diff NaCl/crypto_core/hsalsa20.cs @ 20:c873e3dd73fe

Added NaCl cryptography code
author Ivo Smits <Ivo@UCIS.nl>
date Mon, 15 Apr 2013 00:43:48 +0200
parents
children
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/NaCl/crypto_core/hsalsa20.cs	Mon Apr 15 00:43:48 2013 +0200
@@ -0,0 +1,114 @@
+using System;
+
+namespace UCIS.NaCl.crypto_core {
+	unsafe static class hsalsa20 {
+		static Boolean UseNativeFunctions = false;
+		static unsafe internal Boolean EnableNativeImplementation() {
+			UseNativeFunctions = false;
+			Byte* dummy = stackalloc Byte[32];
+			try {
+				if (Native.crypto_core_hsalsa20(dummy, dummy, dummy, dummy) != 0) return false;
+			} catch (Exception) {
+				return false;
+			}
+			return UseNativeFunctions = true;
+		}
+
+		const int ROUNDS = 20;
+
+		static UInt32 rotate(UInt32 u, int c) {
+			return (u << c) | (u >> (32 - c));
+		}
+
+		static UInt32 load_littleendian(Byte* x) {
+			return (UInt32)(x[0] | (x[1] << 8) | (x[2] << 16) | (x[3] << 24));
+		}
+
+		static void store_littleendian(Byte* x, UInt32 u) {
+			x[0] = (Byte)u; u >>= 8;
+			x[1] = (Byte)u; u >>= 8;
+			x[2] = (Byte)u; u >>= 8;
+			x[3] = (Byte)u;
+		}
+
+		public static void crypto_core(Byte* outv, Byte* inv, Byte* k, Byte[] c) {
+			fixed (byte* cp = c) crypto_core(outv, inv, k, cp);
+		}
+		public static void crypto_core(Byte* outv, Byte* inv, Byte* k, Byte* c) {
+			if (UseNativeFunctions) {
+				UInt64* invp = stackalloc UInt64[2];
+				invp[0] = invp[1] = 0;
+				if (inv == null) inv = (Byte*)invp;
+				Native.crypto_core_hsalsa20(outv, inv, k, c);
+				return;
+			}
+
+			UInt32 x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15;
+
+			x0 = load_littleendian(c + 0);
+			x1 = load_littleendian(k + 0);
+			x2 = load_littleendian(k + 4);
+			x3 = load_littleendian(k + 8);
+			x4 = load_littleendian(k + 12);
+			x5 = load_littleendian(c + 4);
+			if (inv != null) {
+				x6 = load_littleendian(inv + 0);
+				x7 = load_littleendian(inv + 4);
+				x8 = load_littleendian(inv + 8);
+				x9 = load_littleendian(inv + 12);
+			} else {
+				x6 = x7 = x8 = x9 = 0;
+			}
+			x10 = load_littleendian(c + 8);
+			x11 = load_littleendian(k + 16);
+			x12 = load_littleendian(k + 20);
+			x13 = load_littleendian(k + 24);
+			x14 = load_littleendian(k + 28);
+			x15 = load_littleendian(c + 12);
+
+			for (int i = ROUNDS; i > 0; i -= 2) {
+				x4 ^= rotate(x0 + x12, 7);
+				x8 ^= rotate(x4 + x0, 9);
+				x12 ^= rotate(x8 + x4, 13);
+				x0 ^= rotate(x12 + x8, 18);
+				x9 ^= rotate(x5 + x1, 7);
+				x13 ^= rotate(x9 + x5, 9);
+				x1 ^= rotate(x13 + x9, 13);
+				x5 ^= rotate(x1 + x13, 18);
+				x14 ^= rotate(x10 + x6, 7);
+				x2 ^= rotate(x14 + x10, 9);
+				x6 ^= rotate(x2 + x14, 13);
+				x10 ^= rotate(x6 + x2, 18);
+				x3 ^= rotate(x15 + x11, 7);
+				x7 ^= rotate(x3 + x15, 9);
+				x11 ^= rotate(x7 + x3, 13);
+				x15 ^= rotate(x11 + x7, 18);
+				x1 ^= rotate(x0 + x3, 7);
+				x2 ^= rotate(x1 + x0, 9);
+				x3 ^= rotate(x2 + x1, 13);
+				x0 ^= rotate(x3 + x2, 18);
+				x6 ^= rotate(x5 + x4, 7);
+				x7 ^= rotate(x6 + x5, 9);
+				x4 ^= rotate(x7 + x6, 13);
+				x5 ^= rotate(x4 + x7, 18);
+				x11 ^= rotate(x10 + x9, 7);
+				x8 ^= rotate(x11 + x10, 9);
+				x9 ^= rotate(x8 + x11, 13);
+				x10 ^= rotate(x9 + x8, 18);
+				x12 ^= rotate(x15 + x14, 7);
+				x13 ^= rotate(x12 + x15, 9);
+				x14 ^= rotate(x13 + x12, 13);
+				x15 ^= rotate(x14 + x13, 18);
+			}
+
+			store_littleendian(outv + 0, x0);
+			store_littleendian(outv + 4, x5);
+			store_littleendian(outv + 8, x10);
+			store_littleendian(outv + 12, x15);
+			store_littleendian(outv + 16, x6);
+			store_littleendian(outv + 20, x7);
+			store_littleendian(outv + 24, x8);
+			store_littleendian(outv + 28, x9);
+		}
+	}
+}
\ No newline at end of file