Skip to content

Instantly share code, notes, and snippets.

@wqweto

wqweto/mdAscon.bas

Last active February 19, 2023 21:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save wqweto/d04493906e95fc003be3a4ae782db996 to your computer and use it in GitHub Desktop.
Save wqweto/d04493906e95fc003be3a4ae782db996 to your computer and use it in GitHub Desktop.
Download ZIP
[VB6/VBA] Ascon Lightweight Authenticated Encryption & Hashing
Raw
mdAscon.bas
'--- mdAscon.bas
Option Explicit
DefObj A-Z
#Const HasPtrSafe = (VBA7 <> 0)
#Const HasOperators = (TWINBASIC <> 0)
#Const DebugState = False
#If HasPtrSafe Then
Private Declare PtrSafe Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (Destination As Any, Source As Any, ByVal Length As LongPtr)
Private Declare PtrSafe Function ArrPtr Lib "vbe7" Alias "VarPtr" (Ptr() As Any) As LongPtr
Private Declare PtrSafe Function VariantChangeType Lib "oleaut32" (Dest As Variant, Src As Variant, ByVal wFlags As Integer, ByVal vt As VbVarType) As Long
Private Declare PtrSafe Function WideCharToMultiByte Lib "kernel32" (ByVal CodePage As Long, ByVal dwFlags As Long, ByVal lpWideCharStr As LongPtr, ByVal cchWideChar As Long, lpMultiByteStr As Any, ByVal cchMultiByte As Long, ByVal lpDefaultChar As Long, ByVal lpUsedDefaultChar As Long) As Long
#Else
Private Enum LongPtr
[_]
End Enum
Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (Destination As Any, Source As Any, ByVal Length As LongPtr)
Private Declare Function ArrPtr Lib "msvbvm60" Alias "VarPtr" (Ptr() As Any) As LongPtr
Private Declare Function VariantChangeType Lib "oleaut32" (Dest As Variant, Src As Variant, ByVal wFlags As Integer, ByVal vt As VbVarType) As Long
Private Declare Function WideCharToMultiByte Lib "kernel32" (ByVal CodePage As Long, ByVal dwFlags As Long, ByVal lpWideCharStr As LongPtr, ByVal cchWideChar As Long, lpMultiByteStr As Any, ByVal cchMultiByte As Long, ByVal lpDefaultChar As Long, ByVal lpUsedDefaultChar As Long) As Long
#End If
Private Const LNG_KEYSZ As Long = 16
Private Const LNG_LONGKEYSZ As Long = 20
Private Const LNG_NONCESZ As Long = 16
Private Const LNG_TAGSZ As Long = 16
Private Const LNG_ROUNDS As Long = 12
Private Const LNG_STATESZ As Long = 40
Private Type SAFEARRAY1D
cDims As Integer
fFeatures As Integer
cbElements As Long
cLocks As Long
pvData As LongPtr
cElements As Long
lLbound As Long
End Type
Public Type CryptoAsconContext
Words(0 To LNG_STATESZ \ 8 - 1) As Currency
Bytes() As Byte '--- overlaying Words array above
ArrayBytes As SAFEARRAY1D
Absorbed As Long
RoundsItermediate As Long
RoundsFinal As Long
Rate As Long
End Type
#If Not HasOperators Then
#If HasPtrSafe Then
Private LNG_POW2(0 To 63) As LongLong
Private LNG_SIGN_BIT As LongLong ' 2 ^ 63
#Else
Private LNG_POW2(0 To 63) As Variant
Private LNG_SIGN_BIT As Variant
#End If
#If HasPtrSafe Then
Private Function RotR64(ByVal lX As LongLong, ByVal lN As Long) As LongLong
#Else
Private Function RotR64(lX As Variant, ByVal lN As Long) As Variant
#End If
'--- RotR64 = RShift64(X, n) Or LShift64(X, 64 - n)
Debug.Assert lN <> 0
RotR64 = ((lX And (-1 Xor LNG_SIGN_BIT)) \ LNG_POW2(lN) Or -(lX < 0) * LNG_POW2(63 - lN)) Or _
((lX And (LNG_POW2(lN - 1) - 1)) * LNG_POW2(64 - lN) Or -((lX And LNG_POW2(lN - 1)) <> 0) * LNG_SIGN_BIT)
End Function
#If Not HasPtrSafe Then
Private Function CLngLng(vValue As Variant) As Variant
Const VT_I8 As Long = &H14
Call VariantChangeType(CLngLng, vValue, 0, VT_I8)
End Function
Private Function ToLngLng(ByVal cValue As Currency) As Variant
Const VT_I8 As Long = &H14
Static B(0 To 1) As Long
Dim lIdx As Long
Call CopyMemory(B(0), cValue, 8)
lIdx = B(0)
B(0) = BSwap32(B(1))
B(1) = BSwap32(lIdx)
Call VariantChangeType(ToLngLng, ToLngLng, 0, VT_I8)
#If LargeAddressAware Then
Call CopyMemory(ByVal (VarPtr(ToLngLng) Xor &H80000000) + 8 Xor &H80000000, B(0), 8)
#Else
Call CopyMemory(ByVal VarPtr(ToLngLng) + 8, B(0), 8)
#End If
End Function
Private Function FromLngLng(lValue As Variant) As Currency
Static B(0 To 1) As Long
Dim lIdx As Long
#If LargeAddressAware Then
Call CopyMemory(B(0), ByVal (VarPtr(lValue) Xor &H80000000) + 8 Xor &H80000000, 8)
#Else
Call CopyMemory(B(0), ByVal VarPtr(lValue) + 8, 8)
#End If
lIdx = B(0)
B(0) = BSwap32(B(1))
B(1) = BSwap32(lIdx)
Call CopyMemory(FromLngLng, B(0), 8)
End Function
#Else
Private Function ToLngLng(ByVal cValue As Currency) As LongLong
Const VT_I8 As Long = &H14
Static B(0 To 1) As Long
Dim lIdx As Long
Call CopyMemory(B(0), cValue, 8)
lIdx = B(0)
B(0) = BSwap32(B(1))
B(1) = BSwap32(lIdx)
Call CopyMemory(ToLngLng, B(0), 8)
End Function
Private Function FromLngLng(ByVal lValue As LongLong) As Currency
Static B(0 To 1) As Long
Dim lIdx As Long
Call CopyMemory(B(0), lValue, 8)
lIdx = B(0)
B(0) = BSwap32(B(1))
B(1) = BSwap32(lIdx)
Call CopyMemory(FromLngLng, B(0), 8)
End Function
#End If
Private Function BSwap32(ByVal lX As Long) As Long
BSwap32 = (lX And &H7F) * &H1000000 Or (lX And &HFF00&) * &H100 Or (lX And &HFF0000) \ &H100 Or _
(lX And &HFF000000) \ &H1000000 And &HFF Or -((lX And &H80) <> 0) * &H80000000
End Function
Private Sub pvPermute(uCtx As CryptoAsconContext, ByVal lRounds As Long)
#If HasPtrSafe Then
Dim S0 As LongLong
Dim S1 As LongLong
Dim S2 As LongLong
Dim S3 As LongLong
Dim S4 As LongLong
Dim lTemp As LongLong
#Else
Dim S0 As Variant
Dim S1 As Variant
Dim S2 As Variant
Dim S3 As Variant
Dim S4 As Variant
Dim lTemp As Variant
#End If
Dim lIdx As Long
#If DebugState Then
Debug.Print ToHex(uCtx.Bytes), "before permute " & lRounds
#End If
With uCtx
S0 = ToLngLng(.Words(0))
S1 = ToLngLng(.Words(1))
S2 = ToLngLng(.Words(2))
S3 = ToLngLng(.Words(3))
S4 = ToLngLng(.Words(4))
For lIdx = LNG_ROUNDS - lRounds To LNG_ROUNDS - 1
'--- round constant
S2 = S2 Xor (&HF0 - lIdx * 15)
'--- substitution layer
S0 = S0 Xor S4
S4 = S4 Xor S3
S2 = S2 Xor S1
lTemp = S0 And Not S4
