CRYPTOPP 5.6.3 RC6 checkin

1 files changed, 338 insertions, 340 deletions

diff --git a/ttmac.cpp b/ttmac.cpp
index 5df33d46..6b4e8bfe 100644
--- a/ttmac.cpp
+++ b/ttmac.cpp
@@ -1,340 +1,338 @@
-// ttmac.cpp - written and placed in the public domain by Kevin Springle
-
-#include "pch.h"
-#include "ttmac.h"
-#include "misc.h"
-
-NAMESPACE_BEGIN(CryptoPP)
-
-void TTMAC_Base::UncheckedSetKey(const byte *userKey, unsigned int keylength, const NameValuePairs &)
-{
-	AssertValidKeyLength(keylength);
-
-	memcpy(m_key, userKey, KEYLENGTH);
-	CorrectEndianess(m_key, m_key, KEYLENGTH);
-
-	Init();
-}
-
-void TTMAC_Base::Init()
-{
-	m_digest[0] = m_digest[5] = m_key[0];
-	m_digest[1] = m_digest[6] = m_key[1];
-	m_digest[2] = m_digest[7] = m_key[2];
-	m_digest[3] = m_digest[8] = m_key[3];
-	m_digest[4] = m_digest[9] = m_key[4];
-}
-
-void TTMAC_Base::TruncatedFinal(byte *hash, size_t size)
-{
-	PadLastBlock(BlockSize() - 2*sizeof(HashWordType));
-	CorrectEndianess(m_data, m_data, BlockSize() - 2*sizeof(HashWordType));
-
-	m_data[m_data.size()-2] = GetBitCountLo();
-	m_data[m_data.size()-1] = GetBitCountHi();
-
-	Transform(m_digest, m_data, true);
-
-	word32 t2 = m_digest[2];
-	word32 t3 = m_digest[3];
-
-	// Signed/unsigned warning and GCC 4.8 issue under Debian/i386?
-	if (size != static_cast<size_t>(DIGESTSIZE))
-	{
-		switch (size)
-		{
-			case 16:
-				m_digest[3] += m_digest[1] + m_digest[4];
-
-			case 12:
-				m_digest[2] += m_digest[0] + t3;
-
-			case 8:
-				m_digest[0] += m_digest[1] + t3;
-				m_digest[1] += m_digest[4] + t2;
-				break;
-
-			case 4:
-				m_digest[0] +=
-						m_digest[1] +
-						m_digest[2] +
-						m_digest[3] +
-						m_digest[4];
-				break;
-
-			case 0:
-				// Used by HashTransformation::Restart()
-				break;
-
-			default:
-				throw InvalidArgument("TTMAC_Base: can't truncate a Two-Track-MAC 20 byte digest to " + IntToString(size) + " bytes");
-				break;
-		}
-	}
-
-	CorrectEndianess(m_digest, m_digest, size);
-	memcpy(hash, m_digest, size);
-
-	Restart();		// reinit for next use
-}
-
-// RIPEMD-160 definitions used by Two-Track-MAC
-
-#define F(x, y, z)	(x ^ y ^ z)
-#define G(x, y, z)	(z ^ (x & (y^z)))
-#define H(x, y, z)	(z ^ (x | ~y))
-#define I(x, y, z)	(y ^ (z & (x^y)))
-#define J(x, y, z)	(x ^ (y | ~z))
-
-#define k0 0
-#define k1 0x5a827999UL
-#define k2 0x6ed9eba1UL
-#define k3 0x8f1bbcdcUL
-#define k4 0xa953fd4eUL
-#define k5 0x50a28be6UL
-#define k6 0x5c4dd124UL
-#define k7 0x6d703ef3UL
-#define k8 0x7a6d76e9UL
-#define k9 0
-
-void TTMAC_Base::Transform(word32 *digest, const word32 *X, bool last)
-{
-#define Subround(f, a, b, c, d, e, x, s, k)		\
-	a += f(b, c, d) + x + k;\
-	a = rotlFixed((word32)a, s) + e;\
-	c = rotlFixed((word32)c, 10U)
-
-	word32 a1, b1, c1, d1, e1, a2, b2, c2, d2, e2;
-	word32 *trackA, *trackB;
-
-	if (!last)
-	{
-		trackA = digest;
-		trackB = digest+5;
-	}
-	else
-	{
-		trackB = digest;
-		trackA = digest+5;
-	}
-	a1 = trackA[0];
-	b1 = trackA[1];
-	c1 = trackA[2];
