280 lines
No EOL
14 KiB
JavaScript
280 lines
No EOL
14 KiB
JavaScript
//*******************************************************************************
|
|
//
|
|
// Copyright 2014 Microsoft
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//
|
|
//*******************************************************************************
|
|
|
|
/// #region JSCop/JsHint
|
|
|
|
/* global msrcryptoUtilities */
|
|
|
|
/* jshint -W016 */ /* allows bitwise operators */
|
|
|
|
/// <reference path="utilities.js" />
|
|
|
|
/// <dictionary>
|
|
/// msrcrypto,aes,mult,rcon,res,tmp,xor
|
|
/// </dictionary>
|
|
|
|
/// #endregion JSCop/JsHint
|
|
|
|
var msrcryptoBlockCipher = (function() {
|
|
|
|
var aesConstants,
|
|
multByTwo,
|
|
multByThree,
|
|
multBy14,
|
|
multBy13,
|
|
multBy11,
|
|
multBy9,
|
|
sBoxTable,
|
|
invSBoxTable,
|
|
rConTable;
|
|
|
|
return {
|
|
|
|
/// <summary>Advanced Encryption Standard implementation per FIPS 197.</summary>
|
|
aes: function ( /*@type(Array)*/ keyBytes) {
|
|
|
|
// Set up the constants the first time we create an AES object only.
|
|
if (!aesConstants) {
|
|
aesConstants = msrcryptoUtilities.unpackData("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", 256, false);
|
|
multByTwo = aesConstants[0];
|
|
multByThree = aesConstants[1];
|
|
multBy14 = aesConstants[2];
|
|
multBy13 = aesConstants[3];
|
|
multBy11 = aesConstants[4];
|
|
multBy9 = aesConstants[5];
|
|
sBoxTable = aesConstants[6];
|
|
invSBoxTable = aesConstants[7];
|
|
rConTable = aesConstants[8];
|
|
}
|
|
|
|
var blockSize = 128,
|
|
keyLength,
|
|
nK,
|
|
nB = 4,
|
|
nR,
|
|
key;
|
|
|
|
switch (keyBytes.length * 8) {
|
|
|
|
case 128:
|
|
keyLength = 128;
|
|
nK = 4;
|
|
nR = 10;
|
|
break;
|
|
|
|
case 192:
|
|
keyLength = 192;
|
|
nK = 6;
|
|
nR = 12;
|
|
break;
|
|
|
|
case 256:
|
|
keyLength = 256;
|
|
nK = 8;
|
|
nR = 14;
|
|
break;
|
|
|
|
default:
|
|
throw new Error("Unsupported keyLength");
|
|
}
|
|
|
|
var shiftRows = function (a) {
|
|
var tmp = a[1]; a[1] = a[5]; a[5] = a[9]; a[9] = a[13]; a[13] = tmp;
|
|
tmp = a[2]; a[2] = a[10]; a[10] = tmp;
|
|
tmp = a[6]; a[6] = a[14]; a[14] = tmp;
|
|
tmp = a[15]; a[15] = a[11]; a[11] = a[7]; a[7] = a[3]; a[3] = tmp;
|
|
};
|
|
|
|
var invShiftRows = function (a) {
|
|
var tmp = a[13]; a[13] = a[9]; a[9] = a[5]; a[5] = a[1]; a[1] = tmp;
|
|
tmp = a[10]; a[10] = a[2]; a[2] = tmp;
|
|
tmp = a[14]; a[14] = a[6]; a[6] = tmp;
|
|
tmp = a[3]; a[3] = a[7]; a[7] = a[11]; a[11] = a[15]; a[15] = tmp;
|
|
};
|
|
|
|
var mixColumns = function (state) {
|
|
/// <summary>Operates on the state column by column, performing a multiplication by x^4 + 1 in GF(2^8)</summary>
|
|
/// <param name="state" type="Array"> the current state (length 16)</param>
|
|
/// <returns type="Array">The mixed state</returns>