S0 = S0 Xor (S2 And Not S1)
S2 = S2 Xor (S4 And Not S3)
S4 = S4 Xor (S1 And Not S0)
S1 = S1 Xor (S3 And Not S2)
S3 = S3 Xor lTemp
S1 = S1 Xor S0
S0 = S0 Xor S4
S3 = S3 Xor S2
S2 = Not S2
'--- linear diffusion layer
S0 = S0 Xor RotR64(S0, 19) Xor RotR64(S0, 28)
S1 = S1 Xor RotR64(S1, 61) Xor RotR64(S1, 39)
S2 = S2 Xor RotR64(S2, 1) Xor RotR64(S2, 6)
S3 = S3 Xor RotR64(S3, 10) Xor RotR64(S3, 17)
S4 = S4 Xor RotR64(S4, 7) Xor RotR64(S4, 41)
#If DebugPermutation Then
.Words(0) = FromLngLng(S0)
.Words(1) = FromLngLng(S1)
.Words(2) = FromLngLng(S2)
.Words(3) = FromLngLng(S3)
.Words(4) = FromLngLng(S4)
Debug.Print ToHex(uCtx.Bytes)
#End If
Next
.Words(0) = FromLngLng(S0)
.Words(1) = FromLngLng(S1)
.Words(2) = FromLngLng(S2)
.Words(3) = FromLngLng(S3)
.Words(4) = FromLngLng(S4)
End With
#If DebugState Then
Debug.Print ToHex(uCtx.Bytes), "after permute " & lRounds
#End If
End Sub
#Else
Private Type ArrayLongLong5
Item0 As LongLong
Item1 As LongLong
Item2 As LongLong
Item3 As LongLong
Item4 As LongLong
End Type
Private Function BSwap64(ByVal lX As LongLong) As LongLong
Return ((lX And &H00000000000000FF^) << 56) Or _
((lX And &H000000000000FF00^) << 40) Or _
((lX And &H0000000000FF0000^) << 24) Or _
((lX And &H00000000FF000000^) << 8) Or _
((lX And &H000000FF00000000^) >> 8) Or _
((lX And &H0000FF0000000000^) >> 24) Or _
((lX And &H00FF000000000000^) >> 40) Or _
((lX And &HFF00000000000000^) >> 56)
End Function
Private Sub pvAssign(uArray As ArrayLongLong5, S0 As LongLong, S1 As LongLong, S2 As LongLong, S3 As LongLong, S4 As LongLong)
With uArray
S0 = BSwap64(.Item0)
S1 = BSwap64(.Item1)
S2 = BSwap64(.Item2)
S3 = BSwap64(.Item3)
S4 = BSwap64(.Item4)
End With
End Sub
Private Sub pvUnassign(uArray As ArrayLongLong5, ByVal S0 As LongLong, ByVal S1 As LongLong, ByVal S2 As LongLong, ByVal S3 As LongLong, ByVal S4 As LongLong)
With uArray
.Item0 = BSwap64(S0)
.Item1 = BSwap64(S1)
.Item2 = BSwap64(S2)
.Item3 = BSwap64(S3)
.Item4 = BSwap64(S4)
End With
End Sub
Private Sub pvPermute(uCtx As CryptoAsconContext, ByVal lRounds As Long)
Dim S0 As LongLong
Dim S1 As LongLong
Dim S2 As LongLong
Dim S3 As LongLong
Dim S4 As LongLong
Dim lTemp As LongLong
Dim lIdx As Long
With uCtx
pvAssign VarPtr(.Bytes(0)), S0, S1, S2, S3, S4
For lIdx = LNG_ROUNDS - lRounds To LNG_ROUNDS - 1
'--- round constant
S2 = S2 Xor (&HF0 - lIdx * 15)
'--- substitution layer
S0 = S0 Xor S4
S4 = S4 Xor S3
S2 = S2 Xor S1
lTemp = S0 And Not S4
S0 = S0 Xor (S2 And Not S1)
S2 = S2 Xor (S4 And Not S3)
S4 = S4 Xor (S1 And Not S0)
S1 = S1 Xor (S3 And Not S2)
S3 = S3 Xor lTemp
S1 = S1 Xor S0
S0 = S0 Xor S4
S3 = S3 Xor S2
S2 = Not S2
'--- linear diffusion layer
lTemp = S0 Xor (S0 >> 9 Or S0 << 55)
S0 = S0 Xor (lTemp >> 19 Or lTemp << 45)
lTemp = S1 Xor (S1 >> 22 Or S1 << 42)
S1 = S1 Xor (lTemp >> 39 Or lTemp << 25)
lTemp = S2 Xor (S2 >> 5 Or S2 << 59)
S2 = S2 Xor (lTemp >> 1 Or lTemp << 63)
lTemp = S3 Xor (S3 >> 7 Or S3 << 57)
S3 = S3 Xor (lTemp >> 10 Or lTemp << 54)
lTemp = S4 Xor (S4 >> 34 Or S4 << 30)
S4 = S4 Xor (lTemp >> 7 Or lTemp << 57)
Next
pvUnassign VarPtr(.Bytes(0)), S0, S1, S2, S3, S4
End With
End Sub
#End If
Private Sub pvInit(uCtx As CryptoAsconContext)
Const FADF_AUTO As Long = 1
Dim lIdx As Long
Dim pDummy As LongPtr
#If Not HasOperators Then
If LNG_POW2(0) = 0 Then
LNG_POW2(0) = CLngLng(1)
For lIdx = 1 To 63
LNG_POW2(lIdx) = CVar(LNG_POW2(lIdx - 1)) * 2
Next
LNG_SIGN_BIT = LNG_POW2(63)
End If
#End If
With uCtx
If .ArrayBytes.cDims = 0 Then
With .ArrayBytes
.cDims = 1
.fFeatures = FADF_AUTO
.cbElements = 1
.cLocks = 1
.pvData = VarPtr(uCtx.Words(0))
.cElements = LNG_STATESZ
End With
Call CopyMemory(ByVal ArrPtr(.Bytes), VarPtr(.ArrayBytes), LenB(pDummy))
End If
End With
End Sub
Private Sub pvInitHash(uCtx As CryptoAsconContext, Optional AsconVariant As String)
Dim sState As Variant
Dim vElem As Variant
Dim lIdx As Long
pvInit uCtx
With uCtx
.Absorbed = 0
Select Case LCase$(AsconVariant)
Case "ascon-hash", vbNullString
.RoundsItermediate = LNG_ROUNDS
sState = "446318142388178.635 14863613160486.9771 712324061313542.0084 -166521396747559.9293 467505948832861.778"
Case "ascon-hasha"
.RoundsItermediate = 8
sState = "-647381232885581.2351 -634115870784097.1149 549226995250965.9182 902277108517712.4566 -867907184661769.5071"
Case "ascon-xof"
.RoundsItermediate = LNG_ROUNDS
sState = "164502388182400.9909 231616784492634.5515 173919820479251.3382 89321191666631.817 -529072205218721.0161"
Case "ascon-xofa"
.RoundsItermediate = 8
sState = "364579992601713.466 362688130062775.4445 296372296757763.8391 656682645757712.1828 458221163737440.5544"
Case Else
Err.Raise vbObjectError, , "Invalid variant for Ascon hash (" & AsconVariant & ")"
End Select
.Rate = 8
.RoundsFinal = LNG_ROUNDS
'--- init state
lIdx = 0
For Each vElem In Split(sState)
.Words(lIdx) = vElem
lIdx = lIdx + 1
Next
End With
End Sub
Private Sub pvInitAead(uCtx As CryptoAsconContext, baKey() As Byte, Nonce As Variant, AssociatedData As Variant, AsconVariant As String)
Dim baNonce() As Byte
Dim baAad() As Byte
Dim lIdx As Long
Dim lSize As Long
pvInit uCtx
If IsMissing(Nonce) Then
baNonce = vbNullString
Else
baNonce = Nonce
End If
ReDim Preserve baNonce(0 To LNG_NONCESZ - 1) As Byte
If IsMissing(AssociatedData) Then
baAad = vbNullString
Else
baAad = AssociatedData
End If
With uCtx
.Absorbed = 0
Select Case LCase$(AsconVariant)
Case "ascon-128", vbNullString
.RoundsItermediate = LNG_ROUNDS \ 2
.Rate = 8
.Words(0) = 10146.624@
Debug.Assert UBound(baKey) + 1 = LNG_KEYSZ
ReDim Preserve baKey(0 To LNG_KEYSZ - 1) As Byte
Case "ascon-128a"
.RoundsItermediate = 8
.Rate = 16
.Words(0) = 13503.7056@
Debug.Assert UBound(baKey) + 1 = LNG_KEYSZ
ReDim Preserve baKey(0 To LNG_KEYSZ - 1) As Byte
Case "ascon-80pq"
.RoundsItermediate = LNG_ROUNDS \ 2
.Rate = 8
.Words(0) = 10146.6272@
Debug.Assert UBound(baKey) + 1 = LNG_LONGKEYSZ
