// // Decompiled by Procyon v0.6.0 // package org.bouncycastle.crypto.engines; import org.bouncycastle.util.Arrays; import org.bouncycastle.crypto.OutputLengthException; import org.bouncycastle.crypto.DataLengthException; import org.bouncycastle.util.Pack; import org.bouncycastle.crypto.CryptoServiceProperties; import org.bouncycastle.crypto.CryptoServicesRegistrar; import org.bouncycastle.crypto.constraints.DefaultServiceProperties; import org.bouncycastle.crypto.params.KeyParameter; import org.bouncycastle.crypto.CipherParameters; import org.bouncycastle.crypto.BlockCipher; public class DSTU7624Engine implements BlockCipher { private long[] internalState; private long[] workingKey; private long[][] roundKeys; private int wordsInBlock; private int wordsInKey; private static final int ROUNDS_128 = 10; private static final int ROUNDS_256 = 14; private static final int ROUNDS_512 = 18; private int roundsAmount; private boolean forEncryption; private static final byte[] S0; private static final byte[] S1; private static final byte[] S2; private static final byte[] S3; private static final byte[] T0; private static final byte[] T1; private static final byte[] T2; private static final byte[] T3; public DSTU7624Engine(final int n) throws IllegalArgumentException { if (n != 128 && n != 256 && n != 512) { throw new IllegalArgumentException("unsupported block length: only 128/256/512 are allowed"); } this.wordsInBlock = n >>> 6; this.internalState = new long[this.wordsInBlock]; } @Override public void init(final boolean forEncryption, final CipherParameters cipherParameters) throws IllegalArgumentException { if (!(cipherParameters instanceof KeyParameter)) { throw new IllegalArgumentException("Invalid parameter passed to DSTU7624Engine init"); } this.forEncryption = forEncryption; final byte[] key = ((KeyParameter)cipherParameters).getKey(); final int n = key.length << 3; final int n2 = this.wordsInBlock << 6; if (n != 128 && n != 256 && n != 512) { throw new IllegalArgumentException("unsupported key length: only 128/256/512 are allowed"); } if (n != n2 && n != 2 * n2) { throw new IllegalArgumentException("Unsupported key length"); } switch (n) { case 128: { this.roundsAmount = 10; CryptoServicesRegistrar.checkConstraints(new DefaultServiceProperties(this.getAlgorithmName(), 128, cipherParameters, Utils.getPurpose(forEncryption))); break; } case 256: { this.roundsAmount = 14; CryptoServicesRegistrar.checkConstraints(new DefaultServiceProperties(this.getAlgorithmName(), 256, cipherParameters, Utils.getPurpose(forEncryption))); break; } case 512: { this.roundsAmount = 18; CryptoServicesRegistrar.checkConstraints(new DefaultServiceProperties(this.getAlgorithmName(), 256, cipherParameters, Utils.getPurpose(forEncryption))); break; } } this.wordsInKey = n >>> 6; this.roundKeys = new long[this.roundsAmount + 1][]; for (int i = 0; i < this.roundKeys.length; ++i) { this.roundKeys[i] = new long[this.wordsInBlock]; } this.workingKey = new long[this.wordsInKey]; if (key.length != n >>> 3) { throw new IllegalArgumentException("Invalid key parameter passed to DSTU7624Engine init"); } Pack.littleEndianToLong(key, 0, this.workingKey); final long[] array = new long[this.wordsInBlock]; this.workingKeyExpandKT(this.workingKey, array); this.workingKeyExpandEven(this.workingKey, array); this.workingKeyExpandOdd(); } @Override public String getAlgorithmName() { return "DSTU7624"; } @Override public int getBlockSize() { return this.wordsInBlock << 3; } @Override public int processBlock(final byte[] array, final int n, final byte[] array2, final int n2) throws DataLengthException, IllegalStateException { if (this.workingKey == null) { throw new IllegalStateException("DSTU7624Engine not initialised"); } if (n + this.getBlockSize() > array.length) { throw new DataLengthException("Input buffer too short"); } if (n2 + this.getBlockSize() > array2.length) { throw new OutputLengthException("Output buffer too short"); } if (this.forEncryption) { switch (this.wordsInBlock) { case 2: { this.encryptBlock_128(array, n, array2, n2); break; } default: { Pack.littleEndianToLong(array, n, this.internalState); this.addRoundKey(0); int n3 = 0; while (true) { this.subBytes(); this.shiftRows(); this.mixColumns(); if (++n3 == this.roundsAmount) { break; } this.xorRoundKey(n3); } this.addRoundKey(this.roundsAmount); Pack.longToLittleEndian(this.internalState, array2, n2); break; } } } else { switch (this.wordsInBlock) { case 2: { this.decryptBlock_128(array, n, array2, n2); break; } default: { Pack.littleEndianToLong(array, n, this.internalState); this.subRoundKey(this.roundsAmount); int roundsAmount = this.roundsAmount; while (true) { this.mixColumnsInv(); this.invShiftRows(); this.invSubBytes(); if (--roundsAmount == 0) { break; } this.xorRoundKey(roundsAmount); } this.subRoundKey(0); Pack.longToLittleEndian(this.internalState, array2, n2); break; } } } return this.getBlockSize(); } @Override public void reset() { Arrays.fill(this.internalState, 0L); } private void addRoundKey(final int n) { final long[] array = this.roundKeys[n]; for (int i = 0; i < this.wordsInBlock; ++i) { final long[] internalState = this.internalState; final int n2 = i; internalState[n2] += array[i]; } } private void subRoundKey(final int n) { final long[] array = this.roundKeys[n]; for (int i = 0; i < this.wordsInBlock; ++i) { final long[] internalState = this.internalState; final int n2 = i; internalState[n2] -= array[i]; } } private void xorRoundKey(final int n) { final long[] array = this.roundKeys[n]; for (int i = 0; i < this.wordsInBlock; ++i) { final long[] internalState = this.internalState; final int n2 = i; internalState[n2] ^= array[i]; } } private void workingKeyExpandKT(final long[] array, final long[] array2) { final long[] array3 = new long[this.wordsInBlock]; final long[] array4 = new long[this.wordsInBlock]; this.internalState = new long[this.wordsInBlock]; final long[] internalState = this.internalState; final int n = 0; internalState[n] += this.wordsInBlock + this.wordsInKey + 1; if (this.wordsInBlock == this.wordsInKey) { System.arraycopy(array, 0, array3, 0, array3.length); System.arraycopy(array, 0, array4, 0, array4.length); } else { System.arraycopy(array, 0, array3, 0, this.wordsInBlock); System.arraycopy(array, this.wordsInBlock, array4, 0, this.wordsInBlock); } for (int i = 0; i < this.internalState.length; ++i) { final long[] internalState2 = this.internalState; final int n2 = i; internalState2[n2] += array3[i]; } this.subBytes(); this.shiftRows(); this.mixColumns(); for (int j = 0; j < this.internalState.length; ++j) { final long[] internalState3 = this.internalState; final int n3 = j; internalState3[n3] ^= array4[j]; } this.subBytes(); this.shiftRows(); this.mixColumns(); for (int k = 0; k < this.internalState.length; ++k) { final long[] internalState4 = this.internalState; final int n4 = k; internalState4[n4] += array3[k]; } this.subBytes(); this.shiftRows(); this.mixColumns(); System.arraycopy(this.internalState, 0, array2, 0, this.wordsInBlock); } private void workingKeyExpandEven(final long[] array, final long[] array2) { final long[] array3 = new long[this.wordsInKey]; final long[] array4 = new long[this.wordsInBlock]; int n = 0; System.arraycopy(array, 0, array3, 0, this.wordsInKey); long n2 = 281479271743489L; while (true) { for (int i = 0; i < this.wordsInBlock; ++i) { array4[i] = array2[i] + n2; } for (int j = 0; j < this.wordsInBlock; ++j) { this.internalState[j] = array3[j] + array4[j]; } this.subBytes(); this.shiftRows(); this.mixColumns(); for (int k = 0; k < this.wordsInBlock; ++k) { final long[] internalState = this.internalState; final int n3 = k; internalState[n3] ^= array4[k]; } this.subBytes(); this.shiftRows(); this.mixColumns(); for (int l = 0; l < this.wordsInBlock; ++l) { final long[] internalState2 = this.internalState; final int n4 = l; internalState2[n4] += array4[l]; } System.arraycopy(this.internalState, 0, this.roundKeys[n], 0, this.wordsInBlock); if (this.roundsAmount == n) { break; } if (this.wordsInBlock != this.wordsInKey) { n += 2; n2 <<= 