |
| 217 | 217 | // Flip the lower 8 bits of v2 which is ($v[4], $v[5]) in our implementation |
| 218 | 218 | # v2 ^= 0xff; |
| 219 | - $v[2]->limbs[3] ^= 0xff; |
|
| 219 | + $v[ 2 ]->limbs[ 3 ] ^= 0xff; |
|
| 220 | 220 | |
| 221 | 221 | # SIPROUND; |
| 222 | 222 | # SIPROUND; |
| 223 | 223 | # SIPROUND; |
| 224 | 224 | # SIPROUND; |
| 225 | - $v = self::sipRound($v); |
|
| 226 | - $v = self::sipRound($v); |
|
| 227 | - $v = self::sipRound($v); |
|
| 228 | - $v = self::sipRound($v); |
|
| 225 | + $v = self::sipRound( $v ); |
|
| 226 | + $v = self::sipRound( $v ); |
|
| 227 | + $v = self::sipRound( $v ); |
|
| 228 | + $v = self::sipRound( $v ); |
|
| 229 | 229 | |
| 230 | 230 | # b = v0 ^ v1 ^ v2 ^ v3; |
| 231 | 231 | # STORE64_LE( out, b ); |
| 232 | - return $v[0] |
|
| 233 | - ->xorInt64($v[1]) |
|
| 234 | - ->xorInt64($v[2]) |
|
| 235 | - ->xorInt64($v[3]) |
|
| 232 | + return $v[ 0 ] |
|
| 233 | + ->xorInt64( $v[ 1 ] ) |
|
| 234 | + ->xorInt64( $v[ 2 ] ) |
|
| 235 | + ->xorInt64( $v[ 3 ] ) |
|
| 236 | 236 | ->toReverseString(); |
| 237 | 237 | } |
| 238 | 238 | } |
@@ -9,16 +9,14 @@ discard block |
||
| 9 | 9 | * |
| 10 | 10 | * Only uses 32-bit arithmetic, while the original SipHash used 64-bit integers |
| 11 | 11 | */ |
| 12 | -class ParagonIE_Sodium_Core32_SipHash extends ParagonIE_Sodium_Core32_Util |
|
| 13 | -{ |
|
| 12 | +class ParagonIE_Sodium_Core32_SipHash extends ParagonIE_Sodium_Core32_Util { |
|
| 14 | 13 | /** |
| 15 | 14 | * @internal You should not use this directly from another application |
| 16 | 15 | * |
| 17 | 16 | * @param array<int, ParagonIE_Sodium_Core32_Int64> $v |
| 18 | 17 | * @return array<int, ParagonIE_Sodium_Core32_Int64> |
| 19 | 18 | */ |
| 20 | - public static function sipRound(array $v) |
|
| 21 | - { |
|
| 19 | + public static function sipRound(array $v) { |
|
| 22 | 20 | # v0 += v1; |
| 23 | 21 | $v[0] = $v[0]->addInt64($v[1]); |
| 24 | 22 | |
@@ -73,8 +71,7 @@ discard block |
||
| 73 | 71 | * @throws SodiumException |
| 74 | 72 | * @throws TypeError |
| 75 | 73 | */ |
| 76 | - public static function sipHash24($in, $key) |
|
| 77 | - { |
|
| 74 | + public static function sipHash24($in, $key) { |
|
| 78 | 75 | $inlen = self::strlen($in); |
| 79 | 76 | |
| 80 | 77 | # /* "somepseudorandomlygeneratedbytes" */ |
@@ -1,7 +1,7 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_X25519', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | |
| 7 | 7 | /** |
@@ -9,337 +9,337 @@ discard block |
||
| 9 | 9 | */ |
| 10 | 10 | abstract class ParagonIE_Sodium_Core32_X25519 extends ParagonIE_Sodium_Core32_Curve25519 |
| 11 | 11 | { |
| 12 | - /** |
|
| 13 | - * Alters the objects passed to this method in place. |
|
| 14 | - * |
|
| 15 | - * @internal You should not use this directly from another application |
|
| 16 | - * |
|
| 17 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f |
|
| 18 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $g |
|
| 19 | - * @param int $b |
|
| 20 | - * @return void |
|
| 21 | - * @throws SodiumException |
|
| 22 | - * @throws TypeError |
|
| 23 | - * @psalm-suppress MixedMethodCall |
|
| 24 | - */ |
|
| 25 | - public static function fe_cswap( |
|
| 26 | - ParagonIE_Sodium_Core32_Curve25519_Fe $f, |
|
| 27 | - ParagonIE_Sodium_Core32_Curve25519_Fe $g, |
|
| 28 | - $b = 0 |
|
| 29 | - ) { |
|
| 30 | - $f0 = (int) $f[0]->toInt(); |
|
| 31 | - $f1 = (int) $f[1]->toInt(); |
|
| 32 | - $f2 = (int) $f[2]->toInt(); |
|
| 33 | - $f3 = (int) $f[3]->toInt(); |
|
| 34 | - $f4 = (int) $f[4]->toInt(); |
|
| 35 | - $f5 = (int) $f[5]->toInt(); |
|
| 36 | - $f6 = (int) $f[6]->toInt(); |
|
| 37 | - $f7 = (int) $f[7]->toInt(); |
|
| 38 | - $f8 = (int) $f[8]->toInt(); |
|
| 39 | - $f9 = (int) $f[9]->toInt(); |
|
| 40 | - $g0 = (int) $g[0]->toInt(); |
|
| 41 | - $g1 = (int) $g[1]->toInt(); |
|
| 42 | - $g2 = (int) $g[2]->toInt(); |
|
| 43 | - $g3 = (int) $g[3]->toInt(); |
|
| 44 | - $g4 = (int) $g[4]->toInt(); |
|
| 45 | - $g5 = (int) $g[5]->toInt(); |
|
| 46 | - $g6 = (int) $g[6]->toInt(); |
|
| 47 | - $g7 = (int) $g[7]->toInt(); |
|
| 48 | - $g8 = (int) $g[8]->toInt(); |
|
| 49 | - $g9 = (int) $g[9]->toInt(); |
|
| 50 | - $b = -$b; |
|
| 51 | - /** @var int $x0 */ |
|
| 52 | - $x0 = ($f0 ^ $g0) & $b; |
|
| 53 | - /** @var int $x1 */ |
|
| 54 | - $x1 = ($f1 ^ $g1) & $b; |
|
| 55 | - /** @var int $x2 */ |
|
| 56 | - $x2 = ($f2 ^ $g2) & $b; |
|
| 57 | - /** @var int $x3 */ |
|
| 58 | - $x3 = ($f3 ^ $g3) & $b; |
|
| 59 | - /** @var int $x4 */ |
|
| 60 | - $x4 = ($f4 ^ $g4) & $b; |
|
| 61 | - /** @var int $x5 */ |
|
| 62 | - $x5 = ($f5 ^ $g5) & $b; |
|
| 63 | - /** @var int $x6 */ |
|
| 64 | - $x6 = ($f6 ^ $g6) & $b; |
|
| 65 | - /** @var int $x7 */ |
|
| 66 | - $x7 = ($f7 ^ $g7) & $b; |
|
| 67 | - /** @var int $x8 */ |
|
| 68 | - $x8 = ($f8 ^ $g8) & $b; |
|
| 69 | - /** @var int $x9 */ |
|
| 70 | - $x9 = ($f9 ^ $g9) & $b; |
|
| 71 | - $f[0] = ParagonIE_Sodium_Core32_Int32::fromInt($f0 ^ $x0); |
|
| 72 | - $f[1] = ParagonIE_Sodium_Core32_Int32::fromInt($f1 ^ $x1); |
|
| 73 | - $f[2] = ParagonIE_Sodium_Core32_Int32::fromInt($f2 ^ $x2); |
|
| 74 | - $f[3] = ParagonIE_Sodium_Core32_Int32::fromInt($f3 ^ $x3); |
|
| 75 | - $f[4] = ParagonIE_Sodium_Core32_Int32::fromInt($f4 ^ $x4); |
|
| 76 | - $f[5] = ParagonIE_Sodium_Core32_Int32::fromInt($f5 ^ $x5); |
|
| 77 | - $f[6] = ParagonIE_Sodium_Core32_Int32::fromInt($f6 ^ $x6); |
|
| 78 | - $f[7] = ParagonIE_Sodium_Core32_Int32::fromInt($f7 ^ $x7); |
|
| 79 | - $f[8] = ParagonIE_Sodium_Core32_Int32::fromInt($f8 ^ $x8); |
|
| 80 | - $f[9] = ParagonIE_Sodium_Core32_Int32::fromInt($f9 ^ $x9); |
|
| 81 | - $g[0] = ParagonIE_Sodium_Core32_Int32::fromInt($g0 ^ $x0); |
|
| 82 | - $g[1] = ParagonIE_Sodium_Core32_Int32::fromInt($g1 ^ $x1); |
|
| 83 | - $g[2] = ParagonIE_Sodium_Core32_Int32::fromInt($g2 ^ $x2); |
|
| 84 | - $g[3] = ParagonIE_Sodium_Core32_Int32::fromInt($g3 ^ $x3); |
|
| 85 | - $g[4] = ParagonIE_Sodium_Core32_Int32::fromInt($g4 ^ $x4); |
|
| 86 | - $g[5] = ParagonIE_Sodium_Core32_Int32::fromInt($g5 ^ $x5); |
|
| 87 | - $g[6] = ParagonIE_Sodium_Core32_Int32::fromInt($g6 ^ $x6); |
|
| 88 | - $g[7] = ParagonIE_Sodium_Core32_Int32::fromInt($g7 ^ $x7); |
|
| 89 | - $g[8] = ParagonIE_Sodium_Core32_Int32::fromInt($g8 ^ $x8); |
|
| 90 | - $g[9] = ParagonIE_Sodium_Core32_Int32::fromInt($g9 ^ $x9); |
|
| 91 | - } |
|
| 92 | - |
|
| 93 | - /** |
|
| 94 | - * @internal You should not use this directly from another application |
|
| 95 | - * |
|
| 96 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f |
|
| 97 | - * @return ParagonIE_Sodium_Core32_Curve25519_Fe |
|
| 98 | - * @throws SodiumException |
|
| 99 | - * @throws TypeError |
|
| 100 | - * @psalm-suppress MixedAssignment |
|
| 101 | - * @psalm-suppress MixedMethodCall |
|
| 102 | - */ |
|
| 103 | - public static function fe_mul121666(ParagonIE_Sodium_Core32_Curve25519_Fe $f) |
|
| 104 | - { |
|
| 105 | - /** @var array<int, ParagonIE_Sodium_Core32_Int64> $h */ |
|
| 106 | - $h = array(); |
|
| 107 | - for ($i = 0; $i < 10; ++$i) { |
|
| 108 | - $h[$i] = $f[$i]->toInt64()->mulInt(121666, 17); |
|
| 109 | - } |
|
| 110 | - |
|
| 111 | - $carry9 = $h[9]->addInt(1 << 24)->shiftRight(25); |