|
|
var a = state[0], b = state[1], c = state[2], d = state[3],
|
|
e = state[4], f = state[5], g = state[6], h = state[7],
|
|
i = state[8], j = state[9], k = state[10], l = state[11],
|
|
m = state[12], n = state[13], o = state[14], p = state[15];
|
|
|
|
state[0] = multByTwo[a] ^ multByThree[b] ^ c ^ d;
|
|
state[1] = a ^ multByTwo[b] ^ multByThree[c] ^ d;
|
|
state[2] = a ^ b ^ multByTwo[c] ^ multByThree[d];
|
|
state[3] = multByThree[a] ^ b ^ c ^ multByTwo[d];
|
|
state[4] = multByTwo[e] ^ multByThree[f] ^ g ^ h;
|
|
state[5] = e ^ multByTwo[f] ^ multByThree[g] ^ h;
|
|
state[6] = e ^ f ^ multByTwo[g] ^ multByThree[h];
|
|
state[7] = multByThree[e] ^ f ^ g ^ multByTwo[h];
|
|
state[8] = multByTwo[i] ^ multByThree[j] ^ k ^ l;
|
|
state[9] = i ^ multByTwo[j] ^ multByThree[k] ^ l;
|
|
state[10] = i ^ j ^ multByTwo[k] ^ multByThree[l];
|
|
state[11] = multByThree[i] ^ j ^ k ^ multByTwo[l];
|
|
state[12] = multByTwo[m] ^ multByThree[n] ^ o ^ p;
|
|
state[13] = m ^ multByTwo[n] ^ multByThree[o] ^ p;
|
|
state[14] = m ^ n ^ multByTwo[o] ^ multByThree[p];
|
|
state[15] = multByThree[m] ^ n ^ o ^ multByTwo[p];
|
|
};
|
|
|
|
var invMixColumns = function (state) {
|
|
/// <summary>Operates on the state column by column, performing a multiplication by x^4 + 1 in GF(2^8)</summary>
|
|
/// <param name="state" type="Array"> the current state (length 16)</param>
|
|
/// <returns type="Array">The mixed state</returns>
|
|
var a = state[0], b = state[1], c = state[2], d = state[3],
|
|
e = state[4], f = state[5], g = state[6], h = state[7],
|
|
i = state[8], j = state[9], k = state[10], l = state[11],
|
|
m = state[12], n = state[13], o = state[14], p = state[15];
|
|
|
|
state[0] = multBy14[a] ^ multBy11[b] ^ multBy13[c] ^ multBy9[d];
|
|
state[1] = multBy9[a] ^ multBy14[b] ^ multBy11[c] ^ multBy13[d];
|
|
state[2] = multBy13[a] ^ multBy9[b] ^ multBy14[c] ^ multBy11[d];
|
|
state[3] = multBy11[a] ^ multBy13[b] ^ multBy9[c] ^ multBy14[d];
|
|
state[4] = multBy14[e] ^ multBy11[f] ^ multBy13[g] ^ multBy9[h];
|
|
state[5] = multBy9[e] ^ multBy14[f] ^ multBy11[g] ^ multBy13[h];
|
|
state[6] = multBy13[e] ^ multBy9[f] ^ multBy14[g] ^ multBy11[h];
|
|
state[7] = multBy11[e] ^ multBy13[f] ^ multBy9[g] ^ multBy14[h];
|
|
state[8] = multBy14[i] ^ multBy11[j] ^ multBy13[k] ^ multBy9[l];
|
|
state[9] = multBy9[i] ^ multBy14[j] ^ multBy11[k] ^ multBy13[l];
|
|
state[10] = multBy13[i] ^ multBy9[j] ^ multBy14[k] ^ multBy11[l];
|
|
state[11] = multBy11[i] ^ multBy13[j] ^ multBy9[k] ^ multBy14[l];
|
|
state[12] = multBy14[m] ^ multBy11[n] ^ multBy13[o] ^ multBy9[p];
|
|
state[13] = multBy9[m] ^ multBy14[n] ^ multBy11[o] ^ multBy13[p];
|
|
state[14] = multBy13[m] ^ multBy9[n] ^ multBy14[o] ^ multBy11[p];
|
|
state[15] = multBy11[m] ^ multBy13[n] ^ multBy9[o] ^ multBy14[p];
