1/** 2 * DES (Data Encryption Standard) implementation. 3 * 4 * This implementation supports DES as well as 3DES-EDE in ECB and CBC mode. 5 * It is based on the BSD-licensed implementation by Paul Tero: 6 * 7 * Paul Tero, July 2001 8 * http://www.tero.co.uk/des/ 9 * 10 * Optimised for performance with large blocks by Michael Hayworth, November 2001 11 * http://www.netdealing.com 12 * 13 * THIS SOFTWARE IS PROVIDED "AS IS" AND 14 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 17 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23 * SUCH DAMAGE. 24 * 25 * @author Stefan Siegl 26 * @author Dave Longley 27 * 28 * Copyright (c) 2012 Stefan Siegl <[email protected]> 29 * Copyright (c) 2012-2014 Digital Bazaar, Inc. 30 */ 31(function() { 32/* ########## Begin module implementation ########## */ 33function initModule(forge) { 34 35/* DES API */ 36forge.des = forge.des || {}; 37 38/** 39 * Deprecated. Instead, use: 40 * 41 * var cipher = forge.cipher.createCipher('DES-<mode>', key); 42 * cipher.start({iv: iv}); 43 * 44 * Creates an DES cipher object to encrypt data using the given symmetric key. 45 * The output will be stored in the 'output' member of the returned cipher. 46 * 47 * The key and iv may be given as binary-encoded strings of bytes or 48 * byte buffers. 49 * 50 * @param key the symmetric key to use (64 or 192 bits). 51 * @param iv the initialization vector to use. 52 * @param output the buffer to write to, null to create one. 53 * @param mode the cipher mode to use (default: 'CBC' if IV is 54 * given, 'ECB' if null). 55 * 56 * @return the cipher. 57 */ 58forge.des.startEncrypting = function(key, iv, output, mode) { 59 var cipher = _createCipher({ 60 key: key, 61 output: output, 62 decrypt: false, 63 mode: mode || (iv === null ? 'ECB' : 'CBC') 64 }); 65 cipher.start(iv); 66 return cipher; 67}; 68 69/** 70 * Deprecated. Instead, use: 71 * 72 * var cipher = forge.cipher.createCipher('DES-<mode>', key); 73 * 74 * Creates an DES cipher object to encrypt data using the given symmetric key. 75 * 76 * The key may be given as a binary-encoded string of bytes or a byte buffer. 77 * 78 * @param key the symmetric key to use (64 or 192 bits). 79 * @param mode the cipher mode to use (default: 'CBC'). 80 * 81 * @return the cipher. 82 */ 83forge.des.createEncryptionCipher = function(key, mode) { 84 return _createCipher({ 85 key: key, 86 output: null, 87 decrypt: false, 88 mode: mode 89 }); 90}; 91 92/** 93 * Deprecated. Instead, use: 94 * 95 * var decipher = forge.cipher.createDecipher('DES-<mode>', key); 96 * decipher.start({iv: iv}); 97 * 98 * Creates an DES cipher object to decrypt data using the given symmetric key. 99 * The output will be stored in the 'output' member of the returned cipher. 100 * 101 * The key and iv may be given as binary-encoded strings of bytes or 102 * byte buffers. 103 * 104 * @param key the symmetric key to use (64 or 192 bits). 105 * @param iv the initialization vector to use. 106 * @param output the buffer to write to, null to create one. 107 * @param mode the cipher mode to use (default: 'CBC' if IV is 108 * given, 'ECB' if null). 109 * 110 * @return the cipher. 