-	d1 = trackA[3];
-	e1 = trackA[4];
-	a2 = trackB[0];
-	b2 = trackB[1];
-	c2 = trackB[2];
-	d2 = trackB[3];
-	e2 = trackB[4];
-
-	Subround(F, a1, b1, c1, d1, e1, X[ 0], 11, k0);
-	Subround(F, e1, a1, b1, c1, d1, X[ 1], 14, k0);
-	Subround(F, d1, e1, a1, b1, c1, X[ 2], 15, k0);
-	Subround(F, c1, d1, e1, a1, b1, X[ 3], 12, k0);
-	Subround(F, b1, c1, d1, e1, a1, X[ 4],  5, k0);
-	Subround(F, a1, b1, c1, d1, e1, X[ 5],  8, k0);
-	Subround(F, e1, a1, b1, c1, d1, X[ 6],  7, k0);
-	Subround(F, d1, e1, a1, b1, c1, X[ 7],  9, k0);
-	Subround(F, c1, d1, e1, a1, b1, X[ 8], 11, k0);
-	Subround(F, b1, c1, d1, e1, a1, X[ 9], 13, k0);
-	Subround(F, a1, b1, c1, d1, e1, X[10], 14, k0);
-	Subround(F, e1, a1, b1, c1, d1, X[11], 15, k0);
-	Subround(F, d1, e1, a1, b1, c1, X[12],  6, k0);
-	Subround(F, c1, d1, e1, a1, b1, X[13],  7, k0);
-	Subround(F, b1, c1, d1, e1, a1, X[14],  9, k0);
-	Subround(F, a1, b1, c1, d1, e1, X[15],  8, k0);
-
-	Subround(G, e1, a1, b1, c1, d1, X[ 7],  7, k1);
-	Subround(G, d1, e1, a1, b1, c1, X[ 4],  6, k1);
-	Subround(G, c1, d1, e1, a1, b1, X[13],  8, k1);
-	Subround(G, b1, c1, d1, e1, a1, X[ 1], 13, k1);
-	Subround(G, a1, b1, c1, d1, e1, X[10], 11, k1);
-	Subround(G, e1, a1, b1, c1, d1, X[ 6],  9, k1);
-	Subround(G, d1, e1, a1, b1, c1, X[15],  7, k1);
-	Subround(G, c1, d1, e1, a1, b1, X[ 3], 15, k1);
-	Subround(G, b1, c1, d1, e1, a1, X[12],  7, k1);
-	Subround(G, a1, b1, c1, d1, e1, X[ 0], 12, k1);
-	Subround(G, e1, a1, b1, c1, d1, X[ 9], 15, k1);
-	Subround(G, d1, e1, a1, b1, c1, X[ 5],  9, k1);
-	Subround(G, c1, d1, e1, a1, b1, X[ 2], 11, k1);
-	Subround(G, b1, c1, d1, e1, a1, X[14],  7, k1);
-	Subround(G, a1, b1, c1, d1, e1, X[11], 13, k1);
-	Subround(G, e1, a1, b1, c1, d1, X[ 8], 12, k1);
-
-	Subround(H, d1, e1, a1, b1, c1, X[ 3], 11, k2);
-	Subround(H, c1, d1, e1, a1, b1, X[10], 13, k2);
-	Subround(H, b1, c1, d1, e1, a1, X[14],  6, k2);
-	Subround(H, a1, b1, c1, d1, e1, X[ 4],  7, k2);
-	Subround(H, e1, a1, b1, c1, d1, X[ 9], 14, k2);
-	Subround(H, d1, e1, a1, b1, c1, X[15],  9, k2);
-	Subround(H, c1, d1, e1, a1, b1, X[ 8], 13, k2);
-	Subround(H, b1, c1, d1, e1, a1, X[ 1], 15, k2);
-	Subround(H, a1, b1, c1, d1, e1, X[ 2], 14, k2);
-	Subround(H, e1, a1, b1, c1, d1, X[ 7],  8, k2);
-	Subround(H, d1, e1, a1, b1, c1, X[ 0], 13, k2);
-	Subround(H, c1, d1, e1, a1, b1, X[ 6],  6, k2);
-	Subround(H, b1, c1, d1, e1, a1, X[13],  5, k2);
-	Subround(H, a1, b1, c1, d1, e1, X[11], 12, k2);
-	Subround(H, e1, a1, b1, c1, d1, X[ 5],  7, k2);
-	Subround(H, d1, e1, a1, b1, c1, X[12],  5, k2);
-
-	Subround(I, c1, d1, e1, a1, b1, X[ 1], 11, k3);
-	Subround(I, b1, c1, d1, e1, a1, X[ 9], 12, k3);
-	Subround(I, a1, b1, c1, d1, e1, X[11], 14, k3);
-	Subround(I, e1, a1, b1, c1, d1, X[10], 15, k3);
-	Subround(I, d1, e1, a1, b1, c1, X[ 0], 14, k3);
-	Subround(I, c1, d1, e1, a1, b1, X[ 8], 15, k3);
-	Subround(I, b1, c1, d1, e1, a1, X[12],  9, k3);
-	Subround(I, a1, b1, c1, d1, e1, X[ 4],  8, k3);
-	Subround(I, e1, a1, b1, c1, d1, X[13],  9, k3);