ReDim Preserve baKey(0 To LNG_LONGKEYSZ - 1) As Byte
Case Else
Err.Raise vbObjectError, , "Invalid variant for Ascon AEAD (" & AsconVariant & ")"
End Select
.RoundsFinal = LNG_ROUNDS
'--- init state
For lIdx = 1 To UBound(.Words)
.Words(lIdx) = 0
Next
lSize = UBound(baKey) + 1
Call CopyMemory(.Bytes(LNG_STATESZ - LNG_NONCESZ - lSize), baKey(0), lSize)
Call CopyMemory(.Bytes(LNG_STATESZ - LNG_NONCESZ), baNonce(0), LNG_NONCESZ)
pvPermute uCtx, .RoundsFinal
lSize = LNG_STATESZ - UBound(baKey) - 1
For lIdx = 0 To UBound(baKey)
.Bytes(lSize + lIdx) = .Bytes(lSize + lIdx) Xor baKey(lIdx)
Next
'--- process associated data
If UBound(baAad) >= 0 Then
pvUpdate uCtx, baAad, 0, UBound(baAad) + 1
.Bytes(.Absorbed) = .Bytes(.Absorbed) Xor &H80
pvPermute uCtx, .RoundsItermediate
.Absorbed = 0
End If
'--- separator
.Bytes(LNG_STATESZ - 1) = .Bytes(LNG_STATESZ - 1) Xor 1
End With
End Sub
Private Sub pvUpdate(uCtx As CryptoAsconContext, baInput() As Byte, ByVal Pos As Long, ByVal Size As Long, Optional ByVal Encrypt As Boolean, Optional ByVal Decrypt As Boolean)
Dim lIdx As Long
Dim lTemp As Long
If Size < 0 Then
Size = UBound(baInput) + 1 - Pos
End If
With uCtx
For lIdx = 0 To Size - 1
If Decrypt Then
lTemp = .Bytes(.Absorbed) Xor baInput(Pos + lIdx)
.Bytes(.Absorbed) = baInput(Pos + lIdx)
baInput(Pos + lIdx) = lTemp
Else
.Bytes(.Absorbed) = .Bytes(.Absorbed) Xor baInput(Pos + lIdx)
If Encrypt Then
baInput(Pos + lIdx) = .Bytes(.Absorbed)
End If
End If
If .Absorbed = .Rate - 1 Then
pvPermute uCtx, .RoundsItermediate
.Absorbed = 0
Else
.Absorbed = .Absorbed + 1
End If
Next
End With
End Sub
Private Sub pvFinalizeHash(uCtx As CryptoAsconContext, baOutput() As Byte, Optional ByVal OutSize As Long)
Dim lIdx As Long
Dim pDummy As LongPtr
Dim uEmpty As CryptoAsconContext
With uCtx
.Bytes(.Absorbed) = .Bytes(.Absorbed) Xor &H80
pvPermute uCtx, .RoundsFinal
.Absorbed = 0
If OutSize = 0 Then
OutSize = 32
End If
ReDim baOutput(0 To OutSize - 1) As Byte
For lIdx = 0 To UBound(baOutput)
baOutput(lIdx) = .Bytes(.Absorbed)
If .Absorbed = .Rate - 1 Then
pvPermute uCtx, .RoundsItermediate
.Absorbed = 0
Else
.Absorbed = .Absorbed + 1
End If
Next
Call CopyMemory(ByVal ArrPtr(.Bytes), pDummy, LenB(pDummy))
End With
uCtx = uEmpty
End Sub
Private Sub pvFinalizeAead(uCtx As CryptoAsconContext, baKey() As Byte, baTag() As Byte)
Dim lIdx As Long
Dim lSize As Long
Dim pDummy As LongPtr
Dim uEmpty As CryptoAsconContext
With uCtx
.Bytes(.Absorbed) = .Bytes(.Absorbed) Xor &H80
lSize = .Rate
For lIdx = 0 To UBound(baKey)
.Bytes(lSize + lIdx) = .Bytes(lSize + lIdx) Xor baKey(lIdx)
Next
pvPermute uCtx, .RoundsFinal
lSize = LNG_STATESZ - UBound(baKey) - 1
For lIdx = 0 To UBound(baKey)
.Bytes(lSize + lIdx) = .Bytes(lSize + lIdx) Xor baKey(lIdx)
Next
ReDim baTag(0 To LNG_TAGSZ - 1) As Byte
Call CopyMemory(baTag(0), .Bytes(LNG_STATESZ - LNG_TAGSZ), LNG_TAGSZ)
Call CopyMemory(ByVal ArrPtr(.Bytes), pDummy, LenB(pDummy))
End With
uCtx = uEmpty
End Sub
Private Function ToUtf8Array(sText As String) As Byte()
Const CP_UTF8 As Long = 65001
Dim baRetVal() As Byte
Dim lSize As Long
ReDim baRetVal(0 To 4 * Len(sText)) As Byte
lSize = WideCharToMultiByte(CP_UTF8, 0, StrPtr(sText), Len(sText), baRetVal(0), UBound(baRetVal) + 1, 0, 0)
If lSize > 0 Then
ReDim Preserve baRetVal(0 To lSize - 1) As Byte
Else
baRetVal = vbNullString
End If
ToUtf8Array = baRetVal
End Function
Private Function ToHex(baData() As Byte) As String
Dim lIdx As Long
Dim sByte As String
ToHex = String$(UBound(baData) * 2 + 2, 48)
For lIdx = 0 To UBound(baData)
sByte = LCase$(Hex$(baData(lIdx)))
Mid$(ToHex, lIdx * 2 + 3 - Len(sByte)) = sByte
Next
End Function
Public Sub CryptoAsconHashInit(uCtx As CryptoAsconContext, Optional AsconVariant As String)
pvInitHash uCtx, AsconVariant
End Sub
Public Sub CryptoAsconHashUpdate(uCtx As CryptoAsconContext, baInput() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1)
pvUpdate uCtx, baInput, Pos, Size
End Sub
Public Sub CryptoAsconHashFinalize(uCtx As CryptoAsconContext, baOutput() As Byte, Optional ByVal OutSize As Long)
pvFinalizeHash uCtx, baOutput, OutSize
End Sub
Public Function CryptoAsconHashByteArray(baInput() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1, Optional AsconVariant As String) As Byte()
Dim uCtx As CryptoAsconContext
pvInitHash uCtx, AsconVariant
pvUpdate uCtx, baInput, Pos, Size
pvFinalizeHash uCtx, CryptoAsconHashByteArray
End Function
Public Function CryptoAsconHashText(sText As String, Optional AsconVariant As String) As String
CryptoAsconHashText = ToHex(CryptoAsconHashByteArray(ToUtf8Array(sText), AsconVariant:=AsconVariant))
End Function
Public Sub CryptoAsconEncrypt(baKey() As Byte, baTag() As Byte, _
baInput() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1, _
Optional Nonce As Variant, Optional AssociatedData As Variant, Optional AsconVariant As String)
Dim uCtx As CryptoAsconContext
pvInitAead uCtx, baKey, Nonce, AssociatedData, AsconVariant
pvUpdate uCtx, baInput, Pos, Size, Encrypt:=True
pvFinalizeAead uCtx, baKey, baTag
End Sub
Public Function CryptoAsconDecrypt(baKey() As Byte, baTag() As Byte, _
baInput() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1, _
Optional Nonce As Variant, Optional AssociatedData As Variant, Optional AsconVariant As String) As Boolean
Dim uCtx As CryptoAsconContext
Dim baTemp() As Byte
pvInitAead uCtx, baKey, Nonce, AssociatedData, AsconVariant
pvUpdate uCtx, baInput, Pos, Size, Decrypt:=True
pvFinalizeAead uCtx, baKey, baTemp
If UBound(baTemp) = UBound(baTag) Then
CryptoAsconDecrypt = (InStrB(baTemp, baTag) = 1)
End If
End Function
Raw
mdAsconSliced.bas
'--- mdAsconSliced.bas
Option Explicit
DefObj A-Z
#Const HasPtrSafe = (VBA7 <> 0)
#Const HasOperators = (TWINBASIC <> 0)
#Const DebugState = False
#If HasPtrSafe Then
