@li0ard/gost 0.1.5 → 0.1.7

package/kuznyechik/index.js

@@ -1,152 +1,55 @@
 import { copyBytes } from "@noble/curves/utils.js";
 import { ITER, L, PI, PI_REV } from "./const.js";
 import { xorBytes } from "../utils.js";
-const BLOCKSIZE = 16, KEYSIZE = 32;
-const S = (input, pi = PI) => {
-    const result = new Uint8Array(BLOCKSIZE);
-    //for(let i = 0; i < BLOCKSIZE; i++) result[i] = pi[input[i]];
-    result[0] = pi[input[0]];
-    result[1] = pi[input[1]];
-    result[2] = pi[input[2]];
-    result[3] = pi[input[3]];
-    result[4] = pi[input[4]];
-    result[5] = pi[input[5]];
-    result[6] = pi[input[6]];
-    result[7] = pi[input[7]];
-    result[8] = pi[input[8]];
-    result[9] = pi[input[9]];
-    result[10] = pi[input[10]];
-    result[11] = pi[input[11]];
-    result[12] = pi[input[12]];
-    result[13] = pi[input[13]];
-    result[14] = pi[input[14]];
-    result[15] = pi[input[15]];
-    return result;
-};
-const gfMultiply = (a, b) => {
-    let result = 0;
-    let high_bit;
-    for (let i = 0; i < 8; i++) {
-        if ((b & 0b00000001) === 0b00000001)
-            result ^= a;
-        high_bit = a & 0b10000000;
-        a <<= 1;
-        if (high_bit == 0b10000000)
-            a ^= 0b11000011;
-        b >>= 1;
-    }
-    return result & 0xFF;
-};
-const R = (input) => {
-    const result = new Uint8Array(BLOCKSIZE);
-    result.set(input.slice(0, 15), 1);
-    result[0] = input[15];
-    //let temp = 0;
-    //for (let i = 0; i < BLOCKSIZE; i++) temp ^= gfMultiply(result[i], L[i]);
-    let temp = gfMultiply(result[0], L[0]);
-    temp ^= gfMultiply(result[1], L[1]);
-    temp ^= gfMultiply(result[2], L[2]);
-    temp ^= gfMultiply(result[3], L[3]);
-    temp ^= gfMultiply(result[4], L[4]);
-    temp ^= gfMultiply(result[5], L[5]);
-    temp ^= gfMultiply(result[6], L[6]);
-    temp ^= gfMultiply(result[7], L[7]);
-    temp ^= gfMultiply(result[8], L[8]);
-    temp ^= gfMultiply(result[9], L[9]);
-    temp ^= gfMultiply(result[10], L[10]);
-    temp ^= gfMultiply(result[11], L[11]);
-    temp ^= gfMultiply(result[12], L[12]);
-    temp ^= gfMultiply(result[13], L[13]);
-    temp ^= gfMultiply(result[14], L[14]);
-    temp ^= gfMultiply(result[15], L[15]);
-    result[0] = temp;
-    return result;
-};
-const Rr = (input) => {
-    const result = new Uint8Array(BLOCKSIZE);
-    //let temp = 0;
-    //for (let i = 0; i < BLOCKSIZE; i++) temp ^= gfMultiply(input[i], L[i]);
-    let temp = gfMultiply(input[0], L[0]);
-    temp ^= gfMultiply(input[1], L[1]);
-    temp ^= gfMultiply(input[2], L[2]);
-    temp ^= gfMultiply(input[3], L[3]);
-    temp ^= gfMultiply(input[4], L[4]);
-    temp ^= gfMultiply(input[5], L[5]);
-    temp ^= gfMultiply(input[6], L[6]);
-    temp ^= gfMultiply(input[7], L[7]);
-    temp ^= gfMultiply(input[8], L[8]);
-    temp ^= gfMultiply(input[9], L[9]);
-    temp ^= gfMultiply(input[10], L[10]);
-    temp ^= gfMultiply(input[11], L[11]);
-    temp ^= gfMultiply(input[12], L[12]);
-    temp ^= gfMultiply(input[13], L[13]);
-    temp ^= gfMultiply(input[14], L[14]);
-    temp ^= gfMultiply(input[15], L[15]);
-    result.set(input.slice(1));
-    result[15] = temp;
-    return result;
-};
-const LL = (input) => {
-    //let result = copyBytes(input);
-    //for(let i = 0; i < BLOCKSIZE; i++) result = R(result);
-    let result = R(copyBytes(input));
