DES 算法的 Javascript、PHP 及 Perl 的源代码

下面这些源代码统统来自 tero.co.uk 网站。其中 包含了 JavaScript 实现按位工作的 DES （数据加密标准）加密算法。它支持 ECB（电子密码本(Electronic Code Book)）和 CBC（密码块链接(Cipher Block Chaining)），并且包含了 3DES 算法。它不需要任何附加库，并且同时提供了 PHP 和 Perl 的实现。

使用：

des(stringkey, stringmessage, booleanencrypt, [integermode, stringiv])

des 函数接受一个 8 字节字符串作为普通 DES 算法的密钥（也就是 64 位，但是算法只使用 56 位），或者接受一个 24 字节字符串作为 3DES 算法的密钥；第二个参数是要加密或解密的信息字符串；第三个布尔值参数用来说明信息是加密还是解密；接下来的可选参数 mode 如果是 0 表示 ECB 模式，1 表示 CBC 模式，默认是 ECB 模式；最后一个可选项是一个 8 字节的输入向量字符串（在 ECB 模式下不使用）。返回的密文是字符串。

下面是一些如何使用的例子。

// 使用 DES 算法（使用 8 字节的密钥）以 CBC 模式使用给出的输入向量加密信息
des("8bytekey", "This is the message.", 1, 1, "inputvec");
// 使用 3DES 算法（使用 24 字节的密钥） 以 ECB 模式加密信息
des("this is a 24 byte key !!", "This is the message.", 1);
//使用 ECB 模式的 DES 算法解密信息
des("8bytekey", "2384lf&*£90LSdsf", 0);

源码：

des.js
  1. //Javascript version
  2. //Paul Tero, July 2001
  3. //http://www.tero.co.uk/des/
  4. //
  5. //Optimised for performance with large blocks by Michael Hayworth, November 2001
  6. //http://www.netdealing.com
  7. //
  8. //THIS SOFTWARE IS PROVIDED "AS IS" AND
  9. //ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  10. //IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  11. //ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  12. //FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  13. //DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  14. //OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  15. //HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  16. //LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  17. //OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  18. //SUCH DAMAGE.
  19.  
  20. //des
  21. //this takes the key, the message, and whether to encrypt or decrypt
  22. function des(key, message, encrypt, mode, iv){
  23.   //declaring this locally speeds things up a bit
  24.   var spfunction1 = newArray(0x1010400,0,0x10000,0x1010404,0x1010004,0x10404,0x4,0x10000,0x400,0x1010400,0x1010404,0x400,0x1000404,0x1010004,0x1000000,0x4,0x404,0x1000400,0x1000400,0x10400,0x10400,0x1010000,0x1010000,0x1000404,0x10004,0x1000004,0x1000004,0x10004,0,0x404,0x10404,0x1000000,0x10000,0x1010404,0x4,0x1010000,0x1010400,0x1000000,0x1000000,0x400,0x1010004,0x10000,0x10400,0x1000004,0x400,0x4,0x1000404,0x10404,0x1010404,0x10004,0x1010000,0x1000404,0x1000004,0x404,0x10404,0x1010400,0x404,0x1000400,0x1000400,0,0x10004,0x10400,0,0x1010004);
  25.   var spfunction2 = newArray(-0x7fef7fe0,-0x7fff8000,0x8000,0x108020,0x100000,0x20,-0x7fefffe0,-0x7fff7fe0,-0x7fffffe0,-0x7fef7fe0,-0x7fef8000,-0x80000000,-0x7fff8000,0x100000,0x20,-0x7fefffe0,0x108000,0x100020,-0x7fff7fe0,0,-0x80000000,0x8000,0x108020,-0x7ff00000,0x100020,-0x7fffffe0,0,0x108000,0x8020,-0x7fef8000,-0x7ff00000,0x8020,0,0x108020,-0x7fefffe0,0x100000,-0x7fff7fe0,-0x7ff00000,-0x7fef8000,0x8000,-0x7ff00000,-0x7fff8000,0x20,-0x7fef7fe0,0x108020,0x20,0x8000,-0x80000000,0x8020,-0x7fef8000,0x100000,-0x7fffffe0,0x100020,-0x7fff7fe0,-0x7fffffe0,0x100020,0x108000,0,-0x7fff8000,0x8020,-0x80000000,-0x7fefffe0,-0x7fef7fe0,0x108000);
  26.   var spfunction3 = newArray(0x208,0x8020200,0,0x8020008,0x8000200,0,0x20208,0x8000200,0x20008,0x8000008,0x8000008,0x20000,0x8020208,0x20008,0x8020000,0x208,0x8000000,0x8,0x8020200,0x200,0x20200,0x8020000,0x8020008,0x20208,0x8000208,0x20200,0x20000,0x8000208,0x8,0x8020208,0x200,0x8000000,0x8020200,0x8000000,0x20008,0x208,0x20000,0x8020200,0x8000200,0,0x200,0x20008,0x8020208,0x8000200,0x8000008,0x200,0,0x8020008,0x8000208,0x20000,0x8000000,0x8020208,0x8,0x20208,0x20200,0x8000008,0x8020000,0x8000208,0x208,0x8020000,0x20208,0x8,0x8020008,0x20200);
  27.   var spfunction4 = newArray(0x802001,0x2081,0x2081,0x80,0x802080,0x800081,0x800001,0x2001,0,0x802000,0x802000,0x802081,0x81,0,0x800080,0x800001,0x1,0x2000,0x800000,0x802001,0x80,0x800000,0x2001,0x2080,0x800081,0x1,0x2080,0x800080,0x2000,0x802080,0x802081,0x81,0x800080,0x800001,0x802000,0x802081,0x81,0,0,0x802000,0x2080,0x800080,0x800081,0x1,0x802001,0x2081,0x2081,0x80,0x802081,0x81,0x1,0x2000,0x800001,0x2001,0x802080,0x800081,0x2001,0x2080,0x800000,0x802001,0x80,0x800000,0x2000,0x802080);
  28.   var spfunction5 = newArray(0x100,0x2080100,0x2080000,0x42000100,0x80000,0x100,0x40000000,0x2080000,0x40080100,0x80000,0x2000100,0x40080100,0x42000100,0x42080000,0x80100,0x40000000,0x2000000,0x40080000,0x40080000,0,0x40000100,0x42080100,0x42080100,0x2000100,0x42080000,0x40000100,0,0x42000000,0x2080100,0x2000000,0x42000000,0x80100,0x80000,0x42000100,0x100,0x2000000,0x40000000,0x2080000,0x42000100,0x40080100,0x2000100,0x40000000,0x42080000,0x2080100,0x40080100,0x100,0x2000000,0x42080000,0x42080100,0x80100,0x42000000,0x42080100,0x2080000,0,0x40080000,0x42000000,0x80100,0x2000100,0x40000100,0x80000,0,0x40080000,0x2080100,0x40000100);
  29.   var spfunction6 = newArray(0x20000010,0x20400000,0x4000,0x20404010,0x20400000,0x10,0x20404010,0x400000,0x20004000,0x404010,0x400000,0x20000010,0x400010,0x20004000,0x20000000,0x4010,0,0x400010,0x20004010,0x4000,0x404000,0x20004010,0x10,0x20400010,0x20400010,0,0x404010,0x20404000,0x4010,0x404000,0x20404000,0x20000000,0x20004000,0x10,0x20400010,0x404000,0x20404010,0x400000,0x4010,0x20000010,0x400000,0x20004000,0x20000000,0x4010,0x20000010,0x20404010,0x404000,0x20400000,0x404010,0x20404000,0,0x20400010,0x10,0x4000,0x20400000,0x404010,0x4000,0x400010,0x20004010,0,0x20404000,0x20000000,0x400010,0x20004010);
  30.   var spfunction7 = newArray(0x200000,0x4200002,0x4000802,0,0x800,0x4000802,0x200802,0x4200800,0x4200802,0x200000,0,0x4000002,0x2,0x4000000,0x4200002,0x802,0x4000800,0x200802,0x200002,0x4000800,0x4000002,0x4200000,0x4200800,0x200002,0x4200000,0x800,0x802,0x4200802,0x200800,0x2,0x4000000,0x200800,0x4000000,0x200800,0x200000,0x4000802,0x4000802,0x4200002,0x4200002,0x2,0x200002,0x4000000,0x4000800,0x200000,0x4200800,0x802,0x200802,0x4200800,0x802,0x4000002,0x4200802,0x4200000,0x200800,0,0x2,0x4200802,0,0x200802,0x4200000,0x800,0x4000002,0x4000800,0x800,0x200002);
  31.   var spfunction8 = newArray(0x10001040,0x1000,0x40000,0x10041040,0x10000000,0x10001040,0x40,0x10000000,0x40040,0x10040000,0x10041040,0x41000,0x10041000,0x41040,0x1000,0x40,0x10040000,0x10000040,0x10001000,0x1040,0x41000,0x40040,0x10040040,0x10041000,0x1040,0,0,0x10040040,0x10000040,0x10001000,0x41040,0x40000,0x41040,0x40000,0x10041000,0x1000,0x40,0x10040040,0x1000,0x41040,0x10001000,0x40,0x10000040,0x10040000,0x10040040,0x10000000,0x40000,0x10001040,0,0x10041040,0x40040,0x10000040,0x10040000,0x10001000,0x10001040,0,0x10041040,0x41000,0x41000,0x1040,0x1040,0x40040,0x10000000,0x10041000);
  32.  