1; for (int n5 = 0; n5 < this.wordsInBlock; ++n5) { array4[n5] = array2[n5] + n2; } for (int n6 = 0; n6 < this.wordsInBlock; ++n6) { this.internalState[n6] = array3[this.wordsInBlock + n6] + array4[n6]; } this.subBytes(); this.shiftRows(); this.mixColumns(); for (int n7 = 0; n7 < this.wordsInBlock; ++n7) { final long[] internalState3 = this.internalState; final int n8 = n7; internalState3[n8] ^= array4[n7]; } this.subBytes(); this.shiftRows(); this.mixColumns(); for (int n9 = 0; n9 < this.wordsInBlock; ++n9) { final long[] internalState4 = this.internalState; final int n10 = n9; internalState4[n10] += array4[n9]; } System.arraycopy(this.internalState, 0, this.roundKeys[n], 0, this.wordsInBlock); if (this.roundsAmount == n) { break; } } n += 2; n2 <<= 1; final long n11 = array3[0]; for (int n12 = 1; n12 < array3.length; ++n12) { array3[n12 - 1] = array3[n12]; } array3[array3.length - 1] = n11; } } private void workingKeyExpandOdd() { for (int i = 1; i < this.roundsAmount; i += 2) { this.rotateLeft(this.roundKeys[i - 1], this.roundKeys[i]); } } private void decryptBlock_128(final byte[] array, final int n, final byte[] array2, final int n2) { final long littleEndianToLong = Pack.littleEndianToLong(array, n); final long littleEndianToLong2 = Pack.littleEndianToLong(array, n + 8); final long[] array3 = this.roundKeys[this.roundsAmount]; long n3 = littleEndianToLong - array3[0]; long n4 = littleEndianToLong2 - array3[1]; int roundsAmount = this.roundsAmount; long n9; long n10; while (true) { final long mixColumnInv = mixColumnInv(n3); final long mixColumnInv2 = mixColumnInv(n4); final int n5 = (int)mixColumnInv; final int n6 = (int)(mixColumnInv >>> 32); final int n7 = (int)mixColumnInv2; final int n8 = (int)(mixColumnInv2 >>> 32); n9 = (((long)((DSTU7624Engine.T0[n5 & 0xFF] & 0xFF) | (DSTU7624Engine.T1[n5 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.T2[n5 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.T3[n5 >>> 24] << 24) & 0xFFFFFFFFL) | (long)((DSTU7624Engine.T0[n8 & 0xFF] & 0xFF) | (DSTU7624Engine.T1[n8 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.T2[n8 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.T3[n8 >>> 24] << 24) << 32); n10 = (((long)((DSTU7624Engine.T0[n7 & 0xFF] & 0xFF) | (DSTU7624Engine.T1[n7 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.T2[n7 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.T3[n7 >>> 24] << 24) & 0xFFFFFFFFL) | (long)((DSTU7624Engine.T0[n6 & 0xFF] & 0xFF) | (DSTU7624Engine.T1[n6 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.T2[n6 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.T3[n6 >>> 24] << 24) << 32); if (--roundsAmount == 0) { break; } final long[] array4 = this.roundKeys[roundsAmount]; n3 = (n9 ^ array4[0]); n4 = (n10 ^ array4[1]); } final long[] array5 = this.roundKeys[0]; final long n11 = n9 - array5[0]; final long n12 = n10 - array5[1]; Pack.longToLittleEndian(n11, array2, n2); Pack.longToLittleEndian(n12, array2, n2 + 8); } private void encryptBlock_128(final byte[] array, final int n, final byte[] array2, final int n2) { final long littleEndianToLong = Pack.littleEndianToLong(array, n); final long littleEndianToLong2 = Pack.littleEndianToLong(array, n + 8); final long[] array3 = this.roundKeys[0]; long n3 = littleEndianToLong + array3[0]; long n4 = littleEndianToLong2 + array3[1]; int n5 = 0; long mixColumn; long mixColumn2; while (true) { final int n6 = (int)n3; final int n7 = (int)(n3 >>> 32); final int n8 = (int)n4; final int n9 = (int)(n4 >>> 32); final long n10 = ((long)((DSTU7624Engine.S0[n6 & 0xFF] & 0xFF) | (DSTU7624Engine.S1[n6 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.S2[n6 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.S3[n6 >>> 24] << 24) & 0xFFFFFFFFL) | (long)((DSTU7624Engine.S0[n9 & 0xFF] & 0xFF) | (DSTU7624Engine.S1[n9 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.S2[n9 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.S3[n9 >>> 24] << 24) << 32; final long n11 = ((long)((DSTU7624Engine.S0[n8 & 0xFF] & 0xFF) | (DSTU7624Engine.S1[n8 