RC2.php 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652
  1. <?php
  2. /**
  3. * Pure-PHP implementation of RC2.
  4. *
  5. * Uses mcrypt, if available, and an internal implementation, otherwise.
  6. *
  7. * PHP versions 4 and 5
  8. *
  9. * Useful resources are as follows:
  10. *
  11. * - {@link http://tools.ietf.org/html/rfc2268}
  12. *
  13. * Here's a short example of how to use this library:
  14. * <code>
  15. * <?php
  16. * include 'Crypt/RC2.php';
  17. *
  18. * $rc2 = new Crypt_RC2();
  19. *
  20. * $rc2->setKey('abcdefgh');
  21. *
  22. * $plaintext = str_repeat('a', 1024);
  23. *
  24. * echo $rc2->decrypt($rc2->encrypt($plaintext));
  25. * ?>
  26. * </code>
  27. *
  28. * LICENSE: Permission is hereby granted, free of charge, to any person obtaining a copy
  29. * of this software and associated documentation files (the "Software"), to deal
  30. * in the Software without restriction, including without limitation the rights
  31. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  32. * copies of the Software, and to permit persons to whom the Software is
  33. * furnished to do so, subject to the following conditions:
  34. *
  35. * The above copyright notice and this permission notice shall be included in
  36. * all copies or substantial portions of the Software.
  37. *
  38. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  39. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  40. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
  41. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  42. * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  43. * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  44. * THE SOFTWARE.
  45. *
  46. * @category Crypt
  47. * @package Crypt_RC2
  48. * @author Patrick Monnerat <pm@datasphere.ch>
  49. * @license http://www.opensource.org/licenses/mit-license.html MIT License
  50. * @link http://phpseclib.sourceforge.net
  51. */
  52. /**
  53. * Include Crypt_Base
  54. *
  55. * Base cipher class
  56. */
  57. if (!class_exists('Crypt_Base')) {
  58. include_once 'Base.php';
  59. }
  60. /**#@+
  61. * @access public
  62. * @see Crypt_RC2::encrypt()
  63. * @see Crypt_RC2::decrypt()
  64. */
  65. /**
  66. * Encrypt / decrypt using the Counter mode.
  67. *
  68. * Set to -1 since that's what Crypt/Random.php uses to index the CTR mode.
  69. *
  70. * @link http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Counter_.28CTR.29
  71. */
  72. define('CRYPT_RC2_MODE_CTR', CRYPT_MODE_CTR);
  73. /**
  74. * Encrypt / decrypt using the Electronic Code Book mode.
  75. *
  76. * @link http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Electronic_codebook_.28ECB.29
  77. */
  78. define('CRYPT_RC2_MODE_ECB', CRYPT_MODE_ECB);
  79. /**
  80. * Encrypt / decrypt using the Code Book Chaining mode.
  81. *
  82. * @link http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Cipher-block_chaining_.28CBC.29
  83. */
  84. define('CRYPT_RC2_MODE_CBC', CRYPT_MODE_CBC);
  85. /**
  86. * Encrypt / decrypt using the Cipher Feedback mode.
  87. *
  88. * @link http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Cipher_feedback_.28CFB.29
  89. */
  90. define('CRYPT_RC2_MODE_CFB', CRYPT_MODE_CFB);
  91. /**
  92. * Encrypt / decrypt using the Cipher Feedback mode.
  93. *
  94. * @link http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Output_feedback_.28OFB.29
  95. */
  96. define('CRYPT_RC2_MODE_OFB', CRYPT_MODE_OFB);
  97. /**#@-*/
  98. /**#@+
  99. * @access private
  100. * @see Crypt_RC2::Crypt_RC2()
  101. */
  102. /**
  103. * Toggles the internal implementation
  104. */
  105. define('CRYPT_RC2_MODE_INTERNAL', CRYPT_MODE_INTERNAL);
  106. /**
  107. * Toggles the mcrypt implementation
  108. */
  109. define('CRYPT_RC2_MODE_MCRYPT', CRYPT_MODE_MCRYPT);
  110. /**#@-*/
  111. /**
  112. * Pure-PHP implementation of RC2.