|
| 112 | - $h[0] = $h[0]->addInt64($carry9->mulInt(19, 5)); |
|
| 113 | - $h[9] = $h[9]->subInt64($carry9->shiftLeft(25)); |
|
| 114 | - |
|
| 115 | - $carry1 = $h[1]->addInt(1 << 24)->shiftRight(25); |
|
| 116 | - $h[2] = $h[2]->addInt64($carry1); |
|
| 117 | - $h[1] = $h[1]->subInt64($carry1->shiftLeft(25)); |
|
| 118 | - |
|
| 119 | - $carry3 = $h[3]->addInt(1 << 24)->shiftRight(25); |
|
| 120 | - $h[4] = $h[4]->addInt64($carry3); |
|
| 121 | - $h[3] = $h[3]->subInt64($carry3->shiftLeft(25)); |
|
| 122 | - |
|
| 123 | - $carry5 = $h[5]->addInt(1 << 24)->shiftRight(25); |
|
| 124 | - $h[6] = $h[6]->addInt64($carry5); |
|
| 125 | - $h[5] = $h[5]->subInt64($carry5->shiftLeft(25)); |
|
| 126 | - |
|
| 127 | - $carry7 = $h[7]->addInt(1 << 24)->shiftRight(25); |
|
| 128 | - $h[8] = $h[8]->addInt64($carry7); |
|
| 129 | - $h[7] = $h[7]->subInt64($carry7->shiftLeft(25)); |
|
| 130 | - |
|
| 131 | - $carry0 = $h[0]->addInt(1 << 25)->shiftRight(26); |
|
| 132 | - $h[1] = $h[1]->addInt64($carry0); |
|
| 133 | - $h[0] = $h[0]->subInt64($carry0->shiftLeft(26)); |
|
| 134 | - |
|
| 135 | - $carry2 = $h[2]->addInt(1 << 25)->shiftRight(26); |
|
| 136 | - $h[3] = $h[3]->addInt64($carry2); |
|
| 137 | - $h[2] = $h[2]->subInt64($carry2->shiftLeft(26)); |
|
| 138 | - |
|
| 139 | - $carry4 = $h[4]->addInt(1 << 25)->shiftRight(26); |
|
| 140 | - $h[5] = $h[5]->addInt64($carry4); |
|
| 141 | - $h[4] = $h[4]->subInt64($carry4->shiftLeft(26)); |
|
| 142 | - |
|
| 143 | - $carry6 = $h[6]->addInt(1 << 25)->shiftRight(26); |
|
| 144 | - $h[7] = $h[7]->addInt64($carry6); |
|
| 145 | - $h[6] = $h[6]->subInt64($carry6->shiftLeft(26)); |
|
| 146 | - |
|
| 147 | - $carry8 = $h[8]->addInt(1 << 25)->shiftRight(26); |
|
| 148 | - $h[9] = $h[9]->addInt64($carry8); |
|
| 149 | - $h[8] = $h[8]->subInt64($carry8->shiftLeft(26)); |
|
| 150 | - |
|
| 151 | - for ($i = 0; $i < 10; ++$i) { |
|
| 152 | - $h[$i] = $h[$i]->toInt32(); |
|
| 153 | - } |
|
| 154 | - /** @var array<int, ParagonIE_Sodium_Core32_Int32> $h2 */ |
|
| 155 | - $h2 = $h; |
|
| 156 | - return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray($h2); |
|
| 157 | - } |
|
| 158 | - |
|
| 159 | - /** |
|
| 160 | - * @internal You should not use this directly from another application |
|
| 161 | - * |
|
| 162 | - * Inline comments preceded by # are from libsodium's ref10 code. |
|
| 163 | - * |
|
| 164 | - * @param string $n |
|
| 165 | - * @param string $p |
|
| 166 | - * @return string |
|
| 167 | - * @throws SodiumException |
|
| 168 | - * @throws TypeError |
|
| 169 | - */ |
|
| 170 | - public static function crypto_scalarmult_curve25519_ref10($n, $p) |
|
| 171 | - { |
|
| 172 | - # for (i = 0;i < 32;++i) e[i] = n[i]; |
|
| 173 | - $e = '' . $n; |
|
| 174 | - # e[0] &= 248; |
|
| 175 | - $e[0] = self::intToChr( |
|
| 176 | - self::chrToInt($e[0]) & 248 |
|
| 177 | - ); |
|
| 178 | - # e[31] &= 127; |
|
| 179 | - # e[31] |= 64; |
|
| 180 | - $e[31] = self::intToChr( |
|
| 181 | - (self::chrToInt($e[31]) & 127) | 64 |
|
| 182 | - ); |
|
| 183 | - # fe_frombytes(x1,p); |
|
| 184 | - $x1 = self::fe_frombytes($p); |
|
| 185 | - # fe_1(x2); |
|
| 186 | - $x2 = self::fe_1(); |
|
| 187 | - # fe_0(z2); |
|
| 188 | - $z2 = self::fe_0(); |
|
| 189 | - # fe_copy(x3,x1); |
|
| 190 | - $x3 = self::fe_copy($x1); |
|
| 191 | - # fe_1(z3); |
|
| 192 | - $z3 = self::fe_1(); |
|
| 193 | - |
|
| 194 | - # swap = 0; |
|
| 195 | - /** @var int $swap */ |
|
| 196 | - $swap = 0; |
|
| 197 | - |
|
| 198 | - # for (pos = 254;pos >= 0;--pos) { |
|
| 199 | - for ($pos = 254; $pos >= 0; --$pos) { |
|
| 200 | - # b = e[pos / 8] >> (pos & 7); |
|
| 201 | - /** @var int $b */ |
|
| 202 | - $b = self::chrToInt( |
|
| 203 | - $e[(int) floor($pos / 8)] |
|
| 204 | - ) >> ($pos & 7); |
|
| 205 | - # b &= 1; |
|
| 206 | - $b &= 1; |
|
| 207 | - |
|
| 208 | - # swap ^= b; |
|
| 209 | - $swap ^= $b; |
|
| 210 | - |
|
| 211 | - # fe_cswap(x2,x3,swap); |
|
| 212 | - self::fe_cswap($x2, $x3, $swap); |
|
| 213 | - |
|
| 214 | - # fe_cswap(z2,z3,swap); |
|
| 215 | - self::fe_cswap($z2, $z3, $swap); |
|
| 216 | - |
|
| 217 | - # swap = b; |
|
| 218 | - /** @var int $swap */ |
|
| 219 | - $swap = $b; |
|
| 220 | - |
|
| 221 | - # fe_sub(tmp0,x3,z3); |
|
| 222 | - $tmp0 = self::fe_sub($x3, $z3); |
|
| 223 | - |
|
| 224 | - # fe_sub(tmp1,x2,z2); |
|
| 225 | - $tmp1 = self::fe_sub($x2, $z2); |
|
| 226 | - |
|
| 227 | - # fe_add(x2,x2,z2); |
|
| 228 | - $x2 = self::fe_add($x2, $z2); |
|
| 229 | - |
|
| 230 | - # fe_add(z2,x3,z3); |
|
| 231 | - $z2 = self::fe_add($x3, $z3); |
|
| 232 | - |
|
| 233 | - # fe_mul(z3,tmp0,x2); |
|
| 234 | - $z3 = self::fe_mul($tmp0, $x2); |
|
| 235 | - |
|
| 236 | - # fe_mul(z2,z2,tmp1); |
|
| 237 | - $z2 = self::fe_mul($z2, $tmp1); |
|
| 238 | - |
|
| 239 | - # fe_sq(tmp0,tmp1); |
|
| 240 | - $tmp0 = self::fe_sq($tmp1); |
|
| 241 | - |
|
| 242 | - # fe_sq(tmp1,x2); |
|
| 243 | - $tmp1 = self::fe_sq($x2); |
|
| 244 | - |
|
| 245 | - # fe_add(x3,z3,z2); |
|
| 246 | - $x3 = self::fe_add($z3, $z2); |
|
| 247 | - |
|
| 248 | - # fe_sub(z2,z3,z2); |
|
| 249 | - $z2 = self::fe_sub($z3, $z2); |
|
| 250 | - |
|
| 251 | - # fe_mul(x2,tmp1,tmp0); |
|
| 252 | - $x2 = self::fe_mul($tmp1, $tmp0); |
|
| 253 | - |
|
| 254 | - # fe_sub(tmp1,tmp1,tmp0); |
|
| 255 | - $tmp1 = self::fe_sub($tmp1, $tmp0); |
|
| 256 | - |
|
| 257 | - # fe_sq(z2,z2); |
|
| 258 | - $z2 = self::fe_sq($z2); |
|
| 259 | - |
|
| 260 | - # fe_mul121666(z3,tmp1); |
|
| 261 | - $z3 = self::fe_mul121666($tmp1); |
|
| 262 | - |
|
| 263 | - # fe_sq(x3,x3); |
|
| 264 | - $x3 = self::fe_sq($x3); |
|
| 265 | - |
|
| 266 | - # fe_add(tmp0,tmp0,z3); |
|
| 267 | - $tmp0 = self::fe_add($tmp0, $z3); |
|
| 268 | - |
|
| 269 | - # fe_mul(z3,x1,z2); |
|
| 270 | - $z3 = self::fe_mul($x1, $z2); |
|
| 271 | - |
|
| 272 | - # fe_mul(z2,tmp1,tmp0); |
|
| 273 | - $z2 = self::fe_mul($tmp1, $tmp0); |
|
| 274 | - } |
|
| 275 | - |
|
| 276 | - # fe_cswap(x2,x3,swap); |
|
| 277 | - self::fe_cswap($x2, $x3, $swap); |
|
| 278 | - |
|
| 279 | - # fe_cswap(z2,z3,swap); |
|
| 280 | - self::fe_cswap($z2, $z3, $swap); |
|
| 281 | - |
|
| 282 | - # fe_invert(z2,z2); |
|
| 283 | - $z2 = self::fe_invert($z2); |
|
| 284 | - |
|
| 285 | - # fe_mul(x2,x2,z2); |
|
| 286 | - $x2 = self::fe_mul($x2, $z2); |
|
| 287 | - # fe_tobytes(q,x2); |
|
| 288 | - return (string) self::fe_tobytes($x2); |
|
| 289 | - } |
|
| 290 | - |
|
| 291 | - /** |
|
| 292 | - * @internal You should not use this directly from another application |
|
| 293 | - * |
|
| 294 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsY |
|
| 295 | - * @param ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsZ |
|
| 296 | - * @return ParagonIE_Sodium_Core32_Curve25519_Fe |
|
| 297 | - * @throws SodiumException |
|
| 298 | - * @throws TypeError |
|
| 299 | - */ |
|
| 300 | - public static function edwards_to_montgomery( |
|
| 301 | - ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsY, |
|
| 302 | - ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsZ |
|
| 303 | - ) { |
|
| 304 | - $tempX = self::fe_add($edwardsZ, $edwardsY); |
|
| 305 | - $tempZ = self::fe_sub($edwardsZ, $edwardsY); |
