vendor/golang.org/x/crypto/blake2b/blake2b_generic.go

   1 // Copyright 2016 The Go Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style
   3 // license that can be found in the LICENSE file.
   4
   5 package blake2b
   6
   7 import "encoding/binary"
   8
   9 // the precomputed values for BLAKE2b
  10 // there are 12 16-byte arrays - one for each round
  11 // the entries are calculated from the sigma constants.
  12 var precomputed = [12][16]byte{
  13         {0, 2, 4, 6, 1, 3, 5, 7, 8, 10, 12, 14, 9, 11, 13, 15},
  14         {14, 4, 9, 13, 10, 8, 15, 6, 1, 0, 11, 5, 12, 2, 7, 3},
  15         {11, 12, 5, 15, 8, 0, 2, 13, 10, 3, 7, 9, 14, 6, 1, 4},
  16         {7, 3, 13, 11, 9, 1, 12, 14, 2, 5, 4, 15, 6, 10, 0, 8},
  17         {9, 5, 2, 10, 0, 7, 4, 15, 14, 11, 6, 3, 1, 12, 8, 13},
  18         {2, 6, 0, 8, 12, 10, 11, 3, 4, 7, 15, 1, 13, 5, 14, 9},
  19         {12, 1, 14, 4, 5, 15, 13, 10, 0, 6, 9, 8, 7, 3, 2, 11},
  20         {13, 7, 12, 3, 11, 14, 1, 9, 5, 15, 8, 2, 0, 4, 6, 10},
  21         {6, 14, 11, 0, 15, 9, 3, 8, 12, 13, 1, 10, 2, 7, 4, 5},
  22         {10, 8, 7, 1, 2, 4, 6, 5, 15, 9, 3, 13, 11, 14, 12, 0},
  23         {0, 2, 4, 6, 1, 3, 5, 7, 8, 10, 12, 14, 9, 11, 13, 15}, // equal to the first
  24         {14, 4, 9, 13, 10, 8, 15, 6, 1, 0, 11, 5, 12, 2, 7, 3}, // equal to the second
  25 }
  26
  27 func hashBlocksGeneric(h *[8]uint64, c *[2]uint64, flag uint64, blocks []byte) {
  28         var m [16]uint64
  29         c0, c1 := c[0], c[1]
  30
  31         for i := 0; i < len(blocks); {
  32                 c0 += BlockSize
  33                 if c0 < BlockSize {
  34                         c1++
  35                 }
  36
  37                 v0, v1, v2, v3, v4, v5, v6, v7 := h[0], h[1], h[2], h[3], h[4], h[5], h[6], h[7]
  38                 v8, v9, v10, v11, v12, v13, v14, v15 := iv[0], iv[1], iv[2], iv[3], iv[4], iv[5], iv[6], iv[7]
  39                 v12 ^= c0
  40                 v13 ^= c1
  41                 v14 ^= flag
  42
  43                 for j := range m {
  44                         m[j] = binary.LittleEndian.Uint64(blocks[i:])
  45                         i += 8
  46                 }
  47
  48                 for j := range precomputed {
  49                         s := &(precomputed[j])
  50
  51                         v0 += m[s[0]]
  52                         v0 += v4
  53                         v12 ^= v0
  54                         v12 = v12<<(64-32) | v12>>32
  55                         v8 += v12
  56                         v4 ^= v8
  57                         v4 = v4<<(64-24) | v4>>24
  58                         v1 += m[s[1]]
  59                         v1 += v5
  60                         v13 ^= v1
  61                         v13 = v13<<(64-32) | v13>>32
  62                         v9 += v13
  63                         v5 ^= v9
  64                         v5 = v5<<(64-24) | v5>>24
  65                         v2 += m[s[2]]
  66                         v2 += v6
  67                         v14 ^= v2
  68                         v14 = v14<<(64-32) | v14>>32
  69                         v10 += v14
  70                         v6 ^= v10
  71                         v6 = v6<<(64-24) | v6>>24
  72                         v3 += m[s[3]]
  73                         v3 += v7
  74                         v15 ^= v3
  75                         v15 = v15<<(64-32) | v15>>32
  76                         v11 += v15
  77                         v7 ^= v11
  78                         v7 = v7<<(64-24) | v7>>24
  79
  80                         v0 += m[s[4]]
  81                         v0 += v4
  82                         v12 ^= v0
  83                         v12 = v12<<(64-16) | v12>>16
  84                         v8 += v12
  85                         v4 ^= v8
  86                         v4 = v4<<(64-63) | v4>>63