  113. *
  114. * @package Crypt_RC2
  115. * @access public
  116. */
  117. class Crypt_RC2 extends Crypt_Base
  118. {
  119. /**
  120. * Block Length of the cipher
  121. *
  122. * @see Crypt_Base::block_size
  123. * @var Integer
  124. * @access private
  125. */
  126. var $block_size = 8;
  127. /**
  128. * The Key
  129. *
  130. * @see Crypt_Base::key
  131. * @see setKey()
  132. * @var String
  133. * @access private
  134. */
  135. var $key = "\0";
  136. /**
  137. * The default password key_size used by setPassword()
  138. *
  139. * @see Crypt_Base::password_key_size
  140. * @see Crypt_Base::setPassword()
  141. * @var Integer
  142. * @access private
  143. */
  144. var $password_key_size = 16; // = 128 bits
  145. /**
  146. * The namespace used by the cipher for its constants.
  147. *
  148. * @see Crypt_Base::const_namespace
  149. * @var String
  150. * @access private
  151. */
  152. var $const_namespace = 'RC2';
  153. /**
  154. * The mcrypt specific name of the cipher
  155. *
  156. * @see Crypt_Base::cipher_name_mcrypt
  157. * @var String
  158. * @access private
  159. */
  160. var $cipher_name_mcrypt = 'rc2';
  161. /**
  162. * Optimizing value while CFB-encrypting
  163. *
  164. * @see Crypt_Base::cfb_init_len
  165. * @var Integer
  166. * @access private
  167. */
  168. var $cfb_init_len = 500;
  169. /**
  170. * The key length in bits.
  171. *
  172. * @see Crypt_RC2::setKeyLength()
  173. * @see Crypt_RC2::setKey()
  174. * @var Integer
  175. * @access private
  176. * @internal Should be in range [1..1024].
  177. * @internal Changing this value after setting the key has no effect.
  178. */
  179. var $default_key_length = 1024;
  180. /**
  181. * The Key Schedule
  182. *
  183. * @see Crypt_RC2::_setupKey()
  184. * @var Array
  185. * @access private
  186. */
  187. var $keys;
  188. /**
  189. * Key expansion randomization table.
  190. * Twice the same 256-value sequence to save a modulus in key expansion.
  191. *
  192. * @see Crypt_RC2::setKey()
  193. * @var Array
  194. * @access private
  195. */
  196. var $pitable = array(
  197. 0xD9, 0x78, 0xF9, 0xC4, 0x19, 0xDD, 0xB5, 0xED,
  198. 0x28, 0xE9, 0xFD, 0x79, 0x4A, 0xA0, 0xD8, 0x9D,