|
| 306 | - $tempZ = self::fe_invert($tempZ); |
|
| 307 | - return self::fe_mul($tempX, $tempZ); |
|
| 308 | - } |
|
| 309 | - |
|
| 310 | - /** |
|
| 311 | - * @internal You should not use this directly from another application |
|
| 312 | - * |
|
| 313 | - * @param string $n |
|
| 314 | - * @return string |
|
| 315 | - * @throws SodiumException |
|
| 316 | - * @throws TypeError |
|
| 317 | - */ |
|
| 318 | - public static function crypto_scalarmult_curve25519_ref10_base($n) |
|
| 319 | - { |
|
| 320 | - # for (i = 0;i < 32;++i) e[i] = n[i]; |
|
| 321 | - $e = '' . $n; |
|
| 322 | - |
|
| 323 | - # e[0] &= 248; |
|
| 324 | - $e[0] = self::intToChr( |
|
| 325 | - self::chrToInt($e[0]) & 248 |
|
| 326 | - ); |
|
| 327 | - |
|
| 328 | - # e[31] &= 127; |
|
| 329 | - # e[31] |= 64; |
|
| 330 | - $e[31] = self::intToChr( |
|
| 331 | - (self::chrToInt($e[31]) & 127) | 64 |
|
| 332 | - ); |
|
| 333 | - |
|
| 334 | - $A = self::ge_scalarmult_base($e); |
|
| 335 | - if ( |
|
| 336 | - !($A->Y instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) |
|
| 337 | - || |
|
| 338 | - !($A->Z instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) |
|
| 339 | - ) { |
|
| 340 | - throw new TypeError('Null points encountered'); |
|
| 341 | - } |
|
| 342 | - $pk = self::edwards_to_montgomery($A->Y, $A->Z); |
|
| 343 | - return self::fe_tobytes($pk); |
|
| 344 | - } |
|
| 12 | + /** |
|
| 13 | + * Alters the objects passed to this method in place. |
|
| 14 | + * |
|
| 15 | + * @internal You should not use this directly from another application |
|
| 16 | + * |
|
| 17 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f |
|
| 18 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $g |
|
| 19 | + * @param int $b |
|
| 20 | + * @return void |
|
| 21 | + * @throws SodiumException |
|
| 22 | + * @throws TypeError |
|
| 23 | + * @psalm-suppress MixedMethodCall |
|
| 24 | + */ |
|
| 25 | + public static function fe_cswap( |
|
| 26 | + ParagonIE_Sodium_Core32_Curve25519_Fe $f, |
|
| 27 | + ParagonIE_Sodium_Core32_Curve25519_Fe $g, |
|
| 28 | + $b = 0 |
|
| 29 | + ) { |
|
| 30 | + $f0 = (int) $f[0]->toInt(); |
|
| 31 | + $f1 = (int) $f[1]->toInt(); |
|
| 32 | + $f2 = (int) $f[2]->toInt(); |
|
| 33 | + $f3 = (int) $f[3]->toInt(); |
|
| 34 | + $f4 = (int) $f[4]->toInt(); |
|
| 35 | + $f5 = (int) $f[5]->toInt(); |
|
| 36 | + $f6 = (int) $f[6]->toInt(); |
|
| 37 | + $f7 = (int) $f[7]->toInt(); |
|
| 38 | + $f8 = (int) $f[8]->toInt(); |
|
| 39 | + $f9 = (int) $f[9]->toInt(); |
|
| 40 | + $g0 = (int) $g[0]->toInt(); |
|
| 41 | + $g1 = (int) $g[1]->toInt(); |
|
| 42 | + $g2 = (int) $g[2]->toInt(); |
|
| 43 | + $g3 = (int) $g[3]->toInt(); |
|
| 44 | + $g4 = (int) $g[4]->toInt(); |
|
| 45 | + $g5 = (int) $g[5]->toInt(); |
|
| 46 | + $g6 = (int) $g[6]->toInt(); |
|
| 47 | + $g7 = (int) $g[7]->toInt(); |
|
| 48 | + $g8 = (int) $g[8]->toInt(); |
|
| 49 | + $g9 = (int) $g[9]->toInt(); |
|
| 50 | + $b = -$b; |
|
| 51 | + /** @var int $x0 */ |
|
| 52 | + $x0 = ($f0 ^ $g0) & $b; |
|
| 53 | + /** @var int $x1 */ |
|
| 54 | + $x1 = ($f1 ^ $g1) & $b; |
|
| 55 | + /** @var int $x2 */ |
|
| 56 | + $x2 = ($f2 ^ $g2) & $b; |
|
| 57 | + /** @var int $x3 */ |
|
| 58 | + $x3 = ($f3 ^ $g3) & $b; |
|
| 59 | + /** @var int $x4 */ |
|
| 60 | + $x4 = ($f4 ^ $g4) & $b; |
|
| 61 | + /** @var int $x5 */ |
|
| 62 | + $x5 = ($f5 ^ $g5) & $b; |
|
| 63 | + /** @var int $x6 */ |
|
| 64 | + $x6 = ($f6 ^ $g6) & $b; |
|
| 65 | + /** @var int $x7 */ |
|
| 66 | + $x7 = ($f7 ^ $g7) & $b; |
|
| 67 | + /** @var int $x8 */ |
|
| 68 | + $x8 = ($f8 ^ $g8) & $b; |
|
| 69 | + /** @var int $x9 */ |
|
| 70 | + $x9 = ($f9 ^ $g9) & $b; |
|
| 71 | + $f[0] = ParagonIE_Sodium_Core32_Int32::fromInt($f0 ^ $x0); |
|
| 72 | + $f[1] = ParagonIE_Sodium_Core32_Int32::fromInt($f1 ^ $x1); |
|
| 73 | + $f[2] = ParagonIE_Sodium_Core32_Int32::fromInt($f2 ^ $x2); |
|
| 74 | + $f[3] = ParagonIE_Sodium_Core32_Int32::fromInt($f3 ^ $x3); |
|
| 75 | + $f[4] = ParagonIE_Sodium_Core32_Int32::fromInt($f4 ^ $x4); |
|
| 76 | + $f[5] = ParagonIE_Sodium_Core32_Int32::fromInt($f5 ^ $x5); |
|
| 77 | + $f[6] = ParagonIE_Sodium_Core32_Int32::fromInt($f6 ^ $x6); |
|
| 78 | + $f[7] = ParagonIE_Sodium_Core32_Int32::fromInt($f7 ^ $x7); |
|
| 79 | + $f[8] = ParagonIE_Sodium_Core32_Int32::fromInt($f8 ^ $x8); |
|
| 80 | + $f[9] = ParagonIE_Sodium_Core32_Int32::fromInt($f9 ^ $x9); |
|
| 81 | + $g[0] = ParagonIE_Sodium_Core32_Int32::fromInt($g0 ^ $x0); |
|
| 82 | + $g[1] = ParagonIE_Sodium_Core32_Int32::fromInt($g1 ^ $x1); |
|
| 83 | + $g[2] = ParagonIE_Sodium_Core32_Int32::fromInt($g2 ^ $x2); |
|
| 84 | + $g[3] = ParagonIE_Sodium_Core32_Int32::fromInt($g3 ^ $x3); |
|
| 85 | + $g[4] = ParagonIE_Sodium_Core32_Int32::fromInt($g4 ^ $x4); |
|
| 86 | + $g[5] = ParagonIE_Sodium_Core32_Int32::fromInt($g5 ^ $x5); |
|
| 87 | + $g[6] = ParagonIE_Sodium_Core32_Int32::fromInt($g6 ^ $x6); |
|
| 88 | + $g[7] = ParagonIE_Sodium_Core32_Int32::fromInt($g7 ^ $x7); |
|
| 89 | + $g[8] = ParagonIE_Sodium_Core32_Int32::fromInt($g8 ^ $x8); |
|
| 90 | + $g[9] = ParagonIE_Sodium_Core32_Int32::fromInt($g9 ^ $x9); |
|
| 91 | + } |
|
| 92 | + |
|
| 93 | + /** |
|
| 94 | + * @internal You should not use this directly from another application |
|
| 95 | + * |
|
| 96 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $f |
|
| 97 | + * @return ParagonIE_Sodium_Core32_Curve25519_Fe |
|
| 98 | + * @throws SodiumException |
|
| 99 | + * @throws TypeError |
|
| 100 | + * @psalm-suppress MixedAssignment |
|
| 101 | + * @psalm-suppress MixedMethodCall |
|
| 102 | + */ |
|
| 103 | + public static function fe_mul121666(ParagonIE_Sodium_Core32_Curve25519_Fe $f) |
|
| 104 | + { |
|
| 105 | + /** @var array<int, ParagonIE_Sodium_Core32_Int64> $h */ |
|
| 106 | + $h = array(); |
|
| 107 | + for ($i = 0; $i < 10; ++$i) { |
|
| 108 | + $h[$i] = $f[$i]->toInt64()->mulInt(121666, 17); |
|
| 109 | + } |
|
| 110 | + |
|
| 111 | + $carry9 = $h[9]->addInt(1 << 24)->shiftRight(25); |
|
| 112 | + $h[0] = $h[0]->addInt64($carry9->mulInt(19, 5)); |
|
| 113 | + $h[9] = $h[9]->subInt64($carry9->shiftLeft(25)); |
|
| 114 | + |
|
| 115 | + $carry1 = $h[1]->addInt(1 << 24)->shiftRight(25); |
|
| 116 | + $h[2] = $h[2]->addInt64($carry1); |
|
| 117 | + $h[1] = $h[1]->subInt64($carry1->shiftLeft(25)); |
|
| 118 | + |
|
| 119 | + $carry3 = $h[3]->addInt(1 << 24)->shiftRight(25); |
|
| 120 | + $h[4] = $h[4]->addInt64($carry3); |
|
| 121 | + $h[3] = $h[3]->subInt64($carry3->shiftLeft(25)); |
|
| 122 | + |
|
| 123 | + $carry5 = $h[5]->addInt(1 << 24)->shiftRight(25); |
|
| 124 | + $h[6] = $h[6]->addInt64($carry5); |
|
| 125 | + $h[5] = $h[5]->subInt64($carry5->shiftLeft(25)); |
|
| 126 | + |
|
| 127 | + $carry7 = $h[7]->addInt(1 << 24)->shiftRight(25); |
|
| 128 | + $h[8] = $h[8]->addInt64($carry7); |
|
| 129 | + $h[7] = $h[7]->subInt64($carry7->shiftLeft(25)); |
|
| 130 | + |
|
| 131 | + $carry0 = $h[0]->addInt(1 << 25)->shiftRight(26); |
|
| 132 | + $h[1] = $h[1]->addInt64($carry0); |
|
| 133 | + $h[0] = $h[0]->subInt64($carry0->shiftLeft(26)); |
|
| 134 | + |
|
| 135 | + $carry2 = $h[2]->addInt(1 << 25)->shiftRight(26); |
|
| 136 | + $h[3] = $h[3]->addInt64($carry2); |