-	Subround(I, d1, e1, a1, b1, c1, X[ 3], 14, k3);
-	Subround(I, c1, d1, e1, a1, b1, X[ 7],  5, k3);
-	Subround(I, b1, c1, d1, e1, a1, X[15],  6, k3);
-	Subround(I, a1, b1, c1, d1, e1, X[14],  8, k3);
-	Subround(I, e1, a1, b1, c1, d1, X[ 5],  6, k3);
-	Subround(I, d1, e1, a1, b1, c1, X[ 6],  5, k3);
-	Subround(I, c1, d1, e1, a1, b1, X[ 2], 12, k3);
-
-	Subround(J, b1, c1, d1, e1, a1, X[ 4],  9, k4);
-	Subround(J, a1, b1, c1, d1, e1, X[ 0], 15, k4);
-	Subround(J, e1, a1, b1, c1, d1, X[ 5],  5, k4);
-	Subround(J, d1, e1, a1, b1, c1, X[ 9], 11, k4);
-	Subround(J, c1, d1, e1, a1, b1, X[ 7],  6, k4);
-	Subround(J, b1, c1, d1, e1, a1, X[12],  8, k4);
-	Subround(J, a1, b1, c1, d1, e1, X[ 2], 13, k4);
-	Subround(J, e1, a1, b1, c1, d1, X[10], 12, k4);
-	Subround(J, d1, e1, a1, b1, c1, X[14],  5, k4);
-	Subround(J, c1, d1, e1, a1, b1, X[ 1], 12, k4);
-	Subround(J, b1, c1, d1, e1, a1, X[ 3], 13, k4);
-	Subround(J, a1, b1, c1, d1, e1, X[ 8], 14, k4);
-	Subround(J, e1, a1, b1, c1, d1, X[11], 11, k4);
-	Subround(J, d1, e1, a1, b1, c1, X[ 6],  8, k4);
-	Subround(J, c1, d1, e1, a1, b1, X[15],  5, k4);
-	Subround(J, b1, c1, d1, e1, a1, X[13],  6, k4);
-
-	Subround(J, a2, b2, c2, d2, e2, X[ 5],  8, k5);
-	Subround(J, e2, a2, b2, c2, d2, X[14],  9, k5);
-	Subround(J, d2, e2, a2, b2, c2, X[ 7],  9, k5);
-	Subround(J, c2, d2, e2, a2, b2, X[ 0], 11, k5);
-	Subround(J, b2, c2, d2, e2, a2, X[ 9], 13, k5);
-	Subround(J, a2, b2, c2, d2, e2, X[ 2], 15, k5);
-	Subround(J, e2, a2, b2, c2, d2, X[11], 15, k5);
-	Subround(J, d2, e2, a2, b2, c2, X[ 4],  5, k5);
-	Subround(J, c2, d2, e2, a2, b2, X[13],  7, k5);
-	Subround(J, b2, c2, d2, e2, a2, X[ 6],  7, k5);
-	Subround(J, a2, b2, c2, d2, e2, X[15],  8, k5);
-	Subround(J, e2, a2, b2, c2, d2, X[ 8], 11, k5);
-	Subround(J, d2, e2, a2, b2, c2, X[ 1], 14, k5);
-	Subround(J, c2, d2, e2, a2, b2, X[10], 14, k5);
-	Subround(J, b2, c2, d2, e2, a2, X[ 3], 12, k5);
-	Subround(J, a2, b2, c2, d2, e2, X[12],  6, k5);
-
-	Subround(I, e2, a2, b2, c2, d2, X[ 6],  9, k6);
-	Subround(I, d2, e2, a2, b2, c2, X[11], 13, k6);
-	Subround(I, c2, d2, e2, a2, b2, X[ 3], 15, k6);
-	Subround(I, b2, c2, d2, e2, a2, X[ 7],  7, k6);
-	Subround(I, a2, b2, c2, d2, e2, X[ 0], 12, k6);
-	Subround(I, e2, a2, b2, c2, d2, X[13],  8, k6);
-	Subround(I, d2, e2, a2, b2, c2, X[ 5],  9, k6);
-	Subround(I, c2, d2, e2, a2, b2, X[10], 11, k6);
-	Subround(I, b2, c2, d2, e2, a2, X[14],  7, k6);
-	Subround(I, a2, b2, c2, d2, e2, X[15],  7, k6);
-	Subround(I, e2, a2, b2, c2, d2, X[ 8], 12, k6);
-	Subround(I, d2, e2, a2, b2, c2, X[12],  7, k6);
-	Subround(I, c2, d2, e2, a2, b2, X[ 4],  6, k6);
-	Subround(I, b2, c2, d2, e2, a2, X[ 9], 15, k6);
-	Subround(I, a2, b2, c2, d2, e2, X[ 1], 13, k6);
-	Subround(I, e2, a2, b2, c2, d2, X[ 2], 11, k6);
-
-	Subround(H, d2, e2, a2, b2, c2, X[15],  9, k7);
-	Subround(H, c2, d2, e2, a2, b2, X[ 5],  7, k7);
-	Subround(H, b2, c2, d2, e2, a2, X[ 1], 15, k7);
-	Subround(H, a2, b2, c2, d2, e2, X[ 3], 11, k7);
