You are here

BLAKE2b.php in Automatic Updates 7

File

vendor/paragonie/sodium_compat/src/Core32/BLAKE2b.php
View source
<?php

if (class_exists('ParagonIE_Sodium_Core_BLAKE2b', false)) {
  return;
}

/**
 * Class ParagonIE_Sodium_Core_BLAKE2b
 *
 * Based on the work of Devi Mandiri in devi/salt.
 */
abstract class ParagonIE_Sodium_Core32_BLAKE2b extends ParagonIE_Sodium_Core_Util {

  /**
   * @var SplFixedArray
   */
  public static $iv;

  /**
   * @var array<int, array<int, int>>
   */
  public static $sigma = array(
    array(
      0,
      1,
      2,
      3,
      4,
      5,
      6,
      7,
      8,
      9,
      10,
      11,
      12,
      13,
      14,
      15,
    ),
    array(
      14,
      10,
      4,
      8,
      9,
      15,
      13,
      6,
      1,
      12,
      0,
      2,
      11,
      7,
      5,
      3,
    ),
    array(
      11,
      8,
      12,
      0,
      5,
      2,
      15,
      13,
      10,
      14,
      3,
      6,
      7,
      1,
      9,
      4,
    ),
    array(
      7,
      9,
      3,
      1,
      13,
      12,
      11,
      14,
      2,
      6,
      5,
      10,
      4,
      0,
      15,
      8,
    ),
    array(
      9,
      0,
      5,
      7,
      2,
      4,
      10,
      15,
      14,
      1,
      11,
      12,
      6,
      8,
      3,
      13,
    ),
    array(
      2,
      12,
      6,
      10,
      0,
      11,
      8,
      3,
      4,
      13,
      7,
      5,
      15,
      14,
      1,
      9,
    ),
    array(
      12,
      5,
      1,
      15,
      14,
      13,
      4,
      10,
      0,
      7,
      6,
      3,
      9,
      2,
      8,
      11,
    ),
    array(
      13,
      11,
      7,
      14,
      12,
      1,
      3,
      9,
      5,
      0,
      15,
      4,
      8,
      6,
      2,
      10,
    ),
    array(
      6,
      15,
      14,
      9,
      11,
      3,
      0,
      8,
      12,
      2,
      13,
      7,
      1,
      4,
      10,
      5,
    ),
    array(
      10,
      2,
      8,
      4,
      7,
      6,
      1,
      5,
      15,
      11,
      9,
      14,
      3,
      12,
      13,
      0,
    ),
    array(
      0,
      1,
      2,
      3,
      4,
      5,
      6,
      7,
      8,
      9,
      10,
      11,
      12,
      13,
      14,
      15,
    ),
    array(
      14,
      10,
      4,
      8,
      9,
      15,
      13,
      6,
      1,
      12,
      0,
      2,
      11,
      7,
      5,
      3,
    ),
  );
  const BLOCKBYTES = 128;
  const OUTBYTES = 64;
  const KEYBYTES = 64;

  /**
   * Turn two 32-bit integers into a fixed array representing a 64-bit integer.
   *
   * @internal You should not use this directly from another application
   *
   * @param int $high
   * @param int $low
   * @return ParagonIE_Sodium_Core32_Int64
   * @throws SodiumException
   * @throws TypeError
   */
  public static function new64($high, $low) {
    return ParagonIE_Sodium_Core32_Int64::fromInts($low, $high);
  }

  /**
   * Convert an arbitrary number into an SplFixedArray of two 32-bit integers
   * that represents a 64-bit integer.
   *
   * @internal You should not use this directly from another application
   *
   * @param int $num
   * @return ParagonIE_Sodium_Core32_Int64
   * @throws SodiumException
   * @throws TypeError
   */
  protected static function to64($num) {
    list($hi, $lo) = self::numericTo64BitInteger($num);
    return self::new64($hi, $lo);
  }