|
| 137 | + $h[2] = $h[2]->subInt64($carry2->shiftLeft(26)); |
|
| 138 | + |
|
| 139 | + $carry4 = $h[4]->addInt(1 << 25)->shiftRight(26); |
|
| 140 | + $h[5] = $h[5]->addInt64($carry4); |
|
| 141 | + $h[4] = $h[4]->subInt64($carry4->shiftLeft(26)); |
|
| 142 | + |
|
| 143 | + $carry6 = $h[6]->addInt(1 << 25)->shiftRight(26); |
|
| 144 | + $h[7] = $h[7]->addInt64($carry6); |
|
| 145 | + $h[6] = $h[6]->subInt64($carry6->shiftLeft(26)); |
|
| 146 | + |
|
| 147 | + $carry8 = $h[8]->addInt(1 << 25)->shiftRight(26); |
|
| 148 | + $h[9] = $h[9]->addInt64($carry8); |
|
| 149 | + $h[8] = $h[8]->subInt64($carry8->shiftLeft(26)); |
|
| 150 | + |
|
| 151 | + for ($i = 0; $i < 10; ++$i) { |
|
| 152 | + $h[$i] = $h[$i]->toInt32(); |
|
| 153 | + } |
|
| 154 | + /** @var array<int, ParagonIE_Sodium_Core32_Int32> $h2 */ |
|
| 155 | + $h2 = $h; |
|
| 156 | + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray($h2); |
|
| 157 | + } |
|
| 158 | + |
|
| 159 | + /** |
|
| 160 | + * @internal You should not use this directly from another application |
|
| 161 | + * |
|
| 162 | + * Inline comments preceded by # are from libsodium's ref10 code. |
|
| 163 | + * |
|
| 164 | + * @param string $n |
|
| 165 | + * @param string $p |
|
| 166 | + * @return string |
|
| 167 | + * @throws SodiumException |
|
| 168 | + * @throws TypeError |
|
| 169 | + */ |
|
| 170 | + public static function crypto_scalarmult_curve25519_ref10($n, $p) |
|
| 171 | + { |
|
| 172 | + # for (i = 0;i < 32;++i) e[i] = n[i]; |
|
| 173 | + $e = '' . $n; |
|
| 174 | + # e[0] &= 248; |
|
| 175 | + $e[0] = self::intToChr( |
|
| 176 | + self::chrToInt($e[0]) & 248 |
|
| 177 | + ); |
|
| 178 | + # e[31] &= 127; |
|
| 179 | + # e[31] |= 64; |
|
| 180 | + $e[31] = self::intToChr( |
|
| 181 | + (self::chrToInt($e[31]) & 127) | 64 |
|
| 182 | + ); |
|
| 183 | + # fe_frombytes(x1,p); |
|
| 184 | + $x1 = self::fe_frombytes($p); |
|
| 185 | + # fe_1(x2); |
|
| 186 | + $x2 = self::fe_1(); |
|
| 187 | + # fe_0(z2); |
|
| 188 | + $z2 = self::fe_0(); |
|
| 189 | + # fe_copy(x3,x1); |
|
| 190 | + $x3 = self::fe_copy($x1); |
|
| 191 | + # fe_1(z3); |
|
| 192 | + $z3 = self::fe_1(); |
|
| 193 | + |
|
| 194 | + # swap = 0; |
|
| 195 | + /** @var int $swap */ |
|
| 196 | + $swap = 0; |
|
| 197 | + |
|
| 198 | + # for (pos = 254;pos >= 0;--pos) { |
|
| 199 | + for ($pos = 254; $pos >= 0; --$pos) { |
|
| 200 | + # b = e[pos / 8] >> (pos & 7); |
|
| 201 | + /** @var int $b */ |
|
| 202 | + $b = self::chrToInt( |
|
| 203 | + $e[(int) floor($pos / 8)] |
|
| 204 | + ) >> ($pos & 7); |
|
| 205 | + # b &= 1; |
|
| 206 | + $b &= 1; |
|
| 207 | + |
|
| 208 | + # swap ^= b; |
|
| 209 | + $swap ^= $b; |
|
| 210 | + |
|
| 211 | + # fe_cswap(x2,x3,swap); |
|
| 212 | + self::fe_cswap($x2, $x3, $swap); |
|
| 213 | + |
|
| 214 | + # fe_cswap(z2,z3,swap); |
|
| 215 | + self::fe_cswap($z2, $z3, $swap); |
|
| 216 | + |
|
| 217 | + # swap = b; |
|
| 218 | + /** @var int $swap */ |
|
| 219 | + $swap = $b; |
|
| 220 | + |
|
| 221 | + # fe_sub(tmp0,x3,z3); |
|
| 222 | + $tmp0 = self::fe_sub($x3, $z3); |
|
| 223 | + |
|
| 224 | + # fe_sub(tmp1,x2,z2); |
|
| 225 | + $tmp1 = self::fe_sub($x2, $z2); |
|
| 226 | + |
|
| 227 | + # fe_add(x2,x2,z2); |
|
| 228 | + $x2 = self::fe_add($x2, $z2); |
|
| 229 | + |
|
| 230 | + # fe_add(z2,x3,z3); |
|
| 231 | + $z2 = self::fe_add($x3, $z3); |
|
| 232 | + |
|
| 233 | + # fe_mul(z3,tmp0,x2); |
|
| 234 | + $z3 = self::fe_mul($tmp0, $x2); |
|
| 235 | + |
|
| 236 | + # fe_mul(z2,z2,tmp1); |
|
| 237 | + $z2 = self::fe_mul($z2, $tmp1); |
|
| 238 | + |
|
| 239 | + # fe_sq(tmp0,tmp1); |
|
| 240 | + $tmp0 = self::fe_sq($tmp1); |
|
| 241 | + |
|
| 242 | + # fe_sq(tmp1,x2); |
|
| 243 | + $tmp1 = self::fe_sq($x2); |
|
| 244 | + |
|
| 245 | + # fe_add(x3,z3,z2); |
|
| 246 | + $x3 = self::fe_add($z3, $z2); |
|
| 247 | + |
|
| 248 | + # fe_sub(z2,z3,z2); |
|
| 249 | + $z2 = self::fe_sub($z3, $z2); |
|
| 250 | + |
|
| 251 | + # fe_mul(x2,tmp1,tmp0); |
|
| 252 | + $x2 = self::fe_mul($tmp1, $tmp0); |
|
| 253 | + |
|
| 254 | + # fe_sub(tmp1,tmp1,tmp0); |
|
| 255 | + $tmp1 = self::fe_sub($tmp1, $tmp0); |
|
| 256 | + |
|
| 257 | + # fe_sq(z2,z2); |
|
| 258 | + $z2 = self::fe_sq($z2); |
|
| 259 | + |
|
| 260 | + # fe_mul121666(z3,tmp1); |
|
| 261 | + $z3 = self::fe_mul121666($tmp1); |
|
| 262 | + |
|
| 263 | + # fe_sq(x3,x3); |
|
| 264 | + $x3 = self::fe_sq($x3); |
|
| 265 | + |
|
| 266 | + # fe_add(tmp0,tmp0,z3); |
|
| 267 | + $tmp0 = self::fe_add($tmp0, $z3); |
|
| 268 | + |
|
| 269 | + # fe_mul(z3,x1,z2); |
|
| 270 | + $z3 = self::fe_mul($x1, $z2); |
|
| 271 | + |
|
| 272 | + # fe_mul(z2,tmp1,tmp0); |
|
| 273 | + $z2 = self::fe_mul($tmp1, $tmp0); |
|
| 274 | + } |
|
| 275 | + |
|
| 276 | + # fe_cswap(x2,x3,swap); |
|
| 277 | + self::fe_cswap($x2, $x3, $swap); |
|
| 278 | + |
|
| 279 | + # fe_cswap(z2,z3,swap); |
|
| 280 | + self::fe_cswap($z2, $z3, $swap); |
|
| 281 | + |
|
| 282 | + # fe_invert(z2,z2); |
|
| 283 | + $z2 = self::fe_invert($z2); |
|
| 284 | + |
|
| 285 | + # fe_mul(x2,x2,z2); |
|
| 286 | + $x2 = self::fe_mul($x2, $z2); |
|
| 287 | + # fe_tobytes(q,x2); |
|
| 288 | + return (string) self::fe_tobytes($x2); |
|
| 289 | + } |
|
| 290 | + |
|
| 291 | + /** |
|
| 292 | + * @internal You should not use this directly from another application |
|
| 293 | + * |
|
| 294 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsY |
|
| 295 | + * @param ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsZ |
|
| 296 | + * @return ParagonIE_Sodium_Core32_Curve25519_Fe |
|
| 297 | + * @throws SodiumException |
|
| 298 | + * @throws TypeError |
|
| 299 | + */ |
|
| 300 | + public static function edwards_to_montgomery( |
|
| 301 | + ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsY, |
|
| 302 | + ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsZ |
|
| 303 | + ) { |
|
| 304 | + $tempX = self::fe_add($edwardsZ, $edwardsY); |
|
| 305 | + $tempZ = self::fe_sub($edwardsZ, $edwardsY); |
|
| 306 | + $tempZ = self::fe_invert($tempZ); |
|
| 307 | + return self::fe_mul($tempX, $tempZ); |
|
| 308 | + } |
|
| 309 | + |
|
| 310 | + /** |
|
| 311 | + * @internal You should not use this directly from another application |
|
| 312 | + * |
|
| 313 | + * @param string $n |
|
| 314 | + * @return string |
|
| 315 | + * @throws SodiumException |
|
| 316 | + * @throws TypeError |
|
| 317 | + */ |
|
| 318 | + public static function crypto_scalarmult_curve25519_ref10_base($n) |
|
| 319 | + { |
|
| 320 | + # for (i = 0;i < 32;++i) e[i] = n[i]; |
|
| 321 | + $e = '' . $n; |
|
| 322 | + |
|
| 323 | + # e[0] &= 248; |
|
| 324 | + $e[0] = self::intToChr( |
|
| 325 | + self::chrToInt($e[0]) & 248 |
|
| 326 | + ); |
|
| 327 | + |
|
| 328 | + # e[31] &= 127; |
|
| 329 | + # e[31] |= 64; |
|
| 330 | + $e[31] = self::intToChr( |
|
| 331 | + (self::chrToInt($e[31]) & 127) | 64 |
|
| 332 | + ); |
|
| 333 | + |
|
| 334 | + $A = self::ge_scalarmult_base($e); |
|
| 335 | + if ( |
|
| 336 | + !($A->Y instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) |
|
| 337 | + || |
|
| 338 | + !($A->Z instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) |
|
| 339 | + ) { |
|