  199. 0xC6, 0x7E, 0x37, 0x83, 0x2B, 0x76, 0x53, 0x8E,
  200. 0x62, 0x4C, 0x64, 0x88, 0x44, 0x8B, 0xFB, 0xA2,
  201. 0x17, 0x9A, 0x59, 0xF5, 0x87, 0xB3, 0x4F, 0x13,
  202. 0x61, 0x45, 0x6D, 0x8D, 0x09, 0x81, 0x7D, 0x32,
  203. 0xBD, 0x8F, 0x40, 0xEB, 0x86, 0xB7, 0x7B, 0x0B,
  204. 0xF0, 0x95, 0x21, 0x22, 0x5C, 0x6B, 0x4E, 0x82,
  205. 0x54, 0xD6, 0x65, 0x93, 0xCE, 0x60, 0xB2, 0x1C,
  206. 0x73, 0x56, 0xC0, 0x14, 0xA7, 0x8C, 0xF1, 0xDC,
  207. 0x12, 0x75, 0xCA, 0x1F, 0x3B, 0xBE, 0xE4, 0xD1,
  208. 0x42, 0x3D, 0xD4, 0x30, 0xA3, 0x3C, 0xB6, 0x26,
  209. 0x6F, 0xBF, 0x0E, 0xDA, 0x46, 0x69, 0x07, 0x57,
  210. 0x27, 0xF2, 0x1D, 0x9B, 0xBC, 0x94, 0x43, 0x03,
  211. 0xF8, 0x11, 0xC7, 0xF6, 0x90, 0xEF, 0x3E, 0xE7,
  212. 0x06, 0xC3, 0xD5, 0x2F, 0xC8, 0x66, 0x1E, 0xD7,
  213. 0x08, 0xE8, 0xEA, 0xDE, 0x80, 0x52, 0xEE, 0xF7,
  214. 0x84, 0xAA, 0x72, 0xAC, 0x35, 0x4D, 0x6A, 0x2A,
  215. 0x96, 0x1A, 0xD2, 0x71, 0x5A, 0x15, 0x49, 0x74,
  216. 0x4B, 0x9F, 0xD0, 0x5E, 0x04, 0x18, 0xA4, 0xEC,
  217. 0xC2, 0xE0, 0x41, 0x6E, 0x0F, 0x51, 0xCB, 0xCC,
  218. 0x24, 0x91, 0xAF, 0x50, 0xA1, 0xF4, 0x70, 0x39,
  219. 0x99, 0x7C, 0x3A, 0x85, 0x23, 0xB8, 0xB4, 0x7A,
  220. 0xFC, 0x02, 0x36, 0x5B, 0x25, 0x55, 0x97, 0x31,
  221. 0x2D, 0x5D, 0xFA, 0x98, 0xE3, 0x8A, 0x92, 0xAE,
  222. 0x05, 0xDF, 0x29, 0x10, 0x67, 0x6C, 0xBA, 0xC9,
  223. 0xD3, 0x00, 0xE6, 0xCF, 0xE1, 0x9E, 0xA8, 0x2C,
  224. 0x63, 0x16, 0x01, 0x3F, 0x58, 0xE2, 0x89, 0xA9,
  225. 0x0D, 0x38, 0x34, 0x1B, 0xAB, 0x33, 0xFF, 0xB0,
  226. 0xBB, 0x48, 0x0C, 0x5F, 0xB9, 0xB1, 0xCD, 0x2E,
  227. 0xC5, 0xF3, 0xDB, 0x47, 0xE5, 0xA5, 0x9C, 0x77,
  228. 0x0A, 0xA6, 0x20, 0x68, 0xFE, 0x7F, 0xC1, 0xAD,
  229. 0xD9, 0x78, 0xF9, 0xC4, 0x19, 0xDD, 0xB5, 0xED,
  230. 0x28, 0xE9, 0xFD, 0x79, 0x4A, 0xA0, 0xD8, 0x9D,
  231. 0xC6, 0x7E, 0x37, 0x83, 0x2B, 0x76, 0x53, 0x8E,
  232. 0x62, 0x4C, 0x64, 0x88, 0x44, 0x8B, 0xFB, 0xA2,
  233. 0x17, 0x9A, 0x59, 0xF5, 0x87, 0xB3, 0x4F, 0x13,
  234. 0x61, 0x45, 0x6D, 0x8D, 0x09, 0x81, 0x7D, 0x32,
  235. 0xBD, 0x8F, 0x40, 0xEB, 0x86, 0xB7, 0x7B, 0x0B,
  236. 0xF0, 0x95, 0x21, 0x22, 0x5C, 0x6B, 0x4E, 0x82,
  237. 0x54, 0xD6, 0x65, 0x93, 0xCE, 0x60, 0xB2, 0x1C,
  238. 0x73, 0x56, 0xC0, 0x14, 0xA7, 0x8C, 0xF1, 0xDC,
  239. 0x12, 0x75, 0xCA, 0x1F, 0x3B, 0xBE, 0xE4, 0xD1,
  240. 0x42, 0x3D, 0xD4, 0x30, 0xA3, 0x3C, 0xB6, 0x26,