  /**
   * Adds two 64-bit integers together, returning their sum as a SplFixedArray
   * containing two 32-bit integers (representing a 64-bit integer).
   *
   * @internal You should not use this directly from another application
   *
   * @param ParagonIE_Sodium_Core32_Int64 $x
   * @param ParagonIE_Sodium_Core32_Int64 $y
   * @return ParagonIE_Sodium_Core32_Int64
   */
  protected static function add64($x, $y) {
    return $x
      ->addInt64($y);
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param ParagonIE_Sodium_Core32_Int64 $x
   * @param ParagonIE_Sodium_Core32_Int64 $y
   * @param ParagonIE_Sodium_Core32_Int64 $z
   * @return ParagonIE_Sodium_Core32_Int64
   */
  public static function add364($x, $y, $z) {
    return $x
      ->addInt64($y)
      ->addInt64($z);
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param ParagonIE_Sodium_Core32_Int64 $x
   * @param ParagonIE_Sodium_Core32_Int64 $y
   * @return ParagonIE_Sodium_Core32_Int64
   * @throws TypeError
   */
  public static function xor64(ParagonIE_Sodium_Core32_Int64 $x, ParagonIE_Sodium_Core32_Int64 $y) {
    return $x
      ->xorInt64($y);
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param ParagonIE_Sodium_Core32_Int64 $x
   * @param int $c
   * @return ParagonIE_Sodium_Core32_Int64
   * @throws SodiumException
   * @throws TypeError
   */
  public static function rotr64(ParagonIE_Sodium_Core32_Int64 $x, $c) {
    return $x
      ->rotateRight($c);
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $x
   * @param int $i
   * @return ParagonIE_Sodium_Core32_Int64
   * @throws SodiumException
   * @throws TypeError
   */
  public static function load64($x, $i) {

    /** @var int $l */
    $l = (int) $x[$i] | (int) $x[$i + 1] << 8 | (int) $x[$i + 2] << 16 | (int) $x[$i + 3] << 24;

    /** @var int $h */
    $h = (int) $x[$i + 4] | (int) $x[$i + 5] << 8 | (int) $x[$i + 6] << 16 | (int) $x[$i + 7] << 24;
    return self::new64($h, $l);
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $x
   * @param int $i
   * @param ParagonIE_Sodium_Core32_Int64 $u
   * @return void
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedAssignment
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   * @psalm-suppress MixedArrayOffset
   */
  public static function store64(SplFixedArray $x, $i, ParagonIE_Sodium_Core32_Int64 $u) {
    $v = clone $u;
    $maxLength = $x
      ->getSize() - 1;
    for ($j = 0; $j < 8; ++$j) {
      $k = 3 - ($j >> 1);
      $x[$i] = $v->limbs[$k] & 0xff;
      if (++$i > $maxLength) {
        return;
      }
      $v->limbs[$k] >>= 8;
    }
  }

  /**
   * This just sets the $iv static variable.
   *
   * @internal You should not use this directly from another application
   *
   * @return void
   * @throws SodiumException
   * @throws TypeError
   */
  public static function pseudoConstructor() {
    static $called = false;
    if ($called) {
      return;
    }
    self::$iv = new SplFixedArray(8);
    self::$iv[0] = self::new64(0x6a09e667, 0xf3bcc908);
    self::$iv[1] = self::new64(0xbb67ae85, 0x84caa73b);
    self::$iv[2] = self::new64(0x3c6ef372, 0xfe94f82b);
    self::$iv[3] = self::new64(0xa54ff53a, 0x5f1d36f1);
    self::$iv[4] = self::new64(0x510e527f, 0xade682d1);
    self::$iv[5] = self::new64(0x9b05688c, 0x2b3e6c1f);
    self::$iv[6] = self::new64(0x1f83d9ab, 0xfb41bd6b);
    self::$iv[7] = self::new64(0x5be0cd19, 0x137e2179);
    $called = true;
  }

  /**
   * Returns a fresh BLAKE2 context.
   *
   * @internal You should not use this directly from another application
   *
   * @return SplFixedArray
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedAssignment
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   * @psalm-suppress MixedArrayOffset
   * @throws SodiumException
   * @throws TypeError
   */
  protected static function context() {
    $ctx = new SplFixedArray(6);
    $ctx[0] = new SplFixedArray(8);

    // h
    $ctx[1] = new SplFixedArray(2);

    // t
    $ctx[2] = new SplFixedArray(2);

    // f
    $ctx[3] = new SplFixedArray(256);

    // buf
    $ctx[4] = 0;

    // buflen
    $ctx[5] = 0;