111 */ 112forge.des.startDecrypting = function(key, iv, output, mode) { 113 var cipher = _createCipher({ 114 key: key, 115 output: output, 116 decrypt: true, 117 mode: mode || (iv === null ? 'ECB' : 'CBC') 118 }); 119 cipher.start(iv); 120 return cipher; 121}; 122 123/** 124 * Deprecated. Instead, use: 125 * 126 * var decipher = forge.cipher.createDecipher('DES-<mode>', key); 127 * 128 * Creates an DES cipher object to decrypt data using the given symmetric key. 129 * 130 * The key may be given as a binary-encoded string of bytes or a byte buffer. 131 * 132 * @param key the symmetric key to use (64 or 192 bits). 133 * @param mode the cipher mode to use (default: 'CBC'). 134 * 135 * @return the cipher. 136 */ 137forge.des.createDecryptionCipher = function(key, mode) { 138 return _createCipher({ 139 key: key, 140 output: null, 141 decrypt: true, 142 mode: mode 143 }); 144}; 145 146/** 147 * Creates a new DES cipher algorithm object. 148 * 149 * @param name the name of the algorithm. 150 * @param mode the mode factory function. 151 * 152 * @return the DES algorithm object. 153 */ 154forge.des.Algorithm = function(name, mode) { 155 var self = this; 156 self.name = name; 157 self.mode = new mode({ 158 blockSize: 8, 159 cipher: { 160 encrypt: function(inBlock, outBlock) { 161 return _updateBlock(self._keys, inBlock, outBlock, false); 162 }, 163 decrypt: function(inBlock, outBlock) { 164 return _updateBlock(self._keys, inBlock, outBlock, true); 165 } 166 } 167 }); 168 self._init = false;
169}; 170 171/** 172 * Initializes this DES algorithm by expanding its key. 173 * 174 * @param options the options to use. 175 * key the key to use with this algorithm. 176 * decrypt true if the algorithm should be initialized for decryption, 177 * false for encryption. 178 */ 179forge.des.Algorithm.prototype.initialize = function(options) { 180 if(this._init) { 181 return; 182 } 183 184 var key = forge.util.createBuffer(options.key); 185 if(this.name.indexOf('3DES') === 0) { 186 if(key.length() !== 24) { 187 throw new Error('Invalid Triple-DES key size: ' + key.length() * 8); 188 } 189 } 190 191 // do key expansion to 16 or 48 subkeys (single or triple DES) 192 this._keys = _createKeys(key); 193 this._init = true; 194}; 195 196 197/** Register DES algorithms **/ 198 199registerAlgorithm('DES-ECB', forge.cipher.modes.ecb); 200registerAlgorithm('DES-CBC', forge.cipher.modes.cbc); 201registerAlgorithm('DES-CFB', forge.cipher.modes.cfb); 202registerAlgorithm('DES-OFB', forge.cipher.modes.ofb); 203registerAlgorithm('DES-CTR', forge.cipher.modes.ctr); 204 205registerAlgorithm('3DES-ECB', forge.cipher.modes.ecb); 206registerAlgorithm('3DES-CBC', forge.cipher.modes.cbc); 207registerAlgorithm('3DES-CFB', forge.cipher.modes.cfb); 208registerAlgorithm('3DES-OFB', forge.cipher.modes.ofb); 209registerAlgorithm('3DES-CTR', forge.cipher.modes.ctr); 210 211function registerAlgorithm(name, mode) { 212 var factory = function() { 213 return new forge.des.Algorithm(name, mode); 214 }; 215 forge.cipher.registerAlgorithm(name, factory); 216} 217 218 219/** DES implementation **/ 220 221var spfunction1 = [0x1010400,0,0x10000,0x1010404,0x1010004,0x10404,0x4,0x10000,0x400,0x1010400,0x1010404,0x400,0x1000404,0x1010004,0x1000000,0x4,0x404,0x1000400,0x1000400,0x10400,0x10400,0x1010000,0x1010000,0x1000404,0x10004,0x1000004,0x1000004,0x10004,0,0x404,0x10404,0x1000000,0x10000,0x1010404,0x4,0x1010000,0x1010400,0x1000000,0x1000000,0x400,0x1010004,0x10000,0x10400,0x1000004,0x400,0x4,0x1000404,0x10404,0x1010404,0x10004,0x1010000,0x1000404,0x1000004,0x404,0x10404,0x1010400,0x404,0x1000400,0x1000400,0,0x10004,0x10400,0,0x1010004]; 222var spfunction2 = [-0x7fef7fe0,-0x7fff8000,0x8000,0x108020,0x100000,0x20,-0x7fefffe0,-0x7fff7fe0,-0x7fffffe0,-0x7fef7fe0,-0x7fef8000,-0x80000000,-0x7fff8000,0x100000,0x20,-0x7fefffe0,0x108000,0x100020,-0x7fff7fe0,0,-0x80000000,0x8000,0x108020,-0x7ff00000,0x100020,-0x7fffffe0,0,0x108000,0x8020,-0x7fef8000,-0x7ff00000,0x8020,0,0x108020,-0x7fefffe0,0x100000,-0x7fff7fe0,-0x7ff00000,-0x7fef8000,0x8000,-0x7ff00000,-0x7fff8000,0x20,-0x7fef7fe0,0x108020,0x20,0x8000,-0x80000000,0x8020,-0x7fef8000,0x100000,-0x7fffffe0,0x100020,-0x7fff7fe0,-0x7fffffe0,0x100020,0x108000,0,-0x7fff8000,0x8020,-0x80000000,-0x7fefffe0,-0x7fef7fe0,0x108000]; 223var spfunction3 = [0x208,0x8020200,0,0x8020008,0x8000200,0,0x20208,0x8000200,0x20008,0x8000008,0x8000008,0x20000,0x8020208,0x20008,0x8020000,0x208,0x8000000,0x8,0x8020200,0x200,0x20200,0x8020000,0x8020008,0x20208,0x8000208,0x20200,0x20000,0x8000208,0x8,0x8020208,0x200,0x8000000,0x8020200,0x8000000,0x20008,0x208,0x20000,0x8020200,0x8000200,0,0x200,0x20008,0x8020208,0x8000200,0x8000008,0x200,0,0x8020008,0x8000208,0x20000,0x8000000,0x8020208,0x8,0x20208,0x20200,0x8000008,0x8020000,0x8000208,0x208,0x8020000,0x20208,0x8,0x8020008,0x20200]; 224var spfunction4 = [0x802001,0x2081,0x2081,0x80,0x802080,0x800081,0x800001,0x2001,0,0x802000,0x802000,0x802081,0x81,0,0x800080,0x800001,0x1,0x2000,0x800000,0x802001,0x80,0x800000,0x2001,0x2080,0x800081,0x1,0x2080,0x800080,0x2000,0x802080,0x802081,0x81,0x800080,0x800001,0x802000,0x802081,0x81,0,0,0x802000,0x2080,0x800080,0x800081,0x1,0x802001,0x2081,0x2081,0x80,0x802081,0x81,0x1,0x2000,0x800001,0x2001,0x802080,0x800081,0x2001,0x2080,0x800000,0x802001,0x80,0x800000,0x2000,0x802080]; 225var spfunction5 = [0x100,0x2080100,0x2080000,0x42000100,0x80000,0x100,0x40000000,0x2080000,0x40080100,0x80000,0x2000100,0x40080100,0x42000100,0x42080000,0x80100,0x40000000,0x2000000,0x40080000,0x40080000,0,0x40000100,
2250x42080100,0x42080100,0x2000100,0x42080000,0x40000100,0,0x42000000,0x2080100,0x2000000,0x42000000,0x80100,0x80000,0x42000100,0x100,0x2000000,0x40000000,0x2080000,0x42000100,0x40080100,0x2000100,0x40000000,0x42080000,0x2080100,0x40080100,0x100,0x2000000,0x42080000,0x42080100,0x80100,0x42000000,0x42080100,0x2080000,0,0x40080000,0x42000000,0x80100,0x2000100,0x40000100,0x80000,0,0x40080000,0x2080100,0x40000100]; 226var spfunction6 = [0x20000010,0x20400000,0x4000,0x20404010,0x20400000,0x10,0x20404010,0x400000,0x20004000,0x404010,0x400000,0x20000010,0x400010,0x20004000,0x20000000,0x4010,0,0x400010,0x20004010,0x4000,0x404000,0x20004010,0x10,0x20400010,0x20400010,0,0x404010,0x20404000,0x4010,0x404000,0x20404000,0x20000000,0x20004000,0x10,0x20400010,0x404000,0x20404010,0x400000,0x4010,0x20000010,0x400000,0x20004000,0x20000000,0x4010,0x20000010,0x20404010,0x404000,0x20400000,0x404010,0x20404000,0,0x20400010,0x10,0x4000,0x20400000,0x404010,0x4000,0x400010,0x20004010,0,0x20404000,0x20000000,0x400010,0x20004010]; 