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.S2[n8 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.S3[n8 >>> 24] << 24) & 0xFFFFFFFFL) | (long)((DSTU7624Engine.S0[n7 & 0xFF] & 0xFF) | (DSTU7624Engine.S1[n7 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.S2[n7 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.S3[n7 >>> 24] << 24) << 32; mixColumn = mixColumn(n10); mixColumn2 = mixColumn(n11); if (++n5 == this.roundsAmount) { break; } final long[] array4 = this.roundKeys[n5]; n3 = (mixColumn ^ array4[0]); n4 = (mixColumn2 ^ array4[1]); } final long[] array5 = this.roundKeys[this.roundsAmount]; final long n12 = mixColumn + array5[0]; final long n13 = mixColumn2 + array5[1]; Pack.longToLittleEndian(n12, array2, n2); Pack.longToLittleEndian(n13, array2, n2 + 8); } private void subBytes() { for (int i = 0; i < this.wordsInBlock; ++i) { final long n = this.internalState[i]; final int n2 = (int)n; final int n3 = (int)(n >>> 32); this.internalState[i] = (((long)((DSTU7624Engine.S0[n2 & 0xFF] & 0xFF) | (DSTU7624Engine.S1[n2 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.S2[n2 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.S3[n2 >>> 24] << 24) & 0xFFFFFFFFL) | (long)((DSTU7624Engine.S0[n3 & 0xFF] & 0xFF) | (DSTU7624Engine.S1[n3 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.S2[n3 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.S3[n3 >>> 24] << 24) << 32); } } private void invSubBytes() { for (int i = 0; i < this.wordsInBlock; ++i) { final long n = this.internalState[i]; final int n2 = (int)n; final int n3 = (int)(n >>> 32); this.internalState[i] = (((long)((DSTU7624Engine.T0[n2 & 0xFF] & 0xFF) | (DSTU7624Engine.T1[n2 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.T2[n2 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.T3[n2 >>> 24] << 24) & 0xFFFFFFFFL) | (long)((DSTU7624Engine.T0[n3 & 0xFF] & 0xFF) | (DSTU7624Engine.T1[n3 >>> 8 & 0xFF] & 0xFF) << 8 | (DSTU7624Engine.T2[n3 >>> 16 & 0xFF] & 0xFF) << 16 | DSTU7624Engine.T3[n3 >>> 24] << 24) << 32); } } private void shiftRows() { switch (this.wordsInBlock) { case 2: { final long n = this.internalState[0]; final long n2 = this.internalState[1]; final long n3 = (n ^ n2) & 0xFFFFFFFF00000000L; final long n4 = n ^ n3; final long n5 = n2 ^ n3; this.internalState[0] = n4; this.internalState[1] = n5; break; } case 4: { final long n6 = this.internalState[0]; final long n7 = this.internalState[1]; final long n8 = this.internalState[2]; final long n9 = this.internalState[3]; final long n10 = (n6 ^ n8) & 0xFFFFFFFF00000000L; final long n11 = n6 ^ n10; final long n12 = n8 ^ n10; final long n13 = (n7 ^ n9) & 0xFFFFFFFF0000L; final long n14 = n7 ^ n13; final long n15 = n9 ^ n13; final long n16 = (n11 ^ n14) & 0xFFFF0000FFFF0000L; final long n17 = n11 ^ n16; final long n18 = n14 ^ n16; final long n19 = (n12 ^ n15) & 0xFFFF0000FFFF0000L; final long n20 = n12 ^ n19; final long n21 = n15 ^ n19; this.internalState[0] = n17; this.internalState[1] = n18; this.internalState[2] = n20; this.internalState[3] = n21; break; } case 8: { final long n22 = this.internalState[0]; final long n23 = this.internalState[1]; final long n24 = this.internalState[2]; final long n25 = this.internalState[3]; final long n26 = this.internalState[4]; final long n27 = this.internalState[5]; final long n28 = this.internalState[6]; final long n29 = this.internalState[7]; final long n30 = (n22 ^ n26) & 0xFFFFFFFF00000000L; final long n31 = n22 ^ n30; final long n32 = n26 ^ n30; final long n33 = (n23 ^ n27) & 0xFFFFFFFF000000L; final long n34 = n23 ^ n33; final long n35 = n27 ^ n33; final long n36 = (n24 ^ n28) & 0xFFFFFFFF0000L; final long n37 = n24 ^ n36; final long n38 = n28 ^ n36; final long n39 = (n25 ^ n29) & 0xFFFFFFFF00L; final long n40 = n25 ^ n39; final long n41 = n29 ^ n39; final long n42 = (n31 ^ n37) & 0xFFFF0000FFFF0000L; final long n43 = n31 ^ n42; final long n44 = n37 ^ n42; final long n45 = (n34 ^ n40) & 0xFFFF0000FFFF00L; final long n46 = n34 ^ n45; final long n47 = n40 ^ n45; final long n48 = (n32 ^ n38) & 0xFFFF0000FFFF0000L; final long n49 = n32 ^ n48; final long n50 = n38 ^ n48; final long n51 = (n35 ^ n41) & 0xFFFF0000FFFF00L; final long n52 = n35 ^ n51; final long n53 = n41 ^ n51; final long n54 = (n43 ^ n46) & 0xFF00FF00FF00FF00L; final long n55 = n43 ^ n54; final long n56 = n46 ^ n54; final long n57 = (n44 ^ n47) & 0xFF00FF00FF00FF00L; final long n58 = n44 ^ n57; final long n59 = n47 ^ n57; final long n60 = (n49 ^ n52) & 0xFF00FF00FF00FF00L; final long n61 = n49 ^ n60; final long n62 = n52 ^ n60; final long n63 = (n50 ^ n53) & 0xFF00FF00FF00FF00L; final long n64 = n50 ^ n63; final long n65 = n53 ^ n63; this.internalState[0] = n55; this.internalState[1] = n56; this.internalState[2] = n58; this.internalState[3] = n59; this.internalState[4] = n61; this.internalState[5] = n62; this.internalState[6] = n64; this.internalState[7] = n65; break; } default: { throw new IllegalStateException("unsupported block length: only 128/256/512 are allowed"); } } } private void invShiftRows() { switch (this.wordsInBlock) { case 2: { final long n = this.internalState[0]; final long n2 = this.internalState[1]; final long n3 = (n ^ n2) & 0xFFFFFFFF00000000L; final long n4 = n ^ n3; final long n5 = n2 ^ n3; this.internalState[0] = n4; this.internalState[1] = n5; break; } case 4: { final long n6 = this.internalState[0]; final long n7 = this.internalState[1]; final long n8 = this.internalState[2]; final long n9 = this.internalState[3]; final long n10 = (n6 ^ n7) & 0xFFFF0000FFFF0000L; final long n11 = n6 ^ n10; final long n12 = n7 ^ n10; final long n13 = (n8 ^ n9) & 0xFFFF0000FFFF0000L; final long n14 = n8 ^ n13; final long n15 = n9 ^ n13; final long n16 = (n11 ^ n14) & 0xFFFFFFFF00000000L; final long n17 = n11 ^ n16; final long n18 = n14 ^ n16; final long n19 = (n12 ^ n15) & 0xFFFFFFFF0000L; final long n20 = n12 ^ n19; final long n21 = n15 ^ n19; this.internalState[0] = n17; this.internalState[1] = n20; this.internalState[2] = n18; this.internalState[3] = n21; break; } case 8: { final long n22 = this.internalState[0]; final long n23 = this.internalState[1]; final long n24 = this.internalState[2]; final long n25 = this.internalState[3]; final long n26 = this.internalState[4]; final long n27 = this.internalState[5]; final long n28 = this.internalState[6]; final long n29 = this.internalState[7]; final long n30 = (n22 ^ n23) & 0xFF00FF00FF00FF00L; final long n31 = n22 ^ n30; final long n32 = n23 ^ n30; final long n33 = (n24 ^ n25) & 0xFF00FF00FF00FF00L; final long n34 = n24 ^ n33; final long n35 = n25 ^ n33; final long n36 = (n26 ^ n27) & 0xFF00FF00FF00FF00L; final long n37 = n26 ^ n36; final long n38 = n27 ^ n36; final long n39 = (n28 ^ n29) & 0xFF00FF00FF00FF00L; final long n40 = n28 ^ n39; final long n41 = n29 ^ n39; final long n42 = (n31 ^ n34) & 0xFFFF0000FFFF0000L; final long n43 = n31 ^ n42; final long n44 = n34 ^ n42; final long n45 = (n32 ^ n35) & 0xFFFF0000FFFF00L; final long n46 = n32 ^ n45; final long n47 = n35 ^ n45; final long n48 = (n37 ^ n40) & 0xFFFF0000FFFF0000L; final long n49 = n37 ^ n48; final long n50 = n40 ^ n48; final long n51 = (n38 ^ n41) & 0xFFFF0000FFFF00L; final long n52 = n38 ^ n51; final long n53 = n41 ^ n51; final long n54 = (n43 ^ n49) & 0xFFFFFFFF00000000L; final long n55 = n43 ^ n54; final long n56 = n49 ^ n54; final long n57 = (n46 ^ n52) & 0xFFFFFFFF000000L; final long n58 = n46 ^ n57; final long n59 = n52 ^ n57; final long n60 = (n44 ^ n50) & 0xFFFFFFFF0000L; final long n61 = n44 ^ n60; final long n62 = n50 ^ n60; final long n63 = (n47 ^ n53) & 0xFFFFFFFF00L; final long n64 = n47 ^ n63; final long n65 = n53 ^ n63; this.internalState[0] = n55; this.internalState[1] = n58; this.internalState[2] = n61; this.internalState[3] = n64; this.internalState[4] = n56; this.internalState[5] = n59; this.internalState[6] = n62; this.internalState[7] = n65; break; } default: { throw new IllegalStateException("unsupported block length: only 128/256/512 are allowed"); } } } private static long mixColumn(final long n) { final long mulX = mulX(n); final long