Private Declare PtrSafe Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (Destination As Any, Source As Any, ByVal Length As LongPtr)
Private Declare PtrSafe Sub FillMemory Lib "kernel32" Alias "RtlFillMemory" (Destination As Any, ByVal Length As LongPtr, ByVal Fill As Byte)
Private Declare PtrSafe Function ArrPtr Lib "vbe7" Alias "VarPtr" (Ptr() As Any) As LongPtr
Private Declare PtrSafe Function WideCharToMultiByte Lib "kernel32" (ByVal CodePage As Long, ByVal dwFlags As Long, ByVal lpWideCharStr As LongPtr, ByVal cchWideChar As Long, lpMultiByteStr As Any, ByVal cchMultiByte As Long, ByVal lpDefaultChar As Long, ByVal lpUsedDefaultChar As Long) As Long
#Else
Private Enum LongPtr
[_]
End Enum
Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (Destination As Any, Source As Any, ByVal Length As LongPtr)
Private Declare Sub FillMemory Lib "kernel32" Alias "RtlFillMemory" (Destination As Any, ByVal Length As Long, ByVal Fill As Byte)
Private Declare Function ArrPtr Lib "msvbvm60" Alias "VarPtr" (Ptr() As Any) As LongPtr
Private Declare Function WideCharToMultiByte Lib "kernel32" (ByVal CodePage As Long, ByVal dwFlags As Long, ByVal lpWideCharStr As LongPtr, ByVal cchWideChar As Long, lpMultiByteStr As Any, ByVal cchMultiByte As Long, ByVal lpDefaultChar As Long, ByVal lpUsedDefaultChar As Long) As Long
#End If
Private Const LNG_KEYSZ As Long = 16
Private Const LNG_NONCESZ As Long = 16
Private Const LNG_TAGSZ As Long = 16
Private Const LNG_HASHSZ As Long = 32
Private Const LNG_ROUNDS As Long = 12
Private Const LNG_STATESZ As Long = 40
Private Const LNG_BLOCKSZ As Long = 8
Private Const LNG_POW2_1 As Long = 2 ^ 1
Private Const LNG_POW2_2 As Long = 2 ^ 2
Private Const LNG_POW2_3 As Long = 2 ^ 3
Private Const LNG_POW2_4 As Long = 2 ^ 4
Private Const LNG_POW2_5 As Long = 2 ^ 5
Private Const LNG_POW2_8 As Long = 2 ^ 8
Private Const LNG_POW2_9 As Long = 2 ^ 9
Private Const LNG_POW2_10 As Long = 2 ^ 10
Private Const LNG_POW2_11 As Long = 2 ^ 11
Private Const LNG_POW2_12 As Long = 2 ^ 12
Private Const LNG_POW2_13 As Long = 2 ^ 13
Private Const LNG_POW2_14 As Long = 2 ^ 14
Private Const LNG_POW2_15 As Long = 2 ^ 15
Private Const LNG_POW2_16 As Long = 2 ^ 16
Private Const LNG_POW2_17 As Long = 2 ^ 17
Private Const LNG_POW2_18 As Long = 2 ^ 18
Private Const LNG_POW2_19 As Long = 2 ^ 19
Private Const LNG_POW2_20 As Long = 2 ^ 20
Private Const LNG_POW2_21 As Long = 2 ^ 21
Private Const LNG_POW2_22 As Long = 2 ^ 22
Private Const LNG_POW2_23 As Long = 2 ^ 23
Private Const LNG_POW2_26 As Long = 2 ^ 26
Private Const LNG_POW2_27 As Long = 2 ^ 27
Private Const LNG_POW2_28 As Long = 2 ^ 28
Private Const LNG_POW2_29 As Long = 2 ^ 29
Private Const LNG_POW2_30 As Long = 2 ^ 30
Private Const LNG_POW2_31 As Long = &H80000000
Private Type SAFEARRAY1D
cDims As Integer
fFeatures As Integer
cbElements As Long
cLocks As Long
pvData As LongPtr
cElements As Long
lLbound As Long
End Type
Private Type ArrayLong10
Item(0 To 9) As Long
End Type
Public Type CryptoAsconContext
State As ArrayLong10
Bytes() As Byte '--- overlaying State array above
ArrayBytes As SAFEARRAY1D
Absorbed As Long
RoundsItermediate As Long
RoundsFinal As Long
Rate As Long
Key() As Byte '--- only for AEAD
Encrypt As Boolean '--- only for AEAD
End Type
Private LNG_RC(0 To 23) As Long
Private m_aPeek() As Long
Private m_uArrayPeek As SAFEARRAY1D
Private Function BSwap32(ByVal lX As Long) As Long
#If Not HasOperators Then
BSwap32 = (lX And &H7F) * &H1000000 Or (lX And &HFF00&) * &H100 Or (lX And &HFF0000) \ &H100 Or _
(lX And &HFF000000) \ &H1000000 And &HFF Or -((lX And &H80) <> 0) * &H80000000
#Else
Return ((lX And &H000000FF&) << 24) Or _
((lX And &H0000FF00&) << 8) Or _
((lX And &H00FF0000&) >> 8) Or _
((lX And &HFF000000&) >> 24)
#End If
End Function
Private Function pvSeparate(ByVal lX As Long) As Long
Dim lTemp As Long
#If Not HasOperators Then
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_1 Or -(lX < 0) * LNG_POW2_30) Xor lX) And &H22222222
lX = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_30 - 1)) * LNG_POW2_1 Or -((lTemp And LNG_POW2_30) <> 0) * &H80000000)
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_2 Or -(lX < 0) * LNG_POW2_29) Xor lX) And &HC0C0C0C
lX = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_29 - 1)) * LNG_POW2_2 Or -((lTemp And LNG_POW2_29) <> 0) * &H80000000)
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_4 Or -(lX < 0) * LNG_POW2_27) Xor lX) And &HF000F0
lX = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_27 - 1)) * LNG_POW2_4 Or -((lTemp And LNG_POW2_27) <> 0) * &H80000000)
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_8 Or -(lX < 0) * LNG_POW2_23) Xor lX) And &HFF00&
pvSeparate = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_23 - 1)) * LNG_POW2_8 Or -((lTemp And LNG_POW2_23) <> 0) * &H80000000)
#Else
lTemp = ((lX >> 1) Xor lX) And &H22222222
lX = (lX Xor lTemp) Xor (lTemp << 1)
lTemp = ((lX >> 2) Xor lX) And &HC0C0C0C
lX = (lX Xor lTemp) Xor (lTemp << 2)
lTemp = ((lX >> 4) Xor lX) And &HF000F0
lX = (lX Xor lTemp) Xor (lTemp << 4)
lTemp = ((lX >> 8) Xor lX) And &HFF00&
pvSeparate = (lX Xor lTemp) Xor (lTemp << 8)
#End If
End Function
Private Function pvCombine(ByVal lX As Long) As Long
Dim lTemp As Long
#If Not HasOperators Then
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_15 Or -(lX < 0) * LNG_POW2_16) Xor lX) And &HAAAA&
lX = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_16 - 1)) * LNG_POW2_15 Or -((lTemp And LNG_POW2_16) <> 0) * &H80000000)
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_14 Or -(lX < 0) * LNG_POW2_17) Xor lX) And &HCCCC&
lX = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_17 - 1)) * LNG_POW2_14 Or -((lTemp And LNG_POW2_17) <> 0) * &H80000000)
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_12 Or -(lX < 0) * LNG_POW2_19) Xor lX) And &HF0F0&