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    result = R(result);
-    return result;
-};
-const LLr = (input) => {
-    //let result = copyBytes(input);
-    //for(let i = 0; i < BLOCKSIZE; i++) result = Rr(result);
-    let result = Rr(copyBytes(input));
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    result = Rr(result);
-    return result;
-};
+import { gf256Multiply } from "../gf/index.js";
+const S = (input, pi = PI) => new Uint8Array([
+    pi[input[0]], pi[input[1]], pi[input[2]], pi[input[3]],
+    pi[input[4]], pi[input[5]], pi[input[6]], pi[input[7]],
+    pi[input[8]], pi[input[9]], pi[input[10]], pi[input[11]],
+    pi[input[12]], pi[input[13]], pi[input[14]], pi[input[15]]
+]);
+const R = (input) => new Uint8Array([
+    gf256Multiply(input[15], L[0]) ^ gf256Multiply(input[0], L[1]) ^
+        gf256Multiply(input[1], L[2]) ^ gf256Multiply(input[2], L[3]) ^
+        gf256Multiply(input[3], L[4]) ^ gf256Multiply(input[4], L[5]) ^
+        gf256Multiply(input[5], L[6]) ^ gf256Multiply(input[6], L[7]) ^
+        gf256Multiply(input[7], L[8]) ^ gf256Multiply(input[8], L[9]) ^
+        gf256Multiply(input[9], L[10]) ^ gf256Multiply(input[10], L[11]) ^
+        gf256Multiply(input[11], L[12]) ^ gf256Multiply(input[12], L[13]) ^
+        gf256Multiply(input[13], L[14]) ^ gf256Multiply(input[14], L[15]),
+    ...input.subarray(0, 15)
+]);
+const Rr = (input) => new Uint8Array([
+    ...input.subarray(1, 16),
+    gf256Multiply(input[0], L[0]) ^ gf256Multiply(input[1], L[1]) ^
+        gf256Multiply(input[2], L[2]) ^ gf256Multiply(input[3], L[3]) ^
+        gf256Multiply(input[4], L[4]) ^ gf256Multiply(input[5], L[5]) ^
+        gf256Multiply(input[6], L[6]) ^ gf256Multiply(input[7], L[7]) ^
+        gf256Multiply(input[8], L[8]) ^ gf256Multiply(input[9], L[9]) ^
+        gf256Multiply(input[10], L[10]) ^ gf256Multiply(input[11], L[11]) ^
+        gf256Multiply(input[12], L[12]) ^ gf256Multiply(input[13], L[13]) ^
+        gf256Multiply(input[14], L[14]) ^ gf256Multiply(input[15], L[15])
+]);
+// Call `R` 16x times
+const LL = (input) => R(R(R(R(R(R(R(R(R(R(R(R(R(R(R(R(input))))))))))))))));
+// Call `Rr` 16x times
+const LLr = (input) => Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(Rr(input))))))))))))))));
 const LLS = (block) => LL(S(block));
 const SLLr = (block) => S(LLr(block), PI_REV);
-const F = (in_key1, in_key2, iter_constant) => xorBytes(LLS(xorBytes(in_key1, iter_constant)), in_key2);
+const F = (inKey, inKey2, iter) => xorBytes(LLS(xorBytes(inKey, iter)), inKey2);
 /** Kuznyechik (GOST R 34.12-2015) cipher */
 export class Kuznyechik {
-    keySize = KEYSIZE;
-    blockSize = BLOCKSIZE;
+    keySize = 32;
+    blockSize = 16;
     roundKeys;
     /** Kuznyechik (GOST R 34.12-2015) cipher */
     constructor(key) {
         if (key.length !== this.keySize)
             throw new Error("Invalid key length");
-        const roundKeys = Array(10).fill(null).map(() => new Uint8Array(this.blockSize));
+        const roundKeys = Array(10);
         roundKeys[0] = key.slice(0, this.blockSize);
         roundKeys[1] = key.slice(this.blockSize);
-        let temp1 = copyBytes(roundKeys[0]);
-        let temp2 = copyBytes(roundKeys[1]);
-        let temp3 = new Uint8Array(16);
-        let temp4 = new Uint8Array(16);