    // last_node (uint8_t)
    for ($i = 8; $i--;) {
      $ctx[0][$i] = self::$iv[$i];
    }
    for ($i = 256; $i--;) {
      $ctx[3][$i] = 0;
    }
    $zero = self::new64(0, 0);
    $ctx[1][0] = $zero;
    $ctx[1][1] = $zero;
    $ctx[2][0] = $zero;
    $ctx[2][1] = $zero;
    return $ctx;
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $ctx
   * @param SplFixedArray $buf
   * @return void
   * @throws SodiumException
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   * @psalm-suppress MixedAssignment
   */
  protected static function compress(SplFixedArray $ctx, SplFixedArray $buf) {
    $m = new SplFixedArray(16);
    $v = new SplFixedArray(16);
    for ($i = 16; $i--;) {
      $m[$i] = self::load64($buf, $i << 3);
    }
    for ($i = 8; $i--;) {
      $v[$i] = $ctx[0][$i];
    }
    $v[8] = self::$iv[0];
    $v[9] = self::$iv[1];
    $v[10] = self::$iv[2];
    $v[11] = self::$iv[3];
    $v[12] = self::xor64($ctx[1][0], self::$iv[4]);
    $v[13] = self::xor64($ctx[1][1], self::$iv[5]);
    $v[14] = self::xor64($ctx[2][0], self::$iv[6]);
    $v[15] = self::xor64($ctx[2][1], self::$iv[7]);
    for ($r = 0; $r < 12; ++$r) {
      $v = self::G($r, 0, 0, 4, 8, 12, $v, $m);
      $v = self::G($r, 1, 1, 5, 9, 13, $v, $m);
      $v = self::G($r, 2, 2, 6, 10, 14, $v, $m);
      $v = self::G($r, 3, 3, 7, 11, 15, $v, $m);
      $v = self::G($r, 4, 0, 5, 10, 15, $v, $m);
      $v = self::G($r, 5, 1, 6, 11, 12, $v, $m);
      $v = self::G($r, 6, 2, 7, 8, 13, $v, $m);
      $v = self::G($r, 7, 3, 4, 9, 14, $v, $m);
    }
    for ($i = 8; $i--;) {
      $ctx[0][$i] = self::xor64($ctx[0][$i], self::xor64($v[$i], $v[$i + 8]));
    }
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param int $r
   * @param int $i
   * @param int $a
   * @param int $b
   * @param int $c
   * @param int $d
   * @param SplFixedArray $v
   * @param SplFixedArray $m
   * @return SplFixedArray
   * @throws SodiumException
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedArrayOffset
   */
  public static function G($r, $i, $a, $b, $c, $d, SplFixedArray $v, SplFixedArray $m) {
    $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][$i << 1]]);
    $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 32);
    $v[$c] = self::add64($v[$c], $v[$d]);
    $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 24);
    $v[$a] = self::add364($v[$a], $v[$b], $m[self::$sigma[$r][($i << 1) + 1]]);
    $v[$d] = self::rotr64(self::xor64($v[$d], $v[$a]), 16);
    $v[$c] = self::add64($v[$c], $v[$d]);
    $v[$b] = self::rotr64(self::xor64($v[$b], $v[$c]), 63);
    return $v;
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $ctx
   * @param int $inc
   * @return void
   * @throws SodiumException
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   */
  public static function increment_counter($ctx, $inc) {
    if ($inc < 0) {
      throw new SodiumException('Increasing by a negative number makes no sense.');
    }
    $t = self::to64($inc);

    # S->t is $ctx[1] in our implementation

    # S->t[0] = ( uint64_t )( t >> 0 );
    $ctx[1][0] = self::add64($ctx[1][0], $t);

    # S->t[1] += ( S->t[0] < inc );
    if (!$ctx[1][0] instanceof ParagonIE_Sodium_Core32_Int64) {
      throw new TypeError('Not an int64');
    }

    /** @var ParagonIE_Sodium_Core32_Int64 $c*/
    $c = $ctx[1][0];
    if ($c
      ->isLessThanInt($inc)) {
      $ctx[1][1] = self::add64($ctx[1][1], self::to64(1));
    }
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $ctx
   * @param SplFixedArray $p
   * @param int $plen
   * @return void
   * @throws SodiumException
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedAssignment
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   * @psalm-suppress MixedArrayOffset
   * @psalm-suppress MixedMethodCall
   * @psalm-suppress MixedOperand
   */
  public static function update(SplFixedArray $ctx, SplFixedArray $p, $plen) {
    self::pseudoConstructor();
    $offset = 0;
    while ($plen > 0) {
      $left = $ctx[4];
      $fill = 256 - $left;
      if ($plen > $fill) {

        # memcpy( S->buf + left, in, fill ); /* Fill buffer */
        for ($i = $fill; $i--;) {
          $ctx[3][$i + $left] = $p[$i + $offset];
        }

