12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091 |
- var forge = require('./forge');
- require('./cipher');
- require('./cipherModes');
- require('./util');
- module.exports = forge.aes = forge.aes || {};
- forge.aes.startEncrypting = function(key, iv, output, mode) {
- var cipher = _createCipher({
- key: key,
- output: output,
- decrypt: false,
- mode: mode
- });
- cipher.start(iv);
- return cipher;
- };
- forge.aes.createEncryptionCipher = function(key, mode) {
- return _createCipher({
- key: key,
- output: null,
- decrypt: false,
- mode: mode
- });
- };
- forge.aes.startDecrypting = function(key, iv, output, mode) {
- var cipher = _createCipher({
- key: key,
- output: output,
- decrypt: true,
- mode: mode
- });
- cipher.start(iv);
- return cipher;
- };
- forge.aes.createDecryptionCipher = function(key, mode) {
- return _createCipher({
- key: key,
- output: null,
- decrypt: true,
- mode: mode
- });
- };
- forge.aes.Algorithm = function(name, mode) {
- if(!init) {
- initialize();
- }
- var self = this;
- self.name = name;
- self.mode = new mode({
- blockSize: 16,
- cipher: {
- encrypt: function(inBlock, outBlock) {
- return _updateBlock(self._w, inBlock, outBlock, false);
- },
- decrypt: function(inBlock, outBlock) {
- return _updateBlock(self._w, inBlock, outBlock, true);
- }
- }
- });
- self._init = false;
- };
- forge.aes.Algorithm.prototype.initialize = function(options) {
- if(this._init) {
- return;
- }
- var key = options.key;
- var tmp;
-
- if(typeof key === 'string' &&
- (key.length === 16 || key.length === 24 || key.length === 32)) {
-
- key = forge.util.createBuffer(key);
- } else if(forge.util.isArray(key) &&
- (key.length === 16 || key.length === 24 || key.length === 32)) {
-
- tmp = key;
- key = forge.util.createBuffer();
- for(var i = 0; i < tmp.length; ++i) {
- key.putByte(tmp[i]);
- }
- }
-
- if(!forge.util.isArray(key)) {
- tmp = key;
- key = [];
-
- var len = tmp.length();
- if(len === 16 || len === 24 || len === 32) {
- len = len >>> 2;
- for(var i = 0; i < len; ++i) {
- key.push(tmp.getInt32());
- }
- }
- }
-
- if(!forge.util.isArray(key) ||
- !(key.length === 4 || key.length === 6 || key.length === 8)) {
- throw new Error('Invalid key parameter.');
- }
-
- var mode = this.mode.name;
- var encryptOp = (['CFB', 'OFB', 'CTR', 'GCM'].indexOf(mode) !== -1);
-
- this._w = _expandKey(key, options.decrypt && !encryptOp);
- this._init = true;
- };
- forge.aes._expandKey = function(key, decrypt) {
- if(!init) {
- initialize();
- }
- return _expandKey(key, decrypt);
- };
- forge.aes._updateBlock = _updateBlock;
- registerAlgorithm('AES-ECB', forge.cipher.modes.ecb);
- registerAlgorithm('AES-CBC', forge.cipher.modes.cbc);
- registerAlgorithm('AES-CFB', forge.cipher.modes.cfb);
- registerAlgorithm('AES-OFB', forge.cipher.modes.ofb);
- registerAlgorithm('AES-CTR', forge.cipher.modes.ctr);
- registerAlgorithm('AES-GCM', forge.cipher.modes.gcm);
- function registerAlgorithm(name, mode) {
- var factory = function() {
- return new forge.aes.Algorithm(name, mode);
- };
- forge.cipher.registerAlgorithm(name, factory);
- }
- var init = false;
- var Nb = 4;
- var sbox;
- var isbox;
- var rcon;
- var mix;
- var imix;
- function initialize() {
- init = true;
-
- rcon = [0x00, 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1B, 0x36];
-
- var xtime = new Array(256);
- for(var i = 0; i < 128; ++i) {
- xtime[i] = i << 1;
- xtime[i + 128] = (i + 128) << 1 ^ 0x11B;
- }
-
- sbox = new Array(256);
- isbox = new Array(256);
- mix = new Array(4);
- imix = new Array(4);
- for(var i = 0; i < 4; ++i) {
- mix[i] = new Array(256);
- imix[i] = new Array(256);
- }
- var e = 0, ei = 0, e2, e4, e8, sx, sx2, me, ime;
- for(var i = 0; i < 256; ++i) {
-
-
- sx = ei ^ (ei << 1) ^ (ei << 2) ^ (ei << 3) ^ (ei << 4);
- sx = (sx >> 8) ^ (sx & 255) ^ 0x63;
-