+        let temp1 = copyBytes(roundKeys[0]), temp2 = copyBytes(roundKeys[1]), temp3 = new Uint8Array(16), temp4 = new Uint8Array(16);
         for (let i = 0; i < 4; i++) {
             const baseIndex = i * 8;
             temp3 = F(temp1, temp2, ITER[baseIndex]);
@@ -184,8 +87,7 @@ export class Kuznyechik {
         currentBlock = LLS(xorBytes(this.roundKeys[6], currentBlock));
         currentBlock = LLS(xorBytes(this.roundKeys[7], currentBlock));
         currentBlock = LLS(xorBytes(this.roundKeys[8], currentBlock));
-        currentBlock = xorBytes(this.roundKeys[9], currentBlock);
-        return currentBlock;
+        return xorBytes(this.roundKeys[9], currentBlock);
     }
     decrypt(ciphertext) {
         if (ciphertext.length !== this.blockSize)
@@ -201,7 +103,6 @@ export class Kuznyechik {
         currentBlock = xorBytes(this.roundKeys[3], SLLr(currentBlock));
         currentBlock = xorBytes(this.roundKeys[2], SLLr(currentBlock));
         currentBlock = xorBytes(this.roundKeys[1], SLLr(currentBlock));
-        currentBlock = xorBytes(this.roundKeys[0], SLLr(currentBlock));
-        return currentBlock;
+        return xorBytes(this.roundKeys[0], SLLr(currentBlock));
     }
 }

package/magma/const.d.ts

@@ -1,58 +1,58 @@
 /** S-Box from RFC 7836 */
-export declare const ID_TC26_GOST_28147_PARAM_Z: Uint8Array<ArrayBuffer>[];
+export declare const ID_TC26_GOST_28147_PARAM_Z: Uint8Array<ArrayBuffer>;
 /** S-Box from RFC 4357 aka `CryptoPro Paramset A` */
-export declare const ID_GOST_28147_89_CRYPTO_PRO_A_PARAM_SET: Uint8Array<ArrayBuffer>[];
+export declare const ID_GOST_28147_89_CRYPTO_PRO_A_PARAM_SET: Uint8Array<ArrayBuffer>;
 /** S-Box from RFC 4357 aka `CryptoPro Paramset B` */
-export declare const ID_GOST_28147_89_CRYPTO_PRO_B_PARAM_SET: Uint8Array<ArrayBuffer>[];
+export declare const ID_GOST_28147_89_CRYPTO_PRO_B_PARAM_SET: Uint8Array<ArrayBuffer>;
 /** S-Box from RFC 4357 aka `CryptoPro Paramset C` */
-export declare const ID_GOST_28147_89_CRYPTO_PRO_C_PARAM_SET: Uint8Array<ArrayBuffer>[];
+export declare const ID_GOST_28147_89_CRYPTO_PRO_C_PARAM_SET: Uint8Array<ArrayBuffer>;
 /** S-Box from RFC 4357 aka `CryptoPro Paramset D` */
-export declare const ID_GOST_28147_89_CRYPTO_PRO_D_PARAM_SET: Uint8Array<ArrayBuffer>[];
+export declare const ID_GOST_28147_89_CRYPTO_PRO_D_PARAM_SET: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_1: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_1: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_2: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_2: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_3: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_3: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_4: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_4: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_5: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_5: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_6: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_6: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_7: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_7: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_8: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_8: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_9: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_9: Uint8Array<ArrayBuffer>;