        # S->buflen += fill;
        $ctx[4] += $fill;

        # blake2b_increment_counter( S, BLAKE2B_BLOCKBYTES );
        self::increment_counter($ctx, 128);

        # blake2b_compress( S, S->buf ); /* Compress */
        self::compress($ctx, $ctx[3]);

        # memcpy( S->buf, S->buf + BLAKE2B_BLOCKBYTES, BLAKE2B_BLOCKBYTES ); /* Shift buffer left */
        for ($i = 128; $i--;) {
          $ctx[3][$i] = $ctx[3][$i + 128];
        }

        # S->buflen -= BLAKE2B_BLOCKBYTES;
        $ctx[4] -= 128;

        # in += fill;
        $offset += $fill;

        # inlen -= fill;
        $plen -= $fill;
      }
      else {
        for ($i = $plen; $i--;) {
          $ctx[3][$i + $left] = $p[$i + $offset];
        }
        $ctx[4] += $plen;
        $offset += $plen;
        $plen -= $plen;
      }
    }
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $ctx
   * @param SplFixedArray $out
   * @return SplFixedArray
   * @throws SodiumException
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedAssignment
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   * @psalm-suppress MixedArrayOffset
   * @psalm-suppress MixedMethodCall
   * @psalm-suppress MixedOperand
   */
  public static function finish(SplFixedArray $ctx, SplFixedArray $out) {
    self::pseudoConstructor();
    if ($ctx[4] > 128) {
      self::increment_counter($ctx, 128);
      self::compress($ctx, $ctx[3]);
      $ctx[4] -= 128;
      if ($ctx[4] > 128) {
        throw new SodiumException('Failed to assert that buflen <= 128 bytes');
      }
      for ($i = $ctx[4]; $i--;) {
        $ctx[3][$i] = $ctx[3][$i + 128];
      }
    }
    self::increment_counter($ctx, $ctx[4]);
    $ctx[2][0] = self::new64(0xffffffff, 0xffffffff);
    for ($i = 256 - $ctx[4]; $i--;) {

      /** @var int $i */
      $ctx[3][$i + $ctx[4]] = 0;
    }
    self::compress($ctx, $ctx[3]);
    $i = (int) (($out
      ->getSize() - 1) / 8);
    for (; $i >= 0; --$i) {
      self::store64($out, $i << 3, $ctx[0][$i]);
    }
    return $out;
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray|null $key
   * @param int $outlen
   * @param SplFixedArray|null $salt
   * @param SplFixedArray|null $personal
   * @return SplFixedArray
   * @throws SodiumException
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedAssignment
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   * @psalm-suppress MixedMethodCall
   */
  public static function init($key = null, $outlen = 64, $salt = null, $personal = null) {
    self::pseudoConstructor();
    $klen = 0;
    if ($key !== null) {
      if (count($key) > 64) {
        throw new SodiumException('Invalid key size');
      }
      $klen = count($key);
    }
    if ($outlen > 64) {
      throw new SodiumException('Invalid output size');
    }
    $ctx = self::context();
    $p = new SplFixedArray(64);

    // Zero our param buffer...
    for ($i = 64; --$i;) {
      $p[$i] = 0;
    }
    $p[0] = $outlen;

    // digest_length
    $p[1] = $klen;

    // key_length
    $p[2] = 1;

    // fanout
    $p[3] = 1;

    // depth
    if ($salt instanceof SplFixedArray) {

      // salt: [32] through [47]
      for ($i = 0; $i < 16; ++$i) {
        $p[32 + $i] = (int) $salt[$i];
      }
    }
    if ($personal instanceof SplFixedArray) {

      // personal: [48] through [63]
      for ($i = 0; $i < 16; ++$i) {
        $p[48 + $i] = (int) $personal[$i];
      }
    }
    $ctx[0][0] = self::xor64($ctx[0][0], self::load64($p, 0));
    if ($salt instanceof SplFixedArray || $personal instanceof SplFixedArray) {

      // We need to do what blake2b_init_param() does:
      for ($i = 1; $i < 8; ++$i) {
        $ctx[0][$i] = self::xor64($ctx[0][$i], self::load64($p, $i << 3));
      }
    }
    if ($klen > 0 && $key instanceof SplFixedArray) {
      $block = new SplFixedArray(128);
      for ($i = 128; $i--;) {
        $block[$i] = 0;
      }
      for ($i = $klen; $i--;) {
        $block[$i] = $key[$i];
      }
      self::update($ctx, $block, 128);
      $ctx[4] = 128;
    }
    return $ctx;
  }

