diff --git a/tea_1.16.go b/tea_1.16.go index a289e55..15daab6 100644 --- a/tea_1.16.go +++ b/tea_1.16.go @@ -8,13 +8,65 @@ import ( _ "unsafe" // required by go:linkname ) -// Uint32 returns a lock free uint32 value. -//go:linkname Uint32 runtime.fastrand -func Uint32() uint32 +// randuint32 returns a lock free uint32 value. +//go:linkname randuint32 runtime.fastrand +func randuint32() uint32 // Encrypt tea 加密 // http://bbs.chinaunix.net/thread-583468-1-1.html // 感谢xichen大佬对TEA的解释 +//go:nosplit +func (t TEA) EncryptLittleEndian(src []byte, sumtable [0x10]uint32) (dst []byte) { + lens := len(src) + fill := 10 - (lens+1)&7 + dst = make([]byte, fill+lens+7) + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) + dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 + copy(dst[fill:], src) + + var iv1, iv2, holder uint64 + var v0, v1 uint32 + for i := 0; i < len(dst); i += 8 { + holder = binary.LittleEndian.Uint64(dst[i:]) ^ iv1 + v0, v1 = uint32(holder>>32), uint32(holder) + for i := 0; i < 0x10; i++ { + v0 += (v1 + sumtable[i]) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + v1 += (v0 + sumtable[i]) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + } + iv1 = (uint64(v0)<<32 | uint64(v1)) ^ iv2 + iv2 = holder + binary.LittleEndian.PutUint64(dst[i:], iv1) + } + + return dst +} + +//go:nosplit +func (t TEA) DecryptLittleEndian(data []byte, sumtable [0x10]uint32) []byte { + if len(data) < 16 || len(data)&7 != 0 { + return nil + } + dst := make([]byte, len(data)) + + var iv1, iv2, holder uint64 + var v0, v1 uint32 + for i := 0; i < len(dst); i += 8 { + iv1 = binary.LittleEndian.Uint64(data[i:]) + iv2 ^= iv1 + v0, v1 = uint32(iv2>>32), uint32(iv2) + for i := 0xf; i >= 0; i-- { + v1 -= (v0 + sumtable[i]) ^ ((v0 << 4) + t[2]) ^ ((v0 >> 5) + t[3]) + v0 -= (v1 + sumtable[i]) ^ ((v1 << 4) + t[0]) ^ ((v1 >> 5) + t[1]) + } + iv2 = uint64(v0)<<32 | uint64(v1) + binary.LittleEndian.PutUint64(dst[i:], iv2^holder) + holder = iv1 + } + + return dst[dst[0]&7+3 : len(data)-7] +} //go:nosplit func NewTeaCipher(key []byte) (t TEA) { @@ -26,3 +78,14 @@ func NewTeaCipher(key []byte) (t TEA) { } return } + +//go:nosplit +func NewTeaCipherLittleEndian(key []byte) (t TEA) { + if len(key) == 16 { + t[3] = binary.LittleEndian.Uint32(key[12:]) + t[2] = binary.LittleEndian.Uint32(key[8:]) + t[1] = binary.LittleEndian.Uint32(key[4:]) + t[0] = binary.LittleEndian.Uint32(key[0:]) + } + return +} diff --git a/tea_1.16_amd64.go b/tea_1.16_amd64.go index b3d2836..a52171c 100644 --- a/tea_1.16_amd64.go +++ b/tea_1.16_amd64.go @@ -17,9 +17,9 @@ func (t TEA) Encrypt(src []byte) (dst []byte) { lens := len(src) fill := 10 - (lens+1)&7 dst = make([]byte, fill+lens+7) - binary.LittleEndian.PutUint32(dst, Uint32()) - binary.LittleEndian.PutUint32(dst[4:], Uint32()) - binary.LittleEndian.PutUint32(dst[8:], Uint32()) + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 copy(dst[fill:], src) encrypt(uintptr(*(*unsafe.Pointer)(unsafe.Pointer(&dst)))|uintptr(len(dst)<<40), uintptr(unsafe.Pointer(&t))|(uintptr(len(dst)<<16)&0xffffff00_00000000)) diff --git a/tea_1.16_pure.go b/tea_1.16_pure.go index 9046c06..eaa6c44 100644 --- a/tea_1.16_pure.go +++ b/tea_1.16_pure.go @@ -15,9 +15,9 @@ func (t TEA) Encrypt(src []byte) (dst []byte) { lens := len(src) fill := 10 - (lens+1)&7 dst = make([]byte, fill+lens+7) - binary.LittleEndian.PutUint32(dst, Uint32()) - binary.LittleEndian.PutUint32(dst[4:], Uint32()) - binary.LittleEndian.PutUint32(dst[8:], Uint32()) + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 copy(dst[fill:], src) diff --git a/tea_1.17.go b/tea_1.17.go index bda57e4..f37dec5 100644 --- a/tea_1.17.go +++ b/tea_1.17.go @@ -8,9 +8,9 @@ import ( _ "unsafe" // required by go:linkname ) -// Uint32 returns a lock free uint32 value. -//go:linkname Uint32 runtime.fastrand -func Uint32() uint32 +// randuint32 returns a lock free uint32 value. +//go:linkname randuint32 runtime.fastrand +func randuint32() uint32 // Encrypt tea 加密 // http://bbs.chinaunix.net/thread-583468-1-1.html @@ -19,9 +19,9 @@ func (t TEA) Encrypt(src []byte) (dst []byte) { lens := len(src) fill := 10 - (lens+1)%8 dst = make([]byte, fill+lens+7) - binary.LittleEndian.PutUint32(dst, Uint32()) - binary.LittleEndian.PutUint32(dst[4:], Uint32()) - binary.LittleEndian.PutUint32(dst[8:], Uint32()) + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 copy(dst[fill:], src) @@ -38,6 +38,29 @@ func (t TEA) Encrypt(src []byte) (dst []byte) { return dst } +func (t TEA) EncryptLittleEndian(src []byte, sumtable [0x10]uint32) (dst []byte) { + lens := len(src) + fill := 10 - (lens+1)%8 + dst = make([]byte, fill+lens+7) + binary.LittleEndian.PutUint32(dst, randuint32()) + binary.LittleEndian.PutUint32(dst[4:], randuint32()) + binary.LittleEndian.PutUint32(dst[8:], randuint32()) + dst[0] = byte(fill-3) | 0xF8 // 存储pad长度 + copy(dst[fill:], src) + + var iv1, iv2, holder uint64 + for i := 0; i < len(dst); i += 8 { + block := binary.LittleEndian.Uint64(dst[i:]) + holder = block ^ iv1 + iv1 = t.encodeTable(holder, sumtable) + iv1 = iv1 ^ iv2 + iv2 = holder + binary.LittleEndian.PutUint64(dst[i:], iv1) + } + + return dst +} + func (t TEA) Decrypt(data []byte) []byte { if len(data) < 16 || len(data)%8 != 0 { return nil @@ -54,6 +77,22 @@ func (t TEA) Decrypt(data []byte) []byte { return dst[dst[0]&7+3 : len(data)-7] } +func (t TEA) DecryptLittleEndian(data []byte, sumtable [0x10]uint32) []byte { + if len(data) < 16 || len(data)%8 != 0 { + return nil + } + dst := make([]byte, len(data)) + var iv1, iv2, holder uint64 + for i := 0; i < len(dst); i += 8 { + iv1 = binary.LittleEndian.Uint64(data[i:]) + iv2 ^= iv1 + iv2 = t.decodeTable(iv2, sumtable) + binary.LittleEndian.PutUint64(dst[i:], iv2^holder) + holder = iv1 + } + return dst[dst[0]&7+3 : len(data)-7] +} + //go:nosplit func (t *TEA) encode(n uint64) uint64 { v0, v1 := uint32(n>>32), uint32(n) @@ -95,6 +134,19 @@ func (t *TEA) encode(n uint64) uint64 { return uint64(v0)<<32 | uint64(v1) } +//go:nosplit +func (t *TEA) encodeTable(n uint64, s [0x10]uint32) uint64 { + v0, v1 := uint32(n>>32), uint32(n) + t0, t1, t2, t3 := t[0], t[1], t[2], t[3] + + for i := 0; i < 0x10; i++ { + v0 += (v1 + s[i]) ^ ((v1 << 4) + t0) ^ ((v1 >> 5) + t1) + v1 += (v0 + s[i]) ^ ((v0 << 4) + t2) ^ ((v0 >> 5) + t3) + } + + return uint64(v0)<<32 | uint64(v1) +} + // 每次8字节 //go:nosplit func (t *TEA) decode(n uint64) uint64 { @@ -137,6 +189,20 @@ func (t *TEA) decode(n uint64) uint64 { return uint64(v0)<<32 | uint64(v1) } +// 每次8字节 +//go:nosplit +func (t *TEA) decodeTable(n uint64, s [0x10]uint32) uint64 { + v0, v1 := uint32(n>>32), uint32(n) + t0, t1, t2, t3 := t[0], t[1], t[2], t[3] + + for i := 0xf; i >= 0; i-- { + v1 -= (v0 + s[i]) ^ ((v0 << 4) + t2) ^ ((v0 >> 5) + t3) + v0 -= (v1 + s[i]) ^ ((v1 << 4) + t0) ^ ((v1 >> 5) + t1) + } + + return uint64(v0)<<32 | uint64(v1) +} + //go:nosplit func NewTeaCipher(key []byte) (t TEA) { if len(key) != 16 { @@ -148,3 +214,15 @@ func NewTeaCipher(key []byte) (t TEA) { t[0] = binary.BigEndian.Uint32(key[0:]) return t } + +//go:nosplit +func NewTeaCipherLittleEndian(key []byte) (t TEA) { + if len(key) != 16 { + return TEA{} + } + t[3] = binary.LittleEndian.Uint32(key[12:]) + t[2] = binary.LittleEndian.Uint32(key[8:]) + t[1] = binary.LittleEndian.Uint32(key[4:]) + t[0] = binary.LittleEndian.Uint32(key[0:]) + return t +}