Tables64kGcmMultiplier.cs 2.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384
  1. #if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR)
  2. #pragma warning disable
  3. using System;
  4. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Crypto.Utilities;
  5. using Best.HTTP.SecureProtocol.Org.BouncyCastle.Utilities;
  6. namespace Best.HTTP.SecureProtocol.Org.BouncyCastle.Crypto.Modes.Gcm
  7. {
  8. public class Tables64kGcmMultiplier
  9. : IGcmMultiplier
  10. {
  11. private byte[] H;
  12. private GcmUtilities.FieldElement[][] T;
  13. public void Init(byte[] H)
  14. {
  15. if (T == null)
  16. {
  17. T = new GcmUtilities.FieldElement[16][];
  18. }
  19. else if (Arrays.AreEqual(this.H, H))
  20. {
  21. return;
  22. }
  23. this.H = Arrays.Clone(H);
  24. for (int i = 0; i < 16; ++i)
  25. {
  26. GcmUtilities.FieldElement[] t = T[i] = new GcmUtilities.FieldElement[256];
  27. // t[0] = 0
  28. if (i == 0)
  29. {
  30. // t[1] = H.p^7
  31. GcmUtilities.AsFieldElement(this.H, out t[1]);
  32. GcmUtilities.MultiplyP7(ref t[1]);
  33. }
  34. else
  35. {
  36. // t[1] = T[i-1][1].p^8
  37. GcmUtilities.MultiplyP8(ref T[i - 1][1], out t[1]);
  38. }
  39. for (int n = 1; n < 128; ++n)
  40. {
  41. // t[2.n] = t[n].p^-1
  42. GcmUtilities.DivideP(ref t[n], out t[n << 1]);
  43. // t[2.n + 1] = t[2.n] + t[1]
  44. GcmUtilities.Xor(ref t[n << 1], ref t[1], out t[(n << 1) + 1]);
  45. }
  46. }
  47. }
  48. public void MultiplyH(byte[] x)
  49. {
  50. //GcmUtilities.FieldElement z = T[15][x[15]];
  51. //for (int i = 14; i >= 0; --i)
  52. //{
  53. // GcmUtilities.Xor(ref z, ref T[i][x[i]]);
  54. //}
  55. //GcmUtilities.AsBytes(ref z, x);
  56. GcmUtilities.FieldElement[] t = T[15];
  57. int tPos = x[15];
  58. ulong z0 = t[tPos].n0, z1 = t[tPos].n1;
  59. for (int i = 14; i >= 0; --i)
  60. {
  61. t = T[i];
  62. tPos = x[i];
  63. z0 ^= t[tPos].n0;
  64. z1 ^= t[tPos].n1;
  65. }
  66. GcmUtilities.AsBytes(z0, z1, x);
  67. }
  68. }
  69. }
  70. #pragma warning restore
  71. #endif