  241. 0x6F, 0xBF, 0x0E, 0xDA, 0x46, 0x69, 0x07, 0x57,
  242. 0x27, 0xF2, 0x1D, 0x9B, 0xBC, 0x94, 0x43, 0x03,
  243. 0xF8, 0x11, 0xC7, 0xF6, 0x90, 0xEF, 0x3E, 0xE7,
  244. 0x06, 0xC3, 0xD5, 0x2F, 0xC8, 0x66, 0x1E, 0xD7,
  245. 0x08, 0xE8, 0xEA, 0xDE, 0x80, 0x52, 0xEE, 0xF7,
  246. 0x84, 0xAA, 0x72, 0xAC, 0x35, 0x4D, 0x6A, 0x2A,
  247. 0x96, 0x1A, 0xD2, 0x71, 0x5A, 0x15, 0x49, 0x74,
  248. 0x4B, 0x9F, 0xD0, 0x5E, 0x04, 0x18, 0xA4, 0xEC,
  249. 0xC2, 0xE0, 0x41, 0x6E, 0x0F, 0x51, 0xCB, 0xCC,
  250. 0x24, 0x91, 0xAF, 0x50, 0xA1, 0xF4, 0x70, 0x39,
  251. 0x99, 0x7C, 0x3A, 0x85, 0x23, 0xB8, 0xB4, 0x7A,
  252. 0xFC, 0x02, 0x36, 0x5B, 0x25, 0x55, 0x97, 0x31,
  253. 0x2D, 0x5D, 0xFA, 0x98, 0xE3, 0x8A, 0x92, 0xAE,
  254. 0x05, 0xDF, 0x29, 0x10, 0x67, 0x6C, 0xBA, 0xC9,
  255. 0xD3, 0x00, 0xE6, 0xCF, 0xE1, 0x9E, 0xA8, 0x2C,
  256. 0x63, 0x16, 0x01, 0x3F, 0x58, 0xE2, 0x89, 0xA9,
  257. 0x0D, 0x38, 0x34, 0x1B, 0xAB, 0x33, 0xFF, 0xB0,
  258. 0xBB, 0x48, 0x0C, 0x5F, 0xB9, 0xB1, 0xCD, 0x2E,
  259. 0xC5, 0xF3, 0xDB, 0x47, 0xE5, 0xA5, 0x9C, 0x77,
  260. 0x0A, 0xA6, 0x20, 0x68, 0xFE, 0x7F, 0xC1, 0xAD
  261. );
  262. /**
  263. * Inverse key expansion randomization table.
  264. *
  265. * @see Crypt_RC2::setKey()
  266. * @var Array
  267. * @access private
  268. */
  269. var $invpitable = array(
  270. 0xD1, 0xDA, 0xB9, 0x6F, 0x9C, 0xC8, 0x78, 0x66,
  271. 0x80, 0x2C, 0xF8, 0x37, 0xEA, 0xE0, 0x62, 0xA4,
  272. 0xCB, 0x71, 0x50, 0x27, 0x4B, 0x95, 0xD9, 0x20,
  273. 0x9D, 0x04, 0x91, 0xE3, 0x47, 0x6A, 0x7E, 0x53,
  274. 0xFA, 0x3A, 0x3B, 0xB4, 0xA8, 0xBC, 0x5F, 0x68,
  275. 0x08, 0xCA, 0x8F, 0x14, 0xD7, 0xC0, 0xEF, 0x7B,
  276. 0x5B, 0xBF, 0x2F, 0xE5, 0xE2, 0x8C, 0xBA, 0x12,
  277. 0xE1, 0xAF, 0xB2, 0x54, 0x5D, 0x59, 0x76, 0xDB,
  278. 0x32, 0xA2, 0x58, 0x6E, 0x1C, 0x29, 0x64, 0xF3,
  279. 0xE9, 0x96, 0x0C, 0x98, 0x19, 0x8D, 0x3E, 0x26,
  280. 0xAB, 0xA5, 0x85, 0x16, 0x40, 0xBD, 0x49, 0x67,
  281. 0xDC, 0x22, 0x94, 0xBB, 0x3C, 0xC1, 0x9B, 0xEB,
  282. 0x45, 0x28, 0x18, 0xD8, 0x1A, 0x42, 0x7D, 0xCC,
  283. 0xFB, 0x65, 0x8E, 0x3D, 0xCD, 0x2A, 0xA3, 0x60,
  284. 0xAE, 0x93, 0x8A, 0x48, 0x97, 0x51, 0x15, 0xF7,
  285. 0x01, 0x0B, 0xB7, 0x36, 0xB1, 0x2E, 0x11, 0xFD,
  286. 0x84, 0x2D, 0x3F, 0x13, 0x88, 0xB3, 0x34, 0x24,