  33.   //create the 16 or 48 subkeys we will need
  34.   var keys = des_createKeys(key);
  35.   var m=0, i, j, temp, temp2, right1, right2, left, right, looping;
  36.   var cbcleft, cbcleft2, cbcright, cbcright2
  37.   var endloop, loopinc;
  38.   var len = message.length;
  39.   var chunk = 0;
  40.   //set up the loops for single and triple des
  41.   var iterations = keys.length == 32 ? 3 : 9; //single or triple des
  42.   if (iterations == 3){looping = encrypt ? newArray(0, 32, 2) : newArray(30, -2, -2);}
  43.   else {looping = encrypt ? newArray(0, 32, 2, 62, 30, -2, 64, 96, 2) : newArray(94, 62, -2, 32, 64, 2, 30, -2, -2);}
  44.  
  45.   message += "\0\0\0\0\0\0\0\0"; //pad the message out with null bytes
  46.   //store the result here
  47.   result = "";
  48.   tempresult = "";
  49.  
  50.   if (mode == 1){//CBC mode
  51.     cbcleft = (iv.charCodeAt(m++) << 24) | (iv.charCodeAt(m++) << 16) | (iv.charCodeAt(m++) << 8) | iv.charCodeAt(m++);
  52.     cbcright = (iv.charCodeAt(m++) << 24) | (iv.charCodeAt(m++) << 16) | (iv.charCodeAt(m++) << 8) | iv.charCodeAt(m++);
  53.     m=0;
  54.   }
  55.  
  56.   //loop through each 64 bit chunk of the message
  57.   while (m < len){
  58.     left = (message.charCodeAt(m++) << 24) | (message.charCodeAt(m++) << 16) | (message.charCodeAt(m++) << 8) | message.charCodeAt(m++);
  59.     right = (message.charCodeAt(m++) << 24) | (message.charCodeAt(m++) << 16) | (message.charCodeAt(m++) << 8) | message.charCodeAt(m++);
  60.  
  61.     //for Cipher Block Chaining mode, xor the message with the previous result
  62.     if (mode == 1){if(encrypt){left ^= cbcleft; right ^= cbcright;}else{cbcleft2 = cbcleft; cbcright2 = cbcright; cbcleft = left; cbcright = right;}}
  63.  
  64.     //first each 64 but chunk of the message must be permuted according to IP
  65.     temp = ((left >>> 4) ^ right) & 0x0f0f0f0f; right ^= temp; left ^= (temp << 4);
  66.     temp = ((left >>> 16) ^ right) & 0x0000ffff; right ^= temp; left ^= (temp << 16);
  67.     temp = ((right >>> 2) ^ left) & 0x33333333; left ^= temp; right ^= (temp << 2);
  68.     temp = ((right >>> 8) ^ left) & 0x00ff00ff; left ^= temp; right ^= (temp << 8);
  69.     temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);
  70.  
  71.     left = ((left << 1) | (left >>> 31));
  72.     right = ((right << 1) | (right >>> 31));
  73.  
  74.     //do this either 1 or 3 times for each chunk of the message
  75.     for (j=0; j<iterations; j+=3){
  76.       endloop = looping[j+1];
  77.       loopinc = looping[j+2];
  78.       //now go through and perform the encryption or decryption 
  79.       for (i=looping[j]; i!=endloop; i+=loopinc){//for efficiency
  80.         right1 = right ^ keys[i];
  81.         right2 = ((right >>> 4) | (right << 28)) ^ keys[i+1];
  82.         //the result is attained by passing these bytes through the S selection functions
  83.         temp = left;
  84.         left = right;
  85.         right = temp ^ (spfunction2[(right1 >>> 24) & 0x3f] | spfunction4[(right1 >>> 16) & 0x3f]
  86.               | spfunction6[(right1 >>>  8) & 0x3f] | spfunction8[right1 & 0x3f]
  87.               | spfunction1[(right2 >>> 24) & 0x3f] | spfunction3[(right2 >>> 16) & 0x3f]
  88.               | spfunction5[(right2 >>>  8) & 0x3f] | spfunction7[right2 & 0x3f]);
  89.       }
  90.       temp = left; left = right; right = temp; //unreverse left and right
  91.     } //for either 1 or 3 iterations
  92.  
  93.     //move then each one bit to the right
  94.     left = ((left >>> 1) | (left << 31));
  95.     right = ((right >>> 1) | (right << 31));
  96.  
  97.     //now perform IP-1, which is IP in the opposite direction
  98.     temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);
  99.     temp = ((right >>> 8) ^ left) & 0x00ff00ff; left ^= temp; right ^= (temp << 8);
  100.     temp = ((right >>> 2) ^ left) & 0x33333333; left ^= temp; right ^= (temp << 2);
  101.     temp = ((left >>> 16) ^ right) & 0x0000ffff; right ^= temp; left ^= (temp << 16);
  102.     temp = ((left >>> 4) ^ right) & 0x0f0f0f0f; right ^= temp; left ^= (temp << 4);
  103.  
  104.     //for Cipher Block Chaining mode, xor the message with the previous result
  105.     if (mode == 1){if(encrypt){cbcleft = left; cbcright = right;}else{left ^= cbcleft2; right ^= cbcright2;}}
  106.     tempresult += String.fromCharCode ((left>>>24), ((left>>>16) & 0xff), ((left>>>8) & 0xff), (left & 0xff), (right>>>24), ((right>>>16) & 0xff), ((right>>>8) & 0xff), (right & 0xff));
  107.  
  108.     chunk += 8;
  109.     if (chunk == 512){result += tempresult; tempresult = ""; chunk = 0;}
  110.   } //for every 8 characters, or 64 bits in the message
  111.  
  112.   //return the result as an array
  113.   return result + tempresult;
  114. } //end of des
  115.  
  116.  
  117.  
  118. //des_createKeys
  119. //this takes as input a 64 bit key (even though only 56 bits are used)
  120. //as an array of 2 integers, and returns 16 48 bit keys
  121. function des_createKeys(key){
  122.   //declaring this locally speeds things up a bit
  123.   pc2bytes0  = new Array(0,0x4,0x20000000,0x20000004,0x10000,0x10004,0x20010000,0x20010004,0x200,0x204,0x20000200,0x20000204,0x10200,0x10204,0x20010200,0x20010204);
  124.   pc2bytes1  = new Array(0,0x1,0x100000,0x100001,0x4000000,0x4000001,0x4100000,0x4100001,0x100,0x101,0x100100,0x100101,0x4000100,0x4000101,0x4100100,0x4100101);
  125.   pc2bytes2  = new Array(0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808,0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808);
  126.   pc2bytes3  = new Array(0,0x200000,0x8000000,0x8200000,0x2000,0x202000,0x8002000,0x8202000,0x20000,0x220000,0x8020000,0x8220000,0x22000,0x222000,0x8022000,0x8222000);
  127.   pc2bytes4  = new Array(0,0x40000,0x10,0x40010,0,0x40000,0x10,0x40010,0x1000,0x41000,0x1010,0x41010,0x1000,0x41000,0x1010,0x41010);
  128.   pc2bytes5  = new Array(0,0x400,0x20,0x420,0,0x400,0x20,0x420,0x2000000,0x2000400,0x2000020,0x2000420,0x2000000,0x2000400,0x2000020,0x2000420);
  129.   pc2bytes6  = new Array(0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002,0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002);
  130.   pc2bytes7  = new Array(0,0x10000,0x800,0x10800,0x20000000,0x20010000,0x20000800,0x20010800,0x20000,0x30000,0x20800,0x30800,0x20020000,0x20030000,0x20020800,0x20030800);
  131.   pc2bytes8  = new Array(0,0x40000,0,0x40000,0x2,0x40002,0x2,0x40002,0x2000000,0x2040000,0x2000000,0x2040000,0x2000002,0x2040002,0x2000002,0x2040002);
  132.   pc2bytes9  = new Array(0,0x10000000,0x8,0x10000008,0,0x10000000,0x8,0x10000008,0x400,0x10000400,0x408,0x10000408,0x400,0x10000400,0x408,0x10000408);
  133.   pc2bytes10 = new Array(0,0x20,0,0x20,0x100000,0x100020,0x100000,0x100020,0x2000,0x2020,0x2000,0x2020,0x102000,0x102020,0x102000,0x102020);
  134.   pc2bytes11 = new Array(0,0x1000000,0x200,0x1000200,0x200000,0x1200000,0x200200,0x1200200,0x4000000,0x5000000,0x4000200,0x5000200,0x4200000,0x5200000,0x4200200,0x5200200);
  135.   pc2bytes12 = new Array(0,0x1000,0x8000000,0x8001000,0x80000,0x81000,0x8080000,0x8081000,0x10,0x1010,0x8000010,0x8001010,0x80010,0x81010,0x8080010,0x8081010);
  136.   pc2bytes13 = new Array(0,0x4,0x100,0x104,0,0x4,0x100,0x104,0x1,0x5,0x101,0x105,0x1,0x5,0x101,0x105);
  137.  
