Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

if (class_exists('ParagonIE_Sodium_Core32_Poly1305_State', false)) {

[2] Fix | Delete

return;

[3] Fix | Delete

}

[4] Fix | Delete

[5] Fix | Delete

/**

[6] Fix | Delete

* Class ParagonIE_Sodium_Core32_Poly1305_State

[7] Fix | Delete

[8] Fix | Delete

class ParagonIE_Sodium_Core32_Poly1305_State extends ParagonIE_Sodium_Core32_Util

[9] Fix | Delete

{

[10] Fix | Delete

/**

[11] Fix | Delete

* @var array<int, int>

[12] Fix | Delete

[13] Fix | Delete

protected $buffer = array();

[14] Fix | Delete

[15] Fix | Delete

/**

[16] Fix | Delete

* @var bool

[17] Fix | Delete

[18] Fix | Delete

protected $final = false;

[19] Fix | Delete

[20] Fix | Delete

/**

[21] Fix | Delete

* @var array<int, ParagonIE_Sodium_Core32_Int32>

[22] Fix | Delete

[23] Fix | Delete

public $h;

[24] Fix | Delete

[25] Fix | Delete

/**

[26] Fix | Delete

* @var int

[27] Fix | Delete

[28] Fix | Delete

protected $leftover = 0;

[29] Fix | Delete

[30] Fix | Delete

/**

[31] Fix | Delete

* @var array<int, ParagonIE_Sodium_Core32_Int32>

[32] Fix | Delete

[33] Fix | Delete

public $r;

[34] Fix | Delete

[35] Fix | Delete

/**

[36] Fix | Delete

* @var array<int, ParagonIE_Sodium_Core32_Int64>

[37] Fix | Delete

[38] Fix | Delete

public $pad;

[39] Fix | Delete

[40] Fix | Delete

/**

[41] Fix | Delete

* ParagonIE_Sodium_Core32_Poly1305_State constructor.

[42] Fix | Delete

[43] Fix | Delete

* @internal You should not use this directly from another application

[44] Fix | Delete

[45] Fix | Delete

* @param string $key

[46] Fix | Delete

* @throws InvalidArgumentException

[47] Fix | Delete

* @throws SodiumException

[48] Fix | Delete

* @throws TypeError

[49] Fix | Delete

[50] Fix | Delete

public function __construct($key = '')

[51] Fix | Delete

{

[52] Fix | Delete

if (self::strlen($key) < 32) {

[53] Fix | Delete

throw new InvalidArgumentException(

[54] Fix | Delete

'Poly1305 requires a 32-byte key'

[55] Fix | Delete

);

[56] Fix | Delete

}

[57] Fix | Delete

/* r &= 0xffffffc0ffffffc0ffffffc0fffffff */

[58] Fix | Delete

$this->r = array(

[59] Fix | Delete

// st->r[0] = ...

[60] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 0, 4))

[61] Fix | Delete

->setUnsignedInt(true)

[62] Fix | Delete

->mask(0x3ffffff),

[63] Fix | Delete

// st->r[1] = ...

[64] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 3, 4))

[65] Fix | Delete

->setUnsignedInt(true)

[66] Fix | Delete

->shiftRight(2)

[67] Fix | Delete

->mask(0x3ffff03),

[68] Fix | Delete

// st->r[2] = ...

[69] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 6, 4))

[70] Fix | Delete

->setUnsignedInt(true)

[71] Fix | Delete

->shiftRight(4)

[72] Fix | Delete

->mask(0x3ffc0ff),

[73] Fix | Delete

// st->r[3] = ...

[74] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 9, 4))

[75] Fix | Delete

->setUnsignedInt(true)

[76] Fix | Delete

->shiftRight(6)

[77] Fix | Delete

->mask(0x3f03fff),

[78] Fix | Delete

// st->r[4] = ...