  87                         v1 += m[s[5]]
  88                         v1 += v5
  89                         v13 ^= v1
  90                         v13 = v13<<(64-16) | v13>>16
  91                         v9 += v13
  92                         v5 ^= v9
  93                         v5 = v5<<(64-63) | v5>>63
  94                         v2 += m[s[6]]
  95                         v2 += v6
  96                         v14 ^= v2
  97                         v14 = v14<<(64-16) | v14>>16
  98                         v10 += v14
  99                         v6 ^= v10
 100                         v6 = v6<<(64-63) | v6>>63
 101                         v3 += m[s[7]]
 102                         v3 += v7
 103                         v15 ^= v3
 104                         v15 = v15<<(64-16) | v15>>16
 105                         v11 += v15
 106                         v7 ^= v11
 107                         v7 = v7<<(64-63) | v7>>63
 108
 109                         v0 += m[s[8]]
 110                         v0 += v5
 111                         v15 ^= v0
 112                         v15 = v15<<(64-32) | v15>>32
 113                         v10 += v15
 114                         v5 ^= v10
 115                         v5 = v5<<(64-24) | v5>>24
 116                         v1 += m[s[9]]
 117                         v1 += v6
 118                         v12 ^= v1
 119                         v12 = v12<<(64-32) | v12>>32
 120                         v11 += v12
 121                         v6 ^= v11
 122                         v6 = v6<<(64-24) | v6>>24
 123                         v2 += m[s[10]]
 124                         v2 += v7
 125                         v13 ^= v2
 126                         v13 = v13<<(64-32) | v13>>32
 127                         v8 += v13
 128                         v7 ^= v8
 129                         v7 = v7<<(64-24) | v7>>24
 130                         v3 += m[s[11]]
 131                         v3 += v4
 132                         v14 ^= v3
 133                         v14 = v14<<(64-32) | v14>>32
 134                         v9 += v14
 135                         v4 ^= v9
 136                         v4 = v4<<(64-24) | v4>>24
 137
 138                         v0 += m[s[12]]
 139                         v0 += v5
 140                         v15 ^= v0
 141                         v15 = v15<<(64-16) | v15>>16
 142                         v10 += v15
 143                         v5 ^= v10
 144                         v5 = v5<<(64-63) | v5>>63
 145                         v1 += m[s[13]]
 146                         v1 += v6
 147                         v12 ^= v1
 148                         v12 = v12<<(64-16) | v12>>16
 149                         v11 += v12
 150                         v6 ^= v11
 151                         v6 = v6<<(64-63) | v6>>63
 152                         v2 += m[s[14]]
 153                         v2 += v7
 154                         v13 ^= v2
 155                         v13 = v13<<(64-16) | v13>>16
 156                         v8 += v13
 157                         v7 ^= v8
 158                         v7 = v7<<(64-63) | v7>>63
 159                         v3 += m[s[15]]
 160                         v3 += v4
 161                         v14 ^= v3
 162                         v14 = v14<<(64-16) | v14>>16
 163                         v9 += v14
 164                         v4 ^= v9
 165                         v4 = v4<<(64-63) | v4>>63
 166
 167                 }
 168
 169                 h[0] ^= v0 ^ v8
 170                 h[1] ^= v1 ^ v9
 171                 h[2] ^= v2 ^ v10
 172                 h[3] ^= v3 ^ v11
 173                 h[4] ^= v4 ^ v12
 174                 h[5] ^= v5 ^ v13
 175                 h[6] ^= v6 ^ v14
 176                 h[7] ^= v7 ^ v15
 177         }
 178         c[0], c[1] = c0, c1
 179 }