  138.   //how many iterations (1 for des, 3 for triple des)
  139.   var iterations = key.length >= 24 ? 3 : 1;
  140.   //stores the return keys
  141.   var keys = newArray(32 * iterations);
  142.   //now define the left shifts which need to be done
  143.   var shifts = newArray(0, 0, 1, 1, 1, 1, 1, 1, 0, 1, 1, 1, 1, 1, 1, 0);
  144.   //other variables
  145.   var lefttemp, righttemp, m=0, n=0, temp;
  146.  
  147.   for (varj=0; j<iterations; j++){//either 1 or 3 iterations
  148.     left = (key.charCodeAt(m++) << 24) | (key.charCodeAt(m++) << 16) | (key.charCodeAt(m++) << 8) | key.charCodeAt(m++);
  149.     right = (key.charCodeAt(m++) << 24) | (key.charCodeAt(m++) << 16) | (key.charCodeAt(m++) << 8) | key.charCodeAt(m++);
  150.  
  151.     temp = ((left >>> 4) ^ right) & 0x0f0f0f0f; right ^= temp; left ^= (temp << 4);
  152.     temp = ((right >>> -16) ^ left) & 0x0000ffff; left ^= temp; right ^= (temp << -16);
  153.     temp = ((left >>> 2) ^ right) & 0x33333333; right ^= temp; left ^= (temp << 2);
  154.     temp = ((right >>> -16) ^ left) & 0x0000ffff; left ^= temp; right ^= (temp << -16);
  155.     temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);
  156.     temp = ((right >>> 8) ^ left) & 0x00ff00ff; left ^= temp; right ^= (temp << 8);
  157.     temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);
  158.  
  159.     //the right side needs to be shifted and to get the last four bits of the left side
  160.     temp = (left << 8) | ((right >>> 20) & 0x000000f0);
  161.     //left needs to be put upside down
  162.     left = (right << 24) | ((right << 8) & 0xff0000) | ((right >>> 8) & 0xff00) | ((right >>> 24) & 0xf0);
  163.     right = temp;
  164.  
  165.     //now go through and perform these shifts on the left and right keys
  166.     for (i=0; i < shifts.length; i++){
  167.       //shift the keys either one or two bits to the left
  168.       if (shifts[i]){left = (left << 2) | (left >>> 26); right = (right << 2) | (right >>> 26);}
  169.       else {left = (left << 1) | (left >>> 27); right = (right << 1) | (right >>> 27);}
  170.       left &= -0xf; right &= -0xf;
  171.  
  172.       //now apply PC-2, in such a way that E is easier when encrypting or decrypting
  173.       //this conversion will look like PC-2 except only the last 6 bits of each byte are used
  174.       //rather than 48 consecutive bits and the order of lines will be according to
  175.       //how the S selection functions will be applied: S2, S4, S6, S8, S1, S3, S5, S7
  176.       lefttemp = pc2bytes0[left >>> 28] | pc2bytes1[(left >>> 24) & 0xf]
  177.               | pc2bytes2[(left >>> 20) & 0xf] | pc2bytes3[(left >>> 16) & 0xf]
  178.               | pc2bytes4[(left >>> 12) & 0xf] | pc2bytes5[(left >>> 8) & 0xf]
  179.               | pc2bytes6[(left >>> 4) & 0xf];
  180.       righttemp = pc2bytes7[right >>> 28] | pc2bytes8[(right >>> 24) & 0xf]
  181.                 | pc2bytes9[(right >>> 20) & 0xf] | pc2bytes10[(right >>> 16) & 0xf]
  182.                 | pc2bytes11[(right >>> 12) & 0xf] | pc2bytes12[(right >>> 8) & 0xf]
  183.                 | pc2bytes13[(right >>> 4) & 0xf];
  184.       temp = ((righttemp >>> 16) ^ lefttemp) & 0x0000ffff;
  185.       keys[n++] = lefttemp ^ temp; keys[n++] = righttemp ^ (temp << 16);
  186.     }
  187.   } //for each iterations
  188.   //return the keys we've created
  189.   return keys;
  190. } //end of des_createKeys
  191.  
  192.  
  193. ////////////////////////////// TEST //////////////////////////////
  194. function stringToHex(s){
  195.   var r = "0x";
  196.   var hexes = newArray("0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f");
  197.   for (vari=0; i<s.length; i++){r += hexes[s.charCodeAt(i) >> 4] + hexes[s.charCodeAt(i) & 0xf];}
  198.   return r;
  199. }
  200.  
  201. var key = "this is a 24 byte key !!";
  202. var message = "This is a test message";
  203. var ciphertext = des(key, message, 1, 0);
  204. document.writeln ("DES Test: " + stringToHex(ciphertext));
des.php
  1. <?php
  2. //PHP version
  3. //Paul Tero, July 2001
  4. //http://www.tero.co.uk/des/
  5. //
  6. //Optimised for performance with large blocks by Michael Hayworth, November 2001
  7. //http://www.netdealing.com
  8. //
  9. //Converted from JavaScript to PHP by Jim Gibbs, June 2004
  10. //
  11. //THIS SOFTWARE IS PROVIDED "AS IS" AND
  12. //ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  13. //IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  14. //ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  15. //FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  16. //DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  17. //OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  18. //HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  19. //LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  20. //OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  21. //SUCH DAMAGE.
  22.  
  23. //des
  24. //this takes the key, the message, and whether to encrypt or decrypt
  25. function des($key, $message, $encrypt, $mode, $iv){
  26.   //declaring this locally speeds things up a bit
  27.   $spfunction1 = array (0x1010400,0,0x10000,0x1010404,0x1010004,0x10404,0x4,0x10000,0x400,0x1010400,0x1010404,0x400,0x1000404,0x1010004,0x1000000,0x4,0x404,0x1000400,0x1000400,0x10400,0x10400,0x1010000,0x1010000,0x1000404,0x10004,0x1000004,0x1000004,0x10004,0,0x404,0x10404,0x1000000,0x10000,0x1010404,0x4,0x1010000,0x1010400,0x1000000,0x1000000,0x400,0x1010004,0x10000,0x10400,0x1000004,0x400,0x4,0x1000404,0x10404,0x1010404,0x10004,0x1010000,0x1000404,0x1000004,0x404,0x10404,0x1010400,0x404,0x1000400,0x1000400,0,0x10004,0x10400,0,0x1010004);
  28.   $spfunction2 = array (-0x7fef7fe0,-0x7fff8000,0x8000,0x108020,0x100000,0x20,-0x7fefffe0,-0x7fff7fe0,-0x7fffffe0,-0x7fef7fe0,-0x7fef8000,-0x80000000,-0x7fff8000,0x100000,0x20,-0x7fefffe0,0x108000,0x100020,-0x7fff7fe0,0,-0x80000000,0x8000,0x108020,-0x7ff00000,0x100020,-0x7fffffe0,0,0x108000,0x8020,-0x7fef8000,-0x7ff00000,0x8020,0,0x108020,-0x7fefffe0,0x100000,-0x7fff7fe0,-0x7ff00000,-0x7fef8000,0x8000,-0x7ff00000,-0x7fff8000,0x20,-0x7fef7fe0,0x108020,0x20,0x8000,-0x80000000,0x8020,-0x7fef8000,0x100000,-0x7fffffe0,0x100020,-0x7fff7fe0,-0x7fffffe0,0x100020,0x108000,0,-0x7fff8000,0x8020,-0x80000000,-0x7fefffe0,-0x7fef7fe0,0x108000);
  29.   $spfunction3 = array (0x208,0x8020200,0,0x8020008,0x8000200,0,0x20208,0x8000200,0x20008,0x8000008,0x8000008,0x20000,0x8020208,0x20008,0x8020000,0x208,0x8000000,0x8,0x8020200,0x200,0x20200,0x8020000,0x8020008,0x20208,0x8000208,0x20200,0x20000,0x8000208,0x8,0x8020208,0x200,0x8000000,0x8020200,0x8000000,0x20008,0x208,0x20000,0x8020200,0x8000200,0,0x200,0x20008,0x8020208,0x8000200,0x8000008,0x200,0,0x8020008,0x8000208,0x20000,0x8000000,0x8020208,0x8,0x20208,0x20200,0x8000008,0x8020000,0x8000208,0x208,0x8020000,0x20208,0x8,0x8020008,0x20200);