[79] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 12, 4))

[80] Fix | Delete

->setUnsignedInt(true)

[81] Fix | Delete

->shiftRight(8)

[82] Fix | Delete

->mask(0x00fffff)

[83] Fix | Delete

);

[84] Fix | Delete

[85] Fix | Delete

/* h = 0 */

[86] Fix | Delete

$this->h = array(

[87] Fix | Delete

new ParagonIE_Sodium_Core32_Int32(array(0, 0), true),

[88] Fix | Delete

new ParagonIE_Sodium_Core32_Int32(array(0, 0), true),

[89] Fix | Delete

new ParagonIE_Sodium_Core32_Int32(array(0, 0), true),

[90] Fix | Delete

new ParagonIE_Sodium_Core32_Int32(array(0, 0), true),

[91] Fix | Delete

new ParagonIE_Sodium_Core32_Int32(array(0, 0), true)

[92] Fix | Delete

);

[93] Fix | Delete

[94] Fix | Delete

/* save pad for later */

[95] Fix | Delete

$this->pad = array(

[96] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 16, 4))

[97] Fix | Delete

->setUnsignedInt(true)->toInt64(),

[98] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 20, 4))

[99] Fix | Delete

->setUnsignedInt(true)->toInt64(),

[100] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 24, 4))

[101] Fix | Delete

->setUnsignedInt(true)->toInt64(),

[102] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($key, 28, 4))

[103] Fix | Delete

->setUnsignedInt(true)->toInt64(),

[104] Fix | Delete

);

[105] Fix | Delete

[106] Fix | Delete

$this->leftover = 0;

[107] Fix | Delete

$this->final = false;

[108] Fix | Delete

}

[109] Fix | Delete

[110] Fix | Delete

/**

[111] Fix | Delete

* @internal You should not use this directly from another application

[112] Fix | Delete

[113] Fix | Delete

* @param string $message

[114] Fix | Delete

* @return self

[115] Fix | Delete

* @throws SodiumException

[116] Fix | Delete

* @throws TypeError

[117] Fix | Delete

[118] Fix | Delete

public function update($message = '')

[119] Fix | Delete

{

[120] Fix | Delete

$bytes = self::strlen($message);

[121] Fix | Delete

[122] Fix | Delete

/* handle leftover */

[123] Fix | Delete

if ($this->leftover) {

[124] Fix | Delete

/** @var int $want */

[125] Fix | Delete

$want = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - $this->leftover;

[126] Fix | Delete

if ($want > $bytes) {

[127] Fix | Delete

$want = $bytes;

[128] Fix | Delete

}

[129] Fix | Delete

for ($i = 0; $i < $want; ++$i) {

[130] Fix | Delete

$mi = self::chrToInt($message[$i]);

[131] Fix | Delete

$this->buffer[$this->leftover + $i] = $mi;

[132] Fix | Delete

}

[133] Fix | Delete

// We snip off the leftmost bytes.

[134] Fix | Delete

$message = self::substr($message, $want);

[135] Fix | Delete

$bytes = self::strlen($message);

[136] Fix | Delete

$this->leftover += $want;

[137] Fix | Delete

if ($this->leftover < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) {

[138] Fix | Delete

// We still don't have enough to run $this->blocks()

[139] Fix | Delete

return $this;

[140] Fix | Delete

}

[141] Fix | Delete

[142] Fix | Delete

$this->blocks(

[143] Fix | Delete

self::intArrayToString($this->buffer),

[144] Fix | Delete

ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE

[145] Fix | Delete

);

[146] Fix | Delete

$this->leftover = 0;

[147] Fix | Delete

}

[148] Fix | Delete

[149] Fix | Delete

/* process full blocks */

[150] Fix | Delete

if ($bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) {

[151] Fix | Delete

/** @var int $want */

[152] Fix | Delete

$want = $bytes & ~(ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE - 1);

[153] Fix | Delete

if ($want >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) {

[154] Fix | Delete

/** @var string $block */

[155] Fix | Delete

$block = self::substr($message, 0, $want);

[156] Fix | Delete

if (self::strlen($block) >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) {

[157] Fix | Delete

$this->blocks($block, $want);

[158] Fix | Delete

$message = self::substr($message, $want);

[159] Fix | Delete

$bytes = self::strlen($message);

[160] Fix | Delete

}

[161] Fix | Delete

}

[162] Fix | Delete

}

[163] Fix | Delete

[164] Fix | Delete

/* store leftover */

[165] Fix | Delete

if ($bytes) {

[166] Fix | Delete

for ($i = 0; $i < $bytes; ++$i) {

[167] Fix | Delete

$mi = self::chrToInt($message[$i]);