-	Subround(H, e2, a2, b2, c2, d2, X[ 7],  8, k7);
-	Subround(H, d2, e2, a2, b2, c2, X[14],  6, k7);
-	Subround(H, c2, d2, e2, a2, b2, X[ 6],  6, k7);
-	Subround(H, b2, c2, d2, e2, a2, X[ 9], 14, k7);
-	Subround(H, a2, b2, c2, d2, e2, X[11], 12, k7);
-	Subround(H, e2, a2, b2, c2, d2, X[ 8], 13, k7);
-	Subround(H, d2, e2, a2, b2, c2, X[12],  5, k7);
-	Subround(H, c2, d2, e2, a2, b2, X[ 2], 14, k7);
-	Subround(H, b2, c2, d2, e2, a2, X[10], 13, k7);
-	Subround(H, a2, b2, c2, d2, e2, X[ 0], 13, k7);
-	Subround(H, e2, a2, b2, c2, d2, X[ 4],  7, k7);
-	Subround(H, d2, e2, a2, b2, c2, X[13],  5, k7);
-
-	Subround(G, c2, d2, e2, a2, b2, X[ 8], 15, k8);
-	Subround(G, b2, c2, d2, e2, a2, X[ 6],  5, k8);
-	Subround(G, a2, b2, c2, d2, e2, X[ 4],  8, k8);
-	Subround(G, e2, a2, b2, c2, d2, X[ 1], 11, k8);
-	Subround(G, d2, e2, a2, b2, c2, X[ 3], 14, k8);
-	Subround(G, c2, d2, e2, a2, b2, X[11], 14, k8);
-	Subround(G, b2, c2, d2, e2, a2, X[15],  6, k8);
-	Subround(G, a2, b2, c2, d2, e2, X[ 0], 14, k8);
-	Subround(G, e2, a2, b2, c2, d2, X[ 5],  6, k8);
-	Subround(G, d2, e2, a2, b2, c2, X[12],  9, k8);
-	Subround(G, c2, d2, e2, a2, b2, X[ 2], 12, k8);
-	Subround(G, b2, c2, d2, e2, a2, X[13],  9, k8);
-	Subround(G, a2, b2, c2, d2, e2, X[ 9], 12, k8);
-	Subround(G, e2, a2, b2, c2, d2, X[ 7],  5, k8);
-	Subround(G, d2, e2, a2, b2, c2, X[10], 15, k8);
-	Subround(G, c2, d2, e2, a2, b2, X[14],  8, k8);
-
-	Subround(F, b2, c2, d2, e2, a2, X[12],  8, k9);
-	Subround(F, a2, b2, c2, d2, e2, X[15],  5, k9);
-	Subround(F, e2, a2, b2, c2, d2, X[10], 12, k9);
-	Subround(F, d2, e2, a2, b2, c2, X[ 4],  9, k9);
-	Subround(F, c2, d2, e2, a2, b2, X[ 1], 12, k9);
-	Subround(F, b2, c2, d2, e2, a2, X[ 5],  5, k9);
-	Subround(F, a2, b2, c2, d2, e2, X[ 8], 14, k9);
-	Subround(F, e2, a2, b2, c2, d2, X[ 7],  6, k9);
-	Subround(F, d2, e2, a2, b2, c2, X[ 6],  8, k9);
-	Subround(F, c2, d2, e2, a2, b2, X[ 2], 13, k9);
-	Subround(F, b2, c2, d2, e2, a2, X[13],  6, k9);
-	Subround(F, a2, b2, c2, d2, e2, X[14],  5, k9);
-	Subround(F, e2, a2, b2, c2, d2, X[ 0], 15, k9);
-	Subround(F, d2, e2, a2, b2, c2, X[ 3], 13, k9);
-	Subround(F, c2, d2, e2, a2, b2, X[ 9], 11, k9);
-	Subround(F, b2, c2, d2, e2, a2, X[11], 11, k9);
-
-	a1 -= trackA[0];
-	b1 -= trackA[1];
-	c1 -= trackA[2];
-	d1 -= trackA[3];
-	e1 -= trackA[4];
-	a2 -= trackB[0];
-	b2 -= trackB[1];
-	c2 -= trackB[2];
-	d2 -= trackB[3];
-	e2 -= trackB[4];
-
-	if (!last)
-	{
-		trackA[0] = (b1 + e1) - d2;
-		trackA[1] = c1 - e2;
-		trackA[2] = d1 - a2;
-		trackA[3] = e1 - b2;
-		trackA[4] = a1 - c2;
-		trackB[0] = d1 - e2;
-		trackB[1] = (e1 + c1) - a2;
-		trackB[2] = a1 - b2;
-		trackB[3] = b1 - c2;
-		trackB[4] = c1 - d2;
-	}
-	else
-	{
-		trackB[0] = a2 - a1;
-		trackB[1] = b2 - b1;
-		trackB[2] = c2 - c1;
-		trackB[3] = d2 - d1;
-		trackB[4] = e2 - e1;
-		trackA[0] = 0;
-		trackA[1] = 0;
-		trackA[2] = 0;
-		trackA[3] = 0;
-		trackA[4] = 0;
-	}
-}
-
-NAMESPACE_END
+// ttmac.cpp - written and placed in the public domain by Kevin Springle