| 340 | + throw new TypeError('Null points encountered'); |
|
| 341 | + } |
|
| 342 | + $pk = self::edwards_to_montgomery($A->Y, $A->Z); |
|
| 343 | + return self::fe_tobytes($pk); |
|
| 344 | + } |
|
| 345 | 345 | } |
@@ -1,6 +1,6 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core32_X25519', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_X25519', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | 6 | |
@@ -27,67 +27,67 @@ discard block |
||
| 27 | 27 | ParagonIE_Sodium_Core32_Curve25519_Fe $g, |
| 28 | 28 | $b = 0 |
| 29 | 29 | ) { |
| 30 | - $f0 = (int) $f[0]->toInt(); |
|
| 31 | - $f1 = (int) $f[1]->toInt(); |
|
| 32 | - $f2 = (int) $f[2]->toInt(); |
|
| 33 | - $f3 = (int) $f[3]->toInt(); |
|
| 34 | - $f4 = (int) $f[4]->toInt(); |
|
| 35 | - $f5 = (int) $f[5]->toInt(); |
|
| 36 | - $f6 = (int) $f[6]->toInt(); |
|
| 37 | - $f7 = (int) $f[7]->toInt(); |
|
| 38 | - $f8 = (int) $f[8]->toInt(); |
|
| 39 | - $f9 = (int) $f[9]->toInt(); |
|
| 40 | - $g0 = (int) $g[0]->toInt(); |
|
| 41 | - $g1 = (int) $g[1]->toInt(); |
|
| 42 | - $g2 = (int) $g[2]->toInt(); |
|
| 43 | - $g3 = (int) $g[3]->toInt(); |
|
| 44 | - $g4 = (int) $g[4]->toInt(); |
|
| 45 | - $g5 = (int) $g[5]->toInt(); |
|
| 46 | - $g6 = (int) $g[6]->toInt(); |
|
| 47 | - $g7 = (int) $g[7]->toInt(); |
|
| 48 | - $g8 = (int) $g[8]->toInt(); |
|
| 49 | - $g9 = (int) $g[9]->toInt(); |
|
| 30 | + $f0 = (int)$f[ 0 ]->toInt(); |
|
| 31 | + $f1 = (int)$f[ 1 ]->toInt(); |
|
| 32 | + $f2 = (int)$f[ 2 ]->toInt(); |
|
| 33 | + $f3 = (int)$f[ 3 ]->toInt(); |
|
| 34 | + $f4 = (int)$f[ 4 ]->toInt(); |
|
| 35 | + $f5 = (int)$f[ 5 ]->toInt(); |
|
| 36 | + $f6 = (int)$f[ 6 ]->toInt(); |
|
| 37 | + $f7 = (int)$f[ 7 ]->toInt(); |
|
| 38 | + $f8 = (int)$f[ 8 ]->toInt(); |
|
| 39 | + $f9 = (int)$f[ 9 ]->toInt(); |
|
| 40 | + $g0 = (int)$g[ 0 ]->toInt(); |
|
| 41 | + $g1 = (int)$g[ 1 ]->toInt(); |
|
| 42 | + $g2 = (int)$g[ 2 ]->toInt(); |
|
| 43 | + $g3 = (int)$g[ 3 ]->toInt(); |
|
| 44 | + $g4 = (int)$g[ 4 ]->toInt(); |
|
| 45 | + $g5 = (int)$g[ 5 ]->toInt(); |
|
| 46 | + $g6 = (int)$g[ 6 ]->toInt(); |
|
| 47 | + $g7 = (int)$g[ 7 ]->toInt(); |
|
| 48 | + $g8 = (int)$g[ 8 ]->toInt(); |
|
| 49 | + $g9 = (int)$g[ 9 ]->toInt(); |
|
| 50 | 50 | $b = -$b; |
| 51 | 51 | /** @var int $x0 */ |
| 52 | - $x0 = ($f0 ^ $g0) & $b; |
|
| 52 | + $x0 = ( $f0 ^ $g0 ) & $b; |
|
| 53 | 53 | /** @var int $x1 */ |
| 54 | - $x1 = ($f1 ^ $g1) & $b; |
|
| 54 | + $x1 = ( $f1 ^ $g1 ) & $b; |
|
| 55 | 55 | /** @var int $x2 */ |
| 56 | - $x2 = ($f2 ^ $g2) & $b; |
|
| 56 | + $x2 = ( $f2 ^ $g2 ) & $b; |
|
| 57 | 57 | /** @var int $x3 */ |
| 58 | - $x3 = ($f3 ^ $g3) & $b; |
|
| 58 | + $x3 = ( $f3 ^ $g3 ) & $b; |
|
| 59 | 59 | /** @var int $x4 */ |
| 60 | - $x4 = ($f4 ^ $g4) & $b; |
|
| 60 | + $x4 = ( $f4 ^ $g4 ) & $b; |
|
| 61 | 61 | /** @var int $x5 */ |
| 62 | - $x5 = ($f5 ^ $g5) & $b; |
|
| 62 | + $x5 = ( $f5 ^ $g5 ) & $b; |
|
| 63 | 63 | /** @var int $x6 */ |
| 64 | - $x6 = ($f6 ^ $g6) & $b; |
|
| 64 | + $x6 = ( $f6 ^ $g6 ) & $b; |
|
| 65 | 65 | /** @var int $x7 */ |
| 66 | - $x7 = ($f7 ^ $g7) & $b; |
|
| 66 | + $x7 = ( $f7 ^ $g7 ) & $b; |
|
| 67 | 67 | /** @var int $x8 */ |
| 68 | - $x8 = ($f8 ^ $g8) & $b; |
|
| 68 | + $x8 = ( $f8 ^ $g8 ) & $b; |
|
| 69 | 69 | /** @var int $x9 */ |
| 70 | - $x9 = ($f9 ^ $g9) & $b; |
|
| 71 | - $f[0] = ParagonIE_Sodium_Core32_Int32::fromInt($f0 ^ $x0); |
|
| 72 | - $f[1] = ParagonIE_Sodium_Core32_Int32::fromInt($f1 ^ $x1); |
|
| 73 | - $f[2] = ParagonIE_Sodium_Core32_Int32::fromInt($f2 ^ $x2); |
|
| 74 | - $f[3] = ParagonIE_Sodium_Core32_Int32::fromInt($f3 ^ $x3); |
|
| 75 | - $f[4] = ParagonIE_Sodium_Core32_Int32::fromInt($f4 ^ $x4); |
|
| 76 | - $f[5] = ParagonIE_Sodium_Core32_Int32::fromInt($f5 ^ $x5); |
|
| 77 | - $f[6] = ParagonIE_Sodium_Core32_Int32::fromInt($f6 ^ $x6); |
|
| 78 | - $f[7] = ParagonIE_Sodium_Core32_Int32::fromInt($f7 ^ $x7); |
|
| 79 | - $f[8] = ParagonIE_Sodium_Core32_Int32::fromInt($f8 ^ $x8); |
|
| 80 | - $f[9] = ParagonIE_Sodium_Core32_Int32::fromInt($f9 ^ $x9); |
|
| 81 | - $g[0] = ParagonIE_Sodium_Core32_Int32::fromInt($g0 ^ $x0); |
|
| 82 | - $g[1] = ParagonIE_Sodium_Core32_Int32::fromInt($g1 ^ $x1); |
|
| 83 | - $g[2] = ParagonIE_Sodium_Core32_Int32::fromInt($g2 ^ $x2); |
|
| 84 | - $g[3] = ParagonIE_Sodium_Core32_Int32::fromInt($g3 ^ $x3); |
|
| 85 | - $g[4] = ParagonIE_Sodium_Core32_Int32::fromInt($g4 ^ $x4); |
|
| 86 | - $g[5] = ParagonIE_Sodium_Core32_Int32::fromInt($g5 ^ $x5); |
|
| 87 | - $g[6] = ParagonIE_Sodium_Core32_Int32::fromInt($g6 ^ $x6); |
|
| 88 | - $g[7] = ParagonIE_Sodium_Core32_Int32::fromInt($g7 ^ $x7); |
|
| 89 | - $g[8] = ParagonIE_Sodium_Core32_Int32::fromInt($g8 ^ $x8); |
|
| 90 | - $g[9] = ParagonIE_Sodium_Core32_Int32::fromInt($g9 ^ $x9); |
|
| 70 | + $x9 = ( $f9 ^ $g9 ) & $b; |
|
| 71 | + $f[ 0 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f0 ^ $x0 ); |
|
| 72 | + $f[ 1 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f1 ^ $x1 ); |
|
| 73 | + $f[ 2 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f2 ^ $x2 ); |
|
| 74 | + $f[ 3 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f3 ^ $x3 ); |
|
| 75 | + $f[ 4 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f4 ^ $x4 ); |
|
| 76 | + $f[ 5 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f5 ^ $x5 ); |
|
| 77 | + $f[ 6 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f6 ^ $x6 ); |
|
| 78 | + $f[ 7 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f7 ^ $x7 ); |
|
| 79 | + $f[ 8 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f8 ^ $x8 ); |
|
| 80 | + $f[ 9 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $f9 ^ $x9 ); |
|
| 81 | + $g[ 0 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g0 ^ $x0 ); |
|
| 82 | + $g[ 1 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g1 ^ $x1 ); |
|
| 83 | + $g[ 2 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g2 ^ $x2 ); |
|
| 84 | + $g[ 3 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g3 ^ $x3 ); |
|
| 85 | + $g[ 4 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g4 ^ $x4 ); |
|
| 86 | + $g[ 5 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g5 ^ $x5 ); |
|
| 87 | + $g[ 6 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g6 ^ $x6 ); |
|
| 88 | + $g[ 7 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g7 ^ $x7 ); |
|
| 89 | + $g[ 8 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g8 ^ $x8 ); |
|
| 90 | + $g[ 9 ] = ParagonIE_Sodium_Core32_Int32::fromInt( $g9 ^ $x9 ); |
|
| 91 | 91 | } |
| 92 | 92 | |
| 93 | 93 | /** |
@@ -100,60 +100,60 @@ discard block |
||
| 100 | 100 | * @psalm-suppress MixedAssignment |
| 101 | 101 | * @psalm-suppress MixedMethodCall |
| 102 | 102 | */ |
| 103 | - public static function fe_mul121666(ParagonIE_Sodium_Core32_Curve25519_Fe $f) |
|
| 103 | + public static function fe_mul121666( ParagonIE_Sodium_Core32_Curve25519_Fe $f ) |
|
| 104 | 104 | { |
| 105 | 105 | /** @var array<int, ParagonIE_Sodium_Core32_Int64> $h */ |
| 106 | 106 | $h = array(); |
| 107 | - for ($i = 0; $i < 10; ++$i) { |
|
| 108 | - $h[$i] = $f[$i]->toInt64()->mulInt(121666, 17); |
|
| 107 | + for ( $i = 0; $i < 10; ++$i ) { |
|
| 108 | + $h[ $i ] = $f[ $i ]->toInt64()->mulInt( 121666, 17 ); |