227var spfunction7 = [0x200000,0x4200002,0x4000802,0,0x800,0x4000802,0x200802,0x4200800,0x4200802,0x200000,0,0x4000002,0x2,0x4000000,0x4200002,0x802,0x4000800,0x200802,0x200002,0x4000800,0x4000002,0x4200000,0x4200800,0x200002,0x4200000,0x800,0x802,0x4200802,0x200800,0x2,0x4000000,0x200800,0x4000000,0x200800,0x200000,0x4000802,0x4000802,0x4200002,0x4200002,0x2,0x200002,0x4000000,0x4000800,0x200000,0x4200800,0x802,0x200802,0x4200800,0x802,0x4000002,0x4200802,0x4200000,0x200800,0,0x2,0x4200802,0,0x200802,0x4200000,0x800,0x4000002,0x4000800,0x800,0x200002]; 228var spfunction8 = [0x10001040,0x1000,0x40000,0x10041040,0x10000000,0x10001040,0x40,0x10000000,0x40040,0x10040000,0x10041040,0x41000,0x10041000,0x41040,0x1000,0x40,0x10040000,0x10000040,0x10001000,0x1040,0x41000,0x40040,0x10040040,0x10041000,0x1040,0,0,0x10040040,0x10000040,0x10001000,0x41040,0x40000,0x41040,0x40000,0x10041000,0x1000,0x40,0x10040040,0x1000,0x41040,0x10001000,0x40,0x10000040,0x10040000,0x10040040,0x10000000,0x40000,0x10001040,0,0x10041040,0x40040,0x10000040,0x10040000,0x10001000,0x10001040,0,0x10041040,0x41000,0x41000,0x1040,0x1040,0x40040,0x10000000,0x10041000]; 229 230/** 231 * Create necessary sub keys. 232 * 233 * @param key the 64-bit or 192-bit key. 234 * 235 * @return the expanded keys. 236 */ 237function _createKeys(key) { 238 var pc2bytes0 = [0,0x4,0x20000000,0x20000004,0x10000,0x10004,0x20010000,0x20010004,0x2
23800,0x204,0x20000200,0x20000204,0x10200,0x10204,0x20010200,0x20010204], 239 pc2bytes1 = [0,0x1,0x100000,0x100001,0x4000000,0x4000001,0x4100000,0x4100001,0x100,0x101,0x100100,0x100101,0x4000100,0x4000101,0x4100100,0x4100101], 240 pc2bytes2 = [0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808,0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808], 241 pc2bytes3 = [0,0x200000,0x8000000,0x8200000,0x2000,0x202000,0x8002000,0x8202000,0x20000,0x220000,0x8020000,0x8220000,0x22000,0x222000,0x8022000,0x8222000], 242 pc2bytes4 = [0,0x40000,0x10,0x40010,0,0x40000,0x10,0x40010,0x1000,0x41000,0x1010,0x41010,0x1000,0x41000,0x1010,0x41010], 243 pc2bytes5 = [0,0x400,0x20,0x420,0,0x400,0x20,0x420,0x2000000,0x2000400,0x2000020,0x2000420,0x2000000,0x2000400,0x2000020,0x2000420], 244 pc2bytes6 = [0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002,0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002], 245 pc2bytes7 = [0,0x10000,0x800,0x10800,0x20000000,0x20010000,0x20000800,0x20010800,0x20000,0x30000,0x20800,0x30800,0x20020000,0x20030000,0x20020800,0x20030800], 246 pc2bytes8 = [0,0x40000,0,0x40000,0x2,0x40002,0x2,0x40002,0x2000000,0x2040000,0x2000000,0x2040000,0x2000002,0x2040002,0x2000002,0x2040002], 247 pc2bytes9 = [0,0x10000000,0x8,0x10000008,0,0x10000000,0x8,0x10000008,0x400,0x10000400,0x408,0x10000408,0x400,0x10000400,0x408,0x10000408], 248 pc2bytes10 = [0,0x20,0,0x20,0x100000,0x100020,0x100000,0x100020,0x2000,0x2020,0x2000,0x2020,0x102000,0x102020,0x102000,0x102020], 