  287. 0x1B, 0xDE, 0xC5, 0x1D, 0x4D, 0x2B, 0x17, 0x31,
  288. 0x74, 0xA9, 0xC6, 0x43, 0x6D, 0x39, 0x90, 0xBE,
  289. 0xC3, 0xB0, 0x21, 0x6B, 0xF6, 0x0F, 0xD5, 0x99,
  290. 0x0D, 0xAC, 0x1F, 0x5C, 0x9E, 0xF5, 0xF9, 0x4C,
  291. 0xD6, 0xDF, 0x89, 0xE4, 0x8B, 0xFF, 0xC7, 0xAA,
  292. 0xE7, 0xED, 0x46, 0x25, 0xB6, 0x06, 0x5E, 0x35,
  293. 0xB5, 0xEC, 0xCE, 0xE8, 0x6C, 0x30, 0x55, 0x61,
  294. 0x4A, 0xFE, 0xA0, 0x79, 0x03, 0xF0, 0x10, 0x72,
  295. 0x7C, 0xCF, 0x52, 0xA6, 0xA7, 0xEE, 0x44, 0xD3,
  296. 0x9A, 0x57, 0x92, 0xD0, 0x5A, 0x7A, 0x41, 0x7F,
  297. 0x0E, 0x00, 0x63, 0xF2, 0x4F, 0x05, 0x83, 0xC9,
  298. 0xA1, 0xD4, 0xDD, 0xC4, 0x56, 0xF4, 0xD2, 0x77,
  299. 0x81, 0x09, 0x82, 0x33, 0x9F, 0x07, 0x86, 0x75,
  300. 0x38, 0x4E, 0x69, 0xF1, 0xAD, 0x23, 0x73, 0x87,
  301. 0x70, 0x02, 0xC2, 0x1E, 0xB8, 0x0A, 0xFC, 0xE6
  302. );
  303. /**
  304. * Default Constructor.
  305. *
  306. * Determines whether or not the mcrypt extension should be used.
  307. *
  308. * $mode could be:
  309. *
  310. * - CRYPT_RC2_MODE_ECB
  311. *
  312. * - CRYPT_RC2_MODE_CBC
  313. *
  314. * - CRYPT_RC2_MODE_CTR
  315. *
  316. * - CRYPT_RC2_MODE_CFB
  317. *
  318. * - CRYPT_RC2_MODE_OFB
  319. *
  320. * If not explicitly set, CRYPT_RC2_MODE_CBC will be used.
  321. *
  322. * @see Crypt_Base::Crypt_Base()
  323. * @param optional Integer $mode
  324. * @access public
  325. */
  326. function Crypt_RC2($mode = CRYPT_RC2_MODE_CBC)
  327. {
  328. parent::Crypt_Base($mode);
  329. $this->setKey('');
  330. }
  331. /**
  332. * Sets the key length
  333. *
  334. * Valid key lengths are 1 to 1024.
  335. * Calling this function after setting the key has no effect until the next
  336. * Crypt_RC2::setKey() call.
  337. *
  338. * @access public
  339. * @param Integer $length in bits
  340. */
  341. function setKeyLength($length)
  342. {
  343. if ($length >= 1 && $length <= 1024) {
  344. $this->default_key_length = $length;
  345. }
  346. }
  347. /**
  348. * Sets the key.
  349. *
  350. * Keys can be of any length. RC2, itself, uses 1 to 1024 bit keys (eg.
  351. * strlen($key) <= 128), however, we only use the first 128 bytes if $key
  352. * has more then 128 bytes in it, and set $key to a single null byte if
  353. * it is empty.
