ParagonIE_Sodium_Core_AEGIS_State128L

14class ParagonIE_Sodium_Core_AEGIS_State128L15{16    /** @var array<int, string> $state */17    protected $state;18    public function __construct()19    {20        $this->state = array_fill(0, 8, '');21    }22 23    /**24     * @internal Only use this for unit tests!25     * @return string[]26     */27    public function getState()28    {29        return array_values($this->state);30    }31 32    /**33     * @param array $input34     * @return self35     * @throws SodiumException36     *37     * @internal Only for unit tests38     */39    public static function initForUnitTests(array $input)40    {41        if (count($input) < 8) {42            throw new SodiumException('invalid input');43        }44        $state = new self();45        for ($i = 0; $i < 8; ++$i) {46            $state->state[$i] = $input[$i];47        }48        return $state;49    }50 51    /**52     * @param string $key53     * @param string $nonce54     * @return self55     */56    public static function init($key, $nonce)57    {58        $state = new self();59 60        // S0 = key ^ nonce61        $state->state[0] = $key ^ $nonce;62        // S1 = C163        $state->state[1] = SODIUM_COMPAT_AEGIS_C1;64        // S2 = C065        $state->state[2] = SODIUM_COMPAT_AEGIS_C0;66        // S3 = C167        $state->state[3] = SODIUM_COMPAT_AEGIS_C1;68        // S4 = key ^ nonce69        $state->state[4] = $key ^ $nonce;70        // S5 = key ^ C071        $state->state[5] = $key ^ SODIUM_COMPAT_AEGIS_C0;72        // S6 = key ^ C173        $state->state[6] = $key ^ SODIUM_COMPAT_AEGIS_C1;74        // S7 = key ^ C075        $state->state[7] = $key ^ SODIUM_COMPAT_AEGIS_C0;76 77        // Repeat(10, Update(nonce, key))78        for ($i = 0; $i < 10; ++$i) {79            $state->update($nonce, $key);80        }81        return $state;82    }83 84    /**85     * @param string $ai86     * @return self87     */88    public function absorb($ai)89    {90        if (ParagonIE_Sodium_Core_Util::strlen($ai) !== 32) {91            throw new SodiumException('Input must be two AES blocks in size');92        }93        $t0 = ParagonIE_Sodium_Core_Util::substr($ai, 0, 16);