249 pc2bytes11 = [0,0x1000000,0x200,0x1000200,0x200000,0x1200000,0x200200,0x1200200,0x4000000,0x5000000,0x4000200,0x5000200,0x4200000,0x5200000,0x4200200,0x5200200], 250 pc2bytes12 = [0,0x1000,0x8000000,0x8001000,0x80000,0x81000,0x8080000,0x8081000,0x10,0x1010,0x8000010,0x8001010,0x80010,0x81010,0x8080010,0x8081010], 251 pc2bytes13 = [0,0x4,0x100,0x104,0,0x4,0x100,0x104,0x1,0x5,0x101,0x105,0x1,0x5,0x101,0x105]; 252 253 // how many iterations (1 for des, 3 for triple des) 254 // changed by Paul 16/6/2007 to use Triple DES for 9+ byte keys 255 var iterations = key.length() > 8 ? 3 : 1; 256 257 // stores the return keys 258 var keys = []; 259 260 // now define the left shifts which need to be done 261 var shifts = [0, 0, 1, 1, 1, 1, 1, 1, 0, 1, 1, 1, 1, 1, 1, 0]; 262 263 var n = 0, tmp; 264 for(var j = 0; j < iterations; j ++) { 265 var left = key.getInt32(); 266 var right = key.getInt32(); 267 268 tmp = ((left >>> 4) ^ right) & 0x0f0f0f0f; 269 right ^= tmp; 270 left ^= (tmp << 4); 271 272 tmp = ((right >>> -16) ^ left) & 0x0000ffff; 273 left ^= tmp; 274 right ^= (tmp << -16); 275 276 tmp = ((left >>> 2) ^ right) & 0x33333333; 277 right ^= tmp; 278 left ^= (tmp << 2); 279 280 tmp = ((right >>> -16) ^ left) & 0x0000ffff; 281 left ^= tmp; 282 right ^= (tmp << -16); 283 284 tmp = ((left >>> 1) ^ right) & 0x55555555; 285 right ^= tmp; 286 left ^= (tmp << 1); 287 288 tmp = ((right >>> 8) ^ left) & 0x00ff00ff; 289 left ^= tmp; 290 right ^= (tmp << 8); 291 292 tmp = ((left >>> 1) ^ right) & 0x55555555; 293 right ^= tmp; 294 left ^= (tmp << 1); 295 296 // right needs to be shifted and OR'd with last four bits of left 297 tmp = (left << 8) | ((right >>> 20) & 0x000000f0); 298 299 // left needs to be put upside down 300 left = ((right << 24) | ((right << 8) & 0xff0000) | 301 ((right >>> 8) & 0xff00) | ((right >>> 24) & 0xf0)); 302 right = tmp; 303 304 // now go through and perform these shifts on the left and right keys 305 for(var i = 0; i < shifts.length; ++i) {
306 //shift the keys either one or two bits to the left 307 if(shifts[i]) { 308 left = (left << 2) | (left >>> 26); 309 right = (right << 2) | (right >>> 26); 310 } else { 311 left = (left << 1) | (left >>> 27); 312 right = (right << 1) | (right >>> 27); 313 } 314 left &= -0xf; 315 right &= -0xf; 316 317 // now apply PC-2, in such a way that E is easier when encrypting or 318 // decrypting this conversion will look like PC-2 except only the last 6 319 // bits of each byte are used rather than 48 consecutive bits and the 320 // order of lines will be according to how the S selection functions will 321 // be applied: S2, S4, S6, S8, S1, S3, S5, S7 322 var lefttmp = ( 323 pc2bytes0[left >>> 28] | pc2bytes1[(left >>> 24) & 0xf] | 324 pc2bytes2[(left >>> 20) & 0xf] | pc2bytes3[(left >>> 16) & 0xf] | 325 pc2bytes4[(left >>> 12) & 0xf] | pc2bytes5[(left >>> 8) & 0xf] | 326 pc2bytes6[(left >>> 4) & 0xf]); 327 var righttmp = ( 328 pc2bytes7[right >>> 28] | pc2bytes8[(right >>> 24) & 0xf] | 329 pc2bytes9[(right >>> 20) & 0xf] | pc2bytes10[(right >>> 16) & 0xf] | 330 pc2bytes11[(right >>> 12) & 0xf] | pc2bytes12[(right >>> 8) & 0xf] | 331 pc2bytes13[(right >>> 4) & 0xf]); 332 tmp = ((righttmp >>> 16) ^ lefttmp) & 0x0000ffff; 333 keys[n++] = lefttmp ^ tmp; 334 keys[n++] = righttmp ^ (tmp << 16); 335 } 336 } 337 338 return keys; 339} 340 341/** 342 * Updates a single block (1 byte) using DES. The update will either 343 * encrypt or decrypt the block. 