ParagonIE_Sodium_Core_AES

Description

Compatibility

Present in every tracked release (6.7.7 to 7.1.0).

Properties · 1

$Rconint[]private static

Methods · 12

• sbox()Mutates the values of $q!
• invSbox()Mutates the values of $q!
• processInversion()This is some boilerplate code needed to invert an S-box. Rather than repeat the code twice, I moved it to a protected method.
• subWord()
• keySchedule()Calculate the key schedule from a given random key
• addRoundKey()Mutates $q
• decryptBlockECB()This mainly exists for testing, as we need the round key features for AEGIS.
• encryptBlockECB()This mainly exists for testing, as we need the round key features for AEGIS.
• bitsliceEncryptBlock()Mutates $q
• aesRound()
• doubleRound()Process two AES blocks in one shot.
• bitsliceDecryptBlock()

Source code

View on Trac ↗View on GitHub ↗

14class ParagonIE_Sodium_Core_AES extends ParagonIE_Sodium_Core_Util15{16    /**17     * @var int[] AES round constants18     */19    private static $Rcon = array(20        0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1B, 0x3621    );22 23    /**24     * Mutates the values of $q!25     *26     * @param ParagonIE_Sodium_Core_AES_Block $q27     * @return void28     */29    public static function sbox(ParagonIE_Sodium_Core_AES_Block $q)30    {31        /**32         * @var int $x033         * @var int $x134         * @var int $x235         * @var int $x336         * @var int $x437         * @var int $x538         * @var int $x639         * @var int $x740         */41        $x0 = $q[7] & self::U32_MAX;42        $x1 = $q[6] & self::U32_MAX;43        $x2 = $q[5] & self::U32_MAX;44        $x3 = $q[4] & self::U32_MAX;45        $x4 = $q[3] & self::U32_MAX;46        $x5 = $q[2] & self::U32_MAX;47        $x6 = $q[1] & self::U32_MAX;48        $x7 = $q[0] & self::U32_MAX;49 50        $y14 = $x3 ^ $x5;51        $y13 = $x0 ^ $x6;52        $y9 = $x0 ^ $x3;53        $y8 = $x0 ^ $x5;54        $t0 = $x1 ^ $x2;55        $y1 = $t0 ^ $x7;56        $y4 = $y1 ^ $x3;57        $y12 = $y13 ^ $y14;58        $y2 = $y1 ^ $x0;59        $y5 = $y1 ^ $x6;60        $y3 = $y5 ^ $y8;61        $t1 = $x4 ^ $y12;62        $y15 = $t1 ^ $x5;63        $y20 = $t1 ^ $x1;64        $y6 = $y15 ^ $x7;65        $y10 = $y15 ^ $t0;66        $y11 = $y20 ^ $y9;67        $y7 = $x7 ^ $y11;68        $y17 = $y10 ^ $y11;69        $y19 = $y10 ^ $y8;70        $y16 = $t0 ^ $y11;71        $y21 = $y13 ^ $y16;72        $y18 = $x0 ^ $y16;73 74        /*75         * Non-linear section.76         */77        $t2 = $y12 & $y15;78        $t3 = $y3 & $y6;79        $t4 = $t3 ^ $t2;80        $t5 = $y4 & $x7;81        $t6 = $t5 ^ $t2;82        $t7 = $y13 & $y16;83        $t8 = $y5 & $y1;84        $t9 = $t8 ^ $t7;85        $t10 = $y2 & $y7;86        $t11 = $t10 ^ $t7;87        $t12 = $y9 & $y11;88        $t13 = $y14 & $y17;89        $t14 = $t13 ^ $t12;90        $t15 = $y8 & $y10;91        $t16 = $t15 ^ $t12;92        $t17 = $t4 ^ $t14;93        $t18 = $t6 ^ $t16;

Changelog

Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 7.1.0 tag, from src/wp-includes/sodium_compat/src/Core/AES.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.