  30.   $spfunction4 = array (0x802001,0x2081,0x2081,0x80,0x802080,0x800081,0x800001,0x2001,0,0x802000,0x802000,0x802081,0x81,0,0x800080,0x800001,0x1,0x2000,0x800000,0x802001,0x80,0x800000,0x2001,0x2080,0x800081,0x1,0x2080,0x800080,0x2000,0x802080,0x802081,0x81,0x800080,0x800001,0x802000,0x802081,0x81,0,0,0x802000,0x2080,0x800080,0x800081,0x1,0x802001,0x2081,0x2081,0x80,0x802081,0x81,0x1,0x2000,0x800001,0x2001,0x802080,0x800081,0x2001,0x2080,0x800000,0x802001,0x80,0x800000,0x2000,0x802080);
  31.   $spfunction5 = array (0x100,0x2080100,0x2080000,0x42000100,0x80000,0x100,0x40000000,0x2080000,0x40080100,0x80000,0x2000100,0x40080100,0x42000100,0x42080000,0x80100,0x40000000,0x2000000,0x40080000,0x40080000,0,0x40000100,0x42080100,0x42080100,0x2000100,0x42080000,0x40000100,0,0x42000000,0x2080100,0x2000000,0x42000000,0x80100,0x80000,0x42000100,0x100,0x2000000,0x40000000,0x2080000,0x42000100,0x40080100,0x2000100,0x40000000,0x42080000,0x2080100,0x40080100,0x100,0x2000000,0x42080000,0x42080100,0x80100,0x42000000,0x42080100,0x2080000,0,0x40080000,0x42000000,0x80100,0x2000100,0x40000100,0x80000,0,0x40080000,0x2080100,0x40000100);
  32.   $spfunction6 = array (0x20000010,0x20400000,0x4000,0x20404010,0x20400000,0x10,0x20404010,0x400000,0x20004000,0x404010,0x400000,0x20000010,0x400010,0x20004000,0x20000000,0x4010,0,0x400010,0x20004010,0x4000,0x404000,0x20004010,0x10,0x20400010,0x20400010,0,0x404010,0x20404000,0x4010,0x404000,0x20404000,0x20000000,0x20004000,0x10,0x20400010,0x404000,0x20404010,0x400000,0x4010,0x20000010,0x400000,0x20004000,0x20000000,0x4010,0x20000010,0x20404010,0x404000,0x20400000,0x404010,0x20404000,0,0x20400010,0x10,0x4000,0x20400000,0x404010,0x4000,0x400010,0x20004010,0,0x20404000,0x20000000,0x400010,0x20004010);
  33.   $spfunction7 = array (0x200000,0x4200002,0x4000802,0,0x800,0x4000802,0x200802,0x4200800,0x4200802,0x200000,0,0x4000002,0x2,0x4000000,0x4200002,0x802,0x4000800,0x200802,0x200002,0x4000800,0x4000002,0x4200000,0x4200800,0x200002,0x4200000,0x800,0x802,0x4200802,0x200800,0x2,0x4000000,0x200800,0x4000000,0x200800,0x200000,0x4000802,0x4000802,0x4200002,0x4200002,0x2,0x200002,0x4000000,0x4000800,0x200000,0x4200800,0x802,0x200802,0x4200800,0x802,0x4000002,0x4200802,0x4200000,0x200800,0,0x2,0x4200802,0,0x200802,0x4200000,0x800,0x4000002,0x4000800,0x800,0x200002);
  34.   $spfunction8 = array (0x10001040,0x1000,0x40000,0x10041040,0x10000000,0x10001040,0x40,0x10000000,0x40040,0x10040000,0x10041040,0x41000,0x10041000,0x41040,0x1000,0x40,0x10040000,0x10000040,0x10001000,0x1040,0x41000,0x40040,0x10040040,0x10041000,0x1040,0,0,0x10040040,0x10000040,0x10001000,0x41040,0x40000,0x41040,0x40000,0x10041000,0x1000,0x40,0x10040040,0x1000,0x41040,0x10001000,0x40,0x10000040,0x10040000,0x10040040,0x10000000,0x40000,0x10001040,0,0x10041040,0x40040,0x10000040,0x10040000,0x10001000,0x10001040,0,0x10041040,0x41000,0x41000,0x1040,0x1040,0x40040,0x10000000,0x10041000);
  35.   $masks = array (4294967295,2147483647,1073741823,536870911,268435455,134217727,67108863,33554431,16777215,8388607,4194303,2097151,1048575,524287,262143,131071,65535,32767,16383,8191,4095,2047,1023,511,255,127,63,31,15,7,3,1,0);
  36.  
  37.   //create the 16 or 48 subkeys we will need
  38.   $keys = des_createKeys ($key);
  39.   $m=0;
  40.   $len = strlen($message);
  41.   $chunk = 0;
  42.   //set up the loops for single and triple des
  43.   $iterations = ((count($keys) == 32) ? 3 : 9); //single or triple des
  44.   if ($iterations == 3){$looping = (($encrypt) ? array(0, 32, 2) : array(30, -2, -2));}
  45.   else {$looping = (($encrypt) ? array(0, 32, 2, 62, 30, -2, 64, 96, 2) : array(94, 62, -2, 32, 64, 2, 30, -2, -2));}
  46.  
  47.   $message .= (chr(0) . chr(0) . chr(0) . chr(0) . chr(0) . chr(0) . chr(0) . chr(0)); //pad the message out with null bytes
  48.   //store the result here
  49.   $result = "";
  50.   $tempresult = "";
  51.  
  52.   if ($mode == 1){//CBC mode
  53.     $cbcleft = (ord($iv{$m++}) << 24) | (ord($iv{$m++}) << 16) | (ord($iv{$m++}) << 8) | ord($iv{$m++});
  54.     $cbcright = (ord($iv{$m++}) << 24) | (ord($iv{$m++}) << 16) | (ord($iv{$m++}) << 8) | ord($iv{$m++});
  55.     $m=0;
  56.   }
  57.  
  58.   //loop through each 64 bit chunk of the message
  59.   while ($m < $len){
  60.     $left = (ord($message{$m++}) << 24) | (ord($message{$m++}) << 16) | (ord($message{$m++}) << 8) | ord($message{$m++});
  61.     $right = (ord($message{$m++}) << 24) | (ord($message{$m++}) << 16) | (ord($message{$m++}) << 8) | ord($message{$m++});
  62.  
  63.     //for Cipher Block Chaining mode, xor the message with the previous result
  64.     if ($mode == 1){if($encrypt){$left ^= $cbcleft; $right ^= $cbcright;}else{$cbcleft2 = $cbcleft; $cbcright2 = $cbcright; $cbcleft = $left; $cbcright = $right;}}
  65.  
  66.     //first each 64 but chunk of the message must be permuted according to IP
  67.     $temp = (($left >> 4 & $masks[4]) ^ $right) & 0x0f0f0f0f; $right ^= $temp; $left ^= ($temp << 4);
  68.     $temp = (($left >> 16 & $masks[16]) ^ $right) & 0x0000ffff; $right ^= $temp; $left ^= ($temp << 16);
  69.     $temp = (($right >> 2 & $masks[2]) ^ $left) & 0x33333333; $left ^= $temp; $right ^= ($temp << 2);
  70.     $temp = (($right >> 8 & $masks[8]) ^ $left) & 0x00ff00ff; $left ^= $temp; $right ^= ($temp << 8);
  71.     $temp = (($left >> 1 & $masks[1]) ^ $right) & 0x55555555; $right ^= $temp; $left ^= ($temp << 1);
  72.  
  73.     $left = (($left << 1) | ($left >> 31 & $masks[31]));
  74.     $right = (($right << 1) | ($right >> 31 & $masks[31]));
  75.  
  76.     //do this either 1 or 3 times for each chunk of the message
  77.     for ($j=0; $j<$iterations; $j+=3){
  78.       $endloop = $looping[$j+1];
  79.       $loopinc = $looping[$j+2];
  80.       //now go through and perform the encryption or decryption 
  81.       for ($i=$looping[$j]; $i!=$endloop; $i+=$loopinc){//for efficiency
  82.         $right1 = $right ^ $keys[$i];
  83.         $right2 = (($right >> 4 & $masks[4]) | ($right << 28)) ^ $keys[$i+1];
  84.         //the result is attained by passing these bytes through the S selection functions
  85.         $temp = $left;
  86.         $left = $right;
  87.         $right = $temp ^ ($spfunction2[($right1 >> 24 & $masks[24]) & 0x3f] | $spfunction4[($right1 >> 16 & $masks[16]) & 0x3f]
  88.               | $spfunction6[($right1 >>  8 & $masks[8]) & 0x3f] | $spfunction8[$right1 & 0x3f]
  89.               | $spfunction1[($right2 >> 24 & $masks[24]) & 0x3f] | $spfunction3[($right2 >> 16 & $masks[16]) & 0x3f]
  90.               | $spfunction5[($right2 >>  8 & $masks[8]) & 0x3f] | $spfunction7[$right2 & 0x3f]);
  91.       }
  92.       $temp = $left; $left = $right; $right = $temp; //unreverse left and right
  93.     } //for either 1 or 3 iterations
  94.  