344 * 345 * @param keys the expanded keys. 346 * @param input the input block (an array of 32-bit words). 347 * @param output the updated output block. 348 * @param decrypt true to decrypt the block, false to encrypt it. 349 */ 350function _updateBlock(keys, input, output, decrypt) { 351 // set up loops for single or triple DES 352 var iterations = keys.length === 32 ? 3 : 9; 353 var looping; 354 if(iterations === 3) { 355 looping = decrypt ? [30, -2, -2] : [0, 32, 2]; 356 } else { 357 looping = (decrypt ? 358 [94, 62, -2, 32, 64, 2, 30, -2, -2] : 359 [0, 32, 2, 62, 30, -2, 64, 96, 2]); 360 } 361 362 var tmp; 363 364 var left = input[0]; 365 var right = input[1]; 366 367 // first each 64 bit chunk of the message must be permuted according to IP 368 tmp = ((left >>> 4) ^ right) & 0x0f0f0f0f; 369 right ^= tmp; 370 left ^= (tmp << 4); 371 372 tmp = ((left >>> 16) ^ right) & 0x0000ffff; 373 right ^= tmp; 374 left ^= (tmp << 16); 375 376 tmp = ((right >>> 2) ^ left) & 0x33333333; 377 left ^= tmp; 378 right ^= (tmp << 2); 379 380 tmp = ((right >>> 8) ^ left) & 0x00ff00ff; 381 left ^= tmp; 382 right ^= (tmp << 8); 383 384 tmp = ((left >>> 1) ^ right) & 0x55555555; 385 right ^= tmp; 386 left ^= (tmp << 1); 387 388 // rotate left 1 bit 389 left = ((left << 1) | (left >>> 31)); 390 right = ((right << 1) | (right >>> 31)); 391 392 for(var j = 0; j < iterations; j += 3) { 393 var endloop = looping[j + 1]; 394 var loopinc = looping[j + 2]; 395 396 // now go through and perform the encryption or decryption 397 for(var i = looping[j]; i != endloop; i += loopinc) { 398 var right1 = right ^ keys[i]; 399 var right2 = ((right >>> 4) | (right << 28)) ^ keys[i + 1]; 400 401 // passing these bytes through the S selection functions 402 tmp = left; 403 left = right; 404 right = tmp ^ ( 405 spfunction2[(right1 >>> 24) & 0x3f] | 406 spfunction4[(right1 >>> 16) & 0x3f] | 407 spfunction6[(right1 >>> 8) & 0x3f] | 408 spfunction8[right1 & 0x3f] | 409 spfunction1[(right2 >>> 24) & 0x3f] | 410 spfunction3[(right2 >>> 16) & 0x3f] | 411 spfunction5[(right2 >>> 8) & 0x3f] | 412 spfunction7[right2 & 0x3f]); 413 } 414 // unreverse left and right 415 tmp = left; 416 left = right; 417 right = tmp; 418 } 419 420 // rotate right 1 bit 421 left = ((left >>> 1) | (left << 31)); 422 right = ((right >>> 1) | (right << 31)); 423 424 // now perform IP-1, which is IP in the opposite direction 425 tmp = ((left >>> 1) ^ right) & 0x55555555; 426 right ^= tmp; 427 left ^= (tmp << 1); 428 429 tmp = ((right >>> 8) ^ left) & 0x00ff00ff; 430 left ^= tmp; 431 right ^= (tmp << 8); 432 433 tmp = ((right >>> 2) ^ left) & 0x33333333; 434 left ^= tmp; 435 right ^= (tmp << 2); 436 437 tmp = ((left >>> 16) ^ right) & 0x0000ffff; 438 right ^= tmp; 439 left ^= (tmp << 16); 440 441 tmp = ((left >>> 4) ^ right) & 0x0f0f0f0f; 442 right ^= tmp; 443 left ^= (tmp << 4); 444 445 output[0] = left; 446 output[1] = right; 447} 448 449/** 450 * Deprecated. Instead, use: 451 * 452 * forge.cipher.createCipher('DES-<mode>', key); 453 * forge.cipher.createDecipher('DES-<mode>', key); 454 * 455 * Creates a deprecated DES cipher object. This object's mode will default to 456 * CBC (cipher-block-chaining). 