aes.js 7.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250
  1. (function() {
  2. var nodeEnv = typeof require !== 'undefined' && typeof process !== 'undefined';
  3. var __module = nodeEnv ? module : {exports:{}};
  4. var __filename = 'preview-scripts/__node_modules/browserify-aes/aes.js';
  5. var __require = nodeEnv ? function (request) {
  6. return cc.require(request);
  7. } : function (request) {
  8. return __quick_compile_project__.require(request, __filename);
  9. };
  10. function __define (exports, require, module) {
  11. if (!nodeEnv) {__quick_compile_project__.registerModule(__filename, module);}// based on the aes implimentation in triple sec
  12. // https://github.com/keybase/triplesec
  13. // which is in turn based on the one from crypto-js
  14. // https://code.google.com/p/crypto-js/
  15. var Buffer = require('safe-buffer').Buffer
  16. function asUInt32Array (buf) {
  17. if (!Buffer.isBuffer(buf)) buf = Buffer.from(buf)
  18. var len = (buf.length / 4) | 0
  19. var out = new Array(len)
  20. for (var i = 0; i < len; i++) {
  21. out[i] = buf.readUInt32BE(i * 4)
  22. }
  23. return out
  24. }
  25. function scrubVec (v) {
  26. for (var i = 0; i < v.length; v++) {
  27. v[i] = 0
  28. }
  29. }
  30. function cryptBlock (M, keySchedule, SUB_MIX, SBOX, nRounds) {
  31. var SUB_MIX0 = SUB_MIX[0]
  32. var SUB_MIX1 = SUB_MIX[1]
  33. var SUB_MIX2 = SUB_MIX[2]
  34. var SUB_MIX3 = SUB_MIX[3]
  35. var s0 = M[0] ^ keySchedule[0]
  36. var s1 = M[1] ^ keySchedule[1]
  37. var s2 = M[2] ^ keySchedule[2]
  38. var s3 = M[3] ^ keySchedule[3]
  39. var t0, t1, t2, t3
  40. var ksRow = 4
  41. for (var round = 1; round < nRounds; round++) {
  42. t0 = SUB_MIX0[s0 >>> 24] ^ SUB_MIX1[(s1 >>> 16) & 0xff] ^ SUB_MIX2[(s2 >>> 8) & 0xff] ^ SUB_MIX3[s3 & 0xff] ^ keySchedule[ksRow++]
  43. t1 = SUB_MIX0[s1 >>> 24] ^ SUB_MIX1[(s2 >>> 16) & 0xff] ^ SUB_MIX2[(s3 >>> 8) & 0xff] ^ SUB_MIX3[s0 & 0xff] ^ keySchedule[ksRow++]
  44. t2 = SUB_MIX0[s2 >>> 24] ^ SUB_MIX1[(s3 >>> 16) & 0xff] ^ SUB_MIX2[(s0 >>> 8) & 0xff] ^ SUB_MIX3[s1 & 0xff] ^ keySchedule[ksRow++]
  45. t3 = SUB_MIX0[s3 >>> 24] ^ SUB_MIX1[(s0 >>> 16) & 0xff] ^ SUB_MIX2[(s1 >>> 8) & 0xff] ^ SUB_MIX3[s2 & 0xff] ^ keySchedule[ksRow++]
  46. s0 = t0
  47. s1 = t1
  48. s2 = t2
  49. s3 = t3
  50. }
  51. t0 = ((SBOX[s0 >>> 24] << 24) | (SBOX[(s1 >>> 16) & 0xff] << 16) | (SBOX[(s2 >>> 8) & 0xff] << 8) | SBOX[s3 & 0xff]) ^ keySchedule[ksRow++]
  52. t1 = ((SBOX[s1 >>> 24] << 24) | (SBOX[(s2 >>> 16) & 0xff] << 16) | (SBOX[(s3 >>> 8) & 0xff] << 8) | SBOX[s0 & 0xff]) ^ keySchedule[ksRow++]
