2018-01-14 17:17:34 +11:00
|
|
|
/*
|
2018-08-04 15:18:16 +10:00
|
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
2018-01-14 17:17:34 +11:00
|
|
|
*
|
|
|
|
* Copyright 2015 Danny Robson <danny@nerdcruft.net>
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include "xxtea.hpp"
|
|
|
|
|
|
|
|
#include <cstring>
|
|
|
|
|
|
|
|
// test vectors: http://www.cix.co.uk/~klockstone/teavect.htm
|
|
|
|
|
|
|
|
using cruft::crypto::block::XXTEA;
|
|
|
|
|
|
|
|
|
|
|
|
//-----------------------------------------------------------------------------
|
|
|
|
static const uint32_t MAGIC = 0x9E3779B9;
|
|
|
|
|
|
|
|
|
|
|
|
//-----------------------------------------------------------------------------
|
|
|
|
static constexpr
|
|
|
|
uint32_t
|
|
|
|
mix (uint32_t Z,
|
|
|
|
uint32_t Y,
|
|
|
|
uint32_t S,
|
|
|
|
size_t E,
|
|
|
|
size_t P,
|
|
|
|
const uint32_t *restrict K)
|
|
|
|
{
|
|
|
|
return ((Z >> 5 ^ Y << 2) + (Y >> 3 ^ Z << 4)) ^ ((S ^ Y) + (K[(P & 3) ^ E] ^ Z));
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
//-----------------------------------------------------------------------------
|
|
|
|
XXTEA::XXTEA (key_t _key):
|
|
|
|
m_key (_key)
|
|
|
|
{ ; }
|
|
|
|
|
|
|
|
|
|
|
|
//-----------------------------------------------------------------------------
|
|
|
|
void
|
|
|
|
XXTEA::encrypt (uint32_t *restrict data, size_t count)
|
|
|
|
{
|
|
|
|
if (count < 2)
|
|
|
|
throw std::invalid_argument ("minimum blocksize is 64 bits");
|
|
|
|
|
|
|
|
uint32_t sum = 0;
|
|
|
|
uint32_t z = data[count - 1];
|
|
|
|
uint32_t y, p;
|
|
|
|
|
|
|
|
unsigned rounds = 6 + 52 / count;
|
|
|
|
|
|
|
|
do {
|
|
|
|
sum += MAGIC;
|
|
|
|
uint32_t e = (sum >> 2) & 3;
|
|
|
|
|
|
|
|
for (p = 0; p < count - 1; p++) {
|
|
|
|
y = data[p + 1];
|
|
|
|
z = data[p] += mix (z, y, sum, e, p, m_key.data ());
|
|
|
|
}
|
|
|
|
|
|
|
|
y = data[0];
|
|
|
|
z = data[count - 1] += mix (z, y, sum, e, p, m_key.data ());
|
|
|
|
} while (--rounds);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
//-----------------------------------------------------------------------------
|
|
|
|
void
|
|
|
|
XXTEA::decrypt (uint32_t *restrict data, size_t count)
|
|
|
|
{
|
|
|
|
if (count < 2)
|
|
|
|
throw std::invalid_argument ("minimum blocksize is 64 bits");
|
|
|
|
|
|
|
|
uint32_t y, z, sum;
|
|
|
|
uint32_t rounds;
|
|
|
|
size_t p;
|
|
|
|
|
|
|
|
rounds = 6 + 52 / count;
|
|
|
|
sum = rounds * MAGIC;
|
|
|
|
y = data[0];
|
|
|
|
|
|
|
|
do {
|
|
|
|
uint32_t e = (sum >> 2) & 3;
|
|
|
|
|
|
|
|
for (p = count - 1; p > 0; p--) {
|
|
|
|
z = data[p - 1];
|
|
|
|
y = data[p ] -= mix (z, y, sum, e, p, m_key.data ());
|
|
|
|
}
|
|
|
|
|
|
|
|
z = data[count - 1];
|
|
|
|
y = data[ 0] -= mix (z, y, sum, e, p, m_key.data ());
|
|
|
|
|
|
|
|
sum -= MAGIC;
|
|
|
|
} while (--rounds);
|
|
|
|
}
|