n2 = rotate(8, n) ^ n; final long n3 = n2 ^ rotate(16, n2) ^ rotate(48, n); return n3 ^ rotate(32, mulX2(n3 ^ n ^ mulX)) ^ rotate(40, mulX) ^ rotate(48, mulX); } private void mixColumns() { for (int i = 0; i < this.wordsInBlock; ++i) { this.internalState[i] = mixColumn(this.internalState[i]); } } private static long mixColumnInv(final long n) { final long n2 = n ^ rotate(8, n); final long n3 = n2 ^ rotate(32, n2) ^ rotate(48, n); final long n4 = n3 ^ n; final long rotate = rotate(48, n); final long rotate2 = rotate(56, n); return n3 ^ mulX(rotate(40, rotate(32, n4) ^ n ^ rotate2 ^ mulX(n4 ^ rotate(24, n) ^ rotate ^ rotate2 ^ mulX(rotate(16, n3) ^ mulX(n4 ^ rotate ^ mulX(rotate(16, n4) ^ n ^ rotate(40, mulX(rotate(56, n4) ^ mulX(n4 ^ rotate2)) ^ n))))))); } private void mixColumnsInv() { for (int i = 0; i < this.wordsInBlock; ++i) { this.internalState[i] = mixColumnInv(this.internalState[i]); } } private static long mulX(final long n) { return (n & 0x7F7F7F7F7F7F7F7FL) << 1 ^ ((n & 0x8080808080808080L) >>> 7) * 29L; } private static long mulX2(final long n) { return (n & 0x3F3F3F3F3F3F3F3FL) << 2 ^ ((n & 0x8080808080808080L) >>> 6) * 29L ^ ((n & 0x4040404040404040L) >>> 6) * 29L; } private static long rotate(final int n, final long n2) { return n2 >>> n | n2 << -n; } private void rotateLeft(final long[] array, final long[] array2) { switch (this.wordsInBlock) { case 2: { final long n = array[0]; final long n2 = array[1]; array2[0] = (n >>> 56 | n2 << 8); array2[1] = (n2 >>> 56 | n << 8); break; } case 4: { final long n3 = array[0]; final long n4 = array[1]; final long n5 = array[2]; final long n6 = array[3]; array2[0] = (n4 >>> 24 | n5 << 40); array2[1] = (n5 >>> 24 | n6 << 40); array2[2] = (n6 >>> 24 | n3 << 40); array2[3] = (n3 >>> 24 | n4 << 40); break; } case 8: { final long n7 = array[0]; final long n8 = array[1]; final long n9 = array[2]; final long n10 = array[3]; final long n11 = array[4]; final long n12 = array[5]; final long n13 = array[6]; final long n14 = array[7]; array2[0] = (n9 >>> 24 | n10 << 40); array2[1] = (n10 >>> 24 | n11 << 40); array2[2] = (n11 >>> 24 | n12 << 40); array2[3] = (n12 >>> 24 | n13 << 40); array2[4] = (n13 >>> 24 | n14 << 40); array2[5] = (n14 >>> 24 | n7 << 40); array2[6] = (n7 >>> 24 | n8 << 40); array2[7] = (n8 >>> 24 | n9 << 40); break; } default: { throw new IllegalStateException("unsupported block length: only 128/256/512 are allowed"); } } } static { S0 = new byte[] { -88, 67, 95, 6, 107, 117, 108, 89, 113, -33, -121, -107, 23, -16, -40, 9, 109, -13, 29, -53, -55, 77, 44, -81, 121, -32, -105, -3, 111, 75, 69, 57, 62, -35, -93, 79, -76, -74, -102, 14, 31, -65, 21, -31, 73, -46, -109, -58, -110, 114, -98, 97, -47, 99, -6, -18, -12, 25, -43, -83, 88, -92, -69, -95, -36, -14, -125, 55, 66, -28, 122, 50, -100, -52, -85, 74, -113, 110, 4, 39, 46, -25, -30, 90, -106, 22, 35, 43, -62, 101, 102, 15, -68, -87, 71, 65, 52, 72, -4, -73, 106, -120, -91, 83, -122, -7, 91, -37, 56, 123, -61, 30, 34, 51, 36, 40, 54, -57, -78, 59, -114, 119, -70, -11, 20, -97, 8, 85, -101, 76, -2, 96, 92, -38, 24, 70, -51, 125, 33, -80, 63, 27, -119, -1, -21, -124, 105, 58, -99, -41, -45, 112, 103, 64, -75, -34, 93, 48, -111, -79, 120, 17, 1, -27, 0, 104, -104, -96, -59, 2, -90, 116, 45, 11, -94, 118, -77, -66, -50, -67, -82, -23, -118, 49, 28, -20, -15, -103, -108, -86, -10, 38, 47, -17, -24, -116, 53, 3, -44, 127, -5, 5, -63, 94, -112, 32, 61, -126, -9, -22, 10, 13, 126, -8, 80, 26, -60, 7, 87, -72, 60, 98, -29, -56, -84, 82, 100, 16, -48, -39, 19, 12, 18, 41, 81, -71, -49, -42, 115, -115, -127, 84, -64, -19, 78, 68, -89, 42, -123, 37, -26, -54, 124, -117, 86, -128 }; S1 = new byte[] { -50, -69, -21, -110, -22, -53, 19, -63, -23, 58, -42, -78, -46, -112, 23, -8, 66, 21, 86, -76, 101, 28, -120, 67, -59, 92, 54, -70, -11, 87, 103, -115, 49, -10, 100, 88, -98, -12, 34, -86, 117, 15, 2, -79, -33, 109, 115, 77, 124, 38, 46, -9, 8, 93, 68, 62, -97, 20, -56, -82, 84, 16, -40, -68, 26, 107, 105, -13, -67, 51, -85, -6, -47, -101, 104, 78, 22, -107, -111, -18, 76, 