  53. t2 = ((SBOX[s2 >>> 24] << 24) | (SBOX[(s3 >>> 16) & 0xff] << 16) | (SBOX[(s0 >>> 8) & 0xff] << 8) | SBOX[s1 & 0xff]) ^ keySchedule[ksRow++]
  54. t3 = ((SBOX[s3 >>> 24] << 24) | (SBOX[(s0 >>> 16) & 0xff] << 16) | (SBOX[(s1 >>> 8) & 0xff] << 8) | SBOX[s2 & 0xff]) ^ keySchedule[ksRow++]
  55. t0 = t0 >>> 0
  56. t1 = t1 >>> 0
  57. t2 = t2 >>> 0
  58. t3 = t3 >>> 0
  59. return [t0, t1, t2, t3]
  60. }
  61. // AES constants
  62. var RCON = [0x00, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36]
  63. var G = (function () {
  64. // Compute double table
  65. var d = new Array(256)
  66. for (var j = 0; j < 256; j++) {
  67. if (j < 128) {
  68. d[j] = j << 1
  69. } else {
  70. d[j] = (j << 1) ^ 0x11b
  71. }
  72. }
  73. var SBOX = []
  74. var INV_SBOX = []
  75. var SUB_MIX = [[], [], [], []]
  76. var INV_SUB_MIX = [[], [], [], []]
  77. // Walk GF(2^8)
  78. var x = 0
  79. var xi = 0
  80. for (var i = 0; i < 256; ++i) {
  81. // Compute sbox
  82. var sx = xi ^ (xi << 1) ^ (xi << 2) ^ (xi << 3) ^ (xi << 4)
  83. sx = (sx >>> 8) ^ (sx & 0xff) ^ 0x63
  84. SBOX[x] = sx
  85. INV_SBOX[sx] = x
  86. // Compute multiplication
  87. var x2 = d[x]
  88. var x4 = d[x2]
  89. var x8 = d[x4]
  90. // Compute sub bytes, mix columns tables
  91. var t = (d[sx] * 0x101) ^ (sx * 0x1010100)
  92. SUB_MIX[0][x] = (t << 24) | (t >>> 8)
  93. SUB_MIX[1][x] = (t << 16) | (t >>> 16)
  94. SUB_MIX[2][x] = (t << 8) | (t >>> 24)
  95. SUB_MIX[3][x] = t
  96. // Compute inv sub bytes, inv mix columns tables
  97. t = (x8 * 0x1010101) ^ (x4 * 0x10001) ^ (x2 * 0x101) ^ (x * 0x1010100)
  98. INV_SUB_MIX[0][sx] = (t << 24) | (t >>> 8)
  99. INV_SUB_MIX[1][sx] = (t << 16) | (t >>> 16)
  100. INV_SUB_MIX[2][sx] = (t << 8) | (t >>> 24)
  101. INV_SUB_MIX[3][sx] = t
  102. if (x === 0) {
  103. x = xi = 1
  104. } else {
  105. x = x2 ^ d[d[d[x8 ^ x2]]]
  106. xi ^= d[d[xi]]
  107. }
  108. }
  109. return {
  110. SBOX: SBOX,
  111. INV_SBOX: INV_SBOX,
  112. SUB_MIX: SUB_MIX,
  113. INV_SUB_MIX: INV_SUB_MIX
  114. }
  115. })()
  116. function AES (key) {
  117. this._key = asUInt32Array(key)
  118. this._reset()
  119. }
  120. AES.blockSize = 4 * 4
  121. AES.keySize = 256 / 8
  122. AES.prototype.blockSize = AES.blockSize
  123. AES.prototype.keySize = AES.keySize
  124. AES.prototype._reset = function () {
  125. var keyWords = this._key
  126. var keySize = keyWords.length
  127. var nRounds = keySize + 6
  128. var ksRows = (nRounds + 1) * 4
  129. var keySchedule = []
  130. for (var k = 0; k < keySize; k++) {
  131. keySchedule[k] = keyWords[k]
  132. }