  /**
   * Convert a string into an SplFixedArray of integers
   *
   * @internal You should not use this directly from another application
   *
   * @param string $str
   * @return SplFixedArray
   */
  public static function stringToSplFixedArray($str = '') {
    $values = unpack('C*', $str);
    return SplFixedArray::fromArray(array_values($values));
  }

  /**
   * Convert an SplFixedArray of integers into a string
   *
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $a
   * @return string
   */
  public static function SplFixedArrayToString(SplFixedArray $a) {

    /**
     * @var array<int, string|int>
     */
    $arr = $a
      ->toArray();
    $c = $a
      ->count();
    array_unshift($arr, str_repeat('C', $c));
    return (string) call_user_func_array('pack', $arr);
  }

  /**
   * @internal You should not use this directly from another application
   *
   * @param SplFixedArray $ctx
   * @return string
   * @throws TypeError
   * @psalm-suppress MixedArgument
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   * @psalm-suppress MixedMethodCall
   */
  public static function contextToString(SplFixedArray $ctx) {
    $str = '';

    /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */
    $ctxA = $ctx[0]
      ->toArray();

    # uint64_t h[8];
    for ($i = 0; $i < 8; ++$i) {
      if (!$ctxA[$i] instanceof ParagonIE_Sodium_Core32_Int64) {
        throw new TypeError('Not an instance of Int64');
      }

      /** @var ParagonIE_Sodium_Core32_Int64 $ctxAi */
      $ctxAi = $ctxA[$i];
      $str .= $ctxAi
        ->toReverseString();
    }

    # uint64_t t[2];

    # uint64_t f[2];
    for ($i = 1; $i < 3; ++$i) {

      /** @var array<int, ParagonIE_Sodium_Core32_Int64> $ctxA */
      $ctxA = $ctx[$i]
        ->toArray();

      /** @var ParagonIE_Sodium_Core32_Int64 $ctxA1 */
      $ctxA1 = $ctxA[0];

      /** @var ParagonIE_Sodium_Core32_Int64 $ctxA2 */
      $ctxA2 = $ctxA[1];
      $str .= $ctxA1
        ->toReverseString();
      $str .= $ctxA2
        ->toReverseString();
    }

    # uint8_t buf[2 * 128];
    $str .= self::SplFixedArrayToString($ctx[3]);

    /** @var int $ctx4 */
    $ctx4 = $ctx[4];

    # size_t buflen;
    $str .= implode('', array(
      self::intToChr($ctx4 & 0xff),
      self::intToChr($ctx4 >> 8 & 0xff),
      self::intToChr($ctx4 >> 16 & 0xff),
      self::intToChr($ctx4 >> 24 & 0xff),
      "\0\0\0\0",
    ));

    # uint8_t last_node;
    return $str . self::intToChr($ctx[5]) . str_repeat("\0", 23);
  }

  /**
   * Creates an SplFixedArray containing other SplFixedArray elements, from
   * a string (compatible with \Sodium\crypto_generichash_{init, update, final})
   *
   * @internal You should not use this directly from another application
   *
   * @param string $string
   * @return SplFixedArray
   * @throws SodiumException
   * @throws TypeError
   * @psalm-suppress MixedArrayAccess
   * @psalm-suppress MixedArrayAssignment
   */
  public static function stringToContext($string) {
    $ctx = self::context();

    # uint64_t h[8];
    for ($i = 0; $i < 8; ++$i) {
      $ctx[0][$i] = ParagonIE_Sodium_Core32_Int64::fromReverseString(self::substr($string, ($i << 3) + 0, 8));
    }

    # uint64_t t[2];

    # uint64_t f[2];
    for ($i = 1; $i < 3; ++$i) {
      $ctx[$i][1] = ParagonIE_Sodium_Core32_Int64::fromReverseString(self::substr($string, 72 + ($i - 1 << 4), 8));
      $ctx[$i][0] = ParagonIE_Sodium_Core32_Int64::fromReverseString(self::substr($string, 64 + ($i - 1 << 4), 8));
    }

    # uint8_t buf[2 * 128];
    $ctx[3] = self::stringToSplFixedArray(self::substr($string, 96, 256));

    # uint8_t buf[2 * 128];
    $int = 0;
    for ($i = 0; $i < 8; ++$i) {
      $int |= self::chrToInt($string[352 + $i]) << ($i << 3);
    }
    $ctx[4] = $int;
    return $ctx;
  }

}

Classes

Namesort descending Description
ParagonIE_Sodium_Core32_BLAKE2b Class ParagonIE_Sodium_Core_BLAKE2b