+

+#include "pch.h"

+#include "ttmac.h"

+#include "misc.h"

+

+NAMESPACE_BEGIN(CryptoPP)

+

+void TTMAC_Base::UncheckedSetKey(const byte *userKey, unsigned int keylength, const NameValuePairs &)

+{

+	AssertValidKeyLength(keylength);

+

+	memcpy(m_key, userKey, KEYLENGTH);

+	CorrectEndianess(m_key, m_key, KEYLENGTH);

+

+	Init();

+}

+

+void TTMAC_Base::Init()

+{

+	m_digest[0] = m_digest[5] = m_key[0];

+	m_digest[1] = m_digest[6] = m_key[1];

+	m_digest[2] = m_digest[7] = m_key[2];

+	m_digest[3] = m_digest[8] = m_key[3];

+	m_digest[4] = m_digest[9] = m_key[4];

+}

+

+void TTMAC_Base::TruncatedFinal(byte *hash, size_t size)

+{

+	PadLastBlock(BlockSize() - 2*sizeof(HashWordType));

+	CorrectEndianess(m_data, m_data, BlockSize() - 2*sizeof(HashWordType));

+

+	m_data[m_data.size()-2] = GetBitCountLo();

+	m_data[m_data.size()-1] = GetBitCountHi();

+

+	Transform(m_digest, m_data, true);

+

+	word32 t2 = m_digest[2];

+	word32 t3 = m_digest[3];

+	if (size != DIGESTSIZE)

+	{

+		switch (size)

+		{

+			case 16:

+				m_digest[3] += m_digest[1] + m_digest[4];

+

+			case 12:

+				m_digest[2] += m_digest[0] + t3;

+

+			case 8:

+				m_digest[0] += m_digest[1] + t3;

+				m_digest[1] += m_digest[4] + t2;

+				break;

+

+			case 4:

+				m_digest[0] +=

+						m_digest[1] +

+						m_digest[2] +

+						m_digest[3] +

+						m_digest[4];

+				break;

+

+			case 0:

+				// Used by HashTransformation::Restart()

+				break;

+

+			default:

+				throw InvalidArgument("TTMAC_Base: can't truncate a Two-Track-MAC 20 byte digest to " + IntToString(size) + " bytes");

+				break;

+		}

+	}

+

+	CorrectEndianess(m_digest, m_digest, size);

+	memcpy(hash, m_digest, size);

+

+	Restart();		// reinit for next use

+}

+

+// RIPEMD-160 definitions used by Two-Track-MAC

+

+#define F(x, y, z)	(x ^ y ^ z)

+#define G(x, y, z)	(z ^ (x & (y^z)))

+#define H(x, y, z)	(z ^ (x | ~y))

+#define I(x, y, z)	(y ^ (z & (x^y)))

+#define J(x, y, z)	(x ^ (y | ~z))

+

+#define k0 0

+#define k1 0x5a827999UL

+#define k2 0x6ed9eba1UL

+#define k3 0x8f1bbcdcUL

+#define k4 0xa953fd4eUL

+#define k5 0x50a28be6UL

+#define k6 0x5c4dd124UL

+#define k7 0x6d703ef3UL

+#define k8 0x7a6d76e9UL

+#define k9 0

+

+void TTMAC_Base::Transform(word32 *digest, const word32 *X, bool last)

+{

+#define Subround(f, a, b, c, d, e, x, s, k)		\

+	a += f(b, c, d) + x + k;\

+	a = rotlFixed((word32)a, s) + e;\

+	c = rotlFixed((word32)c, 10U)

+

+	word32 a1, b1, c1, d1, e1, a2, b2, c2, d2, e2;

+	word32 *trackA, *trackB;

+

+	if (!last)

+	{

+		trackA = digest;

+		trackB = digest+5;

+	}

+	else

+	{

+		trackB = digest;

+		trackA = digest+5;

+	}

+	a1 = trackA[0];

+	b1 = trackA[1];

+	c1 = trackA[2];

+	d1 = trackA[3];

+	e1 = trackA[4];

+	a2 = trackB[0];

+	b2 = trackB[1];

+	c2 = trackB[2];

+	d2 = trackB[3];

+	e2 = trackB[4];

+

+	Subround(F, a1, b1, c1, d1, e1, X[ 0], 11, k0);

+	Subround(F, e1, a1, b1, c1, d1, X[ 1], 14, k0);

+	Subround(F, d1, e1, a1, b1, c1, X[ 2], 15, k0);

+	Subround(F, c1, d1, e1, a1, b1, X[ 3], 12, k0);

+	Subround(F, b1, c1, d1, e1, a1, X[ 4],  5, k0);

+	Subround(F, a1, b1, c1, d1, e1, X[ 5],  8, k0);