  354. *
  355. * If the key is not explicitly set, it'll be assumed to be a single
  356. * null byte.
  357. *
  358. * @see Crypt_Base::setKey()
  359. * @access public
  360. * @param String $key
  361. * @param Integer $t1 optional Effective key length in bits.
  362. */
  363. function setKey($key, $t1 = 0)
  364. {
  365. if ($t1 <= 0) {
  366. $t1 = $this->default_key_length;
  367. } else if ($t1 > 1024) {
  368. $t1 = 1024;
  369. }
  370. // Key byte count should be 1..128.
  371. $key = strlen($key) ? substr($key, 0, 128) : "\x00";
  372. $t = strlen($key);
  373. // The mcrypt RC2 implementation only supports effective key length
  374. // of 1024 bits. It is however possible to handle effective key
  375. // lengths in range 1..1024 by expanding the key and applying
  376. // inverse pitable mapping to the first byte before submitting it
  377. // to mcrypt.
  378. // Key expansion.
  379. $l = array_values(unpack('C*', $key));
  380. $t8 = ($t1 + 7) >> 3;
  381. $tm = 0xFF >> (8 * $t8 - $t1);
  382. // Expand key.
  383. $pitable = $this->pitable;
  384. for ($i = $t; $i < 128; $i++) {
  385. $l[$i] = $pitable[$l[$i - 1] + $l[$i - $t]];
  386. }
  387. $i = 128 - $t8;
  388. $l[$i] = $pitable[$l[$i] & $tm];
  389. while ($i--) {
  390. $l[$i] = $pitable[$l[$i + 1] ^ $l[$i + $t8]];
  391. }
  392. // Prepare the key for mcrypt.
  393. $l[0] = $this->invpitable[$l[0]];
  394. array_unshift($l, 'C*');
  395. parent::setKey(call_user_func_array('pack', $l));
  396. }
  397. /**
  398. * Encrypts a block
  399. *
  400. * @see Crypt_Base::_encryptBlock()
  401. * @see Crypt_Base::encrypt()
  402. * @access private
  403. * @param String $in
  404. * @return String
  405. */
  406. function _encryptBlock($in)
  407. {
  408. list($r0, $r1, $r2, $r3) = array_values(unpack('v*', $in));
  409. $keys = $this->keys;
  410. $limit = 20;
  411. $actions = array($limit => 44, 44 => 64);
  412. $j = 0;
  413. for (;;) {
  414. // Mixing round.
  415. $r0 = (($r0 + $keys[$j++] + ((($r1 ^ $r2) & $r3) ^ $r1)) & 0xFFFF) << 1;
  416. $r0 |= $r0 >> 16;
  417. $r1 = (($r1 + $keys[$j++] + ((($r2 ^ $r3) & $r0) ^ $r2)) & 0xFFFF) << 2;
  418. $r1 |= $r1 >> 16;
  419. $r2 = (($r2 + $keys[$j++] + ((($r3 ^ $r0) & $r1) ^ $r3)) & 0xFFFF) << 3;
  420. $r2 |= $r2 >> 16;
  421. $r3 = (($r3 + $keys[$j++] + ((($r0 ^ $r1) & $r2) ^ $r0)) & 0xFFFF) << 5;
  422. $r3 |= $r3 >> 16;
  423. if ($j === $limit) {
  424. if ($limit === 64) {
  425. break;
  426. }
  427. // Mashing round.
  428. $r0 += $keys[$r3 & 0x3F];
  429. $r1 += $keys[$r0 & 0x3F];
  430. $r2 += $keys[$r1 & 0x3F];
  431. $r3 += $keys[$r2 & 0x3F];
  432. $limit = $actions[$limit];
  433. }
  434. }
  435. return pack('vvvv', $r0, $r1, $r2, $r3);
  436. }
  437. /**
  438. * Decrypts a block
  439. *
  440. * @see Crypt_Base::_decryptBlock()
  441. * @see Crypt_Base::decrypt()
  442. * @access private
  443. * @param String $in
  444. * @return String
  445. */
  446. function _decryptBlock($in)
  447. {
  448. list($r0, $r1, $r2, $r3) = array_values(unpack('v*', $in));
  449. $keys = $this->keys;
  450. $limit = 44;
  451. $actions = array($limit => 20, 20 => 0);
  452. $j = 64;
  453. for (;;) {
  454. // R-mixing round.
