From 71ff104fd8a2f2ef7e394cfdabed3f60bc675663 Mon Sep 17 00:00:00 2001 From: fumiama Date: Mon, 14 Feb 2022 23:24:06 +0800 Subject: [PATCH] add To func --- tea.go | 31 ++++++++ tea_1.16.go | 175 +++++++++++++++++++++++++++++++++++++++------- tea_1.16_amd64.go | 66 ++++------------- tea_1.16_pure.go | 92 ++++++++++++------------ tea_1.17.go | 107 +++++++++++++++++++--------- 5 files changed, 317 insertions(+), 154 deletions(-) diff --git a/tea.go b/tea.go index 6b487f4..08d8141 100644 --- a/tea.go +++ b/tea.go @@ -2,4 +2,35 @@ // from https://github.com/Mrs4s/MiraiGo/blob/master/binary/tea.go package tea +import ( + "encoding/binary" + _ "unsafe" // required by go:linkname +) + type TEA [4]uint32 + +// randuint32 returns a lock free uint32 value. +//go:linkname randuint32 runtime.fastrand +func randuint32() uint32 + +//go:nosplit +func NewTeaCipher(key []byte) (t TEA) { + if len(key) == 16 { + t[3] = binary.BigEndian.Uint32(key[12:]) + t[2] = binary.BigEndian.Uint32(key[8:]) + t[1] = binary.BigEndian.Uint32(key[4:]) + t[0] = binary.BigEndian.Uint32(key[0:]) + } + return +} + +//go:nosplit +func NewTeaCipherLittleEndian(key []byte) (t TEA) { + if len(key) == 16 { + t[3] = binary.LittleEndian.Uint32(key[12:]) + t[2] = binary.LittleEndian.Uint32(key[8:]) + t[1] = binary.LittleEndian.Uint32(key[4:]) + t[0] = binary.LittleEndian.Uint32(key[0:]) + } + return +} diff --git a/tea_1.16.go b/tea_1.16.go index 15daab6..9384703 100644 --- a/tea_1.16.go +++ b/tea_1.16.go @@ -3,14 +3,7 @@ package tea -import ( - "encoding/binary" - _ "unsafe" // required by go:linkname -) - -// randuint32 returns a lock free uint32 value. -//go:linkname randuint32 runtime.fastrand -func randuint32() uint32 +import "encoding/binary" // Encrypt tea 加密 // http://bbs.chinaunix.net/thread-583468-1-1.html @@ -43,6 +36,138 @@ func (t TEA) EncryptLittleEndian(src []byte, sumtable [0x10]uint32) (dst []byte) return dst } +//go:nosplit +func (t TEA) EncryptLittleEndianTo(src []byte, sumtable [0x10]uint32, dst []byte) int { + lens := len(src) + fill := 10 - (lens+1)&7 + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) + dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 + copy(dst[fill:], src) + + var iv1, iv2, holder uint64 + var v0, v1 uint32 + for i := 0; i < len(dst); i += 8 { + holder = binary.LittleEndian.Uint64(dst[i:]) ^ iv1 + v0, v1 = uint32(holder>>32), uint32(holder) + for i := 0; i < 0x10; i++ { + v0 += (v1 + sumtable[i]) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + sumtable[i]) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + } + iv1 = (uint64(v0)<<32 | uint64(v1)) ^ iv2 + iv2 = holder + binary.LittleEndian.PutUint64(dst[i:], iv1) + } + + return fill + lens + 7 +} + +//go:nosplit +func (t TEA) Decrypt(data []byte) []byte { + if len(data) < 16 || len(data)&7 != 0 { + return nil + } + dst := make([]byte, len(data)) + + var iv1, iv2, holder uint64 + var v0, v1 uint32 + for i := 0; i < len(dst); i += 8 { + iv1 = binary.BigEndian.Uint64(data[i:]) + iv2 ^= iv1 + v0, v1 = uint32(iv2>>32), uint32(iv2) + v1 -= (v0 + 0xe3779b90) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xe3779b90) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x454021d7) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x454021d7) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xa708a81e) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xa708a81e) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x08d12e65) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x08d12e65) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x6a99b4ac) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x6a99b4ac) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xcc623af3) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xcc623af3) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x2e2ac13a) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x2e2ac13a) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x8ff34781) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x8ff34781) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xf1bbcdc8) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xf1bbcdc8) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x5384540f) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x5384540f) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xb54cda56) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xb54cda56) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x1715609d) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x1715609d) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x78dde6e4) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x78dde6e4) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xdaa66d2b) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xdaa66d2b) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x3c6ef372) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x3c6ef372) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x9e3779b9) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x9e3779b9) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + iv2 = uint64(v0)<<32 | uint64(v1) + binary.BigEndian.PutUint64(dst[i:], iv2^holder) + holder = iv1 + } + + return dst[dst[0]&7+3 : len(data)-7] +} + +//go:nosplit +func (t TEA) DecryptTo(data []byte, dst []byte) (from, to int) { + if len(data) < 16 || len(data)&7 != 0 { + return -1, -1 + } + + var iv1, iv2, holder uint64 + var v0, v1 uint32 + for i := 0; i < len(dst); i += 8 { + iv1 = binary.BigEndian.Uint64(data[i:]) + iv2 ^= iv1 + v0, v1 = uint32(iv2>>32), uint32(iv2) + v1 -= (v0 + 0xe3779b90) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xe3779b90) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x454021d7) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x454021d7) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xa708a81e) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xa708a81e) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x08d12e65) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x08d12e65) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x6a99b4ac) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x6a99b4ac) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xcc623af3) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xcc623af3) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x2e2ac13a) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x2e2ac13a) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x8ff34781) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x8ff34781) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xf1bbcdc8) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xf1bbcdc8) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x5384540f) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x5384540f) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xb54cda56) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xb54cda56) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x1715609d) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x1715609d) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x78dde6e4) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x78dde6e4) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0xdaa66d2b) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0xdaa66d2b) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x3c6ef372) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x3c6ef372) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 -= (v0 + 0x9e3779b9) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + 0x9e3779b9) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + iv2 = uint64(v0)<<32 | uint64(v1) + binary.BigEndian.PutUint64(dst[i:], iv2^holder) + holder = iv1 + } + + return int(dst[0]&7 + 3), len(data) - 7 +} + //go:nosplit func (t TEA) DecryptLittleEndian(data []byte, sumtable [0x10]uint32) []byte { if len(data) < 16 || len(data)&7 != 0 { @@ -69,23 +194,25 @@ func (t TEA) DecryptLittleEndian(data []byte, sumtable [0x10]uint32) []byte { } //go:nosplit -func NewTeaCipher(key []byte) (t TEA) { - if len(key) == 16 { - t[3] = binary.BigEndian.Uint32(key[12:]) - t[2] = binary.BigEndian.Uint32(key[8:]) - t[1] = binary.BigEndian.Uint32(key[4:]) - t[0] = binary.BigEndian.Uint32(key[0:]) +func (t TEA) DecryptLittleEndianTo(data []byte, sumtable [0x10]uint32, dst []byte) (from, to int) { + if len(data) < 16 || len(data)&7 != 0 { + return -1, -1 } - return -} -//go:nosplit -func NewTeaCipherLittleEndian(key []byte) (t TEA) { - if len(key) == 16 { - t[3] = binary.LittleEndian.Uint32(key[12:]) - t[2] = binary.LittleEndian.Uint32(key[8:]) - t[1] = binary.LittleEndian.Uint32(key[4:]) - t[0] = binary.LittleEndian.Uint32(key[0:]) + var iv1, iv2, holder uint64 + var v0, v1 uint32 + for i := 0; i < len(dst); i += 8 { + iv1 = binary.LittleEndian.Uint64(data[i:]) + iv2 ^= iv1 + v0, v1 = uint32(iv2>>32), uint32(iv2) + for i := 0xf; i >= 0; i-- { + v1 -= (v0 + sumtable[i]) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + sumtable[i]) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + } + iv2 = uint64(v0)<<32 | uint64(v1) + binary.LittleEndian.PutUint64(dst[i:], iv2^holder) + holder = iv1 } - return + + return int(dst[0]&7 + 3), len(data) - 7 } diff --git a/tea_1.16_amd64.go b/tea_1.16_amd64.go index a52171c..ac0c4e1 100644 --- a/tea_1.16_amd64.go +++ b/tea_1.16_amd64.go @@ -26,6 +26,19 @@ func (t TEA) Encrypt(src []byte) (dst []byte) { return dst } +//go:nosplit +func (t TEA) EncryptTo(src []byte, dst []byte) int { + lens := len(src) + fill := 10 - (lens+1)&7 + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) + dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 + copy(dst[fill:], src) + encrypt(uintptr(*(*unsafe.Pointer)(unsafe.Pointer(&dst)))|uintptr(len(dst)<<40), uintptr(unsafe.Pointer(&t))|(uintptr(len(dst)<<16)&0xffffff00_00000000)) + return fill + lens + 7 +} + /* //go:nosplit func (t TEA) Decrypt(data []byte) []byte { @@ -37,56 +50,3 @@ func (t TEA) Decrypt(data []byte) []byte { return dst[dst[0]&7+3 : len(dst)-7] } */ - -//go:nosplit -func (t TEA) Decrypt(data []byte) []byte { - if len(data) < 16 || len(data)&7 != 0 { - return nil - } - dst := make([]byte, len(data)) - - var iv1, iv2, holder uint64 - var v0, v1 uint32 - for i := 0; i < len(dst); i += 8 { - iv1 = binary.BigEndian.Uint64(data[i:]) - iv2 ^= iv1 - v0, v1 = uint32(iv2>>32), uint32(iv2) - v1 -= (v0 + 