+	Subround(F, e1, a1, b1, c1, d1, X[ 6],  7, k0);

+	Subround(F, d1, e1, a1, b1, c1, X[ 7],  9, k0);

+	Subround(F, c1, d1, e1, a1, b1, X[ 8], 11, k0);

+	Subround(F, b1, c1, d1, e1, a1, X[ 9], 13, k0);

+	Subround(F, a1, b1, c1, d1, e1, X[10], 14, k0);

+	Subround(F, e1, a1, b1, c1, d1, X[11], 15, k0);

+	Subround(F, d1, e1, a1, b1, c1, X[12],  6, k0);

+	Subround(F, c1, d1, e1, a1, b1, X[13],  7, k0);

+	Subround(F, b1, c1, d1, e1, a1, X[14],  9, k0);

+	Subround(F, a1, b1, c1, d1, e1, X[15],  8, k0);

+

+	Subround(G, e1, a1, b1, c1, d1, X[ 7],  7, k1);

+	Subround(G, d1, e1, a1, b1, c1, X[ 4],  6, k1);

+	Subround(G, c1, d1, e1, a1, b1, X[13],  8, k1);

+	Subround(G, b1, c1, d1, e1, a1, X[ 1], 13, k1);

+	Subround(G, a1, b1, c1, d1, e1, X[10], 11, k1);

+	Subround(G, e1, a1, b1, c1, d1, X[ 6],  9, k1);

+	Subround(G, d1, e1, a1, b1, c1, X[15],  7, k1);

+	Subround(G, c1, d1, e1, a1, b1, X[ 3], 15, k1);

+	Subround(G, b1, c1, d1, e1, a1, X[12],  7, k1);

+	Subround(G, a1, b1, c1, d1, e1, X[ 0], 12, k1);

+	Subround(G, e1, a1, b1, c1, d1, X[ 9], 15, k1);

+	Subround(G, d1, e1, a1, b1, c1, X[ 5],  9, k1);

+	Subround(G, c1, d1, e1, a1, b1, X[ 2], 11, k1);

+	Subround(G, b1, c1, d1, e1, a1, X[14],  7, k1);

+	Subround(G, a1, b1, c1, d1, e1, X[11], 13, k1);

+	Subround(G, e1, a1, b1, c1, d1, X[ 8], 12, k1);

+

+	Subround(H, d1, e1, a1, b1, c1, X[ 3], 11, k2);

+	Subround(H, c1, d1, e1, a1, b1, X[10], 13, k2);

+	Subround(H, b1, c1, d1, e1, a1, X[14],  6, k2);

+	Subround(H, a1, b1, c1, d1, e1, X[ 4],  7, k2);

+	Subround(H, e1, a1, b1, c1, d1, X[ 9], 14, k2);

+	Subround(H, d1, e1, a1, b1, c1, X[15],  9, k2);

+	Subround(H, c1, d1, e1, a1, b1, X[ 8], 13, k2);

+	Subround(H, b1, c1, d1, e1, a1, X[ 1], 15, k2);

+	Subround(H, a1, b1, c1, d1, e1, X[ 2], 14, k2);

+	Subround(H, e1, a1, b1, c1, d1, X[ 7],  8, k2);

+	Subround(H, d1, e1, a1, b1, c1, X[ 0], 13, k2);

+	Subround(H, c1, d1, e1, a1, b1, X[ 6],  6, k2);

+	Subround(H, b1, c1, d1, e1, a1, X[13],  5, k2);

+	Subround(H, a1, b1, c1, d1, e1, X[11], 12, k2);

+	Subround(H, e1, a1, b1, c1, d1, X[ 5],  7, k2);

+	Subround(H, d1, e1, a1, b1, c1, X[12],  5, k2);

+

+	Subround(I, c1, d1, e1, a1, b1, X[ 1], 11, k3);

+	Subround(I, b1, c1, d1, e1, a1, X[ 9], 12, k3);

+	Subround(I, a1, b1, c1, d1, e1, X[11], 14, k3);

+	Subround(I, e1, a1, b1, c1, d1, X[10], 15, k3);

+	Subround(I, d1, e1, a1, b1, c1, X[ 0], 14, k3);

+	Subround(I, c1, d1, e1, a1, b1, X[ 8], 15, k3);

+	Subround(I, b1, c1, d1, e1, a1, X[12],  9, k3);

+	Subround(I, a1, b1, c1, d1, e1, X[ 4],  8, k3);

+	Subround(I, e1, a1, b1, c1, d1, X[13],  9, k3);

+	Subround(I, d1, e1, a1, b1, c1, X[ 3], 14, k3);

+	Subround(I, c1, d1, e1, a1, b1, X[ 7],  5, k3);

+	Subround(I, b1, c1, d1, e1, a1, X[15],  6, k3);

+	Subround(I, a1, b1, c1, d1, e1, X[14],  8, k3);

+	Subround(I, e1, a1, b1, c1, d1, X[ 5],  6, k3);

