diff options
Diffstat (limited to '')
| -rw-r--r-- | vendor/paragonie/sodium_compat/src/Core/X25519.php | 327 |
1 files changed, 327 insertions, 0 deletions
diff --git a/vendor/paragonie/sodium_compat/src/Core/X25519.php b/vendor/paragonie/sodium_compat/src/Core/X25519.php new file mode 100644 index 0000000..732bb65 --- /dev/null +++ b/vendor/paragonie/sodium_compat/src/Core/X25519.php @@ -0,0 +1,327 @@ +<?php + +if (class_exists('ParagonIE_Sodium_Core_X25519', false)) { + return; +} + +/** + * Class ParagonIE_Sodium_Core_X25519 + */ +abstract class ParagonIE_Sodium_Core_X25519 extends ParagonIE_Sodium_Core_Curve25519 +{ + /** + * Alters the objects passed to this method in place. + * + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @param ParagonIE_Sodium_Core_Curve25519_Fe $g + * @param int $b + * @return void + * @psalm-suppress MixedAssignment + */ + public static function fe_cswap( + ParagonIE_Sodium_Core_Curve25519_Fe $f, + ParagonIE_Sodium_Core_Curve25519_Fe $g, + $b = 0 + ) { + $f0 = (int) $f[0]; + $f1 = (int) $f[1]; + $f2 = (int) $f[2]; + $f3 = (int) $f[3]; + $f4 = (int) $f[4]; + $f5 = (int) $f[5]; + $f6 = (int) $f[6]; + $f7 = (int) $f[7]; + $f8 = (int) $f[8]; + $f9 = (int) $f[9]; + $g0 = (int) $g[0]; + $g1 = (int) $g[1]; + $g2 = (int) $g[2]; + $g3 = (int) $g[3]; + $g4 = (int) $g[4]; + $g5 = (int) $g[5]; + $g6 = (int) $g[6]; + $g7 = (int) $g[7]; + $g8 = (int) $g[8]; + $g9 = (int) $g[9]; + $b = -$b; + $x0 = ($f0 ^ $g0) & $b; + $x1 = ($f1 ^ $g1) & $b; + $x2 = ($f2 ^ $g2) & $b; + $x3 = ($f3 ^ $g3) & $b; + $x4 = ($f4 ^ $g4) & $b; + $x5 = ($f5 ^ $g5) & $b; + $x6 = ($f6 ^ $g6) & $b; + $x7 = ($f7 ^ $g7) & $b; + $x8 = ($f8 ^ $g8) & $b; + $x9 = ($f9 ^ $g9) & $b; + $f[0] = $f0 ^ $x0; + $f[1] = $f1 ^ $x1; + $f[2] = $f2 ^ $x2; + $f[3] = $f3 ^ $x3; + $f[4] = $f4 ^ $x4; + $f[5] = $f5 ^ $x5; + $f[6] = $f6 ^ $x6; + $f[7] = $f7 ^ $x7; + $f[8] = $f8 ^ $x8; + $f[9] = $f9 ^ $x9; + $g[0] = $g0 ^ $x0; + $g[1] = $g1 ^ $x1; + $g[2] = $g2 ^ $x2; + $g[3] = $g3 ^ $x3; + $g[4] = $g4 ^ $x4; + $g[5] = $g5 ^ $x5; + $g[6] = $g6 ^ $x6; + $g[7] = $g7 ^ $x7; + $g[8] = $g8 ^ $x8; + $g[9] = $g9 ^ $x9; + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $f + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function fe_mul121666(ParagonIE_Sodium_Core_Curve25519_Fe $f) + { + $h = array( + self::mul((int) $f[0], 121666, 17), + self::mul((int) $f[1], 121666, 17), + self::mul((int) $f[2], 121666, 17), + self::mul((int) $f[3], 121666, 17), + self::mul((int) $f[4], 121666, 17), + self::mul((int) $f[5], 121666, 17), + self::mul((int) $f[6], 121666, 17), + self::mul((int) $f[7], 121666, 17), + self::mul((int) $f[8], 