0xe3779b90) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xe3779b90) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x454021d7) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x454021d7) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xa708a81e) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xa708a81e) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x08d12e65) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x08d12e65) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x6a99b4ac) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x6a99b4ac) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xcc623af3) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xcc623af3) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x2e2ac13a) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x2e2ac13a) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x8ff34781) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x8ff34781) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xf1bbcdc8) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xf1bbcdc8) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x5384540f) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x5384540f) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xb54cda56) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xb54cda56) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x1715609d) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x1715609d) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x78dde6e4) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x78dde6e4) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xdaa66d2b) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xdaa66d2b) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x3c6ef372) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x3c6ef372) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x9e3779b9) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x9e3779b9) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - iv2 = uint64(v0)<<32 | uint64(v1) - binary.BigEndian.PutUint64(dst[i:], iv2^holder) - holder = iv1 - } - - return dst[dst[0]&7+3 : len(data)-7] -} diff --git a/tea_1.16_pure.go b/tea_1.16_pure.go index eaa6c44..169e716 100644 --- a/tea_1.16_pure.go +++ b/tea_1.16_pure.go @@ -1,4 +1,4 @@ -//go:build !go1.17 && !amd64 || !amd64 +//go:build (!go1.17 && !amd64) || !amd64 // +build !go1.17,!amd64 !amd64 package tea @@ -67,54 +67,56 @@ func (t TEA) Encrypt(src []byte) (dst []byte) { } //go:nosplit -func (t TEA) Decrypt(data []byte) []byte { - if len(data) < 16 || len(data)&7 != 0 { - return nil - } - dst := make([]byte, len(data)) +func (t TEA) EncryptTo(src []byte, dst []byte) int { + lens := len(src) + fill := 10 - (lens+1)&7 + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) + dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 + copy(dst[fill:], src) var iv1, iv2, holder uint64 var v0, v1 uint32 for i := 0; i < len(dst); i += 8 { - iv1 = binary.BigEndian.Uint64(data[i:]) - iv2 ^= iv1 - v0, v1 = uint32(iv2>>32), uint32(iv2) - v1 -= (v0 + 0xe3779b90) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xe3779b90) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x454021d7) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x454021d7) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xa708a81e) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xa708a81e) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x08d12e65) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x08d12e65) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x6a99b4ac) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x6a99b4ac) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xcc623af3) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xcc623af3) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x2e2ac13a) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x2e2ac13a) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x8ff34781) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x8ff34781) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xf1bbcdc8) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xf1bbcdc8) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x5384540f) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x5384540f) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xb54cda56) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xb54cda56) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x1715609d) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x1715609d) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x78dde6e4) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x78dde6e4) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0xdaa66d2b) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0xdaa66d2b) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x3c6ef372) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x3c6ef372) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - v1 -= (v0 + 0x9e3779b9) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) - v0 -= (v1 + 0x9e3779b9) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) - iv2 = uint64(v0)<<32 | uint64(v1) - binary.BigEndian.PutUint64(dst[i:], iv2^holder) - holder = iv1 + holder = binary.BigEndian.Uint64(dst[i:]) ^ iv1 + v0, v1 = uint32(holder>>32), uint32(holder) + v0 += (v1 + 