|
|
};
|
|
|
|
var xorWord = function (a, b) {
|
|
return [a[0] ^ b[0], a[1] ^ b[1], a[2] ^ b[2], a[3] ^ b[3]];
|
|
};
|
|
|
|
var addRoundKey = function (/*@type(Array)*/state, keySchedule, offset) {
|
|
for (var i = 0 ; i < state.length ; i += 1) {
|
|
state[i] ^= keySchedule[i + offset];
|
|
}
|
|
};
|
|
|
|
var rotWord = function (/*@type(Array)*/word) {
|
|
var a = word[0];
|
|
word[0] = word[1]; word[1] = word[2]; word[2] = word[3]; word[3] = a;
|
|
};
|
|
|
|
var subWord = function (/*@type(Array)*/word) {
|
|
for (var i = 0 ; i < word.length ; i += 1) {
|
|
word[i] = sBoxTable[word[i]];
|
|
}
|
|
};
|
|
|
|
var invSubWord = function (/*@type(Array)*/word) {
|
|
for (var i = 0 ; i < word.length ; i += 1) {
|
|
word[i] = invSBoxTable[word[i]];
|
|
}
|
|
};
|
|
|
|
var getWord = function (tab, i) {
|
|
return [tab[4 * i], tab[4 * i + 1], tab[4 * i + 2], tab[4 * i + 3]];
|
|
};
|
|
|
|
var setWord = function (/*@type(Array)*/left, /*@type(Array)*/right, indexL, indexR) {
|
|
left[4 * indexL] = right[4 * indexR];
|
|
left[4 * indexL + 1] = right[4 * indexR + 1];
|
|
left[4 * indexL + 2] = right[4 * indexR + 2];
|
|
left[4 * indexL + 3] = right[4 * indexR + 3];
|
|
};
|
|
|
|
var expandKey = function (key) {
|
|
var temp, res = [], i = 0;
|
|
while (i < 4 * nK) {
|
|
res.push(key[i++]);
|
|
}
|
|
|
|
i = nK;
|
|
while (i < nB * (nR + 1)) {
|
|
temp = getWord(res, i - 1);
|
|
if (i % nK === 0) {
|
|
var index = i / nK;
|
|
var rcon = [rConTable[index], 0, 0, 0];
|
|
rotWord(temp);
|
|
subWord(temp);
|
|
temp = xorWord(temp, rcon);
|
|
} else if (nK > 6 && i % nK === 4) {
|
|
subWord(temp);
|
|
}
|
|
var newWord = xorWord(getWord(res, i - nK), temp);
|
|
setWord(res, newWord, i, 0);
|
|
i += 1;
|
|
}
|
|
return res;
|
|
};
|
|
|
|
key = expandKey(keyBytes);
|
|
|
|
return {
|
|
|
|
encrypt: function (dataBytes) {
|
|
var state = dataBytes,
|
|
round;
|
|
|
|
addRoundKey(state, key, 0);
|
|
for (round = 1 ; round <= nR - 1 ; round += 1) {
|
|
subWord(state);
|
|
shiftRows(state);
|
|
mixColumns(state);
|
|
addRoundKey(state, key, 4 * round * nB);
|
|
}
|
|
subWord(state);
|
|
shiftRows(state);
|
|
addRoundKey(state, key, 4 * nR * nB);
|
|
|
|
return state;
|
|
},
|
|
|
|
decrypt: function (dataBytes) {
|
|
var state = dataBytes,
|
|
round;
|
|
|
|
addRoundKey(state, key, 4 * nR * nB);
|
|
for (round = nR - 1 ; round >= 1 ; round -= 1) {
|
|
invShiftRows(state);
|
|
invSubWord(state);
|
|
addRoundKey(state, key, 4 * round * nB);
|
|
invMixColumns(state);
|
|
}
|
|
invShiftRows(state);
|
|
invSubWord(state);
|
|
addRoundKey(state, key, 0);
|
|
|
|
return state;
|
|
},
|
|
|
|
clear: function () {
|
|
// Reset the state
|
|
},
|
|
|
|
keyLength: keyLength,
|
|
|
|
blockSize: blockSize
|
|
|
|
};
|
|
}
|
|
|
|
};
|
|
|
|
})(); |