99, -114, 91, -52, 60, 25, -95, -127, 73, 123, -39, 111, 55, 96, -54, -25, 43, 72, -3, -106, 69, -4, 65, 18, 13, 121, -27, -119, -116, -29, 32, 48, -36, -73, 108, 74, -75, 63, -105, -44, 98, 45, 6, -92, -91, -125, 95, 42, -38, -55, 0, 126, -94, 85, -65, 17, -43, -100, -49, 14, 10, 61, 81, 125, -109, 27, -2, -60, 71, 9, -122, 11, -113, -99, 106, 7, -71, -80, -104, 24, 50, 113, 75, -17, 59, 112, -96, -28, 64, -1, -61, -87, -26, 120, -7, -117, 70, -128, 30, 56, -31, -72, -88, -32, 12, 35, 118, 29, 37, 36, 5, -15, 110, -108, 40, -102, -124, -24, -93, 79, 119, -45, -123, -30, 82, -14, -126, 80, 122, 47, 116, 83, -77, 97, -81, 57, 53, -34, -51, 31, -103, -84, -83, 114, 44, -35, -48, -121, -66, 94, -90, -20, 4, -58, 3, 52, -5, -37, 89, -74, -62, 1, -16, 90, -19, -89, 102, 33, 127, -118, 39, -57, -64, 41, -41 }; S2 = new byte[] { -109, -39, -102, -75, -104, 34, 69, -4, -70, 106, -33, 2, -97, -36, 81, 89, 74, 23, 43, -62, -108, -12, -69, -93, 98, -28, 113, -44, -51, 112, 22, -31, 73, 60, -64, -40, 92, -101, -83, -123, 83, -95, 122, -56, 45, -32, -47, 114, -90, 44, -60, -29, 118, 120, -73, -76, 9, 59, 14, 65, 76, -34, -78, -112, 37, -91, -41, 3, 17, 0, -61, 46, -110, -17, 78, 18, -99, 125, -53, 53, 16, -43, 79, -98, 77, -87, 85, -58, -48, 123, 24, -105, -45, 54, -26, 72, 86, -127, -113, 119, -52, -100, -71, -30, -84, -72, 47, 21, -92, 124, -38, 56, 30, 11, 5, -42, 20, 110, 108, 126, 102, -3, -79, -27, 96, -81, 94, 51, -121, -55, -16, 93, 109, 63, -120, -115, -57, -9, 29, -23, -20, -19, -128, 41, 39, -49, -103, -88, 80, 15, 55, 36, 40, 48, -107, -46, 62, 91, 64, -125, -77, 105, 87, 31, 7, 28, -118, -68, 32, -21, -50, -114, -85, -18, 49, -94, 115, -7, -54, 58, 26, -5, 13, -63, -2, -6, -14, 111, -67, -106, -35, 67, 82, -74, 8, -13, -82, -66, 25, -119, 50, 38, -80, -22, 75, 100, -124, -126, 107, -11, 121, -65, 1, 95, 117, 99, 27, 35, 61, 104, 42, 101, -24, -111, -10, -1, 19, 88, -15, 71, 10, 127, -59, -89, -25, 97, 90, 6, 70, 68, 66, 4, -96, -37, 57, -122, 84, -86, -116, 52, 33, -117, -8, 12, 116, 103 }; S3 = new byte[] { 104, -115, -54, 77, 115, 75, 78, 42, -44, 82, 38, -77, 84, 30, 25, 31, 34, 3, 70, 61, 45, 74, 83, -125, 19, -118, -73, -43, 37, 121, -11, -67, 88, 47, 13, 2, -19, 81, -98, 17, -14, 62, 85, 94, -47, 22, 60, 102, 112, 93, -13, 69, 64, -52, -24, -108, 86, 8, -50, 26, 58, -46, -31, -33, -75, 56, 110, 14, -27, -12, -7, -122, -23, 79, -42, -123, 35, -49, 50, -103, 49, 20, -82, -18, -56, 72, -45, 48, -95, -110, 65, -79, 24, -60, 44, 113, 114, 68, 21, -3, 55, -66, 95, -86, -101, -120, -40, -85, -119, -100, -6, 96, -22, -68, 98, 12, 36, -90, -88, -20, 103, 32, -37, 124, 40, -35, -84, 91, 52, 126, 16, -15, 123, -113, 99, -96, 5, -102, 67, 119, 33, -65, 39, 9, -61, -97, -74, -41, 41, -62, -21, -64, -92, -117, -116, 29, -5, -1, -63, -78, -105, 46, -8, 101, -10, 117, 7, 4, 73, 51, -28, -39, -71, -48, 66, -57, 108, -112, 0, -114, 111, 80, 1, -59, -38, 71, 63, -51, 105, -94, -30, 122, -89, -58, -109, 15, 10, 6, -26, 43, -106, -93, 28, -81, 106, 18, -124, 57, -25, -80, -126, -9, -2, -99, -121, 92, -127, 53, -34, -76, -91, -4, -128, -17, -53, -69, 107, 118, -70, 90, 125, 120, 11, -107, -29, -83, 116, -104, 59, 54, 100, 109, -36, -16, 89, -87, 76, 23, 127, -111, -72, -55, 87, 27, -32, 97 }; T0 = new byte[] { -92, -94, -87, -59, 78, -55, 3, -39, 126, 15, -46, -83, -25, -45, 39, 91, -29, -95, -24, -26, 124, 42, 85, 12, -122, 57, -41, -115, -72, 18, 111, 40, -51, -118, 112, 86, 114, -7, -65, 79, 115, -23, -9, 87, 22, -84, 80, -64, -99, -73, 71, 113, 96, -60, 116, 67, 108, 31, -109, 119, -36, -50, 32, -116, -103, 95, 68, 1, -11, 30, -121, 94, 97, 44, 75, 29, -127, 21, -12, 35, -42, -22, -31, 103, -15, 127, -2, -38, 60, 7, 83, 106, -124, -100, -53, 2, -125, 51, -35, 53, -30, 89, 90, -104, -91, -110, 100, 4, 6, 16, 77, 28, -105, 8, 49, -18, -85, 5, -81, 121, -96, 24, 70, 109, -4, -119, -44, -57, -1, -16, -49, 66, -111, -8, 104, 10, 101, -114, -74, -3, -61, -17, 120, 76, -52, -98, 48, 46, -68, 11, 84, 26, -90, -69, 38, -128, 72, -108, 50, 125, -89, 63, -82, 34, 61, 102, -86, -10, 0, 