|
| 109 | 109 | } |
| 110 | 110 | |
| 111 | - $carry9 = $h[9]->addInt(1 << 24)->shiftRight(25); |
|
| 112 | - $h[0] = $h[0]->addInt64($carry9->mulInt(19, 5)); |
|
| 113 | - $h[9] = $h[9]->subInt64($carry9->shiftLeft(25)); |
|
| 111 | + $carry9 = $h[ 9 ]->addInt( 1 << 24 )->shiftRight( 25 ); |
|
| 112 | + $h[ 0 ] = $h[ 0 ]->addInt64( $carry9->mulInt( 19, 5 ) ); |
|
| 113 | + $h[ 9 ] = $h[ 9 ]->subInt64( $carry9->shiftLeft( 25 ) ); |
|
| 114 | 114 | |
| 115 | - $carry1 = $h[1]->addInt(1 << 24)->shiftRight(25); |
|
| 116 | - $h[2] = $h[2]->addInt64($carry1); |
|
| 117 | - $h[1] = $h[1]->subInt64($carry1->shiftLeft(25)); |
|
| 115 | + $carry1 = $h[ 1 ]->addInt( 1 << 24 )->shiftRight( 25 ); |
|
| 116 | + $h[ 2 ] = $h[ 2 ]->addInt64( $carry1 ); |
|
| 117 | + $h[ 1 ] = $h[ 1 ]->subInt64( $carry1->shiftLeft( 25 ) ); |
|
| 118 | 118 | |
| 119 | - $carry3 = $h[3]->addInt(1 << 24)->shiftRight(25); |
|
| 120 | - $h[4] = $h[4]->addInt64($carry3); |
|
| 121 | - $h[3] = $h[3]->subInt64($carry3->shiftLeft(25)); |
|
| 119 | + $carry3 = $h[ 3 ]->addInt( 1 << 24 )->shiftRight( 25 ); |
|
| 120 | + $h[ 4 ] = $h[ 4 ]->addInt64( $carry3 ); |
|
| 121 | + $h[ 3 ] = $h[ 3 ]->subInt64( $carry3->shiftLeft( 25 ) ); |
|
| 122 | 122 | |
| 123 | - $carry5 = $h[5]->addInt(1 << 24)->shiftRight(25); |
|
| 124 | - $h[6] = $h[6]->addInt64($carry5); |
|
| 125 | - $h[5] = $h[5]->subInt64($carry5->shiftLeft(25)); |
|
| 123 | + $carry5 = $h[ 5 ]->addInt( 1 << 24 )->shiftRight( 25 ); |
|
| 124 | + $h[ 6 ] = $h[ 6 ]->addInt64( $carry5 ); |
|
| 125 | + $h[ 5 ] = $h[ 5 ]->subInt64( $carry5->shiftLeft( 25 ) ); |
|
| 126 | 126 | |
| 127 | - $carry7 = $h[7]->addInt(1 << 24)->shiftRight(25); |
|
| 128 | - $h[8] = $h[8]->addInt64($carry7); |
|
| 129 | - $h[7] = $h[7]->subInt64($carry7->shiftLeft(25)); |
|
| 127 | + $carry7 = $h[ 7 ]->addInt( 1 << 24 )->shiftRight( 25 ); |
|
| 128 | + $h[ 8 ] = $h[ 8 ]->addInt64( $carry7 ); |
|
| 129 | + $h[ 7 ] = $h[ 7 ]->subInt64( $carry7->shiftLeft( 25 ) ); |
|
| 130 | 130 | |
| 131 | - $carry0 = $h[0]->addInt(1 << 25)->shiftRight(26); |
|
| 132 | - $h[1] = $h[1]->addInt64($carry0); |
|
| 133 | - $h[0] = $h[0]->subInt64($carry0->shiftLeft(26)); |
|
| 131 | + $carry0 = $h[ 0 ]->addInt( 1 << 25 )->shiftRight( 26 ); |
|
| 132 | + $h[ 1 ] = $h[ 1 ]->addInt64( $carry0 ); |
|
| 133 | + $h[ 0 ] = $h[ 0 ]->subInt64( $carry0->shiftLeft( 26 ) ); |
|
| 134 | 134 | |
| 135 | - $carry2 = $h[2]->addInt(1 << 25)->shiftRight(26); |
|
| 136 | - $h[3] = $h[3]->addInt64($carry2); |
|
| 137 | - $h[2] = $h[2]->subInt64($carry2->shiftLeft(26)); |
|
| 135 | + $carry2 = $h[ 2 ]->addInt( 1 << 25 )->shiftRight( 26 ); |
|
| 136 | + $h[ 3 ] = $h[ 3 ]->addInt64( $carry2 ); |
|
| 137 | + $h[ 2 ] = $h[ 2 ]->subInt64( $carry2->shiftLeft( 26 ) ); |
|
| 138 | 138 | |
| 139 | - $carry4 = $h[4]->addInt(1 << 25)->shiftRight(26); |
|
| 140 | - $h[5] = $h[5]->addInt64($carry4); |
|
| 141 | - $h[4] = $h[4]->subInt64($carry4->shiftLeft(26)); |
|
| 139 | + $carry4 = $h[ 4 ]->addInt( 1 << 25 )->shiftRight( 26 ); |
|
| 140 | + $h[ 5 ] = $h[ 5 ]->addInt64( $carry4 ); |
|
| 141 | + $h[ 4 ] = $h[ 4 ]->subInt64( $carry4->shiftLeft( 26 ) ); |
|
| 142 | 142 | |
| 143 | - $carry6 = $h[6]->addInt(1 << 25)->shiftRight(26); |
|
| 144 | - $h[7] = $h[7]->addInt64($carry6); |
|
| 145 | - $h[6] = $h[6]->subInt64($carry6->shiftLeft(26)); |
|
| 143 | + $carry6 = $h[ 6 ]->addInt( 1 << 25 )->shiftRight( 26 ); |
|
| 144 | + $h[ 7 ] = $h[ 7 ]->addInt64( $carry6 ); |
|
| 145 | + $h[ 6 ] = $h[ 6 ]->subInt64( $carry6->shiftLeft( 26 ) ); |
|
| 146 | 146 | |
| 147 | - $carry8 = $h[8]->addInt(1 << 25)->shiftRight(26); |
|
| 148 | - $h[9] = $h[9]->addInt64($carry8); |
|
| 149 | - $h[8] = $h[8]->subInt64($carry8->shiftLeft(26)); |
|
| 147 | + $carry8 = $h[ 8 ]->addInt( 1 << 25 )->shiftRight( 26 ); |
|
| 148 | + $h[ 9 ] = $h[ 9 ]->addInt64( $carry8 ); |
|
| 149 | + $h[ 8 ] = $h[ 8 ]->subInt64( $carry8->shiftLeft( 26 ) ); |
|
| 150 | 150 | |
| 151 | - for ($i = 0; $i < 10; ++$i) { |
|
| 152 | - $h[$i] = $h[$i]->toInt32(); |
|
| 151 | + for ( $i = 0; $i < 10; ++$i ) { |
|
| 152 | + $h[ $i ] = $h[ $i ]->toInt32(); |
|
| 153 | 153 | } |
| 154 | 154 | /** @var array<int, ParagonIE_Sodium_Core32_Int32> $h2 */ |
| 155 | 155 | $h2 = $h; |
| 156 | - return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray($h2); |
|
| 156 | + return ParagonIE_Sodium_Core32_Curve25519_Fe::fromArray( $h2 ); |
|
| 157 | 157 | } |
| 158 | 158 | |
| 159 | 159 | /** |
@@ -167,27 +167,27 @@ discard block |
||
| 167 | 167 | * @throws SodiumException |
| 168 | 168 | * @throws TypeError |
| 169 | 169 | */ |
| 170 | - public static function crypto_scalarmult_curve25519_ref10($n, $p) |
|
| 170 | + public static function crypto_scalarmult_curve25519_ref10( $n, $p ) |
|
| 171 | 171 | { |
| 172 | 172 | # for (i = 0;i < 32;++i) e[i] = n[i]; |
| 173 | 173 | $e = '' . $n; |
| 174 | 174 | # e[0] &= 248; |
| 175 | - $e[0] = self::intToChr( |
|
| 176 | - self::chrToInt($e[0]) & 248 |
|
| 175 | + $e[ 0 ] = self::intToChr( |
|
| 176 | + self::chrToInt( $e[ 0 ] ) & 248 |
|
| 177 | 177 | ); |
| 178 | 178 | # e[31] &= 127; |
| 179 | 179 | # e[31] |= 64; |
| 180 | - $e[31] = self::intToChr( |
|
| 181 | - (self::chrToInt($e[31]) & 127) | 64 |
|
| 180 | + $e[ 31 ] = self::intToChr( |
|
| 181 | + ( self::chrToInt( $e[ 31 ] ) & 127 ) | 64 |
|
| 182 | 182 | ); |
| 183 | 183 | # fe_frombytes(x1,p); |
| 184 | - $x1 = self::fe_frombytes($p); |
|
| 184 | + $x1 = self::fe_frombytes( $p ); |
|
| 185 | 185 | # fe_1(x2); |
| 186 | 186 | $x2 = self::fe_1(); |
| 187 | 187 | # fe_0(z2); |
| 188 | 188 | $z2 = self::fe_0(); |
| 189 | 189 | # fe_copy(x3,x1); |
| 190 | - $x3 = self::fe_copy($x1); |
|
| 190 | + $x3 = self::fe_copy( $x1 ); |
|
| 191 | 191 | # fe_1(z3); |
| 192 | 192 | $z3 = self::fe_1(); |
| 193 | 193 | |
@@ -196,12 +196,12 @@ discard block |
||
| 196 | 196 | $swap = 0; |
| 197 | 197 | |
| 198 | 198 | # for (pos = 254;pos >= 0;--pos) { |
| 199 | - for ($pos = 254; $pos >= 0; --$pos) { |
|
| 199 | + for ( $pos = 254; $pos >= 0; --$pos ) { |
|
| 200 | 200 | # b = e[pos / 8] >> (pos & 7); |
| 201 | 201 | /** @var int $b */ |
| 202 | 202 | $b = self::chrToInt( |
| 203 | - $e[(int) floor($pos / 8)] |
|
| 204 | - ) >> ($pos & 7); |
|
| 203 | + $e[ (int)floor( $pos / 8 ) ] |
|
| 204 | + ) >> ( $pos & 7 ); |
|
| 205 | 205 | # b &= 1; |
| 206 | 206 | $b &= 1; |
| 207 | 207 | |
@@ -209,83 +209,83 @@ discard block |
||
| 209 | 209 | $swap ^= $b; |
| 210 | 210 | |
| 211 | 211 | # fe_cswap(x2,x3,swap); |
| 212 | - self::fe_cswap($x2, $x3, $swap); |
|
| 212 | + self::fe_cswap( $x2, $x3, $swap ); |
|
| 213 | 213 | |
| 214 | 214 | # fe_cswap(z2,z3,swap); |
| 215 | - self::fe_cswap($z2, $z3, $swap); |
|
| 215 | + self::fe_cswap( $z2, $z3, $swap ); |
|
| 216 | 216 | |
| 217 | 217 | # swap = b; |
| 218 | 218 | /** @var int $swap */ |
| 219 | 219 | $swap = $b; |
| 220 | 220 | |
| 221 | 221 | # fe_sub(tmp0,x3,z3); |
| 222 | - $tmp0 = self::fe_sub($x3, $z3); |
|
| 222 | + $tmp0 = self::fe_sub( $x3, $z3 ); |
|
| 223 | 223 | |
| 224 | 224 | # fe_sub(tmp1,x2,z2); |
| 225 | - $tmp1 = self::fe_sub($x2, $z2); |
|
| 225 | + $tmp1 = self::fe_sub( $x2, $z2 ); |