  95.     //move then each one bit to the right
  96.     $left = (($left >> 1 & $masks[1]) | ($left << 31));
  97.     $right = (($right >> 1 & $masks[1]) | ($right << 31));
  98.  
  99.     //now perform IP-1, which is IP in the opposite direction
  100.     $temp = (($left >> 1 & $masks[1]) ^ $right) & 0x55555555; $right ^= $temp; $left ^= ($temp << 1);
  101.     $temp = (($right >> 8 & $masks[8]) ^ $left) & 0x00ff00ff; $left ^= $temp; $right ^= ($temp << 8);
  102.     $temp = (($right >> 2 & $masks[2]) ^ $left) & 0x33333333; $left ^= $temp; $right ^= ($temp << 2);
  103.     $temp = (($left >> 16 & $masks[16]) ^ $right) & 0x0000ffff; $right ^= $temp; $left ^= ($temp << 16);
  104.     $temp = (($left >> 4 & $masks[4]) ^ $right) & 0x0f0f0f0f; $right ^= $temp; $left ^= ($temp << 4);
  105.  
  106.     //for Cipher Block Chaining mode, xor the message with the previous result
  107.     if ($mode == 1){if($encrypt){$cbcleft = $left; $cbcright = $right;}else{$left ^= $cbcleft2; $right ^= $cbcright2;}}
  108.     $tempresult .= (chr($left>>24 & $masks[24]) . chr(($left>>16 & $masks[16]) & 0xff) . chr(($left>>8 & $masks[8]) & 0xff) . chr($left & 0xff) . chr($right>>24 & $masks[24]) . chr(($right>>16 & $masks[16]) & 0xff) . chr(($right>>8 & $masks[8]) & 0xff) . chr($right & 0xff));
  109.  
  110.     $chunk += 8;
  111.     if ($chunk == 512){$result .= $tempresult; $tempresult = ""; $chunk = 0;}
  112.   } //for every 8 characters, or 64 bits in the message
  113.  
  114.   //return the result as an array
  115.   return ($result . $tempresult);
  116. } //end of des
  117.  
  118. //des_createKeys
  119. //this takes as input a 64 bit key (even though only 56 bits are used)
  120. //as an array of 2 integers, and returns 16 48 bit keys
  121. function des_createKeys($key){
  122.   //declaring this locally speeds things up a bit
  123.   $pc2bytes0  = array (0,0x4,0x20000000,0x20000004,0x10000,0x10004,0x20010000,0x20010004,0x200,0x204,0x20000200,0x20000204,0x10200,0x10204,0x20010200,0x20010204);
  124.   $pc2bytes1  = array (0,0x1,0x100000,0x100001,0x4000000,0x4000001,0x4100000,0x4100001,0x100,0x101,0x100100,0x100101,0x4000100,0x4000101,0x4100100,0x4100101);
  125.   $pc2bytes2  = array (0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808,0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808);
  126.   $pc2bytes3  = array (0,0x200000,0x8000000,0x8200000,0x2000,0x202000,0x8002000,0x8202000,0x20000,0x220000,0x8020000,0x8220000,0x22000,0x222000,0x8022000,0x8222000);
  127.   $pc2bytes4  = array (0,0x40000,0x10,0x40010,0,0x40000,0x10,0x40010,0x1000,0x41000,0x1010,0x41010,0x1000,0x41000,0x1010,0x41010);
  128.   $pc2bytes5  = array (0,0x400,0x20,0x420,0,0x400,0x20,0x420,0x2000000,0x2000400,0x2000020,0x2000420,0x2000000,0x2000400,0x2000020,0x2000420);
  129.   $pc2bytes6  = array (0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002,0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002);
  130.   $pc2bytes7  = array (0,0x10000,0x800,0x10800,0x20000000,0x20010000,0x20000800,0x20010800,0x20000,0x30000,0x20800,0x30800,0x20020000,0x20030000,0x20020800,0x20030800);
  131.   $pc2bytes8  = array (0,0x40000,0,0x40000,0x2,0x40002,0x2,0x40002,0x2000000,0x2040000,0x2000000,0x2040000,0x2000002,0x2040002,0x2000002,0x2040002);
  132.   $pc2bytes9  = array (0,0x10000000,0x8,0x10000008,0,0x10000000,0x8,0x10000008,0x400,0x10000400,0x408,0x10000408,0x400,0x10000400,0x408,0x10000408);
  133.   $pc2bytes10 = array (0,0x20,0,0x20,0x100000,0x100020,0x100000,0x100020,0x2000,0x2020,0x2000,0x2020,0x102000,0x102020,0x102000,0x102020);
  134.   $pc2bytes11 = array (0,0x1000000,0x200,0x1000200,0x200000,0x1200000,0x200200,0x1200200,0x4000000,0x5000000,0x4000200,0x5000200,0x4200000,0x5200000,0x4200200,0x5200200);
  135.   $pc2bytes12 = array (0,0x1000,0x8000000,0x8001000,0x80000,0x81000,0x8080000,0x8081000,0x10,0x1010,0x8000010,0x8001010,0x80010,0x81010,0x8080010,0x8081010);
  136.   $pc2bytes13 = array (0,0x4,0x100,0x104,0,0x4,0x100,0x104,0x1,0x5,0x101,0x105,0x1,0x5,0x101,0x105);
  137.   $masks = array (4294967295,2147483647,1073741823,536870911,268435455,134217727,67108863,33554431,16777215,8388607,4194303,2097151,1048575,524287,262143,131071,65535,32767,16383,8191,4095,2047,1023,511,255,127,63,31,15,7,3,1,0);
  138.  
  139.   //how many iterations (1 for des, 3 for triple des)
  140.   $iterations = ((strlen($key) >= 24) ? 3 : 1);
  141.   //stores the return keys
  142.   $keys = array (); // size = 32 * iterations but you don't specify this in php
  143.   //now define the left shifts which need to be done
  144.   $shifts = array (0, 0, 1, 1, 1, 1, 1, 1, 0, 1, 1, 1, 1, 1, 1, 0);
  145.   //other variables
  146.   $m=0;
  147.   $n=0;
  148.  
  149.   for ($j=0; $j<$iterations; $j++){//either 1 or 3 iterations
  150.     $left = (ord($key{$m++}) << 24) | (ord($key{$m++}) << 16) | (ord($key{$m++}) << 8) | ord($key{$m++});
  151.     $right = (ord($key{$m++}) << 24) | (ord($key{$m++}) << 16) | (ord($key{$m++}) << 8) | ord($key{$m++});
  152.  
  153.     $temp = (($left >> 4 & $masks[4]) ^ $right) & 0x0f0f0f0f; $right ^= $temp; $left ^= ($temp << 4);
  154.     $temp = (($right >> 16 & $masks[16]) ^ $left) & 0x0000ffff; $left ^= $temp; $right ^= ($temp << -16);
  155.     $temp = (($left >> 2 & $masks[2]) ^ $right) & 0x33333333; $right ^= $temp; $left ^= ($temp << 2);
  156.     $temp = (($right >> 16 & $masks[16]) ^ $left) & 0x0000ffff; $left ^= $temp; $right ^= ($temp << -16);
  157.     $temp = (($left >> 1 & $masks[1]) ^ $right) & 0x55555555; $right ^= $temp; $left ^= ($temp << 1);
  158.     $temp = (($right >> 8 & $masks[8]) ^ $left) & 0x00ff00ff; $left ^= $temp; $right ^= ($temp << 8);
  159.     $temp = (($left >> 1 & $masks[1]) ^ $right) & 0x55555555; $right ^= $temp; $left ^= ($temp << 1);
  160.  
  161.     //the right side needs to be shifted and to get the last four bits of the left side
  162.     $temp = ($left << 8) | (($right >> 20 & $masks[20]) & 0x000000f0);
  163.     //left needs to be put upside down
  164.     $left = ($right << 24) | (($right << 8) & 0xff0000) | (($right >> 8 & $masks[8]) & 0xff00) | (($right >> 24 & $masks[24]) & 0xf0);
  165.     $right = $temp;
  166.  
  167.     //now go through and perform these shifts on the left and right keys
  168.     for ($i=0; $i < count($shifts); $i++){
  169.       //shift the keys either one or two bits to the left
  170.       if ($shifts[$i] > 0){
  171.          $left = (($left << 2) | ($left >> 26 & $masks[26]));
  172.          $right = (($right << 2) | ($right >> 26 & $masks[26]));
  173.       } else{
  174.          $left = (($left << 1) | ($left >> 27 & $masks[27]));
  175.          $right = (($right << 1) | ($right >> 27 & $masks[27]));
  176.       }
  177.       $left = $left & -0xf;
  178.       $right = $right & -0xf;
  179.  