- sbox[e] = sx;
- isbox[sx] = e;
-
-
- sx2 = xtime[sx];
- e2 = xtime[e];
- e4 = xtime[e2];
- e8 = xtime[e4];
- me =
- (sx2 << 24) ^
- (sx << 16) ^
- (sx << 8) ^
- (sx ^ sx2);
- ime =
- (e2 ^ e4 ^ e8) << 24 ^
- (e ^ e8) << 16 ^
- (e ^ e4 ^ e8) << 8 ^
- (e ^ e2 ^ e8);
-
- for(var n = 0; n < 4; ++n) {
- mix[n][e] = me;
- imix[n][sx] = ime;
-
-
- me = me << 24 | me >>> 8;
- ime = ime << 24 | ime >>> 8;
- }
-
- if(e === 0) {
-
- e = ei = 1;
- } else {
-
-
- e = e2 ^ xtime[xtime[xtime[e2 ^ e8]]];
- ei ^= xtime[xtime[ei]];
- }
- }
- }
- function _expandKey(key, decrypt) {
-
- var w = key.slice(0);
-
-
- var temp, iNk = 1;
- var Nk = w.length;
- var Nr1 = Nk + 6 + 1;
- var end = Nb * Nr1;
- for(var i = Nk; i < end; ++i) {
- temp = w[i - 1];
- if(i % Nk === 0) {
-
- temp =
- sbox[temp >>> 16 & 255] << 24 ^
- sbox[temp >>> 8 & 255] << 16 ^
- sbox[temp & 255] << 8 ^
- sbox[temp >>> 24] ^ (rcon[iNk] << 24);
- iNk++;
- } else if(Nk > 6 && (i % Nk === 4)) {
-
- temp =
- sbox[temp >>> 24] << 24 ^
- sbox[temp >>> 16 & 255] << 16 ^
- sbox[temp >>> 8 & 255] << 8 ^
- sbox[temp & 255];
- }
- w[i] = w[i - Nk] ^ temp;
- }
-
- if(decrypt) {
- var tmp;
- var m0 = imix[0];
- var m1 = imix[1];
- var m2 = imix[2];
- var m3 = imix[3];
- var wnew = w.slice(0);
- end = w.length;
- for(var i = 0, wi = end - Nb; i < end; i += Nb, wi -= Nb) {
-
-
-
- if(i === 0 || i === (end - Nb)) {
- wnew[i] = w[wi];
- wnew[i + 1] = w[wi + 3];
- wnew[i + 2] = w[wi + 2];
- wnew[i + 3] = w[wi + 1];
- } else {
-
-
-
-
- for(var n = 0; n < Nb; ++n) {
- tmp = w[wi + n];
- wnew[i + (3&-n)] =
- m0[sbox[tmp >>> 24]] ^
- m1[sbox[tmp >>> 16 & 255]] ^
- m2[sbox[tmp >>> 8 & 255]] ^
- m3[sbox[tmp & 255]];
- }
- }
- }
- w = wnew;
- }
- return w;
- }
- function _updateBlock(w, input, output, decrypt) {
-
-
-
- var Nr = w.length / 4 - 1;
- var m0, m1, m2, m3, sub;
- if(decrypt) {
- m0 = imix[0];
- m1 = imix[1];
- m2 = imix[2];
- m3 = imix[3];
- sub = isbox;
- } else {
- m0 = mix[0];
- m1 = mix[1];
- m2 = mix[2];
- m3 = mix[3];
- sub = sbox;
- }
- var a, b, c, d, a2, b2, c2;
- a = input[0] ^ w[0];
- b = input[decrypt ? 3 : 1] ^ w[1];
- c = input[2] ^ w[2];
- d = input[decrypt ? 1 : 3] ^ w[3];
- var i = 3;
-
- for(var round = 1; round < Nr; ++round) {
-
- a2 =
- m0[a >>> 24] ^
- m1[b >>> 16 & 255] ^
- m2[c >>> 8 & 255] ^
- m3[d & 255] ^ w[++i];
- b2 =
- m0[b >>> 24] ^
- m1[c >>> 16 & 255] ^
- m2[d >>> 8 & 255] ^
- m3[a & 255] ^ w[++i];
- c2 =
- m0[c >>> 24] ^
- m1[d >>> 16 & 255] ^
- m2[a >>> 8 & 255] ^
- m3[b & 255] ^ w[++i];
- d =
- m0[d >>> 24] ^
- m1[a >>> 16 & 255] ^
- m2[b >>> 8 & 255] ^
- m3[c & 255] ^ w[++i];
- a = a2;
- b = b2;
- c = c2;
- }
-
-
- output[0] =
- (sub[a >>> 24] << 24) ^
- (sub[b >>> 16 & 255] << 16) ^
- (sub[c >>> 8 & 255] << 8) ^
- (sub[d & 255]) ^ w[++i];
- output[decrypt ? 3 : 1] =
- (sub[b >>> 24] << 24) ^
- (sub[c >>> 16 & 255] << 16) ^
- (sub[d >>> 8 & 255] << 8) ^
- (sub[a & 255]) ^ w[++i];
- output[2] =
- (sub[c >>> 24] << 24) ^
- (sub[d >>> 16 & 255] << 16) ^
- (sub[a >>> 8 & 255] << 8) ^
- (sub[b & 255]) ^ w[++i];
- output[decrypt ? 1 : 3] =
- (sub[d >>> 24] << 24) ^
- (sub[a >>> 16 & 255] << 16) ^
- (sub[b >>> 8 & 255] << 8) ^
- (sub[c & 255]) ^ w[++i];
- }
- function _createCipher(options) {
- options = options || {};
- var mode = (options.mode || 'CBC').toUpperCase();
- var algorithm = 'AES-' + mode;
- var cipher;
- if(options.decrypt) {
- cipher = forge.cipher.createDecipher(algorithm, options.key);
- } else {
- cipher = forge.cipher.createCipher(algorithm, options.key);
- }
-
- var start = cipher.start;
- cipher.start = function(iv, options) {
-
- var output = null;
- if(options instanceof forge.util.ByteBuffer) {
- output = options;
- options = {};
- }
- options = options || {};
- options.output = output;
- options.iv = iv;
- start.call(cipher, options);
- };
- return cipher;
- }
|