+	Subround(I, d1, e1, a1, b1, c1, X[ 6],  5, k3);

+	Subround(I, c1, d1, e1, a1, b1, X[ 2], 12, k3);

+

+	Subround(J, b1, c1, d1, e1, a1, X[ 4],  9, k4);

+	Subround(J, a1, b1, c1, d1, e1, X[ 0], 15, k4);

+	Subround(J, e1, a1, b1, c1, d1, X[ 5],  5, k4);

+	Subround(J, d1, e1, a1, b1, c1, X[ 9], 11, k4);

+	Subround(J, c1, d1, e1, a1, b1, X[ 7],  6, k4);

+	Subround(J, b1, c1, d1, e1, a1, X[12],  8, k4);

+	Subround(J, a1, b1, c1, d1, e1, X[ 2], 13, k4);

+	Subround(J, e1, a1, b1, c1, d1, X[10], 12, k4);

+	Subround(J, d1, e1, a1, b1, c1, X[14],  5, k4);

+	Subround(J, c1, d1, e1, a1, b1, X[ 1], 12, k4);

+	Subround(J, b1, c1, d1, e1, a1, X[ 3], 13, k4);

+	Subround(J, a1, b1, c1, d1, e1, X[ 8], 14, k4);

+	Subround(J, e1, a1, b1, c1, d1, X[11], 11, k4);

+	Subround(J, d1, e1, a1, b1, c1, X[ 6],  8, k4);

+	Subround(J, c1, d1, e1, a1, b1, X[15],  5, k4);

+	Subround(J, b1, c1, d1, e1, a1, X[13],  6, k4);

+

+	Subround(J, a2, b2, c2, d2, e2, X[ 5],  8, k5);

+	Subround(J, e2, a2, b2, c2, d2, X[14],  9, k5);

+	Subround(J, d2, e2, a2, b2, c2, X[ 7],  9, k5);

+	Subround(J, c2, d2, e2, a2, b2, X[ 0], 11, k5);

+	Subround(J, b2, c2, d2, e2, a2, X[ 9], 13, k5);

+	Subround(J, a2, b2, c2, d2, e2, X[ 2], 15, k5);

+	Subround(J, e2, a2, b2, c2, d2, X[11], 15, k5);

+	Subround(J, d2, e2, a2, b2, c2, X[ 4],  5, k5);

+	Subround(J, c2, d2, e2, a2, b2, X[13],  7, k5);

+	Subround(J, b2, c2, d2, e2, a2, X[ 6],  7, k5);

+	Subround(J, a2, b2, c2, d2, e2, X[15],  8, k5);

+	Subround(J, e2, a2, b2, c2, d2, X[ 8], 11, k5);

+	Subround(J, d2, e2, a2, b2, c2, X[ 1], 14, k5);

+	Subround(J, c2, d2, e2, a2, b2, X[10], 14, k5);

+	Subround(J, b2, c2, d2, e2, a2, X[ 3], 12, k5);

+	Subround(J, a2, b2, c2, d2, e2, X[12],  6, k5);

+

+	Subround(I, e2, a2, b2, c2, d2, X[ 6],  9, k6);

+	Subround(I, d2, e2, a2, b2, c2, X[11], 13, k6);

+	Subround(I, c2, d2, e2, a2, b2, X[ 3], 15, k6);

+	Subround(I, b2, c2, d2, e2, a2, X[ 7],  7, k6);

+	Subround(I, a2, b2, c2, d2, e2, X[ 0], 12, k6);

+	Subround(I, e2, a2, b2, c2, d2, X[13],  8, k6);

+	Subround(I, d2, e2, a2, b2, c2, X[ 5],  9, k6);

+	Subround(I, c2, d2, e2, a2, b2, X[10], 11, k6);

+	Subround(I, b2, c2, d2, e2, a2, X[14],  7, k6);

+	Subround(I, a2, b2, c2, d2, e2, X[15],  7, k6);

+	Subround(I, e2, a2, b2, c2, d2, X[ 8], 12, k6);

+	Subround(I, d2, e2, a2, b2, c2, X[12],  7, k6);

+	Subround(I, c2, d2, e2, a2, b2, X[ 4],  6, k6);

+	Subround(I, b2, c2, d2, e2, a2, X[ 9], 15, k6);

+	Subround(I, a2, b2, c2, d2, e2, X[ 1], 13, k6);

+	Subround(I, e2, a2, b2, c2, d2, X[ 2], 11, k6);

+

+	Subround(H, d2, e2, a2, b2, c2, X[15],  9, k7);

+	Subround(H, c2, d2, e2, a2, b2, X[ 5],  7, k7);

+	Subround(H, b2, c2, d2, e2, a2, X[ 1], 15, k7);

+	Subround(H, a2, b2, c2, d2, e2, X[ 3], 11, k7);

+	Subround(H, e2, a2, b2, c2, d2, X[ 7],  8, k7);

+	Subround(H, d2, e2, a2, b2, c2, X[14],  6, k7);

