3 * This program is free software: you can redistribute it and/or modify
4 * it under the terms of the GNU Affero General Public License as
5 * published by the Free Software Foundation, either version 3 of the
6 * License, or (at your option) any later version.
8 * This program is distributed in the hope that it will be useful,
9 * but WITHOUT ANY WARRANTY; without even the implied warranty of
10 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
11 * GNU Affero General Public License for more details.
13 * You should have received a copy of the GNU Affero General Public License
14 * along with this program. If not, see <http://www.gnu.org/licenses/>.
18 using System.Collections.Generic;
24 /// Representation of scrypt hash
26 public class ScryptHash256 : Hash
29 public override int hashSize
34 public ScryptHash256() : base() { }
35 public ScryptHash256(byte[] bytes, int offset = 0) : base(bytes, offset) { }
36 public ScryptHash256(IEnumerable<byte> bytes, int skip = 0) : base(bytes, skip) { }
37 public ScryptHash256(ScryptHash256 h) : base(h) { }
40 /// Calculate scrypt hash and return new instance of ScryptHash256 class
42 /// <param name="inputBytes">Byte sequence to hash</param>
43 /// <returns>Hashing result instance</returns>
44 public static ScryptHash256 Compute256(IEnumerable<byte> inputBytes)
46 var V = new uint[(131072 + 63) / sizeof(uint)];
48 var dataBytes = inputBytes.ToArray();
49 var keyBytes1 = CryptoUtils.PBKDF2_Sha256(128, dataBytes, dataBytes, 1);
50 var X = Interop.ToUInt32Array(keyBytes1);
53 for (i = 0; i < 1024; i++)
55 Array.Copy(X, 0, V, i * 32, 32);
57 xor_salsa8(ref X, 0, ref X, 16);
58 xor_salsa8(ref X, 16, ref X, 0);
60 for (i = 0; i < 1024; i++)
62 j = 32 * (X[16] & 1023);
63 for (k = 0; k < 32; k++)
65 xor_salsa8(ref X, 0, ref X, 16);
66 xor_salsa8(ref X, 16, ref X, 0);
69 var xBytes = Interop.LEBytes(X);
70 var keyBytes2 = CryptoUtils.PBKDF2_Sha256(32, dataBytes, xBytes, 1);
72 return new ScryptHash256(keyBytes2);
75 private static void xor_salsa8(ref uint[] B, int indexB, ref uint[] Bx, int indexBx)
77 uint x00, x01, x02, x03, x04, x05, x06, x07, x08, x09, x10, x11, x12, x13, x14, x15;
80 x00 = (B[indexB + 0] ^= Bx[indexBx + 0]);
81 x01 = (B[indexB + 1] ^= Bx[indexBx + 1]);
82 x02 = (B[indexB + 2] ^= Bx[indexBx + 2]);
83 x03 = (B[indexB + 3] ^= Bx[indexBx + 3]);
84 x04 = (B[indexB + 4] ^= Bx[indexBx + 4]);
85 x05 = (B[indexB + 5] ^= Bx[indexBx + 5]);
86 x06 = (B[indexB + 6] ^= Bx[indexBx + 6]);
87 x07 = (B[indexB + 7] ^= Bx[indexBx + 7]);
88 x08 = (B[indexB + 8] ^= Bx[indexBx + 8]);
89 x09 = (B[indexB + 9] ^= Bx[indexBx + 9]);
90 x10 = (B[indexB + 10] ^= Bx[indexBx + 10]);
91 x11 = (B[indexB + 11] ^= Bx[indexBx + 11]);
92 x12 = (B[indexB + 12] ^= Bx[indexBx + 12]);
93 x13 = (B[indexB + 13] ^= Bx[indexBx + 13]);
94 x14 = (B[indexB + 14] ^= Bx[indexBx + 14]);
95 x15 = (B[indexB + 15] ^= Bx[indexBx + 15]);
97 Func<uint, int, uint> R = (a, b) => (((a) << (b)) | ((a) >> (32 - (b))));
99 for (i = 0; i < 8; i += 2)
101 /* Operate on columns. */
102 x04 ^= R(x00 + x12, 7); x09 ^= R(x05 + x01, 7);
103 x14 ^= R(x10 + x06, 7); x03 ^= R(x15 + x11, 7);
105 x08 ^= R(x04 + x00, 9); x13 ^= R(x09 + x05, 9);
106 x02 ^= R(x14 + x10, 9); x07 ^= R(x03 + x15, 9);
108 x12 ^= R(x08 + x04, 13); x01 ^= R(x13 + x09, 13);
109 x06 ^= R(x02 + x14, 13); x11 ^= R(x07 + x03, 13);
111 x00 ^= R(x12 + x08, 18); x05 ^= R(x01 + x13, 18);
112 x10 ^= R(x06 + x02, 18); x15 ^= R(x11 + x07, 18);
114 /* Operate on rows. */
115 x01 ^= R(x00 + x03, 7); x06 ^= R(x05 + x04, 7);
116 x11 ^= R(x10 + x09, 7); x12 ^= R(x15 + x14, 7);
118 x02 ^= R(x01 + x00, 9); x07 ^= R(x06 + x05, 9);
119 x08 ^= R(x11 + x10, 9); x13 ^= R(x12 + x15, 9);
121 x03 ^= R(x02 + x01, 13); x04 ^= R(x07 + x06, 13);
122 x09 ^= R(x08 + x11, 13); x14 ^= R(x13 + x12, 13);
124 x00 ^= R(x03 + x02, 18); x05 ^= R(x04 + x07, 18);
125 x10 ^= R(x09 + x08, 18); x15 ^= R(x14 + x13, 18);
128 B[indexB + 0] += x00;
129 B[indexB + 1] += x01;
130 B[indexB + 2] += x02;
131 B[indexB + 3] += x03;
132 B[indexB + 4] += x04;
133 B[indexB + 5] += x05;
134 B[indexB + 6] += x06;
135 B[indexB + 7] += x07;
136 B[indexB + 8] += x08;
137 B[indexB + 9] += x09;
138 B[indexB + 10] += x10;
139 B[indexB + 11] += x11;
140 B[indexB + 12] += x12;
141 B[indexB + 13] += x13;
142 B[indexB + 14] += x14;
143 B[indexB + 15] += x15;