93, -67, 74, -32, 59, -76, 23, -117, -97, 118, -80, 36, -102, 37, 99, -37, -21, 122, 62, 92, -77, -79, 41, -14, -54, 88, 110, -40, -88, 47, 117, -33, 20, -5, 19, 73, -120, -78, -20, -28, 52, 45, -106, -58, 58, -19, -107, 14, -27, -123, 107, 64, 33, -101, 9, 25, 43, 82, -34, 69, -93, -6, 81, -62, -75, -47, -112, -71, -13, 55, -63, 13, -70, 65, 17, 56, 123, -66, -48, -43, 105, 54, -56, 98, 27, -126, -113 }; T1 = new byte[] { -125, -14, 42, -21, -23, -65, 123, -100, 52, -106, -115, -104, -71, 105, -116, 41, 61, -120, 104, 6, 57, 17, 76, 14, -96, 86, 64, -110, 21, -68, -77, -36, 111, -8, 38, -70, -66, -67, 49, -5, -61, -2, -128, 97, -31, 122, 50, -46, 112, 32, -95, 69, -20, -39, 26, 93, -76, -40, 9, -91, 85, -114, 55, 118, -87, 103, 16, 23, 54, 101, -79, -107, 98, 89, 116, -93, 80, 47, 75, -56, -48, -113, -51, -44, 60, -122, 18, 29, 35, -17, -12, 83, 25, 53, -26, 127, 94, -42, 121, 81, 34, 20, -9, 30, 74, 66, -101, 65, 115, 45, -63, 92, -90, -94, -32, 46, -45, 40, -69, -55, -82, 106, -47, 90, 48, -112, -124, -7, -78, 88, -49, 126, -59, -53, -105, -28, 22, 108, -6, -80, 109, 31, 82, -103, 13, 78, 3, -111, -62, 77, 100, 119, -97, -35, -60, 73, -118, -102, 36, 56, -89, 87, -123, -57, 124, 125, -25, -10, -73, -84, 39, 70, -34, -33, 59, -41, -98, 43, 11, -43, 19, 117, -16, 114, -74, -99, 27, 1, 63, 68, -27, -121, -3, 7, -15, -85, -108, 24, -22, -4, 58, -126, 95, 5, 84, -37, 0, -117, -29, 72, 12, -54, 120, -119, 10, -1, 62, 91, -127, -18, 113, -30, -38, 44, -72, -75, -52, 110, -88, 107, -83, 96, -58, 8, 4, 2, -24, -11, 79, -92, -13, -64, -50, 67, 37, 28, 33, 51, 15, -81, 71, -19, 102, 99, -109, -86 }; T2 = new byte[] { 69, -44, 11, 67, -15, 114, -19, -92, -62, 56, -26, 113, -3, -74, 58, -107, 80, 68, 75, -30, 116, 107, 30, 17, 90, -58, -76, -40, -91, -118, 112, -93, -88, -6, 5, -39, -105, 64, -55, -112, -104, -113, -36, 18, 49, 44, 71, 106, -103, -82, -56, 127, -7, 79, 93, -106, 111, -12, -77, 57, 33, -38, -100, -123, -98, 59, -16, -65, -17, 6, -18, -27, 95, 32, 16, -52, 60, 84, 74, 82, -108, 14, -64, 40, -10, 86, 96, -94, -29, 15, -20, -99, 36, -125, 126, -43, 124, -21, 24, -41, -51, -35, 120, -1, -37, -95, 9, -48, 118, -124, 117, -69, 29, 26, 47, -80, -2, -42, 52, 99, 53, -46, 42, 89, 109, 77, 119, -25, -114, 97, -49, -97, -50, 39, -11, -128, -122, -57, -90, -5, -8, -121, -85, 98, 63, -33, 72, 0, 20, -102, -67, 91, 4, -110, 2, 37, 101, 76, 83, 12, -14, 41, -81, 23, 108, 65, 48, -23, -109, 85, -9, -84, 104, 38, -60, 125, -54, 122, 62, -96, 55, 3, -63, 54, 105, 102, 8, 22, -89, -68, -59, -45, 34, -73, 19, 70, 50, -24, 87, -120, 43, -127, -78, 78, 100, 28, -86, -111, 88, 46, -101, 92, 27, 81, 115, 66, 35, 1, 110, -13, 13, -66, 61, 10, 45, 31, 103, 51, 25, 123, 94, -22, -34, -117, -53, -87, -116, -115, -83, 73, -126, -28, -70, -61, 21, -47, -32, -119, -4, -79, -71, -75, 7, 121, -72, -31 }; T3 = new byte[] { -78, -74, 35, 17, -89, -120, -59, -90, 57, -113, -60, -24, 115, 34, 67, -61, -126, 39, -51, 24, 81, 98, 45, -9, 92, 14, 59, -3, -54, -101, 13, 15, 121, -116, 16, 76, 116, 28, 10, -114, 124, -108, 7, -57, 94, 20, -95, 33, 87, 80, 78, -87, -128, -39, -17, 100, 65, -49, 60, -18, 46, 19, 41, -70, 52, 90, -82, -118, 97, 51, 18, -71, 85, -88, 21, 5, -10, 3, 6, 73, -75, 37, 9, 22, 12, 42, 56, -4, 32, -12, -27, 127, -41, 49, 43, 102, 111, -1, 114, -122, -16, -93, 47, 120, 0, -68, -52, -30, -80, -15, 66, -76, 48, 95, 96, 4, -20, -91, -29, -117, -25, 29, -65, -124, 123, -26, -127, -8, -34, -40, -46, 23, -50, 75, 71, -42, 105, 108, 25, -103, -102, 1, -77, -123, -79, -7, 89, -62, 55, -23, -56, -96, -19, 79, -119, 104, 109, -43, 38, -111, -121, 88, -67, -55, -104, -36, 117, -64, 118, -11, 103, 107, 126, -21, 82, -53, -47, 91, -97, 11, -37, 64, -110, 26, -6, -84, -28, -31, 113, 31, 101, -115, -105, -98, -107, -112, 93, -73, -63, -81, 84, -5, 2, -32, 53, -69, 58, 77, -83, 44, 61, 86, 8, 27, 74, -109, 106, -85, -72, 122, -14, 125, -38, 63, -2, 62, -66, -22, -86, 68, -58, -48, 54, 72, 112, -106, 119, 36, 83, -33, -13, -125, 40, 50, 69, 30, -92, -45, -94, 70, 110, -100, -35, 99, -44, -99 }; } }