[168] Fix | Delete

$this->buffer[$this->leftover + $i] = $mi;

[169] Fix | Delete

}

[170] Fix | Delete

$this->leftover = (int) $this->leftover + $bytes;

[171] Fix | Delete

}

[172] Fix | Delete

return $this;

[173] Fix | Delete

}

[174] Fix | Delete

[175] Fix | Delete

/**

[176] Fix | Delete

* @internal You should not use this directly from another application

[177] Fix | Delete

[178] Fix | Delete

* @param string $message

[179] Fix | Delete

* @param int $bytes

[180] Fix | Delete

* @return self

[181] Fix | Delete

* @throws SodiumException

[182] Fix | Delete

* @throws TypeError

[183] Fix | Delete

[184] Fix | Delete

public function blocks($message, $bytes)

[185] Fix | Delete

{

[186] Fix | Delete

if (self::strlen($message) < 16) {

[187] Fix | Delete

$message = str_pad($message, 16, "\x00", STR_PAD_RIGHT);

[188] Fix | Delete

}

[189] Fix | Delete

$hibit = ParagonIE_Sodium_Core32_Int32::fromInt((int) ($this->final ? 0 : 1 << 24)); /* 1 << 128 */

[190] Fix | Delete

$hibit->setUnsignedInt(true);

[191] Fix | Delete

$zero = new ParagonIE_Sodium_Core32_Int64(array(0, 0, 0, 0), true);

[192] Fix | Delete

/**

[193] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $d0

[194] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $d1

[195] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $d2

[196] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $d3

[197] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $d4

[198] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $r0

[199] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $r1

[200] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $r2

[201] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $r3

[202] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int64 $r4

[203] Fix | Delete

[204] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h0

[205] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h1

[206] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h2

[207] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h3

[208] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h4

[209] Fix | Delete

[210] Fix | Delete

$r0 = $this->r[0]->toInt64();

[211] Fix | Delete

$r1 = $this->r[1]->toInt64();

[212] Fix | Delete

$r2 = $this->r[2]->toInt64();

[213] Fix | Delete

$r3 = $this->r[3]->toInt64();

[214] Fix | Delete

$r4 = $this->r[4]->toInt64();

[215] Fix | Delete

[216] Fix | Delete

$s1 = $r1->toInt64()->mulInt(5, 3);

[217] Fix | Delete

$s2 = $r2->toInt64()->mulInt(5, 3);

[218] Fix | Delete

$s3 = $r3->toInt64()->mulInt(5, 3);

[219] Fix | Delete

$s4 = $r4->toInt64()->mulInt(5, 3);

[220] Fix | Delete

[221] Fix | Delete

$h0 = $this->h[0];

[222] Fix | Delete

$h1 = $this->h[1];

[223] Fix | Delete

$h2 = $this->h[2];

[224] Fix | Delete

$h3 = $this->h[3];

[225] Fix | Delete

$h4 = $this->h[4];

[226] Fix | Delete

[227] Fix | Delete

while ($bytes >= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE) {

[228] Fix | Delete

/* h += m[i] */

[229] Fix | Delete

$h0 = $h0->addInt32(

[230] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 0, 4))

[231] Fix | Delete

->mask(0x3ffffff)

[232] Fix | Delete

)->toInt64();

[233] Fix | Delete

$h1 = $h1->addInt32(

[234] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 3, 4))

[235] Fix | Delete

->shiftRight(2)

[236] Fix | Delete

->mask(0x3ffffff)

[237] Fix | Delete

)->toInt64();

[238] Fix | Delete

$h2 = $h2->addInt32(

[239] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 6, 4))

[240] Fix | Delete

->shiftRight(4)

[241] Fix | Delete

->mask(0x3ffffff)

[242] Fix | Delete

)->toInt64();

[243] Fix | Delete

$h3 = $h3->addInt32(

[244] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 9, 4))

[245] Fix | Delete

->shiftRight(6)

[246] Fix | Delete

->mask(0x3ffffff)

[247] Fix | Delete

)->toInt64();

[248] Fix | Delete

$h4 = $h4->addInt32(

[249] Fix | Delete

ParagonIE_Sodium_Core32_Int32::fromReverseString(self::substr($message, 12, 4))