lX = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_19 - 1)) * LNG_POW2_12 Or -((lTemp And LNG_POW2_19) <> 0) * &H80000000)
lTemp = (((lX And &H7FFFFFFF) \ LNG_POW2_8 Or -(lX < 0) * LNG_POW2_23) Xor lX) And &HFF00&
pvCombine = (lX Xor lTemp) Xor ((lTemp And (LNG_POW2_23 - 1)) * LNG_POW2_8 Or -((lTemp And LNG_POW2_23) <> 0) * &H80000000)
#Else
lTemp = ((lX >> 15) Xor lX) And &HAAAA&
lX = (lX Xor lTemp) Xor (lTemp << 15)
lTemp = ((lX >> 14) Xor lX) And &HCCCC&
lX = (lX Xor lTemp) Xor (lTemp << 14)
lTemp = ((lX >> 12) Xor lX) And &HF0F0&
lX = (lX Xor lTemp) Xor (lTemp << 12)
lTemp = ((lX >> 8) Xor lX) And &HFF00&
pvCombine = (lX Xor lTemp) Xor (lTemp << 8)
#End If
End Function
Private Sub pvToSliced(uState As ArrayLong10)
Dim lIdx As Long
Dim lHigh As Long
Dim lLow As Long
With uState
For lIdx = 0 To UBound(.Item) Step 2
lHigh = pvSeparate(BSwap32(.Item(lIdx)))
lLow = pvSeparate(BSwap32(.Item(lIdx + 1)))
#If Not HasOperators Then
.Item(lIdx) = ((lHigh And (LNG_POW2_15 - 1)) * LNG_POW2_16 Or -((lHigh And LNG_POW2_15) <> 0) * &H80000000) Or (lLow And &HFFFF&)
.Item(lIdx + 1) = (lHigh And &HFFFF0000) Or ((lLow And &H7FFFFFFF) \ LNG_POW2_16 Or -(lLow < 0) * LNG_POW2_15)
#Else
.Item(lIdx) = (lHigh << 16) Or (lLow And &HFFFF&)
.Item(lIdx + 1) = (lHigh And &HFFFF0000) Or (lLow >> 16)
#End If
Next
End With
End Sub
Private Sub pvFromSliced(uState As ArrayLong10)
Dim lIdx As Long
Dim lHigh As Long
Dim lLow As Long
With uState
For lIdx = 0 To UBound(.Item) Step 2
#If Not HasOperators Then
lHigh = ((.Item(lIdx) And &H7FFFFFFF) \ LNG_POW2_16 Or -(.Item(lIdx) < 0) * LNG_POW2_15) Or (.Item(lIdx + 1) And &HFFFF0000)
lLow = (.Item(lIdx) And &HFFFF&) Or ((.Item(lIdx + 1) And (LNG_POW2_15 - 1)) * LNG_POW2_16 Or -((.Item(lIdx + 1) And LNG_POW2_15) <> 0) * &H80000000)
#Else
lHigh = (.Item(lIdx) >> 16) Or (.Item(lIdx + 1) And &HFFFF0000)
lLow = (.Item(lIdx) And &HFFFF&) Or (.Item(lIdx + 1) << 16)
#End If
.Item(lIdx) = BSwap32(pvCombine(lHigh))
.Item(lIdx + 1) = BSwap32(pvCombine(lLow))
Next
End With
End Sub
Private Sub pvAbsorbSliced(uState As ArrayLong10, ByVal lHigh As Long, ByVal lLow As Long, ByVal lOffset As Long)
#If DebugState Then
Dim lTemp0 As Long: lTemp0 = lHigh
Dim lTemp1 As Long: lTemp1 = lLow
#End If
lOffset = 2 * lOffset
With uState
lHigh = pvSeparate(BSwap32(lHigh))
lLow = pvSeparate(BSwap32(lLow))
#If Not HasOperators Then
.Item(lOffset) = .Item(lOffset) Xor (((lHigh And (LNG_POW2_15 - 1)) * LNG_POW2_16 Or -((lHigh And LNG_POW2_15) <> 0) * &H80000000) Or (lLow And &HFFFF&))
.Item(lOffset + 1) = .Item(lOffset + 1) Xor ((lHigh And &HFFFF0000) Or ((lLow And &H7FFFFFFF) \ LNG_POW2_16 Or -(lLow < 0) * LNG_POW2_15))
#Else
.Item(lOffset) = .Item(lOffset) Xor ((lHigh << 16) Or (lLow And &HFFFF&))
.Item(lOffset + 1) = .Item(lOffset + 1) Xor ((lHigh And &HFFFF0000) Or (lLow >> 16))
#End If
End With
#If DebugState Then
Debug.Print pvDumpState(uCtx), "sliced absorb " & Right$("00000000" & Hex(lTemp0), 8) & " " & Right$("00000000" & Hex(lTemp1), 8), lOffset
#End If
End Sub
Private Sub pvSqueezeSliced(uState As ArrayLong10, lHigh As Long, lLow As Long, ByVal lOffset As Long)
lOffset = 2 * lOffset
With uState
#If Not HasOperators Then
lHigh = ((.Item(lOffset) And &H7FFFFFFF) \ LNG_POW2_16 Or -(.Item(lOffset) < 0) * LNG_POW2_15) Or (.Item(lOffset + 1) And &HFFFF0000)
lLow = (.Item(lOffset) And &HFFFF&) Or ((.Item(lOffset + 1) And (LNG_POW2_15 - 1)) * LNG_POW2_16 Or -((.Item(lOffset + 1) And LNG_POW2_15) <> 0) * &H80000000)
#Else
lHigh = (.Item(lOffset) >> 16) Or (.Item(lOffset + 1) And &HFFFF0000)
lLow = (.Item(lOffset) And &HFFFF&) Or (.Item(lOffset + 1) << 16)
#End If
lHigh = BSwap32(pvCombine(lHigh))
lLow = BSwap32(pvCombine(lLow))
End With
End Sub
Private Sub pvDecryptSliced(uState As ArrayLong10, lHigh As Long, lLow As Long, ByVal lOffset As Long)
Dim lHigh2 As Long
Dim lLow2 As Long
lOffset = 2 * lOffset
With uState
lHigh2 = pvSeparate(BSwap32(lHigh))
lLow2 = pvSeparate(BSwap32(lLow))
#If Not HasOperators Then
lHigh = lHigh2 Xor ((.Item(lOffset) And &H7FFFFFFF) \ LNG_POW2_16 Or -(.Item(lOffset) < 0) * LNG_POW2_15) Or (.Item(lOffset + 1) And &HFFFF0000)
lLow = lLow2 Xor (.Item(lOffset) And &HFFFF&) Or ((.Item(lOffset + 1) And (LNG_POW2_15 - 1)) * LNG_POW2_16 Or -((.Item(lOffset + 1) And LNG_POW2_15) <> 0) * &H80000000)
#Else
lHigh = lHigh2 Xor (.Item(lOffset) >> 16) Or (.Item(lOffset + 1) And &HFFFF0000)
lLow = lLow2 Xor (.Item(lOffset) And &HFFFF&) Or (.Item(lOffset + 1) << 16)
#End If
lHigh = BSwap32(pvCombine(lHigh))
lLow = BSwap32(pvCombine(lLow))
#If Not HasOperators Then
.Item(lOffset) = (((lHigh2 And (LNG_POW2_15 - 1)) * LNG_POW2_16 Or -((lHigh2 And LNG_POW2_15) <> 0) * &H80000000) Or (lLow2 And &HFFFF&))
.Item(lOffset + 1) = ((lHigh2 And &HFFFF0000) Or ((lLow2 And &H7FFFFFFF) \ LNG_POW2_16 Or -(lLow2 < 0) * LNG_POW2_15))
#Else
.Item(lOffset) = ((lHigh2 << 16) Or (lLow2 And &HFFFF&))
.Item(lOffset + 1) = ((lHigh2 And &HFFFF0000) Or (lLow2 >> 16))
#End If
End With
#If DebugState Then
Debug.Print pvDumpState(uCtx), "sliced decrypt " & Right$("00000000" & Hex(lHigh), 8) & " " & Right$("00000000" & Hex(lLow), 8), lOffset
#End If
End Sub
Private Sub pvPermuteSliced(uState As ArrayLong10, ByVal lRounds As Long)
Dim S0_e As Long
Dim S0_o As Long
Dim S1_e As Long
Dim S1_o As Long
Dim S2_e As Long
Dim S2_o As Long
Dim S3_e As Long
Dim S3_o As Long
Dim S4_e As Long
Dim S4_o As Long
Dim lTemp0 As Long
Dim lTemp1 As Long
Dim lIdx As Long
With uState
S0_e = .Item(0)
S0_o = .Item(1)
S1_e = .Item(2)
S1_o = .Item(3)
S2_e = .Item(4)
S2_o = .Item(5)
S3_e = .Item(6)
S3_o = .Item(7)
S4_e = .Item(8)
S4_o = .Item(9)
For lIdx = LNG_ROUNDS - lRounds To LNG_ROUNDS - 1
'--- round constant
S2_e = S2_e Xor LNG_RC(2 * lIdx)
S2_o = S2_o Xor LNG_RC(2 * lIdx + 1)
'--- substitution layer (high)
S0_e = S0_e Xor S4_e
S4_e = S4_e Xor S3_e
S2_e = S2_e Xor S1_e
lTemp0 = S0_e And Not S4_e