  133. for (k = keySize; k < ksRows; k++) {
  134. var t = keySchedule[k - 1]
  135. if (k % keySize === 0) {
  136. t = (t << 8) | (t >>> 24)
  137. t =
  138. (G.SBOX[t >>> 24] << 24) |
  139. (G.SBOX[(t >>> 16) & 0xff] << 16) |
  140. (G.SBOX[(t >>> 8) & 0xff] << 8) |
  141. (G.SBOX[t & 0xff])
  142. t ^= RCON[(k / keySize) | 0] << 24
  143. } else if (keySize > 6 && k % keySize === 4) {
  144. t =
  145. (G.SBOX[t >>> 24] << 24) |
  146. (G.SBOX[(t >>> 16) & 0xff] << 16) |
  147. (G.SBOX[(t >>> 8) & 0xff] << 8) |
  148. (G.SBOX[t & 0xff])
  149. }
  150. keySchedule[k] = keySchedule[k - keySize] ^ t
  151. }
  152. var invKeySchedule = []
  153. for (var ik = 0; ik < ksRows; ik++) {
  154. var ksR = ksRows - ik
  155. var tt = keySchedule[ksR - (ik % 4 ? 0 : 4)]
  156. if (ik < 4 || ksR <= 4) {
  157. invKeySchedule[ik] = tt
  158. } else {
  159. invKeySchedule[ik] =
  160. G.INV_SUB_MIX[0][G.SBOX[tt >>> 24]] ^
  161. G.INV_SUB_MIX[1][G.SBOX[(tt >>> 16) & 0xff]] ^
  162. G.INV_SUB_MIX[2][G.SBOX[(tt >>> 8) & 0xff]] ^
  163. G.INV_SUB_MIX[3][G.SBOX[tt & 0xff]]
  164. }
  165. }
  166. this._nRounds = nRounds
  167. this._keySchedule = keySchedule
  168. this._invKeySchedule = invKeySchedule
  169. }
  170. AES.prototype.encryptBlockRaw = function (M) {
  171. M = asUInt32Array(M)
  172. return cryptBlock(M, this._keySchedule, G.SUB_MIX, G.SBOX, this._nRounds)
  173. }
  174. AES.prototype.encryptBlock = function (M) {
  175. var out = this.encryptBlockRaw(M)
  176. var buf = Buffer.allocUnsafe(16)
  177. buf.writeUInt32BE(out[0], 0)
  178. buf.writeUInt32BE(out[1], 4)
  179. buf.writeUInt32BE(out[2], 8)
  180. buf.writeUInt32BE(out[3], 12)
  181. return buf
  182. }
  183. AES.prototype.decryptBlock = function (M) {
  184. M = asUInt32Array(M)
  185. // swap
  186. var m1 = M[1]
  187. M[1] = M[3]
  188. M[3] = m1
  189. var out = cryptBlock(M, this._invKeySchedule, G.INV_SUB_MIX, G.INV_SBOX, this._nRounds)
  190. var buf = Buffer.allocUnsafe(16)
  191. buf.writeUInt32BE(out[0], 0)
  192. buf.writeUInt32BE(out[3], 4)
  193. buf.writeUInt32BE(out[2], 8)
  194. buf.writeUInt32BE(out[1], 12)
  195. return buf
  196. }
  197. AES.prototype.scrub = function () {
  198. scrubVec(this._keySchedule)
  199. scrubVec(this._invKeySchedule)
  200. scrubVec(this._key)
  201. }
  202. module.exports.AES = AES
  203. }
  204. if (nodeEnv) {
  205. __define(__module.exports, __require, __module);
  206. }
  207. else {
  208. __quick_compile_project__.registerModuleFunc(__filename, function () {
  209. __define(__module.exports, __require, __module);
  210. });
  211. }
  212. })();