 /** S-Box from Instruction no. 114 by State Special Communications Service of Ukraine */
-export declare const DSSZZI_UA_DKE_10: Uint8Array<ArrayBuffer>[];
-export declare const ID_GOST_28147_89_TEST_PARAM_SET: Uint8Array<ArrayBuffer>[];
-export declare const ID_GOSTR_3411_94_TEST_PARAM_SET: Uint8Array<ArrayBuffer>[];
-export declare const ID_GOSTR_3411_94_CRYPTOPRO_PARAM_SET: Uint8Array<ArrayBuffer>[];
-export declare const EAC_PARAM_SET: Uint8Array<ArrayBuffer>[];
+export declare const DSSZZI_UA_DKE_10: Uint8Array<ArrayBuffer>;
+export declare const ID_GOST_28147_89_TEST_PARAM_SET: Uint8Array<ArrayBuffer>;
+export declare const ID_GOSTR_3411_94_TEST_PARAM_SET: Uint8Array<ArrayBuffer>;
+export declare const ID_GOSTR_3411_94_CRYPTOPRO_PARAM_SET: Uint8Array<ArrayBuffer>;
+export declare const EAC_PARAM_SET: Uint8Array<ArrayBuffer>;
 /** Implemented S-Boxes */
 export declare const magmaSboxes: {
-    ID_TC26_GOST_28147_PARAM_Z: Uint8Array<ArrayBuffer>[];
-    ID_GOST_28147_89_CRYPTO_PRO_A_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    ID_GOST_28147_89_CRYPTO_PRO_B_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    ID_GOST_28147_89_CRYPTO_PRO_C_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    ID_GOST_28147_89_CRYPTO_PRO_D_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    ID_GOST_28147_89_TEST_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    ID_GOSTR_3411_94_TEST_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    ID_GOSTR_3411_94_CRYPTOPRO_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    EAC_PARAM_SET: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_1: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_2: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_3: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_4: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_5: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_6: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_7: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_8: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_9: Uint8Array<ArrayBuffer>[];
-    DSSZZI_UA_DKE_10: Uint8Array<ArrayBuffer>[];
+    ID_TC26_GOST_28147_PARAM_Z: Uint8Array<ArrayBuffer>;
+    ID_GOST_28147_89_CRYPTO_PRO_A_PARAM_SET: Uint8Array<ArrayBuffer>;
+    ID_GOST_28147_89_CRYPTO_PRO_B_PARAM_SET: Uint8Array<ArrayBuffer>;
+    ID_GOST_28147_89_CRYPTO_PRO_C_PARAM_SET: Uint8Array<ArrayBuffer>;
+    ID_GOST_28147_89_CRYPTO_PRO_D_PARAM_SET: Uint8Array<ArrayBuffer>;
+    ID_GOST_28147_89_TEST_PARAM_SET: Uint8Array<ArrayBuffer>;
+    ID_GOSTR_3411_94_TEST_PARAM_SET: Uint8Array<ArrayBuffer>;
+    ID_GOSTR_3411_94_CRYPTOPRO_PARAM_SET: Uint8Array<ArrayBuffer>;
+    EAC_PARAM_SET: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_1: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_2: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_3: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_4: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_5: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_6: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_7: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_8: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_9: Uint8Array<ArrayBuffer>;
+    DSSZZI_UA_DKE_10: Uint8Array<ArrayBuffer>;
 };
 /** Sequences of `K_i` S-Box applying */
 export declare const magmaKeySequences: {