  180.       //now apply PC-2, in such a way that E is easier when encrypting or decrypting
  181.       //this conversion will look like PC-2 except only the last 6 bits of each byte are used
  182.       //rather than 48 consecutive bits and the order of lines will be according to
  183.       //how the S selection functions will be applied: S2, S4, S6, S8, S1, S3, S5, S7
  184.       $lefttemp = $pc2bytes0[$left >> 28 & $masks[28]] | $pc2bytes1[($left >> 24 & $masks[24]) & 0xf]
  185.               | $pc2bytes2[($left >> 20 & $masks[20]) & 0xf] | $pc2bytes3[($left >> 16 & $masks[16]) & 0xf]
  186.               | $pc2bytes4[($left >> 12 & $masks[12]) & 0xf] | $pc2bytes5[($left >> 8 & $masks[8]) & 0xf]
  187.               | $pc2bytes6[($left >> 4 & $masks[4]) & 0xf];
  188.       $righttemp = $pc2bytes7[$right >> 28 & $masks[28]] | $pc2bytes8[($right >> 24 & $masks[24]) & 0xf]
  189.                 | $pc2bytes9[($right >> 20 & $masks[20]) & 0xf] | $pc2bytes10[($right >> 16 & $masks[16]) & 0xf]
  190.                 | $pc2bytes11[($right >> 12 & $masks[12]) & 0xf] | $pc2bytes12[($right >> 8 & $masks[8]) & 0xf]
  191.                 | $pc2bytes13[($right >> 4 & $masks[4]) & 0xf];
  192.       $temp = (($righttemp >> 16 & $masks[16]) ^ $lefttemp) & 0x0000ffff;
  193.       $keys[$n++] = $lefttemp ^ $temp; $keys[$n++] = $righttemp ^ ($temp << 16);
  194.     }
  195.   } //for each iterations
  196.   //return the keys we've created
  197.   return $keys;
  198. } //end of des_createKeys
  199.  
  200. ////////////////////////////// TEST //////////////////////////////
  201. function stringToHex($s){
  202.   $r = "0x";
  203.   $hexes = array ("0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f");
  204.   for ($i=0; $i<strlen($s); $i++){$r .= ($hexes[(ord($s{$i}) >> 4)] . $hexes[(ord($s{$i}) & 0xf)]);}
  205.   return $r;
  206. }
  207. echo "<PRE>";
  208. $key = "this is a 24 byte key !!";
  209. $message = "This is a test message";
  210. $ciphertext = des ($key, $message, 1, 0, null);
  211. echo "DES Test Encrypted: " . stringToHex($ciphertext);
  212. $recovered_message = des ($key, $ciphertext, 0, 0, null);
  213. echo "\n";
  214. echo "DES Test Decrypted: " . $recovered_message;
  215. ?>
des.pl
  1. #!/usr/bin/perl
  2. #Perl version
  3. #Paul Tero, July 2001
  4. #http://www.tero.co.uk/des/
  5. #
  6. #Converted from JavaScript to Perl by Chris Drake, July 2002
  7. #
  8. #Optimised for performance with large blocks by Michael Hayworth, November 2001
  9. #http://www.netdealing.com
  10. #
  11. #THIS SOFTWARE IS PROVIDED "AS IS" AND
  12. #ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  13. #IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  14. #ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  15. #FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  16. #DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  17. #OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  18. #HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  19. #LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  20. #OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  21. #SUCH DAMAGE.
  22.  
  23. use strict;
  24.  
  25. #des
  26. #this takes the key, the message, and whether to encrypt or decrypt
  27. sub TripleDES{
  28.   my($key, $message, $encrypt, $mode, $iv)=@_;
  29.  
  30.   # declaring this locally speeds things up a bit
  31.   my @spfunction1 = (0x1010400,0,0x10000,0x1010404,0x1010004,0x10404,0x4,0x10000,0x400,0x1010400,0x1010404,0x400,0x1000404,0x1010004,0x1000000,0x4,0x404,0x1000400,0x1000400,0x10400,0x10400,0x1010000,0x1010000,0x1000404,0x10004,0x1000004,0x1000004,0x10004,0,0x404,0x10404,0x1000000,0x10000,0x1010404,0x4,0x1010000,0x1010400,0x1000000,0x1000000,0x400,0x1010004,0x10000,0x10400,0x1000004,0x400,0x4,0x1000404,0x10404,0x1010404,0x10004,0x1010000,0x1000404,0x1000004,0x404,0x10404,0x1010400,0x404,0x1000400,0x1000400,0,0x10004,0x10400,0,0x1010004);
  32.   my @spfunction2 = (0x80108020,0x80008000,0x8000,0x108020,0x100000,0x20,0x80100020,0x80008020,0x80000020,0x80108020,0x80108000,0x80000000,0x80008000,0x100000,0x20,0x80100020,0x108000,0x100020,0x80008020,0,0x80000000,0x8000,0x108020,0x80100000,0x100020,0x80000020,0,0x108000,0x8020,0x80108000,0x80100000,0x8020,0,0x108020,0x80100020,0x100000,0x80008020,0x80100000,0x80108000,0x8000,0x80100000,0x80008000,0x20,0x80108020,0x108020,0x20,0x8000,0x80000000,0x8020,0x80108000,0x100000,0x80000020,0x100020,0x80008020,0x80000020,0x100020,0x108000,0,0x80008000,0x8020,0x80000000,0x80100020,0x80108020,0x108000);
  33.   my @spfunction3 = (0x208,0x8020200,0,0x8020008,0x8000200,0,0x20208,0x8000200,0x20008,0x8000008,0x8000008,0x20000,0x8020208,0x20008,0x8020000,0x208,0x8000000,0x8,0x8020200,0x200,0x20200,0x8020000,0x8020008,0x20208,0x8000208,0x20200,0x20000,0x8000208,0x8,0x8020208,0x200,0x8000000,0x8020200,0x8000000,0x20008,0x208,0x20000,0x8020200,0x8000200,0,0x200,0x20008,0x8020208,0x8000200,0x8000008,0x200,0,0x8020008,0x8000208,0x20000,0x8000000,0x8020208,0x8,0x20208,0x20200,0x8000008,0x8020000,0x8000208,0x208,0x8020000,0x20208,0x8,0x8020008,0x20200);
  34.   my @spfunction4 = (0x802001,0x2081,0x2081,0x80,0x802080,0x800081,0x800001,0x2001,0,0x802000,0x802000,0x802081,0x81,0,0x800080,0x800001,0x1,0x2000,0x800000,0x802001,0x80,0x800000,0x2001,0x2080,0x800081,0x1,0x2080,0x800080,0x2000,0x802080,0x802081,0x81,0x800080,0x800001,0x802000,0x802081,0x81,0,0,0x802000,0x2080,0x800080,0x800081,0x1,0x802001,0x2081,0x2081,0x80,0x802081,0x81,0x1,0x2000,0x800001,0x2001,0x802080,0x800081,0x2001,0x2080,0x800000,0x802001,0x80,0x800000,0x2000,0x802080);
  35.   my @spfunction5 = (0x100,0x2080100,0x2080000,0x42000100,0x80000,0x100,0x40000000,0x2080000,0x40080100,0x80000,0x2000100,0x40080100,0x42000100,0x42080000,0x80100,0x40000000,0x2000000,0x40080000,0x40080000,0,0x40000100,0x42080100,0x42080100,0x2000100,0x42080000,0x40000100,0,0x42000000,0x2080100,0x2000000,0x42000000,0x80100,0x80000,0x42000100,0x100,0x2000000,0x40000000,0x2080000,0x42000100,0x40080100,0x2000100,0x40000000,0x42080000,0x2080100,0x40080100,0x100,0x2000000,0x42080000,0x42080100,0x80100,0x42000000,0x42080100,0x2080000,0,0x40080000,0x42000000,0x80100,0x2000100,0x40000100,0x80000,0,0x40080000,0x2080100,0x40000100);
  36.   my @spfunction6 = (0x20000010,0x20400000,0x4000,0x20404010,0x20400000,0x10,0x20404010,0x400000,0x20004000,0x404010,0x400000,0x20000010,0x400010,0x20004000,0x20000000,0x4010,0,0x400010,0x20004010,0x4000,0x404000,0x20004010,0x10,0x20400010,0x20400010,0,0x404010,0x20404000,0x4010,0x404000,0x20404000,0x20000000,0x20004000,0x10,0x20400010,0x404000,0x20404010,0x400000,0x4010,0x20000010,0x400000,0x20004000,0x20000000,0x4010,0x20000010,0x20404010,0x404000,0x20400000,0x404010,0x20404000,0,0x20400010,0x10,0x4000,0x20400000,0x404010,0x4000,0x400010,0x20004010,0,0x20404000,0x20000000,0x400010,0x20004010);
  37.   my @spfunction7 = (0x200000,0x4200002,0x4000802,0,0x800,0x4000802,0x200802,0x4200800,0x4200802,0x200000,0,0x4000002,0x2,0x4000000,0x4200002,0x802,0x4000800,0x200802,0x200002,0x4000800,0x4000002,0x4200000,0x4200800,0x200002,0x4200000,0x800,0x802,0x4200802,0x200800,0x2,0x4000000,0x200800,0x4000000,0x200800,0x200000,0x4000802,0x4000802,0x4200002,0x4200002,0x2,0x200002,0x4000000,0x4000800,0x200000,0x4200800,0x802,0x200802,0x4200800,0x802,0x4000002,0x4200802,0x4200000,0x200800,0,0x2,0x4200802,0,0x200802,0x4200000,0x800,0x4000002,0x4000800,0x800,0x200002);
  38.   my @spfunction8 = (0x10001040,0x1000,0x40000,0x10041040,0x10000000,0x10001040,0x40,0x10000000,0x40040,0x10040000,0x10041040,0x41000,0x10041000,0x41040,0x1000,0x40,0x10040000,0x10000040,0x10001000,0x1040,0x41000,0x40040,0x10040040,0x10041000,0x1040,0,0,0x10040040,0x10000040,0x10001000,0x41040,0x40000,0x41040,0x40000,0x10041000,0x1000,0x40,0x10040040,0x1000,0x41040,0x10001000,0x40,0x10000040,0x10040000,0x10040040,0x10000000,0x40000,0x10001040,0,0x10041040,0x40040,0x10000040,0x10040000,0x10001000,0x10001040,0,0x10041040,0x41000,0x41000,0x1040,0x1040,0x40040,0x10000000,0x10041000);
  39.  