S0_e = S0_e Xor (S2_e And Not S1_e)
S2_e = S2_e Xor (S4_e And Not S3_e)
S4_e = S4_e Xor (S1_e And Not S0_e)
S1_e = S1_e Xor (S3_e And Not S2_e)
S3_e = S3_e Xor lTemp0
S1_e = S1_e Xor S0_e
S0_e = S0_e Xor S4_e
S3_e = S3_e Xor S2_e
S2_e = Not S2_e
'--- substitution layer (low)
S0_o = S0_o Xor S4_o
S4_o = S4_o Xor S3_o
S2_o = S2_o Xor S1_o
lTemp0 = S0_o And Not S4_o
S0_o = S0_o Xor (S2_o And Not S1_o)
S2_o = S2_o Xor (S4_o And Not S3_o)
S4_o = S4_o Xor (S1_o And Not S0_o)
S1_o = S1_o Xor (S3_o And Not S2_o)
S3_o = S3_o Xor lTemp0
S1_o = S1_o Xor S0_o
S0_o = S0_o Xor S4_o
S3_o = S3_o Xor S2_o
S2_o = Not S2_o
'--- linear diffusion layer
#If Not HasOperators Then
lTemp0 = ((S0_o And &H7FFFFFFF) \ LNG_POW2_4 - (S0_o < 0) * LNG_POW2_27) Or _
((S0_o And (LNG_POW2_3 - 1)) * LNG_POW2_28 Or -((S0_o And LNG_POW2_3) <> 0) * &H80000000) Xor S0_e
lTemp1 = ((S0_e And &H7FFFFFFF) \ LNG_POW2_5 - (S0_e < 0) * LNG_POW2_26) Or _
((S0_e And (LNG_POW2_4 - 1)) * LNG_POW2_27 Or -((S0_e And LNG_POW2_4) <> 0) * &H80000000) Xor S0_o
S0_e = ((lTemp1 And &H7FFFFFFF) \ LNG_POW2_9 - (lTemp1 < 0) * LNG_POW2_22) Or _
((lTemp1 And (LNG_POW2_8 - 1)) * LNG_POW2_23 Or -((lTemp1 And LNG_POW2_8) <> 0) * &H80000000) Xor S0_e
S0_o = ((lTemp0 And &H7FFFFFFF) \ LNG_POW2_10 - (lTemp0 < 0) * LNG_POW2_21) Or _
((lTemp0 And (LNG_POW2_9 - 1)) * LNG_POW2_22 Or -((lTemp0 And LNG_POW2_9) <> 0) * &H80000000) Xor S0_o
lTemp0 = ((S1_e And &H7FFFFFFF) \ LNG_POW2_11 - (S1_e < 0) * LNG_POW2_20) Or _
((S1_e And (LNG_POW2_10 - 1)) * LNG_POW2_21 Or -((S1_e And LNG_POW2_10) <> 0) * &H80000000) Xor S1_e
lTemp1 = ((S1_o And &H7FFFFFFF) \ LNG_POW2_11 - (S1_o < 0) * LNG_POW2_20) Or _
((S1_o And (LNG_POW2_10 - 1)) * LNG_POW2_21 Or -((S1_o And LNG_POW2_10) <> 0) * &H80000000) Xor S1_o
S1_e = ((lTemp1 And &H7FFFFFFF) \ LNG_POW2_19 - (lTemp1 < 0) * LNG_POW2_12) Or _
((lTemp1 And (LNG_POW2_18 - 1)) * LNG_POW2_13 Or -((lTemp1 And LNG_POW2_18) <> 0) * &H80000000) Xor S1_e
S1_o = ((lTemp0 And &H7FFFFFFF) \ LNG_POW2_20 - (lTemp0 < 0) * LNG_POW2_11) Or _
((lTemp0 And (LNG_POW2_19 - 1)) * LNG_POW2_12 Or -((lTemp0 And LNG_POW2_19) <> 0) * &H80000000) Xor S1_o
lTemp0 = ((S2_o And &H7FFFFFFF) \ LNG_POW2_2 - (S2_o < 0) * LNG_POW2_29) Or _
((S2_o And (LNG_POW2_1 - 1)) * LNG_POW2_30 Or -((S2_o And LNG_POW2_1) <> 0) * &H80000000) Xor S2_e
lTemp1 = ((S2_e And &H7FFFFFFF) \ LNG_POW2_3 - (S2_e < 0) * LNG_POW2_28) Or _
((S2_e And (LNG_POW2_2 - 1)) * LNG_POW2_29 Or -((S2_e And LNG_POW2_2) <> 0) * &H80000000) Xor S2_o
S2_e = lTemp1 Xor S2_e
S2_o = ((lTemp0 And &H7FFFFFFF) \ LNG_POW2_1 - (lTemp0 < 0) * LNG_POW2_30) Or _
((lTemp0 And 0) * LNG_POW2_31 Or -((lTemp0 And 1) <> 0) * &H80000000) Xor S2_o
lTemp0 = ((S3_o And &H7FFFFFFF) \ LNG_POW2_3 - (S3_o < 0) * LNG_POW2_28) Or _
((S3_o And (LNG_POW2_2 - 1)) * LNG_POW2_29 Or -((S3_o And LNG_POW2_2) <> 0) * &H80000000) Xor S3_e
lTemp1 = ((S3_e And &H7FFFFFFF) \ LNG_POW2_4 - (S3_e < 0) * LNG_POW2_27) Or _
((S3_e And (LNG_POW2_3 - 1)) * LNG_POW2_28 Or -((S3_e And LNG_POW2_3) <> 0) * &H80000000) Xor S3_o
S3_e = ((lTemp0 And &H7FFFFFFF) \ LNG_POW2_5 - (lTemp0 < 0) * LNG_POW2_26) Or _
((lTemp0 And (LNG_POW2_4 - 1)) * LNG_POW2_27 Or -((lTemp0 And LNG_POW2_4) <> 0) * &H80000000) Xor S3_e
S3_o = ((lTemp1 And &H7FFFFFFF) \ LNG_POW2_5 - (lTemp1 < 0) * LNG_POW2_26) Or _
((lTemp1 And (LNG_POW2_4 - 1)) * LNG_POW2_27 Or -((lTemp1 And LNG_POW2_4) <> 0) * &H80000000) Xor S3_o
lTemp0 = ((S4_e And &H7FFFFFFF) \ LNG_POW2_17 - (S4_e < 0) * LNG_POW2_14) Or _
((S4_e And (LNG_POW2_16 - 1)) * LNG_POW2_15 Or -((S4_e And LNG_POW2_16) <> 0) * &H80000000) Xor S4_e
lTemp1 = ((S4_o And &H7FFFFFFF) \ LNG_POW2_17 - (S4_o < 0) * LNG_POW2_14) Or _
((S4_o And (LNG_POW2_16 - 1)) * LNG_POW2_15 Or -((S4_o And LNG_POW2_16) <> 0) * &H80000000) Xor S4_o
S4_e = ((lTemp1 And &H7FFFFFFF) \ LNG_POW2_3 - (lTemp1 < 0) * LNG_POW2_28) Or _
((lTemp1 And (LNG_POW2_2 - 1)) * LNG_POW2_29 Or -((lTemp1 And LNG_POW2_2) <> 0) * &H80000000) Xor S4_e
S4_o = ((lTemp0 And &H7FFFFFFF) \ LNG_POW2_4 - (lTemp0 < 0) * LNG_POW2_27) Or _
((lTemp0 And (LNG_POW2_3 - 1)) * LNG_POW2_28 Or -((lTemp0 And LNG_POW2_3) <> 0) * &H80000000) Xor S4_o
#Else
lTemp0 = S0_e Xor (S0_o >> 4 Or S0_o << 28)
lTemp1 = S0_o Xor (S0_e >> 5 Or S0_e << 27)
S0_e = S0_e Xor (lTemp1 >> 9 Or lTemp1 << 23)
S0_o = S0_o Xor (lTemp0 >> 10 Or lTemp0 << 22)
lTemp0 = S1_e Xor (S1_e >> 11 Or S1_e << 21)
lTemp1 = S1_o Xor (S1_o >> 11 Or S1_o << 21)
S1_e = S1_e Xor (lTemp1 >> 19 Or lTemp1 << 13)
S1_o = S1_o Xor (lTemp0 >> 20 Or lTemp0 << 12)
lTemp0 = S2_e Xor (S2_o >> 2 Or S2_o << 30)
lTemp1 = S2_o Xor (S2_e >> 3 Or S2_e << 29)
S2_e = S2_e Xor lTemp1
S2_o = S2_o Xor (lTemp0 >> 1 Or lTemp0 << 31)
lTemp0 = S3_e Xor (S3_o >> 3 Or S3_o << 29)
lTemp1 = S3_o Xor (S3_e >> 4 Or S3_e << 28)
S3_e = S3_e Xor (lTemp0 >> 5 Or lTemp0 << 27)
S3_o = S3_o Xor (lTemp1 >> 5 Or lTemp1 << 27)
lTemp0 = S4_e Xor (S4_e >> 17 Or S4_e << 15)
lTemp1 = S4_o Xor (S4_o >> 17 Or S4_o << 15)
S4_e = S4_e Xor (lTemp1 >> 3 Or lTemp1 << 29)
S4_o = S4_o Xor (lTemp0 >> 4 Or lTemp0 << 28)
#End If
Next
.Item(0) = S0_e
.Item(1) = S0_o
.Item(2) = S1_e
.Item(3) = S1_o
.Item(4) = S2_e
.Item(5) = S2_o
.Item(6) = S3_e
.Item(7) = S3_o
.Item(8) = S4_e
.Item(9) = S4_o
End With
#If DebugState Then
Debug.Print pvDumpState(uCtx), "sliced permute " & lRounds
#End If
End Sub
Private Sub pvInitPeek(uArray As SAFEARRAY1D, baInput() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1)
If Size < 0 Then
Size = UBound(baInput) + 1 - Pos
End If
With uArray
.pvData = VarPtr(baInput(Pos))
.cElements = Size \ .cbElements
End With
End Sub
Private Function pvDumpState(uCtx As CryptoAsconContext) As String
Dim uCopy As ArrayLong10
uCopy = uCtx.State
pvFromSliced uCtx.State
pvDumpState = ToHex(uCtx.Bytes)
uCtx.State = uCopy
End Function
Private Sub pvInit(uCtx As CryptoAsconContext)
Const FADF_AUTO As Long = 1
Dim lIdx As Long
Dim vElem As Variant