+	Subround(H, c2, d2, e2, a2, b2, X[ 6],  6, k7);

+	Subround(H, b2, c2, d2, e2, a2, X[ 9], 14, k7);

+	Subround(H, a2, b2, c2, d2, e2, X[11], 12, k7);

+	Subround(H, e2, a2, b2, c2, d2, X[ 8], 13, k7);

+	Subround(H, d2, e2, a2, b2, c2, X[12],  5, k7);

+	Subround(H, c2, d2, e2, a2, b2, X[ 2], 14, k7);

+	Subround(H, b2, c2, d2, e2, a2, X[10], 13, k7);

+	Subround(H, a2, b2, c2, d2, e2, X[ 0], 13, k7);

+	Subround(H, e2, a2, b2, c2, d2, X[ 4],  7, k7);

+	Subround(H, d2, e2, a2, b2, c2, X[13],  5, k7);

+

+	Subround(G, c2, d2, e2, a2, b2, X[ 8], 15, k8);

+	Subround(G, b2, c2, d2, e2, a2, X[ 6],  5, k8);

+	Subround(G, a2, b2, c2, d2, e2, X[ 4],  8, k8);

+	Subround(G, e2, a2, b2, c2, d2, X[ 1], 11, k8);

+	Subround(G, d2, e2, a2, b2, c2, X[ 3], 14, k8);

+	Subround(G, c2, d2, e2, a2, b2, X[11], 14, k8);

+	Subround(G, b2, c2, d2, e2, a2, X[15],  6, k8);

+	Subround(G, a2, b2, c2, d2, e2, X[ 0], 14, k8);

+	Subround(G, e2, a2, b2, c2, d2, X[ 5],  6, k8);

+	Subround(G, d2, e2, a2, b2, c2, X[12],  9, k8);

+	Subround(G, c2, d2, e2, a2, b2, X[ 2], 12, k8);

+	Subround(G, b2, c2, d2, e2, a2, X[13],  9, k8);

+	Subround(G, a2, b2, c2, d2, e2, X[ 9], 12, k8);

+	Subround(G, e2, a2, b2, c2, d2, X[ 7],  5, k8);

+	Subround(G, d2, e2, a2, b2, c2, X[10], 15, k8);

+	Subround(G, c2, d2, e2, a2, b2, X[14],  8, k8);

+

+	Subround(F, b2, c2, d2, e2, a2, X[12],  8, k9);

+	Subround(F, a2, b2, c2, d2, e2, X[15],  5, k9);

+	Subround(F, e2, a2, b2, c2, d2, X[10], 12, k9);

+	Subround(F, d2, e2, a2, b2, c2, X[ 4],  9, k9);

+	Subround(F, c2, d2, e2, a2, b2, X[ 1], 12, k9);

+	Subround(F, b2, c2, d2, e2, a2, X[ 5],  5, k9);

+	Subround(F, a2, b2, c2, d2, e2, X[ 8], 14, k9);

+	Subround(F, e2, a2, b2, c2, d2, X[ 7],  6, k9);

+	Subround(F, d2, e2, a2, b2, c2, X[ 6],  8, k9);

+	Subround(F, c2, d2, e2, a2, b2, X[ 2], 13, k9);

+	Subround(F, b2, c2, d2, e2, a2, X[13],  6, k9);

+	Subround(F, a2, b2, c2, d2, e2, X[14],  5, k9);

+	Subround(F, e2, a2, b2, c2, d2, X[ 0], 15, k9);

+	Subround(F, d2, e2, a2, b2, c2, X[ 3], 13, k9);

+	Subround(F, c2, d2, e2, a2, b2, X[ 9], 11, k9);

+	Subround(F, b2, c2, d2, e2, a2, X[11], 11, k9);

+

+	a1 -= trackA[0];

+	b1 -= trackA[1];

+	c1 -= trackA[2];

+	d1 -= trackA[3];

+	e1 -= trackA[4];

+	a2 -= trackB[0];

+	b2 -= trackB[1];

+	c2 -= trackB[2];

+	d2 -= trackB[3];

+	e2 -= trackB[4];

+

+	if (!last)

+	{

+		trackA[0] = (b1 + e1) - d2;

+		trackA[1] = c1 - e2;

+		trackA[2] = d1 - a2;

+		trackA[3] = e1 - b2;

+		trackA[4] = a1 - c2;

+		trackB[0] = d1 - e2;

+		trackB[1] = (e1 + c1) - a2;

+		trackB[2] = a1 - b2;

+		trackB[3] = b1 - c2;

+		trackB[4] = c1 - d2;

+	}

+	else

+	{

+		trackB[0] = a2 - a1;

+		trackB[1] = b2 - b1;

+		trackB[2] = c2 - c1;

+		trackB[3] = d2 - d1;

+		trackB[4] = e2 - e1;

+		trackA[0] = 0;

+		trackA[1] = 0;

+		trackA[2] = 0;

+		trackA[3] = 0;

+		trackA[4] = 0;

+	}

+}

+

+NAMESPACE_END