|
| 226 | 226 | |
| 227 | 227 | # fe_add(x2,x2,z2); |
| 228 | - $x2 = self::fe_add($x2, $z2); |
|
| 228 | + $x2 = self::fe_add( $x2, $z2 ); |
|
| 229 | 229 | |
| 230 | 230 | # fe_add(z2,x3,z3); |
| 231 | - $z2 = self::fe_add($x3, $z3); |
|
| 231 | + $z2 = self::fe_add( $x3, $z3 ); |
|
| 232 | 232 | |
| 233 | 233 | # fe_mul(z3,tmp0,x2); |
| 234 | - $z3 = self::fe_mul($tmp0, $x2); |
|
| 234 | + $z3 = self::fe_mul( $tmp0, $x2 ); |
|
| 235 | 235 | |
| 236 | 236 | # fe_mul(z2,z2,tmp1); |
| 237 | - $z2 = self::fe_mul($z2, $tmp1); |
|
| 237 | + $z2 = self::fe_mul( $z2, $tmp1 ); |
|
| 238 | 238 | |
| 239 | 239 | # fe_sq(tmp0,tmp1); |
| 240 | - $tmp0 = self::fe_sq($tmp1); |
|
| 240 | + $tmp0 = self::fe_sq( $tmp1 ); |
|
| 241 | 241 | |
| 242 | 242 | # fe_sq(tmp1,x2); |
| 243 | - $tmp1 = self::fe_sq($x2); |
|
| 243 | + $tmp1 = self::fe_sq( $x2 ); |
|
| 244 | 244 | |
| 245 | 245 | # fe_add(x3,z3,z2); |
| 246 | - $x3 = self::fe_add($z3, $z2); |
|
| 246 | + $x3 = self::fe_add( $z3, $z2 ); |
|
| 247 | 247 | |
| 248 | 248 | # fe_sub(z2,z3,z2); |
| 249 | - $z2 = self::fe_sub($z3, $z2); |
|
| 249 | + $z2 = self::fe_sub( $z3, $z2 ); |
|
| 250 | 250 | |
| 251 | 251 | # fe_mul(x2,tmp1,tmp0); |
| 252 | - $x2 = self::fe_mul($tmp1, $tmp0); |
|
| 252 | + $x2 = self::fe_mul( $tmp1, $tmp0 ); |
|
| 253 | 253 | |
| 254 | 254 | # fe_sub(tmp1,tmp1,tmp0); |
| 255 | - $tmp1 = self::fe_sub($tmp1, $tmp0); |
|
| 255 | + $tmp1 = self::fe_sub( $tmp1, $tmp0 ); |
|
| 256 | 256 | |
| 257 | 257 | # fe_sq(z2,z2); |
| 258 | - $z2 = self::fe_sq($z2); |
|
| 258 | + $z2 = self::fe_sq( $z2 ); |
|
| 259 | 259 | |
| 260 | 260 | # fe_mul121666(z3,tmp1); |
| 261 | - $z3 = self::fe_mul121666($tmp1); |
|
| 261 | + $z3 = self::fe_mul121666( $tmp1 ); |
|
| 262 | 262 | |
| 263 | 263 | # fe_sq(x3,x3); |
| 264 | - $x3 = self::fe_sq($x3); |
|
| 264 | + $x3 = self::fe_sq( $x3 ); |
|
| 265 | 265 | |
| 266 | 266 | # fe_add(tmp0,tmp0,z3); |
| 267 | - $tmp0 = self::fe_add($tmp0, $z3); |
|
| 267 | + $tmp0 = self::fe_add( $tmp0, $z3 ); |
|
| 268 | 268 | |
| 269 | 269 | # fe_mul(z3,x1,z2); |
| 270 | - $z3 = self::fe_mul($x1, $z2); |
|
| 270 | + $z3 = self::fe_mul( $x1, $z2 ); |
|
| 271 | 271 | |
| 272 | 272 | # fe_mul(z2,tmp1,tmp0); |
| 273 | - $z2 = self::fe_mul($tmp1, $tmp0); |
|
| 273 | + $z2 = self::fe_mul( $tmp1, $tmp0 ); |
|
| 274 | 274 | } |
| 275 | 275 | |
| 276 | 276 | # fe_cswap(x2,x3,swap); |
| 277 | - self::fe_cswap($x2, $x3, $swap); |
|
| 277 | + self::fe_cswap( $x2, $x3, $swap ); |
|
| 278 | 278 | |
| 279 | 279 | # fe_cswap(z2,z3,swap); |
| 280 | - self::fe_cswap($z2, $z3, $swap); |
|
| 280 | + self::fe_cswap( $z2, $z3, $swap ); |
|
| 281 | 281 | |
| 282 | 282 | # fe_invert(z2,z2); |
| 283 | - $z2 = self::fe_invert($z2); |
|
| 283 | + $z2 = self::fe_invert( $z2 ); |
|
| 284 | 284 | |
| 285 | 285 | # fe_mul(x2,x2,z2); |
| 286 | - $x2 = self::fe_mul($x2, $z2); |
|
| 286 | + $x2 = self::fe_mul( $x2, $z2 ); |
|
| 287 | 287 | # fe_tobytes(q,x2); |
| 288 | - return (string) self::fe_tobytes($x2); |
|
| 288 | + return (string)self::fe_tobytes( $x2 ); |
|
| 289 | 289 | } |
| 290 | 290 | |
| 291 | 291 | /** |
@@ -301,10 +301,10 @@ discard block |
||
| 301 | 301 | ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsY, |
| 302 | 302 | ParagonIE_Sodium_Core32_Curve25519_Fe $edwardsZ |
| 303 | 303 | ) { |
| 304 | - $tempX = self::fe_add($edwardsZ, $edwardsY); |
|
| 305 | - $tempZ = self::fe_sub($edwardsZ, $edwardsY); |
|
| 306 | - $tempZ = self::fe_invert($tempZ); |
|
| 307 | - return self::fe_mul($tempX, $tempZ); |
|
| 304 | + $tempX = self::fe_add( $edwardsZ, $edwardsY ); |
|
| 305 | + $tempZ = self::fe_sub( $edwardsZ, $edwardsY ); |
|
| 306 | + $tempZ = self::fe_invert( $tempZ ); |
|
| 307 | + return self::fe_mul( $tempX, $tempZ ); |
|
| 308 | 308 | } |
| 309 | 309 | |
| 310 | 310 | /** |
@@ -315,31 +315,31 @@ discard block |
||
| 315 | 315 | * @throws SodiumException |
| 316 | 316 | * @throws TypeError |
| 317 | 317 | */ |
| 318 | - public static function crypto_scalarmult_curve25519_ref10_base($n) |
|
| 318 | + public static function crypto_scalarmult_curve25519_ref10_base( $n ) |
|
| 319 | 319 | { |
| 320 | 320 | # for (i = 0;i < 32;++i) e[i] = n[i]; |
| 321 | 321 | $e = '' . $n; |
| 322 | 322 | |
| 323 | 323 | # e[0] &= 248; |
| 324 | - $e[0] = self::intToChr( |
|
| 325 | - self::chrToInt($e[0]) & 248 |
|
| 324 | + $e[ 0 ] = self::intToChr( |
|
| 325 | + self::chrToInt( $e[ 0 ] ) & 248 |
|
| 326 | 326 | ); |
| 327 | 327 | |
| 328 | 328 | # e[31] &= 127; |
| 329 | 329 | # e[31] |= 64; |
| 330 | - $e[31] = self::intToChr( |
|
| 331 | - (self::chrToInt($e[31]) & 127) | 64 |
|
| 330 | + $e[ 31 ] = self::intToChr( |
|
| 331 | + ( self::chrToInt( $e[ 31 ] ) & 127 ) | 64 |
|
| 332 | 332 | ); |
| 333 | 333 | |
| 334 | - $A = self::ge_scalarmult_base($e); |
|
| 334 | + $A = self::ge_scalarmult_base( $e ); |
|
| 335 | 335 | if ( |
| 336 | - !($A->Y instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) |
|
| 336 | + ! ( $A->Y instanceof ParagonIE_Sodium_Core32_Curve25519_Fe ) |
|
| 337 | 337 | || |
| 338 | - !($A->Z instanceof ParagonIE_Sodium_Core32_Curve25519_Fe) |
|
| 338 | + ! ( $A->Z instanceof ParagonIE_Sodium_Core32_Curve25519_Fe ) |
|
| 339 | 339 | ) { |
| 340 | - throw new TypeError('Null points encountered'); |
|
| 340 | + throw new TypeError( 'Null points encountered' ); |
|
| 341 | 341 | } |
| 342 | - $pk = self::edwards_to_montgomery($A->Y, $A->Z); |
|
| 343 | - return self::fe_tobytes($pk); |
|
| 342 | + $pk = self::edwards_to_montgomery( $A->Y, $A->Z ); |
|
| 343 | + return self::fe_tobytes( $pk ); |
|
| 344 | 344 | } |
| 345 | 345 | } |
@@ -7,8 +7,7 @@ discard block |
||
| 7 | 7 | /** |
| 8 | 8 | * Class ParagonIE_Sodium_Core32_X25519 |
| 9 | 9 | */ |
| 10 | -abstract class ParagonIE_Sodium_Core32_X25519 extends ParagonIE_Sodium_Core32_Curve25519 |
|
| 11 | -{ |
|
| 10 | +abstract class ParagonIE_Sodium_Core32_X25519 extends ParagonIE_Sodium_Core32_Curve25519 { |
|
| 12 | 11 | /** |
| 13 | 12 | * Alters the objects passed to this method in place. |
| 14 | 13 | * |
@@ -100,8 +99,7 @@ discard block |
||
| 100 | 99 | * @psalm-suppress MixedAssignment |
| 101 | 100 | * @psalm-suppress MixedMethodCall |
| 102 | 101 | */ |
| 103 | - public static function fe_mul121666(ParagonIE_Sodium_Core32_Curve25519_Fe $f) |
|
| 104 | - { |
|
| 102 | + public static function fe_mul121666(ParagonIE_Sodium_Core32_Curve25519_Fe $f) { |
|
| 105 | 103 | /** @var array<int, ParagonIE_Sodium_Core32_Int64> $h */ |
| 106 | 104 | $h = array(); |
| 107 | 105 | for ($i = 0; $i < 10; ++$i) { |
@@ -167,8 +165,7 @@ discard block |
||
| 167 | 165 | * @throws SodiumException |
| 168 | 166 | * @throws TypeError |
| 169 | 167 | */ |
| 170 | - public static function crypto_scalarmult_curve25519_ref10($n, $p) |
|
| 171 | - { |
|
| 168 | + public static function crypto_scalarmult_curve25519_ref10($n, $p) { |
|
| 172 | 169 | # for (i = 0;i < 32;++i) e[i] = n[i]; |
| 173 | 170 | $e = '' . $n; |
| 174 | 171 | # e[0] &= 248; |
@@ -315,8 +312,7 @@ discard block |
||
| 315 | 312 | * @throws SodiumException |
| 316 | 313 | * @throws TypeError |
| 317 | 314 | */ |