121666, 17), + self::mul((int) $f[9], 121666, 17) + ); + + /** @var int $carry9 */ + $carry9 = ($h[9] + (1 << 24)) >> 25; + $h[0] += self::mul($carry9, 19, 5); + $h[9] -= $carry9 << 25; + /** @var int $carry1 */ + $carry1 = ($h[1] + (1 << 24)) >> 25; + $h[2] += $carry1; + $h[1] -= $carry1 << 25; + /** @var int $carry3 */ + $carry3 = ($h[3] + (1 << 24)) >> 25; + $h[4] += $carry3; + $h[3] -= $carry3 << 25; + /** @var int $carry5 */ + $carry5 = ($h[5] + (1 << 24)) >> 25; + $h[6] += $carry5; + $h[5] -= $carry5 << 25; + /** @var int $carry7 */ + $carry7 = ($h[7] + (1 << 24)) >> 25; + $h[8] += $carry7; + $h[7] -= $carry7 << 25; + + /** @var int $carry0 */ + $carry0 = ($h[0] + (1 << 25)) >> 26; + $h[1] += $carry0; + $h[0] -= $carry0 << 26; + /** @var int $carry2 */ + $carry2 = ($h[2] + (1 << 25)) >> 26; + $h[3] += $carry2; + $h[2] -= $carry2 << 26; + /** @var int $carry4 */ + $carry4 = ($h[4] + (1 << 25)) >> 26; + $h[5] += $carry4; + $h[4] -= $carry4 << 26; + /** @var int $carry6 */ + $carry6 = ($h[6] + (1 << 25)) >> 26; + $h[7] += $carry6; + $h[6] -= $carry6 << 26; + /** @var int $carry8 */ + $carry8 = ($h[8] + (1 << 25)) >> 26; + $h[9] += $carry8; + $h[8] -= $carry8 << 26; + + foreach ($h as $i => $value) { + $h[$i] = (int) $value; + } + return ParagonIE_Sodium_Core_Curve25519_Fe::fromArray($h); + } + + /** + * @internal You should not use this directly from another application + * + * Inline comments preceded by # are from libsodium's ref10 code. + * + * @param string $n + * @param string $p + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_scalarmult_curve25519_ref10($n, $p) + { + # for (i = 0;i < 32;++i) e[i] = n[i]; + $e = '' . $n; + # e[0] &= 248; + $e[0] = self::intToChr( + self::chrToInt($e[0]) & 248 + ); + # e[31] &= 127; + # e[31] |= 64; + $e[31] = self::intToChr( + (self::chrToInt($e[31]) & 127) | 64 + ); + # fe_frombytes(x1,p); + $x1 = self::fe_frombytes($p); + # fe_1(x2); + $x2 = self::fe_1(); + # fe_0(z2); + $z2 = self::fe_0(); + # fe_copy(x3,x1); + $x3 = self::fe_copy($x1); + # fe_1(z3); + $z3 = self::fe_1(); + + # swap = 0; + /** @var int $swap */ + $swap = 0; + + # for (pos = 254;pos >= 0;--pos) { + for ($pos = 254; $pos >= 0; --$pos) { + # b = e[pos / 8] >> (pos & 7); + /** @var int $b */ + $b = self::chrToInt( + $e[(int) floor($pos / 8)] + ) >> ($pos & 7); + # b &= 1; + $b &= 1; + # swap ^= b; + $swap ^= $b; + # fe_cswap(x2,x3,swap); + self::fe_cswap($x2, $x3, $swap); + # fe_cswap(z2,z3,swap); + self::fe_cswap($z2, $z3, $swap); + # swap = b; + $swap = $b; + # fe_sub(tmp0,x3,z3); + $tmp0 = self::fe_sub($x3, $z3); + # fe_sub(tmp1,x2,z2); + $tmp1 = self::fe_sub($x2, $z2); + + # fe_add(x2,x2,z2); + $x2 = self::fe_add($x2, $z2); + + # fe_add(z2,x3,z3); + $z2 = self::fe_add($x3, $z3); + + # fe_mul(z3,tmp0,x2); + $z3 = self::fe_mul($tmp0, $x2); + + # fe_mul(z2,z2,tmp1); + $z2 = self::fe_mul($z2, $tmp1); + + # fe_sq(tmp0,tmp1); + $tmp0 = self::fe_sq($tmp1); + + # fe_sq(tmp1,x2); + $tmp1 = self::fe_sq($x2); + + # fe_add(x3,z3,z2); + $x3 = self::fe_add($z3, $z2); + + # fe_sub(z2,z3,z2); + $z2 = self::fe_sub($z3, $z2); + + # fe_mul(x2,tmp1,tmp0); + $x2 = self::fe_mul($tmp1, $tmp0); + + # fe_sub(tmp1,tmp1,tmp0); + $tmp1 = self::fe_sub($tmp1, $tmp0); + + # fe_sq(z2,z2); + $z2 = self::fe_sq($z2); + + # fe_mul121666(z3,tmp1); + $z3 = self::fe_mul121666($tmp1); + + # fe_sq(x3,x3); + $x3 = self::fe_sq($x3); + + # fe_add(tmp0,tmp0,z3); + $tmp0 = self::fe_add($tmp0, $z3); + + # fe_mul(z3,x1,z2); + $z3 = self::fe_mul($x1, $z2); + + # fe_mul(z2,tmp1,tmp0); + $z2 = self::fe_mul($tmp1, $tmp0); + } + + # fe_cswap(x2,x3,swap); + self::fe_cswap($x2, $x3, $swap); + + # fe_cswap(z2,z3,swap); + self::fe_cswap($z2, $z3, $swap); + + # fe_invert(z2,z2); + $z2 = self::fe_invert($z2); + + # fe_mul(x2,x2,z2); + $x2 = self::fe_mul($x2, $z2); + # fe_tobytes(q,x2); + return self::fe_tobytes($x2); + } + + /** + * @internal You should not use this directly from another application + * + * @param ParagonIE_Sodium_Core_Curve25519_Fe $edwardsY + * @param ParagonIE_Sodium_Core_Curve25519_Fe $edwardsZ + * @return ParagonIE_Sodium_Core_Curve25519_Fe + */ + public static function edwards_to_montgomery( + ParagonIE_Sodium_Core_Curve25519_Fe $edwardsY, + ParagonIE_Sodium_Core_Curve25519_Fe $edwardsZ + ) { + $tempX = self::fe_add($edwardsZ, $edwardsY); + $tempZ = self::fe_sub($edwardsZ, $edwardsY); + $tempZ = self::fe_invert($tempZ); + return self::fe_mul($tempX, $tempZ); + } + + /** + * @internal You should not use this directly from another application + * + * @param string $n + * @return string + * @throws SodiumException + * @throws TypeError + */ + public static function crypto_scalarmult_curve25519_ref10_base($n) + { + # for (i = 0;i < 32;++i) e[i] = n[i]; + $e = '' . $n; + + # e[0] &= 248; + $e[0] = self::intToChr( + self::chrToInt($e[0]) & 248 + ); + + # e[31] &= 127; + # e[31] |= 64; + $e[31] = self::intToChr( + (self::chrToInt($e[31]) & 127) | 64 + ); + + $A = self::ge_scalarmult_base($e); + if ( + !($A->Y instanceof ParagonIE_Sodium_Core_Curve25519_Fe) + || + !($A->Z instanceof ParagonIE_Sodium_Core_Curve25519_Fe) + ) { + throw new TypeError('Null points encountered'); + } + $pk = self::edwards_to_montgomery($A->Y, $A->Z); + return self::fe_tobytes($pk); + } +} |