  455. $r3 = ($r3 | ($r3 << 16)) >> 5;
  456. $r3 = ($r3 - $keys[--$j] - ((($r0 ^ $r1) & $r2) ^ $r0)) & 0xFFFF;
  457. $r2 = ($r2 | ($r2 << 16)) >> 3;
  458. $r2 = ($r2 - $keys[--$j] - ((($r3 ^ $r0) & $r1) ^ $r3)) & 0xFFFF;
  459. $r1 = ($r1 | ($r1 << 16)) >> 2;
  460. $r1 = ($r1 - $keys[--$j] - ((($r2 ^ $r3) & $r0) ^ $r2)) & 0xFFFF;
  461. $r0 = ($r0 | ($r0 << 16)) >> 1;
  462. $r0 = ($r0 - $keys[--$j] - ((($r1 ^ $r2) & $r3) ^ $r1)) & 0xFFFF;
  463. if ($j === $limit) {
  464. if ($limit === 0) {
  465. break;
  466. }
  467. // R-mashing round.
  468. $r3 = ($r3 - $keys[$r2 & 0x3F]) & 0xFFFF;
  469. $r2 = ($r2 - $keys[$r1 & 0x3F]) & 0xFFFF;
  470. $r1 = ($r1 - $keys[$r0 & 0x3F]) & 0xFFFF;
  471. $r0 = ($r0 - $keys[$r3 & 0x3F]) & 0xFFFF;
  472. $limit = $actions[$limit];
  473. }
  474. }
  475. return pack('vvvv', $r0, $r1, $r2, $r3);
  476. }
  477. /**
  478. * Creates the key schedule
  479. *
  480. * @see Crypt_Base::_setupKey()
  481. * @access private
  482. */
  483. function _setupKey()
  484. {
  485. // Key has already been expanded in Crypt_RC2::setKey():
  486. // Only the first value must be altered.
  487. $l = unpack('Ca/Cb/v*', $this->key);
  488. array_unshift($l, $this->pitable[$l['a']] | ($l['b'] << 8));
  489. unset($l['a']);
  490. unset($l['b']);
  491. $this->keys = $l;
  492. }
  493. /**
  494. * Setup the performance-optimized function for de/encrypt()
  495. *
  496. * @see Crypt_Base::_setupInlineCrypt()
  497. * @access private
  498. */
  499. function _setupInlineCrypt()
  500. {
  501. $lambda_functions = &Crypt_RC2::_getLambdaFunctions();
  502. // The first 10 generated $lambda_functions will use the $keys hardcoded as integers
  503. // for the mixing rounds, for better inline crypt performance [~20% faster].
  504. // But for memory reason we have to limit those ultra-optimized $lambda_functions to an amount of 10.
  505. $keys = $this->keys;
  506. if (count($lambda_functions) >= 10) {
  507. foreach ($this->keys as $k => $v) {
  508. $keys[$k] = '$keys[' . $k . ']';
  509. }
  510. }
  511. $code_hash = md5(str_pad("Crypt_RC2, {$this->mode}, ", 32, "\0") . implode(',', $keys));
  512. // Is there a re-usable $lambda_functions in there?
  513. // If not, we have to create it.
  514. if (!isset($lambda_functions[$code_hash])) {
  515. // Init code for both, encrypt and decrypt.
  516. $init_crypt = '$keys = $self->keys;';
  517. // $in is the current 8 bytes block which has to be en/decrypt
  518. $encrypt_block = $decrypt_block = '
  519. $in = unpack("v4", $in);
  520. $r0 = $in[1];
  521. $r1 = $in[2];
  522. $r2 = $in[3];
  523. $r3 = $in[4];
  524. ';
  525. // Create code for encryption.
  526. $limit = 20;
  527. $actions = array($limit => 44, 44 => 64);
  528. $j = 0;
  529. for (;;) {
  530. // Mixing round.