| 318 | - public static function crypto_scalarmult_curve25519_ref10_base($n) |
|
| 319 | - { |
|
| 315 | + public static function crypto_scalarmult_curve25519_ref10_base($n) { |
|
| 320 | 316 | # for (i = 0;i < 32;++i) e[i] = n[i]; |
| 321 | 317 | $e = '' . $n; |
| 322 | 318 | |
@@ -1,7 +1,7 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | if (class_exists('ParagonIE_Sodium_Core32_Poly1305', false)) { |
| 4 | - return; |
|
| 4 | + return; |
|
| 5 | 5 | } |
| 6 | 6 | |
| 7 | 7 | /** |
@@ -9,55 +9,55 @@ discard block |
||
| 9 | 9 | */ |
| 10 | 10 | abstract class ParagonIE_Sodium_Core32_Poly1305 extends ParagonIE_Sodium_Core32_Util |
| 11 | 11 | { |
| 12 | - const BLOCK_SIZE = 16; |
|
| 12 | + const BLOCK_SIZE = 16; |
|
| 13 | 13 | |
| 14 | - /** |
|
| 15 | - * @internal You should not use this directly from another application |
|
| 16 | - * |
|
| 17 | - * @param string $m |
|
| 18 | - * @param string $key |
|
| 19 | - * @return string |
|
| 20 | - * @throws SodiumException |
|
| 21 | - * @throws TypeError |
|
| 22 | - */ |
|
| 23 | - public static function onetimeauth($m, $key) |
|
| 24 | - { |
|
| 25 | - if (self::strlen($key) < 32) { |
|
| 26 | - throw new InvalidArgumentException( |
|
| 27 | - 'Key must be 32 bytes long.' |
|
| 28 | - ); |
|
| 29 | - } |
|
| 30 | - $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
| 31 | - self::substr($key, 0, 32) |
|
| 32 | - ); |
|
| 33 | - return $state |
|
| 34 | - ->update($m) |
|
| 35 | - ->finish(); |
|
| 36 | - } |
|
| 14 | + /** |
|
| 15 | + * @internal You should not use this directly from another application |
|
| 16 | + * |
|
| 17 | + * @param string $m |
|
| 18 | + * @param string $key |
|
| 19 | + * @return string |
|
| 20 | + * @throws SodiumException |
|
| 21 | + * @throws TypeError |
|
| 22 | + */ |
|
| 23 | + public static function onetimeauth($m, $key) |
|
| 24 | + { |
|
| 25 | + if (self::strlen($key) < 32) { |
|
| 26 | + throw new InvalidArgumentException( |
|
| 27 | + 'Key must be 32 bytes long.' |
|
| 28 | + ); |
|
| 29 | + } |
|
| 30 | + $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
| 31 | + self::substr($key, 0, 32) |
|
| 32 | + ); |
|
| 33 | + return $state |
|
| 34 | + ->update($m) |
|
| 35 | + ->finish(); |
|
| 36 | + } |
|
| 37 | 37 | |
| 38 | - /** |
|
| 39 | - * @internal You should not use this directly from another application |
|
| 40 | - * |
|
| 41 | - * @param string $mac |
|
| 42 | - * @param string $m |
|
| 43 | - * @param string $key |
|
| 44 | - * @return bool |
|
| 45 | - * @throws SodiumException |
|
| 46 | - * @throws TypeError |
|
| 47 | - */ |
|
| 48 | - public static function onetimeauth_verify($mac, $m, $key) |
|
| 49 | - { |
|
| 50 | - if (self::strlen($key) < 32) { |
|
| 51 | - throw new InvalidArgumentException( |
|
| 52 | - 'Key must be 32 bytes long.' |
|
| 53 | - ); |
|
| 54 | - } |
|
| 55 | - $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
| 56 | - self::substr($key, 0, 32) |
|
| 57 | - ); |
|
| 58 | - $calc = $state |
|
| 59 | - ->update($m) |
|
| 60 | - ->finish(); |
|
| 61 | - return self::verify_16($calc, $mac); |
|
| 62 | - } |
|
| 38 | + /** |
|
| 39 | + * @internal You should not use this directly from another application |
|
| 40 | + * |
|
| 41 | + * @param string $mac |
|
| 42 | + * @param string $m |
|
| 43 | + * @param string $key |
|
| 44 | + * @return bool |
|
| 45 | + * @throws SodiumException |
|
| 46 | + * @throws TypeError |
|
| 47 | + */ |
|
| 48 | + public static function onetimeauth_verify($mac, $m, $key) |
|
| 49 | + { |
|
| 50 | + if (self::strlen($key) < 32) { |
|
| 51 | + throw new InvalidArgumentException( |
|
| 52 | + 'Key must be 32 bytes long.' |
|
| 53 | + ); |
|
| 54 | + } |
|
| 55 | + $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
|
| 56 | + self::substr($key, 0, 32) |
|
| 57 | + ); |
|
| 58 | + $calc = $state |
|
| 59 | + ->update($m) |
|
| 60 | + ->finish(); |
|
| 61 | + return self::verify_16($calc, $mac); |
|
| 62 | + } |
|
| 63 | 63 | } |
@@ -1,6 +1,6 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if (class_exists('ParagonIE_Sodium_Core32_Poly1305', false)) { |
|
| 3 | +if ( class_exists( 'ParagonIE_Sodium_Core32_Poly1305', false ) ) { |
|
| 4 | 4 | return; |
| 5 | 5 | } |
| 6 | 6 | |
@@ -20,18 +20,18 @@ discard block |
||
| 20 | 20 | * @throws SodiumException |
| 21 | 21 | * @throws TypeError |
| 22 | 22 | */ |
| 23 | - public static function onetimeauth($m, $key) |
|
| 23 | + public static function onetimeauth( $m, $key ) |
|
| 24 | 24 | { |
| 25 | - if (self::strlen($key) < 32) { |
|
| 25 | + if ( self::strlen( $key ) < 32 ) { |
|
| 26 | 26 | throw new InvalidArgumentException( |
| 27 | 27 | 'Key must be 32 bytes long.' |
| 28 | 28 | ); |
| 29 | 29 | } |
| 30 | 30 | $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
| 31 | - self::substr($key, 0, 32) |
|
| 31 | + self::substr( $key, 0, 32 ) |
|
| 32 | 32 | ); |
| 33 | 33 | return $state |
| 34 | - ->update($m) |
|
| 34 | + ->update( $m ) |
|
| 35 | 35 | ->finish(); |
| 36 | 36 | } |
| 37 | 37 | |
@@ -45,19 +45,19 @@ discard block |
||
| 45 | 45 | * @throws SodiumException |
| 46 | 46 | * @throws TypeError |
| 47 | 47 | */ |
| 48 | - public static function onetimeauth_verify($mac, $m, $key) |
|
| 48 | + public static function onetimeauth_verify( $mac, $m, $key ) |
|
| 49 | 49 | { |
| 50 | - if (self::strlen($key) < 32) { |
|
| 50 | + if ( self::strlen( $key ) < 32 ) { |
|
| 51 | 51 | throw new InvalidArgumentException( |
| 52 | 52 | 'Key must be 32 bytes long.' |
| 53 | 53 | ); |
| 54 | 54 | } |
| 55 | 55 | $state = new ParagonIE_Sodium_Core32_Poly1305_State( |
| 56 | - self::substr($key, 0, 32) |
|
| 56 | + self::substr( $key, 0, 32 ) |
|
| 57 | 57 | ); |
| 58 | 58 | $calc = $state |
| 59 | - ->update($m) |
|
| 59 | + ->update( $m ) |
|
| 60 | 60 | ->finish(); |
| 61 | - return self::verify_16($calc, $mac); |
|
| 61 | + return self::verify_16( $calc, $mac ); |
|
| 62 | 62 | } |
| 63 | 63 | } |
@@ -7,8 +7,7 @@ discard block |
||
| 7 | 7 | /** |
| 8 | 8 | * Class ParagonIE_Sodium_Core32_Poly1305 |
| 9 | 9 | */ |
| 10 | -abstract class ParagonIE_Sodium_Core32_Poly1305 extends ParagonIE_Sodium_Core32_Util |
|
| 11 | -{ |
|
| 10 | +abstract class ParagonIE_Sodium_Core32_Poly1305 extends ParagonIE_Sodium_Core32_Util { |
|
| 12 | 11 | const BLOCK_SIZE = 16; |
| 13 | 12 | |
| 14 | 13 | /** |
@@ -20,8 +19,7 @@ discard block |
||
| 20 | 19 | * @throws SodiumException |
| 21 | 20 | * @throws TypeError |
| 22 | 21 | */ |
| 23 | - public static function onetimeauth($m, $key) |
|
| 24 | - { |
|
| 22 | + public static function onetimeauth($m, $key) { |
|
| 25 | 23 | if (self::strlen($key) < 32) { |
| 26 | 24 | throw new InvalidArgumentException( |
| 27 | 25 | 'Key must be 32 bytes long.' |
@@ -45,8 +43,7 @@ discard block |
||
| 45 | 43 | * @throws SodiumException |
| 46 | 44 | * @throws TypeError |
| 47 | 45 | */ |
| 48 | - public static function onetimeauth_verify($mac, $m, $key) |
|
| 49 | - { |
|
| 46 | + public static function onetimeauth_verify($mac, $m, $key) { |
|
| 50 | 47 | if (self::strlen($key) < 32) { |
| 51 | 48 | throw new InvalidArgumentException( |
| 52 | 49 | 'Key must be 32 bytes long.' |