Dim uEmpty As CryptoAsconContext
Dim pDummy As LongPtr
If LNG_RC(0) = 0 Then
lIdx = 0
For Each vElem In Split("12 12 9 12 12 9 9 9 6 12 3 12 6 9 3 9 12 6 9 6 12 3 9 3")
LNG_RC(lIdx) = vElem
lIdx = lIdx + 1
Next
With m_uArrayPeek
.cDims = 1
.fFeatures = FADF_AUTO
.cbElements = 4
.cLocks = 1
End With
Call CopyMemory(ByVal ArrPtr(m_aPeek), VarPtr(m_uArrayPeek), LenB(pDummy))
End If
uCtx = uEmpty
With uCtx
With .ArrayBytes
.cDims = 1
.fFeatures = FADF_AUTO
.cbElements = 1
.cLocks = 1
.pvData = VarPtr(uCtx.State.Item(0))
.cElements = LNG_STATESZ \ .cbElements
End With
Call CopyMemory(ByVal ArrPtr(.Bytes), VarPtr(.ArrayBytes), LenB(pDummy))
End With
End Sub
Private Sub pvInitHash(uCtx As CryptoAsconContext, Optional AsconVariant As String)
Dim sState As Variant
Dim vElem As Variant
Dim lIdx As Long
pvInit uCtx
With uCtx
Select Case LCase$(AsconVariant)
Case "ascon-hash", vbNullString
.RoundsItermediate = LNG_ROUNDS
sState = "AA9893EE 3DF067DB 3118B28B 2100FC6 DB928AB4 62DAD598 21991843 E8E3F8B8 C9A58F34 40E125D5"
Case "ascon-hasha"
.RoundsItermediate = LNG_ROUNDS \ 2 + 2
sState = "94014701 A62865FC 8AC38E73 A7FFADC0 29E3C82E 4C38766C 4DA5F6D6 7D37527F A2423CA1 878DBE23"
Case "ascon-xof"
.RoundsItermediate = LNG_ROUNDS
sState = "3B277EB5 16D44C81 2504512B 2024AE62 76A7A366 1822DF8D 7A0AAD5A C655381 320E3E4F B6939453"
Case "ascon-xofa"
.RoundsItermediate = LNG_ROUNDS \ 2 + 2
sState = "68659044 32987BB7 AE6C8DCD 32554553 2721B5F7 29214256 E1856824 5B220DDE E35CCBA8 3F974934"
Case Else
Err.Raise vbObjectError, , "Invalid variant for Ascon hash (" & AsconVariant & ")"
End Select
.Rate = LNG_BLOCKSZ
.RoundsFinal = LNG_ROUNDS
.Key = vbNullString
'--- init state
For Each vElem In Split(sState)
.State.Item(lIdx) = "&H" & vElem
lIdx = lIdx + 1
Next
pvToSliced .State
End With
End Sub
Private Sub pvInitAead(uCtx As CryptoAsconContext, baKey() As Byte, Nonce As Variant, AssociatedData As Variant, AsconVariant As String, Optional ByVal Encrypt As Boolean)
Dim baNonce() As Byte
Dim baAad() As Byte
Dim lKeySize As Long
pvInit uCtx
If IsMissing(Nonce) Then
baNonce = vbNullString
Else
baNonce = Nonce
End If
ReDim Preserve baNonce(0 To LNG_NONCESZ - 1) As Byte
If IsMissing(AssociatedData) Then
baAad = vbNullString
Else
baAad = AssociatedData
End If
With uCtx
Select Case LCase$(AsconVariant)
Case "ascon-128", vbNullString
lKeySize = LNG_KEYSZ
.RoundsItermediate = LNG_ROUNDS \ 2
.Rate = LNG_BLOCKSZ
.State.Item(0) = &H60C4080
Case "ascon-128a"
lKeySize = LNG_KEYSZ
.RoundsItermediate = LNG_ROUNDS \ 2 + 2
.Rate = 2 * LNG_BLOCKSZ
.State.Item(0) = &H80C8080
Case "ascon-80pq"
lKeySize = LNG_KEYSZ + 4
.RoundsItermediate = LNG_ROUNDS \ 2
.Rate = LNG_BLOCKSZ
.State.Item(0) = &H60C40A0
Case Else
Err.Raise vbObjectError, , "Invalid variant for Ascon AEAD (" & AsconVariant & ")"
End Select
.RoundsFinal = LNG_ROUNDS
.Key = baKey
.Encrypt = Encrypt
Debug.Assert UBound(.Key) + 1 = lKeySize
If UBound(.Key) + 1 <> lKeySize Then
ReDim Preserve .Key(0 To lKeySize - 1) As Byte
End If
'--- init state
Call CopyMemory(.Bytes(LNG_STATESZ - LNG_NONCESZ - lKeySize), .Key(0), lKeySize)
Call CopyMemory(.Bytes(LNG_STATESZ - LNG_NONCESZ), baNonce(0), LNG_NONCESZ)
pvToSliced .State
pvPermuteSliced .State, .RoundsFinal
pvInitPeek m_uArrayPeek, .Key
If lKeySize = LNG_KEYSZ Then
pvAbsorbSliced .State, m_aPeek(0), m_aPeek(1), 3
pvAbsorbSliced .State, m_aPeek(2), m_aPeek(3), 4
Else
pvAbsorbSliced .State, 0, m_aPeek(0), 2
pvAbsorbSliced .State, m_aPeek(1), m_aPeek(2), 3
pvAbsorbSliced .State, m_aPeek(3), m_aPeek(4), 4
End If
'--- process associated data
If UBound(baAad) >= 0 Then
pvUpdate uCtx, baAad, 0, UBound(baAad) + 1, Final:=.RoundsItermediate
.Absorbed = 0
End If
'--- separator
.State.Item(8) = .State.Item(8) Xor 1
End With
End Sub
Private Sub pvUpdate(uCtx As CryptoAsconContext, baBuffer() As Byte, ByVal Pos As Long, ByVal Size As Long, Optional ByVal Aead As Boolean, Optional ByVal Final As Long)
Dim aTemp(0 To 3) As Long
Dim aLongs(0 To 3) As Long
Dim lIdx As Long
Dim lTemp As Long
Dim bEncrypt As Boolean
Dim bDecrypt As Boolean
If Size < 0 Then
Size = UBound(baBuffer) + 1 - Pos
End If
With uCtx
If Aead Then
bEncrypt = .Encrypt
bDecrypt = Not .Encrypt
End If
If Size > 0 And .Absorbed > 0 Then
lTemp = .Rate - .Absorbed
If lTemp > Size Then
lTemp = Size
End If
Debug.Assert UBound(baBuffer) + 1 >= Pos + lTemp
Call CopyMemory(ByVal VarPtr(aTemp(0)) + .Absorbed, baBuffer(Pos), lTemp)
pvAbsorbSliced .State, aTemp(0), aTemp(1), 0
If .Rate > LNG_BLOCKSZ Then
pvAbsorbSliced .State, aTemp(2), aTemp(3), 1
End If
.Absorbed = .Absorbed + lTemp
If .Absorbed = .Rate Then
pvPermuteSliced .State, .RoundsItermediate
.Absorbed = 0
End If
Pos = Pos + lTemp
Size = Size - lTemp
End If
If Size > 0 Then
pvInitPeek m_uArrayPeek, baBuffer, Pos, Size
If .Rate = LNG_BLOCKSZ Then
For lIdx = 0 To UBound(m_aPeek) - 1 Step 2
If bDecrypt Then
pvDecryptSliced .State, m_aPeek(lIdx + 0), m_aPeek(lIdx + 1), 0
Else
pvAbsorbSliced .State, m_aPeek(lIdx + 0), m_aPeek(lIdx + 1), 0
If bEncrypt Then
pvSqueezeSliced .State, m_aPeek(lIdx + 0), m_aPeek(lIdx + 1), 0
End If
End If
pvPermuteSliced .State, .RoundsItermediate
Next
Else
For lIdx = 0 To UBound(m_aPeek) - 3 Step 4
If bDecrypt Then
pvDecryptSliced .State, m_aPeek(lIdx + 0), m_aPeek(lIdx + 1), 0
pvDecryptSliced .State, m_aPeek(lIdx + 2), m_aPeek(lIdx + 3), 1
Else
pvAbsorbSliced .State, m_aPeek(lIdx + 0), m_aPeek(lIdx + 1), 0
pvAbsorbSliced .State, m_aPeek(lIdx + 2), m_aPeek(lIdx + 3), 1
If bEncrypt Then
pvSqueezeSliced .State, m_aPeek(lIdx + 0), m_aPeek(lIdx + 1), 0
pvSqueezeSliced .State, m_aPeek(lIdx + 2), m_aPeek(lIdx + 3), 1
End If
End If
pvPermuteSliced .State, .RoundsItermediate
Next
End If
.Absorbed = Size - lIdx * 4
lIdx = Pos + lIdx * 4
If .Absorbed > 0 Then
Debug.Assert UBound(baBuffer) + 1 >= lIdx + .Absorbed
Call CopyMemory(aLongs(0), baBuffer(lIdx), .Absorbed)