0x9e3779b9) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x9e3779b9) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x3c6ef372) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x3c6ef372) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0xdaa66d2b) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0xdaa66d2b) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x78dde6e4) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x78dde6e4) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x1715609d) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x1715609d) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0xb54cda56) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0xb54cda56) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x5384540f) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x5384540f) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0xf1bbcdc8) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0xf1bbcdc8) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x8ff34781) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x8ff34781) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x2e2ac13a) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x2e2ac13a) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0xcc623af3) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0xcc623af3) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x6a99b4ac) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x6a99b4ac) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x08d12e65) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x08d12e65) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0xa708a81e) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0xa708a81e) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0x454021d7) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0x454021d7) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 += (v1 + 0xe3779b90) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + 0xe3779b90) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + iv1 = (uint64(v0)<<32 | uint64(v1)) ^ iv2 + iv2 = holder + binary.BigEndian.PutUint64(dst[i:], iv1) } - return dst[dst[0]&7+3 : len(data)-7] + return fill + lens + 7 } diff --git a/tea_1.17.go b/tea_1.17.go index f37dec5..9ba2fea 100644 --- a/tea_1.17.go +++ b/tea_1.17.go @@ -3,14 +3,7 @@ package tea -import ( - "encoding/binary" - _ "unsafe" // required by go:linkname -) - -// randuint32 returns a lock free uint32 value. -//go:linkname randuint32 runtime.fastrand -func randuint32() uint32 +import "encoding/binary" // Encrypt tea 加密 // http://bbs.chinaunix.net/thread-583468-1-1.html @@ -38,6 +31,28 @@ func (t TEA) Encrypt(src []byte) (dst []byte) { return dst } +func (t TEA) EncryptTo(src []byte, dst []byte) int { + lens := len(src) + fill := 10 - (lens+1)%8 + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) + dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 + copy(dst[fill:], src) + + var iv1, iv2, holder uint64 + for i := 0; i < len(dst); i += 8 { + block := binary.BigEndian.Uint64(dst[i:]) + holder = block ^ iv1 + iv1 = t.encode(holder) + iv1 = iv1 ^ iv2 + iv2 = holder + binary.BigEndian.PutUint64(dst[i:], iv1) + } + + return fill + lens + 7 +} + func (t TEA) EncryptLittleEndian(src []byte, sumtable [0x10]uint32) (dst []byte) { lens := len(src) fill := 10 - (lens+1)%8 @@ -61,6 +76,28 @@ func (t TEA) EncryptLittleEndian(src []byte, sumtable [0x10]uint32) (dst []byte) return dst } +func (t TEA) EncryptLittleEndianTo(src []byte, sumtable [0x10]uint32, dst []byte) int { + lens := len(src) + fill := 10 - (lens+1)%8 + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) + dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 + copy(dst[fill:], src) + + var iv1, iv2, holder uint64 + for i := 0; i < len(dst); i += 8 { + block := binary.LittleEndian.Uint64(dst[i:]) + holder = block ^ iv1 + iv1 = t.encodeTable(holder, sumtable) + iv1 = iv1 ^ iv2 + iv2 = holder + binary.LittleEndian.PutUint64(dst[i:], iv1) + } + + return fill + lens + 7 +} + func (t TEA) Decrypt(data []byte) []byte { if len(data) < 16 || len(data)%8 != 0 { return nil @@ -77,6 +114,21 @@ func (t TEA) Decrypt(data []byte) []byte { return dst[dst[0]&7+3 : len(data)-7] } +func (t TEA) DecryptTo(data []byte, dst []byte) (from, to int) { + if len(data) < 16 || len(data)%8 != 0 { + return -1, -1 + } + var iv1, iv2, holder uint64 + for i := 0; i < len(dst); i += 8 { + iv1 = binary.BigEndian.Uint64(data[i:]) + iv2 ^= iv1 + iv2 = t.decode(iv2) + binary.BigEndian.PutUint64(dst[i:], iv2^holder) + holder = iv1 + } + return int(dst[0]&7 + 3), len(data) - 7 +} + func (t TEA) DecryptLittleEndian(data []byte, sumtable [0x10]uint32) []byte { if len(data) < 16 || len(data)%8 != 0 { return nil @@ -93,6 +145,21 @@ func (t TEA) DecryptLittleEndian(data []byte, sumtable [0x10]uint32) []byte { return dst[dst[0]&7+3 : len(data)-7] } +func (t TEA) DecryptLittleEndianTo(data []byte, sumtable [0x10]uint32, dst []byte) (from, to int) { + if len(data) < 16 || len(data)%8 != 0 { + return -1, -1 + } + var iv1, iv2, holder uint64 + for i := 0; i < len(dst); i += 8 { + iv1 = binary.LittleEndian.Uint64(data[i:]) + iv2 ^= iv1 + iv2 = t.decodeTable(iv2, sumtable) + binary.LittleEndian.PutUint64(dst[i:], iv2^holder) + holder = iv1 + } + return int(dst[0]&7 + 3), len(data) - 7 +} + //go:nosplit func (t *TEA) encode(n uint64) uint64 { v0, v1 := uint32(n>>32), uint32(n) @@ -202,27 +269,3 @@ func (t *TEA) decodeTable(n uint64, s [0x10]uint32) uint64 { return uint64(v0)<<32 | uint64(v1) } - -//go:nosplit -func NewTeaCipher(key []byte) (t TEA) { - if len(key) != 16 { - return TEA{} - } - t[3] = binary.BigEndian.Uint32(key[12:]) - t[2] = binary.BigEndian.Uint32(key[8:]) - t[1] = binary.BigEndian.Uint32(key[4:]) - t[0] = binary.BigEndian.Uint32(key[0:]) - return t -} - -//go:nosplit -func NewTeaCipherLittleEndian(key []byte) (t TEA) { - if len(key) != 16 { - return TEA{} - } - t[3] = binary.LittleEndian.Uint32(key[12:]) - t[2] = binary.LittleEndian.Uint32(key[8:]) - t[1] = binary.LittleEndian.Uint32(key[4:]) - t[0] = binary.LittleEndian.Uint32(key[0:]) - return t -}