[250] Fix | Delete

->shiftRight(8)

[251] Fix | Delete

->orInt32($hibit)

[252] Fix | Delete

)->toInt64();

[253] Fix | Delete

[254] Fix | Delete

/* h *= r */

[255] Fix | Delete

$d0 = $zero

[256] Fix | Delete

->addInt64($h0->mulInt64($r0, 27))

[257] Fix | Delete

->addInt64($s4->mulInt64($h1, 27))

[258] Fix | Delete

->addInt64($s3->mulInt64($h2, 27))

[259] Fix | Delete

->addInt64($s2->mulInt64($h3, 27))

[260] Fix | Delete

->addInt64($s1->mulInt64($h4, 27));

[261] Fix | Delete

[262] Fix | Delete

$d1 = $zero

[263] Fix | Delete

->addInt64($h0->mulInt64($r1, 27))

[264] Fix | Delete

->addInt64($h1->mulInt64($r0, 27))

[265] Fix | Delete

->addInt64($s4->mulInt64($h2, 27))

[266] Fix | Delete

->addInt64($s3->mulInt64($h3, 27))

[267] Fix | Delete

->addInt64($s2->mulInt64($h4, 27));

[268] Fix | Delete

[269] Fix | Delete

$d2 = $zero

[270] Fix | Delete

->addInt64($h0->mulInt64($r2, 27))

[271] Fix | Delete

->addInt64($h1->mulInt64($r1, 27))

[272] Fix | Delete

->addInt64($h2->mulInt64($r0, 27))

[273] Fix | Delete

->addInt64($s4->mulInt64($h3, 27))

[274] Fix | Delete

->addInt64($s3->mulInt64($h4, 27));

[275] Fix | Delete

[276] Fix | Delete

$d3 = $zero

[277] Fix | Delete

->addInt64($h0->mulInt64($r3, 27))

[278] Fix | Delete

->addInt64($h1->mulInt64($r2, 27))

[279] Fix | Delete

->addInt64($h2->mulInt64($r1, 27))

[280] Fix | Delete

->addInt64($h3->mulInt64($r0, 27))

[281] Fix | Delete

->addInt64($s4->mulInt64($h4, 27));

[282] Fix | Delete

[283] Fix | Delete

$d4 = $zero

[284] Fix | Delete

->addInt64($h0->mulInt64($r4, 27))

[285] Fix | Delete

->addInt64($h1->mulInt64($r3, 27))

[286] Fix | Delete

->addInt64($h2->mulInt64($r2, 27))

[287] Fix | Delete

->addInt64($h3->mulInt64($r1, 27))

[288] Fix | Delete

->addInt64($h4->mulInt64($r0, 27));

[289] Fix | Delete

[290] Fix | Delete

/* (partial) h %= p */

[291] Fix | Delete

$c = $d0->shiftRight(26);

[292] Fix | Delete

$h0 = $d0->toInt32()->mask(0x3ffffff);

[293] Fix | Delete

$d1 = $d1->addInt64($c);

[294] Fix | Delete

[295] Fix | Delete

$c = $d1->shiftRight(26);

[296] Fix | Delete

$h1 = $d1->toInt32()->mask(0x3ffffff);

[297] Fix | Delete

$d2 = $d2->addInt64($c);

[298] Fix | Delete

[299] Fix | Delete

$c = $d2->shiftRight(26);

[300] Fix | Delete

$h2 = $d2->toInt32()->mask(0x3ffffff);

[301] Fix | Delete

$d3 = $d3->addInt64($c);

[302] Fix | Delete

[303] Fix | Delete

$c = $d3->shiftRight(26);

[304] Fix | Delete

$h3 = $d3->toInt32()->mask(0x3ffffff);

[305] Fix | Delete

$d4 = $d4->addInt64($c);

[306] Fix | Delete

[307] Fix | Delete

$c = $d4->shiftRight(26);

[308] Fix | Delete

$h4 = $d4->toInt32()->mask(0x3ffffff);

[309] Fix | Delete

$h0 = $h0->addInt32($c->toInt32()->mulInt(5, 3));

[310] Fix | Delete

[311] Fix | Delete

$c = $h0->shiftRight(26);

[312] Fix | Delete

$h0 = $h0->mask(0x3ffffff);

[313] Fix | Delete

$h1 = $h1->addInt32($c);

[314] Fix | Delete

[315] Fix | Delete

// Chop off the left 32 bytes.