  40.   #create the 16 or 48 subkeys we will need
  41.   my @keys = &des_createKeys($key);
  42.   my ($m, $i, $j, $temp, $temp2, $right1, $right2, $left, $right, @looping)=(0);
  43.   my ($cbcleft, $cbcleft2, $cbcright, $cbcright2);
  44.   my ($endloop, $loopinc, $result, $tempresult);
  45.   my $len = length($message);
  46.   my $chunk = 0;
  47.   #set up the loops for single and triple des
  48.   my $iterations = $#keys == 32 ? 3 : 9; #single or triple des
  49.   if ($iterations == 3){@looping = $encrypt ? (0, 32, 2) : (30, -2, -2);}
  50.   else {@looping = $encrypt ? (0, 32, 2, 62, 30, -2, 64, 96, 2) : (94, 62, -2, 32, 64, 2, 30, -2, -2);}
  51.  
  52.   $message .= "\0\0\0\0\0\0\0\0"; #pad the message out with null bytes
  53.   #store the result here
  54.   $result = "";
  55.   $tempresult = "";
  56.  
  57.   if ($mode == 1){#CBC mode
  58.     $cbcleft = (unpack("C",substr($iv,$m++,1)) << 24) | (unpack("C",substr($iv,$m++,1)) << 16) | (unpack("C",substr($iv,$m++,1)) << 8) | unpack("C",substr($iv,$m++,1));
  59.     $cbcright = (unpack("C",substr($iv,$m++,1)) << 24) | (unpack("C",substr($iv,$m++,1)) << 16) | (unpack("C",substr($iv,$m++,1)) << 8) | unpack("C",substr($iv,$m++,1));
  60.     $m=0;
  61.   }
  62.  
  63.   #loop through each 64 bit chunk of the message
  64.   while ($m < $len){
  65.     $left = (unpack("C",substr($message,$m++,1)) << 24) | (unpack("C",substr($message,$m++,1)) << 16) | (unpack("C",substr($message,$m++,1)) << 8) | unpack("C",substr($message,$m++,1));
  66.     $right = (unpack("C",substr($message,$m++,1)) << 24) | (unpack("C",substr($message,$m++,1)) << 16) | (unpack("C",substr($message,$m++,1)) << 8) | unpack("C",substr($message,$m++,1));
  67.  
  68.     #for Cipher Block Chaining mode, xor the message with the previous result
  69.     if ($mode == 1){if($encrypt){$left ^= $cbcleft; $right ^= $cbcright;}else{$cbcleft2 = $cbcleft; $cbcright2 = $cbcright; $cbcleft = $left; $cbcright = $right;}}
  70.  
  71.     #first each 64 but chunk of the message must be permuted according to IP
  72.     $temp = (($left >> 4) ^ $right) & 0x0f0f0f0f; $right ^= $temp; $left ^= ($temp << 4);
  73.     $temp = (($left >> 16) ^ $right) & 0x0000ffff; $right ^= $temp; $left ^= ($temp << 16);
  74.     $temp = (($right >> 2) ^ $left) & 0x33333333; $left ^= $temp; $right ^= ($temp << 2);
  75.     $temp = (($right >> 8) ^ $left) & 0x00ff00ff; $left ^= $temp; $right ^= ($temp << 8);
  76.     $temp = (($left >> 1) ^ $right) & 0x55555555; $right ^= $temp; $left ^= ($temp << 1);
  77.  
  78.     $left = (($left << 1) | ($left >> 31));
  79.     $right = (($right << 1) | ($right >> 31));
  80.  
  81.     #do this either 1 or 3 times for each chunk of the message
  82.     for ($j=0; $j<$iterations; $j+=3){
  83.       $endloop =$looping[$j+1]; $loopinc =$looping[$j+2]; #now go through and perform the encryption or decryption 
  84.       for ($i=$looping[$j]; $i!=$endloop; $i+=$loopinc){#for efficiency
  85.         $right1 =$right ^ $keys[$i];
  86.         $right2 =(($right >> 4) | ($right << 28)) ^ $keys[$i+1];
  87.         #the result is attained by passing these bytes through the S selection functions
  88.         $temp = $left;
  89.         $left = $right;
  90.         $right = $temp ^ ($spfunction2[($right1 >> 24) & 0x3f] | $spfunction4[($right1 >> 16) & 0x3f]
  91.               | $spfunction6[($right1 >>  8) & 0x3f] | $spfunction8[$right1 & 0x3f]
  92.               | $spfunction1[($right2 >> 24) & 0x3f] | $spfunction3[($right2 >> 16) & 0x3f]
  93.               | $spfunction5[($right2 >>  8) & 0x3f] | $spfunction7[$right2 & 0x3f]);
  94.       }
  95.       $temp = $left; $left = $right; $right = $temp; #unreverse left and right
  96.     } #for either 1 or 3 iterations
  97.  
  98.     #move then each one bit to the right
  99.     $left = (($left >> 1) | ($left << 31));
  100.     $right = (($right >> 1) | ($right << 31));
  101.  
  102.     #now perform IP-1, which is IP in the opposite direction
  103.     $temp = (($left >> 1) ^ $right) & 0x55555555; $right ^= $temp; $left ^= ($temp << 1);
  104.     $temp = (($right >> 8) ^ $left) & 0x00ff00ff; $left ^= $temp; $right ^= ($temp << 8);
  105.     $temp = (($right >> 2) ^ $left) & 0x33333333; $left ^= $temp; $right ^= ($temp << 2);
  106.     $temp = (($left >> 16) ^ $right) & 0x0000ffff; $right ^= $temp; $left ^= ($temp << 16);
  107.     $temp = (($left >> 4) ^ $right) & 0x0f0f0f0f; $right ^= $temp; $left ^= ($temp << 4);
  108.  
  109.     #for Cipher Block Chaining mode, xor the message with the previous result
  110.     if ($mode == 1){if($encrypt){$cbcleft = $left; $cbcright = $right;}else{$left ^= $cbcleft2; $right ^= $cbcright2;}}
  111.     $tempresult .= pack("C*", (($left>>24), (($left>>16) & 0xff), (($left>>8) & 0xff), ($left & 0xff), ($right>>24), (($right>>16) & 0xff), (($right>>8) & 0xff), ($right & 0xff)));
  112.  
  113.     $chunk += 8;
  114.     if ($chunk == 512){$result .= $tempresult; $tempresult = ""; $chunk = 0;}
  115.   } #for every 8 characters, or 64 bits in the message
  116.  
  117.   #return the result as an array
  118.   return $result . $tempresult;
  119. } #end of des
  120.  
  121.  
  122.  