457 * 458 * The key may be given as a binary-encoded string of bytes or a byte buffer. 459 * 460 * @param options the options to use. 461 * key the symmetric key to use (64 or 192 bits). 462 * output the buffer to write to. 463 * decrypt true for decryption, false for encryption. 464 * mode the cipher mode to use (default: 'CBC'). 465 * 466 * @return the cipher. 467 */ 468function _createCipher(options) { 469 options = options || {}; 470 var mode = (options.mode || 'CBC').toUpperCase(); 471 var algorithm = 'DES-' + mode; 472 473 var cipher; 474 if(options.decrypt) { 475 cipher = forge.cipher.createDecipher(algorithm, options.key); 476 } else { 477 cipher = forge.cipher.createCipher(algorithm, options.key); 478 } 479 480 // backwards compatible start API 481 var start = cipher.start; 482 cipher.start = function(iv, options) { 483 // backwards compatibility: support second arg as output buffer 484 var output = null; 485 if(options instanceof forge.util.ByteBuffer) { 486 output = options; 487 options = {}; 488 } 489 options = options || {}; 490 options.output = output; 491 options.iv = iv; 492 start.call(cipher, options); 493 }; 494 495 return cipher; 496} 497 498 499} // end module implementation 500 501/* ########## Begin module wrapper ########## */
502var name = 'des'; 503if(typeof define !== 'function') { 504 // NodeJS -> AMD 505 if(typeof module === 'object' && module.exports) { 506 var nodeJS = true; 507 define = function(ids, factory) { 508 factory(require, module); 509 }; 510 } else { 511 // <script> 512 if(typeof forge === 'undefined') { 513 forge = {}; 514 } 515 return initModule(forge); 516 } 517} 518// AMD 519var deps; 520var defineFunc = function(require, module) { 521 module.exports = function(forge) { 522 var mods = deps.map(function(dep) { 523 return require(dep); 524 }).concat(initModule); 525 // handle circular dependencies 526 forge = forge || {}; 527 forge.defined = forge.defined || {}; 528 if(forge.defined[name]) { 529 return forge[name]; 530 } 531 forge.defined[name] = true; 532 for(var i = 0; i < mods.length; ++i) { 533 mods[i](forge); 534 } 535 return forge[name]; 536 }; 537}; 538var tmpDefine = define; 539define = function(ids, factory) { 540 deps = (typeof ids === 'string') ? factory.slice(2) : ids.slice(2); 541 if(nodeJS) { 542 delete define; 543 return tmpDefine.apply(null, Array.prototype.slice.call(arguments, 0)); 544 } 545 define = tmpDefine; 546 return define.apply(null, Array.prototype.slice.call(arguments, 0)); 547}; 548define( 549 ['require', 'module', './cipher', './cipherModes', './util'], function() { 550 defineFunc.apply(null, Array.prototype.slice.call(arguments, 0)); 551}); 552})();
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.