[316] Fix | Delete

$message = self::substr(

[317] Fix | Delete

$message,

[318] Fix | Delete

ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE

[319] Fix | Delete

);

[320] Fix | Delete

$bytes -= ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE;

[321] Fix | Delete

}

[322] Fix | Delete

[323] Fix | Delete

/** @var array<int, ParagonIE_Sodium_Core32_Int32> $h */

[324] Fix | Delete

$this->h = array($h0, $h1, $h2, $h3, $h4);

[325] Fix | Delete

return $this;

[326] Fix | Delete

}

[327] Fix | Delete

[328] Fix | Delete

/**

[329] Fix | Delete

* @internal You should not use this directly from another application

[330] Fix | Delete

[331] Fix | Delete

* @return string

[332] Fix | Delete

* @throws SodiumException

[333] Fix | Delete

* @throws TypeError

[334] Fix | Delete

[335] Fix | Delete

public function finish()

[336] Fix | Delete

{

[337] Fix | Delete

/* process the remaining block */

[338] Fix | Delete

if ($this->leftover) {

[339] Fix | Delete

$i = $this->leftover;

[340] Fix | Delete

$this->buffer[$i++] = 1;

[341] Fix | Delete

for (; $i < ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE; ++$i) {

[342] Fix | Delete

$this->buffer[$i] = 0;

[343] Fix | Delete

}

[344] Fix | Delete

$this->final = true;

[345] Fix | Delete

$this->blocks(

[346] Fix | Delete

self::substr(

[347] Fix | Delete

self::intArrayToString($this->buffer),

[348] Fix | Delete

[349] Fix | Delete

ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE

[350] Fix | Delete

[351] Fix | Delete

$b = ParagonIE_Sodium_Core32_Poly1305::BLOCK_SIZE

[352] Fix | Delete

);

[353] Fix | Delete

}

[354] Fix | Delete

[355] Fix | Delete

/**

[356] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $f

[357] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $g0

[358] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $g1

[359] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $g2

[360] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $g3

[361] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $g4

[362] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h0

[363] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h1

[364] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h2

[365] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h3

[366] Fix | Delete

* @var ParagonIE_Sodium_Core32_Int32 $h4

[367] Fix | Delete

[368] Fix | Delete

$h0 = $this->h[0];

[369] Fix | Delete

$h1 = $this->h[1];

[370] Fix | Delete

$h2 = $this->h[2];

[371] Fix | Delete

$h3 = $this->h[3];

[372] Fix | Delete

$h4 = $this->h[4];

[373] Fix | Delete

[374] Fix | Delete

$c = $h1->shiftRight(26); # $c = $h1 >> 26;

[375] Fix | Delete

$h1 = $h1->mask(0x3ffffff); # $h1 &= 0x3ffffff;

[376] Fix | Delete

[377] Fix | Delete

$h2 = $h2->addInt32($c); # $h2 += $c;

[378] Fix | Delete

$c = $h2->shiftRight(26); # $c = $h2 >> 26;

[379] Fix | Delete

$h2 = $h2->mask(0x3ffffff); # $h2 &= 0x3ffffff;

[380] Fix | Delete

[381] Fix | Delete

$h3 = $h3->addInt32($c); # $h3 += $c;

[382] Fix | Delete

$c = $h3->shiftRight(26); # $c = $h3 >> 26;

[383] Fix | Delete

$h3 = $h3->mask(0x3ffffff); # $h3 &= 0x3ffffff;

[384] Fix | Delete

[385] Fix | Delete

$h4 = $h4->addInt32($c); # $h4 += $c;

[386] Fix | Delete

$c = $h4->shiftRight(26); # $c = $h4 >> 26;

[387] Fix | Delete

$h4 = $h4->mask(0x3ffffff); # $h4 &= 0x3ffffff;

[388] Fix | Delete

[389] Fix | Delete

$h0 = $h0->addInt32($c->mulInt(5, 3)); # $h0 += self::mul($c, 5);

[390] Fix | Delete

$c = $h0->shiftRight(26); # $c = $h0 >> 26;