  123. #des_createKeys
  124. #this takes as input a 64 bit key (even though only 56 bits are used)
  125. #as an array of 2 integers, and returns 16 48 bit keys
  126. sub des_createKeys{
  127.   use integer;
  128.   my($key)=@_;
  129.   #declaring this locally speeds things up a bit
  130.   my @pc2bytes0  = (0,0x4,0x20000000,0x20000004,0x10000,0x10004,0x20010000,0x20010004,0x200,0x204,0x20000200,0x20000204,0x10200,0x10204,0x20010200,0x20010204);
  131.   my @pc2bytes1  = (0,0x1,0x100000,0x100001,0x4000000,0x4000001,0x4100000,0x4100001,0x100,0x101,0x100100,0x100101,0x4000100,0x4000101,0x4100100,0x4100101);
  132.   my @pc2bytes2  = (0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808,0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808);
  133.   my @pc2bytes3  = (0,0x200000,0x8000000,0x8200000,0x2000,0x202000,0x8002000,0x8202000,0x20000,0x220000,0x8020000,0x8220000,0x22000,0x222000,0x8022000,0x8222000);
  134.   my @pc2bytes4  = (0,0x40000,0x10,0x40010,0,0x40000,0x10,0x40010,0x1000,0x41000,0x1010,0x41010,0x1000,0x41000,0x1010,0x41010);
  135.   my @pc2bytes5  = (0,0x400,0x20,0x420,0,0x400,0x20,0x420,0x2000000,0x2000400,0x2000020,0x2000420,0x2000000,0x2000400,0x2000020,0x2000420);
  136.   my @pc2bytes6  = (0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002,0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002);
  137.   my @pc2bytes7  = (0,0x10000,0x800,0x10800,0x20000000,0x20010000,0x20000800,0x20010800,0x20000,0x30000,0x20800,0x30800,0x20020000,0x20030000,0x20020800,0x20030800);
  138.   my @pc2bytes8  = (0,0x40000,0,0x40000,0x2,0x40002,0x2,0x40002,0x2000000,0x2040000,0x2000000,0x2040000,0x2000002,0x2040002,0x2000002,0x2040002);
  139.   my @pc2bytes9  = (0,0x10000000,0x8,0x10000008,0,0x10000000,0x8,0x10000008,0x400,0x10000400,0x408,0x10000408,0x400,0x10000400,0x408,0x10000408);
  140.   my @pc2bytes10 = (0,0x20,0,0x20,0x100000,0x100020,0x100000,0x100020,0x2000,0x2020,0x2000,0x2020,0x102000,0x102020,0x102000,0x102020);
  141.   my @pc2bytes11 = (0,0x1000000,0x200,0x1000200,0x200000,0x1200000,0x200200,0x1200200,0x4000000,0x5000000,0x4000200,0x5000200,0x4200000,0x5200000,0x4200200,0x5200200);
  142.   my @pc2bytes12 = (0,0x1000,0x8000000,0x8001000,0x80000,0x81000,0x8080000,0x8081000,0x10,0x1010,0x8000010,0x8001010,0x80010,0x81010,0x8080010,0x8081010);
  143.   my @pc2bytes13 = (0,0x4,0x100,0x104,0,0x4,0x100,0x104,0x1,0x5,0x101,0x105,0x1,0x5,0x101,0x105);
  144.  
  145.   #how many iterations (1 for des, 3 for triple des)
  146.   my $iterations = length($key) >= 24 ? 3 : 1;
  147.   #stores the return keys
  148.   my @keys; $#keys=(32 * $iterations);
  149.   #now define the left shifts which need to be done
  150.   my @shifts = (0, 0, 1, 1, 1, 1, 1, 1, 0, 1, 1, 1, 1, 1, 1, 0);
  151.   #other variables
  152.   my ($m, $n, $lefttemp, $righttemp, $left, $right, $temp)=(0,0);
  153.  
  154.   for (my$j=0; $j<$iterations; $j++){#either 1 or 3 iterations
  155.     $left =(unpack("C",substr($key,$m++,1)) << 24) | (unpack("C",substr($key,$m++,1)) << 16) | (unpack("C",substr($key,$m++,1)) << 8) | unpack("C",substr($key,$m++,1));
  156.     $right = (unpack("C",substr($key,$m++,1)) << 24) | (unpack("C",substr($key,$m++,1)) << 16) | (unpack("C",substr($key,$m++,1)) << 8) | unpack("C",substr($key,$m++,1));
  157.  
  158.     $temp = (($left >> 4) ^  $right) & 0x0f0f0f0f; $right ^= $temp; $left  ^= ($temp << 4);
  159.     $temp = (($right >>  16)^ $left) & 0x0000ffff; $left ^=  $temp; $right ^= ($temp <<  16);
  160.     $temp = (($left >> 2) ^  $right) & 0x33333333; $right ^= $temp; $left  ^= ($temp << 2);
  161.     $temp = (($right >>  16)^ $left) & 0x0000ffff; $left ^=  $temp; $right ^= ($temp <<  16);
  162.     $temp = (($left >> 1) ^  $right) & 0x55555555; $right ^= $temp; $left  ^= ($temp << 1);
  163.     $temp = (($right >> 8) ^  $left) & 0x00ff00ff; $left ^=  $temp; $right ^= ($temp << 8);
  164.     $temp = (($left >> 1) ^  $right) & 0x55555555; $right ^= $temp; $left  ^= ($temp << 1);
  165.  
  166.     #the right side needs to be shifted and to get the last four bits of the left side
  167.     $temp = ($left << 8) | (($right >> 20) & 0x000000f0);
  168.     #left needs to be put upside down
  169.     $left = ($right << 24) | (($right << 8) & 0xff0000) | (($right >> 8) & 0xff00) | (($right >> 24) & 0xf0);
  170.     $right = $temp;
  171.  
  172.     #now go through and perform these shifts on the left and right keys
  173.     for (my$i=0; $i <= $#shifts; $i++){
  174.       #shift the keys either one or two bits to the left
  175.       if ($shifts[$i]){
  176.         no integer;
  177.         $left = ($left << 2) | ($left >> 26);
  178.         $right = ($right << 2) | ($right >> 26);
  179.         use integer;
  180.         $left<<=0;$right<<=0;
  181.       } else{
  182.         no integer;
  183.         $left = ($left << 1) | ($left >> 27);
  184.         $right = ($right << 1) | ($right >> 27);
  185.         use integer;
  186.         $left<<=0;$right<<=0;
  187.       }
  188.       $left &= 0xfffffff0; $right &= 0xfffffff0;
  189.  
  190.       #now apply PC-2, in such a way that E is easier when encrypting or decrypting
  191.       #this conversion will look like PC-2 except only the last 6 bits of each byte are used
  192.       #rather than 48 consecutive bits and the order of lines will be according to
  193.       #how the S selection functions will be applied: S2, S4, S6, S8, S1, S3, S5, S7
  194.       $lefttemp = $pc2bytes0[$left >> 28] | $pc2bytes1[($left >> 24) & 0xf]
  195.               | $pc2bytes2[($left >> 20) & 0xf] | $pc2bytes3[($left >> 16) & 0xf]
  196.               | $pc2bytes4[($left >> 12) & 0xf] | $pc2bytes5[($left >> 8) & 0xf]
  197.               | $pc2bytes6[($left >> 4) & 0xf];
  198.       $righttemp = $pc2bytes7[$right >> 28] | $pc2bytes8[($right >> 24) & 0xf]
  199.                 | $pc2bytes9[($right >> 20) & 0xf] | $pc2bytes10[($right >> 16) & 0xf]
  200.                 | $pc2bytes11[($right >> 12) & 0xf] | $pc2bytes12[($right >> 8) & 0xf]
  201.                 | $pc2bytes13[($right >> 4) & 0xf];
  202.       $temp = (($righttemp >> 16) ^ $lefttemp) & 0x0000ffff;
  203.       $keys[$n++] = $lefttemp ^ $temp; $keys[$n++] = $righttemp ^ ($temp << 16);
  204.  
  205.     }
  206.   } #for each iterations
  207.   #return the keys we've created
  208.   return @keys;
  209. } #end of des_createKeys
  210.  
  211.  
  212.  
  213. #//////////////////////////// TEST //////////////////////////////
  214. #printHexArray
  215. sub printHex{
  216.   my($s)=@_;
  217.   my $r = "0x";
  218.   my @hexes=("0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f");
  219.   for (my$i=0; $i<length($s); $i++){$r.=$hexes[unpack("C",substr($s,$i,1)) >> 4] . $hexes[unpack("C",substr($s,$i,1)) & 0xf];}
  220.   return $r;
  221. }
  222.  
  223.  
  224.  
  225. print "3DES in perl\n";
  226.  
  227. my $K="this is a 24 byte key !!";
  228. my $msg="This is a test message";
  229. my $ciphertext=&TripleDES($K,$msg,1,0);
  230. print "DES Test: " . &printHex($ciphertext) . "\n";
  231. my $plaintext=&TripleDES($K,$ciphertext,0,0);
  232. print "DES Test: " . $plaintext . "\n";
  233.  
  234. exit(0);
posted @ 2012-01-12 10:17  暗痛  阅读(659)  评论(0)  编辑  收藏  举报