  531. $encrypt_block .= '
  532. $r0 = (($r0 + ' . $keys[$j++] . ' +
  533. ((($r1 ^ $r2) & $r3) ^ $r1)) & 0xFFFF) << 1;
  534. $r0 |= $r0 >> 16;
  535. $r1 = (($r1 + ' . $keys[$j++] . ' +
  536. ((($r2 ^ $r3) & $r0) ^ $r2)) & 0xFFFF) << 2;
  537. $r1 |= $r1 >> 16;
  538. $r2 = (($r2 + ' . $keys[$j++] . ' +
  539. ((($r3 ^ $r0) & $r1) ^ $r3)) & 0xFFFF) << 3;
  540. $r2 |= $r2 >> 16;
  541. $r3 = (($r3 + ' . $keys[$j++] . ' +
  542. ((($r0 ^ $r1) & $r2) ^ $r0)) & 0xFFFF) << 5;
  543. $r3 |= $r3 >> 16;';
  544. if ($j === $limit) {
  545. if ($limit === 64) {
  546. break;
  547. }
  548. // Mashing round.
  549. $encrypt_block .= '
  550. $r0 += $keys[$r3 & 0x3F];
  551. $r1 += $keys[$r0 & 0x3F];
  552. $r2 += $keys[$r1 & 0x3F];
  553. $r3 += $keys[$r2 & 0x3F];';
  554. $limit = $actions[$limit];
  555. }
  556. }
  557. $encrypt_block .= '$in = pack("v4", $r0, $r1, $r2, $r3);';
  558. // Create code for decryption.
  559. $limit = 44;
  560. $actions = array($limit => 20, 20 => 0);
  561. $j = 64;
  562. for (;;) {
  563. // R-mixing round.
  564. $decrypt_block .= '
  565. $r3 = ($r3 | ($r3 << 16)) >> 5;
  566. $r3 = ($r3 - ' . $keys[--$j] . ' -
  567. ((($r0 ^ $r1) & $r2) ^ $r0)) & 0xFFFF;
  568. $r2 = ($r2 | ($r2 << 16)) >> 3;
  569. $r2 = ($r2 - ' . $keys[--$j] . ' -
  570. ((($r3 ^ $r0) & $r1) ^ $r3)) & 0xFFFF;
  571. $r1 = ($r1 | ($r1 << 16)) >> 2;
  572. $r1 = ($r1 - ' . $keys[--$j] . ' -
  573. ((($r2 ^ $r3) & $r0) ^ $r2)) & 0xFFFF;
  574. $r0 = ($r0 | ($r0 << 16)) >> 1;
  575. $r0 = ($r0 - ' . $keys[--$j] . ' -
  576. ((($r1 ^ $r2) & $r3) ^ $r1)) & 0xFFFF;';
  577. if ($j === $limit) {
  578. if ($limit === 0) {
  579. break;
  580. }
  581. // R-mashing round.
  582. $decrypt_block .= '
  583. $r3 = ($r3 - $keys[$r2 & 0x3F]) & 0xFFFF;
  584. $r2 = ($r2 - $keys[$r1 & 0x3F]) & 0xFFFF;
  585. $r1 = ($r1 - $keys[$r0 & 0x3F]) & 0xFFFF;
  586. $r0 = ($r0 - $keys[$r3 & 0x3F]) & 0xFFFF;';
  587. $limit = $actions[$limit];
  588. }
  589. }
  590. $decrypt_block .= '$in = pack("v4", $r0, $r1, $r2, $r3);';
  591. // Creates the inline-crypt function
  592. $lambda_functions[$code_hash] = $this->_createInlineCryptFunction(
  593. array(
  594. 'init_crypt' => $init_crypt,
  595. 'encrypt_block' => $encrypt_block,
  596. 'decrypt_block' => $decrypt_block
  597. )
  598. );
  599. }
  600. // Set the inline-crypt function as callback in: $this->inline_crypt
  601. $this->inline_crypt = $lambda_functions[$code_hash];
  602. }
  603. }