[391] Fix | Delete

$h0 = $h0->mask(0x3ffffff); # $h0 &= 0x3ffffff;

[392] Fix | Delete

$h1 = $h1->addInt32($c); # $h1 += $c;

[393] Fix | Delete

[394] Fix | Delete

/* compute h + -p */

[395] Fix | Delete

$g0 = $h0->addInt(5);

[396] Fix | Delete

$c = $g0->shiftRight(26);

[397] Fix | Delete

$g0 = $g0->mask(0x3ffffff);

[398] Fix | Delete

$g1 = $h1->addInt32($c);

[399] Fix | Delete

$c = $g1->shiftRight(26);

[400] Fix | Delete

$g1 = $g1->mask(0x3ffffff);

[401] Fix | Delete

$g2 = $h2->addInt32($c);

[402] Fix | Delete

$c = $g2->shiftRight(26);

[403] Fix | Delete

$g2 = $g2->mask(0x3ffffff);

[404] Fix | Delete

$g3 = $h3->addInt32($c);

[405] Fix | Delete

$c = $g3->shiftRight(26);

[406] Fix | Delete

$g3 = $g3->mask(0x3ffffff);

[407] Fix | Delete

$g4 = $h4->addInt32($c)->subInt(1 << 26);

[408] Fix | Delete

[409] Fix | Delete

# $mask = ($g4 >> 31) - 1;

[410] Fix | Delete

/* select h if h < p, or h + -p if h >= p */

[411] Fix | Delete

$mask = (int) (($g4->toInt() >> 31) + 1);

[412] Fix | Delete

[413] Fix | Delete

$g0 = $g0->mask($mask);

[414] Fix | Delete

$g1 = $g1->mask($mask);

[415] Fix | Delete

$g2 = $g2->mask($mask);

[416] Fix | Delete

$g3 = $g3->mask($mask);

[417] Fix | Delete

$g4 = $g4->mask($mask);

[418] Fix | Delete

[419] Fix | Delete

/** @var int $mask */

[420] Fix | Delete

$mask = ~$mask;

[421] Fix | Delete

[422] Fix | Delete

$h0 = $h0->mask($mask)->orInt32($g0);

[423] Fix | Delete

$h1 = $h1->mask($mask)->orInt32($g1);

[424] Fix | Delete

$h2 = $h2->mask($mask)->orInt32($g2);

[425] Fix | Delete

$h3 = $h3->mask($mask)->orInt32($g3);

[426] Fix | Delete

$h4 = $h4->mask($mask)->orInt32($g4);

[427] Fix | Delete

[428] Fix | Delete

/* h = h % (2^128) */

[429] Fix | Delete

$h0 = $h0->orInt32($h1->shiftLeft(26));

[430] Fix | Delete

$h1 = $h1->shiftRight(6)->orInt32($h2->shiftLeft(20));

[431] Fix | Delete

$h2 = $h2->shiftRight(12)->orInt32($h3->shiftLeft(14));

[432] Fix | Delete

$h3 = $h3->shiftRight(18)->orInt32($h4->shiftLeft(8));

[433] Fix | Delete

[434] Fix | Delete

/* mac = (h + pad) % (2^128) */

[435] Fix | Delete

$f = $h0->toInt64()->addInt64($this->pad[0]);

[436] Fix | Delete

$h0 = $f->toInt32();

[437] Fix | Delete

$f = $h1->toInt64()->addInt64($this->pad[1])->addInt($h0->overflow);

[438] Fix | Delete

$h1 = $f->toInt32();

[439] Fix | Delete

$f = $h2->toInt64()->addInt64($this->pad[2])->addInt($h1->overflow);

[440] Fix | Delete

$h2 = $f->toInt32();

[441] Fix | Delete

$f = $h3->toInt64()->addInt64($this->pad[3])->addInt($h2->overflow);

[442] Fix | Delete

$h3 = $f->toInt32();

[443] Fix | Delete

[444] Fix | Delete

return $h0->toReverseString() .

[445] Fix | Delete

$h1->toReverseString() .

[446] Fix | Delete

$h2->toReverseString() .

[447] Fix | Delete

$h3->toReverseString();

[448] Fix | Delete

}

[449] Fix | Delete

}

[450] Fix | Delete

[451] Fix | Delete