End If
End If
Debug.Assert .Absorbed < .Rate
If Final > 0 Then
If .Absorbed > 0 And bDecrypt Then
pvSqueezeSliced .State, aTemp(0), aTemp(1), 0
If .Rate > LNG_BLOCKSZ Then
pvSqueezeSliced .State, aTemp(2), aTemp(3), 1
End If
Call FillMemory(ByVal VarPtr(aTemp(0)) + .Absorbed, .Rate - .Absorbed, 0)
aLongs(0) = aLongs(0) Xor aTemp(0)
aLongs(1) = aLongs(1) Xor aTemp(1)
If .Rate > LNG_BLOCKSZ Then
aLongs(2) = aLongs(2) Xor aTemp(2)
aLongs(3) = aLongs(3) Xor aTemp(3)
End If
End If
Call CopyMemory(ByVal VarPtr(aLongs(0)) + .Absorbed, &H80&, 1)
pvAbsorbSliced .State, aLongs(0), aLongs(1), 0
If .Rate > LNG_BLOCKSZ Then
pvAbsorbSliced .State, aLongs(2), aLongs(3), 1
End If
If Aead Then
If .Absorbed > 0 Then
If bEncrypt Then
pvSqueezeSliced .State, aLongs(0), aLongs(1), 0
If .Rate > LNG_BLOCKSZ Then
pvSqueezeSliced .State, aLongs(2), aLongs(3), 1
End If
End If
Debug.Assert UBound(baBuffer) + 1 >= lIdx + .Absorbed
Call CopyMemory(baBuffer(lIdx), aLongs(0), .Absorbed)
End If
pvInitPeek m_uArrayPeek, .Key
pvAbsorbSliced .State, m_aPeek(0), m_aPeek(1), 1
pvAbsorbSliced .State, m_aPeek(2), m_aPeek(3), 2
If UBound(.Key) + 1 > LNG_KEYSZ Then
pvAbsorbSliced .State, m_aPeek(4), 0, 3
End If
End If
pvPermuteSliced .State, Final
ElseIf .Absorbed > 0 Then
Call CopyMemory(aLongs(0), baBuffer(lIdx), .Absorbed)
pvAbsorbSliced .State, aLongs(0), aLongs(1), 0
If .Rate > LNG_BLOCKSZ Then
pvAbsorbSliced .State, aLongs(2), aLongs(3), 1
End If
End If
End With
End Sub
Private Sub pvFinalizeHash(uCtx As CryptoAsconContext, baOutput() As Byte, Optional ByVal OutSize As Long)
Dim aTemp(0 To 1) As Long
Dim lIdx As Long
Dim lSize As Long
Dim pDummy As LongPtr
Dim uEmpty As CryptoAsconContext
If OutSize <= 0 Then
OutSize = LNG_HASHSZ
End If
ReDim baOutput(0 To OutSize - 1) As Byte
With uCtx
For lIdx = 0 To OutSize - 1 Step LNG_BLOCKSZ
pvSqueezeSliced .State, aTemp(0), aTemp(1), 0
lSize = OutSize - lIdx
If lSize > LNG_BLOCKSZ Then
lSize = LNG_BLOCKSZ
pvPermuteSliced .State, .RoundsItermediate
End If
Call CopyMemory(baOutput(lIdx), aTemp(0), lSize)
Next
Call CopyMemory(ByVal ArrPtr(.Bytes), pDummy, LenB(pDummy))
End With
uCtx = uEmpty
End Sub
Private Sub pvFinalizeAead(uCtx As CryptoAsconContext, baOutput() As Byte)
Dim lIdx As Long
Dim pDummy As LongPtr
Dim uEmpty As CryptoAsconContext
With uCtx
pvInitPeek m_uArrayPeek, .Key
If UBound(.Key) + 1 = LNG_KEYSZ Then
pvAbsorbSliced .State, m_aPeek(0), m_aPeek(1), 3
pvAbsorbSliced .State, m_aPeek(2), m_aPeek(3), 4
Else
pvAbsorbSliced .State, 0, m_aPeek(0), 2
pvAbsorbSliced .State, m_aPeek(1), m_aPeek(2), 3
pvAbsorbSliced .State, m_aPeek(3), m_aPeek(4), 4
End If
ReDim baOutput(0 To LNG_TAGSZ - 1) As Byte
pvInitPeek m_uArrayPeek, baOutput
pvSqueezeSliced .State, m_aPeek(0), m_aPeek(1), 3
pvSqueezeSliced .State, m_aPeek(2), m_aPeek(3), 4
'--- wipe key
For lIdx = 0 To UBound(.Key)
.Key(lIdx) = 0
Next
Call CopyMemory(ByVal ArrPtr(.Bytes), pDummy, LenB(pDummy))
End With
uCtx = uEmpty
End Sub
Private Function ToUtf8Array(sText As String) As Byte()
Const CP_UTF8 As Long = 65001
Dim baRetVal() As Byte
Dim lSize As Long
ReDim baRetVal(0 To 4 * Len(sText)) As Byte
lSize = WideCharToMultiByte(CP_UTF8, 0, StrPtr(sText), Len(sText), baRetVal(0), UBound(baRetVal) + 1, 0, 0)
If lSize > 0 Then
ReDim Preserve baRetVal(0 To lSize - 1) As Byte
Else
baRetVal = vbNullString
End If
ToUtf8Array = baRetVal
End Function
Private Function ToHex(baData() As Byte) As String
Dim lIdx As Long
Dim sByte As String
ToHex = String$(UBound(baData) * 2 + 2, 48)
For lIdx = 0 To UBound(baData)
sByte = LCase$(Hex$(baData(lIdx)))
Mid$(ToHex, lIdx * 2 + 3 - Len(sByte)) = sByte
Next
End Function
Public Sub CryptoAsconHashInit(uCtx As CryptoAsconContext, Optional AsconVariant As String)
pvInitHash uCtx, AsconVariant
End Sub
Public Sub CryptoAsconHashUpdate(uCtx As CryptoAsconContext, baInput() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1)
pvUpdate uCtx, baInput, Pos, Size
End Sub
Public Sub CryptoAsconHashFinalize(uCtx As CryptoAsconContext, baOutput() As Byte, Optional ByVal OutSize As Long)
pvUpdate uCtx, uCtx.Bytes, 0, 0, Final:=uCtx.RoundsFinal
pvFinalizeHash uCtx, baOutput, OutSize
End Sub
Public Function CryptoAsconHashByteArray(baInput() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1, Optional AsconVariant As String, Optional OutSize As Long) As Byte()
Dim uCtx As CryptoAsconContext
pvInitHash uCtx, AsconVariant
pvUpdate uCtx, baInput, Pos, Size, Final:=uCtx.RoundsFinal
pvFinalizeHash uCtx, CryptoAsconHashByteArray, OutSize
End Function
Public Function CryptoAsconHashText(sText As String, Optional AsconVariant As String) As String
CryptoAsconHashText = ToHex(CryptoAsconHashByteArray(ToUtf8Array(sText), AsconVariant:=AsconVariant))
End Function
Public Sub CryptoAsconEncrypt(baKey() As Byte, baTag() As Byte, _
baBuffer() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1, _
Optional Nonce As Variant, Optional AssociatedData As Variant, Optional AsconVariant As String)
Dim uCtx As CryptoAsconContext
pvInitAead uCtx, baKey, Nonce, AssociatedData, AsconVariant, Encrypt:=True
pvUpdate uCtx, baBuffer, Pos, Size, Aead:=True, Final:=uCtx.RoundsFinal
pvFinalizeAead uCtx, baTag
End Sub
Public Function CryptoAsconDecrypt(baKey() As Byte, baTag() As Byte, _
baBuffer() As Byte, Optional ByVal Pos As Long, Optional ByVal Size As Long = -1, _
Optional Nonce As Variant, Optional AssociatedData As Variant, Optional AsconVariant As String) As Boolean
Dim uCtx As CryptoAsconContext
Dim baTemp() As Byte
pvInitAead uCtx, baKey, Nonce, AssociatedData, AsconVariant
pvUpdate uCtx, baBuffer, Pos, Size, Aead:=True, Final:=uCtx.RoundsFinal
pvFinalizeAead uCtx, baTemp
If UBound(baTemp) = UBound(baTag) Then
CryptoAsconDecrypt = (InStrB(baTemp, baTag) = 1)
End If
End Function
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment